@decohere/forge 0.0.1-dev.13 → 0.0.1-dev.131

package/es6/src/actions/docker.action.js

@@ -0,0 +1,194 @@
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+import path from "node:path";
+import { injectable } from "@decohere/crucible/decorators";
+import { Workspace } from "@decohere/workspace";
+import { ActionResponse } from "@decohere/devkit/cli";
+import { Docker as DockerInterop } from "@decohere/devkit/interop";
+import { io } from "@decohere/core/io";
+import { scribe } from "@decohere/scribe";
+import { ForgeError, formatUnknownError } from "../errors.js";
+import { deployable, PACKAGE_DIR } from "../packaging/deployable.js";
+export class Docker {
+    workspace;
+    #logger = scribe.logger(Docker.name);
+    docker = new DockerInterop();
+    #defaultRegistry = process.env.FORGE_DOCKER_REGISTRY?.trim() || "ghcr.io";
+    constructor(workspace){
+        this.workspace = workspace;
+    }
+    async run(options) {
+        const projects = await this.getDockerProjects(this.workspace.getProjects(options.configuration));
+        if (projects.length === 0) {
+            this.#logger.info("No projects found with a Dockerfile — nothing to dockerize");
+            return ActionResponse.Success(Docker.name, []);
+        }
+        const workspacePackageJson = await this.workspace.getPackageJson();
+        const version = await this.workspace.getVersion();
+        const responses = await Promise.all(projects.map(async (project)=>await this.buildProject(project, workspacePackageJson, version, options)));
+        const failed = responses.filter((response)=>!response.succeeded);
+        if (failed.length > 0) {
+            return ActionResponse.Error(Docker.name, responses);
+        }
+        return ActionResponse.Success(Docker.name, responses);
+    }
+    async getDockerProjects(projects) {
+        const result = [];
+        for (const project of projects){
+            if (!await deployable.isDeployable(project)) {
+                this.#logger.info(`Skipping ${project.name}: missing ${deployable.dockerfileName(project)}`);
+                continue;
+            }
+            result.push(project);
+        }
+        return result;
+    }
+    /**
+	 * A Dockerfile that copies `.package/` needs `forge package` to have run. Fail before the
+	 * build with that instruction rather than with Docker's "not found" from deep in a layer.
+	 */ async assertPackaged(project) {
+        const dockerfile = await io.readFile(deployable.dockerfilePath(project)).catch(()=>"");
+        if (!dockerfile.includes(PACKAGE_DIR)) {
+            return;
+        }
+        const packaged = path.join(project.projectRoot, PACKAGE_DIR, "package.json");
+        if (!await io.fileExists(packaged)) {
+            throw new ForgeError(`${project.name}: its Dockerfile copies ${PACKAGE_DIR}/, which does not exist. ` + `Run \`forge build --configuration release\` and \`forge package ${project.name}\` first.`);
+        }
+    }
+    async buildProject(project, workspacePackageJson, version, options) {
+        const dockerConfig = project.dockerConfig ?? {};
+        const envBuildArgs = this.parseJsonEnv("FORGE_DOCKER_BUILD_ARGS_JSON", {});
+        const envSecrets = this.parseJsonEnv("FORGE_DOCKER_SECRETS_JSON", {});
+        const envTags = this.parseJsonEnv("FORGE_DOCKER_EXTRA_TAGS_JSON", []);
+        const image = dockerConfig.image ?? this.defaultImageName(project.name, workspacePackageJson);
+        const dockerfile = dockerConfig.dockerfile ?? "Dockerfile";
+        const extraTags = this.extraTagsForImage(image, [
+            ...dockerConfig.tags ?? [],
+            ...envTags
+        ]);
+        const tags = [
+            `${image}:${version}`,
+            ...extraTags
+        ];
+        const buildArgs = this.interpolateBuildArgs({
+            ...dockerConfig.buildArgs,
+            ...envBuildArgs
+        }, version);
+        const secrets = {
+            ...dockerConfig.secrets,
+            ...envSecrets
+        };
+        this.#logger.info(`${options.dryRun ? "[dry-run] " : ""}Building ${project.name}`);
+        try {
+            await this.assertPackaged(project);
+            await this.docker.build(project.projectRoot, {
+                cwd: project.projectRoot,
+                dockerfile: path.join(project.projectRoot, dockerfile),
+                tags,
+                buildArgs,
+                secrets
+            });
+            const shouldPush = options.push || dockerConfig.push;
+            if (shouldPush && !options.dryRun) {
+                for (const tag of tags){
+                    await this.docker.push(tag, {
+                        cwd: project.projectRoot
+                    });
+                }
+            } else if (shouldPush && options.dryRun) {
+                this.#logger.info(`[dry-run] Skipping push for ${project.name}`);
+            }
+            return {
+                projectName: project.name,
+                image,
+                tags,
+                succeeded: true,
+                message: options.dryRun ? `Built ${image} (not pushed)` : `Built ${image}`
+            };
+        } catch (reason) {
+            const message = formatUnknownError(reason);
+            return {
+                projectName: project.name,
+                image,
+                tags,
+                succeeded: false,
+                message,
+                error: `${project.name}: ${message}`
+            };
+        }
+    }
+    interpolateBuildArgs(buildArgs, version) {
+        const result = {};
+        const versionPlaceholder = "$" + "{version}";
+        for (const [key, value] of Object.entries(buildArgs ?? {})){
+            result[key] = value.split(versionPlaceholder).join(version);
+        }
+        return result;
+    }
+    /**
+	 * Keep FORGE_DOCKER_EXTRA_TAGS_JSON scoped to this image so multi-image
+	 * publishes do not stamp create:latest onto the app Dev Container (and vice versa).
+	 */ extraTagsForImage(image, tags) {
+        const prefix = `${image}:`;
+        const seen = new Set();
+        const result = [];
+        for (const tag of tags){
+            if (tag === image || tag.startsWith(prefix)) {
+                if (!seen.has(tag)) {
+                    seen.add(tag);
+                    result.push(tag);
+                }
+            }
+        }
+        return result;
+    }
+    defaultImageName(projectName, workspacePackageJson) {
+        const repositoryPath = process.env.FORGE_DOCKER_NAMESPACE?.trim() || workspacePackageJson.getRepositoryFullName() || this.normalizeDockerRepository(projectName);
+        const projectSlug = this.normalizeProjectSlug(projectName);
+        if (repositoryPath.includes("/") && projectSlug !== "") {
+            return `${this.#defaultRegistry}/${repositoryPath}/${projectSlug}`;
+        }
+        return `${this.#defaultRegistry}/${repositoryPath}`;
+    }
+    normalizeDockerRepository(name) {
+        const repository = name.replace(/^@/, "").split("/").map((segment)=>segment.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "")).filter(Boolean).join("/");
+        if (repository === "") {
+            throw new ForgeError(`Could not derive a Docker repository from project name "${name}"`);
+        }
+        return repository;
+    }
+    normalizeProjectSlug(name) {
+        const unscoped = name.includes("/") ? name.split("/").at(-1) ?? name : name;
+        const slug = unscoped.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+        if (slug === "") {
+            throw new ForgeError(`Could not derive a Docker project slug from project name "${name}"`);
+        }
+        return slug;
+    }
+    parseJsonEnv(name, fallback) {
+        const value = process.env[name];
+        if (value == null || value.trim() === "") {
+            return fallback;
+        }
+        try {
+            return JSON.parse(value);
+        } catch (reason) {
+            throw new ForgeError(`Invalid JSON in ${name}: ${formatUnknownError(reason)}`);
+        }
+    }
+}
+Docker = _ts_decorate([
+    injectable(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof Workspace === "undefined" ? Object : Workspace
+    ])
+], Docker);

package/es6/src/actions/index.js

@@ -4,10 +4,14 @@ export * from "./commit.action.js";
 export * from "./copy.action.js";
 export * from "./dependency-report.action.js";
 export * from "./dependency-sync.action.js";
+export * from "./docker.action.js";
+export * from "./link.action.js";
+export * from "./package.action.js";
+export * from "./paths.action.js";
 export * from "./publish.action.js";
 export * from "./sync-lock-file.action.js";
 export * from "./tag.action.js";
+export * from "./typecheck.action.js";
+export * from "./unlink.action.js";
 export * from "./version.action.js";
 export * from "./watch.action.js";
-
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJzb3VyY2VzIjpbIi9ob21lL3J1bm5lci93b3JrL2RlY29oZXJlL2RlY29oZXJlL3Byb2plY3RzL2ZvcmdlL3NyYy9hY3Rpb25zL2luZGV4LnRzIl0sInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCAqIGZyb20gXCIuL2J1aWxkLmFjdGlvbi5qc1wiO1xuZXhwb3J0ICogZnJvbSBcIi4vY2xlYW4uYWN0aW9uLmpzXCI7XG5leHBvcnQgKiBmcm9tIFwiLi9jb21taXQuYWN0aW9uLmpzXCI7XG5leHBvcnQgKiBmcm9tIFwiLi9jb3B5LmFjdGlvbi5qc1wiO1xuZXhwb3J0ICogZnJvbSBcIi4vZGVwZW5kZW5jeS1yZXBvcnQuYWN0aW9uLmpzXCI7XG5leHBvcnQgKiBmcm9tIFwiLi9kZXBlbmRlbmN5LXN5bmMuYWN0aW9uLmpzXCI7XG5leHBvcnQgKiBmcm9tIFwiLi9wdWJsaXNoLmFjdGlvbi5qc1wiO1xuZXhwb3J0ICogZnJvbSBcIi4vc3luYy1sb2NrLWZpbGUuYWN0aW9uLmpzXCI7XG5leHBvcnQgKiBmcm9tIFwiLi90YWcuYWN0aW9uLmpzXCI7XG5leHBvcnQgKiBmcm9tIFwiLi92ZXJzaW9uLmFjdGlvbi5qc1wiO1xuZXhwb3J0ICogZnJvbSBcIi4vd2F0Y2guYWN0aW9uLmpzXCI7XG4iXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYyxvQkFBb0I7QUFDbEMsY0FBYyxvQkFBb0I7QUFDbEMsY0FBYyxxQkFBcUI7QUFDbkMsY0FBYyxtQkFBbUI7QUFDakMsY0FBYyxnQ0FBZ0M7QUFDOUMsY0FBYyw4QkFBOEI7QUFDNUMsY0FBYyxzQkFBc0I7QUFDcEMsY0FBYyw2QkFBNkI7QUFDM0MsY0FBYyxrQkFBa0I7QUFDaEMsY0FBYyxzQkFBc0I7QUFDcEMsY0FBYyxvQkFBb0IifQ==

package/es6/src/actions/link.action.js

@@ -0,0 +1,128 @@
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+import fs from "node:fs/promises";
+import path from "node:path";
+import { injectable } from "@decohere/crucible/decorators";
+import { Workspace } from "@decohere/workspace";
+import { ActionResponse } from "@decohere/devkit/cli";
+import { scribe } from "@decohere/scribe";
+import "../extensions/project.extensions.js";
+import { ForgeError } from "../errors.js";
+export const LINK_MANIFEST = ".forge-link.json";
+export const DEFAULT_LINK_CONFIGURATION = "link";
+export class Link {
+    workspace;
+    #logger = scribe.logger(Link.name);
+    constructor(workspace){
+        this.workspace = workspace;
+    }
+    run = async (options)=>{
+        const targetDir = path.resolve(options.targetDir);
+        const nodeModulesDir = path.join(targetDir, "node_modules");
+        const stat = await fs.stat(nodeModulesDir).catch(()=>null);
+        if (stat == null) {
+            throw new ForgeError(`node_modules not found in "${targetDir}". Run pnpm install first.`);
+        }
+        const projects = this.workspace.getProjects(options.configuration);
+        if (projects.length === 0) {
+            throw new ForgeError(`No projects found for configuration "${options.configuration}"`);
+        }
+        // Load any existing manifest so originalPath values are preserved on re-link
+        const manifestPath = path.join(targetDir, LINK_MANIFEST);
+        const existingManifestText = await fs.readFile(manifestPath, "utf8").catch(()=>null);
+        const existingManifest = existingManifestText != null ? JSON.parse(existingManifestText) : null;
+        const manifest = {
+            workspaceRoot: this.workspace.rootDir,
+            links: []
+        };
+        for (const project of projects){
+            const pkg = await project.getPackageJson();
+            const packageName = pkg.name;
+            if (!packageName) {
+                this.#logger.trace(`Skipping project "${project.name}" — no package name`);
+                continue;
+            }
+            // Resolve the build output directory (no target arg — debug config is not packed)
+            const outDir = project.getOutDir();
+            const absoluteOutDir = path.resolve(outDir);
+            // Pre-create the output dir so the symlink is valid even before a build completes.
+            await fs.mkdir(absoluteOutDir, {
+                recursive: true
+            });
+            // Compute symlink path inside target node_modules
+            const symlinkPath = path.join(nodeModulesDir, ...packageName.split("/"));
+            const symlinkParent = path.dirname(symlinkPath);
+            // Capture any existing entry so we can restore it on unlink.
+            // If a manifest already exists for this package, preserve its originalPath —
+            // the current symlink is our own and must not be treated as the original.
+            let originalPath = null;
+            const existingStat = await fs.lstat(symlinkPath).catch(()=>null);
+            if (existingStat != null) {
+                const existingEntry = existingManifest?.links.find((l)=>l.packageName === packageName);
+                if (existingEntry != null) {
+                    // Already linked — preserve the recorded originalPath and replace the symlink
+                    originalPath = existingEntry.originalPath;
+                    if (existingStat.isSymbolicLink()) {
+                        await fs.unlink(symlinkPath);
+                    }
+                } else if (existingStat.isSymbolicLink()) {
+                    originalPath = await fs.readlink(symlinkPath);
+                    await fs.unlink(symlinkPath);
+                } else {
+                    // Real directory — back it up by renaming
+                    originalPath = `${symlinkPath}.__forge_backup__`;
+                    await fs.rename(symlinkPath, originalPath);
+                }
+            }
+            await fs.mkdir(symlinkParent, {
+                recursive: true
+            });
+            await fs.symlink(absoluteOutDir, symlinkPath, "dir");
+            manifest.links.push({
+                packageName,
+                symlinkPath,
+                originalPath
+            });
+            this.#logger.info(`Linked ${packageName} → ${absoluteOutDir}`);
+        }
+        // Create a peer node_modules at the build output root so Node can resolve
+        // bare specifiers from the real (non-symlink) paths of linked packages.
+        if (manifest.links.length > 0) {
+            const buildRoot = path.resolve(projects[0].getRootOut());
+            const peerNodeModulesDir = path.join(buildRoot, "node_modules");
+            await fs.rm(peerNodeModulesDir, {
+                recursive: true,
+                force: true
+            });
+            for (const project of projects){
+                const pkg = await project.getPackageJson();
+                if (!pkg.name) continue;
+                const outDir = path.resolve(project.getOutDir());
+                const peerSymlink = path.join(peerNodeModulesDir, ...pkg.name.split("/"));
+                await fs.mkdir(path.dirname(peerSymlink), {
+                    recursive: true
+                });
+                await fs.symlink(outDir, peerSymlink, "dir");
+                this.#logger.trace(`Peer-linked ${pkg.name} → ${outDir}`);
+            }
+            manifest.peerNodeModulesDir = peerNodeModulesDir;
+            this.#logger.info(`Created peer node_modules at ${peerNodeModulesDir}`);
+        }
+        await fs.writeFile(path.join(targetDir, LINK_MANIFEST), JSON.stringify(manifest, null, 2));
+        return ActionResponse.Success(Link.name);
+    };
+}
+Link = _ts_decorate([
+    injectable(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof Workspace === "undefined" ? Object : Workspace
+    ])
+], Link);

package/es6/src/actions/package.action.js

@@ -0,0 +1,219 @@
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+import fs from "node:fs/promises";
+import path from "node:path";
+import { injectable } from "@decohere/crucible/decorators";
+import { Workspace } from "@decohere/workspace";
+import { ActionResponse } from "@decohere/devkit/cli";
+import { Npm } from "@decohere/devkit/interop";
+import { io } from "@decohere/core/io";
+import { scribe } from "@decohere/scribe";
+import { ForgeError, formatUnknownError } from "../errors.js";
+import { DependencyPinner } from "../packaging/dependency-pinner.service.js";
+import { deployable, PACKAGE_DIR } from "../packaging/deployable.js";
+import { ImportGraph } from "../packaging/import-graph.service.js";
+import { releaseExports } from "../packaging/release-exports.js";
+import { uiAssets } from "../packaging/ui-assets.js";
+import { Release } from "../workspace.config.js";
+export class PackageDeployable {
+    workspace;
+    importGraph;
+    pinner;
+    #logger = scribe.logger(PackageDeployable.name);
+    npm = new Npm();
+    constructor(workspace, importGraph, pinner){
+        this.workspace = workspace;
+        this.importGraph = importGraph;
+        this.pinner = pinner;
+    }
+    async run(options) {
+        const projects = this.workspace.getProjects(Release.name);
+        const selected = await this.select(projects, options.project);
+        if (typeof selected === "string") {
+            return ActionResponse.Error(PackageDeployable.name, selected);
+        }
+        if (selected.length === 0) {
+            this.#logger.info("No projects found with a Dockerfile — nothing to package");
+            return ActionResponse.Success(PackageDeployable.name, []);
+        }
+        const releaseProjects = await this.releaseProjects(projects);
+        const responses = [];
+        for (const project of selected){
+            responses.push(await this.packageProject(project, releaseProjects, projects));
+        }
+        return responses.some((response)=>!response.succeeded) ? ActionResponse.Error(PackageDeployable.name, responses) : ActionResponse.Success(PackageDeployable.name, responses);
+    }
+    /** The deployables to package, or the reason a named project cannot be one. */ async select(projects, requested) {
+        if (requested == null || requested === "") {
+            const found = [];
+            for (const project of projects){
+                if (await deployable.isDeployable(project)) {
+                    found.push(project);
+                }
+            }
+            return found;
+        }
+        const project = projects.find((candidate)=>candidate.name === requested);
+        if (project == null) {
+            return `${requested} is not a workspace project. Known projects: ${projects.map((p)=>p.name).join(", ")}`;
+        }
+        if (!await deployable.isDeployable(project)) {
+            return `${requested} has no ${deployable.dockerfileName(project)}, so it is a library, not a deployable. ` + "Libraries are packaged into the deployables that import them.";
+        }
+        return [
+            project
+        ];
+    }
+    async releaseProjects(projects) {
+        const entries = await Promise.all(projects.map(async (project)=>{
+            const pkg = await project.getPackageJson();
+            return [
+                project.name,
+                {
+                    name: project.name,
+                    pkg,
+                    projectRoot: path.resolve(project.projectRoot),
+                    releaseDir: path.resolve(project.getOutDir())
+                }
+            ];
+        }));
+        return new Map(entries);
+    }
+    async packageProject(project, releaseProjects, projects) {
+        const outDir = path.join(path.resolve(project.projectRoot), PACKAGE_DIR);
+        const base = {
+            projectName: project.name,
+            outDir,
+            workspacePackages: [],
+            dependencies: {}
+        };
+        try {
+            const entry = releaseProjects.get(project.name);
+            if (!await io.directoryExists(path.join(entry.releaseDir, "es6"))) {
+                throw new ForgeError(`No release build for ${project.name}. Run \`forge build --configuration release\` first.`);
+            }
+            const ui = await uiAssets.resolve(project, projects);
+            const reached = await this.importGraph.walk(entry, releaseProjects);
+            const libraries = [
+                ...reached.workspace
+            ].filter((name)=>name !== project.name).sort().map((name)=>releaseProjects.get(name));
+            const dependencies = await this.pinner.pin(reached.thirdParty, [
+                entry,
+                ...libraries
+            ], releaseProjects, {
+                dir: path.resolve(this.workspace.rootDir),
+                pkg: await this.workspace.getPackageJson()
+            });
+            await this.write(entry, libraries, dependencies, outDir, ui);
+            const workspacePackages = [
+                ...reached.workspace
+            ].sort();
+            this.#logger.info(`Packaged ${project.name} to ${outDir}`, {
+                workspace: workspacePackages,
+                thirdParty: Object.keys(dependencies)
+            });
+            return {
+                projectName: project.name,
+                outDir,
+                workspacePackages,
+                dependencies,
+                succeeded: true,
+                message: `Packaged ${project.name} to ${outDir}`
+            };
+        } catch (reason) {
+            const message = formatUnknownError(reason);
+            return {
+                ...base,
+                succeeded: false,
+                message,
+                error: `${project.name}: ${message}`
+            };
+        }
+    }
+    async write(entry, libraries, dependencies, outDir, ui) {
+        await fs.rm(outDir, {
+            recursive: true,
+            force: true
+        });
+        await fs.mkdir(outDir, {
+            recursive: true
+        });
+        await this.writeJson(path.join(outDir, "package.json"), {
+            name: entry.name.replace(/^@/, "").replace("/", "-"),
+            version: entry.pkg.version,
+            private: true,
+            type: "module",
+            scripts: {
+                start: `node es6/${releaseExports.toJs(entry.pkg.main ?? "src/index.ts")}`
+            },
+            dependencies
+        });
+        // npm writes real folders. It also removes anything in node_modules it does not know,
+        // so the workspace libraries are copied in only after it has run.
+        if (Object.keys(dependencies).length > 0) {
+            await this.npm.installProduction({
+                cwd: outDir
+            });
+        }
+        await this.copyTree(path.join(entry.releaseDir, "es6"), path.join(outDir, "es6"));
+        const config = path.join(path.resolve(this.workspace.rootDir), "config");
+        if (await io.directoryExists(config)) {
+            await this.copyTree(config, path.join(outDir, "config"));
+        }
+        if (ui != null) {
+            await this.copyTree(ui.from, path.join(outDir, ui.to));
+        }
+        for (const library of libraries){
+            const target = path.join(outDir, "node_modules", ...library.name.split("/"));
+            await this.copyTree(path.join(library.releaseDir, "es6"), path.join(target, "es6"));
+            await this.writeJson(path.join(target, "package.json"), {
+                name: library.name,
+                version: library.pkg.version,
+                type: "module",
+                exports: releaseExports.build(library.pkg)
+            });
+        }
+        await this.assertNoSymlinks(outDir);
+    }
+    /** Copies file contents, never links: a symlink in the output would break outside the image. */ async copyTree(from, to) {
+        await fs.cp(from, to, {
+            recursive: true,
+            dereference: true
+        });
+    }
+    async writeJson(filePath, value) {
+        await io.writeFile(filePath, `${JSON.stringify(value, null, "\t")}\n`, {
+            mkdir: true,
+            encoding: "utf8"
+        });
+    }
+    async assertNoSymlinks(dir) {
+        for (const entry of (await fs.readdir(dir, {
+            withFileTypes: true
+        }))){
+            const entryPath = path.join(dir, entry.name);
+            if (entry.isSymbolicLink()) {
+                throw new ForgeError(`The packaged output must hold no symlinks, but found ${entryPath}`);
+            }
+            if (entry.isDirectory()) {
+                await this.assertNoSymlinks(entryPath);
+            }
+        }
+    }
+}
+PackageDeployable = _ts_decorate([
+    injectable(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof Workspace === "undefined" ? Object : Workspace,
+        typeof ImportGraph === "undefined" ? Object : ImportGraph,
+        typeof DependencyPinner === "undefined" ? Object : DependencyPinner
+    ])
+], PackageDeployable);

package/es6/src/actions/paths.action.js

@@ -0,0 +1,97 @@
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+}
+import { existsSync } from "node:fs";
+import { readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { injectable } from "@decohere/crucible/decorators";
+import { packageAliases, Workspace } from "@decohere/workspace";
+import { ActionResponse } from "@decohere/devkit/cli";
+import { scribe } from "@decohere/scribe";
+export const PATHS_FILE = "tsconfig.paths.json";
+export class Paths {
+    workspace;
+    #logger = scribe.logger(Paths.name);
+    constructor(workspace){
+        this.workspace = workspace;
+    }
+    async run(options) {
+        const file = path.join(this.workspace.rootDir, PATHS_FILE);
+        if (this.workspace.isStandalone) {
+            // One project has no other projects to import from source.
+            this.#logger.info(`Standalone project: no ${PATHS_FILE} needed`);
+            return ActionResponse.Success(Paths.name, [
+                {
+                    file,
+                    changed: false,
+                    succeeded: true
+                }
+            ]);
+        }
+        const content = Paths.render(this.workspace);
+        const current = existsSync(file) ? await readFile(file, "utf8") : null;
+        const changed = current !== content;
+        if (options.check) {
+            if (!changed) {
+                return ActionResponse.Success(Paths.name, [
+                    {
+                        file,
+                        changed,
+                        succeeded: true
+                    }
+                ]);
+            }
+            const error = `${PATHS_FILE} is out of date. Run \`forge paths\` to update it.`;
+            this.#logger.error(error);
+            return ActionResponse.Error(Paths.name, [
+                {
+                    file,
+                    changed,
+                    succeeded: false,
+                    error
+                }
+            ]);
+        }
+        if (changed) {
+            await writeFile(file, content);
+            this.#logger.info(`Wrote ${PATHS_FILE}`);
+        }
+        return ActionResponse.Success(Paths.name, [
+            {
+                file,
+                changed,
+                succeeded: true
+            }
+        ]);
+    }
+    /** The file's content: convention and exported subpaths only, never the tsconfig's own paths. */ static render(workspace) {
+        const rootDir = path.resolve(workspace.rootDir);
+        const { paths } = packageAliases.build(workspace.getProjects("debug"), {
+            baseUrl: rootDir
+        });
+        const sorted = Object.fromEntries(Object.keys(paths).sort().map((key)=>[
+                key,
+                (paths[key] ?? []).map((target)=>`./${target}`)
+            ]));
+        const json = {
+            $comment: "Generated by `forge paths` from the workspace packages. Do not edit.",
+            compilerOptions: {
+                paths: sorted
+            }
+        };
+        return `${JSON.stringify(json, null, 2)}\n`;
+    }
+}
+Paths = _ts_decorate([
+    injectable(),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof Workspace === "undefined" ? Object : Workspace
+    ])
+], Paths);