@hasna/skills 0.10.91 → 0.10.92

package/dist/sdk/index.js

@@ -91998,7 +91998,7 @@ var init_event_sink = __esm(() => {
   init_dist();
 });
 // package.json
-var version = "0.10.91";
+var version = "0.10.92";
 var package_default = {
   name: "@hasna/skills",
   version,
@@ -102865,6 +102865,234 @@ if (failed) process.exitCode = 2;
 `;
 }
 
+// src/lib/agent-opencode.ts
+function renderOpenCodePlugin(command, profile) {
+  return `// Managed by @hasna/skills. Regenerate with skills hook install --agent opencode.
+import { spawn } from "node:child_process";
+import { createHash } from "node:crypto";
+const command = ${JSON.stringify(command)};
+const profile = ${JSON.stringify(profile)};
+const bridgeBodySha256 = ${JSON.stringify(OPENCODE_BRIDGE_BODY_SHA256)};
+const bridgeDescriptionSha256 = ${JSON.stringify(OPENCODE_BRIDGE_DESCRIPTION_SHA256)};
+function digest(text) { return createHash("sha256").update(text).digest("hex"); }
+function canonicalSkill(skill) {
+  return skill?.id === "skills-cli" && skill.name === "skills-cli" && typeof skill.path === "string"
+    && typeof skill.content === "string" && digest(skill.content) === bridgeBodySha256
+    && typeof skill.description === "string" && digest(skill.description) === bridgeDescriptionSha256
+    && (skill.autoinvoke === undefined || skill.autoinvoke === false);
+}
+function refusal() {
+  const error = new Error("Skills verification blocked this request. Review the OpenCode Skills hook configuration, then retry.");
+  error.name = "SkillsHookRefusal";
+  error.skillsHookRefusal = { version: 1, code: "SKILLS_HOOK_REFUSED" };
+  return error;
+}
+export default {
+  id: "local.hasna-skills-cli",
+  async setup(ctx) {
+    if (!ctx?.session?.hook || !ctx?.session?.get || !ctx?.skill?.transform || !ctx?.skill?.list || !ctx?.tool?.hook) throw refusal();
+    const registrations = [], pending = new Set(), sessions = new Set(), prompts = new Map();
+    let disposed = false;
+    function context(input) {
+      if (disposed) return Promise.reject(refusal());
+      return new Promise((resolve, reject) => {
+        // Availability failures may omit optional model context. Native skill
+        // consumption and explicit policy refusals always remain fail-closed.
+        const optional = input.delivery_phase === "context";
+        const chunks = []; let bytes = 0, settled = false, child, timer;
+        const finish = () => { clearTimeout(timer); pending.delete(cancel); };
+        const deny = () => { if (settled) return; settled = true; finish(); reject(refusal()); };
+        const unavailable = code => {
+          if (settled) return;
+          if (!optional || disposed) return deny();
+          settled = true; finish();
+          resolve({ delivered: false, text: "Skills context is unavailable [SKILLS_HOOK_" + code + "]. No Skills instructions were delivered by this hook. Ordinary work may continue. Do not perform actions that depend on unavailable Skills instructions, including previously loaded instructions. Explicit skills load, context and run still require verification. Do not substitute native, unmanaged or stale payloads." });
+        };
+        const stop = code => { unavailable(code); child?.kill("SIGKILL"); };
+        const cancel = () => { deny(); child?.kill("SIGKILL"); };
+        try {
+          child = spawn(command, ["hook", "user-prompt", "--agent", "opencode", "--selection-profile", profile], { cwd: input.cwd, stdio: ["pipe", "pipe", "pipe"] });
+        } catch { unavailable("SPAWN_FAILED"); return; }
+        pending.add(cancel);
+        timer = setTimeout(() => stop("TIMEOUT"), 15000);
+        child.stdout.on("data", chunk => { if (settled) return; bytes += chunk.length; if (bytes > 1048576) stop("OUTPUT_LIMIT"); else chunks.push(chunk); });
+        child.stdout.on("error", () => stop("TRANSPORT_FAILED"));
+        child.stderr.on("data", () => {});
+        child.stderr.on("error", () => stop("TRANSPORT_FAILED"));
+        child.stdin.on("error", () => stop("TRANSPORT_FAILED"));
+        child.on("error", () => unavailable("SPAWN_FAILED"));
+        child.on("close", code => {
+          if (settled) return;
+          if (disposed) return deny();
+          if (code !== 0) return unavailable("CHILD_FAILED");
+          let result;
+          try {
+            result = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+          } catch { unavailable("INVALID_RESPONSE"); return; }
+          if (!result || typeof result !== "object" || Array.isArray(result)) return unavailable("INVALID_RESPONSE");
+          if (result.decision === "block" || result.continue === false) return deny();
+          // hookContextOutput returns exactly {} for a successful empty
+          // context. It never attests native bridge verification.
+          const output = optional && Object.keys(result).length === 0
+            ? { hookEventName: input.hook_event_name, additionalContext: "" }
+            : result.hookSpecificOutput;
+          if (!output || typeof output !== "object" || Array.isArray(output) || output.hookEventName !== input.hook_event_name || typeof output.additionalContext !== "string") return unavailable("INVALID_RESPONSE");
+          if (input.hook_event_name === "BeforeTool" && result.nativeBridgeVerified !== true) return deny();
+          settled = true; finish();
+          resolve({ delivered: true, text: output.additionalContext });
+        });
+        try { child.stdin.end(JSON.stringify(input)); } catch { stop("TRANSPORT_FAILED"); }
+      });
+    }
+    async function input(sessionID, prompt, event) {
+      if (disposed) throw refusal();
+      let session;
+      try { session = await ctx.session.get({ sessionID }); } catch { throw refusal(); }
+      if (disposed || !session || session.id !== sessionID || typeof session.location?.directory !== "string" || (session.parentID !== undefined && typeof session.parentID !== "string") || session.parentID === sessionID) throw refusal();
+      return { hook_event_name: event ?? (!sessions.has(sessionID) ? session.parentID ? "SubagentStart" : "SessionStart" : "UserPromptSubmit"), delivery_phase: event ? "native" : "context", cwd: session.location.directory, session_id: sessionID, parent_session_id: session.parentID ?? null, prompt, restore: true };
+    }
+    async function dispose() {
+      if (disposed) return;
+      disposed = true;
+      for (const cancel of pending) cancel();
+      sessions.clear();
+      prompts.clear();
+      const results = await Promise.allSettled(registrations.reverse().map(registration => Promise.resolve().then(() => registration.dispose())));
+      if (results.some(result => result.status === "rejected")) throw refusal();
+    }
+    try {
+      registrations.push(await ctx.skill.transform(editor => {
+        for (const skill of editor.list()) if (!canonicalSkill(skill)) editor.remove(skill.id);
+      }));
+      async function verifyNativeBridge(sessionID) {
+        let skills;
+        try { skills = await ctx.skill.list(); } catch { throw refusal(); }
+        if (!Array.isArray(skills)) throw refusal();
+        const matches = skills.filter(skill => skill?.id === "skills-cli");
+        if (matches.length !== 1) throw refusal();
+        const skill = matches[0];
+        if (!canonicalSkill(skill)) throw refusal();
+        const metadata = { id: skill.id, name: skill.name, path: skill.path, contentSha256: digest(skill.content), descriptionSha256: digest(skill.description) };
+        await context({ ...await input(sessionID, "", "BeforeTool"), tool_input: { id: "skills-cli" }, native_skill: metadata });
+      }
+      registrations.push(await ctx.tool.hook("execute.before", async event => {
+        if (disposed) throw refusal();
+        if (event.tool !== "skill") return;
+        if (event.input?.id !== "skills-cli") throw refusal();
+        await verifyNativeBridge(event.sessionID);
+      }));
+      registrations.push(await ctx.session.hook("prompt", async event => {
+        if (disposed || typeof event.prompt?.text !== "string" || event.prompt.text.length > 128 * 1024) throw refusal();
+        if (event.prompt.skills !== undefined && (!Array.isArray(event.prompt.skills) || event.prompt.skills.some(skill => skill?.id !== "skills-cli"))) throw refusal();
+        // Attachments materialize immediately after this hook. Check the actual
+        // current registry object and on-disk bridge before native consumption.
+        if (event.prompt.skills?.length) await verifyNativeBridge(event.sessionID);
+        if (disposed) throw refusal();
+        const queued = prompts.get(event.sessionID) ?? [];
+        if (queued.reduce((size, entry) => size + entry.text.length + 1, 0) + event.prompt.text.length > 128 * 1024) throw refusal();
+        queued.push({ text: event.prompt.text });
+        prompts.set(event.sessionID, queued);
+      }));
+      registrations.push(await ctx.session.hook("context", async event => {
+        // Only prompt-hook input has owner-prompt provenance. Keep it transient
+        // until the one delivery-bearing CLI call, including an empty prompt.
+        // Checkpoints, synthetic user-role history and resumes never match.
+        const queued = [...(prompts.get(event.sessionID) ?? [])];
+        const result = await context(await input(event.sessionID, queued.map(entry => entry.text).join("\\n")));
+        if (disposed) throw refusal();
+        if (result.text) event.system.push({ type: "text", text: result.text });
+        // Remove only the prompt events this request consumed. New admission
+        // while the CLI was running belongs to the next model context.
+        const current = prompts.get(event.sessionID);
+        if (current) {
+          const remaining = current.filter(entry => !queued.includes(entry));
+          if (remaining.length) prompts.set(event.sessionID, remaining);
+          else prompts.delete(event.sessionID);
+        }
+        // Retry SessionStart on the next context after an unavailable child,
+        // but never replay prompt text already admitted to this model turn.
+        if (result.delivered) sessions.add(event.sessionID);
+      }));
+      return dispose;
+    } catch {
+      await dispose();
+      throw refusal();
+    }
+  },
+};
+`;
+}
+
+// src/lib/agent-adapters.ts
+var INTEGRATION_AGENTS = ["claude", "codex", "gemini", "opencode", "cursor", "hermes", "sumi"];
+function renderAgentHookCommand(command, agent, profileId, event) {
+  if (typeof profileId !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(profileId) || profileId.includes(".."))
+    throw new Error("Invalid selection profile id");
+  return `'${command.replace(/'/g, `'\\''`)}' hook user-prompt --agent ${agent} --selection-profile ${profileId} --event ${event}`;
+}
+var AGENT_ADAPTERS = {
+  claude: { root: ".claude/skills", config: ".claude/settings.json", events: ["UserPromptSubmit", "SessionStart", "SubagentStart"], promptContext: true },
+  codex: { root: ".codex/skills", config: ".codex/hooks.json", events: ["UserPromptSubmit", "SessionStart", "SubagentStart"], promptContext: true },
+  gemini: { root: ".gemini/skills", config: ".gemini/settings.json", events: ["BeforeAgent", "SessionStart"], promptContext: true },
+  opencode: { root: ".config/opencode/skills", config: ".config/opencode/opencode.json", events: ["prompt", "context"], promptContext: true },
+  sumi: { root: null, config: null, events: ["prompt", "context"], promptContext: true },
+  hermes: { root: ".hermes/skills", config: ".hermes/config.yaml", events: ["pre_llm_call", "pre_tool_call"], promptContext: true, promptFailureMode: "open", toolFailureMode: "supervised-child-errors-block", requiresNativeTrust: true },
+  cursor: { root: ".cursor/skills", config: ".cursor/hooks.json", events: ["beforeSubmitPrompt", "sessionStart"], promptContext: false }
+};
+function renderLegacyOpenCodePlugin(command, profileId) {
+  return `// Managed by @hasna/skills. Regenerate with skills hook install --agent opencode.
+import { spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
+const command = ${JSON.stringify(command)};
+const profile = ${JSON.stringify(profileId)};
+function context(input) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(command, ["hook", "user-prompt", "--agent", "opencode", "--selection-profile", profile], { cwd: input.cwd, stdio: ["pipe", "pipe", "pipe"] });
+    const chunks = []; let bytes = 0, failure;
+    const timer = setTimeout(() => { failure = new Error("Skills prompt hook timed out"); child.kill("SIGKILL"); }, 15000);
+    child.stdout.on("data", chunk => { bytes += chunk.length; if (bytes > 1048576) { failure = new Error("Skills prompt hook output exceeded its limit"); child.kill("SIGKILL"); } else chunks.push(chunk); });
+    child.stderr.on("data", () => {});
+    child.stdin.on("error", () => {});
+    child.on("error", error => { clearTimeout(timer); reject(error); });
+    child.on("close", code => {
+      clearTimeout(timer);
+      if (failure || code !== 0) return reject(failure ?? new Error("Skills prompt hook failed"));
+      try {
+        const result = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+        if (!result || typeof result !== "object" || Array.isArray(result)) throw new Error("Invalid Skills hook response");
+        if (result.decision === "block" || result.continue === false) throw new Error(result.reason ?? result.stopReason ?? "Skills prompt hook refused");
+        if (Object.keys(result).length && (!result.hookSpecificOutput || result.hookSpecificOutput.hookEventName !== input.hook_event_name)) throw new Error("Invalid Skills hook response");
+        const text = result.hookSpecificOutput?.additionalContext ?? "";
+        if (typeof text !== "string") throw new Error("Invalid Skills prompt context");
+        resolve(text);
+      } catch (error) { reject(error); }
+    });
+    child.stdin.end(JSON.stringify(input));
+  });
+}
+export default async ({ directory }) => {
+  const sessions = new Set();
+  return {
+    "chat.message": async (input, output) => {
+      const parts = output.parts.filter(part => part.type === "text" && typeof part.text === "string");
+      const first = !sessions.has(input.sessionID);
+      const text = await context({ hook_event_name: first ? "SessionStart" : "UserPromptSubmit", cwd: directory, session_id: input.sessionID, prompt: parts.map(part => part.text).join("\\n") });
+      if (text && parts.length) parts[0].text += "\\n\\n" + text;
+      else if (text) output.parts.push({ id: "prt_" + randomUUID().replaceAll("-", ""), sessionID: input.sessionID, messageID: output.message.id, type: "text", text, synthetic: true });
+      if (sessions.size >= 1000) sessions.clear();
+      sessions.add(input.sessionID);
+    },
+    "tool.execute.before": async (input, output) => {
+      if (input.tool === "skill" && output.args?.name !== "skills-cli") throw new Error("Load instructions through the Skills CLI bridge");
+    },
+  };
+};
+`;
+}
+function isManagedOpenCodePlugin(text2, command, profileId) {
+  return text2 === renderOpenCodePlugin(command, profileId) || text2 === renderLegacyOpenCodePlugin(command, profileId);
+}
+
 // src/lib/plugin-projection-store.ts
 import { createHash as createHash24, randomUUID as randomUUID3 } from "crypto";
 import { constants as constants15, closeSync as closeSync17, fchmodSync, fstatSync as fstatSync17, fsyncSync as fsyncSync3, linkSync as linkSync2, lstatSync as lstatSync22, mkdirSync as mkdirSync6, openSync as openSync17, opendirSync as opendirSync3, readSync as readSync11, renameSync as renameSync4, rmdirSync as rmdirSync2, rmSync as rmSync2, unlinkSync as unlinkSync5, writeSync as writeSync2 } from "fs";
@@ -106400,32 +106628,119 @@ function nativeDiscoveryAliasTargets(roots, home) {
   }
   return [...targets];
 }
-function resolveDiscovery(options, exclusion) {
-  const canonical9 = options.canonical ?? resolve27, home = resolve27(options.home), agent = options.agent;
-  const sources = [], roots = new Set, builtinNames = [];
-  const budget3 = discoveryByteBudget();
-  let remainingEntries = AGENT_POLICY_LIMITS.discoveryDirectoryEntries;
-  const entries = (path) => {
-    if (!exclusion)
-      return readdirSync11(path);
-    const directory2 = opendirSync5(path), names = [];
+function hooksAreManagedBridge(agent, hooks, managed) {
+  const table = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
+  const exactKeys4 = (value, keys3) => Object.keys(value).sort().join("\x00") === [...keys3].sort().join("\x00");
+  if (!table(hooks) || typeof managed.command !== "string" || !isAbsolute26(managed.command))
+    return false;
+  const events3 = agent === "gemini" ? ["BeforeAgent", "SessionStart", "BeforeTool"] : ["beforeSubmitPrompt", "sessionStart"];
+  for (const [event, entries] of Object.entries(hooks)) {
+    if (!events3.includes(event) || !Array.isArray(entries) || entries.length !== 1)
+      return false;
+    let expected;
     try {
-      for (let entry;(entry = directory2.readSync()) !== null; ) {
-        if (--remainingEntries < 0)
-          throw new Error("Native discovery exclusion enumeration exceeds its bound");
-        names.push(entry.name);
-      }
-    } finally {
-      directory2.closeSync();
+      expected = renderAgentHookCommand(managed.command, agent, managed.profile, event);
+    } catch {
+      return false;
     }
-    return names;
-  };
-  const witness = (path, format, fields2, hashMode) => {
-    const source = { path: canonical9(path), sha256: null, ...format ? { format, fields: fields2 } : {}, ...hashMode ? { hashMode } : {} };
-    if (exclusion && sources.length >= AGENT_POLICY_LIMITS.discoverySources)
-      throw new Error("Native discovery exclusion sources exceed their bound");
-    if (exclusion)
-      safe6(source.path);
+    const entry = entries[0];
+    if (!table(entry))
+      return false;
+    if (agent === "cursor") {
+      if (!exactKeys4(entry, ["command", "timeout"]) || entry.timeout !== 15 || entry.command !== expected)
+        return false;
+      continue;
+    }
+    if (!exactKeys4(entry, event === "BeforeTool" ? ["hooks", "matcher"] : ["hooks"]) || event === "BeforeTool" && entry.matcher !== "activate_skill" || !Array.isArray(entry.hooks) || entry.hooks.length !== 1)
+      return false;
+    const hook = entry.hooks[0];
+    if (!table(hook) || !exactKeys4(hook, ["command", "timeout", "type"]) || hook.type !== "command" || hook.timeout !== 15000 || hook.command !== expected)
+      return false;
+  }
+  return true;
+}
+function sumiPluginLoadsOnlyBuiltins(text2) {
+  for (const match of text2.matchAll(/\b(?:import|require)\s*\(\s*(.?)/g)) {
+    const rest = text2.slice(match.index + match[0].length - match[1].length);
+    if (!/^(['"])node:[A-Za-z0-9_/.-]+\1/.test(rest))
+      return false;
+  }
+  for (const match of text2.matchAll(/\b(?:from|import)\s*(['"])([^'"]*)\1/g))
+    if (!match[2].startsWith("node:"))
+      return false;
+  return true;
+}
+var CODEX_MARKETPLACE_TIMESTAMP = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?(?:Z|[+-]\d{2}:\d{2})$/;
+function codexRootFreeControls(config) {
+  const table = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value) && !(value instanceof Date));
+  const adapted = [];
+  const servers = config.mcp_servers;
+  if (table(servers) && Object.keys(servers).length <= AGENT_POLICY_LIMITS.discoveryRoots && Object.entries(servers).every(([name, row]) => name !== "codex_apps" && name !== "_codex_apps" && isCodexLocalStdioMcpServer(name, row)))
+    adapted.push("mcp_servers");
+  const agents = config.agents;
+  if (table(agents) && Object.keys(agents).length <= AGENT_POLICY_LIMITS.fields && Object.values(agents).every((value) => typeof value === "boolean" || typeof value === "number" && Number.isFinite(value)))
+    adapted.push("agents");
+  return adapted;
+}
+var CODEX_HOOK_EVENTS = new Set(["PreToolUse", "PermissionRequest", "PostToolUse", "PreCompact", "PostCompact", "SessionStart", "SessionEnd", "UserPromptSubmit", "SubagentStart", "SubagentStop", "Stop", "Interrupt"]);
+function codexPluginHookHandlers(value) {
+  const table = (item) => Boolean(item && typeof item === "object" && !Array.isArray(item));
+  const identifier7 = (item) => typeof item === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(item);
+  const text2 = (item) => typeof item === "string" && item.length <= AGENT_POLICY_LIMITS.pathCharacters && !item.includes("\x00");
+  if (!table(value) || !Object.keys(value).every((key2) => key2 === "hooks" || key2 === "description") || value.description !== undefined && !text2(value.description) || !table(value.hooks) || Object.keys(value.hooks).length > 32)
+    return null;
+  const result = { commands: 0, servers: new Set };
+  for (const [event, groups] of Object.entries(value.hooks)) {
+    if (!CODEX_HOOK_EVENTS.has(event) || !Array.isArray(groups) || groups.length > 32)
+      return null;
+    for (const group of groups) {
+      if (!table(group) || !Object.keys(group).every((key2) => key2 === "hooks" || key2 === "matcher") || group.matcher !== undefined && !text2(group.matcher) || !Array.isArray(group.hooks) || group.hooks.length > 32)
+        return null;
+      for (const handler of group.hooks) {
+        if (!table(handler) || handler.timeout !== undefined && !(Number.isSafeInteger(handler.timeout) && handler.timeout >= 0) || handler.statusMessage !== undefined && !text2(handler.statusMessage))
+          return null;
+        if (handler.type === "command") {
+          if (!text2(handler.command) || !handler.command || !Object.keys(handler).every((key2) => ["type", "command", "commandWindows", "command_windows", "timeout", "async", "statusMessage", "additionalContextLimit"].includes(key2)))
+            return null;
+          result.commands++;
+        } else if (handler.type === "mcp_tool") {
+          if (!identifier7(handler.server) || !identifier7(handler.tool) || handler.input !== undefined && !table(handler.input) || !Object.keys(handler).every((key2) => ["type", "server", "tool", "input", "timeout", "statusMessage"].includes(key2)))
+            return null;
+          result.servers.add(handler.server);
+        } else
+          return null;
+      }
+    }
+  }
+  return result;
+}
+function resolveDiscovery(options, exclusion) {
+  const canonical9 = options.canonical ?? resolve27, home = resolve27(options.home), agent = options.agent;
+  const sources = [], roots = new Set, builtinNames = [];
+  const sumiLocalPluginTexts = new Map;
+  const budget3 = discoveryByteBudget();
+  let remainingEntries = AGENT_POLICY_LIMITS.discoveryDirectoryEntries;
+  const entries = (path) => {
+    if (!exclusion)
+      return readdirSync11(path);
+    const directory2 = opendirSync5(path), names = [];
+    try {
+      for (let entry;(entry = directory2.readSync()) !== null; ) {
+        if (--remainingEntries < 0)
+          throw new Error("Native discovery exclusion enumeration exceeds its bound");
+        names.push(entry.name);
+      }
+    } finally {
+      directory2.closeSync();
+    }
+    return names;
+  };
+  const witness = (path, format, fields2, hashMode) => {
+    const source = { path: canonical9(path), sha256: null, ...format ? { format, fields: fields2 } : {}, ...hashMode ? { hashMode } : {} };
+    if (exclusion && sources.length >= AGENT_POLICY_LIMITS.discoverySources)
+      throw new Error("Native discovery exclusion sources exceed their bound");
+    if (exclusion)
+      safe6(source.path);
     const raw = exclusion && lstatSync30(source.path, { throwIfNoEntry: false }) ? readNativeDiscoveryWitnessFile(source.path, budget3) : null;
     if (exclusion && raw !== null && (format === "json" || source.path.endsWith(".json")))
       parseNativeJsonObject(raw);
@@ -106479,12 +106794,38 @@ function resolveDiscovery(options, exclusion) {
     const controls = agent === "claude" ? claudeDiscoveryControlKeys(configText ?? "{}") : agent === "codex" ? codexDiscoveryControlKeys(config) : Object.keys(config).filter((key2) => /skill|plugin|hook|marketplace|extension|instruction/i.test(key2));
     const fieldKey = (key2) => /^[A-Za-z_$][A-Za-z0-9_$.-]{0,22}$/.test(key2) && !/(?:sk|rk|pk)_(?:live|test)_|whsec_/i.test(key2) ? JSON.stringify(key2) : "[withheld field key]";
     const unsupportedFields = (names, label) => unresolved(`unknown discovery controls have no root-exclusion adapter for ${label}${names.slice(0, 8).map(fieldKey).join(", ")}${names.length > 8 ? ", additional keys withheld" : ""} in ${quotedPath(canonical9(configPath))}`);
-    const unsupportedControls = controls.filter((key2) => !supported[agent].includes(key2));
+    const adapted = agent === "codex" ? codexRootFreeControls(config) : agent === "opencode" && Array.isArray(config.instructions) && config.instructions.length === 0 ? ["instructions"] : [];
+    const unsupportedControls = controls.filter((key2) => !supported[agent].includes(key2) && !adapted.includes(key2));
     if (unsupportedControls.length)
       unsupportedFields(unsupportedControls, "");
     if (config.hooks !== undefined && !object6(config.hooks))
       unresolved("hooks must be an object");
-    const hasHooks = controls.includes("hooks") && config.hooks !== undefined && Object.keys(config.hooks).length > 0;
+    const managedSupervisorOnly = () => {
+      const supervisor = exclusion.managedHook?.supervisor;
+      if (agent !== "hermes" || !supervisor || typeof supervisor.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(supervisor.sha256) || !object6(config.hooks))
+        return false;
+      let expected;
+      try {
+        expected = hermesHookDefinitions(supervisor);
+      } catch {
+        return false;
+      }
+      for (const [event, entries2] of Object.entries(config.hooks)) {
+        const want = expected[event];
+        if (!want || !Array.isArray(entries2) || entries2.length !== 1 || !object6(entries2[0]))
+          return false;
+        const entry = entries2[0];
+        if (Object.keys(entry).sort().join("\x00") !== Object.keys(want).sort().join("\x00") || Object.keys(want).some((key2) => entry[key2] !== want[key2]))
+          return false;
+      }
+      try {
+        return hashRawDiscoveryFile(canonical9(supervisor.path), budget3) === supervisor.sha256;
+      } catch {
+        return false;
+      }
+    };
+    const managedBridgeOnly = (agent === "gemini" || agent === "cursor") && exclusion.managedHook !== undefined && hooksAreManagedBridge(agent, config.hooks, exclusion.managedHook) || managedSupervisorOnly();
+    const hasHooks = controls.includes("hooks") && config.hooks !== undefined && Object.keys(config.hooks).length > 0 && !managedBridgeOnly;
     let hasPluginConfigs = false, hasFunctionHookEnvironment = false;
     const verifyCurrentOpaqueSettings = (label) => {
       const retained = exclusion.retained;
@@ -106589,7 +106930,9 @@ function resolveDiscovery(options, exclusion) {
           unresolved("malformed Sumi plugins");
     }
     if (agent === "hermes" && config.skills !== undefined) {
-      keys3(config.skills, ["external_dirs"], "Hermes skills");
+      keys3(config.skills, ["external_dirs", "creation_nudge_interval"], "Hermes skills");
+      if (config.skills.creation_nudge_interval !== undefined && !(Number.isSafeInteger(config.skills.creation_nudge_interval) && config.skills.creation_nudge_interval >= 0))
+        unresolved("malformed Hermes skills creation_nudge_interval");
       if (config.skills.external_dirs !== undefined)
         paths(typeof config.skills.external_dirs === "string" ? [config.skills.external_dirs] : config.skills.external_dirs, "Hermes external directories");
     }
@@ -106609,10 +106952,21 @@ function resolveDiscovery(options, exclusion) {
           unresolved(`malformed Codex ${key2}`);
       for (const value of Object.values(config.plugins ?? {}))
         keys3(value, ["enabled"], "Codex plugin registration");
-      for (const value of Object.values(config.marketplaces ?? {}))
-        keys3(value, ["source_type", "source"], "Codex marketplace registration");
+      for (const value of Object.values(config.marketplaces ?? {})) {
+        keys3(value, ["source_type", "source", "last_updated"], "Codex marketplace registration");
+        if (value.last_updated !== undefined && (typeof value.last_updated !== "string" || !CODEX_MARKETPLACE_TIMESTAMP.test(value.last_updated)))
+          unresolved("malformed Codex marketplace refresh time");
+      }
       if (config.skills !== undefined)
-        keys3(config.skills, ["config", "bundled"], "Codex skills");
+        keys3(config.skills, ["config", "bundled", "native_allowed_paths"], "Codex skills");
+      if (config.skills?.native_allowed_paths !== undefined) {
+        for (const value of paths(config.skills.native_allowed_paths, "Codex native allowed skill paths")) {
+          if (!isAbsolute26(value))
+            unresolved("relative Codex native allowed skill path");
+          const path = canonical9(value);
+          roots.add(path.endsWith(`${sep13}SKILL.md`) ? dirname26(path) : path);
+        }
+      }
       if (config.skills?.bundled !== undefined) {
         keys3(config.skills.bundled, ["enabled"], "Codex bundled skills");
         if (typeof config.skills.bundled.enabled !== "boolean")
@@ -106670,7 +107024,9 @@ function resolveDiscovery(options, exclusion) {
           const target = join34(path, name);
           if (!lstatSync30(target).isFile())
             unresolved("local plugin packages need a dedicated discovery adapter");
-          witness(target);
+          const text2 = witness(target);
+          if (exclusion && text2 !== null)
+            sumiLocalPluginTexts.set(canonical9(target), text2);
         }
     }
     for (const root2 of roots) {
@@ -106804,16 +107160,88 @@ function resolveDiscovery(options, exclusion) {
     const unique = combined.filter((source, index) => combined.findIndex((candidate2) => isDeepStrictEqual8(candidate2, source)) === index);
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };
   }
-  function plugin(root2) {
+  const reviewedManifestAbsence = (root2, manifestPath) => {
+    const retained = exclusion?.retained;
+    if (agent !== "claude" || retained?.method !== "reviewed" || ![join34(root2, "skills"), root2].some((path) => retained.roots.includes(path)))
+      return false;
+    const saved = retained.sources.filter((source) => source.path === canonical9(manifestPath) && source.hashMode === "path-bytes" && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined);
+    return saved.length > 0 && saved.every((source) => projected(source, undefined, budget3) === source.sha256);
+  };
+  const reviewedInstalledCopy = (root2, path, identity5) => {
+    const retained = exclusion?.retained;
+    if (agent !== "codex" || retained?.method !== "reviewed")
+      return false;
+    const inside = relative8(root2, canonical9(path));
+    if (!inside || inside === ".." || inside.startsWith(`..${sep13}`) || isAbsolute26(inside))
+      return false;
+    const parent = canonical9(join34(nativeHome, "plugins/cache", identity5.marketplace, identity5.name));
+    const current = hashRawDiscoveryFile(canonical9(path), budget3);
+    if (current === null)
+      return false;
+    return retained.sources.some((source) => {
+      if (source.sha256 !== current || source.format !== undefined || source.fields !== undefined || ![undefined, "bytes"].includes(source.hashMode) || source.managedPlugins !== undefined || source.reviewArtifact !== undefined || !source.path.startsWith(parent + sep13))
+        return false;
+      const [version2, ...rest] = source.path.slice(parent.length + 1).split(sep13);
+      return Boolean(version2) && version2 !== "." && version2 !== ".." && rest.join(sep13) === inside;
+    });
+  };
+  const verifyCodexPluginHookClosure = (root2, identity5, marketplaceSource, servers, declarations) => {
+    const retained = exclusion.retained;
+    if (retained.codexSemanticCache || retained.codexInstallationInputs || retained.codexRetiredMaterializations)
+      return verifyOpaqueClosure(declarations);
+    const within2 = (base, path) => path === base || path.startsWith(base + sep13);
+    const executables = [];
+    for (const server of servers) {
+      const row = config.mcp_servers?.[server];
+      if (server === "codex_apps" || server === "_codex_apps" || !isCodexLocalStdioMcpServer(server, row))
+        unresolved("plugin hook MCP server is not a configured local stdio server");
+      for (const value of [row.command, ...row.args ?? []])
+        for (const candidate2 of [value, value.slice(value.indexOf("=") + 1)]) {
+          if (!isAbsolute26(candidate2) || /[\0$]/.test(candidate2) || executables.length >= AGENT_POLICY_LIMITS.discoveryRoots)
+            continue;
+          const path = canonical9(candidate2);
+          if (lstatSync30(path, { throwIfNoEntry: false })?.isFile())
+            executables.push(path);
+        }
+    }
+    const cacheRoot = canonical9(join34(nativeHome, "plugins/cache"));
+    const ownCache = canonical9(join34(nativeHome, "plugins/cache", identity5.marketplace, identity5.name));
+    const ownCatalog = canonical9(join34(marketplaceSource, ".agents/plugins/marketplace.json"));
+    const account = canonical9(home);
+    const marketplaceRoots = Object.values(config.marketplaces ?? {}).filter((market) => market?.source_type === "local" && typeof market.source === "string" && isAbsolute26(market.source)).map((market) => canonical9(market.source)).filter((path) => !within2(path, account));
+    const otherPlugin = (path) => !within2(root2, path) && !within2(ownCache, path) && path !== ownCatalog && !executables.includes(path) && (within2(cacheRoot, path) || marketplaceRoots.some((base) => within2(base, path)));
+    const sources2 = retained.sources.filter((source) => source.path !== canonical9(configPath) && !otherPlugin(source.path));
+    if (sources2.some((source) => source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.reviewArtifact !== undefined || ![undefined, "bytes", "path-bytes", "executable-v1"].includes(source.hashMode)))
+      return verifyOpaqueClosure(declarations);
+    const declared = declarations.map((path) => relative8(root2, path));
+    const declaration = (path) => declarations.includes(path) || path.startsWith(ownCache + sep13) && declared.includes(path.slice(ownCache.length + 1).split(sep13).slice(1).join(sep13));
+    if (!sources2.some((source) => !declaration(source.path) && source.sha256 !== null))
+      unresolved("opaque executable dependency closure is unavailable");
+    for (const source of sources2)
+      if (projected(source, undefined, budget3) !== source.sha256) {
+        throw new NativeDiscoveryWitnessChange("input", source.path, `Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
+      }
+    verifyDiscoveryDirectories((retained.directories ?? []).filter((directory2) => !otherPlugin(directory2.path)));
+  };
+  const readCodexHookDeclaration = (text2, path) => {
+    if (text2 === null)
+      return null;
+    try {
+      return codexPluginHookHandlers(parseConfig(text2, path));
+    } catch {
+      return null;
+    }
+  };
+  function plugin(root2, codex) {
     root2 = canonical9(root2);
     safe6(root2);
     if (exclusion)
       roots.add(root2);
     const manifestPath = join34(root2, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
     const raw = witness(manifestPath, undefined, undefined, agent === "claude" ? "claude-plugin-manifest-v1" : undefined);
-    if (raw === null)
+    if (raw === null && !reviewedManifestAbsence(root2, manifestPath))
       unresolved("plugin manifest missing");
-    const manifest = parseConfig(raw, manifestPath);
+    const manifest = raw === null ? {} : parseConfig(raw, manifestPath);
     if (exclusion && Object.keys(manifest).some((key2) => /skill|plugin|hook|marketplace|extension|instruction/i.test(key2) && !["skills", "hooks"].includes(key2)))
       unresolved("unknown plugin discovery controls");
     const hooks = witness(join34(root2, "hooks/hooks.json"));
@@ -106821,20 +107249,35 @@ function resolveDiscovery(options, exclusion) {
       if (!exclusion || exclusion.retained?.method !== "reviewed")
         unresolved("plugin hooks require a separate no-skill-injection review");
       const required = [manifestPath, ...hooks !== null ? [join34(root2, "hooks/hooks.json")] : []];
+      const scoped2 = agent === "codex" && codex !== undefined ? [] : undefined;
       if (manifest.hooks !== undefined) {
-        if (typeof manifest.hooks !== "string")
-          unresolved("unsupported plugin hooks target");
-        const hook = resolve27(root2, manifest.hooks);
-        if (!hook.startsWith(root2 + sep13))
-          unresolved("plugin hooks target escapes its root");
-        required.push(hook);
-      }
+        if (scoped2 && manifest.hooks && typeof manifest.hooks === "object" && !Array.isArray(manifest.hooks)) {
+          const inline = codexPluginHookHandlers(manifest.hooks);
+          if (!inline)
+            unresolved("unsupported inline plugin hooks");
+          scoped2.push(inline);
+        } else {
+          if (typeof manifest.hooks !== "string")
+            unresolved("unsupported plugin hooks target");
+          const hook = resolve27(root2, manifest.hooks);
+          if (!hook.startsWith(root2 + sep13))
+            unresolved("plugin hooks target escapes its root");
+          required.push(hook);
+          if (scoped2)
+            scoped2.push(readCodexHookDeclaration(witness(hook), hook));
+        }
+      }
+      if (scoped2 && hooks !== null)
+        scoped2.push(readCodexHookDeclaration(hooks, join34(root2, "hooks/hooks.json")));
       for (const path of required) {
         const saved = exclusion.retained.sources.filter((source) => source.path === canonical9(path) && source.sha256 !== null && source.format === undefined && source.fields === undefined);
-        if (!saved.length || saved.some((source) => projected(source, undefined, budget3) !== source.sha256))
+        if (saved.length ? saved.some((source) => projected(source, undefined, budget3) !== source.sha256) : !(scoped2 && reviewedInstalledCopy(root2, path, codex)))
           unresolved("plugin hooks require current independently reviewed sources");
       }
-      verifyOpaqueClosure(required.map((path) => canonical9(path)));
+      if (scoped2 && scoped2.every((item) => item !== null && item.commands === 0)) {
+        verifyCodexPluginHookClosure(root2, codex, codex.source, new Set(scoped2.flatMap((item) => [...item.servers])), required.map((path) => canonical9(path)));
+      } else
+        verifyOpaqueClosure(required.map((path) => canonical9(path)));
     }
     const commands = join34(root2, "commands");
     safe6(commands);
@@ -106890,7 +107333,7 @@ function resolveDiscovery(options, exclusion) {
       const catalog = parseConfig(catalogText, join34(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
       if (matches.length !== 1 || matches[0]?.source?.source !== "local" || typeof matches[0]?.source?.path !== "string")
         unresolved("plugin catalog source is missing or ambiguous");
-      plugin(resolve27(market.source, matches[0].source.path));
+      plugin(resolve27(market.source, matches[0].source.path), exclusion ? { marketplace, name, source: market.source } : undefined);
     }
   } else if (agent === "opencode") {
     if (witness(join34(home, ".config/opencode/opencode.jsonc")) !== null || witness(join34(home, ".config/opencode/config.json")) !== null)
@@ -106907,7 +107350,11 @@ function resolveDiscovery(options, exclusion) {
     if (lstatSync30(localPlugins, { throwIfNoEntry: false }) && entries(localPlugins).some((name) => name !== "skills-cli.js"))
       unresolved("additional local plugin hooks require review");
   } else if (agent === "sumi") {
-    if ((config.plugin?.length ?? 0) > 0 || (config.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical9(configPath) && source.path !== canonical9(join34(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
+    const pinnedLocalPlugin = (source) => {
+      const retained = exclusion?.retained, text2 = sumiLocalPluginTexts.get(source.path);
+      return retained?.method === "reviewed" && text2 !== undefined && sumiPluginLoadsOnlyBuiltins(text2) && retained.sources.some((saved) => saved.path === source.path && saved.sha256 === source.sha256 && saved.sha256 !== null && [undefined, "bytes"].includes(saved.hashMode) && saved.format === undefined && saved.fields === undefined && saved.managedPlugins === undefined && saved.reviewArtifact === undefined);
+    };
+    if ((config.plugin?.length ?? 0) > 0 || (config.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical9(configPath) && source.path !== canonical9(join34(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null && !pinnedLocalPlugin(source)))
       unresolved("external or foreign local plugins require review");
   } else if (agent === "hermes") {
     for (const directory2 of [join34(home, ".hermes/plugins"), join34(home, ".hermes/hermes-agent")]) {
@@ -106942,234 +107389,6 @@ function resolveDiscovery(options, exclusion) {
   return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join34(home, ".hermes/plugins"), join34(home, ".hermes/hermes-agent")].map((path) => canonical9(path))) } : {} };
 }
 
-// src/lib/agent-opencode.ts
-function renderOpenCodePlugin(command, profile) {
-  return `// Managed by @hasna/skills. Regenerate with skills hook install --agent opencode.
-import { spawn } from "node:child_process";
-import { createHash } from "node:crypto";
-const command = ${JSON.stringify(command)};
-const profile = ${JSON.stringify(profile)};
-const bridgeBodySha256 = ${JSON.stringify(OPENCODE_BRIDGE_BODY_SHA256)};
-const bridgeDescriptionSha256 = ${JSON.stringify(OPENCODE_BRIDGE_DESCRIPTION_SHA256)};
-function digest(text) { return createHash("sha256").update(text).digest("hex"); }
-function canonicalSkill(skill) {
-  return skill?.id === "skills-cli" && skill.name === "skills-cli" && typeof skill.path === "string"
-    && typeof skill.content === "string" && digest(skill.content) === bridgeBodySha256
-    && typeof skill.description === "string" && digest(skill.description) === bridgeDescriptionSha256
-    && (skill.autoinvoke === undefined || skill.autoinvoke === false);
-}
-function refusal() {
-  const error = new Error("Skills verification blocked this request. Review the OpenCode Skills hook configuration, then retry.");
-  error.name = "SkillsHookRefusal";
-  error.skillsHookRefusal = { version: 1, code: "SKILLS_HOOK_REFUSED" };
-  return error;
-}
-export default {
-  id: "local.hasna-skills-cli",
-  async setup(ctx) {
-    if (!ctx?.session?.hook || !ctx?.session?.get || !ctx?.skill?.transform || !ctx?.skill?.list || !ctx?.tool?.hook) throw refusal();
-    const registrations = [], pending = new Set(), sessions = new Set(), prompts = new Map();
-    let disposed = false;
-    function context(input) {
-      if (disposed) return Promise.reject(refusal());
-      return new Promise((resolve, reject) => {
-        // Availability failures may omit optional model context. Native skill
-        // consumption and explicit policy refusals always remain fail-closed.
-        const optional = input.delivery_phase === "context";
-        const chunks = []; let bytes = 0, settled = false, child, timer;
-        const finish = () => { clearTimeout(timer); pending.delete(cancel); };
-        const deny = () => { if (settled) return; settled = true; finish(); reject(refusal()); };
-        const unavailable = code => {
-          if (settled) return;
-          if (!optional || disposed) return deny();
-          settled = true; finish();
-          resolve({ delivered: false, text: "Skills context is unavailable [SKILLS_HOOK_" + code + "]. No Skills instructions were delivered by this hook. Ordinary work may continue. Do not perform actions that depend on unavailable Skills instructions, including previously loaded instructions. Explicit skills load, context and run still require verification. Do not substitute native, unmanaged or stale payloads." });
-        };
-        const stop = code => { unavailable(code); child?.kill("SIGKILL"); };
-        const cancel = () => { deny(); child?.kill("SIGKILL"); };
-        try {
-          child = spawn(command, ["hook", "user-prompt", "--agent", "opencode", "--selection-profile", profile], { cwd: input.cwd, stdio: ["pipe", "pipe", "pipe"] });
-        } catch { unavailable("SPAWN_FAILED"); return; }
-        pending.add(cancel);
-        timer = setTimeout(() => stop("TIMEOUT"), 15000);
-        child.stdout.on("data", chunk => { if (settled) return; bytes += chunk.length; if (bytes > 1048576) stop("OUTPUT_LIMIT"); else chunks.push(chunk); });
-        child.stdout.on("error", () => stop("TRANSPORT_FAILED"));
-        child.stderr.on("data", () => {});
-        child.stderr.on("error", () => stop("TRANSPORT_FAILED"));
-        child.stdin.on("error", () => stop("TRANSPORT_FAILED"));
-        child.on("error", () => unavailable("SPAWN_FAILED"));
-        child.on("close", code => {
-          if (settled) return;
-          if (disposed) return deny();
-          if (code !== 0) return unavailable("CHILD_FAILED");
-          let result;
-          try {
-            result = JSON.parse(Buffer.concat(chunks).toString("utf8"));
-          } catch { unavailable("INVALID_RESPONSE"); return; }
-          if (!result || typeof result !== "object" || Array.isArray(result)) return unavailable("INVALID_RESPONSE");
-          if (result.decision === "block" || result.continue === false) return deny();
-          // hookContextOutput returns exactly {} for a successful empty
-          // context. It never attests native bridge verification.
-          const output = optional && Object.keys(result).length === 0
-            ? { hookEventName: input.hook_event_name, additionalContext: "" }
-            : result.hookSpecificOutput;
-          if (!output || typeof output !== "object" || Array.isArray(output) || output.hookEventName !== input.hook_event_name || typeof output.additionalContext !== "string") return unavailable("INVALID_RESPONSE");
-          if (input.hook_event_name === "BeforeTool" && result.nativeBridgeVerified !== true) return deny();
-          settled = true; finish();
-          resolve({ delivered: true, text: output.additionalContext });
-        });
-        try { child.stdin.end(JSON.stringify(input)); } catch { stop("TRANSPORT_FAILED"); }
-      });
-    }
-    async function input(sessionID, prompt, event) {
-      if (disposed) throw refusal();
-      let session;
-      try { session = await ctx.session.get({ sessionID }); } catch { throw refusal(); }
-      if (disposed || !session || session.id !== sessionID || typeof session.location?.directory !== "string" || (session.parentID !== undefined && typeof session.parentID !== "string") || session.parentID === sessionID) throw refusal();
-      return { hook_event_name: event ?? (!sessions.has(sessionID) ? session.parentID ? "SubagentStart" : "SessionStart" : "UserPromptSubmit"), delivery_phase: event ? "native" : "context", cwd: session.location.directory, session_id: sessionID, parent_session_id: session.parentID ?? null, prompt, restore: true };
-    }
-    async function dispose() {
-      if (disposed) return;
-      disposed = true;
-      for (const cancel of pending) cancel();
-      sessions.clear();
-      prompts.clear();
-      const results = await Promise.allSettled(registrations.reverse().map(registration => Promise.resolve().then(() => registration.dispose())));
-      if (results.some(result => result.status === "rejected")) throw refusal();
-    }
-    try {
-      registrations.push(await ctx.skill.transform(editor => {
-        for (const skill of editor.list()) if (!canonicalSkill(skill)) editor.remove(skill.id);
-      }));
-      async function verifyNativeBridge(sessionID) {
-        let skills;
-        try { skills = await ctx.skill.list(); } catch { throw refusal(); }
-        if (!Array.isArray(skills)) throw refusal();
-        const matches = skills.filter(skill => skill?.id === "skills-cli");
-        if (matches.length !== 1) throw refusal();
-        const skill = matches[0];
-        if (!canonicalSkill(skill)) throw refusal();
-        const metadata = { id: skill.id, name: skill.name, path: skill.path, contentSha256: digest(skill.content), descriptionSha256: digest(skill.description) };
-        await context({ ...await input(sessionID, "", "BeforeTool"), tool_input: { id: "skills-cli" }, native_skill: metadata });
-      }
-      registrations.push(await ctx.tool.hook("execute.before", async event => {
-        if (disposed) throw refusal();
-        if (event.tool !== "skill") return;
-        if (event.input?.id !== "skills-cli") throw refusal();
-        await verifyNativeBridge(event.sessionID);
-      }));
-      registrations.push(await ctx.session.hook("prompt", async event => {
-        if (disposed || typeof event.prompt?.text !== "string" || event.prompt.text.length > 128 * 1024) throw refusal();
-        if (event.prompt.skills !== undefined && (!Array.isArray(event.prompt.skills) || event.prompt.skills.some(skill => skill?.id !== "skills-cli"))) throw refusal();
-        // Attachments materialize immediately after this hook. Check the actual
-        // current registry object and on-disk bridge before native consumption.
-        if (event.prompt.skills?.length) await verifyNativeBridge(event.sessionID);
-        if (disposed) throw refusal();
-        const queued = prompts.get(event.sessionID) ?? [];
-        if (queued.reduce((size, entry) => size + entry.text.length + 1, 0) + event.prompt.text.length > 128 * 1024) throw refusal();
-        queued.push({ text: event.prompt.text });
-        prompts.set(event.sessionID, queued);
-      }));
-      registrations.push(await ctx.session.hook("context", async event => {
-        // Only prompt-hook input has owner-prompt provenance. Keep it transient
-        // until the one delivery-bearing CLI call, including an empty prompt.
-        // Checkpoints, synthetic user-role history and resumes never match.
-        const queued = [...(prompts.get(event.sessionID) ?? [])];
-        const result = await context(await input(event.sessionID, queued.map(entry => entry.text).join("\\n")));
-        if (disposed) throw refusal();
-        if (result.text) event.system.push({ type: "text", text: result.text });
-        // Remove only the prompt events this request consumed. New admission
-        // while the CLI was running belongs to the next model context.
-        const current = prompts.get(event.sessionID);
-        if (current) {
-          const remaining = current.filter(entry => !queued.includes(entry));
-          if (remaining.length) prompts.set(event.sessionID, remaining);
-          else prompts.delete(event.sessionID);
-        }
-        // Retry SessionStart on the next context after an unavailable child,
-        // but never replay prompt text already admitted to this model turn.
-        if (result.delivered) sessions.add(event.sessionID);
-      }));
-      return dispose;
-    } catch {
-      await dispose();
-      throw refusal();
-    }
-  },
-};
-`;
-}
-
-// src/lib/agent-adapters.ts
-var INTEGRATION_AGENTS = ["claude", "codex", "gemini", "opencode", "cursor", "hermes", "sumi"];
-function renderAgentHookCommand(command, agent, profileId, event) {
-  if (typeof profileId !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(profileId) || profileId.includes(".."))
-    throw new Error("Invalid selection profile id");
-  return `'${command.replace(/'/g, `'\\''`)}' hook user-prompt --agent ${agent} --selection-profile ${profileId} --event ${event}`;
-}
-var AGENT_ADAPTERS = {
-  claude: { root: ".claude/skills", config: ".claude/settings.json", events: ["UserPromptSubmit", "SessionStart", "SubagentStart"], promptContext: true },
-  codex: { root: ".codex/skills", config: ".codex/hooks.json", events: ["UserPromptSubmit", "SessionStart", "SubagentStart"], promptContext: true },
-  gemini: { root: ".gemini/skills", config: ".gemini/settings.json", events: ["BeforeAgent", "SessionStart"], promptContext: true },
-  opencode: { root: ".config/opencode/skills", config: ".config/opencode/opencode.json", events: ["prompt", "context"], promptContext: true },
-  sumi: { root: null, config: null, events: ["prompt", "context"], promptContext: true },
-  hermes: { root: ".hermes/skills", config: ".hermes/config.yaml", events: ["pre_llm_call", "pre_tool_call"], promptContext: true, promptFailureMode: "open", toolFailureMode: "supervised-child-errors-block", requiresNativeTrust: true },
-  cursor: { root: ".cursor/skills", config: ".cursor/hooks.json", events: ["beforeSubmitPrompt", "sessionStart"], promptContext: false }
-};
-function renderLegacyOpenCodePlugin(command, profileId) {
-  return `// Managed by @hasna/skills. Regenerate with skills hook install --agent opencode.
-import { spawn } from "node:child_process";
-import { randomUUID } from "node:crypto";
-const command = ${JSON.stringify(command)};
-const profile = ${JSON.stringify(profileId)};
-function context(input) {
-  return new Promise((resolve, reject) => {
-    const child = spawn(command, ["hook", "user-prompt", "--agent", "opencode", "--selection-profile", profile], { cwd: input.cwd, stdio: ["pipe", "pipe", "pipe"] });
-    const chunks = []; let bytes = 0, failure;
-    const timer = setTimeout(() => { failure = new Error("Skills prompt hook timed out"); child.kill("SIGKILL"); }, 15000);
-    child.stdout.on("data", chunk => { bytes += chunk.length; if (bytes > 1048576) { failure = new Error("Skills prompt hook output exceeded its limit"); child.kill("SIGKILL"); } else chunks.push(chunk); });
-    child.stderr.on("data", () => {});
-    child.stdin.on("error", () => {});
-    child.on("error", error => { clearTimeout(timer); reject(error); });
-    child.on("close", code => {
-      clearTimeout(timer);
-      if (failure || code !== 0) return reject(failure ?? new Error("Skills prompt hook failed"));
-      try {
-        const result = JSON.parse(Buffer.concat(chunks).toString("utf8"));
-        if (!result || typeof result !== "object" || Array.isArray(result)) throw new Error("Invalid Skills hook response");
-        if (result.decision === "block" || result.continue === false) throw new Error(result.reason ?? result.stopReason ?? "Skills prompt hook refused");
-        if (Object.keys(result).length && (!result.hookSpecificOutput || result.hookSpecificOutput.hookEventName !== input.hook_event_name)) throw new Error("Invalid Skills hook response");
-        const text = result.hookSpecificOutput?.additionalContext ?? "";
-        if (typeof text !== "string") throw new Error("Invalid Skills prompt context");
-        resolve(text);
-      } catch (error) { reject(error); }
-    });
-    child.stdin.end(JSON.stringify(input));
-  });
-}
-export default async ({ directory }) => {
-  const sessions = new Set();
-  return {
-    "chat.message": async (input, output) => {
-      const parts = output.parts.filter(part => part.type === "text" && typeof part.text === "string");
-      const first = !sessions.has(input.sessionID);
-      const text = await context({ hook_event_name: first ? "SessionStart" : "UserPromptSubmit", cwd: directory, session_id: input.sessionID, prompt: parts.map(part => part.text).join("\\n") });
-      if (text && parts.length) parts[0].text += "\\n\\n" + text;
-      else if (text) output.parts.push({ id: "prt_" + randomUUID().replaceAll("-", ""), sessionID: input.sessionID, messageID: output.message.id, type: "text", text, synthetic: true });
-      if (sessions.size >= 1000) sessions.clear();
-      sessions.add(input.sessionID);
-    },
-    "tool.execute.before": async (input, output) => {
-      if (input.tool === "skill" && output.args?.name !== "skills-cli") throw new Error("Load instructions through the Skills CLI bridge");
-    },
-  };
-};
-`;
-}
-function isManagedOpenCodePlugin(text2, command, profileId) {
-  return text2 === renderOpenCodePlugin(command, profileId) || text2 === renderLegacyOpenCodePlugin(command, profileId);
-}
-
 // src/lib/agent-codex.ts
 import { isDeepStrictEqual as isDeepStrictEqual9 } from "util";
 var CODEX_SKILL_CONFIG_SECTIONS = /^\[\[skills\.config\]\][^\n]*(?:\n(?!\s*\[)[^\n]*)*/gm;
@@ -111594,7 +111813,10 @@ function configuredRoots(home, explicitHome) {
       if (recorded && (!executable2 || executable2.target !== recorded.target || onPath && onPath.target !== recorded.target) || !executable2 && (binding.builtinNames?.length || binding.agent === "gemini" && binding.sources.some((source) => basename17(source.path) === "package.json"))) {
         throw new Error("Native discovery runtime target is unresolved or changed");
       }
-      roots.push(...resolveAgentDiscoveryExclusionRoots({ home, agent: binding.agent, canonical: physicalPath, retained: binding, executable: executable2, narrowed }));
+      const managedCommand = current.commands?.[agent], managedProfile = current.profiles?.[agent];
+      const supervisor = current.supervisors?.[agent];
+      const managedHook = (binding.agent === "gemini" || binding.agent === "cursor") && typeof managedCommand === "string" && typeof managedProfile === "string" ? { command: managedCommand, profile: managedProfile } : binding.agent === "hermes" && typeof managedCommand === "string" && typeof managedProfile === "string" && supervisor && typeof supervisor === "object" && typeof supervisor.path === "string" && typeof supervisor.runtime === "string" && typeof supervisor.sha256 === "string" ? { command: managedCommand, profile: managedProfile, supervisor: { path: supervisor.path, runtime: supervisor.runtime, sha256: supervisor.sha256 } } : undefined;
+      roots.push(...resolveAgentDiscoveryExclusionRoots({ home, agent: binding.agent, canonical: physicalPath, retained: binding, executable: executable2, narrowed, ...managedHook ? { managedHook } : {} }));
     }
   };
   if (homePolicy)