@vibesdotdev/forge 0.0.0-stage → 1.0.0-rc.4

package/dist/schemas/actions.js

@@ -0,0 +1,389 @@
+/**
+ * `.forge/actions.yml` — the repo-scoped forge-actions pipeline DSL.
+ *
+ * A repo declares jobs (test / deploy / nightly) that run in response to forge
+ * events: a `push` (matched against a `repo.pushed` event), a `pr` (open/update,
+ * whose result becomes the gating status-check), or a `schedule` (cron, wired to
+ * the scheduled-tasks layer — deferred to a later layer, parsed here so the DSL
+ * is stable).
+ *
+ * The schema is Zod-validated and the YAML is parsed by `parseActionsYml`. A
+ * parse / validation failure is returned as a structured `{ ok:false, error }`
+ * (NEVER thrown) so the platform ingest route can surface it as a single failed
+ * `forge/config` status-check instead of 500ing the push-event ingest.
+ *
+ * Pure + dependency-light (only `yaml` + `zod`) so the parser + the
+ * trigger-matching / ref-guard helpers are unit-testable without any worker /
+ * session / DB context.
+ */
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { EnvironmentTierSchema } from '@vibesdotdev/kernel';
+import { parse as parseYaml } from 'yaml';
+import * as z from 'zod/v4';
+import { CiPublishTargetIdSchema } from "./ci-publish-target.js";
+import { SafePackageRootSchema } from "./package-root.js";
+/** A `run:` step — a shell command executed in a code-session CI runner. */
+export const RunStepSchema = z.object({
+    run: z.string().min(1)
+});
+/**
+ * A `deploy:` step — shells `vibes infra deploy run <repositoryRelativeDir>` inside the
+ * code-session (infra-deploy is CLI-only / not workerd-safe, so it must run in
+ * the session host, never be imported into a Worker). Split repositories deploy
+ * their root with `.`; a nested path is only for a deployable genuinely owned by
+ * the same checked-out repository. The rule is `SafePackageRootSchema`, so a
+ * deploy directory cannot be an option either.
+ */
+export const DeployTargetSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .max(240)
+    .pipe(SafePackageRootSchema);
+export const DeployStepSchema = z.object({
+    deploy: DeployTargetSchema,
+    environment: z.string().optional()
+});
+/**
+ * A `review:` step — requests the repository's independent exact-head PR review
+ * after the job's `needs`. The Forge control plane runs it (a job holds only
+ * review steps), never a runner shell. `review` names the reviewer profile the
+ * check reports; the repository's review automation chooses the reviewer.
+ */
+export const ReviewStepSchema = z.object({
+    review: z.string().min(1),
+    capabilities: z.array(z.enum(['code', 'visual'])).max(2).optional()
+});
+/**
+ * The release contract a `publish:` step may ask the publish CLI for.
+ *
+ * One owner for the value and for the argument the compiler passes: a version
+ * this compiler cannot lower refuses at validation instead of reaching
+ * `vibes registry publish --release-contract-version 1`, which publishes under a
+ * contract the pipeline never declared.
+ */
+export const FORGE_PUBLISH_RELEASE_CONTRACT_VERSION = 2;
+export const ForgePublishReleaseContractVersionSchema = z.literal(FORGE_PUBLISH_RELEASE_CONTRACT_VERSION);
+/**
+ * A repository-relative package root a publish step may shell. One definition,
+ * shared with a publish target descriptor's `defaultPaths`
+ * (`../ci/publish-targets.ts`), so an authored path and a descriptor default are
+ * held to the same rule.
+ */
+export const PublishPackageRootSchema = SafePackageRootSchema;
+/**
+ * A `publish:` step — shells the `argv` its `ci/publish-target` descriptor
+ * declares (`vibes registry publish` / `vibes infra npm publish` built in) on an
+ * enrolled fleet host that already has the CLI.
+ */
+export const PublishStepSchema = z.object({
+    // Open target id resolved through the `ci/publish-target` kind at compile
+    // time; the built-in descriptors are `registry` and `npm`.
+    publish: CiPublishTargetIdSchema,
+    /**
+     * Complete package roots in the checked-out repository; omission means its
+     * root. `SafePackageRootSchema` is the one rule, shared with a publish target
+     * descriptor's `defaultPaths`, so an option-like root (`--dry-run`) is refused
+     * here rather than reaching the publish CLI.
+     */
+    paths: z.array(PublishPackageRootSchema).min(1).optional(),
+    /** Only the release contract this compiler knows how to request. */
+    releaseContractVersion: ForgePublishReleaseContractVersionSchema.optional()
+});
+/**
+ * A `runbook:` step — runs a vibes runbook (`vibes dev runbooks run <id>`) in the
+ * checkout, e.g. `system:check-execute` with `{ trigger: 'ci' }` to run every
+ * unit's declared CI checks. The CLI is bootstrapped onto PATH like the other
+ * vibes-backed steps.
+ */
+export const RunbookStepSchema = z.object({
+    runbook: z.string().min(1),
+    input: z.record(z.string(), JsonValueSchema).optional()
+});
+export const StepSchema = z.union([
+    RunStepSchema,
+    DeployStepSchema,
+    ReviewStepSchema,
+    PublishStepSchema,
+    RunbookStepSchema
+]);
+/** A simple (`push` | `pr`) trigger, or a `{ schedule: <cron> }` trigger. */
+export const ScheduleTriggerSchema = z.object({ schedule: z.string().min(1) });
+export const TriggerSchema = z.union([z.enum(['push', 'pr']), ScheduleTriggerSchema]);
+/**
+ * The runner OS axis. `linux` is the only OS with a live (CF Sandbox) backend
+ * today; `macos`/`windows` are accepted in the DSL so a repo can declare intent,
+ * but a job requesting an unavailable runner fails its check. Silent skipping
+ * would turn missing infrastructure into false-green CI.
+ */
+export const RunsOnOsSchema = z.enum(['linux', 'macos', 'windows']);
+/**
+ * The runner CPU-arch axis. `x64` is the only arch with a live (CF Sandbox,
+ * linux/amd64) backend today; `arm64` is accepted for forward-compat and is
+ * subject to the same fail-closed availability check. Optional — undefined means
+ * "the runner's native arch" (no arch constraint).
+ */
+export const RunsOnArchSchema = z.enum(['x64', 'arm64']);
+/** Familiar default for jobs that do not need a specialized runner pool. */
+export const DEFAULT_FORGE_ACTIONS_RUNNER_PROFILE = 'standard';
+/**
+ * Runner profile for jobs that must run on an enrolled fleet machine owned by
+ * the repository owner rather than a disposable sandbox. A sandbox carries no
+ * vibes CLI and no warm caches, so a deploy cannot finish inside its deadline.
+ */
+export const FORGE_ACTIONS_FLEET_RUNNER_PROFILE = 'fleet';
+/**
+ * Provider-neutral runner profile selected by a repository.
+ *
+ * Profiles are stable product labels (for example `high-cpu`), not provider
+ * instance types. The Forge scheduler resolves the label to an available pool
+ * and fails visibly when no pool can satisfy it.
+ */
+export const ForgeRunnerProfileIdSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .max(64)
+    .regex(/^[a-z0-9][a-z0-9._-]*$/, 'expected a lowercase runner profile id (letters, numbers, dot, underscore, or hyphen)');
+export const ForgeActionsRunnerProfileSchema = ForgeRunnerProfileIdSchema.default(DEFAULT_FORGE_ACTIONS_RUNNER_PROFILE);
+/** Provider-neutral Forge Actions default for jobs without an authored deadline. */
+export const DEFAULT_FORGE_ACTIONS_JOB_TIMEOUT_MINUTES = 30;
+/** Public ceiling keeps absolute deadlines representable and operationally reviewable. */
+export const MAX_FORGE_ACTIONS_JOB_TIMEOUT_MINUTES = 7 * 24 * 60;
+/**
+ * Absolute job wall-clock deadline in minutes. Seven days supports large native
+ * builds without allowing an unrepresentable or effectively immortal job.
+ * Product plans and runner pools may enforce smaller limits at scheduling time.
+ */
+export const ForgeActionsJobTimeoutMinutesSchema = z
+    .number()
+    .int()
+    .positive()
+    .max(MAX_FORGE_ACTIONS_JOB_TIMEOUT_MINUTES)
+    .default(DEFAULT_FORGE_ACTIONS_JOB_TIMEOUT_MINUTES);
+export const ArtifactPathSchema = z
+    .string()
+    .min(1)
+    .max(240)
+    .refine((path) => !path.startsWith('/') &&
+    path !== '.' &&
+    !path.split('/').includes('..') &&
+    path !== '.git' &&
+    !path.startsWith('.git/') &&
+    /^[A-Za-z0-9._/-]+$/.test(path), 'expected a safe repository-relative file or directory path');
+/**
+ * Opaque, lowercase, namespace-safe cache task id. A declaration that omits
+ * `namespace` defaults it to the task id, so the id must itself satisfy the
+ * namespace rule (the canonical policy accepts a wider opaque id; the
+ * authoring gate is deliberately narrower).
+ */
+export const ForgeActionsCacheTaskIdSchema = z
+    .string()
+    .min(1)
+    .max(128)
+    .regex(/^[a-z0-9][a-z0-9._-]*$/, 'expected a lowercase cache task id (letters, numbers, dot, underscore, or hyphen)');
+/**
+ * Cache namespace. Mirrors the canonical policy namespace rule
+ * (`CiCacheNamespaceSchema`); the policy re-validates every value the compiler
+ * derives, so a value accepted here that the policy rejects fails compile
+ * rather than relaxing access.
+ */
+export const ForgeActionsCacheNamespaceSchema = z
+    .string()
+    .min(1)
+    .max(128)
+    .regex(/^[a-z0-9][a-z0-9._/-]*$/, 'expected a normalized cache namespace')
+    .refine((value) => !value.split('/').some((segment) => segment === '' || segment === '.' || segment === '..'), 'expected a normalized cache namespace');
+/** Sensitivity an author may declare; omit it and the policy decides disabled. */
+export const ForgeActionsCacheSensitivitySchema = z.enum(['public-reproducible', 'trusted-only']);
+/**
+ * Author-owned cache declaration for one job.
+ *
+ * The author names a cache task id and, optionally, a namespace, a
+ * sensitivity, and repository-relative key files. Key file CONTENT, not
+ * their names, participates in the task hash (`compileJobCaches`), so
+ * editing a lockfile or manifest invalidates the cache; touching an
+ * identical file does not.
+ *
+ * An omitted `sensitivity` is a missing classification, not a grant: the
+ * canonical policy derivation treats it as `disabled` and no cache plan is
+ * emitted. `disabled` is deliberately not authorable — it is the fail-closed
+ * default, never a declaration. Credential references, secret bindings, and
+ * privileged execution are policy FACTS derived from the job/run by
+ * `compileJobCaches`, so the declaration is strict: an author who tries to
+ * write them here fails validation instead of quietly widening their own
+ * trust. `trusted-only` may only narrow; `public-reproducible` on a job with
+ * any sensitive policy fact is rejected with `CiCachePlanError`.
+ */
+export const ForgeActionsJobCacheSchema = z
+    .object({
+    /** Opaque cache task identity; stable across workflow renames. */
+    taskId: ForgeActionsCacheTaskIdSchema,
+    /** Namespace within the repository; defaults to the task id. */
+    namespace: ForgeActionsCacheNamespaceSchema.optional(),
+    /** Declared sensitivity. Absent = missing classification = disabled. */
+    sensitivity: ForgeActionsCacheSensitivitySchema.optional(),
+    /** Repository-relative files whose content digests join the task hash. */
+    keyFiles: z.array(ArtifactPathSchema).max(32).optional()
+})
+    .strict()
+    .refine((cache) => new Set(cache.keyFiles ?? []).size === (cache.keyFiles ?? []).length, 'cache key files must be unique');
+export const JobSchema = z.object({
+    /** When this job runs (at least one trigger). */
+    on: z.array(TriggerSchema).min(1),
+    /** Optional ref guard, e.g. `ref == 'refs/heads/main'`. Non-matching → skip. */
+    if: z.string().optional(),
+    /**
+     * Optional changed-path filter for this job's `push` / `pr` triggers.
+     *
+     * An omitted or empty `paths` means no path filter — the job runs as it does
+     * today. A present list filters the job to the event's changed files: the
+     * job runs when at least one changed file matches at least one pattern.
+     * Patterns are repository-root-relative globs evaluated by `jobPathsMatch`
+     * (`./match.ts`): `*` matches within one path segment, `**` spans segments,
+     * `?` matches one character, and a trailing `/` is a directory prefix
+     * (`dir/` == `dir/**`). When the changed-file list is unavailable the job
+     * still runs (fail-open), so a missing diff cannot silently skip declared CI.
+     */
+    paths: z.array(z.string().min(1)).optional(),
+    /** Optional intra-pipeline ordering (job ids this one depends on). */
+    needs: z.array(z.string()).optional(),
+    /** Secret names requested by this job. */
+    secrets: z.array(z.string().min(1).max(128).regex(/^[A-Za-z_][A-Za-z0-9_]*$/)).max(32)
+        .refine((names) => new Set(names).size === names.length, 'secret names must be unique').optional(),
+    /** Target credential tier for steps in this job unless a step declares its own. */
+    environment: EnvironmentTierSchema.optional(),
+    /**
+     * Runner OS selection. Defaults to `linux`, so existing pipelines are
+     * unchanged. `macos` is real now — an enrolled fleet host is a physical
+     * machine — but only under `runnerProfile: fleet`; the isolated sandbox is
+     * linux/x64 and says so. A selection no declared executor can serve as a
+     * whole still fails closed, naming what each executor does offer.
+     */
+    runsOn: RunsOnOsSchema.default('linux'),
+    /**
+     * Optional runner CPU-arch selection. Undefined = the runner's native arch.
+     * `arm64` comes with the fleet profile, for the same reason as `macos`.
+     */
+    arch: RunsOnArchSchema.optional(),
+    /** Provider-neutral capacity profile resolved to a managed or self-hosted runner pool. */
+    runnerProfile: ForgeActionsRunnerProfileSchema,
+    /** Absolute wall-clock deadline for the whole job, not an individual step timeout. */
+    timeoutMinutes: ForgeActionsJobTimeoutMinutesSchema,
+    steps: z.array(StepSchema).min(1),
+    /**
+     * Whether this job's check gates a merge. `false` reports advisory status:
+     * it is not a required context and never blocks (a branch policy can still
+     * require it by name).
+     */
+    required: z.boolean().default(true),
+    /** Exact repository-relative files/directories packaged after success. */
+    artifacts: z.array(ArtifactPathSchema).max(64).optional(),
+    /**
+     * Optional job-level cache declaration. Absent means no cache plan and no
+     * error; see `ForgeActionsJobCacheSchema` for the authoring semantics and
+     * `compileJobCaches` for policy derivation and task hashing.
+     */
+    cache: ForgeActionsJobCacheSchema.optional()
+}).superRefine((job, ctx) => {
+    // A review runs on the control plane and a run step in a runner: one job is one or the other.
+    const reviews = job.steps.filter((step) => 'review' in step).length;
+    if (reviews > 0 && reviews < job.steps.length) {
+        ctx.addIssue({ code: 'custom', path: ['steps'], message: 'a job with a review step holds only review steps (it runs on the Forge control plane)' });
+    }
+});
+/**
+ * The canonical product-profile id list. `CiProductProfileIdSchema`
+ * (`ci/schemas.ts`) is the same object under the CI-facing name; both exported
+ * names share this one definition and its inferred type.
+ */
+export const ForgeCiProductProfileIdSchema = z.enum([
+    'framework',
+    'web',
+    'desktop',
+    'api',
+    'org',
+    'agent'
+]);
+export const ActionsSchema = z
+    .object({
+    version: z.literal(1),
+    /**
+     * Product SOP. Fills omitted jobs from the Forge-provided `ci/profile`
+     * catalog. Authored jobs with the same id replace the profile job.
+     */
+    profile: ForgeCiProductProfileIdSchema.optional(),
+    jobs: z.record(z.string(), JobSchema).optional()
+})
+    .superRefine((value, ctx) => {
+    if (!value.profile && (!value.jobs || Object.keys(value.jobs).length === 0)) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'expected a product profile or at least one job'
+        });
+    }
+});
+/** Discriminators for authored step kinds. */
+export function isRunStep(step) {
+    return 'run' in step;
+}
+export function isDeployStep(step) {
+    return 'deploy' in step;
+}
+export function isReviewStep(step) {
+    return 'review' in step;
+}
+export function isPublishStep(step) {
+    return 'publish' in step;
+}
+export function isRunbookStep(step) {
+    return 'runbook' in step;
+}
+/**
+ * The executor a review job is planned on: the Forge control plane, which
+ * claims the attempt, requests the independent PR review and completes it.
+ * A review job never reaches a runner.
+ */
+export const FORGE_CONTROL_PLANE_REVIEW_EXECUTOR_ID = 'forge-control-plane:review';
+/** A job made only of review steps: it runs on the control plane. */
+export function isReviewJob(job) {
+    return job.steps.length > 0 && job.steps.every(isReviewStep);
+}
+/** A schedule trigger discriminator. */
+export function isScheduleTrigger(t) {
+    return typeof t === 'object' && t !== null && 'schedule' in t;
+}
+/**
+ * Parse + validate a `.forge/actions.yml` document. Never throws: a YAML syntax
+ * error or a schema-validation failure is returned as `{ ok:false, error }` with
+ * a single human-readable message (so the engine can write it to a `forge/config`
+ * status-check). An empty / whitespace-only document is treated as a config
+ * error too (a present-but-empty pipeline file is almost always a mistake).
+ */
+export function parseActionsYml(source) {
+    if (!source || !source.trim()) {
+        return { ok: false, error: '.forge/actions.yml is empty' };
+    }
+    let raw;
+    try {
+        raw = parseYaml(source);
+    }
+    catch (err) {
+        return {
+            ok: false,
+            error: `.forge/actions.yml is not valid YAML: ${err instanceof Error ? err.message : String(err)}`,
+            cause: err
+        };
+    }
+    const parsed = ActionsSchema.safeParse(raw);
+    if (!parsed.success) {
+        // Flatten the first few Zod issues into one line for the status-check.
+        const issues = parsed.error.issues
+            .slice(0, 5)
+            .map((i) => `${i.path.join('.') || '<root>'}: ${i.message}`)
+            .join('; ');
+        return { ok: false, error: `.forge/actions.yml failed validation: ${issues}` };
+    }
+    return { ok: true, actions: parsed.data };
+}
+//# sourceMappingURL=actions.js.map

package/dist/schemas/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/schemas/actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KACjC,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAE9B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,kBAAkB;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnE,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC;AACxD,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,OAAO,CAChE,sCAAsC,CACtC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,0EAA0E;IAC1E,2DAA2D;IAC3D,OAAO,EAAE,uBAAuB;IAChC;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,oEAAoE;IACpE,sBAAsB,EAAE,wCAAwC,CAAC,QAAQ,EAAE;CAC3E,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC;IACjC,aAAa;IACb,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;CACjB,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAGpE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAGzD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,oCAAoC,GAAG,UAAU,CAAC;AAE/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,OAAO,CAAC;AAE1D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACzC,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACL,wBAAwB,EACxB,uFAAuF,CACvF,CAAC;AAGH,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CAAC,OAAO,CAChF,oCAAoC,CACpC,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,yCAAyC,GAAG,EAAE,CAAC;AAC5D,0FAA0F;AAC1F,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;AAEjE;;;;GAIG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KAClD,MAAM,EAAE;KACR,GAAG,EAAE;KACL,QAAQ,EAAE;KACV,GAAG,CAAC,qCAAqC,CAAC;KAC1C,OAAO,CAAC,yCAAyC,CAAC,CAAC;AAErD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KACjC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CACN,CAAC,IAAI,EAAE,EAAE,CACR,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IACrB,IAAI,KAAK,GAAG;IACZ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC/B,IAAI,KAAK,MAAM;IACf,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;IACzB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAChC,4DAA4D,CAC5D,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC5C,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CACL,wBAAwB,EACxB,mFAAmF,CACnF,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC/C,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,yBAAyB,EAAE,uCAAuC,CAAC;KACzE,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACT,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EAC3F,uCAAuC,CACvC,CAAC;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,qBAAqB,EAAE,cAAc,CAAC,CAAC,CAAC;AAElG;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACzC,MAAM,CAAC;IACP,kEAAkE;IAClE,MAAM,EAAE,6BAA6B;IACrC,gEAAgE;IAChE,SAAS,EAAE,gCAAgC,CAAC,QAAQ,EAAE;IACtD,wEAAwE;IACxE,WAAW,EAAE,kCAAkC,CAAC,QAAQ,EAAE;IAC1D,0EAA0E;IAC1E,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,EAC/E,gCAAgC,CAChC,CAAC;AAIH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,iDAAiD;IACjD,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,gFAAgF;IAChF,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB;;;;;;;;;;;OAWG;IACH,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,sEAAsE;IACtE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,0CAA0C;IAC1C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;SACpF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC,QAAQ,EAAE;IACnG,mFAAmF;IACnF,WAAW,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC7C;;;;;;OAMG;IACH,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC;IACvC;;;OAGG;IACH,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjC,0FAA0F;IAC1F,aAAa,EAAE,+BAA+B;IAC9C,sFAAsF;IACtF,cAAc,EAAE,mCAAmC;IACnD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC;;;;OAIG;IACH,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC,0EAA0E;IAC1E,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD;;;;OAIG;IACH,KAAK,EAAE,0BAA0B,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC3B,8FAA8F;IAC9F,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;IACpE,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/C,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,uFAAuF,EAAE,CAAC,CAAC;IACrJ,CAAC;AACF,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,IAAI,CAAC;IACnD,WAAW;IACX,KAAK;IACL,SAAS;IACT,KAAK;IACL,KAAK;IACL,OAAO;CACP,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC5B,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB;;;OAGG;IACH,OAAO,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,gDAAgD;SACzD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC,CAAC;AAiBJ,8CAA8C;AAC9C,MAAM,UAAU,SAAS,CAAC,IAAU;IACnC,OAAO,KAAK,IAAI,IAAI,CAAC;AACtB,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,IAAU;IACtC,OAAO,QAAQ,IAAI,IAAI,CAAC;AACzB,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,IAAU;IACtC,OAAO,QAAQ,IAAI,IAAI,CAAC;AACzB,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,IAAU;IACvC,OAAO,SAAS,IAAI,IAAI,CAAC;AAC1B,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,IAAU;IACvC,OAAO,SAAS,IAAI,IAAI,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,4BAA4B,CAAC;AAEnF,qEAAqE;AACrE,MAAM,UAAU,WAAW,CAAC,GAA+B;IAC1D,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,iBAAiB,CAAC,CAAU;IAC3C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,UAAU,IAAI,CAAC,CAAC;AAC/D,CAAC;AAMD;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACJ,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YAClG,KAAK,EAAE,GAAG;SACV,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,uEAAuE;QACvE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAChC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yCAAyC,MAAM,EAAE,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC"}

package/dist/schemas/ci-publish-target.d.ts

@@ -0,0 +1,38 @@
+import * as z from 'zod/v4';
+import { SafePackageRootSchema } from './package-root.ts';
+/** The open id accepted by a `ci/publish-target` descriptor and an Actions `publish:` step. */
+export declare const CiPublishTargetIdSchema: z.ZodString;
+export type CiPublishTargetId = z.infer<typeof CiPublishTargetIdSchema>;
+/** The kernel descriptor contract for a provider-neutral publish target. */
+export declare const CiPublishTargetDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"ci/publish-target">;
+    target: z.ZodString;
+    argv: z.ZodArray<z.ZodString>;
+    defaultPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type CiPublishTargetDescriptor = z.infer<typeof CiPublishTargetDescriptorSchema>;
+export type CiPublishTargetDescriptorInput = Omit<z.input<typeof CiPublishTargetDescriptorSchema>, 'kind'> & {
+    kind?: 'ci/publish-target';
+};
+export type PublishPackageRoot = z.infer<typeof SafePackageRootSchema>;
+//# sourceMappingURL=ci-publish-target.d.ts.map

package/dist/schemas/ci-publish-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-publish-target.d.ts","sourceRoot":"","sources":["../../src/schemas/ci-publish-target.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,+FAA+F;AAC/F,eAAO,MAAM,uBAAuB,aAQlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,4EAA4E;AAC5E,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;iBAQ1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAChD,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,EAC/C,MAAM,CACN,GAAG;IACH,IAAI,CAAC,EAAE,mBAAmB,CAAC;CAC3B,CAAC;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/schemas/ci-publish-target.js

@@ -0,0 +1,21 @@
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import * as z from 'zod/v4';
+import { SafePackageRootSchema } from "./package-root.js";
+/** The open id accepted by a `ci/publish-target` descriptor and an Actions `publish:` step. */
+export const CiPublishTargetIdSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .max(64)
+    .regex(/^[a-z0-9][a-z0-9._-]*$/, 'expected a lowercase publish target id (letters, numbers, dot, underscore, or hyphen)');
+/** The kernel descriptor contract for a provider-neutral publish target. */
+export const CiPublishTargetDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('ci/publish-target'),
+    /** The `publish:` value this descriptor answers. */
+    target: CiPublishTargetIdSchema,
+    /** Command prefix the step compiles to. */
+    argv: z.array(z.string().min(1)).min(1),
+    /** Package roots to publish when the step declares none. */
+    defaultPaths: z.array(SafePackageRootSchema).min(1).default(['.'])
+});
+//# sourceMappingURL=ci-publish-target.js.map

package/dist/schemas/ci-publish-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-publish-target.js","sourceRoot":"","sources":["../../src/schemas/ci-publish-target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,+FAA+F;AAC/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACtC,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACL,wBAAwB,EACxB,uFAAuF,CACvF,CAAC;AAGH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,+BAA+B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC7E,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,oDAAoD;IACpD,MAAM,EAAE,uBAAuB;IAC/B,2CAA2C;IAC3C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,4DAA4D;IAC5D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;CAClE,CAAC,CAAC"}

package/dist/schemas/citations.d.ts

@@ -0,0 +1,24 @@
+import * as z from 'zod/v4';
+export declare const PullRequestCitationFieldSchema: z.ZodEnum<{
+    description: "description";
+    title: "title";
+}>;
+export declare const PullRequestCitationQuerySchema: z.ZodObject<{
+    repo: z.ZodString;
+    numbers: z.ZodArray<z.ZodNumber>;
+    fields: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        description: "description";
+        title: "title";
+    }>>>;
+}, z.core.$strict>;
+export type PullRequestCitationQuery = z.infer<typeof PullRequestCitationQuerySchema>;
+export declare const PullRequestCitationIdentitySchema: z.ZodObject<{
+    repo: z.ZodString;
+    number: z.ZodNumber;
+    id: z.ZodString;
+    field: z.ZodEnum<{
+        description: "description";
+        title: "title";
+    }>;
+}, z.core.$strict>;
+//# sourceMappingURL=citations.d.ts.map

package/dist/schemas/citations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"citations.d.ts","sourceRoot":"","sources":["../../src/schemas/citations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,8BAA8B;;;EAAmC,CAAC;AAC/E,eAAO,MAAM,8BAA8B;;;;;;;kBAIhC,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,iCAAiC;;;;;;;;kBAKnC,CAAC"}

package/dist/schemas/citations.js

@@ -0,0 +1,15 @@
+import * as z from 'zod/v4';
+import { RepoRefSchema } from "./wire-contracts.js";
+export const PullRequestCitationFieldSchema = z.enum(['title', 'description']);
+export const PullRequestCitationQuerySchema = z.object({
+    repo: RepoRefSchema,
+    numbers: z.array(z.number().int().positive()).min(1),
+    fields: z.array(PullRequestCitationFieldSchema).min(1).default(['description'])
+}).strict();
+export const PullRequestCitationIdentitySchema = z.object({
+    repo: RepoRefSchema,
+    number: z.number().int().positive(),
+    id: z.string().min(1),
+    field: PullRequestCitationFieldSchema
+}).strict();
+//# sourceMappingURL=citations.js.map

package/dist/schemas/citations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"citations.js","sourceRoot":"","sources":["../../src/schemas/citations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;AAC/E,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC;CAC/E,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,IAAI,EAAE,aAAa;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,8BAA8B;CACrC,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/schemas/forge-cli-settings.d.ts

@@ -0,0 +1,31 @@
+import * as z from 'zod/v4';
+/** The environment alias that names each field, documented on the field below. */
+export declare const FORGE_CLI_SETTING_ENV: {
+    readonly fetchTimeoutMs: "VIBES_FORGE_FETCH_TIMEOUT_MS";
+    readonly credentialSettleMs: "VIBES_FORGE_CREDENTIAL_SETTLE_MS";
+    readonly aiReviewPollIntervalMs: "VIBES_FORGE_AI_REVIEW_POLL_INTERVAL_MS";
+    readonly aiReviewPollTimeoutMs: "VIBES_FORGE_AI_REVIEW_POLL_TIMEOUT_MS";
+};
+/** Operational smokes are hidden unless a host declares source mode or opts in with this alias set to `1`. */
+export declare const FORGE_CLI_SMOKE_OPT_IN_ENV = "VIBES_FORGE_ENABLE_SMOKES";
+/** The declared defaults, named once so a reader never carries its own literal. */
+export declare const FORGE_CLI_SETTING_DEFAULTS: {
+    /** One Forge API request, bounded by the runtime lifecycle. */
+    readonly fetchTimeoutMs: 90000;
+    /** How long an opted-in smoke waits before re-reading a credential that may be landing. */
+    readonly credentialSettleMs: 1200;
+    /** Pause between polls of the background AI review. */
+    readonly aiReviewPollIntervalMs: 3000;
+    /** Total window the background AI review is given to land. */
+    readonly aiReviewPollTimeoutMs: 30000;
+};
+export declare const ForgeCliConfigSchema: z.ZodObject<{
+    fetchTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    credentialSettleMs: z.ZodDefault<z.ZodNumber>;
+    aiReviewPollIntervalMs: z.ZodDefault<z.ZodNumber>;
+    aiReviewPollTimeoutMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>;
+export type ForgeCliConfig = z.infer<typeof ForgeCliConfigSchema>;
+/** The fields whose declared default an environment alias may name. */
+export declare const FORGE_CLI_SETTING_IDS: readonly ["fetchTimeoutMs", "credentialSettleMs", "aiReviewPollIntervalMs", "aiReviewPollTimeoutMs"];
+//# sourceMappingURL=forge-cli-settings.d.ts.map

package/dist/schemas/forge-cli-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge-cli-settings.d.ts","sourceRoot":"","sources":["../../src/schemas/forge-cli-settings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,kFAAkF;AAClF,eAAO,MAAM,qBAAqB;;;;;CAKxB,CAAC;AAEX,8GAA8G;AAC9G,eAAO,MAAM,0BAA0B,8BAA8B,CAAC;AAEtE,mFAAmF;AACnF,eAAO,MAAM,0BAA0B;IACtC,+DAA+D;;IAE/D,2FAA2F;;IAE3F,uDAAuD;;IAEvD,8DAA8D;;CAErD,CAAC;AAMX,eAAO,MAAM,oBAAoB;;;;;kBAK/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,sGAKkC,CAAC"}

package/dist/schemas/forge-cli-settings.js

@@ -0,0 +1,38 @@
+import * as z from 'zod/v4';
+/** The environment alias that names each field, documented on the field below. */
+export const FORGE_CLI_SETTING_ENV = {
+    fetchTimeoutMs: 'VIBES_FORGE_FETCH_TIMEOUT_MS',
+    credentialSettleMs: 'VIBES_FORGE_CREDENTIAL_SETTLE_MS',
+    aiReviewPollIntervalMs: 'VIBES_FORGE_AI_REVIEW_POLL_INTERVAL_MS',
+    aiReviewPollTimeoutMs: 'VIBES_FORGE_AI_REVIEW_POLL_TIMEOUT_MS'
+};
+/** Operational smokes are hidden unless a host declares source mode or opts in with this alias set to `1`. */
+export const FORGE_CLI_SMOKE_OPT_IN_ENV = 'VIBES_FORGE_ENABLE_SMOKES';
+/** The declared defaults, named once so a reader never carries its own literal. */
+export const FORGE_CLI_SETTING_DEFAULTS = {
+    /** One Forge API request, bounded by the runtime lifecycle. */
+    fetchTimeoutMs: 90_000,
+    /** How long an opted-in smoke waits before re-reading a credential that may be landing. */
+    credentialSettleMs: 1_200,
+    /** Pause between polls of the background AI review. */
+    aiReviewPollIntervalMs: 3_000,
+    /** Total window the background AI review is given to land. */
+    aiReviewPollTimeoutMs: 30_000
+};
+/** Request deadlines and poll cadence/window must be positive; credential settling may be disabled with zero. */
+const PositiveMillisecondsSchema = z.number().int().positive().max(2_147_483_647);
+const NonNegativeMillisecondsSchema = z.number().int().nonnegative().max(2_147_483_647);
+export const ForgeCliConfigSchema = z.strictObject({
+    fetchTimeoutMs: PositiveMillisecondsSchema.default(FORGE_CLI_SETTING_DEFAULTS.fetchTimeoutMs),
+    credentialSettleMs: NonNegativeMillisecondsSchema.default(FORGE_CLI_SETTING_DEFAULTS.credentialSettleMs),
+    aiReviewPollIntervalMs: PositiveMillisecondsSchema.default(FORGE_CLI_SETTING_DEFAULTS.aiReviewPollIntervalMs),
+    aiReviewPollTimeoutMs: PositiveMillisecondsSchema.default(FORGE_CLI_SETTING_DEFAULTS.aiReviewPollTimeoutMs)
+});
+/** The fields whose declared default an environment alias may name. */
+export const FORGE_CLI_SETTING_IDS = [
+    'fetchTimeoutMs',
+    'credentialSettleMs',
+    'aiReviewPollIntervalMs',
+    'aiReviewPollTimeoutMs'
+];
+//# sourceMappingURL=forge-cli-settings.js.map

package/dist/schemas/forge-cli-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge-cli-settings.js","sourceRoot":"","sources":["../../src/schemas/forge-cli-settings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACpC,cAAc,EAAE,8BAA8B;IAC9C,kBAAkB,EAAE,kCAAkC;IACtD,sBAAsB,EAAE,wCAAwC;IAChE,qBAAqB,EAAE,uCAAuC;CACrD,CAAC;AAEX,8GAA8G;AAC9G,MAAM,CAAC,MAAM,0BAA0B,GAAG,2BAA2B,CAAC;AAEtE,mFAAmF;AACnF,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACzC,+DAA+D;IAC/D,cAAc,EAAE,MAAM;IACtB,2FAA2F;IAC3F,kBAAkB,EAAE,KAAK;IACzB,uDAAuD;IACvD,sBAAsB,EAAE,KAAK;IAC7B,8DAA8D;IAC9D,qBAAqB,EAAE,MAAM;CACpB,CAAC;AAEX,iHAAiH;AACjH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAClF,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAExF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,YAAY,CAAC;IAClD,cAAc,EAAE,0BAA0B,CAAC,OAAO,CAAC,0BAA0B,CAAC,cAAc,CAAC;IAC7F,kBAAkB,EAAE,6BAA6B,CAAC,OAAO,CAAC,0BAA0B,CAAC,kBAAkB,CAAC;IACxG,sBAAsB,EAAE,0BAA0B,CAAC,OAAO,CAAC,0BAA0B,CAAC,sBAAsB,CAAC;IAC7G,qBAAqB,EAAE,0BAA0B,CAAC,OAAO,CAAC,0BAA0B,CAAC,qBAAqB,CAAC;CAC3G,CAAC,CAAC;AAGH,uEAAuE;AACvE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACpC,gBAAgB;IAChB,oBAAoB;IACpB,wBAAwB;IACxB,uBAAuB;CAC4C,CAAC"}