@opengsd/gsd-path 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (398) hide show
  1. package/AGENTS.md +397 -0
  2. package/DOCS.md +341 -0
  3. package/FULL.md +475 -0
  4. package/GUIDE.md +23 -0
  5. package/HOOKS.md +273 -0
  6. package/LICENSE +21 -0
  7. package/MIGRATE.md +100 -0
  8. package/QUICK.md +146 -0
  9. package/README.md +280 -0
  10. package/RUNTIME.md +229 -0
  11. package/UPDATE.md +196 -0
  12. package/WORKFLOW.md +683 -0
  13. package/package.json +80 -0
  14. package/platforms/claude/dispatch.md +63 -0
  15. package/platforms/copilot/dispatch.md +61 -0
  16. package/platforms/cursor/agent.md +17 -0
  17. package/platforms/cursor/dispatch.md +63 -0
  18. package/platforms/grok/dispatch.md +61 -0
  19. package/platforms/kimi/dispatch.md +64 -0
  20. package/platforms/kiro/dispatch.md +58 -0
  21. package/platforms/opencode/dispatch.md +62 -0
  22. package/platforms/qwen/dispatch.md +60 -0
  23. package/platforms/shared-agents/dispatch.md +131 -0
  24. package/plugin.json +14 -0
  25. package/scripts/_common.py +180 -0
  26. package/scripts/archive_milestone.py +2265 -0
  27. package/scripts/bootstrap_repository.py +710 -0
  28. package/scripts/build_state.py +854 -0
  29. package/scripts/check_docs_audit.py +463 -0
  30. package/scripts/check_handoffs.py +1855 -0
  31. package/scripts/check_task_briefs.py +376 -0
  32. package/scripts/check_update.py +93 -0
  33. package/scripts/core_hook_gate.py +34 -0
  34. package/scripts/core_hook_settings.py +119 -0
  35. package/scripts/detect_project.py +1517 -0
  36. package/scripts/discussion_records.py +619 -0
  37. package/scripts/discussion_validate.py +1321 -0
  38. package/scripts/dispatch_driver.py +1812 -0
  39. package/scripts/git_guard.py +759 -0
  40. package/scripts/guard_hook.py +2124 -0
  41. package/scripts/install.mjs +3239 -0
  42. package/scripts/install.py +3008 -0
  43. package/scripts/integration.py +1433 -0
  44. package/scripts/isolation.py +3538 -0
  45. package/scripts/lean_verification.py +256 -0
  46. package/scripts/loop_run.py +837 -0
  47. package/scripts/migrate_core.py +169 -0
  48. package/scripts/pipeline_diagnose.py +715 -0
  49. package/scripts/pipeline_git.py +940 -0
  50. package/scripts/pipeline_state.py +2291 -0
  51. package/scripts/pipeline_undo.py +1039 -0
  52. package/scripts/promote_lookahead.py +415 -0
  53. package/scripts/review_findings.py +714 -0
  54. package/scripts/review_panel.py +553 -0
  55. package/scripts/skill-resources.json +340 -0
  56. package/scripts/state_checkpoint.py +1039 -0
  57. package/scripts/state_promote.py +743 -0
  58. package/scripts/status_runtime.py +122 -0
  59. package/scripts/sync_skill_resources.py +259 -0
  60. package/scripts/token_budget.py +146 -0
  61. package/scripts/wizard.mjs +179 -0
  62. package/scripts/workflow_run.py +117 -0
  63. package/skills/gsd-path/BUILD.md +700 -0
  64. package/skills/gsd-path/DECIDE.md +115 -0
  65. package/skills/gsd-path/DEFINE.md +297 -0
  66. package/skills/gsd-path/DOCS-AUDIT.md +190 -0
  67. package/skills/gsd-path/INSPECT.md +167 -0
  68. package/skills/gsd-path/PLAN.md +411 -0
  69. package/skills/gsd-path/RESEARCH.md +159 -0
  70. package/skills/gsd-path/ROADMAP.md +215 -0
  71. package/skills/gsd-path/SHIP.md +412 -0
  72. package/skills/gsd-path/SKILL.md +471 -0
  73. package/skills/gsd-path/agents/openai.yaml +6 -0
  74. package/skills/gsd-path/references/codebase-mapper.md +52 -0
  75. package/skills/gsd-path/references/coder.md +90 -0
  76. package/skills/gsd-path/references/decider.md +36 -0
  77. package/skills/gsd-path/references/dispatch.md +131 -0
  78. package/skills/gsd-path/references/docs-auditor.md +60 -0
  79. package/skills/gsd-path/references/planner.md +104 -0
  80. package/skills/gsd-path/references/researcher.md +42 -0
  81. package/skills/gsd-path/references/reviewer.md +188 -0
  82. package/skills/gsd-path/references/roadmapper.md +48 -0
  83. package/skills/gsd-path/scripts/_common.py +180 -0
  84. package/skills/gsd-path/scripts/archive_milestone.py +2265 -0
  85. package/skills/gsd-path/scripts/bootstrap_repository.py +710 -0
  86. package/skills/gsd-path/scripts/build_state.py +854 -0
  87. package/skills/gsd-path/scripts/check_docs_audit.py +463 -0
  88. package/skills/gsd-path/scripts/check_handoffs.py +1855 -0
  89. package/skills/gsd-path/scripts/check_task_briefs.py +376 -0
  90. package/skills/gsd-path/scripts/check_update.py +93 -0
  91. package/skills/gsd-path/scripts/detect_project.py +1517 -0
  92. package/skills/gsd-path/scripts/discussion_records.py +619 -0
  93. package/skills/gsd-path/scripts/discussion_validate.py +1321 -0
  94. package/skills/gsd-path/scripts/dispatch_driver.py +1812 -0
  95. package/skills/gsd-path/scripts/integration.py +1433 -0
  96. package/skills/gsd-path/scripts/isolation.py +3538 -0
  97. package/skills/gsd-path/scripts/lean_verification.py +256 -0
  98. package/skills/gsd-path/scripts/loop_run.py +837 -0
  99. package/skills/gsd-path/scripts/pipeline_git.py +940 -0
  100. package/skills/gsd-path/scripts/pipeline_state.py +2291 -0
  101. package/skills/gsd-path/scripts/promote_lookahead.py +415 -0
  102. package/skills/gsd-path/scripts/review_findings.py +714 -0
  103. package/skills/gsd-path/scripts/review_panel.py +553 -0
  104. package/skills/gsd-path/scripts/state_checkpoint.py +1039 -0
  105. package/skills/gsd-path/scripts/state_promote.py +743 -0
  106. package/skills/gsd-path/scripts/token_budget.py +146 -0
  107. package/skills/gsd-path/scripts/workflow_run.py +117 -0
  108. package/skills/gsd-path/templates/answers.md +29 -0
  109. package/skills/gsd-path/templates/archive-manifest.md +37 -0
  110. package/skills/gsd-path/templates/charter.md +50 -0
  111. package/skills/gsd-path/templates/codebase.md +46 -0
  112. package/skills/gsd-path/templates/dialogue.md +21 -0
  113. package/skills/gsd-path/templates/docs-audit.md +69 -0
  114. package/skills/gsd-path/templates/evidence.md +24 -0
  115. package/skills/gsd-path/templates/final-review.md +27 -0
  116. package/skills/gsd-path/templates/gap-review.md +20 -0
  117. package/skills/gsd-path/templates/intent.md +98 -0
  118. package/skills/gsd-path/templates/loop.md +59 -0
  119. package/skills/gsd-path/templates/patch-findings.md +16 -0
  120. package/skills/gsd-path/templates/plan-panel.md +25 -0
  121. package/skills/gsd-path/templates/plan.md +89 -0
  122. package/skills/gsd-path/templates/repository.md +16 -0
  123. package/skills/gsd-path/templates/research-handoff.md +25 -0
  124. package/skills/gsd-path/templates/roadmap.md +38 -0
  125. package/skills/gsd-path/templates/skeptic.md +36 -0
  126. package/skills/gsd-path/templates/state.md +27 -0
  127. package/skills/gsd-path/templates/synthesis.md +36 -0
  128. package/skills/gsd-path/templates/task.md +74 -0
  129. package/skills/gsd-path/templates/wave-panel.md +25 -0
  130. package/skills/gsd-path/templates/wave-review.md +64 -0
  131. package/skills/gsd-path-build/SKILL.md +700 -0
  132. package/skills/gsd-path-build/agents/openai.yaml +6 -0
  133. package/skills/gsd-path-build/references/coder.md +90 -0
  134. package/skills/gsd-path-build/references/dispatch.md +131 -0
  135. package/skills/gsd-path-build/references/reviewer.md +188 -0
  136. package/skills/gsd-path-build/scripts/_common.py +180 -0
  137. package/skills/gsd-path-build/scripts/archive_milestone.py +2265 -0
  138. package/skills/gsd-path-build/scripts/build_state.py +854 -0
  139. package/skills/gsd-path-build/scripts/check_handoffs.py +1855 -0
  140. package/skills/gsd-path-build/scripts/check_task_briefs.py +376 -0
  141. package/skills/gsd-path-build/scripts/discussion_records.py +619 -0
  142. package/skills/gsd-path-build/scripts/discussion_validate.py +1321 -0
  143. package/skills/gsd-path-build/scripts/dispatch_driver.py +1812 -0
  144. package/skills/gsd-path-build/scripts/integration.py +1433 -0
  145. package/skills/gsd-path-build/scripts/isolation.py +3538 -0
  146. package/skills/gsd-path-build/scripts/loop_run.py +837 -0
  147. package/skills/gsd-path-build/scripts/pipeline_git.py +940 -0
  148. package/skills/gsd-path-build/scripts/pipeline_state.py +2291 -0
  149. package/skills/gsd-path-build/scripts/review_findings.py +714 -0
  150. package/skills/gsd-path-build/scripts/review_panel.py +553 -0
  151. package/skills/gsd-path-build/scripts/state_checkpoint.py +1039 -0
  152. package/skills/gsd-path-build/scripts/state_promote.py +743 -0
  153. package/skills/gsd-path-build/scripts/token_budget.py +146 -0
  154. package/skills/gsd-path-build/scripts/workflow_run.py +117 -0
  155. package/skills/gsd-path-build/templates/skeptic.md +36 -0
  156. package/skills/gsd-path-build/templates/task.md +74 -0
  157. package/skills/gsd-path-build/templates/wave-panel.md +25 -0
  158. package/skills/gsd-path-build/templates/wave-review.md +64 -0
  159. package/skills/gsd-path-decide/SKILL.md +115 -0
  160. package/skills/gsd-path-decide/agents/openai.yaml +6 -0
  161. package/skills/gsd-path-decide/references/decider.md +36 -0
  162. package/skills/gsd-path-decide/references/dispatch.md +131 -0
  163. package/skills/gsd-path-decide/scripts/_common.py +180 -0
  164. package/skills/gsd-path-decide/scripts/check_handoffs.py +1855 -0
  165. package/skills/gsd-path-decide/scripts/check_task_briefs.py +376 -0
  166. package/skills/gsd-path-decide/scripts/discussion_records.py +619 -0
  167. package/skills/gsd-path-decide/scripts/isolation.py +3538 -0
  168. package/skills/gsd-path-decide/scripts/pipeline_git.py +940 -0
  169. package/skills/gsd-path-decide/scripts/pipeline_state.py +2291 -0
  170. package/skills/gsd-path-decide/scripts/state_checkpoint.py +1039 -0
  171. package/skills/gsd-path-decide/scripts/state_promote.py +743 -0
  172. package/skills/gsd-path-decide/templates/synthesis.md +36 -0
  173. package/skills/gsd-path-define/SKILL.md +297 -0
  174. package/skills/gsd-path-define/agents/openai.yaml +6 -0
  175. package/skills/gsd-path-define/scripts/_common.py +180 -0
  176. package/skills/gsd-path-define/scripts/check_handoffs.py +1855 -0
  177. package/skills/gsd-path-define/scripts/check_task_briefs.py +376 -0
  178. package/skills/gsd-path-define/scripts/detect_project.py +1517 -0
  179. package/skills/gsd-path-define/scripts/discussion_records.py +619 -0
  180. package/skills/gsd-path-define/scripts/isolation.py +3538 -0
  181. package/skills/gsd-path-define/scripts/pipeline_git.py +940 -0
  182. package/skills/gsd-path-define/scripts/pipeline_state.py +2291 -0
  183. package/skills/gsd-path-define/scripts/state_checkpoint.py +1039 -0
  184. package/skills/gsd-path-define/scripts/state_promote.py +743 -0
  185. package/skills/gsd-path-define/templates/charter.md +50 -0
  186. package/skills/gsd-path-define/templates/intent.md +98 -0
  187. package/skills/gsd-path-define/templates/state.md +27 -0
  188. package/skills/gsd-path-discuss/SKILL.md +162 -0
  189. package/skills/gsd-path-discuss/agents/openai.yaml +6 -0
  190. package/skills/gsd-path-discuss/scripts/_common.py +180 -0
  191. package/skills/gsd-path-discuss/scripts/discussion_records.py +619 -0
  192. package/skills/gsd-path-discuss/templates/answers.md +29 -0
  193. package/skills/gsd-path-discuss/templates/dialogue.md +21 -0
  194. package/skills/gsd-path-docs-audit/SKILL.md +190 -0
  195. package/skills/gsd-path-docs-audit/agents/openai.yaml +6 -0
  196. package/skills/gsd-path-docs-audit/references/dispatch.md +131 -0
  197. package/skills/gsd-path-docs-audit/references/docs-auditor.md +60 -0
  198. package/skills/gsd-path-docs-audit/scripts/_common.py +180 -0
  199. package/skills/gsd-path-docs-audit/scripts/check_docs_audit.py +463 -0
  200. package/skills/gsd-path-docs-audit/scripts/check_handoffs.py +1855 -0
  201. package/skills/gsd-path-docs-audit/scripts/check_task_briefs.py +376 -0
  202. package/skills/gsd-path-docs-audit/scripts/discussion_records.py +619 -0
  203. package/skills/gsd-path-docs-audit/scripts/isolation.py +3538 -0
  204. package/skills/gsd-path-docs-audit/scripts/pipeline_git.py +940 -0
  205. package/skills/gsd-path-docs-audit/scripts/pipeline_state.py +2291 -0
  206. package/skills/gsd-path-docs-audit/scripts/state_checkpoint.py +1039 -0
  207. package/skills/gsd-path-docs-audit/scripts/state_promote.py +743 -0
  208. package/skills/gsd-path-docs-audit/templates/docs-audit.md +69 -0
  209. package/skills/gsd-path-forensics/SKILL.md +39 -0
  210. package/skills/gsd-path-forensics/agents/openai.yaml +6 -0
  211. package/skills/gsd-path-forensics/scripts/_common.py +180 -0
  212. package/skills/gsd-path-forensics/scripts/discussion_records.py +619 -0
  213. package/skills/gsd-path-forensics/scripts/pipeline_diagnose.py +715 -0
  214. package/skills/gsd-path-forensics/scripts/pipeline_undo.py +1039 -0
  215. package/skills/gsd-path-inspect/SKILL.md +167 -0
  216. package/skills/gsd-path-inspect/agents/openai.yaml +6 -0
  217. package/skills/gsd-path-inspect/references/codebase-mapper.md +52 -0
  218. package/skills/gsd-path-inspect/references/dispatch.md +131 -0
  219. package/skills/gsd-path-inspect/references/docs-auditor.md +60 -0
  220. package/skills/gsd-path-inspect/scripts/_common.py +180 -0
  221. package/skills/gsd-path-inspect/scripts/check_docs_audit.py +463 -0
  222. package/skills/gsd-path-inspect/scripts/check_handoffs.py +1855 -0
  223. package/skills/gsd-path-inspect/scripts/check_task_briefs.py +376 -0
  224. package/skills/gsd-path-inspect/scripts/detect_project.py +1517 -0
  225. package/skills/gsd-path-inspect/scripts/discussion_records.py +619 -0
  226. package/skills/gsd-path-inspect/scripts/isolation.py +3538 -0
  227. package/skills/gsd-path-inspect/scripts/pipeline_git.py +940 -0
  228. package/skills/gsd-path-inspect/scripts/pipeline_state.py +2291 -0
  229. package/skills/gsd-path-inspect/scripts/state_checkpoint.py +1039 -0
  230. package/skills/gsd-path-inspect/scripts/state_promote.py +743 -0
  231. package/skills/gsd-path-inspect/templates/codebase.md +46 -0
  232. package/skills/gsd-path-inspect/templates/docs-audit.md +69 -0
  233. package/skills/gsd-path-inspect/templates/state.md +27 -0
  234. package/skills/gsd-path-loop/SKILL.md +98 -0
  235. package/skills/gsd-path-loop/agents/openai.yaml +6 -0
  236. package/skills/gsd-path-loop/examples/ci-repair.LOOP.md +61 -0
  237. package/skills/gsd-path-loop/scripts/_common.py +180 -0
  238. package/skills/gsd-path-loop/scripts/discussion_records.py +619 -0
  239. package/skills/gsd-path-loop/scripts/loop_run.py +837 -0
  240. package/skills/gsd-path-loop/templates/loop.md +59 -0
  241. package/skills/gsd-path-migrate/SKILL.md +134 -0
  242. package/skills/gsd-path-migrate/agents/openai.yaml +6 -0
  243. package/skills/gsd-path-migrate/scripts/core_hook_gate.py +34 -0
  244. package/skills/gsd-path-migrate/scripts/core_hook_settings.py +119 -0
  245. package/skills/gsd-path-migrate/scripts/discussion_records.py +619 -0
  246. package/skills/gsd-path-migrate/scripts/migrate_core.py +169 -0
  247. package/skills/gsd-path-plan/SKILL.md +411 -0
  248. package/skills/gsd-path-plan/agents/openai.yaml +6 -0
  249. package/skills/gsd-path-plan/references/dispatch.md +131 -0
  250. package/skills/gsd-path-plan/references/planner.md +104 -0
  251. package/skills/gsd-path-plan/scripts/_common.py +180 -0
  252. package/skills/gsd-path-plan/scripts/check_handoffs.py +1855 -0
  253. package/skills/gsd-path-plan/scripts/check_task_briefs.py +376 -0
  254. package/skills/gsd-path-plan/scripts/discussion_records.py +619 -0
  255. package/skills/gsd-path-plan/scripts/isolation.py +3538 -0
  256. package/skills/gsd-path-plan/scripts/pipeline_git.py +940 -0
  257. package/skills/gsd-path-plan/scripts/pipeline_state.py +2291 -0
  258. package/skills/gsd-path-plan/scripts/review_panel.py +553 -0
  259. package/skills/gsd-path-plan/scripts/state_checkpoint.py +1039 -0
  260. package/skills/gsd-path-plan/scripts/state_promote.py +743 -0
  261. package/skills/gsd-path-plan/scripts/workflow_run.py +117 -0
  262. package/skills/gsd-path-plan/templates/patch-findings.md +16 -0
  263. package/skills/gsd-path-plan/templates/plan-panel.md +25 -0
  264. package/skills/gsd-path-plan/templates/plan.md +89 -0
  265. package/skills/gsd-path-plan/templates/task.md +74 -0
  266. package/skills/gsd-path-research/SKILL.md +159 -0
  267. package/skills/gsd-path-research/agents/openai.yaml +6 -0
  268. package/skills/gsd-path-research/references/dispatch.md +131 -0
  269. package/skills/gsd-path-research/references/researcher.md +42 -0
  270. package/skills/gsd-path-research/scripts/_common.py +180 -0
  271. package/skills/gsd-path-research/scripts/check_handoffs.py +1855 -0
  272. package/skills/gsd-path-research/scripts/check_task_briefs.py +376 -0
  273. package/skills/gsd-path-research/scripts/discussion_records.py +619 -0
  274. package/skills/gsd-path-research/scripts/isolation.py +3538 -0
  275. package/skills/gsd-path-research/scripts/pipeline_git.py +940 -0
  276. package/skills/gsd-path-research/scripts/pipeline_state.py +2291 -0
  277. package/skills/gsd-path-research/scripts/state_checkpoint.py +1039 -0
  278. package/skills/gsd-path-research/scripts/state_promote.py +743 -0
  279. package/skills/gsd-path-research/templates/evidence.md +24 -0
  280. package/skills/gsd-path-research/templates/research-handoff.md +25 -0
  281. package/skills/gsd-path-roadmap/SKILL.md +215 -0
  282. package/skills/gsd-path-roadmap/agents/openai.yaml +6 -0
  283. package/skills/gsd-path-roadmap/references/dispatch.md +131 -0
  284. package/skills/gsd-path-roadmap/references/roadmapper.md +48 -0
  285. package/skills/gsd-path-roadmap/scripts/_common.py +180 -0
  286. package/skills/gsd-path-roadmap/scripts/archive_milestone.py +2265 -0
  287. package/skills/gsd-path-roadmap/scripts/check_handoffs.py +1855 -0
  288. package/skills/gsd-path-roadmap/scripts/check_task_briefs.py +376 -0
  289. package/skills/gsd-path-roadmap/scripts/detect_project.py +1517 -0
  290. package/skills/gsd-path-roadmap/scripts/discussion_records.py +619 -0
  291. package/skills/gsd-path-roadmap/scripts/discussion_validate.py +1321 -0
  292. package/skills/gsd-path-roadmap/scripts/integration.py +1433 -0
  293. package/skills/gsd-path-roadmap/scripts/isolation.py +3538 -0
  294. package/skills/gsd-path-roadmap/scripts/pipeline_git.py +940 -0
  295. package/skills/gsd-path-roadmap/scripts/pipeline_state.py +2291 -0
  296. package/skills/gsd-path-roadmap/scripts/promote_lookahead.py +415 -0
  297. package/skills/gsd-path-roadmap/scripts/review_panel.py +553 -0
  298. package/skills/gsd-path-roadmap/scripts/state_checkpoint.py +1039 -0
  299. package/skills/gsd-path-roadmap/scripts/state_promote.py +743 -0
  300. package/skills/gsd-path-roadmap/templates/roadmap.md +38 -0
  301. package/skills/gsd-path-ship/SKILL.md +412 -0
  302. package/skills/gsd-path-ship/agents/openai.yaml +6 -0
  303. package/skills/gsd-path-ship/references/dispatch.md +131 -0
  304. package/skills/gsd-path-ship/references/reviewer.md +188 -0
  305. package/skills/gsd-path-ship/scripts/_common.py +180 -0
  306. package/skills/gsd-path-ship/scripts/archive_milestone.py +2265 -0
  307. package/skills/gsd-path-ship/scripts/build_state.py +854 -0
  308. package/skills/gsd-path-ship/scripts/check_handoffs.py +1855 -0
  309. package/skills/gsd-path-ship/scripts/check_task_briefs.py +376 -0
  310. package/skills/gsd-path-ship/scripts/discussion_records.py +619 -0
  311. package/skills/gsd-path-ship/scripts/discussion_validate.py +1321 -0
  312. package/skills/gsd-path-ship/scripts/integration.py +1433 -0
  313. package/skills/gsd-path-ship/scripts/isolation.py +3538 -0
  314. package/skills/gsd-path-ship/scripts/lean_verification.py +256 -0
  315. package/skills/gsd-path-ship/scripts/pipeline_git.py +940 -0
  316. package/skills/gsd-path-ship/scripts/pipeline_state.py +2291 -0
  317. package/skills/gsd-path-ship/scripts/review_panel.py +553 -0
  318. package/skills/gsd-path-ship/scripts/state_checkpoint.py +1039 -0
  319. package/skills/gsd-path-ship/scripts/state_promote.py +743 -0
  320. package/skills/gsd-path-ship/scripts/workflow_run.py +117 -0
  321. package/skills/gsd-path-ship/templates/archive-manifest.md +37 -0
  322. package/skills/gsd-path-ship/templates/final-review.md +27 -0
  323. package/skills/gsd-path-ship/templates/gap-review.md +20 -0
  324. package/skills/gsd-path-ship/templates/patch-findings.md +16 -0
  325. package/skills/gsd-path-ship/templates/wave-review.md +64 -0
  326. package/skills/gsd-path-undo/SKILL.md +45 -0
  327. package/skills/gsd-path-undo/agents/openai.yaml +6 -0
  328. package/skills/gsd-path-undo/scripts/_common.py +180 -0
  329. package/skills/gsd-path-undo/scripts/discussion_records.py +619 -0
  330. package/skills/gsd-path-undo/scripts/pipeline_undo.py +1039 -0
  331. package/skills/path/BUILD.md +700 -0
  332. package/skills/path/DECIDE.md +115 -0
  333. package/skills/path/DEFINE.md +297 -0
  334. package/skills/path/DOCS-AUDIT.md +190 -0
  335. package/skills/path/INSPECT.md +167 -0
  336. package/skills/path/PLAN.md +411 -0
  337. package/skills/path/RESEARCH.md +159 -0
  338. package/skills/path/ROADMAP.md +215 -0
  339. package/skills/path/SHIP.md +412 -0
  340. package/skills/path/SKILL.md +471 -0
  341. package/skills/path/agents/openai.yaml +6 -0
  342. package/skills/path/references/codebase-mapper.md +52 -0
  343. package/skills/path/references/coder.md +90 -0
  344. package/skills/path/references/decider.md +36 -0
  345. package/skills/path/references/dispatch.md +131 -0
  346. package/skills/path/references/docs-auditor.md +60 -0
  347. package/skills/path/references/planner.md +104 -0
  348. package/skills/path/references/researcher.md +42 -0
  349. package/skills/path/references/reviewer.md +188 -0
  350. package/skills/path/references/roadmapper.md +48 -0
  351. package/skills/path/scripts/_common.py +180 -0
  352. package/skills/path/scripts/archive_milestone.py +2265 -0
  353. package/skills/path/scripts/bootstrap_repository.py +710 -0
  354. package/skills/path/scripts/build_state.py +854 -0
  355. package/skills/path/scripts/check_docs_audit.py +463 -0
  356. package/skills/path/scripts/check_handoffs.py +1855 -0
  357. package/skills/path/scripts/check_task_briefs.py +376 -0
  358. package/skills/path/scripts/check_update.py +93 -0
  359. package/skills/path/scripts/detect_project.py +1517 -0
  360. package/skills/path/scripts/discussion_records.py +619 -0
  361. package/skills/path/scripts/discussion_validate.py +1321 -0
  362. package/skills/path/scripts/dispatch_driver.py +1812 -0
  363. package/skills/path/scripts/integration.py +1433 -0
  364. package/skills/path/scripts/isolation.py +3538 -0
  365. package/skills/path/scripts/lean_verification.py +256 -0
  366. package/skills/path/scripts/loop_run.py +837 -0
  367. package/skills/path/scripts/pipeline_git.py +940 -0
  368. package/skills/path/scripts/pipeline_state.py +2291 -0
  369. package/skills/path/scripts/promote_lookahead.py +415 -0
  370. package/skills/path/scripts/review_findings.py +714 -0
  371. package/skills/path/scripts/review_panel.py +553 -0
  372. package/skills/path/scripts/state_checkpoint.py +1039 -0
  373. package/skills/path/scripts/state_promote.py +743 -0
  374. package/skills/path/scripts/token_budget.py +146 -0
  375. package/skills/path/scripts/workflow_run.py +117 -0
  376. package/skills/path/templates/answers.md +29 -0
  377. package/skills/path/templates/archive-manifest.md +37 -0
  378. package/skills/path/templates/charter.md +50 -0
  379. package/skills/path/templates/codebase.md +46 -0
  380. package/skills/path/templates/dialogue.md +21 -0
  381. package/skills/path/templates/docs-audit.md +69 -0
  382. package/skills/path/templates/evidence.md +24 -0
  383. package/skills/path/templates/final-review.md +27 -0
  384. package/skills/path/templates/gap-review.md +20 -0
  385. package/skills/path/templates/intent.md +98 -0
  386. package/skills/path/templates/loop.md +59 -0
  387. package/skills/path/templates/patch-findings.md +16 -0
  388. package/skills/path/templates/plan-panel.md +25 -0
  389. package/skills/path/templates/plan.md +89 -0
  390. package/skills/path/templates/repository.md +16 -0
  391. package/skills/path/templates/research-handoff.md +25 -0
  392. package/skills/path/templates/roadmap.md +38 -0
  393. package/skills/path/templates/skeptic.md +36 -0
  394. package/skills/path/templates/state.md +27 -0
  395. package/skills/path/templates/synthesis.md +36 -0
  396. package/skills/path/templates/task.md +74 -0
  397. package/skills/path/templates/wave-panel.md +25 -0
  398. package/skills/path/templates/wave-review.md +64 -0
@@ -0,0 +1,190 @@
1
+ ---
2
+ name: gsd-path-docs-audit
3
+ description: Verify Markdown claims against the actual code, commands, and GSD Path artifacts. Use only when the user explicitly invokes $gsd-path-docs-audit or an active $gsd-path router explicitly routes to this phase.
4
+ ---
5
+
6
+ # GSD Path Docs Audit
7
+
8
+ Answer one question with evidence: **does the project do what its documents
9
+ say it does?** Runs standalone at the safe checkpoints below, and as half of
10
+ `$gsd-path-inspect`. Output: `.project/research/DOCS-AUDIT.md`.
11
+
12
+ Routing instructions below are caller handoffs under the AGENTS.md handoff
13
+ rule; never invoke an explicit-only sibling skill yourself.
14
+
15
+ Before audit work and again before completion, apply the AGENTS.md
16
+ pending-answer rule with the bundled `scripts/discussion_records.py`; a
17
+ follow-up owned by docs audit is resolved in DOCS-AUDIT.md, or the phase
18
+ blocks.
19
+
20
+ Require an existing `.project/STATE.md` that passes `python3 <absolute
21
+ pipeline_state.py> validate --repo <absolute root>`; never
22
+ create pipeline state or write into an unowned `.project/`. A missing state
23
+ stops and offers explicit `$gsd-path` initialization; do not invoke it
24
+ automatically. A different marker blocks and reports ownership without writing.
25
+ Embedded inspect mode is legal only at `inspect/active|blocked`.
26
+ Standalone mode is legal only at a stable pre-build boundary
27
+ `inspect|define|research|decide|roadmap|plan` with `status: done`, or at
28
+ `ship/blocked` with no in-progress task. `build/*`, `ship/active`,
29
+ `shipped/done`, and every other state block: changing the canonical audit there
30
+ would dirty execution, invalidate review, or mutate shipped history.
31
+
32
+ ## Process
33
+
34
+ 1. Before writing the output, freeze the helper's exact stdout from `python3
35
+ <absolute check_docs_audit.py> --repo <absolute root> --emit-inventory`
36
+ (add `--alignment` in alignment mode) in a temporary file. Before any
37
+ rewrite, preserve an existing canonical audit in a separate temporary file
38
+ and record its SHA-256. When that audit records an `Audited HEAD` that Git
39
+ resolves as an ancestor of HEAD, also freeze the changed set — `git -c
40
+ core.quotePath=false diff --name-only --no-renames <prior HEAD>` plus
41
+ `git -c core.quotePath=false ls-files --others --exclude-standard`, one
42
+ path per line — in a temporary file; otherwise there is no changed set and
43
+ the auditor re-verifies every claim. The frozen inventory and
44
+ changed set travel inside the dispatch brief and
45
+ the gate below; never persist them as `.project/` sidecar files — the
46
+ audit's own path records are the durable copy. If a previous run left an
47
+ inventory sidecar under `.project/research/`, the orchestrator deletes it
48
+ when transferring the new audit — a leftover sidecar blocks the archive
49
+ transaction. Dispatch one docs auditor with deterministic logical task
50
+ name `docs_audit`, following the local
51
+ [runtime dispatch contract](references/dispatch.md): local role
52
+ [docs-auditor](references/docs-auditor.md), template
53
+ [docs-audit](templates/docs-audit.md), absolute repo root, exact frozen
54
+ inventory, the changed set when one exists, alignment flag, prior audit as
55
+ carry-forward input, and output
56
+ `.project/research/DOCS-AUDIT.md`. When Git has a resolvable HEAD and no
57
+ non-`.project` worktree changes, the orchestrator creates a verify sidecar
58
+ with `python3 <absolute isolation.py> isolate-verify --repo <absolute
59
+ primary> --base <HEAD> --name docs-audit` for project commands. The auditor
60
+ writes only its assigned output under that sidecar. Gate it there before
61
+ collection. Then run `python3 <absolute isolation.py> collect-artifact
62
+ --repo <absolute primary> --source <returned worktree> --base <recorded
63
+ HEAD> --branch <returned branch> --source-path
64
+ .project/research/DOCS-AUDIT.md --destination-path
65
+ .project/research/DOCS-AUDIT.md`, adding `--expected-destination <recorded
66
+ prior SHA-256>` when a prior audit existed. Require the returned base,
67
+ branch, source, and destination to match; then non-force retire that exact
68
+ worktree and branch with `isolation.py retire`. A corrected redispatch is
69
+ gated before collection and uses the same expected prior hash. Otherwise no
70
+ project command may run. The dispatch brief carries current HEAD as the
71
+ audit baseline only when that verify sidecar was created at HEAD; otherwise
72
+ it carries `none`. The auditor writes that baseline as `Audited HEAD`.
73
+ 2. Gate the artifact with the bundled helper: write the frozen inventory to
74
+ a temporary file (one path per line) and run
75
+ `python3 <absolute check_docs_audit.py> --repo <docs sidecar> --inventory
76
+ <file> [--prior-audit <temporary prior-audit file>] [--changed <temporary
77
+ changed-set file>]`.
78
+ It enforces the contract — every doc with at least one testable claim has
79
+ a claims table, every claim a valid type and verdict with evidence, every
80
+ claimless doc appears once in the `## Descriptive docs` list, the section
81
+ paths and that list are disjoint and together equal the frozen inventory
82
+ exactly, the Summary counts match the rows, the remediation queue
83
+ classifies every non-verified claim, every prior User-ruling row and
84
+ Planned value survives in order, and every `unchanged:` row satisfies
85
+ the Delta rule below. A non-zero exit names the failed
86
+ rule. Redispatch one complete corrected brief under logical task name
87
+ `docs_audit`, following the runtime dispatch contract. If it still fails,
88
+ present **Outcome** with the failed gate, **Review** linking DOCS-AUDIT.md or
89
+ STATE.md when it is missing, and **Next** naming the required correction.
90
+ 3. Report to the user: verdict counts, the drift list (stale + aspirational
91
+ claims), and the remediation queue. Link the resolved absolute
92
+ `.project/research/DOCS-AUDIT.md` path before asking for any ruling. Do not
93
+ fix anything in this skill.
94
+ 4. **Collect rulings** (standalone runs; during `$gsd-path-inspect` define
95
+ owns this). Walk the remediation queue with the user — batches of three,
96
+ an interactive input tool when available. Present the auditor's
97
+ classification as the first option marked `(recommended)` with its
98
+ recorded evidence as the one-line reason; a `NEEDS-USER` item where the
99
+ auditor cannot tell which side is wrong carries no recommendation, stated
100
+ as such. Each item gets one ruling:
101
+ - `fix-code` — the doc is the contract; the code must catch up
102
+ - `fix-doc` — reality is right; the doc must be corrected
103
+ - `accept-drift` — known and tolerated; recorded so the next audit
104
+ doesn't resurface it
105
+ Append every ruling to DOCS-AUDIT.md under `## User rulings`, verbatim.
106
+ A ruling that contradicts an INTENT.md veto stops the walk — the veto
107
+ wins until the user amends INTENT.md itself.
108
+ 5. **Queue, don't execute.** Every `fix-code` and `fix-doc` ruling enters
109
+ the alignment queue: its `## User rulings` row is marked
110
+ `planned: no`. Ruling and executing are separate decisions — the user
111
+ may not be ready to work the backlog. Close by offering once: plan the
112
+ patch wave now, or hold. If an active `$gsd-path` routed this audit and the
113
+ user chooses now, return control with DOCS-AUDIT.md as the patch findings
114
+ source. When invoked directly, do not invoke an explicit-only sibling;
115
+ tell a user who chooses now to explicitly invoke `$gsd-path`, which will
116
+ offer the queued source to plan. On hold — the default — report the queue
117
+ size and that `$gsd-path` will offer alignment until the
118
+ queue is drained. Only `accept-drift` rulings → nothing queued, done.
119
+ After the choice, link the updated DOCS-AUDIT.md and state whether planning
120
+ starts now or the queue remains for a later router pass.
121
+
122
+ ## The verification methodology
123
+
124
+ The auditor follows this checklist for every doc; the audit file is the
125
+ filled-in checklist, so the method and the artifact stay one thing.
126
+
127
+ **Inventory.** Every `.md` in the repo (root, `docs/`, nested), plus
128
+ `.project/` artifacts when present. Excluded: `node_modules`, build output,
129
+ vendored code, `.project/archive/`, and the output audit itself — archives are
130
+ read-only history and are never audited. The orchestrator freezes this list
131
+ before dispatch; the auditor uses it verbatim. Every file is accounted for —
132
+ a doc with no testable claims gets one line in `## Descriptive docs`, not its
133
+ own section and not skipped. Rewriting DOCS-AUDIT.md preserves any
134
+ existing `## User rulings` rows: rulings and `planned` markers carry forward
135
+ verbatim, so a re-audit never wipes the alignment queue.
136
+
137
+ **Delta.** A re-audit re-verifies only what could have moved: every doc in
138
+ the changed set, every claim whose evidence names a changed path, every
139
+ command claim, and every prior non-verified claim. Any other prior
140
+ `verified` row is carried with exactly one `unchanged: ` prefix on its
141
+ Evidence. An already-carried row is copied verbatim without adding another
142
+ prefix. The gate rejects a carried row that fails any of those conditions.
143
+ No recorded `Audited HEAD`, or one that is not an ancestor of HEAD, means no
144
+ changed set and a full re-audit.
145
+
146
+ **Extract claims.** A claim is any statement reality can contradict:
147
+
148
+ | Claim type | Example | Check |
149
+ |------------|---------|-------|
150
+ | command | "run `npm test`" | run it; record exit code |
151
+ | feature | "supports OAuth login" | find the implementing code path |
152
+ | structure | "parsers live in `src/parse/`" | path exists and matches |
153
+ | status | "phase 2 complete", checked box | artifact/commit/code exists |
154
+ | config | "set `API_URL` in `.env`" | variable is actually read |
155
+ | integration | "syncs to Linear" | client code + config present |
156
+
157
+ **Verify.** Each claim gets checked by the cheapest sufficient method, in
158
+ order: run the command; read the named code; run the relevant test; check
159
+ git history. Verdicts:
160
+
161
+ - `verified` — checked and true, evidence recorded (file:line or command + output)
162
+ - `stale` — was plausibly true once; code has moved on
163
+ - `aspirational` — describes something never built
164
+ - `unverifiable` — cannot be checked from the repo (external service, credentials)
165
+
166
+ **Alignment mode** (when `.project/` exists) — the pipeline audits itself:
167
+
168
+ - every INTENT.md success criterion → `met` so far / `not yet` / `contradicted`
169
+ - every task with `status: done` → `isolation.py recover` proves its landing
170
+ commit and its Verify command still passes
171
+ - SYNTHESIS.md decisions → the code actually uses the decided stack/shape
172
+ - STATE.md → agrees with task frontmatter and review files
173
+
174
+ **Remediate.** Every non-`verified` claim lands in the remediation queue,
175
+ classified `fix-doc` (reality is right, doc lies) or `fix-code`
176
+ (doc is the contract, code fell short) or `NEEDS-USER` when the auditor
177
+ cannot tell which side is wrong. The queue is input for the user's ruling —
178
+ during inspection it feeds define; mid-project, accepted `fix-code`
179
+ items become a patch wave through `$gsd-path-plan`.
180
+
181
+ ## Rules
182
+
183
+ - Audit is read-only; the auditor never edits docs or code.
184
+ - Build, test, lint, and help commands run only in an agent-specific verify
185
+ sidecar at a recorded clean revision. If that cannot faithfully
186
+ represent the claim, use static evidence or mark it `unverifiable`; never run
187
+ project commands in the source worktree.
188
+ - A verdict without recorded evidence is itself a defect — the audit must
189
+ meet the same evidence standard it enforces.
190
+ - Never let the auditor decide doc-vs-code conflicts; that is a user ruling.
@@ -0,0 +1,6 @@
1
+ interface:
2
+ display_name: "GSD Path Docs Audit"
3
+ short_description: "Verify docs against what the code actually does"
4
+ default_prompt: "Use $gsd-path-docs-audit to verify this project's documentation against the actual code."
5
+ policy:
6
+ allow_implicit_invocation: false
@@ -0,0 +1,131 @@
1
+ # Shared Agent Skills dispatch
2
+
3
+ Apply this contract whenever a GSD Path skill delegates work from the shared
4
+ `~/.agents/skills` bundle. Inspect the advertised child-agent tool schema and
5
+ use exactly one matching branch:
6
+
7
+ - A `spawn_agent` tool exposing `task_name`, `agent_type`, and `fork_turns` is
8
+ Codex. Use `fork_turns: "none"`; coders use the built-in `worker` type and
9
+ every other role uses `default`. Reuse a completed logical target with
10
+ `followup_task`. For Codex reasoning effort, use `high` for the portable
11
+ `heavy` tier and `low` for the portable `light` tier; leave reasoning effort
12
+ unset for the session-default tier, and never pass `heavy` or `light` as a
13
+ literal Codex value.
14
+ - A `spawn_agent` tool without those Codex fields is Zed. Spawn one isolated,
15
+ full-capability child per brief. Zed children are not resumable, so retries
16
+ use a fresh child and a complete prompt.
17
+ - An `invoke_subagent` tool advertising `TypeName`, `Workspace`, and `Role` is
18
+ Antigravity. Use `TypeName: self`, the exact supplied root as `Workspace`,
19
+ and the logical task name as `Role`. Keep the returned child ID and use
20
+ `send_message` for follow-up work when available; otherwise start a fresh
21
+ child with the complete prompt.
22
+ - A `spawn_subagent` tool advertising the `general-purpose` type is Grok. Use
23
+ `subagent_type: general-purpose`, `capability_mode: all`, the exact supplied
24
+ root as `cwd`, `isolation: none`, and `background: true`. Supply the logical
25
+ task name as `description`, keep the returned ID, and use `resume_from` with
26
+ the complete new prompt for later work. Wait for a colliding active child and
27
+ collect results with `wait_commands_or_subagents`.
28
+ - A `Task` tool advertising the custom `gsd-path` subagent is Cursor. Use that
29
+ model-inheriting, full-capability child. Resume it by returned agent ID when
30
+ available; otherwise retry with a fresh child and a complete prompt.
31
+ - A `Task` tool advertising the built-in `general` subagent is OpenCode. Use
32
+ that child; if an installed OpenCode v2 host exposes the renamed `subagent`
33
+ tool instead, use its advertised schema with the built-in `general` agent.
34
+ Supply the logical task name as the child description. Reuse a returned
35
+ child-session ID only when the host advertises a resume parameter; otherwise
36
+ use a fresh `general` child and the complete prompt.
37
+ - A `task` tool advertising the `general-purpose` child is GitHub Copilot CLI.
38
+ Use that child. Keep its returned ID for follow-up while the host exposes
39
+ it; otherwise retry with a fresh child and a complete prompt.
40
+ - An `invoke_sub_agent` tool with a `general-purpose` subagent is Kiro. Use
41
+ that child for every role; there is no worker/default type split. Start a
42
+ fresh general-purpose child for every correction, retry, post-patch review,
43
+ repeated audit, or later milestone — Kiro subagents are not resumable and
44
+ disk artifacts are the source of truth. Supply the logical task name as the
45
+ task description. Set the child working directory to the exact repository or
46
+ linked-worktree root supplied by GSD Path; do not ask Kiro or the child to
47
+ create another worktree. Encode task dependencies explicitly; launch
48
+ independent children concurrently up to the host's advertised
49
+ concurrent-subagent capacity.
50
+
51
+ For every branch:
52
+
53
+ - Supply the deterministic logical task name: `inspect_codebase`,
54
+ `inspect_docs`, `docs_audit`, `research_<dimension>`, `decide`, `roadmap`,
55
+ `plan`,
56
+ `plan_patch`, `build_<task_id>`, `review_wave_<wave>_cycle_<cycle>`
57
+ (a `deep` wave review appends the lens suffix `_contract` or
58
+ `_adversarial`; an optional review panel uses
59
+ `review_wave_<wave>_cycle_<cycle>_panel_<family>`; an optional finding
60
+ skeptic uses `review_wave_<wave>_cycle_<cycle>_skeptic_<criterion_locator>`),
61
+ `review_plan_panel_<family>`,
62
+ `review_final`, or `review_gap_<number>`. Normalize variable parts to
63
+ lowercase ASCII and replace non-alphanumeric runs with one underscore.
64
+ Never add a random suffix or collide with a running logical target.
65
+ - Resolve the phase's linked role brief to an absolute path, include it in the
66
+ prompt, and require the child to read it before acting. The role brief
67
+ supplies the read-only boundary for auditors and reviewers.
68
+ - Tier hints: use the portable `heavy` tier for `plan`, `plan_patch`, `decide`,
69
+ and `roadmap`, the portable `light` tier for `inspect_docs` and `docs_audit`,
70
+ and the session-default tier for every other role. Apply the Codex mapping
71
+ above when its schema advertises reasoning-effort selection. On every other
72
+ host, use only an exact native equivalent advertised by that host; otherwise
73
+ do not override the model or reasoning effort. The only exception is a
74
+ review-panel child: when the host advertises model selection, pass the exact
75
+ slug returned by `scripts/review_panel.py resolve` for that family. Never
76
+ override the model on the canonical reviewer, planner, coder, or any other
77
+ role.
78
+ Host isolation: none. The child's working directory is the exact absolute
79
+ root GSD Path supplied; a host SHA checkout or extra worktree is a contract
80
+ failure. Never ask the host to create a worktree. Give the child the exact
81
+ repository or linked-worktree root supplied by GSD Path.
82
+ - Send a self-contained prompt with absolute input, template, and output paths
83
+ plus the child's bounded responsibility. Every brief also names the absolute
84
+ `AGENTS.md` and `WORKFLOW.md` paths (or explicitly says they are absent), the
85
+ next phase that consumes the output, the gate it must satisfy, and the
86
+ terminal result it must return. A coder prompt also names its isolated
87
+ linked-worktree root; no child may infer the primary worktree.
88
+ - The parent is the sole dispatcher and lifecycle owner. If the runtime exposes
89
+ structured Run/Task/Dispatch orchestration, bind one Run, create one Task per
90
+ independent brief with explicit dependencies, inject the brief, and wait for
91
+ every `worker_done`, `escalation`, or question before applying the gate.
92
+ Verify the task and dispatch records before reporting the work as
93
+ orchestrated. On runtimes without that layer, use the host adapter's
94
+ equivalent and preserve the same logical name, completion state,
95
+ timeout/cancellation, and cleanup rules; never silently delegate again from a
96
+ child.
97
+ - When the structured layer exposes a blocking ask/reply channel, route a
98
+ coder's `NEEDS-ORCHESTRATOR` question through it as a live question with
99
+ the worker held alive for the reply, instead of block-and-redispatch. The
100
+ answer is still appended to the task Log as
101
+ `Orchestrator answer:` so the portable on-disk record stays complete, and a
102
+ timed-out or unavailable channel falls back to the portable block path.
103
+ - A child that receives a disposable worktree stages its assigned artifact
104
+ under that root. The parent validates it and atomically transfers it to the
105
+ canonical project path before removing the exact disposable root. A child
106
+ never writes a disposable-review output directly into the primary worktree.
107
+ - Launch independent briefs concurrently up to the advertised child capacity,
108
+ batch any remainder without combining briefs, and collect every result
109
+ before applying the phase gate. Do not leave an active child, logical task, or
110
+ temporary worktree after collection; a timeout or cancellation is a blocked
111
+ result, not a silent success.
112
+ - If the tool schema is ambiguous or the required full-capability child is
113
+ unavailable, stop and report the missing capability. Do not guess the host
114
+ or silently collapse an independence boundary into the main context.
115
+
116
+ ## Configured output budgets
117
+
118
+ When the owner supplies token budgets, use the router bundle's
119
+ `scripts/token_budget.py` with the owner's exact task and session values and
120
+ quoted authority. Keep one ledger outside the worktree under the Git common
121
+ directory for the full logical session; resumptions reuse it. Record completed
122
+ parent CLI run events and each native child's session events with stable logical
123
+ task names before the next dispatch. The helper reads host counters and refuses
124
+ incomplete or ambiguous usage; never estimate tokens or reset the ledger.
125
+ Run `admit` for the next task and stop dispatch on a blocked result. Preserve
126
+ its output in the dispatch evidence. This gates observed usage only: concurrent
127
+ or in-flight work can overrun before the host reports usage. Codex CLI has no
128
+ advertised hard output cap; report that limitation once. If the owner requires
129
+ hard generation enforcement, use `admit --require-hard-cap`; unsupported means
130
+ blocked, not budget compliance. Other hosts require a verified native counter
131
+ and cap adapter before any enforcement claim.
@@ -0,0 +1,60 @@
1
+ # Docs auditor role
2
+
3
+ Verify that the project's Markdown documentation matches what the project
4
+ actually does. Read-only: change nothing outside your single output file.
5
+
6
+ ## Input and output
7
+
8
+ - Require the absolute repo root, exclusion rule, output path, absolute
9
+ docs-audit-template path, whether alignment mode applies, and a frozen,
10
+ sorted Markdown inventory.
11
+ - Read AGENTS.md and the template before auditing. Stop on a missing path.
12
+ - Write only the assigned output using the template. When the brief supplies a
13
+ disposable root, write the output under that root at the relative handoff
14
+ path; the orchestrator transfers it after validation. Do not ask the user
15
+ questions.
16
+
17
+ ## Method
18
+
19
+ 1. **Inventory** uses the supplied frozen path list verbatim; never rediscover
20
+ paths after dispatch. If a standalone brief omitted a list, snapshot once
21
+ before writing and exclude the assigned output. Every listed file is
22
+ accounted for exactly once: a doc with at least one testable claim gets
23
+ its own `## Doc:` section; a doc with none gets one line in the
24
+ `## Descriptive docs` list — never its own section, never skipped.
25
+ 2. **Extract claims** — statements reality can contradict: commands,
26
+ features, structure, status/checkboxes, config, integrations.
27
+ 3. **Verify each claim** by the cheapest sufficient method: run the
28
+ command, read the named code, run the relevant test, check git history.
29
+ Record the evidence (file:line, or command + result) with the verdict:
30
+ - `verified` — checked and true
31
+ - `stale` — plausibly once true; the code has moved on
32
+ - `aspirational` — describes something never built
33
+ - `unverifiable` — not checkable from the repo; say what would be needed
34
+ When the brief supplies a changed set, carry a prior `verified` row with
35
+ exactly one `unchanged: ` prefix on its Evidence only when it is not a
36
+ command claim and neither its doc nor any path its evidence names is in
37
+ that set. Copy an already-carried row verbatim without adding another
38
+ prefix. Re-verify every other claim. No changed set means no carried rows.
39
+ 4. **Alignment mode** (when `.project/` artifacts exist): also check
40
+ INTENT success criteria against reality, `status: done` tasks against
41
+ their `isolation.py recover`-proven landing SHA and a re-run of their Verify command,
42
+ SYNTHESIS decisions against the code's actual stack and shape, and
43
+ STATE against task frontmatter. Same verdicts, same evidence bar.
44
+ 5. **Classify remediation** for every non-verified claim: `fix-doc`,
45
+ `fix-code`, or `NEEDS-USER` when the right side of the conflict is not
46
+ yours to decide.
47
+
48
+ ## Rules
49
+
50
+ - Hold your own output to the standard you enforce: a verdict without
51
+ recorded evidence is a defect.
52
+ - Build, test, lint, and help commands are not presumed read-safe. Never run a
53
+ project command in the source worktree. Run it only in the pre-created,
54
+ agent-specific verify sidecar named in the brief at its recorded clean
55
+ Git revision. Do not create or remove Git worktrees yourself. Otherwise use
56
+ static evidence or mark the claim `unverifiable`. Never deploy, publish,
57
+ migrate, or mutate external state.
58
+ - Contradictions between two docs are findings; report both sides.
59
+ - Return the output path, verdict counts, and the worst drift found in at
60
+ most three lines.
@@ -0,0 +1,180 @@
1
+ #!/usr/bin/env python3
2
+ # gsd-path project runtime
3
+ """Helpers shared by the gsd-path scripts.
4
+
5
+ Every consuming script binds the names it used before (for example
6
+ ``run_git = _common.run_git``) so callers and tests that patch the name on the
7
+ consuming module keep working.
8
+ """
9
+
10
+ from __future__ import annotations
11
+
12
+ import json
13
+ import os
14
+ import re
15
+ import subprocess
16
+ from pathlib import Path
17
+ from typing import Optional
18
+
19
+ PIPELINE_MARKER = "gsd-path/v2"
20
+ BOUND_BRANCH_RE = re.compile(r"^gsd-path/M(\d{3,})$")
21
+
22
+ FIELD_PATTERN = re.compile(r"^(?P<key>[a-z_]+):\s*(?P<value>.*)$")
23
+ INLINE_LIST_PATTERN = re.compile(r"^\[(?P<body>.*)\]$")
24
+ LIST_ITEM_PATTERN = re.compile(r"^\s*-\s+(?P<value>.*)$")
25
+ VERIFY_LEDGER_PATH = ".project/build/verify-ledger.jsonl"
26
+ VERIFY_RESULTS = ("pass", "fail")
27
+ VERIFY_LEDGER_SCHEMA = "gsd-path/verify-ledger/v2"
28
+ VERIFY_BLOCK_PATTERN = re.compile(r"```bash[ \t]*\n(?P<block>.*?)```", re.DOTALL)
29
+
30
+
31
+ def section_body(text: str, heading: str) -> Optional[str]:
32
+ """The text under `## <heading>` up to the next `## `, or None when absent."""
33
+ match = re.search(
34
+ rf"(?ms)^## {re.escape(heading)}\s*\n(?P<body>.*?)(?=^## |\Z)", text
35
+ )
36
+ return match.group("body") if match else None
37
+
38
+
39
+ def task_verify_command(task_text: str) -> str:
40
+ """The Verify shell text, excluding the closing fence's separator newline."""
41
+ body = section_body(task_text, "Verify")
42
+ block = VERIFY_BLOCK_PATTERN.search(body) if body is not None else None
43
+ return block.group("block").removesuffix("\n") if block else ""
44
+
45
+
46
+ def latest_verify_entry(entries: list, command: str, commit: str) -> Optional[dict]:
47
+ for entry in reversed(entries):
48
+ if (entry.get("schema") == VERIFY_LEDGER_SCHEMA
49
+ and entry["command"] == command and entry["commit"] == commit):
50
+ return entry
51
+ return None
52
+
53
+
54
+ def verify_ledger_entries(path: Path) -> list:
55
+ """Parsed verify-ledger rows; raises ValueError on a malformed line."""
56
+ if not path.exists():
57
+ return []
58
+ return parse_verify_ledger(path.read_text(encoding="utf-8"))
59
+
60
+
61
+ def parse_verify_ledger(text: str) -> list:
62
+ entries = []
63
+ for number, line in enumerate(text.splitlines(), start=1):
64
+ if not line.strip():
65
+ continue
66
+ try:
67
+ entry = json.loads(line)
68
+ except json.JSONDecodeError as error:
69
+ raise ValueError(f"{VERIFY_LEDGER_PATH} line {number} is not JSON: {error}") from error
70
+ if (
71
+ not isinstance(entry, dict)
72
+ or not isinstance(entry.get("command"), str)
73
+ or not isinstance(entry.get("commit"), str)
74
+ or entry.get("result") not in VERIFY_RESULTS
75
+ or not isinstance(entry.get("recorded_at"), str)
76
+ ):
77
+ raise ValueError(f"{VERIFY_LEDGER_PATH} line {number} has invalid fields")
78
+ entries.append(entry)
79
+ return entries
80
+
81
+
82
+ def run_command(
83
+ *arguments: str, cwd: Optional[Path] = None
84
+ ) -> subprocess.CompletedProcess[str]:
85
+ return subprocess.run(
86
+ arguments,
87
+ cwd=cwd,
88
+ text=True,
89
+ capture_output=True,
90
+ check=False,
91
+ )
92
+
93
+
94
+ def run_git(
95
+ repo: Path, *arguments: str, input: Optional[str] = None
96
+ ) -> subprocess.CompletedProcess[str]:
97
+ return subprocess.run(
98
+ ("git", "-C", str(repo), *arguments),
99
+ input=input,
100
+ text=True,
101
+ capture_output=True,
102
+ check=False,
103
+ )
104
+
105
+
106
+ def atomic_replace(path: Path, temporary_path: Path, content: str) -> None:
107
+ temporary_path.parent.mkdir(parents=True, exist_ok=True)
108
+ descriptor = None
109
+ try:
110
+ if temporary_path.exists() or temporary_path.is_symlink():
111
+ temporary_path.unlink()
112
+ descriptor = os.open(
113
+ temporary_path,
114
+ os.O_WRONLY | os.O_CREAT | os.O_EXCL,
115
+ 0o666,
116
+ )
117
+ handle = os.fdopen(descriptor, "w", encoding="utf-8")
118
+ descriptor = None
119
+ with handle:
120
+ handle.write(content)
121
+ os.replace(temporary_path, path)
122
+ finally:
123
+ if descriptor is not None:
124
+ os.close(descriptor)
125
+ if temporary_path.exists() or temporary_path.is_symlink():
126
+ temporary_path.unlink()
127
+
128
+
129
+ def atomic_write(path: Path, content: str) -> None:
130
+ atomic_replace(path, path.parent / f".{path.name}.gsd-path-tmp", content)
131
+
132
+
133
+ def strip_yaml_comment(value: str) -> str:
134
+ quote = None
135
+ previous_significant = None
136
+ inline_list = value.lstrip().startswith("[")
137
+ index = 0
138
+ while index < len(value):
139
+ character = value[index]
140
+ if quote == '"':
141
+ if character == "\\" and index + 1 < len(value):
142
+ index += 2
143
+ continue
144
+ if character == quote:
145
+ quote = None
146
+ elif quote == "'":
147
+ if (
148
+ character == quote
149
+ and index + 1 < len(value)
150
+ and value[index + 1] == quote
151
+ ):
152
+ index += 2
153
+ continue
154
+ if character == quote:
155
+ quote = None
156
+ else:
157
+ if character in {"'", '"'} and (
158
+ previous_significant is None
159
+ or (inline_list and previous_significant in {"[", ","})
160
+ ):
161
+ quote = character
162
+ elif character == "#" and (
163
+ index == 0 or value[index - 1].isspace()
164
+ ):
165
+ return value[:index].rstrip()
166
+ if quote is None and not character.isspace():
167
+ previous_significant = character
168
+ index += 1
169
+ return value.strip()
170
+
171
+
172
+ def unquote(value: str) -> str:
173
+ cleaned = strip_yaml_comment(value).strip()
174
+ if (
175
+ len(cleaned) >= 2
176
+ and cleaned[0] == cleaned[-1]
177
+ and cleaned[0] in {"'", '"'}
178
+ ):
179
+ return cleaned[1:-1]
180
+ return cleaned