@obh/forge 0.2.0

package/dist/capabilities/webhooks.js

@@ -0,0 +1,117 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.webhooks = void 0;
+const helpers_1 = require("./helpers");
+exports.webhooks = {
+    name: "webhooks",
+    requires: ["events"],
+    describe: "Outbound webhook delivery — signed, retried, dead-lettered; endpoints managed per workspace",
+    apply(ctx, plan) {
+        (0, helpers_1.addPlatformPackage)(plan, ctx, "webhooks", { api: true, worker: true });
+        plan.create("scripts/migrations.d/webhooks.ts", (0, helpers_1.migrationModule)("webhooks"), "webhooks migrations wiring");
+        if (ctx.hasApp("api")) {
+            plan.create("apps/api/src/platform/webhooks.ts", CLIENT, "webhooks client");
+            plan.create("apps/api/src/routes/webhooks.ts", (0, helpers_1.apiFramework)(ctx) === "hono" ? ROUTE_HONO : ROUTE_EXPRESS, "manage webhook endpoints");
+        }
+        if (ctx.hasWorker()) {
+            plan.create("apps/worker/src/dispatch.d/webhooks.ts", `export const consumer = { name: "webhooks", events: ["*"] }\n`, "register webhooks as an event consumer");
+            plan.create("apps/worker/src/consumers.d/webhooks.ts", WORKER, "webhook ingest + delivery tick");
+        }
+        plan.addEnvVar({
+            name: "WEBHOOK_SECRET_ENCRYPTION_KEY",
+            example: "change-me-32-bytes-min",
+            comment: "encrypts per-endpoint signing secrets at rest",
+            secret: true,
+        });
+        plan.patchManifest({ platform: { webhooks: true } });
+        plan.nextStep("Run `pnpm migrate` and set WEBHOOK_SECRET_ENCRYPTION_KEY. Events fan out to endpoint deliveries, sent by the worker.");
+    },
+};
+// The client's endpoint methods each take a db handle as their first argument,
+// so the platform module exports the adapter alongside the client.
+const CLIENT = `import { createWebhooksClient, pgAdapter } from "@obh/webhooks"
+import { pool } from "../db"
+
+export const webhooksDb = pgAdapter(pool)
+
+// secretEncryptionKey encrypts each endpoint's signing secret at rest.
+export const webhooks = createWebhooksClient({
+  secretEncryptionKey: process.env.WEBHOOK_SECRET_ENCRYPTION_KEY,
+})
+`;
+const ROUTE_HONO = `import type { Hono } from "hono"
+import { webhooks, webhooksDb } from "../platform/webhooks"
+import { WORKSPACE } from "../platform/events"
+
+export function register(app: Hono): void {
+  // Register an endpoint. The plaintext signing secret is returned once, here.
+  app.post("/api/webhooks/endpoints", async (c) => {
+    const body = await c.req.json<{ name: string; url: string; eventPatterns: string[] }>()
+    const result = await webhooks.createEndpoint(webhooksDb, {
+      workspaceId: WORKSPACE,
+      name: body.name,
+      url: body.url,
+      eventPatterns: body.eventPatterns,
+    })
+    return c.json(result, 201)
+  })
+
+  app.get("/api/webhooks/endpoints", async (c) => {
+    return c.json(await webhooks.listEndpoints(webhooksDb, { workspaceId: WORKSPACE }))
+  })
+}
+`;
+const ROUTE_EXPRESS = `import type { Express, Request, Response } from "express"
+import { webhooks, webhooksDb } from "../platform/webhooks"
+import { WORKSPACE } from "../platform/events"
+
+export function register(app: Express): void {
+  app.post("/api/webhooks/endpoints", async (req: Request, res: Response) => {
+    const result = await webhooks.createEndpoint(webhooksDb, {
+      workspaceId: WORKSPACE,
+      name: req.body.name,
+      url: req.body.url,
+      eventPatterns: req.body.eventPatterns,
+    })
+    res.status(201).json(result)
+  })
+
+  app.get("/api/webhooks/endpoints", async (_req: Request, res: Response) => {
+    res.json(await webhooks.listEndpoints(webhooksDb, { workspaceId: WORKSPACE }))
+  })
+}
+`;
+const WORKER = `// Two phases per tick: (1) claim the "webhooks" event deliveries and ingest each
+// event into per-endpoint webhook deliveries; (2) deliver pending webhook rows
+// (sign, POST, retry with backoff, auto-disable dead endpoints).
+import { createConsumerRunner, pgAdapter as eventsPgAdapter } from "@obh/events"
+import { createWebhooksClient, createWebhooksWorker, defineWebhookConsumer, pgAdapter } from "@obh/webhooks"
+import type { WorkerContext } from "../context"
+
+let runner: ReturnType<typeof createConsumerRunner>
+let delivery: ReturnType<typeof createWebhooksWorker>
+
+export function init(ctx: WorkerContext): void {
+  const client = createWebhooksClient({
+    secretEncryptionKey: process.env.WEBHOOK_SECRET_ENCRYPTION_KEY,
+  })
+  // The consumer's handler calls client.ingestEvent to fan an event out to
+  // matching endpoints (creating deliveries the delivery worker then sends).
+  runner = createConsumerRunner({
+    db: eventsPgAdapter(ctx.pool),
+    consumers: [defineWebhookConsumer({ client, db: pgAdapter(ctx.pool), name: "webhooks" })],
+    instanceId: "worker",
+  })
+  delivery = createWebhooksWorker({
+    db: pgAdapter(ctx.pool),
+    instanceId: "worker",
+    secretEncryptionKey: process.env.WEBHOOK_SECRET_ENCRYPTION_KEY,
+  })
+}
+
+export async function tick(): Promise<void> {
+  await runner.tick()
+  await delivery.tick()
+}
+`;
+//# sourceMappingURL=webhooks.js.map

package/dist/capabilities/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/capabilities/webhooks.ts"],"names":[],"mappings":";;;AACA,uCAA6E;AAEhE,QAAA,QAAQ,GAAe;IAClC,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACpB,QAAQ,EAAE,6FAA6F;IACvG,KAAK,CAAC,GAAG,EAAE,IAAI;QACb,IAAA,4BAAkB,EAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACtE,IAAI,CAAC,MAAM,CAAC,kCAAkC,EAAE,IAAA,yBAAe,EAAC,UAAU,CAAC,EAAE,4BAA4B,CAAC,CAAA;QAE1G,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,mCAAmC,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAA;YAC3E,IAAI,CAAC,MAAM,CACT,iCAAiC,EACjC,IAAA,sBAAY,EAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,EACzD,0BAA0B,CAC3B,CAAA;QACH,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CACT,wCAAwC,EACxC,+DAA+D,EAC/D,wCAAwC,CACzC,CAAA;YACD,IAAI,CAAC,MAAM,CAAC,yCAAyC,EAAE,MAAM,EAAE,gCAAgC,CAAC,CAAA;QAClG,CAAC;QAED,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,wBAAwB;YACjC,OAAO,EAAE,+CAA+C;YACxD,MAAM,EAAE,IAAI;SACb,CAAC,CAAA;QAEF,IAAI,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;QACpD,IAAI,CAAC,QAAQ,CAAC,sHAAsH,CAAC,CAAA;IACvI,CAAC;CACF,CAAA;AAED,+EAA+E;AAC/E,mEAAmE;AACnE,MAAM,MAAM,GAAG;;;;;;;;;CASd,CAAA;AAED,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;CAqBlB,CAAA;AAED,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;CAmBrB,CAAA;AAED,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCd,CAAA"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,60 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const version_1 = require("./version");
+const new_1 = require("./commands/new");
+const add_1 = require("./commands/add");
+const inspect_1 = require("./commands/inspect");
+const doctor_1 = require("./commands/doctor");
+const generate_1 = require("./commands/generate");
+const skill_1 = require("./commands/skill");
+const stack_1 = require("./commands/stack");
+function withFlags(cmd) {
+    return cmd
+        .option("--dry-run", "preview changes without writing")
+        .option("-y, --yes", "skip the confirmation prompt (non-interactive)")
+        .option("--force", "overwrite existing files that differ");
+}
+const program = new commander_1.Command();
+program
+    .name("forge")
+    .description("OBH Forge — deterministic scaffolding & delivery tooling")
+    .version(version_1.FORGE_VERSION);
+withFlags(program
+    .command("new <kind> [name]")
+    .description("scaffold a new project (kind: app | package)")
+    .option("--recipe <recipe>", "full-saas | api-web-worker | api-only | worker")
+    .option("--scope <scope>", "npm scope for internal packages (default @<name>; @obh for packages)")
+    .option("--topology <topology>", "small | split")
+    .option("--api-framework <framework>", "hono | express")
+    .option("--no-example", "skip the notes example domain (bare health-only app)")
+    .option("--no-sdk", "skip the shared SDK package")
+    .option("--mobile [name]", "include an Expo mobile app (default name: mobile)")
+    .option("--daemon", "for `new package`: also generate an admin/worker daemon")
+    .option("--repo <owner/repo>", "GitHub repo for deploy manifests (else auto-detected)")).action((kind, name, opts) => (0, new_1.newCommand)(kind, name, opts));
+withFlags(program
+    .command("add <target> [name]")
+    .description("add a primitive (events|jobs|files|audit|settings|api-keys|webhooks|import-export|entitlements|search|analytics|notifications) or app (api|web|worker|sdk|mobile)")).action((target, name, opts) => (0, add_1.addCommand)(target, name, opts));
+program.command("inspect").description("report project shape and detected conventions").action(() => (0, inspect_1.inspectCommand)());
+program.command("doctor").description("check the project against OBH conventions").action(() => (0, doctor_1.doctorCommand)());
+withFlags(program.command("generate <artifact>").description("regenerate an artifact (lwd | ci | env)")).action((artifact, opts) => (0, generate_1.generateCommand)(artifact, opts));
+withFlags(program.command("skill <action> [name]").description("manage OBH Claude skills (list | install <name>)")).action((action, name, opts) => (0, skill_1.skillCommand)(action, name, opts));
+// Repo → lwd delivery. `forge deploy` is an alias for `forge stack deploy`.
+function stackFlags(cmd) {
+    return withFlags(cmd)
+        .option("--rotate <keys>", "regenerate secret(s) (comma-separated) and re-derive connections")
+        .option("--app <name>", "limit to one app")
+        .option("--no-wait", "don't gate on health between apps")
+        .option("--destroy-data", "for rm: attempt to remove named data volumes (lwd preserves them)");
+}
+function mapStack(opts) {
+    return { ...opts, noWait: opts.wait === false };
+}
+stackFlags(program.command("stack <action>").description("repo → lwd delivery (init | deploy | status | rm)")).action((action, opts) => (0, stack_1.stackCommand)(action, mapStack(opts)));
+stackFlags(program.command("deploy").description("alias for `forge stack deploy`")).action((opts) => (0, stack_1.stackCommand)("deploy", mapStack(opts)));
+program.parseAsync(process.argv).catch((err) => {
+    console.error(err instanceof Error ? err.message : String(err));
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;;AACA,yCAAmC;AACnC,uCAAyC;AACzC,wCAA2C;AAC3C,wCAA2C;AAC3C,gDAAmD;AACnD,8CAAiD;AACjD,kDAAqD;AACrD,4CAA+C;AAC/C,4CAA+C;AAE/C,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,GAAG;SACP,MAAM,CAAC,WAAW,EAAE,iCAAiC,CAAC;SACtD,MAAM,CAAC,WAAW,EAAE,gDAAgD,CAAC;SACrE,MAAM,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAA;AAC9D,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAA;AAC7B,OAAO;KACJ,IAAI,CAAC,OAAO,CAAC;KACb,WAAW,CAAC,0DAA0D,CAAC;KACvE,OAAO,CAAC,uBAAa,CAAC,CAAA;AAEzB,SAAS,CACP,OAAO;KACJ,OAAO,CAAC,mBAAmB,CAAC;KAC5B,WAAW,CAAC,8CAA8C,CAAC;KAC3D,MAAM,CAAC,mBAAmB,EAAE,gDAAgD,CAAC;KAC7E,MAAM,CAAC,iBAAiB,EAAE,sEAAsE,CAAC;KACjG,MAAM,CAAC,uBAAuB,EAAE,eAAe,CAAC;KAChD,MAAM,CAAC,6BAA6B,EAAE,gBAAgB,CAAC;KACvD,MAAM,CAAC,cAAc,EAAE,sDAAsD,CAAC;KAC9E,MAAM,CAAC,UAAU,EAAE,6BAA6B,CAAC;KACjD,MAAM,CAAC,iBAAiB,EAAE,mDAAmD,CAAC;KAC9E,MAAM,CAAC,UAAU,EAAE,yDAAyD,CAAC;KAC7E,MAAM,CAAC,qBAAqB,EAAE,uDAAuD,CAAC,CAC1F,CAAC,MAAM,CAAC,CAAC,IAAY,EAAE,IAAwB,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAU,EAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAEjH,SAAS,CACP,OAAO;KACJ,OAAO,CAAC,qBAAqB,CAAC;KAC9B,WAAW,CAAC,mKAAmK,CAAC,CACpL,CAAC,MAAM,CAAC,CAAC,MAAc,EAAE,IAAwB,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAU,EAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAErH,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,+CAA+C,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,wBAAc,GAAE,CAAC,CAAA;AAEtH,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,2CAA2C,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAa,GAAE,CAAC,CAAA;AAEhH,SAAS,CACP,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,WAAW,CAAC,yCAAyC,CAAC,CAC9F,CAAC,MAAM,CAAC,CAAC,QAAgB,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,0BAAe,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAA;AAE9F,SAAS,CACP,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,WAAW,CAAC,kDAAkD,CAAC,CACzG,CAAC,MAAM,CAAC,CAAC,MAAc,EAAE,IAAwB,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,oBAAY,EAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAEvH,4EAA4E;AAC5E,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAO,SAAS,CAAC,GAAG,CAAC;SAClB,MAAM,CAAC,iBAAiB,EAAE,kEAAkE,CAAC;SAC7F,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC;SAC1C,MAAM,CAAC,WAAW,EAAE,mCAAmC,CAAC;SACxD,MAAM,CAAC,gBAAgB,EAAE,mEAAmE,CAAC,CAAA;AAClG,CAAC;AACD,SAAS,QAAQ,CAAC,IAA6B;IAC7C,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAA;AACjD,CAAC;AAED,UAAU,CACR,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,mDAAmD,CAAC,CACnG,CAAC,MAAM,CAAC,CAAC,MAAc,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,oBAAY,EAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAEjG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,gCAAgC,CAAC,CAAC,CAAC,MAAM,CACxF,CAAC,IAA6B,EAAE,EAAE,CAAC,IAAA,oBAAY,EAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC1E,CAAA;AAED,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACtD,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/commands/add.d.ts

@@ -0,0 +1,3 @@
+/** `forge add <capability|api|web|worker|sdk> [name]` */
+export declare function addCommand(target: string, name: string | undefined, opts: Record<string, unknown>): Promise<void>;
+//# sourceMappingURL=add.d.ts.map

package/dist/commands/add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../src/commands/add.ts"],"names":[],"mappings":"AAcA,yDAAyD;AACzD,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBvH"}

package/dist/commands/add.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.addCommand = addCommand;
+const plan_1 = require("../project/plan");
+const context_1 = require("../project/context");
+const capabilities_1 = require("../capabilities");
+const api_1 = require("../generators/api");
+const worker_1 = require("../generators/worker");
+const sdk_1 = require("../generators/sdk");
+const web_1 = require("../generators/web");
+const mobile_1 = require("../generators/mobile");
+const logger_1 = require("../utils/logger");
+const shared_1 = require("./shared");
+const APP_KINDS = ["api", "web", "worker", "sdk", "mobile"];
+/** `forge add <capability|api|web|worker|sdk> [name]` */
+async function addCommand(target, name, opts) {
+    const ctx = await context_1.ProjectContext.load(process.cwd());
+    if (!ctx.hasManifest()) {
+        logger_1.log.error("No forge.json found. Run inside a Forge project (or create one with `forge new app <name>`).");
+        process.exitCode = 1;
+        return;
+    }
+    const flags = (0, shared_1.flagsFrom)(opts);
+    const plan = new plan_1.Plan();
+    const scope = `@${ctx.requireManifest().name}`;
+    if (APP_KINDS.includes(target)) {
+        addAppKind(ctx, plan, target, name, scope);
+    }
+    else if ((0, capabilities_1.isImplemented)(target)) {
+        addCapabilityChain(ctx, plan, target);
+    }
+    else {
+        logger_1.log.error(`Unknown target "${target}".`);
+        logger_1.log.plain("  apps:        api | web <name> | worker | sdk");
+        logger_1.log.plain("  primitives:  " + Object.keys(capabilities_1.CAPABILITIES).join(" | "));
+        process.exitCode = 1;
+        return;
+    }
+    await (0, shared_1.runPlan)(ctx.root, plan, flags);
+}
+function addAppKind(ctx, plan, kind, name, scope) {
+    const config = ctx.requireManifest().config;
+    switch (kind) {
+        case "api":
+            (0, api_1.addApiApp)(plan, { scope, framework: config.apiFramework, example: config.example });
+            plan.patchManifest({ apps: { api: { name: "api", path: "apps/api", framework: config.apiFramework, role: "api" } } });
+            break;
+        case "worker":
+            (0, worker_1.addWorkerApp)(plan, { scope });
+            plan.patchManifest({ apps: { worker: { name: "worker", path: "apps/worker", role: "worker" } } });
+            break;
+        case "sdk":
+            (0, sdk_1.addSdkPackage)(plan, { scope, example: config.example });
+            plan.patchManifest({ packages: { sdk: { name: "sdk", path: "packages/sdk" } } });
+            break;
+        case "web": {
+            const appName = name ?? "admin";
+            (0, web_1.addWebApp)(plan, { scope, name: appName, example: config.example });
+            plan.patchManifest({
+                apps: { [appName]: { name: appName, path: `apps/${appName}`, framework: "vite-react", role: "web" } },
+            });
+            break;
+        }
+        case "mobile": {
+            const appName = name ?? "mobile";
+            (0, mobile_1.addMobileApp)(plan, { scope, name: appName, example: config.example });
+            plan.patchManifest({ apps: { [appName]: { name: appName, path: `apps/${appName}`, role: "mobile" } } });
+            break;
+        }
+    }
+    plan.nextStep("Regenerate deployment manifests if needed: forge generate lwd --force");
+}
+function addCapabilityChain(ctx, plan, target) {
+    const missing = (0, capabilities_1.missingPrerequisites)(target, (n) => ctx.hasCapability(n));
+    if (missing.length > 0) {
+        logger_1.log.info(`${target} requires ${missing.join(", ")} — adding ${missing.length > 1 ? "them" : "it"} too.`);
+    }
+    for (const capName of (0, capabilities_1.resolveOrder)([target])) {
+        if (ctx.hasCapability(capName) && capName !== target)
+            continue;
+        const cap = (0, capabilities_1.getCapability)(capName);
+        if (cap)
+            cap.apply(ctx, plan);
+    }
+    plan.nextStep("Run `pnpm migrate` to apply new platform migrations.");
+    plan.nextStep("Refresh secrets in deployment manifests: forge generate lwd --force");
+}
+//# sourceMappingURL=add.js.map

package/dist/commands/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../src/commands/add.ts"],"names":[],"mappings":";;AAeA,gCAyBC;AAvCD,0CAAsC;AACtC,gDAAmD;AACnD,kDAAgH;AAChH,2CAA6C;AAC7C,iDAAmD;AACnD,2CAAiD;AACjD,2CAA6C;AAC7C,iDAAmD;AACnD,4CAAqC;AACrC,qCAA6C;AAE7C,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAU,CAAA;AAEpE,yDAAyD;AAClD,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,IAAwB,EAAE,IAA6B;IACtG,MAAM,GAAG,GAAG,MAAM,wBAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACpD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,YAAG,CAAC,KAAK,CAAC,8FAA8F,CAAC,CAAA;QACzG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,kBAAS,EAAC,IAAI,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,WAAI,EAAE,CAAA;IACvB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,CAAA;IAE9C,IAAK,SAA+B,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IAC5C,CAAC;SAAM,IAAI,IAAA,4BAAa,EAAC,MAAwB,CAAC,EAAE,CAAC;QACnD,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAwB,CAAC,CAAA;IACzD,CAAC;SAAM,CAAC;QACN,YAAG,CAAC,KAAK,CAAC,mBAAmB,MAAM,IAAI,CAAC,CAAA;QACxC,YAAG,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAA;QAC3D,YAAG,CAAC,KAAK,CAAC,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,2BAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACpE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IAED,MAAM,IAAA,gBAAO,EAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,GAAmB,EAAE,IAAU,EAAE,IAAY,EAAE,IAAwB,EAAE,KAAa;IACxG,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC,MAAM,CAAA;IAC3C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK;YACR,IAAA,eAAS,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;YACnF,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;YACrH,MAAK;QACP,KAAK,QAAQ;YACX,IAAA,qBAAY,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;YAC7B,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAA;YACjG,MAAK;QACP,KAAK,KAAK;YACR,IAAA,mBAAa,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;YACvD,IAAI,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAA;YAChF,MAAK;QACP,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,OAAO,GAAG,IAAI,IAAI,OAAO,CAAA;YAC/B,IAAA,eAAS,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;YAClE,IAAI,CAAC,aAAa,CAAC;gBACjB,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;aACtG,CAAC,CAAA;YACF,MAAK;QACP,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,IAAI,IAAI,QAAQ,CAAA;YAChC,IAAA,qBAAY,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;YACrE,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAA;YACvG,MAAK;QACP,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,uEAAuE,CAAC,CAAA;AACxF,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAmB,EAAE,IAAU,EAAE,MAAsB;IACjF,MAAM,OAAO,GAAG,IAAA,mCAAoB,EAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;IACzE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,YAAG,CAAC,IAAI,CAAC,GAAG,MAAM,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAA;IAC1G,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,IAAA,2BAAY,EAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC7C,IAAI,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,MAAM;YAAE,SAAQ;QAC9D,MAAM,GAAG,GAAG,IAAA,4BAAa,EAAC,OAAO,CAAC,CAAA;QAClC,IAAI,GAAG;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC/B,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAA;IACrE,IAAI,CAAC,QAAQ,CAAC,qEAAqE,CAAC,CAAA;AACtF,CAAC"}

package/dist/commands/doctor.d.ts

@@ -0,0 +1,3 @@
+/** `forge doctor` — check a project against OBH conventions. Reports only. */
+export declare function doctorCommand(): Promise<void>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAwBA,8EAA8E;AAC9E,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CA2EnD"}

package/dist/commands/doctor.js

@@ -0,0 +1,94 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.doctorCommand = doctorCommand;
+const node_path_1 = __importDefault(require("node:path"));
+const context_1 = require("../project/context");
+const fs_1 = require("../utils/fs");
+const logger_1 = require("../utils/logger");
+const WORKER_PRIMITIVES = [
+    "events",
+    "jobs",
+    "audit",
+    "webhooks",
+    "import-export",
+    "search",
+    "analytics",
+    "notifications",
+];
+/** `forge doctor` — check a project against OBH conventions. Reports only. */
+async function doctorCommand() {
+    const ctx = await context_1.ProjectContext.load(process.cwd());
+    const checks = [];
+    const has = (rel) => (0, fs_1.exists)(node_path_1.default.join(ctx.root, rel));
+    checks.push({
+        label: "forge.json present and valid",
+        status: ctx.hasManifest() ? "pass" : "warn",
+        hint: ctx.hasManifest() ? undefined : "not a Forge project; some checks skipped",
+    });
+    if (ctx.hasApp("api")) {
+        checks.push({
+            label: "API health route",
+            status: (await has("apps/api/src/routes/health.ts")) ? "pass" : "fail",
+            hint: "expected apps/api/src/routes/health.ts",
+        });
+    }
+    checks.push({ label: "CI workflow", status: (await has(".github/workflows/ci.yml")) ? "pass" : "warn", hint: ".github/workflows/ci.yml" });
+    checks.push({ label: ".env.example", status: (await has(".env.example")) ? "pass" : "warn" });
+    checks.push({ label: "migration runner", status: (await has("scripts/migrate.ts")) ? "pass" : "fail", hint: "scripts/migrate.ts" });
+    // lwd manifests for each deployable app (mobile ships via EAS, not lwd).
+    for (const dir of ctx.appDirs) {
+        const role = ctx.manifest?.apps[dir]?.role;
+        if (role === "mobile")
+            continue;
+        const file = role === "web" ? "admin" : dir;
+        checks.push({
+            label: `lwd manifest for ${dir}`,
+            status: (await has(`deploy/${file}.lwd.toml`)) ? "pass" : "warn",
+            hint: `run \`forge generate lwd\``,
+        });
+    }
+    // Each installed primitive must have migration wiring.
+    const installed = Object.entries(ctx.manifest?.platform ?? {}).filter(([, v]) => v).map(([k]) => k);
+    for (const cap of installed) {
+        checks.push({
+            label: `${cap}: migration wiring`,
+            status: (await has(`scripts/migrations.d/${cap}.ts`)) ? "pass" : "fail",
+            hint: `primitive installed but scripts/migrations.d/${cap}.ts missing`,
+        });
+    }
+    // Worker-bearing primitives need a worker app.
+    const needsWorker = installed.some((c) => WORKER_PRIMITIVES.includes(c));
+    if (needsWorker) {
+        checks.push({
+            label: "worker app for event/job/audit consumers",
+            status: ctx.hasWorker() ? "pass" : "fail",
+            hint: "run `forge add worker`",
+        });
+    }
+    // Report.
+    logger_1.log.plain("");
+    let fails = 0;
+    for (const c of checks) {
+        if (c.status === "pass")
+            logger_1.log.success(c.label);
+        else if (c.status === "warn")
+            logger_1.log.warn(c.label + (c.hint ? ` — ${c.hint}` : ""));
+        else {
+            fails++;
+            logger_1.log.error(c.label + (c.hint ? ` — ${c.hint}` : ""));
+        }
+    }
+    logger_1.log.plain("");
+    logger_1.log.dim("Note: generated projects assume @obh/* platform packages are installable (published to your npm registry).");
+    if (fails > 0) {
+        logger_1.log.error(`${fails} check(s) failed.`);
+        process.exitCode = 1;
+    }
+    else {
+        logger_1.log.success("All conventions satisfied.");
+    }
+}
+//# sourceMappingURL=doctor.js.map

package/dist/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":";;;;;AAyBA,sCA2EC;AApGD,0DAA4B;AAE5B,gDAAmD;AACnD,oCAAoC;AACpC,4CAAqC;AASrC,MAAM,iBAAiB,GAAqB;IAC1C,QAAQ;IACR,MAAM;IACN,OAAO;IACP,UAAU;IACV,eAAe;IACf,QAAQ;IACR,WAAW;IACX,eAAe;CAChB,CAAA;AAED,8EAA8E;AACvE,KAAK,UAAU,aAAa;IACjC,MAAM,GAAG,GAAG,MAAM,wBAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACpD,MAAM,MAAM,GAAY,EAAE,CAAA;IAC1B,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAA,WAAM,EAAC,mBAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IAE7D,MAAM,CAAC,IAAI,CAAC;QACV,KAAK,EAAE,8BAA8B;QACrC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC3C,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0CAA0C;KACjF,CAAC,CAAA;IAEF,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,kBAAkB;YACzB,MAAM,EAAE,CAAC,MAAM,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACtE,IAAI,EAAE,wCAAwC;SAC/C,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,MAAM,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC,CAAA;IAC1I,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,MAAM,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7F,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,MAAM,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAA;IAEnI,yEAAyE;IACzE,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAA;QAC1C,IAAI,IAAI,KAAK,QAAQ;YAAE,SAAQ;QAC/B,MAAM,IAAI,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA;QAC3C,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,oBAAoB,GAAG,EAAE;YAChC,MAAM,EAAE,CAAC,MAAM,GAAG,CAAC,UAAU,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChE,IAAI,EAAE,4BAA4B;SACnC,CAAC,CAAA;IACJ,CAAC;IAED,uDAAuD;IACvD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAmB,CAAC,CAAA;IACrH,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,GAAG,GAAG,oBAAoB;YACjC,MAAM,EAAE,CAAC,MAAM,GAAG,CAAC,wBAAwB,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACvE,IAAI,EAAE,gDAAgD,GAAG,aAAa;SACvE,CAAC,CAAA;IACJ,CAAC;IAED,+CAA+C;IAC/C,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACxE,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,0CAA0C;YACjD,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACzC,IAAI,EAAE,wBAAwB;SAC/B,CAAC,CAAA;IACJ,CAAC;IAED,UAAU;IACV,YAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACb,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,YAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;aACxC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,YAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;aAC3E,CAAC;YACJ,KAAK,EAAE,CAAA;YACP,YAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACrD,CAAC;IACH,CAAC;IAED,YAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACb,YAAG,CAAC,GAAG,CAAC,4GAA4G,CAAC,CAAA;IACrH,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,YAAG,CAAC,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAA;QACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACtB,CAAC;SAAM,CAAC;QACN,YAAG,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;IAC3C,CAAC;AACH,CAAC"}

package/dist/commands/generate.d.ts

@@ -0,0 +1,3 @@
+/** `forge generate <artifact>` — (re)generate a specific artifact. */
+export declare function generateCommand(artifact: string, opts: Record<string, unknown>): Promise<void>;
+//# sourceMappingURL=generate.d.ts.map

package/dist/commands/generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/commands/generate.ts"],"names":[],"mappings":"AASA,sEAAsE;AACtE,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BpG"}

package/dist/commands/generate.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateCommand = generateCommand;
+const plan_1 = require("../project/plan");
+const context_1 = require("../project/context");
+const lwd_1 = require("../generators/lwd");
+const root_1 = require("../generators/root");
+const logger_1 = require("../utils/logger");
+const shared_1 = require("./shared");
+const ARTIFACTS = ["lwd", "ci", "env"];
+/** `forge generate <artifact>` — (re)generate a specific artifact. */
+async function generateCommand(artifact, opts) {
+    const ctx = await context_1.ProjectContext.load(process.cwd());
+    if (!ctx.hasManifest()) {
+        logger_1.log.error("No forge.json found. Run inside a Forge project.");
+        process.exitCode = 1;
+        return;
+    }
+    const manifest = ctx.requireManifest();
+    const flags = (0, shared_1.flagsFrom)(opts);
+    const plan = new plan_1.Plan();
+    switch (artifact) {
+        case "lwd":
+            (0, lwd_1.addLwdManifests)(plan, manifest);
+            logger_1.log.info("Regenerating lwd manifests (use --force to overwrite existing ones).");
+            break;
+        case "ci":
+            plan.overwrite(".github/workflows/ci.yml", (0, root_1.ciYaml)(manifest.name), "CI workflow");
+            break;
+        case "env":
+            // Only ensures the base file exists; capabilities own their own env keys.
+            plan.create(".env.example", (0, root_1.envBase)(manifest.name), "environment example (base)");
+            break;
+        default:
+            logger_1.log.error(`Unknown artifact "${artifact}". Available: ${ARTIFACTS.join(", ")}`);
+            process.exitCode = 1;
+            return;
+    }
+    await (0, shared_1.runPlan)(ctx.root, plan, flags);
+}
+//# sourceMappingURL=generate.js.map

package/dist/commands/generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../src/commands/generate.ts"],"names":[],"mappings":";;AAUA,0CA8BC;AAxCD,0CAAsC;AACtC,gDAAmD;AACnD,2CAAmD;AACnD,6CAAoD;AACpD,4CAAqC;AACrC,qCAA6C;AAE7C,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAU,CAAA;AAE/C,sEAAsE;AAC/D,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,IAA6B;IACnF,MAAM,GAAG,GAAG,MAAM,wBAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACpD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,YAAG,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAA;QAC7D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,IAAA,kBAAS,EAAC,IAAI,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,WAAI,EAAE,CAAA;IAEvB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,KAAK;YACR,IAAA,qBAAe,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YAC/B,YAAG,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAA;YAChF,MAAK;QACP,KAAK,IAAI;YACP,IAAI,CAAC,SAAS,CAAC,0BAA0B,EAAE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,CAAA;YAChF,MAAK;QACP,KAAK,KAAK;YACR,0EAA0E;YAC1E,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,IAAA,cAAO,EAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,4BAA4B,CAAC,CAAA;YACjF,MAAK;QACP;YACE,YAAG,CAAC,KAAK,CAAC,qBAAqB,QAAQ,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC/E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACpB,OAAM;IACV,CAAC;IAED,MAAM,IAAA,gBAAO,EAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;AACtC,CAAC"}

package/dist/commands/inspect.d.ts

@@ -0,0 +1,3 @@
+/** `forge inspect` — report the project shape and detected conventions. */
+export declare function inspectCommand(): Promise<void>;
+//# sourceMappingURL=inspect.d.ts.map

package/dist/commands/inspect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.d.ts","sourceRoot":"","sources":["../../src/commands/inspect.ts"],"names":[],"mappings":"AAKA,2EAA2E;AAC3E,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAoDpD"}

package/dist/commands/inspect.js

@@ -0,0 +1,64 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.inspectCommand = inspectCommand;
+const node_path_1 = __importDefault(require("node:path"));
+const context_1 = require("../project/context");
+const fs_1 = require("../utils/fs");
+const logger_1 = require("../utils/logger");
+/** `forge inspect` — report the project shape and detected conventions. */
+async function inspectCommand() {
+    const ctx = await context_1.ProjectContext.load(process.cwd());
+    logger_1.log.plain("");
+    logger_1.log.info(`Project root: ${ctx.root}`);
+    if (!ctx.hasManifest()) {
+        logger_1.log.warn("No forge.json — this project was not created by Forge (or predates it).");
+    }
+    else {
+        const m = ctx.requireManifest();
+        logger_1.log.plain(`  name:      ${m.name}`);
+        logger_1.log.plain(`  forge:     v${m.forgeVersion}`);
+        logger_1.log.plain(`  deploy:    ${m.deploy.target} (${m.deploy.topology} topology)`);
+    }
+    logger_1.log.plain("");
+    logger_1.log.info("Apps:");
+    if (ctx.appDirs.length === 0)
+        logger_1.log.dim("  (none)");
+    for (const dir of ctx.appDirs) {
+        const rec = ctx.manifest?.apps[dir];
+        const meta = rec ? `${rec.role}${rec.framework ? " / " + rec.framework : ""}` : "unrecorded";
+        logger_1.log.plain(`  apps/${dir}  (${meta})`);
+    }
+    logger_1.log.plain("");
+    logger_1.log.info("Packages:");
+    if (ctx.packageDirs.length === 0)
+        logger_1.log.dim("  (none)");
+    for (const dir of ctx.packageDirs)
+        logger_1.log.plain(`  packages/${dir}`);
+    logger_1.log.plain("");
+    logger_1.log.info("Platform primitives:");
+    const installed = Object.entries(ctx.manifest?.platform ?? {}).filter(([, v]) => v);
+    if (installed.length === 0)
+        logger_1.log.dim("  (none installed)");
+    for (const [name] of installed) {
+        const wired = await (0, fs_1.exists)(node_path_1.default.join(ctx.root, `scripts/migrations.d/${name}.ts`));
+        logger_1.log.plain(`  ${name}${wired ? "" : "  (migration wiring MISSING)"}`);
+    }
+    logger_1.log.plain("");
+    logger_1.log.info("Deployment manifests:");
+    const deployFiles = ["api", "admin", "worker", "db"];
+    let anyDeploy = false;
+    for (const f of deployFiles) {
+        if (await (0, fs_1.exists)(node_path_1.default.join(ctx.root, `deploy/${f}.lwd.toml`))) {
+            logger_1.log.plain(`  deploy/${f}.lwd.toml`);
+            anyDeploy = true;
+        }
+    }
+    if (!anyDeploy)
+        logger_1.log.dim("  (none — run `forge generate lwd`)");
+    logger_1.log.plain("");
+    logger_1.log.info("Run `forge doctor` to check conventions.");
+}
+//# sourceMappingURL=inspect.js.map

package/dist/commands/inspect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.js","sourceRoot":"","sources":["../../src/commands/inspect.ts"],"names":[],"mappings":";;;;;AAMA,wCAoDC;AA1DD,0DAA4B;AAC5B,gDAAmD;AACnD,oCAAoC;AACpC,4CAAqC;AAErC,2EAA2E;AACpE,KAAK,UAAU,cAAc;IAClC,MAAM,GAAG,GAAG,MAAM,wBAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAEpD,YAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACb,YAAG,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;IAErC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,YAAG,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAA;IACrF,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,GAAG,CAAC,eAAe,EAAE,CAAA;QAC/B,YAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QACnC,YAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,YAAY,EAAE,CAAC,CAAA;QAC5C,YAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,YAAY,CAAC,CAAA;IAC9E,CAAC;IAED,YAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACb,YAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACjB,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,YAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACjD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAA;QAC5F,YAAG,CAAC,KAAK,CAAC,UAAU,GAAG,MAAM,IAAI,GAAG,CAAC,CAAA;IACvC,CAAC;IAED,YAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACb,YAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACrB,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,YAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACrD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW;QAAE,YAAG,CAAC,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC,CAAA;IAEjE,YAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACb,YAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;IAChC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACnF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,YAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;IACzD,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAA,WAAM,EAAC,mBAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,IAAI,KAAK,CAAC,CAAC,CAAA;QAClF,YAAG,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,8BAA8B,EAAE,CAAC,CAAA;IACtE,CAAC;IAED,YAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACb,YAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACjC,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IACpD,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,MAAM,IAAA,WAAM,EAAC,mBAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAC9D,YAAG,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;YACnC,SAAS,GAAG,IAAI,CAAA;QAClB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,YAAG,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAA;IAE9D,YAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACb,YAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAA;AACtD,CAAC"}

package/dist/commands/new.d.ts

@@ -0,0 +1,18 @@
+interface NewOptions {
+    recipe?: string;
+    scope?: string;
+    topology?: string;
+    apiFramework?: string;
+    example?: boolean;
+    sdk?: boolean;
+    mobile?: string | boolean;
+    daemon?: boolean;
+    repo?: string;
+    yes?: boolean;
+    dryRun?: boolean;
+    force?: boolean;
+}
+/** `forge new <app|package> [name]` — scaffold a new project directory. */
+export declare function newCommand(kind: string, name: string | undefined, opts: NewOptions): Promise<void>;
+export {};
+//# sourceMappingURL=new.d.ts.map

package/dist/commands/new.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"new.d.ts","sourceRoot":"","sources":["../../src/commands/new.ts"],"names":[],"mappings":"AAeA,UAAU,UAAU;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IACzB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,2EAA2E;AAC3E,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA2DxG"}