thatgfsj-code 0.3.0 → 0.3.1

package/dist/core/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../src/core/hooks.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmCH,yDAAyD;AAEzD,MAAM,OAAO,WAAW;IACd,KAAK,GAAsC,IAAI,GAAG,EAAE,CAAC;IAE7D;QACE,4BAA4B;QAC5B,MAAM,QAAQ,GAAe;YAC3B,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,EAAE,gBAAgB;YACtE,SAAS,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW;SACxD,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,IAAc,EAAE,EAAU,EAAE,QAAQ,GAAG,CAAC,EAAE,IAAI,GAAG,KAAK;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAc,EAAE,EAAU;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAe;QACnB,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAClC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,IAAc,EAAE,GAAgB;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAExC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,CAAC;YAED,0BAA0B;YAC1B,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,IAAc;QACrB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,IAAe;QAC1B,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;QACvB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,2DAA2D;AAE3D;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,GAAgB;IAC3C,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,MAAM,WAAW,GAAG,CAAC,QAAQ,aAAa,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,aAAa,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACpL,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAgB;IACvD,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC;QAEjD,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5E,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,2DAA2D,IAAI,EAAE,CAAC,CAAC;YAC/E,2CAA2C;QAC7C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAgB;IACjD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QACnC,MAAM,UAAU,GAAG;YACjB,kBAAkB;YAClB,kBAAkB;YAClB,cAAc;YACd,qBAAqB;SACtB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,OAAO,EAAE,EAAE,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACxC,CAAC;AAED,sDAAsD;AAEtD,IAAI,iBAAiB,GAAuB,IAAI,CAAC;AAEjD,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,iBAAiB,GAAG,IAAI,WAAW,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/dist/core/permissions.d.ts

@@ -0,0 +1,52 @@
+/**
+ * S03: Permissions System
+ * 6-stage permission pipeline for tool execution
+ * Core principle: permissions are first-class citizens, not an afterthought
+ */
+import { ToolContext } from './types.js';
+export type PermissionMode = 'accept' | 'deny' | 'ask';
+export type PermissionLevel = 'none' | 'low' | 'medium' | 'high' | 'critical';
+export interface PermissionResult {
+    allowed: boolean;
+    reason: string;
+    level: PermissionLevel;
+    requiresConfirmation: boolean;
+    stage: 1 | 2 | 3 | 4 | 5 | 6;
+}
+/**
+ * Permission rule — pattern-based allow/deny rules
+ */
+export interface PermissionRule {
+    pattern: RegExp;
+    action: 'allow' | 'deny';
+    reason: string;
+}
+/**
+ * S03: Permission Checker — 6-stage pipeline
+ */
+export declare class PermissionChecker {
+    private mode;
+    private rules;
+    private workspaceRoot;
+    private static BLOCKED_PATTERNS;
+    private static CONFIRM_REQUIRED;
+    private static BORDERLINE_PATTERNS;
+    constructor(workspaceRoot?: string);
+    /**
+     * S03: 6-Stage Permission Pipeline
+     * Every tool execution passes through all 6 stages
+     */
+    check(toolName: string, params: Record<string, any>, ctx: ToolContext): Promise<PermissionResult>;
+    private stage1PatternBlock;
+    private stage2Rules;
+    private stage3PathSandbox;
+    private stage4AIClassify;
+    private stage5Confirmation;
+    setMode(mode: PermissionMode): void;
+    getMode(): PermissionMode;
+    addRule(pattern: RegExp, action: 'allow' | 'deny', reason: string): void;
+    clearRules(): void;
+    setWorkspaceRoot(path: string): void;
+}
+export declare function printPermissionResult(result: PermissionResult, command?: string): void;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/core/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/core/permissions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,WAAW,EAAgB,MAAM,YAAY,CAAC;AAIvD,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AACvD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE9E,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,eAAe,CAAC;IACvB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,IAAI,CAAyB;IACrC,OAAO,CAAC,KAAK,CAAwB;IACrC,OAAO,CAAC,aAAa,CAAS;IAG9B,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAgB7B;IAGF,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAmB7B;IAGF,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAWhC;gBAEU,aAAa,GAAE,MAAsB;IAIjD;;;OAGG;IACG,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,gBAAgB,CAAC;IAmC5B,OAAO,CAAC,kBAAkB;IAmB1B,OAAO,CAAC,WAAW;IAkBnB,OAAO,CAAC,iBAAiB;YAoBX,gBAAgB;IA0B9B,OAAO,CAAC,kBAAkB;IA+C1B,OAAO,CAAC,IAAI,EAAE,cAAc;IAI5B,OAAO,IAAI,cAAc;IAIzB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM;IAIjE,UAAU;IAIV,gBAAgB,CAAC,IAAI,EAAE,MAAM;CAG9B;AAID,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,MAAM,QAa/E"}

package/dist/core/permissions.js

@@ -0,0 +1,237 @@
+/**
+ * S03: Permissions System
+ * 6-stage permission pipeline for tool execution
+ * Core principle: permissions are first-class citizens, not an afterthought
+ */
+import chalk from 'chalk';
+/**
+ * S03: Permission Checker — 6-stage pipeline
+ */
+export class PermissionChecker {
+    mode = 'ask';
+    rules = [];
+    workspaceRoot;
+    // Stage 1: Blocked patterns
+    static BLOCKED_PATTERNS = [
+        /^rm\s+-rf\s+\//i,
+        /^rm\s+-rf\s+\$HOME/i,
+        /^rm\s+-rf\s+%USERPROFILE%/i,
+        /^del\s+\/f\s+\/s\s+\/q/i,
+        /^format\s+[a-z]:/i,
+        /^mkfs/i,
+        /^dd\s+if=/i,
+        /^shred/i,
+        />\s*\/dev\/sda/i,
+        /^curl\s+.*\||^wget\s+.*\|/i,
+        /^eval\s+/i,
+        /^exec\s+/i,
+        /base64\s+-d\s+.*\|/i,
+        /\$\(.*\)/i,
+        /`.*`/i,
+    ];
+    // Stage 2: Commands needing confirmation
+    static CONFIRM_REQUIRED = [
+        'rm -rf',
+        'rmdir',
+        'del /s /q',
+        'format',
+        'mkfs',
+        'dd',
+        'shutdown',
+        'init 0',
+        'init 6',
+        'poweroff',
+        'reboot',
+        'pkill',
+        'killall',
+        'mv .* /tmp',
+        'chmod 777',
+        'chmod -R 777',
+        'git push --force',
+        'git push -f',
+    ];
+    // Stage 4: AI borderline commands (use LLM to classify)
+    static BORDERLINE_PATTERNS = [
+        /curl\s+https?:\/\//i,
+        /wget\s+/i,
+        /npm\s+install\s+-g/i,
+        /pip\s+install\s+/i,
+        /yarn\s+add\s+/i,
+        /sudo\s+/i,
+        /chown\s+/i,
+        /chmod\s+[67]/i,
+        /^git\s+reset/i,
+        /^git\s+clean/i,
+    ];
+    constructor(workspaceRoot = process.cwd()) {
+        this.workspaceRoot = workspaceRoot;
+    }
+    /**
+     * S03: 6-Stage Permission Pipeline
+     * Every tool execution passes through all 6 stages
+     */
+    async check(toolName, params, ctx) {
+        // Stage 1: Pattern block — reject known dangerous commands immediately
+        const stage1 = this.stage1PatternBlock(toolName, params);
+        if (!stage1.allowed)
+            return stage1;
+        // Stage 2: Permission rules — check user-defined allow/deny rules
+        const stage2 = this.stage2Rules(toolName, params);
+        if (!stage2.allowed)
+            return stage2;
+        // Stage 3: Path sandboxing — prevent workspace escape
+        const stage3 = this.stage3PathSandbox(toolName, params);
+        if (!stage3.allowed)
+            return stage3;
+        // Stage 4: AI classification for borderline cases
+        const stage4 = await this.stage4AIClassify(toolName, params, ctx);
+        if (!stage4.allowed)
+            return stage4;
+        // Stage 5: User confirmation for medium/high risk
+        const stage5 = this.stage5Confirmation(toolName, params, ctx);
+        if (stage5.requiresConfirmation) {
+            return stage5;
+        }
+        // Stage 6: Pass through
+        return {
+            allowed: true,
+            reason: 'Allowed',
+            level: stage5.level,
+            requiresConfirmation: false,
+            stage: 6
+        };
+    }
+    // Stage 1: Pattern block
+    stage1PatternBlock(toolName, params) {
+        if (toolName !== 'shell')
+            return { allowed: true, reason: 'Stage 1: N/A', level: 'none', requiresConfirmation: false, stage: 1 };
+        const command = params.command || '';
+        for (const pattern of PermissionChecker.BLOCKED_PATTERNS) {
+            if (pattern.test(command.trim())) {
+                return {
+                    allowed: false,
+                    reason: `Blocked: command matches dangerous pattern ${pattern}`,
+                    level: 'critical',
+                    requiresConfirmation: false,
+                    stage: 1
+                };
+            }
+        }
+        return { allowed: true, reason: 'Stage 1: Passed pattern check', level: 'none', requiresConfirmation: false, stage: 1 };
+    }
+    // Stage 2: User-defined rules
+    stage2Rules(toolName, params) {
+        const command = params.command || '';
+        for (const rule of this.rules) {
+            if (rule.pattern.test(command)) {
+                return {
+                    allowed: rule.action === 'allow',
+                    reason: `Rule matched: ${rule.reason}`,
+                    level: rule.action === 'deny' ? 'high' : 'none',
+                    requiresConfirmation: false,
+                    stage: 2
+                };
+            }
+        }
+        return { allowed: true, reason: 'Stage 2: No rules matched', level: 'none', requiresConfirmation: false, stage: 2 };
+    }
+    // Stage 3: Path sandboxing
+    stage3PathSandbox(toolName, params) {
+        if (toolName !== 'shell' && toolName !== 'file')
+            return { allowed: true, reason: 'Stage 3: N/A', level: 'none', requiresConfirmation: false, stage: 3 };
+        const path = params.path || params.command || '';
+        // Check for path traversal attempts
+        if (/^\.\.\//.test(path) || /\%00/.test(path) || /\0/.test(path)) {
+            return {
+                allowed: false,
+                reason: 'Blocked: path traversal attempt detected',
+                level: 'high',
+                requiresConfirmation: false,
+                stage: 3
+            };
+        }
+        return { allowed: true, reason: 'Stage 3: Path sandbox passed', level: 'none', requiresConfirmation: false, stage: 3 };
+    }
+    // Stage 4: AI classification for borderline commands
+    async stage4AIClassify(toolName, params, ctx) {
+        if (toolName !== 'shell')
+            return { allowed: true, reason: 'Stage 4: N/A', level: 'none', requiresConfirmation: false, stage: 4 };
+        const command = params.command || '';
+        // Check if borderline
+        const isBorderline = PermissionChecker.BORDERLINE_PATTERNS.some(p => p.test(command));
+        if (!isBorderline) {
+            return { allowed: true, reason: 'Stage 4: Not borderline', level: 'none', requiresConfirmation: false, stage: 4 };
+        }
+        // For CLI, mark as medium risk (actual AI classification skipped for perf)
+        return {
+            allowed: true,
+            reason: 'Stage 4: Borderline — escalated to confirmation',
+            level: 'medium',
+            requiresConfirmation: false,
+            stage: 4
+        };
+    }
+    // Stage 5: User confirmation
+    stage5Confirmation(toolName, params, ctx) {
+        if (this.mode === 'accept') {
+            return { allowed: true, reason: 'Mode: accept all', level: 'none', requiresConfirmation: false, stage: 5 };
+        }
+        if (this.mode === 'deny') {
+            return { allowed: false, reason: 'Mode: deny all', level: 'high', requiresConfirmation: false, stage: 5 };
+        }
+        // mode === 'ask'
+        const command = params.command || '';
+        // Critical: auto-deny
+        if (/rm\s+-rf/.test(command) && !command.includes('node_modules')) {
+            return {
+                allowed: false,
+                reason: 'Auto-deny: rm -rf without node_modules is too risky',
+                level: 'critical',
+                requiresConfirmation: false,
+                stage: 5
+            };
+        }
+        // Check confirm required list
+        const needsConfirm = PermissionChecker.CONFIRM_REQUIRED.some(cmd => command.toLowerCase().includes(cmd.toLowerCase()));
+        if (needsConfirm) {
+            return {
+                allowed: true,
+                reason: 'Requires user confirmation',
+                level: 'medium',
+                requiresConfirmation: true,
+                stage: 5
+            };
+        }
+        return { allowed: true, reason: 'Stage 5: No confirmation needed', level: 'low', requiresConfirmation: false, stage: 5 };
+    }
+    // ==================== Config Methods ====================
+    setMode(mode) {
+        this.mode = mode;
+    }
+    getMode() {
+        return this.mode;
+    }
+    addRule(pattern, action, reason) {
+        this.rules.push({ pattern, action, reason });
+    }
+    clearRules() {
+        this.rules = [];
+    }
+    setWorkspaceRoot(path) {
+        this.workspaceRoot = path;
+    }
+}
+// ==================== Permission Mode CLI ====================
+export function printPermissionResult(result, command) {
+    if (!result.allowed) {
+        console.log(chalk.red(`\n🚫 BLOCKED [Stage ${result.stage}]: ${result.reason}`));
+        return;
+    }
+    if (result.requiresConfirmation && command) {
+        console.log(chalk.yellow(`\n⚠️  Requires confirmation [Stage ${result.stage}]: ${result.reason}`));
+        console.log(chalk.gray(`  Command: ${command}`));
+        return;
+    }
+    console.log(chalk.green(`\n✅ Allowed [Stage ${result.stage}]: ${result.reason}`));
+}
+//# sourceMappingURL=permissions.js.map

package/dist/core/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/core/permissions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAyB1B;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACpB,IAAI,GAAmB,KAAK,CAAC;IAC7B,KAAK,GAAqB,EAAE,CAAC;IAC7B,aAAa,CAAS;IAE9B,4BAA4B;IACpB,MAAM,CAAC,gBAAgB,GAAG;QAChC,iBAAiB;QACjB,qBAAqB;QACrB,4BAA4B;QAC5B,yBAAyB;QACzB,mBAAmB;QACnB,QAAQ;QACR,YAAY;QACZ,SAAS;QACT,iBAAiB;QACjB,4BAA4B;QAC5B,WAAW;QACX,WAAW;QACX,qBAAqB;QACrB,WAAW;QACX,OAAO;KACR,CAAC;IAEF,yCAAyC;IACjC,MAAM,CAAC,gBAAgB,GAAG;QAChC,QAAQ;QACR,OAAO;QACP,WAAW;QACX,QAAQ;QACR,MAAM;QACN,IAAI;QACJ,UAAU;QACV,QAAQ;QACR,QAAQ;QACR,UAAU;QACV,QAAQ;QACR,OAAO;QACP,SAAS;QACT,YAAY;QACZ,WAAW;QACX,cAAc;QACd,kBAAkB;QAClB,aAAa;KACd,CAAC;IAEF,wDAAwD;IAChD,MAAM,CAAC,mBAAmB,GAAG;QACnC,qBAAqB;QACrB,UAAU;QACV,qBAAqB;QACrB,mBAAmB;QACnB,gBAAgB;QAChB,UAAU;QACV,WAAW;QACX,eAAe;QACf,eAAe;QACf,eAAe;KAChB,CAAC;IAEF,YAAY,gBAAwB,OAAO,CAAC,GAAG,EAAE;QAC/C,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CACT,QAAgB,EAChB,MAA2B,EAC3B,GAAgB;QAGhB,uEAAuE;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC;QAEnC,kEAAkE;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC;QAEnC,sDAAsD;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC;QAEnC,kDAAkD;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC;QAEnC,kDAAkD;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,wBAAwB;QACxB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,oBAAoB,EAAE,KAAK;YAC3B,KAAK,EAAE,CAAC;SACT,CAAC;IACJ,CAAC;IAED,yBAAyB;IACjB,kBAAkB,CAAC,QAAgB,EAAE,MAA2B;QACtE,IAAI,QAAQ,KAAK,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAEjI,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,KAAK,MAAM,OAAO,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;YACzD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACjC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,8CAA8C,OAAO,EAAE;oBAC/D,KAAK,EAAE,UAAU;oBACjB,oBAAoB,EAAE,KAAK;oBAC3B,KAAK,EAAE,CAAC;iBACT,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC1H,CAAC;IAED,8BAA8B;IACtB,WAAW,CAAC,QAAgB,EAAE,MAA2B;QAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAErC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,MAAM,KAAK,OAAO;oBAChC,MAAM,EAAE,iBAAiB,IAAI,CAAC,MAAM,EAAE;oBACtC,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;oBAC/C,oBAAoB,EAAE,KAAK;oBAC3B,KAAK,EAAE,CAAC;iBACT,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACtH,CAAC;IAED,2BAA2B;IACnB,iBAAiB,CAAC,QAAgB,EAAE,MAA2B;QACrE,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAExJ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAEjD,oCAAoC;QACpC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,0CAA0C;gBAClD,KAAK,EAAE,MAAM;gBACb,oBAAoB,EAAE,KAAK;gBAC3B,KAAK,EAAE,CAAC;aACT,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACzH,CAAC;IAED,qDAAqD;IAC7C,KAAK,CAAC,gBAAgB,CAC5B,QAAgB,EAChB,MAA2B,EAC3B,GAAgB;QAEhB,IAAI,QAAQ,KAAK,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAEjI,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAErC,sBAAsB;QACtB,MAAM,YAAY,GAAG,iBAAiB,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACpH,CAAC;QAED,2EAA2E;QAC3E,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,iDAAiD;YACzD,KAAK,EAAE,QAAQ;YACf,oBAAoB,EAAE,KAAK;YAC3B,KAAK,EAAE,CAAC;SACT,CAAC;IACJ,CAAC;IAED,6BAA6B;IACrB,kBAAkB,CACxB,QAAgB,EAChB,MAA2B,EAC3B,GAAgB;QAEhB,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC7G,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC5G,CAAC;QAED,iBAAiB;QACjB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAErC,sBAAsB;QACtB,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAClE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,qDAAqD;gBAC7D,KAAK,EAAE,UAAU;gBACjB,oBAAoB,EAAE,KAAK;gBAC3B,KAAK,EAAE,CAAC;aACT,CAAC;QACJ,CAAC;QAED,8BAA8B;QAC9B,MAAM,YAAY,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACjE,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAClD,CAAC;QAEF,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,4BAA4B;gBACpC,KAAK,EAAE,QAAQ;gBACf,oBAAoB,EAAE,IAAI;gBAC1B,KAAK,EAAE,CAAC;aACT,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iCAAiC,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC3H,CAAC;IAED,2DAA2D;IAE3D,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,OAAe,EAAE,MAAwB,EAAE,MAAc;QAC/D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,UAAU;QACR,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;IAClB,CAAC;IAED,gBAAgB,CAAC,IAAY;QAC3B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,CAAC;;AAGH,gEAAgE;AAEhE,MAAM,UAAU,qBAAqB,CAAC,MAAwB,EAAE,OAAgB;IAC9E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,oBAAoB,IAAI,OAAO,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sCAAsC,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACpF,CAAC"}

package/dist/core/session.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Session Manager - Manages conversation history
+ *
+ * F4 (anti-[已中断]):
+ *   - addMessage 拦截含"已中断" / 链形 think 块等污染字符串
+ *     （之前 AI 在失败重试时会把这些字面写进 history 造成病毒循环）
+ *   - sanitize() 在 lastMessages 输出到 LLM 前再做一次去噪
+ */
+import { ChatMessage, Session } from './types.js';
+export declare class SessionManager {
+    private messages;
+    private sessionId;
+    private createdAt;
+    private droppedCount;
+    constructor();
+    /**
+     * Add a message to the session.
+     * Returns true if accepted, false if dropped because it looked polluted.
+     */
+    addMessage(role: ChatMessage['role'], content: string): boolean;
+    /**
+     * Add a message WITHOUT any sanitization (for trusted callers, e.g. system prompt)
+     */
+    addMessageRaw(role: ChatMessage['role'], content: string): void;
+    /**
+     * How many polluted messages have we filtered out? Useful for debugging
+     * the "AI keeps saying interrupted" loop.
+     */
+    getDroppedCount(): number;
+    /**
+     * Return messages ready to send to the LLM.  We additionally dedupe
+     * adjacent identical assistant messages (a recovery hack against the
+     * "AI repeats the same paragraph each turn" loop).
+     */
+    getMessages(): ChatMessage[];
+    /**
+     * Get message count (raw, includes internal notes)
+     */
+    getMessageCount(): number;
+    /**
+     * Clear session history
+     */
+    clear(): void;
+    /**
+     * Get session info
+     */
+    getSession(): Session;
+    /**
+     * Truncate messages to fit token limit
+     */
+    truncate(maxMessages?: number): void;
+    private generateId;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/core/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/core/session.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAkClD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,SAAS,CAAO;IACxB,OAAO,CAAC,YAAY,CAAK;;IAOzB;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;IAqB/D;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAI/D;;;OAGG;IACH,eAAe,IAAI,MAAM;IAIzB;;;;OAIG;IACH,WAAW,IAAI,WAAW,EAAE;IAoB5B;;OAEG;IACH,eAAe,IAAI,MAAM;IAIzB;;OAEG;IACH,KAAK,IAAI,IAAI;IAKb;;OAEG;IACH,UAAU,IAAI,OAAO;IASrB;;OAEG;IACH,QAAQ,CAAC,WAAW,GAAE,MAAW,GAAG,IAAI;IAYxC,OAAO,CAAC,UAAU;CAGnB"}

package/dist/core/session.js

@@ -0,0 +1,147 @@
+/**
+ * Session Manager - Manages conversation history
+ *
+ * F4 (anti-[已中断]):
+ *   - addMessage 拦截含"已中断" / 链形 think 块等污染字符串
+ *     （之前 AI 在失败重试时会把这些字面写进 history 造成病毒循环）
+ *   - sanitize() 在 lastMessages 输出到 LLM 前再做一次去噪
+ */
+/**
+ * Patterns that indicate the message is polluted by a previous broken
+ * tool/stream retry loop. These should never be re-sent to the LLM.
+ */
+const POLLUTION_PATTERNS = [
+    /\[已中断/, // literally "[已中断" - sentinel from bad run
+    /\u5df2\u4e2d\u65ad/, // 已中断 (escaped form)
+    /^\s*\[已中断\s*$/m, // line that is exactly [已中断
+    /^<think>[\s\S]*?<\/think>\s*$/m, // entire message that is just a think block
+    /\u{1F6AB}/u, // ⛔ emoji sometimes used as interrupt marker
+];
+function looksPolluted(content) {
+    if (!content)
+        return false;
+    // Strip obvious thinking fences and check the *remaining* core content.
+    const stripped = content
+        .replace(/<think>[\s\S]*?<\/think>/g, '')
+        .replace(/<\/?think>/g, '')
+        .trim();
+    for (const p of POLLUTION_PATTERNS) {
+        if (p.test(content))
+            return true;
+    }
+    // A message whose entire stripped form is shorter than 6 chars AND
+    // contains an interruption-related token is also suspect.
+    if (stripped.length < 6 && /(中断|interrupted|cancelled|已取消)/i.test(stripped)) {
+        return true;
+    }
+    return false;
+}
+export class SessionManager {
+    messages = [];
+    sessionId;
+    createdAt;
+    droppedCount = 0;
+    constructor() {
+        this.sessionId = this.generateId();
+        this.createdAt = new Date();
+    }
+    /**
+     * Add a message to the session.
+     * Returns true if accepted, false if dropped because it looked polluted.
+     */
+    addMessage(role, content) {
+        if (role !== 'system' && looksPolluted(content)) {
+            this.droppedCount++;
+            // Keep a 1-line internal note so the user can see *something* happened,
+            // but the original polluted text does NOT go to the LLM context.
+            this.messages.push({
+                role: 'user',
+                content: '[system: dropped a polluted prior message containing "已中断" markers. Continue with the original task.]',
+                name: 'system'
+            });
+            return false;
+        }
+        this.messages.push({
+            role,
+            content,
+            name: role === 'user' ? 'user' : undefined
+        });
+        return true;
+    }
+    /**
+     * Add a message WITHOUT any sanitization (for trusted callers, e.g. system prompt)
+     */
+    addMessageRaw(role, content) {
+        this.messages.push({ role, content });
+    }
+    /**
+     * How many polluted messages have we filtered out? Useful for debugging
+     * the "AI keeps saying interrupted" loop.
+     */
+    getDroppedCount() {
+        return this.droppedCount;
+    }
+    /**
+     * Return messages ready to send to the LLM.  We additionally dedupe
+     * adjacent identical assistant messages (a recovery hack against the
+     * "AI repeats the same paragraph each turn" loop).
+     */
+    getMessages() {
+        const out = [];
+        for (let i = 0; i < this.messages.length; i++) {
+            const m = this.messages[i];
+            const prev = out[out.length - 1];
+            if (prev &&
+                m.role === 'assistant' &&
+                prev.role === 'assistant' &&
+                m.content.length > 0 &&
+                m.content === prev.content) {
+                // collapse identical neighbour
+                continue;
+            }
+            out.push(m);
+        }
+        return out;
+    }
+    /**
+     * Get message count (raw, includes internal notes)
+     */
+    getMessageCount() {
+        return this.messages.length;
+    }
+    /**
+     * Clear session history
+     */
+    clear() {
+        this.messages = [];
+        this.droppedCount = 0;
+    }
+    /**
+     * Get session info
+     */
+    getSession() {
+        return {
+            id: this.sessionId,
+            messages: this.messages,
+            createdAt: this.createdAt,
+            lastActiveAt: new Date()
+        };
+    }
+    /**
+     * Truncate messages to fit token limit
+     */
+    truncate(maxMessages = 20) {
+        if (this.messages.length > maxMessages) {
+            const systemMsg = this.messages.find(m => m.role === 'system');
+            const otherMsgs = this.messages.filter(m => m.role !== 'system');
+            this.messages = [
+                ...(systemMsg ? [systemMsg] : []),
+                ...otherMsgs.slice(-(maxMessages - 1))
+            ];
+        }
+    }
+    generateId() {
+        return `session_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`;
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/core/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/core/session.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;;GAGG;AACH,MAAM,kBAAkB,GAAa;IACnC,OAAO,EAAwB,2CAA2C;IAC1E,oBAAoB,EAAe,qBAAqB;IACxD,gBAAgB,EAAiB,4BAA4B;IAC7D,gCAAgC,EAAG,4CAA4C;IAC/E,YAAY,EAAsB,6CAA6C;CAChF,CAAC;AAEF,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,wEAAwE;IACxE,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC;SACxC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,IAAI,EAAE,CAAC;IAEV,KAAK,MAAM,CAAC,IAAI,kBAAkB,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IACnC,CAAC;IAED,mEAAmE;IACnE,0DAA0D;IAC1D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,iCAAiC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,cAAc;IACjB,QAAQ,GAAkB,EAAE,CAAC;IAC7B,SAAS,CAAS;IAClB,SAAS,CAAO;IAChB,YAAY,GAAG,CAAC,CAAC;IAEzB;QACE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,IAAyB,EAAE,OAAe;QACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,wEAAwE;YACxE,iEAAiE;YACjE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,uGAAuG;gBAChH,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,IAAI;YACJ,OAAO;YACP,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SAC3C,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,IAAyB,EAAE,OAAe;QACtD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACH,WAAW;QACT,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACjC,IACE,IAAI;gBACJ,CAAC,CAAC,IAAI,KAAK,WAAW;gBACtB,IAAI,CAAC,IAAI,KAAK,WAAW;gBACzB,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBACpB,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAC1B,CAAC;gBACD,+BAA+B;gBAC/B,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,SAAS;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,IAAI,EAAE;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,cAAsB,EAAE;QAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;YAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;YAEjE,IAAI,CAAC,QAAQ,GAAG;gBACd,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;aACvC,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,OAAO,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC/E,CAAC;CACF"}

package/dist/core/skills.d.ts

@@ -0,0 +1,60 @@
+/**
+ * S10: Skills System
+ * Load skills from CLAUDE.md files and expose them as available commands
+ *
+ * Skills are domain-specific knowledge packages that extend agent capabilities.
+ */
+export interface Skill {
+    name: string;
+    description: string;
+    prompt: string;
+    source: string;
+    tags: string[];
+}
+export interface SkillsCatalog {
+    skills: Skill[];
+    loadedAt: Date;
+    sources: string[];
+}
+/**
+ * S10: Skills Loader — discovers and loads skills from filesystem
+ */
+export declare class SkillsLoader {
+    private skills;
+    private sources;
+    /**
+     * S10: Load skills from a directory
+     * Looks for .md files with # SkillName header
+     */
+    loadFromDir(dirPath: string): number;
+    /**
+     * S10: Load a single skill file
+     */
+    loadFromFile(filePath: string): boolean;
+    /**
+     * S10: Parse a skill file — extract name, description, prompt from markdown
+     */
+    private parseSkillFile;
+    private extractTags;
+    /**
+     * S10: Get all skills
+     */
+    getAll(): Skill[];
+    /**
+     * S10: Get skill by name
+     */
+    get(name: string): Skill | undefined;
+    /**
+     * S10: Search skills by tag or name
+     */
+    search(query: string): Skill[];
+    /**
+     * S10: Get catalog
+     */
+    getCatalog(): SkillsCatalog;
+}
+/**
+ * S10: Built-in skills
+ */
+export declare const BUILT_IN_SKILLS: Skill[];
+//# sourceMappingURL=skills.d.ts.map

package/dist/core/skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/core/skills.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,QAAQ,EAAE,IAAI,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAiC;IAC/C,OAAO,CAAC,OAAO,CAA0B;IAEzC;;;OAGG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAwBpC;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAevC;;OAEG;IACH,OAAO,CAAC,cAAc;IAwDtB,OAAO,CAAC,WAAW;IAQnB;;OAEG;IACH,MAAM,IAAI,KAAK,EAAE;IAIjB;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS;IAIpC;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE;IAS9B;;OAEG;IACH,UAAU,IAAI,aAAa;CAO5B;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,KAAK,EAsBlC,CAAC"}