@moretea-labs/forge 1.8.1 → 1.8.2

package/scripts/check-runtime-architecture.mjs

@@ -1108,12 +1108,119 @@ requireText('adapters/controller-process/controller-host.ts', 'createProcessCont
 requireText('src/runtime/workflow/schedules/engine.ts', 'workflow_supervisor_owns_outer_turn');
 requireText('src/runtime/root/workflow-supervisor-composition.ts', 'registerWorkflowSupervisorTask');
 requireText('src/runtime/root/workflow-supervisor-composition.ts', 'reserveWorkflowSupervisorEnrollment');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'getWorkflowSupervisorTask(forgeHome, taskId)');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', "stall.state === 'terminal'");
+requireText('supervisor/control-plane.ts', 'if (exhaustedLeaf && this.store.providerResumeExhausted(exhaustedLeaf.effectId)) sourceEffect = exhaustedLeaf;');
+requireText('supervisor/store.ts', "if (first.action !== 'CONTINUE' || second.action !== 'CONTINUE' || third.action !== 'DONE') continue;");
+requireText('supervisor/store.ts', 'const minimumRuntimeInstances = 2;');
+requireText('supervisor/store.ts', "kind = 'terminal_done'");
+requireText('supervisor/types.ts', "actions: ['CONTINUE', 'CONTINUE', 'DONE'];");
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'WORKFLOW_SUPERVISOR_TASK_REQUIREMENT_CONFLICT');
 requireText('supervisor/entry.ts', 'forgeWorkflowSupervisorValidators()');
+requireText('supervisor/store.ts', 'workflowSupervisorCompletionContractSha256');
+requireText('supervisor/store.ts', "'task_semantic_binding_revised'");
+requireText('supervisor/store.ts', 'WORKFLOW_SUPERVISOR_COMPLETION_CONTRACT_REVISION_CONFLICT');
+requireText('supervisor/store.ts', 'WORKFLOW_SUPERVISOR_SEMANTIC_BINDING_CONFLICT');
+requireText('supervisor/control-plane.ts', 'WORKFLOW_SUPERVISOR_SEMANTIC_BINDING_WORK_NOT_FOUND');
+requireText('supervisor/control-plane.ts', 'WORKFLOW_SUPERVISOR_SEMANTIC_BINDING_REQUIREMENT_NOT_FOUND');
+requireText('supervisor/client.ts', 'expected_completion_contract_sha256: input.expectedCompletionContractSha256');
+requireText('supervisor/server.ts', 'p.expected_completion_contract_sha256');
+requireText('adapters/mcp/runtime-gateway/runtime-tool-definitions.ts', 'expected_completion_contract_sha256');
+requireText('adapters/mcp/runtime-gateway/workflow-supervisor-adapter.ts', 'completionContractSha256: workflowSupervisorCompletionContractSha256(task.completionContract)');
+requireText('docs/architecture/CURRENT.md', 'An existing nonterminal unbound task may acquire one explicit Work or Requirement binding');
 forbid('supervisor/client.ts', /reserveWorkflowSupervisorSchedulerRecovery|reserve_scheduler_recovery/, 'Scheduler recovery is not a Supervisor RPC; reconciliation stays on the canonical effect ledger');
 forbid('supervisor/control-plane.ts', /reserveSchedulerRecovery/, 'Scheduler recovery must not regrow as a second Supervisor recovery authority');
 forbid('supervisor/server.ts', /reserve_scheduler_recovery/, 'Supervisor RPC surface must not expose retired Scheduler recovery authority');
+requireText('src/runtime/workflow/schedules/engine.ts', "const CONTROLLER_PROGRESSION_OPERATION = 'controller_progression';");
+requireText('packages/kernel/scheduler/application/eligibility.ts', 'return value >= min && value <= max && (value - min) % step === 0;');
+requireText('packages/kernel/scheduler/infrastructure/schedule-store.ts', "schedule.action.operation !== 'external_controller_wake' && schedule.action.operation !== 'controller_progression'");
+requireText('packages/kernel/scheduler/infrastructure/schedule-store.ts', 'const schedule: RepositorySchedule = { ...candidate, policy: boundedSchedulePolicy(candidate) };');
+requireText('packages/kernel/scheduler/infrastructure/schedule-store.ts', 'policy: boundedSchedulePolicy(candidate),');
+requireText('src/cli/local-bridge/console-automations.ts', "schedule.action.operation === 'external_controller_wake' || schedule.action.operation === 'controller_progression'");
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', "cronDue('0 8 * * *', Date.parse('2026-10-17T00:00:00.000Z'), 'Asia/Shanghai')");
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', "cronDue('0 8 * * *', Date.parse('2026-10-18T00:00:00.000Z'), 'Asia/Shanghai')");
+requireText('src/runtime/workflow/schedules/engine.ts', 'schedule.action.operation === CONTROLLER_PROGRESSION_OPERATION');
+requireText('src/runtime/workflow/schedules/work-continuation.ts', "const CONTROLLER_PROGRESSION_OPERATION = 'controller_progression';");
+requireText('src/runtime/workflow/schedules/pending-activation.ts', "const CONTROLLER_PROGRESSION_OPERATION = 'controller_progression';");
+requireText('src/runtime/workflow/schedules/pending-activation.ts', 'operation: CONTROLLER_PROGRESSION_OPERATION');
+requireText('src/runtime/plugins/gmail-adapter.ts', 'actualEmail !== configuredEmail');
+requireText('src/runtime/plugins/gmail-adapter.ts', "export const GMAIL_AUTOMATION_CAPABILITY_ID = 'scheduled-gmail-automation';");
+requireText('src/runtime/plugins/gmail-adapter.ts', "actionId: 'authorize_scheduled_gmail_automation'");
+requireText('src/runtime/plugins/gmail-adapter.ts', "requiredConfirmationText: 'authorize-scheduled-gmail-automation'");
+requireText('src/runtime/plugins/store.ts', 'if (action.requiredConfirmationText)');
+requireText('src/runtime/plugins/gmail-adapter.ts', "actionId: 'archive_scheduled_message'");
+requireText('src/runtime/plugins/gmail-adapter.ts', "actionId: 'send_owner_notification'");
+requireText('src/runtime/plugins/gmail-adapter.ts', 'to: [gmailAutomationMailbox(current)]');
+requireText('src/runtime/plugins/gmail-adapter.ts', 'requiresExplicitCapabilityGrant: true');
+requireText('src/runtime/plugins/gmail-adapter.ts', 'expiresInMinutes: GMAIL_AUTOMATION_GRANT_MINUTES');
+requireText('src/runtime/plugins/store.ts', 'if (action.requiresExplicitCapabilityGrant && !activeAuthorizationGrant)');
+requireText('src/runtime/plugins/store.ts', 'PLUGIN_CAPABILITY_GRANT_REQUIRED');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'notificationRequestId');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'export function recordUnknownSupervisorNotificationReceipt(');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'readPluginActionReceiptForRequest(controllerHome, input.requestId)');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'submitted.receipt');
+requireText('tests/runtime/thin-capability-substrate.test.ts', 'unknown Gmail Supervisor notification keeps one exact receipt');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', "notificationRequestId('stall', taskId, stall.state, stall.effectId)");
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'getDirectActivity(controllerHome, stallActivityId(taskId))');
+requireText('packages/kernel/identity/infrastructure/activity-projection-store.ts', 'export function getDirectActivity(');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', "stall.state === 'retryable' && stall.generations >= stall.maxGenerations");
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'workflow-supervisor.notification-auth:');
+requireText('supervisor/types.ts', "export type WorkflowSupervisorAction = 'CONTINUE' | 'WAIT' | 'DONE' | 'NEEDS_USER';");
+requireText('supervisor/types.ts', "state: 'waiting'; scheduleId: string; completionFingerprint: string");
+requireText('supervisor/protocol.ts', "scheduled_wake_schedule_id");
+requireText('supervisor/protocol.ts', "WORKFLOW_SUPERVISOR_WAIT_NOT_SCHEDULED");
+requireText('supervisor/store.ts', "scheduled-wake-bound:");
+requireText('supervisor/store.ts', "scheduled-wake-committed:");
+requireText('supervisor/store.ts', "completion_event.kind = 'assistant_completion'");
+requireText('supervisor/store.ts', "WORKFLOW_SUPERVISOR_SCHEDULED_WAKE_ALREADY_CONSUMED");
+requireText('supervisor/control-plane.ts', "action === 'WAIT'");
+requireText('supervisor/control-plane.ts', 'private async validateTerminalProposal');
+requireText('supervisor/control-plane.ts', "'scheduled_work_must_remain_open'");
+requireText('supervisor/protocol.ts', '不要用 DONE 或 NEEDS_USER 终结每日循环');
+requireText('supervisor/server.ts', "req.method === 'task_bind_scheduled_wake'");
+requireText('supervisor/server.ts', "req.method === 'task_wake_scheduled'");
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'bindWorkflowSupervisorScheduledWakeForWork');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'scheduleOccurrenceId');
+requireText('src/runtime/workflow/schedules/engine.ts', 'scheduleOccurrenceId: occurrence.occurrenceId');
+requireText('adapters/mcp/runtime-gateway/scheduler-adapter.ts', 'bindWorkflowSupervisorScheduledWakeForWork');
+requireText('adapters/mcp/runtime-gateway/scheduler-adapter.ts', 'async function bindSupervisorWakeForSchedule');
+requireText('adapters/mcp/runtime-gateway/scheduler-adapter.ts', "operation === 'schedule_resume'");
+requireText('adapters/mcp/runtime-gateway/scheduler-adapter.ts', 'bindSupervisorWakeForSchedule(ctx, repository.repoId, saved)');
+requireText('src/runtime/root/workflow-supervisor-composition.ts', 'wakeWorkflowSupervisorScheduledTaskForWork');
+requireText('src/runtime/root/controller-progression-composition.ts', 'wakeWorkflowSupervisorScheduledTaskForWork');
+requireText('src/runtime/root/controller-progression-composition.ts', "if (wake.status === 'woken' && wake.taskId && wake.effectId)");
+requireText('src/runtime/root/controller-progression-composition.ts', "status: 'scheduled_supervisor_woken'");
+requireText('src/runtime/workflow/schedules/engine.ts', "progression.status === 'scheduled_supervisor_woken'");
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', 'executes two distinct cron occurrences through the same durable WAIT task without pausing the Schedule');
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', "schedule_request_id: 'schedule-daily-gmail-two-consecutive-occurrences'");
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', "cron_expression: '0 8 * * *'");
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', "2026-10-18@08:00[Asia/Shanghai]");
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', '2026-11-01T00:00:00.000Z');
+requireText('tests/runtime/rh-work-scheduler-adapter.test.ts', "evaluateSchedule(controllerHome, created.data.schedule, false, { source: 'timer' })");
+requireText('src/runtime/workflow/schedules/engine.ts', "schedule.action.operation !== CONTROLLER_PROGRESSION_OPERATION");
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'authorizationGrantRefs: [grant.grantId]');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'workflow-supervisor.notification-send-auth:');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', "creationReason: 'scheduled_gmail_notification_authorization_failed'");
+forbidBetween('src/runtime/plugins/gmail-adapter.ts', "actionId: 'send_owner_notification'", "actionId: 'modify_message_labels',", /\b(?:to|recipient|cc|bcc)\s*:/i, 'scheduled Gmail owner notification must not accept a caller-selected recipient');
 requireText('supervisor/forge-validators.ts', "requirement.state !== 'done'");
+requireText('supervisor/forge-validators.ts', 'validateSemanticCompletionBinding(task, proposal)');
+requireText('supervisor/forge-validators.ts', 'function validateWorkCompletion(');
+requireText('supervisor/forge-validators.ts', 'function validateRequirementCompletion(');
+requireText('adapters/mcp/runtime-gateway/runtime-tool-definitions.ts', "work_id: { type: 'string', minLength: 1, maxLength: 256");
+requireText('adapters/mcp/runtime-gateway/runtime-tool-definitions.ts', "requirement_id: { type: 'string', minLength: 1, maxLength: 256");
+requireText('adapters/mcp/runtime-gateway/workflow-supervisor-adapter.ts', 'WORKFLOW_SUPERVISOR_SEMANTIC_BINDING_AMBIGUOUS');
+requireText('adapters/mcp/runtime-gateway/workflow-supervisor-adapter.ts', 'WORKFLOW_SUPERVISOR_SEMANTIC_BINDING_REPO_REQUIRED');
+requireText('adapters/mcp/runtime-gateway/workflow-supervisor-adapter.ts', "...(workId ? { work_id: workId } : {})");
+requireText('adapters/mcp/runtime-gateway/workflow-supervisor-adapter.ts', "...(requirementId ? { requirement_id: requirementId } : {})");
 requireText('supervisor/forge-validators.ts', "requirement.state === 'waiting_for_user'");
+requireText('supervisor/native-browser-adapter.ts', "command.kind === 'recovery' && prepared.reasonCode === 'provider_recovery_stop_pending'");
+requireText('supervisor/native-browser-adapter.ts', 'provider-turn observation, not an infrastructure preparation failure');
+requireText('supervisor/store.ts', 'proofGeneration === ledger.lastGeneration');
+requireText('supervisor/store.ts', 'dispatch_generation: dispatch.lastGeneration');
+requireText('supervisor/store.ts', 'dispatch_generation: row?.dispatch_generation, pre_send_rejection: true');
+requireText('supervisor/store.ts', 'effect-dispatch-budget-refund:${effectId}:${proofGeneration}');
+requireText('supervisor/control-plane.ts', 'const recoveryStopPending = effect.kind === \'recovery\' && input.reason.trim() === \'provider_recovery_stop_pending\';');
+requireText('supervisor/native-browser-adapter.ts', "reasonCode: dispatch.reasonCode ?? 'COMPUTER_CHATGPT_DISPATCH_NOT_ATTEMPTED'");
 forbid('src/runtime/root/workflow-supervisor-composition.ts', /WorkflowSupervisorStore|supervisor\.sqlite|registerTask\(|reserveEffect\(/, 'Forge composition must access Supervisor state only through daemon RPC, never open its database or become a second writer');
 requireText('src/runtime/root/workflow-supervisor-composition.ts', 'workflowSupervisorBoundaryForWork');
 requireText('src/runtime/root/workflow-supervisor-composition.ts', '`forge:${repoId}:work:${workId}`');
@@ -1200,6 +1307,8 @@ forbid(
 requireMissing('src/runtime/control-plane/routing/workspace-admission.ts');
 forbid('packages/kernel/work/domain/types.ts', /requireHandoffOnAmbiguity|requireWorktree|directMainProhibited/, 'retired Work placement/handoff policy fields must not return as durable authority');
 forbid('adapters/mcp/runtime-gateway/work-adapter.ts', /require_handoff_on_ambiguity|require_worktree|direct_main_prohibited/, 'retired placement/handoff wire flags must not drive repository topology');
+requireText('adapters/mcp/runtime-gateway/work-adapter.ts', "rawConstraints.workspace_mode === 'current'\n      ? 'current'\n      : 'isolated'", 'repository-bound rh_work.start must default omitted placement to isolated execution');
+requireText('src/runtime/control-plane/execution/work-preparation-service.ts', 'WORK_PREPARE_PLACEMENT_CONFLICT', 'work_prepare must not silently reuse a conflicting existing WorkHandle placement');
 forbid('src/cli/controller/execution-policy.ts', /requiresHumanAcceptance|autoRunDeclaredChecks|autoCompleteAfterSuccessfulRun|requiresScopedPaths|requiresDiffEvidence|requiresAnyVerificationEvidence|requiresAcceptanceEvidence|READ_ONLY_INTENT|DESTRUCTIVE_INTENT|SENSITIVE_PATH_PATTERNS/, 'task risk/text/path classification must not decide workflow, placement, verification, scope, or acceptance authority');
 requireMissing('src/runtime/control-plane/daemon-entry.ts');
 requireMissing('scripts/smoke-runtime-control-plane.ts');
@@ -1226,6 +1335,10 @@ requireMissing('src/runtime/bootstrap/activation-transaction.ts');
 requireMissing('src/runtime/bootstrap/stable-bootstrap.ts');
 requireMissing('src/runtime/supervisor');
 requireText('supervisor/store.ts', 'BEGIN IMMEDIATE');
+requireText('supervisor/forge-validators.ts', "work.semanticState === 'completed'");
+requireText('supervisor/forge-validators.ts', 'work.predecessorWorkId');
+requireText('supervisor/forge-validators.ts', 'work.supersedes ?? []');
+requireText('supervisor/forge-validators.ts', 'work.supersededBy ? [work.supersededBy]');
 requireText('supervisor/store.ts', 'completions_one_per_source_effect');
 requireText('supervisor/store.ts', 'WORKFLOW_SUPERVISOR_SOURCE_EFFECT_COMPLETION_CONFLICT');
 requireText('supervisor/paths.ts', 'resolveControllerHome');
@@ -1241,37 +1354,78 @@ requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'activeReleaseId:
 requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'createWorkflowSupervisorServer');
 requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'startWorkflowSupervisorNativeBrowserAdapter');
 requireText('supervisor/native-browser-adapter.ts', 'targetPort: ComputerChatgptConversationTargetPort;');
+requireText('src/runtime/root/workflow-supervisor-runtime.ts', 'const targetPort = extensionTargetPort;');
+forbid('src/runtime/root/workflow-supervisor-runtime.ts', /PreferredChatgptConversationTargetPort|MacOsChatgptConversationTargetPort|chatgpt-target-router/, 'Work-bound ChatGPT delivery uses one Chrome Extension target port, never a native fallback router');
+requireMissing('adapters/computer/chatgpt-target-router.ts');
+requireMissing('src/runtime/plugins/computer-chatgpt-macos-target.ts');
+requireMissing('src/runtime/plugins/browser-provider-registry.ts');
+requireText('src/runtime/plugins/browser-runtime.ts', 'options.providers.length !== 1');
+forbid('src/runtime/plugins/browser-runtime.ts', /excludedProviderIds|BrowserProviderUnavailableBeforeActionError/, 'Browser Runtime must not retry an action through another provider');
 forbid('supervisor/native-browser-adapter.ts', /MacOs|AppleEvents|browser-macos-bridge|\bwindowId\b|\btabId\b|window\.name/, 'Workflow Supervisor browser consumer must depend only on the provider-neutral Computer ChatGPT target port');
 forbid('supervisor/native-browser-adapter.ts', /supervisor\/store|sqlite|scheduler|packages\/kernel\/(?:work|controller)|control-plane\/persistence/, 'Native Supervisor browser adapter is transport-only and must not own durable lifecycle, Scheduler, Work, Controller, or persistence authority');
 requireText('src/runtime/root/workflow-supervisor-composition.ts', 'resolveWorkflowSupervisorForgeHome(options.controllerHome)');
 forbid('src/runtime/root/workflow-supervisor-runtime.ts', /createPlatformServiceManagerHost|launchd|systemd|startDetached/, 'Workflow Supervisor reuses the Canonical Runtime process lifecycle and must not own a second OS service');
 requireText('supervisor/entry.ts', "argument('--controller-home')");
 forbid('supervisor/entry.ts', /FORGE_HOME|--forge-home/, 'Workflow Supervisor foreground entry must use the canonical Controller Home authority rather than a second Forge-home root');
-requireText('supervisor/control-plane.ts', 'await validator(task, parsed.proposal)');
+requireText('supervisor/control-plane.ts', 'await this.validateTerminalProposal(task, parsed.proposal)');
 requireText('supervisor/protocol.ts', 'SUPERVISOR_BLOCK_END');
+requireText('supervisor/protocol.ts', 'validateSupervisorObjective(task.objective)');
+forbid('supervisor/protocol.ts', /objective:\s*task\.objective\.slice\(/, 'Supervisor must reject oversized objectives, never silently truncate them in rendered effects');
+requireText('supervisor/store.ts', 'validateSupervisorObjective(input.objective)');
+requireText('supervisor/store.ts', 'const objective = validateSupervisorObjective(input.objective)');
 requireText('supervisor/server.ts', 'createWorkflowSupervisorServer');
 forbid('supervisor/server.ts', /from ['"]\.\/store['"]|supervisor\.sqlite|BEGIN IMMEDIATE/, 'Supervisor transport must relay typed commands through the control plane and never own persistence');
+forbid('src/runtime/plugins/browser-macos-bridge.ts', /PLUGIN_BROWSER_NATIVE_PROCESS_AMBIGUOUS|pids\.length\s*!==\s*1/, 'Chrome GUI PID selection has one authority: Desktop Operator');
+requireText('src/runtime/plugins/browser-macos-bridge.ts', 'await assertMacOsBrowserApplicationRunning(request.product, timeoutMs)');
 requireText('adapters/computer/chrome-extension/manifest.json', 'nativeMessaging');
 requireText('adapters/computer/chrome-extension/background.js', 'computer_extension_claim');
 requireText('adapters/computer/chrome-extension/background.js', 'computer_extension_complete');
+requireText('adapters/computer/chrome-extension/background.js', "typeof observation.composerText === 'string'");
+requireText('adapters/computer/chrome-extension/background.js', "command.identity.namespace === 'chatgpt.bootstrap'");
+forbid('adapters/computer/chrome-extension/background.js', /if \(typeof observation\?\.url === 'string' && observation\.url\) return observation/, 'New bootstrap URL does not attest composer/model hydration before pre-send preparation');
 requireText('adapters/computer/chrome-extension/background.js', 'chrome.runtime.connectNative');
 forbid('adapters/computer/chrome-extension/background.js', /browser_begin_effect|browser_observe_effect|browser_poll|browser_tasks|browser_observe_assistant|task_register|reserve_enrollment/, 'Computer Chrome provider must not consume or mutate Workflow Supervisor effect authority; it executes only typed Computer target commands');
 requireText('adapters/computer/chrome-extension/content.js', 'ForgeComputerChatgptCore');
+requireText('adapters/computer/chrome-extension/content.js', "bootstrapTargetGuard: 'project-checked-before-send-v1'");
+requireText('adapters/computer/chrome-extension/content.js', 'exactComposerText(payload)');
+requireText('adapters/computer/chrome-extension/content.js', "return text.trim() ? text : '';");
+requireText('adapters/computer/chrome-extension/content.js', "blocks.every((block) => block.tagName === 'P')");
+requireText('adapters/computer/chrome-extension/content.js', "blocks.map((block) => {");
+requireText('adapters/computer/chrome-extension/background.js', 'resolveTarget(command.identity, false, command.providerBinding)');
+requireText('adapters/computer/chatgpt-extension-target.ts', "response.result.code === 'COMPUTER_CHATGPT_BOOTSTRAP_PINNED_TAB_MISSING'");
+requireText('adapters/computer/chatgpt-extension-target.ts', 'this.authority.withSurfaceLease(this.controllerHome, previous.targetId');
+requireText('adapters/computer/chatgpt-extension-target.ts', 'return await this.openBootstrap(projectUrl, bootstrapKey, false)');
+requireText('adapters/computer/chatgpt-extension-target.ts', 'if (pinned && !bootstrapMatch) continue;');
+requireText('adapters/computer/chatgpt-extension-target.ts', 'const candidate = pinned');
+requireText('adapters/computer/chatgpt-extension-target.ts', 'observed.ownerToken === binding.ownerToken');
+forbid('adapters/computer/chrome-extension/background.js', /resolveTarget\(command\.identity,\s*false\)\.catch/, 'Extension worker must recover a pinned bootstrap from the durable Computer binding, not its ephemeral in-worker Map');
+forbid('adapters/computer/chrome-extension/content.js', /core\.normalizeText\(payload\)/, 'Provider pre-send evidence must preserve whitespace in immutable effect payload');
 requireMissing('supervisor/chrome-extension');
-requireText('src/runtime/plugins/browser-adapter.ts', "browserMode: browserMode(raw.browserMode) ?? 'managed_persistent'");
-requireText('src/runtime/plugins/browser-adapter.ts', "nativeAttachMode: browserNativeAttachMode(raw.nativeAttachMode) ?? 'disabled'");
+requireText('src/runtime/plugins/browser-adapter.ts', "browserMode: browserMode(raw.browserMode) ?? 'attach_preferred'");
+requireText('src/runtime/plugins/browser-adapter.ts', "nativeAttachMode: browserNativeAttachMode(raw.nativeAttachMode) ?? 'auto'");
 requireText('supervisor/native-messaging/host.ts', 'ALLOWED_BROWSER_METHODS');
 requireText('supervisor/native-messaging/host.ts', 'computer_extension_claim');
 forbid('supervisor/native-messaging/host.ts', /['"](?:browser_tasks|browser_poll|browser_begin_effect|browser_observe_effect|browser_observe_dispatch_failure|browser_observe_provider_turn|browser_observe_assistant|bootstrap_poll|bootstrap_project_url|bootstrap_begin_effect|bootstrap_observe_effect|bootstrap_bind_conversation)['"]/, 'Chrome Native Messaging transport must not expose Workflow Supervisor effect RPCs; extension traffic terminates at Computer target commands');
 requireText('supervisor/store.ts', 'recordEffectNotAppliedProof');
+requireText('supervisor/store.ts', 'preSendComposerObservation(effectId: string)');
+requireText('supervisor/store.ts', "if (value && typeof value === 'object' && !Array.isArray(value)) return value as Record<string, unknown>;");
+requireText('supervisor/native-browser-adapter.ts', 'function retiredBootstrapDraftReplacementPrompt(');
+requireText('supervisor/native-browser-adapter.ts', 'control.preSendComposerObservation(staleEffect.effectId)');
+requireText('supervisor/native-browser-adapter.ts', "retired?.terminal !== 'STOPPED'");
+requireText('supervisor/native-browser-adapter.ts', 'control.effectDispatchBudget(staleEffect.effectId).generations !== 0');
+requireText('adapters/computer/chrome-extension/content.js', 'FORGE_RETIRED_DRAFT_V1');
+requireText('docs/architecture/CURRENT.md', 'A STOPPED bootstrap draft may be replaced only from the canonical Supervisor ledger');
+requireText('supervisor/store.ts', 'tried.at(-1)?.eventId');
+requireText('supervisor/store.ts', 'WORKFLOW_SUPERVISOR_PRE_SEND_OPERATOR_REARM_EXHAUSTED');
 requireText('supervisor/store.ts', '`effect-dispatch:${effectId}:${generation}`');
 requireText('supervisor/control-plane.ts', 'PERSISTED_BROWSER_EVIDENCE_KEYS');
 requireText('supervisor/control-plane.ts', "reason: 'not_applied_proof_incomplete'");
 requireText('supervisor/server.ts', "if (!['applied','unknown'].includes(outcome))");
-forbid('adapters/computer/chrome-extension/background.js', /chrome\.storage|supervisor\.sqlite|BEGIN IMMEDIATE/, 'Computer Chrome provider must reconstruct provider bindings from live inventory and Computer target authority rather than browser shadow persistence');
+forbid('adapters/computer/chrome-extension/background.js', /supervisor\.sqlite|BEGIN IMMEDIATE/, 'Computer Chrome provider must reconstruct provider bindings from live inventory and Computer target authority rather than browser shadow persistence');
+// Provider-local browser identity may persist; tasks and effects remain Supervisor-owned.
 forbid('adapters/computer/chrome-extension/content.js', /chrome\.storage|supervisor\.sqlite|BEGIN IMMEDIATE/, 'Computer Chrome content script must remain a page capability surface rather than durable authority');
 forbid('supervisor/native-messaging/host.ts', /task_register|reserve_enrollment|supervisor\.sqlite|BEGIN IMMEDIATE|bun:sqlite|node:sqlite|from ['"][^'"]*(?:store|control-plane)['"]/, 'Chrome Native Messaging host must remain a stateless browser-method relay and never own Supervisor persistence/lifecycle');
-forbid('adapters/computer/chrome-extension/background.js', /task_register|reserve_enrollment|supervisor\.sqlite|BEGIN IMMEDIATE|chrome\.storage/, 'Computer Chrome provider must never become durable workflow authority');
+forbid('adapters/computer/chrome-extension/background.js', /task_register|reserve_enrollment|supervisor\.sqlite|BEGIN IMMEDIATE/, 'Computer Chrome provider must never become durable workflow authority');
 forbid('adapters/computer/chrome-extension/content.js', /task_register|reserve_enrollment|supervisor\.sqlite|BEGIN IMMEDIATE|chrome\.storage/, 'Computer Chrome content script must observe/execute one exact page only and never own durable workflow state');
 
 requireMissing('docs/architecture/current/stable-external-runtime-supervisor.md');
@@ -1363,6 +1517,9 @@ forbid(
 );
 
 requireText('docs/architecture/CURRENT.md', 'Canonical Runtime is activated as one immutable whole release');
+requireText('src/runtime/root/release-execution-canary.ts', 'releaseScriptRequiresBun');
+forbid('src/runtime/root/package-runtime-release.ts', /ownsProcessRuntimeCanary|PROCESS_RUNTIME_RELEASE_CANARY_ARG/, 'package Runtime wrappers must delegate release canaries to the attested Process Runner/Check Runner implementation');
+requireText('scripts/migrate-windows-wsl-controller-home.ts', 'assertRuntimeReleaseExecutionCanaries(stagedRelease.manifestPath, destination);');
 requireText('docs/architecture/CURRENT.md', 'Runtime availability/recovery keeps Forge itself healthy');
 requireText('docs/architecture/CURRENT.md', 'Historical Issue/Task/Local Job and compatibility projections must not become second mutable authorities.');
 requireText('src/runtime/root/runtime.ts', 'export class CanonicalForgeRuntime');
@@ -1412,12 +1569,17 @@ requireText('src/runtime/root/service.ts', 'SuccessfulExit');
 requireText('src/runtime/root/service.ts', 'ThrottleInterval');
 requireText('src/runtime/root/service-runner.ts', 'activeRuntimeReleaseManifest');
 requireText('src/runtime/standalone-recovery/core.ts', 'restartPrimaryRuntime');
+forbid('src/runtime/standalone-recovery/core.ts', /\bopenSync\s*\([^,]+,\s*['"]wx['"]/, 'Recovery Core must not create a second exclusive mutation lock writer');
 requireText('src/runtime/standalone-recovery/core.ts', 'recoverPrimaryRuntime');
 requireText('src/runtime/standalone-recovery/core.ts', "action: 'restart_primary_runtime'");
 requireText('src/runtime/standalone-recovery/core.ts', 'restartAttempts >= maximumRestartAttempts');
 requireText('src/runtime/standalone-recovery/core.ts', 'rollbackPreviousLocked');
 requireText('src/runtime/standalone-recovery/entry.ts', "'restart_primary_runtime'");
 requireText('src/runtime/standalone-recovery/entry.ts', "'recover_primary_runtime'");
+requireText('src/runtime/standalone-recovery/core.ts', 'armPackageConnectorCutoverDrain');
+requireText('src/runtime/standalone-recovery/entry.ts', "parsed.result.detail.startsWith('RELEASE_SESSION_CUTOVER_DEFERRED_FOR_MCP_ACTIVITY')");
+forbid('src/runtime/standalone-recovery/entry.ts', /if\s*\(decision\.required\s*&&\s*decision\.action\s*===\s*['"]cutover['"]\)\s*\{\s*const gate = await probeReleaseCutoverReadiness/, 'Automatic Recovery must enter the canonical fenced drain transaction rather than block cutover before the drain can be armed');
+
 forbid(
   'src/runtime/standalone-recovery/core.ts',
   /runtime-slots|active-slot|blue\/green|StableSupervisor|component rollback/i,
@@ -1428,6 +1590,39 @@ requireText('src/cli/commands/init-hook.ts', "['open', 'next']");
 requireText('src/cli/commands/init-hook.ts', "command(name)");
 requireText('src/cli/commands/init-hook.ts', "command('close')");
 requireText('src/cli/commands/init-hook.ts', "'.forge'");
+// CLI setup/adoption must use one process/environment implementation, not three writers.
+requireText('src/cli/commands/setup-execution.ts', 'export function withProcessEnv');
+requireText('src/cli/commands/setup-execution.ts', 'export function runSetupProcess');
+requireMissing('src/core/adoption/helper-wrapper-plan.ts');
+// Service and release persistence use one writer rather than five sibling
+// open/write/rename algorithms with incompatible temporary-file identities.
+requireText('src/runtime/shared/atomic-text-file.ts', 'export function writeAtomicTextFile');
+requireText('src/runtime/maintenance/cleanup.ts', 'RUNTIME_CLEANUP_GIT_SOURCE_PROTECTED');
+requireText('src/runtime/maintenance/cleanup.ts', 'protectsGitSource(candidate.path)');
+for (const path of [
+  'src/runtime/root/service.ts',
+  'src/runtime/root/package-connector-service.ts',
+  'src/runtime/root/package-runtime-service.ts',
+  'src/runtime/root/package-runtime-release.ts',
+  'src/cli/controller/systemd-user.ts',
+]) {
+  forbid(path, /^function\s+atomicWrite\s*\(/m, 'service/release text writes must reuse the shared atomic writer');
+  requireText(path, 'writeAtomicTextFile');
+}
+
+// Job recovery and Scheduler must not drift on delegated-operation replay safety.
+requireText('src/runtime/execution/jobs/child-reference.ts', 'export function isAgentDelegationJob');
+for (const path of ['src/runtime/control-plane/global-scheduler/reconciliation.ts', 'src/runtime/execution/jobs/receipt-recovery.ts']) {
+  forbid(path, /^function\s+isAgentDelegationJob\s*\(/m, 'delegation classification must stay in the shared child-reference owner');
+}
+// Live and sampled Git snapshots share the same porcelain partitioning semantics.
+requireText('src/cli/repositories/structured-git.ts', 'export function splitRepositoryGitStatus');
+forbid('src/runtime/projections/git-status-sampler.ts', /^function\s+splitStatus\s*\(/m, 'Git projection must not duplicate the live porcelain parser');
+for (const path of ['src/cli/commands/init.ts', 'src/cli/commands/init-hook.ts', 'src/cli/commands/global-runtime.ts']) {
+  forbid(path, /^function\s+(?:withProcessEnv|runProcess)(?:<|\()/m, 'setup commands must import their canonical synchronous process/environment owner');
+}
+requireText('src/cli/editing/edit-session.ts', 'export function findOccurrence');
+forbid('src/cli/repositories/safe-patch.ts', /^function\s+findOccurrence\s*\(/m, 'Safe Patch preflight must reuse Direct Edit anchor occurrence matching');
 requireText('src/cli/editing/edit-session.ts', 'beforeMode');
 requireText('src/cli/editing/edit-session.ts', 'afterMode');
 requireText('src/cli/editing/edit-session.ts', '{ mode: record.beforeMode }');
@@ -1481,7 +1676,13 @@ forbid(
 requireText('adapters/mcp/runtime-gateway/router.ts', 'executionJobCreationRetired');
 requireText('adapters/mcp/runtime-gateway/router.ts', "'EXECUTION_JOB_RETIRED'");
 requireText('adapters/mcp/runtime-gateway/execution-tools.ts', 'isDurableWorkOperation');
-requireText('adapters/mcp/runtime-gateway/execution-tools.ts', "'work_execute'");
+forbid('adapters/mcp/runtime-gateway/execution-tools.ts', /'work_execute'/, 'A Work-bound execution helper must not be a second public command tool');
+requireText('adapters/mcp/tool-mapping/repository-tools.ts', "definition('execute_command'");
+requireText('adapters/mcp/toolset-names.ts', "'execute_command'");
+forbid('adapters/mcp/toolset-names.ts', /'process_exec'|'repository_command_execute'|'work_execute'/, 'Only execute_command is a public generic command entry');
+forbid('adapters/mcp/runtime-gateway/process-tools.ts', /definition\(\s*'process_exec'/, 'The host command must not re-expose a separate process_exec schema');
+forbid('adapters/mcp/tool-mapping/repository-tools.ts', /definition\('repository_command_preview'/, 'Command dry_run preview must use execute_command rather than a second tool');
+forbid('src/runtime/plugins/local-system-adapter.ts', /actionId:\s*'execute_command'/, 'Do not reintroduce a duplicate local_system generic terminal capability');
 requireText('adapters/mcp/runtime-gateway/execution-tools.ts', "'work_validate'");
 forbid('adapters/mcp/runtime-gateway/execution-tools.ts', /work_finalize/, 'execution tools must not restore a Work finalization operation');
 requireText('src/runtime/execution/workers/executor.ts', 'executeWork(runtimeContext');
@@ -1633,6 +1834,16 @@ requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'persistS
 requireText('src/runtime/control-plane/global-scheduler/worker-attachment.ts', 'attachExecutionWorker');
 requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'runSchedulerPeriodicCleanup');
 requireText('src/runtime/control-plane/global-scheduler/maintenance.ts', 'runSchedulerValidationReconciliation');
+requireMatch(
+  'src/runtime/control-plane/global-scheduler/maintenance.ts',
+  /input\.runtimeCleanup\(input\.controllerHome,\s*\{\s*reason:\s*['"]periodic['"]/s,
+  'route periodic maintenance through the canonical Runtime cleanup owner',
+);
+requireText('src/runtime/control-plane/runtime-cleanup.ts', 'cleanupControllerReleaseHistory');
+requireText('src/runtime/control-plane/release-retention.ts', "releasePaths.add(releasePathFromAuthorityRecord(releasesRoot, parsed.active, 'active'))");
+requireText('src/runtime/control-plane/release-retention.ts', 'const connectorRelease = loadPackageConnectorReleaseProtection(controllerHome, releasesRoot);');
+requireText('src/runtime/control-plane/release-retention.ts', 'const databaseBackup = (previous as Record<string, unknown>).databaseBackup;');
+requireText('src/runtime/root/scheduler.ts', 'isolatePeriodicCleanup: true');
 requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'planSchedulerSourceSampling');
 requireText('src/runtime/control-plane/global-scheduler/source-scan.ts', 'selectSchedulerSourceScanRepositories');
 requireText('src/runtime/control-plane/global-scheduler/scheduler.ts', 'runSchedulerDurableAdmission');
@@ -1738,7 +1949,14 @@ requireText('adapters/mcp/transports/http-observation.ts', "'/repos/:repoId/heal
 requireText('src/runtime/control-plane/governance/external-effects.ts', 'EXTERNAL_EFFECT_AUTHORIZATION_REQUIRED');
 requireText('src/runtime/control-plane/governance/external-effects.ts', 'AUTOMATED_REQUIREMENT_REQUIRES_CANDIDATE');
 requireText('adapters/mcp/tool-mapping/tools.ts', "export * from './legacy-tool-service'");
-requireText('src/cli/mcp/tools.ts', '@deprecated Kernel V2 compatibility shim');
+for (const retiredShim of [
+  'src/cli/mcp/access-tools.ts',
+  'src/cli/mcp/repository-tools.ts',
+  'src/cli/mcp/tools.ts',
+  'src/cli/mcp/toolset.ts',
+  'src/cli/mcp/toolset-names.ts',
+  'src/cli/mcp/toolset-selection.ts',
+]) requireMissing(retiredShim);
 
 for (const path of [
   'adapters/mcp/runtime-gateway/router.ts',
@@ -1859,6 +2077,9 @@ const B7_ALLOWED_KERNEL_LEGACY_EDGES = new Set([
 ]);
 requireExactShrinkingDebt('Kernel -> legacy src dependency debt', b7KernelLegacyEdges, B7_ALLOWED_KERNEL_LEGACY_EDGES);
 const b7ProductionEdges = new Set(dependencyEdges(b7ProductionGraph));
+if (!b7ProductionEdges.has('src/runtime/standalone-recovery/core.ts -> src/runtime/standalone-recovery/operation-lock.ts')) {
+  failures.push('Recovery Core must consume the single shared operation-lock authority');
+}
 for (const requiredEdge of [
   'packages/kernel/work/domain/types.ts -> packages/kernel/identity/api/index.ts',
   'packages/kernel/scheduler/domain/schedule.ts -> packages/kernel/identity/api/index.ts',
@@ -2083,7 +2304,7 @@ requireText('supervisor/protocol.ts', '(?:fx|crpe)_');
 // Cognitive Plane stays one advisory application path: all Controller tools expose the
 // same optional settlement metadata, the MCP server settles it after the primary
 // outcome, and Supervisor/external launchers consume Cognition-only projections.
-requireText('adapters/mcp/toolset.ts', 'injectCognitionSettlementFields(injectAutomationEnvelopeFields(injectDurableCommandFields(definition)))');
+requireText('adapters/mcp/toolset.ts', 'injectCognitionSettlementFields(injectDurableCommandFields(definition))');
 requireText('adapters/mcp/server.ts', 'settleCognitionAfterTool(ctx, name, args, localResult)');
 forbid('adapters/mcp/runtime-gateway/runtime-tools.ts', /settleCognitionEnvelope/, 'cognition settlement belongs to the canonical all-tool MCP boundary, not the rh_* facade only');
 requireText('src/runtime/root/workflow-supervisor-composition.ts', 'renderCognitiveAttentionForWork');
@@ -2105,7 +2326,28 @@ forbid(
   /authority-env|BRAIN_CONTROLLER_AUTHORITY_REQUIRED|BRAIN_AUTHORITY_ENV_INVALID/,
   'advisory experience CLI must not require a Controller capability',
 );
+// Retired Gateway/CLI forwarding aliases must not be reintroduced: adapter
+// definitions and execution-domain reconciliation own their canonical paths.
 for (const path of [
+  'adapters/mcp/runtime-gateway/work-validation-reconciler.ts',
+  'src/cli/mcp/access-mode.ts',
+  'src/cli/mcp/audit.ts',
+  'src/cli/mcp/auth.ts',
+  'src/cli/mcp/multi-repository.ts',
+  'src/cli/mcp/openai-secure-tunnel.ts',
+  'src/cli/mcp/paths.ts',
+  'src/cli/mcp/policy.ts',
+  'src/cli/mcp/readiness-projection.ts',
+  'src/cli/mcp/redaction.ts',
+  'src/cli/mcp/repo.ts',
+  'src/cli/mcp/server.ts',
+  'src/cli/mcp/setup.ts',
+  'src/cli/mcp/transports/http.ts',
+  'src/cli/mcp/transports/session-registry.ts',
+  'src/cli/mcp/types.ts',
+  'src/cli/mcp/oauth.ts',
+  'src/cli/mcp/tool-contract.ts',
+  'src/cli/mcp/transports/stdio.ts',
   'src/runtime/gateway/mcp/execution-tools.ts',
   'src/runtime/gateway/mcp/legacy-ios-tool-adapter.ts',
   'src/runtime/gateway/mcp/persisted-check-process.ts',
@@ -2114,17 +2356,7 @@ for (const path of [
   'src/runtime/gateway/mcp/runtime-tool-definitions.ts',
   'src/runtime/gateway/mcp/runtime-tools.ts',
   'src/runtime/gateway/mcp/work-validation-reconciler.ts',
-]) requireText(path, '@deprecated Kernel V2 compatibility shim');
-for (const path of [
-  'src/cli/mcp/access-tools.ts',
-  'src/cli/mcp/legacy-context.ts',
-  'src/cli/mcp/legacy-tool-service.ts',
-  'src/cli/mcp/multi-repository.ts',
-  'src/cli/mcp/repository-tools.ts',
-  'src/cli/mcp/server.ts',
-  'src/cli/mcp/tools.ts',
-  'src/cli/mcp/toolset.ts',
-]) requireText(path, '@deprecated Kernel V2 compatibility shim');
+]) requireMissing(path);
 requireText('src/runtime/control-plane/execution/work-execution-support.ts', 'packages/protocols/mcp/execution-context');
 requireText('src/runtime/control-plane/execution/work-preparation-service.ts', 'packages/protocols/mcp/execution-context');
 requireText('src/runtime/control-plane/execution/work-operation-service.ts', 'packages/protocols/mcp/execution-context');
@@ -2167,13 +2399,6 @@ forbidBetween(
   /\b(?:pid|process|endpoint|url|tunnel|token)\b/i,
   'ForgeInstanceIdentity creation must remain independent of process and adapter transport/auth metadata',
 );
-for (const path of [
-  'src/cli/mcp/auth.ts',
-  'src/cli/mcp/setup.ts',
-  'src/cli/mcp/openai-secure-tunnel.ts',
-]) {
-  requireText(path, '@deprecated Kernel V2 compatibility shim');
-}
 requireText('adapters/mcp/auth.ts', 'forgeInstanceId?: string');
 forbid('adapters/mcp/auth.ts', /server:\s*\{[\s\S]{0,512}?instanceId\??:\s*string/, 'MCP server process identity must not share semantic Forge instanceId naming');
 requireText('adapters/mcp/setup.ts', 'ensureForgeInstanceIdentity');
@@ -2202,6 +2427,9 @@ for (const path of productionTypeScriptFiles()) {
   forbid(path, controllerRepoCallPattern, 'production controller-plugin paths must not recreate a fake controller RepositoryRecord');
 }
 requireText('src/runtime/plugins/store.ts', 'const CONTROLLER_PLUGIN_SCOPE_KEY = FORGE_INSTANCE_SCOPE_KEY');
+requireText('src/runtime/plugins/store.ts', 'export function preflightPluginActionWorkBinding(');
+requireText('src/runtime/plugins/action-application.ts', 'preflightPluginActionWorkBinding(input.controllerHome, input.scope, action, input.request);');
+requireText('tests/runtime/external-plugin-store-integration.test.ts', 'rejects invalid Work kind without consuming the Process request id');
 forbidBetween(
   'src/runtime/plugins/store.ts',
   'function controllerPluginActionScope',
@@ -2241,6 +2469,51 @@ requireText('packages/protocols/computer/contract.ts', 'export interface Compute
 forbid('adapters/computer/desktop-operator-negotiation.ts', /interface\s+ComputerCapabilityAdvertisement/, 'Desktop Operator negotiation must consume the provider-neutral Computer capability advertisement contract instead of redefining it');
 requireText('packages/plugin-runtime/computer/provider.ts', 'export interface ComputerProvider');
 requireText('packages/plugin-runtime/computer/provider-registry.ts', 'export class ComputerProviderRegistry');
+requireText('src/runtime/plugins/computer-registration.ts', 'return executeIosPhysicalDeviceAction(input)');
+requireText('scripts/smoke-ios-physical-device.ts', "pluginId: 'computer'");
+requireText('scripts/smoke-ios-physical-device.ts', 'artifact?.sha256 !== screenshotSha256');
+requireText('scripts/smoke-ios-physical-device.ts', 'semanticPriceVerified: false');
+requireText('src/runtime/plugins/computer-registration.ts', 'observationReady: physicalReady, inputReady: physicalInputReady');
+requireText('src/runtime/plugins/computer-registration.ts', 'const hidStatus = physicalReady && context ? remoteXpcHidCachedStatus(context.controllerHome) : undefined;');
+requireText('src/runtime/plugins/ios/remote-xpc-hid.ts', 'probeHidToolchain(python)');
+requireText('src/runtime/plugins/ios/remote-xpc-hid.ts', "'--expected-version', IOS_HID_TOOLCHAIN_VERSION");
+requireText('scripts/install-ios-hid-toolchain.sh', 'pymobiledevice3==$version');
+requireText('src/runtime/plugins/ios/remote-xpc-hid.ts', 'return hidToolchainStatus(controllerHome, env, false);');
+requireText('src/runtime/plugins/ios/remote-xpc-hid.ts', 'return hidToolchainStatus(controllerHome, env, true);');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'const confirmed = requireObservedPhysicalTargetForeground(state)');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'const reusable = reusablePhysicalSession(input, selected, bundleId);');
+requireText('src/runtime/plugins/ios-physical-device.ts', "appendEvent(input, reusable.interactionId, 'app_activated'");
+requireText('src/runtime/plugins/ios-physical-device.ts', "state: 'deferred_to_first_input'");
+requireText('src/runtime/plugins/ios-physical-device.ts', 'input.args.prewarm_input === true && input.args.observe_after_open !== true');
+requireText('tests/runtime/ios-physical-device.test.ts', "it('reuses the same session but always reactivates its target app'");
+requireText('src/runtime/plugins/ios-physical-device.ts', "'IOS_DEVICE_LOCK_STATE_UNVERIFIED'");
+requireText('src/runtime/plugins/ios-physical-device.ts', "if (lockState.passcodeRequired === false) return;");
+requireText('src/runtime/plugins/ios-physical-device.ts', 'if (!selected.connected) {');
+requireText('src/runtime/plugins/ios-physical-device.ts', "'IOS_DEVICE_SCREENSHOT_INVALID'");
+requireText('src/runtime/plugins/ios-physical-device.ts', 'chmodSync(path, 0o700);');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'if (file.isFile()) chmodSync(path, 0o600);');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'state.lastScreenshot = undefined;');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'try { unlinkSync(path); } catch');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'PNG_CRC_TABLE');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'sawImageData && length === 0 && end + 4 === image.length');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'screenshotSha256, screenshotBytes: image.length');
+requireText('src/runtime/plugins/ios-physical-device.ts', "requiredConfirmationText: 'list-iphone-app-documents'");
+requireText('src/runtime/plugins/ios-physical-device.ts', "'IOS_DEVICE_DOCUMENT_LIST_UNVERIFIED'");
+requireText('src/runtime/plugins/ios-physical-device.ts', "listedNames.some((name) => typeof name !== 'string' || !name.trim())");
+requireText('src/runtime/plugins/ios-physical-device.ts', "requiredConfirmationText: 'export-iphone-app-document'");
+requireText('src/runtime/plugins/ios-physical-device.ts', "const indexPath = join(dir, 'index.json')");
+requireText('src/runtime/plugins/ios-physical-device.ts', 'const MAX_DOCUMENT_INDEX_BYTES = 512 * 1024;');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'indexFile.size <= 0 || indexFile.size > MAX_DOCUMENT_INDEX_BYTES');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'index.interactionId !== record.interactionId || !validEntries');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'pngDisplayGeometry(bytes) !== undefined');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'bytes.subarray(-2).toString(\'hex\') === \'ffd9\'');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'bytes.readUInt32BE(0) >= 16 && bytes.readUInt32BE(0) <= bytes.length');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'entries: [...entries, entry] }, { mode: 0o600 });');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'organizedIndex: { localArtifact: indexPath, entryCount: entries.length + 1 }');
+requireText('src/runtime/plugins/ios-physical-device.ts', 'requireBundleId(input.args.bundle_id) !== state.bundleId');
+requireText('src/runtime/plugins/ios-physical-device.ts', "'--domain-type', 'appDataContainer', '--domain-identifier', state.bundleId");
+forbid('src/runtime/plugins/ios-physical-device.ts', /source:\s*'atomic_screenshot'/, 'bare iPhone screenshot IDs must never bypass explicit target-foreground confirmation');
+forbid('src/runtime/plugins/ios-adapter.ts', /\bexecuteIosPhysicalDeviceAction\b/, 'CoreDevice iPhone App mutations must have a single public Computer owner, not a retained iOS-adapter writer');
 requireText('adapters/computer/desktop-operator-contract.ts', 'DESKTOP_OPERATOR_PROVIDER_PLUGIN_ID');
 requireText('adapters/computer/desktop-operator-negotiation.ts', 'negotiateDesktopOperatorComputerHandshake');
 requireText('adapters/computer/desktop-operator-negotiation.ts', 'buildDesktopOperatorComputerInvocation');
@@ -2312,13 +2585,12 @@ forbid('packages/plugin-runtime/browser/provider-registry.ts', /AssistantPluginE
 requireText('packages/protocols/browser/session.ts', 'export interface BrowserSessionState');
 for (const path of [
   'src/runtime/plugins/browser-runtime-contract.ts',
-  'src/runtime/plugins/browser-provider-registry.ts',
   'src/runtime/plugins/browser-session-types.ts',
 ]) {
   requireText(path, '@deprecated C0 compatibility shim');
 }
 for (const path of sourceFiles('src/runtime/plugins')) {
-  if (['src/runtime/plugins/browser-runtime-contract.ts', 'src/runtime/plugins/browser-provider-registry.ts', 'src/runtime/plugins/browser-session-types.ts'].includes(path)) continue;
+  if (['src/runtime/plugins/browser-runtime-contract.ts', 'src/runtime/plugins/browser-session-types.ts'].includes(path)) continue;
   forbid(path, /from\s+['"]\.\/browser-(?:runtime-contract|provider-registry|session-types)['"]/, 'active Browser runtime code must consume plugin-runtime/protocol Browser contracts, not retired local owners');
 }
 // Computer SurfaceTarget is the only durable interaction-target authority. Browser
@@ -2358,6 +2630,11 @@ for (const path of sourceFiles('packages/workflow-runtime')) {
   forbid(path, /xiaohongshu|douyin|instagram|reddit|facebook/i, 'generic Workflow Runtime contracts must not own site/business choreography');
   forbid(path, /from\s+['"][^'"]*(?:src\/runtime|adapters)\//, 'Workflow Runtime package contracts must remain independent from Runtime/adapters implementation authority');
 }
+requireText('src/runtime/plugins/first-party-registry.ts', "from './computer-registration'");
+requireText('src/runtime/plugins/computer-registration.ts', 'buildBrowserPluginManifest(previousRevision, previousUpdatedAt, repoRoot, context, true)');
+requireText('src/runtime/plugins/computer-registration.ts', '__forge_computer_native_only: true');
+requireText('src/runtime/plugins/browser-adapter.ts', 'if (computerNativeOnly) return normalizeConfig({');
+requireText('src/runtime/plugins/browser-adapter.ts', 'if (computerNativeOnly) {');
 requireText('src/runtime/plugins/browser-registration.ts', 'export const browserPluginAdapter');
 requireText('src/runtime/plugins/first-party-registry.ts', "from './browser-registration'");
 forbid('src/runtime/plugins/first-party-registry.ts', /from\s+['"]\.\/browser-adapter['"]/, 'first-party registry must depend on the thin Browser registration entrypoint, not the action implementation');

package/scripts/init-project.sh

@@ -373,60 +373,14 @@ install_dev_tools() {
     echo -e "${GREEN}Dev tools installed!${NC}"
 }
 
-# Write version stamp into the generated project
-write_version_stamp() {
-    local skill_version_file="$SCRIPT_DIR/../assets/skill-version.json"
-    local stamp_dir=".claude"
-    local stamp_file="$stamp_dir/.skill-version"
-    local sv_version="unknown"
-    local sv_template_version="unknown"
-
-    if [ -f "$skill_version_file" ] && command_exists bun; then
-        sv_version=$(bun -e "console.log(JSON.parse(require('fs').readFileSync('$skill_version_file','utf-8')).version)")
-        sv_template_version=$(bun -e "console.log(JSON.parse(require('fs').readFileSync('$skill_version_file','utf-8')).templateVersion)")
-    elif [ -f "$skill_version_file" ] && command_exists node; then
-        sv_version=$(node -e "console.log(JSON.parse(require('fs').readFileSync('$skill_version_file','utf-8')).version)")
-        sv_template_version=$(node -e "console.log(JSON.parse(require('fs').readFileSync('$skill_version_file','utf-8')).templateVersion)")
-    fi
-
-    mkdir -p "$stamp_dir"
-    cat > "$stamp_file" << STAMP_EOF
-skill_version=$sv_version
-template_version=$sv_template_version
-generated_at=$(date -u '+%Y-%m-%dT%H:%M:%SZ')
-plan_type=${STACK}
-STAMP_EOF
-    echo -e "${GREEN}Version stamp written to $stamp_file${NC}"
-}
-
-# Run a skill lifecycle hook (if bun is available)
-run_skill_hook() {
-    local event="$1"
-    local hook_script="$SCRIPT_DIR/run-skill-hook.ts"
-
-    if command_exists bun && [ -f "$hook_script" ]; then
-        bun "$hook_script" "$event" --context "{\"projectName\":\"$PROJECT_NAME\",\"stack\":\"$STACK\"}" 2>&1 || {
-            if [[ "$event" == pre-* ]]; then
-                echo -e "${RED}Pre-hook $event failed, aborting.${NC}"
-                return 1
-            else
-                echo -e "${YELLOW}Post-hook $event warning (non-fatal).${NC}"
-            fi
-        }
-    fi
-}
-
 # Main execution
 main() {
-    run_skill_hook "pre-init" || exit 1
 
     check_package_manager
     create_project
     create_structure
     install_dev_tools
-    write_version_stamp
 
-    run_skill_hook "post-init"
 
     echo ""
     echo -e "${GREEN}=== Project initialized successfully! ===${NC}"