@obh/forge 0.2.0

package/dist/stack/wire.js

@@ -0,0 +1,192 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.planSecrets = planSecrets;
+exports.computeStackDeploy = computeStackDeploy;
+exports.printStackPlan = printStackPlan;
+exports.executeStackDeploy = executeStackDeploy;
+const node_path_1 = __importDefault(require("node:path"));
+const node_crypto_1 = require("node:crypto");
+const manifest_1 = require("./manifest");
+const lwdtoml_1 = require("./lwdtoml");
+const logger_1 = require("../utils/logger");
+function genValue(type, bytes) {
+    const buf = (0, node_crypto_1.randomBytes)(bytes);
+    return type === "hex" ? buf.toString("hex") : buf.toString("base64url");
+}
+/** Owner reaches a co-located service; a dedicated resource app is reachable cross-app; co-located [[services]] is not. */
+function isReachable(serviceApp, consumer, manifest) {
+    if (consumer === serviceApp)
+        return true;
+    return manifest.apps.find((a) => a.name === serviceApp)?.role === "resource";
+}
+/**
+ * Pure planning: given the manifest, each app's lwd.toml, and the secret names
+ * lwd already holds per app, decide what to skip / generate / derive / block.
+ * No IO, no execution — this is what the tests exercise.
+ */
+function planSecrets(manifest, tomlByApp, existingByApp, opts = {}) {
+    const rotate = new Set(opts.rotate ?? []);
+    const items = [];
+    const flags = [];
+    const runValues = {};
+    const inScope = (app) => !opts.onlyApp || app === opts.onlyApp;
+    // 1. Generated component secrets.
+    for (const [name, g] of Object.entries(manifest.secrets.generate)) {
+        const willRotate = rotate.has(name);
+        let value;
+        const ensure = () => {
+            if (!value) {
+                value = genValue(g.type, g.bytes);
+                runValues[name] = value;
+            }
+            return value;
+        };
+        for (const app of g.apps) {
+            if (!inScope(app))
+                continue;
+            const has = (existingByApp[app] ?? []).includes(name);
+            if (has && !willRotate)
+                items.push({ app, key: name, action: "skip" });
+            else
+                items.push({ app, key: name, action: "generate", value: ensure() });
+        }
+    }
+    // 2. Derived connection secrets.
+    for (const [name, c] of Object.entries(manifest.secrets.connections)) {
+        const consumers = [...c.apps, ...(c.sharedWith ?? [])];
+        const refs = (0, manifest_1.templateRefs)(c.template);
+        const rotatedRef = refs.some((r) => rotate.has(r));
+        for (const app of consumers) {
+            if (!inScope(app))
+                continue;
+            if (!isReachable(c.service.app, app, manifest)) {
+                const msg = `${app} can't reach "${c.service.name}" co-located in ${c.service.app}: move it to a dedicated app (split topology) so ${name} is reachable across apps, or drop ${app} as a consumer.`;
+                flags.push(msg);
+                items.push({ app, key: name, action: "blocked", reason: msg });
+                continue;
+            }
+            const has = (existingByApp[app] ?? []).includes(name);
+            if (has && !rotatedRef) {
+                items.push({ app, key: name, action: "skip" });
+                continue;
+            }
+            const missingRef = refs.find((r) => runValues[r] === undefined);
+            if (missingRef) {
+                const msg = `cannot derive ${name} for ${app}: ${missingRef} is already set and its value is not retrievable. Re-run with \`--rotate ${missingRef}\` to re-establish it and all derived connections, or set ${name} manually.`;
+                flags.push(msg);
+                items.push({ app, key: name, action: "blocked", reason: msg });
+                continue;
+            }
+            items.push({ app, key: name, action: "derive", value: (0, manifest_1.resolveTemplate)(c.template, runValues) });
+        }
+    }
+    // 3. Manual secrets: block the apps that declare them but don't have them set.
+    const manual = new Set(manifest.secrets.manual);
+    for (const app of manifest.apps) {
+        if (!inScope(app.name))
+            continue;
+        const toml = tomlByApp[app.name];
+        if (!toml)
+            continue;
+        const needed = new Set([...toml.secrets, ...toml.services.flatMap((s) => s.secrets)]);
+        for (const m of manual) {
+            if (!needed.has(m))
+                continue;
+            if (!(existingByApp[app.name] ?? []).includes(m)) {
+                items.push({ app: app.name, key: m, action: "manual-missing", reason: `set it: lwd secret set ${app.name} ${m}` });
+            }
+        }
+    }
+    return { order: manifest.order.filter(inScope), items, flags };
+}
+/** Read each app's lwd.toml and the secret names lwd already holds, then plan. */
+async function computeStackDeploy(root, manifest, adapter, opts = {}) {
+    const tomlByApp = {};
+    const existingByApp = {};
+    for (const app of manifest.apps) {
+        if (opts.onlyApp && app.name !== opts.onlyApp)
+            continue;
+        const toml = await (0, lwdtoml_1.readLwdToml)(node_path_1.default.join(root, app.manifest));
+        if (toml)
+            tomlByApp[app.name] = toml;
+        existingByApp[app.name] = await adapter.secretLs(app.name);
+    }
+    return { plan: planSecrets(manifest, tomlByApp, existingByApp, opts), tomlByApp };
+}
+/** Log the plan, masking every value (a generated value never appears in output). */
+function printStackPlan(manifest, plan) {
+    const byApp = new Map();
+    for (const it of plan.items) {
+        const list = byApp.get(it.app) ?? [];
+        list.push(it);
+        byApp.set(it.app, list);
+    }
+    logger_1.log.info(`Stack "${manifest.name}" — apply order: ${plan.order.join(" → ")}`);
+    for (const appName of plan.order) {
+        const items = byApp.get(appName) ?? [];
+        logger_1.log.plain(`  ${appName}`);
+        if (items.length === 0)
+            logger_1.log.dim("    (no secrets)");
+        for (const it of items) {
+            if (it.action === "generate")
+                logger_1.log.plain(`    generate ${it.key} (hidden)`);
+            else if (it.action === "derive")
+                logger_1.log.plain(`    derive   ${it.key} (hidden)`);
+            else if (it.action === "skip")
+                logger_1.log.dim(`    skip     ${it.key} (already set)`);
+            else if (it.action === "manual-missing")
+                logger_1.log.warn(`    MANUAL   ${it.key} — ${it.reason}`);
+            else
+                logger_1.log.error(`    BLOCKED  ${it.key} — ${it.reason}`);
+        }
+    }
+    if (plan.flags.length > 0) {
+        logger_1.log.plain("");
+        logger_1.log.error("Connectivity / derivation problems:");
+        for (const f of plan.flags)
+            logger_1.log.plain("    - " + f);
+    }
+}
+/** Execute the plan: set missing secrets per app in order, apply, gate on health. */
+async function executeStackDeploy(root, manifest, adapter, plan, opts = {}) {
+    const appByName = new Map(manifest.apps.map((a) => [a.name, a]));
+    for (const appName of plan.order) {
+        const app = appByName.get(appName);
+        if (!app)
+            continue;
+        const items = plan.items.filter((i) => i.app === appName);
+        const missingManual = items.filter((i) => i.action === "manual-missing");
+        if (missingManual.length > 0) {
+            logger_1.log.error(`${appName}: unset required secrets — ${missingManual.map((m) => m.key).join(", ")}. Set them and re-run.`);
+            throw new Error(`${appName} has unset manual secrets`);
+        }
+        for (const it of items) {
+            if ((it.action === "generate" || it.action === "derive") && it.value !== undefined) {
+                await adapter.secretSet(appName, it.key, it.value);
+                logger_1.log.success(`${appName}: set ${it.key}`);
+            }
+        }
+        await adapter.apply(app.manifest);
+        logger_1.log.success(`${appName}: applied ${app.manifest}`);
+        if (!opts.noWait) {
+            const ok = await waitHealthy(adapter, appName);
+            if (!ok)
+                logger_1.log.warn(`${appName}: not healthy yet — continuing (use lwd status ${appName} to check)`);
+        }
+    }
+}
+async function waitHealthy(adapter, app, tries = 30, delayMs = 2000) {
+    for (let i = 0; i < tries; i++) {
+        const s = await adapter.status(app);
+        if (s.healthy)
+            return true;
+        if (/failed|error|crash/.test(s.state))
+            return false;
+        await new Promise((r) => setTimeout(r, delayMs));
+    }
+    return false;
+}
+//# sourceMappingURL=wire.js.map

package/dist/stack/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../src/stack/wire.ts"],"names":[],"mappings":";;;;;AA+CA,kCA4EC;AAGD,gDAeC;AAGD,wCAyBC;AAGD,gDAkCC;AA9MD,0DAA4B;AAC5B,6CAAyC;AAEzC,yCAA0D;AAC1D,uCAAqD;AAErD,4CAAqC;AAyBrC,SAAS,QAAQ,CAAC,IAAwB,EAAE,KAAa;IACvD,MAAM,GAAG,GAAG,IAAA,yBAAW,EAAC,KAAK,CAAC,CAAA;IAC9B,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACzE,CAAC;AAED,2HAA2H;AAC3H,SAAS,WAAW,CAAC,UAAkB,EAAE,QAAgB,EAAE,QAAuB;IAChF,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,IAAI,CAAA;IACxC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,IAAI,KAAK,UAAU,CAAA;AAC9E,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CACzB,QAAuB,EACvB,SAAkC,EAClC,aAAuC,EACvC,OAAoB,EAAE;IAEtB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IACzC,MAAM,KAAK,GAAqB,EAAE,CAAA;IAClC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,SAAS,GAA2B,EAAE,CAAA;IAC5C,MAAM,OAAO,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,CAAA;IAE/E,kCAAkC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClE,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,KAAyB,CAAA;QAC7B,MAAM,MAAM,GAAG,GAAW,EAAE;YAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;gBACjC,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;YACzB,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC,CAAA;QACD,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,SAAQ;YAC3B,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YACrD,IAAI,GAAG,IAAI,CAAC,UAAU;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;;gBACjE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACrE,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAA;QACtD,MAAM,IAAI,GAAG,IAAA,uBAAY,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAClD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,SAAQ;YAC3B,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC/C,MAAM,GAAG,GAAG,GAAG,GAAG,iBAAiB,CAAC,CAAC,OAAO,CAAC,IAAI,mBAAmB,CAAC,CAAC,OAAO,CAAC,GAAG,oDAAoD,IAAI,sCAAsC,GAAG,iBAAiB,CAAA;gBACnM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACf,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;gBAC9D,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YACrD,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;gBAC9C,SAAQ;YACV,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAA;YAC/D,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,iBAAiB,IAAI,QAAQ,GAAG,KAAK,UAAU,4EAA4E,UAAU,6DAA6D,IAAI,YAAY,CAAA;gBAC9N,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACf,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;gBAC9D,SAAQ;YACV,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAA,0BAAe,EAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAA;QACjG,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC/C,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ;QAChC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAC7F,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAQ;YAC5B,IAAI,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,0BAA0B,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YACpH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;AAChE,CAAC;AAED,kFAAkF;AAC3E,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,QAAuB,EACvB,OAAmB,EACnB,OAAoB,EAAE;IAEtB,MAAM,SAAS,GAA4B,EAAE,CAAA;IAC7C,MAAM,aAAa,GAA6B,EAAE,CAAA;IAClD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO;YAAE,SAAQ;QACvD,MAAM,IAAI,GAAG,MAAM,IAAA,qBAAW,EAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC7D,IAAI,IAAI;YAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;QACpC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,CAAA;AACnF,CAAC;AAED,qFAAqF;AACrF,SAAgB,cAAc,CAAC,QAAuB,EAAE,IAAe;IACrE,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAA;IACjD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QACpC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACb,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACzB,CAAC;IACD,YAAG,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,IAAI,oBAAoB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC7E,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;QACtC,YAAG,CAAC,KAAK,CAAC,KAAK,OAAO,EAAE,CAAC,CAAA;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,YAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;QACnD,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,EAAE,CAAC,MAAM,KAAK,UAAU;gBAAE,YAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,GAAG,WAAW,CAAC,CAAA;iBACrE,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ;gBAAE,YAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,GAAG,WAAW,CAAC,CAAA;iBACxE,IAAI,EAAE,CAAC,MAAM,KAAK,MAAM;gBAAE,YAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAA;iBACzE,IAAI,EAAE,CAAC,MAAM,KAAK,gBAAgB;gBAAE,YAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,CAAA;;gBACrF,YAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,YAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACb,YAAG,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAA;QAChD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,YAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAA;IACrD,CAAC;AACH,CAAC;AAED,qFAAqF;AAC9E,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,QAAuB,EACvB,OAAmB,EACnB,IAAe,EACf,OAA6B,EAAE;IAE/B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAChE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAClC,IAAI,CAAC,GAAG;YAAE,SAAQ;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAA;QAEzD,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAA;QACxE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,YAAG,CAAC,KAAK,CAAC,GAAG,OAAO,8BAA8B,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;YACrH,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,2BAA2B,CAAC,CAAA;QACxD,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACnF,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,CAAA;gBAClD,YAAG,CAAC,OAAO,CAAC,GAAG,OAAO,SAAS,EAAE,CAAC,GAAG,EAAE,CAAC,CAAA;YAC1C,CAAC;QACH,CAAC;QAED,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACjC,YAAG,CAAC,OAAO,CAAC,GAAG,OAAO,aAAa,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;QAElD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC9C,IAAI,CAAC,EAAE;gBAAE,YAAG,CAAC,IAAI,CAAC,GAAG,OAAO,kDAAkD,OAAO,YAAY,CAAC,CAAA;QACpG,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAmB,EAAE,GAAW,EAAE,KAAK,GAAG,EAAE,EAAE,OAAO,GAAG,IAAI;IACrF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACnC,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QAC1B,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QACpD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,114 @@
+/** Backend framework for a generated API app. */
+export type ApiFramework = "hono" | "express";
+/** How an app is built/served. */
+export type WebFramework = "vite-react";
+/** Deployment target. Only lwd is first-class today. */
+export type DeployTarget = "lwd";
+/** The example domain a project is scaffolded with (or none). */
+export type ExampleDomain = "notes" | null;
+/**
+ * Project-level choices Forge records so it (and Claude skills) stay flexible
+ * instead of assuming a fixed structure. Overridable via forge.json.
+ */
+export interface ForgeConfig {
+    /** Backend framework for the API app. */
+    apiFramework: ApiFramework;
+    /** Whether a shared SDK package exists. */
+    sdk: boolean;
+    /** The example domain generated (or null for a bare health-only app). */
+    example: ExampleDomain;
+    /** Convention directories generated apps auto-load from (recorded, not hard-coded). */
+    conventions: {
+        routesDir: string;
+        consumersDir: string;
+        busDir: string;
+        migrationsDir: string;
+    };
+}
+/** lwd deployment topology (see §14 of the spec). */
+export type Topology = "small" | "split";
+/** The OBH platform primitives Forge can install. */
+export type CapabilityName = "events" | "jobs" | "files" | "audit" | "settings" | "api-keys" | "webhooks" | "import-export" | "entitlements" | "search" | "analytics" | "notifications";
+/** Recipes are ordered bundles of scaffolding operations. */
+export type RecipeName = "full-saas" | "api-web-worker" | "api-only" | "worker" | "platform-package";
+/** A deployable application inside a project. */
+export interface AppRecord {
+    /** Directory name under apps/, e.g. "api". */
+    name: string;
+    /** Repo-relative path, e.g. "apps/api". */
+    path: string;
+    /** Present for API apps. */
+    framework?: ApiFramework | WebFramework;
+    /** Role hint used by generators and doctor. */
+    role: "api" | "web" | "worker" | "mobile";
+}
+/** A shared internal package inside a project. */
+export interface PackageRecord {
+    name: string;
+    path: string;
+}
+/** The forge.json project manifest (see §18). A record and aid — never a reconciler contract. */
+export interface ForgeManifest {
+    name: string;
+    forgeVersion: string;
+    createdAt: string;
+    packageManager: "pnpm";
+    runtime: "node20";
+    apps: Record<string, AppRecord>;
+    packages: Record<string, PackageRecord>;
+    platform: Partial<Record<CapabilityName, boolean>>;
+    config: ForgeConfig;
+    deploy: {
+        target: DeployTarget;
+        topology: Topology;
+        /** "owner/repo" (or a full git URL) the lwd manifests deploy from. */
+        repo?: string;
+    };
+}
+/** How a file operation is classified for safety (see §21). */
+export type FileOpKind = 
+/** Write only if the file does not already exist. */
+"create"
+/** Insert a clearly-marked section; idempotent via its marker. */
+ | "append"
+/** Replace an existing file's contents (requires --force / confirmation). */
+ | "overwrite";
+/** A single planned change to a file. */
+export interface FileOp {
+    kind: FileOpKind;
+    /** Repo-relative path. */
+    path: string;
+    /** Full contents for create/overwrite. */
+    content?: string;
+    /** For append: a unique marker so re-runs are idempotent. */
+    marker?: string;
+    /** For append: the section body inserted after the marker. */
+    section?: string;
+    /** Human-readable one-liner shown in dry-run output. */
+    describe: string;
+}
+/** A dependency to add to the target app/package package.json. */
+export interface DepAdd {
+    /** Repo-relative dir whose package.json gets the dependency (default: project root). */
+    target: string;
+    name: string;
+    version: string;
+    dev?: boolean;
+}
+/** An environment variable to document in .env.example. */
+export interface EnvVar {
+    name: string;
+    /** Example / placeholder value; never a real secret. */
+    example: string;
+    comment?: string;
+    /** If true, listed as an lwd secret name (value set out-of-band). */
+    secret?: boolean;
+}
+/** A script to add to the root package.json. */
+export interface ScriptAdd {
+    name: string;
+    command: string;
+}
+/** The outcome of applying a plan, per op. */
+export type ApplyResult = "created" | "appended" | "overwritten" | "skipped" | "conflict";
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAGA,iDAAiD;AACjD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,CAAA;AAE7C,kCAAkC;AAClC,MAAM,MAAM,YAAY,GAAG,YAAY,CAAA;AAEvC,wDAAwD;AACxD,MAAM,MAAM,YAAY,GAAG,KAAK,CAAA;AAEhC,iEAAiE;AACjE,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,IAAI,CAAA;AAE1C;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,yCAAyC;IACzC,YAAY,EAAE,YAAY,CAAA;IAC1B,2CAA2C;IAC3C,GAAG,EAAE,OAAO,CAAA;IACZ,yEAAyE;IACzE,OAAO,EAAE,aAAa,CAAA;IACtB,uFAAuF;IACvF,WAAW,EAAE;QACX,SAAS,EAAE,MAAM,CAAA;QACjB,YAAY,EAAE,MAAM,CAAA;QACpB,MAAM,EAAE,MAAM,CAAA;QACd,aAAa,EAAE,MAAM,CAAA;KACtB,CAAA;CACF;AAED,qDAAqD;AACrD,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAA;AAExC,qDAAqD;AACrD,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,MAAM,GACN,OAAO,GACP,OAAO,GACP,UAAU,GACV,UAAU,GACV,UAAU,GACV,eAAe,GACf,cAAc,GACd,QAAQ,GACR,WAAW,GACX,eAAe,CAAA;AAEnB,6DAA6D;AAC7D,MAAM,MAAM,UAAU,GAClB,WAAW,GACX,gBAAgB,GAChB,UAAU,GACV,QAAQ,GACR,kBAAkB,CAAA;AAEtB,iDAAiD;AACjD,MAAM,WAAW,SAAS;IACxB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAA;IACZ,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAA;IACZ,4BAA4B;IAC5B,SAAS,CAAC,EAAE,YAAY,GAAG,YAAY,CAAA;IACvC,+CAA+C;IAC/C,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAA;CAC1C;AAED,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,iGAAiG;AACjG,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,OAAO,EAAE,QAAQ,CAAA;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IACvC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAA;IAClD,MAAM,EAAE,WAAW,CAAA;IACnB,MAAM,EAAE;QACN,MAAM,EAAE,YAAY,CAAA;QACpB,QAAQ,EAAE,QAAQ,CAAA;QAClB,sEAAsE;QACtE,IAAI,CAAC,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED,+DAA+D;AAC/D,MAAM,MAAM,UAAU;AACpB,qDAAqD;AACnD,QAAQ;AACV,kEAAkE;GAChE,QAAQ;AACV,6EAA6E;GAC3E,WAAW,CAAA;AAEf,yCAAyC;AACzC,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,UAAU,CAAA;IAChB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,kEAAkE;AAClE,MAAM,WAAW,MAAM;IACrB,wFAAwF;IACxF,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAED,2DAA2D;AAC3D,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,qEAAqE;IACrE,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,gDAAgD;AAChD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,8CAA8C;AAC9C,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,GAAG,UAAU,CAAA"}

package/dist/types.js

@@ -0,0 +1,5 @@
+"use strict";
+// Central type contracts for OBH Forge.
+// Keep this file the single source of truth for shapes that cross module boundaries.
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA,wCAAwC;AACxC,qFAAqF"}

package/dist/utils/fs.d.ts

@@ -0,0 +1,13 @@
+/** Does a path exist? */
+export declare function exists(p: string): Promise<boolean>;
+/** Read a file as UTF-8, or return undefined if it does not exist. */
+export declare function readFileSafe(p: string): Promise<string | undefined>;
+/** Read + parse JSON, or undefined if missing/invalid. */
+export declare function readJson<T>(p: string): Promise<T | undefined>;
+/** Write a file, creating parent directories as needed. */
+export declare function writeFile(p: string, content: string): Promise<void>;
+/** Write pretty JSON with a trailing newline. */
+export declare function writeJson(p: string, value: unknown): Promise<void>;
+/** List immediate subdirectory names of a directory (empty if it does not exist). */
+export declare function listDirs(p: string): Promise<string[]>;
+//# sourceMappingURL=fs.d.ts.map

package/dist/utils/fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../src/utils/fs.ts"],"names":[],"mappings":"AAGA,yBAAyB;AACzB,wBAAsB,MAAM,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOxD;AAED,sEAAsE;AACtE,wBAAsB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAMzE;AAED,0DAA0D;AAC1D,wBAAsB,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAQnE;AAED,2DAA2D;AAC3D,wBAAsB,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGzE;AAED,iDAAiD;AACjD,wBAAsB,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAExE;AAED,qFAAqF;AACrF,wBAAsB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAO3D"}

package/dist/utils/fs.js

@@ -0,0 +1,64 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.exists = exists;
+exports.readFileSafe = readFileSafe;
+exports.readJson = readJson;
+exports.writeFile = writeFile;
+exports.writeJson = writeJson;
+exports.listDirs = listDirs;
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+/** Does a path exist? */
+async function exists(p) {
+    try {
+        await node_fs_1.promises.stat(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Read a file as UTF-8, or return undefined if it does not exist. */
+async function readFileSafe(p) {
+    try {
+        return await node_fs_1.promises.readFile(p, "utf8");
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Read + parse JSON, or undefined if missing/invalid. */
+async function readJson(p) {
+    const raw = await readFileSafe(p);
+    if (raw === undefined)
+        return undefined;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Write a file, creating parent directories as needed. */
+async function writeFile(p, content) {
+    await node_fs_1.promises.mkdir(node_path_1.default.dirname(p), { recursive: true });
+    await node_fs_1.promises.writeFile(p, content, "utf8");
+}
+/** Write pretty JSON with a trailing newline. */
+async function writeJson(p, value) {
+    await writeFile(p, JSON.stringify(value, null, 2) + "\n");
+}
+/** List immediate subdirectory names of a directory (empty if it does not exist). */
+async function listDirs(p) {
+    try {
+        const entries = await node_fs_1.promises.readdir(p, { withFileTypes: true });
+        return entries.filter((e) => e.isDirectory()).map((e) => e.name);
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=fs.js.map

package/dist/utils/fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.js","sourceRoot":"","sources":["../../src/utils/fs.ts"],"names":[],"mappings":";;;;;AAIA,wBAOC;AAGD,oCAMC;AAGD,4BAQC;AAGD,8BAGC;AAGD,8BAEC;AAGD,4BAOC;AApDD,qCAAwC;AACxC,0DAA4B;AAE5B,yBAAyB;AAClB,KAAK,UAAU,MAAM,CAAC,CAAS;IACpC,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAChB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,sEAAsE;AAC/D,KAAK,UAAU,YAAY,CAAC,CAAS;IAC1C,IAAI,CAAC;QACH,OAAO,MAAM,kBAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,0DAA0D;AACnD,KAAK,UAAU,QAAQ,CAAI,CAAS;IACzC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAA;IACjC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACvC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,2DAA2D;AACpD,KAAK,UAAU,SAAS,CAAC,CAAS,EAAE,OAAe;IACxD,MAAM,kBAAE,CAAC,KAAK,CAAC,mBAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,MAAM,kBAAE,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;AACxC,CAAC;AAED,iDAAiD;AAC1C,KAAK,UAAU,SAAS,CAAC,CAAS,EAAE,KAAc;IACvD,MAAM,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;AAC3D,CAAC;AAED,qFAAqF;AAC9E,KAAK,UAAU,QAAQ,CAAC,CAAS;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC"}

package/dist/utils/git.d.ts

@@ -0,0 +1,17 @@
+export interface GitRepo {
+    /** "owner/repo" */
+    slug: string;
+    /** Normalised https URL. */
+    url: string;
+}
+/**
+ * Detect the GitHub repo from a directory's `origin` remote. Handles both
+ * https and ssh forms. Returns undefined if the dir is not a git repo or has no
+ * usable origin.
+ */
+export declare function detectGitRepo(cwd: string): Promise<GitRepo | undefined>;
+/** Parse a git remote URL (https or ssh) into a GitHub slug + https URL. */
+export declare function parseRemote(raw: string): GitRepo | undefined;
+/** Normalise an "owner/repo" slug (or full URL) into a GitRepo. */
+export declare function slugToRepo(input: string): GitRepo | undefined;
+//# sourceMappingURL=git.d.ts.map

package/dist/utils/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/utils/git.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,OAAO;IACtB,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAA;CACZ;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAS7E;AAED,4EAA4E;AAC5E,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAS5D;AAED,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAO7D"}

package/dist/utils/git.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectGitRepo = detectGitRepo;
+exports.parseRemote = parseRemote;
+exports.slugToRepo = slugToRepo;
+const node_child_process_1 = require("node:child_process");
+const node_util_1 = require("node:util");
+const exec = (0, node_util_1.promisify)(node_child_process_1.execFile);
+/**
+ * Detect the GitHub repo from a directory's `origin` remote. Handles both
+ * https and ssh forms. Returns undefined if the dir is not a git repo or has no
+ * usable origin.
+ */
+async function detectGitRepo(cwd) {
+    let raw;
+    try {
+        const { stdout } = await exec("git", ["remote", "get-url", "origin"], { cwd });
+        raw = stdout.trim();
+    }
+    catch {
+        return undefined;
+    }
+    return parseRemote(raw);
+}
+/** Parse a git remote URL (https or ssh) into a GitHub slug + https URL. */
+function parseRemote(raw) {
+    const trimmed = raw.replace(/\.git$/, "").trim();
+    // git@github.com:owner/repo  or  ssh://git@github.com/owner/repo
+    const ssh = trimmed.match(/git@[^:]+:(.+)$/) ?? trimmed.match(/ssh:\/\/git@[^/]+\/(.+)$/);
+    if (ssh?.[1])
+        return slugToRepo(ssh[1]);
+    // https://github.com/owner/repo
+    const https = trimmed.match(/https?:\/\/[^/]+\/(.+)$/);
+    if (https?.[1])
+        return slugToRepo(https[1]);
+    return undefined;
+}
+/** Normalise an "owner/repo" slug (or full URL) into a GitRepo. */
+function slugToRepo(input) {
+    const parsed = input.startsWith("http") || input.startsWith("git@") ? parseRemote(input) : undefined;
+    if (parsed)
+        return parsed;
+    const parts = input.split("/").filter(Boolean);
+    if (parts.length < 2)
+        return undefined;
+    const slug = `${parts[parts.length - 2]}/${parts[parts.length - 1]}`;
+    return { slug, url: `https://github.com/${slug}` };
+}
+//# sourceMappingURL=git.js.map

package/dist/utils/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/utils/git.ts"],"names":[],"mappings":";;AAiBA,sCASC;AAGD,kCASC;AAGD,gCAOC;AAhDD,2DAA6C;AAC7C,yCAAqC;AAErC,MAAM,IAAI,GAAG,IAAA,qBAAS,EAAC,6BAAQ,CAAC,CAAA;AAShC;;;;GAIG;AACI,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAC9E,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAA;AACzB,CAAC;AAED,4EAA4E;AAC5E,SAAgB,WAAW,CAAC,GAAW;IACrC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAChD,iEAAiE;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAA;IACzF,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACvC,gCAAgC;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAA;IACtD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3C,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,mEAAmE;AACnE,SAAgB,UAAU,CAAC,KAAa;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACpG,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC9C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACtC,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAA;IACpE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,sBAAsB,IAAI,EAAE,EAAE,CAAA;AACpD,CAAC"}

package/dist/utils/logger.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Tiny leveled logger. Boring on purpose: writes plain lines to stdout/stderr.
+ * Forge is a CLI, so this is the whole logging story.
+ */
+export interface Logger {
+    info(msg: string): void;
+    step(msg: string): void;
+    success(msg: string): void;
+    warn(msg: string): void;
+    error(msg: string): void;
+    dim(msg: string): void;
+    plain(msg: string): void;
+}
+export declare function createLogger(): Logger;
+export declare const log: Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,wBAAgB,YAAY,IAAI,MAAM,CAUrC;AAED,eAAO,MAAM,GAAG,QAAiB,CAAA"}

package/dist/utils/logger.js

@@ -0,0 +1,21 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.log = void 0;
+exports.createLogger = createLogger;
+const picocolors_1 = __importDefault(require("picocolors"));
+function createLogger() {
+    return {
+        info: (m) => console.log(picocolors_1.default.blue("·") + " " + m),
+        step: (m) => console.log(picocolors_1.default.cyan("→") + " " + m),
+        success: (m) => console.log(picocolors_1.default.green("✓") + " " + m),
+        warn: (m) => console.warn(picocolors_1.default.yellow("!") + " " + m),
+        error: (m) => console.error(picocolors_1.default.red("✗") + " " + m),
+        dim: (m) => console.log(picocolors_1.default.dim(m)),
+        plain: (m) => console.log(m),
+    };
+}
+exports.log = createLogger();
+//# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":";;;;;;AAgBA,oCAUC;AA1BD,4DAA2B;AAgB3B,SAAgB,YAAY;IAC1B,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QAChD,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QAChD,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QACpD,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QACnD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QAClD,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;KAC7B,CAAA;AACH,CAAC;AAEY,QAAA,GAAG,GAAG,YAAY,EAAE,CAAA"}

package/dist/utils/shell.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Run a command, streaming stdio to the terminal. Used sparingly — Forge is a
+ * file generator, not a task runner. Returns the exit code.
+ */
+export declare function run(cmd: string, args: string[], cwd: string): Promise<number>;
+export interface CaptureResult {
+    code: number;
+    stdout: string;
+    stderr: string;
+}
+export interface CaptureOptions {
+    cwd?: string;
+    /** Written to the child's stdin then closed (e.g. a secret value). */
+    stdin?: string;
+}
+/**
+ * Run a command with piped stdio and capture its output. Used by the lwd CLI
+ * adapter (secret values go in via `stdin`, never argv). `run()` is untouched.
+ */
+export declare function capture(cmd: string, args: string[], opts?: CaptureOptions): Promise<CaptureResult>;
+//# sourceMappingURL=shell.d.ts.map

package/dist/utils/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/utils/shell.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAM7E;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAkBtG"}

package/dist/utils/shell.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+exports.capture = capture;
+const node_child_process_1 = require("node:child_process");
+/**
+ * Run a command, streaming stdio to the terminal. Used sparingly — Forge is a
+ * file generator, not a task runner. Returns the exit code.
+ */
+function run(cmd, args, cwd) {
+    return new Promise((resolve, reject) => {
+        const child = (0, node_child_process_1.spawn)(cmd, args, { cwd, stdio: "inherit", shell: process.platform === "win32" });
+        child.on("error", reject);
+        child.on("close", (code) => resolve(code ?? 0));
+    });
+}
+/**
+ * Run a command with piped stdio and capture its output. Used by the lwd CLI
+ * adapter (secret values go in via `stdin`, never argv). `run()` is untouched.
+ */
+function capture(cmd, args, opts = {}) {
+    return new Promise((resolve, reject) => {
+        const child = (0, node_child_process_1.spawn)(cmd, args, {
+            cwd: opts.cwd,
+            stdio: ["pipe", "pipe", "pipe"],
+            shell: process.platform === "win32",
+        });
+        let stdout = "";
+        let stderr = "";
+        child.stdout.on("data", (d) => (stdout += d.toString()));
+        child.stderr.on("data", (d) => (stderr += d.toString()));
+        child.on("error", reject);
+        child.on("close", (code) => resolve({ code: code ?? 0, stdout, stderr }));
+        if (opts.stdin !== undefined) {
+            child.stdin.write(opts.stdin);
+        }
+        child.stdin.end();
+    });
+}
+//# sourceMappingURL=shell.js.map

package/dist/utils/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/utils/shell.ts"],"names":[],"mappings":";;AAMA,kBAMC;AAkBD,0BAkBC;AAhDD,2DAA0C;AAE1C;;;GAGG;AACH,SAAgB,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,GAAW;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAA;QAC9F,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACzB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACJ,CAAC;AAcD;;;GAGG;AACH,SAAgB,OAAO,CAAC,GAAW,EAAE,IAAc,EAAE,OAAuB,EAAE;IAC5E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACpC,CAAC,CAAA;QACF,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QACxD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QACxD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACzB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;QACzE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/B,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;IACnB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const FORGE_VERSION = "0.2.0";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,aAAa,UAAU,CAAA"}

package/dist/version.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FORGE_VERSION = void 0;
+// Single source of truth for the Forge version stamped into forge.json.
+exports.FORGE_VERSION = "0.2.0";
+//# sourceMappingURL=version.js.map