feat(gateway): warn that forest-mcp-server and forest-bff are deprecated

[nbouliol]

Summary

forest-mcp-server and forest-bff log one warning at boot naming forest-gateway; both READMEs flag the package as an internal building block of @forestadmin/gateway.

 forest-bff (no subcommand)
+  logger('Warn', DEPRECATION_WARNING)
   runCli(env, logger)
 forest-bff openapi            # unchanged, no warning
 forest-mcp-server
+  console.warn(DEPRECATION_WARNING)
   parseMcpEnv → ForestMCPServer.run()

Both bins keep serving exactly as before. The link points to the standalone Gateway page added by the docs PR (ForestAdmin/docs, stacked on #53).

Evidence

• Before: npx forest-bff / npx forest-mcp-server boot silently.
  After:
  • openapi-cli.test.ts: dispatchCli([]) logs ['Warn', DEPRECATION_WARNING] once; dispatchCli(['openapi']) does not.
  • mcp-server/test/cli.test.ts: starting the bin logs one console.warn containing forest-mcp-server is deprecated and forest-gateway.
  • Both suites green (58 + 13 tests).

Merge Danger

Door: two-way

Revert the commit. Must ship with or after the standalone Gateway docs, so the link resolves.

Blast Radius: logs

One extra warning line at boot, including on the API service Forest hosts until it moves to the Gateway image.

Part of PRD-1342

🤖 Generated with Claude Code

Note

Warn that forest-mcp-server and forest-bff are deprecated, add gateway Docker pipeline

• Adds deprecation warnings to the forest-mcp-server and forest-bff CLIs that direct users to the forest-gateway package, with matching README notices in mcp-server/README.md and agent-bff/README.md
• Reworks gateway-env.ts so configuration uses FOREST_GATEWAY_* variable names, with old BFF_* and AGENT_URL names kept as warned aliases; conflicting alias values now fail startup
• Adds a production Docker image: three-stage Dockerfile, isolated dependency manifest generation, closure validation, Trivy scan gating, smoke tests, and a docker-publish-gateway.yml workflow that builds amd64/arm64 images and publishes multi-arch tags to GHCR
• Marks the gateway package as non-private and releases it via the build workflow
• Behavioral Change: API public URLs must end in the configured base path plus /api, agent URLs must be absolute HTTP(S) without query or fragment, and conflicting legacy environment aliases now cause startup errors instead of being ignored; existing forest-bff deployments relying on legacy names still work but see warnings

^{Macroscope summarized a2ad56c.}

[linear-code]

PRD-1342

[qltysh]

1 new issue

Tool	Category	Rule	Count
qlty	Structure	Function with many returns (count = 7): dispatchCli	1

[qltysh]

Coverage Impact

This PR will not change total coverage.

Modified Files with Diff Coverage (1)

Rating	File	% Diff	Uncovered Line #s
	packages/agent-bff/src/cli-dispatch.ts	100.0%
	Total	100.0%

🚦 See full report on Qlty Cloud »

🛟 Help

• Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

• Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

• File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

  • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.

[Tonours]

Approved after /validator run 1990-20261008132500-Tonours: nothing at or above should-fix posted, 0 suppressed.