forgeos 0.1.0-alpha.4 → 0.1.0-alpha.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (145) hide show
  1. package/AGENTS.md +1 -1
  2. package/CHANGELOG.md +10 -0
  3. package/README.md +2 -2
  4. package/package.json +2 -1
  5. package/src/forge/_generated/actionSubscriptions.json +2 -2
  6. package/src/forge/_generated/actionSubscriptions.ts +3 -3
  7. package/src/forge/_generated/agentAdapterManifest.json +2 -2
  8. package/src/forge/_generated/agentAdapterManifest.ts +3 -3
  9. package/src/forge/_generated/agentContract.json +2 -2
  10. package/src/forge/_generated/agentContract.ts +2 -2
  11. package/src/forge/_generated/agentQuickstart.md +1 -1
  12. package/src/forge/_generated/agentTools.json +2 -2
  13. package/src/forge/_generated/agentTools.md +1 -1
  14. package/src/forge/_generated/agentTools.ts +2 -2
  15. package/src/forge/_generated/aiContext.ts +1 -1
  16. package/src/forge/_generated/aiModels.json +1 -1
  17. package/src/forge/_generated/aiModels.ts +1 -1
  18. package/src/forge/_generated/aiProviders.json +1 -1
  19. package/src/forge/_generated/aiProviders.ts +1 -1
  20. package/src/forge/_generated/aiRegistry.json +2 -2
  21. package/src/forge/_generated/aiRegistry.ts +3 -3
  22. package/src/forge/_generated/api.json +2 -2
  23. package/src/forge/_generated/api.ts +1 -1
  24. package/src/forge/_generated/appGraph.json +2 -2
  25. package/src/forge/_generated/appGraph.ts +33 -22
  26. package/src/forge/_generated/appMap.md +1 -1
  27. package/src/forge/_generated/artifactManifest.json +2 -2
  28. package/src/forge/_generated/artifactManifest.ts +2 -2
  29. package/src/forge/_generated/authClaims.json +1 -1
  30. package/src/forge/_generated/authClaims.ts +1 -1
  31. package/src/forge/_generated/authConfig.json +1 -1
  32. package/src/forge/_generated/authConfig.ts +1 -1
  33. package/src/forge/_generated/authContext.ts +1 -1
  34. package/src/forge/_generated/authRegistry.json +1 -1
  35. package/src/forge/_generated/authRegistry.ts +1 -1
  36. package/src/forge/_generated/buildInfo.json +2 -2
  37. package/src/forge/_generated/buildInfo.ts +4 -4
  38. package/src/forge/_generated/capabilityMap.json +2 -2
  39. package/src/forge/_generated/capabilityMap.md +1 -1
  40. package/src/forge/_generated/capabilityMap.ts +2 -2
  41. package/src/forge/_generated/client.ts +1 -1
  42. package/src/forge/_generated/clientApi.ts +1 -1
  43. package/src/forge/_generated/clientManifest.json +2 -2
  44. package/src/forge/_generated/clientManifest.ts +3 -3
  45. package/src/forge/_generated/clientTypes.ts +1 -1
  46. package/src/forge/_generated/configRegistry.json +1 -1
  47. package/src/forge/_generated/configRegistry.ts +1 -1
  48. package/src/forge/_generated/dataGraph.json +2 -2
  49. package/src/forge/_generated/dataGraph.ts +3 -3
  50. package/src/forge/_generated/db.json +1 -1
  51. package/src/forge/_generated/db.ts +1 -1
  52. package/src/forge/_generated/dbSecurityManifest.json +1 -1
  53. package/src/forge/_generated/dbSecurityManifest.ts +1 -1
  54. package/src/forge/_generated/dbSessionContext.json +1 -1
  55. package/src/forge/_generated/dbSessionContext.ts +1 -1
  56. package/src/forge/_generated/deployManifest.json +2 -2
  57. package/src/forge/_generated/deployManifest.ts +7 -7
  58. package/src/forge/_generated/devManifest.json +2 -2
  59. package/src/forge/_generated/devManifest.ts +3 -3
  60. package/src/forge/_generated/envSchema.json +1 -1
  61. package/src/forge/_generated/envSchema.ts +1 -1
  62. package/src/forge/_generated/frontendGraph.json +1 -1
  63. package/src/forge/_generated/frontendGraph.ts +1 -1
  64. package/src/forge/_generated/importGuards.json +1 -1
  65. package/src/forge/_generated/importGuards.ts +1 -1
  66. package/src/forge/_generated/index.ts +1 -1
  67. package/src/forge/_generated/liveProductionManifest.json +1 -1
  68. package/src/forge/_generated/liveProductionManifest.ts +1 -1
  69. package/src/forge/_generated/liveProtocol.json +1 -1
  70. package/src/forge/_generated/liveProtocol.ts +1 -1
  71. package/src/forge/_generated/liveQueryRegistry.json +2 -2
  72. package/src/forge/_generated/liveQueryRegistry.ts +3 -3
  73. package/src/forge/_generated/liveTransportConfig.json +1 -1
  74. package/src/forge/_generated/liveTransportConfig.ts +1 -1
  75. package/src/forge/_generated/makeRegistry.json +2 -2
  76. package/src/forge/_generated/makeRegistry.ts +2 -2
  77. package/src/forge/_generated/makeTemplates.json +1 -1
  78. package/src/forge/_generated/makeTemplates.ts +1 -1
  79. package/src/forge/_generated/mockMap.json +1 -1
  80. package/src/forge/_generated/mockMap.ts +1 -1
  81. package/src/forge/_generated/operationPlaybooks.md +1 -1
  82. package/src/forge/_generated/packageGraph.json +2 -2
  83. package/src/forge/_generated/packageGraph.ts +2 -2
  84. package/src/forge/_generated/packageUpgradeRegistry.json +2 -2
  85. package/src/forge/_generated/packageUpgradeRegistry.ts +2 -2
  86. package/src/forge/_generated/permissionMatrix.json +2 -2
  87. package/src/forge/_generated/permissionMatrix.ts +3 -3
  88. package/src/forge/_generated/policyRegistry.json +2 -2
  89. package/src/forge/_generated/policyRegistry.ts +3 -3
  90. package/src/forge/_generated/queryRegistry.json +2 -2
  91. package/src/forge/_generated/queryRegistry.ts +3 -3
  92. package/src/forge/_generated/react.d.ts +1 -1
  93. package/src/forge/_generated/react.ts +1 -1
  94. package/src/forge/_generated/reactManifest.json +2 -2
  95. package/src/forge/_generated/reactManifest.ts +3 -3
  96. package/src/forge/_generated/releaseManifest.json +2 -2
  97. package/src/forge/_generated/releaseManifest.ts +3 -3
  98. package/src/forge/_generated/rlsPolicies.json +1 -1
  99. package/src/forge/_generated/rlsPolicies.sql +1 -1
  100. package/src/forge/_generated/rlsPolicies.ts +1 -1
  101. package/src/forge/_generated/runtimeGraph.json +2 -2
  102. package/src/forge/_generated/runtimeGraph.ts +3 -3
  103. package/src/forge/_generated/runtimeMatrix.json +1 -1
  104. package/src/forge/_generated/runtimeMatrix.ts +1 -1
  105. package/src/forge/_generated/runtimeRegistry.ts +1 -1
  106. package/src/forge/_generated/runtimeRules.md +1 -1
  107. package/src/forge/_generated/secretRegistry.json +1 -1
  108. package/src/forge/_generated/secretRegistry.ts +1 -1
  109. package/src/forge/_generated/secretsContext.ts +1 -1
  110. package/src/forge/_generated/serverApi.ts +1 -1
  111. package/src/forge/_generated/sourceMapManifest.json +2 -2
  112. package/src/forge/_generated/sourceMapManifest.ts +2 -2
  113. package/src/forge/_generated/sqlPlan.json +1 -1
  114. package/src/forge/_generated/sqlPlan.ts +1 -1
  115. package/src/forge/_generated/subscriptionManifest.json +2 -2
  116. package/src/forge/_generated/subscriptionManifest.ts +3 -3
  117. package/src/forge/_generated/symbolicationManifest.json +2 -2
  118. package/src/forge/_generated/symbolicationManifest.ts +2 -2
  119. package/src/forge/_generated/telemetryRegistry.json +2 -2
  120. package/src/forge/_generated/telemetryRegistry.ts +3 -3
  121. package/src/forge/_generated/telemetrySinks.json +2 -2
  122. package/src/forge/_generated/telemetrySinks.ts +2 -2
  123. package/src/forge/_generated/tenantScope.json +2 -2
  124. package/src/forge/_generated/tenantScope.ts +3 -3
  125. package/src/forge/_generated/testGraph.json +2 -2
  126. package/src/forge/_generated/testGraph.ts +25 -3
  127. package/src/forge/_generated/testPlanRegistry.json +2 -2
  128. package/src/forge/_generated/testPlanRegistry.ts +2 -2
  129. package/src/forge/_generated/uiRoutes.json +1 -1
  130. package/src/forge/_generated/uiRoutes.ts +1 -1
  131. package/src/forge/_generated/uiScenarios.json +1 -1
  132. package/src/forge/_generated/uiScenarios.ts +1 -1
  133. package/src/forge/_generated/uiTestManifest.json +2 -2
  134. package/src/forge/_generated/uiTestManifest.ts +2 -2
  135. package/src/forge/_generated/workflowRegistry.json +2 -2
  136. package/src/forge/_generated/workflowRegistry.ts +3 -3
  137. package/src/forge/_generated/workflowSubscriptions.json +2 -2
  138. package/src/forge/_generated/workflowSubscriptions.ts +3 -3
  139. package/src/forge/cli/ai.ts +324 -21
  140. package/src/forge/cli/commands.ts +2 -0
  141. package/src/forge/cli/parse.ts +10 -0
  142. package/src/forge/cli/rls.ts +43 -4
  143. package/src/forge/cli/security.ts +112 -0
  144. package/src/forge/runtime/db/postgres-adapter.ts +6 -3
  145. package/src/forge/version.ts +1 -1
package/AGENTS.md CHANGED
@@ -1,4 +1,4 @@
1
- // @forge-generated generator=0.1.0-alpha.4 input=4af795b70ec62dc5967f6e9b78865cfbc8afb09275e575845cf80a360b3b85e2 content=1611635edf59c122b013ba76c85bd333ab3b30b289aaea04a9074f9438782a50
1
+ // @forge-generated generator=0.1.0-alpha.5 input=833ec4c87192ce1717d3e03061ca6d916568fc7586089ae7755fb9d71225d8db content=1611635edf59c122b013ba76c85bd333ab3b30b289aaea04a9074f9438782a50
2
2
  # AGENTS.md
3
3
 
4
4
  <!-- forge-generated:start -->
package/CHANGELOG.md CHANGED
@@ -1,5 +1,15 @@
1
1
  # forgeos
2
2
 
3
+ ## 0.1.0-alpha.5
4
+
5
+ Release alignment for the public alpha channel:
6
+
7
+ - Added `forge ai redteam --model-level --json` with deterministic prompt-injection, secret-exfiltration, approval-bypass, cross-tenant, and indirect tool-injection probes.
8
+ - Added `forge security prove --full --json` support for source checkouts, with graceful structural-proof fallback when packaged apps do not include ForgeOS test fixtures.
9
+ - Strengthened npm publish workflows to run `security prove --db postgres --full --json`.
10
+ - Added public registry smoke coverage for `forgeos@alpha` and `create-forgeos-app@alpha`.
11
+ - Bumped the create-app wrapper package line to `create-forgeos-app@0.1.0-alpha.1`.
12
+
3
13
  ## 0.1.0-alpha.4
4
14
 
5
15
  Security assurance and release evidence hardening:
package/README.md CHANGED
@@ -49,7 +49,7 @@ These files describe the app surface, runtime rules, generated files, policies,
49
49
  Public one-command app creation:
50
50
 
51
51
  ```bash
52
- npm create forge-app@alpha notes-app -- --template minimal-web
52
+ npm create forgeos-app@alpha notes-app -- --template minimal-web
53
53
  cd notes-app
54
54
  npm run dev
55
55
  ```
@@ -140,7 +140,7 @@ forge.lock
140
140
  | Auth | dev headers, JWT, OIDC discovery/JWKS verification via `jose`, production-mode guardrails |
141
141
  | RLS | Postgres RLS SQL compiler/checks for DB-enforced tenant isolation |
142
142
  | Secrets/env | secret registry, env schema, redaction, strict `process.env` checks |
143
- | AI | Vercel AI SDK v6 engine, provider registry, `ctx.ai`, `ctx.agent.run`, `aiTool`, `agent`, `/ai/agents/run` JSON automation, `/ai/agents/chat` UIMessage streaming, `forge ai trace`, mock mode, telemetry without prompt/output retention by default |
143
+ | AI | Vercel AI SDK v6 engine, provider registry, `ctx.ai`, `ctx.agent.run`, `aiTool`, `agent`, `/ai/agents/run` JSON automation, `/ai/agents/chat` UIMessage streaming, `forge ai trace`, structural and model-level redteam probes, mock mode, telemetry without prompt/output retention by default |
144
144
  | Frontend | generated client SDK, React/Next hooks, template app, liveQuery client support |
145
145
  | LiveQuery | durable invalidation log, reconnect/resume semantics, production hardening checks |
146
146
  | Self-host | compose/deploy artifacts and self-host checks |
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "forgeos",
3
- "version": "0.1.0-alpha.4",
3
+ "version": "0.1.0-alpha.5",
4
4
  "description": "Agent-native application framework and compiler for building Forge apps without a mandatory dashboard.",
5
5
  "type": "module",
6
6
  "files": [
@@ -37,6 +37,7 @@
37
37
  "release:pack": "npm pack --dry-run",
38
38
  "release:smoke": "node scripts/smoke-packed-package.mjs",
39
39
  "release:evidence": "node scripts/write-release-evidence.mjs",
40
+ "release:verify-public-alpha": "node scripts/verify-public-alpha.mjs",
40
41
  "security:evidence": "node scripts/write-security-evidence.mjs",
41
42
  "release:publish-alpha": "node scripts/publish-trusted-alpha.mjs",
42
43
  "release:publish-local-alpha": "node scripts/publish-local-alpha.mjs",
package/src/forge/_generated/actionSubscriptions.json CHANGED
@@ -1,2 +1,2 @@
1
- // @forge-generated generator=0.1.0-alpha.4 input=4af795b70ec62dc5967f6e9b78865cfbc8afb09275e575845cf80a360b3b85e2 content=e38472b113dc79a2390dcbc2f51741b8a86e33c858849367109b170f347b056e
2
- {"analyzerVersion":"0.1.0","byEvent":{},"diagnostics":[],"generatorVersion":"0.1.0-alpha.4","inputHash":"c52261a0b76af0f64feadff97d3852e815fa814de2566d0d1fce9e4805d1bfab","schemaVersion":"0.1.0","subscriptions":[]}
1
+ // @forge-generated generator=0.1.0-alpha.5 input=833ec4c87192ce1717d3e03061ca6d916568fc7586089ae7755fb9d71225d8db content=102a8c64f98c717a057112a4461a68fb591fc660ad2a7236dc3895a8231a703e
2
+ {"analyzerVersion":"0.1.0","byEvent":{},"diagnostics":[],"generatorVersion":"0.1.0-alpha.5","inputHash":"95d2a3bbecd457775f519186adb67c80a1c11cf819eb3787b7f2b5016af40185","schemaVersion":"0.1.0","subscriptions":[]}
package/src/forge/_generated/actionSubscriptions.ts CHANGED
@@ -1,10 +1,10 @@
1
- // @forge-generated generator=0.1.0-alpha.4 input=4af795b70ec62dc5967f6e9b78865cfbc8afb09275e575845cf80a360b3b85e2 content=a5b050935bb13ffac31c4e8f6b4a0a5e08cd84e7df079cce295b225302323b3a
1
+ // @forge-generated generator=0.1.0-alpha.5 input=833ec4c87192ce1717d3e03061ca6d916568fc7586089ae7755fb9d71225d8db content=5f704a72afcfbf613c305158e66e0c47625555ab7e28a3b8a0c0f8db96018020
2
2
  export const actionSubscriptions = {
3
3
  "analyzerVersion": "0.1.0",
4
4
  "byEvent": {},
5
5
  "diagnostics": [],
6
- "generatorVersion": "0.1.0-alpha.4",
7
- "inputHash": "c52261a0b76af0f64feadff97d3852e815fa814de2566d0d1fce9e4805d1bfab",
6
+ "generatorVersion": "0.1.0-alpha.5",
7
+ "inputHash": "95d2a3bbecd457775f519186adb67c80a1c11cf819eb3787b7f2b5016af40185",
8
8
  "schemaVersion": "0.1.0",
9
9
  "subscriptions": []
10
10
  } as const;
package/src/forge/_generated/agentAdapterManifest.json CHANGED
@@ -1,2 +1,2 @@
1
- // @forge-generated generator=0.1.0-alpha.4 input=4af795b70ec62dc5967f6e9b78865cfbc8afb09275e575845cf80a360b3b85e2 content=488bf387fd048437f772a253b7b64f6a51c25d1f2e6d7d07f7a8c971e0c8c90d
2
- {"generatorVersion":"0.1.0-alpha.4","schemaVersion":"0.1.0","sourceHash":"sha256:69500f8aefc9e77c7049e70279cadc0242fbeb0be0390ef26b051889956ad680","targets":[{"adapterVersion":"agent-adapter-0.1.0","default":true,"files":["AGENTS.md",".forge/agent/context.json",".forge/agent/commands.json",".forge/agent/done-criteria.json",".forge/agent/playbooks/add-command.md",".forge/agent/playbooks/add-query.md",".forge/agent/playbooks/add-livequery.md",".forge/agent/playbooks/add-resource.md",".forge/agent/playbooks/refactor-field.md",".forge/agent/playbooks/fix-policy-denied.md",".forge/agent/playbooks/fix-guard-violation.md",".forge/agent/playbooks/upgrade-package.md",".forge/agent/playbooks/debug-trace.md",".forge/agent/playbooks/frontend-change.md",".forge/agent/playbooks/self-host-check.md"],"formatVersion":"2026-06","name":"generic"},{"adapterVersion":"agent-adapter-0.1.0","files":[".codex/skills/forge-add-command/SKILL.md",".codex/skills/forge-add-resource/SKILL.md",".codex/skills/forge-fix-guard-violation/SKILL.md",".codex/skills/forge-fix-policy-denied/SKILL.md",".codex/skills/forge-upgrade-package/SKILL.md",".codex/skills/forge-debug-trace/SKILL.md",".codex/agents/forge-explorer.toml",".codex/agents/forge-worker.toml",".codex/agents/forge-reviewer.toml",".codex/agents/forge-security.toml"],"formatVersion":"2026-06","name":"codex","optional":true},{"adapterVersion":"agent-adapter-0.1.0","files":[".cursor/rules/forge-runtime.mdc",".cursor/rules/forge-frontend.mdc",".cursor/rules/forge-security.mdc",".cursor/rules/forge-workflow.mdc"],"formatVersion":"2026-06","name":"cursor","optional":true},{"adapterVersion":"agent-adapter-0.1.0","files":["CLAUDE.md",".claude/forge-runtime.md",".claude/forge-playbooks.md",".claude/forge-security.md"],"formatVersion":"2026-06","name":"claude","optional":true}]}
1
+ // @forge-generated generator=0.1.0-alpha.5 input=833ec4c87192ce1717d3e03061ca6d916568fc7586089ae7755fb9d71225d8db content=f281014dd84c264518a046570345660dbe0a741907d997173f440fb41c03b79b
2
+ {"generatorVersion":"0.1.0-alpha.5","schemaVersion":"0.1.0","sourceHash":"sha256:a62c407e0be961af3fdb7385efe1956d7b981ce1b758d00fd2062e0f609023db","targets":[{"adapterVersion":"agent-adapter-0.1.0","default":true,"files":["AGENTS.md",".forge/agent/context.json",".forge/agent/commands.json",".forge/agent/done-criteria.json",".forge/agent/playbooks/add-command.md",".forge/agent/playbooks/add-query.md",".forge/agent/playbooks/add-livequery.md",".forge/agent/playbooks/add-resource.md",".forge/agent/playbooks/refactor-field.md",".forge/agent/playbooks/fix-policy-denied.md",".forge/agent/playbooks/fix-guard-violation.md",".forge/agent/playbooks/upgrade-package.md",".forge/agent/playbooks/debug-trace.md",".forge/agent/playbooks/frontend-change.md",".forge/agent/playbooks/self-host-check.md"],"formatVersion":"2026-06","name":"generic"},{"adapterVersion":"agent-adapter-0.1.0","files":[".codex/skills/forge-add-command/SKILL.md",".codex/skills/forge-add-resource/SKILL.md",".codex/skills/forge-fix-guard-violation/SKILL.md",".codex/skills/forge-fix-policy-denied/SKILL.md",".codex/skills/forge-upgrade-package/SKILL.md",".codex/skills/forge-debug-trace/SKILL.md",".codex/agents/forge-explorer.toml",".codex/agents/forge-worker.toml",".codex/agents/forge-reviewer.toml",".codex/agents/forge-security.toml"],"formatVersion":"2026-06","name":"codex","optional":true},{"adapterVersion":"agent-adapter-0.1.0","files":[".cursor/rules/forge-runtime.mdc",".cursor/rules/forge-frontend.mdc",".cursor/rules/forge-security.mdc",".cursor/rules/forge-workflow.mdc"],"formatVersion":"2026-06","name":"cursor","optional":true},{"adapterVersion":"agent-adapter-0.1.0","files":["CLAUDE.md",".claude/forge-runtime.md",".claude/forge-playbooks.md",".claude/forge-security.md"],"formatVersion":"2026-06","name":"claude","optional":true}]}
package/src/forge/_generated/agentAdapterManifest.ts CHANGED
@@ -1,8 +1,8 @@
1
- // @forge-generated generator=0.1.0-alpha.4 input=4af795b70ec62dc5967f6e9b78865cfbc8afb09275e575845cf80a360b3b85e2 content=a111bf4de7c15892a6465afaf86be51e792266d18f2f526fd03a78f9f08f89c6
1
+ // @forge-generated generator=0.1.0-alpha.5 input=833ec4c87192ce1717d3e03061ca6d916568fc7586089ae7755fb9d71225d8db content=865acb9b620ef769e4ece2bd24fe9f5454d1a461aedfc45a2f53b619cafc67b5
2
2
  export const agentAdapterManifest = {
3
- "generatorVersion": "0.1.0-alpha.4",
3
+ "generatorVersion": "0.1.0-alpha.5",
4
4
  "schemaVersion": "0.1.0",
5
- "sourceHash": "sha256:69500f8aefc9e77c7049e70279cadc0242fbeb0be0390ef26b051889956ad680",
5
+ "sourceHash": "sha256:a62c407e0be961af3fdb7385efe1956d7b981ce1b758d00fd2062e0f609023db",
6
6
  "targets": [
7
7
  {
8
8
  "adapterVersion": "agent-adapter-0.1.0",