@warpgogol/forge 4.1.5 → 4.2.1

package/dist/os/core/handlers/pinned-validate.js

@@ -0,0 +1,248 @@
+/*
+<MODULE_CONTRACT>
+<purpose>forge pinned.validate — checks the working tree against .forge/pinned.yaml.
+Scans git diff (staged or last-commit) for delete/move/modify operations on
+pinned files. Supports --allow-pinned-override for audited escape hatch,
+--json for structured output, and --mode ci for CI integration.</purpose>
+<non-goals>
+  <item>Does not create or modify the manifest — use pinned.init.</item>
+  <item>Does not install hooks or CI workflows — use pinned.init.</item>
+  <item>Does not block archive commands — that is the pre-check utility in pinned-check.ts.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0733: initial pinned.validate handler with staged/ci modes, override, audit log, manifest integrity check.</item>
+  <item>Gap fix: read FORGE_PINNED_OVERRIDE env var for pre-commit hook override support.</item>
+</CHANGE_SUMMARY>
+*/
+import fs from "node:fs/promises";
+import { exec } from "node:child_process";
+import { promisify } from "node:util";
+import path from "node:path";
+import { loadPinnedManifest, isPinned, PINNED_MANIFEST_PATH, PinnedManifestMalformedError, } from "./pinned-check.js";
+const execAsync = promisify(exec);
+const AUDIT_LOG_PATH = path.join(".forge", "pinned-audit.log");
+/**
+ * Parse git diff --name-status output into file entries with operation types.
+ * Git status codes:
+ *   D = deleted, R = renamed (move), M = modified, A = added, C = copied
+ * Format: "R100\tdocs/old.md\tdocs/new.md" or "D\tdocs/file.md"
+ */
+function parseGitNameStatus(output) {
+    const entries = [];
+    const lines = output.trim().split("\n").filter(Boolean);
+    for (const line of lines) {
+        const parts = line.split("\t");
+        if (parts.length < 2)
+            continue;
+        const statusCode = parts[0] ?? "";
+        const oldPath = parts[1] ?? "";
+        const newPath = parts[2] ?? oldPath;
+        if (statusCode.startsWith("D")) {
+            entries.push({ relPath: oldPath, operation: "delete" });
+        }
+        else if (statusCode.startsWith("R") || statusCode.startsWith("C")) {
+            entries.push({ relPath: oldPath, operation: "move" });
+            if (newPath !== oldPath) {
+                entries.push({ relPath: newPath, operation: "move" });
+            }
+        }
+        else if (statusCode.startsWith("M")) {
+            entries.push({ relPath: oldPath, operation: "modify" });
+        }
+    }
+    return entries;
+}
+/**
+ * Check manifest integrity by comparing current manifest against the last-committed version.
+ * If entries have been removed, return a tampered violation.
+ */
+async function checkManifestIntegrity(repoRoot, manifest) {
+    try {
+        const { stdout } = await execAsync(`git show HEAD:${PINNED_MANIFEST_PATH}`, {
+            cwd: repoRoot,
+            encoding: "utf8",
+        });
+        // Parse the committed manifest to compare entry paths
+        const { parse: parseYaml } = await import("yaml");
+        const committedParsed = parseYaml(stdout);
+        if (!committedParsed || !Array.isArray(committedParsed["pinned"])) {
+            return null;
+        }
+        const committedEntries = committedParsed["pinned"].map((e) => String(e["path"] ?? ""));
+        const currentPaths = new Set(manifest.pinned.map((e) => e.path));
+        for (const committedPath of committedEntries) {
+            if (!currentPaths.has(committedPath)) {
+                return {
+                    path: PINNED_MANIFEST_PATH,
+                    mode: "freeze",
+                    operation: "modify",
+                    reason: `PINNED_MANIFEST_TAMPERED: entry "${committedPath}" was removed from the manifest`,
+                };
+            }
+        }
+    }
+    catch {
+        // No committed manifest — nothing to compare against. This is normal for new repos.
+    }
+    return null;
+}
+/**
+ * Append an override event to the audit log. Uses fs.appendFile for atomic per-line writes.
+ */
+async function appendAuditLog(repoRoot, entry) {
+    const logPath = path.join(repoRoot, AUDIT_LOG_PATH);
+    const line = JSON.stringify(entry) + "\n";
+    await fs.appendFile(logPath, line, "utf8");
+}
+export async function runPinnedValidate(input, context) {
+    const { workspaceRoot, logger, outputFormat } = context;
+    const mode = input.flags["mode"] ?? "staged";
+    const json = input.flags["json"] === true || outputFormat === "json";
+    const flagRaw = input.flags["allow-pinned-override"];
+    const flagOverrides = flagRaw
+        ? Array.isArray(flagRaw)
+            ? flagRaw
+            : [flagRaw]
+        : [];
+    // Gap fix: also read FORGE_PINNED_OVERRIDE env var (comma-separated paths).
+    // This allows the pre-commit hook to support overrides without changing the hook script.
+    // Operator sets: FORGE_PINNED_OVERRIDE=docs/rfcs/rfc-0076.md git commit
+    const envOverride = process.env["FORGE_PINNED_OVERRIDE"];
+    const envOverrides = envOverride
+        ? envOverride
+            .split(",")
+            .map((s) => s.trim())
+            .filter(Boolean)
+        : [];
+    const overrides = [...flagOverrides, ...envOverrides];
+    // Load manifest
+    let manifest;
+    try {
+        manifest = await loadPinnedManifest(workspaceRoot);
+    }
+    catch (err) {
+        if (err instanceof PinnedManifestMalformedError) {
+            return {
+                data: {
+                    command: "pinned.validate",
+                    status: "fail",
+                    violations: [],
+                    overrides: [],
+                },
+                exitCode: 2,
+                summary: `Error: ${err.message}`,
+            };
+        }
+        throw err;
+    }
+    if (!manifest) {
+        const msg = "No .forge/pinned.yaml found — pinned-files protection inactive.";
+        if (!json) {
+            logger.info(msg);
+        }
+        return {
+            data: {
+                command: "pinned.validate",
+                status: "pass",
+                violations: [],
+                overrides: [],
+            },
+            summary: msg,
+        };
+    }
+    // Get git diff
+    let diffOutput;
+    try {
+        if (mode === "ci") {
+            const { stdout } = await execAsync("git diff --name-status HEAD~1 HEAD", {
+                cwd: workspaceRoot,
+                encoding: "utf8",
+            });
+            diffOutput = stdout;
+        }
+        else {
+            const { stdout } = await execAsync("git diff --cached --name-status", {
+                cwd: workspaceRoot,
+                encoding: "utf8",
+            });
+            diffOutput = stdout;
+        }
+    }
+    catch {
+        diffOutput = "";
+    }
+    const changedFiles = parseGitNameStatus(diffOutput);
+    // Check each changed file against the manifest
+    const allViolations = [];
+    for (const { relPath, operation } of changedFiles) {
+        const entry = isPinned(manifest, relPath);
+        if (entry) {
+            // For protect mode, only delete and move are violations — modify is allowed
+            if (entry.mode === "protect" && operation === "modify") {
+                continue;
+            }
+            allViolations.push({
+                path: relPath,
+                mode: entry.mode,
+                operation,
+                reason: entry.reason,
+            });
+        }
+    }
+    // Check manifest integrity (tamper detection)
+    const tamperViolation = await checkManifestIntegrity(workspaceRoot, manifest);
+    if (tamperViolation) {
+        allViolations.push(tamperViolation);
+    }
+    // Filter out overridden violations
+    const overrideSet = new Set(overrides);
+    const remainingViolations = [];
+    const appliedOverrides = [];
+    for (const v of allViolations) {
+        if (overrideSet.has(v.path)) {
+            appliedOverrides.push(v.path);
+            // Log to audit file
+            await appendAuditLog(workspaceRoot, {
+                timestamp: new Date().toISOString(),
+                path: v.path,
+                mode: v.mode,
+                reason: v.reason,
+            });
+        }
+        else {
+            remainingViolations.push(v);
+        }
+    }
+    const status = remainingViolations.length > 0 ? "fail" : "pass";
+    const result = {
+        command: "pinned.validate",
+        status,
+        violations: remainingViolations,
+        overrides: appliedOverrides,
+    };
+    if (!json) {
+        if (status === "pass") {
+            if (appliedOverrides.length > 0) {
+                logger.success(`pinned.validate: passed with ${appliedOverrides.length} override(s) (logged to audit)`);
+            }
+            else {
+                logger.success("pinned.validate: no violations");
+            }
+        }
+        else {
+            logger.error(`pinned.validate: ${remainingViolations.length} violation${remainingViolations.length === 1 ? "" : "s"} found`);
+            for (const v of remainingViolations) {
+                logger.error(`  ${v.operation}: ${v.path} (mode: ${v.mode}) — ${v.reason}`);
+            }
+        }
+    }
+    return {
+        data: result,
+        exitCode: status === "pass" ? 0 : 1,
+        summary: status === "pass"
+            ? `No violations${appliedOverrides.length > 0 ? ` (${appliedOverrides.length} override(s) applied)` : ""}`
+            : `${remainingViolations.length} violation${remainingViolations.length === 1 ? "" : "s"} found`,
+    };
+}
+//# sourceMappingURL=pinned-validate.js.map

package/dist/os/core/handlers/pinned-validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinned-validate.js","sourceRoot":"","sources":["../../../../os/core/handlers/pinned-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;EAgBE;AAEF,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,IAAI,MAAM,WAAW,CAAC;AAM7B,OAAO,EACL,kBAAkB,EAClB,QAAQ,EACR,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAQ3B,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAClC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAE/D;;;;;GAKG;AACH,SAAS,kBAAkB,CACzB,MAAc;IAEd,MAAM,OAAO,GAAwE,EAAE,CAAC;IACxF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAExD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAE/B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;QAEpC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACtD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,sBAAsB,CACnC,QAAgB,EAChB,QAAwB;IAExB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,iBAAiB,oBAAoB,EAAE,EAAE;YAC1E,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,sDAAsD;QACtD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAmC,CAAC;QAC5E,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,gBAAgB,GAAI,eAAe,CAAC,QAAQ,CAAoC,CAAC,GAAG,CACxF,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAC/B,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAEjE,KAAK,MAAM,aAAa,IAAI,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;gBACrC,OAAO;oBACL,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,QAAQ;oBACnB,MAAM,EAAE,oCAAoC,aAAa,iCAAiC;iBAC3F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oFAAoF;IACtF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAC3B,QAAgB,EAChB,KAKC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC1C,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAwB,EACxB,OAA4B;IAE5B,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAExD,MAAM,IAAI,GACP,KAAK,CAAC,KAAK,CAAC,MAAM,CAAoC,IAAI,QAAQ,CAAC;IACtE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,YAAY,KAAK,MAAM,CAAC;IACrE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrD,MAAM,aAAa,GAAa,OAAO;QACrC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACtB,CAAC,CAAE,OAAoB;YACvB,CAAC,CAAC,CAAC,OAAiB,CAAC;QACvB,CAAC,CAAC,EAAE,CAAC;IAEP,4EAA4E;IAC5E,yFAAyF;IACzF,wEAAwE;IACxE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACzD,MAAM,YAAY,GAAa,WAAW;QACxC,CAAC,CAAC,WAAW;aACR,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC;QACpB,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,SAAS,GAAa,CAAC,GAAG,aAAa,EAAE,GAAG,YAAY,CAAC,CAAC;IAEhE,gBAAgB;IAChB,IAAI,QAA+B,CAAC;IACpC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAA4B,EAAE,CAAC;YAChD,OAAO;gBACL,IAAI,EAAE;oBACJ,OAAO,EAAE,iBAAiB;oBAC1B,MAAM,EAAE,MAAM;oBACd,UAAU,EAAE,EAAE;oBACd,SAAS,EAAE,EAAE;iBACd;gBACD,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE;aACjC,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,iEAAiE,CAAC;QAC9E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,iBAAiB;gBAC1B,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,EAAE;gBACd,SAAS,EAAE,EAAE;aACd;YACD,OAAO,EAAE,GAAG;SACb,CAAC;IACJ,CAAC;IAED,eAAe;IACf,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,oCAAoC,EAAE;gBACvE,GAAG,EAAE,aAAa;gBAClB,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,UAAU,GAAG,MAAM,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,iCAAiC,EAAE;gBACpE,GAAG,EAAE,aAAa;gBAClB,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,UAAU,GAAG,MAAM,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,EAAE,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAEpD,+CAA+C;IAC/C,MAAM,aAAa,GAAsB,EAAE,CAAC;IAC5C,KAAK,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,YAAY,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,4EAA4E;YAC5E,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACvD,SAAS;YACX,CAAC;YACD,aAAa,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC9E,IAAI,eAAe,EAAE,CAAC;QACpB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACtC,CAAC;IAED,mCAAmC;IACnC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,mBAAmB,GAAsB,EAAE,CAAC;IAClD,MAAM,gBAAgB,GAAa,EAAE,CAAC;IAEtC,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,oBAAoB;YACpB,MAAM,cAAc,CAAC,aAAa,EAAE;gBAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAoB,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACjF,MAAM,MAAM,GAAyB;QACnC,OAAO,EAAE,iBAAiB;QAC1B,MAAM;QACN,UAAU,EAAE,mBAAmB;QAC/B,SAAS,EAAE,gBAAgB;KAC5B,CAAC;IAEF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,OAAO,CACZ,gCAAgC,gBAAgB,CAAC,MAAM,gCAAgC,CACxF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CACV,oBAAoB,mBAAmB,CAAC,MAAM,aAAa,mBAAmB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,CAC/G,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;gBACpC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,gBAAgB,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC,MAAM,uBAAuB,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1G,CAAC,CAAC,GAAG,mBAAmB,CAAC,MAAM,aAAa,mBAAmB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ;KACpG,CAAC;AACJ,CAAC"}

package/dist/os/core/handlers/profile-resolve.d.ts

@@ -0,0 +1,13 @@
+import { type StackProfile } from "../../../src/profiles/stack-profile.ts";
+import type { ForgeCommandInput, ForgeRuntimeContext } from "../../../src/types.ts";
+export interface ResolvedProfile {
+    profile: StackProfile;
+    profilePath: string;
+}
+export interface LifecycleFlags {
+    dryRun: boolean;
+    profileIdOverride?: string;
+}
+export declare function resolveLifecycleFlags(input: ForgeCommandInput, context: ForgeRuntimeContext): LifecycleFlags;
+export declare function resolveActiveProfile(workspaceRoot: string, forgeRoot?: string, profileIdOverride?: string): ResolvedProfile | null;
+//# sourceMappingURL=profile-resolve.d.ts.map

package/dist/os/core/handlers/profile-resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-resolve.d.ts","sourceRoot":"","sources":["../../../../os/core/handlers/profile-resolve.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEpF,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAuBD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,mBAAmB,GAC3B,cAAc,CAMhB;AAED,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,MAAM,EAClB,iBAAiB,CAAC,EAAE,MAAM,GACzB,eAAe,GAAG,IAAI,CAyBxB"}

package/dist/os/core/handlers/profile-resolve.js

@@ -0,0 +1,65 @@
+/*
+<MODULE_CONTRACT>
+<purpose>Shared active profile resolution for lifecycle commands (forge.dev, forge.build, forge.validate). Reads forge.yaml, resolves the active profile id, loads the profile YAML, and returns the StackProfile or null.</purpose>
+<non-goals>
+  <item>Do not implement command-specific logic — this is shared resolution only.</item>
+  <item>Do not import from @warpgogol/* — this module is portable.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0674: initial shared profile resolution for lifecycle commands.</item>
+</CHANGE_SUMMARY>
+*/
+import fs from "node:fs";
+import path from "node:path";
+import { parse as parseYaml } from "yaml";
+import { resolveForgeRoot } from "../../../src/config/forge-config.js";
+import { listStackProfiles } from "../../../src/profiles/stack-profile.js";
+function readProfileIdFromForgeYaml(workspaceRoot) {
+    const configPath = path.join(workspaceRoot, "forge.yaml");
+    if (!fs.existsSync(configPath)) {
+        return undefined;
+    }
+    try {
+        const raw = fs.readFileSync(configPath, "utf8");
+        const parsed = parseYaml(raw);
+        if (typeof parsed["profile"] === "string") {
+            return parsed["profile"];
+        }
+        const project = parsed["project"];
+        if (project && Array.isArray(project["stack"]) && project["stack"].length > 0) {
+            return project["stack"][0];
+        }
+    }
+    catch {
+        // forge.yaml not parseable — no profile
+    }
+    return undefined;
+}
+export function resolveLifecycleFlags(input, context) {
+    return {
+        dryRun: context.dryRun || input.flags["dry-run"] === true,
+        profileIdOverride: typeof input.flags["profile"] === "string" ? input.flags["profile"] : undefined,
+    };
+}
+export function resolveActiveProfile(workspaceRoot, forgeRoot, profileIdOverride) {
+    const root = forgeRoot ?? resolveForgeRoot(workspaceRoot);
+    const profiles = listStackProfiles(root);
+    if (profiles.length === 0) {
+        return null;
+    }
+    let profileId = profileIdOverride;
+    if (!profileId) {
+        profileId = readProfileIdFromForgeYaml(workspaceRoot);
+    }
+    if (!profileId) {
+        return null;
+    }
+    const profile = profiles.find((p) => p.id === profileId);
+    if (!profile) {
+        return null;
+    }
+    const profilePath = path.join(root, "profiles", `${profileId}.yaml`);
+    return { profile, profilePath };
+}
+//# sourceMappingURL=profile-resolve.js.map

package/dist/os/core/handlers/profile-resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-resolve.js","sourceRoot":"","sources":["../../../../os/core/handlers/profile-resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;EAWE;AAEF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAqB,MAAM,wCAAwC,CAAC;AAQ9F,SAAS,0BAA0B,CAAC,aAAqB;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC1D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAA4B,CAAC;QACzD,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAwC,CAAC;QACzE,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9E,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAW,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAOD,MAAM,UAAU,qBAAqB,CACnC,KAAwB,EACxB,OAA4B;IAE5B,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI;QACzD,iBAAiB,EACf,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,SAAS;KAC9F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,aAAqB,EACrB,SAAkB,EAClB,iBAA0B;IAE1B,MAAM,IAAI,GAAG,SAAS,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAEzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,SAAS,GAAuB,iBAAiB,CAAC;IAEtD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,0BAA0B,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;IACrE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC"}

package/dist/os/core/handlers/public-surface.d.ts

@@ -0,0 +1,13 @@
+import type { ForgeCommandInput, ForgeCommandResult, ForgeRuntimeContext } from "../../../src/types.ts";
+export interface SurfaceCheck {
+    rule: string;
+    message: string;
+    status: "pass" | "warn" | "fail";
+}
+export interface PublicSurfaceResult {
+    command: "forge.public-surface.validate";
+    status: "pass" | "fail";
+    checks: SurfaceCheck[];
+}
+export declare function runPublicSurfaceValidate(_input: ForgeCommandInput, context: ForgeRuntimeContext): Promise<ForgeCommandResult<PublicSurfaceResult>>;
+//# sourceMappingURL=public-surface.d.ts.map

package/dist/os/core/handlers/public-surface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-surface.d.ts","sourceRoot":"","sources":["../../../../os/core/handlers/public-surface.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,+BAA+B,CAAC;IACzC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,MAAM,EAAE,YAAY,EAAE,CAAC;CACxB;AAwBD,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,CAiIlD"}

package/dist/os/core/handlers/public-surface.js

@@ -0,0 +1,148 @@
+/*
+<MODULE_CONTRACT>
+<purpose>forge.public-surface.validate — check consistency between README.md, package.json, and docs/ structure. Enforces SURFACE-01..05 rules from RFC-1080.</purpose>
+<non-goals>
+  <item>Do not import from @warpgogol/* — this module is portable.</item>
+  <item>Do not modify files — read-only validation.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-1080: initial public-surface consistency validator — README length, Node version match, .tgz absence, docs/ structure, required root files.</item>
+  <item>RFC-1080: add monorepo auto-detection — resolve packages/forge/ when run from monorepo root.</item>
+</CHANGE_SUMMARY>
+*/
+import fs from "node:fs";
+import path from "node:path";
+const REQUIRED_DOCS_FILES = [
+    "docs/getting-started.md",
+    "docs/concepts/why-forge.md",
+    "docs/reference/cli.md",
+];
+const REQUIRED_ROOT_FILES = ["CONTRIBUTING.md", "SECURITY.md", "CHANGELOG.md"];
+function readJsonFile(filePath) {
+    try {
+        const raw = fs.readFileSync(filePath, "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+function extractNodeMajorVersion(range) {
+    const match = range.match(/(\d+)/);
+    return match ? parseInt(match[1], 10) : null;
+}
+export async function runPublicSurfaceValidate(_input, context) {
+    const { workspaceRoot, logger, outputFormat } = context;
+    const checks = [];
+    // Monorepo vs standalone resolution (RFC-1080):
+    // If packages/forge/ exists relative to workspaceRoot, use it (monorepo mode).
+    // Otherwise, use workspaceRoot directly (standalone extracted repo mode).
+    const forgePkgRoot = fs.existsSync(path.join(workspaceRoot, "packages", "forge"))
+        ? path.join(workspaceRoot, "packages", "forge")
+        : workspaceRoot;
+    const readmePath = path.join(forgePkgRoot, "README.md");
+    const packageJsonPath = path.join(forgePkgRoot, "package.json");
+    const readmeContent = fs.existsSync(readmePath) ? fs.readFileSync(readmePath, "utf8") : "";
+    const readmeLines = readmeContent.split("\n").length;
+    const pkg = readJsonFile(packageJsonPath);
+    // SURFACE-01: README length (warning)
+    checks.push({
+        rule: "SURFACE-01",
+        message: `README.md is ${readmeLines} lines (${readmeLines <= 300 ? "under 300" : "over 300"})`,
+        status: readmeLines <= 300 ? "pass" : "warn",
+    });
+    // SURFACE-02: Node version consistency (error)
+    if (pkg) {
+        const engines = pkg["engines"];
+        const nodeRange = engines?.["node"];
+        const pkgMajor = nodeRange ? extractNodeMajorVersion(nodeRange) : null;
+        if (pkgMajor !== null) {
+            const readmeNodeMatch = readmeContent.match(/Node(?:\.js)?\s+v?(\d+)/gi);
+            const readmeNodeVersions = readmeNodeMatch
+                ? readmeNodeMatch.map((m) => parseInt(m.match(/(\d+)/)[1], 10))
+                : [];
+            const mismatched = readmeNodeVersions.filter((v) => v !== pkgMajor);
+            checks.push({
+                rule: "SURFACE-02",
+                message: mismatched.length === 0
+                    ? `Node version consistent: ${nodeRange}`
+                    : `README references Node ${mismatched.join(", ")} but package.json requires ${nodeRange}`,
+                status: mismatched.length === 0 ? "pass" : "fail",
+            });
+        }
+        else {
+            checks.push({
+                rule: "SURFACE-02",
+                message: "package.json missing engines.node",
+                status: "fail",
+            });
+        }
+    }
+    else {
+        checks.push({
+            rule: "SURFACE-02",
+            message: "package.json not found",
+            status: "fail",
+        });
+    }
+    // SURFACE-03: No .tgz files in root (error)
+    const tgzFiles = fs.readdirSync(forgePkgRoot).filter((f) => f.endsWith(".tgz"));
+    checks.push({
+        rule: "SURFACE-03",
+        message: tgzFiles.length === 0
+            ? "No .tgz files in root"
+            : `Found ${tgzFiles.length} .tgz file(s): ${tgzFiles.join(", ")}`,
+        status: tgzFiles.length === 0 ? "pass" : "fail",
+    });
+    // SURFACE-04: docs/ directory with required files (error)
+    const missingDocs = REQUIRED_DOCS_FILES.filter((f) => !fs.existsSync(path.join(forgePkgRoot, f)));
+    checks.push({
+        rule: "SURFACE-04",
+        message: missingDocs.length === 0
+            ? "docs/ directory exists with required files"
+            : `Missing docs files: ${missingDocs.join(", ")}`,
+        status: missingDocs.length === 0 ? "pass" : "fail",
+    });
+    // SURFACE-05: Required root files (warning)
+    const missingRoot = REQUIRED_ROOT_FILES.filter((f) => !fs.existsSync(path.join(forgePkgRoot, f)));
+    checks.push({
+        rule: "SURFACE-05",
+        message: missingRoot.length === 0
+            ? "Required root files present (CONTRIBUTING.md, SECURITY.md, CHANGELOG.md)"
+            : `Missing root files: ${missingRoot.join(", ")}`,
+        status: missingRoot.length === 0 ? "pass" : "warn",
+    });
+    const hasFails = checks.some((c) => c.status === "fail");
+    const status = hasFails ? "fail" : "pass";
+    if (outputFormat === "pretty") {
+        logger.section("Forge Public Surface Validate");
+        for (const check of checks) {
+            const icon = check.status === "pass" ? "✓" : check.status === "warn" ? "⚠" : "✖";
+            const fn = check.status === "pass"
+                ? logger.success
+                : check.status === "warn"
+                    ? logger.warn
+                    : logger.error;
+            fn(`${icon} [${check.rule}] ${check.message}`);
+        }
+        if (status === "pass") {
+            logger.success("All public surface checks passed.");
+        }
+        else {
+            logger.error("Some public surface checks failed.");
+        }
+    }
+    return {
+        data: {
+            command: "forge.public-surface.validate",
+            status,
+            checks,
+        },
+        exitCode: hasFails ? 1 : 0,
+        summary: status === "pass"
+            ? "forge.public-surface.validate: all checks passed"
+            : `forge.public-surface.validate: ${checks.filter((c) => c.status === "fail").length} fail(s), ${checks.filter((c) => c.status === "warn").length} warn(s)`,
+    };
+}
+//# sourceMappingURL=public-surface.js.map

package/dist/os/core/handlers/public-surface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-surface.js","sourceRoot":"","sources":["../../../../os/core/handlers/public-surface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;EAYE;AAEF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAmB7B,MAAM,mBAAmB,GAAG;IAC1B,yBAAyB;IACzB,4BAA4B;IAC5B,uBAAuB;CACxB,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,iBAAiB,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;AAE/E,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAyB,EACzB,OAA4B;IAE5B,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACxD,MAAM,MAAM,GAAmB,EAAE,CAAC;IAElC,gDAAgD;IAChD,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,YAAY,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/E,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC;QAC/C,CAAC,CAAC,aAAa,CAAC;IAElB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAEhE,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAErD,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;IAE1C,sCAAsC;IACtC,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,gBAAgB,WAAW,WAAW,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,GAAG;QAC/F,MAAM,EAAE,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;KAC7C,CAAC,CAAC;IAEH,+CAA+C;IAC/C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAuC,CAAC;QACrE,MAAM,SAAS,GAAG,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEvE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACzE,MAAM,kBAAkB,GAAG,eAAe;gBACxC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChE,CAAC,CAAC,EAAE,CAAC;YAEP,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;YACpE,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,YAAY;gBAClB,OAAO,EACL,UAAU,CAAC,MAAM,KAAK,CAAC;oBACrB,CAAC,CAAC,4BAA4B,SAAS,EAAE;oBACzC,CAAC,CAAC,0BAA0B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,SAAS,EAAE;gBAC9F,MAAM,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;aAClD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,mCAAmC;gBAC5C,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,wBAAwB;YACjC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC;IAED,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,YAAY;QAClB,OAAO,EACL,QAAQ,CAAC,MAAM,KAAK,CAAC;YACnB,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,SAAS,QAAQ,CAAC,MAAM,kBAAkB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACrE,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;KAChD,CAAC,CAAC;IAEH,0DAA0D;IAC1D,MAAM,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,YAAY;QAClB,OAAO,EACL,WAAW,CAAC,MAAM,KAAK,CAAC;YACtB,CAAC,CAAC,4CAA4C;YAC9C,CAAC,CAAC,uBAAuB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACrD,MAAM,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;KACnD,CAAC,CAAC;IAEH,4CAA4C;IAC5C,MAAM,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,YAAY;QAClB,OAAO,EACL,WAAW,CAAC,MAAM,KAAK,CAAC;YACtB,CAAC,CAAC,0EAA0E;YAC5E,CAAC,CAAC,uBAAuB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACrD,MAAM,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;KACnD,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACzD,MAAM,MAAM,GAAoB,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAE3D,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QAChD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACjF,MAAM,EAAE,GACN,KAAK,CAAC,MAAM,KAAK,MAAM;gBACrB,CAAC,CAAC,MAAM,CAAC,OAAO;gBAChB,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM;oBACvB,CAAC,CAAC,MAAM,CAAC,IAAI;oBACb,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACrB,EAAE,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,+BAA+B;YACxC,MAAM;YACN,MAAM;SACP;QACD,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,OAAO,EACL,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,kDAAkD;YACpD,CAAC,CAAC,kCAAkC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,aAAa,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,UAAU;KAChK,CAAC;AACJ,CAAC"}

package/dist/os/core/handlers/release-prepare.d.ts

@@ -0,0 +1,25 @@
+import type { ForgeCommandInput, ForgeCommandResult, ForgeRuntimeContext } from "../../../src/types.ts";
+export interface ReleaseManifest {
+    schemaVersion: string;
+    releaseId: string;
+    profileId: string;
+    version: string;
+    createdAt: string;
+    artifacts: Array<{
+        artifactId: string;
+        path: string;
+        hash: string;
+        size: number;
+        deterministic: boolean;
+    }>;
+    determinismChecked: boolean;
+    validationPassed: boolean;
+}
+export interface ForgeReleasePrepareResult {
+    command: "forge.release.prepare";
+    profileId: string;
+    releaseDir: string;
+    manifest: ReleaseManifest;
+}
+export declare function runReleasePrepare(input: ForgeCommandInput, context: ForgeRuntimeContext): Promise<ForgeCommandResult<ForgeReleasePrepareResult>>;
+//# sourceMappingURL=release-prepare.d.ts.map

package/dist/os/core/handlers/release-prepare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-prepare.d.ts","sourceRoot":"","sources":["../../../../os/core/handlers/release-prepare.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAM/B,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,KAAK,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC,CAAC;IACH,kBAAkB,EAAE,OAAO,CAAC;IAC5B,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,uBAAuB,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAyDD,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAC,CAsLxD"}