@hasna/skills 0.9.9 → 0.9.11

package/dist/lib/agent-codex-trust.d.ts

@@ -1,5 +1,6 @@
 import { connectCodexHookRpc } from "./codex-hook-rpc.js";
 import { type ReviewedSkillsCli } from "./codex-hook-trust-identity.js";
+import { type ClaudeDiscoveryRecovery } from "./codex-hook-policy-recovery.js";
 export interface CodexNativeHookTrustOptions {
     home?: string;
     dataDir?: string;
@@ -24,6 +25,7 @@ export interface CodexNativeHookReconcileOptions {
     reviewedSkillsCli?: ReviewedSkillsCli;
     releaseProof?: SkillsCliReleaseProof;
     supersedeBinding?: boolean;
+    claudeDiscoveryRecovery?: ClaudeDiscoveryRecovery;
 }
 type Connect = typeof connectCodexHookRpc;
 /** Resolve an interrupted native write only after the native consumer and every
@@ -31,6 +33,44 @@ type Connect = typeof connectCodexHookRpc;
  * receipt for an already-effective operation so the ordinary apply guard can
  * stop refusing the same journal. */
 export declare function reconcileCodexNativeHooks(options: CodexNativeHookReconcileOptions, connect?: Connect): Promise<{
+    recoveryPlan?: {
+        reason?: string | undefined;
+        changes?: {
+            path: string;
+            before: any;
+            after: any;
+        }[] | undefined;
+        hooksSha256: string;
+        nativeConfigPath: any;
+        nativeVersion: string;
+        nativeInventorySha256: string;
+        recordedNativeInventorySha256: string;
+        boundSkillsCli: {
+            path: string;
+            version: string;
+            sha256: string;
+            manifestSha256: string;
+        };
+        recoveryCli: {
+            path: string;
+            version: string;
+            sha256: string;
+            manifestSha256: string;
+        };
+        releaseProof: SkillsCliReleaseProof | undefined;
+        configDiscoveryRecovery?: import("./codex-hook-discovery-recovery.js").CodexHookDiscoveryRecovery | undefined;
+        version: number;
+        kind: string;
+        journal: string;
+        journalIntentSha256: string;
+        stoppedSha256: string;
+        originalPlanDigest: any;
+        policyBeforeSha256: string;
+        policyCurrentSha256: string;
+        configBeforeSha256: string;
+        configCurrentSha256: string;
+    } | undefined;
+    recoveryPlanDigest?: string | undefined;
     version: number;
     status: string;
     reconciled: boolean;
@@ -41,6 +81,7 @@ export declare function reconcileCodexNativeHooks(options: CodexNativeHookReconc
     nativeVersion: string;
     nativeStateVerified: boolean;
     nativeTrustPending: boolean;
+    bindingRefreshRequired: boolean;
     nativeExecutionVerified: boolean;
     configSha256: string;
     hooksSha256: string;
@@ -86,6 +127,7 @@ export declare function enrollCodexNativeHooks(options?: CodexNativeHookTrustOpt
         trustStatus: any;
     }[];
     nativeEligible: boolean;
+    bindingRefreshRequired: boolean;
     transport: string;
     existingSessionsReloaded: boolean;
     nativeExecutionVerified: boolean;

package/dist/lib/agent-discovery.d.ts

@@ -1,6 +1,7 @@
 import type { IntegrationAgent } from "./agent-adapters.js";
 import { type DiscoveryDirectory } from "./agent-discovery-directories.js";
 import { type ManagedPluginRegistrationWitness } from "./plugin-discovery.js";
+import { type CodexHookDiscoveryRecovery } from "./codex-hook-discovery-recovery.js";
 export { captureDiscoveryDirectories, type DiscoveryDirectory } from "./agent-discovery-directories.js";
 export interface DiscoverySource {
     path: string;
@@ -28,7 +29,7 @@ export interface ReviewedDiscoveryInputs {
         pluginHooks: "reviewed-no-skill-injection";
     }>;
 }
-export declare function verifyAgentDiscovery(binding: AgentDiscoveryBinding): void;
+export declare function verifyAgentDiscovery(binding: AgentDiscoveryBinding, codexRecovery?: CodexHookDiscoveryRecovery): void;
 export declare function rebindAgentDiscovery(binding: AgentDiscoveryBinding, changes: Map<string, string>): AgentDiscoveryBinding;
 /** Capture full byte witnesses for reviewed source or executable files; never import or execute them. */
 export declare function captureDiscoveryByteSources(paths: string[]): DiscoverySource[];

package/dist/lib/agent-integration.d.ts

@@ -1,5 +1,6 @@
 import { type AgentDiscoveryBinding, type ReviewedDiscoveryInputs } from "./agent-discovery.js";
 import { type IntegrationAgent } from "./agent-adapters.js";
+import type { CodexHookDiscoveryRecovery } from "./codex-hook-discovery-recovery.js";
 export type { IntegrationAgent } from "./agent-adapters.js";
 export type ContextHookEvent = "UserPromptSubmit" | "SessionStart" | "SubagentStart";
 export interface AgentRootAlias {
@@ -120,6 +121,7 @@ export declare function assertManagedAgentBridge(agent: IntegrationAgent, option
     projectDir?: string;
     projectDirs?: string[];
     profileId?: string;
+    codexDiscoveryRecovery?: CodexHookDiscoveryRecovery;
 }): void;
 export declare function normalizeAgentHookPrompt(agent: IntegrationAgent, event: string, prompt: string): string;
 export declare function hookContextOutput(event: string, result: {

package/dist/lib/codex-hook-discovery-recovery.d.ts

@@ -0,0 +1,25 @@
+import type { AgentDiscoveryBinding, DiscoverySource } from "./agent-discovery.js";
+import { type snapshot } from "./codex-hook-trust-files.js";
+type Snapshot = ReturnType<typeof snapshot>;
+/** A receipt projection, not an override supplied by a CLI caller. Only this
+ * module can create the in-memory proof used by discovery verification. */
+export interface CodexHookDiscoveryRecovery {
+    readonly configPath: string;
+    readonly beforeSha256: string;
+    readonly currentSha256: string;
+    readonly discoverySha256: string;
+    readonly typedProjectionSha256: string;
+}
+/** Called after a complete journal/intent or the current reviewed native
+ * transaction and exact intended trust writes have been checked. Recheck those
+ * writes here so a raw hash alone can never
+ * grant this exception. Policy bytes and recorded sources remain unchanged. */
+export declare function createCodexHookDiscoveryRecovery(binding: AgentDiscoveryBinding, before: Snapshot, current: Snapshot, hooks: Array<{
+    key: string;
+    currentHash: string;
+}>): CodexHookDiscoveryRecovery | undefined;
+export declare function assertCodexHookDiscoveryRecovery(binding: AgentDiscoveryBinding, witness: CodexHookDiscoveryRecovery): void;
+/** Verify this one historical byte witness using the already-validated native
+ * transition. Every other source still uses its ordinary current-file hash. */
+export declare function verifiesCodexHookDiscoverySource(binding: AgentDiscoveryBinding, source: DiscoverySource, currentDigest: string | null, witness?: CodexHookDiscoveryRecovery): boolean;
+export {};

package/dist/lib/codex-hook-policy-recovery.d.ts

@@ -0,0 +1,16 @@
+export interface ClaudeDiscoveryRecovery {
+    /** Authoritative review/evidence reference explaining this exact transition. */
+    reason: string;
+    /** Omit to preview; supply the reviewed preview digest to record a receipt. */
+    reviewedPlanDigest?: string;
+}
+/** This admits one named transition, not a general "ignore other agents" mode.
+ * Both full policy hashes and these exact values enter the recovery plan. */
+export declare function reviewedClaudeDiscoveryChange(beforeText: string, currentText: string, options: ClaudeDiscoveryRecovery): {
+    reason: string;
+    changes: {
+        path: string;
+        before: any;
+        after: any;
+    }[];
+};

package/dist/lib/codex-hook-trust-identity.d.ts

@@ -5,6 +5,17 @@ export interface ReviewedSkillsCli {
     version: string;
     sha256: string;
 }
+/** Read an unchanged journal binding as evidence, never as executable recovery
+ * code. The caller separately binds and verifies the running recovery package. */
+export declare function inspectRecordedSkillsCli(command: string, expected: unknown): {
+    receipt: {
+        path: string;
+        version: string;
+        sha256: string;
+        manifestSha256: string;
+    };
+    recheck(): void;
+};
 export declare function bindSkillsCli(command: string, reviewed?: ReviewedSkillsCli): {
     receipt: {
         path: string;