@moretea-labs/forge 1.6.0 → 1.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (469) hide show
  1. package/AGENTS.md +4 -0
  2. package/CHANGELOG.md +39 -0
  3. package/CLAUDE.md +4 -0
  4. package/README.md +2 -2
  5. package/README.zh-CN.md +1 -1
  6. package/SKILL.md +2 -2
  7. package/THIRD_PARTY_NOTICES.md +1 -1
  8. package/agents/openai.yaml +1 -1
  9. package/assets/hooks/hook-input.sh +11 -8
  10. package/assets/hooks/lib/session-state.sh +10 -7
  11. package/assets/hooks/lib/workflow-state.sh +13 -177
  12. package/assets/hooks/post-tool-observer.sh +8 -2
  13. package/assets/hooks/prompt-guard.sh +5 -81
  14. package/assets/hooks/session-start-context.sh +56 -1
  15. package/assets/partials/05-workflow.partial.md +1 -1
  16. package/assets/partials-agents/02-operating-mode.partial.md +2 -0
  17. package/assets/partials-agents/03-orchestration.partial.md +1 -1
  18. package/assets/plugin-registry.v1.json +3 -3
  19. package/assets/reference-configs/document-generation.md +1 -1
  20. package/assets/reference-configs/harness-overview.md +1 -1
  21. package/assets/reference-configs/sprint-contracts.md +3 -3
  22. package/assets/skill-version.json +2 -2
  23. package/assets/templates/contract.template.md +2 -7
  24. package/assets/templates/helpers/capture-plan.sh +2 -2
  25. package/assets/templates/helpers/check-architecture-sync.sh +17 -0
  26. package/assets/templates/helpers/check-task-workflow.sh +4 -4
  27. package/assets/templates/helpers/contract-worktree.sh +1 -21
  28. package/assets/templates/helpers/ensure-task-workflow.sh +11 -36
  29. package/assets/templates/helpers/inspect-project-state.ts +8 -6
  30. package/assets/templates/helpers/migrate-project-template.sh +22 -45
  31. package/assets/templates/helpers/migrate-workflow-docs.ts +9 -7
  32. package/assets/templates/helpers/new-plan.sh +1 -1
  33. package/assets/templates/helpers/plan-to-todo.sh +12 -37
  34. package/assets/templates/helpers/ship-worktrees.sh +2 -29
  35. package/assets/templates/helpers/verify-contract.sh +1 -111
  36. package/assets/templates/helpers/verify-sprint.sh +3 -180
  37. package/assets/templates/helpers/workflow-contract.ts +5 -1
  38. package/assets/templates/plan.template.md +1 -1
  39. package/assets/templates/review.template.md +9 -34
  40. package/assets/workflow-contract.v1.json +10 -19
  41. package/docs/README.md +10 -10
  42. package/docs/architecture/CURRENT.md +178 -0
  43. package/docs/architecture/EVOLUTION.md +42 -0
  44. package/docs/architecture/current/README.md +4 -156
  45. package/docs/architecture/decisions/20260803-release-identity-binding-and-exit-policy.md +2 -2
  46. package/docs/architecture/decisions/20260823-immediate-controller-relay.md +53 -0
  47. package/docs/architecture/decisions/20260826-browser-runtime-v2.md +73 -0
  48. package/docs/architecture/history/README.md +7 -0
  49. package/docs/architecture/{chatgpt-handoff-facade.md → history/chatgpt-handoff-facade.md} +4 -0
  50. package/docs/architecture/{global-hook-runtime.md → history/global-hook-runtime.md} +7 -3
  51. package/docs/architecture/{ios-semantic-automation-provider-v2.md → history/ios-semantic-automation-provider-v2.md} +6 -2
  52. package/docs/architecture/history.md +3 -34
  53. package/docs/architecture/index.md +15 -98
  54. package/docs/architecture/modules/controller-runtime/transport-lifecycle.md +1 -1
  55. package/docs/architecture/reviews/2026-08-22-semantic-harness-convergence-acceptance.md +39 -0
  56. package/docs/architecture/versions/1.6.md +38 -0
  57. package/docs/architecture/versions/1.7.md +41 -0
  58. package/docs/forge-chatgpt-browser-engine.md +2 -2
  59. package/docs/forge-chatgpt-mcp-setup.md +4 -28
  60. package/docs/forge-chatgpt-supervised-automation.md +3 -3
  61. package/docs/forge-github-issue-launcher.md +1 -1
  62. package/docs/forge-plugin-management.md +1 -1
  63. package/docs/forge-runtime-self-healing-loop.md +1 -1
  64. package/docs/operations/controller-browser-plugin.md +26 -6
  65. package/docs/operations/controller-performance-and-502.md +143 -0
  66. package/docs/operations/controller-reliability-runbook.md +1 -1
  67. package/docs/operations/features.md +2 -2
  68. package/docs/operations/github-repository.md +1 -1
  69. package/docs/operations/homebrew.md +2 -2
  70. package/docs/operations/mcp-tool-exposure.md +5 -3
  71. package/docs/wiki/Architecture.md +6 -6
  72. package/docs/wiki/Implementation.md +2 -2
  73. package/docs/wiki/Integrations.md +2 -2
  74. package/docs/wiki/Work-Lifecycle.md +1 -1
  75. package/package.json +33 -11
  76. package/scripts/activate-source-baseline.ts +17 -13
  77. package/scripts/architecture-event.ts +2 -820
  78. package/scripts/architecture-queue.sh +2 -645
  79. package/scripts/archive-architecture-request.sh +2 -242
  80. package/scripts/archive-workflow.sh +1 -291
  81. package/scripts/benchmark-background-check-overlap.ts +228 -0
  82. package/scripts/benchmark-mcp-host.sh +117 -0
  83. package/scripts/benchmark-mcp-transport.ts +170 -0
  84. package/scripts/benchmark-quality-harness.ts +146 -0
  85. package/scripts/benchmark-route-session-concurrency.ts +207 -6
  86. package/scripts/benchmark-thin-harness-mcp-e2e.ts +7 -1
  87. package/scripts/benchmark-typescript-navigation.ts +186 -0
  88. package/scripts/benchmark-work-efficiency.ts +334 -0
  89. package/scripts/capability-config.ts +2 -392
  90. package/scripts/capability-resolver.ts +2 -503
  91. package/scripts/capture-plan.sh +1 -332
  92. package/scripts/check-agent-tooling.sh +2 -1558
  93. package/scripts/check-architecture-sync.sh +2 -371
  94. package/scripts/check-brain-manifest.sh +2 -253
  95. package/scripts/check-context-files.sh +2 -47
  96. package/scripts/check-deploy-sql-order.sh +2 -115
  97. package/scripts/check-mcp-compatibility.ts +14 -0
  98. package/scripts/check-runtime-architecture.mjs +349 -79
  99. package/scripts/check-skill-version.ts +3 -191
  100. package/scripts/check-source-duplication.mjs +61 -0
  101. package/scripts/check-stable-baseline.ts +92 -0
  102. package/scripts/check-task-sync.sh +2 -63
  103. package/scripts/check-task-workflow.sh +2 -1000
  104. package/scripts/codex-handoff-resume.sh +2 -267
  105. package/scripts/context-contract-sync.sh +2 -514
  106. package/scripts/contract-run.ts +2 -463
  107. package/scripts/contract-worktree.sh +1 -722
  108. package/scripts/ensure-task-workflow.sh +1 -1225
  109. package/scripts/host-temporary-cloud-mcp-e2e.sh +265 -0
  110. package/scripts/inspect-project-state.ts +4 -279
  111. package/scripts/install-standalone-recovery.ts +24 -0
  112. package/scripts/lib/project-init-lib.sh +22 -46
  113. package/scripts/lib/run-forge-helper.sh +19 -0
  114. package/scripts/lib/run-forge-helper.ts +26 -0
  115. package/scripts/migrate-project-template.sh +1 -1189
  116. package/scripts/migrate-workflow-docs.ts +4 -412
  117. package/scripts/new-plan.sh +1 -180
  118. package/scripts/new-spec.sh +1 -47
  119. package/scripts/new-sprint.sh +1 -46
  120. package/scripts/plan-to-todo.sh +1 -796
  121. package/scripts/prepare-codex-handoff.sh +2 -201
  122. package/scripts/prepare-handoff.sh +1 -78
  123. package/scripts/refresh-current-status.sh +2 -467
  124. package/scripts/run-governed-gate.ts +5 -1
  125. package/scripts/select-agent-context-blocks.sh +2 -64
  126. package/scripts/ship-worktrees.sh +1 -558
  127. package/scripts/smoke-ios-physical-device.ts +4 -2
  128. package/scripts/smoke-runtime-recovery.ts +1 -35
  129. package/scripts/smoke-schedule-engine.ts +1 -20
  130. package/scripts/sprint-backlog.sh +1 -834
  131. package/scripts/stage-runtime-release.ts +2 -1
  132. package/scripts/summarize-failures.sh +2 -123
  133. package/scripts/switch-plan.sh +1 -150
  134. package/scripts/sync-brain-docs.sh +2 -379
  135. package/scripts/sync-generated-authority.mjs +175 -0
  136. package/scripts/verify-contract.sh +2 -703
  137. package/scripts/verify-forge-runtime.sh +0 -1
  138. package/scripts/verify-sprint.sh +1 -677
  139. package/scripts/workflow-contract.ts +4 -205
  140. package/scripts/workstream-sync.sh +2 -261
  141. package/src/cli/agent-jobs/executor-health.ts +1 -1
  142. package/src/cli/commands/init-hook.ts +3 -3
  143. package/src/cli/commands/mcp.ts +9 -5
  144. package/src/cli/commands/plugin.ts +12 -3
  145. package/src/cli/commands/recovery.ts +25 -3
  146. package/src/cli/commands/runtime.ts +55 -3
  147. package/src/cli/commands/security.ts +12 -1
  148. package/src/cli/commands/setup-profile.ts +31 -21
  149. package/src/cli/controller/check-runner.ts +113 -5
  150. package/src/cli/controller/composite-result.ts +1 -1
  151. package/src/cli/controller/context/focus.ts +51 -0
  152. package/src/cli/controller/context/instruction-context.ts +114 -0
  153. package/src/cli/controller/context/known-paths.ts +76 -0
  154. package/src/cli/controller/context/query-planning.ts +110 -0
  155. package/src/cli/controller/context/rule-resolution.ts +532 -0
  156. package/src/cli/controller/context/source-materializer.ts +278 -0
  157. package/src/cli/controller/context/structural.ts +16 -0
  158. package/src/cli/controller/context/types.ts +286 -0
  159. package/src/cli/controller/context-pack.ts +828 -487
  160. package/src/cli/controller/launch-agents.ts +77 -2
  161. package/src/cli/controller/operational-plan.ts +2 -2
  162. package/src/cli/controller/work-mode.ts +6 -4
  163. package/src/cli/editing/edit-session.ts +60 -7
  164. package/src/cli/github/contracts.ts +16 -0
  165. package/src/cli/github/github.ts +135 -16
  166. package/src/cli/github/session.ts +2 -1
  167. package/src/cli/installer/managed-entries.ts +15 -1
  168. package/src/cli/local-bridge/console-automations.ts +54 -78
  169. package/src/cli/local-bridge/console-view-models.ts +1 -35
  170. package/src/cli/local-bridge/facade-api.ts +37 -264
  171. package/src/cli/local-bridge/frontend/src/App.tsx +3 -3
  172. package/src/cli/local-bridge/frontend/src/features/automations/AutomationsView.tsx +23 -13
  173. package/src/cli/local-bridge/frontend/src/features/capabilities/CapabilitiesView.tsx +37 -4
  174. package/src/cli/local-bridge/frontend/src/features/overview/OverviewView.tsx +6 -4
  175. package/src/cli/local-bridge/frontend/src/lib/api.ts +1 -6
  176. package/src/cli/local-bridge/frontend/src/lib/routes.ts +1 -1
  177. package/src/cli/local-bridge/frontend/src/shell/Sidebar.tsx +2 -2
  178. package/src/cli/local-bridge/frontend/src/styles.css +1 -1
  179. package/src/cli/local-bridge/frontend/src/types.ts +5 -8
  180. package/src/cli/local-bridge/job-store.ts +1 -490
  181. package/src/cli/local-bridge/server.ts +2 -515
  182. package/src/cli/local-bridge/ui-dist/app.css +1 -1
  183. package/src/cli/local-bridge/ui-dist/app.js +3703 -3757
  184. package/src/cli/mcp/auth.ts +5 -5
  185. package/src/cli/mcp/instructions.ts +3 -2
  186. package/src/cli/mcp/legacy-tool-service.ts +10 -222
  187. package/src/cli/mcp/multi-repository.ts +16 -5
  188. package/src/cli/mcp/oauth.ts +175 -26
  189. package/src/cli/mcp/post-finalize-work-attribution.ts +150 -0
  190. package/src/cli/mcp/repository-tools.ts +282 -146
  191. package/src/cli/mcp/server.ts +586 -116
  192. package/src/cli/mcp/tool-capability-cache.ts +1 -1
  193. package/src/cli/mcp/tool-contract.ts +14 -0
  194. package/src/cli/mcp/toolset-selection.ts +1 -1
  195. package/src/cli/mcp/toolset.ts +44 -7
  196. package/src/cli/mcp/transports/http.ts +124 -14
  197. package/src/cli/mcp/transports/session-registry.ts +43 -5
  198. package/src/cli/mcp/types.ts +3 -3
  199. package/src/cli/repositories/command-classifier.ts +103 -21
  200. package/src/cli/repositories/command-executor.ts +78 -526
  201. package/src/cli/repositories/command-process.ts +108 -0
  202. package/src/cli/repositories/command-scope.ts +99 -41
  203. package/src/cli/repositories/controller-home.ts +7 -8
  204. package/src/cli/repositories/git-command-executor.ts +2 -0
  205. package/src/cli/repositories/locks.ts +53 -16
  206. package/src/cli/repositories/repository-snapshot.ts +124 -0
  207. package/src/cli/repositories/selected-path-actions.ts +17 -9
  208. package/src/cli/repositories/structured-git.ts +118 -6
  209. package/src/cli/repository/inspector.ts +563 -65
  210. package/src/cli/repository/session-cache.ts +58 -17
  211. package/src/cli/v81-entry.ts +1 -4
  212. package/src/effects/fs-transaction.ts +85 -17
  213. package/src/runtime/context/codegraph-read-provider.ts +233 -2
  214. package/src/runtime/context/codegraph-sidecar.cjs +74 -40
  215. package/src/runtime/context/generic-lsp-provider.ts +355 -0
  216. package/src/runtime/context/lsp-client.ts +283 -0
  217. package/src/runtime/context/semantic-navigation-contract.ts +61 -0
  218. package/src/runtime/context/semantic-navigation.ts +223 -0
  219. package/src/runtime/context/swift-navigation.ts +565 -0
  220. package/src/runtime/context/typescript-navigation.ts +226 -0
  221. package/src/runtime/control-plane/dispatch-priority.ts +28 -0
  222. package/src/runtime/control-plane/execution/direct-edit-work-completion.ts +48 -16
  223. package/src/runtime/control-plane/execution/edit-validation-coordinator.ts +86 -24
  224. package/src/runtime/control-plane/execution/repository-work-attribution.ts +106 -0
  225. package/src/runtime/control-plane/execution/retained-work-resume.ts +203 -0
  226. package/src/runtime/control-plane/execution/session-store.ts +18 -0
  227. package/src/runtime/control-plane/execution/verification-evidence.ts +58 -3
  228. package/src/runtime/control-plane/execution/work-completion-authority.ts +58 -0
  229. package/src/runtime/control-plane/execution/work-evidence-policy.ts +200 -0
  230. package/src/runtime/control-plane/execution/work-execution-support.ts +386 -0
  231. package/src/runtime/control-plane/execution/work-finalization-service.ts +1913 -0
  232. package/src/runtime/control-plane/execution/work-handle-authority.ts +96 -0
  233. package/src/runtime/control-plane/execution/work-handle-store.ts +27 -2
  234. package/src/runtime/control-plane/execution/work-lifecycle-audit.ts +258 -0
  235. package/src/runtime/control-plane/execution/work-operation-service.ts +468 -0
  236. package/src/runtime/control-plane/execution/work-path-scope.ts +37 -0
  237. package/src/runtime/control-plane/execution/work-preparation-service.ts +479 -0
  238. package/src/runtime/control-plane/execution/work-process-evidence.ts +129 -0
  239. package/src/runtime/control-plane/execution/work-remote-delivery.ts +215 -0
  240. package/src/runtime/control-plane/execution/work-task-receipt.ts +22 -18
  241. package/src/runtime/control-plane/execution/work-terminal-cleanup.ts +156 -11
  242. package/src/runtime/control-plane/execution/work-validation-reconciler.ts +22 -14
  243. package/src/runtime/control-plane/execution/work-verification-context.ts +56 -0
  244. package/src/runtime/control-plane/execution/work-verification-service.ts +388 -0
  245. package/src/runtime/control-plane/execution/work-verification-snapshot.ts +90 -9
  246. package/src/runtime/control-plane/facade/capability-registry.ts +129 -25
  247. package/src/runtime/control-plane/facade/controller-round-relay.ts +1118 -0
  248. package/src/runtime/control-plane/facade/controller-session-store.ts +302 -12
  249. package/src/runtime/control-plane/facade/goal-workloop-access.ts +17 -1
  250. package/src/runtime/control-plane/facade/goal-workloop.ts +928 -190
  251. package/src/runtime/control-plane/facade/index.ts +3 -0
  252. package/src/runtime/control-plane/facade/plan-contract-store.ts +275 -42
  253. package/src/runtime/control-plane/facade/repository-work-admission.ts +147 -0
  254. package/src/runtime/control-plane/facade/requirement-authority.ts +83 -0
  255. package/src/runtime/control-plane/facade/semantic-admission.ts +205 -0
  256. package/src/runtime/control-plane/facade/suggested-actions.ts +5 -1
  257. package/src/runtime/control-plane/facade/types.ts +90 -10
  258. package/src/runtime/control-plane/facade/work-contract-store.ts +157 -261
  259. package/src/runtime/control-plane/facade/work-state-machine.ts +250 -0
  260. package/src/runtime/control-plane/generated-cache-retention.ts +271 -0
  261. package/src/runtime/control-plane/global-scheduler/config.ts +44 -0
  262. package/src/runtime/control-plane/global-scheduler/dispatch-capacity.ts +80 -0
  263. package/src/runtime/control-plane/global-scheduler/durable-admission.ts +46 -0
  264. package/src/runtime/control-plane/global-scheduler/maintenance.ts +152 -0
  265. package/src/runtime/control-plane/global-scheduler/projection-refresh.ts +84 -0
  266. package/src/runtime/control-plane/global-scheduler/reconciliation.ts +3 -3
  267. package/src/runtime/control-plane/global-scheduler/scheduler.ts +278 -543
  268. package/src/runtime/control-plane/global-scheduler/source-scan.ts +59 -0
  269. package/src/runtime/control-plane/global-scheduler/state.ts +88 -0
  270. package/src/runtime/control-plane/global-scheduler/worker-attachment.ts +57 -0
  271. package/src/runtime/control-plane/global-scheduler/worker-exit-decision.ts +38 -0
  272. package/src/runtime/control-plane/global-scheduler/worker-exit-reconciler.ts +175 -0
  273. package/src/runtime/control-plane/global-scheduler/worker-launch.ts +111 -0
  274. package/src/runtime/control-plane/global-scheduler/worker-lifecycle-store.ts +64 -0
  275. package/src/runtime/control-plane/global-scheduler/worker-lifecycle.ts +150 -0
  276. package/src/runtime/control-plane/global-scheduler/worker-process.ts +119 -0
  277. package/src/runtime/control-plane/global-scheduler/worker-stderr.ts +60 -0
  278. package/src/runtime/control-plane/launcher/chatgpt-work-binding-store.ts +63 -0
  279. package/src/runtime/control-plane/launcher/chatgpt-work-continuation.ts +365 -117
  280. package/src/runtime/control-plane/launcher/launch-reservation-store.ts +89 -0
  281. package/src/runtime/control-plane/launcher/thin-launcher.ts +244 -11
  282. package/src/runtime/control-plane/persistence/controller-home-migration.ts +487 -0
  283. package/src/runtime/control-plane/persistence/requirement-store.ts +0 -12
  284. package/src/runtime/control-plane/persistence/sqlite-store.ts +33 -2
  285. package/src/runtime/control-plane/release-retention.ts +62 -2
  286. package/src/runtime/control-plane/repo-actor/registry.ts +4 -2
  287. package/src/runtime/control-plane/routing/route-policy.ts +24 -21
  288. package/src/runtime/control-plane/routing/workspace-admission.ts +70 -0
  289. package/src/runtime/control-plane/runtime-status-client.ts +0 -2
  290. package/src/runtime/diagnostics/mcp-timing.ts +13 -0
  291. package/src/runtime/diagnostics/mcp-transport-benchmark.ts +129 -0
  292. package/src/runtime/diagnostics/performance.ts +24 -1
  293. package/src/runtime/evidence/event-ledger.ts +1 -1
  294. package/src/runtime/evidence/process-check-execution.ts +18 -0
  295. package/src/runtime/execution/jobs/child-reference.ts +6 -2
  296. package/src/runtime/execution/jobs/store.ts +58 -4
  297. package/src/runtime/execution/jobs/types.ts +1 -1
  298. package/src/runtime/execution/managed-workspace.ts +203 -1
  299. package/src/runtime/execution/process-runtime/check-facade.ts +51 -4
  300. package/src/runtime/execution/process-runtime/check-result.ts +88 -0
  301. package/src/runtime/execution/process-runtime/check-runner-sidecar.ts +7 -1
  302. package/src/runtime/execution/process-runtime/check-scheduling.ts +114 -0
  303. package/src/runtime/execution/process-runtime/command-facade.ts +367 -40
  304. package/src/runtime/execution/process-runtime/gc.ts +38 -6
  305. package/src/runtime/execution/process-runtime/lightweight-managed.ts +1201 -0
  306. package/src/runtime/execution/process-runtime/persisted-check.ts +51 -5
  307. package/src/runtime/execution/process-runtime/resource-claims.ts +10 -6
  308. package/src/runtime/execution/process-runtime/runtime.ts +53 -3
  309. package/src/runtime/execution/process-runtime/store.ts +1 -0
  310. package/src/runtime/execution/process-runtime/types.ts +4 -12
  311. package/src/runtime/execution/thin-harness/async-process.ts +12 -2
  312. package/src/runtime/execution/thin-harness/search-worker.ts +54 -5
  313. package/src/runtime/execution/work-activity.ts +21 -0
  314. package/src/runtime/execution/workers/executor.ts +18 -61
  315. package/src/runtime/gateway/mcp/execution-tools.ts +35 -1852
  316. package/src/runtime/gateway/mcp/legacy-ios-tool-adapter.ts +61 -0
  317. package/src/runtime/gateway/mcp/process-tools.ts +83 -37
  318. package/src/runtime/gateway/mcp/router.ts +186 -84
  319. package/src/runtime/gateway/mcp/runtime-tool-definitions.ts +565 -0
  320. package/src/runtime/gateway/mcp/runtime-tools.ts +2378 -1947
  321. package/src/runtime/plugins/app-store-connect-adapter.ts +216 -47
  322. package/src/runtime/plugins/browser-adapter.ts +2662 -829
  323. package/src/runtime/plugins/browser-automation-service.ts +10 -0
  324. package/src/runtime/plugins/browser-handoff-host.ts +2 -25
  325. package/src/runtime/plugins/browser-handoff.ts +110 -5
  326. package/src/runtime/plugins/browser-macos-bridge.ts +701 -63
  327. package/src/runtime/plugins/browser-manifest-surface.ts +603 -0
  328. package/src/runtime/plugins/browser-native-session-service.ts +222 -0
  329. package/src/runtime/plugins/browser-node-bridge.ts +6 -34
  330. package/src/runtime/plugins/browser-provider-registry.ts +109 -0
  331. package/src/runtime/plugins/browser-runtime-contract.ts +154 -0
  332. package/src/runtime/plugins/browser-runtime.ts +193 -0
  333. package/src/runtime/plugins/browser-session-authority.ts +332 -0
  334. package/src/runtime/plugins/browser-session-store.ts +121 -0
  335. package/src/runtime/plugins/browser-session-types.ts +98 -0
  336. package/src/runtime/plugins/capability-authorization-grants.ts +354 -0
  337. package/src/runtime/plugins/desktop-operator-registration.ts +10 -4
  338. package/src/runtime/plugins/external-adapter.ts +358 -3
  339. package/src/runtime/plugins/external-unix-socket.ts +7 -1
  340. package/src/runtime/plugins/first-party-registry.ts +2 -0
  341. package/src/runtime/plugins/github-adapter.ts +125 -0
  342. package/src/runtime/plugins/ios/agent-device-provider.ts +1 -1
  343. package/src/runtime/plugins/ios/agent-device-typed-provider.ts +52 -9
  344. package/src/runtime/plugins/ios/remote-xpc-hid.ts +1171 -0
  345. package/src/runtime/plugins/ios-adapter.ts +106 -16
  346. package/src/runtime/plugins/ios-agent-device.ts +234 -64
  347. package/src/runtime/plugins/ios-physical-device.ts +1143 -392
  348. package/src/runtime/plugins/lightweight-action.ts +153 -0
  349. package/src/runtime/plugins/local-system-adapter.ts +123 -6
  350. package/src/runtime/plugins/macos-capability-broker.ts +47 -9
  351. package/src/runtime/plugins/plugin-action-sidecar.ts +59 -0
  352. package/src/runtime/plugins/plugin-management-adapter.ts +49 -8
  353. package/src/runtime/plugins/resend-adapter.ts +1 -1
  354. package/src/runtime/plugins/store.ts +330 -33
  355. package/src/runtime/plugins/types.ts +38 -3
  356. package/src/runtime/plugins/xiaohongshu-publish.ts +515 -0
  357. package/src/runtime/projections/git-status-sampler.ts +16 -16
  358. package/src/runtime/projections/materialized-view.ts +28 -10
  359. package/src/runtime/recovery/maintenance-executor.ts +426 -25
  360. package/src/runtime/root/mcp-transport.ts +180 -10
  361. package/src/runtime/root/package-connector-service.ts +230 -10
  362. package/src/runtime/root/package-runtime-release.ts +143 -17
  363. package/src/runtime/root/package-runtime-service.ts +461 -22
  364. package/src/runtime/root/release-manifest.ts +144 -18
  365. package/src/runtime/root/release-materialize.ts +125 -32
  366. package/src/runtime/root/release-store.ts +48 -11
  367. package/src/runtime/root/runtime.ts +23 -5
  368. package/src/runtime/root/service.ts +100 -29
  369. package/src/runtime/root/types.ts +12 -0
  370. package/src/runtime/safe-tooling/ios-development.ts +321 -63
  371. package/src/runtime/shared/trusted-executable.ts +62 -0
  372. package/src/runtime/shared/trusted-node-executable.ts +48 -0
  373. package/src/runtime/standalone-recovery/core.ts +1079 -240
  374. package/src/runtime/standalone-recovery/entry.ts +100 -24
  375. package/src/runtime/standalone-recovery/installer.ts +20 -4
  376. package/src/runtime/standalone-recovery/service-labels.ts +2 -0
  377. package/src/runtime/standalone-recovery/watchdog-heartbeat.ts +160 -0
  378. package/src/runtime/workflow/schedules/browser-probe.ts +81 -3
  379. package/src/runtime/workflow/schedules/engine.ts +364 -202
  380. package/src/runtime/workflow/schedules/github-issue-watch.ts +158 -0
  381. package/src/runtime/workflow/schedules/settlement.ts +64 -17
  382. package/src/runtime/workflow/schedules/store.ts +209 -19
  383. package/src/runtime/workflow/schedules/types.ts +2 -4
  384. package/src/runtime/workflow/schedules/work-continuation.ts +26 -13
  385. package/src/testing/test-governance.ts +8 -40
  386. package/assets/reference-configs/heartbeat-triage.md +0 -57
  387. package/assets/templates/helpers/harness-trace-grade.sh +0 -150
  388. package/assets/templates/helpers/heartbeat-triage.sh +0 -361
  389. package/assets/templates/helpers/maintenance-triage.sh +0 -167
  390. package/docs/architecture/current/approved-target-architecture.zh-CN.md +0 -1501
  391. package/docs/architecture/current/architecture-invariants.md +0 -331
  392. package/docs/architecture/current/automation-and-schedule-engine.md +0 -459
  393. package/docs/architecture/current/codegraph-context-provider.md +0 -238
  394. package/docs/architecture/current/control-plane-authority-inventory.md +0 -94
  395. package/docs/architecture/current/controller-repository-decoupling.md +0 -148
  396. package/docs/architecture/current/dispatch-and-agent-strategy.md +0 -373
  397. package/docs/architecture/current/entity-model.md +0 -612
  398. package/docs/architecture/current/external-plugin-governance.md +0 -396
  399. package/docs/architecture/current/failure-recovery.md +0 -447
  400. package/docs/architecture/current/governance.md +0 -213
  401. package/docs/architecture/current/human-interaction-plane.md +0 -87
  402. package/docs/architecture/current/implementation-status.md +0 -128
  403. package/docs/architecture/current/job-and-run-lifecycle.md +0 -413
  404. package/docs/architecture/current/legacy-governance.md +0 -58
  405. package/docs/architecture/current/local-workspace-target-grants.md +0 -70
  406. package/docs/architecture/current/migration-roadmap.md +0 -105
  407. package/docs/architecture/current/multi-repository-execution.md +0 -371
  408. package/docs/architecture/current/operations-runbook.md +0 -45
  409. package/docs/architecture/current/peer-supercontroller-runtime.md +0 -32
  410. package/docs/architecture/current/personal-assistant-plugin-baseline.md +0 -206
  411. package/docs/architecture/current/repository-access-modes.md +0 -102
  412. package/docs/architecture/current/route-policy.md +0 -15
  413. package/docs/architecture/current/route-session-concurrency.md +0 -85
  414. package/docs/architecture/current/runtime-architecture-simplification.md +0 -214
  415. package/docs/architecture/current/runtime-directory-map.md +0 -49
  416. package/docs/architecture/current/runtime-health-and-resource-lifecycle.md +0 -85
  417. package/docs/architecture/current/scheduler-and-resource-claims.md +0 -422
  418. package/docs/architecture/current/session-aware-execution-and-authorization.md +0 -77
  419. package/docs/architecture/current/system-overview.md +0 -169
  420. package/docs/architecture/current/target-requirements-traceability.md +0 -202
  421. package/docs/architecture/current/thin-harness-governance-policy.md +0 -32
  422. package/docs/architecture/current/thin-harness-v1.md +0 -321
  423. package/docs/architecture/current/verification-and-release-gates.md +0 -391
  424. package/docs/forge-autonomous-goal-loop.md +0 -9
  425. package/docs/forge-provider-configuration.md +0 -7
  426. package/docs/operations/chatgpt-personal-assistant-runtime.md +0 -93
  427. package/docs/operations/gmail-assistant-routines.md +0 -186
  428. package/docs/operations/personal-assistant-operator-guide.md +0 -61
  429. package/docs/operations/provider-configuration.md +0 -31
  430. package/scripts/harness-trace-grade.sh +0 -150
  431. package/scripts/heartbeat-triage.sh +0 -361
  432. package/scripts/maintenance-triage.sh +0 -167
  433. package/src/cli/local-bridge/frontend/src/features/settings/SettingsView.tsx +0 -2
  434. package/src/cli/repositories/goal-registry.ts +0 -239
  435. package/src/runtime/assistant/action-proposals.ts +0 -279
  436. package/src/runtime/assistant/intent.ts +0 -395
  437. package/src/runtime/assistant/model-provider.ts +0 -460
  438. package/src/runtime/assistant/openapi.ts +0 -223
  439. package/src/runtime/assistant/policy.ts +0 -89
  440. package/src/runtime/assistant/readiness.ts +0 -258
  441. package/src/runtime/assistant/routine-runtime.ts +0 -477
  442. package/src/runtime/assistant/schedule-binding.ts +0 -171
  443. package/src/runtime/assistant/standing-grants.ts +0 -375
  444. package/src/runtime/assistant/store.ts +0 -243
  445. package/src/runtime/assistant/types.ts +0 -135
  446. package/src/runtime/control-plane/goal-loop/config-facade.ts +0 -700
  447. package/src/runtime/control-plane/goal-loop/config-store.ts +0 -570
  448. package/src/runtime/control-plane/goal-loop/config-types.ts +0 -213
  449. package/src/runtime/control-plane/goal-loop/executor-router.ts +0 -109
  450. package/src/runtime/control-plane/goal-loop/failure-taxonomy.ts +0 -149
  451. package/src/runtime/control-plane/goal-loop/goal-contract-store.ts +0 -304
  452. package/src/runtime/control-plane/goal-loop/goal-loop-engine.ts +0 -1001
  453. package/src/runtime/control-plane/goal-loop/handoff-packet.ts +0 -160
  454. package/src/runtime/control-plane/goal-loop/index.ts +0 -13
  455. package/src/runtime/control-plane/goal-loop/local-tools.ts +0 -290
  456. package/src/runtime/control-plane/goal-loop/policy-gates.ts +0 -203
  457. package/src/runtime/control-plane/goal-loop/provider-dispatch.ts +0 -93
  458. package/src/runtime/control-plane/goal-loop/provider-registry.ts +0 -545
  459. package/src/runtime/control-plane/goal-loop/types.ts +0 -378
  460. package/src/runtime/control-plane/startup-recovery.ts +0 -198
  461. package/src/runtime/gateway/mcp/resource-policy.ts +0 -186
  462. package/src/runtime/personal-assistant/gmail-triage-manager.ts +0 -231
  463. package/src/runtime/personal-assistant/reporting-runtime.ts +0 -344
  464. package/src/runtime/personal-assistant/triage-runtime.ts +0 -748
  465. package/src/runtime/workflow/findings/store.ts +0 -204
  466. package/src/runtime/workflow/findings/types.ts +0 -58
  467. package/src/runtime/workflow/portfolio/engine.ts +0 -20
  468. package/src/runtime/workflow/portfolio/store.ts +0 -185
  469. package/src/runtime/workflow/portfolio/types.ts +0 -29
@@ -1,4 +1,5 @@
1
1
  #!/usr/bin/env bun
2
+ import { realpathSync } from 'fs';
2
3
  import { resolve } from 'path';
3
4
  import { assertRuntimeReleaseFiles, stageRuntimeRelease, type CandidateRuntimeStageReceiptV1 } from '../src/runtime/root/release-materialize';
4
5
 
@@ -18,7 +19,7 @@ const controllerHome = resolve(requiredOption(args, '--controller-home'));
18
19
  const sourceRoot = resolve(requiredOption(args, '--source-root'));
19
20
  const expectedHead = requiredOption(args, '--expected-head');
20
21
  if (!/^[a-f0-9]{40}$/i.test(expectedHead)) throw new Error('RUNTIME_RELEASE_CANDIDATE_EXPECTED_HEAD_INVALID');
21
- if (sourceRoot !== resolve(process.cwd())) throw new Error('RUNTIME_RELEASE_CANDIDATE_CWD_MISMATCH');
22
+ if (realpathSync(sourceRoot) !== realpathSync(process.cwd())) throw new Error('RUNTIME_RELEASE_CANDIDATE_CWD_MISMATCH');
22
23
 
23
24
  const staged = stageRuntimeRelease({ controllerHome, sourceRoot });
24
25
  assertRuntimeReleaseFiles(staged);
@@ -1,125 +1,4 @@
1
1
  #!/bin/bash
2
2
  set -euo pipefail
3
-
4
- if [[ -f ".ai/hooks/lib/workflow-state.sh" ]]; then
5
- # shellcheck source=/dev/null
6
- . ".ai/hooks/lib/workflow-state.sh"
7
- fi
8
-
9
- usage() {
10
- cat <<'USAGE_EOF'
11
- Usage: scripts/summarize-failures.sh [--file <path>] [--run-id <id>]
12
- USAGE_EOF
13
- }
14
-
15
- resolve_js_runtime() {
16
- if command -v bun >/dev/null 2>&1; then
17
- printf 'bun'
18
- return 0
19
- fi
20
-
21
- if [[ -x "${HOME}/.bun/bin/bun" ]]; then
22
- printf '%s' "${HOME}/.bun/bin/bun"
23
- return 0
24
- fi
25
-
26
- if command -v node >/dev/null 2>&1; then
27
- printf 'node'
28
- return 0
29
- fi
30
-
31
- return 1
32
- }
33
-
34
- if declare -F workflow_failure_log_file >/dev/null 2>&1; then
35
- log_file="$(workflow_failure_log_file)"
36
- else
37
- log_file=".ai/harness/failures/latest.jsonl"
38
- fi
39
- filter_run_id=""
40
- js_runtime=""
41
- js_code=""
42
-
43
- while [[ $# -gt 0 ]]; do
44
- case "$1" in
45
- --file)
46
- [[ -n "${2:-}" ]] || { echo "Error: --file requires a value" >&2; usage; exit 2; }
47
- log_file="$2"
48
- shift 2
49
- ;;
50
- --run-id)
51
- [[ -n "${2:-}" ]] || { echo "Error: --run-id requires a value" >&2; usage; exit 2; }
52
- filter_run_id="$2"
53
- shift 2
54
- ;;
55
- --help|-h)
56
- usage
57
- exit 0
58
- ;;
59
- *)
60
- echo "Unknown argument: $1" >&2
61
- usage
62
- exit 2
63
- ;;
64
- esac
65
- done
66
-
67
- if [[ ! -f "$log_file" ]]; then
68
- echo "[FailureSummary] No failure log found at $log_file"
69
- exit 0
70
- fi
71
-
72
- js_runtime="$(resolve_js_runtime || true)"
73
- if [[ -z "$js_runtime" ]]; then
74
- echo "[FailureSummary] Missing JavaScript runtime (expected bun or node)" >&2
75
- exit 1
76
- fi
77
-
78
- js_code="$(cat <<'NODE_EOF'
79
- const fs = require("fs");
80
-
81
- const file = process.env.JSONL_FILE;
82
- const filterRunId = process.env.FILTER_RUN_ID || "";
83
-
84
- const rows = fs
85
- .readFileSync(file, "utf-8")
86
- .split("\n")
87
- .map((line) => line.trim())
88
- .filter(Boolean)
89
- .map((line) => JSON.parse(line))
90
- .filter((row) => !filterRunId || row.run_id === filterRunId);
91
-
92
- if (rows.length === 0) {
93
- console.log(
94
- filterRunId
95
- ? `[FailureSummary] No failure records found for run_id=${filterRunId}`
96
- : "[FailureSummary] No failure records found"
97
- );
98
- process.exit(0);
99
- }
100
-
101
- const classCounts = new Map();
102
- const guardCounts = new Map();
103
-
104
- for (const row of rows) {
105
- classCounts.set(row.failure_class, (classCounts.get(row.failure_class) || 0) + 1);
106
- guardCounts.set(row.guard, (guardCounts.get(row.guard) || 0) + 1);
107
- }
108
-
109
- const sortEntries = (map) =>
110
- [...map.entries()].sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0]));
111
-
112
- const latestRunId = rows[rows.length - 1]?.run_id || "unknown";
113
- console.log(`[FailureSummary] records=${rows.length} run_id=${filterRunId || latestRunId}`);
114
- console.log("Failure classes:");
115
- for (const [name, count] of sortEntries(classCounts)) {
116
- console.log(`- ${name}: ${count}`);
117
- }
118
- console.log("Guards:");
119
- for (const [name, count] of sortEntries(guardCounts)) {
120
- console.log(`- ${name}: ${count}`);
121
- }
122
- NODE_EOF
123
- )"
124
-
125
- JSONL_FILE="$log_file" FILTER_RUN_ID="$filter_run_id" "$js_runtime" -e "$js_code"
3
+ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
4
+ exec "$SCRIPT_DIR/lib/run-forge-helper.sh" "summarize-failures.sh" "$@"
@@ -1,153 +1,4 @@
1
1
  #!/bin/bash
2
- # Select the current plan for this worktree.
3
- # Other worktrees may hold different active-plan markers concurrently.
4
-
5
2
  set -euo pipefail
6
-
7
3
  SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
8
- if REPO_ROOT="$(git -C "$SCRIPT_DIR" rev-parse --show-toplevel 2>/dev/null)"; then
9
- cd "$REPO_ROOT"
10
- elif [[ "$SCRIPT_DIR" == */.ai/harness/scripts ]]; then
11
- cd "$SCRIPT_DIR/../../.."
12
- else
13
- cd "$SCRIPT_DIR/.."
14
- fi
15
-
16
- usage() {
17
- cat <<'USAGE_EOF'
18
- Usage: scripts/switch-plan.sh --plan <plan-file>
19
- scripts/switch-plan.sh --list
20
-
21
- Options:
22
- --plan <path> Switch to the specified plan (saves current state, restores target)
23
- --list List all non-archived plans with active marker
24
- USAGE_EOF
25
- }
26
-
27
- extract_status() {
28
- local file="$1"
29
- awk '/\*\*Status\*\*:/ {sub(/^.*\*\*Status\*\*: */, ""); gsub(/\r/, ""); print; exit}' "$file" | xargs
30
- }
31
-
32
- ACTIVE_PLAN_MARKER=".ai/harness/active-plan"
33
- LEGACY_ACTIVE_PLAN_MARKER=".claude/.active-plan"
34
- ACTIVE_WORKTREE_MARKER=".ai/harness/active-worktree"
35
-
36
- read_active_plan_marker() {
37
- local marker_file="$1"
38
- local marker_plan
39
-
40
- if [[ -f "$marker_file" ]]; then
41
- marker_plan="$(cat "$marker_file" 2>/dev/null | xargs)"
42
- if [[ -n "$marker_plan" && -f "$marker_plan" ]]; then
43
- printf '%s' "$marker_plan"
44
- return 0
45
- fi
46
- fi
47
-
48
- return 1
49
- }
50
-
51
- get_active_plan() {
52
- read_active_plan_marker "$ACTIVE_PLAN_MARKER" \
53
- || read_active_plan_marker "$LEGACY_ACTIVE_PLAN_MARKER"
54
- }
55
-
56
- write_active_plan_marker() {
57
- local plan_file="$1"
58
- mkdir -p "$(dirname "$ACTIVE_PLAN_MARKER")" "$(dirname "$LEGACY_ACTIVE_PLAN_MARKER")" "$(dirname "$ACTIVE_WORKTREE_MARKER")"
59
- printf '%s' "$plan_file" > "$ACTIVE_PLAN_MARKER"
60
- printf '%s' "$plan_file" > "$LEGACY_ACTIVE_PLAN_MARKER"
61
- pwd -P > "$ACTIVE_WORKTREE_MARKER"
62
- }
63
-
64
- do_list() {
65
- local active
66
- active="$(get_active_plan || true)"
67
-
68
- if [[ ! -d "plans" ]]; then
69
- echo "No plans/ directory found."
70
- return
71
- fi
72
-
73
- local found=0
74
- while IFS= read -r plan; do
75
- [[ -n "$plan" ]] || continue
76
- found=1
77
- local status marker
78
- status="$(extract_status "$plan")"
79
- status="${status:-(unknown)}"
80
- if [[ "$plan" == "$active" ]]; then
81
- marker="[*]"
82
- else
83
- marker=" "
84
- fi
85
- printf '%s %s Status: %s\n' "$marker" "$plan" "$status"
86
- done < <(find plans -maxdepth 1 -type f -name 'plan-*.md' 2>/dev/null | sort)
87
-
88
- if [[ "$found" -eq 0 ]]; then
89
- echo "No plans found in plans/"
90
- fi
91
- }
92
-
93
- do_switch() {
94
- local target_plan="$1"
95
-
96
- if [[ ! -f "$target_plan" ]]; then
97
- echo "Error: plan file not found: $target_plan" >&2
98
- exit 1
99
- fi
100
-
101
- local current_plan
102
- current_plan="$(get_active_plan || true)"
103
-
104
- if [[ "$current_plan" == "$target_plan" ]]; then
105
- echo "[PlanSwitch] Already on $target_plan"
106
- return 0
107
- fi
108
-
109
- write_active_plan_marker "$target_plan"
110
- echo "[PlanSwitch] Selected $target_plan for worktree $(pwd -P)"
111
- echo "[PlanSwitch] tasks/todos.md is a deferred-goal ledger and was left unchanged."
112
- }
113
-
114
- # --- Main ---
115
- target_plan=""
116
- mode=""
117
-
118
- while [[ $# -gt 0 ]]; do
119
- case "$1" in
120
- --plan)
121
- [[ -n "${2:-}" ]] || { echo "Error: --plan requires a value" >&2; usage; exit 2; }
122
- target_plan="$2"
123
- mode="switch"
124
- shift 2
125
- ;;
126
- --list)
127
- mode="list"
128
- shift
129
- ;;
130
- --help|-h)
131
- usage
132
- exit 0
133
- ;;
134
- *)
135
- echo "Unknown argument: $1" >&2
136
- usage
137
- exit 2
138
- ;;
139
- esac
140
- done
141
-
142
- case "$mode" in
143
- list)
144
- do_list
145
- ;;
146
- switch)
147
- do_switch "$target_plan"
148
- ;;
149
- *)
150
- usage
151
- exit 2
152
- ;;
153
- esac
4
+ exec "$SCRIPT_DIR/lib/run-forge-helper.sh" "switch-plan.sh" "$@"
@@ -1,381 +1,4 @@
1
1
  #!/bin/bash
2
2
  set -euo pipefail
3
-
4
- usage() {
5
- cat <<'USAGE_EOF'
6
- Usage: scripts/sync-brain-docs.sh [--manifest PATH] (--all | --changed PATH | --check) [--dry-run] [--require-vault]
7
-
8
- Synchronizes explicitly opted-in repo docs to the local default brain file vault.
9
- Only manifest entries with sync.direction=repo-to-brain are eligible.
10
- USAGE_EOF
11
- }
12
-
13
- manifest_path=".ai/harness/brain-manifest.json"
14
- mode_all=0
15
- mode_check=0
16
- dry_run=0
17
- require_vault=0
18
- changed_paths=()
19
-
20
- while [[ $# -gt 0 ]]; do
21
- case "$1" in
22
- --manifest)
23
- manifest_path="${2:-}"
24
- shift 2
25
- ;;
26
- --all)
27
- mode_all=1
28
- shift
29
- ;;
30
- --changed)
31
- changed_paths+=("${2:-}")
32
- shift 2
33
- ;;
34
- --check)
35
- mode_check=1
36
- shift
37
- ;;
38
- --dry-run)
39
- dry_run=1
40
- shift
41
- ;;
42
- --require-vault)
43
- require_vault=1
44
- shift
45
- ;;
46
- --help|-h)
47
- usage
48
- exit 0
49
- ;;
50
- *)
51
- echo "sync-brain-docs: unknown argument: $1" >&2
52
- usage >&2
53
- exit 2
54
- ;;
55
- esac
56
- done
57
-
58
- resolve_js_runtime() {
59
- if command -v node >/dev/null 2>&1; then
60
- printf 'node'
61
- return 0
62
- fi
63
-
64
- if command -v bun >/dev/null 2>&1; then
65
- printf 'bun'
66
- return 0
67
- fi
68
-
69
- return 1
70
- }
71
-
72
- runtime="$(resolve_js_runtime || true)"
73
- if [[ -z "$runtime" ]]; then
74
- echo "[BrainSync] Missing node or bun to read brain manifest: $manifest_path" >&2
75
- exit 1
76
- fi
77
-
78
- if [[ "$mode_all" -eq 0 && "$mode_check" -eq 0 && "${#changed_paths[@]}" -eq 0 ]]; then
79
- echo "sync-brain-docs: choose --all, --changed PATH, or --check" >&2
80
- usage >&2
81
- exit 2
82
- fi
83
-
84
- changed_json='[]'
85
- if [[ "${#changed_paths[@]}" -gt 0 ]]; then
86
- changed_json="$(
87
- "$runtime" -e '
88
- const values = process.argv.slice(1);
89
- process.stdout.write(JSON.stringify(values));
90
- ' "${changed_paths[@]}"
91
- )"
92
- fi
93
-
94
- "$runtime" - "$manifest_path" "$mode_all" "$mode_check" "$dry_run" "$require_vault" "$changed_json" <<'JS_EOF'
95
- const fs = require("fs");
96
- const path = require("path");
97
- const os = require("os");
98
-
99
- const [, , manifestArg, allArg, checkArg, dryRunArg, requireVaultArg, changedJson] = process.argv;
100
- const repoRoot = fs.realpathSync(process.cwd());
101
- const manifestPath = path.resolve(repoRoot, manifestArg || ".ai/harness/brain-manifest.json");
102
- const modeAll = allArg === "1";
103
- const modeCheck = checkArg === "1";
104
- const dryRun = dryRunArg === "1";
105
- const requireVault = requireVaultArg === "1";
106
- const changedPaths = JSON.parse(changedJson || "[]").map(normalizeRepoPathInput).filter(Boolean);
107
- let issues = 0;
108
- let synced = 0;
109
- let skipped = 0;
110
-
111
- function issue(message) {
112
- console.log(`[BrainSync] ${message}`);
113
- issues += 1;
114
- }
115
-
116
- function warn(message) {
117
- console.log(`[BrainSync] warning: ${message}`);
118
- }
119
-
120
- function readJson(filePath, label) {
121
- try {
122
- return JSON.parse(fs.readFileSync(filePath, "utf8"));
123
- } catch (_error) {
124
- issue(`Cannot read ${label}: ${path.relative(repoRoot, filePath) || filePath}`);
125
- return null;
126
- }
127
- }
128
-
129
- function normalizeSlashes(value) {
130
- return String(value || "").replaceAll(path.sep, "/");
131
- }
132
-
133
- function isInside(root, candidate) {
134
- const rel = path.relative(root, candidate);
135
- return rel === "" || (!!rel && !rel.startsWith("..") && !path.isAbsolute(rel));
136
- }
137
-
138
- function realpathOrNull(filePath) {
139
- try {
140
- return fs.realpathSync(filePath);
141
- } catch (_error) {
142
- return null;
143
- }
144
- }
145
-
146
- function firstExistingParent(filePath) {
147
- let cursor = path.resolve(filePath);
148
- const missingParts = [];
149
- while (!fs.existsSync(cursor)) {
150
- const parent = path.dirname(cursor);
151
- if (parent === cursor) return null;
152
- missingParts.unshift(path.basename(cursor));
153
- cursor = parent;
154
- }
155
- return { parent: cursor, rest: missingParts.join(path.sep) };
156
- }
157
-
158
- function normalizeRepoPathInput(value) {
159
- if (!value) return "";
160
- const raw = String(value);
161
- const absolute = path.isAbsolute(raw) ? raw : path.resolve(repoRoot, raw);
162
- const real = realpathOrNull(absolute);
163
- const rel = path.relative(repoRoot, real || absolute);
164
- if (!rel || rel.startsWith("..") || path.isAbsolute(rel)) {
165
- return "";
166
- }
167
- return normalizeSlashes(rel);
168
- }
169
-
170
- function safeRepoPath(value, label, id) {
171
- const raw = String(value || "");
172
- if (!raw || raw.includes("\n") || raw.includes("\r") || path.isAbsolute(raw)) {
173
- issue(`Entry ${id} has invalid ${label}: ${raw || "(empty)"}`);
174
- return null;
175
- }
176
- const normalized = path.normalize(raw);
177
- if (normalized === ".." || normalized.startsWith(`..${path.sep}`)) {
178
- issue(`Entry ${id} ${label} escapes repo: ${raw}`);
179
- return null;
180
- }
181
- return normalizeSlashes(normalized);
182
- }
183
-
184
- function stripWildcard(logicalPath) {
185
- return String(logicalPath || "").replace(/\/\*$/, "/");
186
- }
187
-
188
- const brainRoot = process.env.FORGE_BRAIN_ROOT ||
189
- path.join(os.homedir(), "Library", "Mobile Documents", "com~apple~CloudDocs", "brain");
190
-
191
- function logicalToLocal(logicalPath, id) {
192
- const value = String(logicalPath || "");
193
- if (!value.startsWith("brain/")) {
194
- issue(`Entry ${id} brain_path must start with brain/: ${value || "(empty)"}`);
195
- return null;
196
- }
197
- const rel = value.slice("brain/".length);
198
- if (!rel || rel.includes("\n") || rel.includes("\r")) {
199
- issue(`Entry ${id} has invalid brain_path: ${value || "(empty)"}`);
200
- return null;
201
- }
202
- const local = path.resolve(brainRoot, rel);
203
- const root = path.resolve(brainRoot);
204
- if (!isInside(root, local)) {
205
- issue(`Entry ${id} brain_path escapes brain root: ${value}`);
206
- return null;
207
- }
208
- return local;
209
- }
210
-
211
- function validateSourceInsideRepo(sourceFile, sourcePath, id) {
212
- if (!isInside(repoRoot, sourceFile)) {
213
- issue(`Entry ${id} source file escapes repo: ${sourcePath}`);
214
- return false;
215
- }
216
- const real = realpathOrNull(sourceFile);
217
- if (real && !isInside(repoRoot, real)) {
218
- issue(`Entry ${id} source file symlink escapes repo: ${sourcePath}`);
219
- return false;
220
- }
221
- return true;
222
- }
223
-
224
- function validateTargetInsideBrainRoot(targetPath, brainPath, id) {
225
- const brainRootReal = realpathOrNull(brainRoot);
226
- if (!brainRootReal) return true;
227
-
228
- const targetReal = realpathOrNull(targetPath);
229
- if (targetReal && !isInside(brainRootReal, targetReal)) {
230
- issue(`Entry ${id} brain file symlink escapes brain root: ${brainPath}`);
231
- return false;
232
- }
233
-
234
- const parentInfo = firstExistingParent(targetPath);
235
- if (parentInfo) {
236
- const parentReal = realpathOrNull(parentInfo.parent);
237
- const effectiveTarget = parentReal
238
- ? path.resolve(parentReal, parentInfo.rest)
239
- : path.resolve(targetPath);
240
- if (!isInside(brainRootReal, effectiveTarget)) {
241
- issue(`Entry ${id} brain path escapes brain root through symlink: ${brainPath}`);
242
- return false;
243
- }
244
- }
245
-
246
- return true;
247
- }
248
-
249
- function syncConfig(entry) {
250
- const sync = entry.sync && typeof entry.sync === "object" ? entry.sync : {};
251
- const direction = sync.direction || entry.sync_direction || "";
252
- if (direction !== "repo-to-brain") return null;
253
- if (sync.enabled === false || entry.sync_enabled === false) return null;
254
- const id = entry.id || "(missing id)";
255
- return {
256
- id,
257
- sourcePath: sync.source_path || entry.source_path || entry.repo_path,
258
- brainPath: sync.brain_path || entry.brain_path,
259
- };
260
- }
261
-
262
- if (!fs.existsSync(manifestPath)) {
263
- issue(`Missing brain manifest: ${path.relative(repoRoot, manifestPath) || manifestPath}`);
264
- process.exit(1);
265
- }
266
-
267
- const manifest = readJson(manifestPath, "brain manifest");
268
- if (!manifest) process.exit(1);
269
-
270
- const entries = Array.isArray(manifest.entries) ? manifest.entries : [];
271
- const defaultPrefix = stripWildcard(manifest.default_brain_path);
272
- const eligible = [];
273
-
274
- for (const entry of entries) {
275
- const config = syncConfig(entry);
276
- if (!config) continue;
277
- const sourcePath = safeRepoPath(config.sourcePath, "sync source_path", config.id);
278
- const brainPath = String(config.brainPath || "");
279
- if (brainPath && defaultPrefix && !brainPath.startsWith(defaultPrefix)) {
280
- issue(`Entry ${config.id} brain_path is outside default_brain_path: ${brainPath}`);
281
- }
282
- const targetPath = logicalToLocal(brainPath, config.id);
283
- if (!sourcePath || !targetPath) continue;
284
- const sourceFile = path.resolve(repoRoot, sourcePath);
285
- if (!validateSourceInsideRepo(sourceFile, sourcePath, config.id)) continue;
286
- eligible.push({ id: config.id, sourcePath, sourceFile, brainPath, targetPath });
287
- }
288
-
289
- const selected = eligible.filter((entry) => {
290
- if (modeAll || modeCheck) return true;
291
- return changedPaths.includes(entry.sourcePath);
292
- });
293
-
294
- if (selected.length > 0 && !modeCheck && !fs.existsSync(brainRoot)) {
295
- issue(`vault root unavailable: ${brainRoot}`);
296
- }
297
-
298
- if (selected.length > 0 && modeCheck && !fs.existsSync(brainRoot)) {
299
- const message = `vault root unavailable; skipped sync drift checks: ${brainRoot}`;
300
- if (requireVault) issue(message);
301
- else warn(message);
302
- }
303
-
304
- for (const entry of selected) {
305
- if (!fs.existsSync(entry.sourceFile)) {
306
- issue(`Entry ${entry.id} source file is missing: ${entry.sourcePath}`);
307
- continue;
308
- }
309
-
310
- if (!fs.existsSync(brainRoot)) {
311
- skipped += 1;
312
- continue;
313
- }
314
-
315
- if (!validateTargetInsideBrainRoot(entry.targetPath, entry.brainPath, entry.id)) {
316
- continue;
317
- }
318
-
319
- let sourceContent;
320
- try {
321
- sourceContent = fs.readFileSync(entry.sourceFile, "utf8");
322
- } catch (error) {
323
- const code = error && error.code ? ` (${error.code})` : "";
324
- issue(`Entry ${entry.id} source file is unreadable: ${entry.sourcePath}${code}`);
325
- continue;
326
- }
327
-
328
- const targetExists = fs.existsSync(entry.targetPath);
329
- let targetContent = null;
330
- if (targetExists) {
331
- try {
332
- targetContent = fs.readFileSync(entry.targetPath, "utf8");
333
- } catch (error) {
334
- const code = error && error.code ? ` (${error.code})` : "";
335
- const message = `Entry ${entry.id} brain file is unreadable: ${entry.brainPath}${code}`;
336
- if (modeCheck && !requireVault) {
337
- warn(`${message}; skipped sync drift check`);
338
- skipped += 1;
339
- continue;
340
- }
341
- issue(message);
342
- continue;
343
- }
344
- }
345
-
346
- if (modeCheck) {
347
- if (!targetExists) {
348
- issue(`Entry ${entry.id} brain file is missing: ${entry.brainPath}`);
349
- } else if (targetContent !== sourceContent) {
350
- issue(`Entry ${entry.id} brain file differs from source: ${entry.sourcePath} -> ${entry.brainPath}`);
351
- }
352
- continue;
353
- }
354
-
355
- if (targetExists && targetContent === sourceContent) {
356
- skipped += 1;
357
- continue;
358
- }
359
-
360
- if (dryRun) {
361
- console.log(`[BrainSync] would sync ${entry.sourcePath} -> ${entry.brainPath}`);
362
- synced += 1;
363
- continue;
364
- }
365
-
366
- fs.mkdirSync(path.dirname(entry.targetPath), { recursive: true });
367
- fs.writeFileSync(entry.targetPath, sourceContent);
368
- console.log(`[BrainSync] synced ${entry.sourcePath} -> ${entry.brainPath}`);
369
- synced += 1;
370
- }
371
-
372
- if (issues > 0) process.exit(1);
373
-
374
- if (selected.length === 0 && (modeAll || modeCheck)) {
375
- console.log("[BrainSync] no repo-to-brain entries");
376
- } else if (synced === 0 && selected.length > 0 && !modeCheck) {
377
- console.log(`[BrainSync] up to date (${skipped} checked)`);
378
- } else if (modeCheck && selected.length > 0) {
379
- console.log("[BrainSync] OK");
380
- }
381
- JS_EOF
3
+ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
4
+ exec "$SCRIPT_DIR/lib/run-forge-helper.sh" "sync-brain-docs.sh" "$@"