@warpgogol/forge 4.1.5 → 4.2.1

package/dist/os/core/handlers/determinism-check.js

@@ -0,0 +1,289 @@
+/*
+<MODULE_CONTRACT>
+<purpose>forge.determinism.check — verify artifact determinism by building twice and comparing output hashes. Profile-driven via determinism.inputs glob patterns.</purpose>
+<non-goals>
+  <item>Do not implement build or validate logic — those are separate handlers.</item>
+  <item>Do not import from @warpgogol/* in autonomous modules — os/core/ may import from @warpgogol/*.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0678: initial forge.determinism.check handler with profile resolution, --dry-run, --artifact, cache, and double-build hash comparison.</item>
+</CHANGE_SUMMARY>
+*/
+import { exec } from "node:child_process";
+import { promisify } from "node:util";
+import { readFile, writeFile, mkdir } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import { join, relative, dirname } from "node:path";
+import { createHash } from "node:crypto";
+import { loadWorkspaceDeps } from "../../werkstatt/handlers/workspace-deps.js";
+import { resolveActiveProfile, resolveLifecycleFlags } from "./profile-resolve.js";
+const execAsync = promisify(exec);
+function globToRegex(pattern) {
+    let regex = "";
+    let i = 0;
+    while (i < pattern.length) {
+        const char = pattern[i];
+        if (char === "*") {
+            if (pattern[i + 1] === "*") {
+                regex += ".*";
+                i += 2;
+                if (pattern[i] === "/")
+                    i++;
+            }
+            else {
+                regex += "[^/]*";
+                i++;
+            }
+        }
+        else if (char === "?") {
+            regex += "[^/]";
+            i++;
+        }
+        else if (".+^${}()|[]\\".includes(char)) {
+            regex += "\\" + char;
+            i++;
+        }
+        else {
+            regex += char;
+            i++;
+        }
+    }
+    return new RegExp("^" + regex + "$");
+}
+function matchesGlob(filePath, patterns) {
+    return patterns.some((pattern) => globToRegex(pattern).test(filePath));
+}
+async function computeInputHash(workspaceRoot, inputPatterns) {
+    const { collectFiles, byteHashFile } = await loadWorkspaceDeps();
+    const allFiles = await collectFiles(workspaceRoot, {
+        ignore: (name) => name.startsWith("-") ||
+            name.startsWith("old-") ||
+            name === "node_modules" ||
+            name === "dist" ||
+            name === ".turbo" ||
+            name === ".cache" ||
+            name === ".git",
+    });
+    const matched = allFiles
+        .map((abs) => relative(workspaceRoot, abs))
+        .filter((rel) => matchesGlob(rel, inputPatterns))
+        .sort();
+    const hasher = createHash("sha256");
+    for (const relPath of matched) {
+        const absPath = join(workspaceRoot, relPath);
+        const fileHash = await byteHashFile(absPath);
+        hasher.update(relPath + "\0" + fileHash + "\0");
+    }
+    return `sha256:${hasher.digest("hex")}`;
+}
+async function readCache(cachePath) {
+    try {
+        const content = await readFile(cachePath, "utf8");
+        return JSON.parse(content);
+    }
+    catch {
+        return { entries: {} };
+    }
+}
+async function writeCache(cachePath, cache) {
+    const dir = dirname(cachePath);
+    if (!existsSync(dir)) {
+        await mkdir(dir, { recursive: true });
+    }
+    await writeFile(cachePath, JSON.stringify(cache, null, 2) + "\n", "utf8");
+}
+export async function runDeterminismCheck(input, context) {
+    const { workspaceRoot, logger } = context;
+    const { dryRun, profileIdOverride } = resolveLifecycleFlags(input, context);
+    const artifactFilter = typeof input.flags["artifact"] === "string" ? input.flags["artifact"] : undefined;
+    const resolved = resolveActiveProfile(workspaceRoot, context.forgeRoot, profileIdOverride);
+    if (!resolved) {
+        return {
+            data: {
+                command: "forge.determinism.check",
+                profileId: "",
+                artifacts: [],
+                allDeterministic: false,
+            },
+            exitCode: 1,
+            summary: "No active profile found. Set `profile` in forge.yaml or use --profile <id>.",
+            nextSteps: [{ action: "Set profile in forge.yaml or use --profile <id>", kind: "required" }],
+        };
+    }
+    const { profile } = resolved;
+    if (!profile.artifacts || profile.artifacts.length === 0) {
+        return {
+            data: {
+                command: "forge.determinism.check",
+                profileId: profile.id,
+                artifacts: [],
+                allDeterministic: false,
+            },
+            exitCode: 1,
+            summary: `Profile ${profile.id} does not declare any artifacts.`,
+            nextSteps: [{ action: `Add artifacts section to profile ${profile.id}`, kind: "required" }],
+        };
+    }
+    if (artifactFilter) {
+        const found = profile.artifacts.find((a) => a.id === artifactFilter);
+        if (!found) {
+            return {
+                data: {
+                    command: "forge.determinism.check",
+                    profileId: profile.id,
+                    artifacts: [],
+                    allDeterministic: false,
+                },
+                exitCode: 1,
+                summary: `Artifact ${artifactFilter} not declared in profile ${profile.id}.`,
+                nextSteps: [{ action: `Check artifacts in profile ${profile.id}`, kind: "required" }],
+            };
+        }
+    }
+    const artifactsToCheck = artifactFilter
+        ? profile.artifacts.filter((a) => a.id === artifactFilter)
+        : profile.artifacts;
+    const hashableArtifacts = artifactsToCheck.filter((a) => a.determinism?.hashable === true);
+    if (hashableArtifacts.length === 0) {
+        return {
+            data: {
+                command: "forge.determinism.check",
+                profileId: profile.id,
+                artifacts: [],
+                allDeterministic: true,
+            },
+            exitCode: 0,
+            summary: `Profile ${profile.id} has no hashable artifacts — nothing to check.`,
+        };
+    }
+    if (dryRun) {
+        const items = hashableArtifacts.map((a) => ({
+            artifactId: a.id,
+            inputs: a.determinism.inputs,
+        }));
+        logger.info(`[dry-run] forge.determinism.check — profile: ${profile.id}`);
+        for (const item of items) {
+            logger.info(`  ${item.artifactId}: inputs=${item.inputs.join(", ")}`);
+        }
+        return {
+            data: {
+                command: "forge.determinism.check",
+                profileId: profile.id,
+                artifacts: items.map((item) => ({
+                    artifactId: item.artifactId,
+                    hashable: true,
+                    inputs: item.inputs,
+                    inputHash: "",
+                    firstBuildHash: null,
+                    secondBuildHash: null,
+                    deterministic: true,
+                    cached: false,
+                })),
+                allDeterministic: true,
+            },
+            summary: `[dry-run] ${items.length} hashable artifact(s) resolved`,
+        };
+    }
+    const cachePath = join(workspaceRoot, "dist", ".determinism-cache.json");
+    const cache = await readCache(cachePath);
+    const results = [];
+    for (const artifact of hashableArtifacts) {
+        const determinism = artifact.determinism;
+        const produceCommand = artifact.produce?.command ?? "";
+        const outputPath = artifact.produce?.output ?? "";
+        if (!produceCommand || !outputPath) {
+            results.push({
+                artifactId: artifact.id,
+                hashable: true,
+                inputs: determinism.inputs,
+                inputHash: "",
+                firstBuildHash: null,
+                secondBuildHash: null,
+                deterministic: false,
+                cached: false,
+                error: "Artifact has no produce.command or produce.output — cannot verify determinism",
+            });
+            logger.error(`  ${artifact.id}: no produce command or output`);
+            continue;
+        }
+        const inputHash = await computeInputHash(workspaceRoot, determinism.inputs);
+        const cacheKey = `${artifact.id}:${inputHash}:${produceCommand}`;
+        const cachedEntry = cache.entries[cacheKey];
+        if (cachedEntry) {
+            results.push({
+                artifactId: artifact.id,
+                hashable: true,
+                inputs: determinism.inputs,
+                inputHash,
+                firstBuildHash: cachedEntry.outputHash,
+                secondBuildHash: cachedEntry.outputHash,
+                deterministic: cachedEntry.deterministic,
+                cached: true,
+            });
+            logger.success(`  ${artifact.id}: cached (deterministic=${cachedEntry.deterministic})`);
+            continue;
+        }
+        const absOutputPath = join(workspaceRoot, outputPath);
+        try {
+            const { byteHashFile } = await loadWorkspaceDeps();
+            await execAsync(produceCommand, { cwd: workspaceRoot, timeout: 60_000 });
+            const firstHash = await byteHashFile(absOutputPath);
+            await execAsync(produceCommand, { cwd: workspaceRoot, timeout: 60_000 });
+            const secondHash = await byteHashFile(absOutputPath);
+            const deterministic = firstHash === secondHash;
+            results.push({
+                artifactId: artifact.id,
+                hashable: true,
+                inputs: determinism.inputs,
+                inputHash,
+                firstBuildHash: firstHash,
+                secondBuildHash: secondHash,
+                deterministic,
+                cached: false,
+            });
+            cache.entries[cacheKey] = {
+                inputHash,
+                produceCommand,
+                outputHash: firstHash,
+                deterministic,
+            };
+            if (deterministic) {
+                logger.success(`  ${artifact.id}: deterministic`);
+            }
+            else {
+                logger.error(`  ${artifact.id}: NON-DETERMINISTIC (hashes differ)`);
+            }
+        }
+        catch (err) {
+            const e = err;
+            results.push({
+                artifactId: artifact.id,
+                hashable: true,
+                inputs: determinism.inputs,
+                inputHash,
+                firstBuildHash: null,
+                secondBuildHash: null,
+                deterministic: false,
+                cached: false,
+                error: e.stderr ?? e.message,
+            });
+            logger.error(`  ${artifact.id}: build failed (${e.message})`);
+        }
+    }
+    await writeCache(cachePath, cache);
+    const allDeterministic = results.every((r) => r.deterministic);
+    return {
+        data: {
+            command: "forge.determinism.check",
+            profileId: profile.id,
+            artifacts: results,
+            allDeterministic,
+        },
+        exitCode: allDeterministic ? 0 : 1,
+        summary: allDeterministic
+            ? `forge.determinism.check: all ${results.length} artifact(s) deterministic`
+            : `forge.determinism.check: ${results.filter((r) => !r.deterministic).length} artifact(s) non-deterministic`,
+    };
+}
+//# sourceMappingURL=determinism-check.js.map

package/dist/os/core/handlers/determinism-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"determinism-check.js","sourceRoot":"","sources":["../../../../os/core/handlers/determinism-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;EAWE;AAEF,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAM/E,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAEnF,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAgClC,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC3B,KAAK,IAAI,IAAI,CAAC;gBACd,CAAC,IAAI,CAAC,CAAC;gBACP,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,CAAC,EAAE,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,KAAK,IAAI,OAAO,CAAC;gBACjB,CAAC,EAAE,CAAC;YACN,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,IAAI,MAAM,CAAC;YAChB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC;YACrB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,IAAI,CAAC;YACd,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,QAAkB;IACvD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,aAAqB,EAAE,aAAuB;IAC5E,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,aAAa,EAAE;QACjD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACpB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YACvB,IAAI,KAAK,cAAc;YACvB,IAAI,KAAK,MAAM;YACf,IAAI,KAAK,QAAQ;YACjB,IAAI,KAAK,QAAQ;YACjB,IAAI,KAAK,MAAM;KAClB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,QAAQ;SACrB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;SAC1C,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;SAChD,IAAI,EAAE,CAAC;IAEV,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,UAAU,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAiB;IACxC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,KAAgB;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAwB,EACxB,OAA4B;IAE5B,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5E,MAAM,cAAc,GAClB,OAAO,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAEhG,MAAM,QAAQ,GAAG,oBAAoB,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC3F,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,yBAAyB;gBAClC,SAAS,EAAE,EAAE;gBACb,SAAS,EAAE,EAAE;gBACb,gBAAgB,EAAE,KAAK;aACxB;YACD,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,6EAA6E;YACtF,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,iDAAiD,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SAC7F,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IAE7B,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,yBAAyB;gBAClC,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,SAAS,EAAE,EAAE;gBACb,gBAAgB,EAAE,KAAK;aACxB;YACD,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,WAAW,OAAO,CAAC,EAAE,kCAAkC;YAChE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,oCAAoC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SAC5F,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,IAAI,EAAE;oBACJ,OAAO,EAAE,yBAAyB;oBAClC,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,SAAS,EAAE,EAAE;oBACb,gBAAgB,EAAE,KAAK;iBACxB;gBACD,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,YAAY,cAAc,4BAA4B,OAAO,CAAC,EAAE,GAAG;gBAC5E,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,8BAA8B,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;aACtF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,cAAc;QACrC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,cAAc,CAAC;QAC1D,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAEtB,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC;IAE3F,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,yBAAyB;gBAClC,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,SAAS,EAAE,EAAE;gBACb,gBAAgB,EAAE,IAAI;aACvB;YACD,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,WAAW,OAAO,CAAC,EAAE,gDAAgD;SAC/E,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1C,UAAU,EAAE,CAAC,CAAC,EAAE;YAChB,MAAM,EAAE,CAAC,CAAC,WAAY,CAAC,MAAM;SAC9B,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,IAAI,CAAC,gDAAgD,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,yBAAyB;gBAClC,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBAC9B,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,SAAS,EAAE,EAAE;oBACb,cAAc,EAAE,IAAI;oBACpB,eAAe,EAAE,IAAI;oBACrB,aAAa,EAAE,IAAI;oBACnB,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBACH,gBAAgB,EAAE,IAAI;aACvB;YACD,OAAO,EAAE,aAAa,KAAK,CAAC,MAAM,gCAAgC;SACnE,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,OAAO,GAA6B,EAAE,CAAC;IAE7C,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAY,CAAC;QAC1C,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC;QAElD,IAAI,CAAC,cAAc,IAAI,CAAC,UAAU,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,SAAS,EAAE,EAAE;gBACb,cAAc,EAAE,IAAI;gBACpB,eAAe,EAAE,IAAI;gBACrB,aAAa,EAAE,KAAK;gBACpB,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,+EAA+E;aACvF,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,EAAE,gCAAgC,CAAC,CAAC;YAC/D,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,GAAG,QAAQ,CAAC,EAAE,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;QACjE,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE5C,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,SAAS;gBACT,cAAc,EAAE,WAAW,CAAC,UAAU;gBACtC,eAAe,EAAE,WAAW,CAAC,UAAU;gBACvC,aAAa,EAAE,WAAW,CAAC,aAAa;gBACxC,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,2BAA2B,WAAW,CAAC,aAAa,GAAG,CAAC,CAAC;YACxF,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAEtD,IAAI,CAAC;YACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,iBAAiB,EAAE,CAAC;YACnD,MAAM,SAAS,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,CAAC;YAEpD,MAAM,SAAS,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACzE,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,CAAC;YAErD,MAAM,aAAa,GAAG,SAAS,KAAK,UAAU,CAAC;YAE/C,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,SAAS;gBACT,cAAc,EAAE,SAAS;gBACzB,eAAe,EAAE,UAAU;gBAC3B,aAAa;gBACb,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG;gBACxB,SAAS;gBACT,cAAc;gBACd,UAAU,EAAE,SAAS;gBACrB,aAAa;aACd,CAAC;YAEF,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,EAAE,qCAAqC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAA2E,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,SAAS;gBACT,cAAc,EAAE,IAAI;gBACpB,eAAe,EAAE,IAAI;gBACrB,aAAa,EAAE,KAAK;gBACpB,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO;aAC7B,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,EAAE,mBAAmB,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,MAAM,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAEnC,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAE/D,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,yBAAyB;YAClC,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,SAAS,EAAE,OAAO;YAClB,gBAAgB;SACjB;QACD,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO,EAAE,gBAAgB;YACvB,CAAC,CAAC,gCAAgC,OAAO,CAAC,MAAM,4BAA4B;YAC5E,CAAC,CAAC,4BAA4B,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,gCAAgC;KAC/G,CAAC;AACJ,CAAC"}

package/dist/os/core/handlers/dev.d.ts

@@ -0,0 +1,10 @@
+import type { ForgeCommandInput, ForgeCommandResult, ForgeRuntimeContext } from "../../../src/types.ts";
+export interface ForgeDevResult {
+    command: "forge.dev";
+    profileId: string;
+    devServerCommand: string;
+    port?: number;
+    exitCode: number;
+}
+export declare function runDev(input: ForgeCommandInput, context: ForgeRuntimeContext): Promise<ForgeCommandResult<ForgeDevResult>>;
+//# sourceMappingURL=dev.d.ts.map

package/dist/os/core/handlers/dev.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../../../os/core/handlers/dev.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAG/B,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,MAAM,CAC1B,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CA8F7C"}

package/dist/os/core/handlers/dev.js

@@ -0,0 +1,102 @@
+/*
+<MODULE_CONTRACT>
+<purpose>forge.dev — start the dev/preview server declared in the active stack profile. Supports --dry-run to print the resolved command without executing.</purpose>
+<non-goals>
+  <item>Do not implement build or validate logic — those are separate handlers.</item>
+  <item>Do not import from @warpgogol/* — this module is portable.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0674: initial forge.dev handler with profile resolution, --dry-run, and SIGINT handling.</item>
+</CHANGE_SUMMARY>
+*/
+import { spawn } from "node:child_process";
+import { resolveActiveProfile, resolveLifecycleFlags } from "./profile-resolve.js";
+export async function runDev(input, context) {
+    const { workspaceRoot, logger } = context;
+    const { dryRun, profileIdOverride } = resolveLifecycleFlags(input, context);
+    const resolved = resolveActiveProfile(workspaceRoot, context.forgeRoot, profileIdOverride);
+    if (!resolved) {
+        return {
+            data: {
+                command: "forge.dev",
+                profileId: "",
+                devServerCommand: "",
+                exitCode: 1,
+            },
+            exitCode: 1,
+            summary: "No active profile found. Set `profile` in forge.yaml or use --profile <id>.",
+            nextSteps: [{ action: "Set profile in forge.yaml or use --profile <id>", kind: "required" }],
+        };
+    }
+    const { profile } = resolved;
+    if (!profile.devServer) {
+        return {
+            data: {
+                command: "forge.dev",
+                profileId: profile.id,
+                devServerCommand: "",
+                exitCode: 1,
+            },
+            exitCode: 1,
+            summary: `Profile ${profile.id} does not declare a devServer.`,
+            nextSteps: [{ action: `Add devServer section to profile ${profile.id}`, kind: "required" }],
+        };
+    }
+    const { command, port } = profile.devServer;
+    if (dryRun) {
+        logger.info(`[dry-run] forge.dev — profile: ${profile.id}`);
+        logger.info(`  command: ${command}`);
+        if (port)
+            logger.info(`  port: ${port}`);
+        return {
+            data: {
+                command: "forge.dev",
+                profileId: profile.id,
+                devServerCommand: command,
+                port,
+                exitCode: 0,
+            },
+            summary: `[dry-run] ${command}`,
+        };
+    }
+    return new Promise((resolve) => {
+        const child = spawn(command, {
+            shell: true,
+            stdio: "inherit",
+            cwd: workspaceRoot,
+        });
+        const onSigint = () => {
+            child.kill("SIGINT");
+        };
+        process.once("SIGINT", onSigint);
+        child.on("close", (code) => {
+            process.removeListener("SIGINT", onSigint);
+            resolve({
+                data: {
+                    command: "forge.dev",
+                    profileId: profile.id,
+                    devServerCommand: command,
+                    port,
+                    exitCode: code ?? 0,
+                },
+                summary: `forge.dev exited with code ${code ?? 0}`,
+            });
+        });
+        child.on("error", (err) => {
+            process.removeListener("SIGINT", onSigint);
+            resolve({
+                data: {
+                    command: "forge.dev",
+                    profileId: profile.id,
+                    devServerCommand: command,
+                    port,
+                    exitCode: 1,
+                },
+                exitCode: 1,
+                summary: `forge.dev failed: ${err.message}`,
+            });
+        });
+    });
+}
+//# sourceMappingURL=dev.js.map

package/dist/os/core/handlers/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../../../../os/core/handlers/dev.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;EAWE;AAEF,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAM3C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAUnF,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,KAAwB,EACxB,OAA4B;IAE5B,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAE5E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC3F,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,EAAE;gBACb,gBAAgB,EAAE,EAAE;gBACpB,QAAQ,EAAE,CAAC;aACZ;YACD,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,6EAA6E;YACtF,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,iDAAiD,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SAC7F,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IAE7B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,gBAAgB,EAAE,EAAE;gBACpB,QAAQ,EAAE,CAAC;aACZ;YACD,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,WAAW,OAAO,CAAC,EAAE,gCAAgC;YAC9D,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,oCAAoC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SAC5F,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAE5C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,kCAAkC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;QACrC,IAAI,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,gBAAgB,EAAE,OAAO;gBACzB,IAAI;gBACJ,QAAQ,EAAE,CAAC;aACZ;YACD,OAAO,EAAE,aAAa,OAAO,EAAE;SAChC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,OAAO,CAAqC,CAAC,OAAO,EAAE,EAAE;QACjE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;YAC3B,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,aAAa;SACnB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAEjC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC3C,OAAO,CAAC;gBACN,IAAI,EAAE;oBACJ,OAAO,EAAE,WAAW;oBACpB,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,gBAAgB,EAAE,OAAO;oBACzB,IAAI;oBACJ,QAAQ,EAAE,IAAI,IAAI,CAAC;iBACpB;gBACD,OAAO,EAAE,8BAA8B,IAAI,IAAI,CAAC,EAAE;aACnD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC3C,OAAO,CAAC;gBACN,IAAI,EAAE;oBACJ,OAAO,EAAE,WAAW;oBACpB,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,gBAAgB,EAAE,OAAO;oBACzB,IAAI;oBACJ,QAAQ,EAAE,CAAC;iBACZ;gBACD,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,qBAAqB,GAAG,CAAC,OAAO,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/os/core/handlers/forge-autonomy-validate.d.ts

@@ -0,0 +1,18 @@
+import type { ForgeCommandInput, ForgeCommandResult, ForgeRuntimeContext } from "../../../src/types.ts";
+export interface ForgeAutonomyViolation {
+    ruleId: "FORGE-AUTONOMY-01";
+    file: string;
+    specifier: string;
+}
+export interface ForgeAutonomyValidateResult {
+    command: "forge.autonomy.validate";
+    status: "pass" | "fail";
+    violations: ForgeAutonomyViolation[];
+    scannedFiles: number;
+    modules: Record<string, {
+        runtime: "autonomous" | "werkstatt-adapter";
+        violations: number;
+    }>;
+}
+export declare function runForgeAutonomyValidate(_input: ForgeCommandInput, context: ForgeRuntimeContext): Promise<ForgeCommandResult<ForgeAutonomyValidateResult>>;
+//# sourceMappingURL=forge-autonomy-validate.d.ts.map

package/dist/os/core/handlers/forge-autonomy-validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge-autonomy-validate.d.ts","sourceRoot":"","sources":["../../../../os/core/handlers/forge-autonomy-validate.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAmD/B,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,yBAAyB,CAAC;IACnC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,UAAU,EAAE,sBAAsB,EAAE,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,YAAY,GAAG,mBAAmB,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9F;AAaD,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAC,CAuD1D"}

package/dist/os/core/handlers/forge-autonomy-validate.js

@@ -0,0 +1,115 @@
+/*
+<MODULE_CONTRACT>
+<purpose>forge.autonomy.validate — scans packages/forge/os/** for forbidden
+@warpgogol/werkstatt-engine imports outside os/werkstatt/. Enforces FORGE-AUTONOMY-01
+(RFC-0940, DNA-64). @warpgogol/werkstatt-shared is exempt (shared infrastructure).
+Type-only imports (import type) are exempt.</purpose>
+<keywords>autonomy, guard, RFC-0940, DNA-64, forge, import boundary</keywords>
+<non-goals>
+  <item>Does not scan test files — .test.ts and .spec.ts are always excluded.</item>
+  <item>Does not scan os/werkstatt/ — the adapter directory may import @warpgogol/werkstatt-engine.</item>
+  <item>Does not flag @warpgogol/werkstatt-shared — shared infrastructure, not the engine.</item>
+  <item>Does not flag import type statements — type-only imports are erased at compile time.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0940: initial forge.autonomy.validate handler implementing FORGE-AUTONOMY-01.</item>
+  <item>ADR-0019: inlined scanDirectoryForImports to make forge dependency-free.</item>
+</CHANGE_SUMMARY>
+*/
+import { readdir, readFile } from "node:fs/promises";
+import { join, relative } from "node:path";
+const FORBIDDEN_PACKAGE = "@warpgogol/werkstatt-engine";
+const ADAPTER_DIR_PREFIX = "packages/forge/os/werkstatt/";
+const EXCLUDE_DIRS = new Set(["node_modules", "tests", "tests-handoff", "dist", "templates"]);
+const EXCLUDE_SUFFIXES = [".test.ts", ".spec.ts"];
+const IMPORT_PATTERN = /(?:^|\n)\s*(?:import\s+(?:type\s+)?[^;]+?\s+from\s+|require\s*\(\s*)["'`]([^"'`]+)["'`]/g;
+function shouldExcludeFile(fileName) {
+    return EXCLUDE_SUFFIXES.some((suffix) => fileName.endsWith(suffix));
+}
+async function scanDirectoryForImports(dir, workspaceRoot, specifierFilter) {
+    let scannedFiles = 0;
+    const violations = [];
+    const entries = await readdir(dir, { withFileTypes: true }).catch(() => []);
+    for (const entry of entries) {
+        const fullPath = join(dir, entry.name);
+        if (entry.isDirectory()) {
+            if (EXCLUDE_DIRS.has(entry.name))
+                continue;
+            const subResult = await scanDirectoryForImports(fullPath, workspaceRoot, specifierFilter);
+            scannedFiles += subResult.scannedFiles;
+            violations.push(...subResult.violations);
+        }
+        else if (entry.name.endsWith(".ts") && !shouldExcludeFile(entry.name)) {
+            scannedFiles++;
+            const content = await readFile(fullPath, "utf8").catch(() => "");
+            let match;
+            const pattern = new RegExp(IMPORT_PATTERN.source, "g");
+            while ((match = pattern.exec(content)) !== null) {
+                const specifier = match[1];
+                if (specifierFilter(specifier)) {
+                    violations.push({
+                        file: relative(workspaceRoot, fullPath),
+                        specifier,
+                    });
+                }
+            }
+        }
+    }
+    return { violations, scannedFiles };
+}
+function isTypeOnlyImport(content, specifier) {
+    const specifierIdx = content.indexOf(specifier);
+    if (specifierIdx === -1)
+        return false;
+    const importStart = content.lastIndexOf("import", specifierIdx);
+    if (importStart === -1)
+        return false;
+    const importLine = content.slice(importStart, specifierIdx);
+    return /\bimport\s+type\b/.test(importLine);
+}
+export async function runForgeAutonomyValidate(_input, context) {
+    const workspaceRoot = context.workspaceRoot;
+    const forgeOsDir = join(workspaceRoot, "packages", "forge", "os");
+    const { violations: rawViolations, scannedFiles } = await scanDirectoryForImports(forgeOsDir, workspaceRoot, (specifier) => specifier === FORBIDDEN_PACKAGE || specifier.startsWith(FORBIDDEN_PACKAGE + "/"));
+    const violations = [];
+    for (const v of rawViolations) {
+        if (v.file.startsWith(ADAPTER_DIR_PREFIX))
+            continue;
+        const fullPath = join(workspaceRoot, v.file);
+        const content = await readFile(fullPath, "utf8").catch(() => "");
+        if (!isTypeOnlyImport(content, v.specifier)) {
+            violations.push({
+                ruleId: "FORGE-AUTONOMY-01",
+                file: v.file,
+                specifier: v.specifier,
+            });
+        }
+    }
+    const modules = {};
+    for (const v of violations) {
+        const parts = v.file.split("/");
+        const modKey = parts.slice(0, 4).join("/");
+        if (!modules[modKey]) {
+            const isAdapter = v.file.startsWith(ADAPTER_DIR_PREFIX);
+            modules[modKey] = {
+                runtime: isAdapter ? "werkstatt-adapter" : "autonomous",
+                violations: 0,
+            };
+        }
+        modules[modKey].violations++;
+    }
+    const status = violations.length === 0 ? "pass" : "fail";
+    return {
+        data: {
+            command: "forge.autonomy.validate",
+            status,
+            violations,
+            scannedFiles,
+            modules,
+        },
+        exitCode: status === "pass" ? 0 : 1,
+        summary: `[forge.autonomy.validate] ${status.toUpperCase()} — ${violations.length} violation(s) across ${scannedFiles} files`,
+    };
+}
+//# sourceMappingURL=forge-autonomy-validate.js.map

package/dist/os/core/handlers/forge-autonomy-validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forge-autonomy-validate.js","sourceRoot":"","sources":["../../../../os/core/handlers/forge-autonomy-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;EAkBE;AAEF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAO3C,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;AACxD,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;AAE1D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAC9F,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAClD,MAAM,cAAc,GAClB,0FAA0F,CAAC;AAE7F,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,GAAW,EACX,aAAqB,EACrB,eAA+C;IAE/C,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,UAAU,GAA0C,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAE5E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC3C,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;YAC1F,YAAY,IAAI,SAAS,CAAC,YAAY,CAAC;YACvC,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxE,YAAY,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACjE,IAAI,KAA6B,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACvD,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBAC5B,IAAI,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC/B,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;wBACvC,SAAS;qBACV,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AACtC,CAAC;AAgBD,SAAS,gBAAgB,CAAC,OAAe,EAAE,SAAiB;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,YAAY,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAEtC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAChE,IAAI,WAAW,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAErC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC5D,OAAO,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAyB,EACzB,OAA4B;IAE5B,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAElE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,MAAM,uBAAuB,CAC/E,UAAU,EACV,aAAa,EACb,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,iBAAiB,IAAI,SAAS,CAAC,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAChG,CAAC;IAEF,MAAM,UAAU,GAA6B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAAE,SAAS;QAEpD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5C,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,mBAAmB;gBAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAGT,EAAE,CAAC;IACP,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;YACxD,OAAO,CAAC,MAAM,CAAC,GAAG;gBAChB,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY;gBACvD,UAAU,EAAE,CAAC;aACd,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,CAAE,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAEzD,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,yBAAyB;YAClC,MAAM;YACN,UAAU;YACV,YAAY;YACZ,OAAO;SACR;QACD,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO,EAAE,6BAA6B,MAAM,CAAC,WAAW,EAAE,MAAM,UAAU,CAAC,MAAM,wBAAwB,YAAY,QAAQ;KAC9H,CAAC;AACJ,CAAC"}

package/dist/os/core/handlers/knowledge-compact.d.ts

@@ -0,0 +1,4 @@
+import type { ForgeCommandInput, ForgeCommandResult, ForgeRuntimeContext } from "../../../src/types.ts";
+import { type CompactReport } from "../../../src/knowledge/compact.ts";
+export declare function runKnowledgeCompact(input: ForgeCommandInput, context: ForgeRuntimeContext): Promise<ForgeCommandResult<CompactReport>>;
+//# sourceMappingURL=knowledge-compact.d.ts.map

package/dist/os/core/handlers/knowledge-compact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge-compact.d.ts","sourceRoot":"","sources":["../../../../os/core/handlers/knowledge-compact.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,mCAAmC,CAAC;AAgF3C,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CA4I5C"}