@damn-dev/cli 0.13.8 → 0.13.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@damn-dev/cli",
-  "version": "0.13.8",
+  "version": "0.13.10",
   "description": "damn.dev — self-hosted workspace OS for human + AI agent collaboration.",
   "license": "Apache-2.0",
   "homepage": "https://damn.dev",

package/runtime/apps/backend/dist/server.cjs

@@ -7858,6 +7858,7 @@ var require_skillToolDispatcher = __commonJS({
     exports2.registerInProcessTool = registerInProcessTool;
     exports2.assertSafeUrl = assertSafeUrl;
     exports2.substituteSecrets = substituteSecrets;
+    exports2.extractPathParamNames = extractPathParamNames;
     exports2.substituteParams = substituteParams;
     exports2.loadSkillTool = loadSkillTool;
     exports2.resolveAllSecrets = resolveAllSecrets;
@@ -7983,6 +7984,17 @@ var require_skillToolDispatcher = __commonJS({
       const out = template.replace(/\$\{([A-Z][A-Z0-9_]{0,63})\}/g, (_, key) => secrets.get(key) ?? "");
       return { ok: true, value: out };
     }
+    function extractPathParamNames(template) {
+      const names = /* @__PURE__ */ new Set();
+      const re = /<([A-Za-z_][A-Za-z0-9_]*)>|\{([A-Za-z_][A-Za-z0-9_]*)\}/g;
+      let m;
+      while ((m = re.exec(template)) !== null) {
+        const key = m[1] ?? m[2];
+        if (key)
+          names.add(key);
+      }
+      return names;
+    }
     function substituteParams(template, params) {
       return template.replace(/<([A-Za-z_][A-Za-z0-9_]*)>|\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_, angle, curly) => {
         const key = angle ?? curly;
@@ -8148,6 +8160,7 @@ var require_skillToolDispatcher = __commonJS({
       if (!endpointAfterSecrets.ok) {
         return { ok: false, error: `Missing workspace secret: ${endpointAfterSecrets.missing.join(", ")}`, code: "missing_secret" };
       }
+      const pathParamNames = extractPathParamNames(endpointAfterSecrets.value);
       const endpointAfterParams = substituteParams(endpointAfterSecrets.value, req.params);
       const safety = await assertSafeUrl(endpointAfterParams);
       if (!safety.ok) {
@@ -8160,6 +8173,20 @@ var require_skillToolDispatcher = __commonJS({
         return { ok: false, error: safety.reason, code: safety.code };
       }
       let url = safety.url;
+      const declaredParams = new Set(tool.parameters.map((p) => p.name));
+      if (tool.method === "GET" || tool.method === "DELETE" || tool.method === "HEAD") {
+        for (const [k, v] of Object.entries(req.params)) {
+          if (pathParamNames.has(k))
+            continue;
+          if (!declaredParams.has(k))
+            continue;
+          if (v === void 0 || v === null)
+            continue;
+          if (typeof v === "object")
+            continue;
+          url.searchParams.set(k, String(v));
+        }
+      }
       const headers = new Headers({ "user-agent": "damn-dev-skill-dispatcher/1.0" });
       if (tool.auth) {
         const authValue = substituteSecrets(tool.auth.value, secrets);
@@ -30913,7 +30940,7 @@ var require_package = __commonJS({
     module2.exports = {
       name: "backend",
       private: true,
-      version: "0.13.8",
+      version: "0.13.10",
       scripts: {
         dev: "tsx watch src/server.ts",
         build: "tsc && rm -rf dist/resources && cp -r resources dist/resources",