ineedcodes 0.1.0

package/packages/core/dist/memory/icm-adapter.js

@@ -0,0 +1,98 @@
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { execShell } from '../shell/process.js';
+import { shellQuote } from '../util/shell-quote.js';
+/** Disabled memory backend: no-ops, never fails. */
+export class OffMemoryProvider {
+    id = 'off';
+    async recall() {
+        return [];
+    }
+    async remember(content) {
+        void content;
+        throw new Error('Memory backend is disabled.');
+    }
+    async forget() {
+        return false;
+    }
+}
+/**
+ * ICM adapter (rtk-ai/icm). Uses the `icm` CLI as the memory engine.
+ * Per-project isolation: every project gets its own ICM database under
+ * ~/.ineedcodes/projects/<project-id>/memory/ (plan §13).
+ */
+export class ICMAdapter {
+    databasePath;
+    topic;
+    id = 'icm';
+    constructor(databasePath, topic) {
+        this.databasePath = databasePath;
+        this.topic = topic;
+    }
+    static forProject(projectId, projectRoot) {
+        const memoryDir = path.join(os.homedir(), '.ineedcodes', 'projects', projectId, 'memory');
+        const db = path.join(memoryDir, 'icm.db');
+        const topic = path.basename(projectRoot) || 'project';
+        return new ICMAdapter(db, topic);
+    }
+    async icm(args, timeoutMs = 30_000) {
+        // ICM creates the DB file, but the parent directory must exist first.
+        const { ensureDir } = await import('../util/fs.js');
+        const dbDir = this.databasePath.split(path.sep).slice(0, -1).join(path.sep);
+        await ensureDir(dbDir);
+        const result = await execShell(`icm ${args} --db ${shellQuote(this.databasePath)}${this.topic ? ` --topic ${shellQuote(this.topic)}` : ''}`, dbDir, timeoutMs);
+        return result;
+    }
+    async recall(query, limit = 5) {
+        if (!query.trim())
+            return [];
+        const result = await this.icm(`recall ${shellQuote(query)} --limit ${limit} --read-only`);
+        if (result.exitCode !== 0)
+            return [];
+        return parseRecallOutput(result.stdout);
+    }
+    async remember(content, tags = []) {
+        const keywords = tags.length ? ` -k ${shellQuote(tags.join(','))}` : '';
+        const result = await this.icm(`remember ${shellQuote(content)}${keywords}`);
+        if (result.exitCode !== 0) {
+            throw new Error(`ICM store failed: ${result.stderr.trim() || result.stdout.trim()}`);
+        }
+        const match = result.stdout.match(/Stored:\s*([A-Za-z0-9]+)/);
+        return {
+            id: match?.[1] ?? `icm-${Date.now()}`,
+            content,
+            tags,
+            createdAt: new Date().toISOString()
+        };
+    }
+    async forget(id) {
+        const result = await this.icm(`forget ${shellQuote(id)}`);
+        return result.exitCode === 0;
+    }
+}
+export function parseRecallOutput(stdout) {
+    const records = [];
+    for (const line of stdout.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('memories[') || !/^\d/.test(trimmed))
+            continue;
+        // Format: score,id,topic,importance,weight,summary
+        const parts = trimmed.split(',');
+        if (parts.length < 6)
+            continue;
+        records.push({
+            id: parts[1].trim(),
+            content: parts.slice(5).join(',').trim(),
+            tags: [parts[2].trim(), parts[3].trim()],
+            createdAt: '',
+            score: Number.parseFloat(parts[0] ?? '') || undefined
+        });
+    }
+    return records;
+}
+export function createMemoryProvider(backend, projectId, projectRoot) {
+    if (backend === 'off')
+        return new OffMemoryProvider();
+    return ICMAdapter.forProject(projectId, projectRoot);
+}
+//# sourceMappingURL=icm-adapter.js.map

package/packages/core/dist/memory/icm-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"icm-adapter.js","sourceRoot":"","sources":["../../src/memory/icm-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAQpD,oDAAoD;AACpD,MAAM,OAAO,iBAAiB;IACnB,EAAE,GAAG,KAAK,CAAC;IACpB,KAAK,CAAC,MAAM;QACV,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,OAAe;QAC5B,KAAK,OAAO,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,CAAC,MAAM;QACV,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,UAAU;IAIF;IACA;IAJV,EAAE,GAAG,KAAK,CAAC;IAEpB,YACmB,YAAoB,EACpB,KAAc;QADd,iBAAY,GAAZ,YAAY,CAAQ;QACpB,UAAK,GAAL,KAAK,CAAS;IAC9B,CAAC;IAEJ,MAAM,CAAC,UAAU,CAAC,SAAiB,EAAE,WAAmB;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1F,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;QACtD,OAAO,IAAI,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,SAAS,GAAG,MAAM;QAChD,sEAAsE;QACtE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5E,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,OAAO,IAAI,SAAS,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAC5G,KAAK,EACL,SAAS,CACV,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,KAAK,GAAG,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,UAAU,CAAC,KAAK,CAAC,YAAY,KAAK,cAAc,CAAC,CAAC;QAC1F,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,OAAO,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,OAAiB,EAAE;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,OAAO,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9D,OAAO;YACL,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE;YACrC,OAAO;YACP,IAAI;YACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1D,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QAClF,mDAAmD;QACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE;YACpB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;YACxC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;YAC1C,SAAS,EAAE,EAAE;YACb,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,SAAS;SACtD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAsB,EAAE,SAAiB,EAAE,WAAmB;IACjG,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,IAAI,iBAAiB,EAAE,CAAC;IACtD,OAAO,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AACvD,CAAC"}

package/packages/core/dist/permissions/permissions.d.ts

@@ -0,0 +1,28 @@
+import type { PermissionCategory, PermissionDecision, PermissionMode } from '../types.js';
+/**
+ * Central permission engine. Permission decisions belong in the runtime,
+ * not only in the system prompt.
+ */
+export declare class PermissionEngine {
+    private mode;
+    private workspaceRoot;
+    private allow;
+    private deny;
+    private approvals;
+    constructor(mode: PermissionMode, workspaceRoot: string, allow?: string[], deny?: string[]);
+    get currentMode(): PermissionMode;
+    setMode(mode: PermissionMode): void;
+    /**
+     * Check whether an action needing these categories is allowed.
+     * `detail` is a human-readable description used in approval prompts.
+     */
+    check(categories: PermissionCategory[], detail?: string): Promise<PermissionDecision>;
+    private checkOne;
+    private workspaceModeCheck;
+    private requireApproval;
+    /** Mark a category as approved for the rest of the session. */
+    approve(category: PermissionCategory): void;
+    revoke(category: PermissionCategory): void;
+    /** Convenience used by tools to validate a path is within the workspace. */
+    isInsideWorkspace(target: string): boolean;
+}

package/packages/core/dist/permissions/permissions.js

@@ -0,0 +1,89 @@
+import { isInsideRoot } from '../util/fs.js';
+/**
+ * Central permission engine. Permission decisions belong in the runtime,
+ * not only in the system prompt.
+ */
+export class PermissionEngine {
+    mode;
+    workspaceRoot;
+    allow;
+    deny;
+    approvals = new Map();
+    constructor(mode, workspaceRoot, allow = [], deny = []) {
+        this.mode = mode;
+        this.workspaceRoot = workspaceRoot;
+        this.allow = allow;
+        this.deny = deny;
+    }
+    get currentMode() {
+        return this.mode;
+    }
+    setMode(mode) {
+        this.mode = mode;
+    }
+    /**
+     * Check whether an action needing these categories is allowed.
+     * `detail` is a human-readable description used in approval prompts.
+     */
+    async check(categories, detail) {
+        for (const c of categories) {
+            if (this.deny.includes(c)) {
+                return { allowed: false, reason: `Permission category "${c}" is denied by configuration.` };
+            }
+        }
+        for (const c of categories) {
+            if (this.allow.includes(c))
+                continue;
+            const decision = this.checkOne(c, detail);
+            if (!decision.allowed)
+                return decision;
+        }
+        return { allowed: true };
+    }
+    checkOne(category, detail) {
+        switch (this.mode) {
+            case 'autonomous':
+                return { allowed: true };
+            case 'workspace':
+                return this.workspaceModeCheck(category, detail);
+            case 'ask':
+                return this.requireApproval(category, detail);
+        }
+    }
+    workspaceModeCheck(category, detail) {
+        switch (category) {
+            // Safe inside the selected workspace: allowed without interruption.
+            case 'read':
+            case 'write':
+            case 'execute':
+            case 'network':
+                return { allowed: true };
+            // High-impact operations always need approval.
+            case 'outside_workspace':
+            case 'git_remote':
+            case 'destructive':
+            case 'secret_access':
+                return this.requireApproval(category, detail);
+        }
+    }
+    requireApproval(category, detail) {
+        if (this.approvals.get(category))
+            return { allowed: true };
+        return {
+            allowed: false,
+            reason: `Action needs approval for "${category}"${detail ? `: ${detail}` : ''}. Approve with /permissions or choose the "autonomous" permission mode.`
+        };
+    }
+    /** Mark a category as approved for the rest of the session. */
+    approve(category) {
+        this.approvals.set(category, true);
+    }
+    revoke(category) {
+        this.approvals.delete(category);
+    }
+    /** Convenience used by tools to validate a path is within the workspace. */
+    isInsideWorkspace(target) {
+        return isInsideRoot(this.workspaceRoot, target);
+    }
+}
+//# sourceMappingURL=permissions.js.map

package/packages/core/dist/permissions/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/permissions/permissions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IAIjB;IACA;IACA;IACA;IANF,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;IAE3D,YACU,IAAoB,EACpB,aAAqB,EACrB,QAAkB,EAAE,EACpB,OAAiB,EAAE;QAHnB,SAAI,GAAJ,IAAI,CAAgB;QACpB,kBAAa,GAAb,aAAa,CAAQ;QACrB,UAAK,GAAL,KAAK,CAAe;QACpB,SAAI,GAAJ,IAAI,CAAe;IAC1B,CAAC;IAEJ,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,UAAgC,EAAE,MAAe;QAC3D,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,CAAC,+BAA+B,EAAE,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,SAAS;YACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO,QAAQ,CAAC;QACzC,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAEO,QAAQ,CAAC,QAA4B,EAAE,MAAe;QAC5D,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,YAAY;gBACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,KAAK,WAAW;gBACd,OAAO,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACnD,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,QAA4B,EAAE,MAAe;QACtE,QAAQ,QAAQ,EAAE,CAAC;YACjB,oEAAoE;YACpE,KAAK,MAAM,CAAC;YACZ,KAAK,OAAO,CAAC;YACb,KAAK,SAAS,CAAC;YACf,KAAK,SAAS;gBACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,+CAA+C;YAC/C,KAAK,mBAAmB,CAAC;YACzB,KAAK,YAAY,CAAC;YAClB,KAAK,aAAa,CAAC;YACnB,KAAK,eAAe;gBAClB,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,QAA4B,EAAE,MAAe;QACnE,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3D,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,8BAA8B,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,yEAAyE;SACvJ,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,OAAO,CAAC,QAA4B;QAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,QAA4B;QACjC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,4EAA4E;IAC5E,iBAAiB,CAAC,MAAc;QAC9B,OAAO,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;CACF"}

package/packages/core/dist/security/secrets.d.ts

@@ -0,0 +1,4 @@
+export declare function isLikelySecretFile(filePath: string): boolean;
+export declare function redactSecrets(text: string): string;
+/** Guard used by read tools: refuse to dump secret file contents to the model. */
+export declare function secretFileNotice(filePath: string): string;

package/packages/core/dist/security/secrets.js

@@ -0,0 +1,43 @@
+import * as path from 'node:path';
+/**
+ * Detect likely secret files and redact secret-looking values from text
+ * before that text reaches the model context or logs.
+ */
+const SECRET_FILENAMES = new Set([
+    '.env', '.env.local', '.env.production', '.env.development',
+    'id_rsa', 'id_ed25519', 'id_ecdsa',
+    'credentials', 'credentials.json', '.npmrc', '.netrc'
+]);
+const SECRET_PATTERNS = [
+    { name: 'private key', pattern: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g },
+    { name: 'aws key', pattern: /AKIA[0-9A-Z]{16}/g },
+    { name: 'bearer token', pattern: /\b(?:Bearer|bearer)\s+[A-Za-z0-9\-._~+/]+=*/g },
+    { name: 'api key', pattern: /\b(?:api[_-]?key|apikey|token|secret|password)\b\s*[:=]\s*["']?[A-Za-z0-9\-._~+/]{12,}["']?/gi },
+    { name: 'github token', pattern: /\bgh[pousr]_[A-Za-z0-9]{36,}\b/g },
+    { name: 'openai key', pattern: /\bsk-[A-Za-z0-9\-_]{20,}\b/g },
+    { name: 'jwt', pattern: /\beyJ[A-Za-z0-9\-_]{10,}\.[A-Za-z0-9\-_]{10,}\.[A-Za-z0-9\-_]{10,}\b/g }
+];
+export function isLikelySecretFile(filePath) {
+    const base = path.basename(filePath);
+    if (SECRET_FILENAMES.has(base))
+        return true;
+    if (base.startsWith('.env'))
+        return true;
+    // SSH keys and cloud credential directories.
+    if (filePath.includes('/.ssh/') || filePath.includes('/.aws/') || filePath.includes('/.gnupg/'))
+        return true;
+    return false;
+}
+export function redactSecrets(text) {
+    let out = text;
+    for (const { pattern } of SECRET_PATTERNS) {
+        out = out.replace(pattern, '[REDACTED]');
+    }
+    return out;
+}
+/** Guard used by read tools: refuse to dump secret file contents to the model. */
+export function secretFileNotice(filePath) {
+    return `This file (${filePath}) looks like it contains secrets. Its contents are not shown automatically. ` +
+        'If you truly need it, ask the user to approve secret access explicitly.';
+}
+//# sourceMappingURL=secrets.js.map

package/packages/core/dist/security/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/security/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC;;;GAGG;AAEH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB;IAC3D,QAAQ,EAAE,YAAY,EAAE,UAAU;IAClC,aAAa,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ;CACtD,CAAC,CAAC;AAEH,MAAM,eAAe,GAAwC;IAC3D,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,6EAA6E,EAAE;IAC/G,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,EAAE;IACjD,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,8CAA8C,EAAE;IACjF,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,+FAA+F,EAAE;IAC7H,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,iCAAiC,EAAE;IACpE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,6BAA6B,EAAE;IAC9D,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,uEAAuE,EAAE;CAClG,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,6CAA6C;IAC7C,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,eAAe,EAAE,CAAC;QAC1C,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,cAAc,QAAQ,8EAA8E;QACzG,yEAAyE,CAAC;AAC9E,CAAC"}

package/packages/core/dist/session/store.d.ts

@@ -0,0 +1,16 @@
+import type { SessionState } from '../types.js';
+/**
+ * Session persistence. Users can leave and resume work.
+ * This is deliberately separate from ICM: sessions are history,
+ * memory is durable knowledge.
+ */
+export declare class SessionStore {
+    private readonly baseDir;
+    constructor(baseDir: string);
+    static default(): SessionStore;
+    private file;
+    save(state: SessionState): Promise<void>;
+    load(sessionId: string): Promise<SessionState | undefined>;
+    listForProject(projectRoot: string, limit?: number): Promise<SessionState[]>;
+    newId(): string;
+}

package/packages/core/dist/session/store.js

@@ -0,0 +1,54 @@
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { randomUUID } from 'node:crypto';
+import { promises as fs } from 'node:fs';
+import { readJson, writeJson, ensureDir } from '../util/fs.js';
+/**
+ * Session persistence. Users can leave and resume work.
+ * This is deliberately separate from ICM: sessions are history,
+ * memory is durable knowledge.
+ */
+export class SessionStore {
+    baseDir;
+    constructor(baseDir) {
+        this.baseDir = baseDir;
+    }
+    static default() {
+        return new SessionStore(path.join(os.homedir(), '.ineedcodes', 'sessions'));
+    }
+    file(sessionId) {
+        return path.join(this.baseDir, sessionId, 'session.json');
+    }
+    async save(state) {
+        state.updatedAt = new Date().toISOString();
+        await writeJson(this.file(state.sessionId), state);
+    }
+    async load(sessionId) {
+        return readJson(this.file(sessionId));
+    }
+    async listForProject(projectRoot, limit = 10) {
+        await ensureDir(this.baseDir);
+        let entries;
+        try {
+            entries = await fs.readdir(this.baseDir, { withFileTypes: true });
+        }
+        catch {
+            return [];
+        }
+        const sessions = [];
+        for (const entry of entries) {
+            if (!entry.isDirectory())
+                continue;
+            const state = await this.load(entry.name);
+            if (state && state.projectRoot === projectRoot) {
+                sessions.push(state);
+            }
+        }
+        sessions.sort((a, b) => (a.updatedAt < b.updatedAt ? 1 : -1));
+        return sessions.slice(0, limit);
+    }
+    newId() {
+        return randomUUID();
+    }
+}
+//# sourceMappingURL=store.js.map

package/packages/core/dist/session/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/session/store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/D;;;;GAIG;AACH,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,OAAe;QAAf,YAAO,GAAP,OAAO,CAAQ;IAAG,CAAC;IAEhD,MAAM,CAAC,OAAO;QACZ,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,IAAI,CAAC,SAAiB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAmB;QAC5B,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,OAAO,QAAQ,CAAe,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAmB,EAAE,KAAK,GAAG,EAAE;QAClD,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,QAAQ,GAAmB,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,SAAS;YACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,KAAK,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBAC/C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,KAAK;QACH,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;CACF"}

package/packages/core/dist/shell/process.d.ts

@@ -0,0 +1,26 @@
+import type { ProcessManagerLike, ShellProcessRecord } from '../types.js';
+/**
+ * Tracks long-running shell processes so the agent can start a dev server,
+ * check on it, read its output, and stop it: without blocking the loop.
+ */
+export declare class ProcessManager implements ProcessManagerLike {
+    private processes;
+    private children;
+    private nextFakePid;
+    start(command: string, cwd: string): Promise<ShellProcessRecord>;
+    status(pid: number): ShellProcessRecord | undefined;
+    list(): ShellProcessRecord[];
+    stop(pid: number): boolean;
+    /** Kill every tracked child before the runtime shuts down. */
+    drain(): void;
+}
+export interface ExecOutcome {
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    durationMs: number;
+    cwd: string;
+    timedOut: boolean;
+}
+/** Run a command to completion with a hard timeout. Output is captured, never fabricated. */
+export declare function execShell(command: string, cwd: string, timeoutMs?: number, maxBuffer?: number): Promise<ExecOutcome>;

package/packages/core/dist/shell/process.js

@@ -0,0 +1,128 @@
+import { spawn } from 'node:child_process';
+const MAX_BUFFER_PER_STREAM = 512 * 1024;
+/**
+ * Tracks long-running shell processes so the agent can start a dev server,
+ * check on it, read its output, and stop it: without blocking the loop.
+ */
+export class ProcessManager {
+    processes = new Map();
+    children = new Map();
+    nextFakePid = 1;
+    async start(command, cwd) {
+        const child = spawn(command, {
+            cwd,
+            shell: true,
+            stdio: ['ignore', 'pipe', 'pipe']
+        });
+        const record = {
+            pid: child.pid ?? this.nextFakePid++,
+            command,
+            cwd,
+            stdout: '',
+            stderr: '',
+            exited: false,
+            exitCode: null,
+            startedAt: Date.now()
+        };
+        child.stdout.on('data', (chunk) => {
+            record.stdout = appendCapped(record.stdout, chunk.toString('utf8'));
+        });
+        child.stderr.on('data', (chunk) => {
+            record.stderr = appendCapped(record.stderr, chunk.toString('utf8'));
+        });
+        child.on('error', (err) => {
+            record.stderr = appendCapped(record.stderr, `spawn error: ${err.message}\n`);
+        });
+        child.on('close', (code) => {
+            record.exited = true;
+            record.exitCode = code;
+            this.children.delete(record.pid);
+        });
+        this.processes.set(record.pid, record);
+        this.children.set(record.pid, child);
+        return record;
+    }
+    status(pid) {
+        return this.processes.get(pid);
+    }
+    list() {
+        return [...this.processes.values()];
+    }
+    stop(pid) {
+        const child = this.children.get(pid);
+        if (!child)
+            return false;
+        try {
+            child.kill('SIGTERM');
+        }
+        catch {
+            return false;
+        }
+        return true;
+    }
+    /** Kill every tracked child before the runtime shuts down. */
+    drain() {
+        for (const child of this.children.values()) {
+            try {
+                child.kill('SIGTERM');
+            }
+            catch {
+                // best effort
+            }
+        }
+        this.children.clear();
+    }
+}
+function appendCapped(current, add) {
+    const combined = current + add;
+    return combined.length > MAX_BUFFER_PER_STREAM
+        ? combined.slice(combined.length - MAX_BUFFER_PER_STREAM)
+        : combined;
+}
+/** Run a command to completion with a hard timeout. Output is captured, never fabricated. */
+export function execShell(command, cwd, timeoutMs = 120_000, maxBuffer = 1_048_576) {
+    return new Promise((resolve) => {
+        const startedAt = Date.now();
+        const child = spawn(command, {
+            cwd,
+            shell: true,
+            env: { ...process.env, FORCE_COLOR: '0', NO_COLOR: '1' }
+        });
+        let stdout = '';
+        let stderr = '';
+        let timedOut = false;
+        let settled = false;
+        const timer = setTimeout(() => {
+            timedOut = true;
+            try {
+                child.kill('SIGTERM');
+            }
+            catch {
+                // best effort
+            }
+        }, timeoutMs);
+        const cap = (s) => s.length > maxBuffer ? s.slice(0, maxBuffer) : s;
+        child.stdout?.on('data', (c) => { stdout = cap(stdout + c.toString('utf8')); });
+        child.stderr?.on('data', (c) => { stderr = cap(stderr + c.toString('utf8')); });
+        const finish = (code) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve({
+                exitCode: code,
+                stdout,
+                stderr,
+                durationMs: Date.now() - startedAt,
+                cwd,
+                timedOut
+            });
+        };
+        child.on('error', (err) => {
+            stderr = cap(stderr + `spawn error: ${err.message}\n`);
+            finish(null);
+        });
+        child.on('close', (code) => finish(code));
+    });
+}
+//# sourceMappingURL=process.js.map

package/packages/core/dist/shell/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../src/shell/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAG9D,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAC;AAEzC;;;GAGG;AACH,MAAM,OAAO,cAAc;IACjB,SAAS,GAAG,IAAI,GAAG,EAA8B,CAAC;IAClD,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3C,WAAW,GAAG,CAAC,CAAC;IAExB,KAAK,CAAC,KAAK,CAAC,OAAe,EAAE,GAAW;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;YAC3B,GAAG;YACH,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAuB;YACjC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE;YACpC,OAAO;YACP,GAAG;YACH,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,GAAW;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8DAA8D;IAC9D,KAAK;QACH,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,GAAW;IAChD,MAAM,QAAQ,GAAG,OAAO,GAAG,GAAG,CAAC;IAC/B,OAAO,QAAQ,CAAC,MAAM,GAAG,qBAAqB;QAC5C,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,qBAAqB,CAAC;QACzD,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAWD,6FAA6F;AAC7F,MAAM,UAAU,SAAS,CACvB,OAAe,EACf,GAAW,EACX,SAAS,GAAG,OAAO,EACnB,SAAS,GAAG,SAAS;IAErB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;YAC3B,GAAG;YACH,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE;SACzD,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAChC,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAExF,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,EAAE;YACrC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC;gBACN,QAAQ,EAAE,IAAI;gBACd,MAAM;gBACN,MAAM;gBACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,GAAG;gBACH,QAAQ;aACT,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,gBAAgB,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/packages/core/dist/skills/loader.d.ts

@@ -0,0 +1,9 @@
+import type { Skill, SkillScope } from '../types.js';
+export declare class SkillLoader {
+    private projectRoot;
+    constructor(projectRoot: string);
+    list(): Promise<Skill[]>;
+    find(name: string): Promise<Skill | undefined>;
+    private loadFrom;
+}
+export declare function parseSkillMd(raw: string, scope: SkillScope, source: string): Skill | undefined;