@hasna/skills 0.4.0 → 0.5.1

package/dist/sdk/outputs.d.ts

@@ -1,14 +1,3 @@
-/**
- * Outputs governance: default-private visibility, pre-persistence redaction,
- * hard size limits, finite TTLs, and immutable deletion receipts.
- *
- * The writer is the one gate every artifact passes at write time: visibility is
- * stamped from the governance default, redaction runs BEFORE the bytes are
- * stored, the per-output and per-run-total caps are checked before the row is
- * written, and expiresAt is computed from the configured TTL. The expiry sweep
- * is the retention half: artifacts whose expiresAt is in the past are deleted
- * (row + object) and every deletion lands one append-only receipt.
- */
 import type { ArtifactBody, ObjectStore } from "./storage.js";
 import type { GovernanceStore, LifecycleReceipt } from "./governance-store.js";
 import { type OutputGovernanceConfig } from "./governance.js";

package/dist/sdk/runs.d.ts

@@ -11,7 +11,7 @@
  * `FOR UPDATE SKIP LOCKED`, SQLite `BEGIN IMMEDIATE` plus a conditional claim) — no
  * business logic is duplicated here.
  */
-import { z } from "zod";
+import { z } from "zod/v3";
 import { REMOTE_SKILL_RUN_CONTRACT_VERSION, normalizeRemoteSkillRunContract, type RemoteSkillRunContract } from "../lib/remote-run-contract.js";
 import type { ApiPrincipal, CreateRunInput, ServerRunRecord, ServerRunStatus, SkillsProductStore } from "../server/types.js";
 import type { OfflineGate } from "./offline.js";

package/dist/storage.js

@@ -119,12 +119,7 @@ import { homedir } from "os";
 import { join, resolve } from "path";
 import { homedir as pathsResolverHomedir } from "os";
 import { join as pathsResolverJoin } from "path";
-var PATHS_RESOLVER_KIND_ENV = {
-  config: "HASNA_CONFIG_HOME",
-  data: "HASNA_DATA_HOME",
-  state: "HASNA_STATE_HOME",
-  cache: "HASNA_CACHE_HOME"
-};
+var PATHS_RESOLVER_DATA_ENV = "HASNA_DATA_HOME";
 var PATHS_RESOLVER_APP_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 function pathsResolverAssertApp(app) {
   if (typeof app !== "string" || app.length === 0) {
@@ -134,48 +129,19 @@ function pathsResolverAssertApp(app) {
     throw new TypeError(`paths: invalid app slug "${app}" \u2014 expected lowercase kebab-case ([a-z0-9]+(-[a-z0-9]+)*)`);
   }
 }
-function pathsResolverAssertKind(kind) {
-  if (!Object.keys(PATHS_RESOLVER_KIND_ENV).includes(kind)) {
-    throw new TypeError(`paths: invalid path kind "${kind}" \u2014 expected one of ${Object.keys(PATHS_RESOLVER_KIND_ENV).join(", ")}`);
-  }
-}
-function pathsResolverBaseDir(kind, options) {
-  pathsResolverAssertKind(kind);
+function pathsResolverDataBaseDir(options) {
   const env = options.env ?? process.env;
-  const override = env[PATHS_RESOLVER_KIND_ENV[kind]];
+  const override = env[PATHS_RESOLVER_DATA_ENV];
   if (typeof override === "string" && override.length > 0)
     return override;
   const home = options.home ?? pathsResolverHomedir();
   const platform = options.platform ?? process.platform;
-  if (platform === "darwin") {
-    switch (kind) {
-      case "config":
-      case "data":
-        return pathsResolverJoin(home, "Library", "Application Support", "Hasna");
-      case "cache":
-        return pathsResolverJoin(home, "Library", "Caches", "Hasna");
-      case "state":
-        return pathsResolverJoin(home, "Library", "Logs", "Hasna");
-    }
-  }
-  switch (kind) {
-    case "config":
-      return pathsResolverJoin(home, ".config", "hasna");
-    case "data":
-      return pathsResolverJoin(home, ".local", "share", "hasna");
-    case "state":
-      return pathsResolverJoin(home, ".local", "state", "hasna");
-    case "cache":
-      return pathsResolverJoin(home, ".cache", "hasna");
-  }
+  return platform === "darwin" ? pathsResolverJoin(home, "Library", "Application Support", "Hasna") : pathsResolverJoin(home, ".local", "share", "hasna");
 }
-function pathsResolverResolve(kind, options) {
+function dataDir(options) {
   pathsResolverAssertApp(options.app);
   const appSegment = options.internal === true ? pathsResolverJoin("internal", options.app) : options.app;
-  return pathsResolverJoin(pathsResolverBaseDir(kind, options), appSegment);
-}
-function dataDir(options) {
-  return pathsResolverResolve("data", options);
+  return pathsResolverJoin(pathsResolverDataBaseDir(options), appSegment);
 }
 var DATA_DIR_ENV = "HASNA_SKILLS_DIR";
 var HASNA_SKILLS_HOME_ENV = "HASNA_SKILLS_HOME";

package/docs/skill-standard.md

@@ -298,6 +298,7 @@ them alone by design. Adoption is the migration mode for that population:
 ```bash
 skills sync --adopt             # dry-run: hash unmarked home skills vs the corpus
 skills sync --adopt --apply     # write markers for exact matches; ledger the rest
+skills sync my-skill --adopt --for codex --source ./skills --apply
 ```
 
 Each unmarked home skill's `SKILL.md` is hashed (line endings normalized,
@@ -312,6 +313,26 @@ Each unmarked home skill's `SKILL.md` is hashed (line endings normalized,
 Every written marker is listed in a rollback record under
 `~/.hasna/skills/rollback/`. Nothing is ever deleted by adoption.
 
+### Managed home ownership
+
+Ordinary sync updates an existing directory only when its regular
+`.hasna-skills.json` sidecar contains `managedBy: "@hasna/skills"`. Missing,
+foreign or malformed markers leave the directory unmanaged. A directory with
+`SKILL.md` can still be explicitly replaced using `skills sync --force`;
+an unmanaged directory without `SKILL.md` is always preserved. Preview mode
+uses the same ownership decision and writes nothing.
+
+The library's `removeManagedAgentSkill` and `removeSkillForAgent` follow the same
+exact-owner check, including project and global agent installs. They return
+`false` and preserve a directory without valid Skills ownership; neither has a
+force override.
+
+Remote tombstones also preserve directories without exact Skills ownership.
+Registry reconciliation accepts a marker's baseline hash and version only when
+that same marker names the Skills owner. Foreign or invalid markers cannot choose
+which divergent copy wins; the existing conflict policy and explicit overrides
+still apply.
+
 ### Home drift census
 
 ```bash
@@ -324,5 +345,12 @@ Compares each existing agent home against the canonical corpus and lists
 candidates, not drift. `skills diff <name>` and `skills outdated` use the same
 home-vs-canonical comparison; the pinned-skill version comparison remains as a
 subset. `skills sync --prune [--apply]` removes only marked-and-stray dirs,
-recording each removal in the rollback store before it happens.
-
+recording each removal in the rollback store before it happens. Adoption and
+prune honor `--source` (then `$SKILLS_SOURCE`, then the installed cache), `--for`
+and optional skill names. Names are normalized and must exist in the selected
+corpus or selected agent homes; a stale prune target need not exist in the corpus.
+Invalid selections fail before any apply write. Prune requires the marker
+`managedBy` to be exactly `@hasna/skills`; another tool's marker never grants
+deletion authority. Adoption also leaves every already-marked directory alone.
+Rollback records contain identities, hashes and markers, not backups of removed
+file content.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {
@@ -32,6 +32,7 @@
   "files": [
     "dist/",
     "!dist/**/*.test.d.ts",
+    "!dist/**/*.fixture.d.ts",
     "!dist/test-preload.d.ts",
     "!dist/platform",
     "bin/",
@@ -57,8 +58,9 @@
     "migrate": "bun run ./src/server/migrate.ts",
     "typecheck": "tsc --noEmit",
     "verify:release": "bun run scripts/release-guard.ts",
+    "verify:consumer-types": "bun run scripts/consumer-types.ts",
     "prepare": "bun run build:js",
-    "prepack": "bun run build && bun run verify:release",
+    "prepack": "bun run build && bun run verify:release && bun run verify:consumer-types",
     "prepublishOnly": "bun run typecheck && bun run test"
   },
   "keywords": [
@@ -80,6 +82,7 @@
   "author": "Hasna",
   "license": "Apache-2.0",
   "devDependencies": {
+    "@hasna/contracts": "1.0.2",
     "@types/bun": "1.3.14",
     "@types/node": "25.2.3",
     "@types/react": "^18.2.0",
@@ -91,8 +94,7 @@
   "dependencies": {
     "@aws-sdk/client-ecs": "^3.1079.0",
     "@aws-sdk/client-s3": "^3.1079.0",
-    "@hasna/contracts": "1.0.1",
-    "@hasna/events": "0.1.16",
+    "@hasna/events": "0.1.18",
     "@modelcontextprotocol/sdk": "^1.26.0",
     "chalk": "^5.3.0",
     "commander": "^12.1.0",

package/dist/lib/instance-credentials-race.fixture.d.ts

@@ -1 +0,0 @@
-export {};