@entelligentsia/forgecli 0.10.1 → 0.11.3

package/dist/extensions/forgecli/health-check.js

@@ -6,13 +6,24 @@
 // function directly. sendUserMessage is NOT used here (skill §198 pitfall).
 //
 // Implements a programmatic subset of the checks listed in
-// forge/forge/commands/health.md (config-completeness + KB freshness +
-// store integrity). Full check output is returned as structured data;
-// the caller formats it for display.
+// forge/forge/commands/health.md. As of FORGE-S23-T07, covers 6/15 checks:
+//   1. Config completeness
+//   2. KB freshness
+//   3. Stale docs (NEW — architecture/*.md files older than STALE_DOCS_THRESHOLD_MS)
+//   8. Store integrity
+//   9. Modified generated files (NEW — generation-manifest.cjs list --modified)
+//  15. Plugin integrity (NEW — native TS hash check against forgeRoot/integrity.json)
+//
+// Full check output is returned as structured data; the caller formats it for
+// display. See forge-cli/doc/health-parity-audit.md for the full parity table.
 import { execFileSync } from "node:child_process";
 import * as crypto from "node:crypto";
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { remediateValidationOutput } from "./lib/store-error-remediation.js";
+// ── Constants ──────────────────────────────────────────────────────────────
+/** Architecture docs older than this are flagged as stale (90 days). */
+const STALE_DOCS_THRESHOLD_MS = 90 * 24 * 60 * 60 * 1000;
 // ── Required config fields ─────────────────────────────────────────────────
 const REQUIRED_TOP_LEVEL = ["version", "project", "stack", "commands", "paths"];
 const REQUIRED_PROJECT = ["name", "prefix"];
@@ -24,8 +35,9 @@ const REQUIRED_PATHS = ["engineering", "store", "workflows", "commands", "templa
  *
  * @param cwd - project working directory (where .forge/ lives)
  * @param bundleRoot - path to dist/forge-payload/ (contains tools/)
+ * @param forgeRoot - optional path to the installed Forge plugin root (for plugin integrity check)
  */
-export async function runHealthCheck(cwd, bundleRoot) {
+export async function runHealthCheck(cwd, bundleRoot, forgeRoot) {
     const gaps = [];
     // 1. Config-completeness check
     const configPath = path.join(cwd, ".forge", "config.json");
@@ -96,7 +108,9 @@ export async function runHealthCheck(cwd, bundleRoot) {
         gaps.push({
             check: "kb-freshness",
             severity: "warning",
-            message: "No calibration baseline found — run /forge:calibrate to establish one.",
+            message: "No calibration baseline found — run /forge:calibrate to establish one." +
+                "\n  💡 Calibration aligns the knowledge base with your current project structure." +
+                "\n  → Set FORGE_YES=1 or FORGE_NON_INTERACTIVE=1 for hands-free calibration.",
         });
     }
     else if (calibrationBaseline.masterIndexHash) {
@@ -106,10 +120,31 @@ export async function runHealthCheck(cwd, bundleRoot) {
             const content = fs.readFileSync(masterIndexPath, "utf8");
             const currentHash = crypto.createHash("sha256").update(content, "utf8").digest("hex");
             if (currentHash !== calibrationBaseline.masterIndexHash) {
+                // Determine what drifted by scanning for section keywords (forge-cli#23)
+                const driftedSections = [];
+                const lowerContent = content.toLowerCase();
+                const sectionKeywords = [
+                    { section: "tasks", keywords: ["task", "implement", "plan"] },
+                    { section: "bugs", keywords: ["bug", "triag", "in-progress"] },
+                    { section: "sprints", keywords: ["sprint", "retrospective"] },
+                    { section: "features", keywords: ["feature", "deliver"] },
+                    { section: "architecture", keywords: ["architecture", "stack", "database"] },
+                ];
+                for (const { section, keywords } of sectionKeywords) {
+                    if (keywords.some((kw) => lowerContent.includes(kw))) {
+                        driftedSections.push(section);
+                    }
+                }
+                const driftDetail = driftedSections.length > 0
+                    ? ` Drifted sections: ${driftedSections.join(", ")}.`
+                    : "";
+                const message = `KB freshness: MASTER_INDEX.md hash has changed since last calibration — run /forge:calibrate to re-align.${driftDetail}` +
+                    "\n  💡 Re-calibrating keeps the knowledge base in sync with sprint/task changes." +
+                    "\n  → Set FORGE_YES=1 or FORGE_NON_INTERACTIVE=1 for hands-free calibration.";
                 gaps.push({
                     check: "kb-freshness",
                     severity: "warning",
-                    message: "KB freshness: MASTER_INDEX.md hash has changed since last calibration — consider /forge:calibrate.",
+                    message,
                 });
             }
         }
@@ -134,14 +169,73 @@ export async function runHealthCheck(cwd, bundleRoot) {
         }
         catch (err) {
             const e = err;
-            const detail = e.stderr || e.stdout || "unknown error";
-            gaps.push({
-                check: "store-integrity",
-                severity: "warning",
-                message: `Store integrity check failed: ${detail.trim().slice(0, 200)}`,
-            });
+            const output = (e.stderr || e.stdout || "").trim();
+            if (!output) {
+                gaps.push({
+                    check: "store-integrity",
+                    severity: "warning",
+                    message: "Store integrity check failed with no output.",
+                });
+            }
+            else {
+                // Parse validation output into individual errors with remediation (forge-cli#24).
+                // Uses the shared store-error-remediation module for consistent
+                // user-facing hints across health-check, write-guard, and hook-dispatcher.
+                const lines = output.split("\n").filter((l) => l.trim());
+                const errors = lines.filter((l) => l.startsWith("ERROR"));
+                const warnings = lines.filter((l) => l.startsWith("WARN"));
+                const errorCount = errors.length;
+                const warnCount = warnings.length;
+                const summary = errorCount > 0
+                    ? `${errorCount} error(s)${warnCount > 0 ? `, ${warnCount} warning(s)` : ""}`
+                    : (warnCount > 0 ? `${warnCount} warning(s)` : "");
+                // Use shared remediation module to generate per-error hints and commands.
+                const remediations = remediateValidationOutput(output);
+                // Build user-friendly message with hints + commands.
+                const remediationLines = [];
+                for (const { errorLine, remediation } of remediations) {
+                    if (remediation.hint) {
+                        remediationLines.push(`  💡 ${remediation.hint}`);
+                    }
+                    if (remediation.command) {
+                        remediationLines.push(`  → ${remediation.command}`);
+                    }
+                }
+                // Cap remediations to avoid overwhelming output.
+                const maxRemediations = 5;
+                const shown = remediationLines.slice(0, maxRemediations * 2); // hint + command per error
+                const moreCount = remediationLines.length - shown.length;
+                let message = `Store integrity: ${summary}`;
+                if (shown.length > 0) {
+                    message += "\n" + shown.join("\n");
+                    if (moreCount > 0) {
+                        message += `\n  ... and ${Math.ceil(moreCount / 2)} more.`;
+                    }
+                }
+                gaps.push({
+                    check: "store-integrity",
+                    severity: errorCount > 0 ? "error" : "warning", message,
+                });
+            }
         }
     }
+    // 4. Stale docs check — engineering/architecture/*.md files older than 90 days
+    // This check runs regardless of .forge/ presence (only needs cwd + engPath).
+    gaps.push(...checkStaleDocs(cwd, configRecord));
+    // 5. Modified generated files check — generation-manifest.cjs list --modified
+    // Only runs when config is present (manifest lives in .forge/).
+    gaps.push(...checkModifiedGeneratedFiles(cwd, bundleRoot));
+    // 6. Plugin integrity check — native TS hash check against forgeRoot/integrity.json
+    // Only runs when forgeRoot is provided.
+    if (forgeRoot) {
+        gaps.push(...checkPluginIntegrity(forgeRoot));
+    }
+    // 7. Generated file structure check — check-structure.cjs
+    // Runs the bundled check-structure tool to verify expected files exist.
+    gaps.push(...checkStructure(cwd, bundleRoot));
+    // 8. Integrity verification — verify-integrity.cjs
+    // Runs the bundled verify-integrity tool to detect tampering.
+    gaps.push(...checkVerifyIntegrity(forgeRoot ?? bundleRoot));
     const clean = gaps.length === 0;
     const summary = clean ? "〇 /forge:health: clean." : `△ /forge:health: ${gaps.length} gap(s) detected.`;
     return {
@@ -151,4 +245,235 @@ export async function runHealthCheck(cwd, bundleRoot) {
         summary,
     };
 }
+// ── Check: Stale docs ──────────────────────────────────────────────────────
+/**
+ * Check for architecture docs not updated in over 90 days.
+ * Returns one HealthGap per stale file.
+ * Silently returns [] if the architecture directory does not exist.
+ */
+export function checkStaleDocs(cwd, config) {
+    const gaps = [];
+    const engPath = config.paths?.engineering ?? "engineering";
+    const archDir = path.join(cwd, engPath, "architecture");
+    if (!fs.existsSync(archDir)) {
+        return gaps;
+    }
+    let files;
+    try {
+        files = fs.readdirSync(archDir).filter((f) => f.endsWith(".md"));
+    }
+    catch {
+        return gaps;
+    }
+    const now = Date.now();
+    for (const file of files) {
+        const filePath = path.join(archDir, file);
+        try {
+            const stat = fs.statSync(filePath);
+            const ageMs = now - stat.mtimeMs;
+            if (ageMs > STALE_DOCS_THRESHOLD_MS) {
+                const ageDays = Math.floor(ageMs / (24 * 60 * 60 * 1000));
+                gaps.push({
+                    check: "stale-docs",
+                    severity: "warning",
+                    message: `${engPath}/architecture/${file} not updated in ${ageDays} days — may be stale. Run /forge:collate to refresh.`,
+                });
+            }
+        }
+        catch {
+            // Skip files we can't stat
+        }
+    }
+    return gaps;
+}
+// ── Check: Modified generated files ───────────────────────────────────────
+/**
+ * Check for generated files that have been manually edited.
+ * Spawns generation-manifest.cjs list --modified from the bundled tools.
+ * Returns one HealthGap per modified/missing file.
+ * Silently returns [] if the tool is absent.
+ */
+export function checkModifiedGeneratedFiles(cwd, bundleRoot) {
+    const gaps = [];
+    const genManifestTool = path.join(bundleRoot, "tools", "generation-manifest.cjs");
+    if (!fs.existsSync(genManifestTool)) {
+        return gaps;
+    }
+    let stdout = "";
+    try {
+        stdout = execFileSync("node", [genManifestTool, "list", "--modified"], {
+            cwd,
+            encoding: "utf8",
+            timeout: 10000,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+    }
+    catch (err) {
+        // generation-manifest exits non-zero when modifications are found.
+        // Parse stdout from the error object.
+        const e = err;
+        stdout = e.stdout ?? "";
+    }
+    const lines = stdout
+        .split("\n")
+        .map((l) => l.trim())
+        .filter((l) => l.length > 0 && !l.startsWith("#"));
+    for (const line of lines) {
+        gaps.push({
+            check: "modified-generated-files",
+            severity: "warning",
+            message: `Generated file modified: ${line} — regeneration will warn before overwriting. Run /forge:regenerate to review.`,
+        });
+    }
+    return gaps;
+}
+/**
+ * Check plugin files against the integrity.json manifest.
+ * Natively implemented in TypeScript — no subprocess required.
+ * Returns one HealthGap per modified or missing file.
+ * Silently returns [] if forgeRoot is not provided or integrity.json is missing.
+ */
+export function checkPluginIntegrity(forgeRoot) {
+    const gaps = [];
+    const integrityPath = path.join(forgeRoot, "integrity.json");
+    if (!fs.existsSync(integrityPath)) {
+        gaps.push({
+            check: "plugin-integrity",
+            severity: "warning",
+            message: "integrity.json not found in forge plugin root — run /forge:update to restore.",
+        });
+        return gaps;
+    }
+    let manifest;
+    try {
+        manifest = JSON.parse(fs.readFileSync(integrityPath, "utf8"));
+    }
+    catch (err) {
+        const e = err;
+        gaps.push({
+            check: "plugin-integrity",
+            severity: "warning",
+            message: `integrity.json is not valid JSON: ${e.message}`,
+        });
+        return gaps;
+    }
+    if (!manifest.files || typeof manifest.files !== "object") {
+        gaps.push({
+            check: "plugin-integrity",
+            severity: "warning",
+            message: "integrity.json has no files section — run /forge:update to restore.",
+        });
+        return gaps;
+    }
+    for (const [relativePath, expectedHash] of Object.entries(manifest.files)) {
+        const absolutePath = path.join(forgeRoot, relativePath);
+        if (!fs.existsSync(absolutePath)) {
+            gaps.push({
+                check: "plugin-integrity",
+                severity: "warning",
+                message: `Plugin file missing: ${relativePath} — run /forge:update to restore.`,
+            });
+            continue;
+        }
+        try {
+            const content = fs.readFileSync(absolutePath);
+            const actualHash = crypto.createHash("sha256").update(content).digest("hex");
+            if (actualHash !== expectedHash) {
+                gaps.push({
+                    check: "plugin-integrity",
+                    severity: "warning",
+                    message: `Plugin file modified: ${relativePath} — run /forge:update to restore.`,
+                });
+            }
+        }
+        catch {
+            gaps.push({
+                check: "plugin-integrity",
+                severity: "warning",
+                message: `Cannot read plugin file: ${relativePath} — permission or I/O error.`,
+            });
+        }
+    }
+    return gaps;
+}
+// ── Check: Generated file structure ──────────────────────────────────────────
+/**
+ * Run check-structure.cjs to verify expected generated files exist.
+ * Returns one HealthGap per missing/extra file, or silently [] if absent.
+ */
+export function checkStructure(cwd, bundleRoot) {
+    const gaps = [];
+    const checkStructureTool = path.join(bundleRoot, "tools", "check-structure.cjs");
+    if (!fs.existsSync(checkStructureTool)) {
+        return gaps; // Tool absent — skip silently rather than per-check noise.
+    }
+    try {
+        const result = execFileSync("node", [checkStructureTool, "--path", cwd], {
+            cwd,
+            encoding: "utf8",
+            timeout: 10000,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        // check-structure exits 0 when all files are present.
+        // If it exits non-zero, the missing files are in stdout.
+        if (result.trim()) {
+            const lines = result.trim().split("\n").filter((l) => l.trim());
+            for (const line of lines) {
+                gaps.push({
+                    check: "generated-structure",
+                    severity: "warning",
+                    message: `Generated file structure: ${line.trim()} — run /forge:update to regenerate.`,
+                });
+            }
+        }
+    }
+    catch (err) {
+        const e = err;
+        const output = (e.stdout || e.stderr || "").trim();
+        if (output) {
+            const lines = output.split("\n").filter((l) => l.trim());
+            for (const line of lines) {
+                gaps.push({
+                    check: "generated-structure",
+                    severity: "warning",
+                    message: `Generated file structure: ${line.trim()} — run /forge:update to regenerate.`,
+                });
+            }
+        }
+    }
+    return gaps;
+}
+// ── Check: Integrity verification ─────────────────────────────────────────────
+/**
+ * Run verify-integrity.cjs to detect plugin file tampering.
+ * Returns one HealthGap per modified file, or silently [] if absent.
+ */
+export function checkVerifyIntegrity(forgeRoot) {
+    const gaps = [];
+    const verifyTool = path.join(forgeRoot, "tools", "verify-integrity.cjs");
+    if (!fs.existsSync(verifyTool)) {
+        return gaps; // Tool absent — skip silently.
+    }
+    try {
+        execFileSync("node", [verifyTool, "--forge-root", forgeRoot], {
+            cwd: forgeRoot,
+            encoding: "utf8",
+            timeout: 10000,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        // verify-integrity exits 0 when all files pass.
+    }
+    catch (err) {
+        const e = err;
+        const output = (e.stdout || e.stderr || "").trim();
+        if (output) {
+            gaps.push({
+                check: "plugin-integrity-verify",
+                severity: "warning",
+                message: `Integrity verification: ${output.slice(0, 300)}`,
+            });
+        }
+    }
+    return gaps;
+}
 //# sourceMappingURL=health-check.js.map

package/dist/extensions/forgecli/health-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"health-check.js","sourceRoot":"","sources":["../../../src/extensions/forgecli/health-check.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,oDAAoD;AACpD,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,EAAE;AACF,2DAA2D;AAC3D,uEAAuE;AACvE,sEAAsE;AACtE,qCAAqC;AAErC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAiBlC,8EAA8E;AAE9E,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC;AACzF,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAU,CAAC;AACrD,MAAM,iBAAiB,GAAG,CAAC,MAAM,CAAU,CAAC;AAC5C,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AAE/F,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,UAAkB;IACnE,MAAM,IAAI,GAAgB,EAAE,CAAC;IAE7B,+BAA+B;IAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC3D,IAAI,MAAM,GAAmC,IAAI,CAAC;IAClD,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACpD,aAAa,GAAG,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACR,IAAI,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,qBAAqB;YAC5B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,oDAAoD;SAC7D,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,IAAI;YACJ,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,2CAA2C;SACpD,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,YAAY,GAAG,MAAiC,CAAC;IACvD,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5F,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACF,CAAC;IAED,IAAI,SAAS,IAAI,YAAY,IAAI,YAAY,CAAC,OAAO,IAAI,OAAO,YAAY,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACnG,MAAM,OAAO,GAAG,YAAY,CAAC,OAAkC,CAAC;QAChE,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACtC,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC7E,aAAa,CAAC,IAAI,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;YACxC,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,UAAU,IAAI,YAAY,IAAI,YAAY,CAAC,QAAQ,IAAI,OAAO,YAAY,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtG,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAmC,CAAC;QAClE,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;YACvC,IAAI,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChF,aAAa,CAAC,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;YACzC,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,OAAO,IAAI,YAAY,IAAI,YAAY,CAAC,KAAK,IAAI,OAAO,YAAY,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7F,MAAM,MAAM,GAAG,YAAY,CAAC,KAAgC,CAAC;QAC7D,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC1E,aAAa,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YACtC,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,qBAAqB;YAC5B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,uCAAuC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC1E,CAAC,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,mBAAmB,GAAG,YAAY,CAAC,mBAAsE,CAAC;IAEhH,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,cAAc;YACrB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,wEAAwE;SACjF,CAAC,CAAC;IACJ,CAAC;SAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,CAAC;QAChD,MAAM,OAAO,GAAI,YAAY,CAAC,KAAgC,EAAE,WAAW,IAAI,aAAa,CAAC;QAC7F,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACnE,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtF,IAAI,WAAW,KAAK,mBAAmB,CAAC,eAAe,EAAE,CAAC;gBACzD,IAAI,CAAC,IAAI,CAAC;oBACT,KAAK,EAAE,cAAc;oBACrB,QAAQ,EAAE,SAAS;oBACnB,OAAO,EACN,oGAAoG;iBACrG,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,IAAI,CAAC;gBACT,KAAK,EAAE,cAAc;gBACrB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,oEAAoE;aAC7E,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,2BAA2B;IAC3B,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAC/E,IAAI,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACJ,YAAY,CAAC,MAAM,EAAE,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAAE;gBACtD,GAAG;gBACH,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aACjC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,GAA2C,CAAC;YACtD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC;gBACT,KAAK,EAAE,iBAAiB;gBACxB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,iCAAiC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aACvE,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,MAAM,mBAAmB,CAAC;IAEvG,OAAO;QACN,KAAK;QACL,IAAI;QACJ,aAAa,EAAE,IAAI;QACnB,OAAO;KACP,CAAC;AACH,CAAC"}
+{"version":3,"file":"health-check.js","sourceRoot":"","sources":["../../../src/extensions/forgecli/health-check.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,oDAAoD;AACpD,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,EAAE;AACF,2DAA2D;AAC3D,2EAA2E;AAC3E,2BAA2B;AAC3B,oBAAoB;AACpB,qFAAqF;AACrF,uBAAuB;AACvB,gFAAgF;AAChF,sFAAsF;AACtF,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAE/E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAE7E,8EAA8E;AAE9E,wEAAwE;AACxE,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAiBzD,8EAA8E;AAE9E,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC;AACzF,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAU,CAAC;AACrD,MAAM,iBAAiB,GAAG,CAAC,MAAM,CAAU,CAAC;AAC5C,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AAE/F,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,GAAW,EACX,UAAkB,EAClB,SAAkB;IAElB,MAAM,IAAI,GAAgB,EAAE,CAAC;IAE7B,+BAA+B;IAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC3D,IAAI,MAAM,GAAmC,IAAI,CAAC;IAClD,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACpD,aAAa,GAAG,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACR,IAAI,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,qBAAqB;YAC5B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,oDAAoD;SAC7D,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,IAAI;YACJ,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,2CAA2C;SACpD,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,YAAY,GAAG,MAAiC,CAAC;IACvD,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5F,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACF,CAAC;IAED,IAAI,SAAS,IAAI,YAAY,IAAI,YAAY,CAAC,OAAO,IAAI,OAAO,YAAY,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACnG,MAAM,OAAO,GAAG,YAAY,CAAC,OAAkC,CAAC;QAChE,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACtC,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC7E,aAAa,CAAC,IAAI,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;YACxC,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,UAAU,IAAI,YAAY,IAAI,YAAY,CAAC,QAAQ,IAAI,OAAO,YAAY,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtG,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAmC,CAAC;QAClE,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;YACvC,IAAI,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChF,aAAa,CAAC,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;YACzC,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,OAAO,IAAI,YAAY,IAAI,YAAY,CAAC,KAAK,IAAI,OAAO,YAAY,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7F,MAAM,MAAM,GAAG,YAAY,CAAC,KAAgC,CAAC;QAC7D,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC1E,aAAa,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YACtC,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,qBAAqB;YAC5B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,uCAAuC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC1E,CAAC,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,mBAAmB,GAAG,YAAY,CAAC,mBAAsE,CAAC;IAEhH,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,cAAc;YACrB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,wEAAwE;gBAChF,mFAAmF;gBACnF,8EAA8E;SAC/E,CAAC,CAAC;IACJ,CAAC;SAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,CAAC;QAChD,MAAM,OAAO,GAAI,YAAY,CAAC,KAAgC,EAAE,WAAW,IAAI,aAAa,CAAC;QAC7F,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACnE,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtF,IAAI,WAAW,KAAK,mBAAmB,CAAC,eAAe,EAAE,CAAC;gBACzD,yEAAyE;gBACzE,MAAM,eAAe,GAAa,EAAE,CAAC;gBACrC,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC3C,MAAM,eAAe,GAAmD;oBACvE,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;oBAC7D,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE;oBAC9D,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE;oBAC7D,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE;oBACzD,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE;iBAC5E,CAAC;gBACF,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,eAAe,EAAE,CAAC;oBACrD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;wBACtD,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAC/B,CAAC;gBACF,CAAC;gBAED,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC;oBAC7C,CAAC,CAAC,sBAAsB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBACrD,CAAC,CAAC,EAAE,CAAC;gBACN,MAAM,OAAO,GAAG,4GAA4G,WAAW,EAAE;oBACxI,kFAAkF;oBAClF,8EAA8E,CAAC;gBAEhF,IAAI,CAAC,IAAI,CAAC;oBACT,KAAK,EAAE,cAAc;oBACrB,QAAQ,EAAE,SAAS;oBACnB,OAAO;iBACP,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,IAAI,CAAC;gBACT,KAAK,EAAE,cAAc;gBACrB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,oEAAoE;aAC7E,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,2BAA2B;IAC3B,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAC/E,IAAI,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACJ,YAAY,CAAC,MAAM,EAAE,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAAE;gBACtD,GAAG;gBACH,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aACjC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,GAA2C,CAAC;YACtD,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC;oBACT,KAAK,EAAE,iBAAiB;oBACxB,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,8CAA8C;iBACvD,CAAC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACP,kFAAkF;gBAClF,gEAAgE;gBAChE,2EAA2E;gBAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACjE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;gBAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;gBAEnE,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;gBACjC,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAClC,MAAM,OAAO,GAAG,UAAU,GAAG,CAAC;oBAC7B,CAAC,CAAC,GAAG,UAAU,YAAY,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC7E,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAEpD,0EAA0E;gBAC1E,MAAM,YAAY,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;gBAEvD,qDAAqD;gBACrD,MAAM,gBAAgB,GAAa,EAAE,CAAC;gBACtC,KAAK,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,YAAY,EAAE,CAAC;oBACvD,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;wBACtB,gBAAgB,CAAC,IAAI,CAAC,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;oBACnD,CAAC;oBACD,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;wBACzB,gBAAgB,CAAC,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;oBACrD,CAAC;gBACF,CAAC;gBAED,iDAAiD;gBACjD,MAAM,eAAe,GAAG,CAAC,CAAC;gBAC1B,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,2BAA2B;gBACzF,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;gBAEzD,IAAI,OAAO,GAAG,oBAAoB,OAAO,EAAE,CAAC;gBAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,OAAO,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;wBACnB,OAAO,IAAI,eAAe,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC;oBAC5D,CAAC;gBACF,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC;oBACT,KAAK,EAAE,iBAAiB;oBACxB,QAAQ,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAM,OAAO;iBAC3D,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IAED,+EAA+E;IAC/E,6EAA6E;IAC7E,IAAI,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;IAEhD,8EAA8E;IAC9E,gEAAgE;IAChE,IAAI,CAAC,IAAI,CAAC,GAAG,2BAA2B,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;IAE3D,oFAAoF;IACpF,wCAAwC;IACxC,IAAI,SAAS,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,0DAA0D;IAC1D,wEAAwE;IACxE,IAAI,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;IAE9C,mDAAmD;IACnD,8DAA8D;IAC9D,IAAI,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,SAAS,IAAI,UAAU,CAAC,CAAC,CAAC;IAE5D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,MAAM,mBAAmB,CAAC;IAEvG,OAAO;QACN,KAAK;QACL,IAAI;QACJ,aAAa,EAAE,IAAI;QACnB,OAAO;KACP,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC7B,GAAW,EACX,MAA+B;IAE/B,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,MAAM,OAAO,GACX,MAAM,CAAC,KAA4C,EAAE,WAAW,IAAI,aAAa,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAExD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACJ,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;YACjC,IAAI,KAAK,GAAG,uBAAuB,EAAE,CAAC;gBACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;gBAC1D,IAAI,CAAC,IAAI,CAAC;oBACT,KAAK,EAAE,YAAY;oBACnB,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,GAAG,OAAO,iBAAiB,IAAI,mBAAmB,OAAO,sDAAsD;iBACxH,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,2BAA2B;QAC5B,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,6EAA6E;AAE7E;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAC1C,GAAW,EACX,UAAkB;IAElB,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAElF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE;YACtE,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SACjC,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACvB,mEAAmE;QACnE,sCAAsC;QACtC,MAAM,CAAC,GAAG,GAA0B,CAAC;QACrC,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM;SAClB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAEpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,0BAA0B;YACjC,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,4BAA4B,IAAI,gFAAgF;SACzH,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAUD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACrD,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAE7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,kBAAkB;YACzB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,+EAA+E;SACxF,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,QAA2B,CAAC;IAChC,IAAI,CAAC;QACJ,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAsB,CAAC;IACpF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,GAAY,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,kBAAkB;YACzB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,qCAAqC,CAAC,CAAC,OAAO,EAAE;SACzD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,kBAAkB;YACzB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,qEAAqE;SAC9E,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC;gBACT,KAAK,EAAE,kBAAkB;gBACzB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,wBAAwB,YAAY,kCAAkC;aAC/E,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YAC9C,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7E,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC;oBACT,KAAK,EAAE,kBAAkB;oBACzB,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,yBAAyB,YAAY,kCAAkC;iBAChF,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,IAAI,CAAC;gBACT,KAAK,EAAE,kBAAkB;gBACzB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,4BAA4B,YAAY,6BAA6B;aAC9E,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,UAAkB;IAC7D,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAEjF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,CAAC,2DAA2D;IACzE,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,kBAAkB,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE;YACxE,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SACjC,CAAC,CAAC;QACH,sDAAsD;QACtD,yDAAyD;QACzD,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC;oBACT,KAAK,EAAE,qBAAqB;oBAC5B,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,6BAA6B,IAAI,CAAC,IAAI,EAAE,qCAAqC;iBACtF,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,GAA2C,CAAC;QACtD,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACjE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC;oBACT,KAAK,EAAE,qBAAqB;oBAC5B,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,6BAA6B,IAAI,CAAC,IAAI,EAAE,qCAAqC;iBACtF,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACrD,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAEzE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,CAAC,+BAA+B;IAC7C,CAAC;IAED,IAAI,CAAC;QACJ,YAAY,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE;YAC7D,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SACjC,CAAC,CAAC;QACH,gDAAgD;IACjD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,GAA2C,CAAC;QACtD,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC;gBACT,KAAK,EAAE,yBAAyB;gBAChC,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,2BAA2B,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aAC1D,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/extensions/forgecli/hook-dispatcher.d.ts

@@ -26,8 +26,32 @@ export interface SprintCollateCompleteEvent {
     /** Absolute path to the project root (process.cwd() at emit time). */
     cwd: string;
 }
+/**
+ * Payload for the migration-applied synthetic event (FORGE-S23-T01).
+ *
+ * Emitted by forge-update-command.ts after runMigrations() completes
+ * successfully. Enables future hook handlers to react to migration completion
+ * (e.g. trigger /forge:health checks, update-check resets).
+ *
+ * NOTE: No emitSyntheticEvent call is wired in this task — the event type is
+ * added to the union for forward compatibility. The interim emit path uses
+ * `store-cli emit SYS-migration` directly from forge-update-command.ts.
+ * event.schema.json is NOT modified in this task (system-migration type deferred
+ * to a follow-on task per PLAN.md §1D).
+ */
+export interface MigrationAppliedEvent {
+    type: "migration-applied";
+    /** Version the user was running before migration */
+    fromVersion: string;
+    /** Version the user upgraded to */
+    toVersion: string;
+    /** Number of migration entries applied */
+    appliedCount: number;
+    /** Absolute path to the project root */
+    cwd: string;
+}
 /** Union of all synthetic event payloads. Extend here as new events are added. */
-export type SyntheticEvent = InitCompleteEvent | SprintCollateCompleteEvent;
+export type SyntheticEvent = InitCompleteEvent | SprintCollateCompleteEvent | MigrationAppliedEvent;
 /**
  * Handler signature for synthetic events.
  * ctx is the ExtensionCommandContext of the emitting phase — callers must

package/dist/extensions/forgecli/hook-dispatcher.js

@@ -1,4 +1,4 @@
-// Pi-runtime hook adapter — FORGE-S18-T02 / FORGE-S18-T03 / FORGE-S21-T04
+// Pi-runtime hook adapter — FORGE-S18-T02 / FORGE-S18-T03 / FORGE-S21-T04 / FORGE-S23-T02 / FORGE-S23-T03
 //
 // Wires Forge's hook semantics onto pi's tool_call / tool_result events.
 // T02: Provides audit-only observation scaffolding.
@@ -8,6 +8,11 @@
 // T04: Adds typed synthetic event taxonomy (InitCompleteEvent) with
 //      onSyntheticEvent / emitSyntheticEvent for in-process hook dispatch
 //      that bridges deterministic TS handler phases to registered hook handlers.
+// T02 (S23): Adds full FS-level write-boundary schema guard via write-guard.ts —
+//      validates Write/Edit tool calls targeting .forge/store/**/*.json and
+//      .forge/config.json against Forge JSON schemas. Composed after two-layer-guard.
+// T03 (S23): Adds triage-error hook — on Bash tool_result with isError=true and a
+//      Forge-related command, injects ctx.ui.notify suggesting /forge:report-bug.
 //
 // Audit logging: set FORGE_HOOK_AUDIT=1 to write to .forge/logs/hooks.log.
 // In enforcement mode (default): violations are blocked.
@@ -16,10 +21,17 @@
 // --force scope:
 //   When --force is present in store-cli argv, transition-guard is bypassed.
 //   store-validator still runs — a malformed payload is always invalid.
+//
+// Write-guard bypass:
+//   FORGE_SKIP_WRITE_VALIDATION=1 bypasses checkWriteGuard for one turn.
+//   The write-guard itself handles this env var; hook-dispatcher defers to it.
 import { appendFileSync, mkdirSync } from "node:fs";
 import * as path from "node:path";
-import { isToolCallEventType } from "@earendil-works/pi-coding-agent";
+import { isBashToolResult, isToolCallEventType } from "@earendil-works/pi-coding-agent";
 import { checkTwoLayerBoundary } from "./hooks/two-layer-guard.js";
+import { applyPiEdits, checkWriteGuard } from "./hooks/write-guard.js";
+import { buildTriageMessage, isForgeRelated } from "./hooks/triage-error.js";
+import { matchForgePermission } from "./hooks/forge-permissions.js";
 import { validateStoreCLIPayload } from "./store-validator.js";
 import { checkTransition } from "./transition-guard.js";
 // Module-level registry. Pi extension processes are single-session; the
@@ -222,20 +234,87 @@ export function registerHookDispatcher(pi, forgeRoot) {
     // ── tool_call: fires before any tool executes ─────────────────────────────
     pi.on("tool_call", (event) => {
         appendAudit(logsDir, `[tool_call] toolName=${event.toolName} toolCallId=${event.toolCallId}`);
+        // ── Forge-permission auto-allow (FORGE-S23-T04) ───────────────────────
+        // Port of forge-permissions.js pattern-match logic. Pi has no PermissionRequest
+        // event, so matched patterns silently return undefined (no block) from the
+        // tool_call handler.
+        //
+        // Bash match:  full short-circuit — skip all downstream bash handling.
+        // Write/Edit:  skip two-layer-guard (sets skipTwoLayerGuard=true), but
+        //              FALL THROUGH to write-guard schema check (AC#4: an allowed
+        //              write to .forge/store/ that fails schema is still blocked).
+        //
+        // Security: this guard can only ALLOW, never DENY. Patterns are ported
+        // verbatim from forge-permissions.js including the node -e exclusion.
+        //
+        // Important: bash commands targeting store-cli.cjs must NOT be short-circuited
+        // here — they need to fall through to the store-cli schema/transition validation
+        // below. The node-tool BASH_PATTERN matches store-cli.cjs invocations, but the
+        // security invariant is: store-cli payloads are always validated against schema,
+        // regardless of permission match. Skip forge-permissions for store-cli commands.
+        if (isToolCallEventType("bash", event)) {
+            const bashCmd = event.input.command ?? "";
+            if (!bashCmd.includes("store-cli.cjs")) {
+                const bashRule = matchForgePermission("bash", { command: bashCmd });
+                if (bashRule !== null) {
+                    appendAudit(logsDir, `[forge-permissions] allowed bash: ${bashRule}`);
+                    return undefined;
+                }
+            }
+        }
+        let skipTwoLayerGuard = false;
+        if (isToolCallEventType("write", event) || isToolCallEventType("edit", event)) {
+            const filePath = event.input.path ?? "";
+            const writeRule = matchForgePermission(event.toolName, { path: filePath });
+            if (writeRule !== null) {
+                appendAudit(logsDir, `[forge-permissions] allowed ${event.toolName}: ${writeRule}`);
+                skipTwoLayerGuard = true;
+            }
+        }
         // ── Two-layer boundary guard (FORGE-S20-T07) ───────────────────────────
         // Reject any write/edit whose target path resolves under
         // <cwd>/forge/forge/meta/. Two-layer rule: fixes to Forge itself go
         // through forge-engineer/forge-bugfixer against forge/, not via
         // forge-cli runtime edits. FORGE_HOOK_AUDIT=1 logs but never blocks.
+        // Skipped when forge-permissions already matched the path (skipTwoLayerGuard=true).
         if (isToolCallEventType("write", event) || isToolCallEventType("edit", event)) {
-            const verdict = checkTwoLayerBoundary(event.input.path, process.cwd());
-            if (!verdict.allowed) {
-                appendAudit(logsDir, `[two-layer-guard] decision=would-block path=${verdict.resolvedPath} reason=${verdict.reason}`);
+            if (!skipTwoLayerGuard) {
+                const verdict = checkTwoLayerBoundary(event.input.path, process.cwd());
+                if (!verdict.allowed) {
+                    appendAudit(logsDir, `[two-layer-guard] decision=would-block path=${verdict.resolvedPath} reason=${verdict.reason}`);
+                    if (auditEnabled()) {
+                        return undefined;
+                    }
+                    return { block: true, reason: verdict.reason };
+                }
+            }
+            // ── Write-boundary schema guard (FORGE-S23-T02) ─────────────────────
+            // After two-layer passes (or is skipped), validate the post-write contents
+            // against the Forge schema for the target path. Always runs regardless of
+            // skipTwoLayerGuard — AC#4: an allowed write to .forge/store/ that fails
+            // schema is still blocked. Only applies to .forge/store/** and
+            // .forge/config.json paths (registry-matched). Fail-open on internal errors.
+            // FORGE_SKIP_WRITE_VALIDATION=1 bypasses.
+            const resolvedPath = path.resolve(process.cwd(), event.input.path);
+            let postContents;
+            if (isToolCallEventType("write", event)) {
+                postContents = typeof event.input.content === "string" ? event.input.content : "";
+            }
+            else {
+                // Edit event: apply pi edits array to current file contents
+                const editsInput = event.input.edits;
+                const edits = Array.isArray(editsInput) ? editsInput : [];
+                postContents = applyPiEdits(resolvedPath, edits);
+            }
+            const guardResult = checkWriteGuard(resolvedPath, postContents, forgeRoot);
+            if (guardResult.block) {
+                appendAudit(logsDir, `[write-guard] decision=would-block path=${resolvedPath} reason=${guardResult.reason ?? "schema violation"}`);
                 if (auditEnabled()) {
                     return undefined;
                 }
-                return { block: true, reason: verdict.reason };
+                return { block: true, reason: guardResult.reason };
             }
+            appendAudit(logsDir, `[write-guard] decision=would-allow path=${resolvedPath}`);
         }
         // Bash interception: identify store-cli write/update-status calls.
         if (isToolCallEventType("bash", event)) {
@@ -256,7 +335,7 @@ export function registerHookDispatcher(pi, forgeRoot) {
                             // Audit mode: log and allow.
                             return undefined;
                         }
-                        return { block: true, reason: validation.reason };
+                        return { block: true, reason: validation.remediation || validation.reason };
                     }
                     appendAudit(logsDir, `[store-cli-intercept] decision=would-allow`);
                 }
@@ -280,7 +359,9 @@ export function registerHookDispatcher(pi, forgeRoot) {
                             if (auditEnabled()) {
                                 return undefined;
                             }
-                            return { block: true, reason: guard.reason };
+                            // Add remediation command to transition error (forge-cli#24)
+                            const transitionHint = `\n  → node "$FORGE_ROOT/tools/store-cli.cjs" update-status ${intercept.entity} ${payloadRecord.entityId} status <legal-value>\n  Or add --force to bypass transition guard.`;
+                            return { block: true, reason: guard.reason + transitionHint };
                         }
                         appendAudit(logsDir, `[store-cli-intercept] decision=would-allow`);
                     }
@@ -292,10 +373,26 @@ export function registerHookDispatcher(pi, forgeRoot) {
         }
         return undefined;
     });
-    // ── tool_result: fires after any tool completes (observe-only) ──────────────
-    pi.on("tool_result", (event) => {
+    // ── tool_result: fires after any tool completes ───────────────────────────
+    pi.on("tool_result", (event, ctx) => {
         appendAudit(logsDir, `[tool_result] toolName=${event.toolName} toolCallId=${event.toolCallId}`);
-        // Audit-only in T02 — return void (no result replacement).
+        // ── Triage-error: post-Bash-failure context injection (FORGE-S23-T03) ──
+        // When a Bash command exits non-zero and matches Forge-related patterns,
+        // notify the user to file a bug via /forge:report-bug.
+        if (isBashToolResult(event) && event.isError) {
+            const command = typeof event.input.command === "string" ? event.input.command : "";
+            if (isForgeRelated(command)) {
+                const snippet = event.content
+                    .filter((c) => c.type === "text")
+                    .map((c) => c.text)
+                    .join("")
+                    .split("\n")
+                    .slice(0, 3)
+                    .join(" ")
+                    .trim();
+                ctx.ui.notify(buildTriageMessage(command, snippet), "warning");
+            }
+        }
     });
 }
 //# sourceMappingURL=hook-dispatcher.js.map