@lyupro/skillforge-mcp 1.1.0

package/dist/security/sandbox-runner.d.ts

@@ -0,0 +1,48 @@
+import { spawn } from 'node:child_process';
+import type { Logger } from '../decorators/logging-decorator.js';
+export interface SandboxRunOptions {
+    /** Additional env vars overlaid ON TOP of the whitelist (e.g. SKILLFORGE_INPUT=...).
+     *  These keys are merged into the env whitelist. */
+    env?: Record<string, string>;
+    /** AbortSignal from TimeoutDecorator. On abort: SIGTERM → 5s grace → SIGKILL. */
+    signal?: AbortSignal;
+    /** README signal field — NOT enforced at sandbox level. Node child_process
+     *  cannot disable network egress. Pass-through for skill author awareness. */
+    allowNetwork?: boolean;
+}
+export interface SandboxResult {
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    timedOut: boolean;
+    durationMs: number;
+}
+export interface SandboxRunnerDeps {
+    logger?: Logger;
+    /** Injectable spawn for testing. Defaults to node:child_process spawn. */
+    spawnFn?: typeof spawn;
+    /** Injectable clock for testing. Defaults to performance.now. */
+    clock?: () => number;
+    /** Injectable tmpdir resolver for testing. Defaults to os.tmpdir. */
+    tmpdir?: () => string;
+}
+/**
+ * Spawns a subprocess with env whitelist + temp cwd isolation.
+ *
+ * Hard-enforced (Node child_process can guarantee):
+ * - env: only PATH + opts.env overrides. No ~/.ssh / ~/.aws / USER env propagation.
+ * - cwd: fresh fs.mkdtemp(os.tmpdir()/skillforge-xxxxxx/), recursive cleanup on exit.
+ *
+ * NOT enforced (Node child_process limitation):
+ * - Network egress: subprocess inherits host network stack.
+ * - Filesystem reads outside cwd: subprocess has OS-user permissions.
+ * - CPU / memory limits.
+ *
+ * Abort handling: opts.signal.aborted → SIGTERM → 5s grace → SIGKILL.
+ */
+export declare class SandboxRunner {
+    #private;
+    constructor(deps?: SandboxRunnerDeps);
+    run(cmd: string, args: readonly string[], opts?: SandboxRunOptions): Promise<SandboxResult>;
+}
+//# sourceMappingURL=sandbox-runner.d.ts.map

package/dist/security/sandbox-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-runner.d.ts","sourceRoot":"","sources":["../../src/security/sandbox-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAK3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAMjE,MAAM,WAAW,iBAAiB;IAChC;wDACoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,iFAAiF;IACjF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;kFAC8E;IAC9E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACvB;AAmBD;;;;;;;;;;;;;GAaG;AACH,qBAAa,aAAa;;gBAMZ,IAAI,GAAE,iBAAsB;IAOlC,GAAG,CACP,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,aAAa,CAAC;CAoF1B"}

package/dist/security/sandbox-runner.js

@@ -0,0 +1,131 @@
+import { spawn } from 'node:child_process';
+import { promises as fs } from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { performance } from 'node:perf_hooks';
+const STDOUT_TAIL_LIMIT = 1_000_000; // 1 MB
+const STDERR_TAIL_LIMIT = 1_000_000;
+const SIGTERM_GRACE_MS = 5_000;
+// On Windows, restricting PATH to POSIX-only breaks subprocess discovery
+// (node/python resolved via %PATH%). On Windows we pass through process.env.PATH.
+// On POSIX we use a minimal whitelist to prevent env leakage.
+const DEFAULT_PATH = process.platform === 'win32'
+    ? (process.env.PATH ?? '')
+    : '/usr/bin:/bin';
+function buildEnv(overrides) {
+    const base = { PATH: DEFAULT_PATH };
+    if (overrides) {
+        for (const [k, v] of Object.entries(overrides)) {
+            base[k] = v;
+        }
+    }
+    return base;
+}
+/**
+ * Spawns a subprocess with env whitelist + temp cwd isolation.
+ *
+ * Hard-enforced (Node child_process can guarantee):
+ * - env: only PATH + opts.env overrides. No ~/.ssh / ~/.aws / USER env propagation.
+ * - cwd: fresh fs.mkdtemp(os.tmpdir()/skillforge-xxxxxx/), recursive cleanup on exit.
+ *
+ * NOT enforced (Node child_process limitation):
+ * - Network egress: subprocess inherits host network stack.
+ * - Filesystem reads outside cwd: subprocess has OS-user permissions.
+ * - CPU / memory limits.
+ *
+ * Abort handling: opts.signal.aborted → SIGTERM → 5s grace → SIGKILL.
+ */
+export class SandboxRunner {
+    #logger;
+    #spawn;
+    #clock;
+    #tmpdir;
+    constructor(deps = {}) {
+        this.#logger = deps.logger;
+        this.#spawn = deps.spawnFn ?? spawn;
+        this.#clock = deps.clock ?? (() => performance.now());
+        this.#tmpdir = deps.tmpdir ?? (() => os.tmpdir());
+    }
+    async run(cmd, args, opts = {}) {
+        const start = this.#clock();
+        const tmpDir = await fs.mkdtemp(path.join(this.#tmpdir(), 'skillforge-'));
+        try {
+            return await this.#runInDir(cmd, args, opts, tmpDir, start);
+        }
+        finally {
+            // Cleanup must happen even if abort raced.
+            // fs.rm with force+recursive swallows ENOENT.
+            await fs.rm(tmpDir, { recursive: true, force: true }).catch((err) => {
+                this.#logger?.warn(`[skillforge] sandbox cleanup failed dir=${tmpDir} err=${err.message}`);
+            });
+        }
+    }
+    async #runInDir(cmd, args, opts, tmpDir, start) {
+        return new Promise((resolve, reject) => {
+            const child = this.#spawn(cmd, args, {
+                cwd: tmpDir,
+                env: buildEnv(opts.env),
+                stdio: ['ignore', 'pipe', 'pipe'],
+            });
+            let stdoutLen = 0;
+            let stderrLen = 0;
+            const stdoutChunks = [];
+            const stderrChunks = [];
+            let timedOut = false;
+            let sigkillTimer;
+            const onAbort = () => {
+                timedOut = true;
+                try {
+                    child.kill('SIGTERM');
+                }
+                catch { /* ignore */ }
+                sigkillTimer = setTimeout(() => {
+                    try {
+                        child.kill('SIGKILL');
+                    }
+                    catch { /* ignore */ }
+                }, SIGTERM_GRACE_MS);
+                if (sigkillTimer.unref)
+                    sigkillTimer.unref();
+            };
+            if (opts.signal) {
+                if (opts.signal.aborted) {
+                    onAbort();
+                }
+                else {
+                    opts.signal.addEventListener('abort', onAbort, { once: true });
+                }
+            }
+            child.stdout?.on('data', (chunk) => {
+                if (stdoutLen < STDOUT_TAIL_LIMIT) {
+                    stdoutChunks.push(chunk);
+                    stdoutLen += chunk.length;
+                }
+            });
+            child.stderr?.on('data', (chunk) => {
+                if (stderrLen < STDERR_TAIL_LIMIT) {
+                    stderrChunks.push(chunk);
+                    stderrLen += chunk.length;
+                }
+            });
+            child.on('error', (err) => {
+                if (sigkillTimer)
+                    clearTimeout(sigkillTimer);
+                if (opts.signal)
+                    opts.signal.removeEventListener('abort', onAbort);
+                reject(err);
+            });
+            child.on('close', (exitCode) => {
+                if (sigkillTimer)
+                    clearTimeout(sigkillTimer);
+                if (opts.signal)
+                    opts.signal.removeEventListener('abort', onAbort);
+                const stdout = Buffer.concat(stdoutChunks).subarray(0, STDOUT_TAIL_LIMIT).toString('utf8');
+                const stderr = Buffer.concat(stderrChunks).subarray(0, STDERR_TAIL_LIMIT).toString('utf8');
+                const durationMs = Math.round(this.#clock() - start);
+                resolve({ exitCode, stdout, stderr, timedOut, durationMs });
+            });
+        });
+    }
+}
+//# sourceMappingURL=sandbox-runner.js.map

package/dist/security/sandbox-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-runner.js","sourceRoot":"","sources":["../../src/security/sandbox-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,MAAM,iBAAiB,GAAG,SAAS,CAAC,CAAC,OAAO;AAC5C,MAAM,iBAAiB,GAAG,SAAS,CAAC;AACpC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AA+B/B,yEAAyE;AACzE,kFAAkF;AAClF,8DAA8D;AAC9D,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;IAC/C,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC1B,CAAC,CAAC,eAAe,CAAC;AAEpB,SAAS,QAAQ,CAAC,SAAkC;IAClD,MAAM,IAAI,GAA2B,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC5D,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,aAAa;IACf,OAAO,CAAU;IACjB,MAAM,CAAe;IACrB,MAAM,CAAe;IACrB,OAAO,CAAe;IAE/B,YAAY,OAA0B,EAAE;QACtC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,GAAG,CACP,GAAW,EACX,IAAuB,EACvB,OAA0B,EAAE;QAE5B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC;gBAAS,CAAC;YACT,2CAA2C;YAC3C,8CAA8C;YAC9C,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAClE,IAAI,CAAC,OAAO,EAAE,IAAI,CAChB,2CAA2C,MAAM,QAAS,GAAa,CAAC,OAAO,EAAE,CAClF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,GAAW,EACX,IAAuB,EACvB,IAAuB,EACvB,MAAc,EACd,KAAa;QAEb,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAgB,EAAE;gBAC/C,GAAG,EAAE,MAAM;gBACX,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;gBACvB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,MAAM,YAAY,GAAa,EAAE,CAAC;YAClC,MAAM,YAAY,GAAa,EAAE,CAAC;YAClC,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,YAAuD,CAAC;YAE5D,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACrD,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC7B,IAAI,CAAC;wBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACvD,CAAC,EAAE,gBAAgB,CAAC,CAAC;gBACrB,IAAI,YAAY,CAAC,KAAK;oBAAE,YAAY,CAAC,KAAK,EAAE,CAAC;YAC/C,CAAC,CAAC;YAEF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACxB,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;YAED,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,IAAI,SAAS,GAAG,iBAAiB,EAAE,CAAC;oBAClC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzB,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;gBAC5B,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,IAAI,SAAS,GAAG,iBAAiB,EAAE,CAAC;oBAClC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzB,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;gBAC5B,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,IAAI,YAAY;oBAAE,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC7C,IAAI,IAAI,CAAC,MAAM;oBAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACnE,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC7B,IAAI,YAAY;oBAAE,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC7C,IAAI,IAAI,CAAC,MAAM;oBAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACnE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3F,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3F,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;gBACrD,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/server-deps.d.ts

@@ -0,0 +1,28 @@
+import type { SkillRegistry, SkillResolver, SkillMetadataCache, SkillContentCache } from './core/index.js';
+import type { FrontmatterParser, FileScanner } from './parser/index.js';
+import type { StrategyFactory } from './factory/index.js';
+import type { BlacklistFilter } from './security/index.js';
+import type { ConfigStore } from './config/index.js';
+import type { FolderWatcher } from './watcher/index.js';
+import type { Logger } from './decorators/index.js';
+import type { SandboxRunner } from './security/sandbox-runner.js';
+import type { DecoratorChain } from './decorators/index.js';
+export interface ServerDeps {
+    /** Mutable in-place: configure tool replaces contents via splice. The loader
+     *  re-reads on every ensureRegistryFresh call, so swap-in-place propagates. */
+    folders: string[];
+    configStore: ConfigStore;
+    registry: SkillRegistry;
+    resolver: SkillResolver;
+    metadataCache: SkillMetadataCache;
+    contentCache: SkillContentCache;
+    scanner: FileScanner;
+    parser: FrontmatterParser;
+    factory: StrategyFactory;
+    blacklistFilter: BlacklistFilter;
+    folderWatcher: FolderWatcher;
+    logger: Logger;
+    sandboxRunner: SandboxRunner;
+    decoratorChain: DecoratorChain;
+}
+//# sourceMappingURL=server-deps.d.ts.map

package/dist/server-deps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-deps.d.ts","sourceRoot":"","sources":["../src/server-deps.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAC3G,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,WAAW,UAAU;IACzB;mFAC+E;IAC/E,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,WAAW,CAAC;IACzB,QAAQ,EAAE,aAAa,CAAC;IACxB,QAAQ,EAAE,aAAa,CAAC;IACxB,aAAa,EAAE,kBAAkB,CAAC;IAClC,YAAY,EAAE,iBAAiB,CAAC;IAChC,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,eAAe,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,aAAa,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;CAChC"}

package/dist/server-deps.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=server-deps.js.map

package/dist/server-deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-deps.js","sourceRoot":"","sources":["../src/server-deps.ts"],"names":[],"mappings":""}

package/dist/server.d.ts

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+/**
+ * SkillForge MCP — stdio entry point.
+ *
+ * buildServer() and buildDeps() are exported for integration tests so the
+ * same wiring is exercised in-process without spawning a subprocess.
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ServerDeps } from './server-deps.js';
+export declare function buildServer(deps: ServerDeps): McpServer;
+export declare function buildDeps(): Promise<ServerDeps>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAmBpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAcnD,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,CAgGvD;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,CA2DrD"}

package/dist/server.js

@@ -0,0 +1,174 @@
+#!/usr/bin/env node
+/**
+ * SkillForge MCP — stdio entry point.
+ *
+ * buildServer() and buildDeps() are exported for integration tests so the
+ * same wiring is exercised in-process without spawning a subprocess.
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { loadResolvedConfig, buildPatternScanner } from './config.js';
+import { ConfigStore, defaultConfigPath } from './config/index.js';
+import { FolderWatcher } from './watcher/index.js';
+import { SkillRegistry, SkillResolver, SkillMetadataCache, SkillContentCache, } from './core/index.js';
+import { FrontmatterParser, FileScanner } from './parser/index.js';
+import { PromptStrategy } from './handlers/index.js';
+import { ScriptStrategy } from './handlers/script-strategy.js';
+import { HybridStrategy } from './handlers/hybrid-strategy.js';
+import { StrategyFactory } from './factory/index.js';
+import { BlacklistFilter } from './security/index.js';
+import { SandboxRunner } from './security/sandbox-runner.js';
+import { DecoratorChain, stderrLogger } from './decorators/index.js';
+import { listInputSchema, getInputSchema, invokeInputSchema, configureInputSchema, reloadInputSchema, handleList, handleGet, handleInvoke, handleConfigure, handleReload, } from './tools/index.js';
+export function buildServer(deps) {
+    const server = new McpServer({ name: 'skillforge-mcp', version: '0.1.0' });
+    server.registerTool('skills__list', {
+        title: 'List skills',
+        description: 'List available skills, optionally filtered by folder / search / source.',
+        inputSchema: listInputSchema,
+    }, async (args) => {
+        try {
+            const result = await handleList(deps, args);
+            return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return { content: [{ type: 'text', text: message }], isError: true };
+        }
+    });
+    server.registerTool('skills__get', {
+        title: 'Get skill',
+        description: 'Retrieve the full content (body + metadata) of a named skill.',
+        inputSchema: getInputSchema,
+    }, async (args) => {
+        try {
+            const result = await handleGet(deps, args);
+            return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return { content: [{ type: 'text', text: message }], isError: true };
+        }
+    });
+    server.registerTool('skills__invoke', {
+        title: 'Invoke skill',
+        description: 'Invoke a skill by name, forwarding optional input to the strategy.',
+        inputSchema: invokeInputSchema,
+    }, async (args) => {
+        try {
+            const result = await handleInvoke(deps, args);
+            return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return { content: [{ type: 'text', text: message }], isError: true };
+        }
+    });
+    server.registerTool('skills__configure', {
+        title: 'Configure SkillForge',
+        description: 'Manage configured skill folders, blacklist, and reset to defaults. Mutates persisted config under defaultConfigPath().',
+        inputSchema: configureInputSchema,
+    }, async (args) => {
+        try {
+            const result = await handleConfigure(deps, args);
+            return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return { content: [{ type: 'text', text: message }], isError: true };
+        }
+    });
+    server.registerTool('skills__reload', {
+        title: 'Reload skills',
+        description: 'Force a full rescan of all configured folders, returning the diff (added/removed) and any per-file errors. Pass an optional folder name to validate it is currently configured (the rescan itself remains global).',
+        inputSchema: reloadInputSchema,
+    }, async (args) => {
+        try {
+            const result = await handleReload(deps, args);
+            return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return { content: [{ type: 'text', text: message }], isError: true };
+        }
+    });
+    return server;
+}
+export async function buildDeps() {
+    const configStore = new ConfigStore({ filePath: defaultConfigPath() });
+    const resolved = await loadResolvedConfig(process.env, configStore);
+    const scanner = buildPatternScanner(resolved.persisted);
+    const blacklistFilter = new BlacklistFilter({
+        manualBlacklist: resolved.persisted.blacklist,
+        patternScanner: scanner,
+    });
+    const metadataCache = new SkillMetadataCache({ ttlMs: resolved.ttlMs });
+    const folderWatcher = new FolderWatcher({
+        folders: resolved.folders,
+        debounceMs: resolved.persisted.watcher.debounceMs,
+        onBatch: () => metadataCache.invalidate(),
+    });
+    const logger = stderrLogger;
+    const sandboxRunner = new SandboxRunner({ logger });
+    // allowScripts flag captured from initial config load. A ref object is used
+    // so tools/configure can update it by calling configStore.load() indirectly.
+    // For the current scope this snapshot approach is sufficient — a restart or reload
+    // will pick up the latest value from disk via the tools/reload path.
+    const securityRef = { allowScripts: resolved.persisted.security.allowScripts };
+    const scriptStrategy = new ScriptStrategy({
+        sandboxRunner,
+        isGloballyAllowed: () => securityRef.allowScripts === true,
+        logger,
+    });
+    const hybridStrategy = new HybridStrategy({ scriptStrategy });
+    const factory = new StrategyFactory([
+        hybridStrategy,
+        scriptStrategy,
+        new PromptStrategy(),
+    ]);
+    const invocation = resolved.persisted.invocation;
+    const decoratorChain = new DecoratorChain({
+        logger,
+        defaultTimeoutMs: invocation.defaultTimeoutMs,
+        cacheTtlMs: invocation.cacheTtlMs,
+        cacheMaxEntries: invocation.cacheMaxEntries,
+    });
+    return {
+        folders: resolved.folders,
+        configStore,
+        registry: new SkillRegistry(),
+        resolver: new SkillResolver(),
+        metadataCache,
+        contentCache: new SkillContentCache({ ttlMs: resolved.ttlMs }),
+        parser: new FrontmatterParser(),
+        scanner: new FileScanner(),
+        factory,
+        blacklistFilter,
+        folderWatcher,
+        logger,
+        sandboxRunner,
+        decoratorChain,
+    };
+}
+async function main() {
+    const deps = await buildDeps();
+    const server = buildServer(deps);
+    await server.connect(new StdioServerTransport());
+    await deps.folderWatcher.start();
+    const shutdown = async () => {
+        await deps.folderWatcher.stop();
+    };
+    process.once('SIGTERM', () => { void shutdown(); });
+    process.once('SIGINT', () => { void shutdown(); });
+}
+// Only run main() when invoked directly, not when imported by tests.
+// This is the canonical ESM "is this the entry point?" check.
+import { fileURLToPath } from 'node:url';
+const isDirectRun = process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1];
+if (isDirectRun) {
+    main().catch((err) => {
+        console.error('[skillforge] fatal:', err);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErE,OAAO,EACL,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,YAAY,EACZ,eAAe,EACf,YAAY,GACb,MAAM,kBAAkB,CAAC;AAE1B,MAAM,UAAU,WAAW,CAAC,IAAgB;IAC1C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAE3E,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,yEAAyE;QACtF,WAAW,EAAE,eAAe;KAC7B,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,+DAA+D;QAC5E,WAAW,EAAE,cAAc;KAC5B,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,oEAAoE;QACjF,WAAW,EAAE,iBAAiB;KAC/B,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACT,wHAAwH;QAC1H,WAAW,EAAE,oBAAoB;KAClC,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAA6C,CAAC,CAAC;YAC1F,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,oNAAoN;QACtN,WAAW,EAAE,iBAAiB;KAC/B,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,IAA0C,CAAC,CAAC;YACpF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC;QAC1C,eAAe,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS;QAC7C,cAAc,EAAE,OAAO;KACxB,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,IAAI,kBAAkB,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC;QACtC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU;QACjD,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE;KAC1C,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,YAAY,CAAC;IAC5B,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACpD,4EAA4E;IAC5E,6EAA6E;IAC7E,mFAAmF;IACnF,qEAAqE;IACrE,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;IAC/E,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;QACxC,aAAa;QACb,iBAAiB,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY,KAAK,IAAI;QAC1D,MAAM;KACP,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;IAE9D,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC;QAClC,cAAc;QACd,cAAc;QACd,IAAI,cAAc,EAAE;KACrB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC;IACjD,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;QACxC,MAAM;QACN,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,eAAe,EAAE,UAAU,CAAC,eAAe;KAC5C,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,WAAW;QACX,QAAQ,EAAE,IAAI,aAAa,EAAE;QAC7B,QAAQ,EAAE,IAAI,aAAa,EAAE;QAC7B,aAAa;QACb,YAAY,EAAE,IAAI,iBAAiB,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC9D,MAAM,EAAE,IAAI,iBAAiB,EAAE;QAC/B,OAAO,EAAE,IAAI,WAAW,EAAE;QAC1B,OAAO;QACP,eAAe;QACf,aAAa;QACb,MAAM;QACN,aAAa;QACb,cAAc;KACf,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,MAAM,SAAS,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;IACjD,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAEjC,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,qEAAqE;AACrE,8DAA8D;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,MAAM,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACtF,IAAI,WAAW,EAAE,CAAC;IAChB,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACnB,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/configure.d.ts

@@ -0,0 +1,22 @@
+import { z } from 'zod';
+import type { ServerDeps } from '../server-deps.js';
+export declare const configureInputSchema: {
+    readonly action: z.ZodEnum<["add_folder", "remove_folder", "list_folders", "set_blacklist", "get_blacklist", "reset"]>;
+    readonly folder: z.ZodOptional<z.ZodString>;
+    readonly blacklist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+};
+export type ConfigureAction = 'add_folder' | 'remove_folder' | 'list_folders' | 'set_blacklist' | 'get_blacklist' | 'reset';
+export interface ConfigureResult {
+    /** Currently active resolved folders (post-action). */
+    folders: string[];
+    /** Currently active manual blacklist (post-action). */
+    blacklist: string[];
+    /** Skills visible in the registry after the action took effect. */
+    totalSkills: number;
+}
+export declare function handleConfigure(deps: ServerDeps, args: {
+    action: ConfigureAction;
+    folder?: string;
+    blacklist?: string[];
+}): Promise<ConfigureResult>;
+//# sourceMappingURL=configure.d.ts.map

package/dist/tools/configure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configure.d.ts","sourceRoot":"","sources":["../../src/tools/configure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAMpD,eAAO,MAAM,oBAAoB;;;;CAWvB,CAAC;AAEX,MAAM,MAAM,eAAe,GACvB,YAAY,GACZ,eAAe,GACf,cAAc,GACd,eAAe,GACf,eAAe,GACf,OAAO,CAAC;AAEZ,MAAM,WAAW,eAAe;IAC9B,uDAAuD;IACvD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,uDAAuD;IACvD,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;CACrB;AAmBD,wBAAsB,eAAe,CACnC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GACvE,OAAO,CAAC,eAAe,CAAC,CAgG1B"}

package/dist/tools/configure.js

@@ -0,0 +1,126 @@
+import { z } from 'zod';
+import { resolve } from 'node:path';
+import { defaultConfig } from '../config/index.js';
+import { loadResolvedConfig } from '../config.js';
+import { ensureRegistryFresh } from './loader.js';
+export const configureInputSchema = {
+    action: z.enum([
+        'add_folder',
+        'remove_folder',
+        'list_folders',
+        'set_blacklist',
+        'get_blacklist',
+        'reset',
+    ]),
+    folder: z.string().optional(),
+    blacklist: z.array(z.string()).optional(),
+};
+/** Recompute resolved folders from env + persisted config, then splice deps.folders in place. */
+async function reconcileFolders(deps) {
+    const persisted = await deps.configStore.load();
+    const resolved = await loadResolvedConfig(process.env, deps.configStore);
+    // Splice in-place so all references to deps.folders see the new list.
+    deps.folders.splice(0, deps.folders.length, ...resolved.folders);
+    deps.blacklistFilter.setManualBlacklist(persisted.blacklist);
+    deps.metadataCache.invalidate();
+    try {
+        await deps.folderWatcher.setFolders(deps.folders);
+    }
+    catch (err) {
+        console.error(`[skillforge:configure] watcher setFolders failed: ${String(err)}`);
+    }
+    await ensureRegistryFresh(deps);
+    return persisted;
+}
+export async function handleConfigure(deps, args) {
+    const { action } = args;
+    try {
+        if (action === 'list_folders') {
+            const persisted = await deps.configStore.load();
+            return {
+                folders: [...deps.folders],
+                blacklist: persisted.blacklist,
+                totalSkills: deps.registry.size,
+            };
+        }
+        if (action === 'get_blacklist') {
+            const persisted = await deps.configStore.load();
+            return {
+                folders: [...deps.folders],
+                blacklist: persisted.blacklist,
+                totalSkills: deps.registry.size,
+            };
+        }
+        if (action === 'add_folder') {
+            if (args.folder === undefined) {
+                throw new Error(`configure: action "add_folder" requires "folder"`);
+            }
+            if (args.folder.trim().length === 0) {
+                throw new Error('configure: folder path must not be empty');
+            }
+            const absPath = resolve(args.folder);
+            const persisted = await deps.configStore.load();
+            const alreadyPresent = persisted.folders.some((f) => resolve(f.path) === absPath);
+            if (!alreadyPresent) {
+                persisted.folders.push({ path: absPath, priority: 100, enabled: true, tags: [] });
+            }
+            // Why: always save even on no-op — simpler than branching, atomic write is cheap.
+            await deps.configStore.save(persisted);
+            const finalPersisted = await reconcileFolders(deps);
+            return {
+                folders: [...deps.folders],
+                blacklist: finalPersisted.blacklist,
+                totalSkills: deps.registry.size,
+            };
+        }
+        if (action === 'remove_folder') {
+            if (args.folder === undefined) {
+                throw new Error(`configure: action "remove_folder" requires "folder"`);
+            }
+            const absPath = resolve(args.folder);
+            const persisted = await deps.configStore.load();
+            persisted.folders = persisted.folders.filter((f) => resolve(f.path) !== absPath);
+            await deps.configStore.save(persisted);
+            const finalPersisted = await reconcileFolders(deps);
+            return {
+                folders: [...deps.folders],
+                blacklist: finalPersisted.blacklist,
+                totalSkills: deps.registry.size,
+            };
+        }
+        if (action === 'set_blacklist') {
+            if (args.blacklist === undefined) {
+                throw new Error(`configure: action "set_blacklist" requires "blacklist"`);
+            }
+            const persisted = await deps.configStore.load();
+            persisted.blacklist = args.blacklist;
+            await deps.configStore.save(persisted);
+            const finalPersisted = await reconcileFolders(deps);
+            return {
+                folders: [...deps.folders],
+                blacklist: finalPersisted.blacklist,
+                totalSkills: deps.registry.size,
+            };
+        }
+        if (action === 'reset') {
+            const fresh = defaultConfig();
+            await deps.configStore.save(fresh);
+            const finalPersisted = await reconcileFolders(deps);
+            return {
+                folders: [...deps.folders],
+                blacklist: finalPersisted.blacklist,
+                totalSkills: deps.registry.size,
+            };
+        }
+        throw new Error(`configure: unknown action "${action}"`);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        // Avoid double-prefixing if error already has the action prefix.
+        if (msg.startsWith(`configure(${action}):`) || msg.startsWith('configure: ')) {
+            throw err;
+        }
+        throw new Error(`configure(${action}): ${msg}`);
+    }
+}
+//# sourceMappingURL=configure.js.map

package/dist/tools/configure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configure.js","sourceRoot":"","sources":["../../src/tools/configure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC;QACb,YAAY;QACZ,eAAe;QACf,cAAc;QACd,eAAe;QACf,eAAe;QACf,OAAO;KACR,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACjC,CAAC;AAmBX,iGAAiG;AACjG,KAAK,UAAU,gBAAgB,CAAC,IAAgB;IAC9C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACzE,sEAAsE;IACtE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7D,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,qDAAqD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAgB,EAChB,IAAwE;IAExE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,IAAI,CAAC;QACH,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAChD,OAAO;gBACL,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC1B,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;aAChC,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAChD,OAAO;gBACL,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC1B,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;aAChC,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAChD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC;YAClF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,kFAAkF;YAClF,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACpD,OAAO;gBACL,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC1B,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;aAChC,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAChD,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC;YACjF,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACpD,OAAO;gBACL,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC1B,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;aAChC,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAChD,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YACrC,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACpD,OAAO;gBACL,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC1B,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;aAChC,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACpD,OAAO;gBACL,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC1B,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;aAChC,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAgB,GAAG,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,iEAAiE;QACjE,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7E,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}

package/dist/tools/get.d.ts

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+import type { ServerDeps } from '../server-deps.js';
+import type { SkillContent } from '../core/types.js';
+export declare const getInputSchema: {
+    readonly name: z.ZodString;
+};
+export declare function handleGet(deps: ServerDeps, args: {
+    name: string;
+}): Promise<SkillContent>;
+//# sourceMappingURL=get.d.ts.map

package/dist/tools/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../src/tools/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGrD,eAAO,MAAM,cAAc;;CAEjB,CAAC;AAEX,wBAAsB,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAe/F"}

package/dist/tools/get.js

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+import { ensureRegistryFresh } from './loader.js';
+export const getInputSchema = {
+    name: z.string(),
+};
+export async function handleGet(deps, args) {
+    await ensureRegistryFresh(deps);
+    if (!deps.registry.has(args.name)) {
+        throw new Error(`Skill not found: ${args.name}`);
+    }
+    const cached = deps.contentCache.get(args.name);
+    if (cached !== undefined)
+        return cached;
+    // Cache miss — re-parse from disk using the metadata's location.
+    const meta = deps.registry.get(args.name);
+    const content = await deps.parser.parseFile(meta.sourcePath, meta.folder);
+    deps.contentCache.set(args.name, content);
+    return content;
+}
+//# sourceMappingURL=get.js.map

package/dist/tools/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../src/tools/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACR,CAAC;AAEX,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAgB,EAAE,IAAsB;IACtE,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAEhC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,iEAAiE;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC;AACjB,CAAC"}