@warpgogol/werkstatt-shared 0.14.0 → 0.15.0

package/src/fingerprint/index.ts

@@ -0,0 +1,12 @@
+/*
+<MODULE_CONTRACT>
+  <purpose>Barrel export for @warpgogol/werkstatt-shared/fingerprint sub-path. Re-exports canonical JSON and hashing primitives sunk from @warpgogol/werkstatt-engine per RFC-1104.</purpose>
+  <non-goals>Does not re-export engine fingerprint modules that stay in engine (fingerprint.ts, path-matcher.ts, normalizers).</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-1104: initial barrel — canonical-json + primitives sunk from werkstatt-engine.</item>
+</CHANGE_SUMMARY>
+*/
+
+export * from "./canonical-json.ts";
+export * from "./primitives.ts";

package/src/fingerprint/primitives.ts

@@ -0,0 +1,72 @@
+/*
+<MODULE_CONTRACT>
+<purpose>RFC-0364, RFC-0849: Lightweight hashing primitives — byte hashing, stable JSON hashing, and Sha256Digest opaque type. No parser dependencies.</purpose>
+<non-goals>
+  <item>Do not implement file-type normalizers — those live in normalizers/.</item>
+  <item>Do not implement tree fingerprinting — that lives in fingerprint.ts.</item>
+  <item>Do not implement canonical JSON — that lives in canonical-json.ts.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0849: add Sha256Digest branded type, isSha256Digest guard, and narrower byteHash/byteHashFile returns. Existing string consumers remain compatible.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
+</CHANGE_SUMMARY>
+*/
+
+import { createReadStream } from "node:fs";
+import { createHash } from "node:crypto";
+
+declare const sha256DigestBrand: unique symbol;
+
+export type Sha256Digest = `sha256:${string}` & {
+  readonly [sha256DigestBrand]: true;
+};
+
+const SHA256_DIGEST_RE = /^sha256:[0-9a-f]{64}$/;
+
+export function isSha256Digest(value: unknown): value is Sha256Digest {
+  return typeof value === "string" && SHA256_DIGEST_RE.test(value);
+}
+
+export function byteHash(bytes: Uint8Array | string): Sha256Digest {
+  const input = typeof bytes === "string" ? Buffer.from(bytes, "utf8") : bytes;
+  return `sha256:${createHash("sha256").update(input).digest("hex")}` as Sha256Digest;
+}
+
+export async function byteHashFile(absPath: string): Promise<Sha256Digest> {
+  return new Promise((resolve, reject) => {
+    const stream = createReadStream(absPath);
+    const chunks: Buffer[] = [];
+    stream.on("data", (chunk) => chunks.push(chunk as Buffer));
+    stream.on("error", reject);
+    stream.on("end", () => {
+      const buf = Buffer.concat(chunks);
+      resolve(byteHash(buf));
+    });
+  });
+}
+
+function sortForJson(value: unknown): unknown {
+  if (Array.isArray(value)) return value.map(sortForJson);
+  if (value && typeof value === "object") {
+    return Object.fromEntries(
+      Object.entries(value as Record<string, unknown>)
+        .sort(([a], [b]) => a.localeCompare(b))
+        .map(([key, nested]) => [key, sortForJson(nested)]),
+    );
+  }
+  return value;
+}
+
+export function stableStringify(value: unknown): string {
+  return JSON.stringify(sortForJson(value));
+}
+
+export function stableJsonHash(value: unknown): string {
+  return byteHash(stableStringify(value));
+}

package/src/{share/i18n → i18n}/localization.ts

@@ -12,8 +12,12 @@ provides the reusable logic without hard-coding any language list.
 </non-goals>
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
-  <item>Initial extraction from app utils/localization into packages/share.</item>
-  <item>Refactored to factory pattern so LANGUAGE_MAPPING stays in each app and the shared logic is truly app-agnostic.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
 </CHANGE_SUMMARY>
 */
 

package/src/integration/adapters.ts

@@ -1,9 +1,10 @@
 /*
 <MODULE_CONTRACT>
 <purpose>RFC-0168/0181: reference Integration Port adapters. Channel adapters (Telegram, WhatsApp
-Cloud API) and a CRM adapter (Pipedrive). Each is fetch-based, secret-driven, and self-disables when
+Cloud API). Each is fetch-based, secret-driven, and self-disables when
 its required secrets are absent. Email is NOT a fetch adapter — it is sent via Cloudflare Email
-Routing (send_email binding) in the delivery callback (RFC-0181).</purpose>
+Routing (send_email binding) in the delivery callback (RFC-0181). CRM is handled by the Lagebild
+destination adapter in lagebild-destination-adapter.ts.</purpose>
 <non-goals>
   <item>Do not import vendor SDKs or astro:env — fetch + injected secrets only.</item>
   <item>Do not log or echo secrets.</item>
@@ -11,19 +12,16 @@ Routing (send_email binding) in the delivery callback (RFC-0181).</purpose>
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
   <item>RFC-0168: initial implementation.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
 </CHANGE_SUMMARY>
 */
 
-import type {
-  CrmAdapter,
-  DestinationAdapter,
-  IntegrationChannelAdapter,
-  IntegrationEvent,
-  IntegrationSecrets,
-  Lead,
-  LeadMessage,
-} from "./port.ts";
-import { eventToLead } from "./port.ts";
+import type { IntegrationChannelAdapter, IntegrationSecrets, LeadMessage } from "./port.ts";
 
 function formatMessageText(message: LeadMessage): string {
   return [
@@ -82,62 +80,3 @@ export const whatsappChannelAdapter: IntegrationChannelAdapter = {
     if (!res.ok) throw new Error(`whatsapp: Cloud API ${res.status}`);
   },
 };
-
-export const pipedriveCrmAdapter: CrmAdapter = {
-  id: "pipedrive",
-  requiredSecrets: ["INTEGRATION_PIPEDRIVE_API_TOKEN", "INTEGRATION_PIPEDRIVE_DOMAIN"],
-  async upsertLead(lead: Lead, secrets: IntegrationSecrets): Promise<{ id: string } | null> {
-    const token = secrets.INTEGRATION_PIPEDRIVE_API_TOKEN;
-    const domain = secrets.INTEGRATION_PIPEDRIVE_DOMAIN;
-    if (!token || !domain) throw new Error("pipedrive: missing credentials");
-    // Create a person first (leads require a linked person/organization in Pipedrive).
-    const personRes = await fetch(
-      `https://${domain}.pipedrive.com/api/v1/persons?api_token=${encodeURIComponent(token)}`,
-      {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({
-          name: lead.name ?? lead.email ?? lead.phone ?? "Website lead",
-          ...(lead.email ? { email: [lead.email] } : {}),
-          ...(lead.phone ? { phone: [lead.phone] } : {}),
-        }),
-      },
-    );
-    if (!personRes.ok) throw new Error(`pipedrive: persons API ${personRes.status}`);
-    const personJson = (await personRes.json()) as { data?: { id?: number } };
-    const personId = personJson.data?.id;
-    if (!personId) return null;
-
-    const leadRes = await fetch(
-      `https://${domain}.pipedrive.com/api/v1/leads?api_token=${encodeURIComponent(token)}`,
-      {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({
-          title: `${lead.source}: ${lead.name ?? "lead"}`,
-          person_id: personId,
-        }),
-      },
-    );
-    if (!leadRes.ok) throw new Error(`pipedrive: leads API ${leadRes.status}`);
-    const leadJson = (await leadRes.json()) as { data?: { id?: string } };
-    return leadJson.data?.id ? { id: String(leadJson.data.id) } : null;
-  },
-};
-
-/**
- * RFC-0176: Pipedrive as a destination-hub adapter (kind `crm`, mode `gogol-adapter`).
- * Runs on the client's site with the client's token. Reuses the RFC-0168
- * pipedriveCrmAdapter by mapping the normalized IntegrationEvent → Lead.
- */
-export const pipedriveDestinationAdapter: DestinationAdapter = {
-  kind: "crm",
-  vendor: "pipedrive",
-  requiredSecrets: pipedriveCrmAdapter.requiredSecrets,
-  async route(
-    event: IntegrationEvent,
-    secrets: IntegrationSecrets,
-  ): Promise<{ id: string } | null> {
-    return pipedriveCrmAdapter.upsertLead(eventToLead(event), secrets);
-  },
-};

package/src/integration/dispatch.ts

@@ -52,7 +52,7 @@ export async function executeDispatch(
 /**
  * Minimal structural type for a Workers-for-Platforms dynamic-dispatch binding.
  * `get(siteId)` returns the tenant Worker's fetcher; we never import the platform
- * types (keeps @warpgogol/werkstatt-shared/share runtime-agnostic, mirroring QueueBinding/KvDedupStore).
+ * types (keeps @warpgogol/werkstatt-shared runtime-agnostic, mirroring QueueBinding/KvDedupStore).
  */
 export interface DispatchNamespaceBinding {
   get(siteId: string): { fetch(request: Request): Promise<Response> };

package/src/integration/funnel.ts

@@ -14,7 +14,12 @@ types + constants + pure helpers — no I/O, no astro:env, no vendor SDK.</purpo
 <CHANGE_SUMMARY>
   <item>RFC-0188 Phase 2 (contract): initial funnel stage/event/transition contracts.</item>
   <item>RFC-0219: add FUNNEL_SYSTEM_TRIGGERS, FunnelTransitionTrigger, FUNNEL_TRANSITION_TRIGGERS — trigger overlay for the state-chart generator.</item>
-  <item>Cleanup: move BUFFER_DEAL_STAGES, FUNNEL_STAGE_TO_BUFFER_STAGE, bridgeFunnelStage, SYNC_OUTBOX_STATUSES, SYNC_OUTBOX_OPS from deleted crm-buffer.ts into this module.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
 </CHANGE_SUMMARY>
 */
 

package/src/integration/index.ts

@@ -4,7 +4,7 @@
   RFC-0168: Integration Port barrel. Re-exports types from port.ts,
   funnel.ts, lifecycle.ts, sharding.ts, dispatch.ts, qstash.ts, and runtime
   orchestration (registries + fan-out) from orchestration.ts. Type-only consumers
-  import from `./port-barrel.ts` (`@warpgogol/werkstatt-shared/share/integration/port`)
+  import from `./port-barrel.ts` (`@warpgogol/werkstatt-shared/integration/port`)
   to avoid transitively pulling in adapter implementations; consumers needing
   runtime logic import from here — the orchestration module is re-exported transparently.
 </purpose>
@@ -15,12 +15,106 @@
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
   <item>RFC-0168: initial implementation.</item>
-  <item>Deepening: split orchestration (registries + fan-out) into orchestration.ts; index.ts is now a pure barrel.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
+  <item>RFC-1106: step 6 — delete integration port-barrel
+
+port-barrel.ts deleted; its explicit contract re-exports absorbed into integration/index.ts. The site domain/integration barrel rewires to explicit names from the shared barrel. ./integration/port-barrel export entry removed; ./integration/port (→ port.ts) stays — engine agent-gate consumers unaffected.</item>
 </CHANGE_SUMMARY>
 */
 
-// Port-barrel re-exports all type/contract modules explicitly.
-export * from "./port-barrel.ts";
+// RFC-1106: port-barrel.ts is deleted — its explicit contract re-exports live here.
+export type { IntegrationSecrets } from "./port.ts";
+export type { LeadMessage, Lead, IntegrationChannelAdapter, CrmAdapter } from "./port.ts";
+export type { IntegrationEvent, DestinationAdapter } from "./port.ts";
+export { DESTINATION_KINDS, EXECUTION_MODES, eventToLeadMessage, eventToLead } from "./port.ts";
+export type { DestinationKind, ExecutionMode } from "./port.ts";
+
+export type {
+  VisitorFunnelEventPayload,
+  FunnelSystemTrigger,
+  FunnelTransitionTrigger,
+} from "./funnel.ts";
+export {
+  FUNNEL_VERSION,
+  VISITOR_FUNNEL_STAGES,
+  FUNNEL_ENTRY_STAGE,
+  FUNNEL_TERMINAL_STAGES,
+  VISITOR_FUNNEL_EVENT_KINDS,
+  VISITOR_FUNNEL_INTENTS,
+  VISITOR_FUNNEL_SOURCES,
+  VISITOR_BUYER_TYPES,
+  FUNNEL_TRANSITIONS,
+  isValidFunnelStage,
+  BUFFER_DEAL_STAGES,
+  FUNNEL_STAGE_TO_BUFFER_STAGE,
+  bridgeFunnelStage,
+  SYNC_OUTBOX_STATUSES,
+  SYNC_OUTBOX_OPS,
+  canTransition,
+  nextStages,
+  reachableStages,
+  FUNNEL_SYSTEM_TRIGGERS,
+  FUNNEL_TRANSITION_TRIGGERS,
+  LEGACY_FUNNEL_STAGES,
+  scanForMakeComReferences,
+} from "./funnel.ts";
+export type {
+  VisitorFunnelStage,
+  VisitorFunnelEventKind,
+  VisitorFunnelIntent,
+  VisitorFunnelSource,
+  VisitorBuyerType,
+  BufferDealStage,
+  SyncOutboxStatus,
+  SyncOutboxOp,
+} from "./funnel.ts";
+
+export type { LifecycleEventPayload } from "./lifecycle.ts";
+export {
+  LIFECYCLE_EVENT_KINDS,
+  SUBSCRIPTION_STATUSES,
+  INVOICE_KINDS,
+  INVOICE_STATUSES,
+  SUBSCRIPTION_PLANS,
+  LifecycleEventPayloadSchema,
+  isLifecycleEventKind,
+  SUBSCRIPTION_TRANSITIONS,
+  SUBSCRIPTION_TRANSITION_TRIGGERS,
+} from "./lifecycle.ts";
+export type {
+  LifecycleEventKind,
+  SubscriptionStatus,
+  InvoiceKind,
+  InvoiceStatus,
+  SubscriptionPlan,
+} from "./lifecycle.ts";
+
+export type { ShardAssignment, ResolveShardOptions } from "./sharding.ts";
+export { DELIVERY_REGIONS, DELIVERY_TIERS, fnv1a, resolveShard } from "./sharding.ts";
+export type { DeliveryRegion, DeliveryTier } from "./sharding.ts";
+
+export type {
+  DispatchExecuteRequest,
+  DispatchExecuteResult,
+  DispatchNamespaceBinding,
+  DispatchOutcome,
+} from "./dispatch.ts";
+export { DISPATCH_ROUTE, executeDispatch, dispatchToTenant } from "./dispatch.ts";
+
+export type { QstashPublishConfig, IdempotencyLedger, RestRedisConfig } from "./qstash.ts";
+export {
+  QSTASH_EU_BASE,
+  UPSTASH_QSTASH_SECRETS,
+  UPSTASH_REDIS_SECRETS,
+  UPSTASH_DELIVERY_SECRETS,
+  buildQstashPublish,
+  restRedisLedger,
+} from "./qstash.ts";
 
 // Runtime modules — explicit re-exports to keep the public API surface clear.
 export type {
@@ -71,3 +165,6 @@ export {
   type ExplicitPolicyAssertion,
   type PolicyAssertionKind,
 } from "./lagebild-ingress.ts";
+
+// Lagebild destination adapter (RFC-0176: wraps submitIngress as a DestinationAdapter)
+export { lagebildDestinationAdapter } from "./lagebild-destination-adapter.ts";

package/src/integration/lagebild-destination-adapter.ts

@@ -0,0 +1,108 @@
+/*
+<MODULE_CONTRACT>
+<purpose>
+  RFC-0176: Lagebild as a destination-hub adapter (kind `crm`, vendor `lagebild`).
+  Wraps the Lagebild ingress client (submitIngress) in the DestinationAdapter
+  contract so the delivery callback can route IntegrationEvents to Lagebild via
+  the standard extraAdapters injection — with QStash retries, DLQ, and Redis
+  idempotency preserved end-to-end.
+</purpose>
+<non-goals>
+  <item>Do not import astro:env — secrets are injected by the caller.</item>
+  <item>Do not log or echo secrets.</item>
+  <item>Do not modify the WebsiteIngress v1 contract — this adapter only maps
+        IntegrationEvent → IngressSubmitInput.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
+</CHANGE_SUMMARY>
+*/
+
+import type { DestinationAdapter, IntegrationEvent, IntegrationSecrets } from "./port.ts";
+import {
+  submitIngress,
+  buildIdempotencyKey,
+  type IdentityClaim,
+  type IngressOrigin,
+} from "./lagebild-ingress.ts";
+
+/**
+ * Lagebild destination adapter (RFC-0176). Self-enables by secret presence:
+ * skips silently when LAGEBILD_* secrets are absent. Throws on transport
+ * failure or non-acceptance so the delivery callback returns 502 and QStash
+ * retries (bounded → DLQ).
+ */
+export const lagebildDestinationAdapter: DestinationAdapter = {
+  kind: "crm",
+  vendor: "lagebild",
+  requiredSecrets: [
+    "LAGEBILD_API_URL",
+    "LAGEBILD_API_KEY",
+    "LAGEBILD_TENANT_ID",
+    "LAGEBILD_SOURCE_SYSTEM_ID",
+  ],
+
+  async route(
+    event: IntegrationEvent,
+    secrets: IntegrationSecrets,
+  ): Promise<{ id: string } | null> {
+    const apiUrl = secrets.LAGEBILD_API_URL;
+    const apiKey = secrets.LAGEBILD_API_KEY;
+    const tenantId = secrets.LAGEBILD_TENANT_ID;
+    const sourceSystemId = secrets.LAGEBILD_SOURCE_SYSTEM_ID;
+    if (!apiUrl || !apiKey || !tenantId || !sourceSystemId) {
+      throw new Error("lagebild: missing credentials");
+    }
+
+    const submissionId = "sub_" + event.eventId.replace(/-/g, "").slice(0, 24);
+
+    const claims: IdentityClaim[] = [];
+    if (event.contact?.email) {
+      claims.push({ claim_type: "email", value: event.contact.email });
+    }
+    if (event.contact?.phone) {
+      claims.push({ claim_type: "phone", value: event.contact.phone });
+    }
+
+    const referrer =
+      typeof event.payload.referrer === "string" ? event.payload.referrer : undefined;
+    const origin: IngressOrigin = {
+      locale: event.locale,
+      ...(referrer ? { referrer_uri: referrer } : {}),
+    };
+
+    const message = typeof event.payload.message === "string" ? event.payload.message : null;
+
+    const result = await submitIngress(
+      { apiUrl, apiKey, tenantId, sourceSystemId },
+      {
+        submissionId,
+        idempotencyKey: buildIdempotencyKey(tenantId, submissionId),
+        interactionKind: "contact_message",
+        identityClaims: claims,
+        message,
+        origin,
+        explicitPolicyAssertions: [
+          {
+            kind: "consent",
+            purpose: "crm_projection",
+            value: true,
+            statement_ref: "contact_form_consent",
+          },
+        ],
+      },
+    );
+
+    if (!result.accepted) {
+      throw new Error(`lagebild: ingress rejected (${result.rejection_class ?? "unknown"})`);
+    }
+
+    return result.submission_id ? { id: result.submission_id } : null;
+  },
+};

package/src/integration/lagebild-ingress.ts

@@ -11,25 +11,20 @@ built-in via a stable idempotency_key (derived from submission_id + tenant).</pu
   <item>Do not retry on non-2xx — the caller decides retry strategy.</item>
 </non-goals>
 </MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-1097: sweep — tail packages clean
+
+Sweep batch 3: rewrote ~95 purposes across werkstatt-knowledge, werkstatt-shared, godot-game, phaser-game, lifecycle-core, projektarchiv-*, portal-*, billing-*, typescript (CONTRACT-02/PURPOSE-02). Real KEY_DECISIONS on 5 godot utils, non-goals on 5 CONTRACT-03 files, headers on 4 headerless files, CS-07 history literal fix on 2 files. Policy: vitest.config.ts + test-fixtures testPatterns, worker-configuration.d.ts excludedPath. All non-site/engine packages now 0 diagnostics.</item>
+</CHANGE_SUMMARY>
 */
 
 export const LAGEBILD_INGRESS_CONTRACT_VERSION = 1 as const;
 
 export type IngressInteractionKind =
-  | "inquiry"
-  | "contact_message"
-  | "callback_request"
-  | "appointment_request"
-  | "other";
+  "inquiry" | "contact_message" | "callback_request" | "appointment_request" | "other";
 
 export type IdentityClaimType =
-  | "person_name"
-  | "organization_name"
-  | "email"
-  | "phone"
-  | "website"
-  | "postal_address"
-  | "other";
+  "person_name" | "organization_name" | "email" | "phone" | "website" | "postal_address" | "other";
 
 export interface IdentityClaim {
   readonly claim_type: IdentityClaimType;

package/src/integration/orchestration.ts

@@ -12,16 +12,17 @@
 </non-goals>
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
-  <item>Extracted from integration/index.ts — registries + fan-out + legacy types moved here; index.ts is now a pure barrel.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
 </CHANGE_SUMMARY>
 */
 
-import {
-  pipedriveCrmAdapter,
-  pipedriveDestinationAdapter,
-  telegramChannelAdapter,
-  whatsappChannelAdapter,
-} from "./adapters.ts";
+import { telegramChannelAdapter, whatsappChannelAdapter } from "./adapters.ts";
+import { lagebildDestinationAdapter } from "./lagebild-destination-adapter.ts";
 import type {
   CrmAdapter,
   DestinationAdapter,
@@ -50,8 +51,8 @@ export const CHANNEL_ADAPTERS: readonly IntegrationChannelAdapter[] = [
   whatsappChannelAdapter,
 ];
 
-/** Closed CRM adapter registry (RFC-0168). */
-export const CRM_ADAPTERS: readonly CrmAdapter[] = [pipedriveCrmAdapter];
+/** Closed CRM adapter registry (RFC-0168). Empty — Lagebild is the sole CRM via DESTINATION_ADAPTERS. */
+export const CRM_ADAPTERS: readonly CrmAdapter[] = [];
 
 /**
  * Closed catalog of configurable channel adapter ids (RFC-0168). `"null"` is the
@@ -162,7 +163,7 @@ export function auditIntegrationReadiness(
 // integration.config.validate reports "multiple-active-executors".
 
 /** Closed registry of gogol-adapter destination implementations (RFC-0176). */
-export const DESTINATION_ADAPTERS: readonly DestinationAdapter[] = [pipedriveDestinationAdapter];
+export const DESTINATION_ADAPTERS: readonly DestinationAdapter[] = [lagebildDestinationAdapter];
 
 /**
  * Externally-implemented destination vendors whose adapters live in separate packages

package/src/integration/tests/deliver-event.test.ts

@@ -43,7 +43,7 @@ test("deliverEvent with no secrets skips every sink (no failures, no retry)", as
   expect(result.channels.skipped.includes("whatsapp")).toBeTruthy();
   expect(result.destinations.routed.length).toBe(0);
   expect(result.destinations.failed.length).toBe(0);
-  expect(result.destinations.skipped.includes("crm:pipedrive")).toBeTruthy();
+  expect(result.destinations.skipped.includes("crm:lagebild")).toBeTruthy();
 });
 
 test("email is no longer a fetch channel adapter (Cloudflare Email Routing handles it)", async () => {

package/src/integration/tests/dispatch.test.ts

@@ -35,7 +35,7 @@ const EVENT: IntegrationEvent = {
 test("executeDispatch skips destinations when the tenant holds no secrets", async () => {
   const result = await executeDispatch({ siteId: "warpgogol-com", event: EVENT }, {});
   expect(result.routed.length).toBe(0);
-  expect(result.skipped.includes("crm:pipedrive")).toBeTruthy();
+  expect(result.skipped.includes("crm:lagebild")).toBeTruthy();
 });
 
 function stubDispatcher(
@@ -59,7 +59,7 @@ function stubDispatcher(
 test("dispatchToTenant acks on a routed reply and forwards only the inbound secret", async () => {
   let seen: Request | undefined;
   const dispatcher = stubDispatcher(
-    { routed: ["crm:pipedrive"], failed: [], skipped: [] },
+    { routed: ["crm:lagebild"], failed: [], skipped: [] },
     200,
     (r) => (seen = r),
   );
@@ -71,11 +71,11 @@ test("dispatchToTenant acks on a routed reply and forwards only the inbound secr
   expect(outcome.ok).toBe(true);
   expect(seen?.headers.get("x-integration-secret")).toBe("inbound-secret");
   const body = await seen!.text();
-  expect(!body.includes("PIPEDRIVE")).toBeTruthy();
+  expect(!body.includes("LAGEBILD")).toBeTruthy();
 });
 
 test("dispatchToTenant retries when nothing routed but something failed", async () => {
-  const dispatcher = stubDispatcher({ routed: [], failed: ["crm:pipedrive"], skipped: [] });
+  const dispatcher = stubDispatcher({ routed: [], failed: ["crm:lagebild"], skipped: [] });
   const outcome = await dispatchToTenant(dispatcher, { siteId: "x", event: EVENT }, "s");
   expect(outcome.ok).toBe(false);
 });