forgeos 0.1.0-alpha.16 → 0.1.0-alpha.18

package/AGENTS.md

@@ -1,4 +1,4 @@
-// @forge-generated generator=0.1.0-alpha.16 input=d2e9d09a857a17dbed8a1aa68a6a73b813b04f78394b8025304c30e48a37fecd content=143ee5e2d6fee031a4952f21ee3cc8f1e5678fd11ea673c2cb79196c251c32b6
+// @forge-generated generator=0.1.0-alpha.18 input=8724708f6eaedc3a2bfa4842b0caeb6b8880acdb434977c21e0b8bcc72bc7590 content=143ee5e2d6fee031a4952f21ee3cc8f1e5678fd11ea673c2cb79196c251c32b6
 # AGENTS.md
 
 <!-- forge-generated:start -->

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # forgeos
 
+## 0.1.0-alpha.18
+
+Codex hook memory hardening:
+
+- Hardened Codex hook ingestion by deriving useful tool-call metadata from the documented hook wire format while keeping raw prompts, tool inputs, tool responses, transcripts, and secrets out of Agent Memory.
+- Added safe command summaries, tool-call ids, result status, exit codes, response summaries, inferred files, and inferred runtime entries for Codex `PreToolUse`, `PermissionRequest`, and `PostToolUse` events.
+- Updated the Codex hook installer with hook timeouts and status messages, and added a local wrapper so repo hooks can use the checkout implementation.
+- Documented the safe Codex hook metadata surface and added regression coverage for real hook payload shapes.
+
+## 0.1.0-alpha.17
+
+External runtime timeline metadata:
+
+- Enriched DeltaDB runtime call recording for imported Go/Java/external services by reading generated `externalServices.json` metadata during `forge run` and `forge query`.
+- `forge timeline` and `forge explain` now report external runtime `service`, `language`, `risk`, `policy`, `tenantScoped`, and `needsApproval` state instead of falling back to null/false values after successful external calls.
+- Added a DeltaDB schema migration for `runtime_calls.needs_approval` and bumped the local DeltaDB schema to `0.3.1`.
+- Added regression coverage for the real CLI recorder path so manifest-imported external commands keep semantic metadata in timelines.
+- Promotes this release on npm as both `alpha` and `latest`.
+
 ## 0.1.0-alpha.16
 
 Stability alignment:

package/docs/changelog.md

@@ -1,9 +1,26 @@
 # Changelog
 
-Release history for the `forgeos` npm package (`alpha` dist-tag).
+Release history for the `forgeos` npm package.
 
 The canonical source file in the repository is `CHANGELOG.md`.
 
+## 0.1.0-alpha.18
+
+Codex hook memory hardening:
+
+- Derived useful Codex hook metadata from the documented wire format while keeping raw prompts, tool inputs, tool responses, transcripts, and secrets out of Agent Memory.
+- Added safe command summaries, tool-call ids, result status, exit codes, response summaries, inferred files, and inferred runtime entries for Codex tool events.
+- Updated Codex hook installation with hook timeouts, status messages, and a local wrapper for checkout-based ingestion.
+- Updated Agent Memory docs and regression coverage for real Codex hook payloads.
+
+## 0.1.0-alpha.17
+
+External runtime timeline metadata:
+
+- Enriched `forge timeline` and `forge explain` for imported external runtimes.
+- External command/query calls now keep `service`, `language`, `risk`, `policy`, `tenantScoped`, and `needsApproval` metadata in DeltaDB.
+- Promoted this release on npm as both `alpha` and `latest`.
+
 ## 0.1.0-alpha.16
 
 Stability alignment:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "forgeos",
-  "version": "0.1.0-alpha.16",
+  "version": "0.1.0-alpha.18",
   "description": "Agent-native application framework and compiler for building Forge apps without a mandatory dashboard.",
   "type": "module",
   "files": [

package/src/forge/_generated/actionSubscriptions.json

@@ -1 +1 @@
-{"analyzerVersion":"0.1.0","byEvent":{},"diagnostics":[],"generatorVersion":"0.1.0-alpha.16","inputHash":"cb0da386d8ff5c7309f982d25b94938d0e385f0325c688534ecb0ab9e5894d60","schemaVersion":"0.1.0","subscriptions":[]}
+{"analyzerVersion":"0.1.0","byEvent":{},"diagnostics":[],"generatorVersion":"0.1.0-alpha.18","inputHash":"8bb561da224fd87aa360e0b0ee99d782df450bbc2a7f236b994584f18d032a42","schemaVersion":"0.1.0","subscriptions":[]}

package/src/forge/_generated/actionSubscriptions.ts

@@ -1,10 +1,10 @@
-// @forge-generated generator=0.1.0-alpha.16 input=d2e9d09a857a17dbed8a1aa68a6a73b813b04f78394b8025304c30e48a37fecd content=9b64b00ef756451e499270f8f6303440f2a4cbeb9c3a56f58d6ace557e626287
+// @forge-generated generator=0.1.0-alpha.18 input=8724708f6eaedc3a2bfa4842b0caeb6b8880acdb434977c21e0b8bcc72bc7590 content=3399fdc7a664fd4cd2ce1728adadaa5694a6f0856be0d2d7fd08fff58fefda39
 export const actionSubscriptions = {
   "analyzerVersion": "0.1.0",
   "byEvent": {},
   "diagnostics": [],
-  "generatorVersion": "0.1.0-alpha.16",
-  "inputHash": "cb0da386d8ff5c7309f982d25b94938d0e385f0325c688534ecb0ab9e5894d60",
+  "generatorVersion": "0.1.0-alpha.18",
+  "inputHash": "8bb561da224fd87aa360e0b0ee99d782df450bbc2a7f236b994584f18d032a42",
   "schemaVersion": "0.1.0",
   "subscriptions": []
 } as const;

package/src/forge/_generated/agentAdapterManifest.json

@@ -1 +1 @@
-{"generatorVersion":"0.1.0-alpha.16","schemaVersion":"0.1.0","sourceHash":"sha256:238fc9eba00c5132c6b8b0cb0f06086354728af0a765c4d66707b61fb24a599b","targets":[{"adapterVersion":"agent-adapter-0.1.0","default":true,"files":["AGENTS.md",".forge/agent/context.json",".forge/agent/commands.json",".forge/agent/done-criteria.json",".forge/agent/playbooks/add-command.md",".forge/agent/playbooks/add-query.md",".forge/agent/playbooks/add-livequery.md",".forge/agent/playbooks/add-resource.md",".forge/agent/playbooks/refactor-field.md",".forge/agent/playbooks/fix-policy-denied.md",".forge/agent/playbooks/fix-guard-violation.md",".forge/agent/playbooks/upgrade-package.md",".forge/agent/playbooks/debug-trace.md",".forge/agent/playbooks/frontend-change.md",".forge/agent/playbooks/self-host-check.md"],"formatVersion":"2026-06","name":"generic"},{"adapterVersion":"agent-adapter-0.1.0","files":[".codex/skills/forge-add-command/SKILL.md",".codex/skills/forge-add-resource/SKILL.md",".codex/skills/forge-fix-guard-violation/SKILL.md",".codex/skills/forge-fix-policy-denied/SKILL.md",".codex/skills/forge-upgrade-package/SKILL.md",".codex/skills/forge-debug-trace/SKILL.md",".codex/agents/forge-explorer.toml",".codex/agents/forge-worker.toml",".codex/agents/forge-reviewer.toml",".codex/agents/forge-security.toml"],"formatVersion":"2026-06","name":"codex","optional":true},{"adapterVersion":"agent-adapter-0.1.0","files":[".cursor/rules/forge-runtime.mdc",".cursor/rules/forge-frontend.mdc",".cursor/rules/forge-security.mdc",".cursor/rules/forge-workflow.mdc"],"formatVersion":"2026-06","name":"cursor","optional":true},{"adapterVersion":"agent-adapter-0.1.0","files":["CLAUDE.md",".claude/forge-runtime.md",".claude/forge-playbooks.md",".claude/forge-security.md"],"formatVersion":"2026-06","name":"claude","optional":true}]}
+{"generatorVersion":"0.1.0-alpha.18","schemaVersion":"0.1.0","sourceHash":"sha256:7ac0694685e60158d6a9416d29e93b8436e230a222603a18391f7c23e7e518c1","targets":[{"adapterVersion":"agent-adapter-0.1.0","default":true,"files":["AGENTS.md",".forge/agent/context.json",".forge/agent/commands.json",".forge/agent/done-criteria.json",".forge/agent/playbooks/add-command.md",".forge/agent/playbooks/add-query.md",".forge/agent/playbooks/add-livequery.md",".forge/agent/playbooks/add-resource.md",".forge/agent/playbooks/refactor-field.md",".forge/agent/playbooks/fix-policy-denied.md",".forge/agent/playbooks/fix-guard-violation.md",".forge/agent/playbooks/upgrade-package.md",".forge/agent/playbooks/debug-trace.md",".forge/agent/playbooks/frontend-change.md",".forge/agent/playbooks/self-host-check.md"],"formatVersion":"2026-06","name":"generic"},{"adapterVersion":"agent-adapter-0.1.0","files":[".codex/skills/forge-add-command/SKILL.md",".codex/skills/forge-add-resource/SKILL.md",".codex/skills/forge-fix-guard-violation/SKILL.md",".codex/skills/forge-fix-policy-denied/SKILL.md",".codex/skills/forge-upgrade-package/SKILL.md",".codex/skills/forge-debug-trace/SKILL.md",".codex/agents/forge-explorer.toml",".codex/agents/forge-worker.toml",".codex/agents/forge-reviewer.toml",".codex/agents/forge-security.toml"],"formatVersion":"2026-06","name":"codex","optional":true},{"adapterVersion":"agent-adapter-0.1.0","files":[".cursor/rules/forge-runtime.mdc",".cursor/rules/forge-frontend.mdc",".cursor/rules/forge-security.mdc",".cursor/rules/forge-workflow.mdc"],"formatVersion":"2026-06","name":"cursor","optional":true},{"adapterVersion":"agent-adapter-0.1.0","files":["CLAUDE.md",".claude/forge-runtime.md",".claude/forge-playbooks.md",".claude/forge-security.md"],"formatVersion":"2026-06","name":"claude","optional":true}]}

package/src/forge/_generated/agentAdapterManifest.ts

@@ -1,8 +1,8 @@
-// @forge-generated generator=0.1.0-alpha.16 input=d2e9d09a857a17dbed8a1aa68a6a73b813b04f78394b8025304c30e48a37fecd content=59aedcaf1f5fcc7afc3e6173bc3065e791ffd61f1ffd7f791c70fe3de8acc0fd
+// @forge-generated generator=0.1.0-alpha.18 input=8724708f6eaedc3a2bfa4842b0caeb6b8880acdb434977c21e0b8bcc72bc7590 content=f8534f96e196dd3b99fb581ef8f3a6ba94755bca1fedde4d9430dff7ce740978
 export const agentAdapterManifest = {
-  "generatorVersion": "0.1.0-alpha.16",
+  "generatorVersion": "0.1.0-alpha.18",
   "schemaVersion": "0.1.0",
-  "sourceHash": "sha256:238fc9eba00c5132c6b8b0cb0f06086354728af0a765c4d66707b61fb24a599b",
+  "sourceHash": "sha256:7ac0694685e60158d6a9416d29e93b8436e230a222603a18391f7c23e7e518c1",
   "targets": [
     {
       "adapterVersion": "agent-adapter-0.1.0",