@akira-tl/forgerelay 0.8.5 → 0.8.6

package/docs/configuration.md

@@ -18,10 +18,10 @@ Override the directory with:
 FORGERELAY_CONFIG_DIR=/path/to/config npx @akira-tl/forgerelay serve
 ```
 
-For migration compatibility, `DEVSPACE_CONFIG_DIR` is accepted when
-`FORGERELAY_CONFIG_DIR` is unset. Without either variable, ForgeRelay uses
-`~/.forgerelay` unless that directory is absent and an existing `~/.devspace`
-directory is present; in that case the legacy directory is reused.
+The rename-era automatic fallback has ended. `DEVSPACE_CONFIG_DIR` is ignored,
+and the default directory is always `~/.forgerelay`. If an older installation
+still has data in a DevSpace-named directory, migrate it explicitly or point
+`FORGERELAY_CONFIG_DIR` at that directory during the migration.
 
 ## Commands
 
@@ -33,20 +33,11 @@ npx @akira-tl/forgerelay config get
 npx @akira-tl/forgerelay config set publicBaseUrl https://forge.example.com/forgerelay/main,https://forge-alt.example.com/relay
 ```
 
-## Environment variable compatibility
+## Environment variables
 
-The public prefix is `FORGERELAY_*`.
-
-During the rename transition, the equivalent `DEVSPACE_*` variable remains a
-fallback when the ForgeRelay variable is unset. For example:
-
-```text
-FORGERELAY_ALLOWED_ROOTS
-        ↓ if unset
-DEVSPACE_ALLOWED_ROOTS
-```
-
-When both are present, `FORGERELAY_*` wins.
+The public prefix is `FORGERELAY_*`. Rename-era `DEVSPACE_*` environment
+variables are no longer read. Migrate automation, service files, shell profiles,
+and CI configuration to the canonical ForgeRelay names.
 
 ## Core variables
 
@@ -88,10 +79,10 @@ A single persisted string remains fully supported, so existing configs require n
 migration. For environment configuration, use a comma-separated list in
 `FORGERELAY_PUBLIC_BASE_URL`.
 
-If an existing legacy state/worktree directory is present and the new default is
-not, ForgeRelay reuses the legacy location rather than orphaning stored state.
-Persisted `stateDir` and `worktreeRoot` values in `config.json` also continue to
-win over defaults.
+ForgeRelay no longer auto-detects DevSpace-named state or worktree directories.
+Persisted `stateDir` and `worktreeRoot` values in `config.json` continue to win
+over defaults, so an explicit configuration may temporarily point at an older
+location while data is migrated.
 
 ## Native artifact download
 
@@ -145,8 +136,7 @@ MCP clients discover metadata from:
 | `codex` | Experimental Codex-shaped compatibility adapter using `open_workspace`, `close_workspace`, `read`, `rename`, `delete`, `apply_patch`, `exec_command`, `write_stdin`, and `capability`. It does not define the ForgeRelay canonical interface. |
 
 `FORGERELAY_MINIMAL_TOOLS` remains a compatibility-style boolean alias when the
-explicit tool mode is unset. The corresponding legacy `DEVSPACE_*` names are
-also accepted.
+explicit tool mode is unset. DevSpace-prefixed equivalents are no longer read.
 
 `minimal` and `full` now resolve to the same regular 9-tool `tools/list`; `full`
 is retained only as a configuration-compatibility value. `codex` selects a
@@ -347,8 +337,7 @@ remains durable.
 | --- | --- | --- |
 | `FORGERELAY_TASK_REMINDER_INTERVAL` | `30` | Successful semantic work calls between Task update reminders; `0` disables reminders. |
 
-The same value may be persisted as `taskReminderInterval` in `config.json`. The
-legacy-compatible `DEVSPACE_TASK_REMINDER_INTERVAL` environment name is also accepted.
+The same value may be persisted as `taskReminderInterval` in `config.json`.
 
 Use `open_workspace(action="list")` only when the Agent needs lightweight inventory
 to discover known Workspaces, continue earlier work, or organize Workspace state. The
@@ -609,10 +598,12 @@ Standard Agent Skills are discovered from:
 
 When subagents are enabled, profiles are discovered from:
 
-- `~/.forgerelay/agents/*.md` for new installations;
-- project `.forgerelay/agents/*.md`;
-- active legacy config directory `~/.devspace/agents/*.md` when reused;
-- project `.devspace/agents/*.md` for migration compatibility.
+- the active ForgeRelay config directory's `agents/*.md`;
+- project `.forgerelay/agents/*.md`.
+
+DevSpace-named profile directories are no longer discovered automatically. Move
+those profiles or explicitly select their parent with `FORGERELAY_CONFIG_DIR`
+during migration.
 
 The ForgeRelay-owned `subagents` capability guide teaches the current CLI
 workflow on demand:

package/docs/gotchas.md

@@ -28,11 +28,10 @@ npm rebuild better-sqlite3
 npx @akira-tl/forgerelay doctor
 ```
 
-## Existing DevSpace config is still being used
+## Existing DevSpace config stopped being used
 
-This is intentional migration behavior. If `~/.forgerelay` does not exist but
-`~/.devspace` does, ForgeRelay reuses the legacy config directory so existing
-OAuth/state configuration is not silently abandoned.
+The automatic rename-era fallback has ended. ForgeRelay now defaults to
+`~/.forgerelay` and ignores `DEVSPACE_*` environment variables.
 
 Check the resolved directory:
 
@@ -40,7 +39,8 @@ Check the resolved directory:
 forgerelay doctor
 ```
 
-To force a new location, set:
+If an older installation still needs data from a DevSpace-named directory,
+point the canonical setting at it explicitly while migrating:
 
 ```bash
 FORGERELAY_CONFIG_DIR="$HOME/.forgerelay" forgerelay init
@@ -135,7 +135,9 @@ New installs normally use:
 ~/.forgerelay/auth.json
 ```
 
-A migrated install may still use `~/.devspace/auth.json`.
+ForgeRelay no longer discovers `~/.devspace/auth.json` automatically. Move the
+credential file to the active ForgeRelay config directory or explicitly set
+`FORGERELAY_CONFIG_DIR` while migrating.
 
 Regenerate setup intentionally with:
 
@@ -227,7 +229,8 @@ New profile locations include:
 .forgerelay/agents/*.md
 ```
 
-Legacy `.devspace/agents` paths remain supported.
+Legacy `.devspace/agents` paths are no longer scanned automatically. Move
+profiles into one of the canonical locations before upgrading.
 
 `forgerelay agents ls` lists sessions, not profile definitions. The compact
 profile catalog is returned through `open_workspace`.

package/docs/roadmap.md

@@ -365,6 +365,9 @@ New public names use ForgeRelay:
 - `.forgerelay`
 - `forgerelay/*` managed branches
 
-Legacy `DEVSPACE_*`, `~/.devspace`, `.devspace`, old managed branch names, and
-selected persisted internal identifiers remain readable during migration where
-removing compatibility would orphan real user state.
+Rename-era public compatibility adapters have a bounded migration window rather
+than permanent support. `DEVSPACE_*`, automatic `~/.devspace` reuse, legacy
+`.devspace/agents` discovery, and old package-path special cases are retired once
+they are outside that window. Persisted internal identifiers remain compatible
+when removing them would orphan real user state; those are storage/protocol
+migration concerns, not public product aliases.

package/docs/security.md

@@ -60,8 +60,9 @@ FORGERELAY_OAUTH_OWNER_TOKEN="$(openssl rand -base64 32)"
 
 The token must be at least 16 characters.
 
-Existing `~/.devspace` configuration and `DEVSPACE_*` variables remain readable
-for migration compatibility when the new ForgeRelay equivalents are absent.
+Rename-era `DEVSPACE_*` environment-variable and automatic `~/.devspace`
+configuration fallbacks have ended. Use canonical `FORGERELAY_*` settings and
+explicit paths when migrating older installations.
 
 ## Public URL and tunnels
 

package/docs/setup.md

@@ -121,11 +121,14 @@ Keep `auth.json` private.
 
 ### Existing DevSpace configuration
 
-During migration, if `~/.forgerelay` does not exist but `~/.devspace` does,
-ForgeRelay reuses the legacy directory automatically. `FORGERELAY_CONFIG_DIR`
-takes precedence over the legacy `DEVSPACE_CONFIG_DIR` environment variable.
-
-You do not need to move a working legacy config before starting ForgeRelay.
+Automatic DevSpace directory fallback has ended. ForgeRelay defaults to
+`~/.forgerelay` and ignores `DEVSPACE_CONFIG_DIR`.
+
+Before upgrading an older installation, move or copy the needed configuration
+and credentials into the ForgeRelay directory, or temporarily point
+`FORGERELAY_CONFIG_DIR` at the old directory. If state or managed worktrees live
+under older paths, preserve them with explicit `stateDir` / `worktreeRoot`
+configuration until migration is complete.
 
 ## Check the setup
 

package/docs/versioning.md

@@ -167,7 +167,7 @@ npm publishing token.
 3. Run the appropriate `release:patch`, `release:minor`, or `release:major`
    command.
 4. Review the generated version and changelog diff, then commit the release-ready code and metadata.
-5. Push the release-ready `main` commit without changing it afterward.
+5. Run `npm run release:verify` on the committed release HEAD, then run `npm run release:push-ready`. This is the only normal release-ready branch push entrypoint: it requires a proof for the current HEAD, atomically advances `origin/main` plus the current `release/*` branch when applicable, rejects a local `main` with real unique patches, and synchronizes the local `main` ref after the remote push succeeds.
 6. Create the exact version tag, for example:
 
    ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akira-tl/forgerelay",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "description": "Local development control plane for MCP coding agents.",
   "type": "module",
   "homepage": "https://github.com/Akira-TL/forgerelay#readme",
@@ -48,9 +48,10 @@
     "release:parity": "node scripts/release-parity.mjs",
     "release:pack": "node scripts/release/pack.mjs",
     "release:publish": "node scripts/release/publish.mjs",
+    "release:push-ready": "node scripts/release/push-ready.mjs",
     "postinstall": "node scripts/fix-node-pty-permissions.mjs",
     "start": "node dist/cli.js serve",
-    "test": "node --test scripts/debug/runtime.test.mjs scripts/release-proof.test.mjs scripts/release/release-gate.test.mjs scripts/release/release-version.test.mjs && tsx src/oauth/router.test.ts && tsx src/remote-auth-cli.test.ts && tsx src/remote-ssh-auth-cli.test.ts && tsx src/remote-workspace-relay.test.ts && tsx src/remote-workspace-relay-process.test.ts && tsx src/config.test.ts && tsx src/lsp/language-server-config.test.ts && tsx src/lsp/normalization/hover.test.ts && tsx src/lsp/references.server.test.ts && tsx src/lsp/operations/document-symbols.server.test.ts && tsx src/lsp/operations/workspace-symbols.server.test.ts && tsx src/lsp/operations/diagnostics-push.server.test.ts && tsx src/lsp/operations/diagnostics-pull.server.test.ts && tsx src/lsp/operations/request-hardening.server.test.ts && tsx src/lsp/operations/recovery.server.test.ts && tsx src/lsp/operations/lifecycle.server.test.ts && tsx src/lsp/runtime/semantic-requests.test.ts && tsx src/logger.test.ts && tsx src/proxy-trust.test.ts && tsx src/mcp-app-template.test.ts && tsx src/hooks.test.ts && tsx src/capability-registry.test.ts && tsx src/mcp/server-instructions.test.ts && tsx src/request-meta.test.ts && tsx src/incoming-artifacts.test.ts && tsx src/artifact-download.test.ts && tsx src/ui/card-types.test.ts && tsx src/ui/workspace-lifecycle-app.test.ts && tsx src/ui/activity/model.test.ts && tsx src/ui/patch-display.test.ts && tsx src/ui/tool-display.test.ts && tsx src/apply-patch.test.ts && tsx src/process-platform.test.ts && tsx src/process-sessions.test.ts && tsx src/mcp-sessions.test.ts && tsx src/server-shutdown.test.ts && tsx src/subagents/providers/adapters/codex.test.ts && tsx src/subagents/providers/registry.test.ts && tsx src/subagents/providers/availability.test.ts && tsx src/subagents/profiles.test.ts && tsx src/subagents/cli-target.test.ts && tsx src/subagents/sessions/store.test.ts && tsx src/subagents/sessions/manager.test.ts && tsx src/subagents/sessions/mcp/capability.server.test.ts && tsx src/subagents/sessions/mcp/continuation.server.test.ts && tsx src/subagents/sessions/mcp/lifecycle.server.test.ts && tsx src/subagents/sessions/mcp/reconciliation.server.test.ts && tsx src/subagents/sessions/mcp/routing.server.test.ts && tsx src/roots.test.ts && tsx src/file-mutations.test.ts && tsx src/operations/edit-preflight.test.ts && tsx src/skills.test.ts && tsx src/db/migrations.test.ts && tsx src/workspace-store.test.ts && tsx src/workspace-tasks.test.ts && tsx src/workspace-task-reminders.test.ts && tsx src/activity/audit-store.test.ts && tsx src/activity/bash-output-store.test.ts && tsx src/activity/lifecycle.test.ts && tsx src/activity/query-service.test.ts && tsx src/operations/core-operation-executor.test.ts && tsx src/operations/bulk-mutation.test.ts && tsx src/operations/batch/scheduler.test.ts && tsx src/operations/batch/executor-policy.test.ts && tsx src/workspaces.test.ts && tsx src/workspace-conversation.test.ts && tsx src/review-checkpoints.test.ts && tsx src/lsp/code-intelligence.server.test.ts && npm run build:app && tsx src/server.test.ts && tsx src/oauth-store.test.ts && tsx src/cli.test.ts",
+    "test": "node --test scripts/debug/runtime.test.mjs scripts/release-proof.test.mjs scripts/release/release-gate.test.mjs scripts/release/push-ready.test.mjs scripts/release/release-version.test.mjs && tsx src/oauth/router.test.ts && tsx src/remote-auth-cli.test.ts && tsx src/remote-ssh-auth-cli.test.ts && tsx src/remote-workspace-relay.test.ts && tsx src/remote-workspace-relay-process.test.ts && tsx src/config.test.ts && tsx src/lsp/language-server-config.test.ts && tsx src/lsp/normalization/hover.test.ts && tsx src/lsp/references.server.test.ts && tsx src/lsp/operations/document-symbols.server.test.ts && tsx src/lsp/operations/workspace-symbols.server.test.ts && tsx src/lsp/operations/diagnostics-push.server.test.ts && tsx src/lsp/operations/diagnostics-pull.server.test.ts && tsx src/lsp/operations/request-hardening.server.test.ts && tsx src/lsp/operations/recovery.server.test.ts && tsx src/lsp/operations/lifecycle.server.test.ts && tsx src/lsp/runtime/semantic-requests.test.ts && tsx src/logger.test.ts && tsx src/proxy-trust.test.ts && tsx src/mcp-app-template.test.ts && tsx src/hooks.test.ts && tsx src/capability-registry.test.ts && tsx src/mcp/server-instructions.test.ts && tsx src/request-meta.test.ts && tsx src/incoming-artifacts.test.ts && tsx src/artifact-download.test.ts && tsx src/ui/card-types.test.ts && tsx src/ui/workspace-lifecycle-app.test.ts && tsx src/ui/activity/model.test.ts && tsx src/ui/patch-display.test.ts && tsx src/ui/tool-display.test.ts && tsx src/apply-patch.test.ts && tsx src/process-platform.test.ts && tsx src/process-sessions.test.ts && tsx src/mcp-sessions.test.ts && tsx src/server-shutdown.test.ts && tsx src/subagents/providers/adapters/codex.test.ts && tsx src/subagents/providers/registry.test.ts && tsx src/subagents/providers/availability.test.ts && tsx src/subagents/profiles.test.ts && tsx src/subagents/cli-target.test.ts && tsx src/subagents/sessions/store.test.ts && tsx src/subagents/sessions/manager.test.ts && tsx src/subagents/sessions/mcp/capability.server.test.ts && tsx src/subagents/sessions/mcp/continuation.server.test.ts && tsx src/subagents/sessions/mcp/lifecycle.server.test.ts && tsx src/subagents/sessions/mcp/reconciliation.server.test.ts && tsx src/subagents/sessions/mcp/routing.server.test.ts && tsx src/roots.test.ts && tsx src/file-mutations.test.ts && tsx src/operations/edit-preflight.test.ts && tsx src/skills.test.ts && tsx src/db/migrations.test.ts && tsx src/workspace-store.test.ts && tsx src/workspace-tasks.test.ts && tsx src/workspace-task-reminders.test.ts && tsx src/activity/audit-store.test.ts && tsx src/activity/bash-output-store.test.ts && tsx src/activity/lifecycle.test.ts && tsx src/activity/query-service.test.ts && tsx src/operations/core-operation-executor.test.ts && tsx src/operations/bulk-mutation.test.ts && tsx src/operations/batch/scheduler.test.ts && tsx src/operations/batch/executor-policy.test.ts && tsx src/workspaces.test.ts && tsx src/workspace-conversation.test.ts && tsx src/review-checkpoints.test.ts && tsx src/lsp/code-intelligence.server.test.ts && npm run build:app && tsx src/server.test.ts && tsx src/oauth-store.test.ts && tsx src/cli.test.ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "release:check": "node scripts/release-version.mjs check",
     "release:tag-check": "node scripts/release-version.mjs tag",

package/scripts/debug/accept.mjs

@@ -155,6 +155,7 @@ try {
     "open_workspace",
     "activity_panel",
     "activity_snapshot",
+    "activity_index",
     "activity_detail",
     "activity_output",
     "capability",
@@ -694,8 +695,13 @@ try {
     });
     assert.equal(inspectorSnapshot.isError, undefined);
     assert.ok(inspectorSnapshot.structuredContent.revision > 0);
+    assert.equal(inspectorSnapshot.structuredContent.activities, undefined);
+    const inspectorIndex = callTool(oauth.accessToken, sessionId, 93, "activity_index", {
+      turnId: inspectorTurnId,
+    });
+    assert.equal(inspectorIndex.isError, undefined);
     assert.deepEqual(
-      inspectorSnapshot.structuredContent.activities.map(({ tool, workspaceId: activityWorkspaceId, target }) => ({
+      inspectorIndex.structuredContent.activities.map(({ tool, workspaceId: activityWorkspaceId, target }) => ({
         tool,
         workspaceId: activityWorkspaceId,
         target,

package/scripts/debug/relay-accept.mjs

@@ -537,7 +537,6 @@ function cleanProductEnv() {
     name !== "HOST"
     && name !== "PORT"
     && !name.startsWith("FORGERELAY_")
-    && !name.startsWith("DEVSPACE_")
   ));
 }
 

package/scripts/debug/runtime.mjs

@@ -75,10 +75,6 @@ export function createInteractiveDebugEnvironment({
       delete debugEnv[key];
       continue;
     }
-    if (key.startsWith("DEVSPACE_")) {
-      delete debugEnv[key];
-      continue;
-    }
     if (
       key.startsWith("FORGERELAY_")
       && !key.startsWith("FORGERELAY_LOG_")

package/scripts/debug/runtime.test.mjs

@@ -39,7 +39,6 @@ test("interactive debug uses one dedicated persisted config under ~/.forgerelay/
       FORGERELAY_ALLOWED_HOSTS: "wrong.example.test",
       FORGERELAY_OAUTH_OWNER_TOKEN: "wrong-owner-password-123456",
       FORGERELAY_WIDGETS: "off",
-      DEVSPACE_ALLOWED_ROOTS: "/wrong/root",
       FORGERELAY_LOG_LEVEL: "debug",
     },
     home,
@@ -62,7 +61,6 @@ test("interactive debug uses one dedicated persisted config under ~/.forgerelay/
   assert.equal(result.env.FORGERELAY_ALLOWED_HOSTS, undefined);
   assert.equal(result.env.FORGERELAY_OAUTH_OWNER_TOKEN, undefined);
   assert.equal(result.env.FORGERELAY_WIDGETS, undefined);
-  assert.equal(result.env.DEVSPACE_ALLOWED_ROOTS, undefined);
   assert.equal(result.env.FORGERELAY_LOG_LEVEL, "debug");
 });
 

package/scripts/debug/traffic/run.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+cd "$(dirname "$0")/../../.."
+exec node --import tsx scripts/debug/traffic/traffic-audit.mjs "$@"