@hasna/skills 0.9.14 → 0.9.16

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.9.14",
+    version: "0.9.16",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -48796,13 +48796,24 @@ var init_codex_hook_trust_files = () => {};
 // src/lib/codex-hook-trust-layout.ts
 var init_codex_hook_trust_layout = () => {};
 
+// src/lib/codex-hook-additions-review.ts
+var events, matchedEvents, proofs;
+var init_codex_hook_additions_review = __esm(() => {
+  init_codex_hook_trust_files();
+  init_codex_hook_trust_layout();
+  events = { UserPromptSubmit: ["userPromptSubmit", "user_prompt_submit"], SessionStart: ["sessionStart", "session_start"], SubagentStart: ["subagentStart", "subagent_start"] };
+  matchedEvents = { ...events, PreToolUse: ["preToolUse", "pre_tool_use"] };
+  proofs = new WeakMap;
+});
+
 // src/lib/codex-hook-discovery-recovery.ts
 import { createHash as createHash13 } from "crypto";
 function assertCodexHookDiscoveryRecovery(binding, witness) {
-  const proof = proofs.get(witness);
+  const proof = proofs2.get(witness);
   need4(!!proof && binding.agent === "codex" && witness.discoverySha256 === sha(JSON.stringify(binding)), "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
   unchanged2(proof.before);
   unchanged2(proof.current);
+  proof.recheckAdditions();
 }
 function verifiesCodexHookDiscoverySource(binding, source, currentDigest, witness) {
   if (!witness || source.path !== witness.configPath || source.hashMode !== "bytes")
@@ -48811,17 +48822,19 @@ function verifiesCodexHookDiscoverySource(binding, source, currentDigest, witnes
   need4(source.sha256 === witness.beforeSha256 && currentDigest === witness.currentSha256, "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
   return true;
 }
-var sha = (text2) => createHash13("sha256").update(text2).digest("hex"), proofs;
+var sha = (text2) => createHash13("sha256").update(text2).digest("hex"), proofs2;
 var init_codex_hook_discovery_recovery = __esm(() => {
   init_codex_hook_trust_files();
   init_codex_hook_trust_layout();
-  proofs = new WeakMap;
+  init_codex_hook_additions_review();
+  proofs2 = new WeakMap;
 });
 
 // src/lib/agent-discovery.ts
 import { createHash as createHash14 } from "crypto";
 import { lstatSync as lstatSync16, readFileSync as readFileSync14, readdirSync as readdirSync6, realpathSync as realpathSync3 } from "fs";
 import { basename as basename7, dirname as dirname14, isAbsolute as isAbsolute13, join as join23, resolve as resolve13, sep as sep4 } from "path";
+import { isDeepStrictEqual as isDeepStrictEqual2 } from "util";
 function parseConfig(text2, path, toml = false) {
   try {
     const value = toml ? Bun.TOML.parse(text2) : JSON.parse(text2);
@@ -48996,6 +49009,19 @@ function resolveAgentDiscovery(options) {
       }
     }
   }
+  if (options.reviewed === undefined && options.retainedReview !== undefined) {
+    const retained = options.retainedReview;
+    if (retained.agent !== agent || retained.method !== "reviewed")
+      unresolved("invalid retained review");
+    verifyAgentDiscovery(retained);
+    if (!retained.sources.some((source) => source.path === canonical4(configPath) && source.format === undefined && source.fields === undefined))
+      unresolved("retained review is missing the full agent configuration source");
+    if (retained.sources.some((source) => (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2") && source.path !== canonical4(configPath)))
+      unresolved("retained settings witness names another configuration source");
+    if (sources.some((source) => !retained.sources.some((saved) => isDeepStrictEqual2(saved, source))) || [...roots].some((root) => !retained.roots.includes(root)) || agent === "gemini" && JSON.stringify(retained.builtinNames) !== JSON.stringify(builtinNames))
+      unresolved("retained review is missing current runtime discovery coverage");
+    return retained;
+  }
   if (options.reviewed && (options.reviewed.version !== 1 || !Array.isArray(options.reviewed.agents) || options.reviewed.agents.some((item) => !item || typeof item !== "object") || new Set(options.reviewed.agents.map((item) => item.agent)).size !== options.reviewed.agents.length))
     throw new Error("Invalid --discovery-inputs version or agents");
   const review = options.reviewed?.agents.find((item) => item.agent === agent);
@@ -57332,7 +57358,7 @@ var init_execution_grants = __esm(() => {
 });
 
 // src/lib/execution-grant-client.ts
-import { isDeepStrictEqual as isDeepStrictEqual2 } from "util";
+import { isDeepStrictEqual as isDeepStrictEqual3 } from "util";
 function id(value) {
   if (!grantIdentifier(value))
     throw new Error("Invalid execution grant profile or revision identifier.");
@@ -57375,7 +57401,7 @@ async function resolveExecutionGrant(input2) {
   if (!grantRecord(value) || Object.keys(value).length !== 3 || !grantIdentifier(value.policyRevision) || !grantIdentifier(value.grantId) || !grantRecord(value.bindings)) {
     throw new SkillSelectionError("INVALID_EXECUTION_GRANT", "The Skills API returned an invalid execution grant.");
   }
-  if (!isDeepStrictEqual2(value.bindings.selection, snapshot2.selection) || !isDeepStrictEqual2(value.bindings.consumer, snapshot2.consumer)) {
+  if (!isDeepStrictEqual3(value.bindings.selection, snapshot2.selection) || !isDeepStrictEqual3(value.bindings.consumer, snapshot2.consumer)) {
     throw new SkillSelectionError("EXECUTION_GRANT_SCOPE_MISMATCH", "The Skills API returned a grant for a different selection or consumer.");
   }
   return value;
@@ -59783,17 +59809,17 @@ var WSContext = class {
     if (typeof args[0] === "function") {
       const [createEvents, options] = args;
       return async function upgradeWebSocket(c, next) {
-        const events = await createEvents(c);
-        const result = await handler(c, events, options);
+        const events2 = await createEvents(c);
+        const result = await handler(c, events2, options);
         if (result) {
           return result;
         }
         await next();
       };
     } else {
-      const [c, events, options] = args;
+      const [c, events2, options] = args;
       return (async () => {
-        const upgraded = await handler(c, events, options);
+        const upgraded = await handler(c, events2, options);
         if (!upgraded) {
           throw new Error("Failed to upgrade WebSocket");
         }
@@ -60990,7 +61016,7 @@ var init_dist2 = __esm(() => {
     "sec-websocket-extensions",
     "sec-websocket-protocol"
   ]);
-  upgradeWebSocket = defineWebSocketHelper(async (c, events, options) => {
+  upgradeWebSocket = defineWebSocketHelper(async (c, events2, options) => {
     if (c.req.header("upgrade")?.toLowerCase() !== "websocket")
       return;
     const env = c.env;
@@ -61027,7 +61053,7 @@ var init_dist2 = __esm(() => {
         url: new URL(c.req.url)
       };
       try {
-        events?.onOpen?.(new Event("open"), ctx);
+        events2?.onOpen?.(new Event("open"), ctx);
       } catch (e2) {
         (options?.onError ?? console.error)(e2);
       }
@@ -61035,7 +61061,7 @@ var init_dist2 = __esm(() => {
         const datas = Array.isArray(data) ? data : [data];
         for (const data2 of datas)
           try {
-            events?.onMessage?.(new MessageEvent("message", { data: isBinary ? data2 instanceof ArrayBuffer ? data2 : data2.buffer.slice(data2.byteOffset, data2.byteOffset + data2.byteLength) : typeof data2 === "string" ? data2 : Buffer.from(data2).toString("utf-8") }), ctx);
+            events2?.onMessage?.(new MessageEvent("message", { data: isBinary ? data2 instanceof ArrayBuffer ? data2 : data2.buffer.slice(data2.byteOffset, data2.byteOffset + data2.byteLength) : typeof data2 === "string" ? data2 : Buffer.from(data2).toString("utf-8") }), ctx);
           } catch (e2) {
             (options?.onError ?? console.error)(e2);
           }
@@ -61048,7 +61074,7 @@ var init_dist2 = __esm(() => {
       });
       ws.on("close", (code2, reason) => {
         try {
-          events?.onClose?.(new CloseEvent("close", {
+          events2?.onClose?.(new CloseEvent("close", {
             code: code2,
             reason: reason.toString()
           }), ctx);
@@ -61058,7 +61084,7 @@ var init_dist2 = __esm(() => {
       });
       ws.on("error", (error61) => {
         try {
-          events?.onError?.(new ErrorEvent("error", { error: error61 }), ctx);
+          events2?.onError?.(new ErrorEvent("error", { error: error61 }), ctx);
         } catch (e2) {
           (options?.onError ?? console.error)(e2);
         }

package/bin/migrate.js

@@ -7,7 +7,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.14",
+  version: "0.9.16",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24122,7 +24122,7 @@ var init_dist_es9 = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.14",
+  version: "0.9.16",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24125,7 +24125,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.14",
+  version: "0.9.16",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/index.js

@@ -9093,6 +9093,7 @@ function assertAgentPolicyCollections(policy) {
 import { createHash as createHash16 } from "crypto";
 import { lstatSync as lstatSync20, readFileSync as readFileSync16, readdirSync as readdirSync9, realpathSync as realpathSync4 } from "fs";
 import { basename as basename8, dirname as dirname16, isAbsolute as isAbsolute14, join as join26, resolve as resolve14, sep as sep5 } from "path";
+import { isDeepStrictEqual as isDeepStrictEqual3 } from "util";
 
 // node_modules/yaml/dist/index.js
 var composer = require_composer();
@@ -9610,7 +9611,7 @@ import { isAbsolute as isAbsolute11, join as join23, resolve as resolve11 } from
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.14",
+  version: "0.9.16",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -13369,7 +13370,15 @@ function planAgentIntegration(options) {
     validateProfile(profileId2);
     return [agent, { command, profileId: profileId2 }];
   }));
-  const discoveries = [...new Set(options.agents)].map((agent) => resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, canonical: (path) => canonicalAgentPath(path, aliases) }));
+  const retainedAgents = [];
+  const discoveries = [...new Set(options.agents)].map((agent) => {
+    const retainedReview = options.discoveryInputs === undefined && policy.bridge?.discovery?.[agent]?.method === "reviewed" ? policy.bridge.discovery[agent] : undefined;
+    if (retainedReview) {
+      assertManagedAgentBridge(agent, { home, dataDir: dataDir2, projectDir: options.projectDir ?? home });
+      retainedAgents.push(agent);
+    }
+    return resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, retainedReview, canonical: (path) => canonicalAgentPath(path, aliases) });
+  });
   const nativeSkills = inventoryNativeSkills(home, { includeVendor: true, guardHermes: options.agents.includes("hermes"), agents: options.agents, projectDir: options.projectDir, agentRoots: discoveries.flatMap((binding) => binding.roots.map((path) => ({ agent: binding.agent, path }))), allowRootAliases: options.allowRootAliases });
   const changes = [];
   for (const agent of [...new Set(options.agents)]) {
@@ -13454,7 +13463,7 @@ function planAgentIntegration(options) {
   if (JSON.stringify(policy) !== JSON.stringify(nextPolicy))
     changes.push({ path: policyPath, before: previousPolicy, after: serializedPolicy });
   recheckRootAliases(aliases);
-  return { dataDir: dataDir2, profileId, changes, nativeSkills, observedPolicy: { path: policyPath, before: previousPolicy }, discoveryBefore: discoveries, discoveryAfter, ...aliases.length ? { rootAliases: aliases } : {} };
+  return { dataDir: dataDir2, profileId, changes, nativeSkills, observedPolicy: { path: policyPath, before: previousPolicy }, discoveryBefore: discoveries, discoveryAfter, ...aliases.length ? { rootAliases: aliases } : {}, ...retainedAgents.length ? { retainedReviewChecks: { home, projectDir: options.projectDir ?? home, agents: retainedAgents } } : {} };
 }
 function planClaudeStopHookUpdate(options) {
   return planClaudeHookEventsUpdate({ ...options, events: ["Stop"] });
@@ -13573,6 +13582,8 @@ function applyAgentIntegration(plan) {
       parseManagedSkillPolicy(change.after);
   const aliases = plan.rootAliases ?? [];
   recheckRootAliases(aliases);
+  for (const agent of plan.retainedReviewChecks?.agents ?? [])
+    assertManagedAgentBridge(agent, { ...plan.retainedReviewChecks, dataDir: plan.dataDir });
   for (const agent of plan.managedAgentChecks?.agents ?? [])
     assertManagedAgentBridge(agent, { home: plan.managedAgentChecks.home, dataDir: plan.dataDir, projectDir: plan.managedAgentChecks.home });
   for (const binding of plan.discoveryBefore ?? []) {
@@ -16439,14 +16450,20 @@ function unchanged2(before) {
   need4(sameStat(before.stat, after.stat) && after.sha256 === before.sha256, "INPUT_CHANGED");
 }
 
+// src/lib/codex-hook-additions-review.ts
+var events = { UserPromptSubmit: ["userPromptSubmit", "user_prompt_submit"], SessionStart: ["sessionStart", "session_start"], SubagentStart: ["subagentStart", "subagent_start"] };
+var matchedEvents = { ...events, PreToolUse: ["preToolUse", "pre_tool_use"] };
+var proofs = new WeakMap;
+
 // src/lib/codex-hook-discovery-recovery.ts
 var sha2 = (text2) => createHash15("sha256").update(text2).digest("hex");
-var proofs = new WeakMap;
+var proofs2 = new WeakMap;
 function assertCodexHookDiscoveryRecovery(binding, witness) {
-  const proof = proofs.get(witness);
+  const proof = proofs2.get(witness);
   need4(!!proof && binding.agent === "codex" && witness.discoverySha256 === sha2(JSON.stringify(binding)), "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
   unchanged2(proof.before);
   unchanged2(proof.current);
+  proof.recheckAdditions();
 }
 function verifiesCodexHookDiscoverySource(binding, source, currentDigest, witness) {
   if (!witness || source.path !== witness.configPath || source.hashMode !== "bytes")
@@ -16567,7 +16584,10 @@ function rebindAgentDiscovery(binding, changes) {
   const budget = discoveryByteBudget();
   return { ...binding, sources: binding.sources.map((source) => {
     assertMarketplaceBinding(binding, source);
-    return { ...source, sha256: projected(source, changes, budget) };
+    const sha2562 = projected(source, changes, budget);
+    if (!changes.has(source.path) && sha2562 !== source.sha256)
+      throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
+    return { ...source, sha256: sha2562 };
   }) };
 }
 function captureDiscoveryByteSources(paths) {
@@ -16691,6 +16711,19 @@ function resolveAgentDiscovery(options) {
       }
     }
   }
+  if (options.reviewed === undefined && options.retainedReview !== undefined) {
+    const retained = options.retainedReview;
+    if (retained.agent !== agent || retained.method !== "reviewed")
+      unresolved("invalid retained review");
+    verifyAgentDiscovery(retained);
+    if (!retained.sources.some((source) => source.path === canonical4(configPath) && source.format === undefined && source.fields === undefined))
+      unresolved("retained review is missing the full agent configuration source");
+    if (retained.sources.some((source) => (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2") && source.path !== canonical4(configPath)))
+      unresolved("retained settings witness names another configuration source");
+    if (sources.some((source) => !retained.sources.some((saved) => isDeepStrictEqual3(saved, source))) || [...roots].some((root2) => !retained.roots.includes(root2)) || agent === "gemini" && JSON.stringify(retained.builtinNames) !== JSON.stringify(builtinNames))
+      unresolved("retained review is missing current runtime discovery coverage");
+    return retained;
+  }
   if (options.reviewed && (options.reviewed.version !== 1 || !Array.isArray(options.reviewed.agents) || options.reviewed.agents.some((item) => !item || typeof item !== "object") || new Set(options.reviewed.agents.map((item) => item.agent)).size !== options.reviewed.agents.length))
     throw new Error("Invalid --discovery-inputs version or agents");
   const review = options.reviewed?.agents.find((item) => item.agent === agent);

package/dist/lib/agent-codex-trust.d.ts

@@ -71,7 +71,8 @@ export declare function reconcileCodexNativeHooks(options: CodexNativeHookReconc
                 hooksPath: string;
                 hooksSha256: string;
             };
-            additions: any[];
+            additions: any;
+            version?: number | undefined;
         } | undefined;
         configDiscoveryRecovery?: import("./codex-hook-discovery-recovery.js").CodexHookDiscoveryRecovery | undefined;
         version: number;

package/dist/lib/agent-discovery.d.ts

@@ -46,5 +46,6 @@ export declare function resolveAgentDiscovery(options: {
     home: string;
     agent: IntegrationAgent;
     reviewed?: ReviewedDiscoveryInputs;
+    retainedReview?: AgentDiscoveryBinding;
     canonical?: (path: string) => string;
 }): AgentDiscoveryBinding;

package/dist/lib/agent-integration.d.ts

@@ -56,6 +56,11 @@ export interface AgentIntegrationPlan {
         home: string;
         agents: IntegrationAgent[];
     };
+    retainedReviewChecks?: {
+        home: string;
+        projectDir: string;
+        agents: IntegrationAgent[];
+    };
 }
 /** Parse the reviewed exact-target binding used by native migration. Paths are
  * deliberately project-relative so a manifest cannot silently select another

package/dist/lib/codex-hook-additions-review.d.ts

@@ -4,6 +4,25 @@ export interface NativeHookAdditionsRecovery {
     path: string;
     reviewedPlanDigest?: string;
 }
+/** Internal capability, not a caller-supplied config override. */
+export interface ReviewedNativeHookAdditions {
+    readonly reviewSha256: string;
+}
+type JournalHook = {
+    key: string;
+    currentHash: string;
+};
+type TrustState = Readonly<{
+    trusted_hash: string;
+    enabled?: true;
+}>;
+type AddedTrustState = Readonly<{
+    key: string;
+    state: TrustState;
+}>;
+/** Rebind the proof to this exact journal transition and recheck every source.
+ * A serialized/cloned receipt can never create a discovery exception. */
+export declare function readReviewedAdditionTrustStates(proof: ReviewedNativeHookAdditions, before: Snapshot, current: Snapshot, journalHooks: JournalHook[]): readonly AddedTrustState[];
 /** An explicit, private review of a later producer's append-only hook change.
  * The producer backups must themselves describe exactly the completed journal
  * operation. Neither a claimed receipt nor a matching raw hash grants authority
@@ -25,6 +44,7 @@ export declare function reviewNativeHookAdditions(options: {
 }): {
     hooks: any[];
     recheck: () => void;
+    trustProof: ReviewedNativeHookAdditions;
     receipt: {
         reviewPath: string;
         reviewSha256: string;
@@ -36,7 +56,8 @@ export declare function reviewNativeHookAdditions(options: {
             hooksPath: string;
             hooksSha256: string;
         };
-        additions: any[];
+        additions: any;
+        version?: number | undefined;
     };
 };
 export {};

package/dist/lib/codex-hook-discovery-recovery.d.ts

@@ -1,5 +1,6 @@
 import type { AgentDiscoveryBinding, DiscoverySource } from "./agent-discovery.js";
 import { type snapshot } from "./codex-hook-trust-files.js";
+import { type ReviewedNativeHookAdditions } from "./codex-hook-additions-review.js";
 type Snapshot = ReturnType<typeof snapshot>;
 /** A receipt projection, not an override supplied by a CLI caller. Only this
  * module can create the in-memory proof used by discovery verification. */
@@ -17,7 +18,7 @@ export interface CodexHookDiscoveryRecovery {
 export declare function createCodexHookDiscoveryRecovery(binding: AgentDiscoveryBinding, before: Snapshot, current: Snapshot, hooks: Array<{
     key: string;
     currentHash: string;
-}>): CodexHookDiscoveryRecovery | undefined;
+}>, additions?: ReviewedNativeHookAdditions): CodexHookDiscoveryRecovery | undefined;
 export declare function assertCodexHookDiscoveryRecovery(binding: AgentDiscoveryBinding, witness: CodexHookDiscoveryRecovery): void;
 /** Verify this one historical byte witness using the already-validated native
  * transition. Every other source still uses its ordinary current-file hash. */

package/dist/sdk/index.js

@@ -31310,17 +31310,17 @@ class JsonEventsStore {
   }
   async appendEvent(event) {
     await this.init();
-    const events = await this.readJson(this.eventsPath, []);
-    events.push(event);
-    await this.writeJson(this.eventsPath, events);
+    const events2 = await this.readJson(this.eventsPath, []);
+    events2.push(event);
+    await this.writeJson(this.eventsPath, events2);
     return event;
   }
   async appendEventOnce(event, options = {}) {
     await this.init();
-    const events = await this.readJson(this.eventsPath, []);
+    const events2 = await this.readJson(this.eventsPath, []);
     const dedupe = options.dedupe !== false;
     if (dedupe) {
-      const existing = findEventByIdentity(events, { id: event.id, dedupeKey: event.dedupeKey });
+      const existing = findEventByIdentity(events2, { id: event.id, dedupeKey: event.dedupeKey });
       if (existing) {
         return {
           event: existing,
@@ -31330,8 +31330,8 @@ class JsonEventsStore {
         };
       }
     }
-    events.push(event);
-    await this.writeJson(this.eventsPath, events);
+    events2.push(event);
+    await this.writeJson(this.eventsPath, events2);
     return {
       event,
       stored: true,
@@ -31341,13 +31341,13 @@ class JsonEventsStore {
   }
   async listEvents(options = {}) {
     await this.init();
-    const events = await this.readJson(this.eventsPath, []);
-    return queryEvents(events, options);
+    const events2 = await this.readJson(this.eventsPath, []);
+    return queryEvents(events2, options);
   }
   async listEventsPage(options = {}) {
     await this.init();
-    const events = await this.readJson(this.eventsPath, []);
-    const queried = queryEvents(events, {
+    const events2 = await this.readJson(this.eventsPath, []);
+    const queried = queryEvents(events2, {
       eventId: options.eventId,
       source: options.source,
       type: options.type
@@ -31365,8 +31365,8 @@ class JsonEventsStore {
     };
   }
   async findEventByIdentity(identity3) {
-    const events = await this.listEvents();
-    return findEventByIdentity(events, identity3);
+    const events2 = await this.listEvents();
+    return findEventByIdentity(events2, identity3);
   }
   async appendDelivery(result) {
     await this.init();
@@ -31471,8 +31471,8 @@ function normalizeEventPageLimit(limit) {
     throw new Error(`Event page limit must be a positive integer, got ${limit}`);
   return Math.min(limit, MAX_EVENT_PAGE_LIMIT);
 }
-function queryEvents(events, options) {
-  let rows = events;
+function queryEvents(events2, options) {
+  let rows = events2;
   if (options.eventId)
     rows = rows.filter((event) => event.id === options.eventId);
   if (options.source)
@@ -31491,8 +31491,8 @@ function assertCursorFilter(name, cursorValue, optionValue) {
   if (cursorValue !== optionValue)
     throw new Error(`Local JSON event cursor ${name} filter mismatch`);
 }
-function findEventByIdentity(events, identity3) {
-  return events.find((event) => identity3.id !== undefined && event.id === identity3.id || identity3.dedupeKey !== undefined && event.dedupeKey === identity3.dedupeKey);
+function findEventByIdentity(events2, identity3) {
+  return events2.find((event) => identity3.id !== undefined && event.id === identity3.id || identity3.dedupeKey !== undefined && event.dedupeKey === identity3.dedupeKey);
 }
 function buildSignatureBase(timestamp, body4) {
   return `${timestamp}.${body4}`;
@@ -32125,16 +32125,16 @@ class EventsClient {
   async listEventsPage(options = {}) {
     if (this.store.listEventsPage)
       return this.store.listEventsPage(options);
-    const events = queryClientEvents(await this.store.listEvents(), {
+    const events2 = queryClientEvents(await this.store.listEvents(), {
       eventId: options.eventId,
       source: options.source,
       type: options.type
     });
     const offset = decodeLocalJsonEventCursor(options.cursor, options);
     const limit = normalizeEventPageLimit(options.limit);
-    const pageEvents = events.slice(offset, offset + limit);
+    const pageEvents = events2.slice(offset, offset + limit);
     const nextOffset = offset + pageEvents.length;
-    const hasMore = nextOffset < events.length;
+    const hasMore = nextOffset < events2.length;
     return {
       events: pageEvents,
       cursor: options.cursor,
@@ -32265,8 +32265,8 @@ class EventsClient {
     return createDeliveryResult(event, channel, attempts);
   }
 }
-function queryClientEvents(events, options) {
-  let rows = events;
+function queryClientEvents(events2, options) {
+  let rows = events2;
   if (options.eventId)
     rows = rows.filter((event) => event.id === options.eventId);
   if (options.source)
@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.14",
+  version: "0.9.16",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -37704,6 +37704,7 @@ function isOwnedCliBridge(path, expectedPaths) {
 import { createHash as createHash15 } from "crypto";
 import { lstatSync as lstatSync17, readFileSync as readFileSync12, readdirSync as readdirSync6, realpathSync as realpathSync3 } from "fs";
 import { basename as basename6, dirname as dirname13, isAbsolute as isAbsolute14, join as join20, resolve as resolve13, sep as sep3 } from "path";
+import { isDeepStrictEqual as isDeepStrictEqual3 } from "util";
 
 // node_modules/yaml/dist/index.js
 var composer = require_composer();
@@ -40267,14 +40268,20 @@ function unchanged2(before) {
   need4(sameStat(before.stat, after.stat) && after.sha256 === before.sha256, "INPUT_CHANGED");
 }
 
+// src/lib/codex-hook-additions-review.ts
+var events = { UserPromptSubmit: ["userPromptSubmit", "user_prompt_submit"], SessionStart: ["sessionStart", "session_start"], SubagentStart: ["subagentStart", "subagent_start"] };
+var matchedEvents = { ...events, PreToolUse: ["preToolUse", "pre_tool_use"] };
+var proofs = new WeakMap;
+
 // src/lib/codex-hook-discovery-recovery.ts
 var sha = (text2) => createHash14("sha256").update(text2).digest("hex");
-var proofs = new WeakMap;
+var proofs2 = new WeakMap;
 function assertCodexHookDiscoveryRecovery(binding, witness) {
-  const proof = proofs.get(witness);
+  const proof = proofs2.get(witness);
   need4(!!proof && binding.agent === "codex" && witness.discoverySha256 === sha(JSON.stringify(binding)), "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
   unchanged2(proof.before);
   unchanged2(proof.current);
+  proof.recheckAdditions();
 }
 function verifiesCodexHookDiscoverySource(binding, source, currentDigest, witness) {
   if (!witness || source.path !== witness.configPath || source.hashMode !== "bytes")
@@ -40395,7 +40402,10 @@ function rebindAgentDiscovery(binding, changes) {
   const budget = discoveryByteBudget();
   return { ...binding, sources: binding.sources.map((source) => {
     assertMarketplaceBinding(binding, source);
-    return { ...source, sha256: projected(source, changes, budget) };
+    const sha2562 = projected(source, changes, budget);
+    if (!changes.has(source.path) && sha2562 !== source.sha256)
+      throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
+    return { ...source, sha256: sha2562 };
   }) };
 }
 function captureDiscoveryByteSources(paths) {
@@ -40519,6 +40529,19 @@ function resolveAgentDiscovery(options) {
       }
     }
   }
+  if (options.reviewed === undefined && options.retainedReview !== undefined) {
+    const retained = options.retainedReview;
+    if (retained.agent !== agent || retained.method !== "reviewed")
+      unresolved("invalid retained review");
+    verifyAgentDiscovery(retained);
+    if (!retained.sources.some((source) => source.path === canonical4(configPath) && source.format === undefined && source.fields === undefined))
+      unresolved("retained review is missing the full agent configuration source");
+    if (retained.sources.some((source) => (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2") && source.path !== canonical4(configPath)))
+      unresolved("retained settings witness names another configuration source");
+    if (sources.some((source) => !retained.sources.some((saved) => isDeepStrictEqual3(saved, source))) || [...roots].some((root2) => !retained.roots.includes(root2)) || agent === "gemini" && JSON.stringify(retained.builtinNames) !== JSON.stringify(builtinNames))
+      unresolved("retained review is missing current runtime discovery coverage");
+    return retained;
+  }
   if (options.reviewed && (options.reviewed.version !== 1 || !Array.isArray(options.reviewed.agents) || options.reviewed.agents.some((item) => !item || typeof item !== "object") || new Set(options.reviewed.agents.map((item) => item.agent)).size !== options.reviewed.agents.length))
     throw new Error("Invalid --discovery-inputs version or agents");
   const review = options.reviewed?.agents.find((item) => item.agent === agent);
@@ -40712,7 +40735,7 @@ export default async ({ directory }) => {
 }
 
 // src/lib/agent-codex.ts
-import { isDeepStrictEqual as isDeepStrictEqual3 } from "util";
+import { isDeepStrictEqual as isDeepStrictEqual4 } from "util";
 var CODEX_SKILL_CONFIG_SECTIONS = /^\[\[skills\.config\]\][^\n]*(?:\n(?!\s*\[)[^\n]*)*/gm;
 function assertCodexPathConfigEditable(text2) {
   const before = Bun.TOML.parse(text2);
@@ -40722,7 +40745,7 @@ function assertCodexPathConfigEditable(text2) {
   delete expected.skills.config;
   try {
     const withoutSections = Bun.TOML.parse(text2.replace(CODEX_SKILL_CONFIG_SECTIONS, ""));
-    if (isDeepStrictEqual3(withoutSections, expected))
+    if (isDeepStrictEqual4(withoutSections, expected))
       return;
   } catch {}
   throw new Error("Codex skill path controls require ordinary [[skills.config]] TOML tables; preserve and convert inline or dotted config arrays before running skills hook install");
@@ -40760,7 +40783,7 @@ function disableCodexBundledSkills(text2) {
   const candidates = new Set;
   const consider = (candidate2) => {
     try {
-      if (isDeepStrictEqual3(Bun.TOML.parse(candidate2), expected))
+      if (isDeepStrictEqual4(Bun.TOML.parse(candidate2), expected))
         candidates.add(candidate2);
     } catch {}
   };
@@ -41218,7 +41241,15 @@ function planAgentIntegration(options) {
     validateProfile(profileId2);
     return [agent, { command, profileId: profileId2 }];
   }));
-  const discoveries = [...new Set(options.agents)].map((agent) => resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, canonical: (path) => canonicalAgentPath(path, aliases) }));
+  const retainedAgents = [];
+  const discoveries = [...new Set(options.agents)].map((agent) => {
+    const retainedReview = options.discoveryInputs === undefined && policy.bridge?.discovery?.[agent]?.method === "reviewed" ? policy.bridge.discovery[agent] : undefined;
+    if (retainedReview) {
+      assertManagedAgentBridge(agent, { home, dataDir: dataDir2, projectDir: options.projectDir ?? home });
+      retainedAgents.push(agent);
+    }
+    return resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, retainedReview, canonical: (path) => canonicalAgentPath(path, aliases) });
+  });
   const nativeSkills = inventoryNativeSkills(home, { includeVendor: true, guardHermes: options.agents.includes("hermes"), agents: options.agents, projectDir: options.projectDir, agentRoots: discoveries.flatMap((binding) => binding.roots.map((path) => ({ agent: binding.agent, path }))), allowRootAliases: options.allowRootAliases });
   const changes = [];
   for (const agent of [...new Set(options.agents)]) {
@@ -41303,7 +41334,7 @@ function planAgentIntegration(options) {
   if (JSON.stringify(policy) !== JSON.stringify(nextPolicy))
     changes.push({ path: policyPath, before: previousPolicy, after: serializedPolicy });
   recheckRootAliases(aliases);
-  return { dataDir: dataDir2, profileId, changes, nativeSkills, observedPolicy: { path: policyPath, before: previousPolicy }, discoveryBefore: discoveries, discoveryAfter, ...aliases.length ? { rootAliases: aliases } : {} };
+  return { dataDir: dataDir2, profileId, changes, nativeSkills, observedPolicy: { path: policyPath, before: previousPolicy }, discoveryBefore: discoveries, discoveryAfter, ...aliases.length ? { rootAliases: aliases } : {}, ...retainedAgents.length ? { retainedReviewChecks: { home, projectDir: options.projectDir ?? home, agents: retainedAgents } } : {} };
 }
 function planClaudeStopHookUpdate(options) {
   return planClaudeHookEventsUpdate({ ...options, events: ["Stop"] });
@@ -41422,6 +41453,8 @@ function applyAgentIntegration(plan) {
       parseManagedSkillPolicy(change.after);
   const aliases = plan.rootAliases ?? [];
   recheckRootAliases(aliases);
+  for (const agent of plan.retainedReviewChecks?.agents ?? [])
+    assertManagedAgentBridge(agent, { ...plan.retainedReviewChecks, dataDir: plan.dataDir });
   for (const agent of plan.managedAgentChecks?.agents ?? [])
     assertManagedAgentBridge(agent, { home: plan.managedAgentChecks.home, dataDir: plan.dataDir, projectDir: plan.managedAgentChecks.home });
   for (const binding of plan.discoveryBefore ?? []) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.9.14",
+  "version": "0.9.16",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {