@warpgogol/forge 2.1.0 → 2.2.0

package/dist/os/core/handlers/pinned-validate.js

@@ -0,0 +1,248 @@
+/*
+<MODULE_CONTRACT>
+<purpose>forge pinned.validate — checks the working tree against .forge/pinned.yaml.
+Scans git diff (staged or last-commit) for delete/move/modify operations on
+pinned files. Supports --allow-pinned-override for audited escape hatch,
+--json for structured output, and --mode ci for CI integration.</purpose>
+<non-goals>
+  <item>Does not create or modify the manifest — use pinned.init.</item>
+  <item>Does not install hooks or CI workflows — use pinned.init.</item>
+  <item>Does not block archive commands — that is the pre-check utility in pinned-check.ts.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0733: initial pinned.validate handler with staged/ci modes, override, audit log, manifest integrity check.</item>
+  <item>Gap fix: read FORGE_PINNED_OVERRIDE env var for pre-commit hook override support.</item>
+</CHANGE_SUMMARY>
+*/
+import fs from "node:fs/promises";
+import { exec } from "node:child_process";
+import { promisify } from "node:util";
+import path from "node:path";
+import { loadPinnedManifest, isPinned, PINNED_MANIFEST_PATH, PinnedManifestMalformedError, } from "./pinned-check.js";
+const execAsync = promisify(exec);
+const AUDIT_LOG_PATH = path.join(".forge", "pinned-audit.log");
+/**
+ * Parse git diff --name-status output into file entries with operation types.
+ * Git status codes:
+ *   D = deleted, R = renamed (move), M = modified, A = added, C = copied
+ * Format: "R100\tdocs/old.md\tdocs/new.md" or "D\tdocs/file.md"
+ */
+function parseGitNameStatus(output) {
+    const entries = [];
+    const lines = output.trim().split("\n").filter(Boolean);
+    for (const line of lines) {
+        const parts = line.split("\t");
+        if (parts.length < 2)
+            continue;
+        const statusCode = parts[0] ?? "";
+        const oldPath = parts[1] ?? "";
+        const newPath = parts[2] ?? oldPath;
+        if (statusCode.startsWith("D")) {
+            entries.push({ relPath: oldPath, operation: "delete" });
+        }
+        else if (statusCode.startsWith("R") || statusCode.startsWith("C")) {
+            entries.push({ relPath: oldPath, operation: "move" });
+            if (newPath !== oldPath) {
+                entries.push({ relPath: newPath, operation: "move" });
+            }
+        }
+        else if (statusCode.startsWith("M")) {
+            entries.push({ relPath: oldPath, operation: "modify" });
+        }
+    }
+    return entries;
+}
+/**
+ * Check manifest integrity by comparing current manifest against the last-committed version.
+ * If entries have been removed, return a tampered violation.
+ */
+async function checkManifestIntegrity(repoRoot, manifest) {
+    try {
+        const { stdout } = await execAsync(`git show HEAD:${PINNED_MANIFEST_PATH}`, {
+            cwd: repoRoot,
+            encoding: "utf8",
+        });
+        // Parse the committed manifest to compare entry paths
+        const { parse: parseYaml } = await import("yaml");
+        const committedParsed = parseYaml(stdout);
+        if (!committedParsed || !Array.isArray(committedParsed["pinned"])) {
+            return null;
+        }
+        const committedEntries = committedParsed["pinned"].map((e) => String(e["path"] ?? ""));
+        const currentPaths = new Set(manifest.pinned.map((e) => e.path));
+        for (const committedPath of committedEntries) {
+            if (!currentPaths.has(committedPath)) {
+                return {
+                    path: PINNED_MANIFEST_PATH,
+                    mode: "freeze",
+                    operation: "modify",
+                    reason: `PINNED_MANIFEST_TAMPERED: entry "${committedPath}" was removed from the manifest`,
+                };
+            }
+        }
+    }
+    catch {
+        // No committed manifest — nothing to compare against. This is normal for new repos.
+    }
+    return null;
+}
+/**
+ * Append an override event to the audit log. Uses fs.appendFile for atomic per-line writes.
+ */
+async function appendAuditLog(repoRoot, entry) {
+    const logPath = path.join(repoRoot, AUDIT_LOG_PATH);
+    const line = JSON.stringify(entry) + "\n";
+    await fs.appendFile(logPath, line, "utf8");
+}
+export async function runPinnedValidate(input, context) {
+    const { workspaceRoot, logger, outputFormat } = context;
+    const mode = input.flags["mode"] ?? "staged";
+    const json = input.flags["json"] === true || outputFormat === "json";
+    const flagRaw = input.flags["allow-pinned-override"];
+    const flagOverrides = flagRaw
+        ? Array.isArray(flagRaw)
+            ? flagRaw
+            : [flagRaw]
+        : [];
+    // Gap fix: also read FORGE_PINNED_OVERRIDE env var (comma-separated paths).
+    // This allows the pre-commit hook to support overrides without changing the hook script.
+    // Operator sets: FORGE_PINNED_OVERRIDE=docs/rfcs/rfc-0076.md git commit
+    const envOverride = process.env["FORGE_PINNED_OVERRIDE"];
+    const envOverrides = envOverride
+        ? envOverride
+            .split(",")
+            .map((s) => s.trim())
+            .filter(Boolean)
+        : [];
+    const overrides = [...flagOverrides, ...envOverrides];
+    // Load manifest
+    let manifest;
+    try {
+        manifest = await loadPinnedManifest(workspaceRoot);
+    }
+    catch (err) {
+        if (err instanceof PinnedManifestMalformedError) {
+            return {
+                data: {
+                    command: "pinned.validate",
+                    status: "fail",
+                    violations: [],
+                    overrides: [],
+                },
+                exitCode: 2,
+                summary: `Error: ${err.message}`,
+            };
+        }
+        throw err;
+    }
+    if (!manifest) {
+        const msg = "No .forge/pinned.yaml found — pinned-files protection inactive.";
+        if (!json) {
+            logger.info(msg);
+        }
+        return {
+            data: {
+                command: "pinned.validate",
+                status: "pass",
+                violations: [],
+                overrides: [],
+            },
+            summary: msg,
+        };
+    }
+    // Get git diff
+    let diffOutput;
+    try {
+        if (mode === "ci") {
+            const { stdout } = await execAsync("git diff --name-status HEAD~1 HEAD", {
+                cwd: workspaceRoot,
+                encoding: "utf8",
+            });
+            diffOutput = stdout;
+        }
+        else {
+            const { stdout } = await execAsync("git diff --cached --name-status", {
+                cwd: workspaceRoot,
+                encoding: "utf8",
+            });
+            diffOutput = stdout;
+        }
+    }
+    catch {
+        diffOutput = "";
+    }
+    const changedFiles = parseGitNameStatus(diffOutput);
+    // Check each changed file against the manifest
+    const allViolations = [];
+    for (const { relPath, operation } of changedFiles) {
+        const entry = isPinned(manifest, relPath);
+        if (entry) {
+            // For protect mode, only delete and move are violations — modify is allowed
+            if (entry.mode === "protect" && operation === "modify") {
+                continue;
+            }
+            allViolations.push({
+                path: relPath,
+                mode: entry.mode,
+                operation,
+                reason: entry.reason,
+            });
+        }
+    }
+    // Check manifest integrity (tamper detection)
+    const tamperViolation = await checkManifestIntegrity(workspaceRoot, manifest);
+    if (tamperViolation) {
+        allViolations.push(tamperViolation);
+    }
+    // Filter out overridden violations
+    const overrideSet = new Set(overrides);
+    const remainingViolations = [];
+    const appliedOverrides = [];
+    for (const v of allViolations) {
+        if (overrideSet.has(v.path)) {
+            appliedOverrides.push(v.path);
+            // Log to audit file
+            await appendAuditLog(workspaceRoot, {
+                timestamp: new Date().toISOString(),
+                path: v.path,
+                mode: v.mode,
+                reason: v.reason,
+            });
+        }
+        else {
+            remainingViolations.push(v);
+        }
+    }
+    const status = remainingViolations.length > 0 ? "fail" : "pass";
+    const result = {
+        command: "pinned.validate",
+        status,
+        violations: remainingViolations,
+        overrides: appliedOverrides,
+    };
+    if (!json) {
+        if (status === "pass") {
+            if (appliedOverrides.length > 0) {
+                logger.success(`pinned.validate: passed with ${appliedOverrides.length} override(s) (logged to audit)`);
+            }
+            else {
+                logger.success("pinned.validate: no violations");
+            }
+        }
+        else {
+            logger.error(`pinned.validate: ${remainingViolations.length} violation(s) found`);
+            for (const v of remainingViolations) {
+                logger.error(`  ${v.operation}: ${v.path} (mode: ${v.mode}) — ${v.reason}`);
+            }
+        }
+    }
+    return {
+        data: result,
+        exitCode: status === "pass" ? 0 : 1,
+        summary: status === "pass"
+            ? `No violations${appliedOverrides.length > 0 ? ` (${appliedOverrides.length} override(s) applied)` : ""}`
+            : `${remainingViolations.length} violation(s) found`,
+    };
+}
+//# sourceMappingURL=pinned-validate.js.map

package/dist/os/core/handlers/pinned-validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinned-validate.js","sourceRoot":"","sources":["../../../../os/core/handlers/pinned-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;EAgBE;AAEF,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,IAAI,MAAM,WAAW,CAAC;AAM7B,OAAO,EACL,kBAAkB,EAClB,QAAQ,EACR,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAQ3B,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAClC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAE/D;;;;;GAKG;AACH,SAAS,kBAAkB,CACzB,MAAc;IAEd,MAAM,OAAO,GAAwE,EAAE,CAAC;IACxF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAExD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAE/B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;QAEpC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACtD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,sBAAsB,CACnC,QAAgB,EAChB,QAAwB;IAExB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,iBAAiB,oBAAoB,EAAE,EAAE;YAC1E,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,sDAAsD;QACtD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAmC,CAAC;QAC5E,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,gBAAgB,GAAI,eAAe,CAAC,QAAQ,CAAoC,CAAC,GAAG,CACxF,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAC/B,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAEjE,KAAK,MAAM,aAAa,IAAI,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;gBACrC,OAAO;oBACL,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,QAAQ;oBACnB,MAAM,EAAE,oCAAoC,aAAa,iCAAiC;iBAC3F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oFAAoF;IACtF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAC3B,QAAgB,EAChB,KAKC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC1C,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAwB,EACxB,OAA4B;IAE5B,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAExD,MAAM,IAAI,GACP,KAAK,CAAC,KAAK,CAAC,MAAM,CAAoC,IAAI,QAAQ,CAAC;IACtE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,YAAY,KAAK,MAAM,CAAC;IACrE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrD,MAAM,aAAa,GAAa,OAAO;QACrC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACtB,CAAC,CAAE,OAAoB;YACvB,CAAC,CAAC,CAAC,OAAiB,CAAC;QACvB,CAAC,CAAC,EAAE,CAAC;IAEP,4EAA4E;IAC5E,yFAAyF;IACzF,wEAAwE;IACxE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACzD,MAAM,YAAY,GAAa,WAAW;QACxC,CAAC,CAAC,WAAW;aACR,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC;QACpB,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,SAAS,GAAa,CAAC,GAAG,aAAa,EAAE,GAAG,YAAY,CAAC,CAAC;IAEhE,gBAAgB;IAChB,IAAI,QAA+B,CAAC;IACpC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAA4B,EAAE,CAAC;YAChD,OAAO;gBACL,IAAI,EAAE;oBACJ,OAAO,EAAE,iBAAiB;oBAC1B,MAAM,EAAE,MAAM;oBACd,UAAU,EAAE,EAAE;oBACd,SAAS,EAAE,EAAE;iBACd;gBACD,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE;aACjC,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,iEAAiE,CAAC;QAC9E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,iBAAiB;gBAC1B,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,EAAE;gBACd,SAAS,EAAE,EAAE;aACd;YACD,OAAO,EAAE,GAAG;SACb,CAAC;IACJ,CAAC;IAED,eAAe;IACf,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,oCAAoC,EAAE;gBACvE,GAAG,EAAE,aAAa;gBAClB,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,UAAU,GAAG,MAAM,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,iCAAiC,EAAE;gBACpE,GAAG,EAAE,aAAa;gBAClB,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,UAAU,GAAG,MAAM,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,EAAE,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAEpD,+CAA+C;IAC/C,MAAM,aAAa,GAAsB,EAAE,CAAC;IAC5C,KAAK,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,YAAY,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,4EAA4E;YAC5E,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACvD,SAAS;YACX,CAAC;YACD,aAAa,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC9E,IAAI,eAAe,EAAE,CAAC;QACpB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACtC,CAAC;IAED,mCAAmC;IACnC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,mBAAmB,GAAsB,EAAE,CAAC;IAClD,MAAM,gBAAgB,GAAa,EAAE,CAAC;IAEtC,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,oBAAoB;YACpB,MAAM,cAAc,CAAC,aAAa,EAAE;gBAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAoB,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACjF,MAAM,MAAM,GAAyB;QACnC,OAAO,EAAE,iBAAiB;QAC1B,MAAM;QACN,UAAU,EAAE,mBAAmB;QAC/B,SAAS,EAAE,gBAAgB;KAC5B,CAAC;IAEF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,OAAO,CACZ,gCAAgC,gBAAgB,CAAC,MAAM,gCAAgC,CACxF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,oBAAoB,mBAAmB,CAAC,MAAM,qBAAqB,CAAC,CAAC;YAClF,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;gBACpC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,gBAAgB,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC,MAAM,uBAAuB,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1G,CAAC,CAAC,GAAG,mBAAmB,CAAC,MAAM,qBAAqB;KACzD,CAAC;AACJ,CAAC"}

package/dist/os/core/handlers/profile-resolve.d.ts

@@ -0,0 +1,13 @@
+import { type StackProfile } from "../../../src/profiles/stack-profile.ts";
+import type { ForgeCommandInput, ForgeRuntimeContext } from "../../../src/types.ts";
+export interface ResolvedProfile {
+    profile: StackProfile;
+    profilePath: string;
+}
+export interface LifecycleFlags {
+    dryRun: boolean;
+    profileIdOverride?: string;
+}
+export declare function resolveLifecycleFlags(input: ForgeCommandInput, context: ForgeRuntimeContext): LifecycleFlags;
+export declare function resolveActiveProfile(workspaceRoot: string, forgeRoot?: string, profileIdOverride?: string): ResolvedProfile | null;
+//# sourceMappingURL=profile-resolve.d.ts.map

package/dist/os/core/handlers/profile-resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-resolve.d.ts","sourceRoot":"","sources":["../../../../os/core/handlers/profile-resolve.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEpF,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAuBD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,mBAAmB,GAC3B,cAAc,CAMhB;AAED,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,MAAM,EAClB,iBAAiB,CAAC,EAAE,MAAM,GACzB,eAAe,GAAG,IAAI,CAyBxB"}

package/dist/os/core/handlers/profile-resolve.js

@@ -0,0 +1,65 @@
+/*
+<MODULE_CONTRACT>
+<purpose>Shared active profile resolution for lifecycle commands (forge.dev, forge.build, forge.validate). Reads forge.yaml, resolves the active profile id, loads the profile YAML, and returns the StackProfile or null.</purpose>
+<non-goals>
+  <item>Do not implement command-specific logic — this is shared resolution only.</item>
+  <item>Do not import from @warpgogol/* — this module is portable.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0674: initial shared profile resolution for lifecycle commands.</item>
+</CHANGE_SUMMARY>
+*/
+import fs from "node:fs";
+import path from "node:path";
+import { parse as parseYaml } from "yaml";
+import { resolveForgeRoot } from "../../../src/config/forge-config.js";
+import { listStackProfiles } from "../../../src/profiles/stack-profile.js";
+function readProfileIdFromForgeYaml(workspaceRoot) {
+    const configPath = path.join(workspaceRoot, "forge.yaml");
+    if (!fs.existsSync(configPath)) {
+        return undefined;
+    }
+    try {
+        const raw = fs.readFileSync(configPath, "utf8");
+        const parsed = parseYaml(raw);
+        if (typeof parsed["profile"] === "string") {
+            return parsed["profile"];
+        }
+        const project = parsed["project"];
+        if (project && Array.isArray(project["stack"]) && project["stack"].length > 0) {
+            return project["stack"][0];
+        }
+    }
+    catch {
+        // forge.yaml not parseable — no profile
+    }
+    return undefined;
+}
+export function resolveLifecycleFlags(input, context) {
+    return {
+        dryRun: context.dryRun || input.flags["dry-run"] === true,
+        profileIdOverride: typeof input.flags["profile"] === "string" ? input.flags["profile"] : undefined,
+    };
+}
+export function resolveActiveProfile(workspaceRoot, forgeRoot, profileIdOverride) {
+    const root = forgeRoot ?? resolveForgeRoot(workspaceRoot);
+    const profiles = listStackProfiles(root);
+    if (profiles.length === 0) {
+        return null;
+    }
+    let profileId = profileIdOverride;
+    if (!profileId) {
+        profileId = readProfileIdFromForgeYaml(workspaceRoot);
+    }
+    if (!profileId) {
+        return null;
+    }
+    const profile = profiles.find((p) => p.id === profileId);
+    if (!profile) {
+        return null;
+    }
+    const profilePath = path.join(root, "profiles", `${profileId}.yaml`);
+    return { profile, profilePath };
+}
+//# sourceMappingURL=profile-resolve.js.map

package/dist/os/core/handlers/profile-resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-resolve.js","sourceRoot":"","sources":["../../../../os/core/handlers/profile-resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;EAWE;AAEF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAqB,MAAM,wCAAwC,CAAC;AAQ9F,SAAS,0BAA0B,CAAC,aAAqB;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC1D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAA4B,CAAC;QACzD,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAwC,CAAC;QACzE,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9E,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAW,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAOD,MAAM,UAAU,qBAAqB,CACnC,KAAwB,EACxB,OAA4B;IAE5B,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI;QACzD,iBAAiB,EACf,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,SAAS;KAC9F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,aAAqB,EACrB,SAAkB,EAClB,iBAA0B;IAE1B,MAAM,IAAI,GAAG,SAAS,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAEzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,SAAS,GAAuB,iBAAiB,CAAC;IAEtD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,0BAA0B,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;IACrE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC"}

package/dist/os/core/handlers/release-prepare.d.ts

@@ -0,0 +1,25 @@
+import type { ForgeCommandInput, ForgeCommandResult, ForgeRuntimeContext } from "../../../src/types.ts";
+export interface ReleaseManifest {
+    schemaVersion: string;
+    releaseId: string;
+    profileId: string;
+    version: string;
+    createdAt: string;
+    artifacts: Array<{
+        artifactId: string;
+        path: string;
+        hash: string;
+        size: number;
+        deterministic: boolean;
+    }>;
+    determinismChecked: boolean;
+    validationPassed: boolean;
+}
+export interface ForgeReleasePrepareResult {
+    command: "forge.release.prepare";
+    profileId: string;
+    releaseDir: string;
+    manifest: ReleaseManifest;
+}
+export declare function runReleasePrepare(input: ForgeCommandInput, context: ForgeRuntimeContext): Promise<ForgeCommandResult<ForgeReleasePrepareResult>>;
+//# sourceMappingURL=release-prepare.d.ts.map

package/dist/os/core/handlers/release-prepare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-prepare.d.ts","sourceRoot":"","sources":["../../../../os/core/handlers/release-prepare.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAM/B,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,KAAK,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC,CAAC;IACH,kBAAkB,EAAE,OAAO,CAAC;IAC5B,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,uBAAuB,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAyDD,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAC,CAsLxD"}

package/dist/os/core/handlers/release-prepare.js

@@ -0,0 +1,228 @@
+/*
+<MODULE_CONTRACT>
+<purpose>forge.release.prepare — bundle built artifacts into a release package with a manifest. Supports --dry-run, --json, --profile.</purpose>
+<non-goals>
+  <item>Do not implement publish logic — that lives in release-publish.ts.</item>
+  <item>Do not import from @warpgogol/* in autonomous modules — os/core/ may import from @warpgogol/*.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0680: initial forge.release.prepare handler with manifest generation, artifact hashing, --dry-run.</item>
+  <item>RFC-0680 review fix: remove unused artifactId param from findBuiltArtifacts (A-2).</item>
+  <item>RFC-0680 review fix: use writeFileIfChanged for manifest write (B-1, DNA-34).</item>
+  <item>RFC-0680 review fix: document validationPassed semantics (G-3).</item>
+</CHANGE_SUMMARY>
+*/
+import { readFile, copyFile, mkdir, stat } from "node:fs/promises";
+import { join, basename } from "node:path";
+import { createHash } from "node:crypto";
+import { resolveActiveProfile, resolveLifecycleFlags } from "./profile-resolve.js";
+import { loadWorkspaceDeps } from "./workspace-deps.js";
+import { writeFileIfChanged } from "../../../src/utils/fs-idempotent.js";
+function generateReleaseId(profileId, shortHash) {
+    const ts = new Date().toISOString().replace(/[:.]/g, "-").slice(0, -5);
+    return `${profileId}-${ts}-${shortHash}`;
+}
+async function readVersionFromPackageJson(workspaceRoot) {
+    try {
+        const raw = await readFile(join(workspaceRoot, "package.json"), "utf8");
+        const pkg = JSON.parse(raw);
+        return pkg.version ?? "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+async function findBuiltArtifacts(workspaceRoot, extensions, produceOutput) {
+    if (produceOutput) {
+        const { collectFiles } = await loadWorkspaceDeps();
+        const outputPattern = produceOutput.replace("{composition}", "*");
+        const basePattern = basename(outputPattern);
+        const isGlob = basePattern.includes("*");
+        if (!isGlob) {
+            const fullPath = join(workspaceRoot, produceOutput);
+            try {
+                const _s = await stat(fullPath);
+                return [fullPath];
+            }
+            catch {
+                return [];
+            }
+        }
+        // Extract extension from the output pattern (e.g. "*.mp4" → ".mp4")
+        const extMatch = basePattern.match(/(\.[^.]+)$/);
+        const outputExts = extMatch ? [extMatch[1]] : extensions;
+        const distDir = join(workspaceRoot, "dist");
+        const files = await collectFiles(distDir, {
+            extensions: outputExts,
+            ignore: (name) => name.startsWith("-") || name.startsWith("old-") || name === ".DS_Store",
+        });
+        const regex = new RegExp("^" + basePattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*") + "$");
+        return files.filter((f) => regex.test(basename(f)));
+    }
+    const { collectFiles } = await loadWorkspaceDeps();
+    const distDir = join(workspaceRoot, "dist");
+    return collectFiles(distDir, {
+        extensions,
+        ignore: (name) => name.startsWith("-") || name.startsWith("old-") || name === ".DS_Store",
+    });
+}
+export async function runReleasePrepare(input, context) {
+    const { workspaceRoot, logger } = context;
+    const { dryRun, profileIdOverride } = resolveLifecycleFlags(input, context);
+    const resolved = resolveActiveProfile(workspaceRoot, context.forgeRoot, profileIdOverride);
+    if (!resolved) {
+        return {
+            data: {
+                command: "forge.release.prepare",
+                profileId: "",
+                releaseDir: "",
+                manifest: {
+                    schemaVersion: "1",
+                    releaseId: "",
+                    profileId: "",
+                    version: "",
+                    createdAt: "",
+                    artifacts: [],
+                    determinismChecked: false,
+                    validationPassed: false,
+                },
+            },
+            exitCode: 1,
+            summary: "No active profile found. Set `profile` in forge.yaml or use --profile <id>.",
+            nextSteps: [{ action: "Set profile in forge.yaml or use --profile <id>", kind: "required" }],
+        };
+    }
+    const { profile } = resolved;
+    if (!profile.release) {
+        return {
+            data: {
+                command: "forge.release.prepare",
+                profileId: profile.id,
+                releaseDir: "",
+                manifest: {
+                    schemaVersion: "1",
+                    releaseId: "",
+                    profileId: profile.id,
+                    version: "",
+                    createdAt: "",
+                    artifacts: [],
+                    determinismChecked: false,
+                    validationPassed: false,
+                },
+            },
+            exitCode: 1,
+            summary: `Profile ${profile.id} does not declare a release configuration.`,
+        };
+    }
+    const releaseConfig = profile.release;
+    const releaseDir = join(workspaceRoot, releaseConfig.outputDir);
+    const artifacts = profile.artifacts ?? [];
+    const includeArtifacts = releaseConfig.includeArtifacts;
+    const filteredArtifacts = includeArtifacts
+        ? artifacts.filter((a) => includeArtifacts.includes(a.id))
+        : artifacts.filter((a) => a.produce?.output);
+    const version = await readVersionFromPackageJson(workspaceRoot);
+    const manifestArtifacts = [];
+    let allHashes = "";
+    for (const artifact of filteredArtifacts) {
+        const builtFiles = await findBuiltArtifacts(workspaceRoot, artifact.extensions, artifact.produce?.output);
+        if (builtFiles.length === 0) {
+            return {
+                data: {
+                    command: "forge.release.prepare",
+                    profileId: profile.id,
+                    releaseDir: "",
+                    manifest: {
+                        schemaVersion: "1",
+                        releaseId: "",
+                        profileId: profile.id,
+                        version,
+                        createdAt: "",
+                        artifacts: [],
+                        determinismChecked: false,
+                        validationPassed: false,
+                    },
+                },
+                exitCode: 1,
+                summary: `Artifact ${artifact.id} has no built output — run \`forge build\` first.`,
+            };
+        }
+        for (const builtFile of builtFiles) {
+            const relPath = builtFile.replace(workspaceRoot + "/", "");
+            let hash = "";
+            let size = 0;
+            if (!dryRun) {
+                const { byteHashFile } = await loadWorkspaceDeps();
+                hash = await byteHashFile(builtFile);
+                const stats = await stat(builtFile);
+                size = stats.size;
+                allHashes += hash;
+            }
+            manifestArtifacts.push({
+                artifactId: artifact.id,
+                path: relPath,
+                hash,
+                size,
+                deterministic: artifact.determinism?.hashable ?? false,
+            });
+        }
+    }
+    const shortHash = allHashes
+        ? createHash("sha256").update(allHashes).digest("hex").slice(0, 8)
+        : "dryrun00";
+    const releaseId = generateReleaseId(profile.id, shortHash);
+    const createdAt = new Date().toISOString();
+    const manifest = {
+        schemaVersion: "1",
+        releaseId,
+        profileId: profile.id,
+        version,
+        createdAt,
+        artifacts: manifestArtifacts,
+        determinismChecked: false,
+        validationPassed: true,
+    };
+    // G-3 note: validationPassed is set to true because forge.release.prepare
+    // does not run validation itself — the operator is expected to run
+    // `forge.validate` before `forge.release.prepare`. This mirrors the
+    // prepare-then-publish separation: prepare assumes prior validation.
+    if (dryRun) {
+        logger.info(`[dry-run] forge.release.prepare — profile: ${profile.id}`);
+        logger.info(`  releaseId: ${releaseId}`);
+        logger.info(`  version: ${version}`);
+        logger.info(`  outputDir: ${releaseConfig.outputDir}`);
+        for (const a of manifestArtifacts) {
+            logger.info(`  artifact: ${a.artifactId} — ${a.path}`);
+        }
+        return {
+            data: {
+                command: "forge.release.prepare",
+                profileId: profile.id,
+                releaseDir: releaseConfig.outputDir,
+                manifest,
+            },
+            summary: `[dry-run] Release prepared: ${manifestArtifacts.length} artifact(s), releaseId: ${releaseId}`,
+        };
+    }
+    await mkdir(releaseDir, { recursive: true });
+    for (const a of manifestArtifacts) {
+        const srcPath = join(workspaceRoot, a.path);
+        const dstPath = join(releaseDir, basename(a.path));
+        await copyFile(srcPath, dstPath);
+    }
+    const manifestPath = join(releaseDir, releaseConfig.manifestName);
+    await writeFileIfChanged(manifestPath, JSON.stringify(manifest, null, 2) + "\n");
+    logger.success(`  Release prepared: ${manifestArtifacts.length} artifact(s)`);
+    logger.info(`  Manifest: ${manifestPath}`);
+    return {
+        data: {
+            command: "forge.release.prepare",
+            profileId: profile.id,
+            releaseDir: releaseConfig.outputDir,
+            manifest,
+        },
+        summary: `Release prepared: ${manifestArtifacts.length} artifact(s), releaseId: ${releaseId}`,
+    };
+}
+//# sourceMappingURL=release-prepare.js.map

package/dist/os/core/handlers/release-prepare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-prepare.js","sourceRoot":"","sources":["../../../../os/core/handlers/release-prepare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;EAcE;AAEF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AA2BzE,SAAS,iBAAiB,CAAC,SAAiB,EAAE,SAAiB;IAC7D,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,GAAG,SAAS,IAAI,EAAE,IAAI,SAAS,EAAE,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,aAAqB;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACpD,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,aAAqB,EACrB,UAAoB,EACpB,aAAsB;IAEtB,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;QACnD,MAAM,aAAa,GAAG,aAAa,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAChC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,oEAAoE;QACpE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;YACxC,UAAU,EAAE,UAAU;YACtB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,WAAW;SAC1F,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,GAAG,CAClF,CAAC;QACF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,YAAY,CAAC,OAAO,EAAE;QAC3B,UAAU;QACV,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,WAAW;KAC1F,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAwB,EACxB,OAA4B;IAE5B,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAE5E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC3F,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,uBAAuB;gBAChC,SAAS,EAAE,EAAE;gBACb,UAAU,EAAE,EAAE;gBACd,QAAQ,EAAE;oBACR,aAAa,EAAE,GAAG;oBAClB,SAAS,EAAE,EAAE;oBACb,SAAS,EAAE,EAAE;oBACb,OAAO,EAAE,EAAE;oBACX,SAAS,EAAE,EAAE;oBACb,SAAS,EAAE,EAAE;oBACb,kBAAkB,EAAE,KAAK;oBACzB,gBAAgB,EAAE,KAAK;iBACxB;aACF;YACD,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,6EAA6E;YACtF,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,iDAAiD,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SAC7F,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IAE7B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,uBAAuB;gBAChC,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,UAAU,EAAE,EAAE;gBACd,QAAQ,EAAE;oBACR,aAAa,EAAE,GAAG;oBAClB,SAAS,EAAE,EAAE;oBACb,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,OAAO,EAAE,EAAE;oBACX,SAAS,EAAE,EAAE;oBACb,SAAS,EAAE,EAAE;oBACb,kBAAkB,EAAE,KAAK;oBACzB,gBAAgB,EAAE,KAAK;iBACxB;aACF;YACD,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,WAAW,OAAO,CAAC,EAAE,4CAA4C;SAC3E,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAmB,OAAO,CAAC,OAAO,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IAEhE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC1C,MAAM,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAC;IACxD,MAAM,iBAAiB,GAAG,gBAAgB;QACxC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,aAAa,CAAC,CAAC;IAEhE,MAAM,iBAAiB,GAAiC,EAAE,CAAC;IAC3D,IAAI,SAAS,GAAG,EAAE,CAAC;IAEnB,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,kBAAkB,CACzC,aAAa,EACb,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CACzB,CAAC;QAEF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,IAAI,EAAE;oBACJ,OAAO,EAAE,uBAAuB;oBAChC,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,UAAU,EAAE,EAAE;oBACd,QAAQ,EAAE;wBACR,aAAa,EAAE,GAAG;wBAClB,SAAS,EAAE,EAAE;wBACb,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,OAAO;wBACP,SAAS,EAAE,EAAE;wBACb,SAAS,EAAE,EAAE;wBACb,kBAAkB,EAAE,KAAK;wBACzB,gBAAgB,EAAE,KAAK;qBACxB;iBACF;gBACD,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,mDAAmD;aACpF,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC;YAC3D,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,IAAI,IAAI,GAAG,CAAC,CAAC;YAEb,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;gBACnD,IAAI,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;gBACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;gBACpC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;gBAClB,SAAS,IAAI,IAAI,CAAC;YACpB,CAAC;YAED,iBAAiB,CAAC,IAAI,CAAC;gBACrB,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,IAAI,EAAE,OAAO;gBACb,IAAI;gBACJ,IAAI;gBACJ,aAAa,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,IAAI,KAAK;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,SAAS;QACzB,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,UAAU,CAAC;IACf,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,MAAM,QAAQ,GAAoB;QAChC,aAAa,EAAE,GAAG;QAClB,SAAS;QACT,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,OAAO;QACP,SAAS;QACT,SAAS,EAAE,iBAAiB;QAC5B,kBAAkB,EAAE,KAAK;QACzB,gBAAgB,EAAE,IAAI;KACvB,CAAC;IAEF,0EAA0E;IAC1E,mEAAmE;IACnE,oEAAoE;IACpE,qEAAqE;IAErE,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,8CAA8C,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,gBAAgB,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,uBAAuB;gBAChC,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,UAAU,EAAE,aAAa,CAAC,SAAS;gBACnC,QAAQ;aACT;YACD,OAAO,EAAE,+BAA+B,iBAAiB,CAAC,MAAM,4BAA4B,SAAS,EAAE;SACxG,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;IAClE,MAAM,kBAAkB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEjF,MAAM,CAAC,OAAO,CAAC,uBAAuB,iBAAiB,CAAC,MAAM,cAAc,CAAC,CAAC;IAC9E,MAAM,CAAC,IAAI,CAAC,eAAe,YAAY,EAAE,CAAC,CAAC;IAE3C,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,uBAAuB;YAChC,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,UAAU,EAAE,aAAa,CAAC,SAAS;YACnC,QAAQ;SACT;QACD,OAAO,EAAE,qBAAqB,iBAAiB,CAAC,MAAM,4BAA4B,SAAS,EAAE;KAC9F,CAAC;AACJ,CAAC"}

package/dist/os/core/handlers/release-publish.d.ts

@@ -0,0 +1,13 @@
+import type { ForgeCommandInput, ForgeCommandResult, ForgeRuntimeContext } from "../../../src/types.ts";
+export interface ForgeReleasePublishResult {
+    command: "forge.release.publish";
+    profileId: string;
+    target: string;
+    publishedFiles: Array<{
+        path: string;
+        targetPath: string;
+    }>;
+    manifestPath: string;
+}
+export declare function runReleasePublish(input: ForgeCommandInput, context: ForgeRuntimeContext): Promise<ForgeCommandResult<ForgeReleasePublishResult>>;
+//# sourceMappingURL=release-publish.d.ts.map

package/dist/os/core/handlers/release-publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-publish.d.ts","sourceRoot":"","sources":["../../../../os/core/handlers/release-publish.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAI/B,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,uBAAuB,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,YAAY,EAAE,MAAM,CAAC;CACtB;AAYD,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAC,CAmKxD"}