@moretea-labs/forge 1.8.1 → 1.8.2

package/AGENTS.md

@@ -6,6 +6,8 @@ This repository self-hosts the Forge contract. Retired project-skill and project
 
 Treat ChatGPT as the controller and Forge as its repository execution layer. ChatGPT chooses how to inspect, plan, edit, verify, or delegate. Forge provides deterministic repository tools and does not impose an Agent-first workflow.
 
+- **User-directed verification priority (2026-10-12):** Do not add new automated test cases or test files during normal Forge implementation unless the user explicitly changes this instruction. Prefer direct verification of the real requested workflow and inspect its actual effect/tool receipts; do not substitute expanded mock suites, repeated full test runs, or source-only green checks for a delivered product. Preserve existing unrelated tests, and never weaken exact-target/unknown-send protections to make live acceptance appear successful.
+
 - Scheduling, explicit workspace placement choice, integration timing, baseline activation, delivery, and acceptance are model decisions made from the user's current objective and live repository evidence. Forge supplies callable execution primitives and fixed mechanical compatibility mappings only; it must not infer, gate, override, or auto-advance semantic workflow decisions from a Work transition, executor completion, risk classification, policy, or heuristic. Repository rules guide the model; they are not a Forge workflow state machine.
 
 - Direct Edit is the default for understood work. One session may accept many patch batches, keep revision history, create savepoints, run checks, roll back selected revisions, and finalize one aggregate localized diff.
@@ -27,8 +29,9 @@ Treat ChatGPT as the controller and Forge as its repository execution layer. Cha
 ### Dirty checkout and cross-Work integration policy
 
 - A Work may freely keep uncommitted changes in its selected checkout while it is implementing, reviewing, or repairing its own candidate. A dirty checkout is normal development state and is not itself a Forge error, lifecycle state, or reason to switch topology.
-- Do not integrate another Work/branch into a receiving checkout while that receiving Work still has uncommitted source changes. First converge the receiving Work's own changes into a coherent semantic commit so the integration boundary has explicit Git provenance; then merge/rebase/cherry-pick the other committed result as the model judges appropriate.
-- Do not auto-stash, auto-reset, auto-clean, or silently discard dirty changes to make integration possible. The current Work owns the decision to keep editing, commit, or deliberately discard its own changes.
+- **User-directed conflict-based integration rule (2026-10-15):** A receiving checkout's staged, unstaged, or untracked changes are **not by themselves a merge gate** and do not require the receiving Work to commit first. Inspect exact source and target revisions, merge base, candidate changes, receiving dirty paths and contents, and Git's actual merge result. When the reviewed changes can be integrated without overwriting existing work or changing its index state, proceed through an authorized safe Git path. A coarse `WORK_DELIVERY_TARGET_DIRTY` tool rejection is not evidence of an actual Git merge conflict.
+- If source and receiving changes overlap or Git reports a real conflict, inspect both implementations and resolve the specific semantic difference. Preserve concurrent-writer ownership and mutation leases; those are separate from merely having uncommitted changes. Never repeat a branch whose equivalent changes are already integrated under other commit IDs.
+- Do not auto-stash, auto-reset, auto-clean, silently commit, or discard receiving changes merely to complete integration. Verify that original uncommitted bytes, staged/unstaged distinctions, and untracked files are preserved after a merge. If a primitive cannot preserve them safely, identify the mechanical limitation and choose another authorized, non-destructive integration path.
 - When committed histories conflict, resolve semantically from the merge base, both sides' commits/diffs, and the current Requirement/Plan/Work objective. Preserve the current architecture and replay the other Work's intent onto it when implementation shape has changed; never use `ours`/`theirs`, timestamp, or commit order as a general semantic authority.
 - These are Controller/model workflow rules, not new Forge Kernel policy. Do not add merge lifecycle states, automatic integration policy, or repository guards merely to encode this procedure; Forge should expose the Git/worktree/diff/commit primitives and report real Git or concurrent-writer conflicts mechanically.
 

package/CHANGELOG.md

@@ -4,6 +4,26 @@ All notable public Forge changes are recorded here. Release entries are tied to
 
 ## Unreleased
 
+## 1.8.2 - 2026-10-19
+- Retire Forge-owned host Skill distribution and independent Skill version authority, retaining CLI/MCP and project templates.
+
+### Reliable autonomous delivery
+
+- Restore exact ChatGPT conversation targeting and recover lost Chrome tab/provider bindings without replaying an uncertain external send.
+- Harden Supervisor effect-ledger ownership, no-click dispatch proofs, bootstrap reconciliation, stale composer recovery, and Chrome Native Messaging heartbeat handling.
+- Stop Work-owned auto-progression after semantic completion while retaining exact request identity and terminal receipts.
+
+### Plugins and scheduled workflows
+
+- Persist Browser plugin v1/v2 configuration migrations into the single Controller Home v3 authority, with atomic write and legacy retirement.
+- Tighten scheduled Gmail digests, fixed-mailbox authorization, unknown notification receipts, and daily wake identity.
+
+### Runtime and packaging
+
+- Make Process Runner release canaries authoritative before promoting immutable package/Runtime releases; reject broken runner artifacts and invalid execution modes.
+- Strengthen Recovery release ownership, package validation, whole-Runtime rollback boundaries, and source/runtime identity.
+
+
 ## 1.8.1 - 2026-09-19
 
 ### Automatic workflows and V2

package/README.en.md

@@ -1,5 +1,26 @@
-# Forge
+# Forge — local-first ChatGPT MCP action runtime
 
-Forge is a local-first action runtime for bounded, resumable and reviewable software work.
+Forge connects ChatGPT (or another selected external MCP controller) to permission-scoped operations on your computer, code repositories, browser, and connected services. **ChatGPT decides; Forge executes, persists, and verifies.** Forge is not an internal AI coding model and does not require a separate OpenAI API key when using ChatGPT as the controller.
 
-See [README.md](README.md) for installation, product identity, architecture entry points and operating guidance.
+## Install and connect
+
+Requires Node.js 20.10+ and npm (or Bun).
+
+```bash
+npm install -g @moretea-labs/forge@latest
+forge --version
+forge setup
+forge setup configure --controller chatgpt --tunnel auto
+forge setup next
+```
+
+Supported hosts: macOS and modern Linux; use WSL2 for the recommended Windows path. Native Windows is a preview with a limited portable Runtime scope. Git is needed only for repository development features.
+
+## Learn more
+
+- See [README.md](README.md) for the maintained English product overview, capability descriptions, and security model.
+- [Installation and setup](docs/tutorials/01-install-and-start.md)
+- [Connect ChatGPT over MCP](docs/tutorials/02-connect-chatgpt.md)
+- [Features and providers](docs/operations/features.md)
+- [Docs](docs/README.md) · [GitHub Wiki](https://github.com/moretea-labs/forge/wiki)
+- [Latest stable release (v1.8.1)](https://github.com/moretea-labs/forge/releases/tag/v1.8.1) · [npm package](https://www.npmjs.com/package/@moretea-labs/forge)

package/README.md

@@ -2,9 +2,11 @@
 
 <p align="center"><img src="docs/images/forge-banner.svg" alt="Forge — ChatGPT decides, Forge acts" width="1280"></p>
 <p align="center"><strong>Give ChatGPT real, controlled hands on your computer, code, browser, and services.</strong></p>
-<p align="center"><a href="#english">English</a> · <a href="#zh-cn">简体中文</a> · <a href="docs/README.md">Docs</a> · <a href="docs/operations/features.md">Features</a> · <a href="docs/forge-plugin-management.md">Plugins</a> · <a href="https://github.com/moretea-labs/forge/releases">Releases</a></p>
+<p align="center"><a href="#english">English</a> · <a href="#zh-cn">简体中文</a> · <a href="https://moretea-labs.github.io/forge/">Documentation Site</a> · <a href="docs/README.md">Docs</a> · <a href="docs/operations/features.md">Features</a> · <a href="docs/forge-plugin-management.md">Plugins</a> · <a href="https://github.com/moretea-labs/forge/releases">Releases</a></p>
 <p align="center"><img alt="CI" src="https://github.com/moretea-labs/forge/actions/workflows/ci.yml/badge.svg"> <img alt="Release" src="https://img.shields.io/github/v/release/moretea-labs/forge?include_prereleases&sort=semver"> <img alt="npm latest" src="https://img.shields.io/npm/v/%40moretea-labs%2Fforge?tag=latest&label=npm%20latest"> <img alt="License" src="https://img.shields.io/github/license/moretea-labs/forge"></p>
 
+**Forge is a local-first ChatGPT MCP action runtime** for permission-scoped computer use, software engineering, browser automation, and connected services. It is not an autonomous coding model or a hosted AI API.
+
 **Forge has no internal AI brain.** One external controller owns semantic decisions; Forge provides the controlled execution, state, permissions, and recovery layer. ChatGPT is the recommended controller, but you can choose Codex, Claude, or another MCP client instead, and you may configure several controller entries while keeping one primary controller at a time.
 
 With ChatGPT as the controller, Forge does **not** require a separate OpenAI API key or a second per-token model budget. Your existing ChatGPT plan/session limits still apply. Codex and Claude are not Forge dependencies unless you explicitly choose or configure them.
@@ -52,20 +54,22 @@ For a reviewed source checkout: `git clone https://github.com/moretea-labs/forge
 
 ## Built in, and extensible
 
-Forge ships typed local/browser/desktop/iOS/GitHub/Gmail/Calendar/Tasks/App Store Connect/Resend capabilities. On macOS, manage the native **Computer** capability with `forge computer setup|status|doctor|update|uninstall`; Forge Desktop Operator remains the independently released native provider behind that product surface. The generic provider catalog also includes **Forge Design** and **Personal Knowledge Assistant** and remains available through `forge plugin catalog` / `forge plugin install <id>`. See [Features](docs/operations/features.md) and [Plugin Management](docs/forge-plugin-management.md).
+Forge ships typed local/browser/desktop/iOS/GitHub/Gmail/Calendar/Tasks/App Store Connect/Resend capabilities. On macOS, manage the native **Computer** capability with `forge computer setup|status|doctor|update|uninstall`; Forge Desktop Operator remains the independently released native provider behind that product surface. The generic provider catalog also includes **Forge Design** and **Personal Knowledge Assistant** and remains available through `forge plugin catalog` / `forge plugin install <id>`. Run `forge computer doctor` to verify readiness; updating the Forge CLI does **not** automatically update pinned native providers. See [Computer and Plugins](docs/wiki/Computer-and-Plugins.md), [Features](docs/operations/features.md), and [Plugin Management](docs/forge-plugin-management.md).
 
 ## Controlled by design
 
 Local read/write grants are explicit and expiring; remote or destructive effects are distinguished from ordinary local work; high-impact actions require stronger confirmation. Full Access reduces repetitive prompts for normal work without removing the hard boundaries around secrets, destructive actions, and outside-workspace access. See [Security](SECURITY.md) and the [Security Model](docs/wiki/Security-Model.md).
 
-**Docs:** [Wiki](docs/wiki/Home.md) · [Support](SUPPORT.md) · [Contributing](CONTRIBUTING.md) · [Changelog](CHANGELOG.md). Current stable release: `1.7.0`; stable installs use npm `latest`.
+**Docs:** [GitHub Wiki](https://github.com/moretea-labs/forge/wiki) · [Wiki source](docs/wiki/Home.md) · [Support](SUPPORT.md) · [Contributing](CONTRIBUTING.md) · [Changelog](CHANGELOG.md). Current stable release: [`v1.8.2`](https://github.com/moretea-labs/forge/releases/tag/v1.8.2); stable installs use npm `latest`.
 
 ---
 <a id="zh-cn"></a>
 
 <p align="center"><img src="docs/images/forge-banner-cn.svg" alt="Forge——ChatGPT 决策，Forge 执行" width="1280"></p>
 <p align="center"><strong>让 ChatGPT 真正、安全地操作你的电脑、代码、浏览器和外部服务。</strong></p>
-<p align="center"><a href="#english">English</a> · <a href="#zh-cn">简体中文</a> · <a href="docs/README.zh-CN.md">中文文档</a> · <a href="docs/operations/features.zh-CN.md">功能</a> · <a href="docs/forge-plugin-management.md">插件</a></p>
+<p align="center"><a href="#english">English</a> · <a href="#zh-cn">简体中文</a> · <a href="https://moretea-labs.github.io/forge/Computer-and-Plugins.zh-CN.html">中文 Computer 教程</a> · <a href="docs/README.zh-CN.md">中文文档</a> · <a href="docs/operations/features.zh-CN.md">功能</a> · <a href="docs/forge-plugin-management.md">插件</a></p>
+
+**Forge 是一个本地优先的 ChatGPT MCP 执行运行时**，将 AI 对话连接到有权限边界的电脑操作、代码开发、浏览器自动化和外部服务，而不是额外的在线 AI 模型。
 
 **Forge 自己没有 AI 大脑。** 语义判断始终由一个外部主控负责，Forge 负责受控执行、持久状态、权限和恢复。推荐 ChatGPT，也可以明确选择 Codex、Claude 或其他 MCP 客户端；可以预配置多个入口，但同一时刻只有一个主控负责决策。
 
@@ -105,8 +109,8 @@ forge setup next     # 按每次显示的 Next 动作继续
 
 继续阅读[安装与启动](docs/tutorials/01-install-and-start.zh-CN.md)和[连接 ChatGPT](docs/tutorials/02-connect-chatgpt.zh-CN.md)。仓库不是首次 setup 的前置条件，需要开发能力时再运行 `forge adopt --repo /path/to/your-project`。已安装用户升级：`npm install -g @moretea-labs/forge@latest`，确认 `forge --version` 后运行 `forge setup next` 让新版 setup 自动补齐 Runtime/connector 配置。源码安装：`git clone https://github.com/moretea-labs/forge.git && cd forge && bun install --frozen-lockfile && npm install -g . --omit=optional --no-audit --no-fund`。
 
-Forge 内置本机、Browser、Desktop、iOS、GitHub、Gmail、Calendar、Tasks、App Store Connect、Resend 等类型化能力。macOS 原生 **Computer** 能力统一通过 `forge computer setup|status|doctor|update|uninstall` 管理；Forge Desktop Operator 仍作为其独立发布的原生 Provider 保持稳定身份。通用 Provider 目录还包含 **Forge Design / Personal Knowledge Assistant**，继续使用 `forge plugin catalog` / `forge plugin install <id>` 管理。详见[功能清单](docs/operations/features.zh-CN.md)与[插件管理](docs/forge-plugin-management.md)。
+Forge 内置本机、Browser、Desktop、iOS、GitHub、Gmail、Calendar、Tasks、App Store Connect、Resend 等类型化能力。macOS 原生 **Computer** 能力统一通过 `forge computer setup|status|doctor|update|uninstall` 管理；Forge Desktop Operator 仍作为其独立发布的原生 Provider 保持稳定身份。通用 Provider 目录还包含 **Forge Design / Personal Knowledge Assistant**，继续使用 `forge plugin catalog` / `forge plugin install <id>` 管理。升级 Forge CLI 不会自动升级独立 Provider；Computer 用户须运行 `forge computer update`，并用 `forge computer doctor` 检查状态。详见 [Computer 与插件安装指南](docs/wiki/Computer-and-Plugins.md)、[功能清单](docs/operations/features.zh-CN.md)与[插件管理](docs/forge-plugin-management.md)。
 
 安全上，普通本地修改、远程影响、破坏性操作、密钥和工作区外访问是不同边界；Full Access 不会取消高风险确认。详见[安全说明](SECURITY.md)和[安全模型](docs/wiki/Security-Model.md)。
 
-**文档：** [Wiki](docs/wiki/Home.md) · [支持](SUPPORT.md) · [贡献](CONTRIBUTING.md) · [更新日志](CHANGELOG.md)。当前稳定版为 `1.7.0`，稳定安装使用 npm `latest`。
+**文档：** [GitHub Wiki](https://github.com/moretea-labs/forge/wiki) · [Wiki source](docs/wiki/Home.md) · [支持](SUPPORT.md) · [贡献](CONTRIBUTING.md) · [更新日志](CHANGELOG.md)。当前稳定版为 [`v1.8.2`](https://github.com/moretea-labs/forge/releases/tag/v1.8.2)，稳定安装使用 npm `latest`。

package/README.zh-CN.md

@@ -5,6 +5,8 @@
 <p align="center"><a href="https://github.com/moretea-labs/forge#english">English</a> · <a href="https://github.com/moretea-labs/forge#zh-cn">仓库首页中文</a> · <a href="docs/README.zh-CN.md">中文文档</a> · <a href="docs/operations/features.zh-CN.md">功能清单</a> · <a href="https://github.com/moretea-labs/forge/releases">版本发布</a></p>
 <p align="center"><img alt="CI" src="https://github.com/moretea-labs/forge/actions/workflows/ci.yml/badge.svg"> <img alt="Release" src="https://img.shields.io/github/v/release/moretea-labs/forge?include_prereleases&sort=semver"> <img alt="npm latest" src="https://img.shields.io/npm/v/%40moretea-labs%2Fforge?tag=latest&label=npm%20latest"> <img alt="License" src="https://img.shields.io/github/license/moretea-labs/forge"></p>
 
+**Forge 是本地优先的 ChatGPT MCP 执行工具**：通过权限受控的 Runtime，让 ChatGPT 操作电脑、Git 仓库、浏览器和已授权服务；也支持选择其他外部主控。
+
 **Forge 自己没有 AI 大脑。** 每次语义决策都由一个外部主控负责，Forge 负责执行、持久状态、权限和恢复。默认推荐 ChatGPT，也可以明确选择 Codex、Claude 或其他 MCP 客户端；可以配置多个控制入口，但同一时刻只有一个主控拥有语义控制权。
 
 选择 ChatGPT 时**不要求单独配置 OpenAI API Key，也不需要额外准备一套按 token 计费的模型预算**；仍受你的 ChatGPT 套餐和会话限制。没有选择 Codex/Claude，就不会把它们当成安装或就绪依赖。
@@ -68,7 +70,7 @@ npm install -g . --omit=optional --no-audit --no-fund
 
 ## 插件与能力
 
-Forge 内置本机、Browser、Desktop、iOS、GitHub、Gmail、Calendar、Tasks、App Store Connect、Resend 等类型化插件；公开 Provider 目录还提供 **Forge Desktop Operator**、**Forge Design**、**Personal Knowledge Assistant**。运行 `forge plugin catalog` 查看当前固定版本目录，详见[插件管理](docs/forge-plugin-management.md)和[功能清单](docs/operations/features.zh-CN.md)。
+Forge 内置本机、Browser、Desktop、iOS、GitHub、Gmail、Calendar、Tasks、App Store Connect、Resend 等类型化插件；公开 Provider 目录还提供 **Forge Desktop Operator**、**Forge Design**、**Personal Knowledge Assistant**。运行 `forge plugin catalog` 查看当前固定版本目录，CLI 升级不会自动更新这些 Provider。macOS Computer 使用 `forge computer update` 和 `forge computer doctor` 更新并检查，其他 Provider 需按官方 pin 重新安装。详见 [Computer 与插件安装指南](docs/wiki/Computer-and-Plugins.md)、[插件管理](docs/forge-plugin-management.md)和[功能清单](docs/operations/features.zh-CN.md)。
 
 ## 安全不是宣传词
 
@@ -76,6 +78,6 @@ Forge 把读取、普通本地写入、远程操作、破坏性操作、工作
 
 ## 文档与项目
 
-[中文文档中心](docs/README.zh-CN.md) · [Wiki](docs/wiki/Home.md) · [SUPPORT.md](SUPPORT.md) · [CONTRIBUTING.md](CONTRIBUTING.md) · [CHANGELOG.md](CHANGELOG.md)
+[Computer 中文教程](https://moretea-labs.github.io/forge/Computer-and-Plugins.zh-CN.html) · [中文文档中心](docs/README.zh-CN.md) · [GitHub Wiki](https://github.com/moretea-labs/forge/wiki) · [Wiki 源码](docs/wiki/Home.md) · [SUPPORT.md](SUPPORT.md) · [CONTRIBUTING.md](CONTRIBUTING.md) · [CHANGELOG.md](CHANGELOG.md)
 
-当前稳定版本是 `1.7.0`，稳定安装使用 npm `latest`。
+当前稳定版本为 [`v1.8.1`](https://github.com/moretea-labs/forge/releases/tag/v1.8.1)，稳定安装使用 npm `latest`。

package/THIRD_PARTY_NOTICES.md

@@ -1,6 +1,6 @@
 # Third-party notices
 
-This inventory covers the direct runtime and development dependencies declared by `@moretea-labs/forge@1.8.1`.
+This inventory covers the direct runtime and development dependencies declared by `@moretea-labs/forge@1.8.2`.
 
 License values come from `package-lock.json` where available. For lock entries without a license field, the declared license was verified from package metadata during release preparation. This file is informational and does not replace the license text distributed by each dependency.
 
@@ -16,7 +16,6 @@ License values come from `package-lock.json` where available. For lock entries w
 | `react` | `19.2.8` | runtime | `MIT` | package metadata |
 | `react-dom` | `19.2.8` | runtime | `MIT` | package metadata |
 | `agent-device` | `0.20.2` | optional runtime (iOS/Android device automation provider) | `MIT` | package-lock.json |
-| `@colbymchenry/codegraph` | `1.0.1` | development | `MIT` | package-lock.json |
 | `@types/bun` | `1.3.14` | development | `MIT` | package-lock.json |
 | `@types/cors` | `2.8.19` | development | `MIT` | package-lock.json |
 | `@types/express` | `5.0.6` | development | `MIT` | package-lock.json |

package/adapters/chatgpt/browser-delivery-runtime.ts

@@ -273,9 +273,11 @@ export function chatgptForgePluginMentionBound(
   prompt: string,
 ): boolean {
   if (!composerHtml || !composerText) return false;
-  const chips = [...composerHtml.matchAll(/\b(?:plugin|app)-mention-name="([^"]+)"/g)].map((match) => match[1]);
-  if (chips.length !== 1 || chips[0] !== CHATGPT_FORGE_PLUGIN_SLUG
-    || !composerHtml.includes(`app-mention-path="${CHATGPT_FORGE_PLUGIN_PATH}"`)) return false;
+  // Name and path must belong to ONE real app chip, never to different
+  // elements in the same composer HTML. A plain @forge is not an invocation.
+  const chips = [...composerHtml.matchAll(/<[^>]*\b(?:plugin|app)-mention-name="[^"]+"[^>]*>/g)].map((match) => match[0]);
+  if (chips.length !== 1 || !chips[0]!.includes(`app-mention-name="${CHATGPT_FORGE_PLUGIN_SLUG}"`)
+    || !chips[0]!.includes(`app-mention-path="${CHATGPT_FORGE_PLUGIN_PATH}"`)) return false;
   const normalized = normalizeChatgptOutboundText(composerText);
   const payload = normalizeChatgptOutboundText(prompt);
   return normalized === `${payload} ${CHATGPT_FORGE_PLUGIN_LABEL}`;

package/adapters/chatgpt/provider-delivery.ts

@@ -1,7 +1,7 @@
 import { createHash } from 'crypto';
 
 export const DEFAULT_CHATGPT_AUTOMATION_MODEL = 'gpt-5.6';
-export const DEFAULT_CHATGPT_AUTOMATION_REASONING = 'high';
+export const DEFAULT_CHATGPT_AUTOMATION_REASONING: ChatgptAutomationReasoning = 'high';
 export const DEFAULT_CHATGPT_AUTOMATION_TAB_POLICY = 'auto';
 export const CHATGPT_AUTOMATION_SUBMISSION_OUTCOME_UNKNOWN = 'CHATGPT_AUTOMATION_SUBMISSION_OUTCOME_UNKNOWN';
 export const CHATGPT_AUTOMATION_MESSAGE_DELIVERY_TIMED_OUT = 'CHATGPT_AUTOMATION_MESSAGE_DELIVERY_TIMED_OUT';

package/adapters/chatgpt/work-conversation-binding-store.ts

@@ -1,6 +1,6 @@
 import { FORGE_INSTANCE_SCOPE_KEY } from '../../src/cli/repositories/controller-home';
 import { withControllerLock } from '../../src/cli/repositories/locks';
-import { readControlPlaneRecord, writeControlPlaneRecord } from '../../src/runtime/control-plane/persistence/sqlite-store';
+import { listControlPlaneRecords, readControlPlaneRecord, writeControlPlaneRecord } from '../../src/runtime/control-plane/persistence/sqlite-store';
 import { parseCanonicalChatgptConversationIdentity } from '../../packages/plugin-runtime/computer';
 
 const NAMESPACE = 'chatgpt_work_conversation_binding';
@@ -110,6 +110,25 @@ export function getChatgptWorkConversationBinding(
   return value ? canonicalizeBinding(options, value) : undefined;
 }
 
+/**
+ * Read-only inverse of the existing canonical Work conversation binding.
+ * Never infer an owner from objective prose or a partial/ambiguous inventory.
+ */
+export function listChatgptWorkBindingsForConversation(
+  options: ChatgptWorkBindingStoreOptions,
+  conversationId: string,
+): ChatgptWorkConversationBinding[] {
+  const repoId = options.repoId?.trim();
+  if (!repoId || !conversationId.trim()) return [];
+  const limit = 5000;
+  const records = listControlPlaneRecords<ChatgptWorkConversationBinding>(options.controllerHome, {
+    namespace: NAMESPACE, scope: FORGE_INSTANCE_SCOPE_KEY, limit,
+  });
+  if (records.length >= limit) return []; // Incomplete inventory cannot establish a unique active Work.
+  return records.filter(({ value }) => value.repoId === repoId && value.conversationId === conversationId)
+    .map(({ value }) => canonicalizeBinding(options, value));
+}
+
 function writeBinding(
   options: ChatgptWorkBindingStoreOptions,
   binding: ChatgptWorkConversationBinding,