@oneie/claude 0.7.0 → 0.9.0

package/scripts/factory-repo.sh

@@ -63,10 +63,32 @@ manifest() {
 portable       browser-check.mjs
 portable       chrome.mjs
 portable       do-analyze.sh
+portable       gate-reaper.sh
+portable       health.sh
+portable       govern-bound-check.sh
+portable       factory-width.sh
+portable       factory-executor-check.mjs
+portable       factory-peak.sh
 portable       do-learn-loop.sh
 portable       do-promise-lint.sh
 portable       do-recon-cache.sh
+portable       do-cycle-shape-check.sh
+portable       do-next.sh
+portable       do-plan-json.sh
+portable       do-test-gate.sh
+portable       do-tick.sh
+portable       do-prove-selftest.sh
 portable       do-validate-armed.py
+portable       factory-brief-check.sh
+portable       fixtures/triage-dupe.md
+portable       gate-run.sh
+portable       gate-reaper-check.sh
+portable       gc-content-check.sh
+portable       govern-mem-check.sh
+portable       governor-escape-check.sh
+portable       lib/gc-finished.sh
+portable       lib/govern.sh
+portable       lib/govern.ts
 portable       package.json
 portable       w1-recon.ts
 portable       wf-check.mjs
@@ -78,6 +100,22 @@ needs-env      do-fleet.sh
 needs-env      do-folder.sh
 needs-env      do-killswitch-audit.py
 needs-env      do-orchestrate.sh
+needs-env      do-plan-json.mjs
+needs-env      do-commit.sh
+needs-env      do-brief.sh
+needs-env      test-speed.sh
+needs-env      do-recon-pack.sh
+needs-env      do-w4-gates.sh
+needs-env      sdk-build-cached.sh
+needs-env      astro-build-cached.sh
+needs-env      test-cached.sh
+needs-env      do-preflight.sh
+needs-env      tsc-cached.sh
+needs-env      load-guard-check.sh
+needs-env      governor-doors-check.sh
+needs-env      test-lanes.sh
+needs-env      test-full.sh
+needs-env      do-project.sh
 needs-env      do-promise-settle.sh
 needs-env      do-prove.sh
 needs-env      do-reconcile.sh
@@ -85,14 +123,56 @@ needs-env      do-rubric.py
 needs-env      do-signal.sh
 needs-env      do-survey.sh
 needs-env      do-tier.sh
+needs-env      do-triage.sh
 needs-env      do-untracked-gate.sh
 needs-env      do-walk.sh
+needs-env      machine-check.sh
+needs-env      machine-watch.sh
 needs-env      notify.sh
 needs-env      reconcile-allow.txt
 needs-env      rubric-weights.json
 needs-env      w4-rubric.ts
+needs-env      govern-claims-check.sh
+needs-env      signal-watch.sh
+monorepo-only  substrate-env-parity.mjs
+monorepo-only  typedb-flake-check.sh
+monorepo-only  env-sync.sh
+monorepo-only  full-suite-paths-check.sh
+monorepo-only  land.sh
+monorepo-only  one-resume.sh
+monorepo-only  orphan-baseline.json
+monorepo-only  orphan-modules.mjs
+needs-env      worktree-preview.sh
+needs-env      factory-walk.sh
+needs-env      factory-turn.sh
+needs-env      factory-emit.sh
+needs-env      factory-close-check.sh
+needs-env      preview-fd-check.sh
+portable       factory-review-check.mjs
+portable       pr-body.sh
+monorepo-only  deploy-record.sh
+monorepo-only  deploy-emit.sh
+needs-env      fixtures/factory-brief-real.md
+monorepo-only  agentverse-audit.sh
+monorepo-only  asi-walk.sh
 monorepo-only  cc-events-proof.sh
+monorepo-only  db-sync-lock-check.sh
+monorepo-only  skills-publish.sh
+monorepo-only  deploy.sh
+monorepo-only  factory-ship.sh
+monorepo-only  blocks-ratchet.sh
+monorepo-only  blocks-manifest.mjs
+monorepo-only  id-inventory.mjs
+monorepo-only  fleet-manifest.mjs
+monorepo-only  one-agents.mjs
+monorepo-only  blocks-render-probe.mjs
+monorepo-only  blocks-usage.mjs
+monorepo-only  lighthouse-run.sh
+monorepo-only  livekit-live-check.sh
+monorepo-only  speed-check.mjs
+monorepo-only  test-honesty.mjs
 monorepo-only  do-consumer-sweep.sh
+monorepo-only  do-derive-check.sh
 monorepo-only  do-rank.py
 monorepo-only  do-smoke.sh
 monorepo-only  do-substrate-check.sh
@@ -100,12 +180,18 @@ monorepo-only  do-tasks-wire-check.sh
 monorepo-only  do-ui-gate.sh
 monorepo-only  factory-check.sh
 monorepo-only  factory-repo.sh
+monorepo-only  deploy-gate-check.sh
+monorepo-only  release.sh
 monorepo-only  factory-tasks-check.sh
 monorepo-only  fade-toxic.sh
 monorepo-only  hourly-brief.sh
+monorepo-only  livekit-ratchet.sh
 monorepo-only  outcome-pull.ts
 monorepo-only  promise-manifest.mjs
+monorepo-only  roles-check.sh
+monorepo-only  ad-copy-lint.sh
 monorepo-only  spine-canary.sh
+monorepo-only  worktree-up.sh
 monorepo-only  subdomains-proof.sh
 monorepo-only  sync-claude-mirror.sh
 monorepo-only  tg-listen.sh
@@ -117,6 +203,16 @@ monorepo-only  typedb-probes/containment-probe.py
 monorepo-only  typedb-probes/panic-probe-version.py
 monorepo-only  typedb-probes/panic-probe.py
 monorepo-only  urls-lint.sh
+monorepo-only  deploy-dev.sh
+monorepo-only  fleet-status.sh
+monorepo-only  gen-dev-config.py
+monorepo-only  speed-cache-check.sh
+monorepo-only  speed-parity-check.sh
+monorepo-only  speed-waterfall-check.sh
+monorepo-only  tasks-claim-race.mjs
+monorepo-only  tasks-loop.sh
+monorepo-only  verify-fast.sh
+monorepo-only  vespio-sync.sh
 MANIFEST
 }
 
@@ -129,6 +225,7 @@ text/contracts.md
 text/dictionary.md
 text/do.md
 text/do-engine-plan.md
+text/do-reference.md
 text/docs.md
 text/dsl.md
 text/one-loop.md
@@ -154,6 +251,7 @@ text/agent-template-plan.md
 text/marketplace.md
 text/factory.md
 text/factory-plan.md
+text/workflows.md
 CANON
 }
 
@@ -169,6 +267,11 @@ company  text/remote-suspend-todo.md
 company  text/sdk-mcp-cli-schema-design-integration.md
 company  text/agent-api-plan.md
 company  text/workflow-bridge-plan.md
+# factory-do.md is this company's factory LEDGER — 5.5k lines of measured runs,
+# one machine path. guide.md and factory-executor.js cite it as the design
+# source, which is true; the design the loop needs is text/factory-plan.md,
+# which ships.
+company  text/factory-do.md
 stale    text/feature.md
 stale    text/loop-log-archive.md
 stale    text/rich-messages.md
@@ -189,6 +292,7 @@ excluded_claude() {
 .claude/commands/db-sync.md
 .claude/commands/deploy.md
 .claude/commands/release.md
+.claude/commands/one.md
 .claude/commands/oo-push.md
 .claude/skills/dev.md
 .claude/skills/build.md
@@ -853,7 +957,7 @@ priority you author is the starting point, not the final order.
 | `.claude/agents/` | the four build waves — recon, decide, edit, verify |
 | `.claude/skills/` | domain skills the loop pulls in on match |
 | `.claude/rules/` | auto-loaded per file glob |
-| `.claude/hooks/` | the gates — staging guards, doc-sync, outcome checks |
+| `.claude/hooks/` | the gates — staging guards, config guard, outcome check |
 | `.claude/scripts/` | the deterministic checks: promise lint, reconcile, rubric, walk |
 | `text/` | the canon the loop reads, and the doc templates it writes from |
 | `tests/` | this repo's own suite — it reaches into nothing |
@@ -1314,8 +1418,19 @@ verify() {
         "${FACTORY_VERIFY_PROMPT:-/do PATCH: create docs/standalone-proof.md — a short file recording that this tree closed a /do cycle with no monorepo on disk, naming the date and what the boundary suite asserts. The file does not exist yet; create it. Then run \`bun test tests/\` and report the count. Close the cycle properly.}"
     ) > "$log" 2>&1
     after="$(cd "$T" && git status --porcelain | wc -l | tr -d ' ')"
-    local suite; suite="$(cd "$T" && bun test tests/ 2>&1 | grep -oE '[0-9]+ pass' | head -1)"
-    if [ "$after" -gt 0 ] && [ -n "$suite" ] && ! (cd "$T" && bun test tests/ 2>&1 | grep -qE '[1-9][0-9]* fail'); then
+    # Run the suite ONCE and match the captured text. The old form ran it twice
+    # and the second run was a false GREEN: `bun test … | grep -qE 'fail'` under
+    # `set -o pipefail` (line 25) returns 141, not 0, when it MATCHES — grep -q
+    # exits on the first hit, bun is still writing, bun takes SIGPIPE. That 141
+    # then went through the surrounding `! ( … )`, which inverts any non-zero to
+    # true. Measured 2026-08-04 against a suite reporting `201 pass 1 fail`:
+    # this branch reported the clone's boundary suite green. A false pass on the
+    # gate that decides whether the factory repo ships.
+    local suite_out; suite_out="$(cd "$T" && bun test tests/ 2>&1 || true)"
+    local suite; suite="$(grep -m1 -oE '[0-9]+ pass' <<<"$suite_out" || true)"
+    local suite_failed=0
+    if grep -qE '[1-9][0-9]* fail' <<<"$suite_out"; then suite_failed=1; fi
+    if [ "$after" -gt 0 ] && [ -n "$suite" ] && [ "$suite_failed" -eq 0 ]; then
       pass "a real cycle ran in the clone and left the boundary suite green — $after file(s) changed, $suite"
     else
       fail "the cycle did not close — $after file(s) changed, suite: ${suite:-none}"

package/scripts/factory-review-check.mjs

@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+// classification: portable
+// Red proof for factory-executor.js's Review predicate — and it READS THE FILE.
+//
+// The first version of this checker defined OLD and NEW as two inline lambdas
+// and never opened the executor. It stayed green through two merges on
+// 2026-09-06 while the executor's own line was fail-open (`0*2 > 1` = false
+// for zero survivors). A checker that cannot see its subject proves nothing;
+// this one lifts the predicate out of the source with new Function, drives it
+// over the jury table beside the OLD shape, and fails closed if the lines it
+// expects are not in the file.
+import { readFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+import { dirname, join } from 'node:path'
+
+const here = dirname(fileURLToPath(import.meta.url))
+const file = process.argv[2] || join(here, '..', 'workflows', 'factory-executor.js')
+const src = readFileSync(file, 'utf8')
+
+// Lift the two lines that ARE the predicate. Anchored on the const names, not
+// on the arithmetic, so a wrong formula is caught by the table, not by the regex.
+const mAgainst = src.match(/^\s*const against = (.+)$/m)
+const mRefuted = src.match(/^\s*const refuted = (.+)$/m)
+if (!mRefuted) {
+  console.log(`RED  could not lift the Review predicate from ${file} — expected a \`const refuted = …\` line`)
+  process.exit(1)
+}
+// A pre-fix file has no `against` line; derive it so the OLD shape is DRIVEN and
+// fails on the table (a wrong verdict), rather than tripping the regex (a miss).
+const againstExpr = mAgainst ? mAgainst[1] : 'votes.filter((v) => v.refuted).length'
+let LIFTED
+try {
+  LIFTED = new Function('votes', `const against = ${againstExpr}; return ${mRefuted[1]};`)
+} catch (e) {
+  console.log(`RED  lifted predicate does not parse: ${e.message}`); process.exit(1)
+}
+const OLD = (v) => v.filter(x => x.refuted).length * 2 > Math.max(1, v.length)
+
+const R = { refuted: true }, A = { refuted: false }
+const cases = [
+  ['zero survivors (every lens threw)', [],            true,  'THE BUG: nobody voted, so nobody objected'],
+  ['1 lens, refutes',                   [R],           true,  'lone lens must bite'],
+  ['1 lens, approves',                  [A],           false, 'lone lens approves'],
+  ['2 lenses split 1-1',                [R, A],        true,  'a split jury is not an acquittal'],
+  ['2 lenses both refute',              [R, R],        true,  'unanimous against'],
+  ['2 lenses both approve',             [A, A],        false, 'unanimous for'],
+  ['3 lenses, 1 refutes',               [R, A, A],     false, 'a lone dissenter is not a majority'],
+  ['3 lenses, 2 refute',                [R, R, A],     true,  'majority against'],
+]
+let oldFails = 0, fileFails = 0
+console.log(`predicate lifted from ${file}\n  against = ${againstExpr}${mAgainst ? '' : '  (derived — file has no against line)'}\n  refuted = ${mRefuted[1]}\n`)
+console.log('case                                  want   OLD    FILE')
+for (const [name, votes, want, why] of cases) {
+  const o = OLD(votes), f = LIFTED(votes)
+  if (o !== want) oldFails++
+  if (f !== want) fileFails++
+  console.log(`${name.padEnd(36)} ${String(want).padEnd(6)} ${o === want ? ' ok  ' : 'RED  '} ${f === want ? ' ok' : 'RED'}   ${f !== want ? '<- FILE WRONG: ' + why : ''}`)
+}
+console.log(`\nOLD shape: ${oldFails} failure(s)  <- must be > 0 or this proof is worthless`)
+console.log(`FILE:      ${fileFails} failure(s)  <- must be 0`)
+process.exit(oldFails > 0 && fileFails === 0 ? 0 : 1)

package/scripts/factory-ship.sh

@@ -0,0 +1,61 @@
+#!/usr/bin/env bash
+# factory-ship.sh — G4 (cycle 13, text/factory-do.md § The gaps, filled):
+# highway-only auto-ship. Called from factory-executor.js's Close stage after
+# a task closes verdict:ok — never before, never on a red/unrun verdict.
+#
+# manifest: monorepo-only
+#
+# Decision mirrors one.ie/web/src/lib/route-verdict.ts's shouldAutoShip(reason,
+# tier) — the ONLY case that skips the human deploy.sh Step 6 approval prompt
+# is reason=highway AND tier=patch (case-insensitive). FEATURE and SCHEMA never
+# auto-skip regardless of reason; a warn on the ship:<surface> path drops the
+# route below harden (verdictFor in route-verdict.ts), reason flips away from
+# 'highway', and this script falls through to the prompt path instead of an
+# unattended deploy.
+#
+# Usage:
+#   bash .claude/scripts/factory-ship.sh --reason <highway|classified|ceo> --tier <patch|fix|feature|schema> [--dry-run]
+#
+# Exit 0 always. Prints one line: either
+#   SHIP: deploying unprompted (reason=highway tier=patch)
+# or
+#   PROMPT: human approval required (reason=<r> tier=<t>)
+# --dry-run prints what WOULD run instead of invoking deploy.sh (used by tests
+# and by any caller that wants the decision without the side effect).
+set -uo pipefail
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+
+[[ -d "$ROOT/one.ie/web" && -d "$ROOT/pay/backend" ]] || {
+  echo "factory-ship.sh: not the one-ie monorepo: $ROOT" >&2
+  exit 2
+}
+
+REASON="" TIER="" DRY=0
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --reason) REASON="${2:-}"; shift 2 ;;
+    --tier) TIER="${2:-}"; shift 2 ;;
+    --dry-run) DRY=1; shift ;;
+    *) shift ;;
+  esac
+done
+
+[[ -n "$REASON" && -n "$TIER" ]] || {
+  echo "factory-ship.sh: --reason and --tier are required" >&2
+  exit 2
+}
+
+tier_lc="$(printf '%s' "$TIER" | tr '[:upper:]' '[:lower:]')"
+
+if [[ "$REASON" == "highway" && "$tier_lc" == "patch" ]]; then
+  echo "SHIP: deploying unprompted (reason=$REASON tier=$TIER)"
+  if [[ "$DRY" -eq 1 ]]; then
+    echo "[dry-run] would run: DEPLOY_YES=1 bash $ROOT/.claude/scripts/deploy.sh --yes"
+    exit 0
+  fi
+  DEPLOY_YES=1 bash "$ROOT/.claude/scripts/deploy.sh" --yes
+  exit $?
+fi
+
+echo "PROMPT: human approval required (reason=$REASON tier=$TIER)"
+exit 0

package/scripts/factory-tasks-check.sh

@@ -22,6 +22,23 @@
 # pointed at production writes fabricated rungs into the graph the board reads.
 set -uo pipefail
 
+# _GATE — route a heavy compute through the machine governor. A gate_lock only
+# dedupes IDENTICAL work; a SLOT is what bounds N worktrees each running one of
+# these at once (measured 2026-09-07: three concurrent 2.5GB typecheckers, every
+# lock uncontended, load 171). Empty when already inside a gate, so a nested call
+# inherits the outer slot rather than taking a second one.
+#
+# Resolves gate-run.sh from its OWN directory, deliberately: an earlier version
+# keyed off $ROOT and got inserted above the line that sets it, so _GATE was
+# silently empty and every call ran ungoverned -- a fail-OPEN, which is the exact
+# defect this preamble exists to close.
+_GATE=()
+if [ "${GOVERN_IN_GATE:-0}" != "1" ]; then
+  _GR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/gate-run.sh"
+  [ -f "$_GR" ] && _GATE=( bash "$_GR" "compute:$(basename "${BASH_SOURCE[0]}")" -- )
+fi
+
+
 ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
 MODE="${1:-ladder-live}"
 
@@ -59,7 +76,7 @@ check_ladder_live() {
         TYPEDB_USERNAME="$TYPEDB_USERNAME" \
         TYPEDB_PASSWORD="$TYPEDB_PASSWORD" \
         TYPEDB_TEST_DB="$TYPEDB_TEST_DB" \
-        bunx vitest run src/lib/resolvers/factory-ladder-live.test.ts 2>&1)
+        "${_GATE[@]}" bunx vitest run src/lib/resolvers/factory-ladder-live.test.ts 2>&1)
 
   # An empty scratch db answers "Type label 'thing' not found" — the schema was never
   # loaded there. That is an environment gap, not a broken ladder.