From 14e9d439e382fb8e5b057638cb92bd1d66df9429 Mon Sep 17 00:00:00 2001
From: Nomads_Reach <144523850+NomadsReach@users.noreply.github.com>
Date: Sun, 16 Aug 2026 02:56:18 -0400
Subject: [PATCH] Add repository legacy runtime guard

---
 server/scripts/verify-no-legacy-runtime.sh | 36 ++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 server/scripts/verify-no-legacy-runtime.sh

diff --git a/server/scripts/verify-no-legacy-runtime.sh b/server/scripts/verify-no-legacy-runtime.sh
new file mode 100644
index 0000000..6612ebd
--- /dev/null
+++ b/server/scripts/verify-no-legacy-runtime.sh
@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+set -Eeuo pipefail
+
+ROOT="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)"
+cd -- "${ROOT}"
+
+SELF="server/scripts/verify-no-legacy-runtime.sh"
+FAILED=0
+
+echo "==> Checking tracked paths for prohibited legacy runtime artifacts"
+while IFS= read -r -d '' path; do
+  lower="${path,,}"
+  if [[ "${lower}" =~ (^|/)(requirements[^/]*\.txt|pipfile(\.lock)?|pyproject\.toml|poetry\.lock|setup\.py|setup\.cfg|tox\.ini|\.python-version)$ ]] \
+      || [[ "${lower}" =~ (^|/)(\.venv|venv|__pycache__|\.pytest_cache)(/|$) ]] \
+      || [[ "${lower}" =~ \.(py|pyw|pyi|pyc|pyo|whl|egg)$ ]]; then
+    echo "ERROR: prohibited tracked path: ${path}" >&2
+    FAILED=1
+  fi
+done < <(git ls-files -z)
+
+# Keep runtime/dependency references out of source, scripts, workflows, configs,
+# packaging and documentation. This policy file is the sole intentional source
+# of the forbidden tokens below.
+FORBIDDEN='(^|[^[:alnum:]_])(python([0-9]+([.][0-9]+)*)?|py[.]exe|pip([0-9]+)?|pytest|pyside6|virtualenv|venv)([^[:alnum:]_]|$)|[.]venv|consumer_server_cli[.]py|admin_server[.]py|server_core[.]py|requirements-(server|host-gui)[.]txt'
+
+echo "==> Checking tracked text for prohibited legacy runtime references"
+if git grep -nI -i -E "${FORBIDDEN}" -- . ":(exclude)${SELF}"; then
+  echo "ERROR: prohibited legacy runtime reference found in tracked content." >&2
+  FAILED=1
+fi
+
+if [[ ${FAILED} -ne 0 ]]; then
+  exit 1
+fi
+
+echo "Legacy runtime guard passed."