@moretea-labs/forge 1.5.0-rc.1 → 1.5.1

package/install.sh

@@ -13,7 +13,6 @@ HOME_DIR="${HOME:-}"
 [ -n "$HOME_DIR" ] || die "HOME is not set"
 BUN_INSTALL_DIR="${BUN_INSTALL:-$HOME_DIR/.bun}"
 
-ensure_git() { has_command git || die "Git is required. Install Git and reopen the terminal."; }
 ensure_node() {
   has_command node || die "Node.js 20.10 or newer is required because the published Forge launcher uses Node."
   node -e 'const [major, minor] = process.versions.node.split(".").map(Number); process.exit(major > 20 || (major === 20 && minor >= 10) ? 0 : 1)' \
@@ -51,16 +50,15 @@ verify_forge() {
 }
 
 if [ "${FORGE_DRY_RUN:-0}" = "1" ]; then
-  log "DRY RUN: would require Git and Node.js 20.10 or newer, choose runtime (${INSTALL_RUNTIME}), install ${PACKAGE_NAME}@${PACKAGE_VERSION}, and verify the Forge CLI."
+  log "DRY RUN: would require Node.js 20.10 or newer and npm/Bun, install ${PACKAGE_NAME}@${PACKAGE_VERSION}, and verify the Forge CLI. Git is optional until repository features are enabled."
   exit 0
 fi
-ensure_git
 ensure_node
 runtime="$(choose_runtime)"
 install_forge "$runtime"
 verify_forge
 log ""
 log "Next:"
-log "  forge install --no-cli"
-log "  forge doctor"
-log "  forge adopt --repo /path/to/your-project --dry-run"
+log "  forge setup"
+log ""
+log "Git is only needed when you enable repository/software-work features."

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moretea-labs/forge",
-  "version": "1.5.0-rc.1",
+  "version": "1.5.1",
   "description": "Local-first action assistant for software work with resumable execution, bounded tools, and reviewable evidence",
   "license": "MIT",
   "author": "Moretea Labs contributors",
@@ -30,6 +30,7 @@
   },
   "files": [
     "LICENSE",
+    "DESIGN.md",
     "CHANGELOG.md",
     "CONTRIBUTING.md",
     "SECURITY.md",
@@ -78,6 +79,9 @@
     "bun": ">=1.0.0"
   },
   "scripts": {
+    "build:controller-ui": "bun scripts/build-controller-ui.ts",
+    "check:controller-ui": "bun scripts/build-controller-ui.ts --check",
+    "check:design": "npx -y @google/design.md@0.4.0 lint DESIGN.md",
     "benchmark:skills": "bun scripts/run-skill-evals.ts",
     "benchmark:route-session-concurrency": "bun scripts/benchmark-route-session-concurrency.ts",
     "test": "bun scripts/test-governance.ts affected",
@@ -130,24 +134,30 @@
     "check:forge-runtime": "bash scripts/verify-forge-runtime.sh",
     "repo:registry": "bun src/cli/v81-entry.ts repo",
     "smoke:schedule-engine": "node --loader ./src/runtime/shared/node-ts-loader.mjs scripts/smoke-schedule-engine.ts",
-    "smoke:supervised-automation": "node --loader ./src/runtime/shared/node-ts-loader.mjs scripts/smoke-chatgpt-supervised-automation.ts",
     "check:env": "node scripts/check-runtime-env.mjs",
     "test:bun": "bun -e 'console.error(\"[tests] test:bun is deprecated; running explicit test:full\")' && bun run test:full",
     "test:node-smoke": "node --test tests/node/*.test.mjs",
-    "check:ci:portable": "FORGE_ALLOW_NODE_ONLY=1 bash scripts/check-ci.sh"
+    "check:ci:portable": "FORGE_ALLOW_NODE_ONLY=1 bash scripts/check-ci.sh",
+    "dev:controller-ui": "vite --config src/cli/local-bridge/frontend/vite.config.ts"
   },
   "devDependencies": {
     "@colbymchenry/codegraph": "1.0.1",
     "@types/bun": "latest",
     "@types/cors": "^2.8.17",
     "@types/express": "^5.0.0",
-    "typescript": "^6.0.3"
+    "@types/react": "^19.2.0",
+    "@types/react-dom": "^19.2.0",
+    "@vitejs/plugin-react": "^5.2.0",
+    "vite": "^7.3.0"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.28.0",
     "commander": "^14.0.3",
     "express": "^5.2.1",
-    "playwright": "^1.54.1"
+    "playwright": "^1.54.1",
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0",
+    "typescript": "^6.0.3"
   },
   "packageManager": "npm@10.0.0",
   "optionalDependencies": {

package/scripts/archive-workflow.sh

@@ -283,7 +283,6 @@ fi
 plan_key="$(basename "$plan_file" .md)"
 rm -f ".claude/.plan-state/${plan_key}.todo.md.bak"
 rm -f ".claude/.plan-state/${plan_key}.task-state.json.bak"
-rm -f ".claude/.plan-state/${plan_key}.task-handoff.md.bak"
 
 if [[ -x "scripts/refresh-current-status.sh" ]]; then
   bash "scripts/refresh-current-status.sh" --clear --write --reason "archive-workflow" || true

package/scripts/benchmark-thin-harness-mcp-e2e.ts

@@ -36,6 +36,7 @@ import {
   resetLeaseSideEffectMetrics,
 } from '../src/runtime/resources/leases/store';
 import type { MultiRepositoryMcpToolContext } from '../src/cli/mcp/multi-repository';
+import { waitForProcess } from '../src/runtime/execution/process-runtime/runtime';
 
 function git(root: string, args: string[]): void {
   const result = spawnSync('git', ['-C', root, ...args], { encoding: 'utf-8' });
@@ -104,7 +105,7 @@ interface PhaseSample {
   receiptMs: number;
   serializationMs: number;
   totalMs: number;
-  path: 'direct' | 'fast' | 'durable' | 'reject';
+  path: 'direct' | 'fast' | 'process_direct' | 'process_managed' | 'durable' | 'reject';
   ok: boolean;
   executionJobDelta: number;
   localJobDelta: number;
@@ -157,7 +158,8 @@ async function dispatchMcpLike(
     // Durable accepted path (queued). Measure only accept latency; do not wait for workers.
     payload = (durableResult.structuredContent ?? {}) as Record<string, unknown>;
     const reported = String(payload.path ?? payload.mode ?? 'durable');
-    path = reported === 'fast' || reported === 'direct' || reported === 'reject' || reported === 'durable'
+    path = reported === 'fast' || reported === 'direct' || reported === 'process_direct'
+      || reported === 'process_managed' || reported === 'reject' || reported === 'durable'
       ? reported
       : 'durable';
     queueDelayMs = thinRoutingMs;
@@ -175,7 +177,8 @@ async function dispatchMcpLike(
     operationMs = Math.round((performance.now() - opStart) * 100) / 100;
     payload = (toolResult?.structuredContent ?? {}) as Record<string, unknown>;
     const reported = String(payload.path ?? payload.mode ?? classification.path);
-    path = reported === 'fast' || reported === 'direct' || reported === 'reject' || reported === 'durable'
+    path = reported === 'fast' || reported === 'direct' || reported === 'process_direct'
+      || reported === 'process_managed' || reported === 'reject' || reported === 'durable'
       || reported === 'durable_worker_inline'
       ? (reported === 'durable_worker_inline' ? 'durable' : reported as PhaseSample['path'])
       : classification.path;
@@ -237,6 +240,13 @@ async function sampleCase(
   };
 
   const acceptedJob = typeof payload.jobId === 'string' && payload.jobId.trim() ? 1 : 0;
+  const processId = typeof payload.processId === 'string' ? payload.processId.trim() : '';
+  // Admission latency was already captured above. Settle a managed Process before
+  // the next sample so a correct same-checkout resource claim is not misreported
+  // as a benchmark regression.
+  if (phases.path === 'process_managed' && processId) {
+    await waitForProcess(fixture.controllerHome, fixture.repository.repoId, processId, { timeoutMs: 10_000 });
+  }
   return {
     ...phases,
     executionJobDelta: Math.max(
@@ -394,19 +404,15 @@ async function main() {
       },
     })));
 
-    cases.push(await runCase(fixture, 'async_command_durable', 'repository_command_execute', () => ({
-      command: ['git', 'status', '--short'],
+    cases.push(await runCase(fixture, 'async_command_process_handle', 'repository_command_execute', () => ({
+      command: ['bun', '-e', 'await Bun.sleep(250); console.log("async-bench")'],
       apply_mode: 'async',
+      request_id: `mcp-e2e-async-${Date.now()}-${Math.random()}`,
       timeout_ms: 8_000,
     })));
 
-    cases.push(await runCase(fixture, 'full_test_durable', 'repository_command_execute', () => ({
-      command: ['bun', 'test'],
-      timeout_ms: 120_000,
-    })));
-
-    const fastCases = cases.filter((entry) => !['async_command_durable', 'full_test_durable'].includes(entry.name));
-    const durableCases = cases.filter((entry) => ['async_command_durable', 'full_test_durable'].includes(entry.name));
+    const processCases = cases.filter((entry) => entry.name === 'async_command_process_handle');
+    const fastCases = cases.filter((entry) => entry.name !== 'async_command_process_handle');
 
     const report = {
       schemaVersion: 1,
@@ -421,7 +427,10 @@ async function main() {
         fastZeroWorkers: fastCases.every((entry) => entry.workerSpawnCount === 0),
         fastZeroSchedulerWakes: fastCases.every((entry) => entry.schedulerWakeDelta === 0),
         fastZeroProjectionInvalidations: fastCases.every((entry) => entry.projectionInvalidationDelta === 0),
-        durableStillRoutesDurable: durableCases.every((entry) => entry.path === 'durable' || String(entry.samples?.[0]?.path) === 'durable'),
+        processRuntimeAsyncAccepted: processCases.every((entry) => entry.ok && entry.path === 'process_managed'),
+        processRuntimeAsyncZeroExecutionJobs: processCases.every((entry) => entry.executionJobDelta === 0),
+        processRuntimeAsyncZeroLocalJobs: processCases.every((entry) => entry.localJobDelta === 0),
+        processRuntimeAsyncZeroWorkers: processCases.every((entry) => entry.workerSpawnCount === 0),
         allOk: cases.every((entry) => entry.ok),
       },
       leaseFiles: countLeaseFiles(fixture.controllerHome, fixture.repository.repoId),
@@ -465,8 +474,12 @@ async function main() {
 
     const failed = !report.acceptance.allOk
       || !report.acceptance.fastZeroExecutionJobs
+      || !report.acceptance.fastZeroLocalJobs
       || !report.acceptance.fastZeroWorkers
-      || !report.acceptance.durableStillRoutesDurable;
+      || !report.acceptance.processRuntimeAsyncAccepted
+      || !report.acceptance.processRuntimeAsyncZeroExecutionJobs
+      || !report.acceptance.processRuntimeAsyncZeroLocalJobs
+      || !report.acceptance.processRuntimeAsyncZeroWorkers;
     process.exitCode = failed ? 1 : 0;
   } finally {
     rmSync(fixture.root, { recursive: true, force: true });

package/scripts/build-controller-ui.ts

@@ -0,0 +1,28 @@
+import { mkdtemp, readFile, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { build } from 'vite';
+
+const root = resolve(import.meta.dir, '..');
+const configFile = resolve(root, 'src/cli/local-bridge/frontend/vite.config.ts');
+const committedOutdir = resolve(root, 'src/cli/local-bridge/ui-dist');
+const checkOnly = process.argv.includes('--check');
+const outdir = checkOnly ? await mkdtemp(join(tmpdir(), 'forge-controller-ui-')) : committedOutdir;
+
+try {
+  await build({ configFile, build: { outDir: outdir, emptyOutDir: true } });
+  if (checkOnly) {
+    for (const asset of ['app.js', 'app.css']) {
+      const [generated, committed] = await Promise.all([
+        readFile(resolve(outdir, asset), 'utf8'),
+        readFile(resolve(committedOutdir, asset), 'utf8'),
+      ]);
+      if (generated !== committed) throw new Error(`CONTROLLER_UI_BUNDLE_STALE: ${asset}; run bun run build:controller-ui`);
+    }
+    console.log('Controller UI bundle is current.');
+  } else {
+    console.log(`Controller UI built: ${resolve(outdir, 'app.js')}, ${resolve(outdir, 'app.css')}`);
+  }
+} finally {
+  if (checkOnly) await rm(outdir, { recursive: true, force: true });
+}

package/scripts/capture-plan.sh

@@ -103,7 +103,7 @@ extract_task_breakdown() {
 slug=""
 title=""
 status="Draft"
-source_name="codex-plan-or-waza-think"
+source_name="host-plan-or-forge-plan"
 route="planning"
 orchestration_kind="host-plan"
 source_ref=""
@@ -266,7 +266,7 @@ Use the captured planning output below as the execution source of truth.
 ### Trade-offs
 | Option | Pros | Cons | Decision |
 |--------|------|------|----------|
-| Captured plan | Preserves the approved Codex Plan or Waza think decision | Requires the captured text to be concrete enough to execute | Use |
+| Captured plan | Preserves the approved Forge /plan, Codex Plan, or optional external planning decision | Requires the captured text to be concrete enough to execute | Use |
 
 ## Detailed Design
 ### File Changes
@@ -296,13 +296,13 @@ See captured planning output.
 ## Handoff
 
 - Checks file: \`.ai/harness/checks/latest.json\`
-- Session handoff: \`.ai/harness/handoff/current.md\`
+- Session continuation: \`.ai/harness/session/continuation.md\`
 
 ## Evidence Contract
 
 - **State/progress path**: \`${plan_file}\` task breakdown, \`tasks/todos.md\` deferred-goal ledger, \`tasks/contracts/${artifact_stem}.contract.md\`, \`tasks/reviews/${artifact_stem}.review.md\`, and \`tasks/notes/${artifact_stem}.notes.md\`
 - **Verification evidence**: \`.ai/harness/checks/latest.json\`, \`.ai/harness/runs/\`, and the commands named in the captured planning output
-- **Evaluator rubric**: \`tasks/reviews/${artifact_stem}.review.md\` must record a passing Waza /check style recommendation
+- **Evaluator rubric**: \`tasks/reviews/${artifact_stem}.review.md\` must record a passing Forge /review recommendation
 - **Stop condition**: all task breakdown items are complete, sprint verification passes, and the review recommends pass
 - **Rollback surface**: before execution remove \`${plan_file}\`; after execution revert branch \`codex/${slug}\` or the generated task artifacts
 

package/scripts/check-agent-tooling.sh

@@ -1203,7 +1203,18 @@ function codeGraphPlatformPackageName() {
 
 function codeGraphPlatformBundleBin() {
   if (process.platform === "win32") return null;
-  return path.join(REPO_ROOT, "node_modules", codeGraphPlatformPackageName(), "bin", "codegraph");
+  const direct = path.join(REPO_ROOT, "node_modules", codeGraphPlatformPackageName(), "bin", "codegraph");
+  if (fileIsExecutable(direct)) return direct;
+  // Git worktrees commonly reuse the canonical checkout's dependencies. Resolve
+  // the platform package through Node/Bun module lookup instead of declaring the
+  // bundled Runtime missing just because this worktree has no local node_modules.
+  try {
+    const packageJson = require.resolve(`${codeGraphPlatformPackageName()}/package.json`, { paths: [REPO_ROOT] });
+    const resolved = path.join(path.dirname(packageJson), "bin", "codegraph");
+    return fileIsExecutable(resolved) ? resolved : direct;
+  } catch {
+    return direct;
+  }
 }
 
 function resolveCodeGraphBinary() {

package/scripts/check-platform-support.mjs

@@ -42,8 +42,8 @@ for (const path of ["install.sh", "install.ps1"]) {
   requireText(path, "FORGE_INSTALL_RUNTIME");
   requireText(path, "FORGE_INSTALL_RUNTIME");
   requireText(path, "Node.js 20.10");
-  requireText(path, "Git is required");
-  requireText(path, "forge install --no-cli");
+  requireText(path, "Git is optional");
+  requireText(path, "forge setup");
 }
 requireText("install.sh", "npm install -g");
 requireText("install.ps1", "npm install -g");

package/scripts/check-public-docs.sh

@@ -4,6 +4,17 @@ set -euo pipefail
 ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 cd "$ROOT"
 
+PACKAGE_VERSION="$(node -p "require('./package.json').version")"
+if [[ "$PACKAGE_VERSION" == *-rc.* ]]; then
+  INSTALL_SPEC='@moretea-labs/forge@next'
+  README_CHANNEL_EN='npm `next`'
+  README_CHANNEL_ZH='npm 使用 `next`'
+else
+  INSTALL_SPEC='@moretea-labs/forge'
+  README_CHANNEL_EN='npm `latest`'
+  README_CHANNEL_ZH='npm `latest`'
+fi
+
 required=(
   README.md README.en.md README.zh-CN.md
   CHANGELOG.md CONTRIBUTING.md SECURITY.md SUPPORT.md CODE_OF_CONDUCT.md
@@ -45,7 +56,7 @@ for path in README.md README.zh-CN.md; do
   fi
   grep -q 'Node.js 20.10' "$path" || { echo "[public-docs] missing Node baseline: $path" >&2; exit 1; }
   grep -q 'npm install -g \.' "$path" || { echo "[public-docs] missing verified source install: $path" >&2; exit 1; }
-  grep -q '@moretea-labs/forge@next' "$path" || { echo "[public-docs] missing upcoming RC install reference: $path" >&2; exit 1; }
+  grep -q "$INSTALL_SPEC" "$path" || { echo "[public-docs] missing package install reference for $PACKAGE_VERSION: $path" >&2; exit 1; }
   for link in SUPPORT.md SECURITY.md CONTRIBUTING.md CHANGELOG.md docs/wiki/Home.md; do
     grep -q "$link" "$path" || { echo "[public-docs] missing $link link: $path" >&2; exit 1; }
   done
@@ -57,14 +68,14 @@ done
 
 grep -q 'docs/tutorials/01-install-and-start.md' README.md || { echo "[public-docs] English README missing tutorial link" >&2; exit 1; }
 grep -q 'docs/tutorials/01-install-and-start.zh-CN.md' README.zh-CN.md || { echo "[public-docs] Chinese README missing tutorial link" >&2; exit 1; }
-grep -q 'npm `next`' README.md || { echo "[public-docs] English README must state the RC npm channel" >&2; exit 1; }
-grep -q 'npm 使用 `next`' README.zh-CN.md || { echo "[public-docs] Chinese README must state the RC npm channel" >&2; exit 1; }
+grep -q "$README_CHANNEL_EN" README.md || { echo "[public-docs] English README must state the npm channel for $PACKAGE_VERSION" >&2; exit 1; }
+grep -q "$README_CHANNEL_ZH" README.zh-CN.md || { echo "[public-docs] Chinese README must state the npm channel for $PACKAGE_VERSION" >&2; exit 1; }
 grep -q 'See \[README.md\](README.md)' README.en.md || { echo "[public-docs] README.en.md must point to the maintained English README" >&2; exit 1; }
 
 for path in docs/tutorials/01-install-and-start.md docs/tutorials/01-install-and-start.zh-CN.md; do
   grep -q 'Node.js 20.10' "$path" || { echo "[public-docs] missing Node baseline: $path" >&2; exit 1; }
   grep -q 'npm install -g \.' "$path" || { echo "[public-docs] missing source install: $path" >&2; exit 1; }
-  grep -q '@moretea-labs/forge@next' "$path" || { echo "[public-docs] missing upcoming package command: $path" >&2; exit 1; }
+  grep -q "$INSTALL_SPEC" "$path" || { echo "[public-docs] missing package command for $PACKAGE_VERSION: $path" >&2; exit 1; }
 done
 
 for path in docs/operations/releasing.md docs/operations/releasing.zh-CN.md; do
@@ -84,7 +95,7 @@ done
 grep -q 'npm.*primary package registry' docs/operations/releasing.md || { echo "[public-docs] npm primary registry role is unclear" >&2; exit 1; }
 grep -q 'GitHub Releases' docs/operations/releasing.md || { echo "[public-docs] GitHub Release role is unclear" >&2; exit 1; }
 grep -q 'publishConfig.provenance' docs/versioning.md || { echo "[public-docs] provenance contract is undocumented" >&2; exit 1; }
-grep -q 'after the first stable release' docs/operations/homebrew.md || { echo "[public-docs] Homebrew stable-only gate is unclear" >&2; exit 1; }
+grep -q 'stable npm/GitHub release' docs/operations/homebrew.md || { echo "[public-docs] Homebrew stable-only gate is unclear" >&2; exit 1; }
 grep -q 'WSL2' docs/operations/platform-support.md || { echo "[public-docs] platform matrix missing WSL2" >&2; exit 1; }
 grep -q 'Windows 原生' docs/operations/platform-support.zh-CN.md || { echo "[public-docs] Chinese platform matrix missing native Windows scope" >&2; exit 1; }
 grep -q 'rh_status' docs/tutorials/02-connect-chatgpt.md || { echo "[public-docs] connector tutorial missing facade verification" >&2; exit 1; }

package/scripts/check-release-readiness.sh

@@ -24,18 +24,12 @@ bun run check:public-export
 
 ARTIFACT_DIR="${FORGE_RELEASE_ARTIFACT_DIR:-$ROOT/.ai/harness/artifacts/release}"
 mkdir -p "$ARTIFACT_DIR"
-PACK_JSON="$ARTIFACT_DIR/pack.json"
-echo "[release-readiness] create one reusable tarball"
-npm pack --json --pack-destination "$ARTIFACT_DIR" >"$PACK_JSON"
-TARBALL="$(bun - "$PACK_JSON" <<'JS_EOF'
-const [, , path] = process.argv;
-const value = await Bun.file(path).json();
-const entry = Array.isArray(value) ? value[0] : value;
-if (!entry?.filename) throw new Error('npm pack did not report a filename');
-console.log(entry.filename);
-JS_EOF
-)"
+TARBALL="$(node -e 'const p=require("./package.json"); process.stdout.write(`${p.name.replace(/^@/, "").replace(/\//g, "-")}-${p.version}.tgz`)')"
 TARBALL_PATH="$ARTIFACT_DIR/$TARBALL"
+echo "[release-readiness] create one reusable tarball"
+rm -f "$TARBALL_PATH"
+npm pack --pack-destination "$ARTIFACT_DIR" >/dev/null
+[[ -f "$TARBALL_PATH" ]] || { echo "[release-readiness] ERROR: npm pack did not create $TARBALL_PATH" >&2; exit 1; }
 printf '%s\n' "$TARBALL_PATH" >"$ARTIFACT_DIR/latest-tarball.txt"
 
 echo "[release-readiness] smoke the same tarball"

package/scripts/check-runtime-architecture.mjs

@@ -67,6 +67,7 @@ const required = [
   'src/runtime/projections/controller-context.ts',
   'src/runtime/projections/invalidation.ts',
   'src/runtime/workflow/schedules/engine.ts',
+  'src/runtime/workflow/schedules/work-continuation.ts',
   'scripts/smoke-runtime-recovery.ts',
   'scripts/smoke-schedule-engine.ts',
   'src/runtime/workflow/portfolio/engine.ts',
@@ -83,7 +84,6 @@ const required = [
   'src/runtime/standalone-recovery/entry.ts',
   'src/cli/commands/init-hook.ts',
   'src/cli/commands/runtime.ts',
-  'src/cli/commands/controller.ts',
   'src/cli/index.ts',
   'docs/architecture/current/runtime-architecture-simplification.md',
   'docs/architecture/current/implementation-status.md',
@@ -96,6 +96,17 @@ for (const path of required) text(path);
 requireText('src/runtime/control-plane/routing/route-policy.ts', "export function decideRoute");
 requireText('src/runtime/control-plane/routing/route-policy.ts', 'inputFingerprint');
 requireText('src/runtime/control-plane/routing/route-policy.ts', 'policyVersion');
+requireText('src/runtime/gateway/mcp/runtime-tools.ts', 'runPersistedCheckViaProcessRuntime({');
+requireText('src/runtime/gateway/mcp/runtime-tools.ts', 'interactiveWaitMs: 0');
+requireText('src/runtime/gateway/mcp/runtime-tools.ts', 'checkContentRevision');
+requireText('src/runtime/gateway/mcp/runtime-tools.ts', 'observedGitHead');
+forbidBetween(
+  'src/runtime/gateway/mcp/runtime-tools.ts',
+  'async function runFacadeVerify(',
+  'export async function callRuntimeTool',
+  /runControllerCheck\s*\(/,
+  'route rh_work verify through persisted Process Runtime instead of synchronous check execution',
+);
 for (const adapter of [
   'src/cli/controller/work-mode.ts',
   'src/runtime/control-plane/facade/types.ts',
@@ -254,12 +265,7 @@ forbid(
   /buildSupervisorCommand|addCommand\(buildSupervisorCommand\(\)\)/,
   'the public root CLI must not expose the legacy Supervisor lifecycle',
 );
-forbid(
-  'src/cli/commands/controller.ts',
-  /controller\/lifecycle|restart-coordinator|bluegreen-rollout|controllerRestartVerify|controllerFeatureVerify|command\.command\(['"](?:start|stop|status|restart|logs|rollout|rollback|restart-verify|feature-verify)['"]\)/,
-  'the public controller CLI must not expose component lifecycle, restart, blue-green rollout, rollback, or green-gate commands',
-);
-requireText('src/cli/commands/controller.ts', 'repositoryChangeVerify');
+requireMissing('src/cli/commands/controller.ts');
 requireText('src/runtime/root/release-manifest.ts', "entrypoint must be forge-runtime");
 requireText('src/runtime/root/release-manifest.ts', 'databaseSchemaCompatibility');
 requireText('src/runtime/root/release-manifest.ts', 'workerProtocolVersion');
@@ -363,21 +369,11 @@ forbid(
   /\bcreateExecutionJob\b|\bfindExecutionJob\b/,
   'Portfolio definitions are planning records; Kernel-owned Portfolio execution is retired',
 );
-forbid(
-  'src/runtime/workflow/campaigns/engine.ts',
-  /\bcreateExecutionJob\b|\bfindExecutionJob\b|\bgetExecutionJob\b|\bdispatchTask\b|\btriggerSupervisor\b/,
-  'Campaign Engine is migration-only and must not retain automatic Job dispatch, retry, or supervisor trigger code',
-);
 forbid(
   'src/cli/local-bridge/server.ts',
   /\bsubmitLocalBridgeJob\b|\bdispatchLocalBridgeJob\b|\basyncExecute\b/,
   'Local Bridge HTTP creation routes must return retirement handoffs without dormant Job submission or dispatch code',
 );
-forbid(
-  'src/cli/commands/controller.ts',
-  /\bsubmitLocalBridgeJob\b|\bdispatchLocalBridgeJob\b/,
-  'Controller CLI launch must return an external-Controller handoff without dormant Local Bridge Job code',
-);
 forbid(
   'src/cli/mcp/repository-tools.ts',
   /\bsubmitLocalBridgeJob\b|\bexecuteLocalBridgeJob\b|\bwaitForRepositoryCommandHandoff\b/,
@@ -429,11 +425,6 @@ forbid(
   /\bretryAgentJob\b/,
   'Legacy MCP must not call Agent Run retry',
 );
-forbid(
-  'src/runtime/workflow/campaigns/engine.ts',
-  /\bacceptTaskJob\b|\bstartTaskJob\b|\bretryAgentJob\b|\blaunchAgent\b/,
-  'Campaign Engine must not start or retry Kernel-managed Agent Runs',
-);
 forbid(
   'src/runtime/workflow/portfolio/engine.ts',
   /\bacceptTaskJob\b|\bstartTaskJob\b|\bretryAgentJob\b/,
@@ -571,6 +562,7 @@ for (const path of [
   'src/runtime/control-plane/global-scheduler/scheduler.ts',
   'src/runtime/control-plane/repo-actor/actor.ts',
   'src/runtime/workflow/schedules/engine.ts',
+  'src/runtime/workflow/schedules/work-continuation.ts',
   'src/cli/mcp/transports/http.ts',
 ]) {
   forbid(path, /\b(?:spawnSync|execSync|execFileSync)\s*\(/, 'the non-blocking Gateway/Controller hot-path rule');

package/scripts/check-tarball-install-smoke.sh

@@ -34,8 +34,9 @@ mkdir -p "$APP_DIR" "$TARGET_REPO"
 git -C "$TARGET_REPO" init -q
 
 cd "$APP_DIR"
-bun init -y >/dev/null
-bun add "$TARBALL_PATH" >/dev/null
+printf '{"private":true,"name":"forge-tarball-smoke","version":"0.0.0"}
+' > package.json
+npm install "$TARBALL_PATH" --omit=optional --ignore-scripts --no-audit --no-fund >/dev/null
 
 CLI="$APP_DIR/node_modules/.bin/forge"
 HOOK="$APP_DIR/node_modules/.bin/forge-hook"

package/scripts/check-task-workflow.sh

@@ -724,8 +724,8 @@ helper_compat_dir="$(policy_get '.harness.helper_compat_dir' 'scripts')"
 helper_source="$(policy_get '.harness.helper_source' 'package')"
 context_map_file="$(policy_get '.context.map_file' '.ai/context/context-map.json')"
 brain_manifest_file="$(policy_get '.information_lifecycle.external_knowledge.manifest_file' '.ai/harness/brain-manifest.json')"
-handoff_file="$(policy_get '.harness.handoff_file' '.ai/harness/handoff/current.md')"
-resume_file="$(policy_get '.handoff_resume.resume_packet_file' '.ai/harness/handoff/resume.md')"
+handoff_file="$(policy_get '.session.continuation_file' '.ai/harness/session/continuation.md')"
+resume_file="$(policy_get '.session.resume_file' '.ai/harness/session/resume.md')"
 sprints_dir="$(policy_get '.sprints.dir' 'plans/sprints')"
 sprint_marker_file="$(policy_get '.sprints.active_marker_file' '.ai/harness/sprint/active-sprint')"
 legacy_sprints_dir="tasks/sprints"

package/scripts/codex-handoff-resume.sh

@@ -200,8 +200,8 @@ latest_global_handoff() {
   find "$codex_home/handoffs" -maxdepth 1 -type f -name 'handoff-*.md' 2>/dev/null | sort | tail -1
 }
 
-resume_file="$(safe_repo_file "$(policy_get '.handoff_resume.resume_packet_file' '.ai/harness/handoff/resume.md')" '.ai/harness/handoff/resume.md' '.ai/harness/')"
-repo_handoff="$(safe_repo_file "$(policy_get '.harness.handoff_file' '.ai/harness/handoff/current.md')" '.ai/harness/handoff/current.md' '.ai/harness/')"
+resume_file="$(safe_repo_file "$(policy_get '.session.resume_file' '.ai/harness/session/resume.md')" '.ai/harness/session/resume.md' '.ai/harness/')"
+repo_handoff="$(safe_repo_file "$(policy_get '.session.continuation_file' '.ai/harness/session/continuation.md')" '.ai/harness/session/continuation.md' '.ai/harness/')"
 checks_file="$(safe_repo_file "$(policy_get '.harness.checks_file' '.ai/harness/checks/latest.json')" '.ai/harness/checks/latest.json' '.ai/harness/')"
 research_dir="$(safe_repo_file "$(policy_get '.tasks.research_dir' 'docs/researches')" 'docs/researches' 'docs/researches')"
 todo_file="$(safe_repo_file "$(policy_get '.tasks.todo_file' 'tasks/todos.md')" 'tasks/todos.md' 'tasks/')"
@@ -222,7 +222,7 @@ cat > "$resume_file" <<EOF_RESUME
 
 ## Resume Prompt
 
-You are starting a fresh Codex session for an existing long-running task. Do not rely on prior chat history or Codex auto-compact. First read the source artifacts listed below, then continue from the exact next step in the repo handoff.
+You are starting a fresh Codex session for an existing long-running task. Do not rely on prior chat history or Codex auto-compact. First read the current user input and Canonical Runtime state when available, then source/evidence artifacts, and use the session continuation cache only to recover the exact next step.
 
 Current prompt files first:
 - If the current user message lists files under \`# Files mentioned by the user\`, references \`pasted-text.txt\`, or includes an explicit attachment/file path, read those current-input files before the repo recovery artifacts below.
@@ -243,7 +243,7 @@ Conditional first reads:
 - Global handoff: ${global_handoff:-(none)}
 
 Execution rules:
-- Treat filesystem artifacts as the source of truth.
+- Treat Canonical Runtime lifecycle state as authoritative for migrated Requirement/Plan/Work state; treat Git source/evidence as authoritative in their own domains and session Markdown as rebuildable cache only.
 - Decide in the main agent whether to use subagents, parallel sidecars, sidecar \`codex exec --json\`, or a bounded main-thread trace for broad research/log scans based on context impact and callable tools; do not ask the user for spawn confirmation.
 - Keep deep research conclusions in \`${research_dir}/\`, not only in chat.
 - Do not run \`/compact\` as the primary recovery path.
@@ -251,7 +251,7 @@ Execution rules:
 
 ## Source Artifacts
 
-- Repo handoff: ${repo_handoff}
+- Session continuation: ${repo_handoff}
 - Resume packet: ${resume_file}
 - Checks: ${checks_file}
 - Todo: ${todo_file}

package/scripts/create-project-dirs.sh

@@ -87,7 +87,7 @@ fi
 mkdir -p .ai/hooks
 mkdir -p .ai/context
 mkdir -p .ai/harness/checks
-mkdir -p .ai/harness/handoff
+mkdir -p .ai/harness/session .ai/harness/controller/packets .ai/harness/projections .ai/harness/transfers
 mkdir -p .ai/harness/failures
 mkdir -p .ai/harness/security
 mkdir -p .ai/harness/runs
@@ -201,8 +201,8 @@ DOCS_SPEC_EOF
 # - .ai/harness/checks/latest.json
 # - .ai/harness/events.jsonl
 # - .ai/harness/architecture/events.jsonl
-# - .ai/harness/handoff/current.md
-# - .ai/harness/handoff/resume.md
+# - .ai/harness/session/continuation.md
+# - .ai/harness/session/resume.md
 # - .ai/harness/failures/latest.jsonl
 # - .ai/harness/security/.gitkeep
 # - .ai/harness/worktrees/.gitkeep