forge-cw 0.1.4 → 0.1.6

package/console/index.html

@@ -4,8 +4,8 @@
   <meta charset="UTF-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1.0" />
   <title>Forge Console</title>
-  <script type="module" crossorigin src="/assets/index-ciIvVZWo.js"></script>
-  <link rel="stylesheet" crossorigin href="/assets/index-D_58OQhA.css">
+  <script type="module" crossorigin src="/assets/index-DEebs8fg.js"></script>
+  <link rel="stylesheet" crossorigin href="/assets/index-C3X9_uj-.css">
 </head>
 <body>
   <div id="app"></div>

package/dist/index.js

@@ -191,24 +191,36 @@ var init_db = __esm({
 // ../core/dist/modules.js
 import { readdirSync, readFileSync, existsSync } from "node:fs";
 import { join } from "node:path";
-var ModuleLoader;
+var BUNDLED_MODULES, ModuleLoader;
 var init_modules = __esm({
   "../core/dist/modules.js"() {
     "use strict";
+    BUNDLED_MODULES = ["mod-qa"];
     ModuleLoader = class {
       modulesDir;
+      bundledDir;
       loaded = /* @__PURE__ */ new Map();
-      constructor(modulesDir) {
+      constructor(modulesDir, bundledDir) {
         this.modulesDir = modulesDir;
+        this.bundledDir = bundledDir;
       }
       discover() {
         this.loaded.clear();
-        if (!existsSync(this.modulesDir))
-          return [];
-        const entries = readdirSync(this.modulesDir, { withFileTypes: true });
         const manifests = [];
-        for (const entry of entries) {
-          if (!entry.isDirectory())
+        const bundled = /* @__PURE__ */ new Set();
+        if (this.bundledDir) {
+          for (const name of BUNDLED_MODULES) {
+            const manifest = this.loadFrom(this.bundledDir, name);
+            if (!manifest)
+              continue;
+            bundled.add(name);
+            manifests.push(manifest);
+          }
+        }
+        if (!existsSync(this.modulesDir))
+          return manifests;
+        for (const entry of readdirSync(this.modulesDir, { withFileTypes: true })) {
+          if (!entry.isDirectory() || bundled.has(entry.name))
             continue;
           const manifest = this.load(entry.name);
           if (manifest)
@@ -217,7 +229,10 @@ var init_modules = __esm({
         return manifests;
       }
       load(dirName) {
-        const manifestPath = join(this.modulesDir, dirName, "forge-module.json");
+        return this.loadFrom(this.modulesDir, dirName);
+      }
+      loadFrom(dir, dirName) {
+        const manifestPath = join(dir, dirName, "forge-module.json");
         if (!existsSync(manifestPath))
           return void 0;
         try {
@@ -307,6 +322,47 @@ var init_runner = __esm({
   }
 });
 
+// ../core/dist/action-params.js
+function validateParams(def, params) {
+  const given = params ?? {};
+  if (typeof given !== "object" || Array.isArray(given)) {
+    return { error: "params must be an object of strings" };
+  }
+  const values = given;
+  const declared = def.params ?? {};
+  const extra = Object.keys(values).filter((k) => !Object.hasOwn(declared, k));
+  if (extra.length > 0) {
+    return { error: `Unknown param${extra.length > 1 ? "s" : ""} for action ${def.id}: ${extra.join(", ")}` };
+  }
+  const env = {};
+  for (const [name, { pattern }] of Object.entries(declared)) {
+    if (!NAME.test(name))
+      return { error: `Action ${def.id} declares an invalid param name: ${name}` };
+    let re;
+    try {
+      re = new RegExp(`^(?:${pattern})$`);
+    } catch {
+      return { error: `Action ${def.id} declares an invalid pattern for ${name}` };
+    }
+    const value = values[name];
+    if (value === void 0)
+      return { error: `Missing param ${name}` };
+    if (typeof value !== "string")
+      return { error: `Param ${name} must be a string` };
+    if (!re.test(value))
+      return { error: `Param ${name} does not match ${pattern}` };
+    env[`FORGE_PARAM_${name.toUpperCase()}`] = value;
+  }
+  return { env };
+}
+var NAME;
+var init_action_params = __esm({
+  "../core/dist/action-params.js"() {
+    "use strict";
+    NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+  }
+});
+
 // ../core/dist/auth.js
 function bearerAuth(token) {
   return async (c, next) => {
@@ -3886,7 +3942,7 @@ function createForgeServer(options) {
   const dbPath = join12(dataDir, "forge.db");
   const modulesDir = join12(dataDir, "modules");
   const db = externalDb ?? new ForgeDB(dbPath);
-  const loader = new ModuleLoader(modulesDir);
+  const loader = new ModuleLoader(modulesDir, options.bundledModulesDir);
   const runner = new ActionRunner();
   loader.discover();
   const app = new Hono4();
@@ -3894,7 +3950,7 @@ function createForgeServer(options) {
   if (authToken) {
     app.use("/api/*", bearerAuth(authToken));
   }
-  const cwReader = new CWReader();
+  const cwReader = new CWReader(options.cwDir);
   const loginManager = new LoginManager(resolveCwBin(cwReader.cwHome));
   app.route("/api/cw", cwRoutes(cwReader, { loginManager, localOnly }));
   app.route("/api/skills", skillRoutes(cwReader));
@@ -3931,20 +3987,32 @@ function createForgeServer(options) {
   async function resolveAction(c) {
     const moduleName = c.req.param("module");
     const actionId = c.req.param("action");
-    const { projectId } = await c.req.json();
+    const { projectId, cwProject, params } = await c.req.json();
     const action = loader.getAction(moduleName, actionId);
     if (!action) {
       return c.json({ error: "Action not found" }, 404);
     }
-    const project = projectId ? db.getProject(projectId) : void 0;
-    const cwd = project?.path ?? process.cwd();
+    const checked = validateParams(action, params);
+    if ("error" in checked) {
+      return c.json({ error: checked.error }, 400);
+    }
+    let cwd;
+    if (cwProject !== void 0) {
+      const projects = cwReader.getProjects();
+      const path = Object.hasOwn(projects, cwProject) ? projects[cwProject]?.path : void 0;
+      if (!path)
+        return c.json({ error: `Unknown CW project: ${cwProject}` }, 400);
+      cwd = path;
+    } else {
+      cwd = (projectId ? db.getProject(projectId) : void 0)?.path ?? process.cwd();
+    }
     const logId = db.logAction({
       projectId: projectId ?? null,
       moduleId: moduleName,
       actionId,
       command: action.command
     });
-    return { action, cwd, logId };
+    return { action, cwd, logId, env: checked.env };
   }
   app.get("/api/health", (c) => {
     return c.json({
@@ -3982,8 +4050,8 @@ function createForgeServer(options) {
     const resolved = await resolveAction(c);
     if (resolved instanceof Response)
       return resolved;
-    const { action, cwd, logId } = resolved;
-    const result2 = await runner.exec(action.command, { cwd });
+    const { action, cwd, logId, env } = resolved;
+    const result2 = await runner.exec(action.command, { cwd, env });
     db.completeAction(logId, result2.exitCode);
     return c.json({
       logId,
@@ -3996,7 +4064,7 @@ function createForgeServer(options) {
     const resolved = await resolveAction(c);
     if (resolved instanceof Response)
       return resolved;
-    const { action, cwd, logId } = resolved;
+    const { action, cwd, logId, env } = resolved;
     return new Response(new ReadableStream({
       async start(controller) {
         const encoder = new TextEncoder();
@@ -4009,6 +4077,7 @@ data: ${JSON.stringify(data)}
         send("start", { logId, command: action.command });
         const result2 = await runner.exec(action.command, {
           cwd,
+          env,
           onData: (chunk) => send("output", { chunk })
         });
         db.completeAction(logId, result2.exitCode);
@@ -4104,6 +4173,7 @@ var init_server = __esm({
     init_db();
     init_modules();
     init_runner();
+    init_action_params();
     init_auth();
     init_origin_guard();
     init_cw_reader();
@@ -4489,6 +4559,7 @@ __export(dist_exports, {
   resolveListenOptions: () => resolveListenOptions,
   skillRoutes: () => skillRoutes,
   supports: () => supports,
+  validateParams: () => validateParams,
   waitForListening: () => waitForListening
 });
 var init_dist = __esm({
@@ -4498,6 +4569,7 @@ var init_dist = __esm({
     init_db();
     init_modules();
     init_runner();
+    init_action_params();
     init_auth();
     init_origin_guard();
     init_db_factory();
@@ -4533,6 +4605,7 @@ function parseArgs(argv) {
 var packageRoot = join15(import.meta.dirname, "..");
 var isCheckout = existsSync14(join15(packageRoot, "src"));
 var consoleDist = isCheckout ? join15(packageRoot, "../console/dist") : join15(packageRoot, "console");
+var bundledModulesDir = isCheckout ? join15(packageRoot, "../../modules") : join15(packageRoot, "modules");
 async function main() {
   const { ensureForgeDir: ensureForgeDir2, createForgeServer: createForgeServer2, createDatabase: createDatabase2, resolveListenOptions: resolveListenOptions2, ensureCw: ensureCw2, pathWithCw: pathWithCw2, quietSqliteWarning: quietSqliteWarning2, waitForListening: waitForListening2, probePort: probePort2, portInUseMessage: portInUseMessage2 } = await Promise.resolve().then(() => (init_dist(), dist_exports));
   quietSqliteWarning2();
@@ -4562,7 +4635,8 @@ async function main() {
     port,
     db,
     authToken: isTeam ? authToken : void 0,
-    localOnly
+    localOnly,
+    bundledModulesDir
   });
   const { serveStatic } = await import("@hono/node-server/serve-static");
   const { readFileSync: readFileSync10 } = await import("node:fs");

package/modules/mod-qa/forge-module.json

@@ -0,0 +1,74 @@
+{
+  "name": "@forge-dev/mod-qa",
+  "version": "0.3.0",
+  "displayName": "Quality Assurance",
+  "description": "qa-pilot escalation inbox: pull requests that need a human, with the decision's gates, checks, findings and visual changes",
+  "icon": "shield-check",
+  "color": "#10b981",
+  "panels": [
+    { "id": "escalations", "title": "Escalamientos", "component": "./panels/Escalations", "default": true }
+  ],
+  "actions": [
+    {
+      "id": "list-escalations",
+      "label": "List Escalations",
+      "icon": "inbox",
+      "command": "gh pr list --label qa:needs-human --state open --json number,title,url,updatedAt,author,headRefOid --limit 50",
+      "tags": ["qa"],
+      "hidden": true
+    },
+    {
+      "id": "get-decision",
+      "label": "Get Decision",
+      "icon": "file-search",
+      "command": "gh pr view \"$FORGE_PARAM_PR\" --json number,title,url,headRefOid,headRefName,author,comments,additions,deletions,changedFiles",
+      "params": { "PR": { "pattern": "\\d+" } },
+      "tags": ["qa"],
+      "hidden": true
+    },
+    {
+      "id": "get-evidence",
+      "label": "Get Evidence Image",
+      "icon": "image",
+      "command": "node -e \"const out = require('child_process').execFileSync('gh', ['api', '-H', 'Accept: application/vnd.github.raw', 'repos/{owner}/{repo}/contents/' + process.env.FORGE_PARAM_PATH + '?ref=' + process.env.FORGE_PARAM_REF], { maxBuffer: 8e6 }); process.stdout.write(out.toString('base64'))\"",
+      "params": {
+        "REF": { "pattern": "[0-9a-f]{40}" },
+        "PATH": { "pattern": "pr-\\d+/[0-9a-f]{7}/artifacts/[A-Za-z0-9._-]+\\.png" }
+      },
+      "tags": ["qa"],
+      "hidden": true
+    },
+    {
+      "id": "week-stats",
+      "label": "Week Stats",
+      "icon": "bar-chart",
+      "command": "gh pr list --state all --search \"updated:>=$(node -e 'process.stdout.write(new Date(Date.now() - 7 * 864e5).toISOString().slice(0, 10))')\" --json number,labels --limit 200",
+      "tags": ["qa"],
+      "hidden": true
+    },
+    {
+      "id": "approve",
+      "label": "Approve",
+      "icon": "check",
+      "command": "gh pr edit \"$FORGE_PARAM_PR\" --add-label qa:approved",
+      "params": { "PR": { "pattern": "\\d+" } },
+      "tags": ["qa"],
+      "hidden": true
+    },
+    {
+      "id": "request-changes",
+      "label": "Request Changes",
+      "icon": "message-square",
+      "command": "gh pr comment \"$FORGE_PARAM_PR\" --body \"$(printf 'Cambios pedidos desde Forge:\\n\\n%s\\n' \"$FORGE_PARAM_MSG\")\"",
+      "params": {
+        "PR": { "pattern": "\\d+" },
+        "MSG": { "pattern": "[A-Za-z0-9À-ÿ ¿¡.,;:!?()'\"/#@_+%*=-]{1,500}" }
+      },
+      "tags": ["qa"],
+      "hidden": true
+    }
+  ],
+  "detectors": [
+    { "tool": "qa-pilot", "files": ["qa/qa-pilot.yaml"], "suggestion": "qa-pilot contract found. Review escalated pull requests from QA." }
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "forge-cw",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "A visual dashboard for your coding agents on Claude Code, Codex, Pi or OpenCode. Installs CW for you.",
   "license": "MIT",
   "type": "module",
@@ -16,6 +16,7 @@
   "files": [
     "dist",
     "console",
+    "modules",
     "cw"
   ],
   "engines": {
@@ -45,7 +46,7 @@
   "scripts": {
     "build": "tsc",
     "dev": "tsc --watch",
-    "clean": "rm -rf dist console cw",
+    "clean": "rm -rf dist console modules cw",
     "bundle-cw": "node scripts/bundle-cw.mjs"
   }
 }