@moretea-labs/forge 1.6.0 → 1.7.1

package/scripts/check-runtime-architecture.mjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
-import { readFileSync, existsSync, readdirSync } from 'node:fs';
-import { resolve } from 'node:path';
+import { readFileSync, existsSync, lstatSync, readdirSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { dirname, extname, normalize, resolve } from 'node:path';
 
 const root = resolve(new URL('..', import.meta.url).pathname);
 const failures = [];
@@ -15,8 +16,16 @@ function text(path) {
 function requireText(path, needle) {
   if (!text(path).includes(needle)) failures.push(`${path} must contain ${JSON.stringify(needle)}`);
 }
+function hasFilesystemContent(path) {
+  const absolute = resolve(root, path);
+  if (!existsSync(absolute)) return false;
+  if (!lstatSync(absolute).isDirectory()) return true;
+  return readdirSync(absolute, { withFileTypes: true }).some((entry) =>
+    entry.isDirectory() ? hasFilesystemContent(`${path}/${entry.name}`) : true,
+  );
+}
 function requireMissing(path) {
-  if (existsSync(resolve(root, path))) failures.push(`${path} must be deleted`);
+  if (hasFilesystemContent(path)) failures.push(`${path} must be deleted`);
 }
 function requireMatch(path, expression, description) {
   if (!expression.test(text(path))) failures.push(`${path} must ${description}`);
@@ -44,10 +53,141 @@ function sourceFiles(directory) {
   return files;
 }
 
+function relativeStaticTypeScriptDependencyGraph(directory = 'src') {
+  let ts;
+  try {
+    ts = createRequire(import.meta.url)('typescript');
+  } catch (error) {
+    failures.push(`TypeScript dependency is required for architecture import-cycle analysis: ${error instanceof Error ? error.message : String(error)}`);
+    return new Map();
+  }
+
+  const files = sourceFiles(directory).sort();
+  const known = new Set(files);
+  const graph = new Map(files.map((path) => [path, new Set()]));
+
+  function resolveTypeScriptImport(fromPath, specifier) {
+    if (!specifier.startsWith('.')) return undefined;
+    const base = normalize(`${dirname(fromPath)}/${specifier}`).replaceAll('\\', '/');
+    const extension = extname(base);
+    const withoutRuntimeExtension = ['.js', '.mjs', '.cjs'].includes(extension)
+      ? base.slice(0, -extension.length)
+      : base;
+    const candidates = extension === '.ts'
+      ? [base]
+      : [withoutRuntimeExtension, `${withoutRuntimeExtension}.ts`, `${withoutRuntimeExtension}/index.ts`];
+    return candidates.find((candidate) => known.has(candidate));
+  }
+
+  for (const path of files) {
+    const sourceFile = ts.createSourceFile(path, text(path), ts.ScriptTarget.Latest, true, ts.ScriptKind.TS);
+    for (const statement of sourceFile.statements) {
+      let specifier;
+      if ((ts.isImportDeclaration(statement) || ts.isExportDeclaration(statement))
+          && statement.moduleSpecifier
+          && ts.isStringLiteralLike(statement.moduleSpecifier)) {
+        specifier = statement.moduleSpecifier.text;
+      } else if (ts.isImportEqualsDeclaration(statement)
+          && ts.isExternalModuleReference(statement.moduleReference)
+          && statement.moduleReference.expression
+          && ts.isStringLiteralLike(statement.moduleReference.expression)) {
+        specifier = statement.moduleReference.expression.text;
+      }
+      if (!specifier) continue;
+      const target = resolveTypeScriptImport(path, specifier);
+      if (target) graph.get(path).add(target);
+    }
+  }
+  return graph;
+}
+
+function stronglyConnectedComponents(graph) {
+  let index = 0;
+  const indices = new Map();
+  const lowLinks = new Map();
+  const stack = [];
+  const onStack = new Set();
+  const components = [];
+
+  function visit(node) {
+    indices.set(node, index);
+    lowLinks.set(node, index);
+    index += 1;
+    stack.push(node);
+    onStack.add(node);
+
+    for (const target of graph.get(node) ?? []) {
+      if (!indices.has(target)) {
+        visit(target);
+        lowLinks.set(node, Math.min(lowLinks.get(node), lowLinks.get(target)));
+      } else if (onStack.has(target)) {
+        lowLinks.set(node, Math.min(lowLinks.get(node), indices.get(target)));
+      }
+    }
+
+    if (lowLinks.get(node) !== indices.get(node)) return;
+    const component = [];
+    while (stack.length) {
+      const member = stack.pop();
+      onStack.delete(member);
+      component.push(member);
+      if (member === node) break;
+    }
+    components.push(component.sort());
+  }
+
+  for (const node of [...graph.keys()].sort()) {
+    if (!indices.has(node)) visit(node);
+  }
+  return components;
+}
+
+function requireAcyclicProductionTypeScript() {
+  const graph = relativeStaticTypeScriptDependencyGraph('src');
+  const cyclic = stronglyConnectedComponents(graph).filter((component) =>
+    component.length > 1 || (component.length === 1 && graph.get(component[0])?.has(component[0])),
+  );
+  for (const component of cyclic) {
+    failures.push(`production TypeScript import cycle: ${component.join(' -> ')}`);
+  }
+}
+
+const allowedArchitectureRootMarkdown = new Set(['CURRENT.md', 'EVOLUTION.md', 'history.md', 'index.md']);
+const architectureRootMarkdown = readdirSync(resolve(root, 'docs/architecture'), { withFileTypes: true })
+  .filter((entry) => entry.isFile() && entry.name.endsWith('.md'))
+  .map((entry) => entry.name)
+  .sort();
+for (const name of architectureRootMarkdown) {
+  if (!allowedArchitectureRootMarkdown.has(name)) {
+    failures.push(`docs/architecture/${name} must be archived under docs/architecture/history/ instead of acting as parallel root architecture authority`);
+  }
+}
+
+for (const path of ['README.md', 'docs/ROADMAP.md', 'docs/architecture/CURRENT.md', 'docs/architecture/index.md']) {
+  forbid(path, /\/Users\//, 'maintained documentation must not contain personal absolute macOS paths');
+  forbid(path, /\bRepo Harness\b/i, 'maintained documentation must use the current Forge product identity');
+  forbid(path, /(?:^|\n)\s*(?:>\s*)?(?:\*\*)?Status(?:\*\*)?\s*:\s*[^\n]*(?:implementation in progress|Phase\s+\d+)/i, 'maintained documentation must not carry transient execution status; use Plan/Work/evidence or history');
+}
+
 const required = [
   'src/runtime/gateway/mcp/router.ts',
   'src/cli/agent-jobs/executable-resolver.ts',
   'src/runtime/control-plane/global-scheduler/scheduler.ts',
+  'src/runtime/control-plane/global-scheduler/config.ts',
+  'src/runtime/control-plane/global-scheduler/state.ts',
+  'src/runtime/control-plane/global-scheduler/worker-launch.ts',
+  'src/runtime/control-plane/global-scheduler/dispatch-capacity.ts',
+  'src/runtime/control-plane/global-scheduler/projection-refresh.ts',
+  'src/runtime/control-plane/global-scheduler/worker-lifecycle.ts',
+  'src/runtime/control-plane/global-scheduler/worker-stderr.ts',
+  'src/runtime/control-plane/global-scheduler/worker-attachment.ts',
+  'src/runtime/control-plane/global-scheduler/worker-lifecycle-store.ts',
+  'src/runtime/control-plane/global-scheduler/maintenance.ts',
+  'src/runtime/control-plane/global-scheduler/source-scan.ts',
+  'src/runtime/control-plane/global-scheduler/durable-admission.ts',
+  'src/runtime/control-plane/global-scheduler/worker-exit-decision.ts',
+  'src/runtime/control-plane/global-scheduler/worker-exit-reconciler.ts',
+  'src/runtime/control-plane/global-scheduler/worker-process.ts',
   'src/runtime/control-plane/repo-actor/actor.ts',
   'src/runtime/execution/jobs/store.ts',
   'src/runtime/execution/jobs/timeouts.ts',
@@ -56,8 +196,27 @@ const required = [
   'src/runtime/execution/thin-harness/index.ts',
   'src/runtime/execution/thin-harness/execution-router.ts',
   'src/runtime/control-plane/routing/route-policy.ts',
-  'docs/architecture/current/route-policy.md',
-  'docs/architecture/current/thin-harness-v1.md',
+  'src/runtime/control-plane/routing/workspace-admission.ts',
+  'src/runtime/control-plane/facade/requirement-authority.ts',
+  'src/runtime/control-plane/facade/repository-work-admission.ts',
+  'src/runtime/control-plane/execution/retained-work-resume.ts',
+  'src/runtime/control-plane/execution/work-handle-authority.ts',
+  'src/runtime/control-plane/execution/work-verification-context.ts',
+  'src/runtime/control-plane/execution/work-verification-service.ts',
+  'src/runtime/control-plane/execution/repository-work-attribution.ts',
+  'src/runtime/control-plane/execution/work-completion-authority.ts',
+  'src/runtime/control-plane/execution/work-evidence-policy.ts',
+  'src/runtime/control-plane/execution/work-execution-support.ts',
+  'src/runtime/control-plane/execution/work-finalization-service.ts',
+  'src/runtime/control-plane/execution/work-preparation-service.ts',
+  'src/runtime/control-plane/execution/work-operation-service.ts',
+  'src/runtime/control-plane/facade/work-state-machine.ts',
+  'src/runtime/evidence/process-check-execution.ts',
+  'src/runtime/context/semantic-navigation-contract.ts',
+  'src/cli/mcp/tool-contract.ts',
+  'src/cli/github/contracts.ts',
+  'src/runtime/gateway/mcp/runtime-tool-definitions.ts',
+  'docs/architecture/CURRENT.md',
   'src/runtime/resources/leases/store.ts',
   'src/runtime/evidence/event-ledger.ts',
   'src/runtime/evidence/evidence-store.ts',
@@ -70,8 +229,6 @@ const required = [
   'src/runtime/workflow/schedules/work-continuation.ts',
   'scripts/smoke-runtime-recovery.ts',
   'scripts/smoke-schedule-engine.ts',
-  'src/runtime/workflow/portfolio/engine.ts',
-  'src/runtime/workflow/findings/store.ts',
   'src/runtime/release/release-gate.ts',
   'src/runtime/root/runtime.ts',
   'src/runtime/root/readiness.ts',
@@ -85,32 +242,39 @@ const required = [
   'src/cli/commands/init-hook.ts',
   'src/cli/commands/runtime.ts',
   'src/cli/index.ts',
-  'docs/architecture/current/runtime-architecture-simplification.md',
-  'docs/architecture/current/implementation-status.md',
-  'docs/architecture/current/runtime-directory-map.md',
-  'docs/architecture/current/operations-runbook.md',
-  'docs/architecture/current/target-requirements-traceability.md',
-  'docs/architecture/current/approved-target-architecture.zh-CN.md',
 ];
 for (const path of required) text(path);
+requireAcyclicProductionTypeScript();
+for (const path of sourceFiles('src/runtime/control-plane')) {
+  forbid(path, /(?:from\s+['"]|import\s*\(\s*['"])(?:\.\.\/)+gateway\//, 'control-plane domain/application code must not depend on Gateway transport');
+}
 requireText('src/runtime/control-plane/routing/route-policy.ts', "export function decideRoute");
 requireText('src/runtime/control-plane/routing/route-policy.ts', 'inputFingerprint');
 requireText('src/runtime/control-plane/routing/route-policy.ts', 'policyVersion');
-requireText('src/runtime/gateway/mcp/runtime-tools.ts', 'runPersistedCheckViaProcessRuntime({');
-requireText('src/runtime/gateway/mcp/runtime-tools.ts', 'interactiveWaitMs: 0');
-requireText('src/runtime/gateway/mcp/runtime-tools.ts', 'checkContentRevision');
-requireText('src/runtime/gateway/mcp/runtime-tools.ts', 'observedGitHead');
-forbidBetween(
+requireText('src/runtime/control-plane/execution/work-verification-service.ts', 'runPersistedCheckViaProcessRuntime({');
+requireText('src/runtime/control-plane/execution/work-verification-service.ts', 'interactiveWaitMs: input.interactiveWaitMs ?? 0');
+requireText('src/runtime/control-plane/execution/work-verification-service.ts', 'checkContentRevision');
+requireText('src/runtime/control-plane/execution/work-verification-service.ts', 'observedGitHead');
+requireText('src/runtime/gateway/mcp/runtime-tools.ts', 'executeWorkVerification({');
+requireText('src/cli/local-bridge/facade-api.ts', 'executeWorkVerification({');
+forbid(
+  'src/cli/local-bridge/facade-api.ts',
+  /runControllerCheck\s*\(/,
+  'Local Bridge Work verification must use the canonical persisted Work verification service',
+);
+forbid(
   'src/runtime/gateway/mcp/runtime-tools.ts',
-  'async function runFacadeVerify(',
-  'export async function callRuntimeTool',
+  /function\s+classifyTerminalCheckEvidence\s*\(/,
+  'terminal Check evidence classification belongs to Process Runtime, not the Gateway transport',
+);
+forbid(
+  'src/runtime/control-plane/execution/work-verification-service.ts',
   /runControllerCheck\s*\(/,
-  'route rh_work verify through persisted Process Runtime instead of synchronous check execution',
+  'route Work verification through persisted Process Runtime instead of synchronous check execution',
 );
 for (const adapter of [
   'src/cli/controller/work-mode.ts',
   'src/runtime/control-plane/facade/types.ts',
-  'src/runtime/control-plane/goal-loop/executor-router.ts',
 ]) {
   requireText(adapter, '@deprecated Compatibility adapter');
   requireText(adapter, 'decideRoute(');
@@ -122,10 +286,66 @@ for (const path of sourceFiles('src')) {
   forbid(path, /requirePlanForGoalWorkloop\s*:\s*true/, 'never restore mandatory Plan gating in production');
 }
 if (routeAuthorityCount !== 1) failures.push(`exactly one decideRoute authority is required; found ${routeAuthorityCount}`);
+forbid(
+  'src/runtime/control-plane/facade/goal-workloop.ts',
+  /function\s+(?:evaluateWorkCompletionEvidence|evaluateWorkImplementationEvidence|verificationRecordAppliesToCurrentWorkspace)\s*\(/,
+  'keep Work evidence policy in the canonical work-evidence-policy module instead of reimplementing it in the facade',
+);
+requireText('src/runtime/control-plane/facade/goal-workloop.ts', "from '../execution/work-evidence-policy'");
+for (const path of sourceFiles('src/runtime/control-plane')) {
+  if (path === 'src/runtime/control-plane/facade/work-contract-store.ts' || path === 'src/runtime/control-plane/execution/work-completion-authority.ts') continue;
+  forbid(
+    path,
+    /\brecordWorkCompletionReceipt\s*\(/,
+    'route Work completion through the canonical work-completion-authority instead of writing terminal receipts directly',
+  );
+}
+requireText('src/runtime/control-plane/execution/work-finalization-service.ts', 'completeWorkWithReceipt(');
+forbid(
+  'src/runtime/plugins/browser-handoff-host.ts',
+  /browser\/sessions|saveBrowserSession|writeBrowserSession|sessionPath/,
+  'Browser handoff sidecars must return interaction results and never write BrowserSession authority directly',
+);
+forbid(
+  'src/runtime/plugins/browser-adapter.ts',
+  /BROWSER_POST_DISPATCH_REPLAY_SAFE_ACTIONS|POST_DISPATCH_REPLAY_SAFE_ACTIONS/,
+  'Browser replay safety must come from Browser Runtime transaction policy, not an adapter-local allowlist',
+);
+requireText('src/runtime/plugins/browser-runtime.ts', 'browserActionCanReplayAfterDispatch');
+forbid(
+  'src/runtime/gateway/mcp/runtime-tools.ts',
+  /\b(?:createRequirement|resumeRetainedCancelledWorkContract)\s*\(/,
+  'keep Requirement admission and retained-cancelled Work lifecycle authority out of the MCP transport',
+);
+forbid(
+  'src/runtime/gateway/mcp/runtime-tools.ts',
+  /\b(?:updateWorkContract|writeWorkHandle)\s*\(/,
+  'keep WorkContract/WorkHandle persistence policy out of the MCP transport',
+);
+forbid(
+  'src/runtime/gateway/mcp/execution-tools.ts',
+  /\bcreateWorkContract\s*\(/,
+  'route compatibility work preparation through canonical Work admission authority',
+);
+forbid(
+  'src/cli/mcp/legacy-tool-service.ts',
+  /\bcreateWorkContract\s*\(/,
+  'keep the legacy MCP surface as translation over canonical Work admission authority',
+);
 requireMissing('src/runtime/control-plane/daemon-entry.ts');
 requireMissing('scripts/smoke-runtime-control-plane.ts');
 requireMissing('src/cli/controller/lifecycle.ts');
 requireMissing('src/cli/commands/supervisor.ts');
+requireMissing('src/runtime/control-plane/goal-loop');
+requireMissing('src/cli/repositories/goal-registry.ts');
+requireMissing('src/runtime/assistant');
+requireMissing('src/runtime/personal-assistant');
+requireMissing('src/runtime/workflow/findings');
+forbid(
+  'src/runtime/control-plane/global-scheduler/scheduler.ts',
+  /tickGoalLoopsForController|lastGoalLoopTick/,
+  'Scheduler must not restore autonomous Goal Loop polling',
+);
 requireMissing('src/cli/controller/restart-coordinator-entry.ts');
 requireMissing('scripts/controller-runtime.sh');
 requireMissing('scripts/activate-source-baseline.command');
@@ -145,6 +365,13 @@ requireMissing('OPTIMIZATION_REPORT.md');
 requireMissing('docs/architecture/RELIABILITY-PROGRAM.md');
 requireMissing('docs/architecture/p0-canonical-single-runtime-plan.md');
 requireMissing('docs/architecture/transactional-adoption-planner.md');
+requireMissing('docs/architecture/global-hook-runtime.md');
+requireMissing('docs/architecture/ios-semantic-automation-provider-v2.md');
+requireMissing('docs/architecture/chatgpt-handoff-facade.md');
+requireText('docs/architecture/history/global-hook-runtime.md', 'Status: **Historical Evidence — Not Runtime Authority**');
+requireText('docs/architecture/history/ios-semantic-automation-provider-v2.md', 'Status: **Historical Design Evidence — Not Runtime Authority**');
+requireText('docs/architecture/history/chatgpt-handoff-facade.md', 'Status: **Historical Design Rationale — Not Runtime Authority**');
+requireText('docs/architecture/history/README.md', 'Status: **Historical Evidence — Not Runtime Authority**');
 requireMissing('docs/operations/20260802-requirement-portfolio-migration.md');
 requireMissing('docs/runbooks/RELIABILITY-SESSION-PROTOCOL.md');
 requireMissing('docs/architecture/decisions/20260718-mcp-session-lifecycle-and-ingress-isolation.md');
@@ -156,6 +383,7 @@ requireMissing('bin/repo-harness-hook.mjs');
 requireMissing('bin/repo-harness-runtime.mjs');
 requireMissing('src/runtime/control-plane/daemon-client.ts');
 requireMissing('src/runtime/control-plane/daemon-ownership.ts');
+requireMissing('src/runtime/workflow/portfolio');
 for (const path of sourceFiles('src')) {
   const source = text(path);
   for (const retiredAuthority of [
@@ -209,24 +437,16 @@ for (const projectionPath of [
 }
 requireText('src/runtime/projections/invalidation.ts', 'runtimeInstanceId?: string');
 requireText('src/runtime/projections/materialized-view.ts', 'currentOwner.runtimeInstanceId !== owner.runtimeInstanceId');
-requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'getRuntimeWriteClaim()?.runtimeInstanceId');
+requireText('src/runtime/control-plane/global-scheduler/projection-refresh.ts', 'getRuntimeWriteClaim()?.runtimeInstanceId');
 forbid(
   'src/runtime/execution/jobs/receipt-store.ts',
   /ownerEpoch|releaseFencingToken/,
   'persist only non-secret Canonical Runtime/release identity in OperationReceipt ownership evidence',
 );
 
-requireText('docs/architecture/current/runtime-architecture-simplification.md', 'one local MCP application');
-requireText('docs/architecture/current/runtime-architecture-simplification.md', 'one active Runtime');
-requireText('docs/architecture/current/runtime-architecture-simplification.md', 'one whole-Runtime readiness result');
-requireText('docs/architecture/current/runtime-architecture-simplification.md', 'Legacy code may receive only deletion-enabling or safety-fencing changes.');
-forbidBetween(
-  'docs/architecture/current/runtime-architecture-simplification.md',
-  '## 2. Target Runtime',
-  '## 3. Seven phases',
-  /Stable Supervisor|Stable Ingress|blue\/green|candidate\/current\/previous/i,
-  'define the target Runtime without Supervisor, ingress, slots, or component rollback',
-);
+requireText('docs/architecture/CURRENT.md', 'Canonical Runtime is activated as one immutable whole release');
+requireText('docs/architecture/CURRENT.md', 'Runtime availability/recovery keeps Forge itself healthy');
+requireText('docs/architecture/CURRENT.md', 'Historical Issue/Task/Local Job and compatibility projections must not become second mutable authorities.');
 requireText('src/runtime/root/runtime.ts', 'export class CanonicalForgeRuntime');
 forbid('src/runtime/control-plane/runtime-status-client.ts', /ensureControllerDaemon|child_process|daemon-entry|StableSupervisor|ownerEpoch|slot\?:/, 'keep Forge Runtime status observation read-only and free of legacy lifecycle authority');
 requireText('src/runtime/root/runtime.ts', "startInProcessScheduler");
@@ -346,7 +566,14 @@ requireText('src/runtime/gateway/mcp/execution-tools.ts', 'isDurableWorkOperatio
 requireText('src/runtime/gateway/mcp/execution-tools.ts', "'work_execute'");
 requireText('src/runtime/gateway/mcp/execution-tools.ts', "'work_validate'");
 requireText('src/runtime/gateway/mcp/execution-tools.ts', "'work_finalize'");
-requireText('src/runtime/execution/workers/executor.ts', 'callExecutionTool(runtimeContext');
+requireText('src/runtime/execution/workers/executor.ts', 'executeWork(runtimeContext');
+requireText('src/runtime/execution/workers/executor.ts', 'validateWork(runtimeContext');
+requireText('src/runtime/execution/workers/executor.ts', 'finalizeWork(runtimeContext');
+forbid(
+  'src/runtime/execution/workers/executor.ts',
+  /gateway\/mcp\/execution-tools|callExecutionTool\s*\(/,
+  'Execution Worker must invoke control-plane Work application services directly, never MCP transport',
+);
 requireText('src/runtime/execution/workers/executor.ts', '__from_durable_worker');
 requireText('src/runtime/gateway/mcp/runtime-tools.ts', 'managedProcessOperationDigest');
 forbid(
@@ -354,21 +581,11 @@ forbid(
   /\bcreateExecutionJob\b/,
   'Runtime MCP tools must not retain dormant ExecutionJob creation paths',
 );
-forbid(
-  'src/runtime/assistant/intent.ts',
-  /\bcreateExecutionJob\b/,
-  'Assistant intent and routine triggers must use direct plugin actions or external-Controller handoffs',
-);
 forbid(
   'src/runtime/execution/jobs/legacy-adapter.ts',
   /\bcreateExecutionJob\b|\bdispatchLegacyLocalJob\b/,
   'Legacy Local Bridge compatibility must be read-only and must not dispatch new ExecutionJobs',
 );
-forbid(
-  'src/runtime/workflow/portfolio/engine.ts',
-  /\bcreateExecutionJob\b|\bfindExecutionJob\b/,
-  'Portfolio definitions are planning records; Kernel-owned Portfolio execution is retired',
-);
 forbid(
   'src/cli/local-bridge/server.ts',
   /\bsubmitLocalBridgeJob\b|\bdispatchLocalBridgeJob\b|\basyncExecute\b/,
@@ -425,16 +642,6 @@ forbid(
   /\bretryAgentJob\b/,
   'Legacy MCP must not call Agent Run retry',
 );
-forbid(
-  'src/runtime/workflow/portfolio/engine.ts',
-  /\bacceptTaskJob\b|\bstartTaskJob\b|\bretryAgentJob\b/,
-  'Portfolio Engine must not start or retry Kernel-managed Agent Runs',
-);
-forbid(
-  'src/runtime/control-plane/goal-loop/goal-loop-engine.ts',
-  /\bcreateExecutionJob\b|\bsubmitLocalBridgeJob\b|\bacceptTaskJob\b|\bstartTaskJob\b|\bdispatchProvider\b/,
-  'Goal Loop must not create Jobs, Agent Runs, or invoke Kernel Provider dispatch',
-);
 forbid('src/runtime/gateway/mcp/router.ts', /Use process_get \/ process_wait \/ process_logs/, 'Gateway follow-up instructions must use an always-exposed neutral Work facade');
 requireMatch(
   'src/runtime/gateway/mcp/router.ts',
@@ -446,12 +653,6 @@ requireText('src/runtime/gateway/mcp/runtime-tools.ts', "case 'local_bridge_stat
 requireText('src/runtime/gateway/mcp/runtime-tools.ts', 'readAgentExecutableReadinessSnapshot');
 requireText('src/runtime/gateway/mcp/runtime-tools.ts', 'connectorExposedTools');
 requireText('src/runtime/gateway/mcp/runtime-tools.ts', 'currentCallableTools');
-forbid(
-  'docs/architecture/current/implementation-status.md',
-  /Stable external lifecycle Supervisor \| Implemented|Stable ingress event-loop isolation \| Implemented/,
-  'legacy Supervisor or Stable Ingress must not be reported as the target implementation',
-);
-requireText('docs/architecture/current/implementation-status.md', 'Canonical Single Runtime vertical slice');
 forbid('src/runtime/gateway/mcp/runtime-tools.ts', /inspectAgentExecutableReadiness|resolveAgentExecutable|writeAgentExecutableReadinessSnapshot/, 'Gateway readiness must only read the Daemon-produced Agent executable snapshot');
 forbidBetween(
   'src/runtime/gateway/mcp/runtime-tools.ts',
@@ -491,15 +692,50 @@ requireText('src/runtime/execution/jobs/receipt-store.ts', "state: 'started' | '
 requireText('src/runtime/execution/thin-harness/execution-router.ts', "mode: 'fast'");
 requireText('src/runtime/execution/thin-harness/execution-router.ts', 'routeExecution');
 requireText('src/runtime/execution/thin-harness/types.ts', 'FastExecutionReceipt');
-requireText('docs/architecture/current/thin-harness-v1.md', 'Default to direct Fast Path execution');
+requireText('docs/architecture/CURRENT.md', '### Ephemeral Direct — default');
 requireText('src/runtime/resources/leases/types.ts', 'fencingToken: number');
 requireText('src/runtime/resources/leases/store.ts', 'assertFencingToken');
 requireText('src/runtime/resources/leases/store.ts', 'expectedLeaseMap');
 requireText('src/runtime/resources/claims/conflicts.ts', "'repo-content:*'");
 requireText('src/runtime/control-plane/repo-actor/actor.ts', 'repo-actor-mailbox');
 requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'maxConcurrentRepositories');
-requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'maxHeavyChecks');
-requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'maxAgentProcesses');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'createSchedulerDispatchCapacity');
+requireText('src/runtime/control-plane/global-scheduler/dispatch-capacity.ts', 'maxHeavyChecks');
+requireText('src/runtime/control-plane/global-scheduler/dispatch-capacity.ts', 'maxAgentProcesses');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'normalizeSchedulerConfig');
+requireText('src/runtime/control-plane/global-scheduler/config.ts', 'normalizeSchedulerConfig');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'writeSchedulerHealthSnapshot');
+requireText('src/runtime/control-plane/global-scheduler/state.ts', 'writeSchedulerHealthSnapshot');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'buildSchedulerWorkerLaunchDescriptor');
+requireText('src/runtime/control-plane/global-scheduler/worker-launch.ts', 'buildSchedulerWorkerLaunchDescriptor');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'refreshSchedulerRepositoryProjections');
+requireText('src/runtime/control-plane/global-scheduler/projection-refresh.ts', 'refreshRepositoryProjectionForRepository');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'buildSchedulerWorkerSpawnedLifecycle');
+requireText('src/runtime/control-plane/global-scheduler/worker-lifecycle.ts', 'buildSchedulerWorkerExitFailure');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'createSchedulerWorkerStderrCapture');
+requireText('src/runtime/control-plane/global-scheduler/worker-stderr.ts', 'MAX_SCHEDULER_WORKER_STDERR_BYTES');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'persistSchedulerWorkerAttachment');
+requireText('src/runtime/control-plane/global-scheduler/worker-attachment.ts', 'attachExecutionWorker');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'runSchedulerPeriodicCleanup');
+requireText('src/runtime/control-plane/global-scheduler/maintenance.ts', 'runSchedulerValidationReconciliation');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'planSchedulerSourceSampling');
+requireText('src/runtime/control-plane/global-scheduler/source-scan.ts', 'selectSchedulerSourceScanRepositories');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'runSchedulerDurableAdmission');
+requireText('src/runtime/control-plane/global-scheduler/durable-admission.ts', 'markExecutionJobSchedulerObserved');
+requireText('src/runtime/control-plane/global-scheduler/worker-exit-reconciler.ts', 'persistSchedulerTerminalWorkerLifecycle');
+requireText('src/runtime/control-plane/global-scheduler/worker-lifecycle-store.ts', 'TERMINAL_JOB_STATUSES');
+requireText('src/runtime/control-plane/global-scheduler/worker-exit-reconciler.ts', 'evaluateSchedulerWorkerExitCandidate');
+requireText('src/runtime/control-plane/global-scheduler/worker-exit-decision.ts', 'TERMINAL_JOB_STATUSES');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'reconcileSchedulerWorkerExit');
+requireText('src/runtime/control-plane/global-scheduler/worker-exit-reconciler.ts', 'releaseExecutionLeases');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'cleanupSchedulerWorkerProcesses');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'registerSchedulerWorkerProcess');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'spawnSchedulerWorkerProcess');
+requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'wireSchedulerWorkerProcess');
+requireText('src/runtime/control-plane/global-scheduler/worker-process.ts', 'cleanupSchedulerWorkerProcesses');
+requireText('src/runtime/control-plane/global-scheduler/worker-process.ts', 'dependencies.spawnProcess');
+requireText('src/runtime/control-plane/global-scheduler/worker-process.ts', 'terminateProcessTree');
+requireText('src/runtime/control-plane/global-scheduler/worker-process.ts', "child.once('close'");
 requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'writeAgentExecutableReadinessSnapshot');
 requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'sampleRepositoryGitStatusForRepositories');
 requireText('src/cli/agent-jobs/executable-resolver.ts', 'revalidateAgentExecutable');
@@ -533,22 +769,55 @@ forbidBetween(
 requireText('src/runtime/control-plane/execution/session-store.ts', 'lastValidatedAt: now');
 requireText('src/runtime/control-plane/execution/validation.ts', 'warnings.push');
 requireText('src/runtime/control-plane/execution/work-handle-store.ts', "failed: ['validating', 'editing', 'committed', 'merged', 'cleaned', 'failed_terminal_cleanup']");
-requireText('src/runtime/gateway/mcp/execution-tools.ts', 'resetFailedFinalizationStages');
-requireText('src/runtime/gateway/mcp/execution-tools.ts', 'finalizationComplete');
-forbidBetween(
+requireText('src/runtime/gateway/mcp/execution-tools.ts', "from '../../control-plane/execution/work-finalization-service'");
+requireText('src/runtime/gateway/mcp/execution-tools.ts', "from '../../control-plane/execution/work-preparation-service'");
+requireText('src/runtime/gateway/mcp/execution-tools.ts', "from '../../control-plane/execution/work-operation-service'");
+requireText('src/runtime/gateway/mcp/execution-tools.ts', 'Compatibility exports: implementation authority lives in control-plane execution.');
+requireText('src/runtime/gateway/mcp/execution-tools.ts', 'resetFinalizationStagesForRequest,');
+requireText('src/runtime/gateway/mcp/execution-tools.ts', 'selectDefaultWorkValidationChecks');
+requireText('src/runtime/gateway/mcp/runtime-tools.ts', "callExecutionTool(ctx, 'work_finalize'");
+forbid(
+  'src/runtime/gateway/mcp/runtime-tools.ts',
+  /repositoryGit(?:Commit|FinishWorkflow|MergeBranch|DeleteBranch|RebaseOnto)\s*\(/,
+  'rh_work facade finalization must delegate to the canonical Work finalization application service instead of performing Git delivery itself',
+);
+forbid(
+  'src/runtime/gateway/mcp/execution-tools.ts',
+  /function\s+finalizeWork\s*\(/,
+  'MCP execution transport must delegate Work finalization to the control-plane application service',
+);
+forbid(
   'src/runtime/gateway/mcp/execution-tools.ts',
-  'function finalizeWork(',
-  'export async function callExecutionTool',
+  /function\s+(?:prepareWork|adoptExistingWorkHead)\s*\(/,
+  'MCP execution transport must delegate Work preparation/adoption to the control-plane application service',
+);
+forbid(
+  'src/runtime/gateway/mcp/execution-tools.ts',
+  /function\s+(?:executeWork|validateWork)\s*\(/,
+  'MCP execution transport must delegate Work execute/validate operations to the control-plane application service',
+);
+forbid(
+  'src/runtime/gateway/mcp/execution-tools.ts',
+  /(?:ensureManagedWorkspace|admitPreparedRepositoryWorkContract)\s*\(/,
+  'MCP execution transport must not own managed-workspace or WorkContract preparation admission',
+);
+requireText('src/runtime/control-plane/execution/work-preparation-service.ts', 'export function prepareWork(');
+requireText('src/runtime/control-plane/execution/work-preparation-service.ts', 'function adoptExistingWorkHead(');
+requireText('src/runtime/control-plane/execution/work-operation-service.ts', 'export async function executeWork(');
+requireText('src/runtime/control-plane/execution/work-operation-service.ts', 'export async function validateWork(');
+requireText('src/runtime/control-plane/execution/work-finalization-service.ts', 'resetFinalizationStagesForRequest');
+requireText('src/runtime/control-plane/execution/work-finalization-service.ts', 'finalizationComplete');
+forbidBetween(
+  'src/runtime/control-plane/execution/work-finalization-service.ts',
+  'export async function finalizeWork(',
+  '// WORK_FINALIZATION_SERVICE_END',
   /withControllerLock\([\s\S]{0,900}?(?:repositoryGitCommit|repositoryGitFinishWorkflow|runCleanup|repositoryGitDeleteBranch)/,
-  'work_finalize must not hold the controller lock while committing, merging, deleting branches, or removing worktrees',
+  'Work finalization must not hold the controller lock while committing, merging, deleting branches, or removing worktrees',
 );
 requireText('src/runtime/workflow/schedules/types.ts', "'repository-event'");
 requireText('src/runtime/workflow/schedules/types.ts', "'dependency-checkpoint'");
 requireText('src/runtime/workflow/schedules/store.ts', 'saveScheduleDecision');
 requireText('src/runtime/workflow/schedules/settlement.ts', 'backoffMinutes');
-requireText('src/runtime/workflow/portfolio/store.ts', "'workflows.json'");
-requireText('src/runtime/workflow/portfolio/store.ts', 'PORTFOLIO_DEPENDENCY_CYCLE');
-requireText('src/runtime/workflow/findings/store.ts', 'observationCount');
 requireText('src/runtime/release/release-gate.ts', 'releaseReady');
 requireText('src/cli/mcp/transports/http.ts', "'/ready'");
 requireText('src/cli/mcp/transports/http.ts', "'/repos/:repoId/health'");
@@ -568,12 +837,13 @@ for (const path of [
   forbid(path, /\b(?:spawnSync|execSync|execFileSync)\s*\(/, 'the non-blocking Gateway/Controller hot-path rule');
 }
 
-requireText('docs/architecture/current/implementation-status.md', 'Thin MCP Gateway | Implemented');
-requireText('docs/architecture/current/implementation-status.md', 'Per-Repository Actor | Implemented');
-requireText('docs/architecture/current/implementation-status.md', 'Schedule, Trigger, Decision and Occurrence | Implemented');
-requireText('docs/architecture/current/implementation-status.md', 'Release Freeze and Gate | Implemented');
-requireText('docs/architecture/current/target-requirements-traceability.md', '## 4. Architecture constitution');
-requireText('docs/architecture/current/target-requirements-traceability.md', '## 16. Standard execution flow');
+requireText('scripts/run-governed-gate.ts', "label: 'source duplication'");
+requireText('scripts/run-governed-gate.ts', "args: ['scripts/check-source-duplication.mjs']");
+requireText('scripts/run-governed-gate.ts', "label: 'controller UI bundle'");
+requireText('scripts/run-governed-gate.ts', "args: ['run', 'check:controller-ui']");
+requireText('docs/architecture/CURRENT.md', '## State ownership');
+requireText('docs/architecture/CURRENT.md', '## Runtime and MCP boundary');
+requireText('docs/architecture/CURRENT.md', '## Testing and verification');
 requireText('plans/README.md', 'not the runtime execution queue');
 if (text('src/cli/mcp/tools.ts').split(/\r?\n/).length > 40) failures.push('src/cli/mcp/tools.ts must remain a thin compatibility facade');