@hoangsonw/forge 0.1.0

package/dist/security/redact.js

@@ -0,0 +1,89 @@
+"use strict";
+/**
+ * Secret redaction. Applied before any persisted write (logs, session JSONL,
+ * notifications) and before every model prompt. See planning doc "Final
+ * Integrated Control & Reliability Layer" §11 — this is mandatory across all
+ * execution paths.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactEnv = exports.redact = exports.redactString = void 0;
+const REDACTED = '****REDACTED****';
+// Keep patterns anchored and greedy-safe. Order matters — more specific first.
+const PATTERNS = [
+    { name: 'aws_access_key', re: /\bAKIA[0-9A-Z]{16}\b/g },
+    { name: 'aws_secret_key', re: /\b[A-Za-z0-9/+=]{40}\b(?=(?:.{0,40}aws|.{0,40}secret)?)/gi },
+    { name: 'github_token', re: /\bghp_[A-Za-z0-9]{36}\b/g },
+    { name: 'github_oauth', re: /\bgho_[A-Za-z0-9]{36}\b/g },
+    { name: 'github_app', re: /\bghs_[A-Za-z0-9]{36}\b/g },
+    { name: 'openai_key', re: /\bsk-[A-Za-z0-9]{20,}\b/g },
+    { name: 'anthropic_key', re: /\bsk-ant-[A-Za-z0-9-_]{20,}\b/g },
+    { name: 'slack_token', re: /\bxox[abprs]-[A-Za-z0-9-]{10,}\b/g },
+    { name: 'jwt', re: /\beyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g },
+    { name: 'bearer', re: /\b(?:Bearer|bearer)\s+[A-Za-z0-9._~+/=-]{16,}\b/g },
+    {
+        name: 'private_key',
+        re: /-----BEGIN[^-]+PRIVATE KEY-----[\s\S]+?-----END[^-]+PRIVATE KEY-----/g,
+    },
+];
+const ENV_KEYS_TO_REDACT = [
+    'API_KEY',
+    'SECRET',
+    'TOKEN',
+    'PASSWORD',
+    'PASSWD',
+    'PRIVATE_KEY',
+    'ACCESS_KEY',
+    'AUTH',
+    'CREDENTIAL',
+];
+const isSensitiveKey = (key) => {
+    const upper = key.toUpperCase();
+    return ENV_KEYS_TO_REDACT.some((s) => upper.includes(s));
+};
+const redactString = (input) => {
+    let out = input;
+    for (const { re } of PATTERNS) {
+        out = out.replace(re, REDACTED);
+    }
+    // Common key=value patterns (env-like)
+    out = out.replace(/(\b[A-Z][A-Z0-9_]{2,}\s*=\s*)(["']?)([^\s"']+)\2/g, (match, key, q) => {
+        const rawKey = (match.split('=')[0] || '').trim();
+        if (isSensitiveKey(rawKey)) {
+            return `${key}${q}${REDACTED}${q}`;
+        }
+        return match;
+    });
+    return out;
+};
+exports.redactString = redactString;
+const redact = (value) => {
+    if (value == null)
+        return value;
+    if (typeof value === 'string')
+        return (0, exports.redactString)(value);
+    if (Array.isArray(value))
+        return value.map(exports.redact);
+    if (typeof value === 'object') {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            if (isSensitiveKey(k) && typeof v === 'string') {
+                out[k] = REDACTED;
+            }
+            else {
+                out[k] = (0, exports.redact)(v);
+            }
+        }
+        return out;
+    }
+    return value;
+};
+exports.redact = redact;
+const redactEnv = (env = process.env) => {
+    const out = {};
+    for (const [k, v] of Object.entries(env)) {
+        out[k] = isSensitiveKey(k) ? REDACTED : v;
+    }
+    return out;
+};
+exports.redactEnv = redactEnv;
+//# sourceMappingURL=redact.js.map

package/dist/security/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/security/redact.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,MAAM,QAAQ,GAAG,kBAAkB,CAAC;AAEpC,+EAA+E;AAC/E,MAAM,QAAQ,GAAwC;IACpD,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,uBAAuB,EAAE;IACvD,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,2DAA2D,EAAE;IAC3F,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,0BAA0B,EAAE;IACxD,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,0BAA0B,EAAE;IACxD,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,0BAA0B,EAAE;IACtD,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,0BAA0B,EAAE;IACtD,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,gCAAgC,EAAE;IAC/D,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,mCAAmC,EAAE;IAChE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,2DAA2D,EAAE;IAChF,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,kDAAkD,EAAE;IAC1E;QACE,IAAI,EAAE,aAAa;QACnB,EAAE,EAAE,uEAAuE;KAC5E;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,SAAS;IACT,QAAQ;IACR,OAAO;IACP,UAAU;IACV,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,MAAM;IACN,YAAY;CACb,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,GAAW,EAAW,EAAE;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEK,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE;IACpD,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC9B,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,uCAAuC;IACvC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,mDAAmD,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE;QACvF,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,GAAG,GAAG,GAAG,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;QACrC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAdW,QAAA,YAAY,gBAcvB;AAEK,MAAM,MAAM,GAAG,CAAC,KAAc,EAAW,EAAE;IAChD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAA,oBAAY,EAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,cAAM,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC/C,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,CAAC,CAAC,GAAG,IAAA,cAAM,EAAC,CAAC,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAhBW,QAAA,MAAM,UAgBjB;AAEK,MAAM,SAAS,GAAG,CACvB,MAAyB,OAAO,CAAC,GAAG,EACA,EAAE;IACtC,MAAM,GAAG,GAAuC,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AARW,QAAA,SAAS,aAQpB"}

package/dist/skills/loader.d.ts

@@ -0,0 +1,4 @@
+import { SkillManifest, AgentManifest } from '../types';
+export declare const loadSkills: (projectRoot?: string) => SkillManifest[];
+export declare const loadAgents: (projectRoot?: string) => AgentManifest[];
+//# sourceMappingURL=loader.d.ts.map

package/dist/skills/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/skills/loader.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAsDxD,eAAO,MAAM,UAAU,GAAI,cAAc,MAAM,KAAG,aAAa,EAmB9D,CAAC;AAEF,eAAO,MAAM,UAAU,GAAI,cAAc,MAAM,KAAG,aAAa,EAkB9D,CAAC"}

package/dist/skills/loader.js

@@ -0,0 +1,142 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadAgents = exports.loadSkills = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const yaml = __importStar(require("yaml"));
+const paths_1 = require("../config/paths");
+const logger_1 = require("../logging/logger");
+const frontmatter = (raw) => {
+    const m = /^---\n([\s\S]*?)\n---\n?([\s\S]*)$/.exec(raw);
+    if (!m)
+        return { meta: {}, body: raw };
+    try {
+        const meta = yaml.parse(m[1]);
+        return { meta: meta ?? {}, body: m[2] };
+    }
+    catch {
+        return { meta: {}, body: m[2] };
+    }
+};
+const coerceSkill = (filePath, raw) => {
+    const { meta, body } = frontmatter(raw);
+    const name = typeof meta.name === 'string' ? meta.name : path.basename(filePath, '.md');
+    if (!name)
+        return null;
+    return {
+        name,
+        description: String(meta.description ?? ''),
+        inputs: Array.isArray(meta.inputs) ? meta.inputs.map(String) : [],
+        tools: Array.isArray(meta.tools) ? meta.tools.map(String) : [],
+        tags: Array.isArray(meta.tags) ? meta.tags.map(String) : [],
+        body: body.trim(),
+    };
+};
+const coerceAgent = (filePath, raw) => {
+    const { meta, body } = frontmatter(raw);
+    const name = typeof meta.name === 'string' ? meta.name : path.basename(filePath, '.md');
+    if (!name)
+        return null;
+    return {
+        name,
+        description: String(meta.description ?? ''),
+        capabilities: Array.isArray(meta.capabilities) ? meta.capabilities.map(String) : [],
+        defaultMode: (typeof meta.default_mode === 'string'
+            ? meta.default_mode
+            : 'balanced'),
+        tools: Array.isArray(meta.tools) ? meta.tools.map(String) : [],
+        skills: Array.isArray(meta.skills) ? meta.skills.map(String) : [],
+        behavior: body.trim() || undefined,
+    };
+};
+const listMarkdown = (dir) => {
+    if (!fs.existsSync(dir))
+        return [];
+    return fs
+        .readdirSync(dir)
+        .filter((f) => f.endsWith('.md'))
+        .map((f) => path.join(dir, f));
+};
+const loadSkills = (projectRoot) => {
+    const out = [];
+    const dirs = [paths_1.paths.skills];
+    if (projectRoot)
+        dirs.push(path.join(projectRoot, paths_1.projectConfigDir, 'skills'));
+    for (const dir of dirs) {
+        for (const fp of listMarkdown(dir)) {
+            try {
+                const raw = fs.readFileSync(fp, 'utf8');
+                const skill = coerceSkill(fp, raw);
+                if (skill)
+                    out.push(skill);
+            }
+            catch (err) {
+                logger_1.log.warn('failed to load skill', { file: fp, err: String(err) });
+            }
+        }
+    }
+    // Dedup by name (project overrides global).
+    const map = new Map();
+    for (const s of out)
+        map.set(s.name, s);
+    return [...map.values()];
+};
+exports.loadSkills = loadSkills;
+const loadAgents = (projectRoot) => {
+    const out = [];
+    const dirs = [paths_1.paths.agents];
+    if (projectRoot)
+        dirs.push(path.join(projectRoot, paths_1.projectConfigDir, 'agents'));
+    for (const dir of dirs) {
+        for (const fp of listMarkdown(dir)) {
+            try {
+                const raw = fs.readFileSync(fp, 'utf8');
+                const agent = coerceAgent(fp, raw);
+                if (agent)
+                    out.push(agent);
+            }
+            catch (err) {
+                logger_1.log.warn('failed to load agent', { file: fp, err: String(err) });
+            }
+        }
+    }
+    const map = new Map();
+    for (const a of out)
+        map.set(a.name, a);
+    return [...map.values()];
+};
+exports.loadAgents = loadAgents;
+//# sourceMappingURL=loader.js.map

package/dist/skills/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/skills/loader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAC7B,2CAA6B;AAE7B,2CAA0D;AAC1D,8CAAwC;AAExC,MAAM,WAAW,GAAG,CAAC,GAAW,EAAmD,EAAE;IACnF,MAAM,CAAC,GAAG,oCAAoC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAA4B,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,GAAW,EAAwB,EAAE;IAC1E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxF,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO;QACL,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QAC3C,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QACjE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAC9D,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAC3D,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;KAClB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,GAAW,EAAwB,EAAE;IAC1E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxF,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO;QACL,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QAC3C,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QACnF,WAAW,EAAE,CAAC,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YACjD,CAAC,CAAC,IAAI,CAAC,YAAY;YACnB,CAAC,CAAC,UAAU,CAAiC;QAC/C,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAC9D,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QACjE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,SAAS;KACnC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,GAAW,EAAY,EAAE;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,EAAE;SACN,WAAW,CAAC,GAAG,CAAC;SAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC,CAAC;AAEK,MAAM,UAAU,GAAG,CAAC,WAAoB,EAAmB,EAAE;IAClE,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,aAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,wBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBACxC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACnC,IAAI,KAAK;oBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,YAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IACD,4CAA4C;IAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3B,CAAC,CAAC;AAnBW,QAAA,UAAU,cAmBrB;AAEK,MAAM,UAAU,GAAG,CAAC,WAAoB,EAAmB,EAAE;IAClE,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,aAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,wBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBACxC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACnC,IAAI,KAAK;oBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,YAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3B,CAAC,CAAC;AAlBW,QAAA,UAAU,cAkBrB"}

package/dist/skills/marketplace.d.ts

@@ -0,0 +1,15 @@
+export interface RegistryEntry {
+    name: string;
+    description: string;
+    url: string;
+    source: string;
+}
+export declare const fetchRegistry: (url?: string) => Promise<RegistryEntry[]>;
+export declare const searchRegistry: (query: string) => Promise<RegistryEntry[]>;
+export declare const installFromUrl: (name: string, url: string, opts?: {
+    overwrite?: boolean;
+}) => Promise<{
+    path: string;
+    injectionFlagged: boolean;
+}>;
+//# sourceMappingURL=marketplace.d.ts.map

package/dist/skills/marketplace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"marketplace.d.ts","sourceRoot":"","sources":["../../src/skills/marketplace.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD,eAAO,MAAM,aAAa,GAAU,MAAK,MAAyB,KAAG,OAAO,CAAC,aAAa,EAAE,CAe3F,CAAC;AAEF,eAAO,MAAM,cAAc,GAAU,OAAO,MAAM,KAAG,OAAO,CAAC,aAAa,EAAE,CAM3E,CAAC;AAuBF,eAAO,MAAM,cAAc,GACzB,MAAM,MAAM,EACZ,KAAK,MAAM,EACX,OAAM;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,KACjC,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,CA+BrD,CAAC"}

package/dist/skills/marketplace.js

@@ -0,0 +1,132 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.installFromUrl = exports.searchRegistry = exports.fetchRegistry = void 0;
+/**
+ * Skill marketplace / remote registry. Today's implementation pulls skill
+ * manifests from any HTTPS URL; the user is always asked before we fetch or
+ * install. Results live in `~/.forge/skills/<name>.md`. A hosted registry
+ * can be layered on top later — the surface stays the same.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const undici_1 = require("undici");
+const paths_1 = require("../config/paths");
+const errors_1 = require("../types/errors");
+const injection_1 = require("../security/injection");
+const redact_1 = require("../security/redact");
+const logger_1 = require("../logging/logger");
+const DEFAULT_REGISTRY = process.env.FORGE_SKILLS_REGISTRY ??
+    'https://raw.githubusercontent.com/forge/skills/main/registry.json';
+const fetchRegistry = async (url = DEFAULT_REGISTRY) => {
+    const res = await (0, undici_1.request)(url, {
+        method: 'GET',
+        headers: { 'user-agent': 'forge-skills', accept: 'application/json' },
+        headersTimeout: 10_000,
+        bodyTimeout: 10_000,
+    });
+    if (res.statusCode !== 200)
+        return [];
+    try {
+        const body = (await res.body.json());
+        return body.skills ?? [];
+    }
+    catch (err) {
+        logger_1.log.debug('registry parse failed', { err: String(err) });
+        return [];
+    }
+};
+exports.fetchRegistry = fetchRegistry;
+const searchRegistry = async (query) => {
+    const entries = await (0, exports.fetchRegistry)();
+    const q = query.toLowerCase();
+    return entries.filter((e) => e.name.toLowerCase().includes(q) || e.description.toLowerCase().includes(q));
+};
+exports.searchRegistry = searchRegistry;
+const guardUrl = (raw) => {
+    let u;
+    try {
+        u = new URL(raw);
+    }
+    catch {
+        throw new errors_1.ForgeRuntimeError({
+            class: 'user_input',
+            message: `Invalid URL: ${raw}`,
+            retryable: false,
+        });
+    }
+    if (u.protocol !== 'https:') {
+        throw new errors_1.ForgeRuntimeError({
+            class: 'policy_violation',
+            message: `Only https:// skill URLs are allowed (got ${u.protocol}).`,
+            retryable: false,
+        });
+    }
+    return u;
+};
+const installFromUrl = async (name, url, opts = {}) => {
+    guardUrl(url);
+    (0, paths_1.ensureForgeHome)();
+    const safeName = name.replace(/[^a-z0-9-_]/gi, '_');
+    const target = path.join(paths_1.paths.skills, `${safeName}.md`);
+    if (fs.existsSync(target) && !opts.overwrite) {
+        throw new errors_1.ForgeRuntimeError({
+            class: 'conflict',
+            message: `Skill '${name}' already exists. Pass overwrite=true to replace.`,
+            retryable: false,
+        });
+    }
+    const res = await (0, undici_1.request)(url, {
+        method: 'GET',
+        headers: { 'user-agent': 'forge-skills', accept: 'text/plain, text/markdown' },
+        maxRedirections: 5,
+        bodyTimeout: 15_000,
+        headersTimeout: 15_000,
+    });
+    if (res.statusCode !== 200) {
+        throw new errors_1.ForgeRuntimeError({
+            class: 'tool_error',
+            message: `Skill download failed: HTTP ${res.statusCode}`,
+            retryable: true,
+        });
+    }
+    const body = await res.body.text();
+    const scan = (0, injection_1.scanForInjection)(body);
+    const sanitized = (0, redact_1.redactString)(body);
+    fs.writeFileSync(target, sanitized, 'utf8');
+    return { path: target, injectionFlagged: scan.flagged };
+};
+exports.installFromUrl = installFromUrl;
+//# sourceMappingURL=marketplace.js.map

package/dist/skills/marketplace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"marketplace.js","sourceRoot":"","sources":["../../src/skills/marketplace.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;GAKG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,mCAAiC;AACjC,2CAAyD;AACzD,4CAAoD;AACpD,qDAAyD;AACzD,+CAAkD;AAClD,8CAAwC;AASxC,MAAM,gBAAgB,GACpB,OAAO,CAAC,GAAG,CAAC,qBAAqB;IACjC,mEAAmE,CAAC;AAE/D,MAAM,aAAa,GAAG,KAAK,EAAE,MAAc,gBAAgB,EAA4B,EAAE;IAC9F,MAAM,GAAG,GAAG,MAAM,IAAA,gBAAO,EAAC,GAAG,EAAE;QAC7B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACrE,cAAc,EAAE,MAAM;QACtB,WAAW,EAAE,MAAM;KACpB,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAiC,CAAC;QACrE,OAAO,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAfW,QAAA,aAAa,iBAexB;AAEK,MAAM,cAAc,GAAG,KAAK,EAAE,KAAa,EAA4B,EAAE;IAC9E,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAa,GAAE,CAAC;IACtC,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CACnF,CAAC;AACJ,CAAC,CAAC;AANW,QAAA,cAAc,kBAMzB;AAEF,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAO,EAAE;IACpC,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,0BAAiB,CAAC;YAC1B,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,gBAAgB,GAAG,EAAE;YAC9B,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,0BAAiB,CAAC;YAC1B,KAAK,EAAE,kBAAkB;YACzB,OAAO,EAAE,6CAA6C,CAAC,CAAC,QAAQ,IAAI;YACpE,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEK,MAAM,cAAc,GAAG,KAAK,EACjC,IAAY,EACZ,GAAW,EACX,OAAgC,EAAE,EACoB,EAAE;IACxD,QAAQ,CAAC,GAAG,CAAC,CAAC;IACd,IAAA,uBAAe,GAAE,CAAC;IAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAK,CAAC,MAAM,EAAE,GAAG,QAAQ,KAAK,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,0BAAiB,CAAC;YAC1B,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,UAAU,IAAI,mDAAmD;YAC1E,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,IAAA,gBAAO,EAAC,GAAG,EAAE;QAC7B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,2BAA2B,EAAE;QAC9E,eAAe,EAAE,CAAC;QAClB,WAAW,EAAE,MAAM;QACnB,cAAc,EAAE,MAAM;KACvB,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,0BAAiB,CAAC;YAC1B,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,+BAA+B,GAAG,CAAC,UAAU,EAAE;YACxD,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,IAAA,4BAAgB,EAAC,IAAI,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAA,qBAAY,EAAC,IAAI,CAAC,CAAC;IACrC,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AAC1D,CAAC,CAAC;AAnCW,QAAA,cAAc,kBAmCzB"}

package/dist/tools/apply-patch.d.ts

@@ -0,0 +1,20 @@
+import { Tool } from '../types';
+/**
+ * Minimal unified-diff applier.
+ *
+ * Supports: multiple file hunks, @@ hunks with line ranges, context lines,
+ * add/delete lines. Conservative: refuses if any hunk doesn't match. Use this
+ * for precise edits where you already know the surrounding context.
+ *
+ * For full-file rewrites or trivial inserts, prefer write_file.
+ */
+interface Args {
+    patch: string;
+}
+interface Output {
+    filesChanged: string[];
+    hunksApplied: number;
+}
+export declare const applyPatchTool: Tool<Args, Output>;
+export {};
+//# sourceMappingURL=apply-patch.d.ts.map

package/dist/tools/apply-patch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-patch.d.ts","sourceRoot":"","sources":["../../src/tools/apply-patch.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAc,MAAM,UAAU,CAAC;AAI5C;;;;;;;;GAQG;AACH,UAAU,IAAI;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,UAAU,MAAM;IACd,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;CACtB;AAkHD,eAAO,MAAM,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAwD7C,CAAC"}

package/dist/tools/apply-patch.js

@@ -0,0 +1,195 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyPatchTool = void 0;
+const fs = __importStar(require("fs"));
+const errors_1 = require("../types/errors");
+const fs_1 = require("../sandbox/fs");
+const parsePatch = (patch) => {
+    const files = [];
+    const lines = patch.split(/\r?\n/);
+    let i = 0;
+    while (i < lines.length) {
+        if (!lines[i].startsWith('--- ')) {
+            i++;
+            continue;
+        }
+        const oldPath = lines[i].slice(4).trim().replace(/^a\//, '');
+        const newHeader = lines[i + 1];
+        if (!newHeader || !newHeader.startsWith('+++ ')) {
+            i++;
+            continue;
+        }
+        const newPath = newHeader.slice(4).trim().replace(/^b\//, '');
+        i += 2;
+        const hunks = [];
+        while (i < lines.length && lines[i].startsWith('@@')) {
+            const header = lines[i];
+            const m = /@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@/.exec(header);
+            if (!m) {
+                i++;
+                break;
+            }
+            const hunk = {
+                oldStart: Number(m[1]),
+                oldLen: m[2] ? Number(m[2]) : 1,
+                newStart: Number(m[3]),
+                newLen: m[4] ? Number(m[4]) : 1,
+                lines: [],
+            };
+            i++;
+            while (i < lines.length &&
+                !lines[i].startsWith('@@') &&
+                !lines[i].startsWith('--- ') &&
+                !lines[i].startsWith('+++ ')) {
+                hunk.lines.push(lines[i]);
+                i++;
+            }
+            hunks.push(hunk);
+        }
+        files.push({ oldPath, newPath, hunks });
+    }
+    return files;
+};
+const applyHunk = (source, hunk) => {
+    const before = source.slice(0, hunk.oldStart - 1);
+    const replaced = [];
+    let srcCursor = hunk.oldStart - 1;
+    for (const line of hunk.lines) {
+        if (line.startsWith(' ')) {
+            // Context: must match source
+            const expected = line.slice(1);
+            if (source[srcCursor] !== expected) {
+                throw new errors_1.ForgeRuntimeError({
+                    class: 'conflict',
+                    message: `Context mismatch at line ${srcCursor + 1}: got "${source[srcCursor]}" expected "${expected}"`,
+                    retryable: false,
+                });
+            }
+            replaced.push(expected);
+            srcCursor++;
+        }
+        else if (line.startsWith('-')) {
+            const expected = line.slice(1);
+            if (source[srcCursor] !== expected) {
+                throw new errors_1.ForgeRuntimeError({
+                    class: 'conflict',
+                    message: `Removal mismatch at line ${srcCursor + 1}`,
+                    retryable: false,
+                });
+            }
+            srcCursor++;
+        }
+        else if (line.startsWith('+')) {
+            replaced.push(line.slice(1));
+        }
+        else if (line === '' || line.startsWith('\\')) {
+            // newline marker or blank
+            continue;
+        }
+        else {
+            // Treat as context when no prefix (some diffs)
+            if (source[srcCursor] !== line) {
+                throw new errors_1.ForgeRuntimeError({
+                    class: 'conflict',
+                    message: `Unexpected line format at ${srcCursor + 1}`,
+                    retryable: false,
+                });
+            }
+            replaced.push(line);
+            srcCursor++;
+        }
+    }
+    const after = source.slice(srcCursor);
+    return [...before, ...replaced, ...after];
+};
+exports.applyPatchTool = {
+    schema: {
+        name: 'apply_patch',
+        description: 'Apply a unified diff to the working tree (strict context matching).',
+        sideEffect: 'write',
+        risk: 'medium',
+        permissionDefault: 'ask',
+        sensitivity: 'medium',
+        timeoutMs: 20_000,
+        inputSchema: {
+            type: 'object',
+            required: ['patch'],
+            properties: { patch: { type: 'string' } },
+        },
+    },
+    async execute(args, ctx) {
+        const start = Date.now();
+        try {
+            const files = parsePatch(args.patch);
+            if (!files.length) {
+                throw new errors_1.ForgeRuntimeError({
+                    class: 'user_input',
+                    message: 'Patch contained no recognizable file hunks.',
+                    retryable: false,
+                });
+            }
+            const changed = [];
+            let hunks = 0;
+            for (const fp of files) {
+                const target = (0, fs_1.resolveSafe)(fp.newPath, { projectRoot: ctx.projectRoot }, 'write');
+                let source = fs.existsSync(target)
+                    ? fs.readFileSync(target, 'utf8').split('\n')
+                    : [];
+                for (const hunk of fp.hunks) {
+                    source = applyHunk(source, hunk);
+                    hunks++;
+                }
+                fs.writeFileSync(target, source.join('\n'), 'utf8');
+                changed.push(fp.newPath);
+            }
+            return {
+                success: true,
+                output: { filesChanged: changed, hunksApplied: hunks },
+                durationMs: Date.now() - start,
+            };
+        }
+        catch (err) {
+            return {
+                success: false,
+                error: err instanceof errors_1.ForgeRuntimeError
+                    ? err.toJSON()
+                    : { class: 'tool_error', message: String(err), retryable: false },
+                durationMs: Date.now() - start,
+            };
+        }
+    },
+};
+//# sourceMappingURL=apply-patch.js.map

package/dist/tools/apply-patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-patch.js","sourceRoot":"","sources":["../../src/tools/apply-patch.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AAEzB,4CAAoD;AACpD,sCAA4C;AAkC5C,MAAM,UAAU,GAAG,CAAC,KAAa,EAAe,EAAE;IAChD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC,IAAI,CAAC,CAAC;QACP,MAAM,KAAK,GAAW,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,CAAC,GAAG,4CAA4C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,CAAC,EAAE,CAAC;gBACJ,MAAM;YACR,CAAC;YACD,MAAM,IAAI,GAAS;gBACjB,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/B,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/B,KAAK,EAAE,EAAE;aACV,CAAC;YACF,CAAC,EAAE,CAAC;YACJ,OACE,CAAC,GAAG,KAAK,CAAC,MAAM;gBAChB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;gBAC1B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC5B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAC5B,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1B,CAAC,EAAE,CAAC;YACN,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,MAAgB,EAAE,IAAU,EAAY,EAAE;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,SAAS,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,6BAA6B;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,0BAAiB,CAAC;oBAC1B,KAAK,EAAE,UAAU;oBACjB,OAAO,EAAE,4BAA4B,SAAS,GAAG,CAAC,UAAU,MAAM,CAAC,SAAS,CAAC,eAAe,QAAQ,GAAG;oBACvG,SAAS,EAAE,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,SAAS,EAAE,CAAC;QACd,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,0BAAiB,CAAC;oBAC1B,KAAK,EAAE,UAAU;oBACjB,OAAO,EAAE,4BAA4B,SAAS,GAAG,CAAC,EAAE;oBACpD,SAAS,EAAE,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,SAAS,EAAE,CAAC;QACd,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,0BAA0B;YAC1B,SAAS;QACX,CAAC;aAAM,CAAC;YACN,+CAA+C;YAC/C,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC/B,MAAM,IAAI,0BAAiB,CAAC;oBAC1B,KAAK,EAAE,UAAU;oBACjB,OAAO,EAAE,6BAA6B,SAAS,GAAG,CAAC,EAAE;oBACrD,SAAS,EAAE,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,SAAS,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,MAAM,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC;AAC5C,CAAC,CAAC;AAEW,QAAA,cAAc,GAAuB;IAChD,MAAM,EAAE;QACN,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,qEAAqE;QAClF,UAAU,EAAE,OAAO;QACnB,IAAI,EAAE,QAAQ;QACd,iBAAiB,EAAE,KAAK;QACxB,WAAW,EAAE,QAAQ;QACrB,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,CAAC,OAAO,CAAC;YACnB,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;SAC1C;KACF;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,IAAI,0BAAiB,CAAC;oBAC1B,KAAK,EAAE,YAAY;oBACnB,OAAO,EAAE,6CAA6C;oBACtD,SAAS,EAAE,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,IAAA,gBAAW,EAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;gBAClF,IAAI,MAAM,GAAa,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;oBAC1C,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC7C,CAAC,CAAC,EAAE,CAAC;gBACP,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;oBAC5B,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBACjC,KAAK,EAAE,CAAC;gBACV,CAAC;gBACD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE;gBACtD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EACH,GAAG,YAAY,0BAAiB;oBAC9B,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE;oBACd,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;gBACrE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC/B,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/ask-user.d.ts

@@ -0,0 +1,12 @@
+import { Tool } from '../types';
+interface Args {
+    question: string;
+    choices?: string[];
+    defaultValue?: string;
+    nonInteractiveDefault?: string;
+}
+export declare const askUserTool: Tool<Args, {
+    answer: string;
+}>;
+export {};
+//# sourceMappingURL=ask-user.d.ts.map