@t275005746/gse 0.1.0 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (228) hide show
  1. package/.github/ISSUE_TEMPLATE/bug_report.yml +42 -42
  2. package/.github/ISSUE_TEMPLATE/change_request.yml +50 -50
  3. package/.github/ISSUE_TEMPLATE/config.yml +5 -5
  4. package/.github/PULL_REQUEST_TEMPLATE.md +38 -38
  5. package/.github/workflows/validate-gse.yml +33 -33
  6. package/.gse/README.md +18 -18
  7. package/.gse/gse-development-protocol.md +50 -50
  8. package/.gse/project-profile.md +29 -29
  9. package/.gse/quality-gates.md +25 -25
  10. package/.gse/releases/public-registry-publication-npm.md +49 -0
  11. package/.gse/releases/public-release-owner-required.md +65 -65
  12. package/.gse/releases/public-security-contact-owner-required.md +45 -45
  13. package/.gse/state.json +147 -27
  14. package/CHANGELOG.md +31 -15
  15. package/CONTRIBUTING.md +64 -64
  16. package/LICENSE +21 -21
  17. package/README.md +14 -7
  18. package/README.zh-CN.md +14 -7
  19. package/SECURITY.md +41 -41
  20. package/SKILL.md +32 -12
  21. package/SUPPORT.md +38 -38
  22. package/assets/marketplace/README.md +7 -7
  23. package/assets/marketplace/gse-listing.json +75 -75
  24. package/assets/templates/acceptance-execution-packet.md +73 -73
  25. package/assets/templates/adr.md +14 -14
  26. package/assets/templates/change-brief.md +16 -16
  27. package/assets/templates/design.md +18 -18
  28. package/assets/templates/dispatch-packet.md +100 -92
  29. package/assets/templates/evidence.md +15 -9
  30. package/assets/templates/execution-quality-pack.md +65 -65
  31. package/assets/templates/goal-map.md +21 -21
  32. package/assets/templates/host-adapter.md +48 -48
  33. package/assets/templates/host-ui-invocation-record.md +42 -42
  34. package/assets/templates/incident-review.md +60 -60
  35. package/assets/templates/public-channel-publication-record.md +49 -49
  36. package/assets/templates/public-ci-run-record.md +53 -53
  37. package/assets/templates/public-release-record.md +65 -65
  38. package/assets/templates/public-repository-settings-record.md +59 -59
  39. package/assets/templates/public-security-contact-record.md +45 -45
  40. package/assets/templates/release-trust-record.md +32 -32
  41. package/assets/templates/review.md +18 -18
  42. package/assets/templates/role-fallback-packet.md +49 -0
  43. package/assets/templates/spec.md +16 -16
  44. package/assets/templates/target-adoption-evidence.md +29 -29
  45. package/assets/templates/tasks.md +17 -17
  46. package/assets/templates/update-release-acceptance-record.md +58 -58
  47. package/examples/README.md +22 -22
  48. package/examples/agent-runtime-host/.claude/gse-adapter.md +6 -6
  49. package/examples/agent-runtime-host/.codex/gse-adapter.md +7 -7
  50. package/examples/agent-runtime-host/.gse/goal-map.md +7 -7
  51. package/examples/agent-runtime-host/.gse/project-profile.md +27 -27
  52. package/examples/agent-runtime-host/.gse/tooling.md +5 -5
  53. package/examples/agent-runtime-host/.mcp.json +9 -9
  54. package/examples/agent-runtime-host/AGENTS.md +5 -5
  55. package/examples/agent-runtime-host/README.md +10 -10
  56. package/examples/agent-runtime-host/docs/model-routing.md +5 -5
  57. package/examples/cli-tool/.gse/project-profile.md +21 -21
  58. package/examples/cli-tool/AGENTS.md +5 -5
  59. package/examples/cli-tool/README.md +12 -12
  60. package/examples/cli-tool/package.json +21 -21
  61. package/examples/small-app/.env.example +2 -2
  62. package/examples/small-app/.github/workflows/ci.yml +8 -8
  63. package/examples/small-app/AGENTS.md +5 -5
  64. package/examples/small-app/README.md +12 -12
  65. package/examples/small-app/package.json +26 -26
  66. package/examples/small-app/playwright.config.ts +4 -4
  67. package/package.json +52 -44
  68. package/references/adoption-recipes.md +171 -171
  69. package/references/agent-roles.md +42 -21
  70. package/references/architecture-health.md +101 -101
  71. package/references/benchmark-audit.md +73 -73
  72. package/references/commands.md +74 -45
  73. package/references/community-channels.md +46 -46
  74. package/references/compatibility.md +70 -70
  75. package/references/design-basis.md +38 -38
  76. package/references/domain-model.md +129 -129
  77. package/references/domain-quality-gates.md +75 -75
  78. package/references/drift-audit.md +81 -80
  79. package/references/evidence-taxonomy.md +145 -108
  80. package/references/file-ownership.md +97 -93
  81. package/references/final-form-roadmap.md +201 -0
  82. package/references/final-readiness.md +84 -84
  83. package/references/forward-test.md +133 -133
  84. package/references/goal-map.md +36 -36
  85. package/references/host-adapters.md +129 -101
  86. package/references/learning-system.md +42 -26
  87. package/references/maintenance-cadence.md +51 -0
  88. package/references/marketplace-discovery.md +46 -46
  89. package/references/model-routing.md +103 -103
  90. package/references/open-source-defaults.md +39 -39
  91. package/references/operating-model.md +52 -52
  92. package/references/packaging.md +277 -277
  93. package/references/project-agent-workspace.md +89 -89
  94. package/references/project-bootstrap.md +122 -122
  95. package/references/project-guards.md +52 -0
  96. package/references/project-profile.md +57 -57
  97. package/references/public-release.md +174 -174
  98. package/references/quality-gates.md +96 -89
  99. package/references/recovery.md +176 -176
  100. package/references/release-trust.md +43 -43
  101. package/references/release.md +126 -126
  102. package/references/review.md +141 -141
  103. package/references/role-dispatch-fallback.md +54 -0
  104. package/references/router.md +90 -90
  105. package/references/spec-workflow.md +66 -66
  106. package/references/task-levels.md +81 -81
  107. package/references/tool-adapters.md +80 -70
  108. package/scripts/audit-acceptance-execution-packet.mjs +133 -133
  109. package/scripts/audit-adoption-recipes.mjs +99 -99
  110. package/scripts/audit-change-lifecycle.mjs +77 -77
  111. package/scripts/audit-change-system.mjs +134 -134
  112. package/scripts/audit-ci-readiness.mjs +107 -107
  113. package/scripts/audit-close-gate-hardening.mjs +188 -0
  114. package/scripts/audit-close-gate.mjs +448 -262
  115. package/scripts/audit-command-adapters.mjs +91 -91
  116. package/scripts/audit-command-execution.mjs +212 -199
  117. package/scripts/audit-commands.mjs +7 -5
  118. package/scripts/audit-compatibility.mjs +149 -149
  119. package/scripts/audit-completion-plan-drill.mjs +230 -0
  120. package/scripts/audit-completion-readiness.mjs +290 -287
  121. package/scripts/audit-continue-preflight.mjs +234 -0
  122. package/scripts/audit-distribution.mjs +251 -251
  123. package/scripts/audit-domain-quality-gates.mjs +108 -108
  124. package/scripts/audit-evidence-levels.mjs +217 -0
  125. package/scripts/audit-evidence-placeholders.mjs +126 -126
  126. package/scripts/audit-evidence-review-queue.mjs +206 -0
  127. package/scripts/audit-final-acceptance-packet.mjs +9 -9
  128. package/scripts/audit-final-form-progress-report.mjs +19 -18
  129. package/scripts/audit-final-form-roadmap.mjs +157 -0
  130. package/scripts/audit-final-form-stale-copy.mjs +2 -2
  131. package/scripts/audit-final-readiness-promotion.mjs +255 -255
  132. package/scripts/audit-final-readiness.mjs +226 -226
  133. package/scripts/audit-fixtures.mjs +154 -154
  134. package/scripts/audit-fresh-session-readiness.mjs +177 -177
  135. package/scripts/audit-host-capabilities.mjs +237 -0
  136. package/scripts/audit-host-runtime-evidence-handoff.mjs +159 -159
  137. package/scripts/audit-host-runtime-invocation-drill.mjs +240 -240
  138. package/scripts/audit-host-runtime-invocations.mjs +254 -254
  139. package/scripts/audit-host-ui-invocation.mjs +132 -132
  140. package/scripts/audit-installed-sync.mjs +203 -0
  141. package/scripts/audit-learning-drift.mjs +292 -0
  142. package/scripts/audit-learning-promotion.mjs +351 -0
  143. package/scripts/audit-learning-system.mjs +24 -14
  144. package/scripts/audit-local-final-form-completion.mjs +11 -10
  145. package/scripts/audit-maintenance-cadence.mjs +139 -0
  146. package/scripts/audit-maintenance-snapshot.mjs +181 -0
  147. package/scripts/audit-marketplace-discovery.mjs +122 -122
  148. package/scripts/audit-npm-package-metadata.mjs +160 -154
  149. package/scripts/audit-npm-publish-dry-run.mjs +194 -166
  150. package/scripts/audit-npm-tarball-install.mjs +195 -189
  151. package/scripts/audit-open-source-defaults.mjs +92 -92
  152. package/scripts/audit-open-source-readiness.mjs +97 -97
  153. package/scripts/audit-owner-external-gate-kit.mjs +12 -11
  154. package/scripts/audit-project-guards.mjs +189 -0
  155. package/scripts/audit-project.mjs +144 -141
  156. package/scripts/audit-public-acceptance-command-dry-run-drill.mjs +203 -203
  157. package/scripts/audit-public-acceptance-handoff.mjs +10 -10
  158. package/scripts/audit-public-acceptance-readiness.mjs +222 -222
  159. package/scripts/audit-public-channel-publication.mjs +248 -248
  160. package/scripts/audit-public-ci-run.mjs +184 -184
  161. package/scripts/audit-public-collaboration-templates.mjs +98 -98
  162. package/scripts/audit-public-external-gate-probe.mjs +206 -206
  163. package/scripts/audit-public-release-checklist.mjs +17 -15
  164. package/scripts/audit-public-release-decision.mjs +201 -201
  165. package/scripts/audit-public-release-metadata.mjs +176 -176
  166. package/scripts/audit-public-repository-settings.mjs +237 -237
  167. package/scripts/audit-public-security-contact.mjs +171 -171
  168. package/scripts/audit-readme-docs.mjs +6 -4
  169. package/scripts/audit-recovery-readiness.mjs +98 -98
  170. package/scripts/audit-release-bundle.mjs +13 -11
  171. package/scripts/audit-release-owner-action-plan-drill.mjs +5 -4
  172. package/scripts/audit-release-owner-action-plan.mjs +10 -10
  173. package/scripts/audit-release-readiness.mjs +106 -106
  174. package/scripts/audit-release-status-manifest.mjs +4 -4
  175. package/scripts/audit-release-trust.mjs +62 -62
  176. package/scripts/audit-remote-distribution.mjs +266 -266
  177. package/scripts/audit-roadmap-consistency.mjs +234 -230
  178. package/scripts/audit-role-dispatch-fallback.mjs +212 -0
  179. package/scripts/audit-session-sync.mjs +127 -0
  180. package/scripts/audit-signing.mjs +147 -147
  181. package/scripts/audit-state-freshness.mjs +20 -14
  182. package/scripts/audit-state-repair.mjs +360 -0
  183. package/scripts/audit-target-adoption-evidence.mjs +117 -117
  184. package/scripts/audit-target-hardening-drills.mjs +267 -0
  185. package/scripts/audit-target-project.mjs +507 -507
  186. package/scripts/audit-tool-fallback-policy.mjs +180 -0
  187. package/scripts/audit-ui-browser-evidence-policy.mjs +191 -0
  188. package/scripts/audit-update-release-acceptance.mjs +136 -136
  189. package/scripts/audit-v1-target-validation.mjs +269 -269
  190. package/scripts/audit-validation-profiles.mjs +125 -123
  191. package/scripts/backfill-evidence-levels.mjs +98 -0
  192. package/scripts/check-encoding.mjs +72 -0
  193. package/scripts/close-change.mjs +116 -116
  194. package/scripts/discover-project-profile.mjs +307 -307
  195. package/scripts/generate-command-adapter.mjs +231 -231
  196. package/scripts/generate-continue-packet.mjs +1214 -0
  197. package/scripts/generate-final-acceptance-packet.mjs +188 -173
  198. package/scripts/generate-final-form-progress-report.mjs +191 -189
  199. package/scripts/generate-host-runtime-evidence-handoff.mjs +198 -191
  200. package/scripts/generate-maintenance-snapshot.mjs +216 -0
  201. package/scripts/generate-owner-external-gate-kit.mjs +295 -295
  202. package/scripts/generate-public-acceptance-handoff.mjs +168 -156
  203. package/scripts/generate-public-release-checklist.mjs +207 -207
  204. package/scripts/generate-release-bundle.mjs +505 -505
  205. package/scripts/generate-release-owner-action-plan.mjs +172 -171
  206. package/scripts/generate-release-status-manifest.mjs +199 -198
  207. package/scripts/generate-session-prompt.mjs +188 -188
  208. package/scripts/gse.mjs +67 -67
  209. package/scripts/init-change.mjs +265 -265
  210. package/scripts/init-project.mjs +793 -712
  211. package/scripts/install-gse.mjs +234 -234
  212. package/scripts/lib/evidence-placeholders.mjs +28 -28
  213. package/scripts/package-gse.mjs +174 -174
  214. package/scripts/probe-public-external-gates.mjs +167 -167
  215. package/scripts/record-host-invocation.mjs +151 -151
  216. package/scripts/record-learning.mjs +37 -8
  217. package/scripts/record-public-channel-publication.mjs +178 -178
  218. package/scripts/record-public-ci-run.mjs +180 -180
  219. package/scripts/record-public-release.mjs +175 -175
  220. package/scripts/record-public-repository-settings.mjs +209 -209
  221. package/scripts/record-public-security-contact.mjs +157 -157
  222. package/scripts/record-session-sync.mjs +87 -0
  223. package/scripts/run-gse-command.mjs +79 -47
  224. package/scripts/run-validation-profile.mjs +24 -5
  225. package/scripts/sign-gse-package.mjs +83 -83
  226. package/scripts/update-project-state.mjs +223 -223
  227. package/scripts/validate-gse.mjs +216 -0
  228. package/scripts/verify-gse-package.mjs +85 -85
@@ -1,168 +1,180 @@
1
- #!/usr/bin/env node
2
- import fs from 'node:fs'
3
- import path from 'node:path'
4
- import { spawnSync } from 'node:child_process'
5
-
6
- const args = process.argv.slice(2)
7
-
8
- function readArg(name, fallback = null) {
9
- const index = args.indexOf(name)
10
- if (index === -1) return fallback
11
- return args[index + 1] ?? fallback
12
- }
13
-
14
- function hasArg(name) {
15
- return args.includes(name)
16
- }
17
-
18
- const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
19
- const out = path.resolve(readArg('--out', path.join(root, '.gse', 'acceptance', 'public-acceptance-handoff.md')))
20
- const displayRoot = readArg('--display-root', '<gse-root>')
21
- const releaseLabel = readArg('--release-label', 'unreleased')
22
- const jsonOnly = hasArg('--json')
23
- const dryRun = hasArg('--dry-run')
24
- const force = hasArg('--force')
25
-
26
- function run(command, commandArgs) {
27
- const result = spawnSync(command, commandArgs, {
28
- cwd: root,
29
- encoding: 'utf8',
30
- windowsHide: true,
31
- })
32
- return {
33
- status: result.status ?? 1,
34
- stdout: (result.stdout ?? '').trim(),
35
- stderr: (result.stderr ?? '').trim(),
36
- command: [command, ...commandArgs].join(' '),
37
- }
38
- }
39
-
40
- function runDoctor() {
41
- const result = run(process.execPath, [path.join(root, 'scripts', 'audit-public-acceptance-readiness.mjs'), '--root', root, '--json'])
42
- if (result.status !== 0) {
43
- return { ok: false, error: 'public acceptance doctor failed', result }
44
- }
45
- try {
46
- return { ok: true, data: JSON.parse(result.stdout), command: result.command }
47
- } catch (error) {
48
- return { ok: false, error: 'public acceptance doctor returned invalid JSON', detail: error.message, result }
49
- }
50
- }
51
-
52
- function stageFor(gate) {
53
- if (gate.area === 'License decision') return '1. Owner decision'
54
- if (gate.area === 'Public security contact') return '2. Owner policy'
55
- if (gate.area === 'Public repository settings') return '3. Repository setup'
56
- if (gate.area === 'Public CI run') return '4. Public CI'
57
- if (gate.area === 'Public registry publication') return '5. Public channel'
58
- if (gate.area === 'Marketplace approval') return '6. Marketplace or catalog'
59
- if (gate.area === 'Native slash command') return '7. Host runtime'
60
- if (gate.area === 'Other host runtime invocation') return '8. Cross-host evidence'
61
- return 'Other'
62
- }
63
-
64
- function renderHandoff(doctor) {
65
- const gates = doctor.pendingGates ?? []
66
- const gateNames = new Set(gates.map((gate) => gate.area))
67
- const lines = []
68
- lines.push('# GSE Public Acceptance Handoff')
69
- lines.push('')
70
- lines.push('Generated: ' + new Date().toISOString())
71
- lines.push('Root: ' + displayRoot)
72
- lines.push('Release label: ' + releaseLabel)
73
- lines.push('')
1
+ #!/usr/bin/env node
2
+ import fs from 'node:fs'
3
+ import path from 'node:path'
4
+ import { spawnSync } from 'node:child_process'
5
+
6
+ const args = process.argv.slice(2)
7
+
8
+ function readArg(name, fallback = null) {
9
+ const index = args.indexOf(name)
10
+ if (index === -1) return fallback
11
+ return args[index + 1] ?? fallback
12
+ }
13
+
14
+ function hasArg(name) {
15
+ return args.includes(name)
16
+ }
17
+
18
+ const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
19
+ const out = path.resolve(readArg('--out', path.join(root, '.gse', 'acceptance', 'public-acceptance-handoff.md')))
20
+ const displayRoot = readArg('--display-root', '<gse-root>')
21
+ const releaseLabel = readArg('--release-label', 'unreleased')
22
+ const jsonOnly = hasArg('--json')
23
+ const dryRun = hasArg('--dry-run')
24
+ const force = hasArg('--force')
25
+
26
+ function run(command, commandArgs) {
27
+ const result = spawnSync(command, commandArgs, {
28
+ cwd: root,
29
+ encoding: 'utf8',
30
+ windowsHide: true,
31
+ })
32
+ return {
33
+ status: result.status ?? 1,
34
+ stdout: (result.stdout ?? '').trim(),
35
+ stderr: (result.stderr ?? '').trim(),
36
+ command: [command, ...commandArgs].join(' '),
37
+ }
38
+ }
39
+
40
+ function runDoctor() {
41
+ const result = run(process.execPath, [path.join(root, 'scripts', 'audit-public-acceptance-readiness.mjs'), '--root', root, '--json'])
42
+ if (result.status !== 0) {
43
+ return { ok: false, error: 'public acceptance doctor failed', result }
44
+ }
45
+ try {
46
+ return { ok: true, data: JSON.parse(result.stdout), command: result.command }
47
+ } catch (error) {
48
+ return { ok: false, error: 'public acceptance doctor returned invalid JSON', detail: error.message, result }
49
+ }
50
+ }
51
+
52
+ function stageFor(gate) {
53
+ if (gate.area === 'License decision') return '1. Owner decision'
54
+ if (gate.area === 'Public security contact') return '2. Owner policy'
55
+ if (gate.area === 'Public repository settings') return '3. Repository setup'
56
+ if (gate.area === 'Public CI run') return '4. Public CI'
57
+ if (gate.area === 'Public registry publication') return '5. Public channel'
58
+ if (gate.area === 'Marketplace approval') return '6. Marketplace or catalog'
59
+ if (gate.area === 'Native slash command') return '7. Host runtime'
60
+ if (gate.area === 'Other host runtime invocation') return '8. Cross-host evidence'
61
+ return 'Other'
62
+ }
63
+
64
+ function renderHandoff(doctor) {
65
+ const gates = doctor.pendingGates ?? []
66
+ const gateNames = new Set(gates.map((gate) => gate.area))
67
+ const lines = []
68
+ lines.push('# GSE Public Acceptance Handoff')
69
+ lines.push('')
70
+ lines.push('Generated: ' + new Date().toISOString())
71
+ lines.push('Root: ' + displayRoot)
72
+ lines.push('Release label: ' + releaseLabel)
73
+ lines.push('')
74
74
  lines.push('## Purpose')
75
75
  lines.push('')
76
- lines.push('Give the owner and future agents one executable checklist for public acceptance. This handoff does not choose a license, publish a package, configure a repository, approve a marketplace listing, or prove host-native slash-command support.')
76
+ lines.push('Give the owner and future agents one executable checklist for public acceptance. This handoff does not choose a license, publish a package, configure a repository, approve a marketplace listing, or prove optional host-native slash-command support.')
77
77
  lines.push('')
78
- lines.push('## Current Boundary')
78
+ lines.push('## Fast Path')
79
79
  lines.push('')
80
- lines.push('- Public accepted: ' + (doctor.summary?.publicAccepted ?? doctor.workflows?.publicAccepted ?? 'unknown'))
81
- lines.push('- Pending owner/external gates: ' + gates.length)
82
- lines.push('- Source of truth: `scripts/audit-public-acceptance-readiness.mjs` and `references/final-readiness.md`')
80
+ lines.push('- Portable `/gse` command execution is the core command path.')
81
+ lines.push('- Native slash-command evidence is optional per host adapter, not a GSE core completion gate.')
82
+ lines.push('- Do not treat portable text-command records or generated pointers as native proof for a host adapter.')
83
83
  lines.push('')
84
- lines.push('## Execution Order')
84
+ lines.push('## Current Boundary')
85
85
  lines.push('')
86
- for (const gate of gates) {
87
- lines.push('### ' + stageFor(gate) + ' - ' + gate.area)
88
- lines.push('')
89
- lines.push('- Current status: ' + gate.status)
90
- lines.push('- Responsible party: ' + gate.owner)
91
- lines.push('- Current evidence: ' + gate.currentEvidence)
92
- lines.push('- Required evidence: ' + gate.requiredEvidence)
93
- lines.push('- Record command:')
94
- lines.push('')
95
- lines.push('```bash')
96
- lines.push(gate.recordCommand)
97
- lines.push('```')
98
- lines.push('')
99
- lines.push('- Preflight command:')
100
- lines.push('')
101
- lines.push('```bash')
102
- lines.push(gate.preflightCommand ?? `${gate.recordCommand} --dry-run --json`)
103
- lines.push('```')
104
- lines.push('')
105
- lines.push('- Promotion rule: create a real accepted record, then re-run `node scripts/audit-final-readiness.mjs --root __GSE__ --json` and `node scripts/audit-public-acceptance-readiness.mjs --root __GSE__ --json`.')
86
+ lines.push('- Public accepted: ' + (doctor.summary?.publicAccepted ?? doctor.workflows?.publicAccepted ?? 'unknown'))
87
+ lines.push('- Pending owner/external gates: ' + gates.length)
88
+ lines.push('- Source of truth: `scripts/audit-public-acceptance-readiness.mjs` and `references/final-readiness.md`')
89
+ lines.push('')
90
+ lines.push('## Execution Order')
91
+ lines.push('')
92
+ if (gates.length === 0) {
93
+ lines.push('- No owner/external gates are pending. Re-run final readiness and close gate before publishing a final claim.')
106
94
  lines.push('')
107
95
  }
108
- lines.push('## Final Verification')
109
- lines.push('')
110
- lines.push('Run these commands after owner/external records are attached:')
111
- lines.push('')
112
- lines.push('```bash')
113
- lines.push('node scripts/audit-public-acceptance-readiness.mjs --root __GSE__ --json')
114
- lines.push('node scripts/audit-final-readiness.mjs --root __GSE__ --json')
115
- lines.push('node scripts/audit-final-acceptance-packet.mjs --root __GSE__ --json')
116
- lines.push('node scripts/validate-gse.mjs --root __GSE__ --json')
117
- lines.push('node scripts/audit-close-gate.mjs --target __GSE__ --json')
118
- lines.push('```')
119
- lines.push('')
120
- lines.push('## Anti-Overclaim')
121
- lines.push('')
122
- lines.push('- Do not claim public release acceptance until the final readiness matrix returns `publicAccepted: verified`.')
123
- lines.push('- Do not claim marketplace availability without a real marketplace or catalog record.')
124
- lines.push('- Do not claim native slash-command support from portable text-command routing.')
125
- lines.push('- Do not claim support for a host without a host runtime invocation record for that host.')
126
- lines.push('- Keep this handoff updated when final-readiness gates change.')
127
- lines.push('')
128
- lines.push('## Next Action')
129
- lines.push('')
130
- if (gateNames.has('License decision')) {
131
- lines.push('Start with the owner-required license decision and public security contact, then attach public repository, CI, publication, and host runtime evidence as those systems become available.')
96
+ for (const gate of gates) {
97
+ lines.push('### ' + stageFor(gate) + ' - ' + gate.area)
98
+ lines.push('')
99
+ lines.push('- Current status: ' + gate.status)
100
+ lines.push('- Responsible party: ' + gate.owner)
101
+ lines.push('- Current evidence: ' + gate.currentEvidence)
102
+ lines.push('- Required evidence: ' + gate.requiredEvidence)
103
+ lines.push('- Record command:')
104
+ lines.push('')
105
+ lines.push('```bash')
106
+ lines.push(gate.recordCommand)
107
+ lines.push('```')
108
+ lines.push('')
109
+ lines.push('- Preflight command:')
110
+ lines.push('')
111
+ lines.push('```bash')
112
+ lines.push(gate.preflightCommand ?? `${gate.recordCommand} --dry-run --json`)
113
+ lines.push('```')
114
+ lines.push('')
115
+ lines.push('- Promotion rule: create a real accepted record, then re-run `node scripts/audit-final-readiness.mjs --root __GSE__ --json` and `node scripts/audit-public-acceptance-readiness.mjs --root __GSE__ --json`.')
116
+ lines.push('')
117
+ }
118
+ lines.push('## Final Verification')
119
+ lines.push('')
120
+ lines.push('Run these commands after owner/external records are attached:')
121
+ lines.push('')
122
+ lines.push('```bash')
123
+ lines.push('node scripts/audit-public-acceptance-readiness.mjs --root __GSE__ --json')
124
+ lines.push('node scripts/audit-final-readiness.mjs --root __GSE__ --json')
125
+ lines.push('node scripts/audit-final-acceptance-packet.mjs --root __GSE__ --json')
126
+ lines.push('node scripts/validate-gse.mjs --root __GSE__ --json')
127
+ lines.push('node scripts/audit-close-gate.mjs --target __GSE__ --json')
128
+ lines.push('```')
129
+ lines.push('')
130
+ lines.push('## Anti-Overclaim')
131
+ lines.push('')
132
+ lines.push('- Do not claim public release acceptance until the final readiness matrix returns `publicAccepted: verified`.')
133
+ lines.push('- Do not claim marketplace availability without a real marketplace or catalog record.')
134
+ lines.push('- Do not claim native slash-command support from portable text-command routing.')
135
+ lines.push('- Do not claim support for a host without a host runtime invocation record for that host.')
136
+ lines.push('- Keep this handoff updated when final-readiness gates change.')
137
+ lines.push('')
138
+ lines.push('## Next Action')
139
+ lines.push('')
140
+ if (gates.length === 0) {
141
+ lines.push('No owner/external acceptance gate is pending. Optional host-native slash-command support can be recorded later per host adapter if a host exposes it.')
142
+ } else if (gateNames.has('License decision')) {
143
+ lines.push('Start with the owner-required license decision and public security contact, then attach public repository, CI, publication, and host runtime evidence as those systems become available. Record native slash-command evidence first when the host supports it.')
132
144
  } else {
133
- lines.push('Start with the public security contact, then attach public repository, CI, publication, and host runtime evidence as those systems become available.')
145
+ lines.push('Start with the public security contact, then attach public repository, CI, publication, and host runtime evidence as those systems become available. Record native slash-command evidence first when the host supports it.')
134
146
  }
135
147
  return lines.join('\n') + '\n'
136
148
  }
137
-
138
- const doctor = runDoctor()
139
- if (!doctor.ok) {
140
- console.error(JSON.stringify({ status: 'failed', root, out, error: doctor.error, detail: doctor.detail, doctorResult: doctor.result }, null, 2))
141
- process.exit(1)
142
- }
143
-
144
- const handoff = renderHandoff(doctor.data)
145
- if (!dryRun) {
146
- if (fs.existsSync(out) && !force) {
147
- console.error(JSON.stringify({ status: 'exists', root, out, error: 'output exists; pass --force to overwrite' }, null, 2))
148
- process.exit(1)
149
- }
150
- fs.mkdirSync(path.dirname(out), { recursive: true })
151
- fs.writeFileSync(out, handoff, 'utf8')
152
- }
153
-
154
- const report = {
155
- status: dryRun ? 'ready' : 'written',
156
- root,
157
- out,
158
- dryRun,
159
- doctorCommand: doctor.command,
160
- summary: {
161
- publicAccepted: doctor.data.summary?.publicAccepted ?? doctor.data.workflows?.publicAccepted ?? 'unknown',
162
- pendingGates: doctor.data.pendingGates?.length ?? 0,
163
- stages: [...new Set((doctor.data.pendingGates ?? []).map(stageFor))],
164
- },
165
- }
166
-
167
- if (jsonOnly) console.log(JSON.stringify(report, null, 2))
168
- else console.log(handoff)
149
+
150
+ const doctor = runDoctor()
151
+ if (!doctor.ok) {
152
+ console.error(JSON.stringify({ status: 'failed', root, out, error: doctor.error, detail: doctor.detail, doctorResult: doctor.result }, null, 2))
153
+ process.exit(1)
154
+ }
155
+
156
+ const handoff = renderHandoff(doctor.data)
157
+ if (!dryRun) {
158
+ if (fs.existsSync(out) && !force) {
159
+ console.error(JSON.stringify({ status: 'exists', root, out, error: 'output exists; pass --force to overwrite' }, null, 2))
160
+ process.exit(1)
161
+ }
162
+ fs.mkdirSync(path.dirname(out), { recursive: true })
163
+ fs.writeFileSync(out, handoff, 'utf8')
164
+ }
165
+
166
+ const report = {
167
+ status: dryRun ? 'ready' : 'written',
168
+ root,
169
+ out,
170
+ dryRun,
171
+ doctorCommand: doctor.command,
172
+ summary: {
173
+ publicAccepted: doctor.data.summary?.publicAccepted ?? doctor.data.workflows?.publicAccepted ?? 'unknown',
174
+ pendingGates: doctor.data.pendingGates?.length ?? 0,
175
+ stages: [...new Set((doctor.data.pendingGates ?? []).map(stageFor))],
176
+ },
177
+ }
178
+
179
+ if (jsonOnly) console.log(JSON.stringify(report, null, 2))
180
+ else console.log(handoff)