@akira-tl/forgerelay 0.5.5 → 0.5.6

package/CHANGELOG.md

@@ -4,6 +4,17 @@ All notable ForgeRelay changes are documented here.
 
 ## [Unreleased]
 
+## [0.5.6] - 2026-08-17
+
+### Fixed
+
+- Repaired historical `bash_output_streams` SQLite schemas that had already recorded the Bash audit migration before later audit columns were added, preventing Bash completion from crashing ForgeRelay with `no such column: error` and avoiding ambiguous Host timeouts after commands had already executed.
+- Made the background-completion retention regression wait for the process to actually finish before crossing its retention window, removing a Windows-only timing race from the release suite.
+
+### Changed
+
+- The `release-tag-local-ci` Hook now runs the full cloud-equivalent verification surface on an isolated Node 22.19 / npm 10.9.3 checkout before allowing a stable tag push, instead of only checking a previously recorded proof whose parity suite could omit server-level tests.
+
 ## [0.5.5] - 2026-08-15
 
 ### Added

package/dist/db/migrations.js

@@ -54,6 +54,11 @@ const migrations = [
         name: "activity-parent-child",
         up: migrateActivityParentChild,
     },
+    {
+        version: 12,
+        name: "bash-output-audit-columns",
+        up: migrateBashOutputAuditColumns,
+    },
 ];
 export function migrateDatabase(sqlite) {
     const migrate = sqlite.transaction(() => {
@@ -329,6 +334,11 @@ function migrateActivityParentChild(sqlite) {
       on activity_audit_events(parent_activity_id, created_at);
   `);
 }
+function migrateBashOutputAuditColumns(sqlite) {
+    addColumnIfMissing(sqlite, "bash_output_streams", "error", "text");
+    addColumnIfMissing(sqlite, "bash_output_streams", "returned", "integer not null default 0");
+    addColumnIfMissing(sqlite, "bash_output_streams", "completion_claimed_at", "text");
+}
 function addColumnIfMissing(sqlite, table, column, definition) {
     const columns = sqlite.prepare(`pragma table_info(${table})`).all();
     if (columns.some((existingColumn) => existingColumn.name === column))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akira-tl/forgerelay",
-  "version": "0.5.5",
+  "version": "0.5.6",
   "description": "Local development control plane for MCP coding agents.",
   "type": "module",
   "homepage": "https://github.com/Akira-TL/forgerelay#readme",
@@ -44,7 +44,7 @@
     "release:parity": "node scripts/release-parity.mjs",
     "postinstall": "node scripts/fix-node-pty-permissions.mjs",
     "start": "node dist/cli.js serve",
-    "test": "node --test scripts/release-proof.test.mjs && tsx src/config.test.ts && tsx src/lsp/language-server-config.test.ts && tsx src/lsp/normalization/hover.test.ts && tsx src/lsp/references.server.test.ts && tsx src/lsp/operations/document-symbols.server.test.ts && tsx src/lsp/operations/workspace-symbols.server.test.ts && tsx src/lsp/operations/diagnostics-push.server.test.ts && tsx src/lsp/operations/diagnostics-pull.server.test.ts && tsx src/lsp/operations/request-hardening.server.test.ts && tsx src/lsp/operations/recovery.server.test.ts && tsx src/lsp/operations/lifecycle.server.test.ts && tsx src/lsp/runtime/semantic-requests.test.ts && tsx src/logger.test.ts && tsx src/proxy-trust.test.ts && tsx src/mcp-app-template.test.ts && tsx src/hooks.test.ts && tsx src/capability-registry.test.ts && tsx src/mcp/server-instructions.test.ts && tsx src/request-meta.test.ts && tsx src/incoming-artifacts.test.ts && tsx src/artifact-download.test.ts && tsx src/ui/card-types.test.ts && tsx src/ui/patch-display.test.ts && tsx src/ui/tool-display.test.ts && tsx src/apply-patch.test.ts && tsx src/process-platform.test.ts && tsx src/process-sessions.test.ts && tsx src/mcp-sessions.test.ts && tsx src/server-shutdown.test.ts && tsx src/local-agent-runtime.test.ts && tsx src/local-agent-adapters.test.ts && tsx src/local-agent-availability.test.ts && tsx src/local-agent-profiles.test.ts && tsx src/local-agent-targets.test.ts && tsx src/local-agent-store.test.ts && tsx src/roots.test.ts && tsx src/file-mutations.test.ts && tsx src/operations/edit-preflight.test.ts && tsx src/skills.test.ts && tsx src/workspace-store.test.ts && tsx src/activity/audit-store.test.ts && tsx src/activity/bash-output-store.test.ts && tsx src/activity/lifecycle.test.ts && tsx src/activity/query-service.test.ts && tsx src/operations/core-operation-executor.test.ts && tsx src/operations/bulk-mutation.test.ts && tsx src/operations/batch/scheduler.test.ts && tsx src/operations/batch/executor-policy.test.ts && tsx src/workspaces.test.ts && tsx src/workspace-conversation.test.ts && tsx src/review-checkpoints.test.ts && tsx src/lsp/code-intelligence.server.test.ts && tsx src/server.test.ts && tsx src/oauth-store.test.ts && tsx src/cli.test.ts",
+    "test": "node --test scripts/release-proof.test.mjs && tsx src/config.test.ts && tsx src/lsp/language-server-config.test.ts && tsx src/lsp/normalization/hover.test.ts && tsx src/lsp/references.server.test.ts && tsx src/lsp/operations/document-symbols.server.test.ts && tsx src/lsp/operations/workspace-symbols.server.test.ts && tsx src/lsp/operations/diagnostics-push.server.test.ts && tsx src/lsp/operations/diagnostics-pull.server.test.ts && tsx src/lsp/operations/request-hardening.server.test.ts && tsx src/lsp/operations/recovery.server.test.ts && tsx src/lsp/operations/lifecycle.server.test.ts && tsx src/lsp/runtime/semantic-requests.test.ts && tsx src/logger.test.ts && tsx src/proxy-trust.test.ts && tsx src/mcp-app-template.test.ts && tsx src/hooks.test.ts && tsx src/capability-registry.test.ts && tsx src/mcp/server-instructions.test.ts && tsx src/request-meta.test.ts && tsx src/incoming-artifacts.test.ts && tsx src/artifact-download.test.ts && tsx src/ui/card-types.test.ts && tsx src/ui/patch-display.test.ts && tsx src/ui/tool-display.test.ts && tsx src/apply-patch.test.ts && tsx src/process-platform.test.ts && tsx src/process-sessions.test.ts && tsx src/mcp-sessions.test.ts && tsx src/server-shutdown.test.ts && tsx src/local-agent-runtime.test.ts && tsx src/local-agent-adapters.test.ts && tsx src/local-agent-availability.test.ts && tsx src/local-agent-profiles.test.ts && tsx src/local-agent-targets.test.ts && tsx src/local-agent-store.test.ts && tsx src/roots.test.ts && tsx src/file-mutations.test.ts && tsx src/operations/edit-preflight.test.ts && tsx src/skills.test.ts && tsx src/db/migrations.test.ts && tsx src/workspace-store.test.ts && tsx src/activity/audit-store.test.ts && tsx src/activity/bash-output-store.test.ts && tsx src/activity/lifecycle.test.ts && tsx src/activity/query-service.test.ts && tsx src/operations/core-operation-executor.test.ts && tsx src/operations/bulk-mutation.test.ts && tsx src/operations/batch/scheduler.test.ts && tsx src/operations/batch/executor-policy.test.ts && tsx src/workspaces.test.ts && tsx src/workspace-conversation.test.ts && tsx src/review-checkpoints.test.ts && tsx src/lsp/code-intelligence.server.test.ts && tsx src/server.test.ts && tsx src/oauth-store.test.ts && tsx src/cli.test.ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "release:check": "node scripts/release-version.mjs check",
     "release:tag-check": "node scripts/release-version.mjs tag",

package/scripts/release/tag-local-ci.mjs

@@ -0,0 +1,144 @@
+#!/usr/bin/env node
+
+import { execFileSync, spawnSync } from "node:child_process";
+import { cpSync, mkdirSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const NODE_VERSION = "22.19.0";
+const NPM_VERSION = "10.9.3";
+const repoRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
+const npx = process.platform === "win32" ? "npx.cmd" : "npx";
+
+main();
+
+function main() {
+  assertCleanReleaseHead();
+  const tag = releaseTagFromHookPayload();
+  assertTagMatchesReleaseHead(tag);
+
+  const sandbox = mkdtempSync(join(tmpdir(), "forgerelay-release-hook-ci-"));
+  try {
+    copyTrackedTree(sandbox);
+    const env = {
+      ...process.env,
+      FORGERELAY_ALLOWED_ROOTS: sandbox,
+      FORGERELAY_OAUTH_OWNER_TOKEN: "ci-owner-token-that-is-long-enough",
+      FORGERELAY_PUBLIC_BASE_URL: "http://127.0.0.1:7676",
+    };
+
+    runNodeNpm(
+      sandbox,
+      env,
+      ["npm", "ci"],
+      `Node ${NODE_VERSION} / npm ${NPM_VERSION} install`,
+    );
+    runNodeNpm(sandbox, env, ["npm", "run", "release:check"], "Release metadata");
+    runNodeNpm(sandbox, env, ["npm", "run", "typecheck"], "Typecheck");
+    runNodeNpm(sandbox, env, ["npm", "test"], "Full test suite");
+    runNodeNpm(sandbox, env, ["npm", "run", "build"], "Build");
+    runNodeNpm(sandbox, env, ["npm", "run", "lsp:interop"], "Optional LSP interoperability");
+    runNode(
+      sandbox,
+      env,
+      ["dist/cli.js", "doctor"],
+      "Doctor",
+    );
+
+    execFileSync(process.execPath, [join(repoRoot, "scripts", "release-proof.mjs"), "write"], {
+      cwd: repoRoot,
+      env: process.env,
+      stdio: "inherit",
+    });
+    execFileSync(process.execPath, [join(repoRoot, "scripts", "release-proof.mjs"), "check-hook"], {
+      cwd: repoRoot,
+      env: process.env,
+      stdio: "inherit",
+    });
+
+    console.log(`Release tag local CI passed for ${tag} with cloud-equivalent Node ${NODE_VERSION} checks.`);
+  } finally {
+    rmSync(sandbox, { recursive: true, force: true, maxRetries: 8, retryDelay: 100 });
+  }
+}
+
+function git(args) {
+  return execFileSync("git", args, {
+    cwd: repoRoot,
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"],
+  }).trim();
+}
+
+function assertCleanReleaseHead() {
+  const status = git(["status", "--porcelain", "--untracked-files=all"]);
+  if (status) throw new Error("release tag local CI requires a clean working tree");
+}
+
+function releaseTagFromHookPayload() {
+  let payload;
+  try {
+    payload = JSON.parse(process.env.FORGERELAY_HOOK_PAYLOAD ?? "{}");
+  } catch {
+    throw new Error("FORGERELAY_HOOK_PAYLOAD is not valid JSON");
+  }
+  const command = typeof payload.command === "string" ? payload.command : "";
+  const match = /git\s+push\s+origin\s+(v\d+\.\d+\.\d+)/.exec(command);
+  if (!match?.[1]) throw new Error("release Hook payload does not contain a stable tag push");
+  return match[1];
+}
+
+function assertTagMatchesReleaseHead(tag) {
+  const pkg = JSON.parse(readFileSync(join(repoRoot, "package.json"), "utf8"));
+  const expectedTag = `v${pkg.version}`;
+  if (tag !== expectedTag) throw new Error(`tag ${tag} does not match package version ${pkg.version}`);
+  const head = git(["rev-parse", "HEAD"]);
+  let tagHead;
+  try {
+    tagHead = git(["rev-parse", `${tag}^{commit}`]);
+  } catch {
+    throw new Error(`local tag ${tag} does not exist or does not resolve to a commit`);
+  }
+  if (tagHead !== head) {
+    throw new Error(`tag ${tag} points to ${tagHead.slice(0, 12)}, but current HEAD is ${head.slice(0, 12)}`);
+  }
+}
+
+function copyTrackedTree(sandbox) {
+  const files = execFileSync("git", ["ls-files", "-z"], {
+    cwd: repoRoot,
+    encoding: "utf8",
+  }).split("\0").filter(Boolean);
+  for (const relativePath of files) {
+    const source = join(repoRoot, relativePath);
+    const destination = join(sandbox, relativePath);
+    mkdirSync(dirname(destination), { recursive: true });
+    cpSync(source, destination, { recursive: true, force: true });
+  }
+}
+
+function runNodeNpm(cwd, env, command, label) {
+  run(
+    cwd,
+    env,
+    ["--yes", "-p", `node@${NODE_VERSION}`, "-p", `npm@${NPM_VERSION}`, "--", ...command],
+    label,
+  );
+}
+
+function runNode(cwd, env, args, label) {
+  run(cwd, env, ["--yes", `node@${NODE_VERSION}`, ...args], label);
+}
+
+function run(cwd, env, args, label) {
+  console.log(`\n== ${label} ==`);
+  const result = spawnSync(npx, args, {
+    cwd,
+    env,
+    stdio: "inherit",
+    windowsHide: true,
+  });
+  if (result.error) throw result.error;
+  if (result.status !== 0) throw new Error(`${label} failed with exit ${result.status ?? "unknown"}`);
+}