@scanton/phase2s 0.13.0

package/dist/src/providers/openai.d.ts

@@ -0,0 +1,36 @@
+import type { ChatCompletionChunk } from "openai/resources/chat/completions.js";
+import type { Config } from "../core/config.js";
+import type { Provider, Message, ProviderEvent } from "./types.js";
+import type { OpenAIFunctionDef } from "../tools/types.js";
+/**
+ * Structural interface for the OpenAI client's streaming chat.completions.create.
+ * Exported so tests can inject a typed stub without importing the full OpenAI SDK class.
+ * We only use the streaming overload (stream: true) — non-streaming is no longer needed.
+ */
+export interface OpenAIClientLike {
+    chat: {
+        completions: {
+            create(params: {
+                model: string;
+                messages: unknown[];
+                tools?: unknown[];
+                stream: true;
+            }): Promise<AsyncIterable<ChatCompletionChunk>>;
+        };
+    };
+}
+/**
+ * Direct OpenAI API provider.
+ *
+ * Streams responses via chat completions with stream: true.
+ * Tool call fragments are accumulated per-index across chunks and emitted
+ * as a single tool_calls event after the stream ends.
+ */
+export declare class OpenAIProvider implements Provider {
+    name: string;
+    private client;
+    private model;
+    constructor(config: Config, client?: OpenAIClientLike);
+    chatStream(messages: Message[], tools: OpenAIFunctionDef[], options?: import("./types.js").ChatStreamOptions): AsyncIterable<ProviderEvent>;
+}
+//# sourceMappingURL=openai.d.ts.map

package/dist/src/providers/openai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../../src/providers/openai.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAY,aAAa,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAG3D;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE;QACJ,WAAW,EAAE;YACX,MAAM,CAAC,MAAM,EAAE;gBACb,KAAK,EAAE,MAAM,CAAC;gBACd,QAAQ,EAAE,OAAO,EAAE,CAAC;gBACpB,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;gBAClB,MAAM,EAAE,IAAI,CAAC;aACd,GAAG,OAAO,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC;SACjD,CAAC;KACH,CAAC;CACH;AAED;;;;;;GAMG;AACH,qBAAa,cAAe,YAAW,QAAQ;IAC7C,IAAI,SAAgB;IACpB,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,KAAK,CAAS;gBAEV,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB;IAY9C,UAAU,CACf,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,EAAE,iBAAiB,EAAE,EAC1B,OAAO,CAAC,EAAE,OAAO,YAAY,EAAE,iBAAiB,GAC/C,aAAa,CAAC,aAAa,CAAC;CAiGhC"}

package/dist/src/providers/openai.js

@@ -0,0 +1,117 @@
+import OpenAI from "openai";
+import { log } from "../utils/logger.js";
+/**
+ * Direct OpenAI API provider.
+ *
+ * Streams responses via chat completions with stream: true.
+ * Tool call fragments are accumulated per-index across chunks and emitted
+ * as a single tool_calls event after the stream ends.
+ */
+export class OpenAIProvider {
+    name = "openai-api";
+    client;
+    model;
+    constructor(config, client) {
+        if (!client && !config.apiKey) {
+            throw new Error("OpenAI API key is required for the openai-api provider. " +
+                "Set OPENAI_API_KEY environment variable or apiKey in .phase2s.yaml");
+        }
+        // The real OpenAI class satisfies OpenAIClientLike structurally; one cast at construction.
+        this.client = client ?? new OpenAI({ apiKey: config.apiKey });
+        this.model = config.model;
+    }
+    async *chatStream(messages, tools, options) {
+        const openaiMessages = messages.map((m) => {
+            if (m.role === "tool") {
+                return {
+                    role: "tool",
+                    content: m.content,
+                    tool_call_id: m.toolCallId,
+                };
+            }
+            if (m.role === "assistant" && m.toolCalls?.length) {
+                return {
+                    role: "assistant",
+                    content: m.content || null,
+                    tool_calls: m.toolCalls.map((tc) => ({
+                        id: tc.id,
+                        type: "function",
+                        function: {
+                            name: tc.name,
+                            arguments: tc.arguments,
+                        },
+                    })),
+                };
+            }
+            return {
+                role: m.role,
+                content: m.content,
+            };
+        });
+        const stream = await this.client.chat.completions.create({
+            model: options?.model ?? this.model,
+            messages: openaiMessages,
+            tools: tools.length > 0 ? tools : undefined,
+            stream: true,
+        });
+        let lastFinishReason = null;
+        // Per-index accumulator for streaming tool call argument fragments.
+        // OpenAI sends tool call data split across multiple chunks, indexed by position.
+        const toolCallAccum = [];
+        for await (const chunk of stream) {
+            const choice = chunk.choices[0];
+            if (!choice)
+                continue;
+            const delta = choice.delta;
+            const finishReason = choice.finish_reason ?? null;
+            if (finishReason)
+                lastFinishReason = finishReason;
+            // Early-exit for terminal finish reasons that block normal output.
+            // These come on the final chunk which has no content delta.
+            if (finishReason === "length") {
+                log.warn("Response truncated (finish_reason: length). Consider a shorter prompt.");
+                yield { type: "text", content: "\n\n[Note: response was truncated]" };
+                yield { type: "done", stopReason: "length" };
+                return;
+            }
+            if (finishReason === "content_filter") {
+                log.warn("Response blocked by OpenAI content filter (finish_reason: content_filter).");
+                yield { type: "text", content: "[Response blocked by content filter]" };
+                yield { type: "done", stopReason: "content_filter" };
+                return;
+            }
+            // Yield text delta if present
+            if (delta?.content) {
+                yield { type: "text", content: delta.content };
+            }
+            // Accumulate tool call fragments by chunk index.
+            // - The 'id' and 'function.name' arrive only in the first chunk for each index.
+            // - 'function.arguments' is split across multiple chunks and must be concatenated.
+            for (const tcDelta of delta?.tool_calls ?? []) {
+                const i = tcDelta.index;
+                if (!toolCallAccum[i]) {
+                    toolCallAccum[i] = { id: "", name: "", arguments: "" };
+                }
+                if (tcDelta.id)
+                    toolCallAccum[i].id = tcDelta.id;
+                if (tcDelta.function?.name)
+                    toolCallAccum[i].name = tcDelta.function.name;
+                if (tcDelta.function?.arguments)
+                    toolCallAccum[i].arguments += tcDelta.function.arguments;
+            }
+        }
+        // Filter out any sparse-array holes (undefined slots from non-contiguous indices).
+        // Normally OpenAI sends tool call indices as 0, 1, 2... but guard against gaps.
+        const validCalls = toolCallAccum.filter((tc) => tc !== undefined && tc.id !== "");
+        if (validCalls.length > 0) {
+            const calls = validCalls.map((tc) => ({
+                id: tc.id,
+                name: tc.name,
+                arguments: tc.arguments, // raw JSON string — parsed by tool executor
+            }));
+            yield { type: "tool_calls", calls };
+        }
+        yield { type: "done", stopReason: lastFinishReason ?? "stop" };
+    }
+}
+//# sourceMappingURL=openai.js.map

package/dist/src/providers/openai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.js","sourceRoot":"","sources":["../../../src/providers/openai.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAK5B,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAoBzC;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACzB,IAAI,GAAG,YAAY,CAAC;IACZ,MAAM,CAAmB;IACzB,KAAK,CAAS;IAEtB,YAAY,MAAc,EAAE,MAAyB;QACnD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,0DAA0D;gBACxD,oEAAoE,CACvE,CAAC;QACJ,CAAC;QACD,2FAA2F;QAC3F,IAAI,CAAC,MAAM,GAAG,MAAM,IAAK,IAAI,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAiC,CAAC;QAC/F,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,CAAC,UAAU,CACf,QAAmB,EACnB,KAA0B,EAC1B,OAAgD;QAEhD,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACxC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACtB,OAAO;oBACL,IAAI,EAAE,MAAe;oBACrB,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,YAAY,EAAE,CAAC,CAAC,UAAW;iBAC5B,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;gBAClD,OAAO;oBACL,IAAI,EAAE,WAAoB;oBAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;oBAC1B,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;wBACnC,EAAE,EAAE,EAAE,CAAC,EAAE;wBACT,IAAI,EAAE,UAAmB;wBACzB,QAAQ,EAAE;4BACR,IAAI,EAAE,EAAE,CAAC,IAAI;4BACb,SAAS,EAAE,EAAE,CAAC,SAAS;yBACxB;qBACF,CAAC,CAAC;iBACJ,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,IAAuC;gBAC/C,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YACvD,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK;YACnC,QAAQ,EAAE,cAAc;YACxB,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC3C,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QAEH,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAC3C,oEAAoE;QACpE,iFAAiF;QACjF,MAAM,aAAa,GAA2D,EAAE,CAAC;QAEjF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM;gBAAE,SAAS;YAEtB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC;YAClD,IAAI,YAAY;gBAAE,gBAAgB,GAAG,YAAY,CAAC;YAElD,mEAAmE;YACnE,4DAA4D;YAC5D,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC9B,GAAG,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;gBACnF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;gBACtE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;gBAC7C,OAAO;YACT,CAAC;YACD,IAAI,YAAY,KAAK,gBAAgB,EAAE,CAAC;gBACtC,GAAG,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;gBACvF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;gBACxE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,8BAA8B;YAC9B,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;gBACnB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YACjD,CAAC;YAED,iDAAiD;YACjD,gFAAgF;YAChF,mFAAmF;YACnF,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;gBAC9C,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;gBACxB,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtB,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;gBACzD,CAAC;gBACD,IAAI,OAAO,CAAC,EAAE;oBAAE,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;gBACjD,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI;oBAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC1E,IAAI,OAAO,CAAC,QAAQ,EAAE,SAAS;oBAAE,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC5F,CAAC;QACH,CAAC;QAED,mFAAmF;QACnF,gFAAgF;QAChF,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAe,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAChD,EAAE,EAAE,EAAE,CAAC,EAAE;gBACT,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,4CAA4C;aACtE,CAAC,CAAC,CAAC;YACJ,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,IAAI,MAAM,EAAE,CAAC;IACjE,CAAC;CACF"}

package/dist/src/providers/types.d.ts

@@ -0,0 +1,34 @@
+import type { OpenAIFunctionDef } from "../tools/types.js";
+export interface Message {
+    role: "system" | "user" | "assistant" | "tool";
+    content: string;
+    toolCallId?: string;
+    toolCalls?: ToolCall[];
+}
+export interface ToolCall {
+    id: string;
+    name: string;
+    arguments: string;
+}
+export type ProviderEvent = {
+    type: "text";
+    content: string;
+} | {
+    type: "tool_calls";
+    calls: ToolCall[];
+} | {
+    type: "done";
+    stopReason: string;
+} | {
+    type: "error";
+    error: string;
+};
+export interface ChatStreamOptions {
+    model?: string;
+}
+export interface Provider {
+    name: string;
+    /** Stream response events: text deltas, tool_calls, done, or error. */
+    chatStream(messages: Message[], tools: OpenAIFunctionDef[], options?: ChatStreamOptions): AsyncIterable<ProviderEvent>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/providers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/providers/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,QAAQ,EAAE,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IAEb,uEAAuE;IACvE,UAAU,CACR,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,EAAE,iBAAiB,EAAE,EAC1B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,aAAa,CAAC,aAAa,CAAC,CAAC;CACjC"}

package/dist/src/providers/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/providers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/providers/types.ts"],"names":[],"mappings":""}

package/dist/src/skills/index.d.ts

@@ -0,0 +1,3 @@
+export type { Skill } from "./types.js";
+export { loadSkillsFromDir, loadAllSkills } from "./loader.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/skills/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/skills/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}

package/dist/src/skills/index.js

@@ -0,0 +1,2 @@
+export { loadSkillsFromDir, loadAllSkills } from "./loader.js";
+//# sourceMappingURL=index.js.map

package/dist/src/skills/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/skills/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}

package/dist/src/skills/loader.d.ts

@@ -0,0 +1,23 @@
+import type { Skill } from "./types.js";
+/**
+ * Load skills from SKILL.md files in a directory.
+ *
+ * Follows a convention similar to gstack: each skill is a directory
+ * containing a SKILL.md file with YAML-like frontmatter.
+ *
+ * Compatible with the SKILL.md standard used by:
+ *   - phase2s (.phase2s/skills/)
+ *   - Codex CLI (~/.codex/skills/)
+ *   - gstack/Claude Code (~/.claude/skills/)
+ */
+export declare function loadSkillsFromDir(dir: string): Promise<Skill[]>;
+/**
+ * Load skills from all standard locations (in priority order):
+ * 1. .phase2s/skills/ — current project skills (highest priority)
+ * 2. ~/.phase2s/skills/ — global user skills
+ * 3. ~/.codex/skills/ — Codex CLI's native skill directory (cross-tool compatibility)
+ *
+ * Deduplication: first skill found with a given name wins (project > global > codex).
+ */
+export declare function loadAllSkills(): Promise<Skill[]>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/src/skills/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/skills/loader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAkCrE;AA4DD;;;;;;;GAOG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAwBtD"}

package/dist/src/skills/loader.js

@@ -0,0 +1,136 @@
+import { readFile, readdir, stat } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { parse as parseYaml } from "yaml";
+/**
+ * Load skills from SKILL.md files in a directory.
+ *
+ * Follows a convention similar to gstack: each skill is a directory
+ * containing a SKILL.md file with YAML-like frontmatter.
+ *
+ * Compatible with the SKILL.md standard used by:
+ *   - phase2s (.phase2s/skills/)
+ *   - Codex CLI (~/.codex/skills/)
+ *   - gstack/Claude Code (~/.claude/skills/)
+ */
+export async function loadSkillsFromDir(dir) {
+    const skills = [];
+    const absDir = resolve(dir);
+    let entries;
+    try {
+        entries = await readdir(absDir);
+    }
+    catch {
+        return skills;
+    }
+    for (const entry of entries) {
+        const entryPath = join(absDir, entry);
+        const entryStat = await stat(entryPath).catch(() => null);
+        if (entryStat?.isDirectory()) {
+            // Look for SKILL.md inside the directory
+            const skillPath = join(entryPath, "SKILL.md");
+            const skill = await parseSkillFile(skillPath);
+            if (skill) {
+                skill.name = skill.name || entry;
+                skills.push(skill);
+            }
+        }
+        else if (entry.endsWith(".md") && entry !== "README.md") {
+            // Also support flat .md files as skills
+            const skill = await parseSkillFile(entryPath);
+            if (skill) {
+                skill.name = skill.name || entry.replace(".md", "");
+                skills.push(skill);
+            }
+        }
+    }
+    return skills;
+}
+async function parseSkillFile(path) {
+    let content;
+    try {
+        content = await readFile(path, "utf-8");
+    }
+    catch {
+        return null;
+    }
+    // Parse YAML frontmatter (--- delimited, handles \r\n line endings)
+    const frontmatterMatch = content.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/);
+    let name = "";
+    let description = "";
+    let triggerPhrases = [];
+    let promptTemplate;
+    let skill_model;
+    let skill_retries;
+    if (frontmatterMatch) {
+        const rawMeta = frontmatterMatch[1];
+        promptTemplate = frontmatterMatch[2].trim();
+        // Parse frontmatter with the yaml library (handles multi-line, arrays, quoted strings)
+        let meta = {};
+        try {
+            meta = parseYaml(rawMeta) ?? {};
+        }
+        catch {
+            // Malformed frontmatter — treat as no frontmatter
+        }
+        if (typeof meta.name === "string")
+            name = meta.name;
+        if (typeof meta.description === "string")
+            description = meta.description;
+        // triggers can be a YAML array or a comma-separated string
+        if (Array.isArray(meta.triggers)) {
+            triggerPhrases = meta.triggers.filter((t) => typeof t === "string");
+        }
+        else if (typeof meta.triggers === "string") {
+            triggerPhrases = meta.triggers.split(",").map((s) => s.trim()).filter(Boolean);
+        }
+        if (typeof meta.model === "string" && meta.model.length > 0)
+            skill_model = meta.model;
+        if (typeof meta.retries === "number" && meta.retries > 0)
+            skill_retries = meta.retries;
+    }
+    else {
+        promptTemplate = content.trim();
+    }
+    const skill = {
+        name,
+        description,
+        triggerPhrases,
+        promptTemplate,
+        sourcePath: path,
+    };
+    if (skill_model !== undefined)
+        skill.model = skill_model;
+    if (skill_retries !== undefined)
+        skill.retries = skill_retries;
+    return skill;
+}
+/**
+ * Load skills from all standard locations (in priority order):
+ * 1. .phase2s/skills/ — current project skills (highest priority)
+ * 2. ~/.phase2s/skills/ — global user skills
+ * 3. ~/.codex/skills/ — Codex CLI's native skill directory (cross-tool compatibility)
+ *
+ * Deduplication: first skill found with a given name wins (project > global > codex).
+ */
+export async function loadAllSkills() {
+    const skills = [];
+    const home = process.env.HOME ?? process.env.USERPROFILE ?? "";
+    const dirs = [
+        join(process.cwd(), ".phase2s", "skills"),
+        join(home, ".phase2s", "skills"),
+        join(home, ".codex", "skills"), // Codex CLI native skills — same SKILL.md format
+    ];
+    const seen = new Set();
+    for (const dir of dirs) {
+        const loaded = await loadSkillsFromDir(dir);
+        for (const skill of loaded) {
+            // Deduplicate by name: project skills override global, global override codex defaults
+            if (!seen.has(skill.name)) {
+                seen.add(skill.name);
+                skills.push(skill);
+            }
+        }
+    }
+    return skills;
+}
+//# sourceMappingURL=loader.js.map

package/dist/src/skills/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/skills/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAW;IACjD,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAE5B,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAE1D,IAAI,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC;YAC7B,yCAAyC;YACzC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1D,wCAAwC;YACxC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oEAAoE;IACpE,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAErF,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,cAAc,GAAa,EAAE,CAAC;IAClC,IAAI,cAAsB,CAAC;IAC3B,IAAI,WAA+B,CAAC;IACpC,IAAI,aAAiC,CAAC;IAEtC,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpC,cAAc,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5C,uFAAuF;QACvF,IAAI,IAAI,GAA4B,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,GAAI,SAAS,CAAC,OAAO,CAA6B,IAAI,EAAE,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACpD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YAAE,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QAEzE,2DAA2D;QAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACnF,CAAC;aAAM,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC7C,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC;QACtF,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC;YAAE,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC;IACzF,CAAC;SAAM,CAAC;QACN,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,KAAK,GAA+B;QACxC,IAAI;QACJ,WAAW;QACX,cAAc;QACd,cAAc;QACd,UAAU,EAAE,IAAI;KACjB,CAAC;IACF,IAAI,WAAW,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,WAAW,CAAC;IACzD,IAAI,aAAa,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,aAAa,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IAE/D,MAAM,IAAI,GAAG;QACX,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAG,iDAAiD;KACnF,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,sFAAsF;YACtF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/skills/types.d.ts

@@ -0,0 +1,14 @@
+export interface Skill {
+    name: string;
+    description: string;
+    triggerPhrases: string[];
+    /** The prompt template that gets injected when the skill is invoked */
+    promptTemplate: string;
+    /** Original file path the skill was loaded from */
+    sourcePath?: string;
+    /** Model alias ("fast" | "smart") or literal model string to use for this skill */
+    model?: string;
+    /** Number of satori retries (enables satori mode when > 0) */
+    retries?: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/skills/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/skills/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,uEAAuE;IACvE,cAAc,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/src/skills/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/skills/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/skills/types.ts"],"names":[],"mappings":""}

package/dist/src/tools/file-read.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./types.js";
+export declare const fileReadTool: ToolDefinition;
+//# sourceMappingURL=file-read.d.ts.map

package/dist/src/tools/file-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-read.d.ts","sourceRoot":"","sources":["../../../src/tools/file-read.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAgB7D,eAAO,MAAM,YAAY,EAAE,cAoC1B,CAAC"}

package/dist/src/tools/file-read.js

@@ -0,0 +1,50 @@
+import { z } from "zod";
+import { readFile } from "node:fs/promises";
+import { assertInSandbox } from "./sandbox.js";
+const params = z.object({
+    path: z.string().describe("Path to the file to read (relative to project directory)"),
+    startLine: z.number().min(1).optional().describe("Start reading from this line (1-based)"),
+    endLine: z.number().min(1).optional().describe("Stop reading at this line (inclusive)"),
+});
+/** Sanitize an error message before returning it to the LLM — strip absolute paths. */
+function sanitizeError(err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    // Remove absolute paths from error strings (e.g. ENOENT: no such file or directory, open '/home/user/...')
+    return msg.replace(/,\s*open\s+'[^']*'/g, "").replace(/\/[^\s']*/g, "<path>");
+}
+export const fileReadTool = {
+    name: "file_read",
+    description: "Read the contents of a file. Optionally specify a line range. Paths are relative to the project directory.",
+    parameters: params,
+    async execute(raw) {
+        const args = params.parse(raw);
+        // Sandbox: reject paths outside the project directory (realpath-based, blocks symlink escapes)
+        let fullPath;
+        try {
+            fullPath = await assertInSandbox(args.path);
+        }
+        catch (err) {
+            return {
+                success: false,
+                output: "",
+                error: err instanceof Error ? err.message : `Path outside project directory: ${args.path}`,
+            };
+        }
+        try {
+            const content = await readFile(fullPath, "utf-8");
+            if (args.startLine !== undefined || args.endLine !== undefined) {
+                const lines = content.split("\n");
+                const start = (args.startLine ?? 1) - 1; // already validated min(1), so min index is 0
+                const end = args.endLine ?? lines.length;
+                const slice = lines.slice(start, end);
+                const numbered = slice.map((line, i) => `${start + i + 1}\t${line}`);
+                return { success: true, output: numbered.join("\n") };
+            }
+            return { success: true, output: content };
+        }
+        catch (err) {
+            return { success: false, output: "", error: sanitizeError(err) };
+        }
+    },
+};
+//# sourceMappingURL=file-read.js.map

package/dist/src/tools/file-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-read.js","sourceRoot":"","sources":["../../../src/tools/file-read.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACrF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC1F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;CACxF,CAAC,CAAC;AAEH,uFAAuF;AACvF,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,2GAA2G;IAC3G,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,4GAA4G;IACzH,UAAU,EAAE,MAAM;IAClB,KAAK,CAAC,OAAO,CAAC,GAAY;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,+FAA+F;QAC/F,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,IAAI,CAAC,IAAI,EAAE;aAC3F,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAElD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,8CAA8C;gBACxF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC;gBACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBACrE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/src/tools/file-write.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./types.js";
+export declare const fileWriteTool: ToolDefinition;
+//# sourceMappingURL=file-write.d.ts.map

package/dist/src/tools/file-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-write.d.ts","sourceRoot":"","sources":["../../../src/tools/file-write.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAe7D,eAAO,MAAM,aAAa,EAAE,cA8E3B,CAAC"}

package/dist/src/tools/file-write.js

@@ -0,0 +1,90 @@
+import { z } from "zod";
+import { writeFile, mkdir, access } from "node:fs/promises";
+import { resolve, dirname, sep } from "node:path";
+import { assertInSandbox } from "./sandbox.js";
+/** Sanitize an error message before returning it to the LLM — strip absolute paths. */
+function sanitizeError(err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return msg.replace(/,\s*open\s+'[^']*'/g, "").replace(/\/[^\s']*/g, "<path>");
+}
+const params = z.object({
+    path: z.string().describe("Path to the file to write (relative to project directory)"),
+    content: z.string().describe("Content to write to the file"),
+    createDirs: z.boolean().optional().describe("Create parent directories if they don't exist"),
+});
+export const fileWriteTool = {
+    name: "file_write",
+    description: "Write content to a file. Creates the file if it doesn't exist. Paths are relative to the project directory.",
+    parameters: params,
+    async execute(raw) {
+        const args = params.parse(raw);
+        // For files that need createDirs, we need to mkdir first so that
+        // realpath() can resolve the parent directory. We use a lexical resolve
+        // pre-check before mkdir, then assertInSandbox after dirs exist.
+        const lexicalFullPath = resolve(args.path);
+        // Capture cwd once — used for both the pre-check and passed to assertInSandbox.
+        const cwd = process.cwd();
+        if (args.createDirs) {
+            // Pre-check using lexical resolve before creating dirs (prevents creating
+            // dirs outside the project before we can realpath-check them).
+            if (!lexicalFullPath.startsWith(cwd + sep) && lexicalFullPath !== cwd) {
+                return {
+                    success: false,
+                    output: "",
+                    error: `Path outside project directory: ${args.path}`,
+                };
+            }
+            await mkdir(dirname(lexicalFullPath), { recursive: true });
+        }
+        // Sandbox: reject paths outside the project directory (realpath-based, blocks symlink escapes)
+        // After dirs are created, realpath() can resolve the parent reliably.
+        let fullPath;
+        try {
+            fullPath = await assertInSandbox(args.path, cwd);
+        }
+        catch (err) {
+            return {
+                success: false,
+                output: "",
+                error: err instanceof Error ? err.message : `Path outside project directory: ${args.path}`,
+            };
+        }
+        // Guard: reject near-empty writes to existing files (silent truncation is data loss).
+        // Trim check catches whitespace-only content that would also effectively destroy a file.
+        if (args.content.trim() === "") {
+            try {
+                await access(fullPath);
+                // File exists — refuse the empty write
+                return {
+                    success: false,
+                    output: "",
+                    error: `Refusing to truncate existing file to empty: ${args.path}. Pass non-empty content.`,
+                };
+            }
+            catch {
+                // File doesn't exist — writing empty is fine (creates the file)
+            }
+        }
+        try {
+            // Check if file exists to produce an informative log
+            let existed = false;
+            try {
+                await access(fullPath);
+                existed = true;
+            }
+            catch {
+                // doesn't exist
+            }
+            await writeFile(fullPath, args.content, "utf-8");
+            const verb = existed ? "Overwrote" : "Wrote";
+            if (existed) {
+                process.stdout.write(`  [file_write] Overwriting existing file: ${args.path}\n`);
+            }
+            return { success: true, output: `${verb} ${args.content.length} bytes to ${args.path}` };
+        }
+        catch (err) {
+            return { success: false, output: "", error: sanitizeError(err) };
+        }
+    },
+};
+//# sourceMappingURL=file-write.js.map

package/dist/src/tools/file-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-write.js","sourceRoot":"","sources":["../../../src/tools/file-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAElD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,uFAAuF;AACvF,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IACtF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC5D,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;CAC7F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAmB;IAC3C,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,6GAA6G;IAC1H,UAAU,EAAE,MAAM;IAClB,KAAK,CAAC,OAAO,CAAC,GAAY;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,iEAAiE;QACjE,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE3C,gFAAgF;QAChF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAE1B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,0EAA0E;YAC1E,+DAA+D;YAC/D,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,eAAe,KAAK,GAAG,EAAE,CAAC;gBACtE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,mCAAmC,IAAI,CAAC,IAAI,EAAE;iBACtD,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,+FAA+F;QAC/F,sEAAsE;QACtE,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,IAAI,CAAC,IAAI,EAAE;aAC3F,CAAC;QACJ,CAAC;QAED,sFAAsF;QACtF,yFAAyF;QACzF,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACvB,uCAAuC;gBACvC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,gDAAgD,IAAI,CAAC,IAAI,2BAA2B;iBAC5F,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,qDAAqD;YACrD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACvB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;YAED,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAEjD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;YACnF,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,aAAa,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/src/tools/glob-tool.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./types.js";
+export declare const globTool: ToolDefinition;
+//# sourceMappingURL=glob-tool.d.ts.map

package/dist/src/tools/glob-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"glob-tool.d.ts","sourceRoot":"","sources":["../../../src/tools/glob-tool.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAQ7D,eAAO,MAAM,QAAQ,EAAE,cA+BtB,CAAC"}