@akira-tl/forgerelay 0.8.5 → 0.8.7

package/docs/roadmap.md

@@ -305,7 +305,11 @@ must be published successfully before work begins on the next stage.
   allowlist-based read-only inspection of other Workspaces and their safe Task
   projections;
 - **0.8.5** — verify the complete contract across Workspace Relay and publish the
-  accepted 0.8 lifecycle/Task model.
+  accepted 0.8 lifecycle/Task model;
+- **0.8.7** — make `open_workspace(context="auto")` bootstrap delivery component-level,
+  returning only changed/removed AGENTS, nested-instruction, Skill/diagnostic,
+  Capability-guide, or Subagent-profile domains while preserving `full`/`none`,
+  Composite member, Relay, and legacy delivery-record semantics.
 
 The release boundary is part of the dependency graph, not just a documentation
 milestone: the next stage remains blocked until the previous version's tag-triggered
@@ -365,6 +369,9 @@ New public names use ForgeRelay:
 - `.forgerelay`
 - `forgerelay/*` managed branches
 
-Legacy `DEVSPACE_*`, `~/.devspace`, `.devspace`, old managed branch names, and
-selected persisted internal identifiers remain readable during migration where
-removing compatibility would orphan real user state.
+Rename-era public compatibility adapters have a bounded migration window rather
+than permanent support. `DEVSPACE_*`, automatic `~/.devspace` reuse, legacy
+`.devspace/agents` discovery, and old package-path special cases are retired once
+they are outside that window. Persisted internal identifiers remain compatible
+when removing them would orphan real user state; those are storage/protocol
+migration concerns, not public product aliases.

package/docs/security.md

@@ -60,8 +60,9 @@ FORGERELAY_OAUTH_OWNER_TOKEN="$(openssl rand -base64 32)"
 
 The token must be at least 16 characters.
 
-Existing `~/.devspace` configuration and `DEVSPACE_*` variables remain readable
-for migration compatibility when the new ForgeRelay equivalents are absent.
+Rename-era `DEVSPACE_*` environment-variable and automatic `~/.devspace`
+configuration fallbacks have ended. Use canonical `FORGERELAY_*` settings and
+explicit paths when migrating older installations.
 
 ## Public URL and tunnels
 

package/docs/setup.md

@@ -121,11 +121,14 @@ Keep `auth.json` private.
 
 ### Existing DevSpace configuration
 
-During migration, if `~/.forgerelay` does not exist but `~/.devspace` does,
-ForgeRelay reuses the legacy directory automatically. `FORGERELAY_CONFIG_DIR`
-takes precedence over the legacy `DEVSPACE_CONFIG_DIR` environment variable.
-
-You do not need to move a working legacy config before starting ForgeRelay.
+Automatic DevSpace directory fallback has ended. ForgeRelay defaults to
+`~/.forgerelay` and ignores `DEVSPACE_CONFIG_DIR`.
+
+Before upgrading an older installation, move or copy the needed configuration
+and credentials into the ForgeRelay directory, or temporarily point
+`FORGERELAY_CONFIG_DIR` at the old directory. If state or managed worktrees live
+under older paths, preserve them with explicit `stateDir` / `worktreeRoot`
+configuration until migration is complete.
 
 ## Check the setup
 

package/docs/versioning.md

@@ -167,7 +167,7 @@ npm publishing token.
 3. Run the appropriate `release:patch`, `release:minor`, or `release:major`
    command.
 4. Review the generated version and changelog diff, then commit the release-ready code and metadata.
-5. Push the release-ready `main` commit without changing it afterward.
+5. Run `npm run release:verify` on the committed release HEAD, then run `npm run release:push-ready`. This is the only normal release-ready branch push entrypoint: it requires a proof for the current HEAD, atomically advances `origin/main` plus the current `release/*` branch when applicable, rejects a local `main` with real unique patches, and synchronizes the local `main` ref after the remote push succeeds.
 6. Create the exact version tag, for example:
 
    ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akira-tl/forgerelay",
-  "version": "0.8.5",
+  "version": "0.8.7",
   "description": "Local development control plane for MCP coding agents.",
   "type": "module",
   "homepage": "https://github.com/Akira-TL/forgerelay#readme",
@@ -48,9 +48,10 @@
     "release:parity": "node scripts/release-parity.mjs",
     "release:pack": "node scripts/release/pack.mjs",
     "release:publish": "node scripts/release/publish.mjs",
+    "release:push-ready": "node scripts/release/push-ready.mjs",
     "postinstall": "node scripts/fix-node-pty-permissions.mjs",
     "start": "node dist/cli.js serve",
-    "test": "node --test scripts/debug/runtime.test.mjs scripts/release-proof.test.mjs scripts/release/release-gate.test.mjs scripts/release/release-version.test.mjs && tsx src/oauth/router.test.ts && tsx src/remote-auth-cli.test.ts && tsx src/remote-ssh-auth-cli.test.ts && tsx src/remote-workspace-relay.test.ts && tsx src/remote-workspace-relay-process.test.ts && tsx src/config.test.ts && tsx src/lsp/language-server-config.test.ts && tsx src/lsp/normalization/hover.test.ts && tsx src/lsp/references.server.test.ts && tsx src/lsp/operations/document-symbols.server.test.ts && tsx src/lsp/operations/workspace-symbols.server.test.ts && tsx src/lsp/operations/diagnostics-push.server.test.ts && tsx src/lsp/operations/diagnostics-pull.server.test.ts && tsx src/lsp/operations/request-hardening.server.test.ts && tsx src/lsp/operations/recovery.server.test.ts && tsx src/lsp/operations/lifecycle.server.test.ts && tsx src/lsp/runtime/semantic-requests.test.ts && tsx src/logger.test.ts && tsx src/proxy-trust.test.ts && tsx src/mcp-app-template.test.ts && tsx src/hooks.test.ts && tsx src/capability-registry.test.ts && tsx src/mcp/server-instructions.test.ts && tsx src/request-meta.test.ts && tsx src/incoming-artifacts.test.ts && tsx src/artifact-download.test.ts && tsx src/ui/card-types.test.ts && tsx src/ui/workspace-lifecycle-app.test.ts && tsx src/ui/activity/model.test.ts && tsx src/ui/patch-display.test.ts && tsx src/ui/tool-display.test.ts && tsx src/apply-patch.test.ts && tsx src/process-platform.test.ts && tsx src/process-sessions.test.ts && tsx src/mcp-sessions.test.ts && tsx src/server-shutdown.test.ts && tsx src/subagents/providers/adapters/codex.test.ts && tsx src/subagents/providers/registry.test.ts && tsx src/subagents/providers/availability.test.ts && tsx src/subagents/profiles.test.ts && tsx src/subagents/cli-target.test.ts && tsx src/subagents/sessions/store.test.ts && tsx src/subagents/sessions/manager.test.ts && tsx src/subagents/sessions/mcp/capability.server.test.ts && tsx src/subagents/sessions/mcp/continuation.server.test.ts && tsx src/subagents/sessions/mcp/lifecycle.server.test.ts && tsx src/subagents/sessions/mcp/reconciliation.server.test.ts && tsx src/subagents/sessions/mcp/routing.server.test.ts && tsx src/roots.test.ts && tsx src/file-mutations.test.ts && tsx src/operations/edit-preflight.test.ts && tsx src/skills.test.ts && tsx src/db/migrations.test.ts && tsx src/workspace-store.test.ts && tsx src/workspace-tasks.test.ts && tsx src/workspace-task-reminders.test.ts && tsx src/activity/audit-store.test.ts && tsx src/activity/bash-output-store.test.ts && tsx src/activity/lifecycle.test.ts && tsx src/activity/query-service.test.ts && tsx src/operations/core-operation-executor.test.ts && tsx src/operations/bulk-mutation.test.ts && tsx src/operations/batch/scheduler.test.ts && tsx src/operations/batch/executor-policy.test.ts && tsx src/workspaces.test.ts && tsx src/workspace-conversation.test.ts && tsx src/review-checkpoints.test.ts && tsx src/lsp/code-intelligence.server.test.ts && npm run build:app && tsx src/server.test.ts && tsx src/oauth-store.test.ts && tsx src/cli.test.ts",
+    "test": "node --test scripts/debug/runtime.test.mjs scripts/release-proof.test.mjs scripts/release/release-gate.test.mjs scripts/release/push-ready.test.mjs scripts/release/release-version.test.mjs && tsx src/oauth/router.test.ts && tsx src/remote-auth-cli.test.ts && tsx src/remote-ssh-auth-cli.test.ts && tsx src/remote-workspace-relay.test.ts && tsx src/remote-workspace-relay-process.test.ts && tsx src/config.test.ts && tsx src/lsp/language-server-config.test.ts && tsx src/lsp/normalization/hover.test.ts && tsx src/lsp/references.server.test.ts && tsx src/lsp/operations/document-symbols.server.test.ts && tsx src/lsp/operations/workspace-symbols.server.test.ts && tsx src/lsp/operations/diagnostics-push.server.test.ts && tsx src/lsp/operations/diagnostics-pull.server.test.ts && tsx src/lsp/operations/request-hardening.server.test.ts && tsx src/lsp/operations/recovery.server.test.ts && tsx src/lsp/operations/lifecycle.server.test.ts && tsx src/lsp/runtime/semantic-requests.test.ts && tsx src/logger.test.ts && tsx src/proxy-trust.test.ts && tsx src/mcp-app-template.test.ts && tsx src/hooks.test.ts && tsx src/capability-registry.test.ts && tsx src/mcp/server-instructions.test.ts && tsx src/request-meta.test.ts && tsx src/incoming-artifacts.test.ts && tsx src/artifact-download.test.ts && tsx src/ui/card-types.test.ts && tsx src/ui/workspace-lifecycle-app.test.ts && tsx src/ui/activity/model.test.ts && tsx src/ui/patch-display.test.ts && tsx src/ui/tool-display.test.ts && tsx src/apply-patch.test.ts && tsx src/process-platform.test.ts && tsx src/process-sessions.test.ts && tsx src/mcp-sessions.test.ts && tsx src/server-shutdown.test.ts && tsx src/subagents/providers/adapters/codex.test.ts && tsx src/subagents/providers/registry.test.ts && tsx src/subagents/providers/availability.test.ts && tsx src/subagents/profiles.test.ts && tsx src/subagents/cli-target.test.ts && tsx src/subagents/sessions/store.test.ts && tsx src/subagents/sessions/manager.test.ts && tsx src/subagents/sessions/mcp/capability.server.test.ts && tsx src/subagents/sessions/mcp/continuation.server.test.ts && tsx src/subagents/sessions/mcp/lifecycle.server.test.ts && tsx src/subagents/sessions/mcp/reconciliation.server.test.ts && tsx src/subagents/sessions/mcp/routing.server.test.ts && tsx src/roots.test.ts && tsx src/file-mutations.test.ts && tsx src/operations/edit-preflight.test.ts && tsx src/skills.test.ts && tsx src/db/migrations.test.ts && tsx src/workspace-store.test.ts && tsx src/workspace-tasks.test.ts && tsx src/workspace-task-reminders.test.ts && tsx src/activity/audit-store.test.ts && tsx src/activity/bash-output-store.test.ts && tsx src/activity/lifecycle.test.ts && tsx src/activity/query-service.test.ts && tsx src/operations/core-operation-executor.test.ts && tsx src/operations/bulk-mutation.test.ts && tsx src/operations/batch/scheduler.test.ts && tsx src/operations/batch/executor-policy.test.ts && tsx src/workspaces.test.ts && tsx src/workspace-conversation.test.ts && tsx src/review-checkpoints.test.ts && tsx src/lsp/code-intelligence.server.test.ts && npm run build:app && tsx src/server.test.ts && tsx src/oauth-store.test.ts && tsx src/cli.test.ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "release:check": "node scripts/release-version.mjs check",
     "release:tag-check": "node scripts/release-version.mjs tag",

package/scripts/debug/accept.mjs

@@ -155,6 +155,7 @@ try {
     "open_workspace",
     "activity_panel",
     "activity_snapshot",
+    "activity_index",
     "activity_detail",
     "activity_output",
     "capability",
@@ -694,8 +695,13 @@ try {
     });
     assert.equal(inspectorSnapshot.isError, undefined);
     assert.ok(inspectorSnapshot.structuredContent.revision > 0);
+    assert.equal(inspectorSnapshot.structuredContent.activities, undefined);
+    const inspectorIndex = callTool(oauth.accessToken, sessionId, 93, "activity_index", {
+      turnId: inspectorTurnId,
+    });
+    assert.equal(inspectorIndex.isError, undefined);
     assert.deepEqual(
-      inspectorSnapshot.structuredContent.activities.map(({ tool, workspaceId: activityWorkspaceId, target }) => ({
+      inspectorIndex.structuredContent.activities.map(({ tool, workspaceId: activityWorkspaceId, target }) => ({
         tool,
         workspaceId: activityWorkspaceId,
         target,

package/scripts/debug/relay-accept.mjs

@@ -537,7 +537,6 @@ function cleanProductEnv() {
     name !== "HOST"
     && name !== "PORT"
     && !name.startsWith("FORGERELAY_")
-    && !name.startsWith("DEVSPACE_")
   ));
 }
 

package/scripts/debug/runtime.mjs

@@ -75,10 +75,6 @@ export function createInteractiveDebugEnvironment({
       delete debugEnv[key];
       continue;
     }
-    if (key.startsWith("DEVSPACE_")) {
-      delete debugEnv[key];
-      continue;
-    }
     if (
       key.startsWith("FORGERELAY_")
       && !key.startsWith("FORGERELAY_LOG_")

package/scripts/debug/runtime.test.mjs

@@ -39,7 +39,6 @@ test("interactive debug uses one dedicated persisted config under ~/.forgerelay/
       FORGERELAY_ALLOWED_HOSTS: "wrong.example.test",
       FORGERELAY_OAUTH_OWNER_TOKEN: "wrong-owner-password-123456",
       FORGERELAY_WIDGETS: "off",
-      DEVSPACE_ALLOWED_ROOTS: "/wrong/root",
       FORGERELAY_LOG_LEVEL: "debug",
     },
     home,
@@ -62,7 +61,6 @@ test("interactive debug uses one dedicated persisted config under ~/.forgerelay/
   assert.equal(result.env.FORGERELAY_ALLOWED_HOSTS, undefined);
   assert.equal(result.env.FORGERELAY_OAUTH_OWNER_TOKEN, undefined);
   assert.equal(result.env.FORGERELAY_WIDGETS, undefined);
-  assert.equal(result.env.DEVSPACE_ALLOWED_ROOTS, undefined);
   assert.equal(result.env.FORGERELAY_LOG_LEVEL, "debug");
 });
 

package/scripts/debug/traffic/run.sh

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+cd "$(dirname "$0")/../../.."
+exec node --import tsx scripts/debug/traffic/traffic-audit.mjs "$@"