@hasna/skills 0.9.12 → 0.9.14

package/bin/index.js

@@ -36868,7 +36868,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.9.12",
+    version: "0.9.14",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -39947,10 +39947,10 @@ function assertAgentPolicyCollections(policy) {
       text(source.path);
       requireBound(source.sha256 === null || typeof source.sha256 === "string" && /^[a-f0-9]{64}$/.test(source.sha256));
       if (source.hashMode !== undefined)
-        requireBound(["bytes", "path-bytes", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
-      if (source.hashMode === "claude-settings-v1")
+        requireBound(["bytes", "path-bytes", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-marketplace-registry-v2"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+      if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2")
         requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute2(source.path) && resolve3(source.path) === source.path && basename2(source.path) === "settings.json");
-      if (source.hashMode === "claude-marketplace-registry")
+      if (source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2")
         requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute2(source.path) && resolve3(source.path) === source.path && basename2(source.path) === "known_marketplaces.json");
       if (source.hashMode === "claude-plugin-registry") {
         requireBound(agent === "claude");
@@ -50545,9 +50545,32 @@ function canonical2(value) {
     return { kind: "array", items: value.items.map(canonical2) };
   return value;
 }
-function settingsDigest(text2) {
+function inferencePreference(key, child) {
+  if (key === "skipDangerousModePermissionPrompt") {
+    need2(child.kind === "literal" && (child.value === "true" || child.value === "false"), "contains an invalid dialog acknowledgment");
+    return false;
+  }
+  if (key === "effortLevel") {
+    need2(child.kind === "string" && PERSISTED_EFFORT_LEVELS.has(child.value), "contains an invalid persisted effort level");
+    return true;
+  }
+  if (key !== "modelSettings")
+    return false;
+  need2(child.kind === "object", "requires an object of model preferences");
+  child.entries = child.entries.filter(([model, preferences]) => {
+    if (!BUILTIN_MODEL_SELECTIONS.has(model) || preferences.kind !== "object" || preferences.entries.length !== 1 || preferences.entries[0][0] !== "effortLevel")
+      return true;
+    const effort = preferences.entries[0][1];
+    need2(effort.kind === "string" && PERSISTED_EFFORT_LEVELS.has(effort.value), "contains an invalid persisted model effort level");
+    return false;
+  });
+  return child.entries.length === 0;
+}
+function settingsDigest(text2, version = 1) {
   const value = parse3(text2);
   value.entries = value.entries.filter(([key, child]) => {
+    if (version === 2 && inferencePreference(key, child))
+      return false;
     if (key === "model") {
       need2(child.kind === "string", "contains an invalid model selection");
       return !BUILTIN_MODEL_SELECTIONS.has(child.value);
@@ -50562,7 +50585,7 @@ function settingsDigest(text2) {
     }
     return true;
   });
-  return createHash9("sha256").update("hasna.skills.claude-settings.v1\x00").update(JSON.stringify(canonical2(value))).digest("hex");
+  return createHash9("sha256").update(`hasna.skills.claude-settings.v${version}\x00`).update(JSON.stringify(canonical2(value))).digest("hex");
 }
 function hashClaudeSettingsReplacement(text2, budget) {
   need2(typeof text2 === "string", "requires settings text");
@@ -50574,7 +50597,17 @@ function hashClaudeSettingsReplacement(text2, budget) {
 function captureClaudeSettings(path, budget = { remaining: 256 * 1024 * 1024 }) {
   return { path, hashMode: "claude-settings-v1", sha256: settingsDigest(readSettings(path, budget)) };
 }
-var CLAUDE_SETTINGS_WITNESS_LIMITS, sameFile = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, BOOLEAN_PREFERENCES, ENUM_PREFERENCES, BUILTIN_MODEL_SELECTIONS;
+function captureClaudeSettingsV2(path, budget = { remaining: 256 * 1024 * 1024 }) {
+  return { path, hashMode: "claude-settings-v2", sha256: settingsDigest(readSettings(path, budget), 2) };
+}
+function hashClaudeSettingsReplacementV2(text2, budget) {
+  need2(typeof text2 === "string", "requires settings text");
+  const bytes = Buffer.byteLength(text2);
+  need2(bytes <= CLAUDE_SETTINGS_WITNESS_LIMITS.bytes && Number.isSafeInteger(budget.remaining) && budget.remaining >= bytes, "exceeds its byte limit");
+  budget.remaining -= bytes;
+  return settingsDigest(text2, 2);
+}
+var CLAUDE_SETTINGS_WITNESS_LIMITS, sameFile = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, BOOLEAN_PREFERENCES, ENUM_PREFERENCES, BUILTIN_MODEL_SELECTIONS, PERSISTED_EFFORT_LEVELS;
 var init_claude_settings_witness = __esm(() => {
   CLAUDE_SETTINGS_WITNESS_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
   BOOLEAN_PREFERENCES = new Set([
@@ -50628,6 +50661,7 @@ var init_claude_settings_witness = __esm(() => {
     "claude-opus-4-6[1m]",
     "claude-sonnet-4-6[1m]"
   ]);
+  PERSISTED_EFFORT_LEVELS = new Set(["low", "medium", "high", "xhigh"]);
 });
 
 // src/lib/agent-integration.ts
@@ -51199,6 +51233,20 @@ function planAgentIntegration(options) {
   recheckRootAliases(aliases);
   return { dataDir: dataDir3, profileId, changes, nativeSkills, observedPolicy: { path: policyPath, before: previousPolicy }, discoveryBefore: discoveries, discoveryAfter, ...aliases.length ? { rootAliases: aliases } : {} };
 }
+function verifyCoordinatedDiscovery(binding, home, aliases) {
+  try {
+    if (binding.method !== "automatic" && binding.method !== "reviewed")
+      throw new Error("Invalid managed discovery method");
+    verifyAgentDiscovery(binding);
+    if (binding.method === "automatic") {
+      const current = resolveAgentDiscovery({ home, agent: binding.agent, canonical: (path) => canonicalAgentPath(path, aliases) });
+      if (JSON.stringify(current) !== JSON.stringify(binding))
+        throw new Error("Configured native discovery roots changed during Claude update");
+    }
+  } catch (error) {
+    throw new Error(`NATIVE_SKILL_DRIFT: ${error.message}`);
+  }
+}
 function atomicWrite2(path, content) {
   assertSafePath(path);
   mkdirSync5(dirname10(path), { recursive: true, mode: 448 });
@@ -51223,8 +51271,12 @@ function applyAgentIntegration(plan) {
   recheckRootAliases(aliases);
   for (const agent of plan.managedAgentChecks?.agents ?? [])
     assertManagedAgentBridge(agent, { home: plan.managedAgentChecks.home, dataDir: plan.dataDir, projectDir: plan.managedAgentChecks.home });
-  for (const binding of plan.discoveryBefore ?? [])
-    verifyAgentDiscovery(binding);
+  for (const binding of plan.discoveryBefore ?? []) {
+    if (plan.managedAgentChecks)
+      verifyCoordinatedDiscovery(binding, plan.managedAgentChecks.home, aliases);
+    else
+      verifyAgentDiscovery(binding);
+  }
   if (plan.observedPolicy && currentText(plan.observedPolicy.path) !== plan.observedPolicy.before)
     throw new Error("Agent policy changed after planning");
   for (const change of plan.changes)
@@ -51256,8 +51308,12 @@ function applyAgentIntegration(plan) {
       written.push({ path: change.path, before: change.before, after: after2 });
     }
     recheckRootAliases(aliases);
-    for (const binding of plan.discoveryAfter ?? [])
-      verifyAgentDiscovery(binding);
+    for (const binding of plan.discoveryAfter ?? []) {
+      if (plan.managedAgentChecks)
+        verifyCoordinatedDiscovery(binding, plan.managedAgentChecks.home, aliases);
+      else
+        verifyAgentDiscovery(binding);
+    }
     for (const agent of plan.managedAgentChecks?.agents ?? [])
       assertManagedAgentBridge(agent, { home: plan.managedAgentChecks.home, dataDir: plan.dataDir, projectDir: plan.managedAgentChecks.home });
     atomicWrite2(join20(backupRoot, "receipt.json"), JSON.stringify({ version: 1, changes: written.map((change) => ({ path: change.path, beforeHash: change.before === null ? null : sha(change.before), afterHash: sha(change.after) })), backups, ...aliases.length ? { rootAliases: aliases } : {} }) + `
@@ -54402,9 +54458,13 @@ function textField(value) {
   need3(value?.kind === "string" && value.value.length > 0 && !/[\x00-\x1f\x7f]/.test(value.value), "contains an invalid recognized field");
   return value.value;
 }
-function normalizeRow(row) {
-  if (!exactKeys(row, ["source", "installLocation", "lastUpdated"]))
-    return;
+function normalizeRow(row, version = 1) {
+  if (!exactKeys(row, ["source", "installLocation", "lastUpdated"])) {
+    if (version !== 2 || !exactKeys(row, ["source", "installLocation", "lastUpdated", "autoUpdate"]))
+      return;
+    const autoUpdate = field(row, "autoUpdate");
+    need3(autoUpdate?.kind === "literal" && (autoUpdate.value === "true" || autoUpdate.value === "false"), "contains an invalid automatic-update preference");
+  }
   const source = field(row, "source");
   if (source?.kind !== "object")
     return;
@@ -54431,6 +54491,13 @@ function captureClaudeMarketplaceRegistry(path, budget = { remaining: 256 * 1024
   const sha2562 = createHash13("sha256").update("hasna.skills.claude-marketplace-registry.v1\x00").update(JSON.stringify(value)).digest("hex");
   return { path, hashMode: "claude-marketplace-registry", sha256: sha2562 };
 }
+function captureClaudeMarketplaceRegistryV2(path, budget = { remaining: 256 * 1024 * 1024 }) {
+  const value = parse6(readRegistry2(path, budget));
+  for (const [, row] of value.entries)
+    normalizeRow(row, 2);
+  const sha2562 = createHash13("sha256").update("hasna.skills.claude-marketplace-registry.v2\x00").update(JSON.stringify(value)).digest("hex");
+  return { path, hashMode: "claude-marketplace-registry-v2", sha256: sha2562 };
+}
 var CLAUDE_MARKETPLACE_REGISTRY_LIMITS, sameFile2 = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, field = (object4, key) => object4.entries.find(([name]) => name === key)?.[1];
 var init_claude_marketplace_registry = __esm(() => {
   CLAUDE_MARKETPLACE_REGISTRY_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
@@ -54714,18 +54781,18 @@ function read2(path, changes) {
   return readFileSync17(path, "utf8");
 }
 function projected(source, changes, budget = discoveryByteBudget()) {
-  if (source.hashMode === "claude-settings-v1") {
+  if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2") {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256))
       throw new Error("Claude settings witnesses require exact typed metadata");
-    const current = captureClaudeSettings(source.path, budget).sha256;
+    const current = (source.hashMode === "claude-settings-v2" ? captureClaudeSettingsV2 : captureClaudeSettings)(source.path, budget).sha256;
     if (current !== source.sha256)
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
-    return changes?.has(source.path) ? hashClaudeSettingsReplacement(changes.get(source.path), budget) : current;
+    return changes?.has(source.path) ? (source.hashMode === "claude-settings-v2" ? hashClaudeSettingsReplacementV2 : hashClaudeSettingsReplacement)(changes.get(source.path), budget) : current;
   }
-  if (source.hashMode === "claude-marketplace-registry") {
+  if (source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256) || changes?.has(source.path))
       throw new Error("Claude marketplace witnesses require an exact reviewed registry without synthetic changes");
-    const sha2562 = captureClaudeMarketplaceRegistry(source.path, budget).sha256;
+    const sha2562 = (source.hashMode === "claude-marketplace-registry-v2" ? captureClaudeMarketplaceRegistryV2 : captureClaudeMarketplaceRegistry)(source.path, budget).sha256;
     if (sha2562 !== source.sha256)
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
     return sha2562;
@@ -54782,9 +54849,9 @@ function verifyAgentDiscovery(binding, codexRecovery) {
     safe4(root2);
 }
 function assertMarketplaceBinding(binding, source) {
-  if (source.hashMode === "claude-settings-v1" && (binding.agent !== "claude" || binding.method !== "reviewed" || basename8(source.path) !== "settings.json"))
+  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2") && (binding.agent !== "claude" || binding.method !== "reviewed" || basename8(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
-  if (source.hashMode === "claude-marketplace-registry" && (binding.agent !== "claude" || binding.method !== "reviewed"))
+  if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
 }
 function rebindAgentDiscovery(binding, changes) {
@@ -54913,7 +54980,7 @@ function resolveAgentDiscovery(options) {
     if (review.sources.some((source) => source.format !== undefined || source.fields !== undefined))
       throw new Error("Explicit discovery reviews require full source-file hashes");
     verifyAgentDiscovery(supplied);
-    if (review.sources.some((source) => source.hashMode === "claude-settings-v1" && source.path !== canonical4(configPath)))
+    if (review.sources.some((source) => (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2") && source.path !== canonical4(configPath)))
       throw new Error("Semantic settings witnesses must name the configured Claude configuration source");
     if (!review.sources.some((source) => source.path === canonical4(configPath)))
       throw new Error("Discovery review must include the agent configuration source");
@@ -109057,6 +109124,12 @@ function agents(value) {
 }
 function registerAgentIntegration(parent) {
   const hook = parent.command("hook").description("Load selected Skills context through agent lifecycle hooks");
+  hook.command("witness").requiredOption("--kind <kind>", "claude-settings-v2 or claude-marketplace-registry-v2").requiredOption("--path <path>", "Canonical absolute path to the reviewed settings or registry file").option("--json", "Output the discovery witness as JSON", false).description("Capture an explicit versioned review witness without installing it").action(async (options) => {
+    const capture2 = options.kind === "claude-settings-v2" ? captureClaudeSettingsV2 : options.kind === "claude-marketplace-registry-v2" ? captureClaudeMarketplaceRegistryV2 : null;
+    if (!capture2)
+      throw new Error("Unsupported witness kind; select claude-settings-v2 or claude-marketplace-registry-v2");
+    await writeCliOutput(JSON.stringify(capture2(options.path), null, 2));
+  });
   hook.command("agents").option("--json", "Output the adapter capability inventory", false).description("Show maintained native adapters and explicit coverage limits").action(async () => {
     await writeCliOutput(JSON.stringify({ agents: INTEGRATION_AGENTS.map((agent) => ({ agent, bridge: true, ...AGENT_ADAPTERS[agent] })), inventoryOnly: ["codewith", "windsurf", "pi", "amp", "cline", "roo", "copilot"], limitations: ["Cursor prompt hooks gate submission; selected context is injected at session start only.", "Native discovery checks cover known home roots and current project ancestors. External plugin hook injection and arbitrary added directories require separate review.", "Hermes injects selected prompt context, but native pre_llm_call fails open. Exact native hook trust, bundled reseeding opt-out, native payload retirement and a supervised pre-tool guard are required. Child failures block explicitly; native host/supervisor death is not a universal fail-closed guarantee.", "Restart agents and use their normal hook trust controls after installation."] }, null, 2));
   });
@@ -109243,6 +109316,8 @@ var init_agent_integration2 = __esm(() => {
   init_agent_codex_trust();
   init_hook_diagnostics();
   init_selection_cache();
+  init_claude_settings_witness();
+  init_claude_marketplace_registry();
   RECOVERABLE_CONTEXT_CACHE_ERRORS = new Set(["CACHED_PROFILE_EXPIRED", "CACHED_PROFILE_MISSING", "CACHED_BUNDLE_MISSING"]);
 });
 

package/bin/maintenance.js

@@ -2737,6 +2737,18 @@ function rowToSkill(row) {
     ...row.replacement_slug ? { replacementSlug: String(row.replacement_slug) } : {}
   };
 }
+function rowToPublishedSelectionState(row) {
+  return {
+    slug: String(row.slug),
+    version: String(row.version),
+    current: row.skill_exists ? {
+      lifecycle: row.lifecycle === "archived" ? "archived" : "active",
+      ...row.tombstoned_at ? { tombstonedAt: dateString(row.tombstoned_at) } : {}
+    } : null,
+    versionBundleSha256: typeof row.bundle_sha256 === "string" ? row.bundle_sha256 : null,
+    bundleAvailable: Boolean(row.bundle_available)
+  };
+}
 function rowToPin(row) {
   return {
     orgId: String(row.org_id),
@@ -2809,6 +2821,13 @@ function rowToSkillVersion(row) {
   };
 }
 
+// src/lib/profile-limits.ts
+var MAX_PROFILE_SELECTIONS = 4096;
+var MAX_PROFILE_DOCUMENT_BYTES = 8 * 1024 * 1024;
+var MAX_SKILL_SESSION_ID_CHARS = 256;
+var PROFILE_SESSION_ENVELOPE_BYTES = MAX_PROFILE_SELECTIONS * 67 + MAX_SKILL_SESSION_ID_CHARS * 12 + 512;
+var MAX_RESOLVED_PROFILE_BYTES = MAX_PROFILE_DOCUMENT_BYTES - PROFILE_SESSION_ENVELOPE_BYTES;
+
 // src/lib/revision.ts
 import { createHash as createHash2 } from "crypto";
 function revisionIdOf(content) {
@@ -3495,6 +3514,22 @@ class SqliteSkillsStore {
     const row = this.get("SELECT * FROM skills_versions WHERE org_id = ? AND slug = ? AND version = ? LIMIT 1", [principal.orgId, slug, version]);
     return row ? rowToSkillVersion(row) : null;
   }
+  async getPublishedSelectionStates(principal, selections2) {
+    if (selections2.length > MAX_PROFILE_SELECTIONS)
+      throw new RangeError("Published selection lookup exceeds the profile selection limit");
+    if (!selections2.length)
+      return [];
+    const requested = JSON.stringify(selections2.map(({ slug, version }) => ({ slug, version })));
+    return this.all(`SELECT json_extract(q.value, '$.slug') AS slug, json_extract(q.value, '$.version') AS version,
+         r.slug IS NOT NULL AS skill_exists, r.lifecycle, r.tombstoned_at,
+         v.bundle_sha256, b.sha256 IS NOT NULL AS bundle_available
+       FROM json_each(?) q
+       LEFT JOIN skills_registry r ON r.org_id = ? AND r.slug = json_extract(q.value, '$.slug')
+       LEFT JOIN skills_versions v ON v.org_id = ?
+         AND v.slug = json_extract(q.value, '$.slug') AND v.version = json_extract(q.value, '$.version')
+       LEFT JOIN skills_bundles b ON b.org_id = ? AND b.sha256 = v.bundle_sha256
+       ORDER BY CAST(q.key AS INTEGER)`, [requested, principal.orgId, principal.orgId, principal.orgId]).map(rowToPublishedSelectionState);
+  }
   async pinSkill(principal, slug, metadata = {}) {
     const row = this.get(`INSERT INTO skills_pins (org_id, principal, slug, pinned_at, metadata_json)
        VALUES (?, ?, ?, ?, ?)
@@ -3899,6 +3934,25 @@ class MemorySkillsStore {
     const found = this.versions.get(versionKey(principal.orgId, slug, version));
     return found && found.orgId === principal.orgId ? found : null;
   }
+  async getPublishedSelectionStates(principal, selections2) {
+    if (selections2.length > MAX_PROFILE_SELECTIONS)
+      throw new RangeError("Published selection lookup exceeds the profile selection limit");
+    return selections2.map(({ slug, version }) => {
+      const current = this.skills.get(skillKey(principal.orgId, slug));
+      const selectedVersion = this.versions.get(versionKey(principal.orgId, slug, version));
+      const bundle = selectedVersion && this.bundles.get(skillKey(principal.orgId, selectedVersion.bundleSha256));
+      return {
+        slug,
+        version,
+        current: current?.orgId === principal.orgId ? {
+          lifecycle: current.lifecycle,
+          ...current.tombstonedAt ? { tombstonedAt: current.tombstonedAt } : {}
+        } : null,
+        versionBundleSha256: selectedVersion?.orgId === principal.orgId ? selectedVersion.bundleSha256 : null,
+        bundleAvailable: bundle?.orgId === principal.orgId
+      };
+    });
+  }
   async listSkills(principal) {
     return Array.from(this.skills.values()).filter((skill) => skill.orgId === principal.orgId && !skill.tombstonedAt).sort((a, b) => a.slug.localeCompare(b.slug));
   }
@@ -4707,6 +4761,25 @@ class PostgresSkillsStore {
     `;
     return rows[0] ? rowToSkillVersion(rows[0]) : null;
   }
+  async getPublishedSelectionStates(principal, selections2) {
+    if (selections2.length > MAX_PROFILE_SELECTIONS)
+      throw new RangeError("Published selection lookup exceeds the profile selection limit");
+    if (!selections2.length)
+      return [];
+    const requested = JSON.stringify(selections2.map(({ slug, version }) => ({ slug, version })));
+    const rows = await this.sql`
+      SELECT q.value->>'slug' AS slug, q.value->>'version' AS version,
+        r.slug IS NOT NULL AS skill_exists, r.lifecycle, r.tombstoned_at,
+        v.bundle_sha256, b.sha256 IS NOT NULL AS bundle_available
+      FROM jsonb_array_elements(${requested}::text::jsonb) WITH ORDINALITY AS q(value, ordinal)
+      LEFT JOIN skills_registry r ON r.org_id = ${principal.orgId} AND r.slug = q.value->>'slug'
+      LEFT JOIN skills_versions v ON v.org_id = ${principal.orgId}
+        AND v.slug = q.value->>'slug' AND v.version = q.value->>'version'
+      LEFT JOIN skills_bundles b ON b.org_id = ${principal.orgId} AND b.sha256 = v.bundle_sha256
+      ORDER BY q.ordinal
+    `;
+    return rows.map(rowToPublishedSelectionState);
+  }
   async pinSkill(principal, slug, metadata = {}) {
     const rows = await this.sql`
       INSERT INTO skills_pins (org_id, principal, slug, pinned_at, metadata_json)

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.9.12",
+    version: "0.9.14",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -38126,10 +38126,10 @@ function assertAgentPolicyCollections(policy) {
       text(source.path);
       requireBound(source.sha256 === null || typeof source.sha256 === "string" && /^[a-f0-9]{64}$/.test(source.sha256));
       if (source.hashMode !== undefined)
-        requireBound(["bytes", "path-bytes", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
-      if (source.hashMode === "claude-settings-v1")
+        requireBound(["bytes", "path-bytes", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-marketplace-registry-v2"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+      if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2")
         requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute3(source.path) && resolve2(source.path) === source.path && basename3(source.path) === "settings.json");
-      if (source.hashMode === "claude-marketplace-registry")
+      if (source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2")
         requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute3(source.path) && resolve2(source.path) === source.path && basename3(source.path) === "known_marketplaces.json");
       if (source.hashMode === "claude-plugin-registry") {
         requireBound(agent === "claude");
@@ -47080,9 +47080,32 @@ function canonical2(value) {
     return { kind: "array", items: value.items.map(canonical2) };
   return value;
 }
-function settingsDigest(text2) {
+function inferencePreference(key, child) {
+  if (key === "skipDangerousModePermissionPrompt") {
+    need2(child.kind === "literal" && (child.value === "true" || child.value === "false"), "contains an invalid dialog acknowledgment");
+    return false;
+  }
+  if (key === "effortLevel") {
+    need2(child.kind === "string" && PERSISTED_EFFORT_LEVELS.has(child.value), "contains an invalid persisted effort level");
+    return true;
+  }
+  if (key !== "modelSettings")
+    return false;
+  need2(child.kind === "object", "requires an object of model preferences");
+  child.entries = child.entries.filter(([model, preferences]) => {
+    if (!BUILTIN_MODEL_SELECTIONS.has(model) || preferences.kind !== "object" || preferences.entries.length !== 1 || preferences.entries[0][0] !== "effortLevel")
+      return true;
+    const effort = preferences.entries[0][1];
+    need2(effort.kind === "string" && PERSISTED_EFFORT_LEVELS.has(effort.value), "contains an invalid persisted model effort level");
+    return false;
+  });
+  return child.entries.length === 0;
+}
+function settingsDigest(text2, version2 = 1) {
   const value = parse8(text2);
   value.entries = value.entries.filter(([key, child]) => {
+    if (version2 === 2 && inferencePreference(key, child))
+      return false;
     if (key === "model") {
       need2(child.kind === "string", "contains an invalid model selection");
       return !BUILTIN_MODEL_SELECTIONS.has(child.value);
@@ -47097,7 +47120,7 @@ function settingsDigest(text2) {
     }
     return true;
   });
-  return createHash9("sha256").update("hasna.skills.claude-settings.v1\x00").update(JSON.stringify(canonical2(value))).digest("hex");
+  return createHash9("sha256").update(`hasna.skills.claude-settings.v${version2}\x00`).update(JSON.stringify(canonical2(value))).digest("hex");
 }
 function hashClaudeSettingsReplacement(text2, budget) {
   need2(typeof text2 === "string", "requires settings text");
@@ -47109,7 +47132,17 @@ function hashClaudeSettingsReplacement(text2, budget) {
 function captureClaudeSettings(path, budget = { remaining: 256 * 1024 * 1024 }) {
   return { path, hashMode: "claude-settings-v1", sha256: settingsDigest(readSettings(path, budget)) };
 }
-var CLAUDE_SETTINGS_WITNESS_LIMITS, sameFile = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, BOOLEAN_PREFERENCES, ENUM_PREFERENCES, BUILTIN_MODEL_SELECTIONS;
+function captureClaudeSettingsV2(path, budget = { remaining: 256 * 1024 * 1024 }) {
+  return { path, hashMode: "claude-settings-v2", sha256: settingsDigest(readSettings(path, budget), 2) };
+}
+function hashClaudeSettingsReplacementV2(text2, budget) {
+  need2(typeof text2 === "string", "requires settings text");
+  const bytes = Buffer.byteLength(text2);
+  need2(bytes <= CLAUDE_SETTINGS_WITNESS_LIMITS.bytes && Number.isSafeInteger(budget.remaining) && budget.remaining >= bytes, "exceeds its byte limit");
+  budget.remaining -= bytes;
+  return settingsDigest(text2, 2);
+}
+var CLAUDE_SETTINGS_WITNESS_LIMITS, sameFile = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, BOOLEAN_PREFERENCES, ENUM_PREFERENCES, BUILTIN_MODEL_SELECTIONS, PERSISTED_EFFORT_LEVELS;
 var init_claude_settings_witness = __esm(() => {
   CLAUDE_SETTINGS_WITNESS_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
   BOOLEAN_PREFERENCES = new Set([
@@ -47163,6 +47196,7 @@ var init_claude_settings_witness = __esm(() => {
     "claude-opus-4-6[1m]",
     "claude-sonnet-4-6[1m]"
   ]);
+  PERSISTED_EFFORT_LEVELS = new Set(["low", "medium", "high", "xhigh"]);
 });
 
 // src/lib/agent-integration.ts
@@ -48665,9 +48699,13 @@ function textField(value) {
   need3(value?.kind === "string" && value.value.length > 0 && !/[\x00-\x1f\x7f]/.test(value.value), "contains an invalid recognized field");
   return value.value;
 }
-function normalizeRow(row) {
-  if (!exactKeys(row, ["source", "installLocation", "lastUpdated"]))
-    return;
+function normalizeRow(row, version2 = 1) {
+  if (!exactKeys(row, ["source", "installLocation", "lastUpdated"])) {
+    if (version2 !== 2 || !exactKeys(row, ["source", "installLocation", "lastUpdated", "autoUpdate"]))
+      return;
+    const autoUpdate = field(row, "autoUpdate");
+    need3(autoUpdate?.kind === "literal" && (autoUpdate.value === "true" || autoUpdate.value === "false"), "contains an invalid automatic-update preference");
+  }
   const source = field(row, "source");
   if (source?.kind !== "object")
     return;
@@ -48694,6 +48732,13 @@ function captureClaudeMarketplaceRegistry(path, budget = { remaining: 256 * 1024
   const sha2562 = createHash11("sha256").update("hasna.skills.claude-marketplace-registry.v1\x00").update(JSON.stringify(value)).digest("hex");
   return { path, hashMode: "claude-marketplace-registry", sha256: sha2562 };
 }
+function captureClaudeMarketplaceRegistryV2(path, budget = { remaining: 256 * 1024 * 1024 }) {
+  const value = parse10(readRegistry2(path, budget));
+  for (const [, row] of value.entries)
+    normalizeRow(row, 2);
+  const sha2562 = createHash11("sha256").update("hasna.skills.claude-marketplace-registry.v2\x00").update(JSON.stringify(value)).digest("hex");
+  return { path, hashMode: "claude-marketplace-registry-v2", sha256: sha2562 };
+}
 var CLAUDE_MARKETPLACE_REGISTRY_LIMITS, sameFile2 = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, field = (object7, key) => object7.entries.find(([name]) => name === key)?.[1];
 var init_claude_marketplace_registry = __esm(() => {
   CLAUDE_MARKETPLACE_REGISTRY_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
@@ -48809,18 +48854,18 @@ function read(path, changes) {
   return readFileSync14(path, "utf8");
 }
 function projected(source, changes, budget = discoveryByteBudget()) {
-  if (source.hashMode === "claude-settings-v1") {
+  if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2") {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256))
       throw new Error("Claude settings witnesses require exact typed metadata");
-    const current = captureClaudeSettings(source.path, budget).sha256;
+    const current = (source.hashMode === "claude-settings-v2" ? captureClaudeSettingsV2 : captureClaudeSettings)(source.path, budget).sha256;
     if (current !== source.sha256)
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
-    return changes?.has(source.path) ? hashClaudeSettingsReplacement(changes.get(source.path), budget) : current;
+    return changes?.has(source.path) ? (source.hashMode === "claude-settings-v2" ? hashClaudeSettingsReplacementV2 : hashClaudeSettingsReplacement)(changes.get(source.path), budget) : current;
   }
-  if (source.hashMode === "claude-marketplace-registry") {
+  if (source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256) || changes?.has(source.path))
       throw new Error("Claude marketplace witnesses require an exact reviewed registry without synthetic changes");
-    const sha2562 = captureClaudeMarketplaceRegistry(source.path, budget).sha256;
+    const sha2562 = (source.hashMode === "claude-marketplace-registry-v2" ? captureClaudeMarketplaceRegistryV2 : captureClaudeMarketplaceRegistry)(source.path, budget).sha256;
     if (sha2562 !== source.sha256)
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
     return sha2562;
@@ -48877,9 +48922,9 @@ function verifyAgentDiscovery(binding, codexRecovery) {
     safe4(root);
 }
 function assertMarketplaceBinding(binding, source) {
-  if (source.hashMode === "claude-settings-v1" && (binding.agent !== "claude" || binding.method !== "reviewed" || basename7(source.path) !== "settings.json"))
+  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2") && (binding.agent !== "claude" || binding.method !== "reviewed" || basename7(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
-  if (source.hashMode === "claude-marketplace-registry" && (binding.agent !== "claude" || binding.method !== "reviewed"))
+  if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
 }
 function agentDiscoveryConfigPath(home, agent) {
@@ -48961,7 +49006,7 @@ function resolveAgentDiscovery(options) {
     if (review.sources.some((source) => source.format !== undefined || source.fields !== undefined))
       throw new Error("Explicit discovery reviews require full source-file hashes");
     verifyAgentDiscovery(supplied);
-    if (review.sources.some((source) => source.hashMode === "claude-settings-v1" && source.path !== canonical4(configPath)))
+    if (review.sources.some((source) => (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2") && source.path !== canonical4(configPath)))
       throw new Error("Semantic settings witnesses must name the configured Claude configuration source");
     if (!review.sources.some((source) => source.path === canonical4(configPath)))
       throw new Error("Discovery review must include the agent configuration source");

package/bin/migrate.js

@@ -7,7 +7,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.12",
+  version: "0.9.14",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -985,6 +985,18 @@ function rowToSkill(row) {
     ...row.replacement_slug ? { replacementSlug: String(row.replacement_slug) } : {}
   };
 }
+function rowToPublishedSelectionState(row) {
+  return {
+    slug: String(row.slug),
+    version: String(row.version),
+    current: row.skill_exists ? {
+      lifecycle: row.lifecycle === "archived" ? "archived" : "active",
+      ...row.tombstoned_at ? { tombstonedAt: dateString(row.tombstoned_at) } : {}
+    } : null,
+    versionBundleSha256: typeof row.bundle_sha256 === "string" ? row.bundle_sha256 : null,
+    bundleAvailable: Boolean(row.bundle_available)
+  };
+}
 function rowToPin(row) {
   return {
     orgId: String(row.org_id),
@@ -1057,6 +1069,13 @@ function rowToSkillVersion(row) {
   };
 }
 
+// src/lib/profile-limits.ts
+var MAX_PROFILE_SELECTIONS = 4096;
+var MAX_PROFILE_DOCUMENT_BYTES = 8 * 1024 * 1024;
+var MAX_SKILL_SESSION_ID_CHARS = 256;
+var PROFILE_SESSION_ENVELOPE_BYTES = MAX_PROFILE_SELECTIONS * 67 + MAX_SKILL_SESSION_ID_CHARS * 12 + 512;
+var MAX_RESOLVED_PROFILE_BYTES = MAX_PROFILE_DOCUMENT_BYTES - PROFILE_SESSION_ENVELOPE_BYTES;
+
 // src/server/types.ts
 class StaleLeaseGenerationError extends Error {
   runId;
@@ -1758,6 +1777,22 @@ class SqliteSkillsStore {
     const row = this.get("SELECT * FROM skills_versions WHERE org_id = ? AND slug = ? AND version = ? LIMIT 1", [principal.orgId, slug, version]);
     return row ? rowToSkillVersion(row) : null;
   }
+  async getPublishedSelectionStates(principal, selections2) {
+    if (selections2.length > MAX_PROFILE_SELECTIONS)
+      throw new RangeError("Published selection lookup exceeds the profile selection limit");
+    if (!selections2.length)
+      return [];
+    const requested = JSON.stringify(selections2.map(({ slug, version }) => ({ slug, version })));
+    return this.all(`SELECT json_extract(q.value, '$.slug') AS slug, json_extract(q.value, '$.version') AS version,
+         r.slug IS NOT NULL AS skill_exists, r.lifecycle, r.tombstoned_at,
+         v.bundle_sha256, b.sha256 IS NOT NULL AS bundle_available
+       FROM json_each(?) q
+       LEFT JOIN skills_registry r ON r.org_id = ? AND r.slug = json_extract(q.value, '$.slug')
+       LEFT JOIN skills_versions v ON v.org_id = ?
+         AND v.slug = json_extract(q.value, '$.slug') AND v.version = json_extract(q.value, '$.version')
+       LEFT JOIN skills_bundles b ON b.org_id = ? AND b.sha256 = v.bundle_sha256
+       ORDER BY CAST(q.key AS INTEGER)`, [requested, principal.orgId, principal.orgId, principal.orgId]).map(rowToPublishedSelectionState);
+  }
   async pinSkill(principal, slug, metadata = {}) {
     const row = this.get(`INSERT INTO skills_pins (org_id, principal, slug, pinned_at, metadata_json)
        VALUES (?, ?, ?, ?, ?)