@t275005746/gse 0.1.0 → 0.1.1

package/scripts/audit-roadmap-consistency.mjs

@@ -1,235 +1,235 @@
-#!/usr/bin/env node
-import fs from 'node:fs'
-import path from 'node:path'
-
-const args = process.argv.slice(2)
-
-function readArg(name, fallback = null) {
-  const index = args.indexOf(name)
-  if (index === -1) return fallback
-  return args[index + 1] ?? fallback
-}
-
-const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
-const jsonOnly = args.includes('--json')
-
-function read(relativePath) {
-  const fullPath = path.join(root, relativePath)
-  return fs.existsSync(fullPath) ? fs.readFileSync(fullPath, 'utf8') : ''
-}
-
-function exists(relativePath) {
-  return fs.existsSync(path.join(root, relativePath))
-}
-
-function check(id, label, ok, evidence, risk = '') {
-  return { id, label, status: ok ? 'passed' : 'failed', evidence, risk }
-}
-
-const masterPlan = read('.gse/gse-design-master-plan.md')
-const goalMap = read('.gse/goal-map.md')
-const validate = read('scripts/validate-gse.mjs')
-
-const requiredVerifiedAssets = [
-  'references/router.md',
-  'references/evidence-taxonomy.md',
-  'references/domain-model.md',
-  'references/file-ownership.md',
-  'references/forward-test.md',
-  'references/review.md',
-  'references/architecture-health.md',
-  'references/release.md',
-  'references/public-release.md',
-  'references/recovery.md',
-  'references/drift-audit.md',
-  'references/compatibility.md',
-  'references/packaging.md',
-  'references/release-trust.md',
-  'references/domain-quality-gates.md',
-  'assets/templates/release-trust-record.md',
-  'assets/templates/public-release-record.md',
-  'assets/templates/acceptance-execution-packet.md',
-  'assets/templates/target-adoption-evidence.md',
-  'assets/templates/update-release-acceptance-record.md',
-  'references/commands.md',
-  'README.md',
-  'README.zh-CN.md',
-  'CONTRIBUTING.md',
-  'SECURITY.md',
-  'SUPPORT.md',
-  '.github/workflows/validate-gse.yml',
-  '.github/PULL_REQUEST_TEMPLATE.md',
-  '.github/ISSUE_TEMPLATE/bug_report.yml',
-  '.github/ISSUE_TEMPLATE/change_request.yml',
-  'assets/templates/public-channel-publication-record.md',
-  'assets/templates/public-ci-run-record.md',
-  'assets/templates/public-security-contact-record.md',
-  'assets/templates/public-repository-settings-record.md',
-  'scripts/audit-gse.mjs',
-  'scripts/validate-gse.mjs',
-  'scripts/audit-target-project.mjs',
-  'scripts/generate-session-prompt.mjs',
-  'scripts/run-gse-command.mjs',
-  'scripts/audit-command-execution.mjs',
-  'scripts/audit-close-gate.mjs',
-  'scripts/update-project-state.mjs',
-  'scripts/init-change.mjs',
-  'scripts/audit-change-system.mjs',
-  'scripts/audit-roadmap-consistency.mjs',
-  'scripts/audit-commands.mjs',
-  'scripts/audit-readme-docs.mjs',
-  'scripts/package-gse.mjs',
-  'scripts/install-gse.mjs',
-  'scripts/audit-distribution.mjs',
-  'scripts/audit-remote-distribution.mjs',
-  'scripts/sign-gse-package.mjs',
-  'scripts/verify-gse-package.mjs',
-  'scripts/audit-signing.mjs',
-  'scripts/generate-command-adapter.mjs',
-  'scripts/audit-command-adapters.mjs',
-  'scripts/close-change.mjs',
-  'scripts/audit-change-lifecycle.mjs',
-  'scripts/audit-public-release-metadata.mjs',
-  'scripts/record-public-release.mjs',
-  'scripts/audit-public-release-decision.mjs',
-  'scripts/record-public-ci-run.mjs',
-  'scripts/audit-public-ci-run.mjs',
-  'scripts/record-public-security-contact.mjs',
-  'scripts/audit-public-security-contact.mjs',
-  'scripts/record-public-channel-publication.mjs',
-  'scripts/audit-public-channel-publication.mjs',
-  'scripts/generate-release-bundle.mjs',
-  'scripts/audit-release-bundle.mjs',
-  'scripts/audit-open-source-readiness.mjs',
-  'scripts/audit-ci-readiness.mjs',
-  'scripts/audit-public-collaboration-templates.mjs',
-  'scripts/record-public-repository-settings.mjs',
-  'scripts/audit-public-repository-settings.mjs',
-  'scripts/record-host-invocation.mjs',
-  'scripts/audit-host-runtime-invocations.mjs',
-  'references/final-readiness.md',
-  'scripts/audit-final-readiness.mjs',
-  'scripts/audit-final-readiness-promotion.mjs',
-  'scripts/audit-final-form-stale-copy.mjs',
-  'scripts/generate-final-acceptance-packet.mjs',
-  'scripts/audit-final-acceptance-packet.mjs',
-  '.gse/releases/public-release-owner-required.md',
-  '.gse/releases/public-security-contact-owner-required.md',
-]
-
-const stalePhrases = [
-  'dedicated router missing',
-  'taxonomy and archive lifecycle missing',
-  'domain model reference should be expanded',
-  'lock rules and forward-test examples missing',
-  'vertical slice discipline is partially covered',
-  'gate taxonomy and audit script missing',
-  'review/architecture scan references need stronger integration',
-  'Status: next.',
-  'Status: planned.',
-]
-
-const currentStatusTerms = [
-  'router, command semantics, task levels, and tool routing are verified',
-  'bilingual README docs',
-  'native `.gse/changes/<change-id>/` change pack generation',
-  'execution-quality pack templates',
-  'domain model reference and ADR template are verified',
-  'role docs, dispatch packet, file ownership, and forward-test fallback are verified',
-  'review protocol and architecture health references are verified',
-  'v0.2 - Self-Auditing GSE',
-  'Status: verified.',
-  'v0.3 - Project-Aware GSE',
-  'Status: verified pending external acceptance.',
-  'v0.4 - Quality And Release GSE',
-  'v1.0 - Productized GSE',
-  'Status: verified.',
-  'owner-approved AION project-write acceptance is executed',
-  'AION/MuseFlow v1 target validation',
-  'target-project doctor',
-  '.gse/state.json',
-  '.gse/evidence/index.jsonl',
-  'session prompt generator',
-  'Close gate verifies',
-  'safe project-local state/index update path',
-  'local package/install distribution audit',
-  'remote URL distribution and integrity audit',
-  'package signing and verification audit',
-  'portable command execution audit',
-  'release trust and key custody policy audit',
-  'public release metadata audit',
-  'public release decision lifecycle audit',
-  'public CI run record audit',
-  'MIT license decision',
-  'public channel publication record audit',
-  'release bundle generation audit',
-  'open-source repository readiness audit',
-  'CI workflow readiness audit',
-  'public collaboration template audit',
-  'public security contact record audit',
-  'public repository settings record audit',
-  'host runtime invocation record mechanics',
-  'final readiness matrix',
-  'final-form progress report',
-  'final readiness promotion audit',
-  'final acceptance packet',
-  'host command adapter audit',
-  'change close/archive lifecycle',
-  'OpenSpec-style requirements',
-  'Superpowers-style execution skills',
-  'AION and MuseFlow',
-]
-
-const checks = [
-  check('RC01', 'roadmap consistency audit is wired into validator', validate.includes('audit-roadmap-consistency.mjs'), 'scripts/validate-gse.mjs'),
-  check('RC02', 'required verified roadmap assets exist', requiredVerifiedAssets.every(exists), requiredVerifiedAssets.join(', ')),
-  check('RC03', 'master plan no longer contains stale missing/planned status phrases', stalePhrases.every((phrase) => !masterPlan.includes(phrase)), stalePhrases.join(', ')),
-  check('RC04', 'master plan contains current verified status terms', currentStatusTerms.every((term) => masterPlan.includes(term)), currentStatusTerms.join(', ')),
-  check('RC05', 'goal map tracks v1 execution-state work as verified', goalMap.includes('GSE-008') && goalMap.includes('Productize v1.0 execution-state workflow') && goalMap.includes('verified') && goalMap.includes('audit-v1-target-validation.mjs'), '.gse/goal-map.md'),
-  check('RC06', 'master plan preserves target validation while keeping current final-form limits explicit', masterPlan.includes('AION/MuseFlow v1 target validation are verified') && masterPlan.includes('MIT license decision') && masterPlan.includes('Remaining final-form work is real public security contact approval, real public repository settings, public CI run, real public registry publication, real public marketplace approval, host-native slash-command support, and other host runtime invocation records.') && masterPlan.includes('P1: harden GSE beyond the verified v1.0 execution-state workflow') && !masterPlan.includes('This does not yet prove the full v1.0 execution-state layer') && !masterPlan.includes('owner license selection remains required before an accepted public release'), '.gse/gse-design-master-plan.md'),
-]
-
-const passed = checks.filter((item) => item.status === 'passed').length
-const failed = checks.length - passed
-const report = {
-  root,
-  generatedAt: new Date().toISOString(),
-  summary: { status: failed === 0 ? 'passed' : 'failed', passed, failed, total: checks.length },
-  workflows: { roadmapConsistency: failed === 0 ? 'verified' : 'failed' },
-  limits: [
-    'This audit checks GSE roadmap/status consistency against local verified artifacts.',
-    'It does not certify arbitrary repositories or execute fresh-session acceptance.',
-  ],
-  checks,
-}
-
-function renderMarkdown(data) {
-  const lines = []
-  lines.push('# GSE Roadmap Consistency Audit')
-  lines.push('')
-  lines.push('Generated: ' + data.generatedAt)
-  lines.push('Root: ' + data.root)
-  lines.push('')
-  lines.push('## Summary')
-  lines.push('')
-  lines.push('- Status: ' + data.summary.status)
-  lines.push('- Checks: ' + data.summary.passed + '/' + data.summary.total)
-  lines.push('- Roadmap consistency: ' + data.workflows.roadmapConsistency)
-  lines.push('')
-  lines.push('## Checks')
-  lines.push('')
-  for (const item of data.checks) {
-    const marker = item.status === 'passed' ? '[x]' : '[ ]'
-    lines.push('- ' + marker + ' ' + item.id + ' ' + item.label + ': ' + item.evidence)
-  }
-  lines.push('')
-  lines.push('## Limits')
-  lines.push('')
-  for (const item of data.limits) lines.push('- ' + item)
-  return lines.join('\n') + '\n'
-}
-
-if (jsonOnly) console.log(JSON.stringify(report, null, 2))
-else console.log(renderMarkdown(report))
-
-if (failed > 0) process.exit(1)
+#!/usr/bin/env node
+import fs from 'node:fs'
+import path from 'node:path'
+
+const args = process.argv.slice(2)
+
+function readArg(name, fallback = null) {
+  const index = args.indexOf(name)
+  if (index === -1) return fallback
+  return args[index + 1] ?? fallback
+}
+
+const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
+const jsonOnly = args.includes('--json')
+
+function read(relativePath) {
+  const fullPath = path.join(root, relativePath)
+  return fs.existsSync(fullPath) ? fs.readFileSync(fullPath, 'utf8') : ''
+}
+
+function exists(relativePath) {
+  return fs.existsSync(path.join(root, relativePath))
+}
+
+function check(id, label, ok, evidence, risk = '') {
+  return { id, label, status: ok ? 'passed' : 'failed', evidence, risk }
+}
+
+const masterPlan = read('.gse/gse-design-master-plan.md')
+const goalMap = read('.gse/goal-map.md')
+const validate = read('scripts/validate-gse.mjs')
+
+const requiredVerifiedAssets = [
+  'references/router.md',
+  'references/evidence-taxonomy.md',
+  'references/domain-model.md',
+  'references/file-ownership.md',
+  'references/forward-test.md',
+  'references/review.md',
+  'references/architecture-health.md',
+  'references/release.md',
+  'references/public-release.md',
+  'references/recovery.md',
+  'references/drift-audit.md',
+  'references/compatibility.md',
+  'references/packaging.md',
+  'references/release-trust.md',
+  'references/domain-quality-gates.md',
+  'assets/templates/release-trust-record.md',
+  'assets/templates/public-release-record.md',
+  'assets/templates/acceptance-execution-packet.md',
+  'assets/templates/target-adoption-evidence.md',
+  'assets/templates/update-release-acceptance-record.md',
+  'references/commands.md',
+  'README.md',
+  'README.zh-CN.md',
+  'CONTRIBUTING.md',
+  'SECURITY.md',
+  'SUPPORT.md',
+  '.github/workflows/validate-gse.yml',
+  '.github/PULL_REQUEST_TEMPLATE.md',
+  '.github/ISSUE_TEMPLATE/bug_report.yml',
+  '.github/ISSUE_TEMPLATE/change_request.yml',
+  'assets/templates/public-channel-publication-record.md',
+  'assets/templates/public-ci-run-record.md',
+  'assets/templates/public-security-contact-record.md',
+  'assets/templates/public-repository-settings-record.md',
+  'scripts/audit-gse.mjs',
+  'scripts/validate-gse.mjs',
+  'scripts/audit-target-project.mjs',
+  'scripts/generate-session-prompt.mjs',
+  'scripts/run-gse-command.mjs',
+  'scripts/audit-command-execution.mjs',
+  'scripts/audit-close-gate.mjs',
+  'scripts/update-project-state.mjs',
+  'scripts/init-change.mjs',
+  'scripts/audit-change-system.mjs',
+  'scripts/audit-roadmap-consistency.mjs',
+  'scripts/audit-commands.mjs',
+  'scripts/audit-readme-docs.mjs',
+  'scripts/package-gse.mjs',
+  'scripts/install-gse.mjs',
+  'scripts/audit-distribution.mjs',
+  'scripts/audit-remote-distribution.mjs',
+  'scripts/sign-gse-package.mjs',
+  'scripts/verify-gse-package.mjs',
+  'scripts/audit-signing.mjs',
+  'scripts/generate-command-adapter.mjs',
+  'scripts/audit-command-adapters.mjs',
+  'scripts/close-change.mjs',
+  'scripts/audit-change-lifecycle.mjs',
+  'scripts/audit-public-release-metadata.mjs',
+  'scripts/record-public-release.mjs',
+  'scripts/audit-public-release-decision.mjs',
+  'scripts/record-public-ci-run.mjs',
+  'scripts/audit-public-ci-run.mjs',
+  'scripts/record-public-security-contact.mjs',
+  'scripts/audit-public-security-contact.mjs',
+  'scripts/record-public-channel-publication.mjs',
+  'scripts/audit-public-channel-publication.mjs',
+  'scripts/generate-release-bundle.mjs',
+  'scripts/audit-release-bundle.mjs',
+  'scripts/audit-open-source-readiness.mjs',
+  'scripts/audit-ci-readiness.mjs',
+  'scripts/audit-public-collaboration-templates.mjs',
+  'scripts/record-public-repository-settings.mjs',
+  'scripts/audit-public-repository-settings.mjs',
+  'scripts/record-host-invocation.mjs',
+  'scripts/audit-host-runtime-invocations.mjs',
+  'references/final-readiness.md',
+  'scripts/audit-final-readiness.mjs',
+  'scripts/audit-final-readiness-promotion.mjs',
+  'scripts/audit-final-form-stale-copy.mjs',
+  'scripts/generate-final-acceptance-packet.mjs',
+  'scripts/audit-final-acceptance-packet.mjs',
+  '.gse/releases/public-release-owner-required.md',
+  '.gse/releases/public-security-contact-owner-required.md',
+]
+
+const stalePhrases = [
+  'dedicated router missing',
+  'taxonomy and archive lifecycle missing',
+  'domain model reference should be expanded',
+  'lock rules and forward-test examples missing',
+  'vertical slice discipline is partially covered',
+  'gate taxonomy and audit script missing',
+  'review/architecture scan references need stronger integration',
+  'Status: next.',
+  'Status: planned.',
+]
+
+const currentStatusTerms = [
+  'router, command semantics, task levels, and tool routing are verified',
+  'bilingual README docs',
+  'native `.gse/changes/<change-id>/` change pack generation',
+  'execution-quality pack templates',
+  'domain model reference and ADR template are verified',
+  'role docs, dispatch packet, file ownership, and forward-test fallback are verified',
+  'review protocol and architecture health references are verified',
+  'v0.2 - Self-Auditing GSE',
+  'Status: verified.',
+  'v0.3 - Project-Aware GSE',
+  'Status: verified pending external acceptance.',
+  'v0.4 - Quality And Release GSE',
+  'v1.0 - Productized GSE',
+  'Status: verified.',
+  'owner-approved AION project-write acceptance is executed',
+  'AION/MuseFlow v1 target validation',
+  'target-project doctor',
+  '.gse/state.json',
+  '.gse/evidence/index.jsonl',
+  'session prompt generator',
+  'Close gate verifies',
+  'safe project-local state/index update path',
+  'local package/install distribution audit',
+  'remote URL distribution and integrity audit',
+  'package signing and verification audit',
+  'portable command execution audit',
+  'release trust and key custody policy audit',
+  'public release metadata audit',
+  'public release decision lifecycle audit',
+  'public CI run record audit',
+  'MIT license decision',
+  'public channel publication record audit',
+  'release bundle generation audit',
+  'open-source repository readiness audit',
+  'CI workflow readiness audit',
+  'public collaboration template audit',
+  'public security contact record audit',
+  'public repository settings record audit',
+  'host runtime invocation record mechanics',
+  'final readiness matrix',
+  'final-form progress report',
+  'final readiness promotion audit',
+  'final acceptance packet',
+  'host command adapter audit',
+  'change close/archive lifecycle',
+  'OpenSpec-style requirements',
+  'Superpowers-style execution skills',
+  'AION and MuseFlow',
+]
+
+const checks = [
+  check('RC01', 'roadmap consistency audit is wired into validator', validate.includes('audit-roadmap-consistency.mjs'), 'scripts/validate-gse.mjs'),
+  check('RC02', 'required verified roadmap assets exist', requiredVerifiedAssets.every(exists), requiredVerifiedAssets.join(', ')),
+  check('RC03', 'master plan no longer contains stale missing/planned status phrases', stalePhrases.every((phrase) => !masterPlan.includes(phrase)), stalePhrases.join(', ')),
+  check('RC04', 'master plan contains current verified status terms', currentStatusTerms.every((term) => masterPlan.includes(term)), currentStatusTerms.join(', ')),
+  check('RC05', 'goal map tracks v1 execution-state work as verified', goalMap.includes('GSE-008') && goalMap.includes('Productize v1.0 execution-state workflow') && goalMap.includes('verified') && goalMap.includes('audit-v1-target-validation.mjs'), '.gse/goal-map.md'),
+  check('RC06', 'master plan preserves target validation while keeping current final-form limits explicit', masterPlan.includes('AION/MuseFlow v1 target validation are verified') && masterPlan.includes('MIT license decision') && masterPlan.includes('public registry publication for `@t275005746/gse@0.1.0`') && masterPlan.includes('Remaining final-form work is host-native slash-command support with real host runtime evidence.') && masterPlan.includes('P1: harden GSE beyond the verified v1.0 execution-state workflow') && !masterPlan.includes('This does not yet prove the full v1.0 execution-state layer') && !masterPlan.includes('owner license selection remains required before an accepted public release'), '.gse/gse-design-master-plan.md'),
+]
+
+const passed = checks.filter((item) => item.status === 'passed').length
+const failed = checks.length - passed
+const report = {
+  root,
+  generatedAt: new Date().toISOString(),
+  summary: { status: failed === 0 ? 'passed' : 'failed', passed, failed, total: checks.length },
+  workflows: { roadmapConsistency: failed === 0 ? 'verified' : 'failed' },
+  limits: [
+    'This audit checks GSE roadmap/status consistency against local verified artifacts.',
+    'It does not certify arbitrary repositories or execute fresh-session acceptance.',
+  ],
+  checks,
+}
+
+function renderMarkdown(data) {
+  const lines = []
+  lines.push('# GSE Roadmap Consistency Audit')
+  lines.push('')
+  lines.push('Generated: ' + data.generatedAt)
+  lines.push('Root: ' + data.root)
+  lines.push('')
+  lines.push('## Summary')
+  lines.push('')
+  lines.push('- Status: ' + data.summary.status)
+  lines.push('- Checks: ' + data.summary.passed + '/' + data.summary.total)
+  lines.push('- Roadmap consistency: ' + data.workflows.roadmapConsistency)
+  lines.push('')
+  lines.push('## Checks')
+  lines.push('')
+  for (const item of data.checks) {
+    const marker = item.status === 'passed' ? '[x]' : '[ ]'
+    lines.push('- ' + marker + ' ' + item.id + ' ' + item.label + ': ' + item.evidence)
+  }
+  lines.push('')
+  lines.push('## Limits')
+  lines.push('')
+  for (const item of data.limits) lines.push('- ' + item)
+  return lines.join('\n') + '\n'
+}
+
+if (jsonOnly) console.log(JSON.stringify(report, null, 2))
+else console.log(renderMarkdown(report))
+
+if (failed > 0) process.exit(1)