@nac3/forge-cli 1.8.6 → 1.9.1

package/dist/core/forge_profile.js

@@ -130,6 +130,27 @@ export function initProfile(projectRoot) {
 /** For tests. */
 export function _resetProfileForTest() { ACTIVE = { profile: null, mission: '', systemMap: '', systemMapPath: '', root: '' }; }
 export function activeProfile() { return ACTIVE.profile; }
+/**
+ * The effective OPERATE config for this deployment (null when operate mode is
+ * off or there is no profile). `full_config: true` is honoured as the legacy
+ * shorthand for operate.enabled -- a deployment that carries it still needs
+ * the allowlists to be able to change anything.
+ */
+export function operateConfig() {
+    const p = ACTIVE.profile;
+    if (!p)
+        return null;
+    const op = { ...(p.operate || {}) };
+    if (op.enabled !== true && p.full_config === true)
+        op.enabled = true;
+    return op.enabled === true ? op : null;
+}
+/** True when operate mode is active for this deployment. */
+export function operateEnabled() { return operateConfig() !== null; }
+/** Verb families that exist ONLY to serve operate mode. */
+export function isOperateVerb(verbId) {
+    return verbId.indexOf('yujin.config.') === 0 || verbId.indexOf('yujin.orchestrator.') === 0;
+}
 /** System-prompt lines for the active profile (empty array when none).
  *  Mission text first (operator voice), then -- when read_only -- the
  *  diagnostic posture. The identity invariant is NOT replaceable. */
@@ -163,6 +184,24 @@ export function profilePromptLines() {
                 + 'pending with the full analysis (no tickets API configured in the profile).'), '  5. Record findings as pendings (yujin.pending.add) so nothing is lost.', '  6. WRITE REPORTS -- part of your PRIMARY function. You MAY write reports of', '     any type (HTML/md/csv/...) under: '
             + reportDirs(p).map((d) => '"' + d + '/"').join(', ') + '.', '     Everything else on disk stays read-only.', '');
     }
+    /* OPERATE MODE (Pablo 2026-10-10) -- the bounded exit from read-only. The
+     * posture OVERRIDES step 3 above: inside the declared scope the assistant
+     * APPLIES the change itself (and verifies it); outside it, it still only
+     * emits the operator instruction. Enumerating the actual allowlists here is
+     * deliberate: the brain must know its real surface, not guess it. */
+    const op = operateConfig();
+    if (op) {
+        const files = Array.isArray(op.config_files?.allow) ? op.config_files.allow : [];
+        const tables = Array.isArray(op.config_tables?.allow) ? op.config_tables.allow : [];
+        const orch = op.orchestrator && op.orchestrator.kind ? String(op.orchestrator.kind) : '';
+        lines.push('=================================================================', 'OPERATE MODE: you may CONFIGURE this system (mechanically bounded)', '=================================================================', '', 'This deployment is authorised to change the CONFIGURATION of this system -- and', 'ONLY its configuration. Three things, each through its own native verb:', '', '  1. CONFIGURATION DATA FILES (json/xml/txt/ini/env/yaml/toml/vault):', '     yujin.config.file-set   -- change ONE value (preferred: it keeps the', '                                rest of the file byte-for-byte, backs it up', '                                and VERIFIES the new value by reading it back).', '     yujin.config.file-write -- full new content, for a format the targeted', '                                editor cannot handle. Read the file first.', '     yujin.config.file-revert -- restore a backup (backup_id from the journal).', (files.length
+            ? '     Allowlisted: ' + files.join(', ')
+            : '     NO files allowlisted yet -- ask the operator for operate.config_files.allow.'), '', '  2. CONFIGURATION TABLES: yujin.config.table-set {table, op, set, where}.', '     Structured only -- there is NO verb that runs arbitrary SQL writes.', '     UPDATE/DELETE need a WHERE; the rows are preflighted and capped; the', '     before-image + a rollback statement go to the journal.', (tables.length
+            ? '     Allowlisted tables: ' + tables.join(', ')
+            : '     NO tables allowlisted yet -- ask the operator for operate.config_tables.allow.'), '', '  3. ORCHESTRATOR: yujin.orchestrator.process-create (register a new', '     process) + yujin.orchestrator.schedule-set (cron it, 5 Linux fields).', (orch
+            ? '     Adapter configured: ' + orch + '.'
+            : '     NO orchestrator configured yet -- ask the operator for operate.orchestrator.'), '', 'HARD LIMITS (enforced at the dispatcher, not negotiable -- do not try):', '  - The DATA tables of this system are OFF LIMITS. Only the allowlisted', '    CONFIGURATION tables can change. A data fix = operator instruction or ticket.', '  - The SOFTWARE of this system is OFF LIMITS: no source, binaries, units, build', '    or dependency files -- any extension that is code is refused whatever the', '    allowlist says. A code change = ticket + pending with your analysis.', '  - The .forge/ control surface of Forge itself (profile, db.json, mission) is OFF LIMITS.', '', 'HOW TO WORK a configuration request:', '  a. Confirm the need against the SYSTEM MAP, and read the CURRENT value first', '     (yujin.fs.read-file / yujin.db.query). Never write blind.', '  b. State to the user, in one line, WHAT you are about to change and WHERE.', '  c. Apply it with the verb above (one value at a time).', '  d. VERIFY: re-read the file / re-query the row, and report the before -> after.', '  e. Say what has to happen for it to take effect (reload / restart / next tick)', '     -- restarting a service is NOT yours: give the operator the exact command.', '  f. Every change is journaled with a backup. If something looks wrong, revert', '     (file-revert) or hand the operator the rollback statement from the journal.', '  g. Outside this scope you are still the DIAGNOSTIC assistant: precise', '     instruction for the operator, pending, or ticket.', '');
+    }
     return lines;
 }
 /* ------------------------- read-only verb gate ------------------------- */
@@ -221,6 +260,23 @@ export function profileVerbGate(verbId, args) {
             reason: 'this deployment is pinned to its system (pinned_root): the project root cannot be re-anchored.',
         };
     }
+    /* OPERATE MODE verbs (yujin.config.* / yujin.orchestrator.*) exist only to
+     * serve a deployment that was authorised to configure its system. With
+     * operate off they are refused HERE, before any handler runs -- so an
+     * un-authorised embed cannot change anything even if the brain tries. With
+     * operate on they pass, and operate_guard does the fine-grained allowlist
+     * enforcement inside each handler. */
+    if (isOperateVerb(verbId)) {
+        if (!operateConfig()) {
+            return {
+                action: 'reject',
+                reason: 'operate mode is OFF in this deployment profile: verb "' + verbId + '" would change this system configuration. '
+                    + 'Diagnose and emit the precise instruction for the operator instead '
+                    + '(the operator enables it with an "operate" block in .forge/profile.<env>.json).',
+            };
+        }
+        return { action: 'pass' };
+    }
     if (p.read_only !== true)
         return { action: 'pass' };
     if (verbId === 'yujin.shell.exec')

package/dist/core/forge_profile.js.map

@@ -1 +1 @@
-{"version":3,"file":"forge_profile.js","sourceRoot":"","sources":["../../src/core/forge_profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2BjE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAU,CAAC;AAE3E,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,CAAe;IACxC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB;YAAE,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,CAAC,gBAAgB,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAChG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,CAAC,GAAG,mBAAmB,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B;;0DAE0D;AAC1D,MAAM,oBAAoB,GAAG,KAAK,CAAC;AACnC,MAAM,uBAAuB,GAAG,kCAAkC,CAAC;AAUnE,IAAI,MAAM,GAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAErG;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC7C,IAAI,IAAY,CAAC;IACjB,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC9F,IAAI,GAAG,GAAG;YACR,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,GAAG,GAAG,GAAG,OAAO,CAAC;YACzD,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC;QACnE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC;YACzC,CAAC,CAAC,OAAO,CAAC,YAAY;YACtB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;QAAC,CAAC;IAC3B,CAAC;IACD;kFAC8E;IAC9E,IAAI,SAAS,GAAG,EAAE,EAAE,aAAa,GAAG,EAAE,CAAC;IACvC,IAAI,OAAO,EAAE,CAAC;QACZ,aAAa,GAAG,OAAO,CAAC,eAAe,IAAI,uBAAuB,CAAC;QACnE,MAAM,GAAG,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACzF,IAAI,CAAC;YACH,SAAS,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS,GAAG,EAAE,CAAC;QAAC,CAAC;IAC7B,CAAC;IACD,MAAM,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC3E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,oBAAoB,KAAW,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAErI,MAAM,UAAU,aAAa,KAA0B,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AAE/E;;qEAEqE;AACrE,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CACR,mEAAmE,EACnE,kDAAkD,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC,GAAG,IAAI,EACjF,mEAAmE,EACnE,EAAE,EACF,MAAM,CAAC,OAAO,EACd,EAAE,CACH,CAAC;IACJ,CAAC;IACD;;;uCAGmC;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,IAAI,uBAAuB,CAAC;IAC/D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CACR,mEAAmE,EACnE,sCAAsC,GAAG,MAAM,GAAG,GAAG,EACrD,mEAAmE,EACnE,EAAE,EACF,4EAA4E,EAC5E,8EAA8E,EAC9E,6EAA6E,EAC7E,mDAAmD,GAAG,MAAM,GAAG,cAAc,EAC7E,+EAA+E,EAC/E,4EAA4E,EAC5E,mEAAmE,EACnE,EAAE,EACF,MAAM,CAAC,SAAS,EAChB,EAAE,CACH,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CACR,mEAAmE,EACnE,qDAAqD,EACrD,mEAAmE,EACnE,EAAE,EACF,wCAAwC,GAAG,MAAM,GAAG,uBAAuB,EAC3E,8EAA8E,EAC9E,2EAA2E,EAC3E,iFAAiF,EACjF,mFAAmF,EACnF,+EAA+E,EAC/E,8EAA8E,EAC9E,kFAAkF,EAClF,uDAAuD,EACvD,0BAA0B,GAAG,MAAM,GAAG,kBAAkB,EACxD,EAAE,CACH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxG,KAAK,CAAC,IAAI,CACR,mEAAmE,EACnE,sDAAsD,EACtD,mEAAmE,EACnE,EAAE,EACF,wEAAwE,EACxE,kEAAkE,EAClE,gEAAgE,EAChE,oCAAoC,EACpC,EAAE,EACF,uEAAuE,EACvE,yEAAyE,EACzE,6EAA6E,EAC7E,+EAA+E,EAC/E,iEAAiE,EACjE,EAAE,EACF,sEAAsE,EACtE,0EAA0E,EAC1E,wEAAwE,EACxE,iEAAiE,EACjE,qDAAqD,EACrD,qEAAqE,EACrE,sEAAsE,EACtE,2DAA2D,EAC3D,qBAAqB,EACrB,6EAA6E,EAC7E,2EAA2E,EAC3E,gFAAgF,EAChF,qCAAqC,EACrC,8EAA8E,EAC9E,wDAAwD,EACxD,+EAA+E,EAC/E,mFAAmF,EACnF,CAAC,UAAU;YACT,CAAC,CAAC,iEAAiE;kBAC/D,4EAA4E;kBAC5E,6EAA6E;kBAC7E,+DAA+D;YACnE,CAAC,CAAC,2EAA2E;kBACzE,4EAA4E,CAAC,EACnF,0EAA0E,EAC1E,+EAA+E,EAC/E,yCAAyC;cACrC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,EAC7D,+CAA+C,EAC/C,EAAE,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAE7E;;uEAEuE;AACvE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS;IACjC,6BAA6B,EAAE,gBAAgB,EAAE,eAAe;IAChE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB;IACtD,0BAA0B,EAAE,yBAAyB;IACrD,oBAAoB,EAAE,wBAAwB;IAC9C,yBAAyB,EAAE,0BAA0B,EAAE,6BAA6B;IACpF,oBAAoB,EAAE,yBAAyB,EAAE,yBAAyB;IAC1E,sBAAsB,EAAE,yBAAyB,EAAE,0BAA0B;IAC7E,uBAAuB,EAAE,6BAA6B;IACtD,kBAAkB,EAAE,qBAAqB,EAAE,uBAAuB;IAClE,0BAA0B,EAAE,4BAA4B;IACxD,qBAAqB,EAAE,oBAAoB;IAC3C,sBAAsB;IACtB,gBAAgB;IAChB,oBAAoB,EAAE,0BAA0B,EAAE,2BAA2B;IAC7E,mBAAmB;CACpB,CAAC,CAAC;AASH,4EAA4E;AAC5E,SAAS,cAAc,CAAC,CAAe,EAAE,OAAe;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/E,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,IAA8B;IAE9B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC;kDAC8C;IAC9C,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI;WACnB,CAAC,MAAM,KAAK,wBAAwB,IAAI,MAAM,KAAK,oBAAoB,CAAC,EAAE,CAAC;QAChF,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,gGAAgG;SACzG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpD,IAAI,MAAM,KAAK,kBAAkB;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACvE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvD,6DAA6D;IAC7D,IAAI,CAAC,MAAM,KAAK,6BAA6B,IAAI,MAAM,KAAK,gBAAgB,CAAC,IAAI,IAAI,EAAE,CAAC;QACtF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,cAAc,CAAC,CAAC,EAAE,GAAG,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,sCAAsC,GAAG,MAAM,GAAG,wBAAwB;cAC9E,oEAAoE;cACpE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,iCAAiC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG;KAClH,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,aAAa;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"forge_profile.js","sourceRoot":"","sources":["../../src/core/forge_profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuCjE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAU,CAAC;AAE3E,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,CAAe;IACxC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB;YAAE,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,CAAC,gBAAgB,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAChG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,CAAC,GAAG,mBAAmB,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B;;0DAE0D;AAC1D,MAAM,oBAAoB,GAAG,KAAK,CAAC;AACnC,MAAM,uBAAuB,GAAG,kCAAkC,CAAC;AAUnE,IAAI,MAAM,GAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAErG;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC7C,IAAI,IAAY,CAAC;IACjB,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC9F,IAAI,GAAG,GAAG;YACR,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,GAAG,GAAG,GAAG,OAAO,CAAC;YACzD,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC;QACnE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC;YACzC,CAAC,CAAC,OAAO,CAAC,YAAY;YACtB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;QAAC,CAAC;IAC3B,CAAC;IACD;kFAC8E;IAC9E,IAAI,SAAS,GAAG,EAAE,EAAE,aAAa,GAAG,EAAE,CAAC;IACvC,IAAI,OAAO,EAAE,CAAC;QACZ,aAAa,GAAG,OAAO,CAAC,eAAe,IAAI,uBAAuB,CAAC;QACnE,MAAM,GAAG,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACzF,IAAI,CAAC;YACH,SAAS,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS,GAAG,EAAE,CAAC;QAAC,CAAC;IAC7B,CAAC;IACD,MAAM,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC3E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,oBAAoB,KAAW,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAErI,MAAM,UAAU,aAAa,KAA0B,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,EAAE,GAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IACnD,IAAI,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI;QAAE,EAAE,CAAC,OAAO,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,cAAc,KAAc,OAAO,aAAa,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;AAE9E,2DAA2D;AAC3D,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;AAC9F,CAAC;AAED;;qEAEqE;AACrE,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CACR,mEAAmE,EACnE,kDAAkD,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC,GAAG,IAAI,EACjF,mEAAmE,EACnE,EAAE,EACF,MAAM,CAAC,OAAO,EACd,EAAE,CACH,CAAC;IACJ,CAAC;IACD;;;uCAGmC;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,IAAI,uBAAuB,CAAC;IAC/D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CACR,mEAAmE,EACnE,sCAAsC,GAAG,MAAM,GAAG,GAAG,EACrD,mEAAmE,EACnE,EAAE,EACF,4EAA4E,EAC5E,8EAA8E,EAC9E,6EAA6E,EAC7E,mDAAmD,GAAG,MAAM,GAAG,cAAc,EAC7E,+EAA+E,EAC/E,4EAA4E,EAC5E,mEAAmE,EACnE,EAAE,EACF,MAAM,CAAC,SAAS,EAChB,EAAE,CACH,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CACR,mEAAmE,EACnE,qDAAqD,EACrD,mEAAmE,EACnE,EAAE,EACF,wCAAwC,GAAG,MAAM,GAAG,uBAAuB,EAC3E,8EAA8E,EAC9E,2EAA2E,EAC3E,iFAAiF,EACjF,mFAAmF,EACnF,+EAA+E,EAC/E,8EAA8E,EAC9E,kFAAkF,EAClF,uDAAuD,EACvD,0BAA0B,GAAG,MAAM,GAAG,kBAAkB,EACxD,EAAE,CACH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxG,KAAK,CAAC,IAAI,CACR,mEAAmE,EACnE,sDAAsD,EACtD,mEAAmE,EACnE,EAAE,EACF,wEAAwE,EACxE,kEAAkE,EAClE,gEAAgE,EAChE,oCAAoC,EACpC,EAAE,EACF,uEAAuE,EACvE,yEAAyE,EACzE,6EAA6E,EAC7E,+EAA+E,EAC/E,iEAAiE,EACjE,EAAE,EACF,sEAAsE,EACtE,0EAA0E,EAC1E,wEAAwE,EACxE,iEAAiE,EACjE,qDAAqD,EACrD,qEAAqE,EACrE,sEAAsE,EACtE,2DAA2D,EAC3D,qBAAqB,EACrB,6EAA6E,EAC7E,2EAA2E,EAC3E,gFAAgF,EAChF,qCAAqC,EACrC,8EAA8E,EAC9E,wDAAwD,EACxD,+EAA+E,EAC/E,mFAAmF,EACnF,CAAC,UAAU;YACT,CAAC,CAAC,iEAAiE;kBAC/D,4EAA4E;kBAC5E,6EAA6E;kBAC7E,+DAA+D;YACnE,CAAC,CAAC,2EAA2E;kBACzE,4EAA4E,CAAC,EACnF,0EAA0E,EAC1E,+EAA+E,EAC/E,yCAAyC;cACrC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,EAC7D,+CAA+C,EAC/C,EAAE,CACH,CAAC;IACJ,CAAC;IACD;;;;yEAIqE;IACrE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3B,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,YAAqC,CAAC,KAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;QACvH,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,aAAsC,CAAC,KAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1H,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,KAAK,CAAC,IAAI,CACR,mEAAmE,EACnE,oEAAoE,EACpE,mEAAmE,EACnE,EAAE,EACF,iFAAiF,EACjF,yEAAyE,EACzE,EAAE,EACF,uEAAuE,EACvE,2EAA2E,EAC3E,6EAA6E,EAC7E,iFAAiF,EACjF,6EAA6E,EAC7E,4EAA4E,EAC5E,iFAAiF,EACjF,CAAC,KAAK,CAAC,MAAM;YACX,CAAC,CAAC,oBAAoB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YACzC,CAAC,CAAC,mFAAmF,CAAC,EACxF,EAAE,EACF,4EAA4E,EAC5E,0EAA0E,EAC1E,2EAA2E,EAC3E,6DAA6D,EAC7D,CAAC,MAAM,CAAC,MAAM;YACZ,CAAC,CAAC,2BAA2B,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YACjD,CAAC,CAAC,qFAAqF,CAAC,EAC1F,EAAE,EACF,sEAAsE,EACtE,4EAA4E,EAC5E,CAAC,IAAI;YACH,CAAC,CAAC,2BAA2B,GAAG,IAAI,GAAG,GAAG;YAC1C,CAAC,CAAC,mFAAmF,CAAC,EACxF,EAAE,EACF,yEAAyE,EACzE,yEAAyE,EACzE,mFAAmF,EACnF,kFAAkF,EAClF,+EAA+E,EAC/E,0EAA0E,EAC1E,4FAA4F,EAC5F,EAAE,EACF,sCAAsC,EACtC,gFAAgF,EAChF,gEAAgE,EAChE,8EAA8E,EAC9E,0DAA0D,EAC1D,mFAAmF,EACnF,kFAAkF,EAClF,iFAAiF,EACjF,gFAAgF,EAChF,kFAAkF,EAClF,yEAAyE,EACzE,wDAAwD,EACxD,EAAE,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAE7E;;uEAEuE;AACvE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS;IACjC,6BAA6B,EAAE,gBAAgB,EAAE,eAAe;IAChE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB;IACtD,0BAA0B,EAAE,yBAAyB;IACrD,oBAAoB,EAAE,wBAAwB;IAC9C,yBAAyB,EAAE,0BAA0B,EAAE,6BAA6B;IACpF,oBAAoB,EAAE,yBAAyB,EAAE,yBAAyB;IAC1E,sBAAsB,EAAE,yBAAyB,EAAE,0BAA0B;IAC7E,uBAAuB,EAAE,6BAA6B;IACtD,kBAAkB,EAAE,qBAAqB,EAAE,uBAAuB;IAClE,0BAA0B,EAAE,4BAA4B;IACxD,qBAAqB,EAAE,oBAAoB;IAC3C,sBAAsB;IACtB,gBAAgB;IAChB,oBAAoB,EAAE,0BAA0B,EAAE,2BAA2B;IAC7E,mBAAmB;CACpB,CAAC,CAAC;AASH,4EAA4E;AAC5E,SAAS,cAAc,CAAC,CAAe,EAAE,OAAe;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/E,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,IAA8B;IAE9B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC;kDAC8C;IAC9C,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI;WACnB,CAAC,MAAM,KAAK,wBAAwB,IAAI,MAAM,KAAK,oBAAoB,CAAC,EAAE,CAAC;QAChF,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,gGAAgG;SACzG,CAAC;IACJ,CAAC;IACD;;;;;0CAKsC;IACtC,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YACrB,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,wDAAwD,GAAG,MAAM,GAAG,4CAA4C;sBACpH,qEAAqE;sBACrE,iFAAiF;aACtF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpD,IAAI,MAAM,KAAK,kBAAkB;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACvE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvD,6DAA6D;IAC7D,IAAI,CAAC,MAAM,KAAK,6BAA6B,IAAI,MAAM,KAAK,gBAAgB,CAAC,IAAI,IAAI,EAAE,CAAC;QACtF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,cAAc,CAAC,CAAC,EAAE,GAAG,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,sCAAsC,GAAG,MAAM,GAAG,wBAAwB;cAC9E,oEAAoE;cACpE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,iCAAiC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG;KAClH,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,aAAa;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/core/operate_guard.d.ts

@@ -0,0 +1,166 @@
+export interface OperateFilesConfig {
+    /** Globs (project-relative or absolute) of the config files that MAY change. */
+    allow?: string[];
+    /** Globs excluded from the allowlist (checked after allow). */
+    deny?: string[];
+    /** Max content size for a single file write. Default 512 KB. */
+    max_bytes?: number;
+}
+export interface OperateTablesConfig {
+    /** Table names (optionally db-qualified) that MAY change. Default deny. */
+    allow?: string[];
+    deny?: string[];
+    /** Columns that can never be set. Default ['id', 'created_at']. */
+    immutable_columns?: string[];
+    /** Max rows a single statement may affect. Default 25. */
+    max_rows?: number;
+    /** INSERT into an allowlisted config table. Default true. */
+    allow_insert?: boolean;
+    /** DELETE from an allowlisted config table. Default FALSE (deliberate). */
+    allow_delete?: boolean;
+}
+export interface OperateOrchestratorConfig {
+    /** How this system's orchestrator is driven. */
+    kind?: 'db_table' | 'http' | 'cron_file';
+    process_table?: string;
+    /** Logical -> real column names, e.g. {name:'nombre', command:'script'}. */
+    process_columns?: Record<string, string>;
+    /** Fixed column values applied to every created process. */
+    process_defaults?: Record<string, string | number | boolean | null>;
+    schedule_table?: string;
+    /** Logical -> real column names. `id` names the primary key used by
+     *  schedule_id when a process owns several schedules (default 'id'). */
+    schedule_columns?: Record<string, string>;
+    schedule_defaults?: Record<string, string | number | boolean | null>;
+    base_url?: string;
+    api_key_env?: string;
+    auth_header?: string;
+    process_path?: string;
+    schedule_path?: string;
+    cron_dir?: string;
+    cron_user?: string;
+    cron_prefix?: string;
+    /** Command template; {name} and {args} are substituted (both sanitised). */
+    command_template?: string;
+}
+export interface OperateConfig {
+    enabled?: boolean;
+    config_files?: OperateFilesConfig;
+    config_tables?: OperateTablesConfig;
+    orchestrator?: OperateOrchestratorConfig;
+    /** Where backups + changes.jsonl live. Default '.forge/changes'. */
+    journal_dir?: string;
+    /** Show the R8 approval modal before each change. Default TRUE. */
+    require_approval?: boolean;
+}
+export declare const DEFAULT_JOURNAL_DIR = ".forge/changes";
+export declare const DEFAULT_MAX_BYTES: number;
+export declare const DEFAULT_MAX_ROWS = 25;
+export declare const DEFAULT_IMMUTABLE_COLUMNS: readonly ["id", "created_at"];
+export declare function shortHash(text: string): string;
+export interface Decision {
+    ok: boolean;
+    /** Why it was refused -- written for the brain to relay to the operator. */
+    reason?: string;
+}
+export interface PathDecision extends Decision {
+    /** Absolute, resolved target (only when ok). */
+    abs?: string;
+    /** Project-relative when inside the root, else the absolute path. */
+    shown?: string;
+}
+/**
+ * Decide whether `rawPath` may be WRITTEN as configuration data.
+ *
+ * Order: resolve -> hard invariants (segments, OS prefixes, Forge control
+ * surface, software extensions) -> operator allowlist -> deny list ->
+ * extension class. Returns the absolute path when ok.
+ */
+export declare function guardConfigFile(projectRoot: string, op: OperateConfig | null | undefined, rawPath: string): PathDecision;
+/** Size + text-only cap for a config-file write. */
+export declare function guardConfigSize(op: OperateConfig | null | undefined, content: string): Decision;
+/** Validate a table/column name, optionally db-qualified ("db.table"). */
+export declare function guardIdentifier(name: string, what?: string): Decision;
+export type TableOp = 'update' | 'insert' | 'delete';
+export interface TableGuardOptions {
+    /** Tables the orchestrator config contributes to the allowlist. */
+    extraAllow?: string[];
+}
+/**
+ * Decide whether a structured write on `table` is allowed. Pablo's rule 4
+ * (never touch the system's DATA tables) is enforced as DEFAULT DENY: only
+ * the tables the operator declared as configuration may change.
+ */
+export declare function guardConfigTable(op: OperateConfig | null | undefined, table: string, tableOp: TableOp, opts?: TableGuardOptions): Decision;
+/** Columns that can never be set: the profile's list, or the default. */
+export declare function immutableColumns(op: OperateConfig | null | undefined): string[];
+export declare function maxRows(op: OperateConfig | null | undefined): number;
+export type SqlScalar = string | number | boolean | null;
+/** Validate a {column: value} map: identifiers, scalars only, immutability. */
+export declare function guardColumnMap(op: OperateConfig | null | undefined, map: Record<string, unknown> | undefined, what: 'set' | 'where' | 'values'): {
+    ok: boolean;
+    reason?: string;
+    clean?: Record<string, SqlScalar>;
+};
+/**
+ * Validate a 5-field Linux cron expression (the grammar the orchestrators in
+ * this ecosystem speak: '*', value, lists, ranges, steps). Returns the
+ * normalised expression. Macros (@daily) are refused on purpose: the
+ * orchestrators store 5 fields.
+ */
+export declare function guardCron(expr: string): {
+    ok: boolean;
+    reason?: string;
+    cron?: string;
+};
+/** A process name must be a plain slug: it ends up in a table, in a cron file
+ *  name and (templated) on a command line. No shell metacharacters, ever. */
+export declare function guardProcessName(name: string): {
+    ok: boolean;
+    reason?: string;
+    name?: string;
+};
+/** Sanitise one templated command argument. */
+export declare function guardCommandArg(value: string): {
+    ok: boolean;
+    reason?: string;
+    value?: string;
+};
+export interface ChangeRecord {
+    ts?: string;
+    kind: 'config_file' | 'config_table' | 'orchestrator' | 'revert';
+    verb: string;
+    target: string;
+    reason?: string;
+    detail?: Record<string, unknown>;
+    backup_id?: string;
+    before_hash?: string;
+    after_hash?: string;
+}
+export declare function journalDirAbs(root: string, op: OperateConfig | null | undefined): string;
+/** Copy a file into the journal's backup dir. Returns null when absent. */
+export declare function backupFile(root: string, op: OperateConfig | null | undefined, abs: string): Promise<{
+    backup_id: string;
+    backup_path: string;
+    before: string;
+} | null>;
+export declare const REDACTED = "<redactado>";
+/** Mask credential-looking values in a journal payload. Best effort BY NAME:
+ *  it protects the journal from the obvious leak, it is NOT a reason to
+ *  allowlist a credentials table (the operator decides that). */
+export declare function redactSecrets(value: unknown, depth?: number): unknown;
+/** Append one record to <journal_dir>/changes.jsonl. Never throws. */
+export declare function journalChange(root: string, op: OperateConfig | null | undefined, rec: ChangeRecord): Promise<string>;
+/** Resolve the sentinels allowed in operate.orchestrator.*_defaults.
+ *  `__now__` -> local ISO seconds (2026-10-10T14:30:00), which is the shape
+ *  these orchestrator tables store in their text timestamp columns -- several
+ *  are NOT NULL with no DB default, so an INSERT without them fails. */
+export declare function resolveDefaultValue(v: SqlScalar): SqlScalar;
+/** Read back a journal record by backup id (for file-revert). */
+export declare function findBackup(root: string, op: OperateConfig | null | undefined, backupId: string): Promise<{
+    rec: ChangeRecord;
+    backup_path: string;
+} | null>;
+/** The journal dir as shown to humans (project-relative when inside root). */
+export declare function journalDirShown(root: string, op: OperateConfig | null | undefined): string;
+//# sourceMappingURL=operate_guard.d.ts.map

package/dist/core/operate_guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operate_guard.d.ts","sourceRoot":"","sources":["../../src/core/operate_guard.ts"],"names":[],"mappings":"AA8CA,MAAM,WAAW,kBAAkB;IACjC,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB;IACxC,gDAAgD;IAChD,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,WAAW,CAAC;IAEzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,4DAA4D;IAC5D,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;IACpE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;4EACwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;IAErE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,YAAY,CAAC,EAAE,yBAAyB,CAAC;IACzC,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,eAAO,MAAM,iBAAiB,QAAa,CAAC;AAC5C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,yBAAyB,+BAAgC,CAAC;AAoHvE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAa,SAAQ,QAAQ;IAC5C,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,EACpC,OAAO,EAAE,MAAM,GACd,YAAY,CAmFd;AAED,oDAAoD;AACpD,wBAAgB,eAAe,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,QAAQ,CAY/F;AAMD,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAe,GAAG,QAAQ,CAiB3E;AAED,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,EACpC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,EAChB,IAAI,GAAE,iBAAsB,GAC3B,QAAQ,CAuCV;AAED,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAI/E;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAGpE;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAEzD,+EAA+E;AAC/E,wBAAgB,cAAc,CAC5B,EAAE,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,EACpC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACxC,IAAI,EAAE,KAAK,GAAG,OAAO,GAAG,QAAQ,GAC/B;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;CAAE,CAgCrE;AAMD;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAqCvF;AAED;6EAC6E;AAC7E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAS9F;AAED,+CAA+C;AAC/C,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAO/F;AAID,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,aAAa,GAAG,cAAc,GAAG,cAAc,GAAG,QAAQ,CAAC;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAGxF;AAED,2EAA2E;AAC3E,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,EACpC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAW5E;AAaD,eAAO,MAAM,QAAQ,gBAAgB,CAAC;AAEtC;;iEAEiE;AACjE,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAahE;AAQD,sEAAsE;AACtE,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,EACpC,GAAG,EAAE,YAAY,GAChB,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED;;;wEAGwE;AACxE,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,CAU3D;AAED,iEAAiE;AACjE,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,EACpC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,GAAG,EAAE,YAAY,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAiB5D;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAI1F"}