@warpgogol/werkstatt-shared 0.14.1 → 0.15.0

package/src/component/contracts.ts

@@ -0,0 +1,206 @@
+/*
+<MODULE_CONTRACT>
+<purpose>component contracts — component identity and declaration contract type definitions.</purpose>
+<non-goals>
+  <item>Do not implement components — this module defines the contract.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
+</CHANGE_SUMMARY>
+*/
+
+import type { Sha256Digest } from "../fingerprint/primitives.ts";
+
+export type ComponentId = `${string}/${string}`;
+export type CapabilityId = `${string}/${string}`;
+
+export type EffectClass =
+  "revertible" | "transactional" | "compensatable" | "irreversible-emission";
+
+export type IsolationTier = 0 | 1 | 2 | 3;
+
+export type GrantScope = "read" | "append" | "deploy" | "certify" | "administer";
+
+export type ResourceKind = "cpu" | "memory" | "disk" | "network" | "timer" | "subprocess";
+
+export type LifecycleScope = "process" | "request" | "session" | "scheduled";
+
+export type ComponentScope =
+  "per-command" | "per-mission" | "per-session" | "per-workshop" | "per-fleet";
+
+export interface ScopeContext {
+  readonly scope: ComponentScope;
+  readonly missionId?: string;
+  readonly sessionId?: string;
+  readonly fleetId?: string;
+  readonly invocationId?: string;
+}
+
+export interface ScopedRegistry {
+  readonly context: ScopeContext;
+  register(manifest: ComponentDeclaration): void;
+  resolve(capabilityId: CapabilityId): ComponentDeclaration | null;
+  dispose(): void;
+  list(): ReadonlyArray<ComponentDeclaration>;
+  getScope(): ComponentScope;
+}
+
+export interface ScopeManager {
+  getRegistry(context: ScopeContext): ScopedRegistry;
+  disposeRegistry(context: ScopeContext): void;
+  resolveAcrossScopes(
+    capabilityId: CapabilityId,
+    context: ScopeContext,
+  ): ComponentDeclaration | null;
+  inspect(): ReadonlyArray<{
+    context: ScopeContext;
+    componentCount: number;
+    componentIds: ComponentId[];
+  }>;
+  adopt(componentId: ComponentId, targetContext: ScopeContext): void;
+  getScope(componentId: ComponentId): ComponentScope | null;
+}
+
+export const SCOPE_ERROR_CODES = {
+  SCOPE_01: "SCOPE-01",
+  SCOPE_02: "SCOPE-02",
+  SCOPE_03: "SCOPE-03",
+  SCOPE_04: "SCOPE-04",
+  SCOPE_05: "SCOPE-05",
+} as const;
+
+export interface CapabilityProvideV1 {
+  capability: CapabilityId;
+  version: string;
+  schemaHash: string;
+}
+
+export interface CapabilityRequireV1 {
+  capability: CapabilityId;
+  compatibility: string;
+  schemaHash: string | null;
+  optional: boolean;
+}
+
+export interface GrantRequestV1 {
+  scope: GrantScope;
+  resource: string;
+  attenuated: boolean;
+}
+
+export interface EffectDeclarationV1 {
+  effectClass: EffectClass;
+  description: string;
+  recoveryCommand: string | null;
+  commitMetadata: string | null;
+}
+
+/** RFC-1037: Probe type for compensation verification. */
+export type CompensationProbeType =
+  "dns-resolved" | "http-status" | "cdn-cleared" | "mirror-synced" | "custom";
+
+/** RFC-1037: A single verification probe that checks equivalence after compensation. */
+export interface CompensationProbe {
+  readonly type: CompensationProbeType;
+  readonly target: string;
+  readonly expected: string;
+  readonly timeoutMs: number;
+  readonly customVerifyCommand?: string;
+}
+
+/** RFC-1037: The compensating action with verification probes. */
+export interface CompensationAction {
+  readonly compensatingOperation: string;
+  readonly verificationProbes: readonly CompensationProbe[];
+  readonly verificationTimeoutMs: number;
+  readonly failureMode: "blocking" | "non-blocking";
+}
+
+/** RFC-1037: Result of a single probe execution. */
+export interface ProbeResult {
+  readonly probe: CompensationProbe;
+  readonly passed: boolean;
+  readonly actualValue?: string;
+  readonly latencyMs: number;
+}
+
+/** RFC-1037: Result of compensation verification. */
+export interface CompensationResult {
+  readonly operationHash: Sha256Digest;
+  readonly compensationHash: Sha256Digest;
+  readonly verified: boolean;
+  readonly probeResults: readonly ProbeResult[];
+  readonly verifiedAt: string;
+  readonly failureReason?: string;
+}
+
+/** RFC-1037: Extension of EffectDeclarationV1 with compensation verification contracts. */
+export interface EffectDeclarationExt extends EffectDeclarationV1 {
+  readonly compensation?: CompensationAction;
+  readonly commitBoundary?: string;
+}
+
+export interface IsolationRequirementV1 {
+  tier: IsolationTier;
+  adapterId: string | null;
+}
+
+export interface ResourceBoundV1 {
+  kind: ResourceKind;
+  limit: string;
+  owner: ComponentId;
+  lifecycle: LifecycleScope;
+}
+
+export interface ComponentDeclaration {
+  schema: "werkstatt/component-declaration@1";
+  /** Stable component ID — survives reconfiguration without losing identity. */
+  componentId: ComponentId;
+  version: string;
+  artifactHash: Sha256Digest;
+  scope: ComponentScope;
+  provides: CapabilityProvideV1[];
+  requires: CapabilityRequireV1[];
+  requestedGrants: GrantRequestV1[];
+  effects: EffectDeclarationV1[];
+  isolation: IsolationRequirementV1;
+  resources: ResourceBoundV1[];
+  /** Configuration overrides for this component instance. */
+  config?: Record<string, unknown>;
+  /** Priority — higher priority components override lower for the same capability. */
+  priority: number;
+  /** Whether this component is desired to be active. */
+  active: boolean;
+}
+
+export interface ResolvedComponentIdentityV1 {
+  componentId: ComponentId;
+  version: string;
+  artifactHash: string;
+}
+
+export interface ResolvedComponentSetV1 {
+  schema: "werkstatt/resolved-component-set@1";
+  profileId: string;
+  components: ResolvedComponentIdentityV1[];
+  dependencyGraphHash: string;
+  grantSetHash: string;
+  effectPolicyHash: string;
+  isolationPolicyHash: string;
+  setHash: string;
+}
+
+export interface ComponentContractViolation {
+  rule: string;
+  path: string;
+  message: string;
+}
+
+export interface ComponentContractResult<T> {
+  status: "pass" | "fail";
+  data: T | null;
+  violations: ComponentContractViolation[];
+}

package/src/component/index.ts

@@ -0,0 +1,11 @@
+/*
+<MODULE_CONTRACT>
+  <purpose>Barrel export for @warpgogol/werkstatt-shared/component sub-path. Re-exports component contract types (ComponentId, CapabilityId, EffectClass, IsolationTier, ComponentDeclaration) sunk from @warpgogol/werkstatt-engine per RFC-1104.</purpose>
+  <non-goals>Does not re-export engine component-runtime modules (identity, schemas, runtime registry).</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-1104: initial barrel — component contracts sunk from werkstatt-engine.</item>
+</CHANGE_SUMMARY>
+*/
+
+export * from "./contracts.ts";

package/src/{share → content}/content-reference.ts

@@ -23,9 +23,9 @@ and resolves braceless collection.file.field references without astro:content (R
 
 import { readFileSync } from "node:fs";
 import { parse } from "yaml";
-import { substituteRefsDeep } from "./content/substitute-deep.ts";
-import { resolveFieldPath } from "./content/resolve-field-path.ts";
-import { scanFormulas, resolveFormula } from "./formula-eval.ts";
+import { substituteRefsDeep } from "./substitute-deep.ts";
+import { resolveFieldPath } from "./resolve-field-path.ts";
+import { scanFormulas, resolveFormula } from "../offers/formula-eval.ts";
 
 export interface ContentRefIndex {
   version: 1;

package/src/{share/content → content}/entity-id.ts

@@ -10,9 +10,12 @@ language codes from them. Shared across all apps in apps/*; no app-specific impo
 </non-goals>
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
-  <item>Merged createDispatcherResolver from dispatch.ts (micro-module consolidation).</item>
-  <item>Tightened createDispatcherResolver typing: replaced any with generic T parameter.</item>
-  <item>Fixed JSDoc: removed references to non-existent callers (components-dispatcher, layouts-dispatcher, pages-dispatcher).</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
 </CHANGE_SUMMARY>
 */
 

package/src/content/index.ts

@@ -13,6 +13,9 @@ markdown frontmatter utilities and system manifest loading (RFC-0868).</purpose>
 
 export { parseMarkdownFrontmatter, stringifyMarkdownFrontmatter } from "./markdown-frontmatter.ts";
 export type { ParsedFrontmatter } from "./markdown-frontmatter.ts";
+export * from "./entity-id.ts";
+export * from "./merge.ts";
+export * from "./resolve-field-path.ts";
 export {
   loadSystemManifest,
   loadSystemManifestSync,

package/src/{share/content → content}/merge.ts

@@ -7,7 +7,12 @@
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
   <item>RFC-0133: backfilled MODULE_MAP and CHANGE_SUMMARY markers for compass.validate compliance.</item>
-  <item>Deepening: unified deepMergeEntryData and mergeComponentContent into one configurable deepMerge; old names kept as thin wrappers.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
 </CHANGE_SUMMARY>
 */
 

package/src/content/system-manifest.test.ts

@@ -0,0 +1,107 @@
+/*
+<MODULE_CONTRACT>
+<purpose>Tests for loadSystemManifest / loadSystemManifestSync — RFC-1106: loaders execute systemManifestSchema.parse() at load time, so a valid manifest returns the schema-inferred type with defaults materialized and an invalid manifest throws ZodError.</purpose>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-1106: created — pins the parse-at-load contract (AC-7).</item>
+  <item>RFC-1106: step 3 — sole SystemManifest definition, loaders parse()
+
+Delete the hand-written SystemManifest interface; content/system-manifest.ts re-exports the schema-inferred type. Both loaders switch from 'as unknown as' to systemManifestSchema.parse() — the schema now executes at load. system.manifest.validate catches ZodError and maps issues into structured diagnostics; the post-load safeParse was dead code. Zero consumer breaks: all growth/release/tagline readers were already optional-safe. New adjacent test pins parse-at-load (AC-7).</item>
+</CHANGE_SUMMARY>
+*/
+
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdtemp, writeFile, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { ZodError } from "zod";
+import { loadSystemManifest, loadSystemManifestSync } from "./system-manifest.ts";
+
+const VALID_SYSTEM_MD = `---
+app: test-app
+version: 1.0.0
+identity:
+  systemStar: sirius
+  biome: urban
+---
+
+# Test system
+`;
+
+const INVALID_SYSTEM_MD = `---
+app: INVALID APP
+version: not-semver
+identity:
+  systemStar: sirius
+---
+
+# Invalid system
+`;
+
+describe("loadSystemManifest", () => {
+  let contentDir: string;
+
+  beforeEach(async () => {
+    contentDir = await mkdtemp(join(tmpdir(), "system-manifest-"));
+  });
+
+  afterEach(async () => {
+    await rm(contentDir, { recursive: true, force: true });
+  });
+
+  it("parses a valid manifest and materializes schema defaults", async () => {
+    await writeFile(join(contentDir, "system.md"), VALID_SYSTEM_MD);
+
+    const result = await loadSystemManifest(contentDir);
+
+    expect(result.manifest.app).toBe("test-app");
+    expect(result.manifest.identity.systemStar).toBe("sirius");
+    // .default([]) materialized by parse — absent in source, present in output
+    expect(result.manifest.pages).toEqual([]);
+    expect(result.manifest.constellations).toEqual([]);
+    expect(result.manifest.clientEditable).toEqual([]);
+    expect(result.manifest.retiredRoutes).toEqual([]);
+    // optional fields stay absent
+    expect(result.manifest.growth).toBeUndefined();
+    expect(result.manifest.release).toBeUndefined();
+    expect(result.manifest.identity.tagline).toBeUndefined();
+    expect(result.source).toBe("system.md");
+  });
+
+  it("throws ZodError on an invalid manifest", async () => {
+    await writeFile(join(contentDir, "system.md"), INVALID_SYSTEM_MD);
+
+    await expect(loadSystemManifest(contentDir)).rejects.toBeInstanceOf(ZodError);
+  });
+
+  it("throws when system.md does not exist", async () => {
+    await expect(loadSystemManifest(contentDir)).rejects.toThrow();
+  });
+});
+
+describe("loadSystemManifestSync", () => {
+  let contentDir: string;
+
+  beforeEach(async () => {
+    contentDir = await mkdtemp(join(tmpdir(), "system-manifest-sync-"));
+  });
+
+  afterEach(async () => {
+    await rm(contentDir, { recursive: true, force: true });
+  });
+
+  it("parses a valid manifest synchronously", async () => {
+    await writeFile(join(contentDir, "system.md"), VALID_SYSTEM_MD);
+
+    const result = loadSystemManifestSync(contentDir);
+
+    expect(result.manifest.app).toBe("test-app");
+    expect(result.manifest.pages).toEqual([]);
+  });
+
+  it("throws ZodError on an invalid manifest", async () => {
+    await writeFile(join(contentDir, "system.md"), INVALID_SYSTEM_MD);
+
+    expect(() => loadSystemManifestSync(contentDir)).toThrow(ZodError);
+  });
+});

package/src/content/system-manifest.ts

@@ -10,6 +10,9 @@ Stack-agnostic utility used by both engine and site plugin (RFC-0868).</purpose>
 <CHANGE_SUMMARY>
   <item>RFC-0868: extracted from werkstatt-site/src/content/system-manifest.ts.</item>
   <item>RFC-0911: add seo?.anchorText?.extraStopPhrases for anchor-text stop-list extension.</item>
+  <item>RFC-1106: step 3 — sole SystemManifest definition, loaders parse()
+
+Delete the hand-written SystemManifest interface; content/system-manifest.ts re-exports the schema-inferred type. Both loaders switch from 'as unknown as' to systemManifestSchema.parse() — the schema now executes at load. system.manifest.validate catches ZodError and maps issues into structured diagnostics; the post-load safeParse was dead code. Zero consumer breaks: all growth/release/tagline readers were already optional-safe. New adjacent test pins parse-at-load (AC-7).</item>
 </CHANGE_SUMMARY>
 */
 
@@ -17,99 +20,14 @@ import { readFile, access } from "node:fs/promises";
 import { readFileSync, accessSync } from "node:fs";
 import { join } from "node:path";
 import { parseMarkdownFrontmatter } from "./markdown-frontmatter.ts";
+import { systemManifestSchema } from "../ontology/schemas/system/manifest.ts";
+import type { SystemManifest } from "../ontology/schemas/system/manifest.ts";
 
-export interface SystemManifest {
-  app: string;
-  version: string;
-  identity: {
-    systemStar: string;
-    biome: string;
-    tagline: string;
-    domain?: string;
-    /** RFC-0087: Per-app default CTA pageId for shared header and final-cta. */
-    ctaTarget?: string;
-    /** RFC-0096: Operator details consumed by legal.scaffold to fill Impressum / Datenschutz stubs. */
-    legal?: {
-      responsibleName?: string;
-      address?: string;
-      email?: string;
-    };
-  };
-  i18n?: {
-    default: string;
-    supported: Record<string, unknown>;
-  };
-  constellations: string[];
-  clientEditable: string[];
-  sharedContext?: {
-    requiredPageIds: string[];
-  };
-  pages: Array<{
-    pageId: string;
-    routes?: Record<string, string>;
-    route?: string;
-    /** RFC-0097: explicit locale opt-in; the page exists only in these locales. */
-    locales?: string[];
-    cosmicStar: string;
-    planets: Array<{
-      cosmicPlanet: string;
-      pin: string;
-    }>;
-  }>;
-  growth: {
-    vendor: {
-      adapter: string;
-      options: Record<string, unknown>;
-    };
-    funnels: unknown[];
-    experiments: unknown[];
-  };
-  release: {
-    passport: {
-      enabled: boolean;
-      indexable: boolean;
-      keyVersion: string;
-      heartbeatUrl: string;
-    };
-  };
-  /**
-   * RFC-0211 Content Knowledge Lifecycle policy. Mirrors the `knowledge` block in
-   * the ontology systemManifestSchema; declared here so the CKL kernel commands
-   * (content.freshness.validate RFC-0213, content.plan.build RFC-0216) read it
-   * with real types instead of structural casts.
-   */
-  knowledge?: {
-    freshness?: {
-      soonWindowDays?: number;
-      critical?: Array<{ match: string; criticality: "advisory" | "important" | "blocking" }>;
-    };
-    derivation?: {
-      critical?: Array<{ match: string; criticality: "advisory" | "important" | "blocking" }>;
-    };
-    plan?: {
-      leadTimeDays?: number;
-      defaultOwner?: string;
-      criticalityMap?: Array<{ match: string; criticality: "advisory" | "important" | "blocking" }>;
-    };
-  };
-  /** RFC-0487: Business model declaration. Closed enum — currently only "b2b-only". */
-  businessModel?: "b2b-only";
-  /** RFC-0487/RFC-0509: Retired page routes — 410 Gone tombstones or 301 redirects. */
-  retiredRoutes?: Array<{ slug: string; status: 410 } | { slug: string; status: 301; to: string }>;
-  /** UI-level rendering toggles for split-list column order. */
-  ui?: {
-    responsibilityBlock?: {
-      swapOrder?: boolean;
-    };
-  };
-  /** RFC-0911: SEO validator configuration extension point. */
-  seo?: {
-    anchorText?: {
-      /** Added to the built-in de/uk stop-list. */
-      extraStopPhrases?: Record<string, string[]>;
-    };
-  };
-}
+// RFC-1106: systemManifestSchema is the sole SystemManifest definition.
+// The inferred output type materializes .default()s (pages, constellations,
+// clientEditable, retiredRoutes, planets stay non-optional) and keeps
+// growth/release/tagline optional — the old interface lied about those.
+export type { SystemManifest };
 
 export interface SystemManifestLoadResult {
   manifest: SystemManifest;
@@ -132,7 +50,7 @@ export async function loadSystemManifest(
   const parsed = parseMarkdownFrontmatter(content);
 
   return {
-    manifest: parsed.data as unknown as SystemManifest,
+    manifest: systemManifestSchema.parse(parsed.data),
     source: "system.md",
     filePath: systemMdPath,
   };
@@ -151,7 +69,7 @@ export function loadSystemManifestSync(contentDirectory: string): SystemManifest
   const parsed = parseMarkdownFrontmatter(content);
 
   return {
-    manifest: parsed.data as unknown as SystemManifest,
+    manifest: systemManifestSchema.parse(parsed.data),
     source: "system.md",
     filePath: systemMdPath,
   };

package/src/{share → content}/tests/resolve-field-path.test.ts

@@ -1,5 +1,5 @@
 import { test, expect } from "vitest";
-import { resolveFieldPath } from "../content/resolve-field-path.ts";
+import { resolveFieldPath } from "../resolve-field-path.ts";
 
 test("resolveFieldPath resolves shallow field", () => {
   const result = resolveFieldPath({ companyName: "Warpgogol" }, ["companyName"]);

package/src/{share → content}/tests/substitute-deep.test.ts

@@ -1,5 +1,5 @@
 import { test, expect } from "vitest";
-import { substituteRefsDeep } from "../content/substitute-deep.ts";
+import { substituteRefsDeep } from "../substitute-deep.ts";
 
 // RFC-0138 fixture: a tiny disk-free stand-in for the RFC-0045 resolver. It models the
 // canonical business offer file so we can assert a {business.offer.price.*} reference written

package/src/content-discipline/index.ts

@@ -0,0 +1,19 @@
+/*
+<MODULE_CONTRACT>
+<purpose>Maintains packages/share/src/content-discipline/index.ts as an authored share authored module so agents can evolve it without rediscovering local boundaries.</purpose>
+<non-goals>
+  <item>Do not define validation logic here.</item>
+</non-goals>
+</MODULE_CONTRACT>
+<CHANGE_SUMMARY>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
+</CHANGE_SUMMARY>
+*/
+
+export * from "./types.ts";
+export * from "./parsers.ts";

package/src/{share/content-discipline → content-discipline}/parsers.ts

@@ -8,11 +8,11 @@
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
   <item>RFC-0073: Add shared parsers and normalization helpers for content-discipline validators.</item>
-  <item>RFC-0082: Delegate YAML reading to @warpgogol/werkstatt-shared/share/onboarding-yaml so single-doc and two-doc RFC-0076-headed files both parse correctly.</item>
+  <item>RFC-0082: Delegate YAML reading to @warpgogol/werkstatt-shared/onboarding so single-doc and two-doc RFC-0076-headed files both parse correctly.</item>
 </CHANGE_SUMMARY>
 */
 
-import { parseOnboardingArtifactPayload } from "../onboarding-yaml/index.ts";
+import { parseOnboardingArtifactPayload } from "../onboarding/yaml.ts";
 import {
   contentAtomsFileSchema,
   coverageLedgerEntrySchema,

package/src/{share/env.d.ts → env.d.ts}

@@ -7,7 +7,12 @@
 </non-goals>
 </MODULE_CONTRACT>
 <CHANGE_SUMMARY>
-  <item>Tidied by compass.changesummary.tidy; see git history for prior entries.</item>
+  <item>RFC-1097: step 6 — compass.migrate codemod run
+
+Mechanical v1 to v2 header migration across the workspace: 942 files rewritten — CHANGE_SUMMARY windows collapsed into history, forbidden v1 blocks stripped, KEY_DECISIONS seeded from @ai-invariant comments (5 files) or TODO placeholders (103 files), blocks reordered to canonical order.</item>
+  <item>RFC-1097: sweep — werkstatt-engine clean
+
+Sweep batch 4: 73 Compass headers on headerless engine files (certification, component-runtime, isolation, evolution, testing), real KEY_DECISIONS on 75 files (kernel, cache, dht, swim, gitmesh, runtime), ~80 purpose expansions (CONTRACT-02/PURPOSE-02), non-goals on 13 CONTRACT-03 files, CS-07 history literal fix repo-wide (253 files). Policy: .template.ts/.template.astro excludedPaths. werkstatt-engine now 0 diagnostics.</item>
 </CHANGE_SUMMARY>
 ***********************************************/
 
@@ -37,8 +42,6 @@ declare module "astro:env/server" {
   export const INTEGRATION_WHATSAPP_TOKEN: string | undefined;
   export const INTEGRATION_WHATSAPP_PHONE_ID: string | undefined;
   export const INTEGRATION_WHATSAPP_TO: string | undefined;
-  export const INTEGRATION_PIPEDRIVE_API_TOKEN: string | undefined;
-  export const INTEGRATION_PIPEDRIVE_DOMAIN: string | undefined;
   // RFC-0176 inbound hub (chat-widget inbound handler).
   export const INTEGRATION_INBOUND_SECRET: string | undefined;
   // RFC-0181 EU-resident delivery — Upstash QStash + Redis (eu-central-1).