@openweave/weave-skills 1.0.0

package/dist/skill-registry.js

@@ -0,0 +1,218 @@
+/**
+ * WeaveSkills — SkillRegistry
+ *
+ * Central registry for all skill modules.
+ * Manages lifecycle: register → enable/disable → execute.
+ *
+ * Usage:
+ * ```typescript
+ * const registry = new SkillRegistry();
+ * registry.register(mySkill);
+ * registry.enable('my-skill');
+ * await registry.execute('my-skill', context);
+ * ```
+ */
+export class SkillRegistry {
+    _skills = new Map();
+    // ---------------------------------------------------------------------------
+    // Registration
+    // ---------------------------------------------------------------------------
+    /**
+     * Register a skill module.
+     * If a SkillConfig has been loaded, the config's enabled flag takes priority
+     * over the module's `enabled` default.
+     *
+     * @throws {Error} if a skill with the same id is already registered
+     */
+    register(module) {
+        if (this._skills.has(module.id)) {
+            throw new Error(`Skill '${module.id}' is already registered. Use replace() to overwrite.`);
+        }
+        this._skills.set(module.id, {
+            module,
+            enabled: module.enabled,
+            registeredAt: new Date(),
+        });
+    }
+    /**
+     * Register a skill module, replacing any existing entry with the same id.
+     * Useful for testing and hot-reloading scenarios.
+     */
+    replace(module) {
+        const existing = this._skills.get(module.id);
+        this._skills.set(module.id, {
+            module,
+            enabled: existing ? existing.enabled : module.enabled,
+            registeredAt: existing ? existing.registeredAt : new Date(),
+        });
+    }
+    /**
+     * Unregister a skill by id.
+     * @returns true if the skill existed and was removed, false otherwise
+     */
+    unregister(id) {
+        return this._skills.delete(id);
+    }
+    // ---------------------------------------------------------------------------
+    // Enable / Disable
+    // ---------------------------------------------------------------------------
+    /**
+     * Enable a registered skill.
+     * @throws {Error} if the skill is not registered
+     */
+    enable(id) {
+        const entry = this._getOrThrow(id);
+        entry.enabled = true;
+    }
+    /**
+     * Disable a registered skill.
+     * @throws {Error} if the skill is not registered
+     */
+    disable(id) {
+        const entry = this._getOrThrow(id);
+        entry.enabled = false;
+    }
+    // ---------------------------------------------------------------------------
+    // Query
+    // ---------------------------------------------------------------------------
+    /** Returns the full registered skill entry, or undefined if not found. */
+    get(id) {
+        return this._skills.get(id);
+    }
+    /** Returns true if a skill with the given id is registered. */
+    has(id) {
+        return this._skills.has(id);
+    }
+    /** Returns all registered skills (enabled and disabled). */
+    list() {
+        return Array.from(this._skills.values());
+    }
+    /** Returns only enabled skills. */
+    listEnabled() {
+        return Array.from(this._skills.values())
+            .filter((s) => s.enabled)
+            .map((s) => s.module);
+    }
+    /** Total number of registered skills. */
+    get size() {
+        return this._skills.size;
+    }
+    // ---------------------------------------------------------------------------
+    // Execution
+    // ---------------------------------------------------------------------------
+    /**
+     * Execute a skill by id.
+     *
+     * @param id - Skill identifier
+     * @param context - Runtime context injected into the skill
+     * @returns SkillResult — never throws; errors are captured into result.error
+     * @throws {Error} if the skill is not registered or is disabled
+     */
+    async execute(id, context) {
+        const entry = this._getOrThrow(id);
+        if (!entry.enabled) {
+            throw new Error(`Skill '${id}' is disabled. Enable it first with registry.enable('${id}').`);
+        }
+        try {
+            return await entry.module.execute(context);
+        }
+        catch (err) {
+            return {
+                success: false,
+                output: `Skill '${id}' threw an unexpected error`,
+                error: err instanceof Error ? err.message : String(err),
+            };
+        }
+    }
+    /**
+     * Execute a skill by id, returning a failed SkillResult instead of throwing
+     * if the skill is not registered or is disabled.
+     * Useful for fire-and-forget scenarios where you don't want to handle missing skills.
+     */
+    async executeSafe(id, context) {
+        const entry = this._skills.get(id);
+        if (!entry) {
+            return { success: false, output: '', error: `Skill '${id}' is not registered.` };
+        }
+        if (!entry.enabled) {
+            return { success: false, output: '', error: `Skill '${id}' is disabled.` };
+        }
+        try {
+            return await entry.module.execute(context);
+        }
+        catch (err) {
+            return {
+                success: false,
+                output: `Skill '${id}' threw an unexpected error`,
+                error: err instanceof Error ? err.message : String(err),
+            };
+        }
+    }
+    /**
+     * Execute all currently enabled skills in registration order.
+     * Skills that throw are caught and returned as failed results — they never
+     * block execution of subsequent skills.
+     *
+     * @param context - Runtime context shared across all skills
+     * @returns Map of skill id → SkillResult
+     */
+    async executeAll(context) {
+        const results = new Map();
+        for (const entry of this._skills.values()) {
+            if (!entry.enabled)
+                continue;
+            try {
+                results.set(entry.module.id, await entry.module.execute(context));
+            }
+            catch (err) {
+                results.set(entry.module.id, {
+                    success: false,
+                    output: `Skill '${entry.module.id}' threw an unexpected error`,
+                    error: err instanceof Error ? err.message : String(err),
+                });
+            }
+        }
+        return results;
+    }
+    // ---------------------------------------------------------------------------
+    // Config integration
+    // ---------------------------------------------------------------------------
+    /**
+     * Apply a SkillConfig to the registry.
+     *
+     * - Skills present in config.skills are enabled/disabled accordingly.
+     * - Skills not mentioned in config are left at their current state.
+     * - Skills in config that are not yet registered are silently ignored
+     *   (they will be applied when registered later via register()).
+     */
+    loadFromConfig(config) {
+        for (const [id, enabled] of Object.entries(config.skills)) {
+            const entry = this._skills.get(id);
+            if (entry) {
+                entry.enabled = enabled;
+            }
+        }
+    }
+    /**
+     * Produce a SkillConfig snapshot from the current registry state.
+     * Useful for serialising the registry to `.weave.config.json`.
+     */
+    toConfig() {
+        const skills = {};
+        for (const [id, entry] of this._skills.entries()) {
+            skills[id] = entry.enabled;
+        }
+        return { skills };
+    }
+    // ---------------------------------------------------------------------------
+    // Private helpers
+    // ---------------------------------------------------------------------------
+    _getOrThrow(id) {
+        const entry = this._skills.get(id);
+        if (!entry) {
+            throw new Error(`Skill '${id}' is not registered.`);
+        }
+        return entry;
+    }
+}
+//# sourceMappingURL=skill-registry.js.map

package/dist/skill-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-registry.js","sourceRoot":"","sources":["../src/skill-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAUH,MAAM,OAAO,aAAa;IACP,OAAO,GAAiC,IAAI,GAAG,EAAE,CAAC;IAEnE,8EAA8E;IAC9E,eAAe;IACf,8EAA8E;IAE9E;;;;;;OAMG;IACH,QAAQ,CAAC,MAAmB;QAC1B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,CAAC,EAAE,sDAAsD,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE;YAC1B,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,IAAI,IAAI,EAAE;SACzB,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,MAAmB;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE;YAC1B,MAAM;YACN,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO;YACrD,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE;SAC5D,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,EAAU;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,8EAA8E;IAC9E,mBAAmB;IACnB,8EAA8E;IAE9E;;;OAGG;IACH,MAAM,CAAC,EAAU;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACnC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,EAAU;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACnC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;IACxB,CAAC;IAED,8EAA8E;IAC9E,QAAQ;IACR,8EAA8E;IAE9E,0EAA0E;IAC1E,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,+DAA+D;IAC/D,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,4DAA4D;IAC5D,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,mCAAmC;IACnC,WAAW;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;aACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;aACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,yCAAyC;IACzC,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,8EAA8E;IAC9E,YAAY;IACZ,8EAA8E;IAE9E;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,OAAqB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAEnC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,UAAU,EAAE,wDAAwD,EAAE,KAAK,CAAC,CAAC;QAC/F,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,UAAU,EAAE,6BAA6B;gBACjD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,OAAqB;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC;QACnF,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,UAAU,EAAE,6BAA6B;gBACjD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,UAAU,CAAC,OAAqB;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;QAE/C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,SAAS;YAE7B,IAAI,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACpE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE;oBAC3B,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,6BAA6B;oBAC9D,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,8EAA8E;IAC9E,qBAAqB;IACrB,8EAA8E;IAE9E;;;;;;;OAOG;IACH,cAAc,CAAC,MAAmB;QAChC,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QAC7B,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAEtE,WAAW,CAAC,EAAU;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/skills/auto-fix.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Skill: auto-fix
+ *
+ * Reads VULN-*.md remediation files and reports what patches need to be applied.
+ * In apply mode, writes the patches and creates one git commit per VULN.
+ *
+ * Input (via SkillContext.graph or options in data):
+ *   - `sentinelDir`  — directory containing VULN-*.md files (default: .sentinel_logs)
+ *   - `apply`        — if true, attempt to apply patches via execSync (default: false / dry-run)
+ *
+ * Output data:
+ *   - vulns: VulnReport[]   — one entry per VULN file found
+ *   - applied: number       — commits created (only in apply mode)
+ */
+import type { SkillModule } from '../types.js';
+export interface VulnReport {
+    id: string;
+    file: string;
+    title: string;
+    severity: string;
+    affectedFiles: string[];
+    remediation: string;
+    status: 'pending' | 'applied' | 'error';
+    error?: string;
+}
+export interface AutoFixResult {
+    vulns: VulnReport[];
+    applied: number;
+    skipped: number;
+    errors: number;
+    dryRun: boolean;
+}
+export declare function parseVulnFile(content: string, filePath: string): VulnReport;
+export declare const autoFixSkill: SkillModule;
+//# sourceMappingURL=auto-fix.d.ts.map

package/dist/skills/auto-fix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-fix.d.ts","sourceRoot":"","sources":["../../src/skills/auto-fix.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EAAE,WAAW,EAA6B,MAAM,aAAa,CAAC;AAM1E,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CACjB;AAYD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAiB3E;AAcD,eAAO,MAAM,YAAY,EAAE,WAgF1B,CAAC"}

package/dist/skills/auto-fix.js

@@ -0,0 +1,121 @@
+/**
+ * Skill: auto-fix
+ *
+ * Reads VULN-*.md remediation files and reports what patches need to be applied.
+ * In apply mode, writes the patches and creates one git commit per VULN.
+ *
+ * Input (via SkillContext.graph or options in data):
+ *   - `sentinelDir`  — directory containing VULN-*.md files (default: .sentinel_logs)
+ *   - `apply`        — if true, attempt to apply patches via execSync (default: false / dry-run)
+ *
+ * Output data:
+ *   - vulns: VulnReport[]   — one entry per VULN file found
+ *   - applied: number       — commits created (only in apply mode)
+ */
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { execSync } from 'node:child_process';
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+const VULN_PATTERN = /^VULN-\d+\.md$/i;
+const SEVERITY_RE = /\*\*severity:?\*\*[:\s]*(.+)/i;
+const TITLE_RE = /^#\s+(.+)/m;
+const AFFECTED_RE = /\*\*affected[^*]*\*\*[:\s]+([^\n]+)/gi;
+const REMEDIATION_RE = /##\s+remediation[\s\S]*?(?=##|$)/i;
+export function parseVulnFile(content, filePath) {
+    const id = /VULN-\d+/i.exec(filePath)?.[0]?.toUpperCase() ?? 'VULN-???';
+    const titleMatch = TITLE_RE.exec(content);
+    const title = titleMatch ? titleMatch[1].trim() : id;
+    const severityMatch = SEVERITY_RE.exec(content);
+    const severity = severityMatch ? severityMatch[1].trim() : 'Unknown';
+    const affectedFiles = [];
+    let affectedMatch;
+    while ((affectedMatch = AFFECTED_RE.exec(content)) !== null) {
+        affectedFiles.push(...affectedMatch[1].split(/[,;]+/).map((s) => s.trim()).filter(Boolean));
+    }
+    const remMatch = REMEDIATION_RE.exec(content);
+    const remediation = remMatch ? remMatch[0].replace(/##\s+remediation/i, '').trim() : '';
+    return { id, file: filePath, title, severity, affectedFiles, remediation, status: 'pending' };
+}
+function runGitCommit(projectRoot, vuln) {
+    execSync(`git -C "${projectRoot}" add -A`, { stdio: 'pipe' });
+    execSync(`git -C "${projectRoot}" commit -m "fix(${vuln.id.toLowerCase()}): ${vuln.title.slice(0, 72)}"`, { stdio: 'pipe' });
+}
+// ---------------------------------------------------------------------------
+// Skill
+// ---------------------------------------------------------------------------
+export const autoFixSkill = {
+    id: 'auto-fix',
+    name: 'Auto-Fix',
+    description: 'Reads VULN-*.md files and reports (or applies) security remediations',
+    version: '1.0.0',
+    enabled: false,
+    tags: ['dev', 'security'],
+    async execute(ctx) {
+        const opts = ctx.graph ?? {};
+        const sentinelDir = String(opts['sentinelDir'] ?? '.sentinel_logs');
+        const apply = Boolean(opts['apply'] ?? false);
+        const sentinelPath = resolve(ctx.projectRoot, sentinelDir);
+        if (!existsSync(sentinelPath)) {
+            return {
+                success: true,
+                output: `No sentinel directory found at ${sentinelPath} — nothing to fix.`,
+                data: { vulns: [], applied: 0, skipped: 0, errors: 0, dryRun: !apply },
+            };
+        }
+        const vulnFiles = readdirSync(sentinelPath)
+            .filter((f) => VULN_PATTERN.test(f))
+            .sort();
+        if (vulnFiles.length === 0) {
+            return {
+                success: true,
+                output: `No VULN-*.md files found in ${sentinelPath}.`,
+                data: { vulns: [], applied: 0, skipped: 0, errors: 0, dryRun: !apply },
+            };
+        }
+        const reports = vulnFiles.map((f) => {
+            const filePath = join(sentinelPath, f);
+            return parseVulnFile(readFileSync(filePath, 'utf-8'), filePath);
+        });
+        let applied = 0;
+        let errors = 0;
+        if (apply) {
+            for (const vuln of reports) {
+                try {
+                    runGitCommit(ctx.projectRoot, vuln);
+                    vuln.status = 'applied';
+                    applied++;
+                }
+                catch (err) {
+                    vuln.status = 'error';
+                    vuln.error = err instanceof Error ? err.message : String(err);
+                    errors++;
+                }
+            }
+        }
+        const lines = [
+            apply ? `🔧 Auto-Fix — Applied mode` : `🔍 Auto-Fix — Dry-run mode`,
+            `Found ${reports.length} VULN file(s) in ${sentinelDir}/`,
+            '',
+            ...reports.map((v) => {
+                const icon = v.status === 'applied' ? '✅' : v.status === 'error' ? '❌' : '⬜';
+                return `  ${icon} ${v.id} [${v.severity}] — ${v.title}`;
+            }),
+            '',
+            apply ? `Applied: ${applied} | Errors: ${errors}` : `Run with apply:true to commit fixes.`,
+        ];
+        return {
+            success: errors === 0,
+            output: lines.join('\n'),
+            data: {
+                vulns: reports,
+                applied,
+                skipped: reports.length - applied - errors,
+                errors,
+                dryRun: !apply,
+            },
+        };
+    },
+};
+//# sourceMappingURL=auto-fix.js.map

package/dist/skills/auto-fix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-fix.js","sourceRoot":"","sources":["../../src/skills/auto-fix.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AA0B9C,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,WAAW,GAAG,+BAA+B,CAAC;AACpD,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,WAAW,GAAG,uCAAuC,CAAC;AAC5D,MAAM,cAAc,GAAG,mCAAmC,CAAC;AAE3D,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,QAAgB;IAC7D,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,UAAU,CAAC;IACxE,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAErE,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,aAAqC,CAAC;IAC1C,OAAO,CAAC,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5D,aAAa,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAExF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB,EAAE,IAAgB;IACzD,QAAQ,CAAC,WAAW,WAAW,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,QAAQ,CACN,WAAW,WAAW,oBAAoB,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAC/F,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,MAAM,CAAC,MAAM,YAAY,GAAgB;IACvC,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,sEAAsE;IACnF,OAAO,EAAE,OAAO;IAChB,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IAEzB,KAAK,CAAC,OAAO,CAAC,GAAiB;QAC7B,MAAM,IAAI,GAAI,GAAG,CAAC,KAAwC,IAAI,EAAE,CAAC;QACjE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,gBAAgB,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAE3D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,kCAAkC,YAAY,oBAAoB;gBAC1E,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,EAAmB;aACxF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,WAAW,CAAC,YAAY,CAAC;aACxC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aACnC,IAAI,EAAE,CAAC;QAEV,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,+BAA+B,YAAY,GAAG;gBACtD,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,EAAmB;aACxF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAiB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YACvC,OAAO,aAAa,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;oBACpC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;oBACxB,OAAO,EAAE,CAAC;gBACZ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;oBACtB,IAAI,CAAC,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC9D,MAAM,EAAE,CAAC;gBACX,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG;YACZ,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,4BAA4B;YACnE,SAAS,OAAO,CAAC,MAAM,oBAAoB,WAAW,GAAG;YACzD,EAAE;YACF,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACnB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC7E,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;YAC1D,CAAC,CAAC;YACF,EAAE;YACF,KAAK,CAAC,CAAC,CAAC,YAAY,OAAO,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC,sCAAsC;SAC3F,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,MAAM,KAAK,CAAC;YACrB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YACxB,IAAI,EAAE;gBACJ,KAAK,EAAE,OAAO;gBACd,OAAO;gBACP,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,OAAO,GAAG,MAAM;gBAC1C,MAAM;gBACN,MAAM,EAAE,CAAC,KAAK;aACE;SACnB,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/skills/cli-interactive.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Skill: cli-interactive
+ *
+ * REPL mode descriptor and command dispatcher for `weave chat`.
+ * Opens a persistent conversational session with history, command autocompletion
+ * and access to all active skills.
+ *
+ * In practice, the actual REPL loop is handled by the CLI process; this skill
+ * provides the session configuration, help text and simulated command dispatch
+ * for testing purposes.
+ *
+ * Input (via SkillContext.graph):
+ *   - `ctx.graph['command']`   — string to simulate a REPL command (for tests)
+ *   - `ctx.graph['history']`   — string[] of previous commands (injectable)
+ *   - `ctx.graph['skills']`    — string[] of active skill IDs for help text
+ *   - `ctx.graph['sessionId']` — override session ID
+ *
+ * Output data:
+ *   - CliInteractiveResult
+ */
+import type { SkillModule } from '../types.js';
+export interface ReplCommand {
+    name: string;
+    aliases: string[];
+    description: string;
+    usage: string;
+}
+export interface ReplConfig {
+    sessionId: string;
+    prompt: string;
+    historyFile: string;
+    maxHistory: number;
+    activeSkills: string[];
+    commands: ReplCommand[];
+}
+export interface ReplCommandResult {
+    command: string;
+    args: string[];
+    output: string;
+    type: 'info' | 'success' | 'error' | 'skill';
+}
+export interface CliInteractiveResult {
+    config: ReplConfig;
+    commandResult?: ReplCommandResult;
+    helpText: string;
+    welcomeMessage: string;
+}
+export declare const REPL_COMMANDS: ReplCommand[];
+export declare function buildHelpText(commands: ReplCommand[], activeSkills: string[]): string;
+export declare function buildWelcomeMessage(sessionId: string): string;
+export declare function parseCommand(input: string): {
+    name: string;
+    args: string[];
+};
+export declare function dispatchCommand(parsed: {
+    name: string;
+    args: string[];
+}, config: ReplConfig, history: string[]): ReplCommandResult;
+export declare const cliInteractiveSkill: SkillModule;
+//# sourceMappingURL=cli-interactive.d.ts.map

package/dist/skills/cli-interactive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-interactive.d.ts","sourceRoot":"","sources":["../../src/skills/cli-interactive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAA6B,MAAM,aAAa,CAAC;AAM1E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,WAAW,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;CAC9C;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,UAAU,CAAC;IACnB,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;CACxB;AAMD,eAAO,MAAM,aAAa,EAAE,WAAW,EA2CtC,CAAC;AAMF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAkBrF;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAM7D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAG5E;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,EACxC,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,MAAM,EAAE,GAChB,iBAAiB,CA2HnB;AAMD,eAAO,MAAM,mBAAmB,EAAE,WA+DjC,CAAC"}