@warpgogol/forge 2.19.0 → 2.20.0

package/dist/os/core/handlers/pinned-check.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pinned-check.js","sourceRoot":"","sources":["../../../../os/core/handlers/pinned-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;EAgBE;AAEF,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C,MAAM,UAAU,GAAG,QAAQ,CAAC;AAC5B,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAEvE;;GAEG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IACvD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAE/D,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,4BAA4B,CACpC,kCAAkC,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,EAAE,CACnE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,4BAA4B,CACpC,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,4BAA4B,CAAC,sDAAsD,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,4BAA4B,CACpC,uEAAuE,CACxE,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,GAA8B,CAAC;QAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEpC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;YAChD,MAAM,IAAI,4BAA4B,CACpC,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,4BAA4B,CACpC,uBAAuB,SAAS,uBAAuB,MAAM,CAAC,SAAS,CAAC,mCAAmC,CAC5G,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;YACpD,MAAM,IAAI,4BAA4B,CACpC,uBAAuB,SAAS,uCAAuC,CACxE,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAuB;YAC7B,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAwB,EAAE,OAAe;IAChE,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEtD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAE3D,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,iBAAiB,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACtD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,IAAI,iBAAiB,KAAK,mBAAmB,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAwB,EACxB,SAAiB,EACjB,OAAe;IAEf,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEnD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC3D,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,IACE,gBAAgB,CAAC,UAAU,CAAC,mBAAmB,CAAC;gBAChD,cAAc,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAC9C,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAwB,EACxB,KAA0E;IAE1E,MAAM,UAAU,GAAsB,EAAE,CAAC;IAEzC,KAAK,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,KAAK,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/os/core/handlers/pinned-init.d.ts

@@ -1,19 +0,0 @@
-import type { ForgeCommandInput, ForgeCommandResult, ForgeRuntimeContext } from "../../../src/types.ts";
-import type { PinnedEntry } from "./pinned-types.ts";
-/**
- * Default pinned entries for a forge-consuming repository.
- * These are re-added by pinned.init if missing from an existing manifest.
- */
-export declare const DEFAULT_PINNED_ENTRIES: PinnedEntry[];
-export interface PinnedInitResult {
-    command: "pinned.init";
-    status: "ok";
-    manifestPath: string;
-    manifestAction: "created" | "merged" | "unchanged";
-    entriesCount: number;
-    hookAction: "created" | "updated" | "unchanged";
-    gitignoreAction: "created" | "updated" | "unchanged";
-    ciWorkflowAction: "created" | "unchanged" | "skipped";
-}
-export declare function runPinnedInit(input: ForgeCommandInput, context: ForgeRuntimeContext): Promise<ForgeCommandResult<PinnedInitResult>>;
-//# sourceMappingURL=pinned-init.d.ts.map

package/dist/os/core/handlers/pinned-init.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pinned-init.d.ts","sourceRoot":"","sources":["../../../../os/core/handlers/pinned-init.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,KAAK,EAAE,WAAW,EAAkB,MAAM,mBAAmB,CAAC;AAKrE;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,WAAW,EAgG/C,CAAC;AAmHF,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,IAAI,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;IAChD,eAAe,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;IACrD,gBAAgB,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;CACvD;AAED,wBAAsB,aAAa,CACjC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAyE/C"}

package/dist/os/core/handlers/pinned-init.js

@@ -1,283 +0,0 @@
-/*
-<MODULE_CONTRACT>
-<purpose>forge pinned.init — creates .forge/pinned.yaml with default foundation
-entries, installs pre-commit hook, adds audit log to .gitignore, and optionally
-generates CI workflow. Idempotent: re-running merges defaults with existing entries.</purpose>
-<non-goals>
-  <item>Does not validate the manifest — use pinned.validate.</item>
-  <item>Does not enforce protection on archive commands — that is pinned-check.ts.</item>
-</non-goals>
-</MODULE_CONTRACT>
-<CHANGE_SUMMARY>
-  <item>RFC-0733: initial pinned.init handler with manifest creation, hook installation, gitignore update, and CI workflow generation.</item>
-</CHANGE_SUMMARY>
-*/
-import fs from "node:fs/promises";
-import path from "node:path";
-import { stringify as stringifyYaml } from "yaml";
-import { writeFileIfChanged } from "../../../src/utils/fs-idempotent.js";
-import { PINNED_MANIFEST_PATH, loadPinnedManifest } from "./pinned-check.js";
-const PRE_COMMIT_HOOK_MARKER = "# forge:pinned-check";
-const AUDIT_LOG_REL_PATH = ".forge/pinned-audit.log";
-/**
- * Default pinned entries for a forge-consuming repository.
- * These are re-added by pinned.init if missing from an existing manifest.
- */
-export const DEFAULT_PINNED_ENTRIES = [
-    {
-        path: ".forge/pinned.yaml",
-        mode: "freeze",
-        reason: "Self-protection — manifest must not be tampered with",
-    },
-    {
-        path: "docs/rfcs/rfc-0000-template.md",
-        mode: "freeze",
-        reason: "RFC template — required for rfc.create",
-    },
-    {
-        path: "docs/adrs/adr-0000-template.md",
-        mode: "freeze",
-        reason: "ADR template — required for adr.create",
-    },
-    {
-        path: "docs/audits/audit-0000-template.md",
-        mode: "freeze",
-        reason: "Audit template — required for audit creation",
-    },
-    {
-        path: "docs/plans/plan-0000-template.md",
-        mode: "freeze",
-        reason: "Plan template — required for plan creation",
-    },
-    {
-        path: "docs/architecture-dna.md",
-        mode: "freeze",
-        reason: "Architecture DNA invariants — foundational governance document",
-    },
-    {
-        path: "forge.yaml",
-        mode: "protect",
-        reason: "Forge configuration — required for all forge commands",
-    },
-    {
-        path: "package.json",
-        mode: "protect",
-        reason: "Root package.json — workspace manifest",
-    },
-    {
-        path: "pnpm-workspace.yaml",
-        mode: "protect",
-        reason: "Workspace definition",
-    },
-    {
-        path: "AGENTS.md",
-        mode: "protect",
-        reason: "Agent rules manifest",
-    },
-    {
-        path: "PREFERENCES.md",
-        mode: "protect",
-        reason: "Operator preferences",
-    },
-    {
-        path: "docs/rfcs/",
-        mode: "protect",
-        reason: "RFC directory — structural foundation",
-    },
-    {
-        path: "docs/adrs/",
-        mode: "protect",
-        reason: "ADR directory — structural foundation",
-    },
-    {
-        path: "docs/audits/",
-        mode: "protect",
-        reason: "Audit directory — structural foundation",
-    },
-    {
-        path: "docs/plans/",
-        mode: "protect",
-        reason: "Plan directory — structural foundation",
-    },
-    {
-        path: "docs/sessions/",
-        mode: "protect",
-        reason: "Session directory — structural foundation",
-    },
-    {
-        path: "docs/explorations/",
-        mode: "protect",
-        reason: "Exploration directory — structural foundation",
-    },
-    {
-        path: "docs/specs/",
-        mode: "protect",
-        reason: "Spec snapshots — immutable vendored content",
-    },
-    {
-        path: "missions/",
-        mode: "protect",
-        reason: "Missions directory — structural foundation",
-    },
-];
-const PRE_COMMIT_HOOK_SCRIPT = `#!/bin/sh
-${PRE_COMMIT_HOOK_MARKER}
-# Installed by forge pinned.init — do not remove this marker block.
-# Pinned-files protection: blocks commits that delete/move/modify pinned files.
-# To override: FORGE_PINNED_OVERRIDE=path1,path2 git commit
-forge pinned.validate || exit 1
-`;
-const CI_WORKFLOW_TEMPLATE = `name: pinned-files
-on: [push, pull_request]
-jobs:
-  validate:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 2
-      - run: npm install -g @warpgogol/forge
-      - run: forge pinned.validate --mode ci --json
-`;
-/**
- * Merge default entries with existing manifest entries.
- * - Re-adds missing default entries (forge expects them).
- * - Never overwrites or removes custom entries.
- */
-function mergeManifest(existing, defaults) {
-    if (!existing) {
-        return { pinned: [...defaults] };
-    }
-    const existingPaths = new Set(existing.pinned.map((e) => e.path));
-    const merged = [...existing.pinned];
-    for (const def of defaults) {
-        if (!existingPaths.has(def.path)) {
-            merged.push(def);
-        }
-    }
-    return { pinned: merged };
-}
-/**
- * Install or merge the pre-commit hook.
- * If a hook exists, appends the forge check with a marker for idempotent re-installation.
- */
-async function installPreCommitHook(repoRoot) {
-    const hookPath = path.join(repoRoot, ".git", "hooks", "pre-commit");
-    let existingContent;
-    try {
-        existingContent = await fs.readFile(hookPath, "utf8");
-    }
-    catch {
-        // No existing hook — create new
-        await fs.mkdir(path.dirname(hookPath), { recursive: true });
-        await writeFileIfChanged(hookPath, PRE_COMMIT_HOOK_SCRIPT);
-        await fs.chmod(hookPath, 0o755);
-        return "created";
-    }
-    // Check if forge hook is already present
-    if (existingContent.includes(PRE_COMMIT_HOOK_MARKER)) {
-        return "unchanged";
-    }
-    // Append forge hook to existing hook
-    const mergedContent = existingContent + "\n" + PRE_COMMIT_HOOK_SCRIPT;
-    await writeFileIfChanged(hookPath, mergedContent);
-    await fs.chmod(hookPath, 0o755);
-    return "updated";
-}
-/**
- * Add .forge/pinned-audit.log to .gitignore (or append to existing).
- */
-async function addToGitignore(repoRoot) {
-    const gitignorePath = path.join(repoRoot, ".gitignore");
-    const entry = AUDIT_LOG_REL_PATH;
-    let existingContent;
-    try {
-        existingContent = await fs.readFile(gitignorePath, "utf8");
-    }
-    catch {
-        // No .gitignore — create new
-        await writeFileIfChanged(gitignorePath, entry + "\n");
-        return "created";
-    }
-    // Check if entry already exists
-    const lines = existingContent.split("\n");
-    if (lines.some((l) => l.trim() === entry)) {
-        return "unchanged";
-    }
-    // Append entry
-    const mergedContent = existingContent.trimEnd() + "\n" + entry + "\n";
-    await writeFileIfChanged(gitignorePath, mergedContent);
-    return "updated";
-}
-/**
- * Generate CI workflow file.
- */
-async function generateCiWorkflow(repoRoot) {
-    const workflowPath = path.join(repoRoot, ".github", "workflows", "pinned-check.yml");
-    await fs.mkdir(path.dirname(workflowPath), { recursive: true });
-    await writeFileIfChanged(workflowPath, CI_WORKFLOW_TEMPLATE);
-    return "created";
-}
-export async function runPinnedInit(input, context) {
-    const { workspaceRoot, logger, outputFormat } = context;
-    const ci = input.flags["ci"] === true;
-    // Load existing manifest (if any)
-    let existingManifest = null;
-    try {
-        existingManifest = await loadPinnedManifest(workspaceRoot);
-    }
-    catch {
-        // Malformed manifest — will be overwritten with defaults
-        existingManifest = null;
-    }
-    // Merge with defaults
-    const merged = mergeManifest(existingManifest, DEFAULT_PINNED_ENTRIES);
-    // Determine action
-    const manifestAction = existingManifest === null
-        ? "created"
-        : merged.pinned.length > existingManifest.pinned.length
-            ? "merged"
-            : "unchanged";
-    // Write manifest
-    const manifestFullPath = path.join(workspaceRoot, PINNED_MANIFEST_PATH);
-    await fs.mkdir(path.dirname(manifestFullPath), { recursive: true });
-    const manifestContent = stringifyYaml(merged);
-    await writeFileIfChanged(manifestFullPath, manifestContent);
-    // Install pre-commit hook
-    const hookAction = await installPreCommitHook(workspaceRoot);
-    // Add to .gitignore
-    const gitignoreAction = await addToGitignore(workspaceRoot);
-    // Optional CI workflow
-    let ciWorkflowAction = "skipped";
-    if (ci) {
-        ciWorkflowAction = await generateCiWorkflow(workspaceRoot);
-    }
-    const result = {
-        command: "pinned.init",
-        status: "ok",
-        manifestPath: PINNED_MANIFEST_PATH,
-        manifestAction,
-        entriesCount: merged.pinned.length,
-        hookAction,
-        gitignoreAction,
-        ciWorkflowAction,
-    };
-    if (outputFormat === "pretty") {
-        logger.success(`pinned.init: manifest ${manifestAction} (${merged.pinned.length} entries), hook ${hookAction}, gitignore ${gitignoreAction}` +
-            (ci ? `, CI workflow ${ciWorkflowAction}` : ""));
-    }
-    return {
-        data: result,
-        summary: `Manifest ${manifestAction} with ${merged.pinned.length} entries, hook ${hookAction}, gitignore ${gitignoreAction}`,
-        nextSteps: [
-            {
-                action: "Commit .forge/pinned.yaml and .gitignore changes",
-                kind: "required",
-            },
-            ...(ci
-                ? [{ action: "Commit .github/workflows/pinned-check.yml", kind: "required" }]
-                : []),
-        ],
-    };
-}
-//# sourceMappingURL=pinned-init.js.map

package/dist/os/core/handlers/pinned-init.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pinned-init.js","sourceRoot":"","sources":["../../../../os/core/handlers/pinned-init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;EAaE;AAEF,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAMlD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAG7E,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AACtD,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAErD;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAkB;IACnD;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,sDAAsD;KAC/D;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,wCAAwC;KACjD;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,wCAAwC;KACjD;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,8CAA8C;KACvD;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,4CAA4C;KACrD;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,gEAAgE;KACzE;IACD;QACE,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,uDAAuD;KAChE;IACD;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,wCAAwC;KACjD;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,sBAAsB;KAC/B;IACD;QACE,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,sBAAsB;KAC/B;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,sBAAsB;KAC/B;IACD;QACE,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,uCAAuC;KAChD;IACD;QACE,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,uCAAuC;KAChD;IACD;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,yCAAyC;KAClD;IACD;QACE,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,wCAAwC;KACjD;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,2CAA2C;KACpD;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,+CAA+C;KACxD;IACD;QACE,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,6CAA6C;KACtD;IACD;QACE,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,4CAA4C;KACrD;CACF,CAAC;AAEF,MAAM,sBAAsB,GAAG;EAC7B,sBAAsB;;;;;CAKvB,CAAC;AAEF,MAAM,oBAAoB,GAAG;;;;;;;;;;;CAW5B,CAAC;AAEF;;;;GAIG;AACH,SAAS,aAAa,CAAC,QAA+B,EAAE,QAAuB;IAC7E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEpC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,oBAAoB,CACjC,QAAgB;IAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IAEpE,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;QAChC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,kBAAkB,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,yCAAyC;IACzC,IAAI,eAAe,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACrD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,qCAAqC;IACrC,MAAM,aAAa,GAAG,eAAe,GAAG,IAAI,GAAG,sBAAsB,CAAC;IACtE,MAAM,kBAAkB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,kBAAkB,CAAC;IAEjC,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;QAC7B,MAAM,kBAAkB,CAAC,aAAa,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC;QACtD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,gCAAgC;IAChC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,eAAe;IACf,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC;IACtE,MAAM,kBAAkB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACvD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IAChD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;IACrF,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,kBAAkB,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC7D,OAAO,SAAS,CAAC;AACnB,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAwB,EACxB,OAA4B;IAE5B,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACxD,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IAEtC,kCAAkC;IAClC,IAAI,gBAAgB,GAA0B,IAAI,CAAC;IACnD,IAAI,CAAC;QACH,gBAAgB,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;QACzD,gBAAgB,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,sBAAsB;IACtB,MAAM,MAAM,GAAG,aAAa,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;IAEvE,mBAAmB;IACnB,MAAM,cAAc,GAClB,gBAAgB,KAAK,IAAI;QACvB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM;YACrD,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,WAAW,CAAC;IAEpB,iBAAiB;IACjB,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IACxE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,kBAAkB,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;IAE5D,0BAA0B;IAC1B,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAE7D,oBAAoB;IACpB,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,CAAC;IAE5D,uBAAuB;IACvB,IAAI,gBAAgB,GAAwC,SAAS,CAAC;IACtE,IAAI,EAAE,EAAE,CAAC;QACP,gBAAgB,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,MAAM,GAAqB;QAC/B,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,oBAAoB;QAClC,cAAc;QACd,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;QAClC,UAAU;QACV,eAAe;QACf,gBAAgB;KACjB,CAAC;IAEF,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,CACZ,yBAAyB,cAAc,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,mBAAmB,UAAU,eAAe,eAAe,EAAE;YAC3H,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAClD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,YAAY,cAAc,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,kBAAkB,UAAU,eAAe,eAAe,EAAE;QAC5H,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,kDAAkD;gBAC1D,IAAI,EAAE,UAAU;aACjB;YACD,GAAG,CAAC,EAAE;gBACJ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,2CAA2C,EAAE,IAAI,EAAE,UAAmB,EAAE,CAAC;gBACtF,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;AACJ,CAAC"}

package/dist/os/core/handlers/pinned-types.d.ts

@@ -1,29 +0,0 @@
-export type PinnedMode = "protect" | "freeze";
-export type PinnedOperation = "delete" | "move" | "modify";
-export interface PinnedEntry {
-    path: string;
-    mode: PinnedMode;
-    reason: string;
-}
-export interface PinnedManifest {
-    pinned: PinnedEntry[];
-}
-export interface PinnedViolation {
-    path: string;
-    mode: PinnedMode;
-    operation: PinnedOperation;
-    reason: string;
-}
-export type PinnedValidateMode = "staged" | "ci";
-export interface PinnedValidateOptions {
-    allowPinnedOverride?: string[];
-    mode?: PinnedValidateMode;
-    json?: boolean;
-}
-export interface PinnedValidateResult {
-    command: "pinned.validate";
-    status: "pass" | "fail";
-    violations: PinnedViolation[];
-    overrides: string[];
-}
-//# sourceMappingURL=pinned-types.d.ts.map

package/dist/os/core/handlers/pinned-types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pinned-types.d.ts","sourceRoot":"","sources":["../../../../os/core/handlers/pinned-types.ts"],"names":[],"mappings":"AAeA,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE9C,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE3D,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,eAAe,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,IAAI,CAAC;AAEjD,MAAM,WAAW,qBAAqB;IACpC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB"}

package/dist/os/core/handlers/pinned-types.js

@@ -1,16 +0,0 @@
-/*
-<MODULE_CONTRACT>
-<purpose>TypeScript contracts for the forge pinned-files protection system (RFC-0733).
-Defines the manifest, entry, violation, and result types used by pinned.init,
-pinned.validate, and the shared pre-check utility.</purpose>
-<non-goals>
-  <item>Does not implement validation logic — use pinned-check.ts and pinned-validate.ts.</item>
-  <item>Does not implement manifest creation — use pinned-init.ts.</item>
-</non-goals>
-</MODULE_CONTRACT>
-<CHANGE_SUMMARY>
-  <item>RFC-0733: initial pinned-files type contracts — PinnedEntry, PinnedManifest, PinnedViolation, PinnedValidateOptions, PinnedValidateResult.</item>
-</CHANGE_SUMMARY>
-*/
-export {};
-//# sourceMappingURL=pinned-types.js.map

package/dist/os/core/handlers/pinned-types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pinned-types.js","sourceRoot":"","sources":["../../../../os/core/handlers/pinned-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;EAaE"}

package/dist/os/core/handlers/pinned-validate.d.ts

@@ -1,4 +0,0 @@
-import type { ForgeCommandInput, ForgeCommandResult, ForgeRuntimeContext } from "../../../src/types.ts";
-import type { PinnedValidateResult } from "./pinned-types.ts";
-export declare function runPinnedValidate(input: ForgeCommandInput, context: ForgeRuntimeContext): Promise<ForgeCommandResult<PinnedValidateResult>>;
-//# sourceMappingURL=pinned-validate.d.ts.map

package/dist/os/core/handlers/pinned-validate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pinned-validate.d.ts","sourceRoot":"","sources":["../../../../os/core/handlers/pinned-validate.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,KAAK,EAGV,oBAAoB,EAErB,MAAM,mBAAmB,CAAC;AAkG3B,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,CAmKnD"}

package/dist/os/core/handlers/pinned-validate.js

@@ -1,248 +0,0 @@
-/*
-<MODULE_CONTRACT>
-<purpose>forge pinned.validate — checks the working tree against .forge/pinned.yaml.
-Scans git diff (staged or last-commit) for delete/move/modify operations on
-pinned files. Supports --allow-pinned-override for audited escape hatch,
---json for structured output, and --mode ci for CI integration.</purpose>
-<non-goals>
-  <item>Does not create or modify the manifest — use pinned.init.</item>
-  <item>Does not install hooks or CI workflows — use pinned.init.</item>
-  <item>Does not block archive commands — that is the pre-check utility in pinned-check.ts.</item>
-</non-goals>
-</MODULE_CONTRACT>
-<CHANGE_SUMMARY>
-  <item>RFC-0733: initial pinned.validate handler with staged/ci modes, override, audit log, manifest integrity check.</item>
-  <item>Gap fix: read FORGE_PINNED_OVERRIDE env var for pre-commit hook override support.</item>
-</CHANGE_SUMMARY>
-*/
-import fs from "node:fs/promises";
-import { exec } from "node:child_process";
-import { promisify } from "node:util";
-import path from "node:path";
-import { loadPinnedManifest, isPinned, PINNED_MANIFEST_PATH, PinnedManifestMalformedError, } from "./pinned-check.js";
-const execAsync = promisify(exec);
-const AUDIT_LOG_PATH = path.join(".forge", "pinned-audit.log");
-/**
- * Parse git diff --name-status output into file entries with operation types.
- * Git status codes:
- *   D = deleted, R = renamed (move), M = modified, A = added, C = copied
- * Format: "R100\tdocs/old.md\tdocs/new.md" or "D\tdocs/file.md"
- */
-function parseGitNameStatus(output) {
-    const entries = [];
-    const lines = output.trim().split("\n").filter(Boolean);
-    for (const line of lines) {
-        const parts = line.split("\t");
-        if (parts.length < 2)
-            continue;
-        const statusCode = parts[0] ?? "";
-        const oldPath = parts[1] ?? "";
-        const newPath = parts[2] ?? oldPath;
-        if (statusCode.startsWith("D")) {
-            entries.push({ relPath: oldPath, operation: "delete" });
-        }
-        else if (statusCode.startsWith("R") || statusCode.startsWith("C")) {
-            entries.push({ relPath: oldPath, operation: "move" });
-            if (newPath !== oldPath) {
-                entries.push({ relPath: newPath, operation: "move" });
-            }
-        }
-        else if (statusCode.startsWith("M")) {
-            entries.push({ relPath: oldPath, operation: "modify" });
-        }
-    }
-    return entries;
-}
-/**
- * Check manifest integrity by comparing current manifest against the last-committed version.
- * If entries have been removed, return a tampered violation.
- */
-async function checkManifestIntegrity(repoRoot, manifest) {
-    try {
-        const { stdout } = await execAsync(`git show HEAD:${PINNED_MANIFEST_PATH}`, {
-            cwd: repoRoot,
-            encoding: "utf8",
-        });
-        // Parse the committed manifest to compare entry paths
-        const { parse: parseYaml } = await import("yaml");
-        const committedParsed = parseYaml(stdout);
-        if (!committedParsed || !Array.isArray(committedParsed["pinned"])) {
-            return null;
-        }
-        const committedEntries = committedParsed["pinned"].map((e) => String(e["path"] ?? ""));
-        const currentPaths = new Set(manifest.pinned.map((e) => e.path));
-        for (const committedPath of committedEntries) {
-            if (!currentPaths.has(committedPath)) {
-                return {
-                    path: PINNED_MANIFEST_PATH,
-                    mode: "freeze",
-                    operation: "modify",
-                    reason: `PINNED_MANIFEST_TAMPERED: entry "${committedPath}" was removed from the manifest`,
-                };
-            }
-        }
-    }
-    catch {
-        // No committed manifest — nothing to compare against. This is normal for new repos.
-    }
-    return null;
-}
-/**
- * Append an override event to the audit log. Uses fs.appendFile for atomic per-line writes.
- */
-async function appendAuditLog(repoRoot, entry) {
-    const logPath = path.join(repoRoot, AUDIT_LOG_PATH);
-    const line = JSON.stringify(entry) + "\n";
-    await fs.appendFile(logPath, line, "utf8");
-}
-export async function runPinnedValidate(input, context) {
-    const { workspaceRoot, logger, outputFormat } = context;
-    const mode = input.flags["mode"] ?? "staged";
-    const json = input.flags["json"] === true || outputFormat === "json";
-    const flagRaw = input.flags["allow-pinned-override"];
-    const flagOverrides = flagRaw
-        ? Array.isArray(flagRaw)
-            ? flagRaw
-            : [flagRaw]
-        : [];
-    // Gap fix: also read FORGE_PINNED_OVERRIDE env var (comma-separated paths).
-    // This allows the pre-commit hook to support overrides without changing the hook script.
-    // Operator sets: FORGE_PINNED_OVERRIDE=docs/rfcs/rfc-0076.md git commit
-    const envOverride = process.env["FORGE_PINNED_OVERRIDE"];
-    const envOverrides = envOverride
-        ? envOverride
-            .split(",")
-            .map((s) => s.trim())
-            .filter(Boolean)
-        : [];
-    const overrides = [...flagOverrides, ...envOverrides];
-    // Load manifest
-    let manifest;
-    try {
-        manifest = await loadPinnedManifest(workspaceRoot);
-    }
-    catch (err) {
-        if (err instanceof PinnedManifestMalformedError) {
-            return {
-                data: {
-                    command: "pinned.validate",
-                    status: "fail",
-                    violations: [],
-                    overrides: [],
-                },
-                exitCode: 2,
-                summary: `Error: ${err.message}`,
-            };
-        }
-        throw err;
-    }
-    if (!manifest) {
-        const msg = "No .forge/pinned.yaml found — pinned-files protection inactive.";
-        if (!json) {
-            logger.info(msg);
-        }
-        return {
-            data: {
-                command: "pinned.validate",
-                status: "pass",
-                violations: [],
-                overrides: [],
-            },
-            summary: msg,
-        };
-    }
-    // Get git diff
-    let diffOutput;
-    try {
-        if (mode === "ci") {
-            const { stdout } = await execAsync("git diff --name-status HEAD~1 HEAD", {
-                cwd: workspaceRoot,
-                encoding: "utf8",
-            });
-            diffOutput = stdout;
-        }
-        else {
-            const { stdout } = await execAsync("git diff --cached --name-status", {
-                cwd: workspaceRoot,
-                encoding: "utf8",
-            });
-            diffOutput = stdout;
-        }
-    }
-    catch {
-        diffOutput = "";
-    }
-    const changedFiles = parseGitNameStatus(diffOutput);
-    // Check each changed file against the manifest
-    const allViolations = [];
-    for (const { relPath, operation } of changedFiles) {
-        const entry = isPinned(manifest, relPath);
-        if (entry) {
-            // For protect mode, only delete and move are violations — modify is allowed
-            if (entry.mode === "protect" && operation === "modify") {
-                continue;
-            }
-            allViolations.push({
-                path: relPath,
-                mode: entry.mode,
-                operation,
-                reason: entry.reason,
-            });
-        }
-    }
-    // Check manifest integrity (tamper detection)
-    const tamperViolation = await checkManifestIntegrity(workspaceRoot, manifest);
-    if (tamperViolation) {
-        allViolations.push(tamperViolation);
-    }
-    // Filter out overridden violations
-    const overrideSet = new Set(overrides);
-    const remainingViolations = [];
-    const appliedOverrides = [];
-    for (const v of allViolations) {
-        if (overrideSet.has(v.path)) {
-            appliedOverrides.push(v.path);
-            // Log to audit file
-            await appendAuditLog(workspaceRoot, {
-                timestamp: new Date().toISOString(),
-                path: v.path,
-                mode: v.mode,
-                reason: v.reason,
-            });
-        }
-        else {
-            remainingViolations.push(v);
-        }
-    }
-    const status = remainingViolations.length > 0 ? "fail" : "pass";
-    const result = {
-        command: "pinned.validate",
-        status,
-        violations: remainingViolations,
-        overrides: appliedOverrides,
-    };
-    if (!json) {
-        if (status === "pass") {
-            if (appliedOverrides.length > 0) {
-                logger.success(`pinned.validate: passed with ${appliedOverrides.length} override(s) (logged to audit)`);
-            }
-            else {
-                logger.success("pinned.validate: no violations");
-            }
-        }
-        else {
-            logger.error(`pinned.validate: ${remainingViolations.length} violation${remainingViolations.length === 1 ? "" : "s"} found`);
-            for (const v of remainingViolations) {
-                logger.error(`  ${v.operation}: ${v.path} (mode: ${v.mode}) — ${v.reason}`);
-            }
-        }
-    }
-    return {
-        data: result,
-        exitCode: status === "pass" ? 0 : 1,
-        summary: status === "pass"
-            ? `No violations${appliedOverrides.length > 0 ? ` (${appliedOverrides.length} override(s) applied)` : ""}`
-            : `${remainingViolations.length} violation${remainingViolations.length === 1 ? "" : "s"} found`,
-    };
-}
-//# sourceMappingURL=pinned-validate.js.map

package/dist/os/core/handlers/pinned-validate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pinned-validate.js","sourceRoot":"","sources":["../../../../os/core/handlers/pinned-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;EAgBE;AAEF,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,IAAI,MAAM,WAAW,CAAC;AAM7B,OAAO,EACL,kBAAkB,EAClB,QAAQ,EACR,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAQ3B,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAClC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAE/D;;;;;GAKG;AACH,SAAS,kBAAkB,CACzB,MAAc;IAEd,MAAM,OAAO,GAAwE,EAAE,CAAC;IACxF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAExD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAE/B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;QAEpC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACtD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,sBAAsB,CACnC,QAAgB,EAChB,QAAwB;IAExB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,iBAAiB,oBAAoB,EAAE,EAAE;YAC1E,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,sDAAsD;QACtD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAmC,CAAC;QAC5E,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,gBAAgB,GAAI,eAAe,CAAC,QAAQ,CAAoC,CAAC,GAAG,CACxF,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAC/B,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAEjE,KAAK,MAAM,aAAa,IAAI,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;gBACrC,OAAO;oBACL,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,QAAQ;oBACnB,MAAM,EAAE,oCAAoC,aAAa,iCAAiC;iBAC3F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oFAAoF;IACtF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAC3B,QAAgB,EAChB,KAKC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC1C,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAwB,EACxB,OAA4B;IAE5B,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAExD,MAAM,IAAI,GACP,KAAK,CAAC,KAAK,CAAC,MAAM,CAAoC,IAAI,QAAQ,CAAC;IACtE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,YAAY,KAAK,MAAM,CAAC;IACrE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrD,MAAM,aAAa,GAAa,OAAO;QACrC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACtB,CAAC,CAAE,OAAoB;YACvB,CAAC,CAAC,CAAC,OAAiB,CAAC;QACvB,CAAC,CAAC,EAAE,CAAC;IAEP,4EAA4E;IAC5E,yFAAyF;IACzF,wEAAwE;IACxE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACzD,MAAM,YAAY,GAAa,WAAW;QACxC,CAAC,CAAC,WAAW;aACR,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC;QACpB,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,SAAS,GAAa,CAAC,GAAG,aAAa,EAAE,GAAG,YAAY,CAAC,CAAC;IAEhE,gBAAgB;IAChB,IAAI,QAA+B,CAAC;IACpC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAA4B,EAAE,CAAC;YAChD,OAAO;gBACL,IAAI,EAAE;oBACJ,OAAO,EAAE,iBAAiB;oBAC1B,MAAM,EAAE,MAAM;oBACd,UAAU,EAAE,EAAE;oBACd,SAAS,EAAE,EAAE;iBACd;gBACD,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE;aACjC,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,iEAAiE,CAAC;QAC9E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,iBAAiB;gBAC1B,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,EAAE;gBACd,SAAS,EAAE,EAAE;aACd;YACD,OAAO,EAAE,GAAG;SACb,CAAC;IACJ,CAAC;IAED,eAAe;IACf,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,oCAAoC,EAAE;gBACvE,GAAG,EAAE,aAAa;gBAClB,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,UAAU,GAAG,MAAM,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,iCAAiC,EAAE;gBACpE,GAAG,EAAE,aAAa;gBAClB,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,UAAU,GAAG,MAAM,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,EAAE,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAEpD,+CAA+C;IAC/C,MAAM,aAAa,GAAsB,EAAE,CAAC;IAC5C,KAAK,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,YAAY,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,4EAA4E;YAC5E,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACvD,SAAS;YACX,CAAC;YACD,aAAa,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC9E,IAAI,eAAe,EAAE,CAAC;QACpB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACtC,CAAC;IAED,mCAAmC;IACnC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,mBAAmB,GAAsB,EAAE,CAAC;IAClD,MAAM,gBAAgB,GAAa,EAAE,CAAC;IAEtC,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,oBAAoB;YACpB,MAAM,cAAc,CAAC,aAAa,EAAE;gBAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAoB,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACjF,MAAM,MAAM,GAAyB;QACnC,OAAO,EAAE,iBAAiB;QAC1B,MAAM;QACN,UAAU,EAAE,mBAAmB;QAC/B,SAAS,EAAE,gBAAgB;KAC5B,CAAC;IAEF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,OAAO,CACZ,gCAAgC,gBAAgB,CAAC,MAAM,gCAAgC,CACxF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CACV,oBAAoB,mBAAmB,CAAC,MAAM,aAAa,mBAAmB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,CAC/G,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;gBACpC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,gBAAgB,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC,MAAM,uBAAuB,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1G,CAAC,CAAC,GAAG,mBAAmB,CAAC,MAAM,aAAa,mBAAmB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ;KACpG,CAAC;AACJ,CAAC"}