@moretea-labs/forge 1.7.1 → 1.8.0

package/src/cli/mcp/policy.ts

@@ -1,232 +1,2 @@
-import { existsSync, readFileSync } from 'fs';
-import { join } from 'path';
-import { DEFAULT_AGENT_TIMEOUT_MS, defaultLocalAgentRunners, MAX_AGENT_TIMEOUT_MS } from '../controller/runtime-config';
-import type { McpAgentRunnerName, McpPolicy, McpProfileName } from './types';
-
-const COMMON_DENY_GLOBS = [
-  '.env',
-  '.env.*',
-  '*.pem',
-  '*.key',
-  '*.p12',
-  '*.pfx',
-  '.ssh/**',
-  '.git/**',
-  'node_modules/**',
-  'dist/**',
-  'build/**',
-  'coverage/**',
-  'secrets/**',
-  'credentials/**',
-  'private/**',
-  '.cache/**',
-  '.DS_Store',
-];
-
-export const PLANNER_READ_GLOBS = [
-  'AGENTS.md',
-  'CLAUDE.md',
-  'SKILL.md',
-  'docs/spec.md',
-  'docs/reference-configs/**',
-  'plans/**',
-  'tasks/current.md',
-  'tasks/contracts/**',
-  'tasks/reviews/**',
-  'tasks/notes/**',
-  '.ai/context/**',
-  '.ai/harness/session/**',
-  '.ai/harness/controller/packets/**',
-  '.ai/harness/projections/**',
-  '.ai/harness/checks/**',
-];
-
-export const PLANNER_WRITE_GLOBS = [
-  'plans/prds/**',
-  'plans/sprints/**',
-  'plans/plan-*.md',
-  '.ai/harness/controller/packets/codex-goal.md',
-  '.ai/harness/controller/packets/chatgpt-plan.md',
-];
-
-export interface McpPolicyOptions {
-  devAgentRunner?: boolean;
-  allowedAgents?: McpAgentRunnerName[];
-  runnerTimeoutMs?: number;
-  runnerMaxTimeoutMs?: number;
-  repoRoot?: string;
-}
-
-interface McpPolicyOverrideProfile {
-  readGlobs?: string[];
-  writeGlobs?: string[];
-  denyGlobs?: string[];
-  appendReadGlobs?: string[];
-  appendWriteGlobs?: string[];
-  appendDenyGlobs?: string[];
-  maxFileBytes?: number;
-}
-
-interface McpPolicyOverrideFile {
-  profiles?: Partial<Record<McpProfileName, McpPolicyOverrideProfile>>;
-}
-
-function executionPolicy(overrides: Partial<McpPolicy['execution']> = {}): McpPolicy['execution'] {
-  return {
-    fixedWorkflowCheck: false,
-    codexRunner: false,
-    agentRunner: false,
-    allowedAgents: [],
-    runnerTimeoutMs: DEFAULT_AGENT_TIMEOUT_MS,
-    runnerMaxTimeoutMs: MAX_AGENT_TIMEOUT_MS,
-    ...overrides,
-  };
-}
-
-function uniqueStrings(values: string[]): string[] {
-  return Array.from(new Set(values.filter((value) => value.trim().length > 0)));
-}
-
-function parseStringArray(value: unknown): string[] | undefined {
-  if (!Array.isArray(value)) return undefined;
-  const normalized = value.map((entry) => String(entry).trim()).filter((entry) => entry.length > 0);
-  return normalized;
-}
-
-function loadMcpPolicyOverrides(repoRoot?: string): McpPolicyOverrideFile | undefined {
-  if (!repoRoot) return undefined;
-  const path = join(repoRoot, '.forge', 'mcp.policy.json');
-  if (!existsSync(path)) return undefined;
-  const raw = JSON.parse(readFileSync(path, 'utf-8')) as Record<string, unknown>;
-  const profilesRaw = raw.profiles;
-  if (!profilesRaw || typeof profilesRaw !== 'object' || Array.isArray(profilesRaw)) return undefined;
-  const profiles: Partial<Record<McpProfileName, McpPolicyOverrideProfile>> = {};
-  for (const profile of ['planner', 'executor', 'orchestrator', 'controller'] as const) {
-    const entry = (profilesRaw as Record<string, unknown>)[profile];
-    if (!entry || typeof entry !== 'object' || Array.isArray(entry)) continue;
-    const record = entry as Record<string, unknown>;
-    const maxFileBytes = typeof record.maxFileBytes === 'number' && Number.isFinite(record.maxFileBytes)
-      ? Math.trunc(record.maxFileBytes)
-      : undefined;
-    profiles[profile] = {
-      readGlobs: parseStringArray(record.readGlobs),
-      writeGlobs: parseStringArray(record.writeGlobs),
-      denyGlobs: parseStringArray(record.denyGlobs),
-      appendReadGlobs: parseStringArray(record.appendReadGlobs),
-      appendWriteGlobs: parseStringArray(record.appendWriteGlobs),
-      appendDenyGlobs: parseStringArray(record.appendDenyGlobs),
-      maxFileBytes,
-    };
-  }
-  return { profiles };
-}
-
-function applyPolicyOverrides(
-  base: McpPolicy,
-  profile: McpProfileName,
-  repoRoot?: string,
-): McpPolicy {
-  const override = loadMcpPolicyOverrides(repoRoot)?.profiles?.[profile];
-  if (!override) return base;
-  return {
-    ...base,
-    readGlobs: uniqueStrings([...(override.readGlobs ?? base.readGlobs), ...(override.appendReadGlobs ?? [])]),
-    writeGlobs: uniqueStrings([...(override.writeGlobs ?? base.writeGlobs), ...(override.appendWriteGlobs ?? [])]),
-    denyGlobs: uniqueStrings([...COMMON_DENY_GLOBS, ...(override.denyGlobs ?? base.denyGlobs), ...(override.appendDenyGlobs ?? [])]),
-    maxFileBytes: override.maxFileBytes ?? base.maxFileBytes,
-  };
-}
-
-export function getMcpPolicy(profile: McpProfileName, opts: McpPolicyOptions = {}): McpPolicy {
-  if (profile === 'planner') {
-    return applyPolicyOverrides({
-      profile,
-      readGlobs: PLANNER_READ_GLOBS,
-      writeGlobs: PLANNER_WRITE_GLOBS,
-      denyGlobs: [
-        ...COMMON_DENY_GLOBS,
-        'src/**',
-        'app/**',
-        'packages/**',
-        'package.json',
-        'bun.lock',
-        'package-lock.json',
-        'pnpm-lock.yaml',
-        'yarn.lock',
-        '.github/workflows/**',
-      ],
-      maxFileBytes: 512 * 1024,
-      execution: executionPolicy({
-        fixedWorkflowCheck: true,
-      }),
-    }, profile, opts.repoRoot);
-  }
-
-  if (profile === 'executor') {
-    return applyPolicyOverrides({
-      profile,
-      readGlobs: ['plans/**', 'tasks/**', 'docs/spec.md', '.ai/context/**', '.ai/harness/**'],
-      writeGlobs: ['tasks/reviews/**', '.ai/harness/checks/**', '.ai/harness/session/**', '.ai/harness/controller/packets/**'],
-      denyGlobs: COMMON_DENY_GLOBS,
-      maxFileBytes: 512 * 1024,
-      execution: executionPolicy({
-        fixedWorkflowCheck: true,
-      }),
-    }, profile, opts.repoRoot);
-  }
-
-  if (profile === 'controller') {
-    const devRunner = opts.devAgentRunner === true;
-    return applyPolicyOverrides({
-      profile,
-      readGlobs: ['**'],
-      writeGlobs: ['**'],
-      denyGlobs: [
-        ...COMMON_DENY_GLOBS,
-        '.forge/**',
-        '.ai/harness/security/**',
-        '.codex/**',
-        '.claude/**',
-        'package-lock.json',
-        'pnpm-lock.yaml',
-        'yarn.lock',
-        'bun.lock',
-        '.github/workflows/**',
-      ],
-      maxFileBytes: 2 * 1024 * 1024,
-      execution: executionPolicy({
-        fixedWorkflowCheck: true,
-        codexRunner: devRunner,
-        agentRunner: devRunner,
-        allowedAgents: devRunner ? (opts.allowedAgents?.length ? opts.allowedAgents : defaultLocalAgentRunners()) : [],
-        runnerTimeoutMs: opts.runnerTimeoutMs ?? DEFAULT_AGENT_TIMEOUT_MS,
-        runnerMaxTimeoutMs: opts.runnerMaxTimeoutMs ?? MAX_AGENT_TIMEOUT_MS,
-      }),
-    }, profile, opts.repoRoot);
-  }
-
-  if (profile === 'orchestrator') {
-    const devRunner = opts.devAgentRunner === true;
-    return applyPolicyOverrides({
-      profile,
-      readGlobs: devRunner ? ['.ai/harness/controller/packets/codex-goal.md'] : [],
-      writeGlobs: [],
-      denyGlobs: devRunner ? COMMON_DENY_GLOBS : ['**'],
-      maxFileBytes: devRunner ? 512 * 1024 : 0,
-      execution: executionPolicy({
-        codexRunner: devRunner,
-        agentRunner: devRunner,
-        allowedAgents: devRunner ? (opts.allowedAgents?.length ? opts.allowedAgents : defaultLocalAgentRunners()) : [],
-        runnerTimeoutMs: opts.runnerTimeoutMs ?? DEFAULT_AGENT_TIMEOUT_MS,
-        runnerMaxTimeoutMs: opts.runnerMaxTimeoutMs ?? MAX_AGENT_TIMEOUT_MS,
-      }),
-    }, profile, opts.repoRoot);
-  }
-
-  throw new Error(`unknown MCP profile: ${String(profile)}`);
-}
-
-export function parseMcpProfile(value: string): McpProfileName {
-  if (value === 'planner' || value === 'executor' || value === 'orchestrator' || value === 'controller') return value;
-  throw new Error(`invalid MCP profile "${value}" (expected: planner, executor, orchestrator, controller)`);
-}
+/** @deprecated Kernel V2 compatibility shim. MCP adapter owns this surface. */
+export * from '../../../adapters/mcp/policy';

package/src/cli/mcp/post-finalize-work-attribution.ts

@@ -1,150 +1,2 @@
-import { classifyRepositoryCommand } from '../repositories/command-classifier';
-import { resolveRepositorySelection } from '../repositories/registry';
-import { executionIdentityForRepository } from '../../runtime/control-plane/execution/execution-identity';
-import { getWorkContract } from '../../runtime/control-plane/facade/work-contract-store';
-import { isTerminalWorkContractStatus } from '../../runtime/control-plane/facade/types';
-import {
-  classifyRepositoryCommandRoute,
-  executeRepositoryCommandViaProcessRuntime,
-} from '../../runtime/execution/process-runtime/command-facade';
-import {
-  callRepositoryTool,
-  type RepositoryToolCallerContext,
-} from './repository-tools';
-import type { CallToolResult } from './tools';
-
-function result(payload: Record<string, unknown>, isError = false): CallToolResult {
-  return {
-    content: [{ type: 'text', text: JSON.stringify(payload) }],
-    structuredContent: payload,
-    ...(isError ? { isError: true } : {}),
-  };
-}
-
-function optionalNumber(value: unknown): number | undefined {
-  if (typeof value === 'number' && Number.isFinite(value)) return value;
-  if (typeof value === 'string' && value.trim()) {
-    const parsed = Number(value);
-    return Number.isFinite(parsed) ? parsed : undefined;
-  }
-  return undefined;
-}
-
-/**
- * A completed Work is historical attribution, never mutation authority.
- *
- * Finalize cleanup may remove the Work-owned checkout and release its Controller
- * lease, but a Controller can still need to observe the repository immediately
- * afterwards (for example `git status -sb`). Keep that observation attributed to
- * the completed Work without reopening the Work lifecycle or writer lease.
- *
- * This path intentionally accepts only typed argv commands that the same command
- * classifier used by Process Runtime proves readonly. Everything else falls
- * through to the normal repository facade so active-Work ownership, terminal
- * mutation fences, and completion-receipt remote-delivery rules stay authoritative.
- */
-export async function callPostFinalizeWorkReadOnlyCommand(
-  controllerHome: string,
-  name: string,
-  args: Record<string, unknown>,
-  caller?: RepositoryToolCallerContext,
-): Promise<CallToolResult | undefined> {
-  if (name !== 'repository_command_execute') return undefined;
-  if (typeof args.workspace_root === 'string' && args.workspace_root.trim()) return undefined;
-
-  const requestedWorkId = typeof args.work_id === 'string' ? args.work_id.trim() : '';
-  const principalId = caller?.principalId?.trim() ?? '';
-  const command = args.command;
-  if (!requestedWorkId || !principalId || !Array.isArray(command) || !command.every((entry) => typeof entry === 'string')) {
-    return undefined;
-  }
-
-  const repository = resolveRepositorySelection({
-    repoId: typeof args.repo_id === 'string' && args.repo_id.trim() ? args.repo_id.trim() : undefined,
-    controllerHome,
-    allowSoleRepository: true,
-  });
-  if (!repository) return undefined;
-
-  const work = getWorkContract({ controllerHome, repoId: repository.repoId }, requestedWorkId);
-  if (
-    !work
-    || !isTerminalWorkContractStatus(work.status)
-    || work.status !== 'completed'
-    || !work.completionReceipt
-    || work.completionReceipt.workId !== requestedWorkId
-    || !work.principalId?.trim()
-    || work.principalId.trim() !== principalId
-  ) {
-    return undefined;
-  }
-
-  const classification = classifyRepositoryCommand(command, repository.defaultBranch);
-  if (classification.risk !== 'readonly') return undefined;
-  const route = classifyRepositoryCommandRoute(command, {
-    defaultBranch: repository.defaultBranch,
-    timeoutMs: optionalNumber(args.timeout_ms),
-  });
-  if (route.route !== 'process_direct' || route.reason !== 'readonly_fast_path') return undefined;
-
-  const executionIdentity = executionIdentityForRepository(repository, { workId: requestedWorkId });
-  const execution = await executeRepositoryCommandViaProcessRuntime({
-    controllerHome,
-    repository,
-    command,
-    cwd: typeof args.cwd === 'string' ? args.cwd : undefined,
-    timeoutMs: optionalNumber(args.timeout_ms),
-    interactiveWaitMs: optionalNumber(args.interactive_wait_ms),
-    maxOutputBytes: optionalNumber(args.max_output_bytes),
-    requestId: typeof args.request_id === 'string' ? args.request_id : undefined,
-    workId: requestedWorkId,
-    executionIdentity,
-  });
-
-  if (execution.route !== 'process_direct' || execution.process) {
-    return result({
-      accepted: false,
-      mode: 'reject',
-      path: 'post_finalize_readonly_route_mismatch',
-      route: 'reject',
-      repoId: repository.repoId,
-      checkoutId: repository.activeCheckoutId,
-      workId: requestedWorkId,
-      lifecycleClosed: true,
-      error: {
-        code: 'POST_FINALIZE_READONLY_ROUTE_MISMATCH',
-        message: 'Post-finalize Work attribution may execute only through the bounded readonly direct lane.',
-      },
-    }, true);
-  }
-
-  return result({
-    accepted: true,
-    mode: 'process_direct',
-    path: 'process_direct',
-    route: 'process_direct',
-    reason: 'post_finalize_work_readonly_followup',
-    repoId: repository.repoId,
-    checkoutId: repository.activeCheckoutId,
-    workId: requestedWorkId,
-    lifecycleClosed: true,
-    postFinalizeAttribution: 'readonly_followup',
-    completed: true,
-    ok: execution.ok === true,
-    exitCode: execution.exitCode,
-    stdout: execution.stdout,
-    stderr: execution.stderr,
-    durableSideEffects: execution.durableSideEffects,
-    next: 'Post-finalize readonly observation completed without reopening Work mutation authority or creating durable execution state.',
-  });
-}
-
-export async function callRepositoryToolWithPostFinalizeAttribution(
-  controllerHome: string,
-  name: string,
-  args: Record<string, unknown>,
-  caller?: RepositoryToolCallerContext,
-): Promise<CallToolResult | undefined> {
-  const followup = await callPostFinalizeWorkReadOnlyCommand(controllerHome, name, args, caller);
-  return followup ?? callRepositoryTool(controllerHome, name, args, caller);
-}
+/** @deprecated Kernel V2 compatibility shim. MCP adapter owns this surface. */
+export * from '../../../adapters/mcp/tool-mapping/post-finalize-work-attribution';

package/src/cli/mcp/proxy-env.ts

@@ -1,62 +1,2 @@
-/**
- * Local HTTP/SOCKS proxies must not intercept Tailscale Funnel / MagicDNS or
- * loopback controller surfaces. Bun fetch does not honor `*.ts.net` wildcards;
- * leading-dot forms (`.ts.net`) are required for reliable bypass.
- */
-export const DIRECT_NETWORK_NO_PROXY_ENTRIES = [
-  '127.0.0.1',
-  'localhost',
-  '::1',
-  '.local',
-  '.ts.net',
-  '*.ts.net',
-  '.tailscale.com',
-  '*.tailscale.com',
-  '100.64.0.0/10',
-] as const;
-
-export function mergeNoProxy(...parts: Array<string | undefined | null>): string {
-  const seen = new Set<string>();
-  const out: string[] = [];
-  for (const part of parts) {
-    if (!part) continue;
-    for (const entry of part.split(',').map((item) => item.trim()).filter(Boolean)) {
-      const key = entry.toLowerCase();
-      if (seen.has(key)) continue;
-      seen.add(key);
-      out.push(entry);
-    }
-  }
-  return out.join(',');
-}
-
-/**
- * Return a copy of `env` with NO_PROXY/no_proxy extended so local MCP, Tailscale
- * Funnel, and MagicDNS health probes never go through a system HTTP proxy.
- */
-export function withDirectNetworkProxyBypass(
-  env: NodeJS.ProcessEnv = process.env,
-): NodeJS.ProcessEnv {
-  const merged = mergeNoProxy(
-    env.NO_PROXY,
-    env.no_proxy,
-    ...DIRECT_NETWORK_NO_PROXY_ENTRIES,
-  );
-  return {
-    ...env,
-    NO_PROXY: merged,
-    no_proxy: merged,
-  };
-}
-
-/**
- * Mutate the current process env in place (keepalive/supervisor long-running paths).
- */
-export function applyDirectNetworkProxyBypass(
-  env: NodeJS.ProcessEnv = process.env,
-): NodeJS.ProcessEnv {
-  const next = withDirectNetworkProxyBypass(env);
-  env.NO_PROXY = next.NO_PROXY;
-  env.no_proxy = next.no_proxy;
-  return env;
-}
+/** @deprecated Kernel V2 compatibility shim. MCP adapter owns this surface. */
+export * from '../../../adapters/mcp/proxy-env';

package/src/cli/mcp/readiness-projection.ts

@@ -1,24 +1,2 @@
-import type { TaskLedgerProjection } from '../controller/task-ledger';
-import {
-  reconcileProjectionWithTaskLedger,
-  type RepositoryRuntimeProjectionSnapshot,
-} from '../../runtime/projections/materialized-view';
-
-/**
- * Readiness must stay independent from the legacy Issue/Task board after the
- * Requirement portfolio cutover. The persisted runtime projection remains the
- * readiness source; Task Ledger comparison is optional diagnostic evidence.
- */
-export function reconcileReadinessProjectionSource(
-  snapshot: RepositoryRuntimeProjectionSnapshot,
-  ledger?: TaskLedgerProjection,
-) {
-  if (!ledger) {
-    return {
-      status: 'unknown' as const,
-      projectionRunningWorkers: Math.max(0, snapshot.projection.runningWorkers),
-      detail: 'legacy task ledger retired; readiness uses persisted projection state',
-    };
-  }
-  return reconcileProjectionWithTaskLedger(snapshot, ledger);
-}
+/** @deprecated Kernel V2 compatibility shim. MCP adapter owns this surface. */
+export * from '../../../adapters/mcp/readiness-projection';

package/src/cli/mcp/redaction.ts

@@ -1,21 +1,2 @@
-import { redactSensitiveText } from '../../runtime/evidence/sensitive-output';
-
-export interface McpRedaction {
-  type: string;
-  count: number;
-}
-
-export interface McpRedactionResult {
-  text: string;
-  redactions: McpRedaction[];
-}
-
-/**
- * MCP is a presentation boundary, not a separate secret-detection engine.
- * Reuse the same bounded patterns as Process Runtime persistence so a value
- * cannot be safe in one tool surface and exposed in another.
- */
-export function redactMcpText(input: string): McpRedactionResult {
-  const result = redactSensitiveText(input);
-  return { text: result.text, redactions: result.redactions };
-}
+/** @deprecated Kernel V2 compatibility shim. MCP adapter owns this surface. */
+export * from '../../../adapters/mcp/redaction';

package/src/cli/mcp/repo.ts

@@ -1,24 +1,2 @@
-import { existsSync } from 'fs';
-import { join, resolve } from 'path';
-import { runProcess } from '../../effects/process-runner';
-
-export function resolveMcpRepoRoot(repo = '.'): string {
-  const candidate = resolve(repo);
-  const result = runProcess('git', ['-C', candidate, 'rev-parse', '--show-toplevel'], {
-    timeoutMs: 5000,
-    stdio: 'pipe',
-  });
-  return result.status === 0 && result.stdout.trim() ? result.stdout.trim() : candidate;
-}
-
-export function isForgeAdopted(repoRoot: string): boolean {
-  return existsSync(join(repoRoot, '.ai', 'harness', 'policy.json')) || existsSync(join(repoRoot, 'tasks', 'current.md'));
-}
-
-export function currentGitBranch(repoRoot: string): string | null {
-  const result = runProcess('git', ['-C', repoRoot, 'branch', '--show-current'], {
-    timeoutMs: 5000,
-    stdio: 'pipe',
-  });
-  return result.status === 0 && result.stdout.trim() ? result.stdout.trim() : null;
-}
+/** @deprecated Kernel V2 compatibility shim. MCP adapter owns this surface. */
+export * from '../../../adapters/mcp/repo';