@vibesdotdev/forge 0.0.0-stage → 1.0.0-rc.4

package/dist/ci/storage/transforms.js

@@ -0,0 +1,78 @@
+import { createStorageTransform } from '@vibesdotdev/storage/transform';
+import { CiAttemptSchema, CiRunSchema } from "../runs/index.js";
+function iso(value) {
+    return new Date(value).toISOString();
+}
+/** Physical owner-app row → canonical `ci.runs` descriptor. */
+export function ciRunRowToDescriptor(row) {
+    return CiRunSchema.parse({
+        id: row.id,
+        requestKey: row.requestKey,
+        pipelineId: row.pipelineId,
+        configHash: row.configHash,
+        source: {
+            provider: row.sourceProvider,
+            repository: row.sourceRepository,
+            repositoryId: row.repositoryId,
+            sha: row.sourceSha,
+            ref: row.sourceRef,
+            branch: row.sourceBranch ? row.sourceBranch : undefined,
+            pullRequestNumber: row.pullRequestNumber !== null ? row.pullRequestNumber : undefined
+        },
+        event: row.event,
+        status: row.status,
+        requiredContexts: row.requiredContexts,
+        requestedBy: row.requestedBy,
+        version: row.version,
+        summary: row.summary ? row.summary : undefined,
+        logsRef: row.logsRef ? row.logsRef : undefined,
+        cancellation: row.cancellation ? row.cancellation : undefined,
+        createdAt: iso(row.createdAt),
+        updatedAt: iso(row.updatedAt),
+        startedAt: row.startedAt ? iso(row.startedAt) : undefined,
+        finishedAt: row.finishedAt ? iso(row.finishedAt) : undefined
+    });
+}
+/** Physical owner-app row → canonical `ci.attempts` descriptor. */
+export function ciAttemptRowToDescriptor(row) {
+    return CiAttemptSchema.parse({
+        id: row.id,
+        runId: row.runId,
+        suiteId: row.suiteId,
+        context: row.context,
+        runnerId: row.runnerId,
+        executorId: row.executorId,
+        needs: row.needs,
+        dispatch: row.dispatch ? row.dispatch : undefined,
+        ordinal: row.ordinal,
+        sha: row.sha,
+        status: row.status,
+        version: row.version,
+        checkProjectionVersion: row.checkProjectionVersion !== null ? row.checkProjectionVersion : undefined,
+        lease: row.lease ? row.lease : undefined,
+        exitCode: row.exitCode !== null ? row.exitCode : undefined,
+        failureSummary: row.failureSummary ? row.failureSummary : undefined,
+        logsRef: row.logsRef ? row.logsRef : undefined,
+        artifactsRef: row.artifactsRef ? row.artifactsRef : undefined,
+        cancellation: row.cancellation ? row.cancellation : undefined,
+        createdAt: iso(row.createdAt),
+        updatedAt: iso(row.updatedAt),
+        startedAt: row.startedAt ? iso(row.startedAt) : undefined,
+        finishedAt: row.finishedAt ? iso(row.finishedAt) : undefined
+    });
+}
+export const ciRunsStorageTransform = createStorageTransform({
+    id: 'ci.runs',
+    manifestId: 'ci.runs',
+    description: 'Physical CI run row → canonical read-only ci.runs descriptor.',
+    fromRow: ciRunRowToDescriptor
+});
+export const ciAttemptsStorageTransform = createStorageTransform({
+    id: 'ci.attempts',
+    manifestId: 'ci.attempts',
+    description: 'Physical CI attempt row → canonical read-only ci.attempts descriptor.',
+    fromRow: ciAttemptRowToDescriptor
+});
+export const ciRunCrudTransform = ciRunsStorageTransform.implementation.impl;
+export const ciAttemptCrudTransform = ciAttemptsStorageTransform.implementation.impl;
+//# sourceMappingURL=transforms.js.map

package/dist/ci/storage/transforms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transforms.js","sourceRoot":"","sources":["../../../src/ci/storage/transforms.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,sBAAsB,EAEtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,WAAW,EAA8B,MAAM,kBAAkB,CAAC;AA0D5F,SAAS,GAAG,CAAC,KAAgB;IAC5B,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACtC,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,oBAAoB,CAAC,GAAoB;IACxD,OAAO,WAAW,CAAC,KAAK,CAAC;QACxB,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM,EAAE;YACP,QAAQ,EAAE,GAAG,CAAC,cAAc;YAC5B,UAAU,EAAE,GAAG,CAAC,gBAAgB;YAChC,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,GAAG,EAAE,GAAG,CAAC,SAAS;YAClB,GAAG,EAAE,GAAG,CAAC,SAAS;YAClB,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YACvD,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;SACrF;QACD,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAC9C,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAC9C,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QAC7D,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QACzD,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;KAC5D,CAAC,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,wBAAwB,CAAC,GAAwB;IAChE,OAAO,eAAe,CAAC,KAAK,CAAC;QAC5B,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACjD,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,sBAAsB,EAAE,GAAG,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS;QACpG,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACxC,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAC1D,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QACnE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAC9C,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QAC7D,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QAC7D,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QACzD,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;KAC5D,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAyB;IACpF,EAAE,EAAE,SAAS;IACb,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,+DAA+D;IAC5E,OAAO,EAAE,oBAAoB;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,sBAAsB,CAAiC;IAChG,EAAE,EAAE,aAAa;IACjB,UAAU,EAAE,aAAa;IACzB,WAAW,EAAE,uEAAuE;IACpF,OAAO,EAAE,wBAAwB;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAC9B,sBAAsB,CAAC,cAAc,CAAC,IAAI,CAAC;AAE5C,MAAM,CAAC,MAAM,sBAAsB,GAClC,0BAA0B,CAAC,cAAc,CAAC,IAAI,CAAC"}

package/dist/ci-policy.d.ts

@@ -0,0 +1,46 @@
+import * as z from 'zod/v4';
+/**
+ * Provider-neutral liveness policy for one durable Forge CI execution.
+ *
+ * This policy detects a lost executor. It does not limit queue residence,
+ * provider invocation duration, or the user-authored whole-job deadline.
+ */
+export declare const ForgeCiLeasePolicySchema: z.ZodObject<{
+    leaseDurationMs: z.ZodNumber;
+    heartbeatIntervalMs: z.ZodNumber;
+}, z.core.$strip>;
+export type ForgeCiLeasePolicy = z.infer<typeof ForgeCiLeasePolicySchema>;
+/** Canonical short-liveness policy shared by every Forge CI adapter. */
+export declare const DEFAULT_FORGE_CI_LEASE_POLICY: Readonly<{
+    leaseDurationMs: number;
+    heartbeatIntervalMs: number;
+}>;
+/**
+ * How long one queue-consumer invocation may spend executing before it must
+ * hand the job back to the queue.
+ *
+ * A Cloudflare queue consumer is cancelled at a hard wall-clock ceiling. The CI
+ * job deadline is unrelated to it and is routinely larger — the default job
+ * timeout is 30 minutes. Passing that job deadline to an executor that runs
+ * inside the consumer is what made 20 repositories report
+ * `executor lease expired before completion` with no stored log at all: the
+ * invocation was killed mid-job, the heartbeat died with it, and the platform's
+ * sweeper terminalized the attempt two minutes later. Nothing about that
+ * outcome told anyone which step was running.
+ *
+ * So a consumer executes in slices. `sliceBudgetMs` is what one invocation may
+ * spend; the headroom to the ceiling covers claiming, lease renewal, the
+ * completion callback, and teardown. An executor that reaches the end of a
+ * slice with the job still live returns a non-terminal result and the consumer
+ * re-enqueues, which also renews liveness from a fresh invocation.
+ */
+export declare const ForgeCiConsumerSlicePolicySchema: z.ZodObject<{
+    wallClockCeilingMs: z.ZodNumber;
+    sliceBudgetMs: z.ZodNumber;
+}, z.core.$strip>;
+export type ForgeCiConsumerSlicePolicy = z.infer<typeof ForgeCiConsumerSlicePolicySchema>;
+export declare const DEFAULT_FORGE_CI_CONSUMER_SLICE_POLICY: Readonly<{
+    wallClockCeilingMs: number;
+    sliceBudgetMs: number;
+}>;
+//# sourceMappingURL=ci-policy.d.ts.map

package/dist/ci-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-policy.d.ts","sourceRoot":"","sources":["../src/ci-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;iBAalC,CAAC;AAEJ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,wEAAwE;AACxE,eAAO,MAAM,6BAA6B;;;EAKzC,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,gCAAgC;;;iBAa1C,CAAC;AAEJ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F,eAAO,MAAM,sCAAsC;;;EAKlD,CAAC"}

package/dist/ci-policy.js

@@ -0,0 +1,64 @@
+import * as z from 'zod/v4';
+/**
+ * Provider-neutral liveness policy for one durable Forge CI execution.
+ *
+ * This policy detects a lost executor. It does not limit queue residence,
+ * provider invocation duration, or the user-authored whole-job deadline.
+ */
+export const ForgeCiLeasePolicySchema = z
+    .object({
+    leaseDurationMs: z.number().int().positive(),
+    heartbeatIntervalMs: z.number().int().positive()
+})
+    .superRefine((policy, context) => {
+    if (policy.heartbeatIntervalMs * 2 > policy.leaseDurationMs) {
+        context.addIssue({
+            code: 'custom',
+            path: ['heartbeatIntervalMs'],
+            message: 'CI heartbeat interval must leave room for at least one missed heartbeat'
+        });
+    }
+});
+/** Canonical short-liveness policy shared by every Forge CI adapter. */
+export const DEFAULT_FORGE_CI_LEASE_POLICY = Object.freeze(ForgeCiLeasePolicySchema.parse({
+    leaseDurationMs: 120_000,
+    heartbeatIntervalMs: 30_000
+}));
+/**
+ * How long one queue-consumer invocation may spend executing before it must
+ * hand the job back to the queue.
+ *
+ * A Cloudflare queue consumer is cancelled at a hard wall-clock ceiling. The CI
+ * job deadline is unrelated to it and is routinely larger — the default job
+ * timeout is 30 minutes. Passing that job deadline to an executor that runs
+ * inside the consumer is what made 20 repositories report
+ * `executor lease expired before completion` with no stored log at all: the
+ * invocation was killed mid-job, the heartbeat died with it, and the platform's
+ * sweeper terminalized the attempt two minutes later. Nothing about that
+ * outcome told anyone which step was running.
+ *
+ * So a consumer executes in slices. `sliceBudgetMs` is what one invocation may
+ * spend; the headroom to the ceiling covers claiming, lease renewal, the
+ * completion callback, and teardown. An executor that reaches the end of a
+ * slice with the job still live returns a non-terminal result and the consumer
+ * re-enqueues, which also renews liveness from a fresh invocation.
+ */
+export const ForgeCiConsumerSlicePolicySchema = z
+    .object({
+    wallClockCeilingMs: z.number().int().positive(),
+    sliceBudgetMs: z.number().int().positive()
+})
+    .superRefine((policy, context) => {
+    if (policy.sliceBudgetMs >= policy.wallClockCeilingMs) {
+        context.addIssue({
+            code: 'custom',
+            path: ['sliceBudgetMs'],
+            message: 'CI slice budget must leave headroom below the consumer wall-clock ceiling'
+        });
+    }
+});
+export const DEFAULT_FORGE_CI_CONSUMER_SLICE_POLICY = Object.freeze(ForgeCiConsumerSlicePolicySchema.parse({
+    wallClockCeilingMs: 15 * 60_000,
+    sliceBudgetMs: 11 * 60_000
+}));
+//# sourceMappingURL=ci-policy.js.map

package/dist/ci-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-policy.js","sourceRoot":"","sources":["../src/ci-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACvC,MAAM,CAAC;IACP,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAChD,CAAC;KACD,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAChC,IAAI,MAAM,CAAC,mBAAmB,GAAG,CAAC,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QAC7D,OAAO,CAAC,QAAQ,CAAC;YAChB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,qBAAqB,CAAC;YAC7B,OAAO,EAAE,yEAAyE;SAClF,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC,CAAC;AAIJ,wEAAwE;AACxE,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,MAAM,CACzD,wBAAwB,CAAC,KAAK,CAAC;IAC9B,eAAe,EAAE,OAAO;IACxB,mBAAmB,EAAE,MAAM;CAC3B,CAAC,CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACP,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAChC,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACvD,OAAO,CAAC,QAAQ,CAAC;YAChB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EAAE,2EAA2E;SACpF,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC,CAAC;AAIJ,MAAM,CAAC,MAAM,sCAAsC,GAAG,MAAM,CAAC,MAAM,CAClE,gCAAgC,CAAC,KAAK,CAAC;IACtC,kBAAkB,EAAE,EAAE,GAAG,MAAM;IAC/B,aAAa,EAAE,EAAE,GAAG,MAAM;CAC1B,CAAC,CACF,CAAC"}

package/dist/ci-stuck-checks.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Detect a CI check that was enqueued and never dispatched.
+ *
+ * MEASURED, 2026-08-05 on PR #281: both checks were created at 23:59:45 with
+ * `queued for durable sandbox execution` and **never changed state for 31
+ * minutes** — `updatedAt` stayed frozen at creation. Meanwhile PR #283, opened
+ * eighteen minutes LATER, completed in ~4.5 minutes. The queue was moving;
+ * that one run simply never dispatched.
+ *
+ * WHY THIS NEEDS NAMING. The failure mode is SILENCE. A stuck run is
+ * indistinguishable from a slow one, so the natural response is to keep
+ * waiting — which cost ~30 minutes of doing nothing but polling. Nothing
+ * anywhere said "this has not moved since it was enqueued".
+ *
+ * And the obvious remedy is the wrong one: an EMPTY COMMIT does not work,
+ * because runs dedupe by content key, so it never dispatches. The thing that
+ * works is changing content — merging the base branch in — which nobody would
+ * guess. So the message carries the remedy; a detector that says only "stuck"
+ * would leave the reader exactly as blocked.
+ *
+ * Deliberately time-INJECTED rather than reading the clock: staleness logic
+ * that cannot be tested at a fixed instant is how thresholds silently rot.
+ */
+import type { StatusCheck } from './schemas/wire-contracts.ts';
+/**
+ * How long a check may sit unchanged before it is called stuck.
+ *
+ * Real dispatch here is seconds and a full run is ~4-5 minutes, so 10 minutes
+ * of NO STATE CHANGE AT ALL is far outside normal. Set from the observed
+ * envelope rather than a round number: too low and every busy queue looks
+ * broken, which trains people to ignore it.
+ */
+export declare const CI_CHECK_STUCK_AFTER_MS: number;
+export interface StuckCheck {
+    context: string;
+    sha: string;
+    /** Milliseconds since the check last changed state. */
+    stalledForMs: number;
+}
+export interface StuckCheckReport {
+    stuck: StuckCheck[];
+    /** Ready-to-act guidance, empty when nothing is stuck. */
+    remedy: string;
+}
+/**
+ * Checks still `pending` that have not changed state within the threshold.
+ *
+ * Only `pending` counts. A check that reached success/failure has dispatched by
+ * definition, however old it is, and flagging those would make the signal
+ * meaningless on any PR that has been open a while.
+ */
+export declare function findStuckChecks(checks: readonly StatusCheck[], now: number, stuckAfterMs?: number): StuckCheckReport;
+//# sourceMappingURL=ci-stuck-checks.d.ts.map

package/dist/ci-stuck-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-stuck-checks.d.ts","sourceRoot":"","sources":["../src/ci-stuck-checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE/D;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,QAAiB,CAAC;AAEtD,MAAM,WAAW,UAAU;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;CACf;AAOD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,SAAS,WAAW,EAAE,EAC9B,GAAG,EAAE,MAAM,EACX,YAAY,GAAE,MAAgC,GAC5C,gBAAgB,CAwBlB"}

package/dist/ci-stuck-checks.js

@@ -0,0 +1,70 @@
+/**
+ * Detect a CI check that was enqueued and never dispatched.
+ *
+ * MEASURED, 2026-08-05 on PR #281: both checks were created at 23:59:45 with
+ * `queued for durable sandbox execution` and **never changed state for 31
+ * minutes** — `updatedAt` stayed frozen at creation. Meanwhile PR #283, opened
+ * eighteen minutes LATER, completed in ~4.5 minutes. The queue was moving;
+ * that one run simply never dispatched.
+ *
+ * WHY THIS NEEDS NAMING. The failure mode is SILENCE. A stuck run is
+ * indistinguishable from a slow one, so the natural response is to keep
+ * waiting — which cost ~30 minutes of doing nothing but polling. Nothing
+ * anywhere said "this has not moved since it was enqueued".
+ *
+ * And the obvious remedy is the wrong one: an EMPTY COMMIT does not work,
+ * because runs dedupe by content key, so it never dispatches. The thing that
+ * works is changing content — merging the base branch in — which nobody would
+ * guess. So the message carries the remedy; a detector that says only "stuck"
+ * would leave the reader exactly as blocked.
+ *
+ * Deliberately time-INJECTED rather than reading the clock: staleness logic
+ * that cannot be tested at a fixed instant is how thresholds silently rot.
+ */
+/**
+ * How long a check may sit unchanged before it is called stuck.
+ *
+ * Real dispatch here is seconds and a full run is ~4-5 minutes, so 10 minutes
+ * of NO STATE CHANGE AT ALL is far outside normal. Set from the observed
+ * envelope rather than a round number: too low and every busy queue looks
+ * broken, which trains people to ignore it.
+ */
+export const CI_CHECK_STUCK_AFTER_MS = 10 * 60 * 1000;
+/** Minutes, floored — the unit these get discussed in. */
+function minutes(ms) {
+    return Math.floor(ms / 60_000);
+}
+/**
+ * Checks still `pending` that have not changed state within the threshold.
+ *
+ * Only `pending` counts. A check that reached success/failure has dispatched by
+ * definition, however old it is, and flagging those would make the signal
+ * meaningless on any PR that has been open a while.
+ */
+export function findStuckChecks(checks, now, stuckAfterMs = CI_CHECK_STUCK_AFTER_MS) {
+    const stuck = [];
+    for (const check of checks) {
+        if (check.state !== 'pending')
+            continue;
+        const updatedAt = Date.parse(check.updatedAt);
+        // An unparseable timestamp is not evidence of staleness. Guessing here
+        // would invent stuck runs, and a detector that cries wolf gets muted.
+        if (Number.isNaN(updatedAt))
+            continue;
+        const stalledForMs = now - updatedAt;
+        if (stalledForMs < stuckAfterMs)
+            continue;
+        stuck.push({ context: check.context, sha: check.sha, stalledForMs });
+    }
+    if (stuck.length === 0)
+        return { stuck, remedy: '' };
+    return {
+        stuck,
+        remedy: `${stuck.length} check(s) have not changed state in over ${minutes(stuckAfterMs)}m ` +
+            `(${stuck.map((entry) => `${entry.context} ${minutes(entry.stalledForMs)}m`).join(', ')}). ` +
+            'That is a run that never dispatched, not a slow one. ' +
+            'An empty commit will NOT retrigger it — runs dedupe by content key. ' +
+            'Merge the base branch into the PR branch and push; the content change dispatches a fresh run.'
+    };
+}
+//# sourceMappingURL=ci-stuck-checks.js.map

package/dist/ci-stuck-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-stuck-checks.js","sourceRoot":"","sources":["../src/ci-stuck-checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAetD,0DAA0D;AAC1D,SAAS,OAAO,CAAC,EAAU;IAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC9B,MAA8B,EAC9B,GAAW,EACX,eAAuB,uBAAuB;IAE9C,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9C,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,SAAS;QACtC,MAAM,YAAY,GAAG,GAAG,GAAG,SAAS,CAAC;QACrC,IAAI,YAAY,GAAG,YAAY;YAAE,SAAS;QAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAErD,OAAO;QACN,KAAK;QACL,MAAM,EACL,GAAG,KAAK,CAAC,MAAM,4CAA4C,OAAO,CAAC,YAAY,CAAC,IAAI;YACpF,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAC5F,uDAAuD;YACvD,sEAAsE;YACtE,+FAA+F;KAChG,CAAC;AACH,CAAC"}

package/dist/citations.d.ts

@@ -0,0 +1,6 @@
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import { type CitationOwner } from '@vibesdotdev/shared/citations';
+import type { ForgeClient } from './client.ts';
+/** The semantic Forge client supplies its real selected capabilities, including caller authentication. */
+export declare function createPullRequestCitations(runtime: RuntimeRef, client: Pick<ForgeClient, 'apiClient' | 'pullRequests'>): CitationOwner;
+//# sourceMappingURL=citations.d.ts.map

package/dist/citations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"citations.d.ts","sourceRoot":"","sources":["../src/citations.ts"],"names":[],"mappings":"AACA,OAAO,EAAqF,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACzI,OAAO,EAC2E,KAAK,aAAa,EACnG,MAAM,+BAA+B,CAAC;AAIvC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK/C,0GAA0G;AAC1G,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,cAAc,CAAC,GAAG,aAAa,CA6JtI"}

package/dist/citations.js

@@ -0,0 +1,189 @@
+import * as z from 'zod/v4';
+import { CapabilityError, CaughtFailureSchema, isCapabilityError, settle, valueFreeFailure } from '@vibesdotdev/kernel';
+import { CitationSchema, CitationLocateContextSchema } from '@vibesdotdev/shared/citations';
+import { sha256Hex } from '@vibesdotdev/shared/hashing';
+import { PullRequestCitationIdentitySchema, PullRequestCitationQuerySchema } from "./schemas/citations.js";
+import { PrGetOutputSchema } from "./schemas/wire-contracts.js";
+const IdentityFromIdSchema = z.string().transform(value => JSON.parse(value)).pipe(PullRequestCitationIdentitySchema);
+/** The semantic Forge client supplies its real selected capabilities, including caller authentication. */
+export function createPullRequestCitations(runtime, client) {
+    function parse(schema, input) {
+        try {
+            return schema.parse(input);
+        }
+        catch (cause) {
+            throw new CapabilityError('The PR citation selection is invalid.', 'INVALID_INPUT', {
+                reason: 'pr-citation-input-invalid', cause: valueFreeFailure(CaughtFailureSchema.parse(cause))
+            });
+        }
+    }
+    function scope(expected) {
+        const selected = z.string().min(1).safeParse(runtime.invocationWorkspace?.id);
+        if (!selected.success)
+            throw refusal('pr-citation-scope-required', 'UNAVAILABLE');
+        if (expected !== undefined && expected !== selected.data)
+            throw refusal('pr-citation-scope-mismatch', 'PERMISSION_DENIED');
+        return selected.data;
+    }
+    function citation(input) {
+        const selected = parse(CitationSchema, input);
+        if (selected.link.kind !== 'pr' || selected.link.source !== 'forge')
+            throw refusal('pr-citation-kind-invalid', 'INVALID_INPUT');
+        scope(selected.scope);
+        if (selected.anchor !== undefined && selected.anchor.kind !== 'region')
+            throw refusal('pr-citation-anchor-unsupported', 'INVALID_INPUT');
+        const identity = parse(IdentityFromIdSchema, selected.link.id);
+        if (JSON.stringify(identity) !== selected.link.id)
+            throw refusal('pr-citation-id-noncanonical', 'INVALID_INPUT');
+        return { selected, identity };
+    }
+    async function read(repo, number) {
+        const response = await settle(async () => PrGetOutputSchema.parse(await (await client.pullRequests()).get({ repo, issueNumber: number })));
+        if (!response.ok) {
+            if (isCapabilityError(response.cause) && response.cause.code === 'NOT_FOUND' && response.cause.reason === 'forge-not-found') {
+                return { status: 'unavailable', reason: 'forge-not-found: the PR is absent or invisible to this caller.' };
+            }
+            throw response.cause;
+        }
+        const item = response.value.item;
+        if (!z.string().min(1).safeParse(item.id).success)
+            throw refusal('pr-citation-record-invalid', 'UNAVAILABLE');
+        if (item.type !== 'pr')
+            throw refusal('pr-citation-pull-request-required', 'INVALID_INPUT');
+        if (item.repositoryId !== undefined && item.repositoryId !== repo)
+            throw refusal('pr-citation-repository-mismatch', 'CONFLICT');
+        if (item.issueNumber !== undefined && item.issueNumber !== number)
+            throw refusal('pr-citation-number-mismatch', 'CONFLICT');
+        return { status: 'current', item };
+    }
+    function observed(text, updatedAt) {
+        const date = z.iso.datetime({ offset: true }).safeParse(updatedAt);
+        const observation = {
+            revision: { scheme: 'forge-pr-text-v1', value: sha256Hex(text) }
+        };
+        if (date.success)
+            observation.freshness = { modifiedAt: date.data };
+        return observation;
+    }
+    async function current(input) {
+        const { selected, identity } = citation(input);
+        const response = await read(identity.repo, identity.number);
+        if (response.status !== 'current')
+            return response;
+        if (response.item.id !== identity.id)
+            throw refusal('pr-citation-identity-changed', 'CONFLICT');
+        const text = response.item[identity.field];
+        if (text === undefined)
+            return { status: 'gone' };
+        return {
+            status: 'current',
+            selected,
+            text,
+            citation: { ...selected, ...observed(text, response.item.updatedAt) }
+        };
+    }
+    const owner = {
+        async prepareLocate(kind, query, context) {
+            if (kind !== 'pr')
+                throw refusal('pr-citation-kind-invalid', 'INVALID_INPUT');
+            const selected = parse(PullRequestCitationQuerySchema, query);
+            const binding = parse(CitationLocateContextSchema, context);
+            const workspaceId = scope(binding.workspaceId);
+            const repo = await (await client.apiClient()).resolveRepositoryId(selected.repo);
+            return { query: { ...selected, repo }, provenance: { workspaceId, repository: repo } };
+        },
+        async locate(kind, query, context) {
+            if (kind !== 'pr')
+                throw refusal('pr-citation-kind-invalid', 'INVALID_INPUT');
+            const selected = parse(PullRequestCitationQuerySchema, query);
+            const binding = parse(CitationLocateContextSchema, context);
+            const workspaceId = scope(binding.workspaceId);
+            const repo = await (await client.apiClient()).resolveRepositoryId(selected.repo);
+            const places = [];
+            const failures = [];
+            for (const number of new Set(selected.numbers)) {
+                const response = await settle(() => read(repo, number));
+                if (!response.ok) {
+                    const failure = valueFreeFailure(response.cause);
+                    failures.push([failure.name, failure.code, failure.reason].filter(value => value !== undefined).join(' '));
+                    continue;
+                }
+                if (response.value.status !== 'current') {
+                    failures.push(response.value.reason);
+                    continue;
+                }
+                const item = response.value.item;
+                for (const field of new Set(selected.fields)) {
+                    const text = item[field];
+                    if (text === undefined)
+                        continue;
+                    places.push(CitationSchema.parse({
+                        link: { kind: 'pr', source: 'forge', role: 'evidence', id: JSON.stringify({ repo, number, id: item.id, field }) },
+                        scope: workspaceId, ...observed(text, item.updatedAt)
+                    }));
+                }
+            }
+            if (failures.length > 0) {
+                return {
+                    status: places.length > 0 ? 'partial' : 'unavailable',
+                    places,
+                    reason: [...new Set(failures)].join('; ')
+                };
+            }
+            return { status: 'complete', places };
+        },
+        async metadata(input) {
+            const response = await current(input);
+            return response.status === 'current' ? { status: 'current', citation: response.citation } : response;
+        },
+        async resolve(input) {
+            const response = await current(input);
+            if (response.status !== 'current')
+                return response;
+            const { selected, text } = response;
+            if (response.citation.revision.scheme !== selected.revision.scheme || response.citation.revision.value !== selected.revision.value)
+                throw changed();
+            const after = await current(selected);
+            if (after.status !== 'current')
+                return after;
+            if (after.citation.revision.value !== selected.revision.value)
+                throw changed();
+            if (selected.anchor?.kind === 'region' && selected.anchor.end > text.length)
+                throw refusal('pr-citation-anchor-invalid', 'INVALID_INPUT');
+            return { status: 'resolved', text: selected.anchor?.kind === 'region'
+                    ? text.slice(selected.anchor.start, selected.anchor.end) : text, revision: selected.revision };
+        },
+        async find(input, text, at) {
+            const { selected } = citation(input);
+            const requested = parse(z.object({ text: z.string().min(1), at: z.object({ start: z.number().int().nonnegative() }).optional() }), { text, at });
+            const read = await owner.resolve(selected);
+            if (read.status !== 'resolved')
+                throw refusal('pr-citation-body-unavailable', 'UNAVAILABLE');
+            const base = selected.anchor?.kind === 'region' ? selected.anchor.start : 0;
+            const matches = [];
+            if (requested.at !== undefined) {
+                const start = requested.at.start;
+                if (read.text.slice(start, start + requested.text.length) === requested.text)
+                    matches.push({ kind: 'region', start: base + start, end: base + start + requested.text.length });
+                return matches;
+            }
+            let start = read.text.indexOf(requested.text);
+            while (start !== -1) {
+                matches.push({ kind: 'region', start: base + start, end: base + start + requested.text.length });
+                start = read.text.indexOf(requested.text, start + 1);
+            }
+            return matches;
+        },
+        async rootOf(input) {
+            return citation(input).selected;
+        }
+    };
+    return owner;
+}
+function changed() {
+    return new CapabilityError('The PR field changed after location.', 'CONFLICT', { reason: 'citation-revision-changed', retryable: true });
+}
+function refusal(reason, code) {
+    return new CapabilityError('The PR source selection is unavailable or invalid.', code, { reason });
+}
+//# sourceMappingURL=citations.js.map

package/dist/citations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"citations.js","sourceRoot":"","sources":["../src/citations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,EAAmB,MAAM,qBAAqB,CAAC;AACzI,OAAO,EACN,cAAc,EAAE,2BAA2B,EAC3C,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,iCAAiC,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAGhE,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;AAGtH,0GAA0G;AAC1G,MAAM,UAAU,0BAA0B,CAAC,OAAmB,EAAE,MAAuD;IACtH,SAAS,KAAK,CAA2B,MAAc,EAAE,KAAc;QACtE,IAAI,CAAC;YACJ,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACd,MAAM,IAAI,eAAe,CAAC,uCAAuC,EAAE,eAAe,EAAE;gBACnF,MAAM,EAAE,2BAA2B,EAAE,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;aAC9F,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,SAAS,KAAK,CAAC,QAAiB;QAC/B,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,MAAM,OAAO,CAAC,4BAA4B,EAAE,aAAa,CAAC,CAAC;QAClF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ,CAAC,IAAI;YAAE,MAAM,OAAO,CAAC,4BAA4B,EAAE,mBAAmB,CAAC,CAAC;QAC3H,OAAO,QAAQ,CAAC,IAAI,CAAC;IACtB,CAAC;IAED,SAAS,QAAQ,CAAC,KAAoB;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO;YAAE,MAAM,OAAO,CAAC,0BAA0B,EAAE,eAAe,CAAC,CAAC;QAChI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,OAAO,CAAC,gCAAgC,EAAE,eAAe,CAAC,CAAC;QACzI,MAAM,QAAQ,GAAG,KAAK,CAAC,oBAAoB,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,OAAO,CAAC,6BAA6B,EAAE,eAAe,CAAC,CAAC;QACjH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,MAAc;QAC/C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3I,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,IAAI,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;gBAC7H,OAAO,EAAE,MAAM,EAAE,aAAsB,EAAE,MAAM,EAAE,gEAAgE,EAAE,CAAC;YACrH,CAAC;YACD,MAAM,QAAQ,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QACjC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO;YAAE,MAAM,OAAO,CAAC,4BAA4B,EAAE,aAAa,CAAC,CAAC;QAC9G,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;YAAE,MAAM,OAAO,CAAC,mCAAmC,EAAE,eAAe,CAAC,CAAC;QAC5F,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI;YAAE,MAAM,OAAO,CAAC,iCAAiC,EAAE,UAAU,CAAC,CAAC;QAChI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM;YAAE,MAAM,OAAO,CAAC,6BAA6B,EAAE,UAAU,CAAC,CAAC;QAC5H,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAkB;QACjD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnE,MAAM,WAAW,GAA6C;YAC7D,QAAQ,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;SAChE,CAAC;QACF,IAAI,IAAI,CAAC,OAAO;YAAE,WAAW,CAAC,SAAS,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACpE,OAAO,WAAW,CAAC;IACpB,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,KAAoB;QAC1C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QACnD,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;YAAE,MAAM,OAAO,CAAC,8BAA8B,EAAE,UAAU,CAAC,CAAC;QAChG,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC;QAC3D,OAAO;YACN,MAAM,EAAE,SAAkB;YAC1B,QAAQ;YACR,IAAI;YACJ,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;SACrE,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAkB;QAC5B,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO;YACvC,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM,OAAO,CAAC,0BAA0B,EAAE,eAAe,CAAC,CAAC;YAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjF,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;QACxF,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO;YAChC,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM,OAAO,CAAC,0BAA0B,EAAE,eAAe,CAAC,CAAC;YAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjF,MAAM,MAAM,GAAe,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;gBACxD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAClB,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;oBACjD,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC3G,SAAS;gBACV,CAAC;gBACD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACrC,SAAS;gBACV,CAAC;gBACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBACjC,KAAK,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzB,IAAI,IAAI,KAAK,SAAS;wBAAE,SAAS;oBACjC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;wBAChC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;wBACjH,KAAK,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;qBACrD,CAAC,CAAC,CAAC;gBACL,CAAC;YACF,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO;oBACN,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;oBACrD,MAAM;oBACN,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBACzC,CAAC;YACH,CAAC;YAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QACvC,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,KAAK;YACnB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtG,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK;YAClB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAC;YACnD,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;YACpC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,QAAQ,CAAC,KAAK;gBAAE,MAAM,OAAO,EAAE,CAAC;YACpJ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,QAAQ,CAAC,KAAK;gBAAE,MAAM,OAAO,EAAE,CAAC;YAC/E,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM;gBAAE,MAAM,OAAO,CAAC,4BAA4B,EAAE,eAAe,CAAC,CAAC;YAC1I,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ;oBACpE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACjG,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACzB,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACjJ,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;gBAAE,MAAM,OAAO,CAAC,8BAA8B,EAAE,aAAa,CAAC,CAAC;YAC7F,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAqB,EAAE,CAAC;YACrC,IAAI,SAAS,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC;gBACjC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,IAAI;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/K,OAAO,OAAO,CAAC;YAChB,CAAC;YACD,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9C,OAAO,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,OAAO,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK;YACjB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;QACjC,CAAC;KACD,CAAC;IACF,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,OAAO;IACf,OAAO,IAAI,eAAe,CAAC,sCAAsC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1I,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,IAAwE;IACxG,OAAO,IAAI,eAAe,CAAC,oDAAoD,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACpG,CAAC"}

package/dist/cli/auth.plugin.d.ts

@@ -0,0 +1,3 @@
+/** Consumer-only authentication and transport composition, shared by CLI hosts. */
+export declare const forgeCliAuthPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+//# sourceMappingURL=auth.plugin.d.ts.map

package/dist/cli/auth.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.plugin.d.ts","sourceRoot":"","sources":["../../src/cli/auth.plugin.ts"],"names":[],"mappings":"AAMA,mFAAmF;AACnF,eAAO,MAAM,kBAAkB,6CA0C7B,CAAC"}

package/dist/cli/auth.plugin.js

@@ -0,0 +1,48 @@
+import { createRuntimePlugin, createRuntimeImplementation } from '@vibesdotdev/kernel';
+import { ForgeApiClientDescriptorSchema, forgeApiClientDescriptor } from "../forge.api-client.descriptor.js";
+import forgeCliConfigDescriptor from "./settings/forge.cli.config.descriptor.js";
+/** Consumer-only authentication and transport composition, shared by CLI hosts. */
+export const forgeCliAuthPlugin = createRuntimePlugin({
+    id: 'forge.cli-auth',
+    name: 'Forge CLI authentication and transport',
+    dependencies: ['forge'],
+    descriptors: [forgeCliConfigDescriptor],
+    async onRegister(runtime) {
+        runtime.registerDescriptor('runtime/client', { kind: 'runtime/client', id: 'forge.cli-auth', name: 'Forge CLI authentication' });
+        runtime.registerLoader('runtime/client', 'forge.cli-auth', async () => {
+            const { ForgeCliAuthClient } = await import("./lib/auth-client.js");
+            return { impl: class extends ForgeCliAuthClient {
+                    constructor(descriptor, context) {
+                        super(descriptor, context, runtime);
+                    }
+                } };
+        });
+        runtime.registerLoader('forge/api-client', forgeApiClientDescriptor.id, async () => {
+            const [{ sendForgeRequest }, { resolveRepositoryId }] = await Promise.all([
+                import("./lib/transport.js"),
+                import("./lib/repo-ref.js")
+            ]);
+            return createRuntimeImplementation({
+                kind: 'forge/api-client',
+                id: forgeApiClientDescriptor.id,
+                constraint: { hardware: ['consumer'] },
+                // The kernel constructs this with the resolving runtime (KindContext.runtime):
+                // requests carry that runtime's caller bearer and active org.
+                implementation: class {
+                    descriptor = ForgeApiClientDescriptorSchema.parse(forgeApiClientDescriptor);
+                    runtime;
+                    constructor(_descriptor, context) {
+                        this.runtime = context.runtime;
+                    }
+                    request(spec) {
+                        return sendForgeRequest(this.runtime, spec);
+                    }
+                    resolveRepositoryId(ref, ownerId) {
+                        return resolveRepositoryId(this.runtime, ref, undefined, ownerId);
+                    }
+                }
+            });
+        });
+    }
+});
+//# sourceMappingURL=auth.plugin.js.map

package/dist/cli/auth.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.plugin.js","sourceRoot":"","sources":["../../src/cli/auth.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAA8D,MAAM,qBAAqB,CAAC;AAEnJ,OAAO,EAAE,8BAA8B,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAE7G,OAAO,wBAAwB,MAAM,2CAA2C,CAAC;AAEjF,mFAAmF;AACnF,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;IACrD,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,wCAAwC;IAC9C,YAAY,EAAE,CAAC,OAAO,CAAC;IACvB,WAAW,EAAE,CAAC,wBAAwB,CAAC;IACvC,KAAK,CAAC,UAAU,CAAC,OAAmB;QACnC,OAAO,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACjI,OAAO,CAAC,cAAc,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACpE,OAAO,EAAE,IAAI,EAAE,KAAM,SAAQ,kBAAkB;oBAC9C,YAAY,UAAwE,EAAE,OAAkC;wBACvH,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;oBACrC,CAAC;iBACD,EAAE,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,cAAc,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YAClF,MAAM,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACzE,MAAM,CAAC,oBAAoB,CAAC;gBAC5B,MAAM,CAAC,mBAAmB,CAAC;aAC3B,CAAC,CAAC;YACH,OAAO,2BAA2B,CAAC;gBAClC,IAAI,EAAE,kBAAkB;gBACxB,EAAE,EAAE,wBAAwB,CAAC,EAAE;gBAC/B,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE;gBACtC,+EAA+E;gBAC/E,8DAA8D;gBAC9D,cAAc,EAAE;oBACN,UAAU,GAAG,8BAA8B,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;oBACpE,OAAO,CAAe;oBACvC,YAAY,WAA8B,EAAE,OAAkC;wBAC7E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;oBAChC,CAAC;oBACD,OAAO,CAAI,IAAuD;wBACjE,OAAO,gBAAgB,CAAI,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBAChD,CAAC;oBACD,mBAAmB,CAAC,GAAW,EAAE,OAAgB;wBAChD,OAAO,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;oBACnE,CAAC;iBACD;aACD,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;CACD,CAAC,CAAC"}

package/dist/cli/ci.cli-group.descriptor.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `vibes ci *` — inspect and control Forge CI runs.
+ *
+ * Wraps existing platform-web run/attempt APIs. `vibes ci rerun` cancels a
+ * queued/running/provisioning run first, then re-queues it. Local
+ * `.forge/actions.yml` planning stays with the Actions compiler, not this group.
+ */
+import type { CLIGroupAssetDescriptor } from '@vibesdotdev/kernel/schemas/asset';
+declare const descriptor: CLIGroupAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=ci.cli-group.descriptor.d.ts.map

package/dist/cli/ci.cli-group.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci.cli-group.descriptor.d.ts","sourceRoot":"","sources":["../../src/cli/ci.cli-group.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAEjF,QAAA,MAAM,UAAU,EAAE,uBASjB,CAAC;AAEF,eAAe,UAAU,CAAC"}