@ipul-labs/forge 1.22.0 → 1.35.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ipul-labs/forge",
-  "version": "1.22.0",
+  "version": "1.35.0",
   "description": "AI-powered code change & deploy control panel — connects Claude, GitLab, and Kubernetes",
   "readmeFilename": "README.md",
   "type": "module",
@@ -11,13 +11,15 @@
   "exports": {
     ".": "./lib/server/forge/routes.js",
     "./agent": "./lib/server/forge/core/ForgeAgent.js",
-    "./providers": "./lib/server/forge/core/providers/index.js"
+    "./providers": "./lib/server/forge/core/providers/index.js",
+    "./app": "./lib/server/app.js"
   },
   "files": [
     "README.md",
+    "LICENSE",
     "lib",
-    "scripts",
-    "dist"
+    "dist",
+    "!lib/**/*.test.*"
   ],
   "scripts": {
     "dev": "trap 'kill 0' EXIT INT TERM; FORGE_NO_VITE=1 tsx watch server.ts & vite; wait",
@@ -26,8 +28,11 @@
     "typecheck": "tsc --noEmit -p tsconfig.app.json && tsc --noEmit -p tsconfig.server.json",
     "test": "vitest run",
     "test:watch": "vitest",
+    "test:e2e": "playwright test",
     "build:server": "tsc -p tsconfig.build.json && node scripts/fix-shebang.cjs",
-    "prepack": "npm run build:server && node scripts/inject-readme.cjs"
+    "test:package": "playwright test -c playwright.package.config.ts",
+    "prepack": "npm run build && npm run build:server && node scripts/inject-readme.cjs",
+    "postpack": "node scripts/inject-readme.cjs --restore"
   },
   "dependencies": {
     "@kubernetes/client-node": "^1.0.0",
@@ -41,33 +46,39 @@
     "ink-select-input": "^6.2.0",
     "ink-spinner": "^5.0.0",
     "ink-text-input": "^6.0.0",
+    "jose": "^5.10.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
-    "react-router-dom": "^7.14.1"
+    "react-router-dom": "^7.14.1",
+    "tsx": "^4.21.0"
   },
   "devDependencies": {
+    "@playwright/test": "^1.60.0",
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/commit-analyzer": "^13.0.1",
     "@semantic-release/git": "^10.0.1",
     "@semantic-release/gitlab": "^13.3.2",
     "@semantic-release/npm": "^13.1.5",
     "@semantic-release/release-notes-generator": "^14.1.0",
+    "@testing-library/jest-dom": "^6.9.1",
+    "@testing-library/react": "^16.3.3",
+    "@testing-library/user-event": "^14.6.8",
     "@types/express": "^5.0.0",
     "@types/node": "^25.6.2",
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "@vitejs/plugin-react": "^6.0.0",
     "autoprefixer": "^10.4.20",
+    "jsdom": "^25.0.1",
     "postcss": "^8.4.47",
     "semantic-release": "^25.0.3",
     "tailwindcss": "^3.4.14",
-    "tsx": "^4.21.0",
     "typescript": "^5.6.0",
     "vite": "^8.0.0",
     "vitest": "^4.1.0"
   },
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=22.13.0"
   },
   "keywords": [
     "forge",
@@ -80,10 +91,14 @@
   "publishConfig": {
     "access": "public"
   },
+  "homepage": "https://useafk.dev/forge",
+  "bugs": {
+    "email": "support@ipullabs.com"
+  },
   "repository": {
     "type": "git",
     "url": "git+https://gitlab.com/ipul-labs/forge.git"
   },
   "license": "MIT",
-  "readme": "# Forge by iPuL\n\nAI-powered code change & deploy control panel. Connect an issue tracker, let Claude propose a fix, review the diff, approve — and Forge creates the branch, commits the changes, opens the MR/PR, and monitors the CI pipeline.\n\nBuilt on: Claude Code CLI · GitLab / GitHub / Azure DevOps · Kubernetes\n\n---\n\n## Why Forge\n\n**The CI refinement loop is the thing.** Every other AI coding tool hands off after the PR is open. Forge keeps going: when your pipeline fails, it grabs the last 150 lines of the failed job log, feeds them back to Claude with the original fix context, generates a targeted patch, and commits it to the branch — automatically. No human has to read the stack trace, translate it into a prompt, and paste it somewhere. The loop closes itself.\n\nEverything else fills in the gaps that matter for real teams:\n\n- **No per-token cost** — Claude runs via the `claude` CLI using your existing Claude subscription, not API credits. Heavy use doesn't trigger a bill.\n- **Multi-provider** — GitLab, GitHub, and Azure DevOps are all first-class. Switch providers with a single env var; all normalized data shapes stay the same.\n- **Self-hosted** — your code never leaves your infrastructure. The backend runs wherever you deploy it; AI calls go to Anthropic (or a local gateway via OpenClaw).\n- **Two-pass analysis keeps context focused** — Claude first identifies the 6 most relevant files, then reads only those when proposing the fix. This produces sharper diffs than dumping the whole repo into one prompt.\n\n---\n\n## How it works\n\n1. **Connect** — enter your Forge token to authenticate\n2. **Pick an issue** — Forge loads open issues from your project\n3. **Analyze** — Claude reads the repo file tree, identifies relevant files, and proposes a targeted fix\n4. **Review** — inspect the diff file-by-file; refine with natural-language feedback if needed\n5. **Apply** — Forge creates a branch, commits all changes, and opens a merge/pull request\n6. **Monitor** — watch the CI pipeline run; if it fails, click \"Fix with AI\" to iterate\n\n---\n\n## Getting started\n\n### Prerequisites\n\n- Node.js 20+\n- `claude` CLI installed and authenticated (`claude auth login`)\n- Credentials for your SCM provider (see [Configuration](#configuration))\n\n### Install\n\n```bash\ngit clone https://gitlab.com/ipul-labs/forge.git\ncd forge\nnpm install\n```\n\n### Configure\n\n```bash\n# Interactive setup — writes .env and ~/.forge/config.json\nnpx forge init\n```\n\nOr copy the example env and fill in the values manually:\n\n```bash\ncp .env.example .env\n# fill in FORGE_TOKEN plus your provider credentials\n```\n\n### Launch the UI\n\n```bash\nnpm run dev\n# opens http://localhost:5000 (frontend) with API on :5001\n```\n\nFor production:\n\n```bash\nnpm run build:app   # builds Vite SPA to dist/\nnpm start           # NODE_ENV=production node server.js\n```\n\n### CLI usage\n\nThe `forge` CLI drives the same orchestrator from the terminal. Install globally or use `npx`:\n\n```bash\n# Global install (adds `forge` to PATH)\nnpm install -g @ipul-labs/forge\n\n# Or run via npx from the repo\nnpx forge <command>\n```\n\n#### Interactive mode\n\nRun `forge` with no arguments to enter an interactive terminal session:\n\n```bash\nforge\n```\n\n```\n  forge v1.15.1\n\n──────────────────────────────────────────────────\n ❯ issues --limit 5\n──────────────────────────────────────────────────\n group/repo  |  agent:claude  |  v1.15.1\n```\n\nTab-completes command names. Type `use <repo>` to switch repos. Commands that error stay in the session — only `exit`, `quit`, or Ctrl+D leave.\n\n#### End-to-end: issue to production\n\n```bash\nforge ship 42\n```\n\nRuns: analyze → review → validate → apply → watch CI → merge → watch deploy → close, with a `y/N` gate at every state-changing step.\n\n#### Step-by-step commands\n\n```bash\nforge issues                   # List open issues (--label X, --mine, --limit N)\nforge issue 42                 # Show full description\nforge create-issue --title \"fix: broken widget\"  # Create a new issue\nforge analyze 42               # Run two-pass analysis, cache result\nforge show                     # Re-render cached analysis\nforge refine --feedback \"...\"  # Iterate with feedback\nforge validate                 # Run lint/typecheck/test against proposed changes\nforge apply                    # Push branch + open MR\nforge watch                    # Poll the MR pipeline\nforge ci-fix                   # Re-analyze with failed-pipeline logs\nforge merge                    # Merge the MR\nforge resolution-check         # Verify merged MR closes the issue\nforge close                    # Close the issue\nforge use group/other-repo     # Switch active repo\nforge update                   # Pull latest + reinstall dependencies\nforge stats                    # View telemetry — success rates, timing, failure patterns\nforge improve                  # Evaluate patterns and suggest improvements\nforge improve --create         # Create improvement issues in the repo\n```\n\n#### Options\n\n```\n-p, --port <n>           Port for start\n--repo <group/repo>      Primary repo\n--secondary <repo>       Additional repo (repeatable)\n--all-repos              Include every configured repo\n--model <id>             Claude model override\n--agent <name>           Agent backend: claude | openclaw\n--prompt <text>          Extra user prompt\n--json                   JSON output\n--quiet                  Suppress progress\n--yes                    Skip confirmation gates\n--validate               Run validate before apply\n```\n\n#### Diagnostics\n\n```bash\nforge doctor             # Check prerequisites (node, claude CLI, env vars)\nforge session list       # List cached sessions\nforge session clean      # Remove stale session data\n```\n\nSee [`docs/cli.md`](./docs/cli.md) for the full command reference and [`docs/cli-ship-workflow.md`](./docs/cli-ship-workflow.md) for the workflow design.\n\n---\n\n## Configuration\n\n### Core\n\n| Variable | Required | Description |\n|---|---|---|\n| `FORGE_TOKEN` | Yes | Dashboard password — also auto-fills the UI login form |\n| `FORGE_REPOS` | Yes | Comma-separated repo list; first entry is the primary project |\n| `SCM_PROVIDER` | — | `gitlab` (default) · `github` · `azuredevops` |\n| `ANTHROPIC_API_KEY` | — | Enables live model list from Anthropic; falls back to hardcoded list |\n| `FORGE_MODEL` | — | Override default model (default: `claude-sonnet-4-6`) |\n| `FORGE_AGENT_MODE` | — | `structured` (default) · `agentic` — how Claude proposes changes (see [Agent modes](#agent-modes)) |\n| `K8S_CLUSTER_TOKEN` | — | K8s service account token for rollout monitoring |\n| `K8S_CLUSTER_SERVER` | — | K8s API server URL |\n| `PORT` | — | HTTP server port (default: `5001`) |\n| `OPENCLAW_GATEWAY_URL` | — | Enables OpenClaw agent backend; point at your local Gateway |\n| `OPENCLAW_TOKEN` | — | Bearer token for OpenClaw Gateway auth |\n\n### Provider credentials\n\nSCM tokens can be set here **or** in the Forge Settings UI (Settings → Connections). The UI value takes precedence over env vars.\n\n#### GitLab (`SCM_PROVIDER=gitlab`, default)\n\n| Variable | Required | Description |\n|---|---|---|\n| `GITLAB_TOKEN` | Yes | Personal access token with `api` + `write_repository` scopes |\n\n#### GitHub (`SCM_PROVIDER=github`)\n\n| Variable | Required | Description |\n|---|---|---|\n| `GITHUB_TOKEN` | Yes | Personal access token with `repo` + `workflow` scopes |\n| `GITHUB_OWNER` | Yes | Organization or user, e.g. `ipul-labs` |\n| `GITHUB_REPO` | Yes | Repository name, e.g. `web-app` |\n| `GITHUB_BASE_BRANCH` | — | Default target branch (default: `main`) |\n\n#### Azure DevOps (`SCM_PROVIDER=azuredevops`)\n\n| Variable | Required | Description |\n|---|---|---|\n| `AZURE_DEVOPS_TOKEN` | Yes | Personal access token (Full access or Code + Work Items) |\n| `AZURE_DEVOPS_ORG` | Yes | Organization name, e.g. `ipul-labs` |\n| `AZURE_DEVOPS_PROJECT` | Yes | Team project name, e.g. `web-app` |\n| `AZURE_DEVOPS_REPO` | — | Git repo name (defaults to project name) |\n| `AZURE_DEVOPS_BASE_BRANCH` | — | Default target branch (default: `main`) |\n\n### Deprecated (still work as fallbacks)\n\n| Variable | Replaced by |\n|---|---|\n| `FORGE_GITLAB_PROJECT` | First entry in `FORGE_REPOS` |\n| `VITE_FORGE_TOKEN` | Auto-derived from `FORGE_TOKEN` |\n| `FORGE_REFINE_REPO_ACCESS` | Settings UI toggle (Settings → Defaults) |\n\nSee `.env.example` for a full annotated list.\n\n---\n\n## Multi-provider support\n\nForge's SCM layer is a clean provider abstraction — all three providers implement the same `ScmProvider` interface and return identical normalized shapes (`NormalIssue`, `NormalMR`, `NormalPipeline`, etc.). The rest of the codebase never knows which provider is active.\n\n### Switching providers\n\n```bash\n# .env\nSCM_PROVIDER=github\nGITHUB_TOKEN=ghp_...\nGITHUB_OWNER=my-org\nGITHUB_REPO=my-repo\n```\n\n### Per-repo prefix (multi-repo mixed-provider setups)\n\n```bash\nFORGE_REPOS=gitlab:ipul/web-app,github:my-org/mobile\n```\n\n### Provider capabilities\n\n| Feature | GitLab | GitHub | Azure DevOps |\n|---|---|---|---|\n| Issues / Work Items | Yes | Yes | Yes (Work Items) |\n| Multi-file commits | Yes | Yes (Git Data API) | Yes (Pushes API) |\n| Merge / Pull Requests | Yes | Yes | Yes |\n| CI pipelines | Yes (GitLab CI) | Yes (GitHub Actions) | Yes (Azure Pipelines) |\n| Job log traces | Yes | Yes | Yes |\n| Server-side rebase | Yes | — | — |\n\n---\n\n## Self-improvement\n\nForge monitors its own performance and proposes fixes autonomously. The loop:\n\n1. **Telemetry** — every operation records success/fail, duration, tokens, and cost to `~/.forge/telemetry/`\n2. **Pattern detection** — recurring failures are grouped and classified (timeout-tuning, provider-bug, prompt-quality, validation-gap, error-handling, ux-improvement)\n3. **Auto-evaluation** — runs automatically after every 25 operations (4-hour cooldown). High-severity patterns trigger issue creation.\n4. **Issue creation** — files issues in the configured repo with diagnosis, evidence, and suggested fixes. Tagged `[self-improve]` with category labels.\n5. **Human review** — Forge never auto-merges its own changes. All improvements go through normal MR review.\n6. **Resolution** — when a self-improve issue is closed, matching telemetry failure patterns are marked as resolved. They stop appearing in `forge stats` and won't trigger duplicate diagnoses. Resolution is tied to code state, not time — patterns only clear when the fix ships.\n\n```bash\nforge stats                    # View telemetry data\nforge improve                  # Run evaluation manually\nforge improve --create         # Create issues for actionable patterns\nforge improve --ship           # Create issues + analyze + propose fix + open MR\nforge improve --json           # Pipe-friendly output\n```\n\nThe `--ship` flag runs the full loop: detect pattern → create issue → analyze → propose fix → open MR. All in one command. The MR goes through normal CI — you review and merge or reject.\n\nUX insights are also derived from telemetry: slow operations (>2 min avg), high token usage (>50k avg), and frequent cancellations surface as improvement suggestions.\n\n---\n\n## Security\n\nForge is designed for self-hosted deployment on trusted infrastructure. Security measures in place:\n\n- **Timing-safe auth** — token comparison uses `crypto.timingSafeEqual` to prevent timing attacks\n- **Rate limiting** — API endpoints are rate-limited (60 req/min per IP) to prevent brute-force\n- **Security headers** — Helmet middleware sets X-Frame-Options, HSTS, X-Content-Type-Options, and CSP (production)\n- **Request size limits** — JSON body capped at 1MB to prevent memory exhaustion\n- **Secret redaction** — error logs and API responses scrub tokens (`glpat-*`, `ghp_*`, `oauth2:*@`) before output\n- **File permissions** — config files (`~/.forge/config.json`) written with `0600`, session directories with `0700`\n- **Git credential isolation** — SCM tokens passed via `GIT_ASKPASS` helper, never embedded in clone URLs\n- **Path traversal protection** — symlink-aware `realpath` checks prevent file writes outside clone directories\n- **No shell injection** — all subprocess calls use `spawn()` with argument arrays, never shell strings\n- **Atomic config writes** — config updates use temp file + rename to prevent corruption\n\n`FORGE_TOKEN` is a standalone dashboard password — never reuse an SCM token for this value.\n\n---\n\n## Production deployment\n\n```bash\nnpm run build:app      # builds Vite SPA to dist/\nNODE_ENV=production tsx server.ts\n```\n\nOr with Docker:\n\n```bash\ndocker build -t forge .\ndocker run -p 5001:5001 --env-file .env forge\n```\n\n---\n\n## Architecture\n\nFull-stack TypeScript. The backend runs via `tsx` (no build step); the frontend compiles through Vite.\n\n```\nbin/\n  forge-agent.ts        # CLI entry point (forge command)\n  cli/\n    ship.ts             # End-to-end orchestrator (Ink UI)\n    analyze.ts          # Two-pass issue analysis\n    repl.ts             # Interactive terminal (Ink-based)\n    serverClient.ts     # CLI → Server API client (server/local mode)\n    sessionStore.ts     # ~/.forge/sessions/ persistence\n    ...\n\nshared/\n  events.ts             # FORGE_EVENTS constants (server + client)\n\nserver/\n  forge/\n    routes.ts           # Express router — all /api/forge/* endpoints\n    core/\n      ForgeAgent.ts     # Orchestrates the full pipeline (analyze -> apply -> refine)\n      claudeClient.ts   # Shells out to the claude CLI for structured output\n      openclawClient.ts # OpenClaw Gateway HTTP client\n      agentClient.ts    # Dispatcher: routes to claudeClient or openclawClient\n      k8s.ts            # Kubernetes client for rollout monitoring\n      jobs.ts           # Job store with SSE event buffering + replay\n      providers/\n        base.ts         # Abstract ScmProvider — normalized shapes + interface\n        gitlab.ts       # GitLab REST API v4\n        github.ts       # GitHub REST API v3 + Git Data API\n        azuredevops.ts  # Azure DevOps REST API\n        index.ts        # createProvider() factory\n\nsrc/\n  views/Forge/\n    ForgeDashboard.tsx      # Root UI component with tabbed issue/MR views\n    api.ts                  # Token management + fetch helper\n    types.ts                # Shared TypeScript types\n    utils.ts                # SSE helper + state utilities\n    components/             # Analysis progress, pipeline status, diff viewer\n    hooks/\n      useForgeDashboard.ts  # All state, phase transitions, and API calls\n      useForgeEvents.ts     # SSE event bus subscription\n```\n\n### Agent modes\n\nForge can drive Claude in two ways, set by `FORGE_AGENT_MODE` (or the Settings default, or a per-request `agentMode`):\n\n- **`structured`** (default) — the two-pass JSON pipeline below. Deterministic and schema-validated: Claude runs single-turn with tools disabled and returns complete file contents that Forge overlays onto a clone.\n- **`agentic`** — Claude runs as a full Claude Code agent inside a checkout of the repo: real tools (Read/Edit/Write/Bash…), the project's own `CLAUDE.md`, and a multi-turn loop. Forge captures the resulting `git diff` instead of parsing JSON, then feeds those changes into the same apply/validate/MR pipeline. Higher fidelity, less determinism. Requires the `claude` backend, a single repo, and a GitLab primary — otherwise Forge logs why and falls back to structured.\n\n### Two-pass analysis (structured mode)\n\n**Pass 1** — `identifyRelevantFiles`: Claude reads the issue + file tree, returns the max-6 most relevant paths.\n\n**Pass 2** — `proposeFix`: Claude reads the actual file contents and proposes a targeted fix as a JSON diff.\n\nBoth passes use `claude --print --output-format json` so cost and service tier are tracked automatically.\n\n### CI refinement\n\nWhen a pipeline fails, Forge fetches the last 150 lines of each failed job's trace log and feeds them to pass 2 with an explicit \"pipeline failed\" framing — not generic reviewer feedback. This improves fix quality for common failures like lint errors and type errors.\n\n### Provider abstraction\n\nAll three SCM providers implement `ScmProvider` from `providers/base.ts`. The contract is:\n- **Normalized return types** — all methods return `NormalIssue`, `NormalMR`, `NormalPipeline`, etc., regardless of provider\n- **Instance-scoped** — each provider is instantiated with a repo string; no global state\n- **`supportsRebase`** — providers that don't support server-side rebase return `false`; the UI and API layer check this before showing the rebase button\n\n---\n\n## Programmatic usage\n\nThe npm package ships compiled JavaScript with TypeScript declarations — no `tsx` or TypeScript runtime needed by consumers.\n\n```ts\nimport forgeRouter from \"@ipul-labs/forge\";             // Express router\nimport { ForgeAgent } from \"@ipul-labs/forge/agent\";    // Core pipeline class\nimport { createProvider } from \"@ipul-labs/forge/providers\"; // SCM factory\n```\n\n```ts\nconst agent = new ForgeAgent({ project: \"group/repo\" });\nconst result = await agent.analyzeIssue(42, (event) => console.log(event));\nconst { branchName, mr } = await agent.applyFix(result);\n```\n\n### Development\n\nSource is TypeScript (`.ts`). The dev server runs via `tsx` (no build step). For the npm package, `tsc` compiles to `lib/` with declarations during `prepack`.\n\n```bash\nnpm run dev              # tsx watch + vite (dev)\nnpm run build:server     # compile server/bin/shared → lib/\nnpm run typecheck        # check both frontend + server configs\n```\n\n---\n\n## License\n\nMIT\n"
+  "readme": "# Forge by iPuL\n\nAI-powered code change & deploy control panel. Connect an issue tracker, let Claude propose a fix, review the diff, approve — and Forge creates the branch, commits the changes, opens the MR/PR, and monitors the CI pipeline.\n\nBuilt on: Claude Code CLI · GitLab / GitHub / Azure DevOps · Kubernetes\n\n---\n\n## Why Forge\n\n**The CI refinement loop is the thing.** Every other AI coding tool hands off after the PR is open. Forge keeps going: when your pipeline fails, it grabs the last 150 lines of the failed job log, feeds them back to Claude with the original fix context, generates a targeted patch, and commits it to the branch — automatically. No human has to read the stack trace, translate it into a prompt, and paste it somewhere. The loop closes itself.\n\nEverything else fills in the gaps that matter for real teams:\n\n- **No per-token cost** — Claude runs via the `claude` CLI using your existing Claude subscription, not API credits. Heavy use doesn't trigger a bill. Hosted workspaces can instead save their own Anthropic API key (see [Claude billing](#claude-billing)).\n- **Multi-provider** — GitLab, GitHub, and Azure DevOps are all first-class. Switch providers with a single env var; all normalized data shapes stay the same.\n- **Self-hosted** — your code never leaves your infrastructure. The backend runs wherever you deploy it; AI calls go to Anthropic (or a local gateway via OpenClaw).\n- **Two-pass analysis keeps context focused** — Claude first identifies the 6 most relevant files, then reads only those when proposing the fix. This produces sharper diffs than dumping the whole repo into one prompt.\n\n---\n\n## How it works\n\n1. **Sign in** — with your Forge account or your company SSO\n2. **Pick an issue** — Forge loads open issues from your project. Create, edit, label (`type::` / `priority::` / `status::` / `area::`) and delete tickets right from Forge. Close and delete (in the issue's ⋯ menu) open a dialog that first shows what will be torn down (Forge branches deleted, review environments stopped) and names any open MR that blocks it; deleting also asks you to type the issue number. The preview comes from `GET /issues/:iid/footprint`\n3. **Analyze** — Claude reads the repo file tree, identifies relevant files, and proposes a targeted fix\n4. **Review** — inspect the diff file-by-file; refine with natural-language feedback if needed\n5. **Apply** — Forge creates a branch, commits all changes, and opens a merge/pull request\n6. **Monitor** — watch the CI pipeline run; if it fails, click \"Fix with AI\" to iterate\n\n---\n\n## Getting started\n\n### Prerequisites\n\n- Node.js 22.13+\n- `claude` CLI installed and authenticated (`claude auth login`)\n- Credentials for your SCM provider (see [Configuration](#configuration))\n\n### Install\n\nForge is published on npm as [`@ipul-labs/forge`](https://www.npmjs.com/package/@ipul-labs/forge). The package includes the server, the built dashboard and the `forge` CLI.\n\n```bash\nnpm install -g @ipul-labs/forge\n```\n\n### Configure\n\nPick a folder for this install's settings and run the setup there. It writes `.env` in that folder and your repos and code-host token to `~/.forge/config.json`:\n\n```bash\nmkdir forge-home && cd forge-home\nforge init\n```\n\n### Launch the dashboard\n\nFrom the same folder:\n\n```bash\nforge start            # http://localhost:5001 (--port to change)\n```\n\nOpen it and create the first admin account (see [First run](#first-run)). `forge doctor` checks the Claude CLI, your config and the build if anything looks off, and `forge update` installs the latest release.\n\nPrefer not to install globally? `npx @ipul-labs/forge init` and `npx @ipul-labs/forge start` do the same.\n\n### Working on Forge itself\n\nFrom a checkout of the source:\n\n```bash\nnpm install\nnpm run dev            # http://localhost:5000 (frontend) with the API on :5001\nnpm run build && npm start   # production build, served on :5001\n```\n\n`npm run test:package` packs the repo exactly as npm would, installs the tarball into an empty folder, and runs the end-to-end checks against that install.\n\n### CLI usage\n\nThe `forge` CLI drives the same orchestrator from the terminal. After the global install above it is on your PATH; otherwise prefix commands with `npx @ipul-labs/forge`.\n\n#### Interactive mode\n\nRun `forge` with no arguments to enter an interactive terminal session:\n\n```bash\nforge\n```\n\n```\n  forge v1.15.1\n\n──────────────────────────────────────────────────\n ❯ issues --limit 5\n──────────────────────────────────────────────────\n group/repo  |  agent:claude  |  v1.15.1\n```\n\nTab-completes command names. Type `use <repo>` to switch repos. Commands that error stay in the session — only `exit`, `quit`, or Ctrl+D leave.\n\n#### End-to-end: issue to production\n\n```bash\nforge ship 42\n```\n\nRuns: analyze → review → validate → apply → watch CI → merge → watch deploy → close, with a `y/N` gate at every state-changing step.\n\n#### Step-by-step commands\n\n```bash\nforge issues                   # List open issues (--label X, --mine, --limit N)\nforge issue 42                 # Show full description\nforge create-issue --title \"fix: broken widget\"  # Create a new issue\nforge analyze 42               # Run two-pass analysis, cache result\nforge show                     # Re-render cached analysis\nforge refine --feedback \"...\"  # Iterate with feedback\nforge validate                 # Run lint/typecheck/test against proposed changes\nforge apply                    # Push branch + open MR\nforge watch                    # Poll the MR pipeline\nforge ci-fix                   # Re-analyze with failed-pipeline logs\nforge merge                    # Merge the MR\nforge resolution-check         # Verify merged MR closes the issue\nforge close                    # Close the issue\nforge use group/other-repo     # Switch active repo\nforge update                   # Install the latest release (a source checkout pulls instead)\nforge improve                  # Evaluate patterns and suggest improvements\nforge improve --create         # Create improvement issues in the repo\n```\n\n#### Options\n\n```\n-p, --port <n>           Port for start\n--repo <group/repo>      Primary repo\n--secondary <repo>       Additional repo (repeatable)\n--all-repos              Include every configured repo\n--model <id>             Claude model override\n--agent <name>           Agent backend: claude\n--prompt <text>          Extra user prompt\n--json                   JSON output\n--quiet                  Suppress progress\n--yes                    Skip confirmation gates\n--validate               Run validate before apply\n```\n\n#### Diagnostics\n\n```bash\nforge doctor             # Check prerequisites (node, claude CLI, env vars)\nforge session list       # List cached sessions\nforge session clean      # Remove stale session data\nforge reset-password <email>  # Locked out? Set a new password on the Forge host\n```\n\n`reset-password` writes straight to the Forge database (`FORGE_DB_PATH`, default `~/.forge/forge.db`), so it works without signing in and only for someone with shell access to the host. It asks for the new password twice without echoing it (or reads one line from piped stdin), signs the account out everywhere, and records `user.password_reset` in the audit log. SSO accounts are refused; their passwords live with the identity provider.\n\n`forge help` lists every command and its options.\n\n---\n\n## Configuration\n\n### Core\n\n| Variable | Required | Description |\n|---|---|---|\n| `FORGE_TOKEN` | — | Admin credential for automation; also accepted as the remote setup code. Never sent to the browser |\n| `FORGE_REPOS` | Yes | Comma-separated repo list; first entry is the primary project |\n| `SCM_PROVIDER` | — | `gitlab` (default) · `github` · `azuredevops` |\n| `ANTHROPIC_API_KEY` | — | Enables live model list from Anthropic; falls back to hardcoded list. Never used to run Claude |\n| `FORGE_MODEL` | — | Override default model (default: `claude-sonnet-4-6`) |\n| `FORGE_AGENT_MODE` | — | `structured` (default) · `agentic` — how Claude proposes changes (see [Agent modes](#agent-modes)) |\n| `PORT` | — | HTTP server port (default: `5001`) |\n\n### Identity and storage\n\n| Variable | Required | Description |\n|---|---|---|\n| `FORGE_DB_PATH` | — | SQLite database for members, sessions, API tokens and the audit log (default `~/.forge/forge.db`) |\n| `FORGE_ENCRYPTION_KEY` | — | Base64 32-byte key used to encrypt SCM tokens at rest. Without it Forge generates `~/.forge/master.key` (`FORGE_KEY_PATH`) |\n| `FORGE_OIDC_ISSUER` | — | OIDC issuer URL (Okta, Entra ID, Google Workspace, GitLab, …). Enables \"Continue with SSO\" |\n| `FORGE_OIDC_CLIENT_ID` / `FORGE_OIDC_CLIENT_SECRET` | — | OIDC client credentials |\n| `FORGE_PUBLIC_URL` | — | External URL; the OIDC redirect is `${FORGE_PUBLIC_URL}/api/forge/auth/oidc/callback` unless `FORGE_OIDC_REDIRECT_URI` is set |\n| `FORGE_OIDC_NAME` | — | Label on the sign-in button (default `SSO`) |\n| `FORGE_OIDC_ALLOWED_DOMAINS` | — | Comma-separated email domains allowed to sign in with SSO |\n| `FORGE_OIDC_DEFAULT_ROLE` | — | Role given to new SSO members (default `viewer`) |\n| `FORGE_TRUST_PROXY` | — | Express `trust proxy` setting when behind a load balancer |\n| `FORGE_COOKIE_SECURE` | — | Override Secure cookies (on by default in production) |\n| `FORGE_DISABLE_SERVICE_TOKEN` | — | `1` stops `FORGE_TOKEN` working as an API credential once setup is done |\n\n### Claude billing\n\nBy default the `claude` CLI runs on the Claude Code subscription it is logged in with, and Forge strips `ANTHROPIC_API_KEY` from its environment so an env key can't quietly switch it to API credits.\n\nAn admin can save a workspace **Anthropic API key** in Settings → Connections. Claude then runs on that account's API credits instead. This is the mode for a hosted Forge serving other teams, since a personal subscription is only for its owner's own use. The key is encrypted at rest like SCM tokens, shown back only as a hint, and clearing it returns Claude to the subscription.\n\n### Provider credentials\n\nSCM tokens can be set here **or** in the Forge Settings UI (Settings → Connections). The UI value takes precedence over env vars.\n\n#### GitLab (`SCM_PROVIDER=gitlab`, default)\n\n| Variable | Required | Description |\n|---|---|---|\n| `GITLAB_TOKEN` | Yes | Personal access token with `api` + `write_repository` scopes |\n\n#### GitHub (`SCM_PROVIDER=github`)\n\n| Variable | Required | Description |\n|---|---|---|\n| `GITHUB_TOKEN` | Yes | Personal access token with `repo` + `workflow` scopes |\n| `GITHUB_OWNER` | Yes | Organization or user, e.g. `ipul-labs` |\n| `GITHUB_REPO` | Yes | Repository name, e.g. `web-app` |\n| `GITHUB_BASE_BRANCH` | — | Default target branch (default: `main`) |\n\n#### Azure DevOps (`SCM_PROVIDER=azuredevops`)\n\n| Variable | Required | Description |\n|---|---|---|\n| `AZURE_DEVOPS_TOKEN` | Yes | Personal access token (Full access or Code + Work Items) |\n| `AZURE_DEVOPS_ORG` | Yes | Organization name, e.g. `ipul-labs` |\n| `AZURE_DEVOPS_PROJECT` | Yes | Team project name, e.g. `web-app` |\n| `AZURE_DEVOPS_REPO` | — | Git repo name (defaults to project name) |\n| `AZURE_DEVOPS_BASE_BRANCH` | — | Default target branch (default: `main`) |\n\n### Deprecated (still work as fallbacks)\n\n| Variable | Replaced by |\n|---|---|\n| `FORGE_GITLAB_PROJECT` | First entry in `FORGE_REPOS` |\n| `FORGE_REFINE_REPO_ACCESS` | Settings UI toggle (Settings → Defaults) |\n\nSee `.env.example` for a full annotated list.\n\n---\n\n## Multi-provider support\n\nForge's SCM layer is a clean provider abstraction — all three providers implement the same `ScmProvider` interface and return identical normalized shapes (`NormalIssue`, `NormalMR`, `NormalPipeline`, etc.). The rest of the codebase never knows which provider is active.\n\n### Switching providers\n\n```bash\n# .env\nSCM_PROVIDER=github\nGITHUB_TOKEN=ghp_...\nGITHUB_OWNER=my-org\nGITHUB_REPO=my-repo\n```\n\n### Per-repo prefix (multi-repo mixed-provider setups)\n\n```bash\nFORGE_REPOS=gitlab:ipul/web-app,github:my-org/mobile\n```\n\n### Provider capabilities\n\n| Feature | GitLab | GitHub | Azure DevOps |\n|---|---|---|---|\n| Issues / Work Items | Yes | Yes | Yes (Work Items) |\n| Multi-file commits | Yes | Yes (Git Data API) | Yes (Pushes API) |\n| Merge / Pull Requests | Yes | Yes | Yes |\n| CI pipelines | Yes (GitLab CI) | Yes (GitHub Actions) | Yes (Azure Pipelines) |\n| Pipeline history page | Yes | — | — |\n| Job log traces | Yes | Yes | Yes |\n| Server-side rebase | Yes | — | — |\n| Ticket labels | Yes | Yes | Yes (Tags) |\n| Delete tickets | Yes (project Owner) | — (close instead) | Yes (recycle bin) |\n| Review env link on MRs | Yes (environment deployed by the MR pipeline) | — | — |\n\nOn GitLab, the MR tab shows a **Review env ↗** link when the MR's pipeline has deployed a live environment with an external URL (e.g. a `review/mr-<iid>` job with `environment:url`). No config needed; MRs without one show nothing.\n\n---\n\n## Security\n\nForge is designed for self-hosted deployment on trusted infrastructure. Security measures in place:\n\n- **Member accounts** — each person signs in with a password (scrypt) or SSO (OIDC with PKCE). Sessions are httpOnly, SameSite cookies stored server-side as hashes, with a 12-hour idle and 7-day absolute limit. No credential ever reaches browser JavaScript or the client bundle\n- **Roles** — viewer, operator, approver and admin, enforced on every API route. Merging needs approver; connections, repos and members need admin\n- **Audit log** — every sign-in and every change is recorded with who, what, where and the outcome. It is append-only and visible to admins under Audit log\n- **Encryption at rest** — SCM tokens in `~/.forge/config.json` are sealed with AES-256-GCM\n- **CSRF protection** — cookie-authenticated writes require a custom request header\n- **Brute-force protection** — accounts lock for 15 minutes after 5 failed sign-ins, and sign-in endpoints are rate-limited per IP. API calls are rate-limited per member\n- **API tokens** — personal tokens for the CLI and automation, shown once, stored hashed and revocable\n- **Security headers** — Helmet middleware sets X-Frame-Options, HSTS, X-Content-Type-Options, and CSP (production)\n- **Request size limits** — JSON body capped at 1MB to prevent memory exhaustion\n- **Secret redaction** — error logs and API responses scrub tokens (`glpat-*`, `ghp_*`, `oauth2:*@`) before output\n- **File permissions** — config files (`~/.forge/config.json`) written with `0600`, session directories with `0700`\n- **Git credential isolation** — SCM tokens passed via `GIT_ASKPASS` helper, never embedded in clone URLs\n- **Path traversal protection** — symlink-aware `realpath` checks prevent file writes outside clone directories\n- **No shell injection** — all subprocess calls use `spawn()` with argument arrays, never shell strings\n- **Atomic config writes** — config updates use temp file + rename to prevent corruption\n\n`FORGE_TOKEN`, when set, is an admin credential for automation. Use a long random value, never reuse an SCM token, and set `FORGE_DISABLE_SERVICE_TOKEN=1` once your team uses personal API tokens.\n\n### First run\n\nOpen Forge and create the first admin account. On the server machine itself (`localhost`) that is all it takes. From anywhere else the form asks for a setup code, which Forge prints to its log on first start (or your `FORGE_TOKEN`, if set), so nobody can claim a fresh install that is reachable on the network. Add the rest of your team under **Members**, or turn on SSO with the `FORGE_OIDC_*` variables.\n\nThe `forge` CLI authenticates with a personal API token: create one under **Settings → API tokens** and export it as `FORGE_API_TOKEN`.\n\n---\n\n## Production deployment\n\nOn a server, install from npm and run `forge start` as a service (systemd, pm2 or similar) from the folder holding your `.env`. Put it behind your HTTPS reverse proxy and set `FORGE_PUBLIC_URL` to the address people use.\n\nFrom a source checkout:\n\n```bash\nnpm run build          # builds the SPA to dist/\nNODE_ENV=production tsx server.ts\n```\n\nOr with Docker, from a checkout:\n\n```bash\ndocker build -t forge .\ndocker run -p 5001:5001 --env-file .env -v forge-data:/data forge\n```\n\n### Kubernetes\n\n`manifests/forge/` holds an example Deployment, Service, ConfigMap and Secret template. Build and push the Docker image to your own registry, set `image` in `deployment.yaml`, create the secret, then:\n\n```bash\nkubectl create namespace forge\nkubectl apply -n forge -f manifests/forge/\n```\n\n---\n\n## Architecture\n\nFull-stack TypeScript. The backend runs via `tsx` (no build step); the frontend compiles through Vite.\n\n```\nbin/\n  forge-agent.ts        # CLI entry point (forge command)\n  cli/\n    ship.ts             # End-to-end orchestrator (Ink UI)\n    analyze.ts          # Two-pass issue analysis\n    repl.ts             # Interactive terminal (Ink-based)\n    serverClient.ts     # CLI → Server API client (server/local mode)\n    sessionStore.ts     # ~/.forge/sessions/ persistence\n    ...\n\nshared/\n  events.ts             # FORGE_EVENTS constants (server + client)\n\nserver/\n  forge/\n    routes.ts           # Express router — all /api/forge/* endpoints\n    core/\n      ForgeAgent.ts     # Orchestrates the full pipeline (analyze -> apply -> refine)\n      claudeClient.ts   # Shells out to the claude CLI for structured output\n      agentClient.ts    # Thin wrapper over claudeClient\n      jobs.ts           # Job store with SSE event buffering + replay\n      providers/\n        base.ts         # Abstract ScmProvider — normalized shapes + interface\n        gitlab.ts       # GitLab REST API v4\n        github.ts       # GitHub REST API v3 + Git Data API\n        azuredevops.ts  # Azure DevOps REST API\n        index.ts        # createProvider() factory\n\nsrc/\n  views/Forge/\n    ForgeDashboard.tsx      # Root UI component with tabbed issue/MR views\n    api.ts                  # Session-aware fetch helper (cookie + CSRF header)\n    types.ts                # Shared TypeScript types\n    utils.ts                # SSE helper + state utilities\n    ui.ts                   # Shared responsive class tokens (touch-sized actions)\n    components/             # Analysis progress, pipeline status, diff viewer, Sheet, Switch\n    shell/                  # App chrome: sidebar (drawer on phones), top bar, command palette, phone tab bar\n      useNav.ts             # Single nav definition shared by sidebar, tab bar and command palette\n    hooks/\n      useForgeDashboard.ts  # All state, phase transitions, and API calls\n      useForgeEvents.ts     # SSE event bus subscription\n```\n\n### Mobile layout\n\nBelow Tailwind's `md` breakpoint (768px) the dashboard adds iOS-style touches on top of the responsive shell: a bottom tab bar (Issues · Merge requests · Pipelines · Settings) on list pages, a New task button in the top bar, New Task as a bottom sheet, iOS switches, full-width 50pt primary actions, and 16px form fields so Safari doesn't zoom. The sidebar (repo picker, usage, theme, admin pages, sign-out) opens as a drawer from the top bar. It respects safe-area insets and uses `100dvh`, so it works as a home-screen web app on iPhone. Desktop layout is unchanged.\n\n### Install as an app (PWA)\n\nForge ships a web app manifest (`public/manifest.webmanifest`) and icons, so it can be installed. On iPhone open it in Safari → Share → **Add to Home Screen**; on Android/Chrome use **Install app**. It opens standalone at `/issues`. The icon source is `public/icon.svg`; regenerate the PNGs after changing it:\n\n```bash\nfor s in 180 192 512; do magick -background none -density 384 public/icon.svg -resize ${s}x${s} -strip PNG32:public/icon-$s.png; done\nmv public/icon-180.png public/apple-touch-icon.png\n```\n\nIf the app bundle fails to load or throws before React mounts, `public/boot-check.js` reloads once (a stale bundle after a deploy) and then shows the error with the browser's user agent and a Reload button instead of a blank screen. In production a missing file under `/assets/` returns 404 rather than `index.html`, so a stale bundle fails visibly.\n\n### Agent modes\n\nForge can drive Claude in two ways, set by `FORGE_AGENT_MODE` (or the Settings default, or a per-request `agentMode`):\n\n- **`structured`** (default) — the two-pass JSON pipeline below. Deterministic and schema-validated: Claude runs single-turn with tools disabled and returns complete file contents that Forge overlays onto a clone.\n- **`agentic`** — Claude runs as a full Claude Code agent inside a checkout of the repo: real tools (Read/Edit/Write/Bash…), the project's own `CLAUDE.md`, and a multi-turn loop. Forge captures the resulting `git diff` instead of parsing JSON, then feeds those changes into the same apply/validate/MR pipeline. The capture never includes symlinks or dependency folders (`node_modules`, `bower_components`, `jspm_packages`, `.venv`, `__pycache__`), whatever the repo's `.gitignore` says; anything left out is noted in the run log. Higher fidelity, less determinism. Requires the `claude` backend, a single repo, and a GitLab primary — otherwise Forge logs why and falls back to structured. Pick the mode under **Settings → Defaults → Agent mode**.\n\n  Refine follows the mode too. In agentic mode a follow-up (\"open it in Playwright and check it\", \"rename the prop\") runs as the same full agent in the issue's worktree with the current proposal already applied, so it can run tests and browsers, gather evidence and edit. If it changes nothing and gathers no evidence, its reply comes back as an answer and the proposal is left as it was. In structured mode, refine only gets read-only repo access (Read/Glob/Grep), so it can't run anything. CI-fix refines always use the structured fix.\n\n### Rules and evidence\n\n**Settings → Defaults → Prompt rules** is free text added to every analysis and refine prompt as \"Custom rules — always follow these\", in both modes. In agentic mode the target repo's `CLAUDE.md` applies as well, so repo conventions belong there and Forge-wide instructions belong in the rules.\n\nIn agentic mode a rule can also ask for proof, e.g. *\"Run the e2e tests and screenshot every page you changed, at desktop and phone width.\"* Forge doesn't capture anything itself: the agent installs and runs what it needs (Playwright and its browsers included) and leaves the results in `.forge-evidence/` at the checkout root:\n\n- `.forge-evidence/EVIDENCE.md` — what it ran and what it saw; images are linked by file name (`![home](home.png)`)\n- PNG/JPEG/GIF/WebP screenshots next to it (nested folders are fine; up to 10 images, 10 MB each)\n\nAfter the run Forge uploads the images to the GitLab project, points the write-up's links at the uploads (appending any image it didn't mention), and puts the result in the MR's **🧪 Testing** section. The folder is cleared before each run and listed in the clone's `.git/info/exclude`, so it is never committed. A failed upload is logged in the activity feed and doesn't fail the analysis. The agent's run is bounded by `cliTimeout` (10 minutes by default), so a full browser install plus a long suite may need more.\n\n### Workspaces\n\nEvery local checkout Forge works in lives under `~/.forge/cache` (or `FORGE_VALIDATE_CACHE`):\n\n```\nrepos/<repo>/                  shallow base clone, one per repo\nworktrees/<repo>/issue-<iid>/  git worktree per issue, on its forge/issue-… branch\n```\n\nAgentic runs, refine (with repo access) and validation each lease the issue's worktree, reset it to the remote HEAD, and release it when done. Different issues never share a tree, and git work on one repo (fetch, worktree add/remove) is serialised. Ignored files such as `node_modules` survive between runs of the same issue.\n\n**Settings → Workspaces** (admins) lists every base clone and worktree with its size, last use and whether a running job holds it, plus anything Forge doesn't own any more: clones from the old one-clone-per-repo layout (\"Old-layout clone\") and worktree folders git no longer knows about (\"Stray folder\"). You can delete one, or **Purge idle** to remove everything not in use; tick *Include base clones* to drop base clones that have no worktrees left too. A deleted workspace is simply re-created by the next job that needs it. The same actions are available as `GET /workspaces`, `DELETE /workspaces?id=<id>` and `POST /workspaces/purge` (`{\"includeBases\": true}`); a workspace in use answers 409.\n\n### Two-pass analysis (structured mode)\n\n**Pass 1** — `identifyRelevantFiles`: Claude reads the issue + file tree, returns the max-6 most relevant paths.\n\n**Pass 2** — `proposeFix`: Claude reads the actual file contents and proposes a targeted fix as a JSON diff.\n\nBoth passes use `claude --print --output-format json` so cost and service tier are tracked automatically.\n\n### CI refinement\n\nWhen a pipeline fails, Forge fetches the last 150 lines of each failed job's trace log and feeds them to pass 2 with an explicit \"pipeline failed\" framing — not generic reviewer feedback. This improves fix quality for common failures like lint errors and type errors.\n\n### Provider abstraction\n\nAll three SCM providers implement `ScmProvider` from `providers/base.ts`. The contract is:\n- **Normalized return types** — all methods return `NormalIssue`, `NormalMR`, `NormalPipeline`, etc., regardless of provider\n- **Instance-scoped** — each provider is instantiated with a repo string; no global state\n- **`supportsRebase`** — providers that don't support server-side rebase return `false`; the UI and API layer check this before showing the rebase button\n\n---\n\n## Programmatic usage\n\nThe npm package ships compiled JavaScript with TypeScript declarations — no `tsx` or TypeScript runtime needed by consumers.\n\n```ts\nimport { createApi } from \"@ipul-labs/forge/app\";       // Express app with auth + API\nimport { ForgeAgent } from \"@ipul-labs/forge/agent\";    // Core pipeline class\nimport { createProvider } from \"@ipul-labs/forge/providers\"; // SCM factory\n```\n\nThe bare router (`@ipul-labs/forge`) expects the auth stack in front of it and rejects requests without a signed-in principal. Mount `createApi({ db, env: process.env, isProd })` instead, with `db` from `openDatabase`.\n\n```ts\nconst agent = new ForgeAgent({ project: \"group/repo\" });\nconst result = await agent.analyzeIssue(42, (event) => console.log(event));\nconst { branchName, mr } = await agent.applyFix(result);\n```\n\n### Development\n\nSource is TypeScript (`.ts`). The dev server runs via `tsx` (no build step). For the npm package, `tsc` compiles to `lib/` with declarations during `prepack`.\n\n```bash\nnpm run dev              # tsx watch + vite (dev)\nnpm run build:server     # compile server/bin/shared → lib/\nnpm run typecheck        # check both frontend + server configs\n```\n\n---\n\n## Contributing\n\nThe source repository is private for now. Send bug reports, ideas and security problems to support@ipullabs.com; please report security problems privately rather than in public.\n\n## Support\n\nQuestions or problems with Forge: support@ipullabs.com\n\n---\n\n## License\n\nMIT. Forge is free to use, change and share, for personal or commercial work. The full license text is in the `LICENSE` file that ships with the package.\n"
 }

package/lib/bin/cli/improve.d.ts

@@ -1,2 +0,0 @@
-export declare function cmdImprove(argv: string[]): Promise<void>;
-//# sourceMappingURL=improve.d.ts.map

package/lib/bin/cli/improve.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"improve.d.ts","sourceRoot":"","sources":["../../../bin/cli/improve.ts"],"names":[],"mappings":"AAmMA,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgC9D"}

package/lib/bin/cli/improve.js

@@ -1,189 +0,0 @@
-var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
-    if (typeof path === "string" && /^\.\.?\//.test(path)) {
-        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
-            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
-        });
-    }
-    return path;
-};
-import path from "node:path";
-import { useEffect, useState } from "react";
-import Spinner from "ink-spinner";
-import { h, Box, Text, useApp, runApp } from "./ink.js";
-import { projectRoot, getFlag } from "./utils.js";
-async function resolveSelfRepo(argv) {
-    const explicit = getFlag(argv, "--repo");
-    if (explicit)
-        return explicit;
-    if (process.env.FORGE_SELF_REPO)
-        return process.env.FORGE_SELF_REPO;
-    try {
-        const { get } = await import(__rewriteRelativeImportExtension(path.join(projectRoot, "server/forge/core/configStore.ts")));
-        const repos = get()?.repos ?? [];
-        const forgeRepo = repos.find((r) => r.id.toLowerCase().includes("forge"));
-        if (forgeRepo)
-            return forgeRepo.id;
-    }
-    catch { }
-    return null;
-}
-function ImproveView({ mode, repo, onDone }) {
-    const { exit } = useApp();
-    const [phase, setPhase] = useState("evaluating");
-    const [result, setResult] = useState(null);
-    const [issues, setIssues] = useState([]);
-    const [currentShip, setCurrentShip] = useState(null);
-    const [error, setError] = useState(null);
-    useEffect(() => {
-        if (phase === "done" || phase === "error") {
-            onDone(result, issues);
-            exit();
-        }
-    }, [phase]);
-    useEffect(() => {
-        (async () => {
-            try {
-                const { evaluate, formatIssueBody } = await import(__rewriteRelativeImportExtension(path.join(projectRoot, "server/forge/core/selfImprove.ts")));
-                const evalResult = await evaluate();
-                setResult(evalResult);
-                if (mode === "evaluate" || evalResult.diagnoses.length === 0 || !repo) {
-                    setPhase("done");
-                    return;
-                }
-                setPhase("creating");
-                const { createProvider } = await import(__rewriteRelativeImportExtension(path.join(projectRoot, "server/forge/core/providers/index.ts")));
-                const provider = createProvider(repo);
-                const created = [];
-                for (const diagnosis of evalResult.diagnoses.slice(0, 3)) {
-                    const body = formatIssueBody(diagnosis);
-                    const title = `[self-improve] ${diagnosis.title}`;
-                    const issue = await provider.createIssue(title, body);
-                    created.push({ iid: issue.iid, title, confidence: diagnosis.confidence, shipped: false });
-                }
-                setIssues(created);
-                if (mode !== "ship" || created.length === 0) {
-                    setPhase("done");
-                    return;
-                }
-                setPhase("shipping");
-                const { execSync } = await import("node:child_process");
-                for (const issue of created) {
-                    if (issue.confidence === "low") {
-                        issue.shipError = "skipped: low confidence — needs manual review";
-                        continue;
-                    }
-                    setCurrentShip(`#${issue.iid}: ${issue.title}`);
-                    try {
-                        execSync(`forge ship ${issue.iid} --repo ${repo} --yes`, { cwd: projectRoot, stdio: "inherit", timeout: 600_000 });
-                        issue.shipped = true;
-                    }
-                    catch (err) {
-                        issue.shipError = err.message?.slice(0, 200) ?? "ship failed";
-                    }
-                }
-                setIssues([...created]);
-                setPhase("done");
-            }
-            catch (err) {
-                setError(err.message);
-                setPhase("error");
-            }
-        })();
-    }, []);
-    if (phase === "evaluating") {
-        return h `<${Box}>
-			<${Text} color="cyan"><${Spinner} type="dots"/></>
-			<${Text}> Evaluating telemetry patterns...</>
-		</>`;
-    }
-    if (phase === "creating") {
-        return h `<${Box}>
-			<${Text} color="cyan"><${Spinner} type="dots"/></>
-			<${Text}> Creating improvement issues...</>
-		</>`;
-    }
-    if (phase === "shipping") {
-        return h `<${Box} flexDirection="column">
-			<${Box}>
-				<${Text} color="cyan"><${Spinner} type="dots"/></>
-				<${Text}> Shipping fix...</>
-			</>
-			${currentShip ? h `<${Text} dimColor>  ${currentShip}</>` : null}
-		</>`;
-    }
-    if (phase === "error") {
-        return h `<${Text} color="red">Error: ${error}</>`;
-    }
-    if (!result)
-        return null;
-    const { diagnoses, summary } = result;
-    return h `<${Box} flexDirection="column" paddingLeft=${1}>
-		<${Text} bold>Self-improvement evaluation</>
-		<${Text} dimColor>${summary.totalEvents} telemetry events, ${result.patterns.length} failure patterns</>
-
-		${diagnoses.length === 0
-        ? h `<${Box} marginTop=${1}><${Text} color="green">No actionable patterns found. Forge is operating normally.</></>`
-        : h `<${Box} flexDirection="column" marginTop=${1}>
-				<${Text} bold>${diagnoses.length} improvement${diagnoses.length === 1 ? "" : "s"} identified:</>
-				${diagnoses.map((d, i) => h `<${Box} key=${i} marginLeft=${1} marginTop=${1} flexDirection="column">
-					<${Box}>
-						<${Text} color=${d.severity === "high" ? "red" : d.severity === "medium" ? "yellow" : "white"}>
-							${d.severity === "high" ? "▲" : d.severity === "medium" ? "●" : "○"}
-						</>
-						<${Text} bold>${d.title}</>
-					</>
-					<${Text} dimColor>  ${d.category} — ${d.evidence.length} evidence items</>
-				</>`)}
-			</>`}
-
-		${issues.length > 0
-        ? h `<${Box} flexDirection="column" marginTop=${1}>
-				<${Text} bold>Issues:</>
-				${issues.map((iss, i) => h `<${Box} key=${i} marginLeft=${1}>
-					<${Text} color=${iss.shipped ? "green" : iss.shipError ? "red" : "yellow"}>
-						${iss.shipped ? "✓" : iss.shipError ? "✘" : "●"}
-					</>
-					<${Text}> #${iss.iid} ${iss.title}</>
-					${iss.shipped ? h `<${Text} color="green"> — MR opened</>` : null}
-					${iss.shipError ? h `<${Text} color="red"> — ${iss.shipError}</>` : null}
-				</>`)}
-			</>`
-        : null}
-	</>`;
-}
-async function isAuthorized() {
-    try {
-        const { get } = await import(__rewriteRelativeImportExtension(path.join(projectRoot, "server/forge/core/configStore.ts")));
-        const config = get();
-        return config?.defaults?.selfImproveEnabled === true;
-    }
-    catch {
-        return false;
-    }
-}
-export async function cmdImprove(argv) {
-    if (!(await isAuthorized()) && !argv.includes("--force")) {
-        console.error("forge improve is disabled. Enable in Settings → Defaults → Self-improve.");
-        process.exit(1);
-    }
-    const ship = argv.includes("--ship");
-    const create = argv.includes("--create") || ship;
-    const json = argv.includes("--json");
-    const repo = await resolveSelfRepo(argv);
-    const mode = ship ? "ship" : create ? "create" : "evaluate";
-    if (json) {
-        const { evaluate } = await import(__rewriteRelativeImportExtension(path.join(projectRoot, "server/forge/core/selfImprove.ts")));
-        const result = await evaluate();
-        process.stdout.write(JSON.stringify(result, null, 2) + "\n");
-        return;
-    }
-    if ((create || ship) && !repo) {
-        console.error("No forge repo configured. Add a repo with 'forge' in its ID, or set FORGE_SELF_REPO.");
-        process.exit(1);
-    }
-    await runApp(h `<${ImproveView}
-			mode=${mode}
-			repo=${repo}
-			onDone=${(r, _issues) => { void r; }} />`);
-}
-//# sourceMappingURL=improve.js.map

package/lib/bin/cli/improve.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"improve.js","sourceRoot":"","sources":["../../../bin/cli/improve.ts"],"names":[],"mappings":";;;;;;;;AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACnD,OAAO,OAAO,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGlD,KAAK,UAAU,eAAe,CAAC,IAAc;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAEpE,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,kCAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kCAAkC,CAAC,EAAC,CAAC;QACzF,MAAM,KAAK,GAAG,GAAG,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1F,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,OAAO,IAAI,CAAC;AACb,CAAC;AAgBD,SAAS,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAoB;IAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAA4D,YAAY,CAAC,CAAC;IAC5G,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAA0B,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAiB,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAExD,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YAC3C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACvB,IAAI,EAAE,CAAC;QACR,CAAC;IACF,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAEZ,SAAS,CAAC,GAAG,EAAE;QACd,CAAC,KAAK,IAAI,EAAE;YACX,IAAI,CAAC;gBACJ,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,kCACjD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kCAAkC,CAAC,EACC,CAAC;gBAE7D,MAAM,UAAU,GAAG,MAAM,QAAQ,EAAE,CAAC;gBACpC,SAAS,CAAC,UAAU,CAAC,CAAC;gBAEtB,IAAI,IAAI,KAAK,UAAU,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACvE,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACjB,OAAO;gBACR,CAAC;gBAED,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACrB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,kCACtC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,sCAAsC,CAAC,EACuE,CAAC;gBAEvI,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;gBACtC,MAAM,OAAO,GAAmB,EAAE,CAAC;gBAEnC,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC1D,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;oBACxC,MAAM,KAAK,GAAG,kBAAkB,SAAS,CAAC,KAAK,EAAE,CAAC;oBAClD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBACtD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3F,CAAC;gBAED,SAAS,CAAC,OAAO,CAAC,CAAC;gBAEnB,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC7C,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACjB,OAAO;gBACR,CAAC;gBAED,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACrB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBAExD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC7B,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;wBAChC,KAAK,CAAC,SAAS,GAAG,+CAA+C,CAAC;wBAClE,SAAS;oBACV,CAAC;oBACD,cAAc,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;oBAChD,IAAI,CAAC;wBACJ,QAAQ,CACP,cAAc,KAAK,CAAC,GAAG,WAAW,IAAI,QAAQ,EAC9C,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CACxD,CAAC;wBACF,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;oBACtB,CAAC;oBAAC,OAAO,GAAY,EAAE,CAAC;wBACvB,KAAK,CAAC,SAAS,GAAI,GAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,aAAa,CAAC;oBAC1E,CAAC;gBACF,CAAC;gBAED,SAAS,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;gBACxB,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACvB,QAAQ,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;gBACjC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnB,CAAC;QACF,CAAC,CAAC,EAAE,CAAC;IACN,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,CAAC,CAAA,IAAI,GAAG;MACX,IAAI,kBAAkB,OAAO;MAC7B,IAAI;MACJ,CAAC;IACN,CAAC;IAED,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAA,IAAI,GAAG;MACX,IAAI,kBAAkB,OAAO;MAC7B,IAAI;MACJ,CAAC;IACN,CAAC;IAED,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAA,IAAI,GAAG;MACX,GAAG;OACF,IAAI,kBAAkB,OAAO;OAC7B,IAAI;;KAEN,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA,IAAI,IAAI,eAAe,WAAW,KAAK,CAAC,CAAC,CAAC,IAAI;MAC5D,CAAC;IACN,CAAC;IAED,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,CAAA,IAAI,IAAI,uBAAuB,KAAK,KAAK,CAAC;IACnD,CAAC;IAED,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAEtC,OAAO,CAAC,CAAA,IAAI,GAAG,uCAAuC,CAAC;KACnD,IAAI;KACJ,IAAI,aAAa,OAAO,CAAC,WAAW,sBAAsB,MAAM,CAAC,QAAQ,CAAC,MAAM;;IAEjF,SAAS,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,CAAC,CAAA,IAAI,GAAG,cAAc,CAAC,KAAK,IAAI,iFAAiF;QACnH,CAAC,CAAC,CAAC,CAAA,IAAI,GAAG,qCAAqC,CAAC;OAC5C,IAAI,SAAS,SAAS,CAAC,MAAM,eAAe,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG;MAC9E,SAAS,CAAC,GAAG,CAAC,CAAC,CAAY,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAA,IAAI,GAAG,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC;QACzF,GAAG;SACF,IAAI,UAAU,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;SAC1F,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;;SAEjE,IAAI,SAAS,CAAC,CAAC,KAAK;;QAErB,IAAI,eAAe,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM;QACpD,CAAC;OACF;;IAEH,MAAM,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,CAAC,CAAC,CAAA,IAAI,GAAG,qCAAqC,CAAC;OAC5C,IAAI;MACL,MAAM,CAAC,GAAG,CAAC,CAAC,GAAiB,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAA,IAAI,GAAG,QAAQ,CAAC,eAAe,CAAC;QAC5E,IAAI,UAAU,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;QACtE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;;QAE7C,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK;OAC/B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA,IAAI,IAAI,gCAAgC,CAAC,CAAC,CAAC,IAAI;OAC9D,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA,IAAI,IAAI,mBAAmB,GAAG,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,IAAI;QACpE,CAAC;OACF;QACJ,CAAC,CAAC,IAAI;KACJ,CAAC;AACN,CAAC;AAED,KAAK,UAAU,YAAY;IAC1B,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,kCAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kCAAkC,CAAC,EAAC,CAAC;QACzF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC;QACrB,OAAO,MAAM,EAAE,QAAQ,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc;IAC9C,IAAI,CAAC,CAAC,MAAM,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAmC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;IAE5F,IAAI,IAAI,EAAE,CAAC;QACV,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,kCAChC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kCAAkC,CAAC,EACC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7D,OAAO;IACR,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,sFAAsF,CAAC,CAAC;QACtG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,MAAM,CACX,CAAC,CAAA,IAAI,WAAW;UACR,IAAI;UACJ,IAAI;YACF,CAAC,CAA0B,EAAE,OAAuB,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CACnF,CAAC;AACH,CAAC"}

package/lib/bin/cli/stats.d.ts

@@ -1,2 +0,0 @@
-export declare function cmdStats(argv: string[]): Promise<void>;
-//# sourceMappingURL=stats.d.ts.map

package/lib/bin/cli/stats.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../../../bin/cli/stats.ts"],"names":[],"mappings":"AA6EA,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5D"}

package/lib/bin/cli/stats.js

@@ -1,78 +0,0 @@
-var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
-    if (typeof path === "string" && /^\.\.?\//.test(path)) {
-        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
-            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
-        });
-    }
-    return path;
-};
-import path from "node:path";
-import { useEffect, useState } from "react";
-import { h, Box, Text, useApp, runApp } from "./ink.js";
-import { projectRoot } from "./utils.js";
-function StatsView({ json }) {
-    const { exit } = useApp();
-    const [summary, setSummary] = useState(null);
-    const [patterns, setPatterns] = useState([]);
-    const [error, setError] = useState(null);
-    useEffect(() => {
-        (async () => {
-            try {
-                const { getSummary, getFailurePatterns } = await import(__rewriteRelativeImportExtension(path.join(projectRoot, "server/forge/core/telemetry.ts")));
-                const [s, p] = await Promise.all([getSummary(), getFailurePatterns()]);
-                setSummary(s);
-                setPatterns(p);
-            }
-            catch (err) {
-                setError(err.message);
-            }
-        })();
-    }, []);
-    useEffect(() => {
-        if (summary || error)
-            exit();
-    }, [summary, error]);
-    if (error) {
-        return h `<${Box}><${Text} color="red">Failed to load telemetry: ${error}</></>`;
-    }
-    if (!summary)
-        return null;
-    if (json) {
-        process.stdout.write(JSON.stringify({ summary, patterns }, null, 2) + "\n");
-        return null;
-    }
-    const ops = Object.entries(summary.byOperation);
-    return h `<${Box} flexDirection="column" paddingLeft=${1}>
-		<${Box} marginBottom=${1}>
-			<${Text} bold>Forge Telemetry</>
-			<${Text} dimColor>  ${summary.totalEvents} events recorded</>
-		</>
-
-		${ops.length === 0
-        ? h `<${Text} dimColor>No telemetry data yet. Run some commands first.</>`
-        : ops.map(([op, stats]) => h `<${Box} key=${op} flexDirection="column" marginBottom=${1}>
-				<${Box}>
-					<${Text} bold color="cyan">${op}</>
-					<${Text}>  ${stats.total} total  </>
-					<${Text} color="green">${stats.successes} ok</>
-					<${Text}>  </>
-					<${Text} color=${stats.failures > 0 ? "red" : "green"}>${stats.failures} failed</>
-					<${Text} dimColor>  avg ${(stats.avgDurationMs / 1000).toFixed(1)}s</>
-					${stats.totalCost > 0 ? h `<${Text} dimColor>  $${stats.totalCost.toFixed(4)}</>` : null}
-				</>
-			</>`)}
-
-		${patterns.length > 0 ? h `<${Box} flexDirection="column" marginTop=${1}>
-			<${Text} bold color="yellow">Recurring failure patterns</>
-			${patterns.map((p, i) => h `<${Box} key=${i} marginLeft=${1}>
-				<${Text} color="red">${p.count}x</>
-				<${Text}>  ${p.operation}: ${p.errorPattern}</>
-			</>`)}
-		</>` : null}
-	</>`;
-}
-export async function cmdStats(argv) {
-    const json = argv.includes("--json");
-    await runApp(h `<${StatsView} json=${json} />`);
-}
-//# sourceMappingURL=stats.js.map

package/lib/bin/cli/stats.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../../bin/cli/stats.ts"],"names":[],"mappings":";;;;;;;;AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACnD,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAOzC,SAAS,SAAS,CAAC,EAAE,IAAI,EAAkB;IAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAA0B,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAmB,EAAE,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAExD,SAAS,CAAC,GAAG,EAAE;QACd,CAAC,KAAK,IAAI,EAAE;YACX,IAAI,CAAC;gBACJ,MAAM,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,kCACtD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gCAAgC,CAAC,EACC,CAAC;gBAC3D,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;gBACvE,UAAU,CAAC,CAAC,CAAC,CAAC;gBACd,WAAW,CAAC,CAAC,CAAC,CAAC;YAChB,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACvB,QAAQ,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;QACF,CAAC,CAAC,EAAE,CAAC;IACN,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,OAAO,IAAI,KAAK;YAAE,IAAI,EAAE,CAAC;IAC9B,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAErB,IAAI,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,CAAA,IAAI,GAAG,KAAK,IAAI,0CAA0C,KAAK,QAAQ,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAEhD,OAAO,CAAC,CAAA,IAAI,GAAG,uCAAuC,CAAC;KACnD,GAAG,iBAAiB,CAAC;MACpB,IAAI;MACJ,IAAI,eAAe,OAAO,CAAC,WAAW;;;IAGxC,GAAG,CAAC,MAAM,KAAK,CAAC;QACjB,CAAC,CAAC,CAAC,CAAA,IAAI,IAAI,8DAA8D;QACzE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA,IAAI,GAAG,QAAQ,EAAE,wCAAwC,CAAC;OAClF,GAAG;QACF,IAAI,sBAAsB,EAAE;QAC5B,IAAI,MAAM,KAAK,CAAC,KAAK;QACrB,IAAI,kBAAkB,KAAK,CAAC,SAAS;QACrC,IAAI;QACJ,IAAI,UAAU,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ;QACpE,IAAI,mBAAmB,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;OAC/D,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA,IAAI,IAAI,gBAAgB,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;;OAErF,CAAC;;IAEJ,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA,IAAI,GAAG,qCAAqC,CAAC;MAClE,IAAI;KACL,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA,IAAI,GAAG,QAAQ,CAAC,eAAe,CAAC;OACtD,IAAI,gBAAgB,CAAC,CAAC,KAAK;OAC3B,IAAI,MAAM,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,YAAY;OACxC,CAAC;MACF,CAAC,CAAC,CAAC,IAAI;KACR,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,CAAC,CAAC,CAAA,IAAI,SAAS,SAAS,IAAI,KAAK,CAAC,CAAC;AAChD,CAAC"}

package/lib/server/forge/core/k8s.d.ts

@@ -1,18 +0,0 @@
-export declare function listDeployments(namespace: string): Promise<{
-    name: string;
-    namespace: string;
-    image: string;
-    replicas: {
-        desired: number;
-        ready: number;
-        available: number;
-        unavailable: number;
-        updated: number;
-    };
-    conditions: {
-        type: string;
-        status: string;
-        message: string;
-    }[];
-}[]>;
-//# sourceMappingURL=k8s.d.ts.map

package/lib/server/forge/core/k8s.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"k8s.d.ts","sourceRoot":"","sources":["../../../../server/forge/core/k8s.ts"],"names":[],"mappings":"AA6DA,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;;KAItD"}

package/lib/server/forge/core/k8s.js

@@ -1,49 +0,0 @@
-import * as k8s from "@kubernetes/client-node";
-let kc = new k8s.KubeConfig();
-function loadConfig() {
-    kc = new k8s.KubeConfig();
-    const token = process.env.K8S_CLUSTER_TOKEN;
-    const server = process.env.K8S_CLUSTER_SERVER;
-    if (token && server) {
-        kc.loadFromOptions({
-            clusters: [{ name: "cluster", server, skipTLSVerify: process.env.K8S_SKIP_TLS_VERIFY === "true" }],
-            users: [{ name: "admin", token }],
-            contexts: [{ name: "default", cluster: "cluster", user: "admin" }],
-            currentContext: "default",
-        });
-    }
-    else {
-        kc.loadFromDefault();
-    }
-}
-loadConfig();
-function getAppsApi() {
-    return kc.makeApiClient(k8s.AppsV1Api);
-}
-function formatDeployment(dep) {
-    const containers = dep.spec?.template?.spec?.containers || [];
-    const status = dep.status || {};
-    return {
-        name: dep.metadata?.name,
-        namespace: dep.metadata?.namespace,
-        image: containers[0]?.image || "unknown",
-        replicas: {
-            desired: dep.spec?.replicas || 0,
-            ready: status.readyReplicas || 0,
-            available: status.availableReplicas || 0,
-            unavailable: status.unavailableReplicas || 0,
-            updated: status.updatedReplicas || 0,
-        },
-        conditions: (status.conditions || []).map((c) => ({
-            type: c.type,
-            status: c.status,
-            message: c.message,
-        })),
-    };
-}
-export async function listDeployments(namespace) {
-    const api = getAppsApi();
-    const res = await api.listNamespacedDeployment({ namespace });
-    return (res.items || []).map(formatDeployment);
-}
-//# sourceMappingURL=k8s.js.map

package/lib/server/forge/core/k8s.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"k8s.js","sourceRoot":"","sources":["../../../../server/forge/core/k8s.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,yBAAyB,CAAC;AAc/C,IAAI,EAAE,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;AAE9B,SAAS,UAAU;IAClB,EAAE,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAE9C,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;QACrB,EAAE,CAAC,eAAe,CAAC;YAClB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM,EAAE,CAAC;YAClG,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACjC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAClE,cAAc,EAAE,SAAS;SACzB,CAAC,CAAC;IACJ,CAAC;SAAM,CAAC;QACP,EAAE,CAAC,eAAe,EAAE,CAAC;IACtB,CAAC;AACF,CAAC;AAED,UAAU,EAAE,CAAC;AAEb,SAAS,UAAU;IAClB,OAAO,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAkB;IAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;IAChC,OAAO;QACN,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI;QACxB,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS;QAClC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,SAAS;QACxC,QAAQ,EAAE;YACT,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC;YAChC,KAAK,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC;YAChC,SAAS,EAAE,MAAM,CAAC,iBAAiB,IAAI,CAAC;YACxC,WAAW,EAAE,MAAM,CAAC,mBAAmB,IAAI,CAAC;YAC5C,OAAO,EAAE,MAAM,CAAC,eAAe,IAAI,CAAC;SACpC;QACD,UAAU,EAAE,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAqD,EAAE,EAAE,CAAC,CAAC;YACrG,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,CAAC,CAAC,OAAO;SAClB,CAAC,CAAC;KACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACtD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,wBAAwB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAChD,CAAC"}