@ipul-labs/forge 1.16.8 → 1.17.0

package/lib/server/forge/core/quotaClient.js

@@ -0,0 +1,88 @@
+/**
+ * server/forge/core/quotaClient.js
+ *
+ * One-off probe of the Anthropic Messages API to read the plan-level
+ * rate-limit headers. Used by the "Refresh quota" button in the UsageWidget.
+ *
+ * The rest of Forge still runs through `claude` CLI (subscription billing);
+ * this probe is the only place that spends API credits, and only when the
+ * user explicitly asks for it. Cost is negligible — one request with
+ * `max_tokens=1` against Haiku.
+ */
+const PROBE_MODEL = "claude-haiku-4-5-20251001";
+function num(v) {
+    const n = Number(v);
+    return Number.isFinite(n) ? n : null;
+}
+/**
+ * @param {Headers} headers
+ * @returns {null | {
+ *   tokensLimit: number|null,
+ *   tokensRemaining: number|null,
+ *   tokensReset: string|null,
+ *   requestsLimit: number|null,
+ *   requestsRemaining: number|null,
+ *   requestsReset: string|null,
+ * }}
+ */
+export function parseRateLimit(headers) {
+    const rl = {
+        tokensLimit: num(headers.get("anthropic-ratelimit-tokens-limit")),
+        tokensRemaining: num(headers.get("anthropic-ratelimit-tokens-remaining")),
+        tokensReset: headers.get("anthropic-ratelimit-tokens-reset") ?? null,
+        requestsLimit: num(headers.get("anthropic-ratelimit-requests-limit")),
+        requestsRemaining: num(headers.get("anthropic-ratelimit-requests-remaining")),
+        requestsReset: headers.get("anthropic-ratelimit-requests-reset") ?? null,
+    };
+    const any = rl.tokensLimit !== null ||
+        rl.tokensRemaining !== null ||
+        rl.tokensReset ||
+        rl.requestsLimit !== null ||
+        rl.requestsRemaining !== null ||
+        rl.requestsReset;
+    return any ? rl : null;
+}
+/**
+ * Fires one minimal Messages API request and returns the rate-limit snapshot
+ * from the response headers.
+ *
+ * @throws if ANTHROPIC_API_KEY is not configured, or the API rejects us.
+ */
+export async function probeQuota() {
+    if (!process.env.ANTHROPIC_API_KEY) {
+        const err = Object.assign(new Error("Quota check requires ANTHROPIC_API_KEY to be set. Add it to your .env."), { status: 400 });
+        throw err;
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), 10_000);
+    let res;
+    try {
+        res = await fetch("https://api.anthropic.com/v1/messages", {
+            method: "POST",
+            headers: {
+                "x-api-key": process.env.ANTHROPIC_API_KEY,
+                "anthropic-version": "2023-06-01",
+                "content-type": "application/json",
+            },
+            body: JSON.stringify({
+                model: PROBE_MODEL,
+                max_tokens: 1,
+                messages: [{ role: "user", content: "." }],
+            }),
+            signal: controller.signal,
+        });
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    // Rate-limit headers are present even on 4xx/5xx responses, so grab them
+    // before deciding whether to throw.
+    const rateLimit = parseRateLimit(res.headers);
+    if (!res.ok) {
+        const text = await res.text().catch(() => "");
+        const err = Object.assign(new Error(`Anthropic API ${res.status}: ${text.slice(0, 300)}`), { status: res.status, rateLimit });
+        throw err;
+    }
+    return { rateLimit, checkedAt: new Date().toISOString() };
+}
+//# sourceMappingURL=quotaClient.js.map

package/lib/server/forge/core/quotaClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quotaClient.js","sourceRoot":"","sources":["../../../../server/forge/core/quotaClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAEhD,SAAS,GAAG,CAAC,CAAgB;IAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC9C,MAAM,EAAE,GAAG;QACV,WAAW,EAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QACvE,eAAe,EAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QAC3E,WAAW,EAAQ,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,IAAI,IAAI;QAC1E,aAAa,EAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QACzE,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QAC7E,aAAa,EAAM,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,IAAI,IAAI;KAC5E,CAAC;IACF,MAAM,GAAG,GACR,EAAE,CAAC,WAAW,KAAK,IAAI;QACvB,EAAE,CAAC,eAAe,KAAK,IAAI;QAC3B,EAAE,CAAC,WAAW;QACd,EAAE,CAAC,aAAa,KAAK,IAAI;QACzB,EAAE,CAAC,iBAAiB,KAAK,IAAI;QAC7B,EAAE,CAAC,aAAa,CAAC;IAClB,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CACxB,IAAI,KAAK,CAAC,wEAAwE,CAAC,EACnF,EAAE,MAAM,EAAE,GAAG,EAAE,CACf,CAAC;QACF,MAAM,GAAG,CAAC;IACX,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAE3D,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACJ,GAAG,GAAG,MAAM,KAAK,CAAC,uCAAuC,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;gBAC1C,mBAAmB,EAAE,YAAY;gBACjC,cAAc,EAAE,kBAAkB;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,KAAK,EAAE,WAAW;gBAClB,UAAU,EAAE,CAAC;gBACb,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;aAC1C,CAAC;YACF,MAAM,EAAE,UAAU,CAAC,MAAM;SACzB,CAAC,CAAC;IACJ,CAAC;YAAS,CAAC;QACV,YAAY,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,yEAAyE;IACzE,oCAAoC;IACpC,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAE9C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CACxB,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,EAC/D,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,CACjC,CAAC;QACF,MAAM,GAAG,CAAC;IACX,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AAC3D,CAAC"}

package/lib/server/forge/core/types.d.ts

@@ -0,0 +1,160 @@
+export interface ForgeChange {
+    file: string;
+    action: "create" | "modify" | "delete";
+    original?: string;
+    proposed?: string;
+    summary?: string;
+    repo?: string;
+}
+export interface AnalysisResult {
+    issue: {
+        iid: number;
+        title: string;
+        description?: string | null;
+    };
+    mrTitle?: string;
+    explanation: string;
+    reasoning: string;
+    changes: ForgeChange[];
+    repos: string[];
+}
+export interface ApplicationResult {
+    repo: string;
+    branchName: string;
+    mr: {
+        iid: number;
+        web_url: string;
+        title: string;
+    } | null;
+    pipelineUrl: string | null;
+}
+export interface ForgeEvent {
+    type: string;
+    step?: string;
+    message?: string;
+    data?: AnalysisResult | Record<string, unknown>;
+    cost?: number;
+    inputTokens?: number;
+    outputTokens?: number;
+    cacheCreationTokens?: number;
+    cacheReadTokens?: number;
+    serviceTier?: string;
+    sessionId?: string;
+    rateLimit?: unknown;
+    resumed?: boolean;
+    text?: string;
+    status?: string;
+    passed?: boolean;
+    exitCode?: number;
+    durationMs?: number;
+    tail?: string;
+    repo?: string;
+    projectType?: string;
+    stepOrder?: string[];
+    fixableSteps?: string[];
+    allPassed?: boolean;
+    checkedAt?: string;
+    files?: Array<{
+        file: string;
+        proposed: string;
+    }>;
+}
+export interface ClaudeResult {
+    data: Record<string, unknown>;
+    cost: number;
+    serviceTier: string;
+    inputTokens: number;
+    outputTokens: number;
+    cacheCreationTokens: number;
+    cacheReadTokens: number;
+    sessionId?: string;
+}
+/**
+ * The flattened result returned by public agent functions (checkResolution,
+ * identifyRelevantFiles, proposeFix, refineOrAsk). The parsed JSON data
+ * is spread into the top level alongside the metadata fields.
+ */
+export interface AgentResponse extends Record<string, unknown> {
+    cost: number;
+    serviceTier: string;
+    inputTokens: number;
+    outputTokens: number;
+    cacheCreationTokens: number;
+    cacheReadTokens: number;
+    sessionId?: string;
+}
+export interface RunCmdResult {
+    code: number;
+    output: string;
+    error: string | null;
+}
+export interface JobRecord {
+    id: string;
+    type: string;
+    status: "running" | "done" | "error" | "cancelled";
+    events: ForgeEvent[];
+    doneResult: unknown;
+    error: string | null;
+    createdAt: number;
+    finishedAt: number | null;
+    expiresAt: number | null;
+    subscribers: Set<(event: ForgeEvent) => void>;
+    controller: AbortController;
+    meta: Record<string, unknown>;
+}
+export interface JobSnapshot {
+    id: string;
+    type: string;
+    status: string;
+    createdAt: number;
+    finishedAt: number | null;
+    error: string | null;
+    eventCount: number;
+    meta: Record<string, unknown>;
+}
+export interface ForgeRepo {
+    id: string;
+    label: string;
+}
+export interface ForgeConfig {
+    repos: ForgeRepo[];
+    defaults: {
+        model: string | null;
+        agent: string | null;
+        autoPushOnValidatePass: boolean;
+        refineRepoAccess: boolean;
+        promptRules: string;
+        testDeployUrlTemplate?: string;
+        cliTimeout?: number;
+    };
+    connections: {
+        gitlab: {
+            token: string;
+            baseUrl: string;
+        };
+        github: {
+            token: string;
+            owner: string;
+            repo: string;
+            baseBranch: string;
+        };
+        azuredevops: {
+            token: string;
+            org: string;
+            project: string;
+            repo: string;
+            baseBranch: string;
+        };
+    };
+}
+export interface ValidationStepResult {
+    step: string;
+    passed: boolean;
+    output?: string;
+}
+export interface ValidationResult {
+    passed: boolean;
+    steps: ValidationStepResult[];
+    logs: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/server/forge/core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../server/forge/core/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC9B,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3D,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAc,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC;IACnD,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC,CAAC;IAC9C,UAAU,EAAE,eAAe,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,SAAS;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC3B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,QAAQ,EAAE;QACT,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,sBAAsB,EAAE,OAAO,CAAC;QAChC,gBAAgB,EAAE,OAAO,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,WAAW,EAAE;QACZ,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3C,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3E,WAAW,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/F,CAAC;CACF;AAED,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAChC,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC9B,IAAI,EAAE,MAAM,EAAE,CAAC;CACf"}

package/lib/server/forge/core/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/lib/server/forge/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../server/forge/core/types.ts"],"names":[],"mappings":""}

package/lib/server/forge/core/validator/attribute.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Auto-attribution: figure out which configured repo a proposed change
+ * actually belongs to.
+ *
+ * Uses the SCM provider's `getFileContent` as a cheap remote existence check
+ * — no clone needed. We only fall back to the model's `c.repo` for `create`
+ * actions where the file doesn't yet exist anywhere. The result: only repos
+ * that actually own at least one change end up in the validation plan, and
+ * we never clone a repo that won't be validated.
+ */
+import type { ForgeChange, ForgeEvent } from "../types.ts";
+/**
+ * Convenience wrapper: returns a flat list of changes with their `repo`
+ * field rewritten to the auto-detected target. Used by callers (ForgeAgent's
+ * apply/commit/deploy paths) that want a corrected change list rather than
+ * the per-repo grouping the validator needs.
+ *
+ * @returns {Promise<{ changes: object[], unattributed: object[] }>}
+ */
+export declare function reattributeChanges(changes: ForgeChange[], candidates: string[]): Promise<{
+    changes: any[];
+    unattributed: ForgeChange[];
+}>;
+/**
+ * @returns {Promise<{ byRepo: Map<string, object[]>, unattributed: object[] }>}
+ */
+export declare function attributeChanges(changes: ForgeChange[], candidates: string[], emit?: (event: ForgeEvent) => void): Promise<{
+    byRepo: Map<any, any>;
+    unattributed: ForgeChange[];
+}>;
+//# sourceMappingURL=attribute.d.ts.map

package/lib/server/forge/core/validator/attribute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attribute.d.ts","sourceRoot":"","sources":["../../../../../server/forge/core/validator/attribute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAe3D;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;;;GAOpF;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAe;;;GAyChI"}

package/lib/server/forge/core/validator/attribute.js

@@ -0,0 +1,82 @@
+/**
+ * Auto-attribution: figure out which configured repo a proposed change
+ * actually belongs to.
+ *
+ * Uses the SCM provider's `getFileContent` as a cheap remote existence check
+ * — no clone needed. We only fall back to the model's `c.repo` for `create`
+ * actions where the file doesn't yet exist anywhere. The result: only repos
+ * that actually own at least one change end up in the validation plan, and
+ * we never clone a repo that won't be validated.
+ */
+import { createProvider } from "../providers/index.js";
+async function existsRemote(provider, file) {
+    try {
+        await provider.getFileContent(file);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Convenience wrapper: returns a flat list of changes with their `repo`
+ * field rewritten to the auto-detected target. Used by callers (ForgeAgent's
+ * apply/commit/deploy paths) that want a corrected change list rather than
+ * the per-repo grouping the validator needs.
+ *
+ * @returns {Promise<{ changes: object[], unattributed: object[] }>}
+ */
+export async function reattributeChanges(changes, candidates) {
+    const { byRepo, unattributed } = await attributeChanges(changes, candidates);
+    const out = [];
+    for (const [repo, list] of byRepo) {
+        for (const c of list)
+            out.push({ ...c, repo });
+    }
+    return { changes: out, unattributed };
+}
+/**
+ * @returns {Promise<{ byRepo: Map<string, object[]>, unattributed: object[] }>}
+ */
+export async function attributeChanges(changes, candidates, emit = () => { }) {
+    const providers = new Map();
+    for (const repo of candidates) {
+        try {
+            providers.set(repo, createProvider(repo));
+        }
+        catch (err) {
+            emit({ type: "log", message: `Couldn't build provider for ${repo}: ${err?.message ?? err}` });
+        }
+    }
+    const byRepo = new Map();
+    const unattributed = [];
+    for (const c of changes ?? []) {
+        let target = null;
+        if (c.action === "modify" || c.action === "delete") {
+            emit({ type: "log", message: `Locating ${c.file}…` });
+            for (const [repo, provider] of providers) {
+                if (await existsRemote(provider, c.file)) {
+                    target = repo;
+                    emit({ type: "log", message: `  → ${repo}` });
+                    break;
+                }
+            }
+        }
+        else if (c.action === "create") {
+            // New file — no remote evidence to consult. Honour the model's
+            // attribution if it points to a real candidate.
+            if (c.repo && candidates.includes(c.repo))
+                target = c.repo;
+        }
+        if (target) {
+            const list = byRepo.get(target) ?? [];
+            list.push(c);
+            byRepo.set(target, list);
+        }
+        else {
+            unattributed.push(c);
+        }
+    }
+    return { byRepo, unattributed };
+}
+//# sourceMappingURL=attribute.js.map

package/lib/server/forge/core/validator/attribute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attribute.js","sourceRoot":"","sources":["../../../../../server/forge/core/validator/attribute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAOvD,KAAK,UAAU,YAAY,CAAC,QAAqB,EAAE,IAAY;IAC9D,IAAI,CAAC;QACJ,MAAM,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAsB,EAAE,UAAoB;IACpF,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAsB,EAAE,UAAoB,EAAE,OAAoC,GAAG,EAAE,GAAE,CAAC;IAChI,MAAM,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC;YACJ,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,IAAI,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;IACF,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;IACzB,MAAM,YAAY,GAAG,EAAE,CAAC;IAExB,KAAK,MAAM,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QAC/B,IAAI,MAAM,GAAG,IAAI,CAAC;QAElB,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpD,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;YACtD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1C,IAAI,MAAM,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,MAAM,GAAG,IAAI,CAAC;oBACd,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;oBAC9C,MAAM;gBACP,CAAC;YACF,CAAC;QACF,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClC,+DAA+D;YAC/D,gDAAgD;YAChD,IAAI,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC;QAC5D,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACP,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AACjC,CAAC"}

package/lib/server/forge/core/validator/clone.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Cache + clone management for the validator's per-repo workspaces.
+ *
+ *   ensureClone(repo, branchName, emit)
+ *     - Lazily clones into ~/.forge/cache/<repo>/ (or FORGE_VALIDATE_CACHE).
+ *     - Always fetch + reset to origin/main, then check out a stable per-issue
+ *       branch so validation runs are deterministic and old overlays can't
+ *       linger across runs.
+ *     - GitLab-only for v1; GitHub / Azure DevOps raise a clear error.
+ *     - Emits clone-step progress / log / step_result events.
+ */
+import type { ForgeEvent } from "../types.ts";
+export declare function ensureClone(repo: string, branchName: string, emit: (event: ForgeEvent) => void): Promise<string>;
+//# sourceMappingURL=clone.d.ts.map

package/lib/server/forge/core/validator/clone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clone.d.ts","sourceRoot":"","sources":["../../../../../server/forge/core/validator/clone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAkD9C,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,mBAgDpG"}

package/lib/server/forge/core/validator/clone.js

@@ -0,0 +1,99 @@
+/**
+ * Cache + clone management for the validator's per-repo workspaces.
+ *
+ *   ensureClone(repo, branchName, emit)
+ *     - Lazily clones into ~/.forge/cache/<repo>/ (or FORGE_VALIDATE_CACHE).
+ *     - Always fetch + reset to origin/main, then check out a stable per-issue
+ *       branch so validation runs are deterministic and old overlays can't
+ *       linger across runs.
+ *     - GitLab-only for v1; GitHub / Azure DevOps raise a clear error.
+ *     - Emits clone-step progress / log / step_result events.
+ */
+import { writeFileSync, unlinkSync } from "node:fs";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { getConnection } from "../configStore.js";
+import { runCmd } from "./cmd.js";
+import { exists } from "./fs.js";
+const CACHE_ROOT = process.env.FORGE_VALIDATE_CACHE
+    ?? path.join(os.homedir(), ".forge", "cache");
+function sanitizeRepo(repo) {
+    return repo.replace(/[^a-zA-Z0-9_./-]/g, "_");
+}
+function gitlabCloneUrl(project) {
+    return `https://gitlab.com/${project}.git`;
+}
+function createAskpassScript(token) {
+    const script = path.join(os.tmpdir(), `.forge-askpass-${process.pid}`);
+    writeFileSync(script, `#!/bin/sh\ncase "$1" in *Username*) echo oauth2;; *) echo "${token}";; esac\n`, { mode: 0o700 });
+    return script;
+}
+function gitEnvWithToken() {
+    const { token } = getConnection("gitlab");
+    if (!token) {
+        throw new Error("GitLab token is required to clone the repo for validation. Set it in Settings → Connections or via GITLAB_TOKEN env var.");
+    }
+    const askpass = createAskpassScript(token);
+    return {
+        env: {
+            GIT_ASKPASS: askpass,
+            GIT_TERMINAL_PROMPT: "0",
+        },
+        cleanup: () => { try {
+            unlinkSync(askpass);
+        }
+        catch { } },
+    };
+}
+function resolveCloneUrl(repoInput) {
+    // Repos may arrive prefixed — "github:owner/name", "azuredevops:org/proj/repo".
+    // v1 only supports GitLab; tell the caller clearly when it's something else.
+    const colon = repoInput.indexOf(":");
+    if (colon > 0) {
+        const prefix = repoInput.slice(0, colon).toLowerCase();
+        if (prefix === "gitlab")
+            return gitlabCloneUrl(repoInput.slice(colon + 1));
+        if (prefix === "github" || prefix === "azuredevops" || prefix === "azure") {
+            throw new Error(`Validation for ${prefix} repos isn't implemented yet — GitLab only for now.`);
+        }
+    }
+    return gitlabCloneUrl(repoInput);
+}
+export async function ensureClone(repo, branchName, emit) {
+    const dir = path.join(CACHE_ROOT, sanitizeRepo(repo));
+    const hasRepo = await exists(path.join(dir, ".git"));
+    emit({ type: "progress", step: "clone", status: "running" });
+    emit({ type: "log", step: "clone", message: hasRepo ? `Reusing clone at ${dir}` : `Cloning ${repo} → ${dir}` });
+    const { env: gitEnv, cleanup } = gitEnvWithToken();
+    const envOpts = { env: { ...process.env, ...gitEnv } };
+    try {
+        if (!hasRepo) {
+            await fs.mkdir(dir, { recursive: true });
+            const clone = await runCmd("git", ["clone", "--depth=1", resolveCloneUrl(repo), dir], envOpts, (l) => emit({ type: "log", step: "clone", message: l }));
+            if (clone.code !== 0)
+                throw new Error(`git clone failed (code ${clone.code})`);
+        }
+        const fetch = await runCmd("git", ["fetch", "--depth=1", "origin", "main"], { cwd: dir, ...envOpts }, (l) => emit({ type: "log", step: "clone", message: l }));
+        if (fetch.code !== 0)
+            throw new Error(`git fetch failed (code ${fetch.code})`);
+    }
+    finally {
+        cleanup();
+    }
+    // Two-step reset+clean before the branch switch so any lingering overlay
+    // from a prior run is wiped — `git checkout -B` alone refuses if dirty.
+    // `clean -fd` preserves node_modules because it's .gitignored.
+    emit({ type: "log", step: "clone", message: `Resetting workspace to origin/main` });
+    const reset = await runCmd("git", ["reset", "--hard", "origin/main"], { cwd: dir });
+    if (reset.code !== 0)
+        throw new Error(`git reset failed (code ${reset.code})`);
+    await runCmd("git", ["clean", "-fd"], { cwd: dir });
+    emit({ type: "log", step: "clone", message: `Checking out workspace branch ${branchName}` });
+    const checkout = await runCmd("git", ["checkout", "-B", branchName], { cwd: dir }, (l) => emit({ type: "log", step: "clone", message: l }));
+    if (checkout.code !== 0)
+        throw new Error(`git checkout ${branchName} failed (code ${checkout.code})`);
+    emit({ type: "step_result", step: "clone", passed: true });
+    return dir;
+}
+//# sourceMappingURL=clone.js.map

package/lib/server/forge/core/validator/clone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clone.js","sourceRoot":"","sources":["../../../../../server/forge/core/validator/clone.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB;OAC/C,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAE/C,SAAS,YAAY,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACtC,OAAO,sBAAsB,OAAO,MAAM,CAAC;AAC5C,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,aAAa,CAAC,MAAM,EAAE,8DAA8D,KAAK,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxH,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,eAAe;IACvB,MAAM,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,0HAA0H,CAAC,CAAC;IAC7I,CAAC;IACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO;QACN,GAAG,EAAE;YACJ,WAAW,EAAE,OAAO;YACpB,mBAAmB,EAAE,GAAG;SACxB;QACD,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC,CAAC,CAAC;KACxD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACzC,gFAAgF;IAChF,6EAA6E;IAC7E,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,qDAAqD,CAAC,CAAC;QAChG,CAAC;IACF,CAAC;IACD,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,UAAkB,EAAE,IAAiC;IACpG,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAErD,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC;IAEhH,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IACvD,IAAI,CAAC;QACJ,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,MAAM,MAAM,CACzB,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EACzD,OAAO,EACP,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAC/D,CAAC;YACF,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,MAAM,CACzB,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,EAC/C,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,EACxB,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAC/D,CAAC;QACF,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IAChF,CAAC;YAAS,CAAC;QACV,OAAO,EAAE,CAAC;IACX,CAAC;IAED,yEAAyE;IACzE,wEAAwE;IACxE,+DAA+D;IAC/D,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACpF,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IAC/E,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAEpD,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,iCAAiC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC5B,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,EACrC,EAAE,GAAG,EAAE,GAAG,EAAE,EACZ,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAC/D,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,UAAU,iBAAiB,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAEtG,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/lib/server/forge/core/validator/cmd.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Low-level child-process helpers shared by every runner.
+ *
+ *   runCmd      — spawn → resolve with { code, output, error }; line-buffers
+ *                 stdout+stderr through `onLine` for live streaming.
+ *   runStep     — runCmd + emits the standard progress / step_result events
+ *                 the SSE consumer expects, returning a `{ passed, ... }` row.
+ *
+ * Children inherit a forced no-colour CI environment so eslint/tsc/jest/vitest
+ * don't spam ANSI into the SSE stream.
+ */
+import type { RunCmdResult, ForgeEvent } from "../types.ts";
+export declare const MAX_TAIL_LINES = 60;
+export declare function stripAnsi(s: string): string;
+export interface StepResult {
+    passed: boolean;
+    exitCode: number;
+    durationMs: number;
+    tail: string;
+}
+export declare function runCmd(cmd: string, args: string[], opts?: Record<string, unknown>, onLine?: (line: string) => void): Promise<RunCmdResult>;
+export declare function runStep(dir: string, stepName: string, cmd: string, args: string[], emit: (event: ForgeEvent) => void): Promise<StepResult>;
+//# sourceMappingURL=cmd.d.ts.map

package/lib/server/forge/core/validator/cmd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cmd.d.ts","sourceRoot":"","sources":["../../../../../server/forge/core/validator/cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE5D,eAAO,MAAM,cAAc,KAAK,CAAC;AAMjC,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,UAElC;AAED,MAAM,WAAW,UAAU;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAmD9I;AAED,wBAAsB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAoBhJ"}

package/lib/server/forge/core/validator/cmd.js

@@ -0,0 +1,87 @@
+/**
+ * Low-level child-process helpers shared by every runner.
+ *
+ *   runCmd      — spawn → resolve with { code, output, error }; line-buffers
+ *                 stdout+stderr through `onLine` for live streaming.
+ *   runStep     — runCmd + emits the standard progress / step_result events
+ *                 the SSE consumer expects, returning a `{ passed, ... }` row.
+ *
+ * Children inherit a forced no-colour CI environment so eslint/tsc/jest/vitest
+ * don't spam ANSI into the SSE stream.
+ */
+import { spawn } from "node:child_process";
+export const MAX_TAIL_LINES = 60;
+// CSI (colour, cursor moves), OSC (titles), and simple ESC[ sequences.
+// eslint-disable-next-line no-control-regex
+const ANSI_RX = /\x1b\[[0-9;?]*[a-zA-Z]|\x1b\][^\x07]*\x07|\x1b[@-Z\\-_]/g;
+export function stripAnsi(s) {
+    return s.replace(ANSI_RX, "");
+}
+export function runCmd(cmd, args, opts = {}, onLine) {
+    return new Promise((resolve) => {
+        const env = {
+            ...process.env,
+            ...(opts.env ?? {}),
+            FORCE_COLOR: "0",
+            NO_COLOR: "1",
+            CI: "1",
+            TERM: "dumb",
+        };
+        const proc = spawn(cmd, args, { ...opts, env, stdio: ["ignore", "pipe", "pipe"] });
+        const lines = [];
+        let outBuf = "";
+        let errBuf = "";
+        const flush = (buf, sink) => {
+            let i;
+            while ((i = buf.indexOf("\n")) !== -1) {
+                const line = stripAnsi(buf.slice(0, i)).replace(/\r$/, "");
+                lines.push(line);
+                sink(line);
+                buf = buf.slice(i + 1);
+            }
+            return buf;
+        };
+        proc.stdout.on("data", (d) => {
+            outBuf += d.toString();
+            outBuf = flush(outBuf, (l) => onLine?.(l));
+        });
+        proc.stderr.on("data", (d) => {
+            errBuf += d.toString();
+            errBuf = flush(errBuf, (l) => onLine?.(l));
+        });
+        proc.on("error", (err) => {
+            resolve({ code: -1, output: lines.join("\n"), error: err.message });
+        });
+        proc.on("close", (code) => {
+            if (outBuf) {
+                const line = stripAnsi(outBuf).replace(/\r$/, "");
+                lines.push(line);
+                onLine?.(line);
+            }
+            if (errBuf) {
+                const line = stripAnsi(errBuf).replace(/\r$/, "");
+                lines.push(line);
+                onLine?.(line);
+            }
+            resolve({ code: code ?? -1, output: lines.join("\n"), error: null });
+        });
+    });
+}
+export async function runStep(dir, stepName, cmd, args, emit) {
+    emit({ type: "progress", step: stepName, status: "running" });
+    const start = Date.now();
+    const result = await runCmd(cmd, args, { cwd: dir }, (l) => emit({ type: "log", step: stepName, message: l }));
+    const durationMs = Date.now() - start;
+    const tail = result.output.split("\n").slice(-MAX_TAIL_LINES).join("\n");
+    const passed = result.code === 0;
+    emit({
+        type: "step_result",
+        step: stepName,
+        passed,
+        exitCode: result.code,
+        durationMs,
+        tail,
+    });
+    return { passed, exitCode: result.code, durationMs, tail };
+}
+//# sourceMappingURL=cmd.js.map

package/lib/server/forge/core/validator/cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cmd.js","sourceRoot":"","sources":["../../../../../server/forge/core/validator/cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAI3C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAEjC,uEAAuE;AACvE,4CAA4C;AAC5C,MAAM,OAAO,GAAG,0DAA0D,CAAC;AAE3E,MAAM,UAAU,SAAS,CAAC,CAAS;IAClC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AASD,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,IAAc,EAAE,OAAgC,EAAE,EAAE,MAA+B;IACtH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAG;YACX,GAAG,OAAO,CAAC,GAAG;YACd,GAAG,CAAE,IAAI,CAAC,GAA8B,IAAI,EAAE,CAAC;YAC/C,WAAW,EAAE,GAAG;YAChB,QAAQ,EAAE,GAAG;YACb,EAAE,EAAE,GAAG;YACP,IAAI,EAAE,MAAM;SACZ,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACnF,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,IAA4B,EAAE,EAAE;YAC3D,IAAI,CAAC,CAAC;YACN,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC3D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,CAAC;gBACX,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,GAAG,CAAC;QACZ,CAAC,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAClD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAClD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;YACD,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,QAAgB,EAAE,GAAW,EAAE,IAAc,EAAE,IAAiC;IAC1H,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,MAAM,CAC1B,GAAG,EAAE,IAAI,EACT,EAAE,GAAG,EAAE,GAAG,EAAE,EACZ,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAChE,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC;QACJ,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,QAAQ,EAAE,MAAM,CAAC,IAAI;QACrB,UAAU;QACV,IAAI;KACJ,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC5D,CAAC"}

package/lib/server/forge/core/validator/fs.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tiny fs helpers shared by clone / overlay / project-type detection.
+ */
+export declare function exists(p: string): Promise<boolean>;
+//# sourceMappingURL=fs.d.ts.map