@cortexlabs/forge 0.1.0-alpha.1

package/dist/project.js

@@ -0,0 +1,40 @@
+import { execFile } from "node:child_process";
+import { readdir } from "node:fs/promises";
+import { basename, relative } from "node:path";
+import { promisify } from "node:util";
+import { inspectWorkspace } from "./trust.js";
+const execFileAsync = promisify(execFile);
+const ignored = new Set([".git", "node_modules", ".next", "dist", "build", "coverage"]);
+async function walk(root, current, files, limit) {
+    if (files.length >= limit)
+        return;
+    const entries = await readdir(current, { withFileTypes: true }).catch(() => []);
+    for (const entry of entries) {
+        if (files.length >= limit || ignored.has(entry.name))
+            continue;
+        const path = `${current}/${entry.name}`;
+        if (entry.isDirectory())
+            await walk(root, path, files, limit);
+        else if (entry.isFile())
+            files.push(relative(root, path));
+    }
+}
+export async function collectProjectManifest(cwd, limit = 2_000) {
+    const workspace = await inspectWorkspace(cwd);
+    const root = workspace.repositoryRoot ?? workspace.path;
+    let files = [];
+    try {
+        const { stdout } = await execFileAsync("git", ["ls-files", "--cached", "--others", "--exclude-standard"], { cwd: root, timeout: 4_000, maxBuffer: 2_000_000 });
+        files = stdout.split("\n").filter(Boolean).slice(0, limit);
+    }
+    catch {
+        await walk(root, root, files, limit);
+    }
+    let branch = null;
+    try {
+        branch = (await execFileAsync("git", ["branch", "--show-current"], { cwd: root, timeout: 2_000 })).stdout.trim() || null;
+    }
+    catch { /* no git */ }
+    return { rootName: basename(root), branch, files, truncated: files.length >= limit };
+}
+//# sourceMappingURL=project.js.map

package/dist/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AAExF,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,OAAe,EAAE,KAAe,EAAE,KAAa;IAC/E,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO;IAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAChF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/D,MAAM,IAAI,GAAG,GAAG,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;aACzD,IAAI,KAAK,CAAC,MAAM,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAW,EAAE,KAAK,GAAG,KAAK;IACrE,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,cAAc,IAAI,SAAS,CAAC,IAAI,CAAC;IACxD,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/J,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IACjD,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,CAAC;QAAC,MAAM,GAAG,CAAC,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACxJ,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;AACvF,CAAC"}

package/dist/sessions.d.ts

@@ -0,0 +1,13 @@
+import type { ForgeConfig, ForgeSession, SessionMessage } from "./types.js";
+export declare function createSession(cwd: string, config: ForgeConfig, title?: string): Promise<ForgeSession>;
+export declare function saveSession(session: ForgeSession): Promise<void>;
+export declare function loadSession(id: string): Promise<ForgeSession | null>;
+export declare function setCurrentSession(id: string): Promise<void>;
+export declare function getCurrentSession(): Promise<ForgeSession | null>;
+export declare function addMessage(session: ForgeSession, message: SessionMessage): Promise<ForgeSession>;
+export declare function listSessions(): Promise<ForgeSession[]>;
+export declare function forkSession(source: ForgeSession): Promise<ForgeSession>;
+export declare function clearSession(session: ForgeSession): Promise<ForgeSession>;
+export declare function deleteSession(id: string): Promise<void>;
+export declare function compactSession(session: ForgeSession): Promise<ForgeSession>;
+export declare function sessionsOlderThan(days: number): Promise<ForgeSession[]>;

package/dist/sessions.js

@@ -0,0 +1,83 @@
+import { randomUUID } from "node:crypto";
+import { mkdir, readdir, rm } from "node:fs/promises";
+import { join } from "node:path";
+import { forgePaths } from "./paths.js";
+import { readJson, writePrivateJson } from "./storage.js";
+const currentPath = () => join(forgePaths().home, "current-session.json");
+const sessionPath = (id) => join(forgePaths().sessions, `${id}.json`);
+export async function createSession(cwd, config, title = "New Forge task") {
+    const now = new Date().toISOString();
+    const session = {
+        id: randomUUID(), title, cwd, createdAt: now, updatedAt: now, state: "idle",
+        model: config.model, permissionMode: config.permissionMode, messages: [],
+    };
+    await saveSession(session);
+    await setCurrentSession(session.id);
+    return session;
+}
+export async function saveSession(session) {
+    const redact = (content) => content
+        .replace(/forge_[a-f0-9]{16,}/gi, "forge_[REDACTED]")
+        .replace(/\b(?:sk|pk)_[a-z0-9_-]{16,}\b/gi, "[REDACTED_SECRET]")
+        .replace(/\bBearer\s+[a-z0-9._~+\/-]{16,}/gi, "Bearer [REDACTED]");
+    const messages = session.messages.map((message) => ({ ...message, content: redact(message.content) }));
+    await writePrivateJson(sessionPath(session.id), { ...session, messages, updatedAt: new Date().toISOString() });
+}
+export async function loadSession(id) {
+    return readJson(sessionPath(id), null);
+}
+export async function setCurrentSession(id) {
+    await writePrivateJson(currentPath(), { id });
+}
+export async function getCurrentSession() {
+    const current = await readJson(currentPath(), {});
+    return current.id ? loadSession(current.id) : null;
+}
+export async function addMessage(session, message) {
+    const next = { ...session, messages: [...session.messages, message] };
+    await saveSession(next);
+    return next;
+}
+export async function listSessions() {
+    await mkdir(forgePaths().sessions, { recursive: true, mode: 0o700 });
+    const files = (await readdir(forgePaths().sessions)).filter((name) => name.endsWith(".json"));
+    const sessions = (await Promise.all(files.map((name) => loadSession(name.slice(0, -5))))).filter((item) => Boolean(item));
+    return sessions.sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
+}
+export async function forkSession(source) {
+    const now = new Date().toISOString();
+    const copy = { ...source, id: randomUUID(), title: `${source.title} (fork)`, createdAt: now, updatedAt: now, state: "idle" };
+    await saveSession(copy);
+    await setCurrentSession(copy.id);
+    return copy;
+}
+export async function clearSession(session) {
+    const { plan: _plan, ...rest } = session;
+    const next = { ...rest, messages: [], state: "idle" };
+    await saveSession(next);
+    return next;
+}
+export async function deleteSession(id) {
+    await rm(sessionPath(id), { force: true });
+}
+export async function compactSession(session) {
+    if (session.messages.length <= 20)
+        return session;
+    const archivePath = join(forgePaths().sessions, `${session.id}.archive-${Date.now()}.json`);
+    await writePrivateJson(archivePath, session);
+    const userAndSystem = session.messages.filter((message) => message.role !== "assistant");
+    const recentAssistant = session.messages.filter((message) => message.role === "assistant").slice(-8);
+    const marker = {
+        role: "system",
+        content: `Earlier assistant output was compacted after ${session.messages.length} messages. The complete transcript is archived locally. Accepted plan and every user/system message remain in this session.`,
+        at: new Date().toISOString(),
+    };
+    const next = { ...session, messages: [marker, ...userAndSystem, ...recentAssistant] };
+    await saveSession(next);
+    return next;
+}
+export async function sessionsOlderThan(days) {
+    const cutoff = Date.now() - days * 86_400_000;
+    return (await listSessions()).filter((session) => new Date(session.updatedAt).getTime() < cutoff);
+}
+//# sourceMappingURL=sessions.js.map

package/dist/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../src/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAG1D,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;AAC1E,MAAM,WAAW,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAE9E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,MAAmB,EAAE,KAAK,GAAG,gBAAgB;IAC5F,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,OAAO,GAAiB;QAC5B,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM;QAC3E,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE,EAAE;KACzE,CAAC;IACF,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAqB;IACrD,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO;SACxC,OAAO,CAAC,uBAAuB,EAAE,kBAAkB,CAAC;SACpD,OAAO,CAAC,iCAAiC,EAAE,mBAAmB,CAAC;SAC/D,OAAO,CAAC,mCAAmC,EAAE,mBAAmB,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACvG,MAAM,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACjH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAU;IAC1C,OAAO,QAAQ,CAAsB,WAAW,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAU;IAChD,MAAM,gBAAgB,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAkB,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAqB,EAAE,OAAuB;IAC7E,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;IACtE,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAwB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChJ,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAoB;IACpD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,IAAI,GAAiB,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3I,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAqB;IACtD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,IAAI,GAAiB,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACpE,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAU;IAC5C,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAqB;IACxD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC;IAClD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,EAAE,YAAY,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5F,MAAM,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IACzF,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,QAAiB;QACvB,OAAO,EAAE,gDAAgD,OAAO,CAAC,QAAQ,CAAC,MAAM,6HAA6H;QAC7M,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7B,CAAC;IACF,MAAM,IAAI,GAAiB,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,GAAG,aAAa,EAAE,GAAG,eAAe,CAAC,EAAE,CAAC;IACpG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,UAAU,CAAC;IAC9C,OAAO,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;AACpG,CAAC"}

package/dist/storage.d.ts

@@ -0,0 +1,5 @@
+export declare function readJsonFile<T>(path: string, fallback: T): Promise<T>;
+export declare function writePrivateJson(path: string, value: unknown): Promise<void>;
+export declare function appendPrivateLine(path: string, value: unknown): Promise<void>;
+export declare const readJson: typeof readJsonFile;
+export declare const appendPrivateJsonLine: typeof appendPrivateLine;

package/dist/storage.js

@@ -0,0 +1,41 @@
+import { mkdir, open, readFile, rename, chmod } from "node:fs/promises";
+import { dirname } from "node:path";
+export async function readJsonFile(path, fallback) {
+    try {
+        return JSON.parse(await readFile(path, "utf8"));
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === "ENOENT")
+            return fallback;
+        throw error;
+    }
+}
+export async function writePrivateJson(path, value) {
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    const temporary = `${path}.${process.pid}.${Date.now()}.tmp`;
+    const handle = await open(temporary, "w", 0o600);
+    try {
+        await handle.writeFile(`${JSON.stringify(value, null, 2)}\n`, "utf8");
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+    await rename(temporary, path);
+    await chmod(path, 0o600).catch(() => undefined);
+}
+export async function appendPrivateLine(path, value) {
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    const handle = await open(path, "a", 0o600);
+    try {
+        await handle.writeFile(`${JSON.stringify(value)}\n`, "utf8");
+    }
+    finally {
+        await handle.close();
+    }
+    await chmod(path, 0o600).catch(() => undefined);
+}
+export const readJson = readJsonFile;
+export const appendPrivateJsonLine = appendPrivateLine;
+//# sourceMappingURL=storage.js.map

package/dist/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,IAAY,EAAE,QAAW;IAC7D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACvC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAc;IACjE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAAc;IAClE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AACrC,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAAC"}

package/dist/trust.d.ts

@@ -0,0 +1,10 @@
+import type { TrustRecord } from "./types.js";
+export declare function inspectWorkspace(cwd: string): Promise<Omit<TrustRecord, "scope" | "trustedAt">>;
+export declare function assertWorkspaceBoundary(root: string, target: string): Promise<string>;
+export declare function loadTrustRecords(): Promise<TrustRecord[]>;
+export declare function findTrustRecord(cwd: string): Promise<{
+    record: TrustRecord | null;
+    current: Awaited<ReturnType<typeof inspectWorkspace>>;
+}>;
+export declare function trustWorkspaceOnce(cwd: string): Promise<TrustRecord>;
+export declare function trustWorkspace(cwd: string): Promise<TrustRecord>;

package/dist/trust.js

@@ -0,0 +1,91 @@
+import { createHash } from "node:crypto";
+import { lstat, readdir, realpath } from "node:fs/promises";
+import { join, relative, resolve } from "node:path";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { forgePaths } from "./paths.js";
+import { readJson, writePrivateJson } from "./storage.js";
+const execFileAsync = promisify(execFile);
+const instructionNames = ["AGENTS.md", "CLAUDE.md", "FORGE.md", ".forge/instructions.md"];
+const executableNames = [".mcp.json", ".forge/config.json", "package.json"];
+const trustedOnce = new Map();
+async function git(cwd, args) {
+    try {
+        const { stdout } = await execFileAsync("git", args, { cwd, timeout: 2_000 });
+        return stdout.trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+async function existingFiles(root, names) {
+    const found = [];
+    for (const name of names) {
+        try {
+            const path = join(root, name);
+            const stat = await lstat(path);
+            if (stat.isFile())
+                found.push(name);
+        }
+        catch { /* optional file */ }
+    }
+    return found;
+}
+async function detectedExecutableConfig(root) {
+    const files = await existingFiles(root, executableNames);
+    const hooks = await readdir(join(root, ".git", "hooks"), { withFileTypes: true }).catch(() => []);
+    for (const hook of hooks) {
+        if (hook.isFile() && !hook.name.endsWith(".sample"))
+            files.push(`.git/hooks/${hook.name}`);
+    }
+    return files;
+}
+export async function inspectWorkspace(cwd) {
+    const path = await realpath(resolve(cwd));
+    const repositoryRoot = await git(path, ["rev-parse", "--show-toplevel"]);
+    const root = repositoryRoot ? await realpath(repositoryRoot) : path;
+    const remoteUrl = repositoryRoot ? await git(root, ["remote", "get-url", "origin"]) : null;
+    const instructionFiles = await existingFiles(root, instructionNames);
+    const executableConfigFiles = await detectedExecutableConfig(root);
+    const hash = createHash("sha256");
+    hash.update(JSON.stringify({ path, repositoryRoot: root, remoteUrl, instructionFiles, executableConfigFiles }));
+    for (const name of [...instructionFiles, ...executableConfigFiles]) {
+        try {
+            const stat = await lstat(join(root, name));
+            hash.update(`${name}:${stat.size}:${stat.mtimeMs}:${stat.mode}`);
+        }
+        catch { /* changed during inspection */ }
+    }
+    return { path, repositoryRoot: root, remoteUrl, instructionFiles, executableConfigFiles, fingerprint: hash.digest("hex") };
+}
+export async function assertWorkspaceBoundary(root, target) {
+    const canonicalRoot = await realpath(root);
+    const canonicalTarget = await realpath(target);
+    const traversal = relative(canonicalRoot, canonicalTarget);
+    if (traversal === "" || (!traversal.startsWith("..") && !traversal.startsWith("/")))
+        return canonicalTarget;
+    throw new Error(`Path escapes trusted workspace: ${target}`);
+}
+export async function loadTrustRecords() {
+    return readJson(forgePaths().trust, []);
+}
+export async function findTrustRecord(cwd) {
+    const current = await inspectWorkspace(cwd);
+    const records = await loadTrustRecords();
+    return { record: trustedOnce.get(current.fingerprint) ?? records.find((item) => item.path === current.path && item.fingerprint === current.fingerprint) ?? null, current };
+}
+export async function trustWorkspaceOnce(cwd) {
+    const current = await inspectWorkspace(cwd);
+    const record = { ...current, scope: "once", trustedAt: new Date().toISOString() };
+    trustedOnce.set(current.fingerprint, record);
+    return record;
+}
+export async function trustWorkspace(cwd) {
+    const current = await inspectWorkspace(cwd);
+    const records = (await loadTrustRecords()).filter((item) => item.path !== current.path);
+    const record = { ...current, scope: "always", trustedAt: new Date().toISOString() };
+    records.push(record);
+    await writePrivateJson(forgePaths().trust, records);
+    return record;
+}
+//# sourceMappingURL=trust.js.map

package/dist/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../src/trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAG1D,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,wBAAwB,CAAC,CAAC;AAC1F,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,oBAAoB,EAAE,cAAc,CAAC,CAAC;AAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;AAEnD,KAAK,UAAU,GAAG,CAAC,GAAW,EAAE,IAAc;IAC5C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,KAAe;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,IAAY;IAClD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAClG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW;IAChD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACrE,MAAM,qBAAqB,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;IAChH,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,gBAAgB,EAAE,GAAG,qBAAqB,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7H,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAY,EAAE,MAAc;IACxE,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAC3D,IAAI,SAAS,KAAK,EAAE,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,eAAe,CAAC;IAC5G,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,OAAO,QAAQ,CAAgB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW;IAC/C,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACzC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC;AAC7K,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAgB,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/F,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW;IAC9C,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,MAAM,MAAM,GAAgB,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACjG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,MAAM,gBAAgB,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,79 @@
+export type OutputMode = "human" | "json";
+export type PermissionMode = "read-only" | "ask" | "workspace-write" | "trusted-session" | "custom" | "autonomous";
+export type TaskMode = "plan" | "execute" | "review" | "read-only";
+export type TaskState = "idle" | "thinking" | "planning" | "executing" | "waiting-for-approval" | "completed" | "cancelled" | "failed";
+export interface ForgeConfig {
+    apiBaseUrl: string;
+    model: string;
+    permissionMode: PermissionMode;
+    taskMode: TaskMode;
+    reducedMotion: boolean;
+}
+export interface TrustRecord {
+    path: string;
+    repositoryRoot: string | null;
+    remoteUrl: string | null;
+    instructionFiles: string[];
+    executableConfigFiles: string[];
+    fingerprint: string;
+    scope: "once" | "always";
+    trustedAt: string;
+}
+export interface SessionMessage {
+    role: "user" | "assistant" | "system";
+    content: string;
+    at: string;
+}
+export interface ForgePlan {
+    task: string;
+    steps: string[];
+    status: "draft" | "approved" | "cancelled" | "completed";
+    createdAt: string;
+    approvedAt?: string;
+}
+export interface ForgeSession {
+    id: string;
+    title: string;
+    cwd: string;
+    createdAt: string;
+    updatedAt: string;
+    state: TaskState;
+    model: string;
+    permissionMode: PermissionMode;
+    messages: SessionMessage[];
+    plan?: ForgePlan;
+    usage?: SessionUsage;
+}
+export interface SessionUsage {
+    inputTokens: number;
+    cachedInputTokens: number;
+    outputTokens: number;
+    totalTokens: number;
+    estimatedTokens: number;
+    credits: number;
+    contextWindow: number | null;
+    updatedAt: string;
+}
+export interface CliEvent {
+    type: "info" | "success" | "warning" | "error" | "text-delta" | "status" | "usage" | "prompt";
+    message?: string;
+    data?: Record<string, unknown>;
+    at: string;
+}
+export interface CommandContext {
+    cwd: string;
+    args: string[];
+    flags: Map<string, string | boolean>;
+    outputMode: OutputMode;
+    signal: AbortSignal;
+    emit(event: Omit<CliEvent, "at">): void;
+    requestApproval?(question: string, defaultValue?: boolean): Promise<boolean>;
+}
+export interface CommandDefinition {
+    name: string;
+    aliases?: string[];
+    summary: string;
+    usage: string;
+    interactive: boolean;
+    run(context: CommandContext): Promise<number>;
+}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/usage.d.ts

@@ -0,0 +1,15 @@
+import type { SessionUsage } from "./types.js";
+export interface UsageEventData {
+    inputTokens?: number | null;
+    cachedInputTokens?: number | null;
+    outputTokens?: number | null;
+    totalTokens?: number | null;
+    estimatedOutputTokens?: number | null;
+    credits?: number | null;
+    contextWindow?: number | null;
+    provenance?: "provider" | "estimated";
+}
+export declare function emptyUsage(contextWindow?: number | null): SessionUsage;
+export declare function mergeUsage(current: SessionUsage | undefined, turn: UsageEventData): SessionUsage;
+export declare function contextSummary(usage: SessionUsage | undefined): string;
+export declare function contextWarning(usage: SessionUsage | undefined): string | null;

package/dist/usage.js

@@ -0,0 +1,40 @@
+export function emptyUsage(contextWindow = null) {
+    return { inputTokens: 0, cachedInputTokens: 0, outputTokens: 0, totalTokens: 0, estimatedTokens: 0, credits: 0, contextWindow, updatedAt: new Date().toISOString() };
+}
+export function mergeUsage(current, turn) {
+    const base = current ?? emptyUsage(turn.contextWindow ?? null);
+    const exact = turn.totalTokens ?? ((turn.inputTokens ?? 0) + (turn.outputTokens ?? 0));
+    return {
+        inputTokens: base.inputTokens + (turn.inputTokens ?? 0),
+        cachedInputTokens: base.cachedInputTokens + (turn.cachedInputTokens ?? 0),
+        outputTokens: base.outputTokens + (turn.outputTokens ?? 0),
+        totalTokens: base.totalTokens + exact,
+        estimatedTokens: base.estimatedTokens + (turn.provenance === "estimated" ? (turn.estimatedOutputTokens ?? exact) : 0),
+        credits: base.credits + (turn.credits ?? 0),
+        contextWindow: turn.contextWindow ?? base.contextWindow,
+        updatedAt: new Date().toISOString(),
+    };
+}
+export function contextSummary(usage) {
+    if (!usage)
+        return "context: not reported";
+    const label = usage.estimatedTokens > 0 ? "includes estimate" : "exact provider usage";
+    if (!usage.contextWindow)
+        return `context: ${usage.totalTokens.toLocaleString()} tokens (${label}; window unknown)`;
+    const used = Math.min(usage.totalTokens, usage.contextWindow);
+    const percent = Math.round((used / usage.contextWindow) * 100);
+    return `context: ${percent}% · ${used.toLocaleString()} / ${usage.contextWindow.toLocaleString()} · ${(usage.contextWindow - used).toLocaleString()} remaining (${label})`;
+}
+export function contextWarning(usage) {
+    if (!usage?.contextWindow)
+        return null;
+    const percent = (usage.totalTokens / usage.contextWindow) * 100;
+    if (percent >= 95)
+        return "Context is at or above 95%. Compact before continuing.";
+    if (percent >= 85)
+        return "Context is at or above 85%. Plan a compaction soon.";
+    if (percent >= 70)
+        return "Context is at or above 70%.";
+    return null;
+}
+//# sourceMappingURL=usage.js.map

package/dist/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,UAAU,CAAC,gBAA+B,IAAI;IAC5D,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AACvK,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAiC,EAAE,IAAoB;IAChF,MAAM,IAAI,GAAG,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC;IACvF,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QACvD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;QACzE,YAAY,EAAE,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;QAC1D,WAAW,EAAE,IAAI,CAAC,WAAW,GAAG,KAAK;QACrC,eAAe,EAAE,IAAI,CAAC,eAAe,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrH,OAAO,EAAE,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAC3C,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa;QACvD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAA+B;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,uBAAuB,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACvF,IAAI,CAAC,KAAK,CAAC,aAAa;QAAE,OAAO,YAAY,KAAK,CAAC,WAAW,CAAC,cAAc,EAAE,YAAY,KAAK,mBAAmB,CAAC;IACpH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;IAC/D,OAAO,YAAY,OAAO,OAAO,IAAI,CAAC,cAAc,EAAE,MAAM,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,cAAc,EAAE,eAAe,KAAK,GAAG,CAAC;AAC7K,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAA+B;IAC5D,IAAI,CAAC,KAAK,EAAE,aAAa;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC;IAChE,IAAI,OAAO,IAAI,EAAE;QAAE,OAAO,wDAAwD,CAAC;IACnF,IAAI,OAAO,IAAI,EAAE;QAAE,OAAO,qDAAqD,CAAC;IAChF,IAAI,OAAO,IAAI,EAAE;QAAE,OAAO,6BAA6B,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@cortexlabs/forge",
+  "version": "0.1.0-alpha.1",
+  "description": "Forge CLI - a trustworthy AI engineering terminal",
+  "type": "module",
+  "license": "UNLICENSED",
+  "private": false,
+  "publishConfig": {
+    "access": "public",
+    "tag": "next"
+  },
+  "bin": {
+    "forge": "dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "SECURITY.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json && node -e \"require('node:fs').chmodSync('dist/cli.js', 0o755)\"",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "npm run build && node --test test/*.test.mjs",
+    "pack:check": "npm pack --dry-run",
+    "release:next": "npm publish --access public --tag next"
+  },
+  "devDependencies": {
+    "@types/node": "^20.19.0",
+    "typescript": "^5.9.0"
+  }
+}