@oomerevren/tryforge 0.1.2

package/CHANGELOG.md

@@ -0,0 +1,25 @@
+# Changelog
+
+Tüm önemli değişiklikler bu dosyada tutulur. Format [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) esaslıdır, sürümler [SemVer](https://semver.org/) izler.
+
+## [0.1.1] — 2026-09-03
+
+### Added
+- `tryforge` npm paketi yayınlandı (`npm i -g tryforge`).
+- 7 harness adapter'ı: Claude Code, Codex, OpenCode, Cursor, DeepSeek (dsh), Windsurf, Generic.
+- 21 verified paketlik registry (`registry/index.json` + `search.json` + `stats.json`).
+- `forge.toml` + `forge.lock` ile takım senkronu (`forge install`, `--frozen`).
+- `forge audit` (mock/unverified işaretleme), `forge doctor` sağlık kontrolü.
+- Fail-closed installer: `sha256` doğrulanamayan içerik `--mock` olmadan kurulmaz.
+
+### Security
+- `tar` extract `execFileSync` arg-array'e taşındı; symlink/escape taraması eklendi.
+- `add`/`remove` bağımlılık adı validasyonu (`owner/name`).
+- MCP config yazımı öncesi `.bak` yedeği.
+
+## [0.1.0] — 2026-09-01
+
+### Added
+- İlk CLI iskeleti: `add/search/list/info/doctor/init/install/update/outdated/remove`.
+- Semver çözümleme (`^`, `~`, pin) ve offline scored search (<200ms).
+- `install.sh` / `install.ps1` yükleyiciler.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ömer Evren — Forge
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,361 @@
+# Forge — The Homebrew for AI Agents
+
+[![CI](https://github.com/oomerevren-beep/forge/actions/workflows/ci.yml/badge.svg)](https://github.com/oomerevren-beep/forge/actions)
+[![npm version](https://img.shields.io/npm/v/tryforge?label=npm&color=CB3837)](https://www.npmjs.com/package/tryforge)
+[![npm downloads](https://img.shields.io/npm/dw/tryforge?label=downloads)](https://www.npmjs.com/package/tryforge)
+[![license MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+[![registry](https://img.shields.io/badge/registry-250%20packages-green.svg)](registry/index.json)
+[![GitHub stars](https://img.shields.io/github/stars/oomerevren-beep/forge?style=social)](https://github.com/oomerevren-beep/forge)
+
+> **One CLI to install skills, MCPs, plugins, agents on any harness.**
+
+`brew` is for system packages. `forge` is for AI agent packages. One command, every harness — no more `git clone + cp SKILL.md` four times for four tools.
+
+```bash
+# macOS / Linux
+curl -fsSL https://raw.githubusercontent.com/oomerevren-beep/forge/main/install.sh | sh
+# Windows PowerShell
+irm https://raw.githubusercontent.com/oomerevren-beep/forge/main/install.ps1 | iex
+# or, with Node 22+
+npm i -g tryforge
+```
+
+```bash
+forge doctor                # detect your harnesses
+forge add pdf/extract      # skill → all harnesses at once
+forge add mcp/filesystem    # MCP server → auto mcp.json
+```
+
+**Star to get notified at v1.0** — questions in [Discussions](https://github.com/oomerevren-beep/forge/discussions).
+
+<p align="center">
+  <img src="docs/assets/og.png" alt="Forge — The Homebrew for AI Agents" width="640" />
+</p>
+<p align="center">
+  <img src="docs/assets/demo.gif" alt="forge demo — doctor, search, add, list in seconds" width="640" />
+  <br><em>7-second wow: <code>forge doctor → search → add → list</code></em>
+</p>
+
+---
+
+## Table of Contents
+
+- [Why Forge?](#why-forge)
+- [Features](#features)
+- [Install](#install)
+- [Quick Start](#quick-start)
+- [Team Sync — `forge install`](#team-sync--forge-install)
+- [Create a Package](#create-a-package)
+- [How it Works](#how-it-works)
+- [Comparison](#comparison)
+- [Registry — 250 Packages](#registry--250-packages)
+- [Architecture](#architecture)
+- [Docs](#docs)
+- [Roadmap](#roadmap)
+- [Contributing](#contributing)
+- [FAQ](#faq)
+- [License](#license)
+
+---
+
+## Why Forge?
+
+2026: everything is a skill, plugin, or MCP — but installing one is still stone age. Every harness has its own folder, no versioning, no update path.
+
+- `obra/superpowers` — **~280k stars** — install is still manual `git clone + cp`
+- `deepseek-harness` — **~208k stars, ~2 days to 100k** — proved "Everything is a Plugin", but DeepSeek-only
+- `anthropics/skills` — **~173k stars** — Claude-only
+- `mcp-registry` — MCP-only, no skills or agents
+
+Result: a developer using Claude Code + Codex + OpenCode + Cursor installs the **same package 4 times by hand**. No `update`, no `forge.toml`, no team sync.
+
+**Forge fixes it:** 6 package types × 7 harnesses × one CLI. Like `brew` unified system packages, `forge` unifies agent packages. Viral loop: creators promote `forge add me` to distribute their own work.
+
+| Type | Example | What it does |
+|------|---------|--------------|
+| `skill` | `anthropics/plan` | `SKILL.md` capability (Anthropic standard) |
+| `mcp` | `mcp/filesystem` | Model Context Protocol server |
+| `plugin` | `dsh/desktop` | Harness extension |
+| `agent` | `agency/frontend` | Subagent definition |
+| `command` | `cmd/plan` | Slash command `/plan` |
+| `hook` | `hook/pre-tool` | Lifecycle hook |
+
+---
+
+## Features
+
+- **Universal — 6 types, one registry.** Skills + MCPs + plugins + agents + commands + hooks in one place.
+- **Multi-harness — 7 adapters today.** One file per harness, so adding Antigravity, Droid, or Copilot is a single PR. Symlink (junction on Windows) preferred, copy fallback.
+- **Team sync — `forge.toml` + `forge.lock`.** Like `package.json` for agents. `forge install` / `forge install --frozen` for CI.
+- **Search in <200ms.** Offline scored `search.json` + typed index, no API key.
+- **Git-native registry.** Every package is a GitHub repo. Forkable, private registry ready. No central DB.
+- **Safe by default.** `sha256`-verified tarballs or hard fail (no silent fallback); mock content only with explicit `--mock`; `forge audit` flags unverified installs; `forge doctor` health check; Windows/Linux/macOS.
+
+Supported harnesses (`forge doctor` detects all of them):
+
+| Harness | Status |
+|---------|:------:|
+| Claude Code | ✅ |
+| Codex | ✅ |
+| OpenCode | ✅ |
+| Cursor | ✅ |
+| DeepSeek (dsh) | ⚠️ (community/untested) |
+| Windsurf | ✅ |
+| Generic (any other) | ✅ |
+
+---
+
+## Install
+
+```bash
+# macOS / Linux
+curl -fsSL https://raw.githubusercontent.com/oomerevren-beep/forge/main/install.sh | sh
+
+# Windows PowerShell
+irm https://raw.githubusercontent.com/oomerevren-beep/forge/main/install.ps1 | iex
+
+# via npm (Node 22+)
+npm i -g tryforge
+```
+
+Requires Node 22+ (TypeScript). Details and troubleshooting: [docs/INSTALL.md](docs/INSTALL.md).
+
+---
+
+## Quick Start
+
+60 seconds, copy-paste:
+
+```bash
+npm i -g tryforge          # or: curl -fsSL https://raw.githubusercontent.com/oomerevren-beep/forge/main/install.sh | sh
+forge doctor              # detect your harnesses (7 checked)
+forge add anthropics/plan # install latest → all harnesses at once
+```
+
+More once you're in:
+
+```bash
+forge search plan         # find packages (try: pdf, mcp, agent)
+forge list                # installed, with versions
+forge info mcp/github     # detail + versions + engines
+forge outdated            # what can be updated
+forge update              # update all (or: forge update mcp/github)
+forge remove obra/superpowers
+```
+
+```bash
+# version pinning
+forge add anthropics/plan@1.1.0
+forge add anthropics/plan@^1.2.0
+
+# dry run — see what would happen
+forge add anthropics/plan --dry-run
+
+# mock content for packages with no verified tarball yet (explicit opt-in)
+forge add skill/pdf --mock
+forge install --mock       # same opt-in for project installs
+forge update mcp/github --mock
+```
+
+---
+
+## Team Sync — `forge install`
+
+Add `forge.toml` to your project, everyone gets the same set with one command.
+
+```toml
+# my-project/forge.toml
+[project]
+name = "my-app"
+version = "0.1.0"
+
+[dependencies]
+"anthropics/plan" = "^1.2.0"
+"mcp/filesystem" = "^1.0.0"
+"obra/superpowers" = "^3.0.0"
+"skill/pdf" = "^1.0.0"
+```
+
+```bash
+forge install          # installs all, writes forge.lock
+forge install --frozen # CI: exact versions from lock (like npm ci)
+forge outdated         # shows 1.1.0 → 1.2.0 etc.
+forge update           # bumps to latest within semver
+```
+
+Lockfile `forge.lock` is `[[packages]]` TOML — commit it. `~/.forge/config.toml` holds user defaults (registry URL, default harnesses). Worked example: [examples/team-sync/](examples/team-sync/).
+
+---
+
+## Create a Package
+
+```bash
+forge init my-skill --type skill --yes   # → SKILL.md + forge.toml
+forge init my-mcp --type mcp --yes       # → MCP template + [mcp] config
+forge init my-agent --type agent --yes   # → agent.md template
+# types: skill | mcp | plugin | agent | command | hook
+
+cat forge.toml
+# [package] name="my-skill" version="0.1.0" type="skill" ...
+
+forge publish   # (v0.2) validates → tarball → GitHub Release → registry PR
+```
+
+Until `publish` lands, open a PR adding `registry/packages/<slug>.json` (see `schema/forge.schema.json`), then `npm run registry:build`. Minimal working example: [examples/minimal-skill/](examples/minimal-skill/).
+
+---
+
+## How it Works
+
+```
+forge add anthropics/plan
+  → resolve ^1.2.0 → tarball URL + sha256 (from local/bundled registry/index.json; CDN in v0.3)
+  → download to ~/.forge/cache/tarballs/ → verify sha256 (hard fail on mismatch) → extract to ~/.forge/packages/anthropics-plan@1.2.0/
+  → adapter: symlink/copy to all 7 harnesses (Claude/Codex/OpenCode/Cursor/DSH/Windsurf/Generic)
+  → if MCP: backup mcp.json → inject server entry
+```
+
+Add a harness = one file in `cli/src/adapters/`. See `docs/ADAPTERS.md`.
+
+```
+~/.forge/
+  config.toml               # user config
+  packages/<slug>@<ver>/    # extracted content
+  cache/tarballs/           # downloaded .tar.gz
+  links.json                # {pkg, version, adapters[]} source of truth
+```
+
+---
+
+## Rekabet
+
+|  | **Forge** | `npx skills` (Vercel) | `anthropics/skills` | `DSH` | `mcp-registry` |
+|---|---|---|---|---|---|
+| Türler | **6** (skill/mcp/plugin/agent/command/hook) | 1 (skill) | 1 (skill) | plugin | 1 (mcp) |
+| Harness | **7** (Claude/Codex/OpenCode/Cursor/DSH/Windsurf/Generic) | 75+ ajan | 1 | 1 | ~1 |
+| Versiyonlama | **semver + lock** | skills-lock.json | none | none | partial |
+| Güncelleme | `forge update` | check/update | manual | manual | manual |
+| Takım senkronu | **`forge.toml` + `forge.lock`** | none | none | none | none |
+| Arama | `<200ms` offline | `skills find` | GitHub search | none | web only |
+| Paket doğrulama | **sha256 + fail-closed** | none | none | none | none |
+| Yerel CLI | **evet** (npm i -g) | npx (her seferinde indirir) | manual | manual | — |
+
+Fark: Forge, her paketi sha256 ile doğrular (fail-closed), `forge.toml` ile takım senkronu yapar, offline arama yapar ve yerel CLI olarak çalışır. Vercel skills repo-agnostik çalışır ama doğrulama ve takım senkronu yok.
+
+---
+
+## Registry — 21 Verified Packages
+
+Epoch 1d: Sadece sha256 doğrulanmış paketler listeleniyor (fail-closed).
+
+```bash
+forge search mcp        # 5 results
+forge search pdf        # 8 results
+forge search --type skill plan  # filtered
+forge info pdf/compress # versions, engines, sha
+```
+
+Stats: **9 skills, 5 MCPs, 5 agents, 2 commands.** Tümü verified (sha256 pinned).
+
+```bash
+npm run registry:build  # index + search + stats + --check in CI
+```
+
+Düzenli güncelleme: Yeni paketler eklemek için `registry/packages/<slug>.json` oluşturun → `npm run registry:build -- --check`.
+
+---
+
+## Architecture
+
+```
+CLI (TypeScript v0.1 → Rust v0.2)
+  ├─ registry client (index.json + semver)
+  ├─ store (~/.forge/packages/ + links.json + cache)
+  ├─ adapters (detect/install/list — 1 file per harness)
+  └─ commands (add/remove/list/search/info/doctor/init/install/update/outdated/audit)
+```
+
+Full diagram and crate layout in `docs/ARCHITECTURE.md`. Tech choices: `commander` + `smol-toml` + `tsx` (no `bun` on Windows), `tsc` emit to `dist/` for `npm pack`.
+
+---
+
+## Docs
+
+- [Install](docs/INSTALL.md) — npm / curl / source, verification
+- [Examples](examples/) — minimal skill + team sync, copy-paste
+- [Vision](docs/VISION.md) — why now, why 100k
+- [PRD](docs/PRD.md) — users, stories, commands, harness matrix
+- [Architecture](docs/ARCHITECTURE.md) — components, security, perf
+- [Package Spec](docs/SPEC.md) — `forge.toml` fields per type
+- [Registry](docs/REGISTRY.md) — index schema, publish, fork
+- [Adapters](docs/ADAPTERS.md) — add a harness in one file
+- [Roadmap](docs/ROADMAP.md) — v0.1 → v1.0
+- [Changelog](CHANGELOG.md) — release history
+
+---
+
+## Roadmap
+
+**v0.1 — Homebrew moment** (now): 7 harnesses, 21 verified packages, `add/search/list/doctor/install/init`.
+**v0.2 — NPM moment**: `forge publish`, deps, `cargo install`.
+**v0.3 — Store moment**: `forge run`, Rust binary, GUI.
+**v1.0 — Cloud**: team registry, `brew install forge`, `winget`.
+
+See `docs/ROADMAP.md`.
+
+---
+
+## Paket Doğrulama
+
+Forge, fail-closed paket doğrulama sağlar:
+
+1. **sha256 pin**: Her paket sürümü SHA-256 hash'i ile imzalanır
+2. **Verify on install**: İndirme sırasında hash kontrol edilir — uyarsa exit 1
+3. **Audit trail**: `forge audit` mock/tamamlanmamış kurulumları listeler
+
+Gelecek (v0.2): Sigstore/cosign ile imzalama, verified publisher programı.
+
+- Add a package: create `registry/packages/<slug>.json` → `npm run registry:build`
+- Add a harness: `cli/src/adapters/<name>.ts` → register in `adapters/index.ts` → `forge doctor`
+- PR checklist: `npm run build && npm test && npm run registry:build -- --check`
+- New? Start with [`good first issue`](https://github.com/oomerevren-beep/forge/issues?q=is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22) — questions in [Discussions](https://github.com/oomerevren-beep/forge/discussions)
+
+See `CONTRIBUTING.md`, [Code of Conduct](CODE_OF_CONDUCT.md), [Security](SECURITY.md) and `AGENTS.md`.
+
+---
+
+## FAQ
+
+**Is this just for Claude Code?**
+No. 7 harnesses today, one file per new harness. The point is *universal* — same reason `brew` beat per-OS managers.
+
+**How is this different from `mcp-registry` or `skills` repos?**
+Those are single-type and single-harness. Forge is `brew` for *all* agent package types, on *every* harness, with versioning/lock/search.
+
+**Does `install.sh` need `forge.sh` domain?**
+No. `curl -fsSL https://raw.githubusercontent.com/oomerevren-beep/forge/main/install.sh | sh` works today. `forge.sh` is a future vanity alias.
+
+**Are most packages mock content?**
+Honest answer: 245 of 250 registry entries still carry placeholder SHAs (only 5 verified so far). Forge is fail-closed — installing one without `--mock` errors out instead of silently faking it; `forge audit` flags every unverified install. Real tarballs land as maintainers verify them (tracked for Faz 13-full).
+
+**Windows symlinks?**
+Junction (`symlinkSync(..., 'junction')`) on dirs, fallback to `cpSync` on `EPERM`. `doctor` checks `links.json` (source of truth), not just dir scan.
+
+**Why TypeScript first, not Rust?**
+Speed to market. v0.1 is TypeScript + `tsx`; v0.2 rewrites to Rust for single binary `cargo install`. Adapters stay cheap.
+
+**Private registry?**
+Yes. Fork this repo, keep `registry/` private, point `~/.forge/config.toml` `registry = "https://your-r2/index.json"`.
+
+---
+
+## License
+
+MIT — see [LICENSE](LICENSE).
+
+---
+
+<p align="center">
+  <strong>Star this repo to get notified at launch. 21 verified packages are live at <a href="https://github.com/oomerevren-beep/forge/releases/tag/v0.1.1">v0.1.1</a>.</strong><br>
+  <code>forge add</code> → 7 places at once. <code>forge install</code> → team sync. Homebrew simple.
+</p>

package/dist/cli/src/adapters/claude.js

@@ -0,0 +1,31 @@
+// cli/src/adapters/claude.ts — Claude Code harness
+import { existsSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+import { installSkillFiles, uninstallSkillFiles, removeLinkOrDir, listDirNames, targetDirFor } from "./types.js";
+export const claudeAdapter = {
+    name: "claude-code",
+    displayName: "Claude Code",
+    version: "0.1.0",
+    detect: () => existsSync(join(homedir(), ".claude")),
+    skillDir: (slug) => join(homedir(), ".claude", "skills", slug),
+    // Epoch 1c: Claude user-scope MCP = ~/.claude.json (not settings.json which is behavior config)
+    mcpConfigPath: () => join(homedir(), ".claude.json"),
+    async install(pkgSlug, srcDir, type) {
+        // Epoch 1d: type-aware install — her tip kendi dizinine gider
+        const base = join(homedir(), ".claude");
+        installSkillFiles("claude-code", pkgSlug, srcDir, targetDirFor(base, type));
+    },
+    async uninstall(pkgSlug, type) {
+        void type;
+        uninstallSkillFiles(pkgSlug, join(homedir(), ".claude", "skills"));
+        const agentPath = join(homedir(), ".claude", "agents", pkgSlug);
+        removeLinkOrDir(agentPath);
+    },
+    async list() {
+        return listDirNames(join(homedir(), ".claude", "skills"));
+    },
+    async isInstalled(pkgSlug) {
+        return existsSync(join(homedir(), ".claude", "skills", pkgSlug));
+    },
+};

package/dist/cli/src/adapters/codex.js

@@ -0,0 +1,30 @@
+// cli/src/adapters/codex.ts — Codex harness
+import { existsSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+import { installSkillFiles, uninstallSkillFiles } from "./types.js";
+export const codexAdapter = {
+    name: "codex",
+    displayName: "Codex",
+    version: "0.1.0",
+    detect: () => existsSync(join(homedir(), ".codex")),
+    skillDir: (slug) => join(homedir(), ".codex", "skills", slug),
+    mcpConfigPath: () => join(homedir(), ".codex", "mcp.json"),
+    async install(pkgSlug, srcDir, type) {
+        void type;
+        installSkillFiles("codex", pkgSlug, srcDir, join(homedir(), ".codex", "skills"));
+    },
+    async uninstall(pkgSlug, _type) {
+        uninstallSkillFiles(pkgSlug, join(homedir(), ".codex", "skills"));
+    },
+    async list() {
+        const dir = join(homedir(), ".codex", "skills");
+        if (!existsSync(dir))
+            return [];
+        const { readdirSync } = await import("fs");
+        return readdirSync(dir, { withFileTypes: true }).filter((d) => (d.isDirectory() || d.isSymbolicLink()) && !d.name.startsWith(".")).map((d) => d.name);
+    },
+    async isInstalled(pkgSlug) {
+        return existsSync(join(homedir(), ".codex", "skills", pkgSlug));
+    },
+};

package/dist/cli/src/adapters/cursor.js

@@ -0,0 +1,42 @@
+// cli/src/adapters/cursor.ts — Cursor harness
+import { existsSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+import { installSkillFiles, uninstallSkillFiles, listDirNames } from "./types.js";
+export const cursorAdapter = {
+    name: "cursor",
+    displayName: "Cursor",
+    version: "0.1.0",
+    detect: () => existsSync(join(process.cwd(), ".cursor")) || existsSync(join(homedir(), ".cursor")),
+    skillDir: (slug) => {
+        if (existsSync(join(process.cwd(), ".cursor")))
+            return join(process.cwd(), ".cursor", "skills", slug);
+        return join(homedir(), ".cursor", "skills", slug);
+    },
+    mcpConfigPath: () => {
+        if (existsSync(join(process.cwd(), ".cursor")))
+            return join(process.cwd(), ".cursor", "mcp.json");
+        return join(homedir(), ".cursor", "mcp.json");
+    },
+    async install(pkgSlug, srcDir, type) {
+        void type;
+        const base = existsSync(join(process.cwd(), ".cursor")) ? join(process.cwd(), ".cursor", "skills") : join(homedir(), ".cursor", "skills");
+        installSkillFiles("cursor", pkgSlug, srcDir, base);
+    },
+    async uninstall(pkgSlug, _type) {
+        const base = existsSync(join(process.cwd(), ".cursor")) ? join(process.cwd(), ".cursor", "skills") : join(homedir(), ".cursor", "skills");
+        uninstallSkillFiles(pkgSlug, base);
+    },
+    async list() {
+        const bases = [join(process.cwd(), ".cursor", "skills"), join(homedir(), ".cursor", "skills")];
+        for (const b of bases) {
+            if (existsSync(b))
+                return listDirNames(b);
+        }
+        return [];
+    },
+    async isInstalled(pkgSlug) {
+        const bases = [join(process.cwd(), ".cursor", "skills"), join(homedir(), ".cursor", "skills")];
+        return bases.some((b) => existsSync(join(b, pkgSlug)));
+    },
+};

package/dist/cli/src/adapters/dsh.js

@@ -0,0 +1,46 @@
+// cli/src/adapters/dsh.ts — DeepSeek harness
+import { existsSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+import { installSkillFiles, uninstallSkillFiles, listDirNames } from "./types.js";
+// Epoch 1c: DSH adapter artık deprecated/legacy olarak işaretlenmiş.
+// DeepSeek Harness'ında "skills" kavramı yok; cordis.yml + TS plugin modeli kullanılır.
+// Adapter'ı tutuyoruz (geriye uyumluluk) ama "community-maintained, untested" olarak gösteriyoruz.
+export const dshAdapter = {
+    name: "dsh",
+    displayName: "DeepSeek (DSH, community/untested)",
+    version: "0.1.0",
+    detect: () => existsSync(join(homedir(), ".dsh")) || existsSync(join(process.cwd(), ".dsh")),
+    skillDir: (slug) => {
+        if (existsSync(join(process.cwd(), ".dsh")))
+            return join(process.cwd(), ".dsh", "skills", slug);
+        return join(homedir(), ".dsh", "skills", slug);
+    },
+    mcpConfigPath: () => {
+        if (existsSync(join(process.cwd(), ".dsh")))
+            return join(process.cwd(), ".dsh", "mcp.json");
+        return join(homedir(), ".dsh", "mcp.json");
+    },
+    async install(pkgSlug, srcDir, type) {
+        void type;
+        const base = existsSync(join(process.cwd(), ".dsh")) ? join(process.cwd(), ".dsh", "skills") : join(homedir(), ".dsh", "skills");
+        installSkillFiles("dsh", pkgSlug, srcDir, base);
+    },
+    async uninstall(pkgSlug, _type) {
+        const bases = [join(process.cwd(), ".dsh", "skills"), join(homedir(), ".dsh", "skills")];
+        for (const b of bases)
+            uninstallSkillFiles(pkgSlug, b);
+    },
+    async list() {
+        const bases = [join(process.cwd(), ".dsh", "skills"), join(homedir(), ".dsh", "skills")];
+        for (const b of bases) {
+            if (existsSync(b))
+                return listDirNames(b);
+        }
+        return [];
+    },
+    async isInstalled(pkgSlug) {
+        const bases = [join(process.cwd(), ".dsh", "skills"), join(homedir(), ".dsh", "skills")];
+        return bases.some((b) => existsSync(join(b, pkgSlug)));
+    },
+};

package/dist/cli/src/adapters/generic.js

@@ -0,0 +1,23 @@
+// cli/src/adapters/generic.ts — Generic fallback (./.forge/packages)
+import { join } from "path";
+import { installSkillFiles, uninstallSkillFiles, listDirNames } from "./types.js";
+import { existsSync } from "fs";
+export const genericAdapter = {
+    name: "generic",
+    displayName: "Generic (.forge)",
+    detect: () => true, // always as fallback
+    skillDir: (slug) => join(process.cwd(), ".forge", "packages", slug),
+    mcpConfigPath: () => join(process.cwd(), ".forge", "mcp.json"),
+    async install(pkgSlug, srcDir, _type) {
+        installSkillFiles("generic", pkgSlug, srcDir, join(process.cwd(), ".forge", "packages"));
+    },
+    async uninstall(pkgSlug, _type) {
+        uninstallSkillFiles(pkgSlug, join(process.cwd(), ".forge", "packages"));
+    },
+    async list() {
+        return listDirNames(join(process.cwd(), ".forge", "packages"));
+    },
+    async isInstalled(pkgSlug) {
+        return existsSync(join(process.cwd(), ".forge", "packages", pkgSlug));
+    },
+};

package/dist/cli/src/adapters/index.js

@@ -0,0 +1,30 @@
+export { readMcpConfig, writeMcpConfig, addMcpServerToConfig, removeMcpServerFromConfig, forgeHome, packagesDir, packageDir, toSlug, targetDirFor, } from "./types.js";
+export { claudeAdapter } from "./claude.js";
+export { codexAdapter } from "./codex.js";
+export { opencodeAdapter } from "./opencode.js";
+export { cursorAdapter } from "./cursor.js";
+export { dshAdapter } from "./dsh.js";
+export { windsurfAdapter } from "./windsurf.js";
+export { genericAdapter } from "./generic.js";
+import { claudeAdapter } from "./claude.js";
+import { codexAdapter } from "./codex.js";
+import { opencodeAdapter } from "./opencode.js";
+import { cursorAdapter } from "./cursor.js";
+import { dshAdapter } from "./dsh.js";
+import { windsurfAdapter } from "./windsurf.js";
+import { genericAdapter } from "./generic.js";
+export const allAdapters = [
+    claudeAdapter,
+    codexAdapter,
+    opencodeAdapter,
+    cursorAdapter,
+    dshAdapter,
+    windsurfAdapter,
+    genericAdapter,
+];
+export function detectAdapters() {
+    const detected = allAdapters.filter((a) => (a.name === "generic" ? false : a.detect()));
+    if (detected.length === 0)
+        return [genericAdapter];
+    return [...detected, genericAdapter];
+}

package/dist/cli/src/adapters/opencode.js

@@ -0,0 +1,41 @@
+// cli/src/adapters/opencode.ts — OpenCode harness
+import { existsSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+import { installSkillFiles, uninstallSkillFiles, listDirNames } from "./types.js";
+export const opencodeAdapter = {
+    name: "opencode",
+    displayName: "OpenCode",
+    version: "0.1.0",
+    detect: () => existsSync(join(process.cwd(), "opencode.json")) || existsSync(join(homedir(), ".config", "opencode", "opencode.json")),
+    skillDir: (slug) => join(process.cwd(), ".opencode", "skills", slug),
+    mcpConfigPath: () => {
+        const proj = join(process.cwd(), "opencode.json");
+        if (existsSync(proj))
+            return proj;
+        return join(homedir(), ".config", "opencode", "opencode.json");
+    },
+    async install(pkgSlug, srcDir, type) {
+        void type;
+        const isProject = existsSync(join(process.cwd(), "opencode.json"));
+        const base = isProject ? join(process.cwd(), ".opencode", "skills") : join(homedir(), ".config", "opencode", "skills");
+        installSkillFiles("opencode", pkgSlug, srcDir, base);
+    },
+    async uninstall(pkgSlug, _type) {
+        const isProject = existsSync(join(process.cwd(), "opencode.json"));
+        const base = isProject ? join(process.cwd(), ".opencode", "skills") : join(homedir(), ".config", "opencode", "skills");
+        uninstallSkillFiles(pkgSlug, base);
+    },
+    async list() {
+        const bases = [join(process.cwd(), ".opencode", "skills"), join(homedir(), ".config", "opencode", "skills")];
+        for (const b of bases) {
+            if (existsSync(b))
+                return listDirNames(b);
+        }
+        return [];
+    },
+    async isInstalled(pkgSlug) {
+        const bases = [join(process.cwd(), ".opencode", "skills"), join(homedir(), ".config", "opencode", "skills")];
+        return bases.some((b) => existsSync(join(b, pkgSlug)));
+    },
+};