@cmmd-center/forge 0.9.16 → 0.9.17

package/dist/bin.mjs

@@ -22,7 +22,7 @@ import { createCipheriv, createDecipheriv, createHash, createHmac, createPublicK
 import * as FS$1 from "node:fs";
 import fs, { accessSync, chmodSync, constants, createReadStream, existsSync, mkdirSync, mkdtempSync, promises, readFile, readFileSync, readdir, readdirSync, realpathSync, rmSync, statSync, writeFileSync } from "node:fs";
 import * as NodeOS from "node:os";
-import $U, { homedir, networkInterfaces, tmpdir } from "node:os";
+import os, { homedir, networkInterfaces, tmpdir } from "node:os";
 import * as Path$1 from "node:path";
 import path, { basename, delimiter, dirname, extname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
 import { pathToFileURL } from "node:url";
@@ -22164,6 +22164,40 @@ const ServerProviderAuth = Struct({
 	accountEmail: optional$4(TrimmedNonEmptyString),
 	provenance: optional$4(ProviderAuthProvenance)
 });
+/**
+* Whether this Environment will let a person select the provider.
+*
+* Published for every provider the build knows about. A provider is never
+* dropped from the list: absence is not a state, and four different reasons
+* once collapsed into one "Coming soon." string because the Shell had to infer
+* meaning from what was missing. See
+* `docs/adr/withheld-providers-carry-their-reason.md`.
+*/
+const ProviderAvailability = Literals(["available", "unavailable"]);
+/**
+* Why a Withheld Provider is withheld. The four members are the glossary's,
+* in `CONTEXT.md` section "Provider availability": Unbuilt, Not Offered, Not
+* Usable, Not on this Environment. Only Unbuilt may read "Coming soon."
+*
+* An Environment can only ever report Unbuilt, Not Usable, or Not on this
+* Environment. Not Offered is a CMMD fact about the organization's Provider
+* Offer, which the Shell adds when it joins.
+*/
+const ProviderUnavailableReason = Literals([
+	"unbuilt",
+	"not-offered",
+	"not-usable",
+	"not-on-this-environment"
+]);
+/**
+* The Not Usable sub-case. It picks a second line of copy, not a fifth state,
+* which is why it is a separate field rather than three more reasons.
+*/
+const ProviderUnavailableDetail = Literals([
+	"no-connection",
+	"delivery-pending",
+	"reconnect-required"
+]);
 const ServerProviderModel = Struct({
 	slug: TrimmedNonEmptyString,
 	name: TrimmedNonEmptyString,
@@ -22195,6 +22229,9 @@ const ServerProvider = Struct({
 	checkedAt: IsoDateTime,
 	message: optional$4(TrimmedNonEmptyString),
 	models: ArraySchema(ServerProviderModel),
+	availability: optional$4(ProviderAvailability),
+	unavailableReason: optional$4(ProviderUnavailableReason),
+	unavailableDetail: optional$4(ProviderUnavailableDetail),
 	slashCommands: ArraySchema(ServerProviderSlashCommand).pipe(withDecodingDefault(succeed([]))),
 	skills: ArraySchema(ServerProviderSkill).pipe(withDecodingDefault(succeed([])))
 });
@@ -49482,7 +49519,7 @@ function _supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
 	const min = forceColor || 0;
 	if (env.TERM === "dumb") return min;
 	if (process$1.platform === "win32") {
-		const osRelease = $U.release().split(".");
+		const osRelease = os.release().split(".");
 		if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) return Number(osRelease[2]) >= 14931 ? 3 : 2;
 		return 1;
 	}
@@ -51925,7 +51962,7 @@ var require_ProcessDetector = /* @__PURE__ */ __commonJSMin(((exports) => {
 	exports.processDetector = void 0;
 	const api_1 = (init_esm$1(), __toCommonJS(esm_exports$1));
 	const semconv_1 = require_semconv$1();
-	const os$3 = __require("os");
+	const os$4 = __require("os");
 	/**
 	* ProcessDetector will be used to detect the resources related current process running
 	* and being instrumented from the NodeJS Process module.
@@ -51947,7 +51984,7 @@ var require_ProcessDetector = /* @__PURE__ */ __commonJSMin(((exports) => {
 			};
 			if (process.argv.length > 1) attributes[semconv_1.ATTR_PROCESS_COMMAND] = process.argv[1];
 			try {
-				const userInfo = os$3.userInfo();
+				const userInfo = os$4.userInfo();
 				attributes[semconv_1.ATTR_PROCESS_OWNER] = userInfo.username;
 			} catch (e) {
 				api_1.diag.debug(`error obtaining process owner: ${e}`);
@@ -64870,7 +64907,7 @@ function normalizeNumberish(value) {
 }
 //#endregion
 //#region package.json
-var version$1 = "0.9.16";
+var version$1 = "0.9.17";
 //#endregion
 //#region src/sentry.ts
 const SERVER_APP_NAME = "forge-server";
@@ -73500,7 +73537,7 @@ var require_node_gyp_build = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 	var fs$6 = __require("fs");
 	var path$5 = __require("path");
 	var url$1 = __require("url");
-	var os$2 = __require("os");
+	var os$3 = __require("os");
 	var runtimeRequire = typeof __webpack_require__ === "function" ? __non_webpack_require__ : __require;
 	var vars = process.config && process.config.variables || {};
 	var prebuildsOnly = !!process.env.PREBUILDS_ONLY;
@@ -73508,8 +73545,8 @@ var require_node_gyp_build = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 	var abi = versions.modules;
 	if (versions.deno || process.isBun) abi = "unsupported";
 	var runtime = isElectron() ? "electron" : isNwjs() ? "node-webkit" : "node";
-	var arch = process.env.npm_config_arch || os$2.arch();
-	var platform = process.env.npm_config_platform || os$2.platform();
+	var arch = process.env.npm_config_arch || os$3.arch();
+	var platform = process.env.npm_config_platform || os$3.platform();
 	var libc = process.env.LIBC || (isMusl(platform) ? "musl" : "glibc");
 	var armv = process.env.ARM_VERSION || (arch === "arm64" ? "8" : vars.arm_version) || "";
 	var uv = (versions.uv || "").split(".")[0];
@@ -91167,7 +91204,7 @@ const launchDetached = (launch) => gen(function* () {
 });
 const OpenLive = effect(Open, gen(function* () {
 	const open = yield* tryPromise({
-		try: () => import("./open-D8mGyWmt.mjs"),
+		try: () => import("./open-FIgTDosf.mjs"),
 		catch: (cause) => new OpenError$1({
 			message: "failed to load browser opener",
 			cause
@@ -184380,7 +184417,7 @@ var Vce = {
 function Ve() {
 	return Vce;
 }
-var Us = $U.homedir(), lk = $U.tmpdir(), { env: Vc } = process$1, Yce = (e) => {
+var Us = os.homedir(), lk = os.tmpdir(), { env: Vc } = process$1, Yce = (e) => {
 	let t = path.join(Us, "Library");
 	return {
 		data: path.join(t, "Application Support", e),
@@ -194580,12 +194617,12 @@ function qZ(e, t) {
 	}
 	return n;
 }
-var os$1 = "https://code.claude.com/docs/en", kKe = [
+var os$2 = "https://code.claude.com/docs/en", kKe = [
 	{
 		matches: (e) => e.path === "permissions.defaultMode" && e.code === "invalid_value",
 		tip: {
 			suggestion: "Valid modes: \"acceptEdits\" (ask before file changes), \"plan\" (analysis only), \"bypassPermissions\" (auto-accept all), or \"default\" (standard behavior)",
-			docLink: `${os$1}/iam#permission-modes`
+			docLink: `${os$2}/iam#permission-modes`
 		}
 	},
 	{
@@ -194600,7 +194637,7 @@ var os$1 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.path.startsWith("env.") && e.code === "invalid_type",
 		tip: {
 			suggestion: "Environment variables must be strings. Wrap numbers and booleans in quotes. Example: \"DEBUG\": \"true\", \"PORT\": \"3000\"",
-			docLink: `${os$1}/settings#environment-variables`
+			docLink: `${os$2}/settings#environment-variables`
 		}
 	},
 	{
@@ -194611,14 +194648,14 @@ var os$1 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.path.startsWith("hooks.") && e.code === "invalid_key",
 		tip: {
 			suggestion: "Not a recognized hook event. Common events: PreToolUse, PostToolUse, UserPromptSubmit, SessionStart, SessionEnd, Stop. Check spelling and capitalization.",
-			docLink: `${os$1}/hooks`
+			docLink: `${os$2}/hooks`
 		}
 	},
 	{
 		matches: (e) => /\.hooks\.\d+\.command$/.test(e.path) && e.code === "invalid_type" && e.received === "undefined",
 		tip: {
 			suggestion: "Command hooks require `command`. For exec form (no shell), set `command` to the executable and `args` to its arguments: {\"type\": \"command\", \"command\": \"echo\", \"args\": [\"hi\"]}. For shell form, set `command` to the full shell string: {\"type\": \"command\", \"command\": \"echo hi\"}.",
-			docLink: `${os$1}/hooks#exec-form-and-shell-form`
+			docLink: `${os$2}/hooks#exec-form-and-shell-form`
 		}
 	},
 	{
@@ -194633,7 +194670,7 @@ var os$1 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.code === "unrecognized_keys",
 		tip: {
 			suggestion: "Check for typos or refer to the documentation for valid fields",
-			docLink: `${os$1}/settings`
+			docLink: `${os$2}/settings`
 		}
 	},
 	{
@@ -194648,13 +194685,13 @@ var os$1 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.path === "permissions.additionalDirectories" && e.code === "invalid_type",
 		tip: {
 			suggestion: "Must be an array of directory paths. Example: [\"~/projects\", \"/tmp/workspace\"]. You can also use --add-dir flag or /add-dir command",
-			docLink: `${os$1}/iam#working-directories`
+			docLink: `${os$2}/iam#working-directories`
 		}
 	}
 ], AKe = {
-	permissions: `${os$1}/iam#configuring-permissions`,
-	env: `${os$1}/settings#environment-variables`,
-	hooks: `${os$1}/hooks`
+	permissions: `${os$2}/iam#configuring-permissions`,
+	env: `${os$2}/settings#environment-variables`,
+	hooks: `${os$2}/hooks`
 };
 function GZ(e) {
 	let t = kKe.find((r) => r.matches(e));
@@ -258907,7 +258944,7 @@ var import_multicast_dns = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMi
 	var dgram = __require("dgram");
 	var thunky = require_thunky();
 	var events = __require("events");
-	var os = __require("os");
+	var os$1 = __require("os");
 	var noop = function() {};
 	module.exports = function(opts) {
 		if (!opts) opts = {};
@@ -259038,14 +259075,14 @@ var import_multicast_dns = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMi
 		return that;
 	};
 	function defaultInterface() {
-		var networks = os.networkInterfaces();
+		var networks = os$1.networkInterfaces();
 		var names = Object.keys(networks);
 		for (var i = 0; i < names.length; i++) {
 			var net = networks[names[i]];
 			for (var j = 0; j < net.length; j++) {
 				var iface = net[j];
 				if (isIPv4(iface.family) && !iface.internal) {
-					if (os.platform() === "darwin" && names[i] === "en0") return iface.address;
+					if (os$1.platform() === "darwin" && names[i] === "en0") return iface.address;
 					return "0.0.0.0";
 				}
 			}
@@ -259053,7 +259090,7 @@ var import_multicast_dns = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMi
 		return "127.0.0.1";
 	}
 	function allInterfaces() {
-		var networks = os.networkInterfaces();
+		var networks = os$1.networkInterfaces();
 		var names = Object.keys(networks);
 		var res = [];
 		for (var i = 0; i < names.length; i++) {
@@ -284577,14 +284614,87 @@ const writeProviderStatusCache = (input) => {
 	})));
 };
 //#endregion
-//#region src/provider/Layers/ProviderRegistry.ts
+//#region ../../packages/shared/src/providerExecution.ts
+/**
+* Canonical provider-readiness gate for starting work.
+*
+* Cloud user VMs can execute through Forge's scoped provider proxy without a
+* provider-local login. In that case the provider reports unauthenticated but
+* its credential provenance is explicitly `proxied`.
+*/
+function isServerProviderExecutable(provider) {
+	const hasExecutionAuthority = provider.auth.status !== "unauthenticated" || provider.auth.provenance?.credentialScope === "proxied";
+	return provider.enabled && provider.installed && provider.status === "ready" && hasExecutionAuthority && provider.models.length > 0;
+}
+//#endregion
+//#region src/provider/providerAvailability.ts
 /**
-* Providers surfaced in the UI but lacking a dedicated detection Layer.
-* Every provider now has a real Layer; this array stays as a (currently
-* empty) hook for any future provider that ships in the UI before its
-* server-side detection lands.
+* Derive what this Environment knows about a provider's availability.
+*
+* WHY THIS EXISTS
+*
+* Four different states (Unbuilt, Not Offered, Not Usable, Not on this
+* Environment) used to render as one "Coming soon." string, because consumers
+* were handed a filtered list and had to infer meaning from what was missing.
+* Every provider is now published with an explicit availability and, when
+* withheld, its reason. See `docs/adr/withheld-providers-carry-their-reason.md`
+* and the glossary in `CONTEXT.md` section "Provider availability".
+*
+* WHAT AN ENVIRONMENT MAY SAY
+*
+* Three of the four reasons only. Not Offered is a fact about the CMMD
+* organization's Provider Offer, and delivery-pending is a fact about a
+* credential in flight; neither is visible from inside an Environment, so the
+* Shell adds them when it joins. Nothing here may invent them.
+*
+* This reads the snapshot a provider Layer already produced. It runs no probe
+* and changes no probe: `isServerProviderExecutable` stays the single gate on
+* whether a turn can be dispatched, and this restates its answer in the
+* vocabulary a person sees.
 */
-const STUB_PROVIDERS = [];
+/**
+* Providers Forge ships in the UI but cannot execute, published as Unbuilt.
+*
+* Empty in this build: codex, claudeAgent, ollama, cmmd, apex, cursor and
+* opencode all have a real detection Layer and a registered adapter. The list
+* stays as the one place a provider that ships ahead of its server-side
+* implementation is named, so "Coming soon." is a deliberate entry rather than
+* a fallback something fell into.
+*/
+const UNBUILT_PROVIDERS = [];
+function deriveProviderAvailability(provider, unbuiltProviders = UNBUILT_PROVIDERS) {
+	if (unbuiltProviders.includes(provider.provider)) return {
+		availability: "unavailable",
+		unavailableReason: "unbuilt"
+	};
+	if (isServerProviderExecutable(provider)) return { availability: "available" };
+	const hasProxiedCredential = provider.auth.provenance?.credentialScope === "proxied";
+	if (provider.installed && provider.auth.status === "unauthenticated" && !hasProxiedCredential) return {
+		availability: "unavailable",
+		unavailableReason: "not-usable",
+		unavailableDetail: "no-connection"
+	};
+	return {
+		availability: "unavailable",
+		unavailableReason: "not-on-this-environment"
+	};
+}
+/**
+* Stamp a snapshot with its derived availability.
+*
+* The previous fields are dropped before the new ones are applied. Merging
+* would leave a provider that just connected reporting `available` while still
+* carrying the reason it was withheld for.
+*/
+function withProviderAvailability(provider, unbuiltProviders = UNBUILT_PROVIDERS) {
+	const { availability: _availability, unavailableReason: _unavailableReason, unavailableDetail: _unavailableDetail, ...rest } = provider;
+	return {
+		...rest,
+		...deriveProviderAvailability(provider, unbuiltProviders)
+	};
+}
+//#endregion
+//#region src/provider/Layers/ProviderRegistry.ts
 const loadProviders = (codexProvider, claudeProvider, ollamaProvider, cmmdProvider, apexProvider, cursorProvider, opencodeProvider) => all([
 	codexProvider.getSnapshot,
 	claudeProvider.getSnapshot,
@@ -284621,9 +284731,9 @@ const ProviderRegistryLive = effect(ProviderRegistry, gen(function* () {
 				cachedProvider,
 				fallbackProvider
 			});
-			return STUB_PROVIDERS.includes(provider) ? fallbackProvider : void 0;
+			return UNBUILT_PROVIDERS.includes(provider) ? fallbackProvider : void 0;
 		}));
-	}, { concurrency: "unbounded" }).pipe(map$3((providers) => orderProviderSnapshots(providers.filter((provider) => provider !== void 0)))));
+	}, { concurrency: "unbounded" }).pipe(map$3((providers) => orderProviderSnapshots(providers.filter((provider) => provider !== void 0).map((provider) => withProviderAvailability(provider))))));
 	const persistProvider = (provider) => writeProviderStatusCache({
 		filePath: cachePathByProvider.get(provider.provider),
 		provider
@@ -284631,7 +284741,8 @@ const ProviderRegistryLive = effect(ProviderRegistry, gen(function* () {
 		provider: provider.provider,
 		error
 	})), ignore);
-	const upsertProviders = fn$1("upsertProviders")(function* (nextProviders, options) {
+	const upsertProviders = fn$1("upsertProviders")(function* (incomingProviders, options) {
+		const nextProviders = incomingProviders.map((provider) => withProviderAvailability(provider));
 		const [previousProviders, providers] = yield* modify$3(providersRef, (previousProviders) => {
 			const mergedProviders = new Map(previousProviders.map((provider) => [provider.provider, provider]));
 			for (const provider of nextProviders) mergedProviders.set(provider.provider, provider);
@@ -287392,7 +287503,7 @@ function resolveBuildCommitFromEnv(env) {
 * environment descriptor down instead of reporting an honest "unknown".
 */
 function readBakedBuildCommit() {
-	return "e65edd4d1b8a361863a52b171b5e73295d691e11";
+	return "86c71b55bb7a5dfbbad063d6e4c082570759f006";
 }
 async function resolveServerBuildCommit(input) {
 	if (isFullCommitSha(input.baked)) return input.baked;
@@ -300054,21 +300165,24 @@ function processRuntimeReplicationOutboxItem(item, dependencies) {
 //#endregion
 //#region src/runtimeReplication/Services/ActiveHourMeter.ts
 var ActiveHourMeter = class extends Service$1()("forge/runtimeReplication/Services/ActiveHourMeter") {};
-//#endregion
-//#region ../../packages/shared/src/providerExecution.ts
+/** `slug` and `name` are `.min(1).max(512)` on the receiving schema. */
+const FIELD_MAX_LENGTH = 512;
+/** `version` is `.max(128)` on the receiving schema, with no length floor. */
+const VERSION_MAX_LENGTH = 128;
+/** `binaryPath` is `.max(2048)` on the receiving schema, with no length floor. */
+const BINARY_PATH_MAX_LENGTH = 2048;
 /**
-* Canonical provider-readiness gate for starting work.
+* Trim to the receiving schema's maximum, or null.
 *
-* Cloud user VMs can execute through Forge's scoped provider proxy without a
-* provider-local login. In that case the provider reports unauthenticated but
-* its credential provenance is explicitly `proxied`.
+* Neither field has a length floor, so an empty string would be legal — but it
+* is not an answer. A version nobody resolved and a binary nobody found are
+* both null, which is what the control plane stores and what a reader can tell
+* apart from a real value.
 */
-function isServerProviderExecutable(provider) {
-	const hasExecutionAuthority = provider.auth.status !== "unauthenticated" || provider.auth.provenance?.credentialScope === "proxied";
-	return provider.enabled && provider.installed && provider.status === "ready" && hasExecutionAuthority && provider.models.length > 0;
+function cappedText(value, max) {
+	const normalized = value?.trim().slice(0, max);
+	return normalized ? normalized : null;
 }
-/** `slug` and `name` are `.min(1).max(512)` on the receiving schema. */
-const FIELD_MAX_LENGTH = 512;
 function serializeModel(model) {
 	const slug = model.slug.trim().slice(0, FIELD_MAX_LENGTH);
 	const name = model.name.trim().slice(0, FIELD_MAX_LENGTH);
@@ -300082,20 +300196,48 @@ function serializeModel(model) {
 		name
 	};
 }
+/**
+* The availability to publish for one provider.
+*
+* The registry stamps every snapshot before it leaves, so this normally copies.
+* Deriving over a stamped snapshot would lose the one fact only the registry
+* holds — which providers this build cannot run at all — and republish every
+* Unbuilt provider as Not on this Environment. The fallback covers a snapshot
+* that reached the outbox from some other path.
+*
+* Built by spread so a key with no value is ABSENT rather than `undefined`: the
+* receiving object is `.strict()`, `undefined` is not a legal enum member, and
+* the outbox retries the resulting 400 forever.
+*/
+function publishedAvailability(provider) {
+	if (provider.availability === void 0) return deriveProviderAvailability(provider);
+	const reason = provider.unavailableReason;
+	const detail = provider.unavailableDetail;
+	return {
+		availability: provider.availability,
+		...reason === void 0 ? {} : { unavailableReason: reason },
+		...detail === void 0 ? {} : { unavailableDetail: detail }
+	};
+}
+function serializeProvider(provider) {
+	const models = [];
+	for (const model of provider.models) {
+		if (models.length >= 256) break;
+		const serialized = serializeModel(model);
+		if (serialized) models.push(serialized);
+	}
+	return {
+		provider: provider.provider,
+		models,
+		...publishedAvailability(provider),
+		version: cappedText(provider.version, VERSION_MAX_LENGTH),
+		binaryPath: cappedText(provider.auth.provenance?.binaryPath, BINARY_PATH_MAX_LENGTH)
+	};
+}
 function serializeProviderCatalog(providers) {
 	const catalog = [];
 	for (const provider of providers) {
-		if (!isServerProviderExecutable(provider)) continue;
-		const models = [];
-		for (const model of provider.models) {
-			if (models.length >= 256) break;
-			const serialized = serializeModel(model);
-			if (serialized) models.push(serialized);
-		}
-		catalog.push({
-			provider: provider.provider,
-			models
-		});
+		catalog.push(serializeProvider(provider));
 		if (catalog.length >= 16) break;
 	}
 	return catalog;
@@ -310543,7 +310685,7 @@ const connectLoginCommand = make$32("login", {
 			})).json();
 		},
 		openBrowser: async (url) => {
-			const open = (await import("./open-D8mGyWmt.mjs")).default;
+			const open = (await import("./open-FIgTDosf.mjs")).default;
 			await open(url);
 			return true;
 		},