forgeos 0.1.0-alpha.51 → 0.1.0-alpha.52
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/AGENTS.md
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
// @forge-generated generator=0.1.0-alpha.
|
|
1
|
+
// @forge-generated generator=0.1.0-alpha.52 input=9a95853ed8e82db41be0b0cc4fc809e0b1c0c12fd1ac024d386bc651a70d965b content=721818a6f9a664aa898092d4aa5cd68cbbd8ad6e150c7d3ad3ef785a2e3fcf53
|
|
2
2
|
# AGENTS.md
|
|
3
3
|
|
|
4
4
|
<!-- forge-generated:start -->
|
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,21 @@
|
|
|
1
1
|
# forgeos
|
|
2
2
|
|
|
3
|
+
## 0.1.0-alpha.52
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- Make WorkOS FGA real-rollout failures produce a concrete operator artifact.
|
|
8
|
+
|
|
9
|
+
- Generated WorkOS FGA setup guides now include an explicit automation
|
|
10
|
+
boundary explaining that ForgeOS derives the graph, syncs resources, and
|
|
11
|
+
proves Authorization API checks, but does not invent unsupported WorkOS
|
|
12
|
+
resource-type creation commands.
|
|
13
|
+
- `forge workos fga sync --real --write --json` now remains useful when the
|
|
14
|
+
WorkOS Authorization API reports missing resource types: the JSON includes
|
|
15
|
+
`setupGuidePath` and the written guide lists the resource types, parents,
|
|
16
|
+
permissions, roles, example external IDs, membership env, and rerun
|
|
17
|
+
commands needed to finish the hosted setup.
|
|
18
|
+
|
|
3
19
|
## 0.1.0-alpha.51
|
|
4
20
|
|
|
5
21
|
### Patch Changes
|
package/docs/changelog.md
CHANGED
|
@@ -6,6 +6,16 @@ The canonical source file in the repository is `CHANGELOG.md`.
|
|
|
6
6
|
|
|
7
7
|
## Unreleased
|
|
8
8
|
|
|
9
|
+
## 0.1.0-alpha.52
|
|
10
|
+
|
|
11
|
+
- Generated WorkOS FGA setup guides now include an explicit automation boundary
|
|
12
|
+
describing what ForgeOS can automate versus the hosted WorkOS resource-type
|
|
13
|
+
configuration that must exist before real resource sync.
|
|
14
|
+
- `forge workos fga sync --real --write --json` now provides a concrete
|
|
15
|
+
`setupGuidePath` even when real sync fails because hosted WorkOS resource
|
|
16
|
+
types are missing, so agents have a deterministic artifact for the remaining
|
|
17
|
+
setup and rerun commands.
|
|
18
|
+
|
|
9
19
|
## 0.1.0-alpha.51
|
|
10
20
|
|
|
11
21
|
- `forge workos fga doctor --real --json` now reports a structured readiness
|
package/package.json
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"defaultProvider":"local","diagnostics":[],"env":{"deployEnv":"FORGE_DEPLOY_ENV","deployId":"FORGE_DEPLOY_ID","publicReleaseId":"NEXT_PUBLIC_FORGE_RELEASE_ID","releaseId":"FORGE_RELEASE_ID"},"gitSha":"unknown","optionalProviders":["local","sentry-compatible","sentry","glitchtip","bugsink","otel","custom"],"packageName":"forgeos","packageVersion":"0.1.0-alpha.
|
|
1
|
+
{"defaultProvider":"local","diagnostics":[],"env":{"deployEnv":"FORGE_DEPLOY_ENV","deployId":"FORGE_DEPLOY_ID","publicReleaseId":"NEXT_PUBLIC_FORGE_RELEASE_ID","releaseId":"FORGE_RELEASE_ID"},"gitSha":"unknown","optionalProviders":["local","sentry-compatible","sentry","glitchtip","bugsink","otel","custom"],"packageName":"forgeos","packageVersion":"0.1.0-alpha.52","releaseId":"forgeos@0.1.0-alpha.52+unknown","schemaVersion":"0.1.0"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
// @forge-generated generator=0.1.0-alpha.
|
|
1
|
+
// @forge-generated generator=0.1.0-alpha.52 input=9a95853ed8e82db41be0b0cc4fc809e0b1c0c12fd1ac024d386bc651a70d965b content=d4d4c9fd5f2fe5a5d3fa127d43487901cf1e68875b7ac99abdfe9a9cc90265ee
|
|
2
2
|
export const releaseManifest = {
|
|
3
3
|
"defaultProvider": "local",
|
|
4
4
|
"diagnostics": [],
|
|
@@ -19,7 +19,7 @@ export const releaseManifest = {
|
|
|
19
19
|
"custom"
|
|
20
20
|
],
|
|
21
21
|
"packageName": "forgeos",
|
|
22
|
-
"packageVersion": "0.1.0-alpha.
|
|
23
|
-
"releaseId": "forgeos@0.1.0-alpha.
|
|
22
|
+
"packageVersion": "0.1.0-alpha.52",
|
|
23
|
+
"releaseId": "forgeos@0.1.0-alpha.52+unknown",
|
|
24
24
|
"schemaVersion": "0.1.0"
|
|
25
25
|
} as const;
|
package/src/forge/cli/workos.ts
CHANGED
|
@@ -1149,6 +1149,13 @@ function workOSFgaSetupGuide(manifest: WorkOSFgaManifest, hostedSetup: WorkOSFga
|
|
|
1149
1149
|
"ForgeOS derived this resource graph from the app contract, policies, and workos-seed.yml.",
|
|
1150
1150
|
"WorkOS resource type configuration is hosted WorkOS configuration. ForgeOS uses the WorkOS CLI/API or SDK to sync resources and prove authorization checks after those resource types exist.",
|
|
1151
1151
|
"",
|
|
1152
|
+
"## Automation Boundary",
|
|
1153
|
+
"",
|
|
1154
|
+
"- ForgeOS can derive the FGA graph, generate this setup guide, sync WorkOS FGA resources, and run Authorization API access checks.",
|
|
1155
|
+
"- ForgeOS does not invent WorkOS CLI/API calls for resource type creation. The current public WorkOS automation surface supports resources and checks after resource types exist.",
|
|
1156
|
+
"- Configure each non-organization resource type below in hosted WorkOS, then rerun the real sync/proof commands.",
|
|
1157
|
+
"- The `organization` node is treated as the WorkOS tenant root and is not created as an authorization resource.",
|
|
1158
|
+
"",
|
|
1152
1159
|
"## Resource Types",
|
|
1153
1160
|
"",
|
|
1154
1161
|
...resourceTypes.flatMap((resourceType) => [
|
package/src/forge/version.ts
CHANGED