@loucompanion/forge-bridge 0.1.3-dev.2c3feac3af65 → 0.1.3-dev.34ddcb672775

package/dist/bridge/bridge.service.js

@@ -1,4 +1,4 @@
-import { HubConnectionBuilder, LogLevel } from "@microsoft/signalr";
+import { HubConnectionBuilder, HttpTransportType, LogLevel } from "@microsoft/signalr";
 import fs from "node:fs";
 import path from "node:path";
 import { defaultForgeBridgeConfig } from "../config.js";
@@ -237,7 +237,9 @@ export class ForgeBridgeService {
             supportsManagedWorktrees: this.config.supportsManagedWorktrees,
             supportsManagedForgeArtifacts: this.config.supportsManagedForgeArtifacts,
             supportsRunnerAuthoredPhaseArtifacts: this.config.supportsRunnerAuthoredPhaseArtifacts,
-            supportsDraftRunOnce: this.config.supportsDraftRunOnce
+            supportsDraftRunOnce: this.config.supportsDraftRunOnce,
+            supportsDraftAttachments: this.config.supportsDraftAttachments,
+            supportsDraftImageAttachments: this.config.supportsDraftImageAttachments
         };
     }
     async invokeAck(methodName, payload) {
@@ -293,7 +295,13 @@ export class SignalRBridgeConnection {
         url.searchParams.set("runnerId", config.runnerId);
         this.connection = new HubConnectionBuilder()
             .withUrl(url.toString(), {
-            accessTokenFactory: () => config.deviceToken
+            // Query-string access tokens are intentionally rejected by the API. The bridge is
+            // a Node CLI, so use long polling where Authorization headers are carried on each
+            // HTTP request instead of relying on browser/WebSocket token fallbacks.
+            transport: HttpTransportType.LongPolling,
+            headers: {
+                Authorization: `Bearer ${config.deviceToken}`
+            }
         })
             .configureLogging(LogLevel.Warning)
             .build();
@@ -342,6 +350,8 @@ export function defaultBridgeServiceConfig(overrides = {}) {
         supportsManagedForgeArtifacts: true,
         supportsRunnerAuthoredPhaseArtifacts: true,
         supportsDraftRunOnce: true,
+        supportsDraftAttachments: true,
+        supportsDraftImageAttachments: false,
         version: process.env.FORGE_BRIDGE_VERSION ?? forgeBridgeVersion,
         protocolVersion: 1,
         minServerVersion: null,
@@ -533,9 +543,16 @@ function abortPromise(signal) {
     }
     return new Promise((resolve) => signal.addEventListener("abort", () => resolve(), { once: true }));
 }
+const maxAttachmentExactSecretLength = 8 * 1024;
 function exactSecrets(dispatch, config) {
     return [
         dispatch.apiKeySecretGrant?.secret,
-        config.deviceToken
+        config.deviceToken,
+        ...boundedAttachmentExactSecrets(dispatch)
     ].filter((secret) => typeof secret === "string" && secret.length > 0);
 }
+function boundedAttachmentExactSecrets(dispatch) {
+    return (dispatch.draft?.attachments ?? [])
+        .flatMap((attachment) => [attachment.textContent, attachment.contentBase64])
+        .filter((secret) => typeof secret === "string" && secret.length > 0 && secret.length <= maxAttachmentExactSecretLength);
+}

package/dist/bridge/bridge.types.d.ts

@@ -17,6 +17,8 @@ export interface BridgeServiceConfig {
     readonly supportsManagedForgeArtifacts: boolean;
     readonly supportsRunnerAuthoredPhaseArtifacts: boolean;
     readonly supportsDraftRunOnce: boolean;
+    readonly supportsDraftAttachments: boolean;
+    readonly supportsDraftImageAttachments: boolean;
     readonly version: string;
     readonly protocolVersion: number;
     readonly minServerVersion?: string | null;
@@ -57,6 +59,8 @@ export interface BridgeCapabilities {
     readonly supportsManagedForgeArtifacts?: boolean | null;
     readonly supportsRunnerAuthoredPhaseArtifacts?: boolean | null;
     readonly supportsDraftRunOnce?: boolean | null;
+    readonly supportsDraftAttachments?: boolean | null;
+    readonly supportsDraftImageAttachments?: boolean | null;
 }
 export interface BridgeHelloRequest {
     readonly version: string;

package/dist/cli/cli.help.d.ts

@@ -0,0 +1,2 @@
+export declare function helpText(): string;
+export declare function commandHelpText(command: string): string;

package/dist/cli/cli.help.js

@@ -0,0 +1,171 @@
+import { defaultBridgeServiceConfig } from "../bridge/bridge.service.js";
+import { forgeBridgeVersion } from "../version.js";
+export function helpText() {
+    const version = defaultBridgeServiceConfig().version ?? forgeBridgeVersion;
+    return [
+        `🛠 Forge Bridge ${version} — Local provider runners for Forge.`,
+        "",
+        "Usage: forge-bridge [options] [command]",
+        "",
+        "Options:",
+        "  -h, --help       Display help for command",
+        "  -v, --version    Output the version number",
+        "",
+        "Commands:",
+        "  Hint: commands suffixed with * have detailed help. Run <command> --help for details.",
+        "  connect *        Start the runner bridge and wait for Forge dispatches",
+        "  pair *           Pair this machine with Forge and save runner credentials",
+        "  status *         Show config, runner identity, repos, provider CLIs, and updates",
+        "  add-repo *       Map a Forge repo label/name to a local checkout path",
+        "  remove-repo *    Remove a saved repo mapping",
+        "  cleanup *        Prune managed bridge worktrees",
+        "  version *        Print the installed bridge package version",
+        "  help *           Display help for command",
+        "  run-once *       Internal: run one dispatch packet from JSON",
+        "  mcp *            Internal: run the phase-completion MCP server",
+        "",
+        "Examples:",
+        "  npm install -g @loucompanion/forge-bridge@next",
+        "  forge-bridge pair 1234-5678 --server https://srv1493013.tail66073d.ts.net:8443 --repo-root \"%USERPROFILE%\\ForgeRepos\"",
+        "  forge-bridge connect",
+        "  forge-bridge status --check-updates",
+        "  forge-bridge add-repo Forge D:\\Programming\\repos\\Forge",
+        "  forge-bridge cleanup --stale",
+        "",
+        "Troubleshooting:",
+        "  If Forge says the bridge is old: npm install -g @loucompanion/forge-bridge@next",
+        "  If connect shows 502/500: leave it open; it reconnects with backoff while dev restarts.",
+        "  If a provider is missing: run forge-bridge status --check-updates and verify CLI login.",
+        "",
+        "Docs:",
+        "  https://github.com/coleman399/Forge/tree/develop/tools/forge-bridge#readme",
+        "",
+    ].join("\n");
+}
+export function commandHelpText(command) {
+    switch (command) {
+        case "pair":
+            return [
+                "Forge Bridge — pair",
+                "Pair this machine with Forge and save runner credentials.",
+                "",
+                "Usage:",
+                "  forge-bridge pair [code] [options]",
+                "",
+                "Options:",
+                "  --server <url>              Forge server URL.",
+                "  --repo-root <path>          Folder where bridge-managed repos/worktrees live.",
+                "  --name <name>               Display name for this runner.",
+                "  --fingerprint <value>       Stable device fingerprint override.",
+                "  --cli-provider <list>       Comma-separated providers, e.g. codex,cursor.",
+                "  --cleanup-worktrees         Enable managed worktree cleanup.",
+                "  --no-cleanup-worktrees      Disable managed worktree cleanup.",
+                "",
+                "Example:",
+                "  forge-bridge pair 1234-5678 --server https://forge.example.com --repo-root \"%USERPROFILE%\\ForgeRepos\"",
+                "",
+            ].join("\n");
+        case "connect":
+            return [
+                "Forge Bridge — connect",
+                "Start the runner bridge and keep it connected for Forge dispatches.",
+                "",
+                "Usage:",
+                "  forge-bridge connect [options]",
+                "",
+                "Options:",
+                "  --server <url>              Forge server URL; saved config is used when omitted.",
+                "  --runner-id <id>            Runner id; saved config is used when omitted.",
+                "  --device-token <token>      Device token; saved config is used when omitted.",
+                "  --repo-root <path>          Override repo/worktree folder for this run.",
+                "  --cli-provider <list>       Comma-separated providers, e.g. codex,cursor.",
+                "  --heartbeat-interval-ms <n> Heartbeat interval in milliseconds.",
+                "  --cleanup-worktrees         Enable managed worktree cleanup for this run.",
+                "  --no-cleanup-worktrees      Disable managed worktree cleanup for this run.",
+                "",
+                "Example:",
+                "  forge-bridge connect",
+                "",
+            ].join("\n");
+        case "status":
+            return [
+                "Forge Bridge — status",
+                "Show saved configuration, paired runner identity, repo mappings, detected provider CLIs, and optional update info.",
+                "",
+                "Usage:",
+                "  forge-bridge status [--check-updates]",
+                "",
+                "Example:",
+                "  forge-bridge status --check-updates",
+                "",
+            ].join("\n");
+        case "add-repo":
+            return [
+                "Forge Bridge — add-repo",
+                "Map a Forge repo label/name to an existing local checkout.",
+                "",
+                "Usage:",
+                "  forge-bridge add-repo <label> <path>",
+                "",
+                "Example:",
+                "  forge-bridge add-repo Forge D:\\Programming\\repos\\Forge",
+                "",
+            ].join("\n");
+        case "remove-repo":
+            return [
+                "Forge Bridge — remove-repo",
+                "Remove a saved local repo mapping.",
+                "",
+                "Usage:",
+                "  forge-bridge remove-repo <label>",
+                "",
+            ].join("\n");
+        case "cleanup":
+            return [
+                "Forge Bridge — cleanup",
+                "Prune managed bridge worktrees under the configured repo folder.",
+                "",
+                "Usage:",
+                "  forge-bridge cleanup [--stale|--merged|--all] [--force]",
+                "",
+                "Examples:",
+                "  forge-bridge cleanup --stale",
+                "  forge-bridge cleanup --all --force",
+                "",
+            ].join("\n");
+        case "run-once":
+            return [
+                "Forge Bridge — run-once",
+                "Internal command used by Forge to run a single dispatch packet.",
+                "",
+                "Usage:",
+                "  forge-bridge run-once --dispatch <dispatch-json-path> --result <result-json-path>",
+                "",
+            ].join("\n");
+        case "mcp":
+            return [
+                "Forge Bridge — mcp",
+                "Internal MCP server used by provider CLIs to report Forge phase artifacts.",
+                "",
+                "Usage:",
+                "  forge-bridge mcp --worktree <path> --work-item-id <id> --phase <phase>",
+                "",
+            ].join("\n");
+        case "version":
+            return [
+                "Forge Bridge — version",
+                "Print the installed bridge package version.",
+                "",
+                "Usage:",
+                "  forge-bridge version",
+                "",
+            ].join("\n");
+        default:
+            return [
+                `Unknown forge-bridge command: ${command}`,
+                "",
+                "Run `forge-bridge help` to see available commands.",
+                "",
+            ].join("\n");
+    }
+}

package/dist/cli/cli.service.js

@@ -5,6 +5,7 @@ import path from "node:path";
 import { createInterface } from "node:readline/promises";
 import { promisify } from "node:util";
 import { resolveCursorAgentDirectLaunch } from "../shared/cursor-agent/cursor-agent.launch.js";
+import { buildWindowsCmdLaunch } from "../shared/process/windows-launch.js";
 import { redactSecrets, redactText } from "../shared/redaction/redaction.js";
 import { defaultBridgeServiceConfig, ForgeBridgeService } from "../bridge/bridge.service.js";
 import { forgeBridgeVersion } from "../version.js";
@@ -12,6 +13,7 @@ import { addRepoMapping, applyLocalConfigDefaults, providerStatusesFor, readLoca
 import { BridgeSessionService } from "../session/session.service.js";
 import { parseCompletionMcpArgs, runCompletionMcpServer } from "../session/phase-completion.js";
 import { failureResult, parseRunOnceDispatchPacket } from "../session/session.types.js";
+import { commandHelpText, helpText } from "./cli.help.js";
 const apiKeySecretGrantEnv = "FORGE_API_KEY_SECRET_GRANT";
 const execFileAsync = promisify(execFile);
 export class ForgeBridgeCliService {
@@ -253,7 +255,7 @@ export function parseArgs(argv) {
     if (argv[0] !== "run-once") {
         return {
             ok: false,
-            error: usage()
+            error: helpText()
         };
     }
     let dispatchPath = null;
@@ -497,6 +499,8 @@ function pairedConfig(current, args, claim) {
         supportsManagedForgeArtifacts: current.supportsManagedForgeArtifacts ?? true,
         supportsRunnerAuthoredPhaseArtifacts: current.supportsRunnerAuthoredPhaseArtifacts ?? true,
         supportsDraftRunOnce: current.supportsDraftRunOnce ?? true,
+        supportsDraftAttachments: current.supportsDraftAttachments ?? true,
+        supportsDraftImageAttachments: current.supportsDraftImageAttachments ?? false,
         repoMappings: current.repoMappings ?? []
     };
 }
@@ -544,178 +548,6 @@ function normalizePairingCode(code) {
 function normalizeServerUrl(serverUrl) {
     return serverUrl.endsWith("/") ? serverUrl : `${serverUrl}/`;
 }
-function usage() {
-    return helpText();
-}
-function helpText() {
-    const version = defaultBridgeServiceConfig().version ?? forgeBridgeVersion;
-    return [
-        `🛠 Forge Bridge ${version} — Local provider runners for Forge.`,
-        "",
-        "Usage: forge-bridge [options] [command]",
-        "",
-        "Options:",
-        "  -h, --help       Display help for command",
-        "  -v, --version    Output the version number",
-        "",
-        "Commands:",
-        "  Hint: commands suffixed with * have detailed help. Run <command> --help for details.",
-        "  connect *        Start the runner bridge and wait for Forge dispatches",
-        "  pair *           Pair this machine with Forge and save runner credentials",
-        "  status *         Show config, runner identity, repos, provider CLIs, and updates",
-        "  add-repo *       Map a Forge repo label/name to a local checkout path",
-        "  remove-repo *    Remove a saved repo mapping",
-        "  cleanup *        Prune managed bridge worktrees",
-        "  version *        Print the installed bridge package version",
-        "  help *           Display help for command",
-        "  run-once *       Internal: run one dispatch packet from JSON",
-        "  mcp *            Internal: run the phase-completion MCP server",
-        "",
-        "Examples:",
-        "  npm install -g @loucompanion/forge-bridge@next",
-        "  forge-bridge pair 1234-5678 --server https://srv1493013.tail66073d.ts.net:8443 --repo-root \"%USERPROFILE%\\ForgeRepos\"",
-        "  forge-bridge connect",
-        "  forge-bridge status --check-updates",
-        "  forge-bridge add-repo Forge D:\\Programming\\repos\\Forge",
-        "  forge-bridge cleanup --stale",
-        "",
-        "Troubleshooting:",
-        "  If Forge says the bridge is old: npm install -g @loucompanion/forge-bridge@next",
-        "  If connect shows 502/500: leave it open; it reconnects with backoff while dev restarts.",
-        "  If a provider is missing: run forge-bridge status --check-updates and verify CLI login.",
-        "",
-        "Docs:",
-        "  https://github.com/coleman399/Forge/tree/develop/tools/forge-bridge#readme",
-        "",
-    ].join("\n");
-}
-function commandHelpText(command) {
-    switch (command) {
-        case "pair":
-            return [
-                "Forge Bridge — pair",
-                "Pair this machine with Forge and save runner credentials.",
-                "",
-                "Usage:",
-                "  forge-bridge pair [code] [options]",
-                "",
-                "Options:",
-                "  --server <url>              Forge server URL.",
-                "  --repo-root <path>          Folder where bridge-managed repos/worktrees live.",
-                "  --name <name>               Display name for this runner.",
-                "  --fingerprint <value>       Stable device fingerprint override.",
-                "  --cli-provider <list>       Comma-separated providers, e.g. codex,cursor.",
-                "  --cleanup-worktrees         Enable managed worktree cleanup.",
-                "  --no-cleanup-worktrees      Disable managed worktree cleanup.",
-                "",
-                "Example:",
-                "  forge-bridge pair 1234-5678 --server https://forge.example.com --repo-root \"%USERPROFILE%\\ForgeRepos\"",
-                "",
-            ].join("\n");
-        case "connect":
-            return [
-                "Forge Bridge — connect",
-                "Start the runner bridge and keep it connected for Forge dispatches.",
-                "",
-                "Usage:",
-                "  forge-bridge connect [options]",
-                "",
-                "Options:",
-                "  --server <url>              Forge server URL; saved config is used when omitted.",
-                "  --runner-id <id>            Runner id; saved config is used when omitted.",
-                "  --device-token <token>      Device token; saved config is used when omitted.",
-                "  --repo-root <path>          Override repo/worktree folder for this run.",
-                "  --cli-provider <list>       Comma-separated providers, e.g. codex,cursor.",
-                "  --heartbeat-interval-ms <n> Heartbeat interval in milliseconds.",
-                "  --cleanup-worktrees         Enable managed worktree cleanup for this run.",
-                "  --no-cleanup-worktrees      Disable managed worktree cleanup for this run.",
-                "",
-                "Example:",
-                "  forge-bridge connect",
-                "",
-            ].join("\n");
-        case "status":
-            return [
-                "Forge Bridge — status",
-                "Show saved configuration, paired runner identity, repo mappings, detected provider CLIs, and optional update info.",
-                "",
-                "Usage:",
-                "  forge-bridge status [--check-updates]",
-                "",
-                "Example:",
-                "  forge-bridge status --check-updates",
-                "",
-            ].join("\n");
-        case "add-repo":
-            return [
-                "Forge Bridge — add-repo",
-                "Map a Forge repo label/name to an existing local checkout.",
-                "",
-                "Usage:",
-                "  forge-bridge add-repo <label> <path>",
-                "",
-                "Example:",
-                "  forge-bridge add-repo Forge D:\\Programming\\repos\\Forge",
-                "",
-            ].join("\n");
-        case "remove-repo":
-            return [
-                "Forge Bridge — remove-repo",
-                "Remove a saved local repo mapping.",
-                "",
-                "Usage:",
-                "  forge-bridge remove-repo <label>",
-                "",
-            ].join("\n");
-        case "cleanup":
-            return [
-                "Forge Bridge — cleanup",
-                "Prune managed bridge worktrees under the configured repo folder.",
-                "",
-                "Usage:",
-                "  forge-bridge cleanup [--stale|--merged|--all] [--force]",
-                "",
-                "Examples:",
-                "  forge-bridge cleanup --stale",
-                "  forge-bridge cleanup --all --force",
-                "",
-            ].join("\n");
-        case "run-once":
-            return [
-                "Forge Bridge — run-once",
-                "Internal command used by Forge to run a single dispatch packet.",
-                "",
-                "Usage:",
-                "  forge-bridge run-once --dispatch <dispatch-json-path> --result <result-json-path>",
-                "",
-            ].join("\n");
-        case "mcp":
-            return [
-                "Forge Bridge — mcp",
-                "Internal MCP server used by provider CLIs to report Forge phase artifacts.",
-                "",
-                "Usage:",
-                "  forge-bridge mcp --worktree <path> --work-item-id <id> --phase <phase>",
-                "",
-            ].join("\n");
-        case "version":
-            return [
-                "Forge Bridge — version",
-                "Print the installed bridge package version.",
-                "",
-                "Usage:",
-                "  forge-bridge version",
-                "",
-            ].join("\n");
-        default:
-            return [
-                `Unknown forge-bridge command: ${command}`,
-                "",
-                "Run `forge-bridge help` to see available commands.",
-                "",
-            ].join("\n");
-    }
-}
 function connectStartupText(config) {
     const runner = config.runnerId
         ? `${config.runnerId}${config.deviceName ? ` (${config.deviceName})` : ""}`
@@ -862,17 +694,9 @@ async function execVersionCommand(probe, timeout = 2000) {
         if (process.platform !== "win32") {
             throw error;
         }
-        return await execFileAsync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", windowsCommandLine(probe)], { timeout });
-    }
-}
-function windowsCommandLine(probe) {
-    return [probe.command, ...probe.args].map(quoteWindowsCommandLineArg).join(" ");
-}
-function quoteWindowsCommandLineArg(value) {
-    if (value.length > 0 && !/[\s"]/.test(value)) {
-        return value;
+        const launch = buildWindowsCmdLaunch(probe.command, probe.args);
+        return await execFileAsync(launch.command, [...launch.args], { timeout });
     }
-    return `"${value.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\+)$/g, "$1$1")}"`;
 }
 function versionLine(output) {
     const lines = output

package/dist/cli/local-config.d.ts

@@ -17,6 +17,8 @@ export interface BridgeLocalConfig {
     readonly supportsManagedForgeArtifacts?: boolean;
     readonly supportsRunnerAuthoredPhaseArtifacts?: boolean;
     readonly supportsDraftRunOnce?: boolean;
+    readonly supportsDraftAttachments?: boolean;
+    readonly supportsDraftImageAttachments?: boolean;
 }
 export interface LocalRepoMapping extends BridgeRepoMapping {
     readonly label: string;

package/dist/cli/local-config.js

@@ -54,7 +54,9 @@ export function applyLocalConfigDefaults(config, local) {
         supportsManagedWorktrees: local.supportsManagedWorktrees ?? config.supportsManagedWorktrees,
         supportsManagedForgeArtifacts: local.supportsManagedForgeArtifacts ?? config.supportsManagedForgeArtifacts,
         supportsRunnerAuthoredPhaseArtifacts: local.supportsRunnerAuthoredPhaseArtifacts ?? config.supportsRunnerAuthoredPhaseArtifacts,
-        supportsDraftRunOnce: local.supportsDraftRunOnce ?? config.supportsDraftRunOnce
+        supportsDraftRunOnce: local.supportsDraftRunOnce ?? config.supportsDraftRunOnce,
+        supportsDraftAttachments: local.supportsDraftAttachments ?? config.supportsDraftAttachments,
+        supportsDraftImageAttachments: local.supportsDraftImageAttachments ?? config.supportsDraftImageAttachments
     };
 }
 export async function addRepoMapping(label, repoPath) {
@@ -113,7 +115,9 @@ function normalizeLocalConfig(config) {
         supportsManagedWorktrees: config.supportsManagedWorktrees,
         supportsManagedForgeArtifacts: config.supportsManagedForgeArtifacts,
         supportsRunnerAuthoredPhaseArtifacts: config.supportsRunnerAuthoredPhaseArtifacts,
-        supportsDraftRunOnce: config.supportsDraftRunOnce
+        supportsDraftRunOnce: config.supportsDraftRunOnce,
+        supportsDraftAttachments: config.supportsDraftAttachments,
+        supportsDraftImageAttachments: config.supportsDraftImageAttachments
     };
 }
 function emptyConfig() {

package/dist/session/phase-completion.artifacts.d.ts

@@ -0,0 +1,10 @@
+import { type CompletionArtifactReference, type CompletionPhase, type CompletionToolServerConfig, type DecomposeCompletionGate, type DraftCompletionGate, type QaCompletionGate } from "./phase-completion.js";
+import type { RunnerDispatchArtifact } from "./session.types.js";
+export declare function writeDecomposeGateCompletionArtifact(config: CompletionToolServerConfig, gate: DecomposeCompletionGate, toolName: string, input: unknown): Promise<CompletionArtifactReference>;
+export declare function writeDraftGateCompletionArtifact(config: CompletionToolServerConfig, gate: DraftCompletionGate, toolName: string, input: unknown): Promise<CompletionArtifactReference>;
+export declare function writeCompletionArtifact(config: CompletionToolServerConfig, toolName: string, input: unknown): Promise<CompletionArtifactReference>;
+export declare function writeArchitectCompletionArtifact(config: CompletionToolServerConfig, payload: Record<string, unknown>, status: string, producedBy: string): Promise<CompletionArtifactReference>;
+export declare function writeQaGateCompletionArtifact(config: CompletionToolServerConfig, gate: QaCompletionGate, input: unknown): Promise<CompletionArtifactReference>;
+export declare function writeQaCompletionArtifact(config: CompletionToolServerConfig, payload: Record<string, unknown>, status: string, producedBy: string): Promise<CompletionArtifactReference>;
+export declare function readQaGateArtifact(config: CompletionToolServerConfig, gate: QaCompletionGate): Promise<Record<string, unknown>>;
+export declare function readCompletionArtifact(worktreePath: string, workItemId: string, phase: CompletionPhase, ownerType?: string | null, ownerId?: string | null): Promise<RunnerDispatchArtifact | null>;