@t275005746/gse 0.1.1 → 0.2.0

package/scripts/generate-final-acceptance-packet.mjs

@@ -88,9 +88,10 @@ function actionFor(row, publicGate) {
 
 function renderPacket(audit) {
   const publicDoctor = runPublicDoctor()
-  const matrix = audit.matrix ?? []
-  const verified = matrix.filter((row) => row.status === 'verified')
-  const pending = matrix.filter((row) => row.status !== 'verified')
+  const matrix = audit.matrix ?? []
+  const verified = matrix.filter((row) => row.status === 'verified')
+  const pending = matrix.filter((row) => row.status === 'owner-required' || row.status === 'external-required')
+  const notClaimed = matrix.filter((row) => row.status === 'not-claimed')
   const lines = []
   lines.push('# GSE Final Acceptance Packet')
   lines.push('')
@@ -105,8 +106,9 @@ function renderPacket(audit) {
   lines.push('')
   lines.push('- Local readiness: ' + (audit.workflows?.finalReadinessMatrix ?? 'unknown'))
   lines.push('- Public accepted: ' + (audit.workflows?.publicAccepted ?? 'unknown'))
-  lines.push('- Verified rows: ' + verified.length)
-  lines.push('- Pending owner/external rows: ' + pending.length)
+  lines.push('- Verified rows: ' + verified.length)
+  lines.push('- Pending owner/external rows: ' + pending.length)
+  lines.push('- Optional not-claimed rows: ' + notClaimed.length)
   lines.push('')
   lines.push('## Verified Local Capabilities')
   lines.push('')
@@ -114,7 +116,7 @@ function renderPacket(audit) {
   lines.push('')
   lines.push('## Pending Acceptance Gates')
   lines.push('')
-  for (const row of pending) {
+  for (const row of pending) {
     lines.push('### ' + row.area)
     lines.push('')
     lines.push('- Status: ' + row.status)
@@ -122,7 +124,19 @@ function renderPacket(audit) {
     lines.push('- Required action: ' + actionFor(row, publicDoctor.gates.get(row.area)))
     lines.push('- Acceptance rule: do not mark accepted until the evidence is real, dated, and re-audited.')
     lines.push('')
-  }
+  }
+  if (pending.length === 0) {
+    lines.push('- No owner/external acceptance gates are pending.')
+    lines.push('')
+  }
+  if (notClaimed.length > 0) {
+    lines.push('## Optional Not-Claimed Rows')
+    lines.push('')
+    for (const row of notClaimed) {
+      lines.push('- ' + row.area + ': not claimed; evidence boundary: ' + row.evidence)
+    }
+    lines.push('')
+  }
   lines.push('## Re-Verification Commands')
   lines.push('')
   lines.push('```bash')
@@ -172,7 +186,8 @@ const report = {
   written: dryRun ? 0 : 1,
   summary: {
     verifiedRows: audit.data.matrix.filter((row) => row.status === 'verified').length,
-    pendingRows: audit.data.matrix.filter((row) => row.status !== 'verified').length,
+    pendingRows: audit.data.matrix.filter((row) => row.status === 'owner-required' || row.status === 'external-required').length,
+    notClaimedRows: audit.data.matrix.filter((row) => row.status === 'not-claimed').length,
     publicAccepted: audit.data.workflows?.publicAccepted ?? 'unknown',
   },
 }

package/scripts/generate-final-form-progress-report.mjs

@@ -60,12 +60,13 @@ const publicAcceptanceData = parseJson(publicAcceptance.stdout)
 const hostRuntimeData = parseJson(hostRuntime.stdout)
 
 const matrix = finalReadinessData?.matrix ?? []
-const verifiedRows = countBy(matrix, 'verified')
-const ownerRequiredRows = countBy(matrix, 'owner-required')
-const externalRequiredRows = countBy(matrix, 'external-required')
-const acceptedRows = countBy(matrix, 'accepted')
-const totalRows = matrix.length
-const localReadyRows = verifiedRows + acceptedRows
+const verifiedRows = countBy(matrix, 'verified')
+const ownerRequiredRows = countBy(matrix, 'owner-required')
+const externalRequiredRows = countBy(matrix, 'external-required')
+const notClaimedRows = countBy(matrix, 'not-claimed')
+const acceptedRows = countBy(matrix, 'accepted')
+const totalRows = matrix.length
+const localReadyRows = verifiedRows + acceptedRows
 const publicAccepted = finalReadinessData?.workflows?.publicAccepted ?? 'unknown'
 const pendingGates = publicAcceptanceData?.pendingGates ?? matrix.filter((row) => row.status !== 'verified')
 const licenseDecisionVerified = matrix.some((row) => row.area === 'License decision' && (row.status === 'verified' || row.status === 'accepted'))
@@ -78,10 +79,10 @@ const cannotClaim = [
   'native slash-command support unless real host runtime evidence exists',
 ]
 
-const localRows = totalRows - ownerRequiredRows - externalRequiredRows
-const localEngineeringScore = percent(localReadyRows, localRows)
-const finalFormScore = publicAccepted === 'verified' ? 100 : percent(localReadyRows, totalRows)
-const status = publicAccepted === 'verified' ? 'accepted' : 'verified-with-external-blockers'
+const localRows = totalRows - ownerRequiredRows - externalRequiredRows - notClaimedRows
+const localEngineeringScore = percent(localReadyRows, localRows)
+const finalFormScore = publicAccepted === 'verified' ? 100 : percent(localReadyRows, totalRows)
+const status = publicAccepted === 'verified' ? 'accepted' : 'release-evidence-pending'
 
 const report = {
   schemaVersion: 1,
@@ -96,14 +97,15 @@ const report = {
   readiness: {
     totalRows,
     localRows,
-    verifiedRows,
-    acceptedRows,
-    ownerRequiredRows,
-    externalRequiredRows,
-    publicAccepted,
+    verifiedRows,
+    acceptedRows,
+    ownerRequiredRows,
+    externalRequiredRows,
+    notClaimedRows,
+    publicAccepted,
     pendingGateCount: pendingGates.length,
   },
-  blockers: pendingGates.map((gate) => ({
+  pendingReleaseEvidence: pendingGates.map((gate) => ({
     area: gate.area,
     status: gate.status,
     owner: gate.owner ?? (gate.status === 'owner-required' ? 'project owner' : 'external system or host'),
@@ -149,15 +151,15 @@ function renderMarkdown(data) {
   lines.push('- Full final-form readiness: ' + data.scores.fullFinalFormReadiness + '%')
   lines.push('- Scoring basis: ' + data.scores.scoringBasis)
   lines.push('- Public accepted: ' + data.readiness.publicAccepted)
-  lines.push('- Matrix rows: ' + data.readiness.verifiedRows + ' verified, ' + data.readiness.ownerRequiredRows + ' owner-required, ' + data.readiness.externalRequiredRows + ' external-required, ' + data.readiness.totalRows + ' total')
+  lines.push('- Matrix rows: ' + data.readiness.verifiedRows + ' verified, ' + data.readiness.ownerRequiredRows + ' owner-required, ' + data.readiness.externalRequiredRows + ' external-required, ' + data.readiness.notClaimedRows + ' not-claimed, ' + data.readiness.totalRows + ' total')
   lines.push('- Local rows: ' + data.readiness.localRows)
   lines.push('')
-  lines.push('## Remaining Blockers')
-  lines.push('')
-  if (data.blockers.length === 0) {
-    lines.push('- None reported by final readiness. Re-run close gate and release audits before claiming completion.')
-  } else {
-    for (const blocker of data.blockers) {
+  lines.push('## Pending Release Evidence')
+  lines.push('')
+  if (data.pendingReleaseEvidence.length === 0) {
+    lines.push('- None reported by final readiness. Re-run close gate and release audits before claiming completion.')
+  } else {
+    for (const blocker of data.pendingReleaseEvidence) {
       lines.push('- ' + blocker.area + ': ' + blocker.status)
       lines.push('  - Owner: ' + blocker.owner)
       lines.push('  - Evidence now: ' + blocker.evidence)

package/scripts/generate-host-runtime-evidence-handoff.mjs

@@ -108,21 +108,28 @@ function commandFor(hostFamily) {
   ].join(' ')
 }
 
-function renderHandoff(audit, hostRows) {
-  const inventory = audit.inventory ?? {}
-  const lines = []
-  lines.push('# GSE Host Runtime Evidence Handoff')
+function renderHandoff(audit, hostRows) {
+  const inventory = audit.inventory ?? {}
+  const lines = []
+  lines.push('# GSE Host Runtime Evidence Handoff')
   lines.push('')
   lines.push('Generated: ' + new Date().toISOString())
   lines.push('Root: ' + displayRoot)
   lines.push('')
-  lines.push('## Purpose')
-  lines.push('')
-  lines.push('Turn cross-host support into auditable runtime evidence. Generated adapters, docs, or command pointers are useful setup, but they are not proof that a host actually invoked GSE.')
-  lines.push('')
-  lines.push('## Current Runtime Evidence')
-  lines.push('')
-  lines.push('- Host runtime invocation records: ' + (inventory.records ?? 0))
+  lines.push('## Purpose')
+  lines.push('')
+  lines.push('Turn cross-host support into auditable runtime evidence. Generated adapters, docs, or command pointers are useful setup, but they are not proof that a host actually invoked GSE.')
+  lines.push('')
+  lines.push('## Fast Path')
+  lines.push('')
+  lines.push('- Native slash-command evidence is the final external gate.')
+  lines.push('- If a host can invoke `/gse continue` natively, record that first.')
+  lines.push('- Use portable text-command records only when native slash-command proof is unavailable.')
+  lines.push('- Keep host capability status separate from portable `.gse/` workflow status.')
+  lines.push('')
+  lines.push('## Current Runtime Evidence')
+  lines.push('')
+  lines.push('- Host runtime invocation records: ' + (inventory.records ?? 0))
   lines.push('- Verified or accepted records: ' + (inventory.closeableRecords ?? 0))
   lines.push('- Hosts with records: ' + (inventory.hosts?.length ? inventory.hosts.join(', ') : 'none'))
   lines.push('- Native slash-command records: ' + (inventory.nativeSlashCommandRecords ?? 0))
@@ -164,11 +171,11 @@ function renderHandoff(audit, hostRows) {
   lines.push('- Keep host capability status separate from portable `.gse/` workflow status.')
   lines.push('- Treat subagents, MCP, LSP, browser tools, hooks, and plugins as host/session-specific until current evidence proves them.')
   lines.push('')
-  lines.push('## Next Action')
-  lines.push('')
-  lines.push('Record real invocation evidence for Claude Code-style, Hermes/AION-style, WorkBuddy/other IDE agents, and any host-native slash-command mechanism that becomes available.')
-  return lines.join('\n') + '\n'
-}
+  lines.push('## Next Action')
+  lines.push('')
+  lines.push('Record real invocation evidence for Claude Code-style, Hermes/AION-style, WorkBuddy/other IDE agents, and any host-native slash-command mechanism that becomes available. Start with native slash-command proof when the host supports it.')
+  return lines.join('\n') + '\n'
+}
 
 const audit = runHostAudit()
 if (!audit.ok) {

package/scripts/generate-maintenance-snapshot.mjs

@@ -0,0 +1,216 @@
+#!/usr/bin/env node
+import fs from 'node:fs'
+import path from 'node:path'
+import { spawnSync } from 'node:child_process'
+
+const args = process.argv.slice(2)
+
+function readArg(name, fallback = null) {
+  const index = args.indexOf(name)
+  if (index === -1) return fallback
+  return args[index + 1] ?? fallback
+}
+
+const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
+const target = path.resolve(readArg('--target', root))
+const installedRoot = readArg('--installed-root', null)
+const execute = args.includes('--execute')
+const jsonOnly = args.includes('--json')
+const skipReleaseBundle = args.includes('--skip-release-bundle')
+const packageSmoke = args.includes('--package-smoke')
+const canonicalOut = path.join(root, '.gse', 'maintenance', 'latest-maintenance-snapshot.json')
+const out = path.resolve(readArg('--out', canonicalOut))
+const isCanonicalOut = out === path.resolve(canonicalOut)
+
+function exists(relativePath) {
+  return fs.existsSync(path.join(root, relativePath))
+}
+
+function runNode(script, commandArgs, options = {}) {
+  const command = [process.execPath, path.join(root, 'scripts', script), ...commandArgs]
+  const result = spawnSync(command[0], command.slice(1), {
+    cwd: root,
+    encoding: 'utf8',
+    windowsHide: true,
+    ...options,
+  })
+  const stdout = (result.stdout ?? '').trim()
+  let parsed = null
+  try {
+    parsed = JSON.parse(stdout)
+  } catch {
+    parsed = null
+  }
+  const failed = parsed?.summary?.failed
+  const ok = (result.status ?? 1) === 0 || failed === 0
+  return {
+    command: command.join(' '),
+    status: result.status ?? 1,
+    ok,
+    summary: parsed?.summary ?? null,
+    workflows: parsed?.workflows ?? null,
+    stdout,
+    stderr: (result.stderr ?? '').trim(),
+  }
+}
+
+function maintenanceChecks() {
+  const checks = [
+    {
+      id: 'MS01',
+      area: 'maintenance cadence',
+      script: 'audit-maintenance-cadence.mjs',
+      args: ['--root', root, '--json'],
+    },
+    {
+      id: 'MS02',
+      area: 'final-form roadmap',
+      script: 'audit-final-form-roadmap.mjs',
+      args: ['--root', root, '--json'],
+    },
+    {
+      id: 'MS03',
+      area: 'state freshness',
+      script: 'audit-state-freshness.mjs',
+      args: ['--root', root, '--json'],
+    },
+    {
+      id: 'MS04',
+      area: 'continue preflight',
+      script: 'run-gse-command.mjs',
+      args: ['--root', root, '--target', target, '--command', '/gse continue', '--json', '--compact'],
+    },
+    {
+      id: 'MS05',
+      area: 'evidence levels',
+      script: 'audit-evidence-levels.mjs',
+      args: ['--root', root, '--target', target, '--json'],
+    },
+    {
+      id: 'MS06',
+      area: 'learning drift',
+      script: 'audit-learning-drift.mjs',
+      args: ['--root', root, '--target', target, '--json'],
+    },
+    {
+      id: 'MS07',
+      area: 'public acceptance',
+      script: 'audit-public-acceptance-readiness.mjs',
+      args: ['--root', root, '--json'],
+    },
+    {
+      id: 'MS08',
+      area: 'installed sync',
+      script: 'audit-installed-sync.mjs',
+      args: installedRoot
+        ? ['--root', root, '--installed-root', path.resolve(installedRoot), '--json']
+        : ['--root', root, '--json'],
+    },
+    {
+      id: 'MS09',
+      area: 'session sync',
+      script: 'audit-session-sync.mjs',
+      args: ['--root', root, '--json'],
+    },
+  ]
+  if (!skipReleaseBundle) {
+    checks.push({
+      id: 'MS10',
+      area: 'release bundle freshness',
+      script: 'audit-release-bundle.mjs',
+      args: ['--root', root, '--json'],
+    })
+  }
+  return checks.filter((item) => exists(path.join('scripts', item.script)))
+}
+
+  const checks = packageSmoke
+    ? maintenanceChecks().filter((item) => item.id !== 'MS02')
+    : maintenanceChecks()
+  const results = checks.map((item) => {
+  const run = runNode(item.script, item.args)
+  return {
+    id: item.id,
+    area: item.area,
+    status: run.ok ? 'passed' : 'failed',
+    command: run.command,
+    summary: run.summary,
+    workflows: run.workflows,
+    stderr: run.stderr,
+  }
+})
+
+const passed = results.filter((item) => item.status === 'passed').length
+const failed = results.length - passed
+const installedSync = results.find((item) => item.id === 'MS08')
+const releaseBundle = results.find((item) => item.id === 'MS10')
+const report = {
+  schemaVersion: 1,
+  root,
+  target,
+  installedRoot: installedRoot ? path.resolve(installedRoot) : null,
+  generatedAt: new Date().toISOString(),
+  execute,
+  out,
+  summary: {
+    status: failed === 0 ? 'passed' : 'failed',
+    passed,
+    failed,
+    total: results.length,
+    installedSyncMode: installedRoot ? 'installed-root' : 'package-only',
+    releaseBundleChecked: Boolean(releaseBundle),
+    packageSmoke,
+  },
+  workflows: {
+    maintenanceSnapshot: failed === 0 ? 'verified' : 'failed',
+    installedSync: installedSync?.workflows?.installedSync ?? (installedRoot ? 'unknown' : 'package-only'),
+    releaseBundleFreshness: releaseBundle?.workflows?.releaseBundle ?? (skipReleaseBundle ? 'skipped' : 'unknown'),
+  },
+  results,
+  limits: [
+    'This snapshot proves recurring maintenance checks ran at a point in time.',
+    'When writing the canonical latest-maintenance-snapshot.json, failed checks are written to latest-maintenance-snapshot.failed.json and do not overwrite the last passing snapshot.',
+    packageSmoke ? 'Package smoke mode skips source-worktree final-form roadmap freshness because package installs intentionally omit full local evidence history.' : '',
+    'It does not prove native host slash-command support.',
+    'Without --installed-root, installed sync is package-only and does not prove an installed copy is fresh.',
+  ].filter(Boolean),
+}
+
+function writeSnapshotFiles(targetPath, snapshot) {
+  fs.mkdirSync(path.dirname(targetPath), { recursive: true })
+  fs.writeFileSync(targetPath, JSON.stringify(snapshot, null, 2) + '\n', 'utf8')
+  const mdPath = targetPath.replace(/\.json$/i, '.md')
+  fs.writeFileSync(mdPath, [
+    '# GSE Maintenance Snapshot',
+    '',
+    'Generated: ' + snapshot.generatedAt,
+    'Root: ' + snapshot.root,
+    'Target: ' + snapshot.target,
+    'Status: ' + snapshot.summary.status,
+    '',
+    '## Checks',
+    '',
+    ...snapshot.results.map((item) => `- ${item.status === 'passed' ? '[x]' : '[ ]'} ${item.id} ${item.area}: ${item.summary?.status ?? item.status}`),
+    '',
+    '## Limits',
+    '',
+    ...snapshot.limits.map((item) => '- ' + item),
+    '',
+  ].join('\n'), 'utf8')
+}
+
+if (execute) {
+  const targetOut = failed > 0 && isCanonicalOut
+    ? out.replace(/\.json$/i, '.failed.json')
+    : out
+  report.writtenTo = targetOut
+  report.canonicalWritePolicy = failed > 0 && isCanonicalOut
+    ? 'failed-canonical-write-isolated'
+    : 'written'
+  writeSnapshotFiles(targetOut, report)
+}
+
+if (jsonOnly) console.log(JSON.stringify(report, null, 2))
+else console.log(JSON.stringify(report, null, 2))
+
+if (failed > 0) process.exit(1)

package/scripts/generate-public-acceptance-handoff.mjs

@@ -71,19 +71,29 @@ function renderHandoff(doctor) {
   lines.push('Root: ' + displayRoot)
   lines.push('Release label: ' + releaseLabel)
   lines.push('')
-  lines.push('## Purpose')
-  lines.push('')
-  lines.push('Give the owner and future agents one executable checklist for public acceptance. This handoff does not choose a license, publish a package, configure a repository, approve a marketplace listing, or prove host-native slash-command support.')
-  lines.push('')
-  lines.push('## Current Boundary')
-  lines.push('')
+  lines.push('## Purpose')
+  lines.push('')
+  lines.push('Give the owner and future agents one executable checklist for public acceptance. This handoff does not choose a license, publish a package, configure a repository, approve a marketplace listing, or prove optional host-native slash-command support.')
+  lines.push('')
+  lines.push('## Fast Path')
+  lines.push('')
+  lines.push('- Portable `/gse` command execution is the core command path.')
+  lines.push('- Native slash-command evidence is optional per host adapter, not a GSE core completion gate.')
+  lines.push('- Do not treat portable text-command records or generated pointers as native proof for a host adapter.')
+  lines.push('')
+  lines.push('## Current Boundary')
+  lines.push('')
   lines.push('- Public accepted: ' + (doctor.summary?.publicAccepted ?? doctor.workflows?.publicAccepted ?? 'unknown'))
   lines.push('- Pending owner/external gates: ' + gates.length)
   lines.push('- Source of truth: `scripts/audit-public-acceptance-readiness.mjs` and `references/final-readiness.md`')
   lines.push('')
   lines.push('## Execution Order')
   lines.push('')
-  for (const gate of gates) {
+  if (gates.length === 0) {
+    lines.push('- No owner/external gates are pending. Re-run final readiness and close gate before publishing a final claim.')
+    lines.push('')
+  }
+  for (const gate of gates) {
     lines.push('### ' + stageFor(gate) + ' - ' + gate.area)
     lines.push('')
     lines.push('- Current status: ' + gate.status)
@@ -127,13 +137,15 @@ function renderHandoff(doctor) {
   lines.push('')
   lines.push('## Next Action')
   lines.push('')
-  if (gateNames.has('License decision')) {
-    lines.push('Start with the owner-required license decision and public security contact, then attach public repository, CI, publication, and host runtime evidence as those systems become available.')
-  } else {
-    lines.push('Start with the public security contact, then attach public repository, CI, publication, and host runtime evidence as those systems become available.')
-  }
-  return lines.join('\n') + '\n'
-}
+  if (gates.length === 0) {
+    lines.push('No owner/external acceptance gate is pending. Optional host-native slash-command support can be recorded later per host adapter if a host exposes it.')
+  } else if (gateNames.has('License decision')) {
+    lines.push('Start with the owner-required license decision and public security contact, then attach public repository, CI, publication, and host runtime evidence as those systems become available. Record native slash-command evidence first when the host supports it.')
+  } else {
+    lines.push('Start with the public security contact, then attach public repository, CI, publication, and host runtime evidence as those systems become available. Record native slash-command evidence first when the host supports it.')
+  }
+  return lines.join('\n') + '\n'
+}
 
 const doctor = runDoctor()
 if (!doctor.ok) {

package/scripts/generate-release-owner-action-plan.mjs

@@ -88,8 +88,9 @@ function render(manifest) {
   lines.push('## Claim Boundary')
   lines.push('')
   lines.push('- Local validation does not mean public acceptance.')
-  lines.push('- Native slash-command support requires a real host invocation record.')
-  lines.push('- Owner and external gates must be recorded with accepted evidence before GSE can claim accepted public release readiness.')
+  lines.push('- Portable command execution is the GSE core command path.')
+  lines.push('- Native slash-command support requires a real host invocation record only when a host adapter claims it.')
+  lines.push('- Owner and external gates must be recorded with accepted evidence before GSE can claim accepted public release readiness.')
   lines.push('')
   lines.push('## Action Groups')
   lines.push('')
@@ -132,7 +133,7 @@ function render(manifest) {
   lines.push('## Limits')
   lines.push('')
   lines.push('- This plan is generated from the current release status manifest.')
-  lines.push('- It does not select a license, publish a package, configure a repository, run public CI, approve a marketplace listing, or prove host-native slash-command support.')
+  lines.push('- It does not select a license, publish a package, configure a repository, run public CI, approve a marketplace listing, or prove optional host-native slash-command support.')
   return lines.join('\n') + '\n'
 }
 

package/scripts/generate-release-status-manifest.mjs

@@ -81,7 +81,8 @@ try {
       publicAccepted: workflowStatus(finalReadiness.data, 'publicAccepted'),
       finalReadinessMatrix: workflowStatus(finalReadiness.data, 'finalReadinessMatrix'),
       localValidationDoesNotMeanPublicAcceptance: true,
-      nativeSlashCommandRequiresHostRecord: true,
+      nativeSlashCommandRequiresHostRecord: true,
+      nativeSlashCommandIsOptionalAdapterClaim: true,
     },
     readiness: {
       verified: compactRows(matrix, 'verified'),
@@ -160,8 +161,8 @@ try {
     },
     limits: [
       'This manifest is generated from local audits and evidence records.',
-      'It does not choose a license, publish a package, configure a public repository, run public CI, approve a marketplace listing, or prove native slash-command support.',
-      'Owner-required and external-required gates remain incomplete until accepted evidence records promote them.',
+      'It does not prove optional native slash-command support for any host adapter.',
+      'Owner-required and external-required gates remain incomplete until accepted evidence records promote them.',
     ],
   }
 } catch (error) {