@mc-and-his-agents/loom-installer 0.1.16 → 0.1.18

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "fbbe9a3659bbaf753f47b38aa230ab122c26227b",
+  "source_commit": "3daaced2a93b2f5170fc738bcd631d6323336c82",
   "source_ref": "main",
-  "built_at": "2026-04-25T13:09:15+08:00",
+  "built_at": "2026-04-25T13:30:42+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -623,18 +623,18 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/governance_surface.py",
-      "bytes": 48077,
-      "sha256": "ecb24c8c58d978cd9207f8a99881e560c6f64f015cffa527bd221a1cf7cf2e24"
+      "bytes": 51952,
+      "sha256": "ae74631688a91f774f29c54177f7b8477f23d445395e315fb91b24f5412dfcd2"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 267202,
-      "sha256": "213e64f5d974ae8b4dfbce97af96b88405b30cce3ab01d3d3ebf6a653aba4f4f"
+      "bytes": 271781,
+      "sha256": "916036e9f69521168511ca4e30cd7066ae2d9abb22294fb984ebe3d76d199cfa"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
-      "bytes": 281098,
-      "sha256": "85012c8824e33f4e7816e451d3aa8d38eec63f4006ae98c657676f2640923184"
+      "bytes": 288183,
+      "sha256": "76fd6610e74672d527f43edd1311dbd6ca571406536d04dae502236eb67a5a38"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_init.py",
@@ -1208,18 +1208,18 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 48077,
-      "sha256": "ecb24c8c58d978cd9207f8a99881e560c6f64f015cffa527bd221a1cf7cf2e24"
+      "bytes": 51952,
+      "sha256": "ae74631688a91f774f29c54177f7b8477f23d445395e315fb91b24f5412dfcd2"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 267202,
-      "sha256": "213e64f5d974ae8b4dfbce97af96b88405b30cce3ab01d3d3ebf6a653aba4f4f"
+      "bytes": 271781,
+      "sha256": "916036e9f69521168511ca4e30cd7066ae2d9abb22294fb984ebe3d76d199cfa"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 281098,
-      "sha256": "85012c8824e33f4e7816e451d3aa8d38eec63f4006ae98c657676f2640923184"
+      "bytes": 288183,
+      "sha256": "76fd6610e74672d527f43edd1311dbd6ca571406536d04dae502236eb67a5a38"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_init.py",
@@ -1823,18 +1823,18 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 48077,
-      "sha256": "ecb24c8c58d978cd9207f8a99881e560c6f64f015cffa527bd221a1cf7cf2e24"
+      "bytes": 51952,
+      "sha256": "ae74631688a91f774f29c54177f7b8477f23d445395e315fb91b24f5412dfcd2"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 267202,
-      "sha256": "213e64f5d974ae8b4dfbce97af96b88405b30cce3ab01d3d3ebf6a653aba4f4f"
+      "bytes": 271781,
+      "sha256": "916036e9f69521168511ca4e30cd7066ae2d9abb22294fb984ebe3d76d199cfa"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 281098,
-      "sha256": "85012c8824e33f4e7816e451d3aa8d38eec63f4006ae98c657676f2640923184"
+      "bytes": 288183,
+      "sha256": "76fd6610e74672d527f43edd1311dbd6ca571406536d04dae502236eb67a5a38"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_init.py",
@@ -2438,18 +2438,18 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 48077,
-      "sha256": "ecb24c8c58d978cd9207f8a99881e560c6f64f015cffa527bd221a1cf7cf2e24"
+      "bytes": 51952,
+      "sha256": "ae74631688a91f774f29c54177f7b8477f23d445395e315fb91b24f5412dfcd2"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 267202,
-      "sha256": "213e64f5d974ae8b4dfbce97af96b88405b30cce3ab01d3d3ebf6a653aba4f4f"
+      "bytes": 271781,
+      "sha256": "916036e9f69521168511ca4e30cd7066ae2d9abb22294fb984ebe3d76d199cfa"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 281098,
-      "sha256": "85012c8824e33f4e7816e451d3aa8d38eec63f4006ae98c657676f2640923184"
+      "bytes": 288183,
+      "sha256": "76fd6610e74672d527f43edd1311dbd6ca571406536d04dae502236eb67a5a38"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_init.py",
@@ -3058,18 +3058,18 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 48077,
-      "sha256": "ecb24c8c58d978cd9207f8a99881e560c6f64f015cffa527bd221a1cf7cf2e24"
+      "bytes": 51952,
+      "sha256": "ae74631688a91f774f29c54177f7b8477f23d445395e315fb91b24f5412dfcd2"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 267202,
-      "sha256": "213e64f5d974ae8b4dfbce97af96b88405b30cce3ab01d3d3ebf6a653aba4f4f"
+      "bytes": 271781,
+      "sha256": "916036e9f69521168511ca4e30cd7066ae2d9abb22294fb984ebe3d76d199cfa"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 281098,
-      "sha256": "85012c8824e33f4e7816e451d3aa8d38eec63f4006ae98c657676f2640923184"
+      "bytes": 288183,
+      "sha256": "76fd6610e74672d527f43edd1311dbd6ca571406536d04dae502236eb67a5a38"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_init.py",
@@ -3673,18 +3673,18 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 48077,
-      "sha256": "ecb24c8c58d978cd9207f8a99881e560c6f64f015cffa527bd221a1cf7cf2e24"
+      "bytes": 51952,
+      "sha256": "ae74631688a91f774f29c54177f7b8477f23d445395e315fb91b24f5412dfcd2"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 267202,
-      "sha256": "213e64f5d974ae8b4dfbce97af96b88405b30cce3ab01d3d3ebf6a653aba4f4f"
+      "bytes": 271781,
+      "sha256": "916036e9f69521168511ca4e30cd7066ae2d9abb22294fb984ebe3d76d199cfa"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 281098,
-      "sha256": "85012c8824e33f4e7816e451d3aa8d38eec63f4006ae98c657676f2640923184"
+      "bytes": 288183,
+      "sha256": "76fd6610e74672d527f43edd1311dbd6ca571406536d04dae502236eb67a5a38"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -4288,18 +4288,18 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 48077,
-      "sha256": "ecb24c8c58d978cd9207f8a99881e560c6f64f015cffa527bd221a1cf7cf2e24"
+      "bytes": 51952,
+      "sha256": "ae74631688a91f774f29c54177f7b8477f23d445395e315fb91b24f5412dfcd2"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 267202,
-      "sha256": "213e64f5d974ae8b4dfbce97af96b88405b30cce3ab01d3d3ebf6a653aba4f4f"
+      "bytes": 271781,
+      "sha256": "916036e9f69521168511ca4e30cd7066ae2d9abb22294fb984ebe3d76d199cfa"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 281098,
-      "sha256": "85012c8824e33f4e7816e451d3aa8d38eec63f4006ae98c657676f2640923184"
+      "bytes": 288183,
+      "sha256": "76fd6610e74672d527f43edd1311dbd6ca571406536d04dae502236eb67a5a38"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_init.py",
@@ -4903,18 +4903,18 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 48077,
-      "sha256": "ecb24c8c58d978cd9207f8a99881e560c6f64f015cffa527bd221a1cf7cf2e24"
+      "bytes": 51952,
+      "sha256": "ae74631688a91f774f29c54177f7b8477f23d445395e315fb91b24f5412dfcd2"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 267202,
-      "sha256": "213e64f5d974ae8b4dfbce97af96b88405b30cce3ab01d3d3ebf6a653aba4f4f"
+      "bytes": 271781,
+      "sha256": "916036e9f69521168511ca4e30cd7066ae2d9abb22294fb984ebe3d76d199cfa"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 281098,
-      "sha256": "85012c8824e33f4e7816e451d3aa8d38eec63f4006ae98c657676f2640923184"
+      "bytes": 288183,
+      "sha256": "76fd6610e74672d527f43edd1311dbd6ca571406536d04dae502236eb67a5a38"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_init.py",
@@ -5518,18 +5518,18 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 48077,
-      "sha256": "ecb24c8c58d978cd9207f8a99881e560c6f64f015cffa527bd221a1cf7cf2e24"
+      "bytes": 51952,
+      "sha256": "ae74631688a91f774f29c54177f7b8477f23d445395e315fb91b24f5412dfcd2"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 267202,
-      "sha256": "213e64f5d974ae8b4dfbce97af96b88405b30cce3ab01d3d3ebf6a653aba4f4f"
+      "bytes": 271781,
+      "sha256": "916036e9f69521168511ca4e30cd7066ae2d9abb22294fb984ebe3d76d199cfa"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 281098,
-      "sha256": "85012c8824e33f4e7816e451d3aa8d38eec63f4006ae98c657676f2640923184"
+      "bytes": 288183,
+      "sha256": "76fd6610e74672d527f43edd1311dbd6ca571406536d04dae502236eb67a5a38"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -6133,18 +6133,18 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 48077,
-      "sha256": "ecb24c8c58d978cd9207f8a99881e560c6f64f015cffa527bd221a1cf7cf2e24"
+      "bytes": 51952,
+      "sha256": "ae74631688a91f774f29c54177f7b8477f23d445395e315fb91b24f5412dfcd2"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 267202,
-      "sha256": "213e64f5d974ae8b4dfbce97af96b88405b30cce3ab01d3d3ebf6a653aba4f4f"
+      "bytes": 271781,
+      "sha256": "916036e9f69521168511ca4e30cd7066ae2d9abb22294fb984ebe3d76d199cfa"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 281098,
-      "sha256": "85012c8824e33f4e7816e451d3aa8d38eec63f4006ae98c657676f2640923184"
+      "bytes": 288183,
+      "sha256": "76fd6610e74672d527f43edd1311dbd6ca571406536d04dae502236eb67a5a38"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_init.py",

package/payload/plugin/loom/skills/shared/scripts/governance_surface.py

@@ -146,6 +146,112 @@ MATURITY_LEVELS = {
         "summary": "Host-backed binding, reconciliation, controlled merge, and closeout gates are available.",
     },
 }
+MATURITY_REQUIRED_FIELDS = {
+    "light": [
+        {
+            "id": "work_item",
+            "layer": "core",
+            "required": True,
+            "defaulting": "generated",
+            "recommended_action": "run loom-init or restore the Work Item carrier",
+        },
+        {
+            "id": "recovery",
+            "layer": "core",
+            "required": True,
+            "defaulting": "generated",
+            "recommended_action": "restore the recovery carrier",
+        },
+        {
+            "id": "status_surface",
+            "layer": "core",
+            "required": True,
+            "defaulting": "generated",
+            "recommended_action": "restore the status surface carrier",
+        },
+        {
+            "id": "review",
+            "layer": "core",
+            "required": True,
+            "defaulting": "generated",
+            "recommended_action": "restore the review carrier",
+        },
+    ],
+    "standard": [
+        {
+            "id": "fr_work_item_layer",
+            "layer": "github-profile",
+            "required": True,
+            "defaulting": "profile",
+            "recommended_action": "declare the FR -> Work Item split through the GitHub profile upgrade path",
+        },
+        {
+            "id": "spec_path",
+            "layer": "core",
+            "required": True,
+            "defaulting": "generated",
+            "recommended_action": "install formal spec scaffold",
+        },
+        {
+            "id": "plan_path",
+            "layer": "core",
+            "required": True,
+            "defaulting": "generated",
+            "recommended_action": "install execution plan scaffold",
+        },
+        {
+            "id": "spec_gate",
+            "layer": "core",
+            "required": True,
+            "defaulting": "generated",
+            "recommended_action": "record or restore the spec review gate",
+        },
+        {
+            "id": "status_control_plane",
+            "layer": "core",
+            "required": True,
+            "defaulting": "builtin",
+            "recommended_action": "run loom_status or loom_check to rebuild the status control plane",
+        },
+        {
+            "id": "basic_host_binding",
+            "layer": "github-profile",
+            "required": True,
+            "defaulting": "profile",
+            "recommended_action": "run governance-profile binding and repair missing host bindings",
+        },
+        {
+            "id": "closeout_reconciliation_read",
+            "layer": "github-profile",
+            "required": True,
+            "defaulting": "profile",
+            "recommended_action": "install repo interop so closeout can consume reconciliation",
+        },
+    ],
+    "strong": [
+        {
+            "id": "repo_interface",
+            "layer": "repo-owned-residue",
+            "required": True,
+            "defaulting": "scaffold",
+            "recommended_action": "install or repair the repo companion interface",
+        },
+        {
+            "id": "repo_interop",
+            "layer": "repo-owned-residue",
+            "required": True,
+            "defaulting": "scaffold",
+            "recommended_action": "install or repair the repo interop contract",
+        },
+        {
+            "id": "github_controlled_merge",
+            "layer": "github-profile",
+            "required": True,
+            "defaulting": "host",
+            "recommended_action": "enable controlled merge binding and required host gates",
+        },
+    ],
+}
 
 
 def run_process(args: list[str], cwd: Path) -> subprocess.CompletedProcess[str]:
@@ -1033,9 +1139,16 @@ def maturity_status(
     }
     achieved: list[str] = []
     missing_by_level: dict[str, list[str]] = {}
+    missing_details_by_level: dict[str, list[dict[str, Any]]] = {}
     for level in ("light", "standard", "strong"):
         missing = [field for field in MATURITY_LEVELS[level]["requires"] if not facts.get(field)]
         missing_by_level[level] = missing
+        field_rows = MATURITY_REQUIRED_FIELDS.get(level, [])
+        missing_details_by_level[level] = [
+            row
+            for row in field_rows
+            if row["id"] in missing
+        ]
         if not missing:
             achieved.append(level)
             facts[level] = True
@@ -1051,7 +1164,9 @@ def maturity_status(
         "achieved": achieved,
         "next": next_level,
         "levels": MATURITY_LEVELS,
+        "required_fields": MATURITY_REQUIRED_FIELDS,
         "missing_by_level": missing_by_level,
+        "missing_details_by_level": missing_details_by_level,
     }
 
 

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -93,6 +93,8 @@ CORE_DOCS = (
     "docs/evidence/extraction-ledger.md",
     "docs/evidence/landing-map.md",
     "docs/evidence/validations/validation-closeout-reconciliation-blocking-gate.md",
+    "docs/evidence/validations/validation-adoption-maturity-upgrade-automation.md",
+    "docs/evidence/validations/validation-adoption-maturity-required-fields.md",
     "docs/evidence/validations/validation-github-profile-binding-orchestration.md",
     "docs/evidence/validations/validation-github-profile-drift-reconciliation.md",
     "docs/evidence/validations/validation-github-profile-graphql-budget-guard.md",
@@ -831,6 +833,25 @@ def require_governance_control_plane(
         strong_requires = levels.get("strong", {}).get("requires") if isinstance(levels, dict) and isinstance(levels.get("strong"), dict) else None
         if not isinstance(strong_requires, list) or "github_controlled_merge" not in strong_requires:
             failures.append(Failure(category, f"{context}.maturity strong level must require GitHub controlled merge"))
+        required_fields = maturity.get("required_fields")
+        if not isinstance(required_fields, dict) or set(required_fields) != {"light", "standard", "strong"}:
+            failures.append(Failure(category, f"{context}.maturity required_fields must define light, standard, and strong"))
+        else:
+            for level, rows in required_fields.items():
+                if not isinstance(rows, list) or not rows:
+                    failures.append(Failure(category, f"{context}.maturity required_fields.{level} must be a non-empty list"))
+                    continue
+                for row in rows:
+                    if not isinstance(row, dict):
+                        failures.append(Failure(category, f"{context}.maturity required_fields.{level} entries must be objects"))
+                        continue
+                    if row.get("layer") not in {"core", "github-profile", "repo-owned-residue"}:
+                        failures.append(Failure(category, f"{context}.maturity required_fields.{level} layer must be stable"))
+                    if not isinstance(row.get("recommended_action"), str) or not row.get("recommended_action"):
+                        failures.append(Failure(category, f"{context}.maturity required_fields.{level} entries must include recommended_action"))
+        missing_details = maturity.get("missing_details_by_level")
+        if not isinstance(missing_details, dict) or set(missing_details) != {"light", "standard", "strong"}:
+            failures.append(Failure(category, f"{context}.maturity missing_details_by_level must define light, standard, and strong"))
 
 
 def require_locator_entry(
@@ -1329,6 +1350,44 @@ def require_github_binding_payload(
             failures.append(Failure(category, f"{context}.binding findings must fallback to `github-profile-binding`"))
 
 
+def require_governance_upgrade_payload(
+    failures: list[Failure],
+    *,
+    category: str,
+    context: str,
+    payload: object,
+) -> None:
+    if not isinstance(payload, dict):
+        failures.append(Failure(category, f"{context} must be an object"))
+        return
+    if payload.get("command") != "governance-profile":
+        failures.append(Failure(category, f"{context} must report `command: governance-profile`"))
+    if payload.get("operation") != "upgrade":
+        failures.append(Failure(category, f"{context} must report `operation: upgrade`"))
+    if payload.get("schema_version") != "loom-governance-upgrade/v1":
+        failures.append(Failure(category, f"{context} schema_version must be `loom-governance-upgrade/v1`"))
+    if payload.get("result") not in {"pass", "block"}:
+        failures.append(Failure(category, f"{context} result must be pass/block"))
+    if payload.get("target_maturity") not in {"standard", "strong"}:
+        failures.append(Failure(category, f"{context} target_maturity must be standard/strong"))
+    if not isinstance(payload.get("dry_run"), bool):
+        failures.append(Failure(category, f"{context} dry_run must be boolean"))
+    actions = payload.get("actions")
+    if not isinstance(actions, list) or not actions:
+        failures.append(Failure(category, f"{context} must include non-empty actions"))
+        return
+    for action in actions:
+        if not isinstance(action, dict):
+            failures.append(Failure(category, f"{context} actions must be objects"))
+            continue
+        if action.get("owner") not in {"loom-owned", "repo-owned", "profile"}:
+            failures.append(Failure(category, f"{context} action owner must stay within the stable set"))
+        if action.get("status") not in {"planned", "present"}:
+            failures.append(Failure(category, f"{context} action status must be planned/present"))
+        if action.get("action") == "satisfy_missing_input" and not isinstance(action.get("recommended_action"), str):
+            failures.append(Failure(category, f"{context} missing-input actions must include recommended_action"))
+
+
 def require_review_record_contract(
     failures: list[Failure],
     *,
@@ -2315,6 +2374,21 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
             ["python3", "tools/loom_flow.py", "governance-profile", "upgrade-plan", "--target", "examples/new-project"],
             {"pass", "block"},
         ),
+        (
+            "governance-profile-upgrade",
+            [
+                "python3",
+                "tools/loom_flow.py",
+                "governance-profile",
+                "upgrade",
+                "--target",
+                "examples/new-project",
+                "--to",
+                "standard",
+                "--dry-run",
+            ],
+            {"pass"},
+        ),
         (
             "governance-profile-binding",
             ["python3", "tools/loom_flow.py", "governance-profile", "binding", "--target", "."],
@@ -2574,6 +2648,13 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
                 context="`governance-profile binding`",
                 payload=payload,
             )
+        if label == "governance-profile-upgrade":
+            require_governance_upgrade_payload(
+                failures,
+                category="daily-execution-cli",
+                context="`governance-profile upgrade`",
+                payload=payload,
+            )
         if label == "flow-pre-review":
             require_runtime_state_payload(
                 failures,