forge-workflow 0.1.0-beta.6 → 0.1.0-beta.7

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 > **Note**: `/check` was renamed to `/validate` and `/merge` was renamed to `/premerge` in v0.0.3. Historical entries below may use the old names.
 
+## [0.1.0-beta.7] - 2026-09-11
+
+### Changed
+
+- **A clean full validation is reused by the next unchanged `forge push`.** Forge stores a one-hour, signed local receipt bound to the canonical worktree, exact HEAD, clean state, Forge, Bun, and Node runtimes, and complete nonzero gate results. Branch protection and lint still run; invalid or stale evidence falls back to the full suite, while raw Git pushes and CI remain independent.
+- **A local full suite no longer reruns its already-included E2E directory.** Targeted E2E execution is unchanged, while full validation avoids an exact duplicate. (issue `4aed2cc8-57eb-451b-bb3a-02bbdd93af49`)
+- **The shared public contract package is now `@forge/contracts`.** The product-neutral name replaces the former unpublished Memory-qualified name before beta.7, and all three scoped packages explicitly publish as public MIT packages linked to the public Forge repository. (issue `4d41ffb7-8793-4a17-a30b-92130db69672`)
+
+### Fixed
+
+- **The npm package now includes every internal runtime workspace.** Root runtime imports use the `@forge/memory`, `@forge/contracts`, and `@forge/flow` package boundaries, and npm bundles those unpublished workspaces into `forge-workflow`. The installed-package smoke accepts npm 10 lifecycle output before its JSON payload, so Node 22 verifies the same package correctly. A fresh packed install now runs `forge --version` and `forge setup --quick --yes`, preventing the `MODULE_NOT_FOUND` failure in v0.1.0-beta.6. (issue `95372af8-da00-42e0-af64-0111ddab3405`)
+
 ## [0.1.0-beta.6] - 2026-09-11
 
 ### Added

package/docs/guides/MIGRATION.md

@@ -1,6 +1,6 @@
 # Migration Guide
 
-Use this guide when moving older Forge docs, habits, or installed scaffolding toward the v0.1.0-beta.6 public framing.
+Use this guide when moving older Forge docs, habits, or installed scaffolding toward the v0.1.0-beta.7 public framing.
 
 ## What Changed
 
@@ -39,8 +39,8 @@ forge setup --agents claude,cursor
 
 ## Version Labels
 
-- `0.1.0-beta.6` is the current prerelease package version.
-- `0.1.0-beta.5` is the previous prerelease package version.
+- `0.1.0-beta.7` is the current prerelease package version.
+- `0.1.0-beta.6` is the previous prerelease package version, but its npm tarball omits required runtime workspaces; upgrade directly to beta.7.
 - Internal labels such as `0.0.19` or `v3` describe roadmap slices or historical codenames. Do not present them as current package versions.
 
 ## Safe Upgrade Path

package/docs/reference/RELEASE.md

@@ -2,9 +2,9 @@
 
 This page documents release readiness. Package publishing still requires the explicit publish step after merge.
 
-## v0.1.0-beta.6 Boundary
+## v0.1.0-beta.7 Boundary
 
-v0.1.0-beta.6 is the current prerelease boundary. The release branch declares `0.1.0-beta.6`; publish only after the release PR is merged, tagged, and validated on that exact SHA.
+v0.1.0-beta.7 is the current prerelease boundary. The release branch declares `0.1.0-beta.7`; publish only after the release PR is merged, tagged, and validated on that exact SHA.
 
 Keep these release steps explicit:
 
@@ -43,7 +43,7 @@ Release notes should include:
 - adapter compatibility
 - DeepWiki refresh checklist
 
-The v0.1.0-beta.6 release notes live in [CHANGELOG.md](../../CHANGELOG.md).
+The v0.1.0-beta.7 release notes live in [CHANGELOG.md](../../CHANGELOG.md).
 
 ## Rollback
 

package/lib/commands/merge.js

@@ -47,7 +47,7 @@ const { runIssueOperation } = require('../forge-issues');
 const { PrStateAdapter } = require('../adapters/pr-state-adapter');
 const { stripGlobalFlags } = require('../global-flags');
 const gateCommand = require('./gate');
-const { computeContentHash, validateContractStructure } = require('../../packages/memory-contracts');
+const { computeContentHash, validateContractStructure } = require('@forge/contracts');
 
 const FULL_HEAD_SHA = /^[0-9a-f]{40}$/i;
 const FORGE_ISSUE_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
@@ -560,7 +560,7 @@ async function defaultRecordMergeDecision({ decision, mergeResult, pr, expectedH
       built = { broker: deps.kernelBroker, driver: deps.kernelDriver };
     }
     if (!built?.broker) throw new Error('Kernel lifecycle provider is unavailable.');
-    const { createMemoryAuthorityProvider } = require('../../packages/memory');
+    const { createMemoryAuthorityProvider } = require('@forge/memory');
     const provider = createMemoryAuthorityProvider({ broker: built.broker });
     await provider.recordPrLinkage({
       phase: 'merged',

package/lib/commands/push.js

@@ -6,6 +6,7 @@ const path = require('node:path');
 const forgeToken = require('../../scripts/check-forge-token');
 const { QUICK_LANE_ENV_VAR, QUICK_LANE_VALUE, resolveFullSuiteTimeoutMs } = require('../../scripts/test');
 const { fireAndForget } = require('../pr-monitor/reconcile-executor');
+const { verifyValidationReceipt } = require('../validation-receipt');
 
 const isWindows = process.platform === 'win32';
 
@@ -346,6 +347,7 @@ module.exports = {
 		const existsFn = deps?.existsSync || fs.existsSync;
 		const log = deps?.log || console.log;
 		const tokenWrite = deps?.writeForgeToken || forgeToken.write;
+		const verifyReceipt = deps?.verifyValidationReceipt || verifyValidationReceipt;
 
 		const quickMode = !!(flags && (flags['--quick'] || flags.quick));
 		const pkgManager = detectPackageManager(projectRoot, existsFn);
@@ -368,9 +370,16 @@ module.exports = {
 		}
 
 		// Step 3: Tests (skip in quick mode)
-		const testsPassed = runTests(spawnFn, execFn, pkgManager, projectRoot, quickMode, log, deps?.env || process.env);
+		const receipt = quickMode
+			? { valid: false }
+			: verifyReceipt(resolveGitToplevel(execFn, projectRoot));
+		const validationReused = receipt.valid === true;
+		if (validationReused) log(`Tests reused from full validation at ${receipt.head || 'current HEAD'}`);
+		const testsPassed = validationReused
+			? true
+			: runTests(spawnFn, execFn, pkgManager, projectRoot, quickMode, log, deps?.env || process.env);
 		if (!quickMode && !testsPassed) {
-			return { success: false, quickMode, lintPassed: true, testsPassed: false, pushed: false };
+			return { success: false, quickMode, lintPassed: true, testsPassed: false, validationReused, pushed: false };
 		}
 
 		// Step 4: Write nonce token so lefthook skips pre-push hooks.
@@ -392,7 +401,7 @@ module.exports = {
 				success: false,
 				quickMode,
 				lintPassed: true,
-				...(quickMode ? {} : { testsPassed: true }),
+				...(quickMode ? {} : { testsPassed: true, validationReused }),
 				pushed: false,
 			};
 		}
@@ -407,7 +416,7 @@ module.exports = {
 			success: true,
 			quickMode,
 			lintPassed: true,
-			...(quickMode ? {} : { testsPassed: true }),
+			...(quickMode ? {} : { testsPassed: true, validationReused }),
 			pushed: true,
 		};
 	},

package/lib/commands/shepherd.js

@@ -313,7 +313,7 @@ async function buildMonitorContext(pr, projectRoot, deps) {
       const buildKernelDeps = deps.buildKernelDeps
         || require('../kernel/cli-broker-factory').buildMigratedKernelIssueDeps;
       const createMonitorStore = deps.createMonitorStore
-        || require('../../packages/memory').createMonitorStore;
+        || require('@forge/memory').createMonitorStore;
       let kernel;
       try {
         kernel = await buildKernelDeps({ projectRoot: projectRoot || process.cwd(), gitCommonDir });

package/lib/commands/validate.js

@@ -12,6 +12,7 @@ const { execFileSync } = require('node:child_process');
 const fs = require('node:fs');
 const path = require('node:path');
 const { secureExecFileSync } = require('../shell-utils');
+const validationReceipt = require('../validation-receipt');
 
 // Constants
 const CHECK_TYPES = {
@@ -299,6 +300,7 @@ async function runTypeCheck() {
 		return {
 			success: true,
 			skipped: true,
+			notConfigured: true,
 			duration: Date.now() - startTime,
 			message: 'TypeScript not configured (no tsconfig.json)',
 		};
@@ -632,6 +634,7 @@ async function runAllTests(exec = execFileSync, rootDir = process.cwd()) {
 				success: true,
 				skipped: true,
 				testsFound: false,
+				fullSuite: useFullSuite,
 				duration: Date.now() - startTime,
 				passed,
 				failed,
@@ -643,6 +646,7 @@ async function runAllTests(exec = execFileSync, rootDir = process.cwd()) {
 		return {
 			success,
 			testsFound: true,
+			fullSuite: useFullSuite,
 			duration: Date.now() - startTime,
 			passed,
 			failed,
@@ -657,6 +661,7 @@ async function runAllTests(exec = execFileSync, rootDir = process.cwd()) {
 		if (error.code === 'ETIMEDOUT' || (error.killed && error.signal === 'SIGTERM')) {
 			return {
 				success: false,
+				fullSuite: useFullSuite,
 				duration: Date.now() - startTime,
 				passed: 0,
 				failed: 0,
@@ -671,6 +676,7 @@ async function runAllTests(exec = execFileSync, rootDir = process.cwd()) {
 				success: true,
 				skipped: true,
 				testsFound: false,
+				fullSuite: useFullSuite,
 				duration: Date.now() - startTime,
 				passed: 0,
 				failed: 0,
@@ -691,6 +697,7 @@ async function runAllTests(exec = execFileSync, rootDir = process.cwd()) {
 		return {
 			success: false,
 			testsFound: counts.testsFound,
+			fullSuite: useFullSuite,
 			duration: Date.now() - startTime,
 			passed,
 			failed,
@@ -724,6 +731,9 @@ async function runAllTests(exec = execFileSync, rootDir = process.cwd()) {
  */
 async function executeValidate(options = {}) { // NOSONAR S3776
 	const { skip = [], continueOnError = true, rootDir = process.cwd() } = options || {};
+	const receiptApi = options?.validationReceipt || validationReceipt;
+	const validationSnapshot = receiptApi.beginValidation(rootDir);
+	const receiptSnapshot = skip.length === 0 ? validationSnapshot : null;
 
 	const checks = {};
 	const failedChecks = [];
@@ -810,7 +820,9 @@ async function executeValidate(options = {}) { // NOSONAR S3776
 		}
 	}
 
-	return buildResult(checks, failedChecks, errors, startTime);
+	const result = buildResult(checks, failedChecks, errors, startTime);
+	result.validationReceipt = receiptApi.completeValidation(rootDir, receiptSnapshot, result);
+	return result;
 }
 
 /**

package/lib/kernel/migrations.js

@@ -1,5 +1,5 @@
 const { getKernelSchema, validateKernelSchema } = require('./schema');
-const { USAGE_EVIDENCE_MIGRATION } = require('../../packages/memory');
+const { USAGE_EVIDENCE_MIGRATION } = require('@forge/memory');
 
 function assertIdentifier(identifier, label) {
 	if (!/^[a-z][a-z0-9_]*$/.test(identifier)) {

package/lib/kernel/sqlite-driver.js

@@ -30,7 +30,7 @@ const {
 const { CONFLICT_SIGNAL, classifyConflictSignal } = require('./conflict-signal');
 const { normalizeRecallHit } = require('../memory-recall');
 const { getPackageRoot } = require('../package-root');
-const { appendUsageEvidence, rebuildUsageProjection } = require('../../packages/memory');
+const { appendUsageEvidence, rebuildUsageProjection } = require('@forge/memory');
 
 const BUILTIN_SQLITE_RUNTIME_ORDER = Object.freeze(['bun:sqlite', 'node:sqlite']);
 let probeCounter = 0;

package/lib/memory/router.js

@@ -32,7 +32,7 @@ const projectMemory = require('../project-memory');
 const {
   assertBackend,
   createMemoryBackendRegistry,
-} = require('../../packages/memory');
+} = require('@forge/memory');
 
 /** Supported PUBLIC backends, default first. */
 const MEMORY_BACKENDS = ['local', 'graphiti'];

package/lib/memory/usage-evidence.js

@@ -1,4 +1,4 @@
 'use strict';
 
 // Compatibility shim: the durable usage contract belongs to @forge/memory.
-module.exports = require('../../packages/memory');
+module.exports = require('@forge/memory');

package/lib/pr-monitor/flow-monitor.js

@@ -3,7 +3,7 @@
 const crypto = require('node:crypto');
 const zlib = require('node:zlib');
 
-const { computeContentHash, validateContractStructure } = require('../../packages/memory-contracts');
+const { computeContentHash, validateContractStructure } = require('@forge/contracts');
 const {
   MonitorRuntimeError,
   createMonitorDurabilityBridge,
@@ -11,7 +11,7 @@ const {
   createMonitorState,
   reduceMonitor,
   reduceMonitorBatch,
-} = require('../../packages/flow');
+} = require('@forge/flow');
 const { diffSnapshots } = require('./differ');
 const { EVENT_TYPES: T, makeEvent } = require('./events');
 const { finalizeRecords, MAX_EVENT_DELTAS } = require('./monitor');

package/lib/pr-monitor/reconcile-executor.js

@@ -1081,7 +1081,7 @@ async function migrateLegacyAuthority(projectRoot, opts = {}) {
 
 async function defaultBuildBroker({ projectRoot, gitCommonDir }) {
 	const { buildMigratedKernelIssueDeps } = require('../kernel/cli-broker-factory');
-	const { createMonitorStore } = require('../../packages/memory');
+	const { createMonitorStore } = require('@forge/memory');
 	const deps = await buildMigratedKernelIssueDeps({ projectRoot, gitCommonDir });
 	const store = createMonitorStore(deps.kernelDriver);
 	return {

package/lib/project-memory.js

@@ -8,7 +8,7 @@ const { resolveKernelDatabasePath } = require('./kernel/cli-broker-factory');
 const { resolveGitCommonDir } = require('./kernel/broker');
 const { createBuiltinSQLiteDriver } = require('./kernel/sqlite-driver');
 const { normalizeRecallHit } = require('./memory-recall');
-const { createUsageEvidenceStore } = require('../packages/memory');
+const { createUsageEvidenceStore } = require('@forge/memory');
 
 // Project memory is a Forge read model persisted in the kernel store (kernel_memories),
 // written DIRECTLY rather than through the issue CAS/guarded-event path. The store seam

package/lib/validation-receipt.js

@@ -0,0 +1,190 @@
+'use strict';
+
+const crypto = require('node:crypto');
+const { execFileSync } = require('node:child_process');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { resolveWorktreeScope } = require('./protected-state-authority');
+
+const SCHEMA_VERSION = 1;
+const RECEIPT_TTL_MS = 60 * 60 * 1000;
+const FUTURE_SKEW_MS = 60 * 1000;
+const RUNNER_ID = 'forge-full-suite-v1';
+
+function git(projectRoot, args, deps = {}) {
+	return (deps.execFileSync || execFileSync)('git', args, {
+		cwd: projectRoot,
+		encoding: 'utf8',
+		stdio: ['ignore', 'pipe', 'pipe'],
+	}).trim();
+}
+
+function resolveGitRoot(projectRoot, deps = {}) {
+	return path.resolve(git(projectRoot, ['rev-parse', '--show-toplevel'], deps));
+}
+
+function resolveReceiptPath(projectRoot, deps = {}) {
+	const root = resolveGitRoot(projectRoot, deps);
+	const gitPath = git(root, ['rev-parse', '--git-path', 'forge/validation-receipt.json'], deps);
+	return path.resolve(root, gitPath);
+}
+
+function resolveKeyPath(deps = {}) {
+	return path.join(deps.homeDir || os.homedir(), '.forge', 'validation-receipt.key');
+}
+
+function runtimeIdentity(deps = {}) {
+	return deps.runtimeIdentity
+		|| [process.platform, process.arch, process.versions.node, process.versions.bun || 'node'].join(':');
+}
+
+function commandIdentity(command, projectRoot, env, run) {
+	const version = run(command, ['--version'], {
+		cwd: projectRoot,
+		encoding: 'utf8',
+		env,
+		stdio: ['ignore', 'pipe', 'pipe'],
+	}).trim();
+	const located = path.isAbsolute(command)
+		? fs.realpathSync.native(command)
+		: run(process.platform === 'win32' ? 'where.exe' : 'which', [command], {
+			encoding: 'utf8',
+			env,
+			stdio: ['ignore', 'pipe', 'pipe'],
+		}).trim().split(/\r?\n/)[0];
+	return `${process.platform === 'win32' ? located.toLowerCase() : located}:${version}`;
+}
+
+function testRuntimeIdentity(projectRoot, deps = {}) {
+	if (deps.testRuntimeIdentity) return deps.testRuntimeIdentity;
+	const env = deps.env || process.env;
+	const run = deps.runtimeExecFileSync || execFileSync;
+	return [env.BUN_EXE || 'bun', 'node']
+		.map(command => commandIdentity(command, projectRoot, env, run))
+		.join('|');
+}
+
+function captureState(projectRoot, deps = {}) {
+	const root = resolveGitRoot(projectRoot, deps);
+	return {
+		worktree: resolveWorktreeScope(root, deps),
+		head: git(root, ['rev-parse', 'HEAD'], deps),
+		clean: git(root, ['status', '--porcelain=v1', '--untracked-files=all'], deps) === '',
+		runtime: runtimeIdentity(deps),
+		testRuntime: testRuntimeIdentity(root, deps),
+		runner: RUNNER_ID,
+	};
+}
+
+function sameState(left, right) {
+	return left?.clean === true
+		&& right?.clean === true
+		&& left.worktree === right.worktree
+		&& left.head === right.head
+		&& left.runtime === right.runtime
+		&& left.testRuntime === right.testRuntime
+		&& left.runner === right.runner;
+}
+
+function validationIsComplete(result) {
+	const checks = result?.checks || {};
+	const tests = checks.tests || {};
+	return result?.success === true
+		&& checks.conflictMarkers?.success === true
+		&& checks.typeCheck?.success === true
+		&& (checks.typeCheck.skipped !== true || checks.typeCheck.notConfigured === true)
+		&& checks.lint?.success === true && checks.lint?.skipped !== true
+		&& checks.security?.success === true && checks.security?.skipped !== true
+		&& tests.success === true && tests.skipped !== true
+		&& tests.fullSuite === true && tests.testsFound === true
+		&& tests.total > 0 && tests.failed === 0;
+}
+
+function readOrCreateKey(deps = {}) {
+	const keyPath = resolveKeyPath(deps);
+	fs.mkdirSync(path.dirname(keyPath), { recursive: true });
+	try {
+		fs.writeFileSync(keyPath, crypto.randomBytes(32), { flag: 'wx', mode: 0o600 });
+	} catch (error) {
+		if (error.code !== 'EEXIST') throw error;
+	}
+	return fs.readFileSync(keyPath);
+}
+
+function sign(payload, deps = {}) {
+	return crypto.createHmac('sha256', readOrCreateKey(deps))
+		.update(JSON.stringify(payload))
+		.digest('hex');
+}
+
+function signatureMatches(payload, signature, deps = {}) {
+	if (!/^[a-f0-9]{64}$/.test(signature || '')) return false;
+	const expected = Buffer.from(sign(payload, deps), 'hex');
+	const actual = Buffer.from(signature, 'hex');
+	return actual.length === expected.length && crypto.timingSafeEqual(actual, expected);
+}
+
+function writeAtomic(filePath, content) {
+	fs.mkdirSync(path.dirname(filePath), { recursive: true });
+	const temporary = `${filePath}.${process.pid}.${crypto.randomUUID()}.tmp`;
+	try {
+		fs.writeFileSync(temporary, content, { flag: 'wx', mode: 0o600 });
+		fs.renameSync(temporary, filePath);
+	} finally {
+		fs.rmSync(temporary, { force: true });
+	}
+}
+
+function beginValidation(projectRoot, deps = {}) {
+	try {
+		fs.rmSync(resolveReceiptPath(projectRoot, deps), { force: true });
+		const state = captureState(projectRoot, deps);
+		return state.clean ? state : null;
+	} catch {
+		return null;
+	}
+}
+
+function completeValidation(projectRoot, snapshot, result, deps = {}) {
+	try {
+		if (!snapshot || !validationIsComplete(result)) return false;
+		const current = captureState(projectRoot, deps);
+		if (!sameState(snapshot, current)) return false;
+		const issuedAt = (deps.now || Date.now)();
+		const payload = {
+			schemaVersion: SCHEMA_VERSION,
+			...current,
+			issuedAt,
+			expiresAt: issuedAt + RECEIPT_TTL_MS,
+			gates: ['conflictMarkers', 'typeCheck', 'lint', 'security', 'tests'],
+		};
+		writeAtomic(resolveReceiptPath(projectRoot, deps), JSON.stringify({ payload, signature: sign(payload, deps) }));
+		return true;
+	} catch {
+		return false;
+	}
+}
+
+function verifyValidationReceipt(projectRoot, deps = {}) {
+	try {
+		const receipt = JSON.parse(fs.readFileSync(resolveReceiptPath(projectRoot, deps), 'utf8'));
+		if (receipt?.payload?.schemaVersion !== SCHEMA_VERSION) return { valid: false, reason: 'schema' };
+		if (!signatureMatches(receipt.payload, receipt.signature, deps)) return { valid: false, reason: 'signature' };
+		const now = (deps.now || Date.now)();
+		if (receipt.payload.issuedAt > now + FUTURE_SKEW_MS) return { valid: false, reason: 'future' };
+		if (receipt.payload.expiresAt < now) return { valid: false, reason: 'expired' };
+		if (!sameState(receipt.payload, captureState(projectRoot, deps))) return { valid: false, reason: 'state' };
+		return { valid: true, head: receipt.payload.head };
+	} catch {
+		return { valid: false, reason: 'missing-or-invalid' };
+	}
+}
+
+module.exports = {
+	beginValidation,
+	completeValidation,
+	resolveReceiptPath,
+	validationIsComplete,
+	verifyValidationReceipt,
+};

package/node_modules/@forge/contracts/compatibility-matrix.v1.json

@@ -0,0 +1 @@
+{"matrix_version":1,"readers":{"0.1.0-beta.6":{"accepted":{"forge.memory.work-packet.v1":[1],"forge.memory.context-packet.v1":[1],"forge.memory.claim-request.v1":[1],"forge.memory.lease-receipt.v1":[1],"forge.memory.capability-manifest.v1":[1],"forge.memory.run-receipt.v1":[1],"forge.memory.feedback-report.v1":[1],"forge.memory.structured-error.v1":[1],"forge.memory.monitor-event.v1":[1],"forge.memory.delivery-receipt.v1":[1],"forge.memory.monitor-receipt.v1":[1]},"validation_surfaces":{"structural":"no_authority_or_freshness_claim","consequential":"requires_independent_live_expected"},"schema_annotations":{"generic_json_schema_enforces_x_forge":false,"conformance_helper":"validateContractStructure","requirement":"x-forge bounds and privacy annotations require the Forge runtime validator"},"run_receipt_non_authoritative_statuses":["NOT_EXECUTED"],"unknown_advisory":"preserve","unknown_consequential":"reject","unknown_schema_version":"reject"}}}

package/node_modules/@forge/contracts/contract-baseline.v1.json

@@ -0,0 +1,134 @@
+{
+  "baseline_version": 1,
+  "generator_version": "contracts-schema-gen/7",
+  "artifacts": [
+    {
+      "path": "compatibility-matrix.v1.json",
+      "sha256": "4ca93d10ae9bff80dd3785bb5ebfc77610cf19e928b9b9ae3f6a1ad9c2fea18e"
+    },
+    {
+      "path": "fixtures/v1/canonical-hash.json",
+      "sha256": "469c5b83ebe5e02601cd41b83f35f013f8fb4b118b8e213dc1790bb61301dc3c"
+    },
+    {
+      "path": "fixtures/v1/contract-inputs.v1.json",
+      "sha256": "40f28821f77ea153259a43e0ca8a5d6611f3e5e0ec4e4e47114d4cddeadac3fc"
+    },
+    {
+      "path": "fixtures/v1/feedback-secret-reject.json",
+      "sha256": "d2a8762a169617a6c98f5654e1d5265732485037e55af107018d139895b47869"
+    },
+    {
+      "path": "fixtures/v1/identity-conflict.json",
+      "sha256": "c703733d89f8adb079fb0e0ffe01ad35238d9a5f3ae725af54bca8b518fd6039"
+    },
+    {
+      "path": "fixtures/v1/malformed-envelope-inputs.v1.json",
+      "sha256": "17354a1178523332645f27d506eeabaa39eb6ea6bfa448807f7d0b8d4a1226f2"
+    },
+    {
+      "path": "fixtures/v1/malformed-missing-required.json",
+      "sha256": "e4031505309e8b172d274ef7c4ef617e71217742ff2b7285f37859db0eea42b9"
+    },
+    {
+      "path": "fixtures/v1/monitor-bounds-reject.json",
+      "sha256": "36594e37f3707572ec73c60134f24f5fb3ae17a41d804c409fc03a83e9716c26"
+    },
+    {
+      "path": "fixtures/v1/monitor-receipt-privacy-reject.json",
+      "sha256": "e2c53bc43d727d3583f9f2da6538c127a08997fe279f9e74d585c5b95983b4bf"
+    },
+    {
+      "path": "fixtures/v1/not-executed-receipt.json",
+      "sha256": "4582002c36cca422ac1ad9a5858558234d5ed162dbe72b36665fe09ab098099f"
+    },
+    {
+      "path": "fixtures/v1/privacy-redaction.json",
+      "sha256": "be4bae1d68db334875b3d198525dcd46f3efb46dbeea62de03399a915b716e20"
+    },
+    {
+      "path": "fixtures/v1/retry-identical.json",
+      "sha256": "41c944e15725d45a19bd97015c4bf7fb6ca1a4740426225426bc38799046bd8a"
+    },
+    {
+      "path": "fixtures/v1/stale-authority-reject.json",
+      "sha256": "700173546cff08486df201316472921d8304ea892c29770b5f199e63c92601b3"
+    },
+    {
+      "path": "fixtures/v1/structured-error-privacy-reject.json",
+      "sha256": "008186d22ed5048e4926c7b56c08a71802392886425944d0e1a22b10c7433d58"
+    },
+    {
+      "path": "fixtures/v1/structured-error-stripe-live-reject.json",
+      "sha256": "6e7e0d865ccab874fed66cefd15943bbaf51e4be37bfc99cd38f2e8cd6cafce6"
+    },
+    {
+      "path": "fixtures/v1/structured-error-stripe-test-reject.json",
+      "sha256": "ab9d748875e4688299a8678a551a2d3f13eb85c6f852ccbaaf102b870b3da82c"
+    },
+    {
+      "path": "fixtures/v1/unknown-advisory-roundtrip.json",
+      "sha256": "674e1dd9585d86ed7c8851a3d7e2b0ce81427a3dbc59c149409ee87375f9e879"
+    },
+    {
+      "path": "fixtures/v1/unknown-consequential-reject.json",
+      "sha256": "4228ce85d8f92d6eea61802fd34a410eab778314c70c8315cd1d9c9ba8ef2813"
+    },
+    {
+      "path": "fixtures/v1/valid-full.json",
+      "sha256": "2ba47dfcd5bc6dc4fae83160b05eeca480b51b065d251a0f531ca2c3effb0397"
+    },
+    {
+      "path": "fixtures/v1/valid-minimal.json",
+      "sha256": "e7d4e7d5cb11b4de809140d572c6f40a5ed4fc813f0044983930a6fbaab99444"
+    },
+    {
+      "path": "fixtures/v1/wrong-capability-digest.json",
+      "sha256": "8599acc3eebfba3883ec05e496cfc66e08e79877c8193c24db75540b4549062a"
+    },
+    {
+      "path": "schemas/v1/capability-manifest.schema.json",
+      "sha256": "8435c1ec9ebfd0f9b9b6d06f490dcfdac4696f002a83692899e1e172f17cd6dd"
+    },
+    {
+      "path": "schemas/v1/claim-request.schema.json",
+      "sha256": "eb9a6aa46c51550fa5505caeeff6e7773fce128e940fdb85a851cfd13cbf1375"
+    },
+    {
+      "path": "schemas/v1/context-packet.schema.json",
+      "sha256": "36f422011e03fafe07de5fb16a1e9c745015b4257f640e77f1ae1f4ba70971eb"
+    },
+    {
+      "path": "schemas/v1/delivery-receipt.schema.json",
+      "sha256": "1e505c9a790d2e5a3ccf1cd227b7a708924f9d92a61c2220964f7cb05a9d8f4c"
+    },
+    {
+      "path": "schemas/v1/feedback-report.schema.json",
+      "sha256": "6f9f272b831d30574ecf56601307a361544f022c7690fd8077aeae8ca5913e37"
+    },
+    {
+      "path": "schemas/v1/lease-receipt.schema.json",
+      "sha256": "e7b3c1f6857e4ebad930518236011b8346054b1fa7d38607def4a42c1ba9a739"
+    },
+    {
+      "path": "schemas/v1/monitor-event.schema.json",
+      "sha256": "df270f5b7e280c10293f2c964727d13baa0488c9e1cc87037ba1307bc76958dc"
+    },
+    {
+      "path": "schemas/v1/monitor-receipt.schema.json",
+      "sha256": "555dba3db355498a1813bfcf045fe2c3f10057789539918e3303c11191048b33"
+    },
+    {
+      "path": "schemas/v1/run-receipt.schema.json",
+      "sha256": "de55aca54248a208560fffade7bcfdc555e83daf330f37fe482bb8068495ece6"
+    },
+    {
+      "path": "schemas/v1/structured-error.schema.json",
+      "sha256": "ea8b6d40528634743efa91a550d27d8191adc8ce95e630356dadce98ba864d64"
+    },
+    {
+      "path": "schemas/v1/work-packet.schema.json",
+      "sha256": "82f149e5ceedf004a5c129f264d0cb94e6704a7eadae8f02dbd40a62b75a556c"
+    }
+  ]
+}

package/node_modules/@forge/contracts/fixtures/v1/canonical-hash.json

@@ -0,0 +1 @@
+{"fixture_id":"canonical-hash","input_ref":{"file":"contract-inputs.v1.json","schema_id":"forge.memory.work-packet.v1"},"operation":"canonical-hash","expected":{"stable_under_key_reordering":true,"content_hash_excluded":true}}