@nac3/forge-cli 0.2.0-alpha.8 → 0.2.1-alpha.60

package/dist/core/whats_new.js

@@ -0,0 +1,214 @@
+/**
+ * "What's new" notification (alpha.59l).
+ *
+ * Tracks the version Pablo (or any user) last opened the panel with.
+ * On boot, the server compares with the currently installed version
+ * and returns the cumulative bullet list of changes between the two,
+ * so the panel can show a one-shot dismissable banner.
+ *
+ * Storage:
+ *   ~/.yujin-forge/last_seen_version  -- plain text file with the
+ *                                        version string. Atomic
+ *                                        tmp+rename write. Missing
+ *                                        file = "never seen" -> show
+ *                                        everything from CATALOG.
+ *
+ * Catalog lives inline (`CATALOG` below). Adding a new entry is a
+ * one-line edit per alpha. Versions are compared by tuple of
+ * [major, minor, patch, pre_label, pre_num] so 0.2.0-alpha.59k <
+ * 0.2.0-alpha.59l < 0.2.0-alpha.60 < 0.2.0.
+ *
+ * ASCII-only.
+ */
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+/* The catalog is ordered newest-first. Sumi adds an entry at the
+ *  top with every shipped alpha that has a user-visible change. */
+export const CATALOG = [
+    {
+        version: '0.2.0-alpha.59l',
+        date: '2026-06-01',
+        summary: 'First-run "what changed" banner',
+        bullets: [
+            'New: this banner. Shown once per version upgrade.',
+            'Dismiss to mark seen. Re-shown only on the next yf upgrade.',
+        ],
+    },
+    {
+        version: '0.2.0-alpha.59k',
+        date: '2026-06-01',
+        summary: 'Server-side cost meter (billing-grade caps)',
+        bullets: [
+            'Authoritative monthly token counter lives in Cloudflare KV.',
+            'Worker enforces plan cap (free-public 200k eco, paid 2M, etc) before upstream call.',
+            '429 monthly_cap_reached when usage projection >= cap.',
+            'New endpoint GET /v1/cost-meter/<handle> exposes the row + caps for the budget UI.',
+        ],
+    },
+    {
+        version: '0.2.0-alpha.59j',
+        date: '2026-06-01',
+        summary: 'ANSI rendering + reader bookmarks + audit detail',
+        bullets: [
+            'Shell pizarron tabs strip ANSI escapes + collapse \\r progress bars.',
+            'Settings -> Reader bookmarks lists every persisted bookmark; click jumps the reader.',
+            'Audit log row click opens a detail modal with full JSON + copy button.',
+        ],
+    },
+    {
+        version: '0.2.0-alpha.59i',
+        date: '2026-06-01',
+        summary: 'Approval mid-stream + shell kill button',
+        bullets: [
+            'Approval modal now appears mid-turn via SSE, not after the call.',
+            'Shell pizarron tabs gain a stop button to kill the running process (SIGTERM -> SIGKILL).',
+        ],
+    },
+    {
+        version: '0.2.0-alpha.59h',
+        date: '2026-06-01',
+        summary: 'xAI + Mistral + Cohere runtime clients',
+        bullets: [
+            'Brain provider catalog now covers 8/8 runtimes wired.',
+            'BYOK keys for xAI / Mistral / Cohere can be set via yf keys set.',
+        ],
+    },
+    {
+        version: '0.2.0-alpha.59g',
+        date: '2026-05-31',
+        summary: 'Audit log viewer + DeepSeek client',
+        bullets: [
+            'Settings -> Audit log shows the last 200 entries with kind + approval-mode filters.',
+            'DeepSeek wired as a runtime brain provider.',
+        ],
+    },
+    {
+        version: '0.2.0-alpha.59f',
+        date: '2026-05-31',
+        summary: 'Shell live stream via SSE',
+        bullets: [
+            'Shell.exec output streams progressively into the pizarron tab as it runs.',
+        ],
+    },
+    {
+        version: '0.2.0-alpha.59e',
+        date: '2026-05-31',
+        summary: 'SSE streaming + autonomous multi-step',
+        bullets: [
+            'Chat turns now stream tool rounds via Server-Sent Events.',
+            'Autonomous mode lifts the tool-rounds cap to 50 with loop detection.',
+        ],
+    },
+    {
+        version: '0.2.0-alpha.59d',
+        date: '2026-05-31',
+        summary: 'shell.exec verb + Danger Zone',
+        bullets: [
+            'yujin.shell.exec runs commands with safe / destructive / elevation / network classification.',
+            'Danger Zone toggle auto-approves everything for velocity (audit-logged as bypass).',
+            'Audit log persists every gated action to ~/.yujin-forge/cache/audit_log.jsonl.',
+        ],
+    },
+];
+function lastSeenPath() {
+    const home = process.env.HOME || process.env.USERPROFILE || os.homedir();
+    const base = process.env.YF_CONFIG_DIR || path.join(home, '.yujin-forge');
+    return path.join(base, 'last_seen_version');
+}
+export async function readLastSeen() {
+    try {
+        const raw = await fs.readFile(lastSeenPath(), 'utf-8');
+        const trimmed = raw.trim();
+        return trimmed.length > 0 ? trimmed : null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function writeLastSeen(version) {
+    const p = lastSeenPath();
+    await fs.mkdir(path.dirname(p), { recursive: true });
+    const tmp = p + '.tmp';
+    await fs.writeFile(tmp, version, 'utf-8');
+    await fs.rename(tmp, p);
+}
+/**
+ * Parse a semver-ish version into a comparable tuple.
+ * "0.2.0-alpha.59k" -> [0, 2, 0, "alpha", 59, "k"]
+ * Releases without prerelease ("1.0.0") sort AFTER any prerelease
+ * of the same base.
+ */
+export function parseVersion(v) {
+    const m = /^(\d+)\.(\d+)\.(\d+)(?:-([a-zA-Z]+)\.(\d+)([a-zA-Z]*))?$/.exec(v);
+    if (!m) {
+        return { base: [0, 0, 0], preLabel: null, preNum: 0, preTail: '' };
+    }
+    const base = [Number(m[1]), Number(m[2]), Number(m[3])];
+    if (!m[4])
+        return { base, preLabel: null, preNum: 0, preTail: '' };
+    return {
+        base,
+        preLabel: m[4],
+        preNum: Number(m[5]),
+        preTail: m[6] || '',
+    };
+}
+/** Returns negative when a < b, positive when a > b, 0 when equal. */
+export function compareVersions(a, b) {
+    const pa = parseVersion(a);
+    const pb = parseVersion(b);
+    for (let i = 0; i < 3; i++) {
+        const ai = pa.base[i] ?? 0;
+        const bi = pb.base[i] ?? 0;
+        if (ai !== bi)
+            return ai - bi;
+    }
+    /* Release (no preLabel) > any prerelease of same base. */
+    if (pa.preLabel === null && pb.preLabel !== null)
+        return 1;
+    if (pa.preLabel !== null && pb.preLabel === null)
+        return -1;
+    if (pa.preLabel === null && pb.preLabel === null)
+        return 0;
+    /* Both have preLabel. Compare label alphabetically. */
+    const la = pa.preLabel ?? '';
+    const lb = pb.preLabel ?? '';
+    if (la !== lb)
+        return la < lb ? -1 : 1;
+    if (pa.preNum !== pb.preNum)
+        return pa.preNum - pb.preNum;
+    /* Both have same preLabel + preNum. Compare tail alphabetically. */
+    if (pa.preTail !== pb.preTail)
+        return pa.preTail < pb.preTail ? -1 : 1;
+    return 0;
+}
+/**
+ * Returns the cumulative list of WhatsNewEntry that the user has
+ * not seen yet. Entries strictly greater than last_seen and
+ * <= current_version. When last_seen is null, returns the latest
+ * entry only (avoid wall-of-text on a fresh install).
+ */
+export async function computeWhatsNew(currentVersion) {
+    const lastSeen = await readLastSeen();
+    if (!lastSeen) {
+        /* Fresh install -- show only the latest entry (avoid scaring
+         *  a first-time user with the full 9-entry backlog). */
+        const newest = CATALOG[0];
+        return {
+            current_version: currentVersion,
+            last_seen_version: null,
+            entries: newest ? [newest] : [],
+        };
+    }
+    if (compareVersions(lastSeen, currentVersion) >= 0) {
+        /* Already at or past current. Nothing to show. */
+        return { current_version: currentVersion, last_seen_version: lastSeen, entries: [] };
+    }
+    const entries = CATALOG.filter((e) => compareVersions(e.version, lastSeen) > 0 &&
+        compareVersions(e.version, currentVersion) <= 0);
+    return { current_version: currentVersion, last_seen_version: lastSeen, entries };
+}
+/** Test seam. */
+export const _internal = { lastSeenPath };
+//# sourceMappingURL=whats_new.js.map

package/dist/core/whats_new.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whats_new.js","sourceRoot":"","sources":["../../src/core/whats_new.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AASzB;mEACmE;AACnE,MAAM,CAAC,MAAM,OAAO,GAAoB;IACtC;QACE,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAK,YAAY;QACrB,OAAO,EAAE,iCAAiC;QAC1C,OAAO,EAAE;YACP,mDAAmD;YACnD,6DAA6D;SAC9D;KACF;IACD;QACE,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAK,YAAY;QACrB,OAAO,EAAE,6CAA6C;QACtD,OAAO,EAAE;YACP,6DAA6D;YAC7D,qFAAqF;YACrF,uDAAuD;YACvD,oFAAoF;SACrF;KACF;IACD;QACE,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAK,YAAY;QACrB,OAAO,EAAE,kDAAkD;QAC3D,OAAO,EAAE;YACP,sEAAsE;YACtE,sFAAsF;YACtF,wEAAwE;SACzE;KACF;IACD;QACE,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAK,YAAY;QACrB,OAAO,EAAE,yCAAyC;QAClD,OAAO,EAAE;YACP,kEAAkE;YAClE,0FAA0F;SAC3F;KACF;IACD;QACE,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAK,YAAY;QACrB,OAAO,EAAE,wCAAwC;QACjD,OAAO,EAAE;YACP,uDAAuD;YACvD,kEAAkE;SACnE;KACF;IACD;QACE,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAK,YAAY;QACrB,OAAO,EAAE,oCAAoC;QAC7C,OAAO,EAAE;YACP,qFAAqF;YACrF,6CAA6C;SAC9C;KACF;IACD;QACE,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAK,YAAY;QACrB,OAAO,EAAE,2BAA2B;QACpC,OAAO,EAAE;YACP,2EAA2E;SAC5E;KACF;IACD;QACE,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAK,YAAY;QACrB,OAAO,EAAE,uCAAuC;QAChD,OAAO,EAAE;YACP,2DAA2D;YAC3D,sEAAsE;SACvE;KACF;IACD;QACE,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAK,YAAY;QACrB,OAAO,EAAE,+BAA+B;QACxC,OAAO,EAAE;YACP,8FAA8F;YAC9F,oFAAoF;YACpF,gFAAgF;SACjF;KACF;CACF,CAAC;AAQF,SAAS,YAAY;IACnB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC;IACzB,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC;IACvB,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,CAAS;IAMpC,MAAM,CAAC,GAAG,0DAA0D,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAA6B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACnE,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QACd,MAAM,EAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,OAAO,EAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;KACrB,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,0DAA0D;IAC1D,IAAI,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,EAAE,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,EAAE,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,IAAI,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,EAAE,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAC3D,uDAAuD;IACvD,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC7B,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC7B,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;IAC1D,oEAAoE;IACpE,IAAI,EAAE,CAAC,OAAO,KAAK,EAAE,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,cAAsB;IAEtB,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd;gEACwD;QACxD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,OAAO;YACL,eAAe,EAAE,cAAc;YAC/B,iBAAiB,EAAE,IAAI;YACvB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;SAChC,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,kDAAkD;QAClD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACnC,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC;QACxC,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,CAChD,CAAC;IACF,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACnF,CAAC;AAED,iBAAiB;AACjB,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,YAAY,EAAE,CAAC"}

package/dist/core/wizard_state.d.ts

@@ -0,0 +1,15 @@
+export declare const WIZARD_STATE_VERSION = 1;
+export type WizardPath = 'claude_plan' | 'console_byok' | 'skipped';
+export interface WizardState {
+    v: number;
+    wizard_completed: boolean;
+    completed_at?: string;
+    path_chosen?: WizardPath;
+}
+export declare function defaultWizardState(): WizardState;
+export declare function readWizardState(): Promise<WizardState>;
+export declare function writeWizardState(s: WizardState): Promise<void>;
+export declare function markWizardCompleted(path_chosen: WizardPath): Promise<WizardState>;
+/** Reset state (tests + `yf wizard reset` CLI seam). */
+export declare function resetWizardState(): Promise<void>;
+//# sourceMappingURL=wizard_state.d.ts.map

package/dist/core/wizard_state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wizard_state.d.ts","sourceRoot":"","sources":["../../src/core/wizard_state.ts"],"names":[],"mappings":"AAyBA,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,cAAc,GAAG,SAAS,CAAC;AAEpE,MAAM,WAAW,WAAW;IAC1B,CAAC,EAAkB,MAAM,CAAC;IAC1B,gBAAgB,EAAG,OAAO,CAAC;IAC3B,YAAY,CAAC,EAAM,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAO,UAAU,CAAC;CAC/B;AAaD,wBAAgB,kBAAkB,IAAI,WAAW,CAEhD;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,WAAW,CAAC,CAoB5D;AAED,wBAAsB,gBAAgB,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAMpE;AAED,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CASvF;AAED,wDAAwD;AACxD,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGtD"}

package/dist/core/wizard_state.js

@@ -0,0 +1,86 @@
+/**
+ * First-run wizard state (PND-001).
+ *
+ * Tracks whether the user has completed the license + brain setup
+ * wizard on this machine. Persisted at
+ * `~/.yujin-forge/wizard_state.json` so subsequent `yf chat` runs
+ * skip the auto-open modal even when the user has not yet configured
+ * a license or brain key (they may have dismissed the wizard
+ * intentionally and want to keep working without one for the moment).
+ *
+ * Schema:
+ *   {
+ *     v: 1,
+ *     wizard_completed: boolean,
+ *     completed_at?: ISO 8601 timestamp,
+ *     path_chosen?: 'claude_plan' | 'console_byok' | 'skipped'
+ *   }
+ *
+ * ASCII-only.
+ */
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { renameWithRetry } from './atomic_write.js';
+export const WIZARD_STATE_VERSION = 1;
+const FILENAME = 'wizard_state.json';
+function configRoot() {
+    return process.env['YF_CONFIG_DIR']
+        ?? path.join(process.env['HOME'] || process.env['USERPROFILE'] || os.homedir(), '.yujin-forge');
+}
+function statePath() {
+    return path.join(configRoot(), FILENAME);
+}
+export function defaultWizardState() {
+    return { v: WIZARD_STATE_VERSION, wizard_completed: false };
+}
+export async function readWizardState() {
+    try {
+        const raw = await fs.readFile(statePath(), 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object')
+            return defaultWizardState();
+        const out = {
+            v: WIZARD_STATE_VERSION,
+            wizard_completed: parsed.wizard_completed === true,
+        };
+        if (typeof parsed.completed_at === 'string')
+            out.completed_at = parsed.completed_at;
+        if (parsed.path_chosen === 'claude_plan'
+            || parsed.path_chosen === 'console_byok'
+            || parsed.path_chosen === 'skipped') {
+            out.path_chosen = parsed.path_chosen;
+        }
+        return out;
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return defaultWizardState();
+        return defaultWizardState();
+    }
+}
+export async function writeWizardState(s) {
+    const file = statePath();
+    await fs.mkdir(path.dirname(file), { recursive: true });
+    const tmp = file + '.tmp';
+    await fs.writeFile(tmp, JSON.stringify(s, null, 2), 'utf-8');
+    await renameWithRetry(tmp, file);
+}
+export async function markWizardCompleted(path_chosen) {
+    const next = {
+        v: WIZARD_STATE_VERSION,
+        wizard_completed: true,
+        completed_at: new Date().toISOString(),
+        path_chosen,
+    };
+    await writeWizardState(next);
+    return next;
+}
+/** Reset state (tests + `yf wizard reset` CLI seam). */
+export async function resetWizardState() {
+    try {
+        await fs.unlink(statePath());
+    }
+    catch { /* not present */ }
+}
+//# sourceMappingURL=wizard_state.js.map

package/dist/core/wizard_state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wizard_state.js","sourceRoot":"","sources":["../../src/core/wizard_state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAWtC,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AAErC,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;WAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,EAAE,CAAC,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACvD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,kBAAkB,EAAE,CAAC;QACvE,MAAM,GAAG,GAAgB;YACvB,CAAC,EAAE,oBAAoB;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,KAAK,IAAI;SACnD,CAAC;QACF,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YAAE,GAAG,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACpF,IAAI,MAAM,CAAC,WAAW,KAAK,aAAa;eACpC,MAAM,CAAC,WAAW,KAAK,cAAc;eACrC,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACrC,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACvC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,kBAAkB,EAAE,CAAC;QAClF,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,CAAc;IACnD,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,MAAM,CAAC;IAC1B,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAuB;IAC/D,MAAM,IAAI,GAAgB;QACxB,CAAC,EAAE,oBAAoB;QACvB,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,WAAW;KACZ,CAAC;IACF,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC;QAAC,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAAC,CAAC;IACrC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC7B,CAAC"}

package/dist/deploy/adapter.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Deploy adapter abstraction.
+ *
+ * Forge supports multiple cloud targets. Each one is encapsulated
+ * as a DeployAdapter implementation. The tier-aware selector
+ * picks the right adapter for a project based on:
+ *
+ *   - workflow.tier        (Simple / Medium / Full)
+ *   - workflow.clarification.nfr_quantitative.volume
+ *   - workflow.clarification.nfr_quantitative.parallelism
+ *   - workflow.clarification.nfr_structural.persistence
+ *   - workflow.clarification.nfr_structural.workers
+ *
+ * Rules of thumb (codified in pickDeployAdapter):
+ *   - Simple tier + no queue + no workers   -> Cloudflare Pages/Workers
+ *   - Medium tier OR has queue OR has workers -> Cloudflare Pages + R2 + Queues
+ *   - Full tier OR persistent stateful workers OR custom infra -> AWS ECS Fargate
+ *
+ * The user can override via `yf operate deploy-guided --adapter <id>`.
+ *
+ * Adapter contract:
+ *   - id: short slug ("cloudflare" | "aws" | "vercel" | ...).
+ *   - description: one-liner for the picker UX.
+ *   - tierFit(): which tiers this adapter is appropriate for.
+ *   - readyToRun(): credentials check (e.g. wrangler logged in).
+ *   - plan(input): dry-run -> { resources, estimated_cost_usd }.
+ *   - apply(input): real deploy -> { url, logs, deployed_at }.
+ *
+ * For alpha.19 only `cloudflare` is wired end-to-end. `aws` keeps
+ * the existing imperative path; the adapter is a thin shell over
+ * it. `vercel` is a stub for future.
+ *
+ * ASCII-only.
+ */
+import type { WorkflowState } from '../workflow/state.js';
+export type DeployAdapterId = 'cloudflare' | 'aws' | 'vercel';
+export type Tier = 'simple' | 'medium' | 'full';
+export interface DeployPlan {
+    resources: string[];
+    estimated_cost_usd: number;
+    estimated_minutes: number;
+    notes: string[];
+}
+export interface DeployResult {
+    url: string;
+    deployed_at: string;
+    build_seconds: number;
+    logs_tail: string[];
+}
+export interface DeployInput {
+    /** Absolute path to the build output (dist/ or .next/ or similar). */
+    buildDir: string;
+    /** Project slug (Cloudflare project name / AWS service name). */
+    projectSlug: string;
+    /** Optional env vars to expose. */
+    env?: Record<string, string>;
+    /** Tenant / user handle for multi-tenant adapters. */
+    userHandle?: string;
+}
+export interface DeployAdapter {
+    id: DeployAdapterId;
+    description: string;
+    tierFit(): Tier[];
+    /** Cheap check -- does the local env have what this adapter
+     *  needs (credentials, CLI tools)? Returns ok + reason. */
+    readyToRun(): Promise<{
+        ok: boolean;
+        reason?: string;
+    }>;
+    /** Dry-run plan: lists resources + cost estimate. No network
+     *  writes beyond auth pings. */
+    plan(input: DeployInput): Promise<DeployPlan>;
+    /** Real deploy. Should be idempotent: re-running with the same
+     *  input updates an existing deployment rather than creating
+     *  a duplicate. */
+    apply(input: DeployInput): Promise<DeployResult>;
+}
+export interface AdapterSelection {
+    adapter: DeployAdapterId;
+    reason: string;
+    alternatives: DeployAdapterId[];
+}
+/**
+ * Pick the right adapter for a workflow snapshot.
+ *
+ * Conservative heuristic: bias toward Cloudflare for simple +
+ * medium projects (cheap + fast + edge), AWS for heavy or
+ * stateful workloads. Adapters that fail readyToRun() are not
+ * filtered out here -- the caller is expected to surface the
+ * "not ready" message after the pick + offer a fallback.
+ */
+export declare function pickDeployAdapter(wf: Partial<WorkflowState>, override?: DeployAdapterId): AdapterSelection;
+//# sourceMappingURL=adapter.d.ts.map

package/dist/deploy/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/deploy/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE9D,MAAM,MAAM,IAAI,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,SAAS,EAAY,MAAM,EAAE,CAAC;IAC9B,kBAAkB,EAAG,MAAM,CAAC;IAC5B,iBAAiB,EAAI,MAAM,CAAC;IAC5B,KAAK,EAAgB,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAY,MAAM,CAAC;IACtB,WAAW,EAAI,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAM,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,sEAAsE;IACtE,QAAQ,EAAK,MAAM,CAAC;IACpB,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,GAAG,CAAC,EAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAW,eAAe,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,IAAM,IAAI,EAAE,CAAC;IACpB;+DAC2D;IAC3D,UAAU,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxD;oCACgC;IAChC,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9C;;uBAEmB;IACnB,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAClD;AAMD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAK,eAAe,CAAC;IAC5B,MAAM,EAAM,MAAM,CAAC;IACnB,YAAY,EAAE,eAAe,EAAE,CAAC;CACjC;AAcD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,OAAO,CAAC,aAAa,CAAC,EAC1B,QAAQ,CAAC,EAAE,eAAe,GACzB,gBAAgB,CAmClB"}

package/dist/deploy/adapter.js

@@ -0,0 +1,42 @@
+/**
+ * Pick the right adapter for a workflow snapshot.
+ *
+ * Conservative heuristic: bias toward Cloudflare for simple +
+ * medium projects (cheap + fast + edge), AWS for heavy or
+ * stateful workloads. Adapters that fail readyToRun() are not
+ * filtered out here -- the caller is expected to surface the
+ * "not ready" message after the pick + offer a fallback.
+ */
+export function pickDeployAdapter(wf, override) {
+    if (override) {
+        return {
+            adapter: override,
+            reason: 'explicit override',
+            alternatives: ['cloudflare', 'aws', 'vercel']
+                .filter((a) => a !== override),
+        };
+    }
+    const tier = (wf.tier ?? 'simple');
+    const nfrS = (wf.clarification?.nfr_structural ?? {});
+    const nfrQ = (wf.clarification?.nfr_quantitative ?? {});
+    /* Hard signals that push to AWS. */
+    const persistentWorkers = nfrS.workers === true
+        || (typeof nfrS.persistence === 'string' && /postgres|mysql|mssql/.test(nfrS.persistence));
+    const heavyParallelism = typeof nfrQ.parallelism === 'string'
+        && /high|heavy|many/i.test(nfrQ.parallelism);
+    if (tier === 'full' || persistentWorkers || heavyParallelism) {
+        return {
+            adapter: 'aws',
+            reason: 'tier=' + tier + (persistentWorkers ? '; persistent workers' : '')
+                + (heavyParallelism ? '; heavy parallelism' : ''),
+            alternatives: ['cloudflare', 'vercel'],
+        };
+    }
+    /* Simple + medium default to Cloudflare. */
+    return {
+        adapter: 'cloudflare',
+        reason: 'tier=' + tier + ' (cheap edge + fast deploys)',
+        alternatives: ['vercel', 'aws'],
+    };
+}
+//# sourceMappingURL=adapter.js.map

package/dist/deploy/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/deploy/adapter.ts"],"names":[],"mappings":"AAuGA;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAA0B,EAC1B,QAA0B;IAE1B,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,mBAAmB;YAC3B,YAAY,EAAG,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAuB;iBACjE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC;SACjC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,QAAQ,CAAS,CAAC;IAC3C,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,cAAc,IAAI,EAAE,CAAsB,CAAC;IAC3E,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,gBAAgB,IAAI,EAAE,CAAwB,CAAC;IAE/E,oCAAoC;IACpC,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI;WAC1C,CAAC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7F,MAAM,gBAAgB,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;WACxD,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAE/C,IAAI,IAAI,KAAK,MAAM,IAAI,iBAAiB,IAAI,gBAAgB,EAAE,CAAC;QAC7D,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;kBACtE,CAAC,gBAAgB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,YAAY,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC;SACvC,CAAC;IACJ,CAAC;IAED,4CAA4C;IAC5C,OAAO;QACL,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,OAAO,GAAG,IAAI,GAAG,8BAA8B;QACvD,YAAY,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;KAChC,CAAC;AACJ,CAAC"}

package/dist/deploy/aws_adapter.d.ts

@@ -0,0 +1,28 @@
+/**
+ * AWS ECS Fargate adapter.
+ *
+ * Thin DeployAdapter shell over the existing imperative
+ * `src/deploy/aws.ts` (planDeploy + applyDeploy). The original
+ * code stays the source of truth; this file gives it the
+ * DeployAdapter interface so the tier-aware picker can compare
+ * adapters apples-to-apples.
+ *
+ * Heavy / persistent / stateful workloads go here. Free tier
+ * does NOT cover Fargate -- expect ~$0.04/hour per task even at
+ * idle. Cost estimates below assume 1 task in always-on mode.
+ *
+ * ASCII-only.
+ */
+import type { DeployAdapter, DeployInput, DeployPlan, DeployResult, Tier } from './adapter.js';
+export declare class AwsEcsAdapter implements DeployAdapter {
+    readonly id: "aws";
+    readonly description: string;
+    tierFit(): Tier[];
+    readyToRun(): Promise<{
+        ok: boolean;
+        reason?: string;
+    }>;
+    plan(input: DeployInput): Promise<DeployPlan>;
+    apply(input: DeployInput): Promise<DeployResult>;
+}
+//# sourceMappingURL=aws_adapter.d.ts.map

package/dist/deploy/aws_adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws_adapter.d.ts","sourceRoot":"","sources":["../../src/deploy/aws_adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EACV,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAC3D,MAAM,cAAc,CAAC;AAEtB,qBAAa,aAAc,YAAW,aAAa;IACjD,QAAQ,CAAC,EAAE,EAAG,KAAK,CAAU;IAC7B,QAAQ,CAAC,WAAW,SAEqC;IAEzD,OAAO,IAAI,IAAI,EAAE;IAEX,UAAU,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAgBvD,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAuB7C,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;CAqDvD"}

package/dist/deploy/aws_adapter.js

@@ -0,0 +1,98 @@
+export class AwsEcsAdapter {
+    id = 'aws';
+    description = 'AWS ECS Fargate -- always-on container, persistent state, custom networking. '
+        + 'For full-tier projects with workers / queues / DB.';
+    tierFit() { return ['medium', 'full']; }
+    async readyToRun() {
+        /* Delegate to the AWS SDK's credential chain -- importing
+         * the existing aws.ts function would trigger a heavy SDK
+         * load even for cheap "plan" calls. We do a light check via
+         * env vars + ~/.aws/credentials presence. */
+        const hasEnv = !!(process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY);
+        if (hasEnv)
+            return { ok: true };
+        /* Without env, fall back to checking ~/.aws/credentials. */
+        const fs = await import('node:fs');
+        const path = await import('node:path');
+        const os = await import('node:os');
+        const credPath = path.join(os.homedir(), '.aws', 'credentials');
+        try {
+            await fs.promises.access(credPath);
+            return { ok: true };
+        }
+        catch {
+            return { ok: false, reason: 'no AWS_ACCESS_KEY_ID env and no ~/.aws/credentials' };
+        }
+    }
+    async plan(input) {
+        return {
+            resources: [
+                'ECS cluster: ' + input.projectSlug + '-cluster',
+                'ECS service: ' + input.projectSlug + '-service (Fargate)',
+                'CloudWatch log group: /yujin/' + input.projectSlug,
+                'IAM role: ' + input.projectSlug + '-task-role',
+                ...(input.env ? ['Secrets: ' + Object.keys(input.env).join(', ')] : []),
+            ],
+            /* 1 Fargate task, 0.25 vCPU + 0.5GB RAM, on 24/7:
+             * ~$8.50/mo compute + ~$0.50 CloudWatch + ~$0.50 ECR =
+             * ~$10/mo. */
+            estimated_cost_usd: 10,
+            estimated_minutes: 10,
+            notes: [
+                'Fargate baseline ~$0.04/hour per always-on task.',
+                'Includes CloudWatch logs ($0.50/GB ingested) + ECR ($0.10/GB-month).',
+                'Custom domain + ACM cert + Route53 zone are NOT included; configure once via console.',
+                'First-time deploy provisions IAM + cluster + service (~10 min); subsequent deploys ~3 min rolling update.',
+            ],
+        };
+    }
+    async apply(input) {
+        /* alpha.23+: AwsEcsAdapter.apply() wires through to the
+         * existing aws.ts imperative path. Returns the unified
+         * DeployResult shape the DeployAdapter contract expects.
+         *
+         * The user MUST have `yujin.forge.json::deploys.aws`
+         * populated (region + cluster + service + image) -- we
+         * read it via readDeployConfig() + use input.projectSlug
+         * as the override for the service name if the config
+         * doesn't set one. */
+        const { resolveAwsCredentials, readDeployConfig, planDeploy, applyDeploy } = await import('./aws.js');
+        const creds = await resolveAwsCredentials();
+        if (!creds) {
+            throw new Error('AwsEcsAdapter.apply: aws_access_key_id / aws_secret_access_key '
+                + 'missing from vault. Run `yf vault set aws_access_key_id` and '
+                + '`yf vault set aws_secret_access_key`.');
+        }
+        /* Look up the canonical config from yujin.forge.json. The
+         * adapter contract does not carry region / cluster / image
+         * because those are AWS-specific. The project config is the
+         * source of truth. */
+        const cwd = process.cwd();
+        const config = await readDeployConfig(cwd);
+        if (!config) {
+            throw new Error('AwsEcsAdapter.apply: yujin.forge.json::deploys.aws missing. '
+                + 'Add: { "deploys": { "aws": { "region": "...", "cluster": "...", '
+                + '"service": "' + input.projectSlug + '", "image": "..." } } }');
+        }
+        const plan = planDeploy(config);
+        const t0 = Date.now();
+        const r = await applyDeploy(plan, creds);
+        const seconds = Math.round((Date.now() - t0) / 1000);
+        if (!r.ok) {
+            throw new Error('AwsEcsAdapter.apply failed: ' + r.message
+                + (r.detail ? ' -- ' + r.detail : ''));
+        }
+        /* AWS ECS does not expose a service URL directly. The
+         * canonical "where is my app" is the ALB DNS name -- not
+         * known here without a separate ELB lookup. Return a
+         * descriptive identifier so callers can show something
+         * useful + look up the real URL in the dashboard. */
+        return {
+            url: 'arn://' + (r.task_definition_arn ?? plan.config.service),
+            deployed_at: new Date().toISOString(),
+            build_seconds: seconds,
+            logs_tail: [r.message],
+        };
+    }
+}
+//# sourceMappingURL=aws_adapter.js.map

package/dist/deploy/aws_adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws_adapter.js","sourceRoot":"","sources":["../../src/deploy/aws_adapter.ts"],"names":[],"mappings":"AAmBA,MAAM,OAAO,aAAa;IACf,EAAE,GAAG,KAAc,CAAC;IACpB,WAAW,GAClB,+EAA+E;UAC7E,oDAAoD,CAAC;IAEzD,OAAO,KAAa,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAEhD,KAAK,CAAC,UAAU;QACd;;;qDAG6C;QAC7C,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACtF,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAChC,4DAA4D;QAC5D,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QAChE,IAAI,CAAC;YAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAAC,CAAC;QAChE,MAAM,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;QAAC,CAAC;IAC/F,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAkB;QAC3B,OAAO;YACL,SAAS,EAAE;gBACT,eAAe,GAAG,KAAK,CAAC,WAAW,GAAG,UAAU;gBAChD,eAAe,GAAG,KAAK,CAAC,WAAW,GAAG,oBAAoB;gBAC1D,+BAA+B,GAAG,KAAK,CAAC,WAAW;gBACnD,YAAY,GAAG,KAAK,CAAC,WAAW,GAAG,YAAY;gBAC/C,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE;YACD;;0BAEc;YACd,kBAAkB,EAAE,EAAE;YACtB,iBAAiB,EAAG,EAAE;YACtB,KAAK,EAAE;gBACL,kDAAkD;gBAClD,sEAAsE;gBACtE,uFAAuF;gBACvF,2GAA2G;aAC5G;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAkB;QAC5B;;;;;;;;8BAQsB;QACtB,MAAM,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,GACxE,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,iEAAiE;kBAC/D,+DAA+D;kBAC/D,uCAAuC,CAC1C,CAAC;QACJ,CAAC;QACD;;;8BAGsB;QACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,8DAA8D;kBAC5D,kEAAkE;kBAClE,cAAc,GAAG,KAAK,CAAC,WAAW,GAAG,yBAAyB,CACjE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,CAAC,OAAO;kBACtD,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD;;;;6DAIqD;QACrD,OAAO;YACL,GAAG,EAAY,QAAQ,GAAG,CAAC,CAAC,CAAC,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACxE,WAAW,EAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACvC,aAAa,EAAE,OAAO;YACtB,SAAS,EAAM,CAAC,CAAC,CAAC,OAAO,CAAC;SAC3B,CAAC;IACJ,CAAC;CACF"}

package/dist/deploy/cloudflare.d.ts

@@ -0,0 +1,24 @@
+import type { DeployAdapter, DeployInput, DeployPlan, DeployResult, Tier } from './adapter.js';
+export interface CloudflareAdapterOptions {
+    /** Override the wrangler binary path (defaults to "wrangler"). */
+    wranglerBin?: string;
+    /** Override the wrangler config dir (for tests). */
+    configDir?: string;
+}
+export declare class CloudflareAdapter implements DeployAdapter {
+    private opts;
+    readonly id: "cloudflare";
+    readonly description: string;
+    constructor(opts?: CloudflareAdapterOptions);
+    tierFit(): Tier[];
+    readyToRun(): Promise<{
+        ok: boolean;
+        reason?: string;
+    }>;
+    plan(input: DeployInput): Promise<DeployPlan>;
+    apply(input: DeployInput): Promise<DeployResult>;
+    private runWrangler;
+    private dirExists;
+    private countFiles;
+}
+//# sourceMappingURL=cloudflare.d.ts.map

package/dist/deploy/cloudflare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../src/deploy/cloudflare.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAE/F,MAAM,WAAW,wBAAwB;IACvC,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,SAAS,CAAC,EAAI,MAAM,CAAC;CACtB;AAED,qBAAa,iBAAkB,YAAW,aAAa;IAMzC,OAAO,CAAC,IAAI;IALxB,QAAQ,CAAC,EAAE,EAAG,YAAY,CAAU;IACpC,QAAQ,CAAC,WAAW,SAE8C;gBAE9C,IAAI,GAAE,wBAA6B;IAEvD,OAAO,IAAI,IAAI,EAAE;IAEX,UAAU,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA8BvD,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IA2B7C,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;YA2BxC,WAAW;YAiBX,SAAS;YAOT,UAAU;CAezB"}