@synctek/forgeos 2.0.0

package/dist/shared/client.js

@@ -0,0 +1,171 @@
+/**
+ * ForgeOS Engine HTTP client — shared between MCP server and CLI binary.
+ *
+ * Improvements over the original src/client.ts:
+ *  - Structured error handling via ForgeAPIError (parses engine error envelope)
+ *  - delete() method
+ *  - Auto-generated Idempotency-Key header on POST/PUT/PATCH
+ *  - Retry on 429 (respects Retry-After header) and 503 (1 retry, 1s delay)
+ *  - healthCheck() convenience method
+ *  - Configurable timeout (constructor param)
+ *  - Retry guard prevents infinite loops (max 1 automatic retry)
+ *
+ * Design constraints preserved from original:
+ *  - X-ForgeOS-API-Key header (not Authorization Bearer) for engine auth
+ *  - Module-level singleton for the stdio transport path (single-tenant)
+ *  - HTTP transport MUST NOT use the singleton — construct per-request instances
+ *  - 10-second default timeout per request
+ *  - One retry on network errors (TypeError from fetch)
+ */
+import { ForgeAPIError } from "./errors.js";
+import { randomUUID } from "crypto";
+const ENGINE_URL = process.env.FORGEOS_ENGINE_URL || "http://localhost:8400";
+const DEFAULT_TIMEOUT_MS = 10_000;
+const MAX_NETWORK_RETRIES = 1;
+const MAX_RATE_RETRIES = 1; // separate guard for 429/503 retries
+/** True if the thrown error is a network-level failure (not an HTTP status). */
+function isNetworkError(err) {
+    if (err instanceof TypeError)
+        return true;
+    // AbortError is a timeout — do not retry
+    if (err instanceof DOMException && err.name === "AbortError")
+        return false;
+    return false;
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+export class ForgeOSClient {
+    baseUrl;
+    apiKey;
+    timeout;
+    /**
+     * @param baseUrl  Engine base URL. Defaults to FORGEOS_ENGINE_URL or http://localhost:8400.
+     * @param apiKey   API key sent as X-ForgeOS-API-Key. Pass explicitly; do NOT read from env here.
+     * @param timeout  Per-request timeout in ms. Default 10 000.
+     */
+    constructor(baseUrl, apiKey, timeout = DEFAULT_TIMEOUT_MS) {
+        this.baseUrl = (baseUrl || ENGINE_URL).replace(/\/+$/, "");
+        this.apiKey = apiKey ?? "";
+        this.timeout = timeout;
+    }
+    // ---------------------------------------------------------------------------
+    // Public HTTP methods
+    // ---------------------------------------------------------------------------
+    async get(path, params) {
+        let url = `${this.baseUrl}${path}`;
+        if (params && Object.keys(params).length > 0) {
+            url += `?${new URLSearchParams(params).toString()}`;
+        }
+        return this.request("GET", url);
+    }
+    async post(path, body) {
+        return this.request("POST", `${this.baseUrl}${path}`, body);
+    }
+    async patch(path, body) {
+        return this.request("PATCH", `${this.baseUrl}${path}`, body);
+    }
+    async put(path, body) {
+        return this.request("PUT", `${this.baseUrl}${path}`, body);
+    }
+    async delete(path) {
+        return this.request("DELETE", `${this.baseUrl}${path}`);
+    }
+    /**
+     * Lightweight liveness check. Returns true if the engine responds 2xx on
+     * GET /health, false otherwise. Never throws.
+     */
+    async healthCheck() {
+        try {
+            await this.get("/health");
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // Core request implementation
+    // ---------------------------------------------------------------------------
+    /**
+     * Execute an HTTP request with:
+     *  - AbortController timeout
+     *  - Auto Idempotency-Key on mutating methods
+     *  - Retry on network errors (up to MAX_NETWORK_RETRIES)
+     *  - Retry on 429/503 (up to MAX_RATE_RETRIES, respects Retry-After)
+     *  - ForgeAPIError on non-ok HTTP responses
+     */
+    async request(method, url, body, _networkRetry = 0, _rateRetry = 0) {
+        const headers = {};
+        if (this.apiKey) {
+            headers["X-ForgeOS-API-Key"] = this.apiKey;
+        }
+        if (body !== undefined) {
+            headers["Content-Type"] = "application/json";
+        }
+        // Idempotency key for mutating methods — prevents duplicate side-effects
+        if (["POST", "PUT", "PATCH"].includes(method)) {
+            headers["Idempotency-Key"] = randomUUID();
+        }
+        const controller = new AbortController();
+        const timerId = setTimeout(() => controller.abort(), this.timeout);
+        let response;
+        try {
+            response = await fetch(url, {
+                method,
+                headers,
+                body: body !== undefined ? JSON.stringify(body) : undefined,
+                signal: controller.signal,
+            });
+            clearTimeout(timerId);
+        }
+        catch (err) {
+            clearTimeout(timerId);
+            // Timeout
+            if (err instanceof DOMException && err.name === "AbortError") {
+                throw new Error(`Request timed out after ${this.timeout}ms: ${method} ${url}`);
+            }
+            // Network error — retry once
+            if (isNetworkError(err) && _networkRetry < MAX_NETWORK_RETRIES) {
+                await delay(500);
+                return this.request(method, url, body, _networkRetry + 1, _rateRetry);
+            }
+            throw err;
+        }
+        // --- Rate limit / service unavailable: retry with back-off ---
+        if ([429, 503].includes(response.status) && _rateRetry < MAX_RATE_RETRIES) {
+            const retryAfterHeader = response.headers.get("Retry-After");
+            const backoff = retryAfterHeader
+                ? Math.min(parseInt(retryAfterHeader, 10) * 1000, 5000)
+                : 1000;
+            await delay(backoff);
+            return this.request(method, url, body, _networkRetry, _rateRetry + 1);
+        }
+        // --- Non-ok response: parse engine error envelope ---
+        if (!response.ok) {
+            let errorBody = {};
+            try {
+                errorBody = (await response.json());
+            }
+            catch {
+                const text = await response.text().catch(() => "");
+                errorBody = { detail: text || response.statusText };
+            }
+            throw new ForgeAPIError(response.status, errorBody);
+        }
+        // 204 No Content
+        if (response.status === 204)
+            return null;
+        return response.json();
+    }
+}
+/**
+ * Module-level singleton for the stdio transport path.
+ * Reads credentials from env at startup — safe because stdio is single-tenant
+ * (one process = one user).
+ *
+ * The HTTP transport MUST NOT use this singleton. It constructs per-request
+ * ForgeOSClient instances with the key extracted from the Authorization header.
+ */
+export const client = new ForgeOSClient(process.env.FORGEOS_ENGINE_URL, process.env.FORGEOS_API_KEY);
+//# sourceMappingURL=client.js.map

package/dist/shared/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/shared/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,UAAU,GACd,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;AAC5D,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,gBAAgB,GAAG,CAAC,CAAC,CAAC,qCAAqC;AAEjE,gFAAgF;AAChF,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,GAAG,YAAY,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1C,yCAAyC;IACzC,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,OAAO,aAAa;IAChB,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,OAAO,CAAS;IAExB;;;;OAIG;IACH,YAAY,OAAgB,EAAE,MAAe,EAAE,OAAO,GAAG,kBAAkB;QACzE,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,8EAA8E;IAC9E,sBAAsB;IACtB,8EAA8E;IAE9E,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,MAA+B;QACrD,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACnC,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,GAAG,IAAI,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,IAAc;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,IAAc;QACtC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,IAAc;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,8BAA8B;IAC9B,8EAA8E;IAE9E;;;;;;;OAOG;IACK,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,GAAW,EACX,IAAc,EACd,aAAa,GAAG,CAAC,EACjB,UAAU,GAAG,CAAC;QAEd,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAC7C,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC/C,CAAC;QACD,yEAAyE;QACzE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,iBAAiB,CAAC,GAAG,UAAU,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnE,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC1B,MAAM;gBACN,OAAO;gBACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC3D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,OAAO,CAAC,CAAC;YAEtB,UAAU;YACV,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,CAAC,OAAO,OAAO,MAAM,IAAI,GAAG,EAAE,CAC9D,CAAC;YACJ,CAAC;YAED,6BAA6B;YAC7B,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,aAAa,GAAG,mBAAmB,EAAE,CAAC;gBAC/D,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,gEAAgE;QAChE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,UAAU,GAAG,gBAAgB,EAAE,CAAC;YAC1E,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,gBAAgB;gBAC9B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;gBACvD,CAAC,CAAC,IAAI,CAAC;YACT,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,uDAAuD;QACvD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,SAAS,GAA4B,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnD,SAAS,GAAG,EAAE,MAAM,EAAE,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACtD,CAAC;YACD,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACtD,CAAC;QAED,iBAAiB;QACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAEzC,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,aAAa,CACrC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAC9B,OAAO,CAAC,GAAG,CAAC,eAAe,CAC5B,CAAC"}

package/dist/shared/errors.d.ts

@@ -0,0 +1,25 @@
+/**
+ * ForgeAPIError — structured error for non-ok HTTP responses from the ForgeOS engine.
+ *
+ * Parses the engine's standard error envelope:
+ *   { detail, error, context, suggestion, request_id, docs_url }
+ *
+ * Design: single source of truth for how callers present engine errors to end
+ * users. Both the MCP transport and the CLI binary import this class; neither
+ * duplicates the formatting logic.
+ */
+export declare class ForgeAPIError extends Error {
+    status: number;
+    detail: string;
+    context: Record<string, unknown> | null;
+    suggestion: string | null;
+    requestId: string | null;
+    docsUrl: string | null;
+    constructor(status: number, body: Record<string, unknown>);
+    /**
+     * Return a user-facing message that includes the error detail plus any
+     * actionable hints the engine provided.
+     */
+    toUserMessage(): string;
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/shared/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/shared/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEX,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAezD;;;OAGG;IACH,aAAa,IAAI,MAAM;CAMxB"}

package/dist/shared/errors.js

@@ -0,0 +1,44 @@
+/**
+ * ForgeAPIError — structured error for non-ok HTTP responses from the ForgeOS engine.
+ *
+ * Parses the engine's standard error envelope:
+ *   { detail, error, context, suggestion, request_id, docs_url }
+ *
+ * Design: single source of truth for how callers present engine errors to end
+ * users. Both the MCP transport and the CLI binary import this class; neither
+ * duplicates the formatting logic.
+ */
+export class ForgeAPIError extends Error {
+    status;
+    detail;
+    context;
+    suggestion;
+    requestId;
+    docsUrl;
+    constructor(status, body) {
+        const detail = body.detail ||
+            body.error ||
+            "Unknown error";
+        super(`${status}: ${detail}`);
+        this.name = "ForgeAPIError";
+        this.status = status;
+        this.detail = detail;
+        this.context = body.context || null;
+        this.suggestion = body.suggestion || null;
+        this.requestId = body.request_id || null;
+        this.docsUrl = body.docs_url || null;
+    }
+    /**
+     * Return a user-facing message that includes the error detail plus any
+     * actionable hints the engine provided.
+     */
+    toUserMessage() {
+        const parts = [this.detail];
+        if (this.suggestion)
+            parts.push(`Suggestion: ${this.suggestion}`);
+        if (this.docsUrl)
+            parts.push(`Docs: ${this.docsUrl}`);
+        return parts.join("\n");
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/shared/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/shared/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,MAAM,CAAS;IACf,MAAM,CAAS;IACf,OAAO,CAAiC;IACxC,UAAU,CAAgB;IAC1B,SAAS,CAAgB;IACzB,OAAO,CAAgB;IAEvB,YAAY,MAAc,EAAE,IAA6B;QACvD,MAAM,MAAM,GACT,IAAI,CAAC,MAAiB;YACtB,IAAI,CAAC,KAAgB;YACtB,eAAe,CAAC;QAClB,KAAK,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAI,IAAI,CAAC,OAAmC,IAAI,IAAI,CAAC;QACjE,IAAI,CAAC,UAAU,GAAI,IAAI,CAAC,UAAqB,IAAI,IAAI,CAAC;QACtD,IAAI,CAAC,SAAS,GAAI,IAAI,CAAC,UAAqB,IAAI,IAAI,CAAC;QACrD,IAAI,CAAC,OAAO,GAAI,IAAI,CAAC,QAAmB,IAAI,IAAI,CAAC;IACnD,CAAC;IAED;;;OAGG;IACH,aAAa;QACX,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAClE,IAAI,IAAI,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/shared/types.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Shared TypeScript interfaces for ForgeOS engine response types.
+ *
+ * Used by both the MCP server transport and the CLI binary so type definitions
+ * are never duplicated. Interfaces are intentionally minimal — only the fields
+ * callers actually inspect. Engine responses may contain additional fields that
+ * are preserved as `unknown` pass-throughs.
+ */
+export interface Project {
+    id: string;
+    name: string;
+    platform: string;
+    shadow_mode?: boolean;
+}
+export interface ProjectList {
+    projects: Project[];
+}
+export interface Initiative {
+    id: string;
+    title: string;
+    description?: string;
+    priority: string;
+    status: string;
+}
+export interface Changeset {
+    id: string;
+    changeset_id?: string;
+    description: string;
+    modules_affected: string[];
+    files_changed: string[];
+    risk_score: number;
+    gate_recommendation?: GateRecommendation | null;
+}
+export interface Gate {
+    gate_id: string;
+    gate_name: string;
+    order: number;
+    status: string;
+    required_evidence: string[];
+    required_roles: string[];
+}
+export interface GateRecommendation {
+    recommended_gates: Gate[];
+    risk_analysis: Record<string, unknown>;
+}
+export interface Evidence {
+    id: string;
+    type: string;
+    summary: string;
+    submitted_by: string;
+}
+export interface Review {
+    id: string;
+    role: string;
+    status: string;
+    findings?: ReviewFinding[];
+}
+export interface ReviewFinding {
+    category: string;
+    severity: string;
+    observation: string;
+    recommendation: string;
+}
+export interface Session {
+    id: string;
+    project_id: string;
+    status: string;
+    started_at: string;
+    ended_at?: string;
+}
+export interface Observation {
+    id: string;
+    domain: string;
+    observation_type: string;
+    content: string;
+    confidence: number;
+}
+export interface KnowledgeNode {
+    domain: string;
+    patterns: string[];
+    anti_patterns: string[];
+    fix_recipes: string[];
+}
+export interface QualityWarning {
+    type: string;
+    message: string;
+    severity: string;
+    source: string;
+}
+export interface FederationStatus {
+    enabled: boolean;
+    hub_url: string;
+    instance_id: string;
+    last_push?: string;
+    last_pull?: string;
+}
+export interface LedgerEntry {
+    seq: number;
+    timestamp: string;
+    entry_type: string;
+    previous_hash: string;
+}
+export interface Scorecard {
+    setup_complete: boolean;
+    items: ScorecardItem[];
+}
+export interface ScorecardItem {
+    name: string;
+    status: "complete" | "incomplete";
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/shared/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB;AAMD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACjD;AAMD,MAAM,WAAW,IAAI;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAMD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAMD,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAMD,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAMD,MAAM,WAAW,SAAS;IACxB,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC;CACnC"}

package/dist/shared/types.js

@@ -0,0 +1,10 @@
+/**
+ * Shared TypeScript interfaces for ForgeOS engine response types.
+ *
+ * Used by both the MCP server transport and the CLI binary so type definitions
+ * are never duplicated. Interfaces are intentionally minimal — only the fields
+ * callers actually inspect. Engine responses may contain additional fields that
+ * are preserved as `unknown` pass-throughs.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/shared/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}