@lyupro/skillforge-mcp 1.1.0

package/dist/decorators/timeout-decorator.js

@@ -0,0 +1,59 @@
+import { BaseDecorator } from './base-decorator.js';
+export class TimeoutDecorator extends BaseDecorator {
+    #defaultMs;
+    #setTimeout;
+    #clearTimeout;
+    #clock;
+    constructor(inner, deps) {
+        super(inner);
+        this.#defaultMs = deps.defaultMs;
+        this.#setTimeout = deps.setTimeoutFn ?? setTimeout;
+        this.#clearTimeout = deps.clearTimeoutFn ?? clearTimeout;
+        this.#clock = deps.clock ?? (() => performance.now());
+    }
+    async invoke(skill, context) {
+        const timeoutMs = skill.timeoutMs ?? this.#defaultMs;
+        if (timeoutMs <= 0) {
+            // 0 / negative = disabled; pass through without timeout
+            return await this.inner.invoke(skill, context);
+        }
+        const controller = new AbortController();
+        const start = this.#clock();
+        let timer;
+        const timeoutPromise = new Promise((resolve) => {
+            timer = this.#setTimeout(() => {
+                controller.abort();
+                resolve({
+                    ok: false,
+                    output: '',
+                    error: 'timeout',
+                    durationMs: Math.round(this.#clock() - start),
+                });
+            }, timeoutMs);
+            // Allow Node.js process to exit even if timer is pending
+            if (typeof timer.unref === 'function') {
+                timer.unref();
+            }
+        });
+        // If caller passed a parent signal, link it: parent abort → child abort
+        if (context.signal) {
+            if (context.signal.aborted) {
+                controller.abort();
+            }
+            else {
+                context.signal.addEventListener('abort', () => controller.abort(), { once: true });
+            }
+        }
+        const innerPromise = this.inner.invoke(skill, { ...context, signal: controller.signal });
+        try {
+            const result = await Promise.race([innerPromise, timeoutPromise]);
+            return result;
+        }
+        finally {
+            if (timer !== undefined) {
+                this.#clearTimeout(timer);
+            }
+        }
+    }
+}
+//# sourceMappingURL=timeout-decorator.js.map

package/dist/decorators/timeout-decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout-decorator.js","sourceRoot":"","sources":["../../src/decorators/timeout-decorator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAepD,MAAM,OAAO,gBAAiB,SAAQ,aAAa;IACxC,UAAU,CAAS;IACnB,WAAW,CAAoB;IAC/B,aAAa,CAAsB;IACnC,MAAM,CAAe;IAE9B,YAAY,KAAyB,EAAE,IAA0B;QAC/D,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,IAAI,UAAU,CAAC;QACnD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,IAAI,YAAY,CAAC;QACzD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAmB,EAAE,OAA0B;QAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC;QACrD,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,wDAAwD;YACxD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,KAAgD,CAAC;QAErD,MAAM,cAAc,GAAG,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,EAAE;YAC/D,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;gBAC5B,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,CAAC;oBACN,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,SAAS;oBAChB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC;iBAC9C,CAAC,CAAC;YACL,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,yDAAyD;YACzD,IAAI,OAAQ,KAA2C,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAC5E,KAA0C,CAAC,KAAK,EAAE,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,wEAAwE;QACxE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC3B,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAEzF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;YAClE,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/factory/index.d.ts

@@ -0,0 +1,2 @@
+export { StrategyFactory } from './strategy-factory.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factory/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/factory/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/factory/index.js

@@ -0,0 +1,2 @@
+export { StrategyFactory } from './strategy-factory.js';
+//# sourceMappingURL=index.js.map

package/dist/factory/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/factory/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/factory/strategy-factory.d.ts

@@ -0,0 +1,10 @@
+import type { SkillContent, StrategyKind } from '../core/types.js';
+import type { InvocationStrategy } from '../handlers/invocation-strategy.js';
+export declare class StrategyFactory {
+    #private;
+    constructor(strategies?: InvocationStrategy[]);
+    register(strategy: InvocationStrategy): void;
+    create(skill: SkillContent): InvocationStrategy;
+    get registeredKinds(): StrategyKind[];
+}
+//# sourceMappingURL=strategy-factory.d.ts.map

package/dist/factory/strategy-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy-factory.d.ts","sourceRoot":"","sources":["../../src/factory/strategy-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAE7E,qBAAa,eAAe;;gBAGd,UAAU,CAAC,EAAE,kBAAkB,EAAE;IAS7C,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;IAK5C,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,kBAAkB;IAsB/C,IAAI,eAAe,IAAI,YAAY,EAAE,CAEpC;CACF"}

package/dist/factory/strategy-factory.js

@@ -0,0 +1,37 @@
+export class StrategyFactory {
+    #store;
+    constructor(strategies) {
+        this.#store = new Map();
+        if (strategies !== undefined) {
+            for (const strategy of strategies) {
+                this.register(strategy);
+            }
+        }
+    }
+    register(strategy) {
+        // Set in place so existing keys keep their insertion position for auto-detect order.
+        this.#store.set(strategy.kind, strategy);
+    }
+    create(skill) {
+        if (this.#store.size === 0) {
+            throw new Error('StrategyFactory: no strategies registered');
+        }
+        if (skill.strategy !== undefined) {
+            const found = this.#store.get(skill.strategy);
+            if (found === undefined) {
+                throw new Error(`Strategy not registered: ${skill.strategy}`);
+            }
+            return found;
+        }
+        for (const strategy of this.#store.values()) {
+            if (strategy.canHandle(skill)) {
+                return strategy;
+            }
+        }
+        throw new Error(`No strategy can handle skill: ${skill.name}`);
+    }
+    get registeredKinds() {
+        return Array.from(this.#store.keys());
+    }
+}
+//# sourceMappingURL=strategy-factory.js.map

package/dist/factory/strategy-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy-factory.js","sourceRoot":"","sources":["../../src/factory/strategy-factory.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,eAAe;IACjB,MAAM,CAAwC;IAEvD,YAAY,UAAiC;QAC3C,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAClC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,QAA4B;QACnC,qFAAqF;QACrF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,KAAmB;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/handlers/composite-resolver.d.ts

@@ -0,0 +1,34 @@
+import type { InvocationContext, InvocationResult, SkillContent } from '../core/types.js';
+/**
+ * Function provided by caller to load SkillContent by name. Returns undefined
+ * if skill not registered. Composite resolver uses this in collectChain phase.
+ */
+export type SkillLoader = (name: string) => Promise<SkillContent | undefined>;
+/**
+ * Function provided by caller to actually invoke a non-composite skill,
+ * including decorator chain wrapping + strategy factory dispatch. Composite
+ * resolver delegates leaf execution to this.
+ */
+export type SkillInvoker = (skill: SkillContent, context: InvocationContext) => Promise<InvocationResult>;
+/**
+ * Walk the composite chain depth-first, loading each referenced skill.
+ * Returns Map<name, SkillContent> for all reachable nodes plus the root.
+ * Throws CyclicSkillDependencyError if a cycle is found during traversal.
+ * Throws Error('unknown skill referenced from composite: <name>') if a
+ * reference cannot be resolved.
+ */
+export declare function collectChain(root: SkillContent, loadSkill: SkillLoader): Promise<Map<string, SkillContent>>;
+/**
+ * Resolves a composite skill: cycle-check via collectChain → sequential invoke
+ * nested skills → concatenate outputs with separator.
+ *
+ * Parent body (root.body) is prepended as a leading section if non-empty.
+ * Sections are joined with '\n\n---\n\n'.
+ * Each nested skill section is prefixed with '## Skill: <name>\n\n'.
+ *
+ * Failure short-circuits: first failed nested invoke returns its result
+ * wrapped in a composite envelope; subsequent skills are NOT invoked.
+ * On cycle or unknown-skill errors, returns ok:false immediately.
+ */
+export declare function resolveComposite(root: SkillContent, context: InvocationContext, loadSkill: SkillLoader, invokeSkill: SkillInvoker, clock?: () => number): Promise<InvocationResult>;
+//# sourceMappingURL=composite-resolver.d.ts.map

package/dist/handlers/composite-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composite-resolver.d.ts","sourceRoot":"","sources":["../../src/handlers/composite-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAG1F;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAE1G;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,WAAW,GACrB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CA0BpC;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,iBAAiB,EAC1B,SAAS,EAAE,WAAW,EACtB,WAAW,EAAE,YAAY,EACzB,KAAK,GAAE,MAAM,MAAgC,GAC5C,OAAO,CAAC,gBAAgB,CAAC,CAgD3B"}

package/dist/handlers/composite-resolver.js

@@ -0,0 +1,94 @@
+import { CyclicSkillDependencyError } from '../core/errors.js';
+/**
+ * Walk the composite chain depth-first, loading each referenced skill.
+ * Returns Map<name, SkillContent> for all reachable nodes plus the root.
+ * Throws CyclicSkillDependencyError if a cycle is found during traversal.
+ * Throws Error('unknown skill referenced from composite: <name>') if a
+ * reference cannot be resolved.
+ */
+export async function collectChain(root, loadSkill) {
+    const collected = new Map();
+    collected.set(root.name, root);
+    const visit = async (current, stack) => {
+        const nested = current.skills ?? [];
+        for (const nestedName of nested) {
+            if (stack.includes(nestedName)) {
+                throw new CyclicSkillDependencyError([...stack, nestedName]);
+            }
+            if (!collected.has(nestedName)) {
+                const loaded = await loadSkill(nestedName);
+                if (!loaded) {
+                    throw new Error(`unknown skill referenced from composite: ${nestedName}`);
+                }
+                collected.set(nestedName, loaded);
+                await visit(loaded, [...stack, nestedName]);
+            }
+            else {
+                // Already collected — still traverse to detect cycles through this subtree.
+                await visit(collected.get(nestedName), [...stack, nestedName]);
+            }
+        }
+    };
+    await visit(root, [root.name]);
+    return collected;
+}
+/**
+ * Resolves a composite skill: cycle-check via collectChain → sequential invoke
+ * nested skills → concatenate outputs with separator.
+ *
+ * Parent body (root.body) is prepended as a leading section if non-empty.
+ * Sections are joined with '\n\n---\n\n'.
+ * Each nested skill section is prefixed with '## Skill: <name>\n\n'.
+ *
+ * Failure short-circuits: first failed nested invoke returns its result
+ * wrapped in a composite envelope; subsequent skills are NOT invoked.
+ * On cycle or unknown-skill errors, returns ok:false immediately.
+ */
+export async function resolveComposite(root, context, loadSkill, invokeSkill, clock = () => performance.now()) {
+    const start = clock();
+    let chain;
+    try {
+        chain = await collectChain(root, loadSkill);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return {
+            ok: false,
+            output: '',
+            error: msg,
+            durationMs: Math.round(clock() - start),
+        };
+    }
+    const nestedNames = root.skills ?? [];
+    const sections = [];
+    const rootBody = (root.body ?? '').trim();
+    if (rootBody.length > 0)
+        sections.push(rootBody);
+    for (const name of nestedNames) {
+        const skill = chain.get(name);
+        if (!skill) {
+            return {
+                ok: false,
+                output: '',
+                error: `unknown skill referenced from composite: ${name}`,
+                durationMs: Math.round(clock() - start),
+            };
+        }
+        const childResult = await invokeSkill(skill, context);
+        if (!childResult.ok) {
+            return {
+                ok: false,
+                output: childResult.output,
+                error: `nested skill ${name} failed: ${childResult.error ?? 'unknown error'}`,
+                durationMs: Math.round(clock() - start),
+            };
+        }
+        sections.push(`## Skill: ${name}\n\n${childResult.output.trim()}`);
+    }
+    return {
+        ok: true,
+        output: sections.join('\n\n---\n\n'),
+        durationMs: Math.round(clock() - start),
+    };
+}
+//# sourceMappingURL=composite-resolver.js.map

package/dist/handlers/composite-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composite-resolver.js","sourceRoot":"","sources":["../../src/handlers/composite-resolver.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAe/D;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAkB,EAClB,SAAsB;IAEtB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;IAClD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE/B,MAAM,KAAK,GAAG,KAAK,EAAE,OAAqB,EAAE,KAAe,EAAiB,EAAE;QAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACpC,KAAK,MAAM,UAAU,IAAI,MAAM,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,0BAA0B,CAAC,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;gBAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,4CAA4C,UAAU,EAAE,CAAC,CAAC;gBAC5E,CAAC;gBACD,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAClC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,4EAA4E;gBAC5E,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAE,EAAE,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAkB,EAClB,OAA0B,EAC1B,SAAsB,EACtB,WAAyB,EACzB,QAAsB,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;IAE7C,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC;IAEtB,IAAI,KAAgC,CAAC;IACrC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,GAAG;YACV,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC;SACxC,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,4CAA4C,IAAI,EAAE;gBACzD,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC;aACxC,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,KAAK,EAAE,gBAAgB,IAAI,YAAY,WAAW,CAAC,KAAK,IAAI,eAAe,EAAE;gBAC7E,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC;aACxC,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,aAAa,IAAI,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;QACpC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC;KACxC,CAAC;AACJ,CAAC"}

package/dist/handlers/hybrid-strategy.d.ts

@@ -0,0 +1,14 @@
+import type { InvocationStrategy } from './invocation-strategy.js';
+import type { InvocationContext, InvocationResult, SkillContent, StrategyKind } from '../core/types.js';
+export interface HybridStrategyDeps {
+    scriptStrategy: InvocationStrategy;
+    clock?: () => number;
+}
+export declare class HybridStrategy implements InvocationStrategy {
+    #private;
+    readonly kind: StrategyKind;
+    constructor(deps: HybridStrategyDeps);
+    canHandle(skill: SkillContent): boolean;
+    invoke(skill: SkillContent, context: InvocationContext): Promise<InvocationResult>;
+}
+//# sourceMappingURL=hybrid-strategy.d.ts.map

package/dist/handlers/hybrid-strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hybrid-strategy.d.ts","sourceRoot":"","sources":["../../src/handlers/hybrid-strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACb,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,kBAAkB,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAkBD,qBAAa,cAAe,YAAW,kBAAkB;;IACvD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAY;gBAI3B,IAAI,EAAE,kBAAkB;IAKpC,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO;IAIjC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAkBzF"}

package/dist/handlers/hybrid-strategy.js

@@ -0,0 +1,42 @@
+const SECTION_SEP = '\n\n';
+function assembleHybridPrompt(body, scriptOutput, userInput) {
+    const trimmedBody = body.trim();
+    const trimmedScript = scriptOutput.trim();
+    const trimmedInput = userInput.trim();
+    const sections = [];
+    if (trimmedBody.length > 0)
+        sections.push(trimmedBody);
+    sections.push(`## Script output${SECTION_SEP}${trimmedScript}`);
+    if (trimmedInput.length > 0) {
+        sections.push(`## User input${SECTION_SEP}${trimmedInput}`);
+    }
+    return sections.join(SECTION_SEP);
+}
+export class HybridStrategy {
+    kind = 'hybrid';
+    #script;
+    #clock;
+    constructor(deps) {
+        this.#script = deps.scriptStrategy;
+        this.#clock = deps.clock ?? (() => performance.now());
+    }
+    canHandle(skill) {
+        return skill.strategy === 'hybrid';
+    }
+    async invoke(skill, context) {
+        const start = this.#clock();
+        const scriptResult = await this.#script.invoke(skill, context);
+        // Failure short-circuits — no prompt blend on failure.
+        if (!scriptResult.ok) {
+            return scriptResult;
+        }
+        const promptBlob = assembleHybridPrompt(skill.body ?? '', scriptResult.output, context.input);
+        const durationMs = Math.round(this.#clock() - start);
+        return {
+            ok: true,
+            output: promptBlob,
+            durationMs,
+        };
+    }
+}
+//# sourceMappingURL=hybrid-strategy.js.map

package/dist/handlers/hybrid-strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hybrid-strategy.js","sourceRoot":"","sources":["../../src/handlers/hybrid-strategy.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,GAAG,MAAM,CAAC;AAE3B,SAAS,oBAAoB,CAAC,IAAY,EAAE,YAAoB,EAAE,SAAiB;IACjF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAEtC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvD,QAAQ,CAAC,IAAI,CAAC,mBAAmB,WAAW,GAAG,aAAa,EAAE,CAAC,CAAC;IAChE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC,gBAAgB,WAAW,GAAG,YAAY,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,OAAO,cAAc;IAChB,IAAI,GAAiB,QAAQ,CAAC;IAC9B,OAAO,CAAqB;IAC5B,MAAM,CAAe;IAE9B,YAAY,IAAwB;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,SAAS,CAAC,KAAmB;QAC3B,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAmB,EAAE,OAA0B;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE/D,uDAAuD;QACvD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9F,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;QAErD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,UAAU;YAClB,UAAU;SACX,CAAC;IACJ,CAAC;CACF"}

package/dist/handlers/index.d.ts

@@ -0,0 +1,3 @@
+export { PromptStrategy } from './prompt-strategy.js';
+export type { InvocationStrategy } from './invocation-strategy.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/handlers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/handlers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/handlers/index.js

@@ -0,0 +1,2 @@
+export { PromptStrategy } from './prompt-strategy.js';
+//# sourceMappingURL=index.js.map

package/dist/handlers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/handlers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/handlers/invocation-strategy.d.ts

@@ -0,0 +1,17 @@
+import type { InvocationContext, InvocationResult, SkillContent, StrategyKind } from '../core/types.js';
+export interface InvocationStrategy {
+    /** Identifier — matches StrategyKind so StrategyFactory can index by kind. */
+    readonly kind: StrategyKind;
+    /**
+     * Returns true if this strategy is capable of executing the given skill.
+     * PromptStrategy returns true for any skill (default fallback).
+     * ScriptStrategy will require allowScripts + a scripts/ dir.
+     */
+    canHandle(skill: SkillContent): boolean;
+    /**
+     * Execute the skill. Implementations MUST catch their own errors and
+     * surface them via `InvocationResult { ok: false, error }` — never throw.
+     */
+    invoke(skill: SkillContent, context: InvocationContext): Promise<InvocationResult>;
+}
+//# sourceMappingURL=invocation-strategy.d.ts.map

package/dist/handlers/invocation-strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation-strategy.d.ts","sourceRoot":"","sources":["../../src/handlers/invocation-strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACb,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAE5B;;;;OAIG;IACH,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC;IAExC;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACpF"}

package/dist/handlers/invocation-strategy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=invocation-strategy.js.map

package/dist/handlers/invocation-strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation-strategy.js","sourceRoot":"","sources":["../../src/handlers/invocation-strategy.ts"],"names":[],"mappings":""}

package/dist/handlers/prompt-strategy.d.ts

@@ -0,0 +1,8 @@
+import type { InvocationContext, InvocationResult, SkillContent, StrategyKind } from '../core/types.js';
+import type { InvocationStrategy } from './invocation-strategy.js';
+export declare class PromptStrategy implements InvocationStrategy {
+    readonly kind: StrategyKind;
+    canHandle(_skill: SkillContent): boolean;
+    invoke(skill: SkillContent, context: InvocationContext): Promise<InvocationResult>;
+}
+//# sourceMappingURL=prompt-strategy.d.ts.map

package/dist/handlers/prompt-strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-strategy.d.ts","sourceRoot":"","sources":["../../src/handlers/prompt-strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,qBAAa,cAAe,YAAW,kBAAkB;IACvD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAY;IAEvC,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO;IAIlC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAuBzF"}

package/dist/handlers/prompt-strategy.js

@@ -0,0 +1,31 @@
+import { performance } from 'node:perf_hooks';
+export class PromptStrategy {
+    kind = 'prompt';
+    canHandle(_skill) {
+        return true;
+    }
+    async invoke(skill, context) {
+        const start = performance.now();
+        try {
+            const parts = [];
+            parts.push(`# Skill: ${skill.name}`);
+            if (skill.description !== undefined && skill.description !== '') {
+                parts.push(skill.description);
+            }
+            parts.push('');
+            parts.push(skill.body);
+            parts.push('');
+            parts.push('## Input');
+            parts.push(context.input);
+            const output = parts.join('\n');
+            const durationMs = Math.max(0, Math.round(performance.now() - start));
+            return { ok: true, output, durationMs };
+        }
+        catch (err) {
+            const durationMs = Math.max(0, Math.round(performance.now() - start));
+            const error = err instanceof Error ? err.message : String(err);
+            return { ok: false, output: '', error, durationMs };
+        }
+    }
+}
+//# sourceMappingURL=prompt-strategy.js.map

package/dist/handlers/prompt-strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-strategy.js","sourceRoot":"","sources":["../../src/handlers/prompt-strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAS9C,MAAM,OAAO,cAAc;IAChB,IAAI,GAAiB,QAAQ,CAAC;IAEvC,SAAS,CAAC,MAAoB;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAmB,EAAE,OAA0B;QAC1D,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;gBAChE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAChC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAE1B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;YACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;YACtE,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;CACF"}

package/dist/handlers/script-strategy.d.ts

@@ -0,0 +1,20 @@
+import type { InvocationContext, InvocationResult, SkillContent, StrategyKind } from '../core/types.js';
+import type { InvocationStrategy } from './invocation-strategy.js';
+import type { SandboxRunner } from '../security/sandbox-runner.js';
+import type { Logger } from '../decorators/logging-decorator.js';
+export interface ScriptStrategyDeps {
+    sandboxRunner: SandboxRunner;
+    /** Reads global `config.security.allowScripts` at invoke-time (not boot-time)
+     *  so config changes via `mcp__skills__configure` reflect without restart. */
+    isGloballyAllowed: () => boolean;
+    logger?: Logger;
+    clock?: () => number;
+}
+export declare class ScriptStrategy implements InvocationStrategy {
+    #private;
+    readonly kind: StrategyKind;
+    constructor(deps: ScriptStrategyDeps);
+    canHandle(skill: SkillContent): boolean;
+    invoke(skill: SkillContent, context: InvocationContext): Promise<InvocationResult>;
+}
+//# sourceMappingURL=script-strategy.d.ts.map

package/dist/handlers/script-strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-strategy.d.ts","sourceRoot":"","sources":["../../src/handlers/script-strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACxG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAEjE,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B;kFAC8E;IAC9E,iBAAiB,EAAE,MAAM,OAAO,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAkBD,qBAAa,cAAe,YAAW,kBAAkB;;IACvD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAY;gBAM3B,IAAI,EAAE,kBAAkB;IAOpC,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO;IAOjC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA0DzF"}

package/dist/handlers/script-strategy.js

@@ -0,0 +1,87 @@
+import { join } from 'node:path';
+const INTERPRETER_BY_EXT = {
+    '.py': { cmd: 'python3', needsScriptPath: true },
+    '.sh': { cmd: 'bash', needsScriptPath: true },
+    '.js': { cmd: 'node', needsScriptPath: true },
+    '.mjs': { cmd: 'node', needsScriptPath: true },
+};
+function lowerExt(name) {
+    const dot = name.lastIndexOf('.');
+    return dot < 0 ? '' : name.slice(dot).toLowerCase();
+}
+function fail(error, durationMs = 0) {
+    return { ok: false, output: '', error, durationMs };
+}
+export class ScriptStrategy {
+    kind = 'script';
+    #sandbox;
+    #isGlobalAllowed;
+    #logger;
+    #clock;
+    constructor(deps) {
+        this.#sandbox = deps.sandboxRunner;
+        this.#isGlobalAllowed = deps.isGloballyAllowed;
+        this.#logger = deps.logger;
+        this.#clock = deps.clock ?? (() => performance.now());
+    }
+    canHandle(skill) {
+        if (skill.strategy === 'script')
+            return true;
+        if (skill.strategy !== undefined)
+            return false;
+        // Auto-detect: scripts[] non-empty.
+        return Array.isArray(skill.scripts) && skill.scripts.length > 0;
+    }
+    async invoke(skill, context) {
+        const start = this.#clock();
+        // Gate 1: global config flag.
+        if (!this.#isGlobalAllowed()) {
+            return fail('scripts disabled globally (config.security.allowScripts=false)', Math.round(this.#clock() - start));
+        }
+        // Gate 2: per-skill opt-in.
+        if (skill.allowScripts !== true) {
+            return fail('scripts disabled for this skill (metadata.allowScripts must be true)', Math.round(this.#clock() - start));
+        }
+        // Resolve script path: single-entry only.
+        const entries = skill.scripts ?? [];
+        if (entries.length === 0) {
+            return fail('no script entries declared (metadata.scripts is empty)', Math.round(this.#clock() - start));
+        }
+        if (!skill.scriptsDir) {
+            return fail('no scripts/ directory found next to skill file', Math.round(this.#clock() - start));
+        }
+        const scriptName = entries[0];
+        const ext = lowerExt(scriptName);
+        const interp = INTERPRETER_BY_EXT[ext];
+        if (!interp) {
+            return fail(`unsupported script extension: ${ext || '(none)'} — allowed: .py, .sh, .js, .mjs`, Math.round(this.#clock() - start));
+        }
+        const scriptPath = join(skill.scriptsDir, scriptName);
+        try {
+            const sandboxResult = await this.#sandbox.run(interp.cmd, [scriptPath], {
+                env: { SKILLFORGE_INPUT: context.input },
+                signal: context.signal,
+                allowNetwork: skill.allowNetwork === true,
+            });
+            const durationMs = sandboxResult.durationMs;
+            if (sandboxResult.timedOut) {
+                return { ok: false, output: sandboxResult.stdout, error: 'timeout', durationMs };
+            }
+            if (sandboxResult.exitCode === 0) {
+                return { ok: true, output: sandboxResult.stdout, durationMs };
+            }
+            return {
+                ok: false,
+                output: sandboxResult.stdout,
+                error: sandboxResult.stderr || `exit code ${sandboxResult.exitCode}`,
+                durationMs,
+            };
+        }
+        catch (err) {
+            const errMsg = err instanceof Error ? err.message : String(err);
+            this.#logger?.error(`[skillforge] script-strategy error skill=${skill.name} err=${errMsg}`);
+            return fail(`sandbox error: ${errMsg}`, Math.round(this.#clock() - start));
+        }
+    }
+}
+//# sourceMappingURL=script-strategy.js.map

package/dist/handlers/script-strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-strategy.js","sourceRoot":"","sources":["../../src/handlers/script-strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAejC,MAAM,kBAAkB,GAA2D;IACjF,KAAK,EAAG,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE;IACjD,KAAK,EAAG,EAAE,GAAG,EAAE,MAAM,EAAK,eAAe,EAAE,IAAI,EAAE;IACjD,KAAK,EAAG,EAAE,GAAG,EAAE,MAAM,EAAK,eAAe,EAAE,IAAI,EAAE;IACjD,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAK,eAAe,EAAE,IAAI,EAAE;CAClD,CAAC;AAEF,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,IAAI,CAAC,KAAa,EAAE,UAAU,GAAG,CAAC;IACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,OAAO,cAAc;IAChB,IAAI,GAAiB,QAAQ,CAAC;IAC9B,QAAQ,CAAgB;IACxB,gBAAgB,CAAgB;IAChC,OAAO,CAAU;IACjB,MAAM,CAAe;IAE9B,YAAY,IAAwB;QAClC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC;QACnC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,SAAS,CAAC,KAAmB;QAC3B,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC/C,oCAAoC;QACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAmB,EAAE,OAA0B;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAE5B,8BAA8B;QAC9B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,gEAAgE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;QACnH,CAAC;QAED,4BAA4B;QAC5B,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,sEAAsE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;QACzH,CAAC;QAED,0CAA0C;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,wDAAwD,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,gDAAgD,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;QACnG,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,iCAAiC,GAAG,IAAI,QAAQ,iCAAiC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;QACpI,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAEtD,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE;gBACtE,GAAG,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,KAAK,EAAE;gBACxC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,YAAY,EAAE,KAAK,CAAC,YAAY,KAAK,IAAI;aAC1C,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC;YAE5C,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;gBAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;YACnF,CAAC;YACD,IAAI,aAAa,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;YAChE,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,aAAa,CAAC,MAAM;gBAC5B,KAAK,EAAE,aAAa,CAAC,MAAM,IAAI,aAAa,aAAa,CAAC,QAAQ,EAAE;gBACpE,UAAU;aACX,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,4CAA4C,KAAK,CAAC,IAAI,QAAQ,MAAM,EAAE,CAAC,CAAC;YAC5F,OAAO,IAAI,CAAC,kBAAkB,MAAM,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;CACF"}

package/dist/installers/atomic-write.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Atomic JSON / TOML helpers with .backup snapshots.
+ *
+ * Read helpers return null on missing file, throw on corrupt content.
+ * Write helpers go via <path>.tmp + fs.rename and snapshot the previous
+ * content into <path>.backup before overwriting. On rename failure the
+ * backup is restored.
+ */
+export declare function readJsonSafe(path: string): Promise<unknown | null>;
+export declare function readTomlSafe(path: string): Promise<Record<string, unknown> | null>;
+export declare function writeJsonAtomic(path: string, data: unknown): Promise<void>;
+export declare function writeTomlAtomic(path: string, data: Record<string, unknown>): Promise<void>;
+//# sourceMappingURL=atomic-write.d.ts.map

package/dist/installers/atomic-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-write.d.ts","sourceRoot":"","sources":["../../src/installers/atomic-write.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAaxE;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAaxF;AA6BD,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhF;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhG"}