@warpgogol/werkstatt-shared 0.14.1 → 0.15.0

package/src/ontology/operations/release.ts

@@ -0,0 +1,121 @@
+/*
+<MODULE_CONTRACT>
+<purpose>RFC-0357/RFC-0851: Zod schemas for release manifest (artifact-only prepared|ready), behavior snapshot wrapper, snapshot diff, and legacy release diagnostics.</purpose>
+<non-goals>
+  <item>Do not introduce app-specific runtime composition or deployment behavior into this reusable package source file.</item>
+  <item>Do not reintroduce legacy deployment states (published, dev-deployed, alt-deployed, promoted, main-deployed, rolled-back) into the artifact state schema.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0357: initial release and behavior snapshot schemas.</item>
+  <item>RFC-0608: extend releaseStateSchema with alt-deployed and promoted; add buildIdentitySchema.</item>
+  <item>RFC-0627: add dev-deployed state (precedes alt-deployed in the three-channel deployment chain).</item>
+  <item>RFC-0628: remove dev-deployed state (workpiece-based dev deploy does not enter the release state machine).</item>
+  <item>RFC-0851: replace legacy state enum with artifact-only prepared|ready; make manifest strict; replace publishedAt with readyAt; add legacyReleaseStateSchema and legacyReleaseDiagnosticSchema.</item>
+</CHANGE_SUMMARY>
+*/
+
+import { z } from "zod";
+import { STERNSYSTEM_ID_REGEX, MISSION_ID_REGEX, RELEASE_ID_REGEX } from "./naming-policy.ts";
+import { releaseArtifactRefSchema as artifactRefSchema } from "./artifact-store.ts";
+
+export const releaseArtifactStateSchema = z.enum(["prepared", "ready"]);
+
+export const releaseStateSchema = releaseArtifactStateSchema;
+
+export const legacyReleaseStateSchema = z.enum([
+  "published",
+  "dev-deployed",
+  "alt-deployed",
+  "promoted",
+  "main-deployed",
+  "rolled-back",
+]);
+
+export const legacyReleaseDiagnosticSchema = z
+  .object({
+    schema: z.literal("werkstatt/legacy-release-diagnostic@1"),
+    releaseId: z.string().regex(RELEASE_ID_REGEX),
+    legacyState: legacyReleaseStateSchema,
+    ruleId: z.literal("CERT-LEGACY-STATE-01"),
+    message: z.string().min(1),
+    fixHint: z.string().min(1),
+  })
+  .strict();
+
+export const releaseManifestSchema = z
+  .object({
+    schemaVersion: z.string().min(1),
+    releaseId: z.string().regex(RELEASE_ID_REGEX),
+    systemId: z.string().regex(STERNSYSTEM_ID_REGEX),
+    missionId: z.string().regex(MISSION_ID_REGEX),
+    semver: z.string(),
+    platformVersion: z.string(),
+    createdAt: z.string().datetime(),
+    readyAt: z.string().datetime().nullable(),
+    state: releaseArtifactStateSchema,
+    commitSha: z.string(),
+    platformSemanticHash: z.string(),
+    siteContentHash: z.string(),
+    distTreeHash: z.string(),
+    distArtifactHash: z.string().nullable(),
+    artifact: artifactRefSchema.nullable(),
+    behaviorSnapshotHash: z.string(),
+    readableSnapshotHash: z.string(),
+    qualityReportHash: z.string().nullable(),
+    snapshotDiffVerdict: z.enum(["pass", "fail"]),
+    migratorVerdict: z.enum(["pass", "fail"]),
+    versionCompareVerdict: z.enum(["in-sync", "catch-up", "refuse-downgrade"]),
+    bootSmokeVerdict: z.enum(["pass", "fail"]),
+  })
+  .strict();
+
+export const releaseArtifactRefSchema = z.object({
+  store: z.literal("werkstatt-local"),
+  algorithm: z.literal("sha256"),
+  digest: z.string(),
+  uri: z.string(),
+  manifestHash: z.string(),
+});
+
+export const behaviorSnapshotDifferenceSchema = z.object({
+  field: z.string(),
+  kind: z.enum(["added", "removed", "changed"]),
+  detail: z.string(),
+});
+
+export const behaviorSnapshotDiffSchema = z.object({
+  schemaVersion: z.string().min(1),
+  baselineHash: z.string(),
+  candidateHash: z.string(),
+  verdict: z.enum(["pass", "fail"]),
+  differences: z.array(behaviorSnapshotDifferenceSchema),
+});
+
+export const buildIdentitySchema = z.object({
+  releaseId: z.string().regex(/^(workpiece-)?[a-z0-9]+(-[a-z0-9]+)*(-r\d{6}|-m\d{6})$/),
+  systemId: z.string().regex(STERNSYSTEM_ID_REGEX),
+  missionId: z.string().regex(MISSION_ID_REGEX),
+  semver: z.string(),
+  distTreeHash: z.string(),
+  behaviorSnapshotHash: z.string(),
+  siteContentHash: z.string(),
+  platformVersion: z.string(),
+  platformSemanticHash: z.string(),
+  commitSha: z.string(),
+  buildTimestamp: z.string().datetime(),
+  targetPlatform: z.string(),
+  // --- RFC-0931 signature fields (optional, added during signing phase) ---
+  signature: z.string().optional(),
+  publicKeyUrl: z.string().optional(),
+  signedAt: z.string().datetime().optional(),
+});
+
+export type ReleaseArtifactState = z.infer<typeof releaseArtifactStateSchema>;
+export type ReleaseState = z.infer<typeof releaseStateSchema>;
+export type LegacyReleaseState = z.infer<typeof legacyReleaseStateSchema>;
+export type LegacyReleaseDiagnostic = z.infer<typeof legacyReleaseDiagnosticSchema>;
+export type ReleaseManifest = z.infer<typeof releaseManifestSchema>;
+export type BuildIdentity = z.infer<typeof buildIdentitySchema>;
+export type BehaviorSnapshotDifference = z.infer<typeof behaviorSnapshotDifferenceSchema>;
+export type BehaviorSnapshotDiff = z.infer<typeof behaviorSnapshotDiffSchema>;

package/src/ontology/operations/sternsystem.ts

@@ -0,0 +1,192 @@
+/*
+<MODULE_CONTRACT>
+<purpose>
+RFC-0354: Zod schemas for the Sternsystem bundle contract — the durable site unit,
+fleet registry, and version pin. These schemas are the machine-checkable contract
+for all Sternsystem operations.
+RFC-0561: fleetRegistryEntrySchema gains optional owner field (did:web VC subject id).
+RFC-0574: replace repo/mirror with parameterized mirrors[] array.
+RFC-0752: add cloudflareZoneId to fleetRegistryEntrySchema, services[] with subdomains to fleetRegistrySchema.
+RFC-0751: extend serviceEntrySchema with deployment fields (kind, url, publicEndpoints, routes, upstreams, lastDeployed, healthCheckPath).
+RFC-0790: add systemConfigSchema, systemStateSchema, servicesRegistrySchema for convention-based discovery (replaces fleetRegistrySchema).
+</purpose>
+<non-goals>
+  <item>Do not perform file IO or git operations — pure shape only.</item>
+  <item>Do not define mission or release schemas — those live in subsequent RFCs.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0966: add passportRequired to systemStateSchema for passport enforcement gating.</item>
+  <item>RFC-0967: add ownershipRequired to systemStateSchema for ownership enforcement gating.</item>
+  <item>RFC-1065: add lagebild to systemStateSchema for Lagebild connection metadata.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
+  <history>RFC-0354, RFC-0479, RFC-0561, RFC-0574, RFC-0751, RFC-0752, RFC-0790, RFC-0806, RFC-0902, RFC-0964</history>
+</CHANGE_SUMMARY>
+*/
+
+import { z } from "zod";
+import { starNameSchema } from "@warpgogol/werkstatt-shared/ontology/cosmic";
+import { deploymentStaticConfigSchema, lastPropagatedChannelSchema } from "./leitstand.ts";
+
+const semverRe = /^\d+\.\d+\.\d+$/;
+const sha256Re = /^sha256:[0-9a-f]{64}$/;
+const kebabRe = /^[a-z0-9]+(-[a-z0-9]+)*$/;
+const didWebRe = /^did:web:[a-z0-9.-]+#.+$/;
+
+export const systemPinSchema = z.object({
+  schemaVersion: z.string().min(1),
+  systemId: z
+    .string()
+    .regex(kebabRe, "systemId must be kebab-case, lowercase, latin-only, no TLD suffix"),
+  cosmicStar: starNameSchema,
+  pinnedAt: z.string().datetime(),
+  platform: z.object({
+    version: z.string().regex(semverRe, "platform.version must be x.y.z"),
+    commit: z.string().min(7),
+    rfcHead: z.string().regex(/^RFC-\d{4}$/, "rfcHead must be RFC-NNNN"),
+    platformSemanticHash: z
+      .string()
+      .regex(sha256Re, "platformSemanticHash must be sha256: prefixed hex"),
+  }),
+  migratorCursor: z.array(z.string()),
+  capabilities: z.array(
+    z.object({
+      semanticId: z.string().min(1),
+      version: z.string().min(1),
+      intent: z.array(z.string()),
+    }),
+  ),
+});
+
+export const mirrorStorageTypeSchema = z.enum(["non-bare", "bare", "bundle"]);
+
+export type MirrorStorageType = z.infer<typeof mirrorStorageTypeSchema>;
+
+export const mirrorEntrySchema = z.object({
+  path: z.string().min(1, "mirror path must be non-empty"),
+  storageType: mirrorStorageTypeSchema,
+});
+
+export type MirrorEntry = z.infer<typeof mirrorEntrySchema>;
+
+export const serviceSubdomainSchema = z.object({
+  domain: z.string().min(1, "subdomain domain must be non-empty"),
+  zone: z.string().min(1, "subdomain zone must be non-empty"),
+});
+
+export const serviceEntrySchema = z.object({
+  id: z
+    .string()
+    .regex(kebabRe, "service id must be kebab-case, lowercase, latin-only, no TLD suffix"),
+  kind: z.enum(["proxy-worker", "scheduled-worker", "cloudflare-worker"]),
+  workerName: z.string().min(1, "workerName must be non-empty"),
+  hostedBy: z.enum(["studio"]),
+  url: z.string().min(1, "url must be non-empty"),
+  workersDevUrl: z.string().min(1, "workersDevUrl must be non-empty").optional(),
+  publicEndpoints: z.boolean().default(false),
+  routes: z.array(z.string()).optional(),
+  upstreams: z.array(z.string()).optional(),
+  subdomains: z.array(serviceSubdomainSchema).default([]),
+  lastDeployed: z
+    .object({
+      at: z.string().datetime().nullable(),
+      state: z.enum(["succeeded", "failed"]).nullable(),
+      operationId: z.string().nullable(),
+    })
+    .default({ at: null, state: null, operationId: null }),
+  lastDevDeployed: z
+    .object({
+      at: z.string().datetime().nullable(),
+      state: z.enum(["succeeded", "failed"]).nullable(),
+      operationId: z.string().nullable(),
+    })
+    .default({ at: null, state: null, operationId: null })
+    .describe("RFC-0806: last dev-channel deployment state"),
+  healthCheckPath: z.string().optional(),
+});
+
+// RFC-0790: Convention-based discovery schemas (replaces fleet registry)
+
+export const systemConfigSchema = z.object({
+  schemaVersion: z.string().min(1),
+  id: z.string().regex(kebabRe, "id must be kebab-case, lowercase, latin-only, no TLD suffix"),
+  cosmicStar: starNameSchema,
+  mirrors: z.array(mirrorEntrySchema).min(1, "mirrors must contain at least 1 entry"),
+  pinnedPlatform: z.string().regex(semverRe, "pinnedPlatform must be x.y.z"),
+  status: z.enum(["registered", "active", "paused", "archived"]),
+  registeredAt: z.string().datetime(),
+  deployment: deploymentStaticConfigSchema.optional(),
+  cloudflareZoneId: z
+    .string()
+    .min(1, "cloudflareZoneId must be non-empty")
+    .optional()
+    .describe("Cloudflare zone ID for DNS and Workers route management (RFC-0752)"),
+  owner: z
+    .string()
+    .regex(didWebRe, "owner must be a did:web identifier (did:web:<domain>#<key-version>)")
+    .optional()
+    .describe("VC subject id of the site owner (RFC-0558, RFC-0561)"),
+  notes: z.string().default(""),
+  fleet: z
+    .object({
+      canary: z.boolean().default(false),
+    })
+    .optional()
+    .describe("RFC-0964: fleet wave orchestration config"),
+});
+
+export const systemStateSchema = z.object({
+  schemaVersion: z.string().min(1),
+  systemId: z
+    .string()
+    .regex(kebabRe, "systemId must be kebab-case, lowercase, latin-only, no TLD suffix"),
+  currentMission: z.string().nullable().default(null),
+  lastRelease: z.string().nullable().default(null),
+  lastPropagated: z
+    .object({
+      dev: lastPropagatedChannelSchema.optional(),
+      alt: lastPropagatedChannelSchema.optional(),
+      main: lastPropagatedChannelSchema.optional(),
+    })
+    .default({}),
+  // RFC-0899: 4-digit PIN for dev/alt subdomain access protection. Null when not set.
+  accessPin: z
+    .string()
+    .regex(/^\d{4}$/, "accessPin must be a 4-digit numeric string")
+    .nullable()
+    .default(null),
+  // RFC-0966: Controls PASSPORT-01 warning vs blocking. false during rollout,
+  // set to true by sternsystem.passport.generate after first successful generation.
+  passportRequired: z.boolean().default(false),
+  // RFC-0967: Controls OWNERSHIP-01 warning vs blocking. false during rollout,
+  // set to true per-site when ready for blocking enforcement.
+  ownershipRequired: z.boolean().default(false),
+  // RFC-1065: Lagebild connection metadata. Undefined when not connected.
+  lagebild: z
+    .object({
+      connected: z.boolean(),
+      apiUrl: z.string(),
+      tenantId: z.string(),
+      sourceSystemId: z.string(),
+      connectedAt: z.string(),
+      channel: z.string(),
+    })
+    .optional(),
+});
+
+export const servicesRegistrySchema = z.object({
+  schemaVersion: z.string().min(1),
+  services: z.array(serviceEntrySchema),
+});
+
+export type SystemPin = z.infer<typeof systemPinSchema>;
+export type ServiceSubdomain = z.infer<typeof serviceSubdomainSchema>;
+export type ServiceEntry = z.infer<typeof serviceEntrySchema>;
+export type SystemConfig = z.infer<typeof systemConfigSchema>;
+export type SystemState = z.infer<typeof systemStateSchema>;
+export type ServicesRegistry = z.infer<typeof servicesRegistrySchema>;

package/src/ontology/operations/werkstatt.ts

@@ -0,0 +1,48 @@
+/*
+<MODULE_CONTRACT>
+<purpose>
+RFC-0362: Zod schemas for Werkstatt consistency primitives — lock files and
+operation records. These schemas are the machine-checkable contract for all
+Werkstatt lock and idempotency operations.
+</purpose>
+<non-goals>
+  <item>Do not perform file IO — pure shape only.</item>
+  <item>Do not define hash-chain Bordbuch format — that is RFC-0276/RFC-0355.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-0362: initial Werkstatt schemas (WerkstattLock, WerkstattOperationRecord).</item>
+</CHANGE_SUMMARY>
+*/
+
+import { z } from "zod";
+
+export const werkstattLockSchema = z.object({
+  schemaVersion: z.literal("1.0.0"),
+  scope: z.string().min(1),
+  operationId: z.string().min(1),
+  command: z.string().min(1),
+  owner: z.string().min(1),
+  pid: z.number().int(),
+  startedAt: z.string().datetime(),
+  heartbeatAt: z.string().datetime(),
+  timeoutSeconds: z.number().positive(),
+  depth: z.number().int().positive().optional(),
+});
+
+export const werkstattOperationRecordSchema = z.object({
+  schemaVersion: z.literal("1.0.0"),
+  operationId: z.string().min(1),
+  command: z.string().min(1),
+  scopes: z.array(z.string().min(1)),
+  state: z.enum(["started", "completed", "failed"]),
+  startedAt: z.string().datetime(),
+  completedAt: z.string().datetime().nullable(),
+  inputHash: z.string().min(1),
+  resultHash: z.string().nullable(),
+  artifacts: z.array(z.string()),
+  error: z.string().nullable(),
+});
+
+export type WerkstattLock = z.infer<typeof werkstattLockSchema>;
+export type WerkstattOperationRecord = z.infer<typeof werkstattOperationRecordSchema>;

package/src/ontology/schemas/biome.ts

@@ -14,9 +14,14 @@ Applied via html[data-biome="<id>"] in the cascade layer stack.
 </non-goals>
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
-  <item>Wave 1 (RFC-0025): Initial creation.</item>
   <item>RFC-0071: Replace narrow token overrides with the extended biome visual-DNA contract.</item>
   <item>RFC-0371: Add optional <code>fonts</code> field for biome-driven Fontsource CSS imports.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
 </CHANGE_SUMMARY>
 */
 
@@ -186,7 +191,7 @@ export const biomeConstraintsSchema = z
   .strict();
 
 // RFC-0114: site-background layer schema mirrored from
-// @warpgogol/werkstatt-shared/share/schemas/site-background. Defined locally to avoid a
+// @warpgogol/werkstatt-shared/schemas/site-background. Defined locally to avoid a
 // cross-package import dependency (ontology must not depend on share).
 const biomeSiteBackgroundLayerSchema = z.discriminatedUnion("kind", [
   z

package/src/ontology/schemas/capability.ts

@@ -8,7 +8,7 @@ lossless projection to both OpenAPI (RFC-0289) and MCP tool schemas (RFC-0290).
 </purpose>
 <non-goals>
   <item>Do not resolve entitlements or active-capability logic here — that is
-        @warpgogol/werkstatt-shared/share/agent/capability.ts (resolveActiveCapabilities).</item>
+        @warpgogol/werkstatt-shared/agent/capability.ts (resolveActiveCapabilities).</item>
   <item>Do not widen the JSON-Schema subset beyond what OpenAPI + MCP both
         accept verbatim — widening requires an RFC amending RFC-0288.</item>
 </non-goals>

package/src/ontology/schemas/constellation.ts

@@ -12,7 +12,12 @@ section archetypes that forms a proven page structure for a given intent
 </non-goals>
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
-  <item>Wave 1 (RFC-0025): Initial creation.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
 </CHANGE_SUMMARY>
 */
 

package/src/ontology/schemas/index.ts

@@ -9,10 +9,14 @@ Re-exports the Constellation, Biome, SiteFamily, and SystemManifest schemas and
 </non-goals>
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
-  <item>Wave 1 (RFC-0025): Initial creation.</item>
   <item>RFC-0071: Re-export site-family contract and expanded biome surface.</item>
   <item>RFC-0371: Re-export biome font entry schema and types.</item>
-  <item>Architecture review 2026-07-10: extracted platform operations schemas to @warpgogol/werkstatt-shared/ontology/operations; re-export getSectionPropsSchema from manifest-resolver.ts.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
 </CHANGE_SUMMARY>
 */
 

package/src/ontology/schemas/manifest-resolver.ts

@@ -11,8 +11,13 @@ filesystem I/O, YAML parsing, and fragment composition behind one interface.
 </non-goals>
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
-  <item>Architecture review 2026-07-10: extracted from page-entry.ts to separate declarative schemas from runtime I/O.</item>
   <item>RFC-0484: suppress console.debug for directories without manifests — group directories are expected to have none.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
 </CHANGE_SUMMARY>
 */
 

package/src/ontology/schemas/page-entry.ts

@@ -6,14 +6,18 @@ Every page .md file under apps/<app>/src/content/pages/ must conform to PageEntr
 Exports BlockEntrySchema and PageEntrySchema — pure declarative schemas, no I/O.
 </purpose>
 <non-goals>
-  <item>Do not implement the buildPage pipeline here — that lives in @warpgogol/werkstatt-shared/share/page.</item>
+  <item>Do not implement the buildPage pipeline here — that lives in @warpgogol/werkstatt-shared/page.</item>
   <item>Do not parse YAML here; callers provide parsed objects to schema.parse().</item>
   <item>Do not validate cross-system.yaml references — that is page.block.validate's job.</item>
 </non-goals>
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
-  <item>Wave 1 (RFC-0026): Initial creation.</item>
-  <item>Architecture review 2026-07-10: extracted getSectionPropsSchema into manifest-resolver.ts — page-entry.ts is now pure declarative schemas with no I/O.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
 </CHANGE_SUMMARY>
 */
 
@@ -35,8 +39,8 @@ const PRINT_REGIONS = [
 ] as const;
 
 // ---------------------------------------------------------------------------
-// VisibilityExprSchema (re-declared here to avoid cross-package dep on @warpgogol/werkstatt-shared/share)
-// page.block.validate uses the canonical one from @warpgogol/werkstatt-shared/share;
+// VisibilityExprSchema (re-declared here to avoid cross-package dep on @warpgogol/werkstatt-shared/page)
+// page.block.validate uses the canonical one from @warpgogol/werkstatt-shared/page;
 // the schema here is for Astro content-collection integration.
 // ---------------------------------------------------------------------------
 

package/src/ontology/schemas/system/growth.ts

@@ -8,7 +8,12 @@ Exports growthVendorSchema as the canonical vendor config shape, reused by @warp
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
   <item>RFC-0303 Phase 3: extracted from schemas/system.ts as part of the domain split.</item>
-  <item>Architecture review 2026-07-10: Extracted growthVendorSchema so @warpgogol/werkstatt-site/growth/config.ts can import it instead of duplicating the shape.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
 </CHANGE_SUMMARY>
 */
 

package/src/ontology/schemas/system/manifest.ts

@@ -9,6 +9,9 @@
   <item>RFC-0303 Phase 3: extracted from schemas/system.ts as part of the domain split.</item>
   <item>RFC-0377: added optional `audience` field to the per-page pin schema.</item>
   <item>ADR-0062: added `ctaTarget` to identity, `sectionNav` + `ctaTarget` to page pins, created `systemCollectionSchema` for content collection typing.</item>
+  <item>RFC-1106: step 2 — extend systemManifestSchema
+
+Add identity.legal (RFC-0096) and seo.anchorText.extraStopPhrases (RFC-0911) to systemManifestSchema — the two interface-only fields with living consumers. No dead fields found: all other interface fields already exist in the schema.</item>
 </CHANGE_SUMMARY>
 */
 
@@ -16,7 +19,7 @@ import { z } from "zod";
 
 import { systemSharedContextSchema, systemGrowthSchema } from "./growth.ts";
 import { systemReleaseSchema } from "./release.ts";
-import { systemTextSchema } from "./text.ts";
+import { systemTextSchema, systemTypographySchema } from "./text.ts";
 import { systemIntegrationsSchema } from "./integrations.ts";
 import { systemVerificationSchema } from "./verification.ts";
 import { semanticPageTypeSchema, articleMetadataSchema, pageOutputSchema } from "./page-output.ts";
@@ -87,6 +90,18 @@ export const systemManifestSchema = z.object({
      * Used by resolve-route.ts to populate `ctaTarget` in PageRouteData.
      */
     ctaTarget: z.string().min(1).optional(),
+
+    /**
+     * RFC-0096: Operator details consumed by legal.scaffold to fill
+     * Impressum / Datenschutz stubs.
+     */
+    legal: z
+      .object({
+        responsibleName: z.string().min(1).optional(),
+        address: z.string().min(1).optional(),
+        email: z.string().min(1).optional(),
+      })
+      .optional(),
   }),
 
   /**
@@ -294,6 +309,12 @@ export const systemManifestSchema = z.object({
    */
   text: systemTextSchema.optional(),
 
+  /**
+   * RFC-1070: typography validator configuration. Allowed tokens and
+   * per-locale abbreviation overrides. Client-writable.
+   */
+  typography: systemTypographySchema.optional(),
+
   /**
    * RFC-0169: subscription billing binding. `billing.stripeCustomerId` is the
    * Stripe customer whose active Entitlements gate this site's paid modules.
@@ -494,6 +515,8 @@ export const systemManifestSchema = z.object({
    * `responsibilityBlock.swapOrder` is true, the page handler swaps
    * primaryItems/secondaryItems and labels.primary/labels.secondary at
    * render time. Default false = render as authored in content.
+   * RFC-1087: `codeHighlightTheme` selects the Shiki theme for build-time
+   * syntax highlighting. Default "github-light" when absent.
    */
   ui: z
     .object({
@@ -502,6 +525,7 @@ export const systemManifestSchema = z.object({
           swapOrder: z.boolean().optional().default(false),
         })
         .optional(),
+      codeHighlightTheme: z.string().min(1).optional(),
     })
     .optional(),
 
@@ -511,6 +535,21 @@ export const systemManifestSchema = z.object({
    * When absent, search.verification.validate emits SEARCH-VERIFY-01.
    */
   verification: systemVerificationSchema.optional(),
+
+  /**
+   * RFC-0911: SEO validator configuration extension point.
+   * Sites extend the built-in de/uk anchor-text stop-list via
+   * `seo.anchorText.extraStopPhrases` (lang → phrases).
+   */
+  seo: z
+    .object({
+      anchorText: z
+        .object({
+          extraStopPhrases: z.record(z.string(), z.array(z.string())).optional(),
+        })
+        .optional(),
+    })
+    .optional(),
 });
 
 export type SystemManifest = z.infer<typeof systemManifestSchema>;

package/src/ontology/schemas/system/page-output.ts

@@ -7,6 +7,9 @@
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
   <item>RFC-0303 Phase 3: extracted from schemas/system.ts as part of the domain split.</item>
+  <item>RFC-1106: step 4 — single-source SemanticPageType
+
+semanticPageTypeSchema (ontology/schemas/system/page-output.ts) is now the sole declaration of the closed DNA-19 vocabulary. semantic/models.ts derives the type via z.infer and SEMANTIC_PAGE_TYPES via schema.options — the hand-synced union/array and stale circular-dependency comments are deleted.</item>
 </CHANGE_SUMMARY>
 */
 
@@ -15,13 +18,11 @@ import { z } from "zod";
 /**
  * RFC-0042/RFC-0050: the semantic role of a page. Drives semantic model
  * construction and the default llms inclusion depth. Mirrors
- * SemanticPageType in @warpgogol/werkstatt-shared/share/semantic.
+ * SemanticPageType in @warpgogol/werkstatt-shared/semantic.
  */
-// NOTE: This enum is mirrored by the `SemanticPageType` union in
-// `@warpgogol/werkstatt-shared/share/src/semantic/models.ts`. The Zod schema here is the runtime
-// validator for `system.md`; the TypeScript union in `share` is the
-// compile-time contract. They are kept in sync manually to avoid a circular
-// dependency between `ontology` and `share`.
+// RFC-1106: this schema is the sole declaration of the SemanticPageType closed
+// vocabulary (DNA-19). `semantic/models.ts` derives the type and the runtime
+// array from it — do not declare a parallel union elsewhere.
 export const semanticPageTypeSchema = z.enum([
   "home",
   "about",

package/src/ontology/schemas/system/text.ts

@@ -7,6 +7,7 @@
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
   <item>RFC-0303 Phase 3: extracted from schemas/system.ts as part of the domain split.</item>
+  <item>RFC-1070: added systemTypographySchema for typography validator configuration.</item>
 </CHANGE_SUMMARY>
 */
 
@@ -49,6 +50,20 @@ export const systemTextNormalizeSchema = z
   })
   .strict();
 
+/**
+ * The `typography` block in system.yaml (RFC-1070). Controls typography validator
+ * configuration: allowed tokens and per-locale abbreviation overrides.
+ * CLIENT-WRITABLE.
+ */
+export const systemTypographySchema = z
+  .object({
+    /** Additional allowed tokens exempt from TYPO-CASE-01 and TYPO-APOS rules. */
+    allowedTokens: z.array(z.string()).optional(),
+    /** Per-locale abbreviation overrides. Merged into built-in locale defaults. */
+    abbreviations: z.record(z.string(), z.array(z.string())).optional(),
+  })
+  .strict();
+
 export const systemTextSchema = z
   .object({
     normalize: systemTextNormalizeSchema.optional(),