@hasna/skills 0.9.11 → 0.9.13

package/bin/migrate.js

@@ -7,7 +7,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.11",
+  version: "0.9.13",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -985,6 +985,18 @@ function rowToSkill(row) {
     ...row.replacement_slug ? { replacementSlug: String(row.replacement_slug) } : {}
   };
 }
+function rowToPublishedSelectionState(row) {
+  return {
+    slug: String(row.slug),
+    version: String(row.version),
+    current: row.skill_exists ? {
+      lifecycle: row.lifecycle === "archived" ? "archived" : "active",
+      ...row.tombstoned_at ? { tombstonedAt: dateString(row.tombstoned_at) } : {}
+    } : null,
+    versionBundleSha256: typeof row.bundle_sha256 === "string" ? row.bundle_sha256 : null,
+    bundleAvailable: Boolean(row.bundle_available)
+  };
+}
 function rowToPin(row) {
   return {
     orgId: String(row.org_id),
@@ -1057,6 +1069,13 @@ function rowToSkillVersion(row) {
   };
 }
 
+// src/lib/profile-limits.ts
+var MAX_PROFILE_SELECTIONS = 4096;
+var MAX_PROFILE_DOCUMENT_BYTES = 8 * 1024 * 1024;
+var MAX_SKILL_SESSION_ID_CHARS = 256;
+var PROFILE_SESSION_ENVELOPE_BYTES = MAX_PROFILE_SELECTIONS * 67 + MAX_SKILL_SESSION_ID_CHARS * 12 + 512;
+var MAX_RESOLVED_PROFILE_BYTES = MAX_PROFILE_DOCUMENT_BYTES - PROFILE_SESSION_ENVELOPE_BYTES;
+
 // src/server/types.ts
 class StaleLeaseGenerationError extends Error {
   runId;
@@ -1758,6 +1777,22 @@ class SqliteSkillsStore {
     const row = this.get("SELECT * FROM skills_versions WHERE org_id = ? AND slug = ? AND version = ? LIMIT 1", [principal.orgId, slug, version]);
     return row ? rowToSkillVersion(row) : null;
   }
+  async getPublishedSelectionStates(principal, selections2) {
+    if (selections2.length > MAX_PROFILE_SELECTIONS)
+      throw new RangeError("Published selection lookup exceeds the profile selection limit");
+    if (!selections2.length)
+      return [];
+    const requested = JSON.stringify(selections2.map(({ slug, version }) => ({ slug, version })));
+    return this.all(`SELECT json_extract(q.value, '$.slug') AS slug, json_extract(q.value, '$.version') AS version,
+         r.slug IS NOT NULL AS skill_exists, r.lifecycle, r.tombstoned_at,
+         v.bundle_sha256, b.sha256 IS NOT NULL AS bundle_available
+       FROM json_each(?) q
+       LEFT JOIN skills_registry r ON r.org_id = ? AND r.slug = json_extract(q.value, '$.slug')
+       LEFT JOIN skills_versions v ON v.org_id = ?
+         AND v.slug = json_extract(q.value, '$.slug') AND v.version = json_extract(q.value, '$.version')
+       LEFT JOIN skills_bundles b ON b.org_id = ? AND b.sha256 = v.bundle_sha256
+       ORDER BY CAST(q.key AS INTEGER)`, [requested, principal.orgId, principal.orgId, principal.orgId]).map(rowToPublishedSelectionState);
+  }
   async pinSkill(principal, slug, metadata = {}) {
     const row = this.get(`INSERT INTO skills_pins (org_id, principal, slug, pinned_at, metadata_json)
        VALUES (?, ?, ?, ?, ?)

package/bin/server.js

@@ -24122,7 +24122,7 @@ var init_dist_es9 = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.11",
+  version: "0.9.13",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -35194,6 +35194,18 @@ function rowToSkill(row) {
     ...row.replacement_slug ? { replacementSlug: String(row.replacement_slug) } : {}
   };
 }
+function rowToPublishedSelectionState(row) {
+  return {
+    slug: String(row.slug),
+    version: String(row.version),
+    current: row.skill_exists ? {
+      lifecycle: row.lifecycle === "archived" ? "archived" : "active",
+      ...row.tombstoned_at ? { tombstonedAt: dateString(row.tombstoned_at) } : {}
+    } : null,
+    versionBundleSha256: typeof row.bundle_sha256 === "string" ? row.bundle_sha256 : null,
+    bundleAvailable: Boolean(row.bundle_available)
+  };
+}
 function rowToPin(row) {
   return {
     orgId: String(row.org_id),
@@ -35266,6 +35278,25 @@ function rowToSkillVersion(row) {
   };
 }
 
+// src/lib/profile-limits.ts
+var MAX_PROFILE_SELECTIONS = 4096;
+var MAX_PROFILE_DOCUMENT_BYTES = 8 * 1024 * 1024;
+var MAX_SKILL_SESSION_ID_CHARS = 256;
+var PROFILE_SESSION_ENVELOPE_BYTES = MAX_PROFILE_SELECTIONS * 67 + MAX_SKILL_SESSION_ID_CHARS * 12 + 512;
+var MAX_RESOLVED_PROFILE_BYTES = MAX_PROFILE_DOCUMENT_BYTES - PROFILE_SESSION_ENVELOPE_BYTES;
+function profileDocumentBytes(value) {
+  return new TextEncoder().encode(JSON.stringify(value)).byteLength;
+}
+function resolvedProfileSnapshot(profile2, authority) {
+  return {
+    profileId: profile2.id,
+    workspaceId: profile2.workspaceId,
+    profileRevision: profile2.revision,
+    authority,
+    selections: profile2.selections.map((selection) => ({ ...selection, authority, workspaceId: profile2.workspaceId, profileRevision: profile2.revision }))
+  };
+}
+
 // src/server/types.ts
 class StaleLeaseGenerationError extends Error {
   runId;
@@ -35968,6 +35999,22 @@ class SqliteSkillsStore {
     const row = this.get("SELECT * FROM skills_versions WHERE org_id = ? AND slug = ? AND version = ? LIMIT 1", [principal.orgId, slug, version2]);
     return row ? rowToSkillVersion(row) : null;
   }
+  async getPublishedSelectionStates(principal, selections2) {
+    if (selections2.length > MAX_PROFILE_SELECTIONS)
+      throw new RangeError("Published selection lookup exceeds the profile selection limit");
+    if (!selections2.length)
+      return [];
+    const requested = JSON.stringify(selections2.map(({ slug, version: version2 }) => ({ slug, version: version2 })));
+    return this.all(`SELECT json_extract(q.value, '$.slug') AS slug, json_extract(q.value, '$.version') AS version,
+         r.slug IS NOT NULL AS skill_exists, r.lifecycle, r.tombstoned_at,
+         v.bundle_sha256, b.sha256 IS NOT NULL AS bundle_available
+       FROM json_each(?) q
+       LEFT JOIN skills_registry r ON r.org_id = ? AND r.slug = json_extract(q.value, '$.slug')
+       LEFT JOIN skills_versions v ON v.org_id = ?
+         AND v.slug = json_extract(q.value, '$.slug') AND v.version = json_extract(q.value, '$.version')
+       LEFT JOIN skills_bundles b ON b.org_id = ? AND b.sha256 = v.bundle_sha256
+       ORDER BY CAST(q.key AS INTEGER)`, [requested, principal.orgId, principal.orgId, principal.orgId]).map(rowToPublishedSelectionState);
+  }
   async pinSkill(principal, slug, metadata = {}) {
     const row = this.get(`INSERT INTO skills_pins (org_id, principal, slug, pinned_at, metadata_json)
        VALUES (?, ?, ?, ?, ?)
@@ -36532,25 +36579,6 @@ function selectionAliasError(selections2) {
   }
 }
 
-// src/lib/profile-limits.ts
-var MAX_PROFILE_SELECTIONS = 4096;
-var MAX_PROFILE_DOCUMENT_BYTES = 8 * 1024 * 1024;
-var MAX_SKILL_SESSION_ID_CHARS = 256;
-var PROFILE_SESSION_ENVELOPE_BYTES = MAX_PROFILE_SELECTIONS * 67 + MAX_SKILL_SESSION_ID_CHARS * 12 + 512;
-var MAX_RESOLVED_PROFILE_BYTES = MAX_PROFILE_DOCUMENT_BYTES - PROFILE_SESSION_ENVELOPE_BYTES;
-function profileDocumentBytes(value) {
-  return new TextEncoder().encode(JSON.stringify(value)).byteLength;
-}
-function resolvedProfileSnapshot(profile2, authority) {
-  return {
-    profileId: profile2.id,
-    workspaceId: profile2.workspaceId,
-    profileRevision: profile2.revision,
-    authority,
-    selections: profile2.selections.map((selection) => ({ ...selection, authority, workspaceId: profile2.workspaceId, profileRevision: profile2.revision }))
-  };
-}
-
 // src/lib/selection-cache.ts
 class SkillSelectionError extends Error {
   code;
@@ -37601,16 +37629,21 @@ function selected(value) {
   return selections2;
 }
 async function validatePublished(store, principal, selections2) {
-  for (const selection2 of selections2) {
-    const current = await store.getSkill(principal, selection2.slug);
+  const states = await store.getPublishedSelectionStates(principal, selections2);
+  if (states.length !== selections2.length)
+    throw new SkillRequestError(503, "SELECTION_UNAVAILABLE", "Selected publication state is unavailable");
+  for (const [index, selection2] of selections2.entries()) {
+    const state2 = states[index];
+    if (!state2 || state2.slug !== selection2.slug || state2.version !== selection2.version)
+      throw new SkillRequestError(503, "SELECTION_UNAVAILABLE", "Selected publication state is unavailable");
+    const current = state2.current;
     if (!current || current.tombstonedAt)
       throw new SkillRequestError(current?.tombstonedAt ? 410 : 404, "SELECTION_UNAVAILABLE", `Selected skill '${selection2.slug}' is unavailable`);
     if (current.lifecycle === "archived")
       throw new SkillRequestError(409, "SELECTION_ARCHIVED", `Selected skill '${selection2.slug}' is archived`);
-    const version2 = await store.getSkillVersion(principal, selection2.slug, selection2.version);
-    if (!version2 || `sha256:${version2.bundleSha256}` !== selection2.bundleDigest)
+    if (!state2.versionBundleSha256 || `sha256:${state2.versionBundleSha256}` !== selection2.bundleDigest)
       throw new SkillRequestError(409, "SELECTION_VERSION_MISMATCH", `Selected version of '${selection2.slug}' does not match its published digest`);
-    if (!await store.getSkillBundle(principal, version2.bundleSha256))
+    if (!state2.bundleAvailable)
       throw new SkillRequestError(503, "SELECTION_BUNDLE_UNAVAILABLE", "Selected bundle is unavailable");
   }
 }
@@ -43171,6 +43204,25 @@ class MemorySkillsStore {
     const found = this.versions.get(versionKey(principal.orgId, slug, version2));
     return found && found.orgId === principal.orgId ? found : null;
   }
+  async getPublishedSelectionStates(principal, selections2) {
+    if (selections2.length > MAX_PROFILE_SELECTIONS)
+      throw new RangeError("Published selection lookup exceeds the profile selection limit");
+    return selections2.map(({ slug, version: version2 }) => {
+      const current = this.skills.get(skillKey(principal.orgId, slug));
+      const selectedVersion = this.versions.get(versionKey(principal.orgId, slug, version2));
+      const bundle = selectedVersion && this.bundles.get(skillKey(principal.orgId, selectedVersion.bundleSha256));
+      return {
+        slug,
+        version: version2,
+        current: current?.orgId === principal.orgId ? {
+          lifecycle: current.lifecycle,
+          ...current.tombstonedAt ? { tombstonedAt: current.tombstonedAt } : {}
+        } : null,
+        versionBundleSha256: selectedVersion?.orgId === principal.orgId ? selectedVersion.bundleSha256 : null,
+        bundleAvailable: bundle?.orgId === principal.orgId
+      };
+    });
+  }
   async listSkills(principal) {
     return Array.from(this.skills.values()).filter((skill) => skill.orgId === principal.orgId && !skill.tombstonedAt).sort((a4, b4) => a4.slug.localeCompare(b4.slug));
   }
@@ -43979,6 +44031,25 @@ class PostgresSkillsStore {
     `;
     return rows[0] ? rowToSkillVersion(rows[0]) : null;
   }
+  async getPublishedSelectionStates(principal, selections2) {
+    if (selections2.length > MAX_PROFILE_SELECTIONS)
+      throw new RangeError("Published selection lookup exceeds the profile selection limit");
+    if (!selections2.length)
+      return [];
+    const requested = JSON.stringify(selections2.map(({ slug, version: version2 }) => ({ slug, version: version2 })));
+    const rows = await this.sql`
+      SELECT q.value->>'slug' AS slug, q.value->>'version' AS version,
+        r.slug IS NOT NULL AS skill_exists, r.lifecycle, r.tombstoned_at,
+        v.bundle_sha256, b.sha256 IS NOT NULL AS bundle_available
+      FROM jsonb_array_elements(${requested}::text::jsonb) WITH ORDINALITY AS q(value, ordinal)
+      LEFT JOIN skills_registry r ON r.org_id = ${principal.orgId} AND r.slug = q.value->>'slug'
+      LEFT JOIN skills_versions v ON v.org_id = ${principal.orgId}
+        AND v.slug = q.value->>'slug' AND v.version = q.value->>'version'
+      LEFT JOIN skills_bundles b ON b.org_id = ${principal.orgId} AND b.sha256 = v.bundle_sha256
+      ORDER BY q.ordinal
+    `;
+    return rows.map(rowToPublishedSelectionState);
+  }
   async pinSkill(principal, slug, metadata = {}) {
     const rows = await this.sql`
       INSERT INTO skills_pins (org_id, principal, slug, pinned_at, metadata_json)

package/bin/worker.js

@@ -24125,7 +24125,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.11",
+  version: "0.9.13",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -34942,6 +34942,18 @@ function rowToSkill(row) {
     ...row.replacement_slug ? { replacementSlug: String(row.replacement_slug) } : {}
   };
 }
+function rowToPublishedSelectionState(row) {
+  return {
+    slug: String(row.slug),
+    version: String(row.version),
+    current: row.skill_exists ? {
+      lifecycle: row.lifecycle === "archived" ? "archived" : "active",
+      ...row.tombstoned_at ? { tombstonedAt: dateString(row.tombstoned_at) } : {}
+    } : null,
+    versionBundleSha256: typeof row.bundle_sha256 === "string" ? row.bundle_sha256 : null,
+    bundleAvailable: Boolean(row.bundle_available)
+  };
+}
 function rowToPin(row) {
   return {
     orgId: String(row.org_id),
@@ -35014,6 +35026,13 @@ function rowToSkillVersion(row) {
   };
 }
 
+// src/lib/profile-limits.ts
+var MAX_PROFILE_SELECTIONS = 4096;
+var MAX_PROFILE_DOCUMENT_BYTES = 8 * 1024 * 1024;
+var MAX_SKILL_SESSION_ID_CHARS = 256;
+var PROFILE_SESSION_ENVELOPE_BYTES = MAX_PROFILE_SELECTIONS * 67 + MAX_SKILL_SESSION_ID_CHARS * 12 + 512;
+var MAX_RESOLVED_PROFILE_BYTES = MAX_PROFILE_DOCUMENT_BYTES - PROFILE_SESSION_ENVELOPE_BYTES;
+
 // src/server/types.ts
 class StaleLeaseGenerationError extends Error {
   runId;
@@ -35715,6 +35734,22 @@ class SqliteSkillsStore {
     const row = this.get("SELECT * FROM skills_versions WHERE org_id = ? AND slug = ? AND version = ? LIMIT 1", [principal.orgId, slug, version2]);
     return row ? rowToSkillVersion(row) : null;
   }
+  async getPublishedSelectionStates(principal, selections2) {
+    if (selections2.length > MAX_PROFILE_SELECTIONS)
+      throw new RangeError("Published selection lookup exceeds the profile selection limit");
+    if (!selections2.length)
+      return [];
+    const requested = JSON.stringify(selections2.map(({ slug, version: version2 }) => ({ slug, version: version2 })));
+    return this.all(`SELECT json_extract(q.value, '$.slug') AS slug, json_extract(q.value, '$.version') AS version,
+         r.slug IS NOT NULL AS skill_exists, r.lifecycle, r.tombstoned_at,
+         v.bundle_sha256, b.sha256 IS NOT NULL AS bundle_available
+       FROM json_each(?) q
+       LEFT JOIN skills_registry r ON r.org_id = ? AND r.slug = json_extract(q.value, '$.slug')
+       LEFT JOIN skills_versions v ON v.org_id = ?
+         AND v.slug = json_extract(q.value, '$.slug') AND v.version = json_extract(q.value, '$.version')
+       LEFT JOIN skills_bundles b ON b.org_id = ? AND b.sha256 = v.bundle_sha256
+       ORDER BY CAST(q.key AS INTEGER)`, [requested, principal.orgId, principal.orgId, principal.orgId]).map(rowToPublishedSelectionState);
+  }
   async pinSkill(principal, slug, metadata = {}) {
     const row = this.get(`INSERT INTO skills_pins (org_id, principal, slug, pinned_at, metadata_json)
        VALUES (?, ?, ?, ?, ?)
@@ -35996,13 +36031,6 @@ var init_client = __esm2(() => {
 init_client();
 init_client();
 
-// src/lib/profile-limits.ts
-var MAX_PROFILE_SELECTIONS = 4096;
-var MAX_PROFILE_DOCUMENT_BYTES = 8 * 1024 * 1024;
-var MAX_SKILL_SESSION_ID_CHARS = 256;
-var PROFILE_SESSION_ENVELOPE_BYTES = MAX_PROFILE_SELECTIONS * 67 + MAX_SKILL_SESSION_ID_CHARS * 12 + 512;
-var MAX_RESOLVED_PROFILE_BYTES = MAX_PROFILE_DOCUMENT_BYTES - PROFILE_SESSION_ENVELOPE_BYTES;
-
 // src/lib/selection-cache.ts
 var MAX_CACHED_PROFILE_AGE_MS = 24 * 60 * 60 * 1000;
 
@@ -36707,6 +36735,25 @@ class MemorySkillsStore {
     const found = this.versions.get(versionKey(principal.orgId, slug, version2));
     return found && found.orgId === principal.orgId ? found : null;
   }
+  async getPublishedSelectionStates(principal, selections2) {
+    if (selections2.length > MAX_PROFILE_SELECTIONS)
+      throw new RangeError("Published selection lookup exceeds the profile selection limit");
+    return selections2.map(({ slug, version: version2 }) => {
+      const current = this.skills.get(skillKey(principal.orgId, slug));
+      const selectedVersion = this.versions.get(versionKey(principal.orgId, slug, version2));
+      const bundle = selectedVersion && this.bundles.get(skillKey(principal.orgId, selectedVersion.bundleSha256));
+      return {
+        slug,
+        version: version2,
+        current: current?.orgId === principal.orgId ? {
+          lifecycle: current.lifecycle,
+          ...current.tombstonedAt ? { tombstonedAt: current.tombstonedAt } : {}
+        } : null,
+        versionBundleSha256: selectedVersion?.orgId === principal.orgId ? selectedVersion.bundleSha256 : null,
+        bundleAvailable: bundle?.orgId === principal.orgId
+      };
+    });
+  }
   async listSkills(principal) {
     return Array.from(this.skills.values()).filter((skill) => skill.orgId === principal.orgId && !skill.tombstonedAt).sort((a3, b3) => a3.slug.localeCompare(b3.slug));
   }
@@ -37515,6 +37562,25 @@ class PostgresSkillsStore {
     `;
     return rows[0] ? rowToSkillVersion(rows[0]) : null;
   }
+  async getPublishedSelectionStates(principal, selections2) {
+    if (selections2.length > MAX_PROFILE_SELECTIONS)
+      throw new RangeError("Published selection lookup exceeds the profile selection limit");
+    if (!selections2.length)
+      return [];
+    const requested = JSON.stringify(selections2.map(({ slug, version: version2 }) => ({ slug, version: version2 })));
+    const rows = await this.sql`
+      SELECT q.value->>'slug' AS slug, q.value->>'version' AS version,
+        r.slug IS NOT NULL AS skill_exists, r.lifecycle, r.tombstoned_at,
+        v.bundle_sha256, b.sha256 IS NOT NULL AS bundle_available
+      FROM jsonb_array_elements(${requested}::text::jsonb) WITH ORDINALITY AS q(value, ordinal)
+      LEFT JOIN skills_registry r ON r.org_id = ${principal.orgId} AND r.slug = q.value->>'slug'
+      LEFT JOIN skills_versions v ON v.org_id = ${principal.orgId}
+        AND v.slug = q.value->>'slug' AND v.version = q.value->>'version'
+      LEFT JOIN skills_bundles b ON b.org_id = ${principal.orgId} AND b.sha256 = v.bundle_sha256
+      ORDER BY q.ordinal
+    `;
+    return rows.map(rowToPublishedSelectionState);
+  }
   async pinSkill(principal, slug, metadata = {}) {
     const rows = await this.sql`
       INSERT INTO skills_pins (org_id, principal, slug, pinned_at, metadata_json)

package/dist/cli/commands/profile-sync.d.ts

@@ -5,6 +5,7 @@ export declare function handleProfileSync(options: {
     profile?: string;
     project?: boolean;
     station?: string;
+    stationReport?: boolean;
     check?: boolean;
     json?: boolean;
 }, dependencies?: SyncSelectionProfileOptions): Promise<void>;

package/dist/index.d.ts

@@ -60,11 +60,12 @@ export type { SkillSelection, SkillProfile, ResolvedSkillSelection, ResolvedSkil
 export { buildSkillContext } from "./lib/skill-context.js";
 export { syncSelectionProfile } from "./lib/selection-resolver.js";
 export { inspectSkillSession, reconcileSkillSession, type SessionReconciliationInput, type SessionReconciliationOptions } from "./lib/session-reconciliation.js";
-export { planAgentIntegration, applyAgentIntegration, inventoryNativeSkills, archiveNativeSkills } from "./lib/agent-integration.js";
+export { planAgentIntegration, planClaudeStopHookUpdate, applyAgentIntegration, inventoryNativeSkills, archiveNativeSkills } from "./lib/agent-integration.js";
 export { captureDiscoveryDirectories, captureDiscoveryByteSources, captureDiscoveryPathSources, type DiscoveryDirectory, type DiscoverySource } from "./lib/agent-discovery.js";
-export { captureClaudeMarketplaceRegistry } from "./lib/claude-marketplace-registry.js";
-export { captureClaudeSettings } from "./lib/claude-settings-witness.js";
+export { captureClaudeMarketplaceRegistry, captureClaudeMarketplaceRegistryV2 } from "./lib/claude-marketplace-registry.js";
+export { captureClaudeSettings, captureClaudeSettingsV2 } from "./lib/claude-settings-witness.js";
 export { buildPluginProjection, pluginTreeDigest, type PluginProjectionManifest, type PluginPayloadMapping, type PluginFileWitness } from "./lib/plugin-projection.js";
 export { planPluginAdmission, admitPlugin, resolveAdmittedPlugin, pluginResolverCommand, type PluginAdmissionTarget, type PluginAdmissionBinding, type PluginAdmissionPrincipal, type PluginAdmissionPlan, type PluginAdmissionIdentity, type PluginBundleIdentity, type PluginRoutingIdentity, type PluginAdmissionReceipt } from "./lib/plugin-admission.js";
 export { captureManagedPluginRegistry, type ManagedPluginRegistrationWitness } from "./lib/plugin-discovery.js";
 export type { RemoteCreditCheckoutOptions, RemoteCreditCheckout, RemoteCreditCheckoutErrorCode } from "./lib/remote-credit-checkout.js";
+export { assertPortableAuthoringPath, type PortableAuthoringPathOptions } from "./lib/authoring-path.js";