skillscript-runtime 0.14.1 → 0.15.0

package/dist/connectors/skill-store-mcp.js

@@ -0,0 +1,180 @@
+// v0.15.0 — `SkillStoreMcpConnector`. Bridge class that exposes a registered
+// `SkillStore` instance as an `McpConnector`, so `$ skill_write`, `$ skill_read`,
+// and `$ skill_delete` work as in-skill dispatch from within an executing
+// skill. Parallel structure to `DataStoreMcpConnector` — same bridge-instance-
+// registered-under-multiple-names pattern; the runtime's name-match dispatch
+// (v0.7.2) resolves bare `$ skill_<verb>` calls here.
+//
+// Motivation: closes the substrate-symmetry asymmetry where DataStore writes
+// were in-skill dispatchable (via `DataStoreMcpConnector` wiring at bootstrap
+// time) but SkillStore writes weren't — SkillStore mutators existed only on
+// the outside MCP wire surface. With this bridge, the Lisp-shape claim —
+// skills can program skills — becomes a usable in-skill capability:
+//   foreach TPL in ${TEMPLATES.items}:
+//     $ skill_write name=${TPL.name} source=${TPL.body}
+//
+// Trust model (v0.15.0): in-skill `$ skill_write` requires `# Autonomous: true`
+// (or `??` / `approved=...`) per the broadened mutation gate. The wrapped
+// `SkillStore.store()` auto-stamps `# Status: Approved` bodies, so an
+// Autonomous parent that writes an Approved child produces a runnable child.
+// Same trust as `$ data_write`: the Autonomous header is the contract; humans
+// review the parent skill, the parent commits to whatever substrate it writes.
+//
+// Bundled surface (intentionally narrow — see Perry's threat-model push-back
+// in thread f2a85892):
+//
+//   $ skill_write name="..." source="..." [overwrite=true] -> R
+//   $ skill_read name="..." [version="..."] -> R
+//
+// Explicitly NOT in this bridge (v0.15.0 scope):
+//   - `skill_delete` — destructive, no use case articulated yet.
+//   - `skill_update_status` — the gate-bypassing op (promotes Draft →
+//     Approved). Allowing it in-skill would let an Autonomous parent both
+//     write Draft AND promote Approved in the same fire, defeating the
+//     Draft-default trust boundary below.
+//   - `skill_list` / `skill_metadata` — reads are doable but cold-author UX
+//     is better via `skill_read` + introspection of the returned body.
+//
+// **Trust boundary — Draft-default for in-skill writes (v0.15.0).** Different
+// threat model from `$ data_write`: a bad data_write produces one bad row
+// (bounded blast radius); a bad skill_write produces an executable artifact
+// that fires arbitrarily many times in arbitrary contexts (unbounded blast
+// radius). The bridge forces `# Status: Draft` regardless of what the body
+// declares. To make the written skill runnable, an authorized agent
+// (human via dashboard, or MCP-direct) reviews + promotes via the
+// outside-MCP `skill_status` tool. The Lisp-shape primitive (skill-writes-
+// skill) is preserved; only immediate-loop execution is gated.
+//
+// MCP-wire `skill_write` (outside agents authoring directly) keeps the
+// existing behavior — body's `# Status:` declaration is honored, auto-stamped
+// by FilesystemSkillStore.store(). The new trust boundary is specifically
+// "dispatched from inside an executing skill," because that's the surface
+// where parent-author review doesn't transitively cover child content.
+//
+// Wiring: auto-registered at bootstrap as connector instance "skill_read" +
+// "skill_write" pointing at the substrate's SkillStore. Adopters override by
+// re-registering the names with their own bridge or a different McpConnector.
+const CONTRACT_VERSION = "1.0.0";
+export class SkillStoreMcpConnector {
+    skillStore;
+    static staticCapabilities() {
+        return {
+            connector_type: "mcp_connector",
+            implementation: "SkillStoreMcpConnector",
+            contract_version: CONTRACT_VERSION,
+            features: {
+                supports_identity_propagation: false,
+                supports_streaming_responses: false,
+                supports_batch: false,
+            },
+        };
+    }
+    /**
+     * Two canonical tools (v0.15.0). Bare-form `$ skill_<verb>` name-matches
+     * against the registered connector instance; the toolName argument here
+     * distinguishes which substrate method to invoke.
+     */
+    static staticTools() {
+        return ["skill_read", "skill_write"];
+    }
+    constructor(skillStore) {
+        this.skillStore = skillStore;
+    }
+    async call(toolName, args, _ctxOverrides) {
+        if (toolName === "skill_write")
+            return this.dispatchWrite(args);
+        return this.dispatchRead(args);
+    }
+    async dispatchRead(args) {
+        const name = typeof args["name"] === "string" ? args["name"] : "";
+        if (name === "") {
+            throw new Error("SkillStoreMcpConnector: `name` kwarg is required and must be a non-empty string.");
+        }
+        const version = typeof args["version"] === "string" && args["version"] !== "" ? args["version"] : undefined;
+        const skill = await this.skillStore.load(name, version);
+        return {
+            name: skill.name,
+            version: skill.version,
+            content_hash: skill.content_hash,
+            source: skill.source,
+            status: skill.metadata.status,
+        };
+    }
+    async dispatchWrite(args) {
+        const name = typeof args["name"] === "string" ? args["name"] : "";
+        const source = typeof args["source"] === "string" ? args["source"] : "";
+        if (name === "") {
+            throw new Error("SkillStoreMcpConnector: `name` kwarg is required for skill_write and must be a non-empty string.");
+        }
+        if (source === "") {
+            throw new Error("SkillStoreMcpConnector: `source` kwarg is required for skill_write and must be a non-empty string.");
+        }
+        // overwrite parity with MCP wire `skill_write({overwrite})`: when false
+        // and a skill with this name already exists, the substrate's `store()`
+        // throws StorageConflictError. The bridge surfaces that through.
+        const overwrite = args["overwrite"] === true;
+        if (!overwrite) {
+            try {
+                await this.skillStore.metadata(name);
+                throw new Error(`SkillStoreMcpConnector: skill '${name}' already exists. Pass overwrite=true to replace.`);
+            }
+            catch (err) {
+                const e = err;
+                // SkillNotFoundError is the green path (no clash); any other error rethrows.
+                if (e.name !== "SkillNotFoundError" && !(e.message ?? "").startsWith("Skill not found:")) {
+                    throw err;
+                }
+            }
+        }
+        // v0.15.0 trust boundary — in-skill writes force `# Status: Draft`
+        // regardless of body declaration. Threat-model rationale documented in
+        // the file header. Stamp by replacing any existing `# Status:` line
+        // (or inserting after `# Skill:` / at body top if absent). Outside-MCP
+        // skill_write bypasses this bridge and keeps the dashboard auto-stamp
+        // path; only in-skill dispatch sees the override.
+        const draftedBody = forceDraftStatus(source);
+        const info = await this.skillStore.store(name, draftedBody);
+        return {
+            name: info.name,
+            version: info.version,
+            content_hash: info.content_hash,
+            status: info.status,
+        };
+    }
+    async manifest() {
+        const ssManifest = await this.skillStore.manifest();
+        return {
+            capabilities_version: "1",
+            manifest: {
+                kind: "skill-store-bridge",
+                wraps: ssManifest.manifest ?? {},
+            },
+        };
+    }
+}
+/**
+ * v0.15.0 — replace any `# Status:` line in the body with `# Status: Draft`.
+ * If no `# Status:` line is present, insert one after `# Skill:` (or at
+ * body top as fallback). Mirrors the `rewriteStatusHeader` shape used by
+ * FilesystemSkillStore.update_status but lives here so the bridge can apply
+ * the Draft-only policy without coupling to substrate internals.
+ *
+ * Why this is here (not in FilesystemSkillStore.store): the Draft-only
+ * gate is a property of the in-skill dispatch surface, not of the
+ * substrate. Outside-MCP writes (dashboard, MCP-direct agents) should
+ * keep the existing "body declares status" behavior. The override lives
+ * at the bridge — the boundary between in-skill dispatch and substrate.
+ */
+function forceDraftStatus(body) {
+    const draftLine = "# Status: Draft";
+    const statusRe = /^#\s*Status\s*:.*$/m;
+    if (statusRe.test(body)) {
+        return body.replace(statusRe, draftLine);
+    }
+    const skillRe = /^(#\s*Skill\s*:.*?)$/m;
+    if (skillRe.test(body)) {
+        return body.replace(skillRe, `$1\n${draftLine}`);
+    }
+    return `${draftLine}\n${body}`;
+}
+//# sourceMappingURL=skill-store-mcp.js.map

package/dist/connectors/skill-store-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-store-mcp.js","sourceRoot":"","sources":["../../src/connectors/skill-store-mcp.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,kFAAkF;AAClF,0EAA0E;AAC1E,+EAA+E;AAC/E,6EAA6E;AAC7E,sDAAsD;AACtD,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,yEAAyE;AACzE,oEAAoE;AACpE,uCAAuC;AACvC,wDAAwD;AACxD,EAAE;AACF,gFAAgF;AAChF,0EAA0E;AAC1E,sEAAsE;AACtE,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,uBAAuB;AACvB,EAAE;AACF,gEAAgE;AAChE,iDAAiD;AACjD,EAAE;AACF,iDAAiD;AACjD,iEAAiE;AACjE,sEAAsE;AACtE,0EAA0E;AAC1E,uEAAuE;AACvE,0CAA0C;AAC1C,4EAA4E;AAC5E,uEAAuE;AACvE,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,oEAAoE;AACpE,kEAAkE;AAClE,2EAA2E;AAC3E,+DAA+D;AAC/D,EAAE;AACF,uEAAuE;AACvE,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,uEAAuE;AACvE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAU9E,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEjC,MAAM,OAAO,sBAAsB;IAuBJ;IAtB7B,MAAM,CAAC,kBAAkB;QACvB,OAAO;YACL,cAAc,EAAE,eAAe;YAC/B,cAAc,EAAE,wBAAwB;YACxC,gBAAgB,EAAE,gBAAgB;YAClC,QAAQ,EAAE;gBACR,6BAA6B,EAAE,KAAK;gBACpC,4BAA4B,EAAE,KAAK;gBACnC,cAAc,EAAE,KAAK;aACtB;SACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,WAAW;QAChB,OAAO,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;IACvC,CAAC;IAED,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAEvD,KAAK,CAAC,IAAI,CACR,QAAgB,EAChB,IAA6B,EAC7B,aAA8B;QAE9B,IAAI,QAAQ,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,IAA6B;QACtD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5G,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;SAC9B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAA6B;QACvD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;QACtH,CAAC;QACD,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAC;QACxH,CAAC;QACD,wEAAwE;QACxE,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;QAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,mDAAmD,CAAC,CAAC;YAC7G,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,GAA0C,CAAC;gBACrD,6EAA6E;gBAC7E,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBACzF,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QACD,mEAAmE;QACnE,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,sEAAsE;QACtE,kDAAkD;QAClD,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC5D,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACpD,OAAO;YACL,oBAAoB,EAAE,GAAG;YACzB,QAAQ,EAAE;gBACR,IAAI,EAAE,oBAAoB;gBAC1B,KAAK,EAAE,UAAU,CAAC,QAAQ,IAAI,EAAE;aACjC;SACF,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,SAAS,GAAG,iBAAiB,CAAC;IACpC,MAAM,QAAQ,GAAG,qBAAqB,CAAC;IACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,uBAAuB,CAAC;IACxC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,SAAS,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,SAAS,KAAK,IAAI,EAAE,CAAC;AACjC,CAAC"}

package/dist/mutation-gate.d.ts

@@ -1,13 +1,19 @@
 import type { SkillOp } from "./parser.js";
 /**
  * Mutating-tool name shapes that trigger mutation classification when used
- * with a bare `$ tool` dispatch. The pattern is a curated allowlist of
- * conventional mutation-verb prefixes — `write_`, `update_`, `delete_`,
- * etc. — extended over time as the wild-and-crazy harness surfaces new
- * mutation clusters (`archive_`, `prune_`, `deploy_`, `expire_`, ...).
+ * with a bare `$ tool` dispatch. v0.15.0 broadens the pattern from prefix-
+ * anchored (`/^(?:write_|update_|...)/ `) to underscore-boundary-anchored,
+ * so resource_action names (skill_write, skill_delete, memory_write,
+ * skill_update_status) classify uniformly with action_resource names
+ * (write_file, update_status). Verbs are matched as underscore-delimited
+ * tokens — `data_writer` is NOT a mutation (no boundary after "write"),
+ * but `data_write`, `write_file`, and `pre_write_audit` all are.
  *
- * Substrate-specific mutating tools whose names don't match the prefix
- * list aren't auto-classified; authors can still declare intent via
+ * Closes the discipline-only-contract gap where the prefix pattern silently
+ * passed `skill_write` while explicit special-casing caught `data_write`.
+ *
+ * Substrate-specific mutating tools whose names don't fit any verb token
+ * still aren't auto-classified; authors can declare intent via
  * `approved="reason"` per-op kwarg or `# Autonomous: true` skill header.
  */
 export declare const MUTATING_TOOL_PATTERN: RegExp;

package/dist/mutation-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mutation-gate.d.ts","sourceRoot":"","sources":["../src/mutation-gate.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,QAA+N,CAAC;AAElQ,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,eAAe,GAAG,YAAY,CAAC;AAEzE,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,OAAO,GAAG,sBAAsB,GAAG,IAAI,CAgB3E;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAKvF;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,cAAc,EAAE,sBAAsB,GAAG,MAAM,CAW3F"}
+{"version":3,"file":"mutation-gate.d.ts","sourceRoot":"","sources":["../src/mutation-gate.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,qBAAqB,QAA+M,CAAC;AAElP,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,eAAe,GAAG,YAAY,CAAC;AAEzE,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,OAAO,GAAG,sBAAsB,GAAG,IAAI,CAkB3E;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAKvF;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,cAAc,EAAE,sBAAsB,GAAG,MAAM,CAW3F"}

package/dist/mutation-gate.js

@@ -16,16 +16,22 @@
 //   bypass throws instead of silently passing.
 /**
  * Mutating-tool name shapes that trigger mutation classification when used
- * with a bare `$ tool` dispatch. The pattern is a curated allowlist of
- * conventional mutation-verb prefixes — `write_`, `update_`, `delete_`,
- * etc. — extended over time as the wild-and-crazy harness surfaces new
- * mutation clusters (`archive_`, `prune_`, `deploy_`, `expire_`, ...).
+ * with a bare `$ tool` dispatch. v0.15.0 broadens the pattern from prefix-
+ * anchored (`/^(?:write_|update_|...)/ `) to underscore-boundary-anchored,
+ * so resource_action names (skill_write, skill_delete, memory_write,
+ * skill_update_status) classify uniformly with action_resource names
+ * (write_file, update_status). Verbs are matched as underscore-delimited
+ * tokens — `data_writer` is NOT a mutation (no boundary after "write"),
+ * but `data_write`, `write_file`, and `pre_write_audit` all are.
  *
- * Substrate-specific mutating tools whose names don't match the prefix
- * list aren't auto-classified; authors can still declare intent via
+ * Closes the discipline-only-contract gap where the prefix pattern silently
+ * passed `skill_write` while explicit special-casing caught `data_write`.
+ *
+ * Substrate-specific mutating tools whose names don't fit any verb token
+ * still aren't auto-classified; authors can declare intent via
  * `approved="reason"` per-op kwarg or `# Autonomous: true` skill header.
  */
-export const MUTATING_TOOL_PATTERN = /^(?:write_|update_|delete_|remove_|set_|create_|insert_|put_|patch_|destroy_|archive_|prune_|deploy_|expire_|consolidate_|purge_|reset_|rotate_|move_|rename_|drop_|truncate_|upsert_|overwrite_|clear_|wipe_|finalize_).*/;
+export const MUTATING_TOOL_PATTERN = /(?:^|_)(?:write|update|delete|remove|set|create|insert|put|patch|destroy|archive|prune|deploy|expire|consolidate|purge|reset|rotate|move|rename|drop|truncate|upsert|overwrite|clear|wipe|finalize)(?:_|$)/;
 /**
  * Returns the mutation classification for an op, or `null` if the op isn't
  * a mutation. Called by both the lint warning rule and the runtime
@@ -34,10 +40,12 @@ export const MUTATING_TOOL_PATTERN = /^(?:write_|update_|delete_|remove_|set_|cr
 export function classifyMutation(op) {
     if (op.kind === "$") {
         const toolName = op.body.split(/\s+/)[0] ?? "";
-        // `data_write` is explicitly a mutation tool name — flag it even though
-        // it doesn't start with `write_` (the canonical prefix anchor). The
-        // dotted-name match (`<connector>.data_write`) is also caught so
-        // qualified dispatch through a named bridge instance is gated identically.
+        // v0.15.0 — the broadened `MUTATING_TOOL_PATTERN` now subsumes the
+        // earlier explicit `data_write` special-case (verbs match at any
+        // underscore boundary). `data_write` keeps its own `kind` for
+        // back-compat in `buildAuthorizationSuggestion` error copy; everything
+        // else (skill_write, write_file, memory_delete, ...) flows through
+        // the pattern path as `kind: "mutating_tool"`.
         const isDataWrite = toolName === "data_write" || /(?:^|_)data_write(?:_|$)/.test(toolName);
         if (isDataWrite)
             return { kind: "data_write", detail: toolName };

package/dist/mutation-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"mutation-gate.js","sourceRoot":"","sources":["../src/mutation-gate.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,8EAA8E;AAC9E,EAAE;AACF,wEAAwE;AACxE,aAAa;AACb,6EAA6E;AAC7E,0EAA0E;AAC1E,gDAAgD;AAChD,uEAAuE;AACvE,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,+CAA+C;AAI/C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,4NAA4N,CAAC;AAUlQ;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAW;IAC1C,IAAI,EAAE,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,wEAAwE;QACxE,oEAAoE;QACpE,iEAAiE;QACjE,2EAA2E;QAC3E,MAAM,WAAW,GAAG,QAAQ,KAAK,YAAY,IAAI,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3F,IAAI,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACjE,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC7F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAkBD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAW,EAAE,SAA4B;IAC5E,IAAI,OAAO,EAAE,CAAC,QAAQ,KAAK,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,SAAS,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,SAAS,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,cAAsC;IACjF,MAAM,QAAQ,GACZ,cAAc,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,cAAc;QACrD,CAAC,CAAC,cAAc,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,MAAM,EAAE;YACxE,CAAC,CAAC,oBAAoB,cAAc,CAAC,MAAM,IAAI,CAAC;IAClD,OAAO,CACL,oBAAoB,QAAQ,gCAAgC;QAC5D,wDAAwD;QACxD,mFAAmF;QACnF,qFAAqF,CACtF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"mutation-gate.js","sourceRoot":"","sources":["../src/mutation-gate.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,8EAA8E;AAC9E,EAAE;AACF,wEAAwE;AACxE,aAAa;AACb,6EAA6E;AAC7E,0EAA0E;AAC1E,gDAAgD;AAChD,uEAAuE;AACvE,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,+CAA+C;AAI/C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,4MAA4M,CAAC;AAUlP;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAW;IAC1C,IAAI,EAAE,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,mEAAmE;QACnE,iEAAiE;QACjE,8DAA8D;QAC9D,uEAAuE;QACvE,mEAAmE;QACnE,+CAA+C;QAC/C,MAAM,WAAW,GAAG,QAAQ,KAAK,YAAY,IAAI,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3F,IAAI,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACjE,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC7F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAkBD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAW,EAAE,SAA4B;IAC5E,IAAI,OAAO,EAAE,CAAC,QAAQ,KAAK,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,SAAS,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,SAAS,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,cAAsC;IACjF,MAAM,QAAQ,GACZ,cAAc,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,cAAc;QACrD,CAAC,CAAC,cAAc,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,MAAM,EAAE;YACxE,CAAC,CAAC,oBAAoB,cAAc,CAAC,MAAM,IAAI,CAAC;IAClD,OAAO,CACL,oBAAoB,QAAQ,gCAAgC;QAC5D,wDAAwD;QACxD,mFAAmF;QACnF,qFAAqF,CACtF,CAAC;AACJ,CAAC"}

package/dist/parser.d.ts

@@ -255,6 +255,19 @@ export interface ParsedSkill {
  * surfaces.
  */
 export declare function processSetValue(raw: string): string;
+/**
+ * v0.7.2 — interpret common escape sequences in double-quoted string
+ * literals: `\n` → newline, `\t` → tab, `\\` → literal backslash,
+ * `\"` → literal quote. Other `\X` sequences pass through verbatim
+ * (no over-eager interpretation; future v0.8+ may add `\r` / `\0` /
+ * etc. if cold-author demand surfaces).
+ *
+ * v0.15.0 — exported so runtime's `coerceKwargValue` can apply the same
+ * interpretation to `$` op kwarg values. Pre-v0.15.0 this only ran via
+ * `processSetValue` ($set + function-call kwargs), leaving `$ skill_write
+ * source="..."` with literal `\n` / `\"` bytes in the value.
+ */
+export declare function interpretDoubleQuotedEscapes(s: string): string;
 /**
  * Tokenize whitespace-separated `key=value` pairs, respecting matching
  * single/double quotes and `[...]` brackets.

package/dist/parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../src/parser.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,SAAS,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,CAAC;AAEpJ;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,mGAS7B,CAAC;AAEX,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,mGAAmG;QACnG,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B;;;;WAIG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,gBAAgB,CAAC,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,mGAAmG;QACnG,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAC5B;;;;WAIG;QACH,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACjC;;;;WAIG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF;;;;;OAKG;IACH,SAAS,CAAC,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC9B,CAAC;IACF;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;IACvB;;;;OAIG;IACH,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,0EAA0E;QAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,4EAA4E;QAC5E,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,eAAe,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,OAAO,EAAE,CAAC;IAEf,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,UAAU,GAAG,YAAY,CAAC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,aAAa,GAAG,YAAY,GAAG,QAAQ,CAAC;AAEnG,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,MAAM,CAAC;AAC9C,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;AAgBnE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,IAAI,EAAE,SAAS,CAAC;IAChB,uFAAuF;IACvF,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAClC;;;;;OAKG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;;OAKG;IACH,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAChC,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,oFAAoF;IACpF,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB;;;;;OAKG;IACH,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB;;;;;OAKG;IACH,mBAAmB,EAAE,OAAO,CAAC;IAC7B;;;;;;;;;OASG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;OAKG;IACH,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;;;;;;;OAYG;IACH,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAuXD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAmBnD;AAqBD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAgD3D;AA4MD;;;GAGG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQtE;AAED,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CA08BjD"}
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../src/parser.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,SAAS,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,CAAC;AAEpJ;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,mGAS7B,CAAC;AAEX,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,mGAAmG;QACnG,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B;;;;WAIG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,gBAAgB,CAAC,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,mGAAmG;QACnG,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAC5B;;;;WAIG;QACH,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACjC;;;;WAIG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF;;;;;OAKG;IACH,SAAS,CAAC,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC9B,CAAC;IACF;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;IACvB;;;;OAIG;IACH,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,0EAA0E;QAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,4EAA4E;QAC5E,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,eAAe,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,OAAO,EAAE,CAAC;IAEf,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,UAAU,GAAG,YAAY,CAAC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,aAAa,GAAG,YAAY,GAAG,QAAQ,CAAC;AAEnG,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,MAAM,CAAC;AAC9C,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;AAgBnE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,IAAI,EAAE,SAAS,CAAC;IAChB,uFAAuF;IACvF,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAClC;;;;;OAKG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;;OAKG;IACH,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAChC,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,oFAAoF;IACpF,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB;;;;;OAKG;IACH,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB;;;;;OAKG;IACH,mBAAmB,EAAE,OAAO,CAAC;IAC7B;;;;;;;;;OASG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;OAKG;IACH,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;;;;;;;OAYG;IACH,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAuXD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAmBnD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAU9D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CA+D3D;AAuND;;;GAGG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQtE;AAED,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CA08BjD"}

package/dist/parser.js

@@ -480,8 +480,13 @@ export function processSetValue(raw) {
  * `\"` → literal quote. Other `\X` sequences pass through verbatim
  * (no over-eager interpretation; future v0.8+ may add `\r` / `\0` /
  * etc. if cold-author demand surfaces).
+ *
+ * v0.15.0 — exported so runtime's `coerceKwargValue` can apply the same
+ * interpretation to `$` op kwarg values. Pre-v0.15.0 this only ran via
+ * `processSetValue` ($set + function-call kwargs), leaving `$ skill_write
+ * source="..."` with literal `\n` / `\"` bytes in the value.
  */
-function interpretDoubleQuotedEscapes(s) {
+export function interpretDoubleQuotedEscapes(s) {
     return s.replace(/\\(["\\nt])/g, (match, ch) => {
         switch (ch) {
             case '"': return '"';
@@ -518,6 +523,21 @@ export function tokenizeKeywordArgs(input) {
         }
         if (inQuote) {
             current += ch;
+            // v0.15.0 — recognize `\"`, `\'`, `\\` as escapes inside a quoted
+            // string. Without this, `text="he said \"hi\""` closes the value at
+            // the first `\"` and the trailing `hi\""` lands as separate tokens
+            // (or worse, silent truncation when feeding to a $ dispatch op).
+            // Mirrors processSetValue's interpretDoubleQuotedEscapes for the
+            // outer-tokenization layer; the value still gets fed to escape
+            // interpretation downstream (processSetValue / coerceKwargValue).
+            if (ch === "\\" && i + 1 < input.length) {
+                const next = input[i + 1];
+                if (next === inQuote || next === "\\") {
+                    current += next;
+                    i++;
+                    continue;
+                }
+            }
             if (ch === inQuote)
                 inQuote = null;
             continue;
@@ -578,6 +598,17 @@ function extractParenBody(text, openIdx) {
             continue;
         }
         if (inQuote !== null) {
+            // v0.15.0 — recognize `\"`, `\'`, `\\` as escapes inside a quoted
+            // string (parallel to tokenizeKeywordArgs). Without this,
+            // `emit(text="he said \"hi\"")` mis-closes the inner quote and the
+            // paren-balance walker treats `)` as content.
+            if (ch === "\\" && i + 1 < text.length) {
+                const next = text[i + 1];
+                if (next === inQuote || next === "\\") {
+                    i++;
+                    continue;
+                }
+            }
             if (ch === inQuote)
                 inQuote = null;
             continue;