@warpgogol/forge 2.19.0 → 2.21.0

package/profiles/typescript-turborepo.yaml

@@ -0,0 +1,222 @@
+schema: forge/stack-profile@1
+id: typescript-turborepo
+displayName: TypeScript TurboRepo
+detect:
+  anyOf:
+    - tsconfig.base.json
+workspace:
+  dirs:
+    - docs
+    - scripts
+    - tools
+    - packages
+  files:
+    - path: .vscode/extensions.json
+      content: |
+        {
+          "recommendations": [
+            "dbaeumer.vscode-eslint",
+            "esbenp.prettier-vscode",
+            "github.vscode-github-actions",
+            "mechatroner.rainbow-csv"
+          ]
+        }
+    - path: .gitignore
+      content: |
+        node_modules
+        dist
+        .turbo
+        .cache
+        operator-profile.md
+    - path: package.json
+      content: |
+        {
+          "name": "__PROJECT_NAME__",
+          "version": "0.1.0",
+          "private": true,
+          "type": "module",
+          "engines": {
+            "node": ">=24 <25"
+          },
+          "scripts": {
+            "clean": "node scripts/clean.mjs",
+            "format": "prettier --write .",
+            "format:check": "prettier --check .",
+            "test": "vitest run --passWithNoTests",
+            "upgrade-packages": "pnpm up"
+          }
+        }
+    - path: pnpm-workspace.yaml
+      content: |
+        packages:
+          - packages/*
+    - path: scripts/clean.mjs
+      content: |
+        import { readdir, rm } from "node:fs/promises";
+        import { join } from "node:path";
+        import { fileURLToPath } from "node:url";
+
+        const TARGETS = new Set(["node_modules", ".turbo", "dist", ".cache"]);
+
+        const repoRoot = join(fileURLToPath(import.meta.url), "..", "..");
+
+        async function walk(dir, toDelete) {
+          const entries = await readdir(dir, { withFileTypes: true });
+          for (const entry of entries) {
+            if (!entry.isDirectory()) continue;
+            const name = entry.name;
+            const fullPath = join(dir, name);
+            if (TARGETS.has(name)) {
+              toDelete.push(fullPath);
+              continue;
+            }
+            await walk(fullPath, toDelete);
+          }
+        }
+
+        const toDelete = [];
+        await walk(repoRoot, toDelete);
+
+        if (toDelete.length === 0) {
+          console.log("Nothing to clean.");
+          process.exit(0);
+        }
+
+        await Promise.all(toDelete.map((p) => rm(p, { recursive: true, force: true })));
+
+        for (const p of toDelete) {
+          console.log("deleted", p.replace(repoRoot + "/", ""));
+        }
+
+        console.log(`Cleaned ${toDelete.length} directories.`)
+    - path: turbo.json
+      content: |
+        {
+          "$schema": "https://turbo.build/schema.json",
+          "tasks": {
+            "build:check": {},
+            "test": {},
+            "lint": {}
+          }
+        }
+    - path: tsconfig.base.json
+      content: |
+        {
+          "compilerOptions": {
+            "target": "ES2022",
+            "module": "preserve",
+            "moduleResolution": "Bundler",
+            "strict": true,
+            "esModuleInterop": true,
+            "skipLibCheck": true,
+            "isolatedModules": true,
+            "forceConsistentCasingInFileNames": true,
+            "resolveJsonModule": true,
+            "noEmit": true,
+            "allowImportingTsExtensions": true,
+            "declaration": true,
+            "rewriteRelativeImportExtensions": true,
+            "types": ["node"]
+          }
+        }
+    - path: .npmrc
+      content: |
+        # @warpgogol scoped registry — replace YOUR_NPM_TOKEN with a valid npm read token
+        @warpgogol:registry=https://registry.npmjs.org/
+        //registry.npmjs.org/:_authToken=YOUR_NPM_TOKEN
+        dangerously-allow-all-builds=true
+    - path: eslint.config.js
+      content: |
+        export default [
+          {
+            rules: {},
+          },
+        ];
+    - path: .prettierrc.mjs
+      content: |
+        export default {
+          "semi": true,
+          "singleQuote": false,
+          "trailingComma": "all",
+          "printWidth": 100,
+          "tabWidth": 2
+        };
+    - path: .gitattributes
+      content: |
+        # No LFS patterns for this stack
+    - path: tools/kernel.config.ts
+      content: |
+        import { defineKernelConfig } from "@warpgogol/werkstatt-engine/kernel/types";
+
+        export default defineKernelConfig({
+          name: "__PROJECT_NAME__",
+          description: "__PROJECT_NAME__ TypeScript TurboRepo workshop",
+          moduleLoaders: {
+            "forge-core": async () => (await import("@warpgogol/forge/os/core")).forgeCoreModule,
+            "forge-rfc": async () => (await import("@warpgogol/forge/os/rfc-module")).forgeRfcModule,
+            "forge-adr": async () => (await import("@warpgogol/forge/os/adr-module")).forgeAdrModule,
+            "forge-plan": async () => (await import("@warpgogol/forge/os/plan-module")).forgePlanModule,
+            "forge-audit": async () => (await import("@warpgogol/forge/os/audit-module")).forgeAuditModule,
+            "forge-compass": async () => (await import("@warpgogol/forge/os/compass")).forgeCompassModule,
+            "forge-naming": async () => (await import("@warpgogol/forge/os/naming-module")).forgeNamingModule,
+            "forge-workflow": async () => (await import("@warpgogol/forge/os/workflow-module")).forgeWorkflowModule,
+            "forge-session": async () => (await import("@warpgogol/forge/os/session-module")).forgeSessionModule,
+            "forge-mission": async () => (await import("@warpgogol/forge/os/mission-module")).forgeMissionModule,
+            "forge-spec": async () => (await import("@warpgogol/forge/os/spec-module")).forgeSpecModule,
+            "forge-exploration": async () => (await import("@warpgogol/forge/os/exploration")).forgeExplorationModule,
+            "forge-program": async () => (await import("@warpgogol/forge/os/program")).forgeProgramModule,
+            "forge-werkstatt": async () => (await import("@warpgogol/forge/os/werkstatt")).forgeWerkstattModule,
+            "typescript-checks": async () => (await import("@warpgogol/werkstatt-typescript/checks/module")).createTypescriptCheckModule(),
+          },
+        });
+    - path: .forge/pinned.yaml
+      content: |
+        # Pinned foundation files (DNA-62, RFC-0733)
+        entries:
+          - path: tools/kernel.config.ts
+            mode: protect
+          - path: forge.yaml
+            mode: protect
+          - path: pnpm-workspace.yaml
+            mode: protect
+          - path: turbo.json
+            mode: protect
+          - path: tsconfig.base.json
+            mode: protect
+    - path: README.md
+      content: |
+        # __PROJECT_NAME__
+
+        A TypeScript TurboRepo workshop powered by the Werkstatt engine.
+
+        ## Prerequisites
+
+        - Node.js 24+
+        - pnpm 10+
+
+        ## Setup
+
+        ### 1. Configure npm token
+
+        Edit `.npmrc` and replace `YOUR_NPM_TOKEN` with a valid npm read token.
+
+        ### 2. Install dependencies
+
+        ```sh
+        pnpm install
+        ```
+
+        ### 3. Verify the workshop
+
+        ```sh
+        pnpm exec forge run forge.doctor
+        pnpm exec forge run forge.validate
+        ```
+
+        ## Stack
+
+        - Engine: @warpgogol/forge
+        - Plugin: @warpgogol/werkstatt-typescript
+        - Stack profile: typescript-turborepo
+install:
+  - pnpm add -wD @warpgogol/forge @warpgogol/werkstatt-typescript @warpgogol/werkstatt-engine @warpgogol/werkstatt-shared prettier vitest typescript

package/skills/meta/forge-bootstrap/SKILL.md

@@ -136,7 +136,7 @@ Ask the operator:
 1. **Stack** — ask what stack the project uses (TypeScript, Python, Rust, etc.). Write into `forge.yaml` `project.stack`.
 2. **Package manager** — confirm or override `project.packageManager` in `forge.yaml`.
 3. **Stack bindings** — fill `commands.typecheck`, `commands.test`, `commands.scopedBuild` in `forge.yaml`. Ask the operator for the exact commands (e.g. `tsc --noEmit`, `vitest`, `turbo run build`).
-4. **Git init** — check if `.git` exists in the project root. If not, run `git init` and make an initial commit with all project files. If `.git` already exists, proceed.
+4. **Git init** — `forge.create` already initializes git with `--initial-branch=main` programmatically. Verify `.git` exists in the project root. If it does, proceed. If not (e.g. `forge.create` failed to init git), run `git init --initial-branch=main` manually. Make an initial commit with all project files on the `main` branch.
 
 #### Transplant (adapter-driven migration)
 
@@ -168,11 +168,11 @@ The transplant mode performs real code migration via a migration-adapter registr
 
    If yes: the skill uses `git format-patch` (export all commits from source) + `git am` (apply them in the new project) to preserve history without copying the `.git` directory. If the source has many commits, warn that this may take a moment.
 
-   If no: the skill runs `git init` in the new project (clean repository, no history from source).
+   If no: the skill runs `git init --initial-branch=main` in the new project (clean repository, no history from source).
 
-   If git history transfer fails (complex history, submodules, replace objects): warn and continue with a clean `git init`.
+   If git history transfer fails (complex history, submodules, replace objects): warn and continue with a clean `git init --initial-branch=main`.
 
-   If the source project has no `.git` directory: skip the git history question and run `git init` directly.
+   If the source project has no `.git` directory: skip the git history question and run `git init --initial-branch=main` directly.
 
 6. **Post-setup** — call `postSetup()`. The adapter initializes git (clean init or format-patch + git am based on operator's choice), updates `pnpm-workspace.yaml` (adds `apps/<appName>`), `turbo.json` (adds workspace to pipeline), runs the install command derived from `ref(forge.yaml project.packageManager)`. The skill captures bin-link ENOENT warnings from the install output — these are cosmetic and indicate that `dist/` does not exist yet (the project has not been built). If the install itself fails (exit code != 0), report the dependency resolution error in human language (in `aiLanguage`), skip build verification, and continue to the welcoming report. The operator can fix and re-run onboarding.
 
@@ -434,8 +434,8 @@ A short description after every onboarding, read from `forge-about.md`. The skil
 - `doctor` is unavailable → skill skips auto-doctor and notes it in the report; operator can ask the agent to run it later.
 - Auto-ADR creation fails → skill reports the error silently (in agent logs, not to operator), leaves the ADR file in place for the agent to fix, and continues to the welcoming report. The operator is never told about the ADR.
 - Project analysis finds nothing recommendable (transplant) → skill skips recommendations and proceeds to the welcoming report with a direct invitation to start creating.
-- Git history transfer fails → skill warns and continues with clean `git init`.
-- Source project has no `.git` → skill skips the git history question and runs `git init` directly.
+- Git history transfer fails → skill warns and continues with clean `git init --initial-branch=main`.
+- Source project has no `.git` → skill skips the git history question and runs `git init --initial-branch=main` directly.
 - Post-setup `pnpm install` fails → skill reports the error; the operator can fix and re-run `pnpm install` manually.
 - Migration interrupted mid-copy (process crash, agent termination) → `migrate()` is idempotent: re-running skips files that already exist at the target with matching content. The operator can also delete `apps/<appName>/` and re-run for a clean migration.
 - Concurrent execution (two agents running `forge-bootstrap` transplant on the same forge project simultaneously) → the skill does not lock `apps/<appName>/`; concurrent writes may conflict. The operator should not run two transplant operations on the same project in parallel.

package/src/migration-adapters/git-utils.ts

@@ -9,6 +9,7 @@
 <CHANGE_SUMMARY>
   <item>RFC-0547: extract shared postSetup git logic from duplicated adapter implementations.</item>
   <item>Replace fs.rmSync with trashSync for patch directory cleanup (trash bin for LLM-initiated deletions).</item>
+  <item>Use --initial-branch=main for all git init calls so new repos default to main instead of master.</item>
 </CHANGE_SUMMARY>
 */
 
@@ -32,7 +33,7 @@ export function runPostSetup(
       execFileSync("git", ["-C", sourceDir, "format-patch", "--all", "-o", patchDir], {
         stdio: "pipe",
       });
-      execFileSync("git", ["init"], { cwd: targetDir, stdio: "pipe" });
+      execFileSync("git", ["init", "--initial-branch=main"], { cwd: targetDir, stdio: "pipe" });
       execFileSync("git", ["config", "user.email", "forge@warpgogol.dev"], {
         cwd: targetDir,
         stdio: "pipe",
@@ -60,12 +61,12 @@ export function runPostSetup(
         `forge: git history transfer failed, falling back to clean git init: ${err instanceof Error ? err.message : String(err)}`,
       );
       if (!fs.existsSync(gitDir)) {
-        execFileSync("git", ["init"], { cwd: targetDir, stdio: "pipe" });
+        execFileSync("git", ["init", "--initial-branch=main"], { cwd: targetDir, stdio: "pipe" });
       }
     }
   } else {
     if (!fs.existsSync(gitDir)) {
-      execFileSync("git", ["init"], { cwd: targetDir, stdio: "pipe" });
+      execFileSync("git", ["init", "--initial-branch=main"], { cwd: targetDir, stdio: "pipe" });
     }
   }
 }

package/src/onboarding/create.ts

@@ -17,11 +17,13 @@
   <item>RFC-0643: pass profileId to runInit so forge.yaml gets a `profile` field.</item>
   <item>RFC-0664: scaffold memory layer (.agents/memory/) after init.</item>
   <item>RFC-0877: in-place mode only — --in-place flag required, no subdirectory creation, name derived from folder, strict empty-directory check (only .git/ tolerated).</item>
+  <item>Initialize git repo with --initial-branch=main if .git does not exist (hard guard for main branch default).</item>
 </CHANGE_SUMMARY>
 */
 
 import fs from "node:fs";
 import path from "node:path";
+import { execFileSync } from "node:child_process";
 import { stringify as stringifyYaml } from "yaml";
 import { runScaffoldProject } from "./scaffold-project.ts";
 import { runInit, type InitResult, type InitDomainFields } from "./init.ts";
@@ -229,6 +231,23 @@ export async function runCreate(
     };
   }
 
+  // 6.5. Initialize git repo with main branch (if not already initialized)
+  // This is a hard guard — forge.create programmatically ensures main branch,
+  // so greenfield projects don't depend on the agent running git init correctly.
+  const gitDir = path.join(targetDir, ".git");
+  if (!fs.existsSync(gitDir)) {
+    try {
+      execFileSync("git", ["init", "--initial-branch=main"], { cwd: targetDir, stdio: "pipe" });
+      if (outputFormat === "pretty") {
+        logger.info("Initialized git repository with main branch");
+      }
+    } catch {
+      if (outputFormat === "pretty") {
+        logger.warn("Failed to initialize git repository — run 'git init --initial-branch=main' manually");
+      }
+    }
+  }
+
   // 7. Resolve forge root
   let forgeRoot: string;
   if (context.forgeRoot) {

package/src/onboarding/doctor.ts

@@ -23,6 +23,7 @@ Checks for forge.yaml, AGENTS.md, PREFERENCES.md, .agents/skills/, docs/rfcs/,
   <item>RFC-0664: added memory-layer health check (budget usage, gitignore coverage, daily-file leak risk).</item>
   <item>RFC-0704: added independent-version-packages check — validates that paths in independentVersionPackages exist and contain package.json.</item>
   <item>RFC-0941: added pack-manifests advisory check — validates forge.plugin.yaml existence and schema for each declared skill pack.</item>
+  <item>Added git-branch check — warns when current branch is 'master' instead of 'main'.</item>
 </CHANGE_SUMMARY>
 */
 
@@ -1074,6 +1075,39 @@ function checkMemoryLayer(workspaceRoot: string): DoctorCheck {
   };
 }
 
+// ---------------------------------------------------------------------------
+// Git branch check — warn if current branch is 'master' instead of 'main'
+// ---------------------------------------------------------------------------
+
+function checkGitBranch(workspaceRoot: string): DoctorCheck {
+  const gitDir = join(workspaceRoot, ".git");
+  if (!existsSync(gitDir)) {
+    return { name: "git-branch", status: "pass", message: "No git repository — git branch check skipped" };
+  }
+
+  try {
+    const branch = execSync("git branch --show-current", { cwd: workspaceRoot, stdio: "pipe", timeout: 5000 })
+      .toString()
+      .trim();
+
+    if (branch === "master") {
+      return {
+        name: "git-branch",
+        status: "warn",
+        message: "Current branch is 'master' — rename to 'main' with: git branch -m main",
+      };
+    }
+
+    return {
+      name: "git-branch",
+      status: "pass",
+      message: `Current branch: ${branch}`,
+    };
+  } catch {
+    return { name: "git-branch", status: "pass", message: "Unable to determine git branch — check skipped" };
+  }
+}
+
 // ---------------------------------------------------------------------------
 // Prerequisite checks (profile-declared system dependencies)
 // ---------------------------------------------------------------------------
@@ -1177,6 +1211,9 @@ export async function runDoctor(
       : "docs/adrs/ directory not found — run 'forge create' to create ADR directory",
   });
 
+  // Check git branch is 'main' (not 'master')
+  checks.push(checkGitBranch(workspaceRoot));
+
   // Check @warpgogol/* forbidden imports (autonomy guard)
   let forgeRoot: string;
   try {

package/src/tests/migration-adapters.test.ts

@@ -293,6 +293,27 @@ test("migrate excludes .git directory from copy", async () => {
   expect(existsSync(join(appDir, ".git"))).toBe(false);
 });
 
+test("postSetup creates main branch (not master) when gitHistory is false", async () => {
+  const sourceDir = join(tempDir, "source-main");
+  const targetDir = join(tempDir, "target-main");
+
+  await mkdir(sourceDir, { recursive: true });
+  await mkdir(targetDir, { recursive: true });
+  await writeFile(join(sourceDir, "package.json"), JSON.stringify({ name: "test-app" }));
+  await writeFile(join(sourceDir, "tsconfig.json"), "{}");
+  await writeFile(join(sourceDir, "pnpm-lock.yaml"), "");
+
+  const analysis = nodeTypescriptPnpmAdapter.analyze(sourceDir);
+  nodeTypescriptPnpmAdapter.postSetup(sourceDir, targetDir, analysis);
+
+  expect(existsSync(join(targetDir, ".git"))).toBe(true);
+  const { execSync } = await import("node:child_process");
+  const branch = execSync("git branch --show-current", { cwd: targetDir, stdio: "pipe" })
+    .toString()
+    .trim();
+  expect(branch).toBe("main");
+});
+
 test("postSetup runs git init when analysis.gitHistory is false", async () => {
   const sourceDir = join(tempDir, "source");
   const targetDir = join(tempDir, "target");

package/src/tests/profile-schema.test.ts

@@ -157,7 +157,7 @@ test("artifacts with missing required extensions field fails", () => {
 
 test("all shipped profiles parse without changes", () => {
   const profiles = listStackProfiles(FORGE_ROOT);
-  expect(profiles.length).toBe(4);
+  expect(profiles.length).toBe(5);
   for (const profile of profiles) {
     expect(profile.id).toBeDefined();
     expect(profile.workspace.dirs.length).toBeGreaterThan(0);

package/src/types/werkstatt-engine-shims.d.ts

@@ -18,6 +18,10 @@ declare module "@warpgogol/werkstatt-engine/os/werkstatt-commands-validate-modul
   export const werkstattCommandsValidateModule: any;
 }
 
+declare module "@warpgogol/werkstatt-engine/os/werkstatt-e2e-module" {
+  export const werkstattE2eModule: any;
+}
+
 declare module "@warpgogol/werkstatt-engine/kernel" {
   export function discoverSiteWorkspaces(...args: any[]): any;
   export function loadKernelAppConfig(...args: any[]): any;
@@ -36,6 +40,7 @@ declare module "@warpgogol/werkstatt-engine/kernel" {
   export const listRegisteredKernelPipelines: any;
   export const loadAppRuntime: any;
   export const executeKernelCommand: any;
+  export const executeRegisteredCommand: any;
   export const executeKernelPipeline: any;
   export const buildSchedule: any;
   export const executeScheduledSteps: any;
@@ -61,6 +66,8 @@ declare module "@warpgogol/werkstatt-engine/kernel" {
   export interface KernelNextStep {}
   export interface KernelCommandResult {}
   export interface CheckResult {}
+  export interface GeneratedArtifactSpec {}
+  export interface GeneratorOwnershipEntry {}
   export interface KernelRuntimeContext {}
   export interface KernelCommandDefinition {}
   export interface KernelPipelineStep {}
@@ -200,6 +207,7 @@ declare module "@warpgogol/werkstatt-engine/kernel" {
   export const parseNameOnlyOutput: any;
   export const isExempt: any;
   export const pipelineBudgetModule: any;
+  export const validatorInventoryModule: any;
   export const changeImpactModule: any;
   export const commandManifestModule: any;
   export const gitmeshModule: any;
@@ -255,8 +263,7 @@ declare module "@warpgogol/werkstatt-engine/kernel/change-impact-module" {
 }
 
 declare module "@warpgogol/werkstatt-engine/kernel/cli" {
-  const _: any;
-  export = _;
+  export function main(...args: any[]): any;
 }
 
 declare module "@warpgogol/werkstatt-engine/kernel/commit-message" {
@@ -340,6 +347,10 @@ declare module "@warpgogol/werkstatt-engine/kernel/pipeline-budgets" {
   export interface PipelineBudgetGenerateResult {}
 }
 
+declare module "@warpgogol/werkstatt-engine/kernel/validator-inventory" {
+  export const validatorInventoryModule: any;
+}
+
 declare module "@warpgogol/werkstatt-engine/kernel/semantic" {
   export const semanticModule: any;
 }
@@ -354,6 +365,7 @@ declare module "@warpgogol/werkstatt-engine/kernel/runtime" {
   export const listRegisteredKernelPipelines: any;
   export const loadAppRuntime: any;
   export const executeKernelCommand: any;
+  export const executeRegisteredCommand: any;
   export const executeKernelPipeline: any;
   export const buildSchedule: any;
   export const executeScheduledSteps: any;
@@ -382,6 +394,8 @@ declare module "@warpgogol/werkstatt-engine/kernel/types" {
   export interface KernelNextStep {}
   export interface KernelCommandResult {}
   export interface CheckResult {}
+  export interface GeneratedArtifactSpec {}
+  export interface GeneratorOwnershipEntry {}
   export interface KernelRuntimeContext {}
   export interface KernelCommandDefinition {}
   export interface KernelPipelineStep {}
@@ -459,6 +473,8 @@ declare module "@warpgogol/werkstatt-engine/mission" {
   export const MissionListData: any;
   export const runMissionMaterialize: any;
   export const MissionMaterializeData: any;
+  export const runMissionMaterializeInternal: any;
+  export const MissionMaterializeInternalOptions: any;
   export const runMissionValidate: any;
   export const MissionValidateData: any;
   export const runMissionBuild: any;
@@ -499,10 +515,17 @@ declare module "@warpgogol/werkstatt-engine/mission" {
   export const runMaterializeConfigValidate: any;
   export const runWorkpieceConfigPresenceCheck: any;
   export const WorkpieceConfigPresenceResult: any;
+  export const runMissionResume: any;
+  export const MissionResumeData: any;
+  export const runMissionJournalShow: any;
+  export const MissionJournalShowData: any;
+  export const runMissionPreflight: any;
+  export const MissionPreflightInput: any;
+  export const PreflightCheckResult: any;
+  export const MissionPreflightData: any;
 }
 
 declare module "@warpgogol/werkstatt-engine/sternsystem" {
-  export function createSternsystemModule(...args: any[]): any;
   export const runSternsystemRegister: any;
   export const SternsystemRegisterData: any;
   export const runSternsystemList: any;
@@ -519,6 +542,35 @@ declare module "@warpgogol/werkstatt-engine/sternsystem" {
   export const SternsystemStatusData: any;
   export const runSternsystemDiscover: any;
   export const SternsystemDiscoverData: any;
+  export const runSternsystemPassportGenerate: any;
+  export const SternsystemPassportGenerateData: any;
+  export const runSternsystemPassportVerify: any;
+  export const SternsystemPassportVerifyData: any;
+  export const runSternsystemHandoverPrepare: any;
+  export const SternsystemHandoverPrepareData: any;
+  export const runSternsystemHandoverComplete: any;
+  export const SternsystemHandoverCompleteData: any;
+  export const runSternsystemHandoverCancel: any;
+  export const SternsystemHandoverCancelData: any;
+  export const buildPassportPayload: any;
+  export const signPassport: any;
+  export const verifyPassport: any;
+  export const derivePublicKey: any;
+  export const computePassportHash: any;
+  export const SitePassportV1: any;
+  export const SignedSitePassport: any;
+  export const computeAuthorizationHash: any;
+  export const signAuthorization: any;
+  export const verifyAuthorization: any;
+  export const resolveAuthorizationPath: any;
+  export const readAuthorization: any;
+  export const writeAuthorization: any;
+  export const removeAuthorization: any;
+  export const isAuthorizationExpired: any;
+  export const HandoverAuthorizationV1: any;
+  export const SignedHandoverAuthorization: any;
+  export const HandoverCompleteResult: any;
+  export const HandoverEventMetadata: any;
   export const resolveCacheClonePath: any;
   export const resolveWorkpiecePath: any;
   export const readSystemConfig: any;
@@ -543,6 +595,9 @@ declare module "@warpgogol/werkstatt-engine/sternsystem" {
   export const resolveMirrorPath: any;
   export const MirrorResolution: any;
   export const resolveMirrors: any;
+  export const readPassport: any;
+  export const writePassport: any;
+  export const resolvePassportPath: any;
 }
 
 declare module "@warpgogol/werkstatt-engine/bordbuch" {
@@ -616,6 +671,15 @@ declare module "@warpgogol/werkstatt-engine/release" {
   export const runReleaseStateValidate: any;
   export const ReleaseStateValidateData: any;
   export const ReleaseStateCheck: any;
+  export const runBootSmokeCommand: any;
+  export const BootSmokeCommandData: any;
+  export const runBootSmoke: any;
+  export const BootSmokeResult: any;
+  export const BootSmokeRequestSpec: any;
+  export const BootSmokeRequestResult: any;
+  export const planBootSmokeRequests: any;
+  export const detectBootSmokeLanguages: any;
+  export const simulateBindings: any;
 }
 
 declare module "@warpgogol/werkstatt-engine/leitstand" {
@@ -721,15 +785,6 @@ declare module "@warpgogol/werkstatt-engine/handoff" {
   export const hasPlatformScopeFiles: any;
   export const extractTrailer: any;
   export const hasTrailer: any;
-  export const createSternsystemModule: any;
-  export const runSternsystemRegister: any;
-  export const runSternsystemList: any;
-  export const runSternsystemValidate: any;
-  export const runSternsystemPin: any;
-  export const SternsystemRegisterData: any;
-  export const SternsystemListData: any;
-  export const SternsystemValidateData: any;
-  export const SternsystemPinData: any;
   export const runWerkstattLockStatus: any;
   export const WerkstattLockStatusData: any;
   export const runWerkstattLockRecover: any;
@@ -809,6 +864,29 @@ declare module "@warpgogol/werkstatt-engine/leitstand-module" {
   export function createLeitstandModule(...args: any[]): any;
 }
 
+declare module "@warpgogol/werkstatt-engine/fleet" {
+  export const runFleetSitesGenerate: any;
+  export const validateFleetSitesDrift: any;
+  export const FleetSiteRecord: any;
+  export const runFleetApply: any;
+  export const FleetApplyResult: any;
+  export const FleetApplyReportEntry: any;
+  export const registerOwnership: any;
+  export const verifyOwnership: any;
+  export const transferOwnership: any;
+  export const deriveInstanceId: any;
+  export const OwnershipError: any;
+  export const OwnershipClaim: any;
+  export const RegisterResult: any;
+  export const VerifyResult: any;
+  export const TransferResult: any;
+  export const createFleetModule: any;
+}
+
+declare module "@warpgogol/werkstatt-engine/fleet-module" {
+  export function createFleetModule(...args: any[]): any;
+}
+
 declare module "@warpgogol/werkstatt-engine/subdomain-module" {
   export function createSubdomainModule(...args: any[]): any;
 }
@@ -845,6 +923,10 @@ declare module "@warpgogol/werkstatt-engine/nachweis-module" {
   export function createNachweisModule(...args: any[]): any;
 }
 
+declare module "@warpgogol/werkstatt-engine/sichtpass-module" {
+  export function createSichtpassModule(...args: any[]): any;
+}
+
 declare module "@warpgogol/werkstatt-engine/signing" {
   export const generateKeyPair: any;
   export const getPublicKey: any;
@@ -976,6 +1058,7 @@ declare module "@warpgogol/werkstatt-engine/agent-gate" {
 declare module "@warpgogol/werkstatt-engine/agent-gate/astro" {
   export function createAgentMcpRoute(...args: any[]): any;
   export function createAgentActionRoute(...args: any[]): any;
+  export function createAgentSearchRoute(...args: any[]): any;
 }
 
 declare module "@warpgogol/werkstatt-engine/changelog" {
@@ -1087,6 +1170,10 @@ declare module "@warpgogol/werkstatt-engine/testing/e2e" {
   export = _;
 }
 
+declare module "@warpgogol/werkstatt-engine/e2e" {
+  export const runColdE2e: any;
+}
+
 declare module "@warpgogol/werkstatt-engine/component-runtime/reflection" {
   export function toReflectedState(...args: any[]): any;
   export function createCapabilityCatalog(...args: any[]): any;