@t275005746/gse 0.1.0 → 0.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (180) hide show
  1. package/.github/ISSUE_TEMPLATE/bug_report.yml +42 -42
  2. package/.github/ISSUE_TEMPLATE/change_request.yml +50 -50
  3. package/.github/ISSUE_TEMPLATE/config.yml +5 -5
  4. package/.github/PULL_REQUEST_TEMPLATE.md +38 -38
  5. package/.github/workflows/validate-gse.yml +33 -33
  6. package/.gse/README.md +18 -18
  7. package/.gse/gse-development-protocol.md +50 -50
  8. package/.gse/project-profile.md +29 -29
  9. package/.gse/quality-gates.md +25 -25
  10. package/.gse/releases/public-registry-publication-npm.md +49 -0
  11. package/.gse/releases/public-release-owner-required.md +65 -65
  12. package/.gse/releases/public-security-contact-owner-required.md +45 -45
  13. package/.gse/state.json +3 -4
  14. package/CHANGELOG.md +24 -24
  15. package/CONTRIBUTING.md +64 -64
  16. package/LICENSE +21 -21
  17. package/README.md +1 -1
  18. package/README.zh-CN.md +1 -1
  19. package/SECURITY.md +41 -41
  20. package/SUPPORT.md +38 -38
  21. package/assets/marketplace/README.md +7 -7
  22. package/assets/marketplace/gse-listing.json +75 -75
  23. package/assets/templates/acceptance-execution-packet.md +73 -73
  24. package/assets/templates/adr.md +14 -14
  25. package/assets/templates/change-brief.md +16 -16
  26. package/assets/templates/design.md +18 -18
  27. package/assets/templates/dispatch-packet.md +104 -104
  28. package/assets/templates/evidence.md +14 -14
  29. package/assets/templates/execution-quality-pack.md +65 -65
  30. package/assets/templates/goal-map.md +21 -21
  31. package/assets/templates/host-adapter.md +48 -48
  32. package/assets/templates/host-ui-invocation-record.md +42 -42
  33. package/assets/templates/incident-review.md +60 -60
  34. package/assets/templates/public-channel-publication-record.md +49 -49
  35. package/assets/templates/public-ci-run-record.md +53 -53
  36. package/assets/templates/public-release-record.md +65 -65
  37. package/assets/templates/public-repository-settings-record.md +59 -59
  38. package/assets/templates/public-security-contact-record.md +45 -45
  39. package/assets/templates/release-trust-record.md +32 -32
  40. package/assets/templates/review.md +18 -18
  41. package/assets/templates/spec.md +16 -16
  42. package/assets/templates/target-adoption-evidence.md +29 -29
  43. package/assets/templates/tasks.md +17 -17
  44. package/assets/templates/update-release-acceptance-record.md +58 -58
  45. package/examples/README.md +22 -22
  46. package/examples/agent-runtime-host/.claude/gse-adapter.md +6 -6
  47. package/examples/agent-runtime-host/.codex/gse-adapter.md +7 -7
  48. package/examples/agent-runtime-host/.gse/goal-map.md +7 -7
  49. package/examples/agent-runtime-host/.gse/project-profile.md +27 -27
  50. package/examples/agent-runtime-host/.gse/tooling.md +5 -5
  51. package/examples/agent-runtime-host/.mcp.json +9 -9
  52. package/examples/agent-runtime-host/AGENTS.md +5 -5
  53. package/examples/agent-runtime-host/README.md +10 -10
  54. package/examples/agent-runtime-host/docs/model-routing.md +5 -5
  55. package/examples/cli-tool/.gse/project-profile.md +21 -21
  56. package/examples/cli-tool/AGENTS.md +5 -5
  57. package/examples/cli-tool/README.md +12 -12
  58. package/examples/cli-tool/package.json +21 -21
  59. package/examples/small-app/.env.example +2 -2
  60. package/examples/small-app/.github/workflows/ci.yml +8 -8
  61. package/examples/small-app/AGENTS.md +5 -5
  62. package/examples/small-app/README.md +12 -12
  63. package/examples/small-app/package.json +26 -26
  64. package/examples/small-app/playwright.config.ts +4 -4
  65. package/package.json +53 -53
  66. package/references/adoption-recipes.md +171 -171
  67. package/references/agent-roles.md +49 -49
  68. package/references/architecture-health.md +101 -101
  69. package/references/benchmark-audit.md +73 -73
  70. package/references/community-channels.md +46 -46
  71. package/references/compatibility.md +70 -70
  72. package/references/design-basis.md +38 -38
  73. package/references/domain-model.md +129 -129
  74. package/references/domain-quality-gates.md +75 -75
  75. package/references/drift-audit.md +81 -81
  76. package/references/evidence-taxonomy.md +123 -123
  77. package/references/file-ownership.md +107 -107
  78. package/references/final-readiness.md +84 -84
  79. package/references/forward-test.md +133 -133
  80. package/references/goal-map.md +36 -36
  81. package/references/host-adapters.md +119 -119
  82. package/references/learning-system.md +35 -35
  83. package/references/marketplace-discovery.md +46 -46
  84. package/references/model-routing.md +103 -103
  85. package/references/open-source-defaults.md +39 -39
  86. package/references/operating-model.md +52 -52
  87. package/references/packaging.md +277 -277
  88. package/references/project-agent-workspace.md +89 -89
  89. package/references/project-bootstrap.md +122 -122
  90. package/references/project-profile.md +57 -57
  91. package/references/public-release.md +174 -174
  92. package/references/quality-gates.md +100 -100
  93. package/references/recovery.md +176 -176
  94. package/references/release-trust.md +43 -43
  95. package/references/release.md +126 -126
  96. package/references/review.md +141 -141
  97. package/references/router.md +90 -90
  98. package/references/spec-workflow.md +66 -66
  99. package/references/task-levels.md +81 -81
  100. package/references/tool-adapters.md +73 -73
  101. package/scripts/audit-acceptance-execution-packet.mjs +133 -133
  102. package/scripts/audit-adoption-recipes.mjs +99 -99
  103. package/scripts/audit-change-lifecycle.mjs +77 -77
  104. package/scripts/audit-change-system.mjs +134 -134
  105. package/scripts/audit-ci-readiness.mjs +107 -107
  106. package/scripts/audit-close-gate.mjs +323 -323
  107. package/scripts/audit-command-adapters.mjs +91 -91
  108. package/scripts/audit-command-execution.mjs +210 -210
  109. package/scripts/audit-compatibility.mjs +149 -149
  110. package/scripts/audit-completion-readiness.mjs +292 -292
  111. package/scripts/audit-distribution.mjs +251 -251
  112. package/scripts/audit-domain-quality-gates.mjs +108 -108
  113. package/scripts/audit-evidence-placeholders.mjs +126 -126
  114. package/scripts/audit-final-readiness-promotion.mjs +255 -255
  115. package/scripts/audit-final-readiness.mjs +226 -226
  116. package/scripts/audit-fixtures.mjs +154 -154
  117. package/scripts/audit-fresh-session-readiness.mjs +177 -177
  118. package/scripts/audit-host-runtime-evidence-handoff.mjs +159 -159
  119. package/scripts/audit-host-runtime-invocation-drill.mjs +240 -240
  120. package/scripts/audit-host-runtime-invocations.mjs +254 -254
  121. package/scripts/audit-host-ui-invocation.mjs +132 -132
  122. package/scripts/audit-marketplace-discovery.mjs +122 -122
  123. package/scripts/audit-npm-package-metadata.mjs +155 -155
  124. package/scripts/audit-npm-publish-dry-run.mjs +191 -169
  125. package/scripts/audit-npm-tarball-install.mjs +191 -191
  126. package/scripts/audit-open-source-defaults.mjs +92 -92
  127. package/scripts/audit-open-source-readiness.mjs +97 -97
  128. package/scripts/audit-project.mjs +138 -138
  129. package/scripts/audit-public-acceptance-command-dry-run-drill.mjs +203 -203
  130. package/scripts/audit-public-acceptance-readiness.mjs +224 -224
  131. package/scripts/audit-public-channel-publication.mjs +248 -248
  132. package/scripts/audit-public-ci-run.mjs +184 -184
  133. package/scripts/audit-public-collaboration-templates.mjs +98 -98
  134. package/scripts/audit-public-external-gate-probe.mjs +206 -206
  135. package/scripts/audit-public-release-decision.mjs +201 -201
  136. package/scripts/audit-public-release-metadata.mjs +176 -176
  137. package/scripts/audit-public-repository-settings.mjs +237 -237
  138. package/scripts/audit-public-security-contact.mjs +171 -171
  139. package/scripts/audit-readme-docs.mjs +6 -4
  140. package/scripts/audit-recovery-readiness.mjs +98 -98
  141. package/scripts/audit-release-readiness.mjs +106 -106
  142. package/scripts/audit-release-trust.mjs +62 -62
  143. package/scripts/audit-remote-distribution.mjs +266 -266
  144. package/scripts/audit-roadmap-consistency.mjs +235 -235
  145. package/scripts/audit-signing.mjs +147 -147
  146. package/scripts/audit-state-freshness.mjs +14 -9
  147. package/scripts/audit-target-adoption-evidence.mjs +117 -117
  148. package/scripts/audit-target-project.mjs +507 -507
  149. package/scripts/audit-update-release-acceptance.mjs +136 -136
  150. package/scripts/audit-v1-target-validation.mjs +269 -269
  151. package/scripts/audit-validation-profiles.mjs +125 -125
  152. package/scripts/close-change.mjs +116 -116
  153. package/scripts/discover-project-profile.mjs +307 -307
  154. package/scripts/generate-command-adapter.mjs +231 -231
  155. package/scripts/generate-final-acceptance-packet.mjs +181 -181
  156. package/scripts/generate-final-form-progress-report.mjs +205 -205
  157. package/scripts/generate-host-runtime-evidence-handoff.mjs +206 -206
  158. package/scripts/generate-owner-external-gate-kit.mjs +295 -295
  159. package/scripts/generate-public-acceptance-handoff.mjs +168 -168
  160. package/scripts/generate-public-release-checklist.mjs +207 -207
  161. package/scripts/generate-release-bundle.mjs +505 -505
  162. package/scripts/generate-release-owner-action-plan.mjs +172 -172
  163. package/scripts/generate-release-status-manifest.mjs +200 -200
  164. package/scripts/generate-session-prompt.mjs +188 -188
  165. package/scripts/gse.mjs +67 -67
  166. package/scripts/init-change.mjs +265 -265
  167. package/scripts/init-project.mjs +785 -785
  168. package/scripts/install-gse.mjs +234 -234
  169. package/scripts/lib/evidence-placeholders.mjs +28 -28
  170. package/scripts/package-gse.mjs +174 -174
  171. package/scripts/probe-public-external-gates.mjs +167 -167
  172. package/scripts/record-host-invocation.mjs +151 -151
  173. package/scripts/record-public-channel-publication.mjs +178 -178
  174. package/scripts/record-public-ci-run.mjs +180 -180
  175. package/scripts/record-public-release.mjs +175 -175
  176. package/scripts/record-public-repository-settings.mjs +209 -209
  177. package/scripts/record-public-security-contact.mjs +157 -157
  178. package/scripts/sign-gse-package.mjs +83 -83
  179. package/scripts/update-project-state.mjs +223 -223
  180. package/scripts/verify-gse-package.mjs +85 -85
@@ -1,205 +1,205 @@
1
- #!/usr/bin/env node
2
- import fs from 'node:fs'
3
- import path from 'node:path'
4
- import { spawnSync } from 'node:child_process'
5
-
6
- const args = process.argv.slice(2)
7
-
8
- function readArg(name, fallback = null) {
9
- const index = args.indexOf(name)
10
- if (index === -1) return fallback
11
- return args[index + 1] ?? fallback
12
- }
13
-
14
- const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
15
- const out = path.resolve(readArg('--out', path.join(root, '.gse', 'acceptance', 'final-form-progress-report.md')))
16
- const jsonOut = path.resolve(readArg('--json-out', path.join(root, '.gse', 'acceptance', 'final-form-progress-report.json')))
17
- const displayRoot = readArg('--display-root', '<gse-root>')
18
- const force = args.includes('--force')
19
- const dryRun = args.includes('--dry-run')
20
- const jsonOnly = args.includes('--json')
21
-
22
- function run(command, commandArgs) {
23
- const result = spawnSync(command, commandArgs, {
24
- cwd: root,
25
- encoding: 'utf8',
26
- windowsHide: true,
27
- })
28
- return {
29
- status: result.status ?? 1,
30
- stdout: (result.stdout ?? '').trim(),
31
- stderr: (result.stderr ?? '').trim(),
32
- command: [command, ...commandArgs].join(' '),
33
- }
34
- }
35
-
36
- function parseJson(text) {
37
- try {
38
- return JSON.parse(text)
39
- } catch {
40
- return null
41
- }
42
- }
43
-
44
- function countBy(rows, status) {
45
- return rows.filter((row) => row.status === status).length
46
- }
47
-
48
- function percent(numerator, denominator) {
49
- if (!denominator) return 0
50
- return Math.round((numerator / denominator) * 100)
51
- }
52
-
53
- const finalReadiness = run(process.execPath, [path.join(root, 'scripts', 'audit-final-readiness.mjs'), '--root', root, '--json'])
54
- const publicAcceptance = run(process.execPath, [path.join(root, 'scripts', 'audit-public-acceptance-readiness.mjs'), '--root', root, '--json'])
55
- const publicAcceptanceCommandDryRunDrill = run(process.execPath, [path.join(root, 'scripts', 'audit-public-acceptance-command-dry-run-drill.mjs'), '--root', root, '--json'])
56
- const hostRuntime = run(process.execPath, [path.join(root, 'scripts', 'audit-host-runtime-invocations.mjs'), '--root', root, '--json'])
57
-
58
- const finalReadinessData = parseJson(finalReadiness.stdout)
59
- const publicAcceptanceData = parseJson(publicAcceptance.stdout)
60
- const hostRuntimeData = parseJson(hostRuntime.stdout)
61
-
62
- const matrix = finalReadinessData?.matrix ?? []
63
- const verifiedRows = countBy(matrix, 'verified')
64
- const ownerRequiredRows = countBy(matrix, 'owner-required')
65
- const externalRequiredRows = countBy(matrix, 'external-required')
66
- const acceptedRows = countBy(matrix, 'accepted')
67
- const totalRows = matrix.length
68
- const localReadyRows = verifiedRows + acceptedRows
69
- const publicAccepted = finalReadinessData?.workflows?.publicAccepted ?? 'unknown'
70
- const pendingGates = publicAcceptanceData?.pendingGates ?? matrix.filter((row) => row.status !== 'verified')
71
- const licenseDecisionVerified = matrix.some((row) => row.area === 'License decision' && (row.status === 'verified' || row.status === 'accepted'))
72
- const cannotClaim = [
73
- ...(licenseDecisionVerified ? [] : ['owner-selected license acceptance unless accepted owner evidence exists']),
74
- 'public security contact acceptance unless accepted owner evidence exists',
75
- 'public repository settings unless real repository evidence exists',
76
- 'public CI unless a real successful public CI run is recorded',
77
- 'registry or marketplace publication unless real publication evidence exists',
78
- 'native slash-command support unless real host runtime evidence exists',
79
- ]
80
-
81
- const localRows = totalRows - ownerRequiredRows - externalRequiredRows
82
- const localEngineeringScore = percent(localReadyRows, localRows)
83
- const finalFormScore = publicAccepted === 'verified' ? 100 : percent(localReadyRows, totalRows)
84
- const status = publicAccepted === 'verified' ? 'accepted' : 'verified-with-external-blockers'
85
-
86
- const report = {
87
- schemaVersion: 1,
88
- generatedAt: new Date().toISOString(),
89
- root: displayRoot,
90
- status,
91
- scores: {
92
- localEngineeringReadiness: localEngineeringScore,
93
- fullFinalFormReadiness: finalFormScore,
94
- scoringBasis: 'local engineering excludes owner-required and external-required rows; full final-form counts every readiness row',
95
- },
96
- readiness: {
97
- totalRows,
98
- localRows,
99
- verifiedRows,
100
- acceptedRows,
101
- ownerRequiredRows,
102
- externalRequiredRows,
103
- publicAccepted,
104
- pendingGateCount: pendingGates.length,
105
- },
106
- blockers: pendingGates.map((gate) => ({
107
- area: gate.area,
108
- status: gate.status,
109
- owner: gate.owner ?? (gate.status === 'owner-required' ? 'project owner' : 'external system or host'),
110
- evidence: gate.currentEvidence ?? gate.evidence ?? '',
111
- recordCommand: gate.recordCommand ?? null,
112
- preflightCommand: gate.preflightCommand ?? null,
113
- requiredEvidence: gate.requiredEvidence ?? 'Record accepted owner/external evidence and re-run final readiness.',
114
- })),
115
- verifiedCapabilities: matrix.filter((row) => row.status === 'verified' || row.status === 'accepted').map((row) => ({
116
- area: row.area,
117
- status: row.status,
118
- evidence: row.evidence,
119
- })),
120
- commandEvidence: {
121
- finalReadiness: { status: finalReadiness.status, command: 'node scripts/audit-final-readiness.mjs --root __GSE__ --json' },
122
- publicAcceptance: { status: publicAcceptance.status, command: 'node scripts/audit-public-acceptance-readiness.mjs --root __GSE__ --json' },
123
- publicAcceptanceCommandDryRunDrill: { status: publicAcceptanceCommandDryRunDrill.status, command: 'node scripts/audit-public-acceptance-command-dry-run-drill.mjs --root __GSE__ --json' },
124
- hostRuntime: { status: hostRuntime.status, command: 'node scripts/audit-host-runtime-invocations.mjs --root __GSE__ --json' },
125
- },
126
- hostRuntime: {
127
- nativeSlashCommandRecords: hostRuntimeData?.inventory?.nativeSlashCommandRecords ?? 0,
128
- portableTextCommandRecords: hostRuntimeData?.inventory?.portableTextCommandRecords ?? 0,
129
- totalRecords: hostRuntimeData?.inventory?.totalRecords ?? 0,
130
- },
131
- claimBoundary: {
132
- mayClaimLocalEngineeringReadiness: finalReadiness.status === 0,
133
- mayClaimPublicAcceptedFinalForm: publicAccepted === 'verified' && pendingGates.length === 0,
134
- cannotClaim,
135
- },
136
- }
137
-
138
- function renderMarkdown(data) {
139
- const lines = []
140
- lines.push('# GSE Final-Form Progress Report')
141
- lines.push('')
142
- lines.push('Generated: ' + data.generatedAt)
143
- lines.push('Root: ' + data.root)
144
- lines.push('')
145
- lines.push('## Summary')
146
- lines.push('')
147
- lines.push('- Status: ' + data.status)
148
- lines.push('- Local engineering readiness: ' + data.scores.localEngineeringReadiness + '%')
149
- lines.push('- Full final-form readiness: ' + data.scores.fullFinalFormReadiness + '%')
150
- lines.push('- Scoring basis: ' + data.scores.scoringBasis)
151
- lines.push('- Public accepted: ' + data.readiness.publicAccepted)
152
- lines.push('- Matrix rows: ' + data.readiness.verifiedRows + ' verified, ' + data.readiness.ownerRequiredRows + ' owner-required, ' + data.readiness.externalRequiredRows + ' external-required, ' + data.readiness.totalRows + ' total')
153
- lines.push('- Local rows: ' + data.readiness.localRows)
154
- lines.push('')
155
- lines.push('## Remaining Blockers')
156
- lines.push('')
157
- if (data.blockers.length === 0) {
158
- lines.push('- None reported by final readiness. Re-run close gate and release audits before claiming completion.')
159
- } else {
160
- for (const blocker of data.blockers) {
161
- lines.push('- ' + blocker.area + ': ' + blocker.status)
162
- lines.push(' - Owner: ' + blocker.owner)
163
- lines.push(' - Evidence now: ' + blocker.evidence)
164
- lines.push(' - Required evidence: ' + blocker.requiredEvidence)
165
- if (blocker.preflightCommand) lines.push(' - Preflight command: `' + blocker.preflightCommand + '`')
166
- if (blocker.recordCommand) lines.push(' - Record command: `' + blocker.recordCommand + '`')
167
- }
168
- }
169
- lines.push('')
170
- lines.push('## Verified Capabilities')
171
- lines.push('')
172
- for (const item of data.verifiedCapabilities) {
173
- lines.push('- ' + item.area + ': ' + item.status + ' (' + item.evidence + ')')
174
- }
175
- lines.push('')
176
- lines.push('## Claim Boundary')
177
- lines.push('')
178
- lines.push('- May claim local engineering readiness: ' + data.claimBoundary.mayClaimLocalEngineeringReadiness)
179
- lines.push('- May claim public accepted final form: ' + data.claimBoundary.mayClaimPublicAcceptedFinalForm)
180
- for (const item of data.claimBoundary.cannotClaim) lines.push('- Cannot claim ' + item)
181
- lines.push('')
182
- lines.push('## Verification Commands')
183
- lines.push('')
184
- for (const item of Object.values(data.commandEvidence)) {
185
- lines.push('- `' + item.command + '`')
186
- }
187
- return lines.join('\n') + '\n'
188
- }
189
-
190
- if (!dryRun) {
191
- for (const target of [out, jsonOut]) {
192
- if (fs.existsSync(target) && !force) {
193
- throw new Error(`Refusing to overwrite ${target}; pass --force`)
194
- }
195
- fs.mkdirSync(path.dirname(target), { recursive: true })
196
- }
197
- fs.writeFileSync(out, renderMarkdown(report), 'utf8')
198
- fs.writeFileSync(jsonOut, JSON.stringify(report, null, 2) + '\n', 'utf8')
199
- }
200
-
201
- if (jsonOnly) {
202
- console.log(JSON.stringify({ status: dryRun ? 'ready' : 'written', out, jsonOut, summary: report.readiness, scores: report.scores }, null, 2))
203
- } else {
204
- console.log(renderMarkdown(report))
205
- }
1
+ #!/usr/bin/env node
2
+ import fs from 'node:fs'
3
+ import path from 'node:path'
4
+ import { spawnSync } from 'node:child_process'
5
+
6
+ const args = process.argv.slice(2)
7
+
8
+ function readArg(name, fallback = null) {
9
+ const index = args.indexOf(name)
10
+ if (index === -1) return fallback
11
+ return args[index + 1] ?? fallback
12
+ }
13
+
14
+ const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
15
+ const out = path.resolve(readArg('--out', path.join(root, '.gse', 'acceptance', 'final-form-progress-report.md')))
16
+ const jsonOut = path.resolve(readArg('--json-out', path.join(root, '.gse', 'acceptance', 'final-form-progress-report.json')))
17
+ const displayRoot = readArg('--display-root', '<gse-root>')
18
+ const force = args.includes('--force')
19
+ const dryRun = args.includes('--dry-run')
20
+ const jsonOnly = args.includes('--json')
21
+
22
+ function run(command, commandArgs) {
23
+ const result = spawnSync(command, commandArgs, {
24
+ cwd: root,
25
+ encoding: 'utf8',
26
+ windowsHide: true,
27
+ })
28
+ return {
29
+ status: result.status ?? 1,
30
+ stdout: (result.stdout ?? '').trim(),
31
+ stderr: (result.stderr ?? '').trim(),
32
+ command: [command, ...commandArgs].join(' '),
33
+ }
34
+ }
35
+
36
+ function parseJson(text) {
37
+ try {
38
+ return JSON.parse(text)
39
+ } catch {
40
+ return null
41
+ }
42
+ }
43
+
44
+ function countBy(rows, status) {
45
+ return rows.filter((row) => row.status === status).length
46
+ }
47
+
48
+ function percent(numerator, denominator) {
49
+ if (!denominator) return 0
50
+ return Math.round((numerator / denominator) * 100)
51
+ }
52
+
53
+ const finalReadiness = run(process.execPath, [path.join(root, 'scripts', 'audit-final-readiness.mjs'), '--root', root, '--json'])
54
+ const publicAcceptance = run(process.execPath, [path.join(root, 'scripts', 'audit-public-acceptance-readiness.mjs'), '--root', root, '--json'])
55
+ const publicAcceptanceCommandDryRunDrill = run(process.execPath, [path.join(root, 'scripts', 'audit-public-acceptance-command-dry-run-drill.mjs'), '--root', root, '--json'])
56
+ const hostRuntime = run(process.execPath, [path.join(root, 'scripts', 'audit-host-runtime-invocations.mjs'), '--root', root, '--json'])
57
+
58
+ const finalReadinessData = parseJson(finalReadiness.stdout)
59
+ const publicAcceptanceData = parseJson(publicAcceptance.stdout)
60
+ const hostRuntimeData = parseJson(hostRuntime.stdout)
61
+
62
+ const matrix = finalReadinessData?.matrix ?? []
63
+ const verifiedRows = countBy(matrix, 'verified')
64
+ const ownerRequiredRows = countBy(matrix, 'owner-required')
65
+ const externalRequiredRows = countBy(matrix, 'external-required')
66
+ const acceptedRows = countBy(matrix, 'accepted')
67
+ const totalRows = matrix.length
68
+ const localReadyRows = verifiedRows + acceptedRows
69
+ const publicAccepted = finalReadinessData?.workflows?.publicAccepted ?? 'unknown'
70
+ const pendingGates = publicAcceptanceData?.pendingGates ?? matrix.filter((row) => row.status !== 'verified')
71
+ const licenseDecisionVerified = matrix.some((row) => row.area === 'License decision' && (row.status === 'verified' || row.status === 'accepted'))
72
+ const cannotClaim = [
73
+ ...(licenseDecisionVerified ? [] : ['owner-selected license acceptance unless accepted owner evidence exists']),
74
+ 'public security contact acceptance unless accepted owner evidence exists',
75
+ 'public repository settings unless real repository evidence exists',
76
+ 'public CI unless a real successful public CI run is recorded',
77
+ 'registry or marketplace publication unless real publication evidence exists',
78
+ 'native slash-command support unless real host runtime evidence exists',
79
+ ]
80
+
81
+ const localRows = totalRows - ownerRequiredRows - externalRequiredRows
82
+ const localEngineeringScore = percent(localReadyRows, localRows)
83
+ const finalFormScore = publicAccepted === 'verified' ? 100 : percent(localReadyRows, totalRows)
84
+ const status = publicAccepted === 'verified' ? 'accepted' : 'verified-with-external-blockers'
85
+
86
+ const report = {
87
+ schemaVersion: 1,
88
+ generatedAt: new Date().toISOString(),
89
+ root: displayRoot,
90
+ status,
91
+ scores: {
92
+ localEngineeringReadiness: localEngineeringScore,
93
+ fullFinalFormReadiness: finalFormScore,
94
+ scoringBasis: 'local engineering excludes owner-required and external-required rows; full final-form counts every readiness row',
95
+ },
96
+ readiness: {
97
+ totalRows,
98
+ localRows,
99
+ verifiedRows,
100
+ acceptedRows,
101
+ ownerRequiredRows,
102
+ externalRequiredRows,
103
+ publicAccepted,
104
+ pendingGateCount: pendingGates.length,
105
+ },
106
+ blockers: pendingGates.map((gate) => ({
107
+ area: gate.area,
108
+ status: gate.status,
109
+ owner: gate.owner ?? (gate.status === 'owner-required' ? 'project owner' : 'external system or host'),
110
+ evidence: gate.currentEvidence ?? gate.evidence ?? '',
111
+ recordCommand: gate.recordCommand ?? null,
112
+ preflightCommand: gate.preflightCommand ?? null,
113
+ requiredEvidence: gate.requiredEvidence ?? 'Record accepted owner/external evidence and re-run final readiness.',
114
+ })),
115
+ verifiedCapabilities: matrix.filter((row) => row.status === 'verified' || row.status === 'accepted').map((row) => ({
116
+ area: row.area,
117
+ status: row.status,
118
+ evidence: row.evidence,
119
+ })),
120
+ commandEvidence: {
121
+ finalReadiness: { status: finalReadiness.status, command: 'node scripts/audit-final-readiness.mjs --root __GSE__ --json' },
122
+ publicAcceptance: { status: publicAcceptance.status, command: 'node scripts/audit-public-acceptance-readiness.mjs --root __GSE__ --json' },
123
+ publicAcceptanceCommandDryRunDrill: { status: publicAcceptanceCommandDryRunDrill.status, command: 'node scripts/audit-public-acceptance-command-dry-run-drill.mjs --root __GSE__ --json' },
124
+ hostRuntime: { status: hostRuntime.status, command: 'node scripts/audit-host-runtime-invocations.mjs --root __GSE__ --json' },
125
+ },
126
+ hostRuntime: {
127
+ nativeSlashCommandRecords: hostRuntimeData?.inventory?.nativeSlashCommandRecords ?? 0,
128
+ portableTextCommandRecords: hostRuntimeData?.inventory?.portableTextCommandRecords ?? 0,
129
+ totalRecords: hostRuntimeData?.inventory?.totalRecords ?? 0,
130
+ },
131
+ claimBoundary: {
132
+ mayClaimLocalEngineeringReadiness: finalReadiness.status === 0,
133
+ mayClaimPublicAcceptedFinalForm: publicAccepted === 'verified' && pendingGates.length === 0,
134
+ cannotClaim,
135
+ },
136
+ }
137
+
138
+ function renderMarkdown(data) {
139
+ const lines = []
140
+ lines.push('# GSE Final-Form Progress Report')
141
+ lines.push('')
142
+ lines.push('Generated: ' + data.generatedAt)
143
+ lines.push('Root: ' + data.root)
144
+ lines.push('')
145
+ lines.push('## Summary')
146
+ lines.push('')
147
+ lines.push('- Status: ' + data.status)
148
+ lines.push('- Local engineering readiness: ' + data.scores.localEngineeringReadiness + '%')
149
+ lines.push('- Full final-form readiness: ' + data.scores.fullFinalFormReadiness + '%')
150
+ lines.push('- Scoring basis: ' + data.scores.scoringBasis)
151
+ lines.push('- Public accepted: ' + data.readiness.publicAccepted)
152
+ lines.push('- Matrix rows: ' + data.readiness.verifiedRows + ' verified, ' + data.readiness.ownerRequiredRows + ' owner-required, ' + data.readiness.externalRequiredRows + ' external-required, ' + data.readiness.totalRows + ' total')
153
+ lines.push('- Local rows: ' + data.readiness.localRows)
154
+ lines.push('')
155
+ lines.push('## Remaining Blockers')
156
+ lines.push('')
157
+ if (data.blockers.length === 0) {
158
+ lines.push('- None reported by final readiness. Re-run close gate and release audits before claiming completion.')
159
+ } else {
160
+ for (const blocker of data.blockers) {
161
+ lines.push('- ' + blocker.area + ': ' + blocker.status)
162
+ lines.push(' - Owner: ' + blocker.owner)
163
+ lines.push(' - Evidence now: ' + blocker.evidence)
164
+ lines.push(' - Required evidence: ' + blocker.requiredEvidence)
165
+ if (blocker.preflightCommand) lines.push(' - Preflight command: `' + blocker.preflightCommand + '`')
166
+ if (blocker.recordCommand) lines.push(' - Record command: `' + blocker.recordCommand + '`')
167
+ }
168
+ }
169
+ lines.push('')
170
+ lines.push('## Verified Capabilities')
171
+ lines.push('')
172
+ for (const item of data.verifiedCapabilities) {
173
+ lines.push('- ' + item.area + ': ' + item.status + ' (' + item.evidence + ')')
174
+ }
175
+ lines.push('')
176
+ lines.push('## Claim Boundary')
177
+ lines.push('')
178
+ lines.push('- May claim local engineering readiness: ' + data.claimBoundary.mayClaimLocalEngineeringReadiness)
179
+ lines.push('- May claim public accepted final form: ' + data.claimBoundary.mayClaimPublicAcceptedFinalForm)
180
+ for (const item of data.claimBoundary.cannotClaim) lines.push('- Cannot claim ' + item)
181
+ lines.push('')
182
+ lines.push('## Verification Commands')
183
+ lines.push('')
184
+ for (const item of Object.values(data.commandEvidence)) {
185
+ lines.push('- `' + item.command + '`')
186
+ }
187
+ return lines.join('\n') + '\n'
188
+ }
189
+
190
+ if (!dryRun) {
191
+ for (const target of [out, jsonOut]) {
192
+ if (fs.existsSync(target) && !force) {
193
+ throw new Error(`Refusing to overwrite ${target}; pass --force`)
194
+ }
195
+ fs.mkdirSync(path.dirname(target), { recursive: true })
196
+ }
197
+ fs.writeFileSync(out, renderMarkdown(report), 'utf8')
198
+ fs.writeFileSync(jsonOut, JSON.stringify(report, null, 2) + '\n', 'utf8')
199
+ }
200
+
201
+ if (jsonOnly) {
202
+ console.log(JSON.stringify({ status: dryRun ? 'ready' : 'written', out, jsonOut, summary: report.readiness, scores: report.scores }, null, 2))
203
+ } else {
204
+ console.log(renderMarkdown(report))
205
+ }