@hasna/skills 0.9.5 → 0.9.7

package/bin/index.js

@@ -36868,7 +36868,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.9.5",
+    version: "0.9.7",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -108033,7 +108033,7 @@ var init_codex_hook_rpc = __esm(() => {
 
 // src/lib/codex-hook-trust-layout.ts
 import { isDeepStrictEqual as isDeepStrictEqual5 } from "util";
-function codexTrustTextWitness(text3, keys3) {
+function codexTrustTextWitness(text3, keys3, canonicalize = true) {
   const parsed = Bun.TOML.parse(text3), wanted = new Set(keys3);
   const headers = [...text3.matchAll(/^[ \t]*(\[[^\r\n]+\])[ \t]*(#[^\r\n]*)?(?:\r?\n|$)/gm)];
   if (headers.length > 512)
@@ -108105,9 +108105,19 @@ function codexTrustTextWitness(text3, keys3) {
   let result2 = text3;
   for (const span of replacements2.reverse())
     result2 = result2.slice(0, span.start) + span.comments + result2.slice(span.end);
-  return canonicalizeTableOrder(result2).split(/\r?\n/).filter((line) => line.trim()).join(`
+  return (canonicalize ? canonicalizeTableOrder(result2) : result2).split(/\r?\n/).filter((line) => line.trim()).join(`
 `);
 }
+function codexTrustReconcileWitness(text3, keys3) {
+  return codexTrustTextWitness(text3, keys3, false).replace(/[ \t]+$/gm, "");
+}
+function codexTrustUnmanagedSemantic(text3, keys3) {
+  const parsed = structuredClone(Bun.TOML.parse(text3));
+  for (const key of keys3)
+    if (parsed.hooks?.state?.[key] !== undefined)
+      delete parsed.hooks.state[key];
+  return JSON.stringify(stableSemantic(prune(parsed)));
+}
 var fail4 = () => new Error('CODEX_HOOK_TRUST_UNSUPPORTED_LAYOUT: preserve and convert hook trust to ordinary [hooks.state."<key>"] tables before enrollment'), prune = (value) => {
   if (value.hooks?.state && !Object.keys(value.hooks.state).length)
     delete value.hooks.state;
@@ -108119,11 +108129,23 @@ var fail4 = () => new Error('CODEX_HOOK_TRUST_UNSUPPORTED_LAYOUT: preserve and c
   if (!headers.length)
     return text3;
   const keys3 = headers.map((header) => header[1].trim());
-  if (keys3.some((key) => key.startsWith("[[") || keys3.filter((other) => other === key).length > 1))
-    return text3;
-  const plain = keys3.map((key) => key.slice(1, -1).trim());
-  if (plain.some((key, index) => plain.some((other, otherIndex) => index !== otherIndex && (other.startsWith(`${key}.`) || key.startsWith(`${other}.`)))))
+  const repeated = keys3.filter((key) => !key.startsWith("[[")).filter((key, index, simple2) => simple2.indexOf(key) !== index);
+  const arrayKeys = keys3.filter((key) => key.startsWith("[["));
+  const plain = keys3.map((key) => key.replace(/^\[\[?/, "").replace(/\]\]?$/, "").trim());
+  const parentChild = plain.some((key, index) => plain.some((other, otherIndex) => index !== otherIndex && (other.startsWith(`${key}.`) || key.startsWith(`${other}.`))));
+  if (repeated.length || parentChild)
     return text3;
+  if (!arrayKeys.length) {
+    const first2 = headers[0].index;
+    const prefix2 = text3.slice(0, first2);
+    const blocks2 = headers.map((header, index) => ({
+      key: header[1],
+      order: index,
+      text: text3.slice(header.index, headers[index + 1]?.index ?? text3.length)
+    }));
+    blocks2.sort((a, b) => a.key.localeCompare(b.key) || a.order - b.order);
+    return prefix2 + blocks2.map((block) => block.text).join("");
+  }
   const first = headers[0].index;
   const prefix = text3.slice(0, first);
   const blocks = headers.map((header, index) => ({
@@ -108131,8 +108153,15 @@ var fail4 = () => new Error('CODEX_HOOK_TRUST_UNSUPPORTED_LAYOUT: preserve and c
     order: index,
     text: text3.slice(header.index, headers[index + 1]?.index ?? text3.length)
   }));
-  blocks.sort((a, b) => a.key.localeCompare(b.key) || a.order - b.order);
-  return prefix + blocks.map((block) => block.text).join("");
+  const simple = blocks.filter((block) => !block.key.startsWith("[["));
+  const arrays = blocks.filter((block) => block.key.startsWith("[["));
+  return prefix + [...simple, ...arrays].map((block) => block.text).join("");
+}, stableSemantic = (value) => {
+  if (Array.isArray(value))
+    return value.map(stableSemantic);
+  if (value && typeof value === "object")
+    return Object.fromEntries(Object.keys(value).sort().map((key) => [key, stableSemantic(value[key])]));
+  return value;
 };
 var init_codex_hook_trust_layout = () => {};
 
@@ -108255,7 +108284,9 @@ async function reconcileCodexNativeHooks(options, connect = connectCodexHookRpc)
     need4(isDeepStrictEqual6(intent.hooks, admitted.filter((hook) => !hook.enabled || hook.trustStatus !== "trusted")), "RECONCILE_INTENT_HOOKS_CHANGED");
     need4(configBefore.sha256 === intent.beforeSha256 && hooksBefore.sha256 === intent.hooksSha256 && policyBefore.sha256 === intent.policySha256, "RECONCILE_JOURNAL_CHANGED");
     const currentConfig = snapshot(intent.configPath, true);
-    need4(codexTrustTextWitness(configBefore.text, intent.hooks.map((h) => h.key)) === codexTrustTextWitness(currentConfig.text, intent.hooks.map((h) => h.key)), "RECONCILE_UNRELATED_CONFIG_CHANGED");
+    const managedKeys = intent.hooks.map((h) => h.key);
+    need4(codexTrustReconcileWitness(configBefore.text, managedKeys) === codexTrustReconcileWitness(currentConfig.text, managedKeys), "RECONCILE_UNRELATED_CONFIG_CHANGED");
+    need4(codexTrustUnmanagedSemantic(configBefore.text, managedKeys) === codexTrustUnmanagedSemantic(currentConfig.text, managedKeys), "RECONCILE_UNRELATED_CONFIG_CHANGED");
     const before2 = structure(configBefore.text), current = structure(currentConfig.text), expectedConfig = structuredClone(before2);
     expectedConfig.hooks ??= {};
     expectedConfig.hooks.state ??= {};
@@ -108625,8 +108656,10 @@ function registerAgentIntegration(parent) {
       process.exitCode = 1;
     }
   });
-  const trust = hook.command("trust").requiredOption("--agent <agent>", "Native trust adapter (codex)").option("--codex-command <path>", "Installed Codex executable used for its native configuration API", "codex").option("--apply", "Enable and trust only the exact managed Skills hook identities", false).option("--plan-digest <sha256>", "Exact reviewed dry-run digest required with --apply").option("--json", "Output the native trust plan or receipt", false).description("Plan or enroll exact Skills hooks through Codex native trust controls").action(async (options) => {
+  const trust = hook.command("trust").option("--agent <agent>", "Native trust adapter (codex)").option("--codex-command <path>", "Installed Codex executable used for its native configuration API", "codex").option("--apply", "Enable and trust only the exact managed Skills hook identities", false).option("--plan-digest <sha256>", "Exact reviewed dry-run digest required with --apply").option("--json", "Output the native trust plan or receipt", false).description("Plan or enroll exact Skills hooks through Codex native trust controls").action(async (options) => {
     try {
+      if (!options.agent)
+        throw new Error("Native trust enrollment requires --agent codex");
       if (options.agent !== "codex")
         throw new Error("Native trust enrollment currently supports --agent codex only");
       const result2 = await enrollCodexNativeHooks({ codexCommand: options.codexCommand, apply: options.apply, reviewedPlanDigest: options.planDigest });

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.9.5",
+    version: "0.9.7",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {

package/bin/migrate.js

@@ -7,7 +7,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.5",
+  version: "0.9.7",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24122,7 +24122,7 @@ var init_dist_es9 = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.5",
+  version: "0.9.7",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24125,7 +24125,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.5",
+  version: "0.9.7",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/index.js

@@ -11448,7 +11448,7 @@ import { isAbsolute as isAbsolute10, join as join20, resolve as resolve10 } from
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.5",
+  version: "0.9.7",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/lib/codex-hook-trust-layout.d.ts

@@ -1,3 +1,9 @@
 /** Conservative admission and text witness, never a TOML writer. Native Codex
  * performs the versioned write; unrecognized inline/dotted trust shapes refuse. */
-export declare function codexTrustTextWitness(text: string, keys: string[]): string;
+export declare function codexTrustTextWitness(text: string, keys: string[], canonicalize?: boolean): string;
+/** Reconciliation witness: retain table/array order while tolerating only
+ * blank-line and line-ending formatting emitted by the native writer. */
+export declare function codexTrustReconcileWitness(text: string, keys: string[]): string;
+/** Parsed unmanaged TOML semantics. Arrays retain order; managed trust entries
+ * are excluded by exact journal key and all other keys/values remain bound. */
+export declare function codexTrustUnmanagedSemantic(text: string, keys: string[]): string;

package/dist/sdk/index.js

@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.9.5",
+  version: "0.9.7",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.9.5",
+  "version": "0.9.7",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {