@hasna/skills 0.8.11 → 0.9.1

package/dist/lib/agent-discovery.d.ts

@@ -5,7 +5,7 @@ export { captureDiscoveryDirectories, type DiscoveryDirectory } from "./agent-di
 export interface DiscoverySource {
     path: string;
     sha256: string | null;
-    hashMode?: "bytes" | "path-bytes" | "claude-plugin-registry" | "claude-marketplace-registry";
+    hashMode?: "bytes" | "path-bytes" | "claude-plugin-registry" | "claude-marketplace-registry" | "claude-settings-v1";
     managedPlugins?: ManagedPluginRegistrationWitness[];
     format?: "json" | "toml" | "yaml";
     fields?: string[];

package/dist/lib/claude-settings-witness.d.ts

@@ -0,0 +1,19 @@
+export declare const CLAUDE_SETTINGS_WITNESS_LIMITS: Readonly<{
+    bytes: number;
+    rows: 1024;
+    depth: 32;
+    nodes: 65536;
+    stringCharacters: 16384;
+    pathCharacters: 4096;
+}>;
+export interface ClaudeSettingsWitnessBudget {
+    remaining: number;
+}
+/** Hash only reviewed installer-rendered settings after the disk preimage has been verified. */
+export declare function hashClaudeSettingsReplacement(text: string, budget: ClaudeSettingsWitnessBudget): string;
+/** Explicit capture never converts a stored legacy raw witness or changes settings. */
+export declare function captureClaudeSettings(path: string, budget?: ClaudeSettingsWitnessBudget): {
+    path: string;
+    hashMode: "claude-settings-v1";
+    sha256: string;
+};

package/dist/lib/cloud-executions.d.ts

@@ -1,3 +1,18 @@
+import type { PureExecutionContract } from "../sdk/execution/types.js";
+export interface CloudEligibility {
+    contractVersion: 1;
+    eligible: boolean;
+    skill: string;
+    version: string;
+    bundleDigest: string;
+    reason?: string;
+    runtimeImageDigest?: string;
+    executionContract?: PureExecutionContract | {
+        id: "pdf.v1";
+    };
+    secrets?: "none";
+    egress?: "deny";
+}
 export interface CloudExecution {
     contractVersion: 1;
     id: string;
@@ -7,6 +22,9 @@ export interface CloudExecution {
     bundleDigest: string;
     inputDigest: string;
     runtimeImageDigest: string;
+    executionContract?: PureExecutionContract | {
+        id: "pdf.v1";
+    };
     status: "admitted" | "leased" | "running" | "succeeded" | "failed" | "cancelled";
     exitCode?: number;
     artifacts: {
@@ -22,6 +40,8 @@ export declare class CloudExecutionClient {
     constructor(apiOrigin: string, apiKey: string);
     static configured(): Promise<CloudExecutionClient>;
     private request;
+    /** Metadata only: never creates, starts or reconciles a task. */
+    eligibility(slug: string, version: string, bundleDigest?: string): Promise<CloudEligibility>;
     submit(slug: string, version: string, input: unknown, key: string, selection?: {
         bundleDigest: string;
         workspaceId?: string;

package/dist/lib/registry-types.d.ts

@@ -12,6 +12,9 @@ export interface SkillMeta {
     tags: string[];
     dependencies?: string[];
     version?: string;
+    /** Server registry revision and lifecycle, when supplied by a remote read. */
+    revisionId?: string | null;
+    lifecycle?: "active" | "archived";
     /**
      * Artifact class of the skill. "executable" skills carry a runnable
      * package.json/bin/src; "instruction" skills are SKILL.md-primary prose for

package/dist/lib/remote-client.d.ts

@@ -30,6 +30,10 @@ export declare class RemoteRequestError extends Error {
     readonly status: number;
     constructor(path: string, status: number, _statusText?: string);
 }
+export declare class RemoteSkillLifecycleError extends RemoteRequestError {
+    readonly code?: string;
+    constructor(path: string, status: number, code?: string);
+}
 /** Bounded checkout outcome; the key is caller-owned, never copied from a server error. */
 export declare class RemoteCreditCheckoutError extends RemoteRequestError {
     readonly code: RemoteCreditCheckoutErrorCode;
@@ -144,6 +148,8 @@ export declare class RemoteSkillsClient {
         };
         recurringConsents?: RecurringCapability;
     }>;
+    /** Add the single supported publication scope to an existing key, metadata only. */
+    addSkillPublishScope(keyId: string, expectedScopes: string[], expectedOrgId: string): Promise<Record<string, unknown>>;
     /** Quote first and fail closed when the caller has not approved the required credits. */
     submitQuotedRun(slug: string, input?: Record<string, unknown>, args?: string[], approval?: RemoteRunApproval): Promise<RemoteSkillRunContract>;
     getIdentity(): Promise<Record<string, unknown>>;
@@ -252,6 +258,11 @@ export declare class RemoteSkillsClient {
      */
     publishSkill(manifest: Record<string, unknown>, bundle?: Uint8Array, ifMatch?: string): Promise<Response>;
     deleteSkill(slug: string): Promise<Response>;
+    setSkillLifecycle(slug: string, lifecycle: "active" | "archived", options: {
+        reason?: string;
+        replacementSlug?: string;
+        expectedRevisionId: string;
+    }): Promise<any>;
     downloadSkillBundle(slug: string): Promise<Response>;
     /**
      * Bundle fetch for the verified-pull path. Returns the raw Response so the caller can

package/dist/lib/revision.d.ts

@@ -12,6 +12,9 @@ export interface RevisionContent {
     skillMd?: string;
     bundleSha256?: string;
     bundleByteSize?: number;
+    lifecycle?: "active" | "archived";
+    archiveReason?: string;
+    replacementSlug?: string;
 }
 export declare function revisionIdOf(content: RevisionContent): string;
 export declare function revisionIdOfRecord(record: RevisionContent): string;

package/dist/sdk/execution/admission.d.ts

@@ -10,7 +10,7 @@
  */
 import type { ImageProfileRegistry } from "./image-profile.js";
 import type { RunExecutionStore } from "./storage.js";
-import { type FrozenAdmission, type RunLimits, type RunPolicy, type RuntimeName } from "./types.js";
+import { type FrozenAdmission, type RunLimits, type RunPolicy, type RuntimeName, type PureExecutionContract } from "./types.js";
 export interface SubmitRunInput {
     tenantId: string;
     skillId: string;
@@ -24,6 +24,7 @@ export interface SubmitRunInput {
     systemDeps?: string[];
     policy?: Partial<RunPolicy>;
     limits?: Partial<RunLimits>;
+    executionContract?: PureExecutionContract;
 }
 export interface SubmitRunResult {
     run: FrozenAdmission;

package/dist/sdk/execution/types.d.ts

@@ -33,6 +33,13 @@ export interface RunLimits {
     maxArtifactsBytes: number;
     maxConcurrency: number;
 }
+/** Trusted, versioned adapter identity. Absent only for legacy PDF admissions. */
+export interface PureExecutionContract {
+    id: "regex-test.v1";
+    descriptorDigest: string;
+    entrypoint: string;
+    entrypointDigest: string;
+}
 /** Everything frozen at admission under one stable run_id. */
 export interface FrozenAdmission {
     contractVersion: number;
@@ -46,6 +53,7 @@ export interface FrozenAdmission {
     runtimeImageDigest: string;
     /** Prebuilt dependency layer tag, when the manifest's system_deps are allowlisted. */
     dependencyLayerTag: string | null;
+    executionContract?: PureExecutionContract;
     /** sha256 of the canonical serialization of the run input. */
     inputDigest: string;
     runtime: RuntimeName;
@@ -109,6 +117,7 @@ export interface AttemptReceipt {
     runtimeImageDigest: string;
     bundleDigest: string;
     dependencyLayerTag: string | null;
+    executionContract?: PureExecutionContract;
     policy: RunPolicy;
     limits: RunLimits;
     exitCode: number | null;

package/dist/sdk/index.d.ts

@@ -15,6 +15,7 @@
  * — the shared @hasna/contracts ladder — instead of reading an environment
  * variable of its own. See lib/fleet-credentials.ts.
  */
+export { CloudExecutionClient, type CloudExecution, type CloudEligibility } from "../lib/cloud-executions.js";
 export { readExecutionGrantPolicy, saveExecutionGrantPolicy, resolveExecutionGrant } from "../lib/execution-grant-client.js";
 export type { ExecutionGrant, ExecutionGrantPolicy, ExecutionGrantRequest, ResolvedExecutionGrant } from "../lib/execution-grants.js";
 export { HttpProfileClient, createProfileClient, type ProfileClient, type AuthenticatedProfilePrincipal, type AuthenticatedProfileRole } from "../lib/profile-client.js";