@vibesdotdev/forge 0.0.0-stage → 1.0.0-rc.4

package/dist/cli/commands/forge.smoke.merge.command.descriptor.d.ts

@@ -0,0 +1,45 @@
+/**
+ * `vibes forge smoke merge` — the Stage-A `merged:true` gate as a first-class
+ * command. Provisions a fresh repo, pushes main + a feature branch via real
+ * git, opens a PR, merges it, asserts `{ result: { merged:true, sha } }`, then
+ * deletes the repo. DRY-RUN by default (prints the plan, mutates nothing);
+ * `--execute` runs it for real.
+ */
+export declare const smokeMergeCommandDescriptor: {
+    readonly kind: "cli/command";
+    readonly id: "forge.smoke.merge";
+    readonly name: "merge";
+    readonly description: "Smoke-test the forge PR merge path end-to-end (merged:true gate)";
+    readonly group: "forge.smoke";
+    readonly options: [{
+        readonly flags: "--execute";
+        readonly description: "Actually run the smoke test (default: dry-run plan only)";
+    }, {
+        readonly flags: "--origin <url>";
+        readonly description: "Override the platform target only (default: the declared platform service); auth and the credential partition stay the host infra.services.environment";
+    }, {
+        readonly flags: "--name <name>";
+        readonly description: "Test repo name (default: smoke-merge-<timestamp>)";
+    }, {
+        readonly flags: "--visibility <v>";
+        readonly description: "Test repo visibility: private | public (default: private)";
+    }, {
+        readonly flags: "--keep";
+        readonly description: "Do not delete the test repo on success (for debugging)";
+    }];
+    readonly surfaces: ["cli"];
+    readonly hardware: readonly ["consumer"];
+    readonly enabled: true;
+    readonly order: 10;
+    readonly examples: [{
+        readonly command: "vibes forge smoke merge";
+        readonly description: "Print the planned merge-smoke steps without mutating anything";
+        readonly expectExit: 0;
+    }, {
+        readonly command: "vibes forge smoke merge --execute";
+        readonly description: "Run the full provision → push → PR → merge → cleanup gate";
+        readonly expectExit: 0;
+    }];
+};
+export default smokeMergeCommandDescriptor;
+//# sourceMappingURL=forge.smoke.merge.command.descriptor.d.ts.map

package/dist/cli/commands/forge.smoke.merge.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.smoke.merge.command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/forge.smoke.merge.command.descriptor.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCtC,CAAC;AAEH,eAAe,2BAA2B,CAAC"}

package/dist/cli/commands/forge.smoke.merge.command.descriptor.js

@@ -0,0 +1,46 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+/**
+ * `vibes forge smoke merge` — the Stage-A `merged:true` gate as a first-class
+ * command. Provisions a fresh repo, pushes main + a feature branch via real
+ * git, opens a PR, merges it, asserts `{ result: { merged:true, sha } }`, then
+ * deletes the repo. DRY-RUN by default (prints the plan, mutates nothing);
+ * `--execute` runs it for real.
+ */
+export const smokeMergeCommandDescriptor = createRuntimeAsset({
+    kind: 'cli/command',
+    id: 'forge.smoke.merge',
+    name: 'merge',
+    description: 'Smoke-test the forge PR merge path end-to-end (merged:true gate)',
+    group: 'forge.smoke',
+    options: [
+        { flags: '--execute', description: 'Actually run the smoke test (default: dry-run plan only)' },
+        {
+            flags: '--origin <url>',
+            description: 'Override the platform target only (default: the declared platform service); auth and the credential partition stay the host infra.services.environment'
+        },
+        { flags: '--name <name>', description: 'Test repo name (default: smoke-merge-<timestamp>)' },
+        {
+            flags: '--visibility <v>',
+            description: 'Test repo visibility: private | public (default: private)'
+        },
+        { flags: '--keep', description: 'Do not delete the test repo on success (for debugging)' }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+    order: 10,
+    examples: [
+        {
+            command: 'vibes forge smoke merge',
+            description: 'Print the planned merge-smoke steps without mutating anything',
+            expectExit: 0
+        },
+        {
+            command: 'vibes forge smoke merge --execute',
+            description: 'Run the full provision → push → PR → merge → cleanup gate',
+            expectExit: 0
+        }
+    ]
+});
+export default smokeMergeCommandDescriptor;
+//# sourceMappingURL=forge.smoke.merge.command.descriptor.js.map

package/dist/cli/commands/forge.smoke.merge.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.smoke.merge.command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/commands/forge.smoke.merge.command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;IAC7D,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,kEAAkE;IAC/E,KAAK,EAAE,aAAa;IACpB,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,0DAA0D,EAAE;QAC/F;YACC,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,wJAAwJ;SACrK;QACD,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,mDAAmD,EAAE;QAC5F;YACC,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,2DAA2D;SACxE;QACD,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,wDAAwD,EAAE;KAC1F;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE;QACT;YACC,OAAO,EAAE,yBAAyB;YAClC,WAAW,EAAE,+DAA+D;YAC5E,UAAU,EAAE,CAAC;SACb;QACD;YACC,OAAO,EAAE,mCAAmC;YAC5C,WAAW,EAAE,2DAA2D;YACxE,UAAU,EAAE,CAAC;SACb;KACD;CACD,CAAC,CAAC;AAEH,eAAe,2BAA2B,CAAC"}

package/dist/cli/commands/forge.smoke.merge.command.impl.d.ts

@@ -0,0 +1,60 @@
+import type { CommandContext, CommandOptions } from '@vibesdotdev/cli';
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import { type FetchLike } from '../lib/transport.ts';
+import { type ExecLike } from '../lib/ssh-keygen.ts';
+import { type SecurePushRequest, type SecurePushResult, type SecurePushRuntime } from './forge.push.command.impl.ts';
+import { type OpenSmokeScratch, type SmokeCleanupFailure } from './forge.smoke.support.ts';
+/** Default platform origin the smoke targets when no override / env resolution. */
+export declare function defaultSmokeOrigin(runtime: RuntimeRef): Promise<string>;
+interface MergeSmokeConfig {
+    repoName: string;
+    strategy: 'merge';
+    visibility: 'private' | 'public';
+    origin?: string;
+    keep: boolean;
+    execute: boolean;
+}
+/**
+ * Translate parsed CLI flags into a normalized smoke config. PURE + directly
+ * unit-testable (mirrors the `buildCreateBody` convention).
+ */
+export declare function buildMergeSmokeConfig(rawOpts: CommandOptions): MergeSmokeConfig;
+/**
+ * The ordered, human-readable steps the smoke will perform. PURE — used both for
+ * the dry-run plan and for progress narration, so the two can never drift.
+ */
+export declare function describeMergeSmokeSteps(cfg: MergeSmokeConfig): string[];
+/** Shape of the structured result emitted under `--json`. */
+interface MergeSmokeResult {
+    ok: boolean;
+    dryRun: boolean;
+    repoId?: string;
+    repoName: string;
+    prNumber?: number;
+    merged?: boolean;
+    sha?: string;
+    deleted?: boolean;
+    /** Cleanup failures the runtime logger could not report. */
+    cleanupFailures?: SmokeCleanupFailure[];
+    steps: string[];
+}
+export type SecurePushLike = (request: SecurePushRequest) => Promise<SecurePushResult>;
+/** The merge smoke's remaining seams: its scratch directory and the platform fetch (tests drive both). */
+export interface MergeSmokeDeps {
+    openScratch?: OpenSmokeScratch;
+    fetchImpl?: FetchLike;
+}
+/**
+ * Orchestrate the full merge smoke. The `exec`, `push` and scratch boundaries
+ * are injected so tests can drive the git legs without a real binary. Returns
+ * the structured result on success; a failed leg throws
+ * `forge-smoke-merge-failed` carrying it, after the test repo (unless
+ * `--keep`) and the scratch directory are cleaned up.
+ */
+export declare function runMergeSmoke(cfg: MergeSmokeConfig, runtime: SecurePushRuntime, exec: ExecLike, push?: SecurePushLike, deps?: MergeSmokeDeps): Promise<MergeSmokeResult>;
+export declare function execute(_args: CommandOptions, opts: CommandOptions, context: CommandContext): Promise<void>;
+declare const _default: {
+    execute: typeof execute;
+};
+export default _default;
+//# sourceMappingURL=forge.smoke.merge.command.impl.d.ts.map

package/dist/cli/commands/forge.smoke.merge.command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.smoke.merge.command.impl.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/forge.smoke.merge.command.impl.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAa,MAAM,kBAAkB,CAAC;AAgClF,OAAO,EAA6C,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAqC,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAe,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAWlE,OAAO,EAEN,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAON,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EAGxB,MAAM,0BAA0B,CAAC;AAGlC,mFAAmF;AACnF,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAE7E;AAgBD,UAAU,gBAAgB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,cAAc,GAAG,gBAAgB,CAU/E;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAcvE;AAED,6DAA6D;AAC7D,UAAU,gBAAgB;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACxC,KAAK,EAAE,MAAM,EAAE,CAAC;CAChB;AA8BD,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAEvF,0GAA0G;AAC1G,MAAM,WAAW,cAAc;IAC9B,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,SAAS,CAAC,EAAE,SAAS,CAAC;CACtB;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAClC,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE,QAAQ,EACd,IAAI,GAAE,cAA2B,EACjC,IAAI,GAAE,cAAmB,GACvB,OAAO,CAAC,gBAAgB,CAAC,CAqI3B;AAED,wBAAsB,OAAO,CAC5B,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CAoDf;;;;AAED,wBAA2B"}

package/dist/cli/commands/forge.smoke.merge.command.impl.js

@@ -0,0 +1,270 @@
+import { serviceOrigin } from '@vibesdotdev/infra-core/service';
+/**
+ * `vibes forge smoke merge` — the Stage-A `merged:true` gate, as a first-class
+ * runtime CLI command (handoff §3 / §8).
+ *
+ * Flow (each leg a real platform-web round-trip via `sendForgeRequest` — NO
+ * second HTTP/auth implementation; the bearer-JWT exchange is reused):
+ *
+ *   1. provision a fresh repo               POST   /api/repositories
+ *   2. seed local main + feature commits     (real git via the injectable exec seam)
+ *   3. challenge-sign + push each branch     (canonical secure push primitive)
+ *   4. open a PR                            POST   /api/repositories/{id}/issues  (type:'pr')
+ *   5. merge it                             POST   /api/repositories/{id}/pulls/{n}/merge
+ *   6. assert { result: { merged:true, sha } }
+ *   7. delete the test repo                 DELETE /api/repositories/{id}   (unless --keep)
+ *
+ * DRY-RUN by default: with no `--execute`, the planned steps are printed and
+ * NOTHING is mutated (no repo created, no git run). `--execute` runs it for real.
+ *
+ * The git work shells out to the real `git` binary (the merge route runs a REAL
+ * merge on the host against pushed refs, so the refs must actually exist) through
+ * an injectable `ExecLike` boundary, in a scratch directory on the handed
+ * runtime's filesystem. Push authentication is delegated to the challenge-signed
+ * one-operation primitive: no clone URL credential or stored deploy token is
+ * requested, returned, or retained by this smoke.
+ *
+ * A failed leg throws typed (`forge-smoke-merge-failed`, the leg's failure as
+ * its cause); the test repository and the scratch directory are cleaned up
+ * either way, and a failed cleanup is reported on the handed runtime's logger.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError, settle, valueFreeFailure } from '@vibesdotdev/kernel';
+import { settleOperationalSmokeCredentials } from "../lib/transport.js";
+import { runtimeExec } from "../lib/ssh-keygen.js";
+import { commandUI, printInfo, printJson, printLine, printSuccess, printWarning, wantsJson } from "../lib/output.js";
+import { securePush } from "./forge.push.command.impl.js";
+import { cleanupSmokeScratch, deleteSmokeRepository, runtimeSmokeScratch, smokeFailureWithCleanup, smokeGit, smokeLeg } from "./forge.smoke.support.js";
+import { SmokeRepositoryCleanupSchema } from "../../schemas/forge-smoke.js";
+/** Default platform origin the smoke targets when no override / env resolution. */
+export async function defaultSmokeOrigin(runtime) {
+    return serviceOrigin(runtime, 'platform');
+}
+/** A non-blank option value, trimmed; anything else is absent. */
+const OptionalText = z.string().trim().min(1).optional().catch(undefined);
+/** A flag Commander set to `true`; anything else is off. */
+const Flag = z.literal(true).optional().catch(undefined);
+/** The `forge smoke merge` options this command reads, parsed at the CLI boundary. */
+const MergeSmokeOptionsSchema = z.object({
+    name: OptionalText,
+    origin: OptionalText,
+    visibility: z.enum(['private', 'public']).optional().catch(undefined),
+    keep: Flag,
+    execute: Flag
+});
+/**
+ * Translate parsed CLI flags into a normalized smoke config. PURE + directly
+ * unit-testable (mirrors the `buildCreateBody` convention).
+ */
+export function buildMergeSmokeConfig(rawOpts) {
+    const opts = MergeSmokeOptionsSchema.parse(rawOpts);
+    return {
+        repoName: opts.name ?? `smoke-merge-${Date.now()}`,
+        strategy: 'merge',
+        visibility: opts.visibility ?? 'private',
+        origin: opts.origin?.replace(/\/$/, ''),
+        keep: opts.keep === true,
+        execute: opts.execute === true
+    };
+}
+/**
+ * The ordered, human-readable steps the smoke will perform. PURE — used both for
+ * the dry-run plan and for progress narration, so the two can never drift.
+ */
+export function describeMergeSmokeSteps(cfg) {
+    const target = cfg.origin ?? '(resolved platform origin)';
+    return [
+        `1. POST ${target}/api/repositories — create ${cfg.visibility} repo "${cfg.repoName}" (defaultBranch=main)`,
+        `2. PATCH ${target}/api/repositories/{id} — set requiredChecksPolicy=permissive for the merge-path probe`,
+        `3. git init + commit main, then commit a feature branch "smoke/feature"`,
+        `4. forge push — challenge-sign, push, verify exact SHA, and revoke for main + smoke/feature`,
+        `5. POST ${target}/api/repositories/{id}/issues — open PR (type:'pr', main←smoke/feature)`,
+        `6. POST ${target}/api/repositories/{id}/pulls/1/merge — strategy=${cfg.strategy}`,
+        `7. assert { result: { merged: true, sha } }`,
+        cfg.keep
+            ? `8. (skipped — --keep) leaving repo "${cfg.repoName}" in place`
+            : `8. DELETE ${target}/api/repositories/{id} — clean up the test repo`
+    ];
+}
+/**
+ * Seed a scratch working tree with `main` and a divergent feature branch.
+ * Network mutation is deliberately absent here; both refs are handed to the
+ * canonical secure push primitive by the orchestrator.
+ */
+function printUnreportedCleanupFailures(ui, failures) {
+    for (const failure of failures ?? []) {
+        printWarning(ui, `  cleanup: ${failure.operation} failed and could not be logged; details are in --json output.`);
+    }
+}
+async function seedLocalBranches(exec, scratch, repoName) {
+    const workdir = scratch.path;
+    await smokeGit(exec, workdir, ['init', '-q', '-b', 'main']);
+    await smokeGit(exec, workdir, ['config', 'user.name', 'vibes-forge-smoke']);
+    await smokeGit(exec, workdir, ['config', 'user.email', 'forge-smoke@vibes.dev']);
+    await smokeGit(exec, workdir, ['config', 'commit.gpgsign', 'false']);
+    await scratch.writeFile('README.md', `# ${repoName}\n\nForge merge smoke test.\n`);
+    await smokeGit(exec, workdir, ['add', 'README.md']);
+    await smokeGit(exec, workdir, ['commit', '-q', '-m', 'chore: seed main']);
+    await smokeGit(exec, workdir, ['checkout', '-q', '-b', 'smoke/feature']);
+    await scratch.writeFile('feature.txt', 'smoke feature change\n');
+    await smokeGit(exec, workdir, ['add', 'feature.txt']);
+    await smokeGit(exec, workdir, ['commit', '-q', '-m', 'feat: smoke feature']);
+}
+/**
+ * Orchestrate the full merge smoke. The `exec`, `push` and scratch boundaries
+ * are injected so tests can drive the git legs without a real binary. Returns
+ * the structured result on success; a failed leg throws
+ * `forge-smoke-merge-failed` carrying it, after the test repo (unless
+ * `--keep`) and the scratch directory are cleaned up.
+ */
+export async function runMergeSmoke(cfg, runtime, exec, push = securePush, deps = {}) {
+    const openScratch = deps.openScratch ?? runtimeSmokeScratch(runtime);
+    const fetchImpl = deps.fetchImpl;
+    const steps = describeMergeSmokeSteps(cfg);
+    const result = { ok: false, dryRun: false, repoName: cfg.repoName, steps };
+    const origin = cfg.origin;
+    const cleanup = SmokeRepositoryCleanupSchema.parse({});
+    let scratch;
+    const execution = await settle(async () => {
+        // 1. provision a fresh repo (forces a fresh host Sandbox — the §3 recipe).
+        const created = await smokeLeg(runtime, 'create repository', {
+            method: 'POST',
+            path: '/api/repositories',
+            body: {
+                name: cfg.repoName,
+                provider: 'vibes',
+                visibility: cfg.visibility,
+                defaultBranch: 'main'
+            }
+        }, origin, fetchImpl);
+        const repoId = created.result.id;
+        result.repoId = repoId;
+        await smokeLeg(runtime, 'set repository check policy', {
+            method: 'PATCH',
+            path: `/api/repositories/${encodeURIComponent(repoId)}`,
+            body: { requiredChecksPolicy: 'permissive' }
+        }, origin, fetchImpl);
+        // 2. seed local refs, with no network credentials or remote configured.
+        scratch = await openScratch();
+        await seedLocalBranches(exec, scratch, cfg.repoName);
+        // 3. Each branch is an exact, challenge-signed one-operation push. The
+        // primitive verifies the destination SHA and revokes before returning.
+        await push({ cwd: scratch.path, repo: repoId, origin, refspec: 'main:refs/heads/main', runtime });
+        await push({
+            cwd: scratch.path,
+            repo: repoId,
+            origin,
+            refspec: 'smoke/feature:refs/heads/smoke/feature',
+            runtime
+        });
+        // 4. open the PR (main ← smoke/feature).
+        const pr = await smokeLeg(runtime, 'open pull request', {
+            method: 'POST',
+            path: `/api/repositories/${encodeURIComponent(repoId)}/issues`,
+            body: {
+                type: 'pr',
+                title: 'Smoke: merge feature into main',
+                description: 'Automated forge merge smoke test PR.',
+                pr: { sourceRef: 'smoke/feature', targetRef: 'main', state: 'open' }
+            }
+        }, origin, fetchImpl);
+        const prNumber = pr.result.issueNumber ?? 1;
+        result.prNumber = prNumber;
+        // 5. merge. The server owns its host-side merge operation; smoke clients
+        // never provision a durable write credential for it.
+        const merge = await smokeLeg(runtime, 'merge pull request', {
+            method: 'POST',
+            path: `/api/repositories/${encodeURIComponent(repoId)}/pulls/${prNumber}/merge`,
+            body: { strategy: cfg.strategy }
+        }, origin, fetchImpl);
+        result.merged = merge.result.merged;
+        result.sha = merge.result.sha;
+        // 6. assert.
+        if (!merge.result.merged || !merge.result.sha) {
+            throw new CapabilityError('The merge did not report merged:true with a SHA.', 'CONFLICT', {
+                reason: 'forge-smoke-merge-unconfirmed',
+                retryable: false,
+                details: { merged: merge.result.merged === true }
+            });
+        }
+        result.ok = true;
+        return result;
+    });
+    // Cleanup follows the settled smoke attempt, so both owned resources are
+    // released before a failed attempt reaches its caller.
+    if (result.repoId && !cfg.keep) {
+        await deleteSmokeRepository(runtime, result.repoId, origin, cleanup, fetchImpl);
+        result.deleted = cleanup.deleted;
+    }
+    const scratchFailure = scratch ? await cleanupSmokeScratch(runtime, scratch) : undefined;
+    const cleanupFailures = [
+        ...cleanup.failures.filter((failure) => !failure.reported),
+        ...(scratchFailure && !scratchFailure.reported ? [scratchFailure] : [])
+    ];
+    if (cleanupFailures.length > 0)
+        result.cleanupFailures = cleanupFailures;
+    if (!execution.ok) {
+        const failureFacts = valueFreeFailure(execution.cause);
+        const primaryFailure = new CapabilityError('The Forge merge smoke failed.', execution.cause instanceof CapabilityError ? execution.cause.code : 'INTERNAL', {
+            reason: 'forge-smoke-merge-failed',
+            retryable: false,
+            details: { repoName: cfg.repoName, repoCreated: result.repoId !== undefined, kept: cfg.keep, failureFacts },
+            cause: execution.cause
+        });
+        throw smokeFailureWithCleanup(primaryFailure, cleanupFailures);
+    }
+    return execution.value;
+}
+export async function execute(_args, opts, context) {
+    const ui = commandUI(context);
+    const cfg = buildMergeSmokeConfig(opts);
+    cfg.origin ??= await serviceOrigin(context.runtime, 'platform');
+    const steps = describeMergeSmokeSteps(cfg);
+    // DRY-RUN (default): print the plan, mutate nothing.
+    if (!cfg.execute) {
+        if (wantsJson(opts)) {
+            printJson(ui, {
+                ok: true,
+                dryRun: true,
+                repoName: cfg.repoName,
+                steps
+            });
+            return;
+        }
+        printInfo(ui, 'forge smoke merge — DRY RUN (no mutations). Pass --execute to run for real.');
+        printLine(ui);
+        printLine(ui, `  repo:     ${cfg.repoName}`);
+        printLine(ui, `  visibility: ${cfg.visibility}`);
+        printLine(ui, `  strategy: ${cfg.strategy}`);
+        printLine(ui, `  origin:   ${cfg.origin ?? '(resolved platform origin)'}`);
+        printLine(ui);
+        for (const step of steps)
+            printLine(ui, `  ${step}`);
+        printLine(ui);
+        return;
+    }
+    // EXECUTE. The `--origin` override threads through the shared transport's
+    // `originOverride` seam — there is exactly one HTTP/auth path. A failure
+    // throws typed; the CLI renders it.
+    await settleOperationalSmokeCredentials(context.runtime);
+    if (!wantsJson(opts)) {
+        printInfo(ui, `forge smoke merge — EXECUTING (repo="${cfg.repoName}", visibility=${cfg.visibility}, strategy=${cfg.strategy})`);
+        printLine(ui);
+    }
+    const result = await runMergeSmoke(cfg, context.runtime, runtimeExec(context.runtime));
+    if (wantsJson(opts)) {
+        printJson(ui, result);
+        return;
+    }
+    printSuccess(ui, `  PASS — PR #${result.prNumber} merged: ${result.sha}`);
+    printLine(ui, `  repo: ${result.repoName} (${result.repoId})`);
+    if (cfg.keep)
+        printLine(ui, '  cleanup: kept (--keep)');
+    else if (result.deleted)
+        printLine(ui, '  cleanup: deleted');
+    else
+        printWarning(ui, `  cleanup: delete FAILED for repo "${result.repoName}" [${result.repoId}] — remove manually`);
+    printUnreportedCleanupFailures(ui, result.cleanupFailures);
+}
+export default { execute };
+//# sourceMappingURL=forge.smoke.merge.command.impl.js.map

package/dist/cli/commands/forge.smoke.merge.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.smoke.merge.command.impl.js","sourceRoot":"","sources":["../../../src/cli/commands/forge.smoke.merge.command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAmB,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,iCAAiC,EAAkB,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,WAAW,EAAiB,MAAM,sBAAsB,CAAC;AAElE,OAAO,EACN,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,UAAU,EAIV,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACN,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,QAAQ,EACR,QAAQ,EAKR,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAE5E,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAmB;IAC3D,OAAO,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED,kEAAkE;AAClE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC1E,4DAA4D;AAC5D,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAEzD,sFAAsF;AACtF,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,YAAY;IACpB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACrE,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,IAAI;CACb,CAAC,CAAC;AAWH;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAuB;IAC5D,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO;QACN,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,eAAe,IAAI,CAAC,GAAG,EAAE,EAAE;QAClD,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,SAAS;QACxC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACvC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI;QACxB,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,IAAI;KAC9B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAqB;IAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,4BAA4B,CAAC;IAC1D,OAAO;QACN,WAAW,MAAM,8BAA8B,GAAG,CAAC,UAAU,UAAU,GAAG,CAAC,QAAQ,wBAAwB;QAC3G,YAAY,MAAM,uFAAuF;QACzG,yEAAyE;QACzE,6FAA6F;QAC7F,WAAW,MAAM,yEAAyE;QAC1F,WAAW,MAAM,mDAAmD,GAAG,CAAC,QAAQ,EAAE;QAClF,6CAA6C;QAC7C,GAAG,CAAC,IAAI;YACP,CAAC,CAAC,uCAAuC,GAAG,CAAC,QAAQ,YAAY;YACjE,CAAC,CAAC,aAAa,MAAM,iDAAiD;KACvE,CAAC;AACH,CAAC;AAiBD;;;;GAIG;AACH,SAAS,8BAA8B,CAAC,EAAa,EAAE,QAA2C;IACjG,KAAK,MAAM,OAAO,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;QACtC,YAAY,CAAC,EAAE,EAAE,cAAc,OAAO,CAAC,SAAS,gEAAgE,CAAC,CAAC;IACnH,CAAC;AACF,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAc,EAAE,OAAqB,EAAE,QAAgB;IACvF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAC7B,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACjF,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;IAErE,MAAM,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,QAAQ,+BAA+B,CAAC,CAAC;IACnF,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IACpD,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAE1E,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;IACjE,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;IACtD,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAC9E,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,GAAqB,EACrB,OAA0B,EAC1B,IAAc,EACd,OAAuB,UAAU,EACjC,OAAuB,EAAE;IAEzB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAqB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7F,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,OAAO,GAA2B,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/E,IAAI,OAAiC,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;QACzC,2EAA2E;QAC3E,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC7B,OAAO,EACP,mBAAmB,EACnB;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE;gBACL,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,aAAa,EAAE,MAAM;aACrB;SACD,EACD,MAAM,EACN,SAAS,CACT,CAAC;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QAEvB,MAAM,QAAQ,CACb,OAAO,EACP,6BAA6B,EAC7B;YACC,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,EAAE;YACvD,IAAI,EAAE,EAAE,oBAAoB,EAAE,YAAY,EAAE;SAC5C,EACD,MAAM,EACN,SAAS,CACT,CAAC;QAEF,wEAAwE;QACxE,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QAC9B,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAErD,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,CAAC,CAAC;QAClG,MAAM,IAAI,CAAC;YACV,GAAG,EAAE,OAAO,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM;YACZ,MAAM;YACN,OAAO,EAAE,wCAAwC;YACjD,OAAO;SACP,CAAC,CAAC;QAEH,yCAAyC;QACzC,MAAM,EAAE,GAAG,MAAM,QAAQ,CACxB,OAAO,EACP,mBAAmB,EACnB;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,SAAS;YAC9D,IAAI,EAAE;gBACL,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,gCAAgC;gBACvC,WAAW,EAAE,sCAAsC;gBACnD,EAAE,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;aACpE;SACD,EACD,MAAM,EACN,SAAS,CACT,CAAC;QACF,MAAM,QAAQ,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAE3B,yEAAyE;QACzE,qDAAqD;QACrD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC3B,OAAO,EACP,oBAAoB,EACpB;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,UAAU,QAAQ,QAAQ;YAC/E,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;SAChC,EACD,MAAM,EACN,SAAS,CACT,CAAC;QACF,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;QAE9B,aAAa;QACb,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAC/C,MAAM,IAAI,eAAe,CAAC,kDAAkD,EAAE,UAAU,EAAE;gBACzF,MAAM,EAAE,+BAA+B;gBACvC,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE;aACjD,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,OAAO,MAAM,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,uDAAuD;IACvD,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAChF,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAClC,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,MAAM,eAAe,GAAG;QACvB,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC1D,GAAG,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;IACF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,eAAe,GAAG,eAAe,CAAC;IAEzE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,YAAY,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,cAAc,GAAG,IAAI,eAAe,CACzC,+BAA+B,EAC/B,SAAS,CAAC,KAAK,YAAY,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAC9E;YACC,MAAM,EAAE,0BAA0B;YAClC,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE;YAC3G,KAAK,EAAE,SAAS,CAAC,KAAK;SACtB,CACD,CAAC;QACF,MAAM,uBAAuB,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC,KAAK,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC5B,KAAqB,EACrB,IAAoB,EACpB,OAAuB;IAEvB,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACxC,GAAG,CAAC,MAAM,KAAK,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAE3C,qDAAqD;IACrD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,EAAE,EAAE;gBACb,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK;aACsB,CAAC,CAAC;YAC9B,OAAO;QACR,CAAC;QACD,SAAS,CAAC,EAAE,EAAE,6EAA6E,CAAC,CAAC;QAC7F,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,SAAS,CAAC,EAAE,EAAE,eAAe,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,SAAS,CAAC,EAAE,EAAE,iBAAiB,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACjD,SAAS,CAAC,EAAE,EAAE,eAAe,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,SAAS,CAAC,EAAE,EAAE,eAAe,GAAG,CAAC,MAAM,IAAI,4BAA4B,EAAE,CAAC,CAAC;QAC3E,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,SAAS,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACrD,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,OAAO;IACR,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,oCAAoC;IACpC,MAAM,iCAAiC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,SAAS,CACR,EAAE,EACF,wCAAwC,GAAG,CAAC,QAAQ,iBAAiB,GAAG,CAAC,UAAU,cAAc,GAAG,CAAC,QAAQ,GAAG,CAChH,CAAC;QACF,SAAS,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAEvF,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACtB,OAAO;IACR,CAAC;IACD,YAAY,CAAC,EAAE,EAAE,gBAAgB,MAAM,CAAC,QAAQ,YAAY,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1E,SAAS,CAAC,EAAE,EAAE,WAAW,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/D,IAAI,GAAG,CAAC,IAAI;QAAE,SAAS,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAC;SACnD,IAAI,MAAM,CAAC,OAAO;QAAE,SAAS,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;;QACxD,YAAY,CAAC,EAAE,EAAE,sCAAsC,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,MAAM,qBAAqB,CAAC,CAAC;IACrH,8BAA8B,CAAC,EAAE,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;AAC5D,CAAC;AAED,eAAe,EAAE,OAAO,EAAE,CAAC"}

package/dist/cli/commands/forge.smoke.registry.command.descriptor.d.ts

@@ -0,0 +1,76 @@
+/**
+ * `vibes forge smoke registry` — the registry publish→install round-trip gate
+ * (handoff §8). Writes a temp scoped `.npmrc` with env-var interpolation (no
+ * token literal on disk), `npm publish`es a scratch `@<scope>/smoke-<ts>@0.0.<ts>`,
+ * installs it in a clean dir, and asserts the installed version matches.
+ *
+ * DRY-RUN by default (prints the plan, publishes nothing); `--execute` runs it
+ * for real. The publish token is MINTED for the acting owner via
+ * `POST /api/registry/tokens`; pass `--token-key <KEY>` to resolve a pre-stored
+ * token from the vibes secrets store instead.
+ *
+ * Secrets leverage contract: the token value NEVER appears in argv, on disk, in
+ * env output, or in transcripts — it is injected into the npm subprocess env only
+ * and all output is piped through a streaming redactor.
+ */
+export declare const smokeRegistryCommandDescriptor: {
+    readonly kind: "cli/command";
+    readonly id: "forge.smoke.registry";
+    readonly name: "registry";
+    readonly description: "Smoke-test the registry publish/install round-trip (version round-trips)";
+    readonly group: "forge.smoke";
+    readonly options: [{
+        readonly flags: "--json";
+        readonly description: "Emit machine-readable JSON";
+    }, {
+        readonly flags: "--format <format>";
+        readonly description: "Output format (text or json)";
+    }, {
+        readonly flags: "--execute";
+        readonly description: "Actually run the smoke test (default: dry-run plan only)";
+    }, {
+        readonly flags: "--cleanup-package <name>";
+        readonly description: "Delete one orphaned scoped smoke package with an ephemeral minted token";
+    }, {
+        readonly flags: "--keep";
+        readonly description: "Keep the scratch package in the registry after a successful publish/install";
+    }, {
+        readonly flags: "--npm-bin <path>";
+        readonly description: "npm-compatible binary to use for publish/install (default: npm)";
+    }, {
+        readonly flags: "--scope <name>";
+        readonly description: "npm @scope to publish under (default: vibes-smoke)";
+    }, {
+        readonly flags: "--token-key <key>";
+        readonly description: "Secrets-store key name to resolve the publish token from (else mint via platform API)";
+    }, {
+        readonly flags: "--origin <url>";
+        readonly description: "Registry target (default: declared registry service); credentials keep the host service environment";
+    }, {
+        readonly flags: "--platform-origin <url>";
+        readonly description: "Platform origin used to mint a registry token (default: resolved env)";
+    }];
+    readonly surfaces: ["cli"];
+    readonly hardware: readonly ["consumer"];
+    readonly enabled: true;
+    readonly order: 20;
+    readonly examples: [{
+        readonly command: "vibes forge smoke registry";
+        readonly description: "Print the planned registry round-trip steps without publishing";
+        readonly expectExit: 0;
+    }, {
+        readonly command: "vibes forge smoke registry --execute";
+        readonly description: "Run the full publish → install → delete round-trip (token minted via platform)";
+        readonly expectExit: 0;
+    }, {
+        readonly command: "vibes forge smoke registry --execute --token-key VIBES_REGISTRY_TOKEN";
+        readonly description: "Run the round-trip using a token from the secrets store";
+        readonly expectExit: 0;
+    }, {
+        readonly command: "vibes forge smoke registry --cleanup-package @owner/smoke-orphan --execute";
+        readonly description: "Delete and verify absence of one orphaned smoke package, then revoke the minted token";
+        readonly expectExit: 0;
+    }];
+};
+export default smokeRegistryCommandDescriptor;
+//# sourceMappingURL=forge.smoke.registry.command.descriptor.d.ts.map

package/dist/cli/commands/forge.smoke.registry.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.smoke.registry.command.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/forge.smoke.registry.command.descriptor.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsDzC,CAAC;AAEH,eAAe,8BAA8B,CAAC"}

package/dist/cli/commands/forge.smoke.registry.command.descriptor.js

@@ -0,0 +1,72 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+/**
+ * `vibes forge smoke registry` — the registry publish→install round-trip gate
+ * (handoff §8). Writes a temp scoped `.npmrc` with env-var interpolation (no
+ * token literal on disk), `npm publish`es a scratch `@<scope>/smoke-<ts>@0.0.<ts>`,
+ * installs it in a clean dir, and asserts the installed version matches.
+ *
+ * DRY-RUN by default (prints the plan, publishes nothing); `--execute` runs it
+ * for real. The publish token is MINTED for the acting owner via
+ * `POST /api/registry/tokens`; pass `--token-key <KEY>` to resolve a pre-stored
+ * token from the vibes secrets store instead.
+ *
+ * Secrets leverage contract: the token value NEVER appears in argv, on disk, in
+ * env output, or in transcripts — it is injected into the npm subprocess env only
+ * and all output is piped through a streaming redactor.
+ */
+export const smokeRegistryCommandDescriptor = createRuntimeAsset({
+    kind: 'cli/command',
+    id: 'forge.smoke.registry',
+    name: 'registry',
+    description: 'Smoke-test the registry publish/install round-trip (version round-trips)',
+    group: 'forge.smoke',
+    options: [
+        { flags: '--json', description: 'Emit machine-readable JSON' },
+        { flags: '--format <format>', description: 'Output format (text or json)' },
+        { flags: '--execute', description: 'Actually run the smoke test (default: dry-run plan only)' },
+        {
+            flags: '--cleanup-package <name>',
+            description: 'Delete one orphaned scoped smoke package with an ephemeral minted token'
+        },
+        {
+            flags: '--keep',
+            description: 'Keep the scratch package in the registry after a successful publish/install'
+        },
+        {
+            flags: '--npm-bin <path>',
+            description: 'npm-compatible binary to use for publish/install (default: npm)'
+        },
+        { flags: '--scope <name>', description: 'npm @scope to publish under (default: vibes-smoke)' },
+        { flags: '--token-key <key>', description: 'Secrets-store key name to resolve the publish token from (else mint via platform API)' },
+        { flags: '--origin <url>', description: 'Registry target (default: declared registry service); credentials keep the host service environment' },
+        { flags: '--platform-origin <url>', description: 'Platform origin used to mint a registry token (default: resolved env)' }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true,
+    order: 20,
+    examples: [
+        {
+            command: 'vibes forge smoke registry',
+            description: 'Print the planned registry round-trip steps without publishing',
+            expectExit: 0
+        },
+        {
+            command: 'vibes forge smoke registry --execute',
+            description: 'Run the full publish → install → delete round-trip (token minted via platform)',
+            expectExit: 0
+        },
+        {
+            command: 'vibes forge smoke registry --execute --token-key VIBES_REGISTRY_TOKEN',
+            description: 'Run the round-trip using a token from the secrets store',
+            expectExit: 0
+        },
+        {
+            command: 'vibes forge smoke registry --cleanup-package @owner/smoke-orphan --execute',
+            description: 'Delete and verify absence of one orphaned smoke package, then revoke the minted token',
+            expectExit: 0
+        }
+    ]
+});
+export default smokeRegistryCommandDescriptor;
+//# sourceMappingURL=forge.smoke.registry.command.descriptor.js.map

package/dist/cli/commands/forge.smoke.registry.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge.smoke.registry.command.descriptor.js","sourceRoot":"","sources":["../../../src/cli/commands/forge.smoke.registry.command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,kBAAkB,CAAC;IAChE,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,sBAAsB;IAC1B,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,0EAA0E;IACvF,KAAK,EAAE,aAAa;IACpB,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,4BAA4B,EAAE;QAC9D,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,8BAA8B,EAAE;QAC3E,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,0DAA0D,EAAE;QAC/F;YACC,KAAK,EAAE,0BAA0B;YACjC,WAAW,EAAE,yEAAyE;SACtF;QACD;YACC,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,6EAA6E;SAC1F;QACD;YACC,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,iEAAiE;SAC9E;QACD,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,oDAAoD,EAAE;QAC9F,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,uFAAuF,EAAE;QACpI,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,qGAAqG,EAAE;QAC/I,EAAE,KAAK,EAAE,yBAAyB,EAAE,WAAW,EAAE,uEAAuE,EAAE;KAC1H;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE;QACT;YACC,OAAO,EAAE,4BAA4B;YACrC,WAAW,EAAE,gEAAgE;YAC7E,UAAU,EAAE,CAAC;SACb;QACD;YACC,OAAO,EAAE,sCAAsC;YAC/C,WAAW,EAAE,gFAAgF;YAC7F,UAAU,EAAE,CAAC;SACb;QACD;YACC,OAAO,EAAE,uEAAuE;YAChF,WAAW,EAAE,yDAAyD;YACtE,UAAU,EAAE,CAAC;SACb;QACD;YACC,OAAO,EAAE,4EAA4E;YACrF,WAAW,EACV,uFAAuF;YACxF,UAAU,EAAE,CAAC;SACb;KACD;CACD,CAAC,CAAC;AAEH,eAAe,8BAA8B,CAAC"}