@hasna/skills 0.10.91 → 0.10.93

package/bin/mcp.js

@@ -38,7 +38,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.91",
+    version: "0.10.93",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -22526,6 +22526,11 @@ var init_agent_opencode = __esm(() => {
 });
 
 // src/lib/agent-adapters.ts
+function renderAgentHookCommand(command, agent, profileId, event) {
+  if (typeof profileId !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(profileId) || profileId.includes(".."))
+    throw new Error("Invalid selection profile id");
+  return `'${command.replace(/'/g, `'\\''`)}' hook user-prompt --agent ${agent} --selection-profile ${profileId} --event ${event}`;
+}
 var INTEGRATION_AGENTS;
 var init_agent_adapters = __esm(() => {
   init_agent_opencode();
@@ -30556,6 +30561,17 @@ function parseHermesConfig(text2) {
       throw new Error(`Expected Hermes ${name} object`);
   return value;
 }
+function quoted(value) {
+  if (!value || /[\0\r\n]/.test(value))
+    throw new Error("Invalid Hermes Skills command");
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+function hermesHookDefinitions(supervisor) {
+  if (!isAbsolute7(supervisor.runtime) || !isAbsolute7(supervisor.path))
+    throw new Error("Expected absolute Hermes supervisor paths");
+  const entry = (event) => ({ command: `${quoted(supervisor.runtime)} ${quoted(supervisor.path)} --event ${event}`, timeout: 15, ...event === "pre_tool_call" ? { fail_closed: true } : {} });
+  return { pre_llm_call: entry("pre_llm_call"), pre_tool_call: entry("pre_tool_call") };
+}
 function assertHermesEnvironment(home) {
   if (process.env.TERMINAL_CWD && process.env.TERMINAL_CWD !== process.cwd())
     throw new NativeBridgeIntegrityRefusal("NATIVE_SKILL_DRIFT: Hermes TERMINAL_CWD must match the checked process working directory; review the effective project before using this adapter");
@@ -36387,6 +36403,17 @@ var init_runtime_launcher = __esm(() => {
   PINNED_LAUNCHER_MAX_BYTES = 16 * 1024;
 });
 
+// src/lib/linux-access-acl.ts
+var LINUX_ACL_FREE_WHEN_UNSUPPORTED;
+var init_linux_access_acl = __esm(() => {
+  LINUX_ACL_FREE_WHEN_UNSUPPORTED = new Set([
+    0xef53n,
+    0x58465342n,
+    0x9123683en,
+    0x01021994n
+  ]);
+});
+
 // src/lib/retained-review-artifacts.ts
 import { createHash as createHash23 } from "crypto";
 import { constants as constants15, closeSync as closeSync17, fstatSync as fstatSync17, fsyncSync as fsyncSync4, lstatSync as lstatSync22, mkdirSync as mkdirSync6, openSync as openSync17, readSync as readSync11, writeSync as writeSync3 } from "fs";
@@ -36508,6 +36535,7 @@ var init_agent_integration = __esm(() => {
   init_claude_settings_witness();
   init_codex_hook_trust_files();
   init_runtime_launcher();
+  init_linux_access_acl();
   init_retained_review_artifacts();
 });
 
@@ -38666,9 +38694,94 @@ function nativeDiscoveryAliasTargets(roots, home) {
   }
   return [...targets];
 }
+function hooksAreManagedBridge(agent, hooks, managed) {
+  const table = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
+  const exactKeys3 = (value, keys2) => Object.keys(value).sort().join("\x00") === [...keys2].sort().join("\x00");
+  if (!table(hooks) || typeof managed.command !== "string" || !isAbsolute22(managed.command))
+    return false;
+  const events3 = agent === "gemini" ? ["BeforeAgent", "SessionStart", "BeforeTool"] : ["beforeSubmitPrompt", "sessionStart"];
+  for (const [event, entries] of Object.entries(hooks)) {
+    if (!events3.includes(event) || !Array.isArray(entries) || entries.length !== 1)
+      return false;
+    let expected;
+    try {
+      expected = renderAgentHookCommand(managed.command, agent, managed.profile, event);
+    } catch {
+      return false;
+    }
+    const entry = entries[0];
+    if (!table(entry))
+      return false;
+    if (agent === "cursor") {
+      if (!exactKeys3(entry, ["command", "timeout"]) || entry.timeout !== 15 || entry.command !== expected)
+        return false;
+      continue;
+    }
+    if (!exactKeys3(entry, event === "BeforeTool" ? ["hooks", "matcher"] : ["hooks"]) || event === "BeforeTool" && entry.matcher !== "activate_skill" || !Array.isArray(entry.hooks) || entry.hooks.length !== 1)
+      return false;
+    const hook = entry.hooks[0];
+    if (!table(hook) || !exactKeys3(hook, ["command", "timeout", "type"]) || hook.type !== "command" || hook.timeout !== 15000 || hook.command !== expected)
+      return false;
+  }
+  return true;
+}
+function sumiPluginLoadsOnlyBuiltins(text2) {
+  for (const match of text2.matchAll(/\b(?:import|require)\s*\(\s*(.?)/g)) {
+    const rest = text2.slice(match.index + match[0].length - match[1].length);
+    if (!/^(['"])node:[A-Za-z0-9_/.-]+\1/.test(rest))
+      return false;
+  }
+  for (const match of text2.matchAll(/\b(?:from|import)\s*(['"])([^'"]*)\1/g))
+    if (!match[2].startsWith("node:"))
+      return false;
+  return true;
+}
+function codexRootFreeControls(config2) {
+  const table = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value) && !(value instanceof Date));
+  const adapted = [];
+  const servers = config2.mcp_servers;
+  if (table(servers) && Object.keys(servers).length <= AGENT_POLICY_LIMITS.discoveryRoots && Object.entries(servers).every(([name, row]) => name !== "codex_apps" && name !== "_codex_apps" && isCodexLocalStdioMcpServer(name, row)))
+    adapted.push("mcp_servers");
+  const agents = config2.agents;
+  if (table(agents) && Object.keys(agents).length <= AGENT_POLICY_LIMITS.fields && Object.values(agents).every((value) => typeof value === "boolean" || typeof value === "number" && Number.isFinite(value)))
+    adapted.push("agents");
+  return adapted;
+}
+function codexPluginHookHandlers(value) {
+  const table = (item) => Boolean(item && typeof item === "object" && !Array.isArray(item));
+  const identifier5 = (item) => typeof item === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(item);
+  const text2 = (item) => typeof item === "string" && item.length <= AGENT_POLICY_LIMITS.pathCharacters && !item.includes("\x00");
+  if (!table(value) || !Object.keys(value).every((key2) => key2 === "hooks" || key2 === "description") || value.description !== undefined && !text2(value.description) || !table(value.hooks) || Object.keys(value.hooks).length > 32)
+    return null;
+  const result = { commands: 0, servers: new Set };
+  for (const [event, groups] of Object.entries(value.hooks)) {
+    if (!CODEX_HOOK_EVENTS.has(event) || !Array.isArray(groups) || groups.length > 32)
+      return null;
+    for (const group of groups) {
+      if (!table(group) || !Object.keys(group).every((key2) => key2 === "hooks" || key2 === "matcher") || group.matcher !== undefined && !text2(group.matcher) || !Array.isArray(group.hooks) || group.hooks.length > 32)
+        return null;
+      for (const handler of group.hooks) {
+        if (!table(handler) || handler.timeout !== undefined && !(Number.isSafeInteger(handler.timeout) && handler.timeout >= 0) || handler.statusMessage !== undefined && !text2(handler.statusMessage))
+          return null;
+        if (handler.type === "command") {
+          if (!text2(handler.command) || !handler.command || !Object.keys(handler).every((key2) => ["type", "command", "commandWindows", "command_windows", "timeout", "async", "statusMessage", "additionalContextLimit"].includes(key2)))
+            return null;
+          result.commands++;
+        } else if (handler.type === "mcp_tool") {
+          if (!identifier5(handler.server) || !identifier5(handler.tool) || handler.input !== undefined && !table(handler.input) || !Object.keys(handler).every((key2) => ["type", "server", "tool", "input", "timeout", "statusMessage"].includes(key2)))
+            return null;
+          result.servers.add(handler.server);
+        } else
+          return null;
+      }
+    }
+  }
+  return result;
+}
 function resolveDiscovery(options, exclusion) {
   const canonical9 = options.canonical ?? resolve23, home = resolve23(options.home), agent = options.agent;
   const sources = [], roots = new Set, builtinNames = [];
+  const sumiLocalPluginTexts = new Map;
   const budget3 = discoveryByteBudget();
   let remainingEntries = AGENT_POLICY_LIMITS.discoveryDirectoryEntries;
   const entries = (path) => {
@@ -38705,8 +38818,8 @@ function resolveDiscovery(options, exclusion) {
   const configPath = exclusion?.nativeHome === undefined ? agentDiscoveryConfigPath(home, agent) : join33(nativeHome, agent === "codex" ? "config.toml" : "settings.json");
   const configText = witness(configPath, agent === "hermes" ? "yaml" : agent === "codex" ? "toml" : "json", agent === "hermes" ? ["skills", "plugins", "hooks"] : agent === "claude" ? ["enabledPlugins", "extraKnownMarketplaces"] : agent === "codex" ? [...CODEX_DISCOVERY_PROJECTION_FIELDS] : agent === "gemini" ? ["skills", "extensions", "security"] : agent === "opencode" ? ["plugin", "skills"] : agent === "sumi" ? [...SUMI_DISCOVERY_PROJECTION_FIELDS] : ["version"]);
   const config2 = configText === null ? {} : agent === "hermes" ? parseHermesConfig(configText) : parseConfig(configText, configPath, agent === "codex");
-  const unresolved = (detail) => {
-    throw new Error(`Native discovery is unresolved (${agent}: ${detail}); provide a reviewed --discovery-inputs file`);
+  const unresolved = (detail, source) => {
+    throw new NativeDiscoveryUnresolved(agent, detail, source);
   };
   let opaqueClosureVerified = false;
   const verifyOpaqueClosure = (declarations) => {
@@ -38720,6 +38833,17 @@ function resolveDiscovery(options, exclusion) {
     verifyDiscovery(retained, undefined, undefined, undefined, exclusion?.narrowed, canonical9(configPath));
     opaqueClosureVerified = true;
   };
+  const reviewRemedy = (source, check2) => {
+    try {
+      check2();
+    } catch (error61) {
+      if (error61 instanceof NativeDiscoveryUnresolved) {
+        error61.reviewable = true;
+        error61.source ??= source;
+      }
+      throw error61;
+    }
+  };
   if (exclusion) {
     if (configText !== null && agent !== "codex" && agent !== "hermes")
       parseNativeJsonObject(configText);
@@ -38745,12 +38869,38 @@ function resolveDiscovery(options, exclusion) {
     const controls = agent === "claude" ? claudeDiscoveryControlKeys(configText ?? "{}") : agent === "codex" ? codexDiscoveryControlKeys(config2) : Object.keys(config2).filter((key2) => /skill|plugin|hook|marketplace|extension|instruction/i.test(key2));
     const fieldKey = (key2) => /^[A-Za-z_$][A-Za-z0-9_$.-]{0,22}$/.test(key2) && !/(?:sk|rk|pk)_(?:live|test)_|whsec_/i.test(key2) ? JSON.stringify(key2) : "[withheld field key]";
     const unsupportedFields = (names, label) => unresolved(`unknown discovery controls have no root-exclusion adapter for ${label}${names.slice(0, 8).map(fieldKey).join(", ")}${names.length > 8 ? ", additional keys withheld" : ""} in ${quotedPath(canonical9(configPath))}`);
-    const unsupportedControls = controls.filter((key2) => !supported[agent].includes(key2));
+    const adapted = agent === "codex" ? codexRootFreeControls(config2) : agent === "opencode" && Array.isArray(config2.instructions) && config2.instructions.length === 0 ? ["instructions"] : [];
+    const unsupportedControls = controls.filter((key2) => !supported[agent].includes(key2) && !adapted.includes(key2));
     if (unsupportedControls.length)
       unsupportedFields(unsupportedControls, "");
     if (config2.hooks !== undefined && !object6(config2.hooks))
       unresolved("hooks must be an object");
-    const hasHooks = controls.includes("hooks") && config2.hooks !== undefined && Object.keys(config2.hooks).length > 0;
+    const managedSupervisorOnly = () => {
+      const supervisor = exclusion.managedHook?.supervisor;
+      if (agent !== "hermes" || !supervisor || typeof supervisor.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(supervisor.sha256) || !object6(config2.hooks))
+        return false;
+      let expected;
+      try {
+        expected = hermesHookDefinitions(supervisor);
+      } catch {
+        return false;
+      }
+      for (const [event, entries2] of Object.entries(config2.hooks)) {
+        const want = expected[event];
+        if (!want || !Array.isArray(entries2) || entries2.length !== 1 || !object6(entries2[0]))
+          return false;
+        const entry = entries2[0];
+        if (Object.keys(entry).sort().join("\x00") !== Object.keys(want).sort().join("\x00") || Object.keys(want).some((key2) => entry[key2] !== want[key2]))
+          return false;
+      }
+      try {
+        return hashRawDiscoveryFile(canonical9(supervisor.path), budget3) === supervisor.sha256;
+      } catch {
+        return false;
+      }
+    };
+    const managedBridgeOnly = (agent === "gemini" || agent === "cursor") && exclusion.managedHook !== undefined && hooksAreManagedBridge(agent, config2.hooks, exclusion.managedHook) || managedSupervisorOnly();
+    const hasHooks = controls.includes("hooks") && config2.hooks !== undefined && Object.keys(config2.hooks).length > 0 && !managedBridgeOnly;
     let hasPluginConfigs = false, hasFunctionHookEnvironment = false;
     const verifyCurrentOpaqueSettings = (label) => {
       const retained = exclusion.retained;
@@ -38765,7 +38915,7 @@ function resolveDiscovery(options, exclusion) {
         unresolved(`non-enumerable ${label} require a current settings review`);
     };
     if (hasHooks)
-      verifyCurrentOpaqueSettings("hooks");
+      reviewRemedy(canonical9(configPath), () => verifyCurrentOpaqueSettings("hooks"));
     if (agent === "claude") {
       if (config2.env !== undefined) {
         if (!object6(config2.env) || Object.keys(config2.env).length > 512)
@@ -38778,7 +38928,7 @@ function resolveDiscovery(options, exclusion) {
         if (hasFunctionHookEnvironment) {
           if (!["0", "1"].includes(config2.env.CLAUDE_CODE_ENABLE_FUNCTION_HOOKS))
             unresolved("malformed Claude env.CLAUDE_CODE_ENABLE_FUNCTION_HOOKS flag");
-          verifyCurrentOpaqueSettings("function-hook environment controls");
+          reviewRemedy(canonical9(configPath), () => verifyCurrentOpaqueSettings("function-hook environment controls"));
         }
       }
       if (config2.pluginConfigs !== undefined) {
@@ -38805,7 +38955,7 @@ function resolveDiscovery(options, exclusion) {
         }
         hasPluginConfigs = Object.keys(config2.pluginConfigs).length > 0;
         if (hasPluginConfigs)
-          verifyCurrentOpaqueSettings("plugin configurations");
+          reviewRemedy(canonical9(configPath), () => verifyCurrentOpaqueSettings("plugin configurations"));
       }
       if (config2.enabledPlugins !== undefined && !object6(config2.enabledPlugins))
         unresolved("enabledPlugins must be an object");
@@ -38855,7 +39005,9 @@ function resolveDiscovery(options, exclusion) {
           unresolved("malformed Sumi plugins");
     }
     if (agent === "hermes" && config2.skills !== undefined) {
-      keys2(config2.skills, ["external_dirs"], "Hermes skills");
+      keys2(config2.skills, ["external_dirs", "creation_nudge_interval"], "Hermes skills");
+      if (config2.skills.creation_nudge_interval !== undefined && !(Number.isSafeInteger(config2.skills.creation_nudge_interval) && config2.skills.creation_nudge_interval >= 0))
+        unresolved("malformed Hermes skills creation_nudge_interval");
       if (config2.skills.external_dirs !== undefined)
         paths(typeof config2.skills.external_dirs === "string" ? [config2.skills.external_dirs] : config2.skills.external_dirs, "Hermes external directories");
     }
@@ -38875,10 +39027,21 @@ function resolveDiscovery(options, exclusion) {
           unresolved(`malformed Codex ${key2}`);
       for (const value of Object.values(config2.plugins ?? {}))
         keys2(value, ["enabled"], "Codex plugin registration");
-      for (const value of Object.values(config2.marketplaces ?? {}))
-        keys2(value, ["source_type", "source"], "Codex marketplace registration");
+      for (const value of Object.values(config2.marketplaces ?? {})) {
+        keys2(value, ["source_type", "source", "last_updated"], "Codex marketplace registration");
+        if (value.last_updated !== undefined && (typeof value.last_updated !== "string" || !CODEX_MARKETPLACE_TIMESTAMP.test(value.last_updated)))
+          unresolved("malformed Codex marketplace refresh time");
+      }
       if (config2.skills !== undefined)
-        keys2(config2.skills, ["config", "bundled"], "Codex skills");
+        keys2(config2.skills, ["config", "bundled", "native_allowed_paths"], "Codex skills");
+      if (config2.skills?.native_allowed_paths !== undefined) {
+        for (const value of paths(config2.skills.native_allowed_paths, "Codex native allowed skill paths")) {
+          if (!isAbsolute22(value))
+            unresolved("relative Codex native allowed skill path");
+          const path = canonical9(value);
+          roots.add(path.endsWith(`${sep11}SKILL.md`) ? dirname24(path) : path);
+        }
+      }
       if (config2.skills?.bundled !== undefined) {
         keys2(config2.skills.bundled, ["enabled"], "Codex bundled skills");
         if (typeof config2.skills.bundled.enabled !== "boolean")
@@ -38904,7 +39067,7 @@ function resolveDiscovery(options, exclusion) {
     if (Object.keys(config2.enabledPlugins ?? config2.plugins ?? config2.extensions ?? {}).length > 512)
       unresolved("unbounded native registrations");
     if (hasHooks || hasPluginConfigs || hasFunctionHookEnvironment)
-      verifyOpaqueClosure([]);
+      reviewRemedy(canonical9(configPath), () => verifyOpaqueClosure([]));
   }
   if (options.reviewed && (options.reviewed.version !== 1 || !Array.isArray(options.reviewed.agents) || options.reviewed.agents.some((item) => !item || typeof item !== "object") || new Set(options.reviewed.agents.map((item) => item.agent)).size !== options.reviewed.agents.length))
     throw new Error("Invalid --discovery-inputs version or agents");
@@ -38936,7 +39099,9 @@ function resolveDiscovery(options, exclusion) {
           const target = join33(path, name);
           if (!lstatSync25(target).isFile())
             unresolved("local plugin packages need a dedicated discovery adapter");
-          witness(target);
+          const text2 = witness(target);
+          if (exclusion && text2 !== null)
+            sumiLocalPluginTexts.set(canonical9(target), text2);
         }
     }
     for (const root of roots) {
@@ -39070,38 +39235,126 @@ function resolveDiscovery(options, exclusion) {
     const unique = combined.filter((source, index) => combined.findIndex((candidate) => isDeepStrictEqual6(candidate, source)) === index);
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };
   }
-  function plugin(root) {
+  const reviewedManifestAbsence = (root, manifestPath) => {
+    const retained = exclusion?.retained;
+    if (agent !== "claude" || retained?.method !== "reviewed" || ![join33(root, "skills"), root].some((path) => retained.roots.includes(path)))
+      return false;
+    const saved = retained.sources.filter((source) => source.path === canonical9(manifestPath) && source.hashMode === "path-bytes" && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined);
+    return saved.length > 0 && saved.every((source) => projected(source, undefined, budget3) === source.sha256);
+  };
+  const reviewedInstalledCopy = (root, path, identity4) => {
+    const retained = exclusion?.retained;
+    if (agent !== "codex" || retained?.method !== "reviewed")
+      return false;
+    const inside = relative7(root, canonical9(path));
+    if (!inside || inside === ".." || inside.startsWith(`..${sep11}`) || isAbsolute22(inside))
+      return false;
+    const parent = canonical9(join33(nativeHome, "plugins/cache", identity4.marketplace, identity4.name));
+    const current = hashRawDiscoveryFile(canonical9(path), budget3);
+    if (current === null)
+      return false;
+    return retained.sources.some((source) => {
+      if (source.sha256 !== current || source.format !== undefined || source.fields !== undefined || ![undefined, "bytes"].includes(source.hashMode) || source.managedPlugins !== undefined || source.reviewArtifact !== undefined || !source.path.startsWith(parent + sep11))
+        return false;
+      const [version2, ...rest] = source.path.slice(parent.length + 1).split(sep11);
+      return Boolean(version2) && version2 !== "." && version2 !== ".." && rest.join(sep11) === inside;
+    });
+  };
+  const verifyCodexPluginHookClosure = (root, identity4, marketplaceSource, servers, declarations) => {
+    const retained = exclusion.retained;
+    if (retained.codexSemanticCache || retained.codexInstallationInputs || retained.codexRetiredMaterializations)
+      return verifyOpaqueClosure(declarations);
+    const within = (base, path) => path === base || path.startsWith(base + sep11);
+    const executables = [];
+    for (const server of servers) {
+      const row = config2.mcp_servers?.[server];
+      if (server === "codex_apps" || server === "_codex_apps" || !isCodexLocalStdioMcpServer(server, row))
+        unresolved("plugin hook MCP server is not a configured local stdio server");
+      for (const value of [row.command, ...row.args ?? []])
+        for (const candidate of [value, value.slice(value.indexOf("=") + 1)]) {
+          if (!isAbsolute22(candidate) || /[\0$]/.test(candidate) || executables.length >= AGENT_POLICY_LIMITS.discoveryRoots)
+            continue;
+          const path = canonical9(candidate);
+          if (lstatSync25(path, { throwIfNoEntry: false })?.isFile())
+            executables.push(path);
+        }
+    }
+    const cacheRoot = canonical9(join33(nativeHome, "plugins/cache"));
+    const ownCache = canonical9(join33(nativeHome, "plugins/cache", identity4.marketplace, identity4.name));
+    const ownCatalog = canonical9(join33(marketplaceSource, ".agents/plugins/marketplace.json"));
+    const account = canonical9(home);
+    const marketplaceRoots = Object.values(config2.marketplaces ?? {}).filter((market) => market?.source_type === "local" && typeof market.source === "string" && isAbsolute22(market.source)).map((market) => canonical9(market.source)).filter((path) => !within(path, account));
+    const otherPlugin = (path) => !within(root, path) && !within(ownCache, path) && path !== ownCatalog && !executables.includes(path) && (within(cacheRoot, path) || marketplaceRoots.some((base) => within(base, path)));
+    const sources2 = retained.sources.filter((source) => source.path !== canonical9(configPath) && !otherPlugin(source.path));
+    if (sources2.some((source) => source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.reviewArtifact !== undefined || ![undefined, "bytes", "path-bytes", "executable-v1"].includes(source.hashMode)))
+      return verifyOpaqueClosure(declarations);
+    const declared = declarations.map((path) => relative7(root, path));
+    const declaration = (path) => declarations.includes(path) || path.startsWith(ownCache + sep11) && declared.includes(path.slice(ownCache.length + 1).split(sep11).slice(1).join(sep11));
+    if (!sources2.some((source) => !declaration(source.path) && source.sha256 !== null))
+      unresolved("opaque executable dependency closure is unavailable");
+    for (const source of sources2)
+      if (projected(source, undefined, budget3) !== source.sha256) {
+        throw new NativeDiscoveryWitnessChange("input", source.path, `Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
+      }
+    verifyDiscoveryDirectories((retained.directories ?? []).filter((directory) => !otherPlugin(directory.path)));
+  };
+  const readCodexHookDeclaration = (text2, path) => {
+    if (text2 === null)
+      return null;
+    try {
+      return codexPluginHookHandlers(parseConfig(text2, path));
+    } catch {
+      return null;
+    }
+  };
+  function plugin(root, codex) {
     root = canonical9(root);
     safe6(root);
     if (exclusion)
       roots.add(root);
     const manifestPath = join33(root, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
     const raw = witness(manifestPath, undefined, undefined, agent === "claude" ? "claude-plugin-manifest-v1" : undefined);
-    if (raw === null)
+    if (raw === null && !reviewedManifestAbsence(root, manifestPath))
       unresolved("plugin manifest missing");
-    const manifest = parseConfig(raw, manifestPath);
+    const manifest = raw === null ? {} : parseConfig(raw, manifestPath);
     if (exclusion && Object.keys(manifest).some((key2) => /skill|plugin|hook|marketplace|extension|instruction/i.test(key2) && !["skills", "hooks"].includes(key2)))
       unresolved("unknown plugin discovery controls");
     const hooks = witness(join33(root, "hooks/hooks.json"));
-    if (manifest.hooks !== undefined || hooks !== null) {
-      if (!exclusion || exclusion.retained?.method !== "reviewed")
-        unresolved("plugin hooks require a separate no-skill-injection review");
-      const required2 = [manifestPath, ...hooks !== null ? [join33(root, "hooks/hooks.json")] : []];
-      if (manifest.hooks !== undefined) {
-        if (typeof manifest.hooks !== "string")
-          unresolved("unsupported plugin hooks target");
-        const hook = resolve23(root, manifest.hooks);
-        if (!hook.startsWith(root + sep11))
-          unresolved("plugin hooks target escapes its root");
-        required2.push(hook);
-      }
-      for (const path of required2) {
-        const saved = exclusion.retained.sources.filter((source) => source.path === canonical9(path) && source.sha256 !== null && source.format === undefined && source.fields === undefined);
-        if (!saved.length || saved.some((source) => projected(source, undefined, budget3) !== source.sha256))
-          unresolved("plugin hooks require current independently reviewed sources");
-      }
-      verifyOpaqueClosure(required2.map((path) => canonical9(path)));
-    }
+    if (manifest.hooks !== undefined || hooks !== null)
+      reviewRemedy(canonical9(hooks !== null ? join33(root, "hooks/hooks.json") : manifestPath), () => {
+        if (!exclusion || exclusion.retained?.method !== "reviewed")
+          unresolved("plugin hooks require a separate no-skill-injection review");
+        const required2 = [manifestPath, ...hooks !== null ? [join33(root, "hooks/hooks.json")] : []];
+        const scoped = agent === "codex" && codex !== undefined ? [] : undefined;
+        if (manifest.hooks !== undefined) {
+          if (scoped && manifest.hooks && typeof manifest.hooks === "object" && !Array.isArray(manifest.hooks)) {
+            const inline = codexPluginHookHandlers(manifest.hooks);
+            if (!inline)
+              unresolved("unsupported inline plugin hooks");
+            scoped.push(inline);
+          } else {
+            if (typeof manifest.hooks !== "string")
+              unresolved("unsupported plugin hooks target");
+            const hook = resolve23(root, manifest.hooks);
+            if (!hook.startsWith(root + sep11))
+              unresolved("plugin hooks target escapes its root");
+            required2.push(hook);
+            if (scoped)
+              scoped.push(readCodexHookDeclaration(witness(hook), hook));
+          }
+        }
+        if (scoped && hooks !== null)
+          scoped.push(readCodexHookDeclaration(hooks, join33(root, "hooks/hooks.json")));
+        for (const path of required2) {
+          const saved = exclusion.retained.sources.filter((source) => source.path === canonical9(path) && source.sha256 !== null && source.format === undefined && source.fields === undefined);
+          if (saved.length ? saved.some((source) => projected(source, undefined, budget3) !== source.sha256) : !(scoped && reviewedInstalledCopy(root, path, codex)))
+            unresolved("plugin hooks require current independently reviewed sources", canonical9(path));
+        }
+        if (scoped && scoped.every((item) => item !== null && item.commands === 0)) {
+          verifyCodexPluginHookClosure(root, codex, codex.source, new Set(scoped.flatMap((item) => [...item.servers])), required2.map((path) => canonical9(path)));
+        } else
+          verifyOpaqueClosure(required2.map((path) => canonical9(path)));
+      });
     const commands = join33(root, "commands");
     safe6(commands);
     if (agent === "claude" && (manifest.commands !== undefined || lstatSync25(commands, { throwIfNoEntry: false })?.isDirectory() && entries(commands).length))
@@ -39156,7 +39409,7 @@ function resolveDiscovery(options, exclusion) {
       const catalog = parseConfig(catalogText, join33(market.source, ".agents/plugins/marketplace.json")), matches = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
       if (matches.length !== 1 || matches[0]?.source?.source !== "local" || typeof matches[0]?.source?.path !== "string")
         unresolved("plugin catalog source is missing or ambiguous");
-      plugin(resolve23(market.source, matches[0].source.path));
+      plugin(resolve23(market.source, matches[0].source.path), exclusion ? { marketplace, name, source: market.source } : undefined);
     }
   } else if (agent === "opencode") {
     if (witness(join33(home, ".config/opencode/opencode.jsonc")) !== null || witness(join33(home, ".config/opencode/config.json")) !== null)
@@ -39173,7 +39426,11 @@ function resolveDiscovery(options, exclusion) {
     if (lstatSync25(localPlugins, { throwIfNoEntry: false }) && entries(localPlugins).some((name) => name !== "skills-cli.js"))
       unresolved("additional local plugin hooks require review");
   } else if (agent === "sumi") {
-    if ((config2.plugin?.length ?? 0) > 0 || (config2.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical9(configPath) && source.path !== canonical9(join33(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null))
+    const pinnedLocalPlugin = (source) => {
+      const retained = exclusion?.retained, text2 = sumiLocalPluginTexts.get(source.path);
+      return retained?.method === "reviewed" && text2 !== undefined && sumiPluginLoadsOnlyBuiltins(text2) && retained.sources.some((saved) => saved.path === source.path && saved.sha256 === source.sha256 && saved.sha256 !== null && [undefined, "bytes"].includes(saved.hashMode) && saved.format === undefined && saved.fields === undefined && saved.managedPlugins === undefined && saved.reviewArtifact === undefined);
+    };
+    if ((config2.plugin?.length ?? 0) > 0 || (config2.plugins?.length ?? 0) > 0 || sources.some((source) => source.path !== canonical9(configPath) && source.path !== canonical9(join33(sumiConfigDirectory(home), "sumi.jsonc")) && source.sha256 !== null && !pinnedLocalPlugin(source)))
       unresolved("external or foreign local plugins require review");
   } else if (agent === "hermes") {
     for (const directory of [join33(home, ".hermes/plugins"), join33(home, ".hermes/hermes-agent")]) {
@@ -39207,17 +39464,18 @@ function resolveDiscovery(options, exclusion) {
     unresolved("native discovery roots exceed their bound");
   return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join33(home, ".hermes/plugins"), join33(home, ".hermes/hermes-agent")].map((path) => canonical9(path))) } : {} };
 }
-var DISCOVERY_RUNTIME_COMMANDS, quotedPath = (path) => JSON.stringify(path).replace(/[^\x20-\x7e]/g, (character) => `\\u${character.charCodeAt(0).toString(16).padStart(4, "0")}`), realpathOrNull = (path) => {
+var DISCOVERY_RUNTIME_COMMANDS, NativeDiscoveryUnresolved, quotedPath = (path) => JSON.stringify(path).replace(/[^\x20-\x7e]/g, (character) => `\\u${character.charCodeAt(0).toString(16).padStart(4, "0")}`), realpathOrNull = (path) => {
   try {
     return realpathSync8(path);
   } catch {
     return null;
   }
-}, digest2 = (text2) => createHash26("sha256").update(text2).digest("hex"), CLAUDE_CONTROL_WITNESS_MODES, CLAUDE_CONTROL_FILES, ADOPTABLE_SETTINGS_MATCHES, CLAUDE_PROJECT_DISCOVERY_KEYS;
+}, digest2 = (text2) => createHash26("sha256").update(text2).digest("hex"), CLAUDE_CONTROL_WITNESS_MODES, CLAUDE_CONTROL_FILES, ADOPTABLE_SETTINGS_MATCHES, CLAUDE_PROJECT_DISCOVERY_KEYS, CODEX_MARKETPLACE_TIMESTAMP, CODEX_HOOK_EVENTS;
 var init_agent_discovery = __esm(() => {
   init_sumi_settings_witness();
   init_agent_policy_limits();
   init_agent_hermes();
+  init_agent_adapters();
   init_agent_discovery_directories();
   init_agent_discovery_bytes();
   init_plugin_projection_store();
@@ -39243,10 +39501,24 @@ var init_agent_discovery = __esm(() => {
   init_codex_semantic_cache_witness();
   init_agent_discovery_directories();
   DISCOVERY_RUNTIME_COMMANDS = Object.freeze({ gemini: "gemini" });
+  NativeDiscoveryUnresolved = class NativeDiscoveryUnresolved extends Error {
+    agent;
+    detail;
+    source;
+    reviewable = false;
+    constructor(agent, detail, source) {
+      super(`Native discovery is unresolved (${agent}: ${detail}); provide a reviewed --discovery-inputs file`);
+      this.agent = agent;
+      this.detail = detail;
+      this.source = source;
+    }
+  };
   CLAUDE_CONTROL_WITNESS_MODES = new Set(["claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-settings-v4", "claude-settings-v5", "claude-marketplace-registry", "claude-marketplace-registry-v2", "claude-marketplace-entry-v1", "claude-plugin-registry"]);
   CLAUDE_CONTROL_FILES = new Set(["settings.json", "settings.local.json", "installed_plugins.json", "known_marketplaces.json"]);
   ADOPTABLE_SETTINGS_MATCHES = Object.freeze(["exact", "screen-reader-receipt"]);
   CLAUDE_PROJECT_DISCOVERY_KEYS = Object.freeze(["enabledPlugins", "extraKnownMarketplaces", "additionalMarketplaces", "skillOverrides"]);
+  CODEX_MARKETPLACE_TIMESTAMP = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?(?:Z|[+-]\d{2}:\d{2})$/;
+  CODEX_HOOK_EVENTS = new Set(["PreToolUse", "PermissionRequest", "PostToolUse", "PreCompact", "PostCompact", "SessionStart", "SessionEnd", "UserPromptSubmit", "SubagentStart", "SubagentStop", "Stop", "Interrupt"]);
 });
 
 // src/lib/authoring-path.ts
@@ -39279,6 +39551,11 @@ function physicalPath(path) {
   }
   return resolve24(realpathSync9(cursor), ...suffix);
 }
+function portableAuthoringDiscoveryRefusal(error61, destination) {
+  const head = `Native discovery is unresolved (${error61.agent}: ${error61.detail}).${error61.source ? ` Checked source: ${error61.source}.` : ""}`;
+  const review = `skills hook install --agent ${error61.agent} --discovery-inputs <reviewed-file> --apply`;
+  return error61.reviewable ? `${head} Portable Skills authoring stays refused: an unreviewed ${error61.agent} hook or plugin option could load skills written to ${destination}. This command takes no --discovery-inputs option; review the current ${error61.agent} configuration with ${review}, then retry.` : `${head} Portable Skills authoring stays refused: Skills cannot list every skill root this ${error61.agent} configuration registers, so it cannot rule out ${destination}. This command takes no --discovery-inputs option; correct that ${error61.agent} configuration entry, then retry. Where a reviewed discovery binding covers it, record one with ${review}.`;
+}
 function contains(root, path) {
   const boundary = root.endsWith(sep12) ? root : root + sep12;
   return path === root || path.startsWith(boundary);
@@ -39324,7 +39601,10 @@ function configuredRoots(home, explicitHome) {
       if (recorded && (!executable || executable.target !== recorded.target || onPath && onPath.target !== recorded.target) || !executable && (binding.builtinNames?.length || binding.agent === "gemini" && binding.sources.some((source) => basename15(source.path) === "package.json"))) {
         throw new Error("Native discovery runtime target is unresolved or changed");
       }
-      roots.push(...resolveAgentDiscoveryExclusionRoots({ home, agent: binding.agent, canonical: physicalPath, retained: binding, executable, narrowed }));
+      const managedCommand = current.commands?.[agent], managedProfile = current.profiles?.[agent];
+      const supervisor = current.supervisors?.[agent];
+      const managedHook = (binding.agent === "gemini" || binding.agent === "cursor") && typeof managedCommand === "string" && typeof managedProfile === "string" ? { command: managedCommand, profile: managedProfile } : binding.agent === "hermes" && typeof managedCommand === "string" && typeof managedProfile === "string" && supervisor && typeof supervisor === "object" && typeof supervisor.path === "string" && typeof supervisor.runtime === "string" && typeof supervisor.sha256 === "string" ? { command: managedCommand, profile: managedProfile, supervisor: { path: supervisor.path, runtime: supervisor.runtime, sha256: supervisor.sha256 } } : undefined;
+      roots.push(...resolveAgentDiscoveryExclusionRoots({ home, agent: binding.agent, canonical: physicalPath, retained: binding, executable, narrowed, ...managedHook ? { managedHook } : {} }));
     }
   };
   if (homePolicy)
@@ -39376,11 +39656,18 @@ function assertPortableAuthoringPath(path, options = {}) {
   if (native) {
     throw new Error(`Refusing portable Skills authoring below native discovery root '${native}': ${lexical}. Set HASNA_SKILLS_DIR to a private authoring corpus outside native roots.`);
   }
-  const roots = configuredRoots(home, options.homeDir !== undefined);
-  for (const value of selected) {
-    if (physicalPath(value.path) === physicalPath(join34(home, `.${value.agent}`)))
-      continue;
-    roots.push(...resolveAgentDiscoveryExclusionRoots({ home, agent: value.agent, nativeHome: value.path, canonical: physicalPath, executable: null }));
+  const roots = [];
+  try {
+    roots.push(...configuredRoots(home, options.homeDir !== undefined));
+    for (const value of selected) {
+      if (physicalPath(value.path) === physicalPath(join34(home, `.${value.agent}`)))
+        continue;
+      roots.push(...resolveAgentDiscoveryExclusionRoots({ home, agent: value.agent, nativeHome: value.path, canonical: physicalPath, executable: null }));
+    }
+  } catch (error61) {
+    if (error61 instanceof NativeDiscoveryUnresolved)
+      throw new Error(portableAuthoringDiscoveryRefusal(error61, lexical));
+    throw error61;
   }
   for (const root of roots) {
     if (candidates.some((candidate) => [resolve24(root), physicalPath(root)].some((nativeRoot) => contains(nativeRoot, candidate) || contains(candidate, nativeRoot)))) {

package/bin/migrate.js

@@ -25,7 +25,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.91",
+  version: "0.10.93",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -83767,7 +83767,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.91",
+  version: "0.10.93",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -76186,7 +76186,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.91",
+  version: "0.10.93",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/cli/commands/portable-skills.d.ts

@@ -1,2 +1,3 @@
 import type { Command } from "commander";
+export declare const AUTHORING_NATIVE_HOOKS_HELP = "\nNative hooks:\n  Authoring refuses while another agent's native hooks, plugin hooks or plugin\n  options are not covered by a current discovery review, because they could\n  load skills from the authoring corpus. The refusal names the agent and the\n  file it checked; review that agent's configuration with\n    skills hook install --agent <agent> --discovery-inputs <reviewed-file> --apply\n  and retry. Authoring commands themselves take no --discovery-inputs option.\n";
 export declare function registerPortableSkillCommands(parent: Command): void;