@vibesdotdev/forge 0.0.0-stage → 1.0.0-rc.4

package/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,OAAO,IAAI,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AACxG,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAC3G,OAAO,EAAE,OAAO,IAAI,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,OAAO,IAAI,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,OAAO,IAAI,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,OAAO,IAAI,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAC9F,OAAO,EAAE,OAAO,IAAI,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AAE5F,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACN,gCAAgC,EAChC,2BAA2B,EAC3B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC1B,wBAAwB,EACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EACN,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,MAAM,oBAAoB,CAAC"}

package/dist/tools/index.js

@@ -0,0 +1,44 @@
+/**
+ * @vibesdotdev/forge/tools — barrel export.
+ *
+ * Re-exports the tool descriptors (safe to import anywhere) + the schemas. The
+ * plugin is the registration entry (`@vibesdotdev/forge/tools/plugin`). Impls
+ * stay behind the plugin's lazy loaders and are NOT re-exported here.
+ */
+export { default as forgeListReposTool } from "./tools/forge-list-repos.descriptor.js";
+export { default as forgeReadFileTool } from "./tools/forge-read-file.descriptor.js";
+export { default as forgeIssueListTool } from "./tools/forge-issue-list.descriptor.js";
+export { default as forgeIssueGetTool } from "./tools/forge-issue-get.descriptor.js";
+export { default as forgeIssueUpdateTool } from "./tools/forge-issue-update.descriptor.js";
+export { default as forgeIssueCloseTool } from "./tools/forge-issue-close.descriptor.js";
+export { default as forgeIssueReopenTool } from "./tools/forge-issue-reopen.descriptor.js";
+export { default as forgeIssueCreateTool } from "./tools/forge-issue-create.descriptor.js";
+export { default as forgeIssueCommentTool } from "./tools/forge-issue-comment.descriptor.js";
+export { default as forgeIssueCommentsListTool } from "./tools/forge-issue-comments-list.descriptor.js";
+export { default as forgeIssueSearchTool } from "./tools/forge-issue-search.descriptor.js";
+export { default as forgePrListTool } from "./tools/forge-pr-list.descriptor.js";
+export { default as forgePrGetTool } from "./tools/forge-pr-get.descriptor.js";
+export { default as forgePrUpdateTool } from "./tools/forge-pr-update.descriptor.js";
+export { default as forgePrCloseTool } from "./tools/forge-pr-close.descriptor.js";
+export { default as forgePrReopenTool } from "./tools/forge-pr-reopen.descriptor.js";
+export { default as forgePrSearchTool } from "./tools/forge-pr-search.descriptor.js";
+export { default as forgePrMergeStatusTool } from "./tools/forge-pr-merge-status.descriptor.js";
+export { default as forgePrFilesTool } from "./tools/forge-pr-files.descriptor.js";
+export { default as forgePrMergeTool } from "./tools/forge-pr-merge.descriptor.js";
+export { default as forgePrCreateTool } from "./tools/forge-pr-create.descriptor.js";
+export { default as forgePrCreateFromBranchTool } from "./tools/forge-pr-create-from-branch.descriptor.js";
+export { default as forgePrReviewCommentTool } from "./tools/forge-pr-review-comment.descriptor.js";
+export { default as forgePrStackListTool } from "./tools/forge-pr-stack-list.descriptor.js";
+export { default as forgePrStackGetTool } from "./tools/forge-pr-stack-get.descriptor.js";
+export { default as forgePrStackCreateTool } from "./tools/forge-pr-stack-create.descriptor.js";
+export { default as forgePrStackUpdateTool } from "./tools/forge-pr-stack-update.descriptor.js";
+export { default as forgePrStackDissolveTool } from "./tools/forge-pr-stack-dissolve.descriptor.js";
+export { default as forgePrStackRestackTool } from "./tools/forge-pr-stack-restack.descriptor.js";
+export { default as forgePrStackMergeTool } from "./tools/forge-pr-stack-merge.descriptor.js";
+export { default as forgeToolsDocsDescriptor } from "./docs/forge.tools.docs.descriptor.js";
+export * from "./tools/schemas.js";
+export { FORGE_TRACKING_STATUS_CATEGORIES, forgeTrackingStatusCategory } from "./tracking-status-category.js";
+export { buildListReposRequest, buildIssueCreateRequest, buildIssueListRequest, buildIssueGetRequest, buildIssuePatchRequest, buildIssueUpdateRequest, buildIssueCommentRequest, buildIssueCommentsListRequest, buildIssueSearchRequest, buildPrListRequest, buildPrGetRequest, buildPrUpdateRequest, buildPrSearchRequest, buildPrMergeStatusRequest, buildPrFilesRequest, buildPrMergeRequest, buildPrCreateRequest, buildPrReviewCommentRequest, buildPrStackListRequest, buildPrStackGetRequest, buildPrStackCreateRequest, buildPrStackUpdateRequest, buildPrStackDissolveRequest, buildPrStackRestackRequest, buildPrStackMergeRequest } from "./lib/requests.js";
+export {} from "./lib/repo-context.js";
+export { resolveOutboundToken, resolveRepoScopedToolToken, sendForgeToolRequest } from "./lib/transport.js";
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,OAAO,IAAI,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AACxG,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAC3G,OAAO,EAAE,OAAO,IAAI,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC1F,OAAO,EAAE,OAAO,IAAI,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,OAAO,IAAI,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAChG,OAAO,EAAE,OAAO,IAAI,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAC9F,OAAO,EAAE,OAAO,IAAI,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AAE5F,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACN,gCAAgC,EAChC,2BAA2B,EAC3B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC1B,wBAAwB,EACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAA+C,MAAM,uBAAuB,CAAC;AACpF,OAAO,EACN,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,MAAM,oBAAoB,CAAC"}

package/dist/tools/lib/pull-request-automation.d.ts

@@ -0,0 +1,8 @@
+import { type ToolCallContext } from '@vibesdotdev/kernel';
+import { type ForgeRequestSpec, type ForgeResponse } from '../../request.ts';
+import type { ForgeToolScope } from './transport.ts';
+type Send = <T>(spec: ForgeRequestSpec, scope: ForgeToolScope) => Promise<ForgeResponse<T>>;
+/** Head/action authority comes only from server-bound execution metadata. */
+export declare function enforcePullRequestAutomation(ctx: ToolCallContext | undefined, repositoryId: string, pullRequestNumber: number, action: 'read' | 'review' | 'merge', send: Send, scope: ForgeToolScope): Promise<string | undefined>;
+export {};
+//# sourceMappingURL=pull-request-automation.d.ts.map

package/dist/tools/lib/pull-request-automation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull-request-automation.d.ts","sourceRoot":"","sources":["../../../src/tools/lib/pull-request-automation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE5E,OAAO,EAAwB,KAAK,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEnG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,KAAK,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAE5F,6EAA6E;AAC7E,wBAAsB,4BAA4B,CACjD,GAAG,EAAE,eAAe,GAAG,SAAS,EAChC,YAAY,EAAE,MAAM,EACpB,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,EACnC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,cAAc,GACnB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAiC7B"}

package/dist/tools/lib/pull-request-automation.js

@@ -0,0 +1,41 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { readExecutionBindings } from '@vibesdotdev/tools/agents/trusted-context';
+import { forgeResponseFailure } from "../../request.js";
+import { canonicalizePrRef } from "../../pr-idempotency.js";
+/** Head/action authority comes only from server-bound execution metadata. */
+export async function enforcePullRequestAutomation(ctx, repositoryId, pullRequestNumber, action, send, scope) {
+    const bound = ctx ? readExecutionBindings(ctx)?.pullRequest : undefined;
+    if (!bound)
+        return undefined;
+    if (bound.repositoryId !== repositoryId || bound.pullRequestNumber !== pullRequestNumber) {
+        throw new CapabilityError('PR automation cannot target another repository or pull request.', 'PERMISSION_DENIED', {
+            reason: 'automation-target-denied'
+        });
+    }
+    if (action !== 'read' && !bound.allowedActions.includes(action)) {
+        throw new CapabilityError('PR automation does not authorize this action.', 'PERMISSION_DENIED', {
+            reason: 'automation-action-denied',
+            details: { action }
+        });
+    }
+    const current = await send({
+        method: 'GET', path: `/api/repositories/${encodeURIComponent(repositoryId)}/issues/${pullRequestNumber}`
+    }, scope);
+    if (!current.ok) {
+        const failure = forgeResponseFailure(current);
+        throw new CapabilityError('Could not verify the current pull-request head.', failure.code, {
+            reason: 'automation-head-unverified',
+            retryable: failure.retryable,
+            cause: failure
+        });
+    }
+    const pr = current.data?.result?.pr;
+    if (pr?.headSha?.toLowerCase() !== bound.expectedHeadSha.toLowerCase() || canonicalizePrRef(pr.sourceRef ?? '') !== canonicalizePrRef(bound.sourceRef) || !['open', 'draft'].includes(pr.state ?? '')) {
+        throw new CapabilityError('The pull-request head or source branch changed since the automation was bound.', 'CONFLICT', {
+            reason: 'automation-head-changed',
+            recoveryHint: 'Start a new head-bound Chat.'
+        });
+    }
+    return bound.expectedHeadSha;
+}
+//# sourceMappingURL=pull-request-automation.js.map

package/dist/tools/lib/pull-request-automation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull-request-automation.js","sourceRoot":"","sources":["../../../src/tools/lib/pull-request-automation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAwB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAA6C,MAAM,kBAAkB,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAK5D,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,GAAgC,EAChC,YAAoB,EACpB,iBAAyB,EACzB,MAAmC,EACnC,IAAU,EACV,KAAqB;IAErB,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,IAAI,KAAK,CAAC,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;QAC1F,MAAM,IAAI,eAAe,CAAC,iEAAiE,EAAE,mBAAmB,EAAE;YACjH,MAAM,EAAE,0BAA0B;SAClC,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,eAAe,CAAC,+CAA+C,EAAE,mBAAmB,EAAE;YAC/F,MAAM,EAAE,0BAA0B;YAClC,OAAO,EAAE,EAAE,MAAM,EAAE;SACnB,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAgF;QACzG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,YAAY,CAAC,WAAW,iBAAiB,EAAE;KACxG,EAAE,KAAK,CAAC,CAAC;IACV,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,eAAe,CAAC,iDAAiD,EAAE,OAAO,CAAC,IAAI,EAAE;YAC1F,MAAM,EAAE,4BAA4B;YACpC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO;SACd,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;IACpC,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,KAAK,CAAC,eAAe,CAAC,WAAW,EAAE,IAAI,iBAAiB,CAAC,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,KAAK,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACvM,MAAM,IAAI,eAAe,CAAC,gFAAgF,EAAE,UAAU,EAAE;YACvH,MAAM,EAAE,yBAAyB;YACjC,YAAY,EAAE,8BAA8B;SAC5C,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,eAAe,CAAC;AAC9B,CAAC"}

package/dist/tools/lib/repo-context.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Repo context resolution for forge-tools.
+ *
+ * Forge repository tools resolve the persisted repository record through the
+ * platform API the acting caller is already authorized against (so RBAC +
+ * 404-IDOR still apply). Provider-specific interpretation belongs to the
+ * selected `git/repository` adapter, never this package.
+ *
+ *   1. the repository UUID (via forge-cli's `resolveRepositoryId`),
+ *   2. the persisted provider + repository metadata,
+ *   3. a short-lived `repo:read` credential, minted through the platform
+ *      tokens route (`POST /api/repositories/[id]/tokens`, scopes:['repo:read']).
+ *
+ */
+import type { Repository } from '@vibesdotdev/git-operations/repository';
+import type { FetchLike, ForgeResponse, ForgeToolScope } from './transport.ts';
+/** Shared call options threaded into the forge-tools transport. */
+export interface RepoContextOptions extends ForgeToolScope {
+    /** Explicit outbound bearer override (cloud caller bearer / test seam). */
+    token?: string;
+    /** Injectable fetch boundary (tests). */
+    fetchImpl?: FetchLike;
+    /** Explicit platform origin override (tests / direct wiring). */
+    origin?: string;
+}
+/**
+ * Canonical platform repository record returned by the
+ * `{ result: Repository }` wire shape.
+ */
+export type RepositoryRecord = Repository;
+export interface RepoHostContext {
+    /** Canonical persisted repository record returned by platform-web. */
+    repository: RepositoryRecord;
+    /** Convenience fields used by provider-neutral Forge operations. */
+    id: string;
+    defaultBranch: string;
+}
+/**
+ * Resolve a repo ref (`<owner>/<name>` | `<name>` | UUID) into its canonical
+ * persisted context. Goes through the acting caller's bearer.
+ */
+export declare function resolveRepoHostContext(ref: string, options?: RepoContextOptions): Promise<RepoHostContext>;
+/**
+ * resolveRepositoryId goes through forge-cli's `sendForgeRequest` (CLI token).
+ * For the MCP/cloud path we re-resolve through the forge-tools transport so the
+ * caller's bearer is used. UUIDs short-circuit with no round-trip.
+ */
+export declare function resolveRepositoryIdScoped(ref: string, options?: RepoContextOptions): Promise<string>;
+/**
+ * Mint a short-lived `repo:read` deploy token for a repository through the
+ * platform tokens route. The route allows this exact ephemeral read-only shape
+ * for read-authorized callers and does not persist it as a deploy-token secret.
+ */
+export declare function mintReadToken(repoId: string, options?: RepoContextOptions & {
+    ttlSeconds?: number;
+}): Promise<string>;
+export type { ForgeResponse };
+//# sourceMappingURL=repo-context.d.ts.map

package/dist/tools/lib/repo-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-context.d.ts","sourceRoot":"","sources":["../../../src/tools/lib/repo-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAEzE,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAG/E,mEAAmE;AACnE,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACzD,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAE1C,MAAM,WAAW,eAAe;IAC/B,sEAAsE;IACtE,UAAU,EAAE,gBAAgB,CAAC;IAC7B,oEAAoE;IACpE,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC3C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,kBAAuB,GAC9B,OAAO,CAAC,eAAe,CAAC,CAc1B;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC9C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,kBAAuB,GAC9B,OAAO,CAAC,MAAM,CAAC,CA+BjB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,kBAAkB,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACxD,OAAO,CAAC,MAAM,CAAC,CAsBjB;AAED,YAAY,EAAE,aAAa,EAAE,CAAC"}

package/dist/tools/lib/repo-context.js

@@ -0,0 +1,92 @@
+/**
+ * Repo context resolution for forge-tools.
+ *
+ * Forge repository tools resolve the persisted repository record through the
+ * platform API the acting caller is already authorized against (so RBAC +
+ * 404-IDOR still apply). Provider-specific interpretation belongs to the
+ * selected `git/repository` adapter, never this package.
+ *
+ *   1. the repository UUID (via forge-cli's `resolveRepositoryId`),
+ *   2. the persisted provider + repository metadata,
+ *   3. a short-lived `repo:read` credential, minted through the platform
+ *      tokens route (`POST /api/repositories/[id]/tokens`, scopes:['repo:read']).
+ *
+ */
+import { isUuid, resolveRepositoryName } from "../../repository-ref.js";
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { forgeResponseFailure, sendForgeToolRequest } from "./transport.js";
+/**
+ * Resolve a repo ref (`<owner>/<name>` | `<name>` | UUID) into its canonical
+ * persisted context. Goes through the acting caller's bearer.
+ */
+export async function resolveRepoHostContext(ref, options = {}) {
+    const id = await resolveRepositoryIdScoped(ref, options);
+    const res = await sendForgeToolRequest({ method: 'GET', path: `/api/repositories/${encodeURIComponent(id)}` }, options);
+    if (!res.ok)
+        throw forgeResponseFailure(res);
+    const repo = res.data.result;
+    return {
+        repository: repo,
+        id,
+        defaultBranch: repo.defaultBranch
+    };
+}
+/**
+ * resolveRepositoryId goes through forge-cli's `sendForgeRequest` (CLI token).
+ * For the MCP/cloud path we re-resolve through the forge-tools transport so the
+ * caller's bearer is used. UUIDs short-circuit with no round-trip.
+ */
+export async function resolveRepositoryIdScoped(ref, options = {}) {
+    if (options.automation) {
+        if (ref !== options.automation.pullRequest.repositoryId) {
+            throw new CapabilityError('PR automation must use its bound repository ID.', 'PERMISSION_DENIED', {
+                reason: 'automation-repository-denied'
+            });
+        }
+        return ref;
+    }
+    if (isUuid(ref))
+        return ref;
+    if (ref.includes('/')) {
+        const slash = ref.indexOf('/');
+        const owner = ref.slice(0, slash);
+        const name = ref.slice(slash + 1);
+        const res = await sendForgeToolRequest({ method: 'GET', path: '/api/repositories/resolve', query: { owner, name } }, options);
+        if (!res.ok)
+            throw forgeResponseFailure(res);
+        return res.data.result.id;
+    }
+    return resolveRepositoryName(ref, async (limit, offset) => {
+        const res = await sendForgeToolRequest({ method: 'GET', path: '/api/repositories', query: { limit, offset } }, options);
+        if (!res.ok)
+            throw forgeResponseFailure(res);
+        return res.data.results ?? [];
+    });
+}
+/**
+ * Mint a short-lived `repo:read` deploy token for a repository through the
+ * platform tokens route. The route allows this exact ephemeral read-only shape
+ * for read-authorized callers and does not persist it as a deploy-token secret.
+ */
+export async function mintReadToken(repoId, options = {}) {
+    const res = await sendForgeToolRequest({
+        method: 'POST',
+        path: `/api/repositories/${encodeURIComponent(repoId)}/tokens`,
+        body: {
+            name: 'forge-tools-read',
+            scopes: ['repo:read'],
+            ephemeral: true,
+            ...(options.ttlSeconds ? { ttlSeconds: options.ttlSeconds } : { ttlSeconds: 300 })
+        }
+    }, options);
+    if (!res.ok)
+        throw forgeResponseFailure(res);
+    const token = res.data?.token;
+    if (!token) {
+        throw new CapabilityError('The read-token mint succeeded but returned no token.', 'UNAVAILABLE', {
+            reason: 'read-token-missing'
+        });
+    }
+    return token;
+}
+//# sourceMappingURL=repo-context.js.map

package/dist/tools/lib/repo-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-context.js","sourceRoot":"","sources":["../../../src/tools/lib/repo-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAA0B,MAAM,yBAAyB,CAAC;AAEhG,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AA0B5E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,GAAW,EACX,UAA8B,EAAE;IAEhC,MAAM,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAEzD,MAAM,GAAG,GAAG,MAAM,oBAAoB,CACrC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,EACtE,OAAO,CACP,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;IAC7B,OAAO;QACN,UAAU,EAAE,IAAI;QAChB,EAAE;QACF,aAAa,EAAE,IAAI,CAAC,aAAa;KACjC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,GAAW,EACX,UAA8B,EAAE;IAEhC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,IAAI,GAAG,KAAK,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;YACzD,MAAM,IAAI,eAAe,CAAC,iDAAiD,EAAE,mBAAmB,EAAE;gBACjG,MAAM,EAAE,8BAA8B;aACtC,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAE5B,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,oBAAoB,CACrC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAC5E,OAAO,CACP,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7C,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO,qBAAqB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACzD,MAAM,GAAG,GAAG,MAAM,oBAAoB,CACrC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EACtE,OAAO,CACP,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7C,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,MAAc,EACd,UAAwD,EAAE;IAE1D,MAAM,GAAG,GAAG,MAAM,oBAAoB,CACrC;QACC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,SAAS;QAC9D,IAAI,EAAE;YACL,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,CAAC,WAAW,CAAC;YACrB,SAAS,EAAE,IAAI;YACf,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;SAClF;KACD,EACD,OAAO,CACP,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC;IAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,eAAe,CAAC,sDAAsD,EAAE,aAAa,EAAE;YAChG,MAAM,EAAE,oBAAoB;SAC5B,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/tools/lib/requests.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Forge-tools compatibility exports for the canonical Forge request builders.
+ *
+ * Tool descriptors retain this module's public names while every wire path and
+ * body is now authored by the framework-neutral Forge package.
+ */
+export { buildForgeMergeRequest, buildForgeMergeStatusRequest, buildIssueCommentRequest, buildIssueCommentsListRequest, buildIssueCreateRequest, buildIssueGetRequest, buildIssueListRequest, buildIssuePatchRequest, buildIssueSearchRequest, buildIssueUpdateRequest, buildIssueUpdatePatchBody, buildListReposRequest, buildPrCreateRequest, buildPrGetRequest, buildPrListRequest, buildPrFilesRequest, buildPrMergeRequest, buildPrMergeStatusRequest, buildPrReviewCommentRequest, buildPrSearchRequest, buildPrUpdateRequest, buildPrUpdatePatchBody, buildPrStackListRequest, buildPrStackGetRequest, buildPrStackCreateRequest, buildPrStackUpdateRequest, buildPrStackDissolveRequest, buildPrStackRestackRequest, buildPrStackMergeRequest } from '../../evidence-client.ts';
+export type { TrackingItemPatchBody } from '../../schemas/wire-contracts.ts';
+//# sourceMappingURL=requests.d.ts.map

package/dist/tools/lib/requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../../src/tools/lib/requests.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACN,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC1B,wBAAwB,EACxB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/tools/lib/requests.js

@@ -0,0 +1,8 @@
+/**
+ * Forge-tools compatibility exports for the canonical Forge request builders.
+ *
+ * Tool descriptors retain this module's public names while every wire path and
+ * body is now authored by the framework-neutral Forge package.
+ */
+export { buildForgeMergeRequest, buildForgeMergeStatusRequest, buildIssueCommentRequest, buildIssueCommentsListRequest, buildIssueCreateRequest, buildIssueGetRequest, buildIssueListRequest, buildIssuePatchRequest, buildIssueSearchRequest, buildIssueUpdateRequest, buildIssueUpdatePatchBody, buildListReposRequest, buildPrCreateRequest, buildPrGetRequest, buildPrListRequest, buildPrFilesRequest, buildPrMergeRequest, buildPrMergeStatusRequest, buildPrReviewCommentRequest, buildPrSearchRequest, buildPrUpdateRequest, buildPrUpdatePatchBody, buildPrStackListRequest, buildPrStackGetRequest, buildPrStackCreateRequest, buildPrStackUpdateRequest, buildPrStackDissolveRequest, buildPrStackRestackRequest, buildPrStackMergeRequest } from "../../evidence-client.js";
+//# sourceMappingURL=requests.js.map

package/dist/tools/lib/requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.js","sourceRoot":"","sources":["../../../src/tools/lib/requests.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACN,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC1B,wBAAwB,EACxB,MAAM,0BAA0B,CAAC"}

package/dist/tools/lib/transport.d.ts

@@ -0,0 +1,90 @@
+/** Forge transport uses the handed acting-user bearer or the bounded PR automation grant. */
+import { CapabilityError, type ToolCallContext, type VibesRuntime } from "@vibesdotdev/kernel";
+import { type ExecutionBindings } from '@vibesdotdev/tools/agents/trusted-context';
+import { buildRequest, forgeResponseFailure, parseResponse, withQuery, ForgeJwtMintError, ForgeOriginUnavailableError, ForgeNotSignedInError, type ForgeFailureResponse, type ForgeRequestSpec, type BuiltRequest, type FetchLike, type ForgeResponse } from "../../request.ts";
+export { buildRequest, forgeResponseFailure, parseResponse, withQuery, ForgeJwtMintError, ForgeOriginUnavailableError, ForgeNotSignedInError, };
+export type { ForgeFailureResponse, ForgeRequestSpec, BuiltRequest, FetchLike, ForgeResponse };
+export declare function looksLikeJwt(token: string): boolean;
+/**
+ * Resolve the outbound bearer for a forge-tools call: an explicit override,
+ * else the caller's bearer from auth's `resolveCallerBearer` on the runtime the
+ * caller was handed. An anonymous caller is `ForgeNotSignedInError`; a
+ * signed-out interactive host is auth's `AUTH_REQUIRED` `not-signed-in`.
+ */
+export declare function resolveOutboundToken(runtime: VibesRuntime, override?: string): Promise<string>;
+/** The scope a tool implementation runs with: the handed scope, a bare bearer's scope, or none. */
+export declare function toolScope(token?: string | ForgeToolScope): ForgeToolScope;
+/** The run-bound app bearer the trusted run context carries (never a browser cookie). */
+export declare function readContextBearer(ctx?: ToolCallContext): string | undefined;
+export declare function resolveRepoScopedToolToken(runtime: VibesRuntime, ctx: ToolCallContext | undefined): Promise<string>;
+export interface ForgeToolScope {
+    token?: string;
+    /**
+     * The runtime the tool was handed. It answers the declared platform origin
+     * and, for PR automation, the internal service credential; on a host that
+     * publishes path roots it answers the global config's active org. It is
+     * never a bearer source when `token` is set.
+     */
+    runtime?: VibesRuntime;
+    automation?: {
+        userId: string;
+        organizationId?: string;
+        agentId: string;
+        sessionId: string;
+        pullRequest: NonNullable<ExecutionBindings['pullRequest']>;
+    };
+}
+/** Durable Chat identity selects a service call, never a persisted user bearer. */
+export declare function resolveRepoScopedToolScope(runtime: VibesRuntime, ctx: ToolCallContext): Promise<ForgeToolScope>;
+/**
+ * The caller's bearer: auth's caller bearer for the active request, else the
+ * run-bound bearer (`resolveToolCallerBearer`). Without a runtime only the
+ * run-bound bearer is available. With none the call is `ForgeNotSignedInError`,
+ * never a host credential.
+ */
+export declare function resolveContextOutboundToken(ctx: ToolCallContext | undefined, options?: {
+    fetchImpl?: FetchLike;
+    authOrigin?: string;
+    runtime?: VibesRuntime;
+}): Promise<string>;
+/**
+ * Resolve the platform origin (an explicit `origin`, else the declared
+ * `platform` service on the handed runtime: its internal origin for PR
+ * automation, its primary origin otherwise), the outbound bearer, build the
+ * request, execute it through the injectable `fetchImpl`, and normalise the
+ * response — the forge-tools analogue of forge-cli's `sendForgeRequest`. The
+ * bearer is the explicit `token`, else `resolveCallerBearer(runtime)` for the
+ * handed `runtime`; with neither the call is `ForgeNotSignedInError`. PR
+ * automation presents the internal service credential from the runtime.
+ */
+export declare function sendForgeToolRequest<T>(spec: ForgeRequestSpec, options?: {
+    token?: string;
+    fetchImpl?: FetchLike;
+    origin?: string;
+    runtime?: VibesRuntime;
+} & ForgeToolScope): Promise<ForgeResponse<T>>;
+export declare function formatForgeToolError(toolId: string, status: number, message: string): string;
+/**
+ * A failed forge response as the tool's typed failure: the response's own
+ * typed failure, named for `toolId`, with a sign-in hint on `AUTH_REQUIRED`.
+ * Its message is value-free; the server's text stays in the redacted cause.
+ */
+export declare function forgeToolFailure(toolId: string, res: ForgeFailureResponse): CapabilityError;
+/**
+ * The parsed body of a successful forge response, asserted to actually BE one.
+ *
+ * Every tool impl reached straight through the response (`res.data.result`).
+ * When the platform answered 2xx without the expected envelope, `res.data` was
+ * `undefined` and that expression either threw a bare TypeError or — worse —
+ * evaluated to `undefined`, which the MCP layer then rejected against the tool's
+ * output schema as `Invalid output from '<tool>'`. That message names the
+ * symptom and hides the cause; it cost real diagnosis time on
+ * forge-pr-merge-status while the git host was pack-busy (#296).
+ *
+ * `parseResponse` now reclassifies an unparseable 2xx as a failure, so this
+ * guard covers the remaining case: a well-formed JSON body that is not the
+ * envelope the tool expects. Failing here names the tool and the status, which
+ * is what a caller needs.
+ */
+export declare function requireForgeToolData<T>(res: ForgeResponse<T>, toolId: string): T;
+//# sourceMappingURL=transport.d.ts.map

package/dist/tools/lib/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../src/tools/lib/transport.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAG7F,OAAO,EAAE,eAAe,EAAE,KAAK,eAAe,EAAE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAG/F,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,YAAY,EAEZ,oBAAoB,EACpB,aAAa,EACb,SAAS,EACT,iBAAiB,EACjB,2BAA2B,EAC3B,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,SAAS,EACT,iBAAiB,EACjB,2BAA2B,EAC3B,qBAAqB,GACtB,CAAC;AACF,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;AAqC/F,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,YAAY,EACrB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAKjB;AASD,mGAAmG;AACnG,wBAAgB,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,cAAc,GAAG,cAAc,CAIzE;AAWD,yFAAyF;AACzF,wBAAgB,iBAAiB,CAAC,GAAG,CAAC,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAI3E;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,eAAe,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAEzH;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,UAAU,CAAC,EAAE;QACX,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,WAAW,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;KAC5D,CAAC;CACH;AAED,mFAAmF;AACnF,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAoBrH;AAED;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,eAAe,GAAG,SAAS,EAChC,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,YAAY,CAAA;CAAO,GACnF,OAAO,CAAC,MAAM,CAAC,CASjB;AAeD;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,IAAI,EAAE,gBAAgB,EACtB,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB,GAAG,cAAmB,GACtB,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAgE3B;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,MAAM,CAQR;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,oBAAoB,GAAG,eAAe,CAY3F;AAKD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EACpC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,EACrB,MAAM,EAAE,MAAM,GACb,CAAC,CAUH"}