@entelligentsia/forgecli 1.0.2 → 1.0.3

package/CHANGELOG.md

@@ -7,6 +7,29 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.0.3] — 2026-05-28
+
+### Fixed
+
+- **FORGE-BUG-040 (critical) — `/forge:fix-bug` triage subagent received the orchestrator-only `fix_bug.md` body and executed the full bug lifecycle in one phase.** `BUG_PHASES` wiring corrected: `triage → triage`, `plan-fix → plan_task`, `implement → implement_plan` (previously all three pointed at `fix_bug`). The compensating materialization-skip wrapper and audience-bypass clause are deleted; the audience gate now runs uniformly for every BUG phase. Pairs with plugin v1.0.3 (coordinated release). Closes Entelligentsia/forge#110.
+
+### Added
+
+- `subagent/phase-guard.ts` — tool-boundary phase-ownership enforcement (`assertPhaseOwnership`, `assertBugStatusOwnership`, `assertOrchestratorOnlyEmit`, `PhaseOwnershipError`). Wired into `forge_preflight` and the four bug-mutating `forge_store` verbs (`set-bug-summary`, `set-summary`, `update-status bug`, `emit`). Subagent callers attempting cross-phase calls are rejected with a structured error; orchestrator callers are unaffected.
+- `subagent/phase-summary-map.ts` — single-source `BUG_SUMMARY_KEY_BY_ROLE` (hoisted out of `fix-bug.ts` to break a `forge-tools → phase-guard → fix-bug → forge-tools` circular import). `fix-bug.ts` re-exports for backwards compatibility.
+- `@entelligentsia/forge-compress` integration (pre-approved separate work bundled in this release) — `compressWithTelemetry` wraps `forge_store` read/list, `forge_validate_store`, and `forge_store_query` results; `cumCompression` surfaced in phase summaries.
+
+### Changed
+
+- `CallerContext` extended from string union to discriminated union: `{ kind: "orchestrator" } | { kind: "subagent"; phase: PhaseRole }`. `CallerContextStore.asSubagent(phase, fn)` requires a `PhaseRole` argument — this is now the single setter of phase context for any subagent dispatch.
+- `fix-bug.ts` and `run-task.ts` phase loops wrap `runForgeSubagent(...)` in `CallerContextStore.asSubagent(phase.role, ...)`. Task-mode pipelines are protected against the same defect class.
+- `composeBugBody` triage hint trimmed — route-field requirement and Path A/B criteria now live natively in `triage.md`.
+- **Per-iteration subagent transcripts (FORGE-BUG-040 follow-up).** The per-subagent transcript filename now carries an ISO-compact timestamp prefix (`<ISO>__<entity>__<phase>.json`) so successive dispatches of the same phase during review loops (`plan → review → plan → review`) all persist instead of overwriting. Directory listings sort chronologically by default. Payload schema gains `startedAt` + `finishedAt` (replacing the prior single `timestamp` field).
+
+### Added (additional)
+
+- **Orchestrator transcript (FORGE-BUG-040 follow-up).** New JSONL log per pipeline run capturing `pipeline-start`, `phase-start`, `phase-end`, `phase-loopback`, `pipeline-end` events plus every `ctx.ui.notify` line teed from the orchestrator. Written to `.forge/transcripts/<entity>/<ISO>__<entity>__orchestrator.jsonl`. Wired into both `runBugPipeline` (`fix-bug.ts`) and `runTaskPipeline` (`run-task.ts`) with a `try/finally` so the notify wrapper is always restored. New module: `subagent/orchestrator-transcript.ts` (`OrchestratorTranscriptWriter` class + `OrchestratorEvent` discriminated union).
+
 ## [1.0.0] — 2026-05-26
 
 ### Breaking Changes

package/dist/CHANGELOG-forge-plugin.md

@@ -5,6 +5,30 @@ Format: newest first. Breaking changes are marked **△ Breaking**.
 
 ---
 
+## [1.0.3] — 2026-05-28
+
+### Fixed
+
+- **FORGE-BUG-040 (critical) — `/forge:fix-bug` triage subagent received the orchestrator-only `fix_bug.md` body and executed the entire bug lifecycle in one phase, bypassing review/approve/commit gates.** The fix splits triage into a phase-scoped subagent workflow (new `triage.md` generated from `meta-bug-triage.md`) and corrects forge-cli's `BUG_PHASES` wiring (forge-cli v1.0.3 must be paired). Users on `forge@1.0.0–1.0.2` + `@entelligentsia/forgecli@1.0.0–1.0.2` were running with a non-functional `/forge:fix-bug` pipeline. Closes Entelligentsia/forge#110.
+
+### Added
+
+- `meta/workflows/meta-bug-triage.md` — phase-scoped triage subagent workflow (`audience: subagent`, `phase: triage`) with the four required `checkMaterialization` markers and an explicit "triage NEVER writes `bug.status`" Iron Law.
+- `init/base-pack/workflows/triage.md` — generated.
+- `meta/fragments/tool-discipline.md` — new "Data boundaries" section enumerating paths owned by `forge_store`, `forge_artifact`, and `forge_collate`.
+- `tools/artifact.cjs` — three new `ARTIFACT_CATALOG` entries: `task-prompt`, `sprint-requirements`, `sprint-completion-review`.
+
+### Changed
+
+- `meta/workflows/meta-fix-bug.md` — § 2. Triage and § Triage Judgement trimmed; orchestrator now references `triage.md`. Route-reading retained.
+- `init/smoke-test.md` — dropped hard-coded "18 workflows" count.
+
+### Migration
+
+`1.0.2 → 1.0.3` regenerates `workflows:triage` (new) and `workflows:fix_bug` (regenerated). `breaking: false`. No FSM, schema, or store-record changes; in-flight bugs resume correctly on next `/forge:fix-bug` invocation.
+
+---
+
 ## [1.0.0] — 2026-05-26
 
 **v1.0 DevX Overhaul (FORGE-S26) — coordinated release with forge-cli v1.0.0.**

package/dist/extensions/forgecli/audience-gate.js

@@ -36,7 +36,7 @@ export function assertAudience(input, ctx) {
     if (audience === "any")
         return true;
     // "orchestrator-only" — allowed only from orchestrator context.
-    if (audience === "orchestrator-only" && callerContext === "subagent") {
+    if (audience === "orchestrator-only" && callerContext.kind === "subagent") {
         ctx.ui.notify(`× workflow ${workflowName} is orchestrator-only; cannot run from subagent context — forge-cli internal error if you did not run it as a subagent`, "error");
         return false;
     }

package/dist/extensions/forgecli/audience-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"audience-gate.js","sourceRoot":"","sources":["../../../src/extensions/forgecli/audience-gate.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,oEAAoE;AACpE,EAAE;AACF,iEAAiE;AACjE,+EAA+E;AAC/E,EAAE;AACF,aAAa;AACb,8DAA8D;AAC9D,wEAAwE;AACxE,4CAA4C;AAC5C,0EAA0E;AAK1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAGlE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AASlE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,cAAc,CAAC,KAAyB,EAAE,GAA4B;IACrF,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACzC,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,kBAAkB,CAAC,GAAG,EAAE,CAAC;IAEtE,gDAAgD;IAChD,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAEpC,gEAAgE;IAChE,IAAI,QAAQ,KAAK,mBAAmB,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACtE,GAAG,CAAC,EAAE,CAAC,MAAM,CACZ,cAAc,YAAY,wHAAwH,EAClJ,OAAO,CACP,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IAED,uDAAuD;IACvD,+EAA+E;IAC/E,4EAA4E;IAC5E,mDAAmD;IACnD,OAAO,IAAI,CAAC;AACb,CAAC"}
+{"version":3,"file":"audience-gate.js","sourceRoot":"","sources":["../../../src/extensions/forgecli/audience-gate.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,oEAAoE;AACpE,EAAE;AACF,iEAAiE;AACjE,+EAA+E;AAC/E,EAAE;AACF,aAAa;AACb,8DAA8D;AAC9D,wEAAwE;AACxE,4CAA4C;AAC5C,0EAA0E;AAK1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAGlE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AASlE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,cAAc,CAAC,KAAyB,EAAE,GAA4B;IACrF,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACzC,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,kBAAkB,CAAC,GAAG,EAAE,CAAC;IAEtE,gDAAgD;IAChD,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAEpC,gEAAgE;IAChE,IAAI,QAAQ,KAAK,mBAAmB,IAAI,aAAa,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC3E,GAAG,CAAC,EAAE,CAAC,MAAM,CACZ,cAAc,YAAY,wHAAwH,EAClJ,OAAO,CACP,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IAED,uDAAuD;IACvD,+EAA+E;IAC/E,4EAA4E;IAC5E,mDAAmD;IACnD,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/extensions/forgecli/fix-bug.d.ts

@@ -3,7 +3,7 @@ import { type ForgeToolDefs } from "./forge-tools.js";
 import { type PhaseDescriptor } from "./run-task.js";
 import { getSessionRegistry } from "./session-registry.js";
 export declare const BUG_PHASES: PhaseDescriptor[];
-export declare const BUG_SUMMARY_KEY_BY_ROLE: Record<string, string | null>;
+export { BUG_SUMMARY_KEY_BY_ROLE } from "./subagent/phase-summary-map.js";
 export declare const BUG_TYPE_TOKENS: Record<string, {
     pass: string;
     fail: string;
@@ -83,4 +83,3 @@ export interface RegisterFixBugOptions {
     forgeToolDefs?: ForgeToolDefs;
 }
 export declare function registerFixBug(pi: ExtensionAPI, options?: RegisterFixBugOptions): void;
-export {};