@mriekki/project-forge 4.8.0 → 4.8.1

package/README.md

@@ -103,28 +103,17 @@ The stable descriptor at `chatgpt/current.json` resolves an immutable Project Fo
 
 `@mriekki/project-forge` is the public distribution for Project Forge engineering assets used by generated projects.
 
-Project Forge assembles that package from approved private platform components using exact pinned source commits and deterministic distribution descriptors. Published packages are self-contained; Builders do not need access to the private implementation repositories to install or update managed assets.
+Project Forge assembles that package from approved private platform components using exact pinned source revisions and deterministic distribution descriptors. Published packages are self-contained; Builders do not need access to the private implementation repositories to install or update managed assets.
 
-Install:
+Generated Projects receive an exact approved package during deterministic generation. Existing generated Projects should normally adopt a newer supported package through:
 
-```powershell
-npx @mriekki/project-forge install
-```
-
-Update to the newest published package:
-
-```powershell
-npx @mriekki/project-forge@latest update
+```text
+/project-forge-update
 ```
 
-Inspect and verify:
-
-```powershell
-npx @mriekki/project-forge@latest status
-npx @mriekki/project-forge@latest check
-```
+That Project workflow resolves the supported exact package version and preserves the managed-baseline, drift, review, and delivery guardrails. Do not use a floating `@latest` package update as the normal Builder path: npm publication can intentionally occur before the stable public contract is advanced to the new version.
 
-Managed updates verify baselines and refuse unsafe drift or conflicts before modifying Project Forge-managed files.
+The package CLI remains available for exact-version troubleshooting and maintainer verification. Use the exact version recorded by the Project or selected by the Project Forge workflow rather than a floating tag.
 
 ## Maintainer system reference
 
@@ -137,7 +126,7 @@ The system reference deliberately does not duplicate current component SHAs, pac
 
 ## Maintainer release process
 
-Project Forge maintainers use a gated release workflow that resolves accepted component commits, verifies the assembled package, creates the package pull request, verifies CI, and stops at the explicit publication gate.
+Project Forge maintainers use a gated release workflow that resolves accepted component revisions, verifies the assembled package, creates the package pull request, verifies CI, and stops at the explicit publication gate.
 
 Publication uses npm Trusted Publishing (OIDC), reconstructs the exact package from pinned sources, verifies registry identity and integrity, and smoke-tests the public package from a neutral directory.
 

package/assets/components.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 2,
   "package": "@mriekki/project-forge",
-  "version": "4.8.0",
+  "version": "4.8.1",
   "defaultProfile": "greenfield-project",
   "profiles": {
     "greenfield-project": {

package/assets/generated/ASSEMBLY.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 2,
   "package": "@mriekki/project-forge",
-  "version": "4.8.0",
+  "version": "4.8.1",
   "components": {
     "core": {
       "revision": "a78c2482f4f559ead8efbab6c25b4b05496db735",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mriekki/project-forge",
-  "version": "4.8.0",
+  "version": "4.8.1",
   "description": "Public consumer distribution and updater for Project Forge engineering assets.",
   "type": "module",
   "bin": {

package/src/cli.mjs

@@ -44,6 +44,11 @@ function inferConsumer(root) {
   return path.basename(root);
 }
 
+export function componentRevisionForDisplay(component) {
+  const revision = component?.revision ?? component?.commit;
+  return typeof revision === 'string' && revision ? revision : '<unknown revision>';
+}
+
 function printPlan(plan, bootstrapMigrations = { rows: [], unsafe: [] }) {
   console.log(`Project Forge profile: ${plan.profileName}`);
   if (bootstrapMigrations.rows.length) {
@@ -51,7 +56,7 @@ function printPlan(plan, bootstrapMigrations = { rows: [], unsafe: [] }) {
     for (const row of bootstrapMigrations.rows) console.log(`${row.state.padEnd(30)} ${row.path}`);
   }
   for (const component of plan.plans) {
-    console.log(`\n${component.componentId.toUpperCase()} ${component.component.commit}`);
+    console.log(`\n${component.componentId.toUpperCase()} ${componentRevisionForDisplay(component.component)}`);
     for (const row of component.rows) console.log(`${row.state.padEnd(20)} ${row.path}`);
     for (const retired of component.retired) console.log(`${retired.state.padEnd(20)} ${retired.path}`);
   }
@@ -112,7 +117,7 @@ export async function run(argv = process.argv.slice(2), packageData = loadPackag
     console.log(`Available package: ${packageData.pkg.name}@${packageData.pkg.version}`);
     console.log(`Profile: ${installed.profile}`);
     for (const [name, component] of Object.entries(installed.components ?? {})) {
-      console.log(`${name}: ${component.version ? component.version + ' @ ' : ''}${component.commit}`);
+      console.log(`${name}: ${component.version ? component.version + ' @ ' : ''}${componentRevisionForDisplay(component)}`);
     }
     return 0;
   }