@oneie/claude 0.9.0 → 0.10.0

package/scripts/download-stats.sh

@@ -0,0 +1,172 @@
+#!/usr/bin/env bash
+# download-stats.sh — every lifetime reach number we can prove, in one table.
+#
+#   bash .claude/scripts/download-stats.sh              # print
+#   bash .claude/scripts/download-stats.sh --write      # + record to text/download-stats.md
+#   bash .claude/scripts/download-stats.sh --json
+#   bash .claude/scripts/download-stats.sh --self-test
+#
+# manifest: needs-env — (npm + gh + network; writes only text/download-stats.md)
+#
+# FOLDS IN npm-downloads.sh, which this replaces. Both of that script's traps
+# are live here and neither is obvious:
+#
+#   1. npm's downloads API REFUSES a range longer than 18 months — and answers
+#      that refusal with HTTP 200 and an `error` field. A naive all-time query
+#      therefore returns nothing useful without failing. All-time is a WALK: from
+#      each package's first publish (registry `time.created`), 17 months at a
+#      time, summed. Read `.error`, never the status code.
+#   2. A scoped name must be percent-encoded — `@oneie%2Fsdk`. Unencoded, the
+#      slash reads as a path separator and the API 404s, which deserialises to a
+#      zero indistinguishable from a real one. Encoded once, in enc().
+#
+# And one about WHICH packages: the list comes from the REGISTRY (search by
+# maintainer), not from manifests on disk and not from `npm access list
+# packages` — that returns EMPTY under a granular token (measured 2026-09-14:
+# "packages in scope: 0" while all 30 were readable). Reading manifests misses
+# every package not in this repo, which was 10 of 30 — including `oneie` at
+# 13,117 downloads, the single most-downloaded package we have.
+#
+# WHY A RECORDED .md: npm's per-day history is queryable back to a package's
+# first publish, so npm needs no ledger. GitHub traffic is different — it keeps
+# FOURTEEN DAYS and offers no backfill (see gh-traffic-capture.sh). The .md is
+# the durable, committed, human-readable record; the gitignored ledger is the
+# daily machine one. A snapshot appended here survives a dead laptop.
+#
+# HONESTY, because these numbers are for social proof and will be checked:
+# npm counts mirrors, CI and crawlers. "57,819 downloads" is defensible;
+# "57,819 developers" is a lie. The table separates the current @oneie scope
+# from retired lines so a headline can be sourced to the right subtotal.
+set -uo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+OUT="$ROOT/text/download-stats.md"
+MAINTAINER="${NPM_MAINTAINER:-oneie}"
+ORG="${GH_ORG:-one-ie}"
+MODE=print
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --write) MODE=write ;;
+    --json)  MODE=json ;;
+    --self-test) MODE=selftest ;;
+    -h|--help) sed -n '2,8p' "${BASH_SOURCE[0]}"; exit 0 ;;
+    *) echo "download-stats.sh: unknown flag '$1'" >&2; exit 2 ;;
+  esac
+  shift
+done
+
+command -v jq >/dev/null || { echo "download-stats.sh: needs jq" >&2; exit 2; }
+
+enc() { printf '%s' "${1/\//%2F}"; }                       # @oneie/sdk -> @oneie%2Fsdk
+today() { date -u '+%Y-%m-%d'; }
+add_months() { date -j -v+"$2"m -f '%Y-%m-%d' "$1" '+%Y-%m-%d' 2>/dev/null || date -d "$1 + $2 months" '+%Y-%m-%d' 2>/dev/null; }
+
+# all_time <pkg> — the 17-month walk described above.
+all_time() {
+  local p="$1" e c created start end total=0 body err n
+  e="$(enc "$p")"
+  created="$(npm view "$p" time.created 2>/dev/null | head -1 | cut -c1-10)"
+  [[ -n "$created" ]] || created="2024-01-01"
+  start="$created"; end="$(today)"; cursor="$start"
+  while [[ "$cursor" < "$end" ]]; do
+    stop="$(add_months "$cursor" 17)"
+    [[ -z "$stop" || "$stop" > "$end" ]] && stop="$end"
+    body="$(curl -sS --max-time 25 "https://api.npmjs.org/downloads/point/${cursor}:${stop}/${e}" 2>/dev/null)"
+    err="$(printf '%s' "$body" | jq -r '.error // empty' 2>/dev/null)"
+    if [[ -z "$err" ]]; then
+      n="$(printf '%s' "$body" | jq -r '.downloads // 0' 2>/dev/null)"
+      [[ "$n" =~ ^[0-9]+$ ]] && total=$(( total + n ))
+    fi
+    [[ "$stop" == "$end" ]] && break
+    cursor="$stop"
+  done
+  printf '%s|%s' "$total" "$created"
+}
+
+if [[ "$MODE" == selftest ]]; then
+  fails=0
+  [[ "$(enc '@oneie/sdk')" == '@oneie%2Fsdk' ]] || { echo "  FAIL: scoped name not encoded"; fails=1; }
+  [[ "$(enc 'oneie')" == 'oneie' ]] || { echo "  FAIL: unscoped name mangled"; fails=1; }
+  [[ -n "$(add_months 2026-01-01 17)" ]] || { echo "  FAIL: add_months returned nothing"; fails=1; }
+  # the 18-month refusal must be READ, not inferred from the status code
+  b="$(curl -sS --max-time 20 "https://api.npmjs.org/downloads/point/2000-01-01:$(today)/npm" 2>/dev/null)"
+  [[ -n "$(printf '%s' "$b" | jq -r '.error // empty')" ]] \
+    || { echo "  NOTE: the >18mo range did not error — the walk is still correct, the guard is just untested here"; }
+  (( fails )) && { echo "download-stats.sh: self-test FAILED"; exit 1; }
+  echo "download-stats.sh: self-test PASS"; exit 0
+fi
+
+# ── npm ──────────────────────────────────────────────────────────────────────
+pkgs="$(curl -sS --max-time 30 "https://registry.npmjs.org/-/v1/search?text=maintainer:${MAINTAINER}&size=250" 2>/dev/null | jq -r '.objects[].package.name' | sort)"
+[[ -n "$pkgs" ]] || { echo "download-stats.sh: registry search returned no packages for maintainer:${MAINTAINER}" >&2; exit 1; }
+
+rows="[]"
+while IFS= read -r p; do
+  [[ -n "$p" ]] || continue
+  at="$(all_time "$p")"
+  wk="$(curl -sS --max-time 15 "https://api.npmjs.org/downloads/point/last-week/$(enc "$p")" 2>/dev/null | jq -r '.downloads // 0')"
+  ver="$(npm view "$p" version 2>/dev/null | tail -1)"
+  rows="$(printf '%s' "$rows" | jq --arg p "$p" --arg v "$ver" --arg c "${at##*|}" \
+          --argjson t "${at%%|*}" --argjson w "${wk:-0}" \
+          '. + [{package:$p,version:$v,since:$c,all_time:$t,last_week:$w,scoped:($p|startswith("@"))}]')"
+done <<< "$pkgs"
+
+NPM_ALL="$(printf '%s' "$rows" | jq '[.[].all_time]|add // 0')"
+NPM_WK="$(printf '%s' "$rows" | jq '[.[].last_week]|add // 0')"
+NPM_SCOPED="$(printf '%s' "$rows" | jq '[.[]|select(.scoped)|.all_time]|add // 0')"
+NPM_COUNT="$(printf '%s' "$rows" | jq 'length')"
+
+# ── github ───────────────────────────────────────────────────────────────────
+repos="$(gh api "orgs/$ORG/repos?per_page=100&type=public" 2>/dev/null)"
+GH_STARS="$(printf '%s' "$repos" | jq '[.[].stargazers_count]|add // 0')"
+GH_FORKS="$(printf '%s' "$repos" | jq '[.[].forks_count]|add // 0')"
+GH_REPOS="$(printf '%s' "$repos" | jq 'length')"
+GH_CLONES=0; GH_UNIQ=0
+while IFS= read -r r; do
+  [[ -n "$r" ]] || continue
+  t="$(gh api "repos/$r/traffic/clones" --jq '"\(.count) \(.uniques)"' 2>/dev/null)" || continue
+  GH_CLONES=$(( GH_CLONES + ${t%% *} )); GH_UNIQ=$(( GH_UNIQ + ${t##* } ))
+done < <(printf '%s' "$repos" | jq -r '.[].full_name')
+
+if [[ "$MODE" == json ]]; then
+  jq -n --argjson pkgs "$rows" --arg d "$(today)" \
+    --argjson na "$NPM_ALL" --argjson nw "$NPM_WK" --argjson ns "$NPM_SCOPED" --argjson nc "$NPM_COUNT" \
+    --argjson gs "$GH_STARS" --argjson gf "$GH_FORKS" --argjson gr "$GH_REPOS" \
+    --argjson gc "$GH_CLONES" --argjson gu "$GH_UNIQ" \
+    '{date:$d, npm:{packages:$nc, all_time:$na, scope_all_time:$ns, last_week:$nw, rows:$pkgs},
+      github:{repos:$gr, stars:$gs, forks:$gf, clones_14d:$gc, unique_cloners_14d:$gu}}'
+  exit 0
+fi
+
+emit() {
+  printf '# Download stats\n\n'
+  printf '_Measured %s by `.claude/scripts/download-stats.sh`. Every figure is re-derivable — no number here was typed by hand._\n\n' "$(today)"
+  printf '## Headline\n\n| metric | value | source |\n|---|---:|---|\n'
+  printf '| npm downloads, all time | **%s** | downloads API, per package since first publish |\n' "$NPM_ALL"
+  printf '| npm downloads, `@%s` scope | **%s** | the current product line only |\n' "$MAINTAINER" "$NPM_SCOPED"
+  printf '| npm downloads, last week | %s | downloads API |\n' "$NPM_WK"
+  printf '| packages published | **%s** | registry, maintainer `%s` |\n' "$NPM_COUNT" "$MAINTAINER"
+  printf '| GitHub stars | **%s** | %s public repos, org-wide |\n' "$GH_STARS" "$GH_REPOS"
+  printf '| GitHub forks | %s | org-wide |\n' "$GH_FORKS"
+  printf '| unique cloners, 14d | **%s** | %s clones — GitHub keeps only 14 days |\n\n' "$GH_UNIQ" "$GH_CLONES"
+  printf '## Packages\n\n| package | version | all time | last week | since |\n|---|---|---:|---:|---|\n'
+  printf '%s' "$rows" | jq -r 'sort_by(-.all_time)[] | "| `\(.package)` | \(.version) | \(.all_time) | \(.last_week) | \(.since) |"'
+  printf '\n## Using these for social proof\n\n'
+  printf 'npm counts mirrors, CI and crawlers alongside people. **%s downloads** is defensible; ' "$NPM_ALL"
+  printf '"%s developers" is not — say downloads, or cite unique cloners (**%s in 14 days**), which are closer to humans.\n\n' "$NPM_ALL" "$GH_UNIQ"
+  printf 'The all-time total spans retired lines as well as the current one. For claims about the product as it stands today, '
+  printf 'the honest subtotal is the **`@%s` scope: %s**.\n\n' "$MAINTAINER" "$NPM_SCOPED"
+  printf '## What cannot be recovered\n\n'
+  printf 'GitHub keeps **14 days** of clone and view traffic and offers no backfill, so all-time clones do not exist for any repo. '
+  printf '`.claude/scripts/gh-traffic-capture.sh` runs daily to stop further days being lost; everything before its first run is gone.\n'
+}
+
+if [[ "$MODE" == write ]]; then
+  mkdir -p "$(dirname "$OUT")"
+  emit > "$OUT"
+  echo "  ✓ recorded → text/download-stats.md ($(wc -l < "$OUT" | tr -d ' ') lines)"
+  echo "    npm all-time=$NPM_ALL  scope=$NPM_SCOPED  packages=$NPM_COUNT  stars=$GH_STARS  uniq-cloners-14d=$GH_UNIQ"
+else
+  emit
+fi

package/scripts/factory-repo.sh

@@ -57,6 +57,16 @@ head_() { printf '\n== %s\n' "$*"; }
 #                  that degrade to no-ops when absent             → ships
 #   monorepo-only  hard-asserts against THIS tree; refuses
 #                  without it                                     → never ships
+#
+# Why gc-content-check.sh is `needs-env` and not `portable`: it builds its own
+# sandbox and never reaches into this tree, so it is portable by behaviour — but
+# it must spell `one.ie/web/.astro` literally, because that path is hardcoded in
+# lib/gc-finished.sh's GC_EPHEMERAL default and a sandbox that used a neutral
+# name would stop exercising the filter it exists to test. Rather than teach the
+# matcher an exemption that would also silence a real reach (`$ROOT/one.ie/ai`
+# in close-owner.sh is the same shape), the bucket is the answer: needs-env
+# ships identically and claims less. /vespio § 0 — a misbehaving bucket is a
+# reclassification, not a bug.
 # ---------------------------------------------------------------------------
 manifest() {
   cat <<'MANIFEST'
@@ -64,6 +74,7 @@ portable       browser-check.mjs
 portable       chrome.mjs
 portable       do-analyze.sh
 portable       gate-reaper.sh
+portable       gate-watchdog.sh
 portable       health.sh
 portable       govern-bound-check.sh
 portable       factory-width.sh
@@ -71,6 +82,7 @@ portable       factory-executor-check.mjs
 portable       factory-peak.sh
 portable       do-learn-loop.sh
 portable       do-promise-lint.sh
+portable       do-world-check.sh
 portable       do-recon-cache.sh
 portable       do-cycle-shape-check.sh
 portable       do-next.sh
@@ -82,8 +94,8 @@ portable       do-validate-armed.py
 portable       factory-brief-check.sh
 portable       fixtures/triage-dupe.md
 portable       gate-run.sh
+portable       memory-index-budget.sh
 portable       gate-reaper-check.sh
-portable       gc-content-check.sh
 portable       govern-mem-check.sh
 portable       governor-escape-check.sh
 portable       lib/gc-finished.sh
@@ -93,8 +105,18 @@ portable       package.json
 portable       w1-recon.ts
 portable       wf-check.mjs
 needs-env      cc-connect.sh
+needs-env      download-stats.sh
+needs-env      gh-traffic-capture.sh
+needs-env      verify-board-doors.sh
+needs-env      blocks-manifest-cached.sh
+needs-env      close-metrics.sh
+needs-env      close-owner.sh
+needs-env      do-close.sh
+needs-env      do-decide.sh
+needs-env      gc-content-check.sh
 needs-env      do-accept.sh
 needs-env      do-auto.sh
+needs-env      do-board.sh
 needs-env      do-derives-check.sh
 needs-env      do-fleet.sh
 needs-env      do-folder.sh
@@ -133,7 +155,16 @@ needs-env      reconcile-allow.txt
 needs-env      rubric-weights.json
 needs-env      w4-rubric.ts
 needs-env      govern-claims-check.sh
+needs-env      govern-order-check.sh
 needs-env      signal-watch.sh
+monorepo-only  thread-name-backfill.ts
+monorepo-only  signal-meta-backfill.ts
+monorepo-only  task-titles-dump.ts
+monorepo-only  CLAUDE.md
+monorepo-only  agent-actor-parity.sh
+monorepo-only  chat-context-check.sh
+monorepo-only  triage-shape-check.sh
+monorepo-only  deploy-ready.sh
 monorepo-only  substrate-env-parity.mjs
 monorepo-only  typedb-flake-check.sh
 monorepo-only  env-sync.sh
@@ -199,10 +230,12 @@ monorepo-only  typedb-cluster-status.sh
 monorepo-only  typedb-env.sh
 monorepo-only  typedb-flap-recorder.sh
 monorepo-only  typedb-scratch.sh
+monorepo-only  deploy-schema-check.sh
 monorepo-only  typedb-probes/containment-probe.py
 monorepo-only  typedb-probes/panic-probe-version.py
 monorepo-only  typedb-probes/panic-probe.py
 monorepo-only  urls-lint.sh
+monorepo-only  redirect-lint.sh
 monorepo-only  deploy-dev.sh
 monorepo-only  fleet-status.sh
 monorepo-only  gen-dev-config.py
@@ -213,6 +246,8 @@ monorepo-only  tasks-claim-race.mjs
 monorepo-only  tasks-loop.sh
 monorepo-only  verify-fast.sh
 monorepo-only  vespio-sync.sh
+monorepo-only  sweep.sh
+monorepo-only  incident.sh
 MANIFEST
 }
 
@@ -322,6 +357,22 @@ build() {
     echo "refusing: $TARGET exists and is not empty" >&2; return 2
   fi
 
+  # RUN FROM THE MAIN TREE. ROOT derives from BASH_SOURCE and WS from its
+  # parent, so invoked as .claude/worktrees/<x>/.claude/scripts/factory-repo.sh
+  # both are wrong: ROOT names the worktree and WS names `worktrees/`. The
+  # scrub in portabilise() is written against those two strings, so every
+  # literal /Users/<you>/Server/one-ie in a tracked file survives it. Measured
+  # 2026-09-14 from .claude/worktrees/dev: the emit refused naming 10 files and
+  # 5 paths, NONE of them real — a false RED, and had the scrub been laxer it
+  # would have emitted a tree with the maintainer's disk in it. Same trap as
+  # land.sh and release.sh, one directory over.
+  if [ -f "$ROOT/.git" ]; then
+    echo "refusing: $ROOT is a linked worktree, not the main checkout." >&2
+    echo "  ROOT and WS would both be wrong and the scrub would miss every" >&2
+    echo "  absolute path. Run the MAIN tree's copy of this script." >&2
+    return 2
+  fi
+
   local STAGE; STAGE="$(mktemp -d)"
   # No RETURN trap: bash keeps a RETURN trap set inside a function as the
   # shell's trap, so it fires again (with STAGE unbound) on every later

package/scripts/flywheel-outcome.sh

@@ -0,0 +1,63 @@
+#!/usr/bin/env bash
+# flywheel-outcome.sh — the kill-switch for text/flywheel-todo.md.
+#
+# manifest: needs-env  (reads GATEWAY_API_KEY from one.ie/web/.dev.vars; read-only probes)
+#
+# Exits 0 only when the flywheel plan's goal is TRUE in production:
+#   1. a child's plan is not readable without auth        (rung 0)
+#   2. the router warms on the one shape it has learned    (read edge)
+#   3. the world routes tagged work to a head, not a model (namespace)
+#   4. a fresh caller with only the workspace key can recall a memory (memory IN)
+#   5. a second promise has settled-kept                   (the circuit)
+# Every probe is one HTTP call. Each prints its own line; the first red stops nothing —
+# all five run so the report shows which are still owed. Measured RED on 2026-09-15.
+set -u
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+K="$(grep -m1 '^GATEWAY_API_KEY' "$ROOT/one.ie/web/.dev.vars" | cut -d= -f2- | tr -d '"' | tr -d "'" | tr -d ' ')"
+[ -n "$K" ] || { echo "flywheel-outcome: no GATEWAY_API_KEY in one.ie/web/.dev.vars"; exit 2; }
+BASE="${ONE_API_URL:-https://one.ie}"
+ask() { curl -s -m 40 -X POST "$BASE/api/ask/$1" -H "Authorization: Bearer $K" -H 'Content-Type: application/json' -H 'User-Agent: flywheel-outcome/1' -d "$2"; }
+red=0
+say() { printf '  %-4s %s\n' "$1" "$2"; [ "$1" = "RED" ] && red=$((red+1)); }
+
+# 1 · rung 0
+code="$(curl -s -o /dev/null -w '%{http_code}' -m 30 -H 'User-Agent: flywheel-outcome/1' "$BASE/ehc/cyp-005/plan?as=cyp-voice")"
+if [ "$code" != "200" ]; then say OK "rung 0: /ehc/cyp-005/plan?as=cyp-voice → $code without auth"; else say RED "rung 0: /ehc/cyp-005/plan?as=cyp-voice → 200 without auth"; fi
+
+# 2 · router read edge
+r="$(ask world:pick-model '{"data":{"shape":"do:complex"}}')"
+reason="$(printf '%s' "$r" | python3 -c 'import json,sys
+try:
+  d=json.load(sys.stdin); r=d.get("result") or d; print(r.get("reason") or d.get("reason") or "?")
+except Exception: print("?")')"
+if [ "$reason" = "warmed" ]; then say OK "router: world:pick-model do:complex → warmed"; else say RED "router: world:pick-model do:complex → $reason"; fi
+
+# 3 · namespace
+a="$(ask world:route '{"data":{"tags":["engineering"],"workspace":"one"}}' | python3 -c 'import json,sys
+try:
+  d=json.load(sys.stdin); r=d.get("result") or d; print(r.get("actor") or "?")
+except Exception: print("?")')"
+# world:route is not deterministic across calls (measured 2026-09-15: `chairman` once, `model:sonnet` three
+# times in the same minute), so the actor read alone cannot be the gate. The deterministic half is the
+# count of tag→model rows in the store the verbs write to: 50 rows / 207.5 strength today, must be 0.
+tm="$(cd "$ROOT/one.ie/web" && npx wrangler d1 execute one-owners --remote --json --command "SELECT count(*) AS n FROM claw_paths WHERE source LIKE 'tag:%' AND target LIKE 'model:%'" 2>/dev/null | python3 -c 'import json,sys
+try: print(json.load(sys.stdin)[0]["results"][0]["n"])
+except Exception: print("?")')"
+case "$a" in model:*|factory-turn|"?") say RED "namespace: world:route engineering → $a; tag→model rows = $tm" ;;
+  *) if [ "$tm" = "0" ]; then say OK "namespace: world:route engineering → $a; tag→model rows = 0"; else say RED "namespace: world:route engineering → $a, but tag→model rows = $tm (need 0)"; fi ;; esac
+
+# 4 · memory IN
+n="$(ask meta:recall '{"data":{"match":"STRIPE_MODE"}}' | python3 -c 'import json,sys
+try:
+  d=json.load(sys.stdin); r=d.get("result") or d; print(len(r.get("hypotheses") or []))
+except Exception: print(0)')"
+if [ "${n:-0}" -ge 1 ]; then say OK "memory: meta:recall STRIPE_MODE → $n"; else say RED "memory: meta:recall STRIPE_MODE → ${n:-0}"; fi
+
+# 5 · the circuit — promises settled-kept (D1, read-only)
+kept="$(cd "$ROOT/one.ie/web" && npx wrangler d1 execute one-owners --remote --json --command "SELECT count(*) AS n FROM promises WHERE state='settled-kept'" 2>/dev/null | python3 -c 'import json,sys
+try: print(json.load(sys.stdin)[0]["results"][0]["n"])
+except Exception: print("?")')"
+if [ "$kept" != "?" ] && [ "$kept" -ge 2 ] 2>/dev/null; then say OK "circuit: promises settled-kept = $kept"; else say RED "circuit: promises settled-kept = $kept (need ≥ 2)"; fi
+
+echo "flywheel-outcome: $red of 5 RED"
+[ "$red" -eq 0 ]

package/scripts/gate-reaper-check.sh

@@ -40,7 +40,7 @@ cat > "$SANDBOX/table" <<EOF
 1001 1 45:00 /repo/someapp/web/$WD
 1002 29457 45:00 /repo/someapp/web/$WD
 1003 1 01:00 /repo/someapp/web/$WD
-1004 1 45:00 /Users/toc/bin/cc-connect.sh daemon run verify
+1004 1 45:00 /repo/bin/cc-connect.sh daemon run verify
 1005 1 45:00 /usr/local/bin/workerd serve --binary --experimental
 1006 1 45:00 bash /repo/.claude/scripts/gate-run.sh verify -- bun run verify
 EOF