@hasna/skills 0.9.9 → 0.9.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +26 -0
- package/bin/index.js +801 -667
- package/bin/mcp.js +21 -6
- package/bin/migrate.js +1 -1
- package/bin/server.js +1 -1
- package/bin/worker.js +1 -1
- package/dist/index.js +268 -197
- package/dist/lib/agent-codex-trust.d.ts +42 -0
- package/dist/lib/agent-discovery.d.ts +2 -1
- package/dist/lib/agent-integration.d.ts +2 -0
- package/dist/lib/codex-hook-discovery-recovery.d.ts +25 -0
- package/dist/lib/codex-hook-policy-recovery.d.ts +16 -0
- package/dist/lib/codex-hook-trust-identity.d.ts +11 -0
- package/dist/sdk/index.js +290 -219
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -134,6 +134,32 @@ refuse without a configuration write. Enrollment uses a short-lived native
|
|
|
134
134
|
app-server and makes hooks eligible for new Codex processes. Existing sessions
|
|
135
135
|
retain their own configuration; use their native hook controls to refresh them.
|
|
136
136
|
|
|
137
|
+
When an explicit discovery review includes the full Codex configuration file,
|
|
138
|
+
the exact native trust writes change that file's byte hash. Enrollment verifies
|
|
139
|
+
those writes and completes its journal with `bindingRefreshRequired: true`.
|
|
140
|
+
This reports native trust eligibility only: ordinary managed context remains
|
|
141
|
+
blocked, and the discovery policy is unchanged. Review the current full file
|
|
142
|
+
again and plan `skills hook install --agent codex --discovery-inputs <review>
|
|
143
|
+
--command <same-absolute-command> --json`. Verify that the plan changes only the
|
|
144
|
+
discovery policy, then repeat with `--apply`. Keep the same command and native
|
|
145
|
+
home. The ordinary bridge must then pass, and a fresh `skills hook trust
|
|
146
|
+
--agent codex --json` must report zero planned changes and
|
|
147
|
+
`bindingRefreshRequired: false`. Verify context in a new native session after
|
|
148
|
+
these checks; an enrollment receipt does not prove context was consumed.
|
|
149
|
+
|
|
150
|
+
If an interrupted journal's policy later changed only in reviewed Claude
|
|
151
|
+
discovery roots/sources, `skills hook trust reconcile --agent codex --journal
|
|
152
|
+
<path> --review-claude-discovery <evidence-reference> --json` can preview that
|
|
153
|
+
specific recovery. Supply all five package provenance flags shown by
|
|
154
|
+
`skills hook trust reconcile --help` for the current running Skills release.
|
|
155
|
+
The old absolute hook command remains bound to its original package bytes;
|
|
156
|
+
recovery reads that package as evidence without executing it. Review the full
|
|
157
|
+
policy hashes, exact discovery additions/removals, journal, current package,
|
|
158
|
+
configuration and complete native inventory in the private preview. Repeat
|
|
159
|
+
the same command with `--recovery-plan-digest <reviewed-digest>` to record the
|
|
160
|
+
receipt. Any unreviewed change refuses. This mode preserves the policy and
|
|
161
|
+
native configuration and cannot be combined with `--supersede-binding`.
|
|
162
|
+
|
|
137
163
|
Each supported agent gets one small `skills-cli` native skill containing CLI
|
|
138
164
|
instructions, without a copied catalogue. Claude's native Skill tool admits
|
|
139
165
|
that bridge after other copies are retired. Prompt guards verify the owned
|