@nac3/forge-cli 0.2.0-alpha.9 → 0.2.1-alpha.60

package/dist/chat/tools/shell.js

@@ -0,0 +1,253 @@
+/**
+ * shell.ts -- yujin.shell.exec runtime (alpha.59d).
+ *
+ * Spawns a process via child_process.exec (shell-on, so the
+ * caller can use redirects + pipes), captures stdout/stderr,
+ * honours timeout, and records an audit entry.
+ *
+ * Security model -- see also src/core/shell_classifier.ts:
+ *   1. Caller (dispatcher / system prompt) is expected to have
+ *      already run the classifier + shown the approval modal.
+ *   2. The handler defaults cwd to ctx.projectRoot. If a
+ *      different cwd is passed AND it falls outside the project
+ *      root, the cwd_boundary_strict flag in limits.shell
+ *      decides whether to refuse or allow (the dispatcher gates
+ *      the approval prompt on this same flag).
+ *   3. env is whitelisted: only PATH + HOME + USER +
+ *      USERPROFILE + TEMP + TMP + the caller-supplied extras
+ *      passed in args.env (post-approval). Secrets in the
+ *      Forge env never leak.
+ *   4. Timeout is bounded by limits.shell.timeout_ms_max.
+ *   5. Output truncated at limits.shell.max_output_bytes.
+ *   6. Every invocation gets a row in
+ *      $YF_CONFIG_DIR/cache/audit_log.jsonl with full risk
+ *      classification + outcome.
+ *
+ * ASCII-only.
+ */
+import { spawn } from 'node:child_process';
+import path from 'node:path';
+import { classifyShellCommand } from '../../core/shell_classifier.js';
+import { readLimitsConfig } from '../../core/limits_config.js';
+import { recordAudit } from '../../core/audit_log.js';
+const _activeShells = new Map();
+/** Test seam. */
+export function _activeShellsForTest() {
+    return _activeShells;
+}
+/** Called by /api/forge/shell-kill endpoint. Returns true when the
+ *  handle existed + a kill signal was sent. */
+export function killShellByHandle(handleId) {
+    const entry = _activeShells.get(handleId);
+    if (!entry)
+        return { ok: false, reason: 'handle not found (already finished?)' };
+    try {
+        entry.child.kill('SIGTERM');
+        /* SIGKILL fallback if the process ignores SIGTERM. */
+        setTimeout(() => {
+            const still = _activeShells.get(handleId);
+            if (still) {
+                try {
+                    still.child.kill('SIGKILL');
+                }
+                catch { /* */ }
+            }
+        }, 2000);
+        return { ok: true };
+    }
+    catch (err) {
+        return { ok: false, reason: err instanceof Error ? err.message : String(err) };
+    }
+}
+/** Default env whitelist. Caller-supplied env is layered on
+ *  top after approval. */
+const DEFAULT_ENV_WHITELIST = [
+    'PATH', 'HOME', 'USER', 'USERPROFILE', 'TEMP', 'TMP', 'TMPDIR',
+    'LANG', 'LC_ALL', 'TERM', 'SHELL', 'NODE_OPTIONS', 'COMSPEC',
+];
+function pickWhitelistedEnv() {
+    const out = {};
+    for (const k of DEFAULT_ENV_WHITELIST) {
+        const v = process.env[k];
+        if (typeof v === 'string')
+            out[k] = v;
+    }
+    return out;
+}
+function cwdOutsideRoot(cwd, projectRoot) {
+    const c = path.resolve(cwd);
+    const r = path.resolve(projectRoot);
+    const rel = path.relative(r, c);
+    return rel.startsWith('..') || path.isAbsolute(rel);
+}
+export async function runShellExec(args, ctx) {
+    const tool = 'yujin.shell.exec';
+    if (typeof args.command !== 'string' || args.command.trim() === '') {
+        return { tool, is_error: true, result: { error: 'command required' }, display: 'no command' };
+    }
+    const command = args.command;
+    const limits = await readLimitsConfig();
+    const classification = classifyShellCommand(command);
+    const timeoutMs = Math.min(Math.max(args.timeout_ms ?? limits.shell.timeout_ms_default, 1000), limits.shell.timeout_ms_max);
+    const cwd = args.cwd
+        ? (path.isAbsolute(args.cwd) ? args.cwd : path.resolve(ctx.projectRoot, args.cwd))
+        : ctx.projectRoot;
+    /* alpha.59d Q2 -- cwd boundary check. The dispatcher should
+     *  have already pushed an extra approval prompt when escaping
+     *  the root. The handler enforces the rule too as a defense
+     *  in depth: refuse when strict + outside + no approval mode
+     *  carried. */
+    if (limits.shell.cwd_boundary_strict
+        && cwdOutsideRoot(cwd, ctx.projectRoot)
+        && args.approval_mode !== 'user_approved'
+        && args.approval_mode !== 'danger_zone_bypass') {
+        return {
+            tool, is_error: true,
+            result: {
+                error: 'cwd outside project root requires approval',
+                cwd, project_root: ctx.projectRoot,
+            },
+            display: 'cwd outside root',
+        };
+    }
+    const useShell = process.platform === 'win32' ? true : '/bin/bash';
+    const env = { ...pickWhitelistedEnv(), ...(args.env ?? {}) };
+    const maxBytes = limits.shell.max_output_bytes;
+    let stdout = '';
+    let stderr = '';
+    let stdoutTruncated = false;
+    let stderrTruncated = false;
+    let exitCode = null;
+    let killed = false;
+    const start = Date.now();
+    /* alpha.59f -- live streaming of stdout/stderr via the
+     *  ToolContext.streamEmit callback. Each chunk fires a
+     *  shell_output event with the stream label + chunk text +
+     *  byte count so the panel can update a pizarron tab in
+     *  real time. When ctx.streamEmit is missing (legacy JSON
+     *  mode), this is a no-op + the final result still carries
+     *  the full output. */
+    const emit = (typeof ctx.streamEmit === 'function')
+        ? ctx.streamEmit
+        : null;
+    /* alpha.59i -- register an active shell handle so the panel
+     *  can cancel via /api/forge/shell-kill. Handle id is opaque
+     *  but short enough to fit in SSE events + audit rows. */
+    const handleId = 'shx_' + Date.now().toString(36) + '_' + Math.random().toString(36).slice(2, 8);
+    if (emit) {
+        try {
+            emit('shell_started', { handle_id: handleId, command, cwd });
+        }
+        catch { /* swallow */ }
+    }
+    await new Promise((resolve) => {
+        const child = spawn(command, {
+            cwd,
+            env,
+            shell: useShell,
+        });
+        _activeShells.set(handleId, {
+            handle_id: handleId,
+            child,
+            command,
+            started_at: start,
+        });
+        const timer = setTimeout(() => {
+            killed = true;
+            try {
+                child.kill('SIGTERM');
+            }
+            catch { /* */ }
+            setTimeout(() => { try {
+                child.kill('SIGKILL');
+            }
+            catch { /* */ } }, 2000);
+        }, timeoutMs);
+        child.stdout?.on('data', (chunk) => {
+            if (stdoutTruncated)
+                return;
+            const text = chunk.toString('utf-8');
+            stdout += text;
+            if (emit) {
+                try {
+                    emit('shell_output', { stream: 'stdout', chunk: text, bytes_so_far: stdout.length, command });
+                }
+                catch { /* swallow */ }
+            }
+            if (stdout.length > maxBytes) {
+                stdout = stdout.slice(0, maxBytes) + '\n[...truncated at ' + maxBytes + ' bytes...]';
+                stdoutTruncated = true;
+                try {
+                    child.kill('SIGTERM');
+                }
+                catch { /* */ }
+            }
+        });
+        child.stderr?.on('data', (chunk) => {
+            if (stderrTruncated)
+                return;
+            const text = chunk.toString('utf-8');
+            stderr += text;
+            if (emit) {
+                try {
+                    emit('shell_output', { stream: 'stderr', chunk: text, bytes_so_far: stderr.length, command });
+                }
+                catch { /* swallow */ }
+            }
+            if (stderr.length > maxBytes) {
+                stderr = stderr.slice(0, maxBytes) + '\n[...truncated at ' + maxBytes + ' bytes...]';
+                stderrTruncated = true;
+            }
+        });
+        child.on('error', (err) => {
+            clearTimeout(timer);
+            stderr = stderr + (stderr ? '\n' : '') + 'spawn error: ' + (err instanceof Error ? err.message : String(err));
+            exitCode = null;
+            resolve();
+        });
+        child.on('close', (code) => {
+            clearTimeout(timer);
+            _activeShells.delete(handleId);
+            exitCode = typeof code === 'number' ? code : null;
+            resolve();
+        });
+        child.on('error', () => {
+            _activeShells.delete(handleId);
+        });
+    });
+    const durationMs = Date.now() - start;
+    await recordAudit({
+        kind: 'shell.exec',
+        summary: 'shell.exec ' + command.slice(0, 120),
+        approval_mode: args.approval_mode ?? 'user_approved',
+        command,
+        cwd,
+        risk_bucket: classification.bucket,
+        risk_reasons: classification.reasons,
+        exit_code: exitCode,
+        duration_ms: durationMs,
+        killed,
+        stdout_bytes: stdout.length,
+        stderr_bytes: stderr.length,
+    });
+    return {
+        tool,
+        is_error: exitCode !== 0,
+        result: {
+            command,
+            cwd,
+            handle_id: handleId,
+            exit_code: exitCode,
+            stdout,
+            stderr,
+            stdout_truncated: stdoutTruncated,
+            stderr_truncated: stderrTruncated,
+            killed,
+            duration_ms: durationMs,
+            risk_bucket: classification.bucket,
+            risk_reasons: classification.reasons,
+        },
+        display: 'shell ' + (killed ? 'killed' : 'exit=' + exitCode) + ' (' + durationMs + 'ms)',
+    };
+}
+//# sourceMappingURL=shell.js.map

package/dist/chat/tools/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../../src/chat/tools/shell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AActD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;AAErD,iBAAiB;AACjB,MAAM,UAAU,oBAAoB;IAClC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;+CAC+C;AAC/C,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACjF,IAAI,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5B,sDAAsD;QACtD,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC;oBAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACjF,CAAC;AACH,CAAC;AAeD;0BAC0B;AAC1B,MAAM,qBAAqB,GAAG;IAC5B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ;IAC9D,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS;CAC7D,CAAC;AAEF,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,qBAAqB,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,WAAmB;IACtD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAmB,EACnB,GAAgB;IAEhB,MAAM,IAAI,GAAG,kBAAkB,CAAC;IAChC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAChG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACxC,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,IAAI,CAAC,EAClE,MAAM,CAAC,KAAK,CAAC,cAAc,CAC5B,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;QAClB,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAClF,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;IAEpB;;;;mBAIe;IACf,IAAI,MAAM,CAAC,KAAK,CAAC,mBAAmB;WAC7B,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC;WACpC,IAAI,CAAC,aAAa,KAAK,eAAe;WACtC,IAAI,CAAC,aAAa,KAAK,oBAAoB,EAAE,CAAC;QACnD,OAAO;YACL,IAAI,EAAE,QAAQ,EAAE,IAAI;YACpB,MAAM,EAAE;gBACN,KAAK,EAAE,4CAA4C;gBACnD,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,WAAW;aACnC;YACD,OAAO,EAAE,kBAAkB;SAC5B,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IACnE,MAAM,GAAG,GAAG,EAAE,GAAG,kBAAkB,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAE/C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB;;;;;;2BAMuB;IACvB,MAAM,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,UAAU,KAAK,UAAU,CAAC;QACjD,CAAC,CAAC,GAAG,CAAC,UAAU;QAChB,CAAC,CAAC,IAAI,CAAC;IAET;;8DAE0D;IAC1D,MAAM,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjG,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YAAC,IAAI,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAAC,CAAC;QACrE,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;YAC3B,GAAG;YACH,GAAG;YACH,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE;YAC1B,SAAS,EAAE,QAAQ;YACnB,KAAK;YACL,OAAO;YACP,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;YAC9C,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7E,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,eAAe;gBAAE,OAAO;YAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,IAAI,IAAI,CAAC;YACf,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC;oBAAC,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBAAC,CAAC;gBACtG,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;gBAC7B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,qBAAqB,GAAG,QAAQ,GAAG,YAAY,CAAC;gBACrF,eAAe,GAAG,IAAI,CAAC;gBACvB,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;YAChD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,eAAe;gBAAE,OAAO;YAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,IAAI,IAAI,CAAC;YACf,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC;oBAAC,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBAAC,CAAC;gBACtG,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;gBAC7B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,qBAAqB,GAAG,QAAQ,GAAG,YAAY,CAAC;gBACrF,eAAe,GAAG,IAAI,CAAC;YACzB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,eAAe,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9G,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,QAAQ,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAClD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACtC,MAAM,WAAW,CAAC;QAChB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAC9C,aAAa,EAAG,IAAI,CAAC,aAAuB,IAAI,eAAe;QAC/D,OAAO;QACP,GAAG;QACH,WAAW,EAAE,cAAc,CAAC,MAAM;QAClC,YAAY,EAAE,cAAc,CAAC,OAAO;QACpC,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,UAAU;QACvB,MAAM;QACN,YAAY,EAAE,MAAM,CAAC,MAAM;QAC3B,YAAY,EAAE,MAAM,CAAC,MAAM;KAC5B,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,QAAQ,KAAK,CAAC;QACxB,MAAM,EAAE;YACN,OAAO;YACP,GAAG;YACH,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,QAAQ;YACnB,MAAM;YACN,MAAM;YACN,gBAAgB,EAAE,eAAe;YACjC,gBAAgB,EAAE,eAAe;YACjC,MAAM;YACN,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,cAAc,CAAC,MAAM;YAClC,YAAY,EAAE,cAAc,CAAC,OAAO;SACrC;QACD,OAAO,EAAE,QAAQ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,GAAG,QAAQ,CAAC,GAAG,IAAI,GAAG,UAAU,GAAG,KAAK;KACzF,CAAC;AACJ,CAAC"}

package/dist/chat/tools/wiring.d.ts

@@ -0,0 +1,28 @@
+/**
+ * NAC-3 verbs for the wiring registry (PND-012).
+ *
+ *   yujin.wiring.list      -- read-only
+ *   yujin.wiring.discover  -- confirm; re-scans + persists
+ *   yujin.wiring.annotate  -- confirm; preserves across re-discover
+ *   yujin.wiring.forget    -- destructive
+ *   yujin.wiring.explain   -- read-only markdown summary
+ *
+ * Per-project at ~/.yujin-forge/projects/<slug>/wiring.json. The chat
+ * server auto-injects a PROJECT WIRING section into the system prompt
+ * every turn; these verbs are the LLM's read/write surface.
+ *
+ * ASCII-only.
+ */
+import type { ToolContext, ToolResult } from '../tools.js';
+export declare function runWiringList(_args: unknown, ctx: ToolContext): Promise<ToolResult>;
+export declare function runWiringDiscover(_args: unknown, ctx: ToolContext): Promise<ToolResult>;
+interface AnnotateArgs {
+    hook_id: string;
+    user_annotation?: string;
+    disabled?: boolean;
+}
+export declare function runWiringAnnotate(args: AnnotateArgs, ctx: ToolContext): Promise<ToolResult>;
+export declare function runWiringForget(_args: unknown, ctx: ToolContext): Promise<ToolResult>;
+export declare function runWiringExplain(_args: unknown, ctx: ToolContext): Promise<ToolResult>;
+export {};
+//# sourceMappingURL=wiring.d.ts.map

package/dist/chat/tools/wiring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wiring.d.ts","sourceRoot":"","sources":["../../../src/chat/tools/wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmB3D,wBAAsB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAUzF;AAID,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAY7F;AAID,UAAU,YAAY;IACpB,OAAO,EAAW,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAS,OAAO,CAAC;CAC3B;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAiBjG;AAID,wBAAsB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAS3F;AAID,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAkC5F"}

package/dist/chat/tools/wiring.js

@@ -0,0 +1,116 @@
+import { readWiring, replaceHooks, annotateHook, forgetWiring, } from '../../wiring/store.js';
+import { discoverWiring } from '../../wiring/discover.js';
+function requireSlug(ctx) {
+    const slug = ctx.projectSlug;
+    if (!slug || typeof slug !== 'string' || slug.length === 0) {
+        return { error: 'no active project; switch one with `yf projects switch <slug>`' };
+    }
+    return slug;
+}
+function err(tool, message) {
+    return { tool, result: { error: message }, is_error: true, display: tool + ': ' + message };
+}
+/* ---------------- yujin.wiring.list ---------------- */
+export async function runWiringList(_args, ctx) {
+    const slug = requireSlug(ctx);
+    if (typeof slug === 'object')
+        return err('yujin.wiring.list', slug.error);
+    const file = await readWiring(slug);
+    return {
+        tool: 'yujin.wiring.list',
+        result: { project: slug, scanned_at: file.scanned_at, scanned_sha: file.scanned_sha, hooks: file.hooks },
+        display: 'wiring.list -> ' + file.hooks.length + ' hook(s) ('
+            + file.hooks.filter((h) => !h.disabled).length + ' active)',
+    };
+}
+/* ---------------- yujin.wiring.discover ---------------- */
+export async function runWiringDiscover(_args, ctx) {
+    const slug = requireSlug(ctx);
+    if (typeof slug === 'object')
+        return err('yujin.wiring.discover', slug.error);
+    const root = ctx.projectRoot;
+    if (!root || typeof root !== 'string')
+        return err('yujin.wiring.discover', 'ctx.projectRoot is required');
+    const r = await discoverWiring({ project_root: root });
+    const file = await replaceHooks(slug, r.hooks, r.scanned_sha);
+    return {
+        tool: 'yujin.wiring.discover',
+        result: { project: slug, scanned_sha: r.scanned_sha, inspected: r.inspected.length, hooks: file.hooks.length },
+        display: 'wiring.discover -> ' + file.hooks.length + ' hook(s) from ' + r.inspected.length + ' file(s)',
+    };
+}
+export async function runWiringAnnotate(args, ctx) {
+    const slug = requireSlug(ctx);
+    if (typeof slug === 'object')
+        return err('yujin.wiring.annotate', slug.error);
+    if (!args.hook_id || typeof args.hook_id !== 'string')
+        return err('yujin.wiring.annotate', 'args.hook_id required');
+    const patch = {};
+    if (typeof args.user_annotation === 'string')
+        patch.user_annotation = args.user_annotation;
+    if (typeof args.disabled === 'boolean')
+        patch.disabled = args.disabled;
+    try {
+        await annotateHook(slug, args.hook_id, patch);
+    }
+    catch (e) {
+        return err('yujin.wiring.annotate', e instanceof Error ? e.message : String(e));
+    }
+    return {
+        tool: 'yujin.wiring.annotate',
+        result: { project: slug, hook_id: args.hook_id, ok: true },
+        display: 'wiring.annotate -> ' + args.hook_id,
+    };
+}
+/* ---------------- yujin.wiring.forget ---------------- */
+export async function runWiringForget(_args, ctx) {
+    const slug = requireSlug(ctx);
+    if (typeof slug === 'object')
+        return err('yujin.wiring.forget', slug.error);
+    await forgetWiring(slug);
+    return {
+        tool: 'yujin.wiring.forget',
+        result: { project: slug, ok: true },
+        display: 'wiring.forget -> wiped wiring registry for ' + slug,
+    };
+}
+/* ---------------- yujin.wiring.explain ---------------- */
+export async function runWiringExplain(_args, ctx) {
+    const slug = requireSlug(ctx);
+    if (typeof slug === 'object')
+        return err('yujin.wiring.explain', slug.error);
+    const file = await readWiring(slug);
+    if (file.hooks.length === 0) {
+        return {
+            tool: 'yujin.wiring.explain',
+            result: { project: slug, markdown: '_No wiring discovered yet. Run yujin.wiring.discover._' },
+            display: 'wiring.explain -> empty',
+        };
+    }
+    const lines = [];
+    lines.push('# Wiring for ' + slug);
+    lines.push('');
+    lines.push('Scanned: ' + file.scanned_at + ' (sha ' + file.scanned_sha + ')');
+    lines.push('');
+    for (const h of file.hooks) {
+        lines.push('## ' + h.id + (h.disabled ? '  _(disabled)_' : ''));
+        lines.push('- kind: `' + h.kind + '`');
+        lines.push('- trigger: `' + h.trigger + '`');
+        lines.push('- destination: `' + h.destination + '`');
+        lines.push('- source_file: `' + h.source_file + '`');
+        if (h.auto_runs_on.length) {
+            lines.push('- auto runs on:');
+            for (const c of h.auto_runs_on)
+                lines.push('  - `' + c + '`');
+        }
+        if (h.user_annotation)
+            lines.push('- note: ' + h.user_annotation);
+        lines.push('');
+    }
+    return {
+        tool: 'yujin.wiring.explain',
+        result: { project: slug, markdown: lines.join('\n') },
+        display: 'wiring.explain -> ' + file.hooks.length + ' hook(s)',
+    };
+}
+//# sourceMappingURL=wiring.js.map

package/dist/chat/tools/wiring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wiring.js","sourceRoot":"","sources":["../../../src/chat/tools/wiring.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,GACrD,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,SAAS,WAAW,CAAC,GAAgB;IACnC,MAAM,IAAI,GAAI,GAAgC,CAAC,WAAW,CAAC;IAC3D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,KAAK,EAAE,gEAAgE,EAAE,CAAC;IACrF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,SAAS,GAAG,CAAC,IAAY,EAAE,OAAe;IACxC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,GAAG,IAAI,GAAG,OAAO,EAAE,CAAC;AAC9F,CAAC;AAED,yDAAyD;AAEzD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAc,EAAE,GAAgB;IAClE,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QACxG,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY;cACzD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,UAAU;KAC9D,CAAC;AACJ,CAAC;AAED,6DAA6D;AAE7D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAc,EAAE,GAAgB;IACtE,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAI,GAAgC,CAAC,WAAW,CAAC;IAC3D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,uBAAuB,EAAE,6BAA6B,CAAC,CAAC;IAC1G,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IAC9D,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;QAC9G,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,gBAAgB,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,UAAU;KACxG,CAAC;AACJ,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAkB,EAAE,GAAgB;IAC1E,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;IACpH,MAAM,KAAK,GAAqD,EAAE,CAAC;IACnE,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;QAAE,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC3F,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAQ,KAAK,CAAC,QAAQ,GAAU,IAAI,CAAC,QAAQ,CAAC;IACpF,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,uBAAuB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE;QAC1D,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAAC,OAAO;KAC9C,CAAC;AACJ,CAAC;AAED,2DAA2D;AAE3D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAc,EAAE,GAAgB;IACpE,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5E,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE;QACnC,OAAO,EAAE,6CAA6C,GAAG,IAAI;KAC9D,CAAC;AACJ,CAAC;AAED,4DAA4D;AAE5D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAc,EAAE,GAAgB;IACrE,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,sBAAsB;YAC5B,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,wDAAwD,EAAE;YAC7F,OAAO,EAAE,yBAAyB;SACnC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,GAAG,QAAQ,GAAG,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;IAC9E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,CAAC,eAAe;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACrD,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,UAAU;KAC/D,CAAC;AACJ,CAAC"}

package/dist/chat/tools/workflow.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Chat tool surface for the PRODUCT_WORKFLOW.md state machine.
+ *
+ * Three tools that let Forge drive the entire 18-step methodology
+ * from inside the chat panel, without the user dropping to the CLI:
+ *
+ *   forge_workflow_state(scope?)     read workflow state (full or scoped)
+ *   forge_workflow_set(group, patch) persist a patch under workflow.<group>
+ *   forge_workflow_run_step(step)    run an autonomous step
+ *                                     (legacy_audit, coverage, manual_generate,
+ *                                      handoff, metrics) without prompts
+ *
+ * Design notes:
+ *  - State write goes through the same module the CLI verbs use
+ *    (`src/workflow/state.ts`), so a chat session and a CLI session
+ *    see the same yujin.forge.json.
+ *  - `forge_workflow_run_step` only handles steps that do NOT
+ *    require the user to answer questions (legacy_audit reads the
+ *    project; coverage greps tests; manual_generate emits markdown
+ *    from existing state). Interactive steps (triage, discover,
+ *    clarify, approve) stay CLI-driven OR are driven by Forge
+ *    asking the user in chat + calling forge_workflow_set with the
+ *    collected answers.
+ *  - Per SQ Sec 14, Forge calls forge_audit_consumers before any
+ *    structural commit; this surface is read-mostly + persistence-
+ *    safe so it does not trip that rule.
+ *
+ * ASCII-only.
+ */
+import type { ToolContext, ToolResult, ToolSpec } from '../tools.js';
+export declare const WORKFLOW_STATE_SPEC: ToolSpec;
+export declare function runWorkflowState(args: {
+    scope?: string;
+}, ctx: ToolContext): Promise<ToolResult>;
+export declare const WORKFLOW_SET_SPEC: ToolSpec;
+export declare function runWorkflowSet(args: {
+    group?: string;
+    patch?: Record<string, unknown>;
+    top_level?: boolean;
+}, ctx: ToolContext): Promise<ToolResult>;
+export declare const WORKFLOW_RUN_STEP_SPEC: ToolSpec;
+export declare function runWorkflowRunStep(args: {
+    step?: string;
+}, ctx: ToolContext): Promise<ToolResult>;
+export declare const WORKFLOW_LOG_STEP_SPEC: ToolSpec;
+export declare function runWorkflowLogStep(args: {
+    kind?: string;
+    stage_id?: string;
+    stage_title?: string;
+    step_id?: string;
+    step_title?: string;
+    event?: string;
+    content?: string;
+}, ctx: ToolContext): Promise<ToolResult>;
+//# sourceMappingURL=workflow.d.ts.map

package/dist/chat/tools/workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../../src/chat/tools/workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAYrE,eAAO,MAAM,mBAAmB,EAAE,QAqBjC,CAAC;AAEF,wBAAsB,gBAAgB,CACpC,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EACxB,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,UAAU,CAAC,CA+BrB;AAMD,eAAO,MAAM,iBAAiB,EAAE,QAkC/B,CAAC;AAcF,wBAAsB,cAAc,CAClC,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,EAC9E,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,UAAU,CAAC,CA4DrB;AAMD,eAAO,MAAM,sBAAsB,EAAE,QAwBpC,CAAC;AAEF,wBAAsB,kBAAkB,CACtC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EACvB,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,UAAU,CAAC,CA0ErB;AA2ID,eAAO,MAAM,sBAAsB,EAAE,QAuBpC,CAAC;AAEF,wBAAsB,kBAAkB,CACtC,IAAI,EAAE;IACJ,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CACzE,EACD,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,UAAU,CAAC,CA6BrB"}