@akira-tl/forgerelay 0.4.7 → 0.5.0

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable ForgeRelay changes are documented here.
 
 ## [Unreleased]
 
+## [0.5.0] - 2026-08-14
+
+### Added
+
+- Added the production local Activity audit foundation: append-only Audit Events persist in ForgeRelay's existing SQLite state, queryable Activity Records survive server restarts and Workspace cleanup, and success, failure, and Hook-blocked outcomes retain immutable Workspace/Host Turn execution context for later lifecycle and UI releases.
+
 ## [0.4.7] - 2026-08-11
 
 ### Added

package/dist/activity/audit-store.js

@@ -0,0 +1,209 @@
+import { randomUUID } from "node:crypto";
+import { openDatabase } from "../db/client.js";
+export class ActivityAuditStore {
+    database;
+    now;
+    constructor(stateDir, options = {}) {
+        this.database = openDatabase(stateDir);
+        this.now = options.now ?? (() => new Date());
+    }
+    append(input) {
+        return this.database.sqlite.transaction(() => {
+            const existing = this.readRows(input.activityId);
+            if (input.type === "started") {
+                if (existing.length > 0) {
+                    throw new Error(`Activity ${input.activityId} already has audit events.`);
+                }
+            }
+            else if (existing.length === 0 || existing[0]?.event_type !== "started") {
+                throw new Error(`Activity ${input.activityId} must start before recording ${input.type}.`);
+            }
+            const sequence = existing.length + 1;
+            const id = `evt_${randomUUID().replaceAll("-", "")}`;
+            const createdAt = this.now().toISOString();
+            const row = eventInputToRow(input, { id, sequence, createdAt });
+            this.database.sqlite.prepare(`insert into activity_audit_events (
+          id,
+          activity_id,
+          sequence,
+          event_type,
+          turn_id,
+          conversation_scope_id,
+          tool,
+          workspace_id,
+          workspace_root,
+          workspace_mode,
+          workspace_source_root,
+          workspace_branch,
+          workspace_target_branch,
+          request_json,
+          result_json,
+          error,
+          created_at
+        ) values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(row.id, row.activity_id, row.sequence, row.event_type, row.turn_id, row.conversation_scope_id, row.tool, row.workspace_id, row.workspace_root, row.workspace_mode, row.workspace_source_root, row.workspace_branch, row.workspace_target_branch, row.request_json, row.result_json, row.error, row.created_at);
+            return rowToEvent(row);
+        })();
+    }
+    listEvents(activityId) {
+        return this.readRows(activityId).map(rowToEvent);
+    }
+    getActivity(activityId) {
+        const events = this.listEvents(activityId);
+        const started = events[0];
+        if (!started || started.type !== "started")
+            return undefined;
+        let state = "executing";
+        let result;
+        let error;
+        let updatedAt = started.createdAt;
+        for (const event of events.slice(1)) {
+            updatedAt = event.createdAt;
+            switch (event.type) {
+                case "started":
+                    break;
+                case "succeeded":
+                    state = "done";
+                    result = event.result;
+                    error = undefined;
+                    break;
+                case "failed":
+                    state = "failed";
+                    result = event.result;
+                    error = event.error;
+                    break;
+                case "blocked":
+                    state = "blocked";
+                    result = undefined;
+                    error = event.error;
+                    break;
+            }
+        }
+        return {
+            activityId: started.activityId,
+            turnId: started.turnId,
+            ...(started.conversationScopeId ? { conversationScopeId: started.conversationScopeId } : {}),
+            tool: started.tool,
+            workspace: started.workspace,
+            state,
+            ...(started.request !== undefined ? { request: started.request } : {}),
+            ...(result !== undefined ? { result } : {}),
+            ...(error !== undefined ? { error } : {}),
+            startedAt: started.createdAt,
+            updatedAt,
+        };
+    }
+    close() {
+        this.database.close();
+    }
+    readRows(activityId) {
+        return this.database.sqlite.prepare(`select * from activity_audit_events
+       where activity_id = ?
+       order by sequence asc`).all(activityId);
+    }
+}
+function eventInputToRow(input, identity) {
+    if (input.type === "started") {
+        return {
+            id: identity.id,
+            activity_id: input.activityId,
+            sequence: identity.sequence,
+            event_type: input.type,
+            turn_id: input.turnId,
+            conversation_scope_id: input.conversationScopeId ?? null,
+            tool: input.tool,
+            workspace_id: input.workspace.id ?? null,
+            workspace_root: input.workspace.root,
+            workspace_mode: input.workspace.mode,
+            workspace_source_root: input.workspace.sourceRoot ?? null,
+            workspace_branch: input.workspace.branch ?? null,
+            workspace_target_branch: input.workspace.targetBranch ?? null,
+            request_json: serializeJson(input.request),
+            result_json: null,
+            error: null,
+            created_at: identity.createdAt,
+        };
+    }
+    return {
+        id: identity.id,
+        activity_id: input.activityId,
+        sequence: identity.sequence,
+        event_type: input.type,
+        turn_id: null,
+        conversation_scope_id: null,
+        tool: null,
+        workspace_id: null,
+        workspace_root: null,
+        workspace_mode: null,
+        workspace_source_root: null,
+        workspace_branch: null,
+        workspace_target_branch: null,
+        request_json: null,
+        result_json: "result" in input ? serializeJson(input.result) : null,
+        error: "error" in input ? input.error : null,
+        created_at: identity.createdAt,
+    };
+}
+function rowToEvent(row) {
+    const base = {
+        id: row.id,
+        activityId: row.activity_id,
+        sequence: row.sequence,
+        createdAt: row.created_at,
+    };
+    switch (row.event_type) {
+        case "started":
+            if (!row.turn_id || !row.tool || !row.workspace_root || !isWorkspaceMode(row.workspace_mode)) {
+                throw new Error(`Activity audit start event ${row.id} is missing required context.`);
+            }
+            return {
+                ...base,
+                type: "started",
+                turnId: row.turn_id,
+                ...(row.conversation_scope_id ? { conversationScopeId: row.conversation_scope_id } : {}),
+                tool: row.tool,
+                workspace: {
+                    ...(row.workspace_id ? { id: row.workspace_id } : {}),
+                    root: row.workspace_root,
+                    mode: row.workspace_mode,
+                    ...(row.workspace_source_root ? { sourceRoot: row.workspace_source_root } : {}),
+                    ...(row.workspace_branch ? { branch: row.workspace_branch } : {}),
+                    ...(row.workspace_target_branch ? { targetBranch: row.workspace_target_branch } : {}),
+                },
+                ...(row.request_json !== null ? { request: parseJson(row.request_json) } : {}),
+            };
+        case "succeeded":
+            return {
+                ...base,
+                type: "succeeded",
+                result: parseJson(row.result_json),
+            };
+        case "failed":
+            if (!row.error)
+                throw new Error(`Activity audit failed event ${row.id} is missing an error.`);
+            return {
+                ...base,
+                type: "failed",
+                result: parseJson(row.result_json),
+                error: row.error,
+            };
+        case "blocked":
+            if (!row.error)
+                throw new Error(`Activity audit blocked event ${row.id} is missing an error.`);
+            return {
+                ...base,
+                type: "blocked",
+                error: row.error,
+            };
+        default:
+            throw new Error(`Unknown Activity audit event type: ${row.event_type}`);
+    }
+}
+function isWorkspaceMode(value) {
+    return value === "checkout" || value === "worktree";
+}
+function serializeJson(value) {
+    return value === undefined ? null : JSON.stringify(value);
+}
+function parseJson(value) {
+    return value === null ? undefined : JSON.parse(value);
+}

package/dist/db/migrations.js

@@ -34,6 +34,11 @@ const migrations = [
         name: "workspace-context-deliveries",
         up: migrateWorkspaceContextDeliveries,
     },
+    {
+        version: 8,
+        name: "activity-audit",
+        up: migrateActivityAudit,
+    },
 ];
 export function migrateDatabase(sqlite) {
     const migrate = sqlite.transaction(() => {
@@ -208,6 +213,41 @@ function migrateWorkspaceContextDeliveries(sqlite) {
       on workspace_context_deliveries(delivered_at desc);
   `);
 }
+function migrateActivityAudit(sqlite) {
+    sqlite.exec(`
+    create table if not exists activity_audit_events (
+      id text primary key,
+      activity_id text not null,
+      sequence integer not null,
+      event_type text not null,
+      turn_id text,
+      conversation_scope_id text,
+      tool text,
+      workspace_id text,
+      workspace_root text,
+      workspace_mode text,
+      workspace_source_root text,
+      workspace_branch text,
+      workspace_target_branch text,
+      request_json text,
+      result_json text,
+      error text,
+      created_at text not null
+    );
+
+    create unique index if not exists activity_audit_events_activity_sequence_unique_idx
+      on activity_audit_events(activity_id, sequence);
+
+    create index if not exists activity_audit_events_activity_idx
+      on activity_audit_events(activity_id, sequence);
+
+    create index if not exists activity_audit_events_turn_idx
+      on activity_audit_events(turn_id, created_at);
+
+    create index if not exists activity_audit_events_created_idx
+      on activity_audit_events(created_at);
+  `);
+}
 function addColumnIfMissing(sqlite, table, column, definition) {
     const columns = sqlite.prepare(`pragma table_info(${table})`).all();
     if (columns.some((existingColumn) => existingColumn.name === column))

package/dist/db/schema.js

@@ -1,4 +1,4 @@
-import { index, integer, primaryKey, sqliteTable, text } from "drizzle-orm/sqlite-core";
+import { index, integer, primaryKey, sqliteTable, text, uniqueIndex } from "drizzle-orm/sqlite-core";
 export const workspaceSessions = sqliteTable("workspace_sessions", {
     id: text("id").primaryKey(),
     root: text("root").notNull(),
@@ -73,6 +73,30 @@ export const oauthRefreshTokens = sqliteTable("oauth_refresh_tokens", {
     expiresAt: integer("expires_at").notNull(),
     resource: text("resource"),
 });
+export const activityAuditEvents = sqliteTable("activity_audit_events", {
+    id: text("id").primaryKey(),
+    activityId: text("activity_id").notNull(),
+    sequence: integer("sequence").notNull(),
+    eventType: text("event_type").notNull(),
+    turnId: text("turn_id"),
+    conversationScopeId: text("conversation_scope_id"),
+    tool: text("tool"),
+    workspaceId: text("workspace_id"),
+    workspaceRoot: text("workspace_root"),
+    workspaceMode: text("workspace_mode"),
+    workspaceSourceRoot: text("workspace_source_root"),
+    workspaceBranch: text("workspace_branch"),
+    workspaceTargetBranch: text("workspace_target_branch"),
+    requestJson: text("request_json"),
+    resultJson: text("result_json"),
+    error: text("error"),
+    createdAt: text("created_at").notNull(),
+}, (table) => [
+    uniqueIndex("activity_audit_events_activity_sequence_unique_idx").on(table.activityId, table.sequence),
+    index("activity_audit_events_activity_idx").on(table.activityId, table.sequence),
+    index("activity_audit_events_turn_idx").on(table.turnId, table.createdAt),
+    index("activity_audit_events_created_idx").on(table.createdAt),
+]);
 export const localAgentSessions = sqliteTable("local_agent_sessions", {
     id: text("id").primaryKey(),
     workspaceId: text("workspace_id"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akira-tl/forgerelay",
-  "version": "0.4.7",
+  "version": "0.5.0",
   "description": "Local development control plane for MCP coding agents.",
   "type": "module",
   "homepage": "https://github.com/Akira-TL/forgerelay#readme",
@@ -44,7 +44,7 @@
     "release:parity": "node scripts/release-parity.mjs",
     "postinstall": "node scripts/fix-node-pty-permissions.mjs",
     "start": "node dist/cli.js serve",
-    "test": "node --test scripts/release-proof.test.mjs && tsx src/config.test.ts && tsx src/lsp/language-server-config.test.ts && tsx src/lsp/normalization/hover.test.ts && tsx src/lsp/references.server.test.ts && tsx src/lsp/operations/document-symbols.server.test.ts && tsx src/lsp/operations/workspace-symbols.server.test.ts && tsx src/lsp/operations/diagnostics-push.server.test.ts && tsx src/lsp/operations/diagnostics-pull.server.test.ts && tsx src/lsp/operations/request-hardening.server.test.ts && tsx src/lsp/operations/recovery.server.test.ts && tsx src/lsp/operations/lifecycle.server.test.ts && tsx src/lsp/runtime/semantic-requests.test.ts && tsx src/logger.test.ts && tsx src/proxy-trust.test.ts && tsx src/mcp-app-template.test.ts && tsx src/hooks.test.ts && tsx src/capability-registry.test.ts && tsx src/mcp/server-instructions.test.ts && tsx src/request-meta.test.ts && tsx src/incoming-artifacts.test.ts && tsx src/artifact-download.test.ts && tsx src/ui/card-types.test.ts && tsx src/ui/patch-display.test.ts && tsx src/ui/tool-display.test.ts && tsx src/apply-patch.test.ts && tsx src/process-platform.test.ts && tsx src/process-sessions.test.ts && tsx src/mcp-sessions.test.ts && tsx src/server-shutdown.test.ts && tsx src/local-agent-runtime.test.ts && tsx src/local-agent-adapters.test.ts && tsx src/local-agent-availability.test.ts && tsx src/local-agent-profiles.test.ts && tsx src/local-agent-targets.test.ts && tsx src/local-agent-store.test.ts && tsx src/roots.test.ts && tsx src/file-mutations.test.ts && tsx src/skills.test.ts && tsx src/workspace-store.test.ts && tsx src/workspaces.test.ts && tsx src/workspace-conversation.test.ts && tsx src/review-checkpoints.test.ts && tsx src/lsp/code-intelligence.server.test.ts && tsx src/server.test.ts && tsx src/oauth-store.test.ts && tsx src/cli.test.ts",
+    "test": "node --test scripts/release-proof.test.mjs && tsx src/config.test.ts && tsx src/lsp/language-server-config.test.ts && tsx src/lsp/normalization/hover.test.ts && tsx src/lsp/references.server.test.ts && tsx src/lsp/operations/document-symbols.server.test.ts && tsx src/lsp/operations/workspace-symbols.server.test.ts && tsx src/lsp/operations/diagnostics-push.server.test.ts && tsx src/lsp/operations/diagnostics-pull.server.test.ts && tsx src/lsp/operations/request-hardening.server.test.ts && tsx src/lsp/operations/recovery.server.test.ts && tsx src/lsp/operations/lifecycle.server.test.ts && tsx src/lsp/runtime/semantic-requests.test.ts && tsx src/logger.test.ts && tsx src/proxy-trust.test.ts && tsx src/mcp-app-template.test.ts && tsx src/hooks.test.ts && tsx src/capability-registry.test.ts && tsx src/mcp/server-instructions.test.ts && tsx src/request-meta.test.ts && tsx src/incoming-artifacts.test.ts && tsx src/artifact-download.test.ts && tsx src/ui/card-types.test.ts && tsx src/ui/patch-display.test.ts && tsx src/ui/tool-display.test.ts && tsx src/apply-patch.test.ts && tsx src/process-platform.test.ts && tsx src/process-sessions.test.ts && tsx src/mcp-sessions.test.ts && tsx src/server-shutdown.test.ts && tsx src/local-agent-runtime.test.ts && tsx src/local-agent-adapters.test.ts && tsx src/local-agent-availability.test.ts && tsx src/local-agent-profiles.test.ts && tsx src/local-agent-targets.test.ts && tsx src/local-agent-store.test.ts && tsx src/roots.test.ts && tsx src/file-mutations.test.ts && tsx src/skills.test.ts && tsx src/workspace-store.test.ts && tsx src/activity/audit-store.test.ts && tsx src/workspaces.test.ts && tsx src/workspace-conversation.test.ts && tsx src/review-checkpoints.test.ts && tsx src/lsp/code-intelligence.server.test.ts && tsx src/server.test.ts && tsx src/oauth-store.test.ts && tsx src/cli.test.ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "release:check": "node scripts/release-version.mjs check",
     "release:tag-check": "node scripts/release-version.mjs tag",