@t275005746/gse 0.1.1 → 0.2.0

package/scripts/init-project.mjs

@@ -200,24 +200,39 @@ const results = [
         subagents: 'unknown',
         ci: 'unknown',
       },
-      lastEvidence: '.gse/evidence/index.jsonl',
+      lastEvidence: `.gse/evidence/${date}.md`,
       residualRisks: [
         'Project commands and host tools are unknown until verified in this repository.',
       ],
     }),
   ),
-  writeIfMissing(
-    'evidence/index.jsonl',
+  writeIfMissing(
+    'evidence/index.jsonl',
     JSON.stringify({
-      date,
-      recordType: 'adoption',
-      status: 'result',
-      summary: `Initialized GSE ${mode} scaffold.`,
-      evidenceFile: `.gse/evidence/${date}.md`,
+      date,
+      recordType: 'adoption',
+      status: 'result',
+      evidenceLevel: 'result',
+      requiredEvidenceLevel: 'verified-unit',
+      summary: `Initialized GSE ${mode} scaffold.`,
+      evidenceFile: `.gse/evidence/${date}.md`,
       commands: [`node <gse-skill>/scripts/init-project.mjs --target <project-root> --mode ${requestedMode}`],
-      nextAction: 'Record project-specific profile, canonical plan, quality gates, and first verified slice.',
-    }) + '\n',
-  ),
+      nextAction: 'Record project-specific profile, canonical plan, quality gates, and first verified slice.',
+    }) + '\n',
+  ),
+  writeIfMissing(
+    `evidence/${date}.md`,
+    `# GSE Adoption Evidence
+
+- Date: ${date}
+- Status: result
+- Evidence level: result
+- Summary: Initialized GSE ${mode} scaffold.
+- Command: \`node <gse-skill>/scripts/init-project.mjs --target <project-root> --mode ${requestedMode}\`
+
+Next action: Record project-specific profile, canonical plan, quality gates, and first verified slice.
+`,
+  ),
   writeIfMissing(
     'README.md',
     `# GSE Workflow
@@ -230,8 +245,9 @@ Start meaningful work by reading:
 2. .gse/state.json.
 3. .gse/project-profile.md.
 4. .gse/goal-map.md.
-5. .gse/quality-gates.md.
-6. The relevant change folder under .gse/changes/ when one exists.
+5. .gse/quality-gates.md.
+6. .gse/project-guards.md.
+7. The relevant change folder under .gse/changes/ when one exists.
 
 Core loop:
 
@@ -336,8 +352,8 @@ Describe the durable project outcome here.
 - Add project-specific risks here.
 `,
   ),
-  writeIfMissing(
-    'quality-gates.md',
+  writeIfMissing(
+    'quality-gates.md',
     `# Quality Gates
 
 ## Universal
@@ -361,12 +377,31 @@ Describe the durable project outcome here.
 
 ## Learning
 
-- Capture reusable lessons and promote recurring issues into gates.
-`,
-  ),
-  writeIfMissing(
-    'tooling.md',
-    `# Tooling
+- Capture reusable lessons and promote recurring issues into gates.
+`,
+  ),
+  writeIfMissing(
+    'project-guards.md',
+    `# Project Guards
+
+Project guards are reusable preflight rules promoted from repeated project lessons.
+
+GSE reads this file during \`/gse continue\` and surfaces active guards before implementation. Keep it short, project-local, and evidence-bound.
+
+| ID | Guard | Severity | Trigger | Check | Status |
+|---|---|---|---|---|---|
+| WIN-SHELL | Use shell syntax that matches the active host. On Windows, prefer \`cmd /c\` for npm, pnpm, npx, and similar commands when PowerShell shims or operators are unreliable. | high | Windows shell or package-manager command | Confirm command syntax is valid for the current shell before running or documenting it. | active |
+| SPARSE-GIT | Check sparse checkout before staging generated workflow folders. | high | \`.gse/\`, host adapter, or generated scaffold changes | If sparse checkout is active and the path is outside the cone, use sparse-aware staging or record the limitation. | active |
+| UTF8-DOC | Use UTF-8-safe readers for Chinese or multilingual docs before judging mojibake. | high | Chinese docs, encoding complaints, generated docs | Read with Node UTF-8 or another UTF-8-safe viewer; run the project encoding check when docs changed. | active |
+| EVIDENCE-STALE | Treat stale, broken, or schema-weak evidence as a preflight problem. | high | \`.gse/evidence/index.jsonl\`, state, close gate | Validate JSONL and make sure latest evidence matches the current slice before closing. | active |
+| UI-EVIDENCE | Label UI/browser verification downgrades explicitly. | medium | UI, browser, screenshot, component test, visual behavior | Mark evidence as unit, component, API, browser, CI, owner, release, or external instead of hiding downgrade under a generic verified label. | active |
+| SUBAGENT-HONEST | Do not claim subagent dispatch unless the current host exposes real dispatch evidence. | high | multi-agent, subagent, role dispatch, parallel work | If no real dispatch tool exists, run roles sequentially or use file/tool parallelism and say so. | active |
+| SYNC-NO-INTERRUPT | Do not interrupt running project sessions with cross-thread GSE sync messages. | high | GSE upgrade sync, delegation, background thread message | Prefer evidence records or owner action notes; only send a short cross-thread sync when the target session is idle or the owner explicitly asks. | active |
+`,
+  ),
+  writeIfMissing(
+    'tooling.md',
+    `# Tooling
 
 Minimum tools: git, shell, and project test/build commands.
 
@@ -379,12 +414,30 @@ Recommended tools:
 - Comet for change lifecycle when available.
 - Self-improvement or learnings files for durable lessons.
 
-Do not claim a tool was used when it was not available.
-`,
-  ),
-  writeIfMissing(
-    'learnings.md',
-    `# Learnings
+Do not claim a tool was used when it was not available.
+`,
+  ),
+  writeIfMissing(
+    'host-capabilities.md',
+    `# Host Capabilities
+
+Record current project and host capability facts here. A generated adapter, portable command, or another host's evidence is not proof for this host.
+
+Status vocabulary: \`verified\`, \`documented\`, \`unknown\`, \`unavailable\`, \`external-required\`.
+
+| Capability | Host/Tool | Status | Evidence | Claim Boundary | Last Checked |
+|---|---|---|---|---|---|
+| native-slash-command | current host | external-required | - | Native slash-command support requires real host runtime invocation evidence, not portable \`/gse\` runner output. | - |
+| browser | browser or Playwright | unknown | - | Browser proof requires a real browser/component/screenshot command for this project. | - |
+| mcp | MCP servers | unknown | - | MCP status is host and project specific. | - |
+| lsp | LSP or code index | unknown | - | LSP/index status is current-session specific unless project docs prove it. | - |
+| subagent | host dispatch | unknown | - | Real subagent dispatch requires verified host/tool evidence; sequential role fallback is not real dispatch. | - |
+| ci | project CI | unknown | - | CI is verified only after a workflow/config or run is checked for this project. | - |
+`,
+  ),
+  writeIfMissing(
+    'learnings.md',
+    `# Learnings
 
 Record only reusable lessons.
 
@@ -417,13 +470,19 @@ Record only reusable lessons.
 ## Next Action
 `,
   ),
-  writeIfMissing(
-    'templates/evidence.md',
-    `# Evidence
-
-## Commands
-
-## Results
+  writeIfMissing(
+    'templates/evidence.md',
+    `# Evidence
+
+## Status
+
+- Evidence status:
+- Evidence level:
+- Required evidence level:
+
+## Commands
+
+## Results
 
 ## Files Changed
 
@@ -582,10 +641,11 @@ Host-specific folders such as .codex/, .claude/, .agents/, or runtime-specific d
 
 - Goal map: .gse/goal-map.md
 - Quality gates: .gse/quality-gates.md
-- Agent roles: .gse/agents/roles.md
-- Dispatch rules: .gse/agents/dispatch.md
-- Project skills: .gse/skills/README.md
-- LSP/index notes: .gse/lsp/README.md
+- Agent roles: .gse/agents/roles.md
+- Dispatch rules: .gse/agents/dispatch.md
+- Role fallback packets: .gse/agents/role-fallback-packets.md
+- Project skills: .gse/skills/README.md
+- LSP/index notes: .gse/lsp/README.md
 
 ## Adapter Rule
 
@@ -598,43 +658,64 @@ Do not duplicate the whole workflow into a host-specific folder. Add a short poi
 
 Use these roles as boundaries, whether they are executed by real subagents or sequentially by one agent.
 
-| Role | Responsibility | Write Access |
-|---|---|---|
-| Coordinator | Scope, context, final judgment, integration | yes |
-| Product Analyst | Outcome, user pain, priority, non-goals | docs only |
-| Architect | Contracts, data flow, risks, rollback | docs/code by assignment |
-| Code Locator | Files, symbols, call chains, existing tests | no |
-| Builder | Bounded implementation slice | assigned files only |
-| Reviewer | Diff review, regressions, missing tests | no |
-| QA | Focused verification and evidence | test/evidence only |
-| Docs/Evidence | Slice log, ADR links, learning entries | docs only |
-`,
-    ),
+| Role | Responsibility | Write Access |
+|---|---|---|
+| Coordinator | Scope, context, final judgment, integration | yes |
+| Planner | Outcome, scope, acceptance, evidence, risk, next action | docs/state only |
+| Product Analyst | Outcome, user pain, priority, non-goals | docs only |
+| Architect | Contracts, data flow, risks, rollback | docs/code by assignment |
+| Locator | Files, symbols, call chains, existing tests | no |
+| Implementer | Bounded implementation slice | assigned files only |
+| Verifier | Focused checks and evidence level | evidence/test output only |
+| Reviewer | Diff review, regressions, missing tests | no |
+| Docs/Evidence | Slice log, ADR links, learning entries | docs only |
+| Release | Release, owner, CI, package, marketplace, registry, and host-runtime boundaries | docs/release only |
+`,
+    ),
     writeIfMissing(
       'agents/dispatch.md',
       `# Agent Dispatch
 
 Use real subagent tools only when the host exposes them.
 
-## Dispatch Packet
-
-- Role:
-- Objective:
-- Allowed files:
-- Forbidden actions:
-- Expected output:
-- Verification:
+## Dispatch Packet
+
+- Role:
+- Real delegation used: yes | no
+- Objective:
+- Allowed files:
+- Forbidden actions:
+- Role output evidence:
+- Expected output:
+- Verification:
 
 ## Rules
 
 - Do not delegate final judgment.
 - Avoid parallel writes to the same file.
 - Say explicitly when subagent tools are unavailable and execute roles sequentially.
-- Keep prompts free of expected answers when using agents for validation.
-`,
-    ),
-    writeIfMissing(
-      'skills/README.md',
+- Keep prompts free of expected answers when using agents for validation.
+`,
+    ),
+    writeIfMissing(
+      'agents/role-fallback-packets.md',
+      `# Role Fallback Packets
+
+These packets make role-separated work auditable even when real subagent tools are unavailable.
+
+| Role | Mode | Real delegation used | Tool status | Fallback output | Evidence | Stop condition | Write access |
+|---|---|---|---|---|---|---|---|
+| Planner | sequential-role | no | unknown | Slice plan with outcome, scope, acceptance, evidence, risk, and next action | .gse/current-slice.md or planning note | Goal, roadmap, or acceptance source is contradictory | docs/state only |
+| Locator | sequential-role | no | unknown | File, symbol, command, and existing-test map | search output or locator notes | Required files cannot be found or ownership is unclear | read-only |
+| Implementer | sequential-role | no | unknown | Bounded diff in assigned files | git diff and changed-file list | Target files have unsafe unrelated dirty changes | assigned files only |
+| Verifier | sequential-role | no | unknown | Focused command results and evidence level | command output summary and evidence record | Required focused check cannot run or fails without a repair path | evidence/test output only |
+| Reviewer | sequential-role | no | unknown | Spec compliance and quality findings | review notes or explicit no-findings statement | Diff exceeds scope or missing tests are material | read-only |
+| Docs/Evidence | sequential-role | no | unknown | Slice evidence, state, goal-map, and roadmap updates | .gse/evidence/index.jsonl and .gse/evidence/YYYY-MM-DD.md | Evidence cannot be recorded or JSONL is invalid | docs/evidence only |
+| Release | sequential-role | no | unknown | Release, owner, external, CI, package, and host-runtime boundary check | final-readiness or public-acceptance audit summary | Local evidence is being used to claim owner/external support | docs/release only |
+`,
+    ),
+    writeIfMissing(
+      'skills/README.md',
       `# Project Skills
 
 Record project-local skills and reusable workflows here.

package/scripts/record-learning.mjs

@@ -72,10 +72,10 @@ if (!fs.existsSync(gseDir) || !fs.statSync(gseDir).isDirectory()) {
   process.exit(1)
 }
 
-const existing = fs.existsSync(learningsPath) ? fs.readFileSync(learningsPath, 'utf8').replace(/^\uFEFF/, '') : '# Learnings\n\n'
-const duplicate = existing
-  .split(/\r?\n/)
-  .some((line) => line.trim().startsWith('- Summary:') && normalize(line.replace(/^- Summary:\s*/, '')) === normalize(summary))
+const existing = fs.existsSync(learningsPath) ? fs.readFileSync(learningsPath, 'utf8').replace(/^\uFEFF/, '') : '# Learnings\n\n'
+const existingLines = existing.split(/\r?\n/)
+const duplicateSummaryLineIndex = existingLines.findIndex((line) => line.trim().startsWith('- Summary:') && normalize(line.replace(/^- Summary:\s*/, '')) === normalize(summary))
+const duplicate = duplicateSummaryLineIndex !== -1
 
 const relativePath = path.relative(target, learningsPath).replace(/\\/g, '/')
 const entry = [
@@ -90,10 +90,39 @@ const entry = [
   '',
 ].join('\n')
 
-if (duplicate) {
-  report({
-    status: 'skipped',
-    target,
+if (duplicate) {
+  if (execute) {
+    let insertAt = duplicateSummaryLineIndex + 1
+    let occurrenceLineIndex = -1
+    for (let cursor = duplicateSummaryLineIndex + 1; cursor < existingLines.length; cursor += 1) {
+      const line = existingLines[cursor]
+      if (/^##\s+/.test(line)) break
+      if (line.trim().startsWith('- Occurrences:')) {
+        occurrenceLineIndex = cursor
+        break
+      }
+      if (line.trim().startsWith('- Source:')) insertAt = cursor
+    }
+    if (occurrenceLineIndex === -1) {
+      existingLines.splice(insertAt, 0, '- Occurrences: 2')
+    } else {
+      const current = Number(existingLines[occurrenceLineIndex].replace(/^- Occurrences:\s*/, '').trim()) || 1
+      existingLines[occurrenceLineIndex] = '- Occurrences: ' + String(current + 1)
+    }
+    fs.writeFileSync(learningsPath, existingLines.join('\n').replace(/\n*$/, '\n'), 'utf8')
+    report({
+      status: 'updated',
+      target,
+      path: relativePath,
+      summary,
+      reason: 'duplicate summary counted without appending another entry',
+      evidenceStatus: 'verified',
+    })
+    process.exit(0)
+  }
+  report({
+    status: 'skipped',
+    target,
     path: relativePath,
     summary,
     reason: 'duplicate summary already exists',

package/scripts/record-session-sync.mjs

@@ -0,0 +1,87 @@
+#!/usr/bin/env node
+import fs from 'node:fs'
+import path from 'node:path'
+
+const args = process.argv.slice(2)
+
+function readArg(name, fallback = null) {
+  const index = args.indexOf(name)
+  if (index === -1) return fallback
+  return args[index + 1] ?? fallback
+}
+
+const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
+const execute = args.includes('--execute')
+const jsonOnly = args.includes('--json')
+const recordPath = path.join(root, '.gse', 'session-sync.jsonl')
+
+function requiredArg(name) {
+  const value = readArg(name)
+  if (!value) {
+    console.error(`${name} is required`)
+    process.exit(1)
+  }
+  return value
+}
+
+function normalizeStatus(value) {
+  return String(value || '').trim().toLowerCase()
+}
+
+const allowedStatuses = new Set([
+  'sent',
+  'installed-sync',
+  'skipped',
+  'failed',
+  'archived',
+  'unavailable',
+])
+
+const status = normalizeStatus(requiredArg('--status'))
+if (!allowedStatuses.has(status)) {
+  console.error(`--status must be one of: ${[...allowedStatuses].join(', ')}`)
+  process.exit(1)
+}
+
+const record = {
+  schemaVersion: 1,
+  recordedAt: new Date().toISOString(),
+  capability: readArg('--capability', 'gse-capability-sync'),
+  status,
+  method: requiredArg('--method'),
+  threadId: readArg('--thread-id', null),
+  project: readArg('--project', null),
+  workspace: readArg('--workspace', null),
+  evidence: requiredArg('--evidence'),
+  messageSummary: readArg('--message-summary', ''),
+  limits: [
+    'This record proves a sync attempt or installed-copy parity record, not that the target session adopted the capability.',
+    'A thread sync is accepted only when the transport returned success or when the failure/archived status is recorded honestly.',
+  ],
+}
+
+const report = {
+  root,
+  recordPath,
+  execute,
+  summary: {
+    status: execute ? 'written' : 'dry-run',
+    threadId: record.threadId,
+    syncStatus: record.status,
+    method: record.method,
+  },
+  record,
+}
+
+if (execute) {
+  fs.mkdirSync(path.dirname(recordPath), { recursive: true })
+  fs.appendFileSync(recordPath, JSON.stringify(record) + '\n', 'utf8')
+}
+
+if (jsonOnly) console.log(JSON.stringify(report, null, 2))
+else {
+  console.log(`GSE session sync record: ${report.summary.status}`)
+  console.log(`Status: ${record.status}`)
+  console.log(`Method: ${record.method}`)
+  if (record.threadId) console.log(`Thread: ${record.threadId}`)
+}

package/scripts/run-gse-command.mjs

@@ -95,26 +95,31 @@ const commandMap = {
     effect: 'read-only',
     summary: 'Show GSE commands and project entry files.',
   },
-  continue: {
-    route: 'scripts/generate-session-prompt.mjs',
-    effect: 'read-only',
-    summary: 'Generate a continuation packet from project state.',
-  },
-  next: {
-    route: 'scripts/generate-session-prompt.mjs',
-    effect: 'read-only',
-    summary: 'Alias for /gse continue.',
+  continue: {
+    route: 'scripts/generate-continue-packet.mjs',
+    effect: 'read-only',
+    summary: 'Run a hard continuation preflight and generate a compact state packet.',
+  },
+  next: {
+    route: 'scripts/generate-continue-packet.mjs',
+    effect: 'read-only',
+    summary: 'Alias for /gse continue.',
   },
   status: {
     route: 'scripts/generate-final-form-progress-report.mjs or .gse/state.json',
     effect: 'read-only',
     summary: 'Show project state, or GSE final-form progress when the target is the GSE skill.',
   },
-  doctor: {
-    route: 'scripts/audit-public-acceptance-readiness.mjs or scripts/audit-target-project.mjs',
-    effect: 'read-only',
-    summary: 'Diagnose final-form public/host acceptance blockers for GSE, or target-project GSE readiness for normal projects.',
-  },
+  doctor: {
+    route: 'scripts/audit-public-acceptance-readiness.mjs or scripts/audit-target-project.mjs',
+    effect: 'read-only',
+    summary: 'Diagnose final-form public/host claim evidence for GSE, or target-project GSE readiness for normal projects.',
+  },
+  repair: {
+    route: 'scripts/audit-state-repair.mjs',
+    effect: 'read-only by default; reversible risk compaction with --execute',
+    summary: 'Diagnose or safely repair stale state, broken evidence JSONL, and overlong residual risks.',
+  },
   acceptance: {
     route: 'scripts/audit-public-acceptance-readiness.mjs or scripts/audit-target-project.mjs',
     effect: 'read-only',
@@ -145,11 +150,16 @@ const commandMap = {
     effect: 'read-only by default; write-with-execute for install target writes',
     summary: 'Dry-run or install GSE from a local package path or URL-shaped package source.',
   },
-  'public-release': {
-    route: 'scripts/generate-public-release-checklist.mjs or scripts/audit-public-release-checklist.mjs',
-    effect: 'read-only by default; write-with-execute for canonical checklist generation',
-    summary: 'Dry-run or generate the ordered owner/public release checklist.',
-  },
+  'public-release': {
+    route: 'scripts/generate-public-release-checklist.mjs or scripts/audit-public-release-checklist.mjs',
+    effect: 'read-only by default; write-with-execute for canonical checklist generation',
+    summary: 'Dry-run or generate the ordered owner/public release checklist.',
+  },
+  maintenance: {
+    route: 'scripts/generate-maintenance-snapshot.mjs',
+    effect: 'read-only',
+    summary: 'Generate a recurring maintenance snapshot for benchmark, drift, evidence, installed sync, session sync, and release freshness checks.',
+  },
   owner: {
     route: 'scripts/audit-public-acceptance-readiness.mjs',
     effect: 'read-only',
@@ -170,11 +180,11 @@ const commandMap = {
     effect: 'read-only',
     summary: 'Select and run focused verification according to project quality gates.',
   },
-  learn: {
-    route: 'scripts/record-learning.mjs',
-    effect: 'read-only by default; write-with-execute for .gse/learnings.md',
-    summary: 'Record a reusable project lesson and skip duplicate summaries.',
-  },
+  learn: {
+    route: 'scripts/record-learning.mjs or scripts/audit-learning-promotion.mjs',
+    effect: 'read-only by default; write-with-execute for .gse/learnings.md or candidate-only .gse/learning-promotions.md',
+    summary: 'Record a reusable project lesson, or run promotion analysis with --promote.',
+  },
   slice: {
     route: 'references/spec-workflow.md',
     effect: 'read-only',
@@ -207,8 +217,8 @@ if (execute && verb === 'init') {
   const changeId = rest.find((item) => !item.startsWith('--')) ?? 'gse-change'
   const level = rest.includes('--level') ? rest[rest.indexOf('--level') + 1] : 'standard'
   execution = runNode('init-change.mjs', ['--target', target, '--change-id', changeId, '--level', level, '--json'])
-} else if (verb === 'continue' || verb === 'next') {
-  execution = runNode('generate-session-prompt.mjs', ['--target', target, '--json'])
+} else if (verb === 'continue' || verb === 'next') {
+  execution = runNode('generate-continue-packet.mjs', ['--root', root, '--target', target, '--json'])
 } else if (verb === 'status') {
   const targetHasFinalFormReport = fs.existsSync(path.join(target, 'scripts', 'generate-final-form-progress-report.mjs'))
     && fs.existsSync(path.join(target, 'references', 'final-readiness.md'))
@@ -238,13 +248,19 @@ if (execute && verb === 'init') {
         }),
         stderr: state ? '' : '.gse/state.json is missing or invalid',
       }
-} else if (verb === 'doctor' || verb === 'acceptance') {
+} else if (verb === 'doctor' || verb === 'acceptance') {
   const targetHasPublicAcceptanceDoctor = fs.existsSync(path.join(target, 'scripts', 'audit-public-acceptance-readiness.mjs'))
     && fs.existsSync(path.join(target, 'references', 'final-readiness.md'))
   execution = targetHasPublicAcceptanceDoctor
     ? runNode('audit-public-acceptance-readiness.mjs', ['--root', target, '--json'])
-    : runNode('audit-target-project.mjs', ['--target', target, '--json'])
-} else if (verb === 'owner-actions' || verb === 'owner') {
+    : runNode('audit-target-project.mjs', ['--target', target, '--json'])
+} else if (verb === 'repair') {
+  const repairArgs = ['--root', root, '--target', target, '--json']
+  if (execute) repairArgs.push('--write')
+  const maxRiskIndex = rest.indexOf('--max-active-risks')
+  if (maxRiskIndex !== -1) repairArgs.push('--max-active-risks', rest[maxRiskIndex + 1] || '6')
+  execution = runNode('audit-state-repair.mjs', repairArgs)
+} else if (verb === 'owner-actions' || verb === 'owner') {
   const targetHasPublicAcceptanceDoctor = fs.existsSync(path.join(target, 'scripts', 'audit-public-acceptance-readiness.mjs'))
     && fs.existsSync(path.join(target, 'references', 'final-readiness.md'))
   if (targetHasPublicAcceptanceDoctor) {
@@ -445,7 +461,7 @@ if (execute && verb === 'init') {
       stderr: 'target does not expose scripts/install-gse.mjs',
     }
   }
-} else if (verb === 'public-release') {
+} else if (verb === 'public-release') {
   const targetHasPublicReleaseChecklist = fs.existsSync(path.join(target, 'scripts', 'generate-public-release-checklist.mjs'))
     && fs.existsSync(path.join(target, 'scripts', 'audit-public-release-checklist.mjs'))
   if (targetHasPublicReleaseChecklist) {
@@ -471,9 +487,19 @@ if (execute && verb === 'init') {
         error: '/gse public-release is only available for GSE skill packages that include public release checklist scripts.',
       }),
       stderr: 'target does not expose scripts/generate-public-release-checklist.mjs and scripts/audit-public-release-checklist.mjs',
-    }
-  }
-} else if (verb === 'audit') {
+    }
+  }
+} else if (verb === 'maintenance') {
+  const maintenanceArgs = ['--root', target, '--target', target, '--json']
+  const installedRootIndex = rest.indexOf('--installed-root')
+  if (installedRootIndex !== -1 && rest[installedRootIndex + 1]) maintenanceArgs.push('--installed-root', rest[installedRootIndex + 1])
+  const outIndex = rest.indexOf('--out')
+  if (outIndex !== -1 && rest[outIndex + 1]) maintenanceArgs.push('--out', path.resolve(rest[outIndex + 1]))
+  if (rest.includes('--skip-release-bundle')) maintenanceArgs.push('--skip-release-bundle')
+  if (rest.includes('--package-smoke')) maintenanceArgs.push('--package-smoke')
+  if (execute) maintenanceArgs.push('--execute')
+  execution = runNode('generate-maintenance-snapshot.mjs', maintenanceArgs)
+} else if (verb === 'audit') {
   execution = runNode('audit-target-project.mjs', ['--target', target, '--json'])
 } else if (verb === 'close') {
   execution = runNode('audit-close-gate.mjs', ['--target', target, '--json'])
@@ -481,20 +507,26 @@ if (execute && verb === 'init') {
   const profileIndex = rest.indexOf('--profile')
   const profile = profileIndex === -1 ? 'lite' : (rest[profileIndex + 1] || 'lite')
   execution = runNode('run-validation-profile.mjs', ['--target', target, '--profile', profile, '--json'])
-} else if (verb === 'learn') {
-  const learningArgs = [
-    '--target', target,
-    '--summary', readRestValue(rest, '--summary'),
-    '--trigger', readRestValue(rest, '--trigger', 'reusable lesson'),
-    '--source', readRestValue(rest, '--source', 'run-gse-command'),
-    '--promotion', readRestValue(rest, '--promotion', 'first occurrence: learning note'),
-    '--json',
-  ]
-  const impact = readRestValue(rest, '--impact')
-  if (impact) learningArgs.push('--impact', impact)
-  if (execute) learningArgs.push('--execute')
-  execution = runNode('record-learning.mjs', learningArgs)
-}
+} else if (verb === 'learn') {
+  if (rest.includes('--promote')) {
+    const promotionArgs = ['--root', root, '--target', target, '--json']
+    if (execute) promotionArgs.push('--write')
+    execution = runNode('audit-learning-promotion.mjs', promotionArgs)
+  } else {
+    const learningArgs = [
+      '--target', target,
+      '--summary', readRestValue(rest, '--summary'),
+      '--trigger', readRestValue(rest, '--trigger', 'reusable lesson'),
+      '--source', readRestValue(rest, '--source', 'run-gse-command'),
+      '--promotion', readRestValue(rest, '--promotion', 'first occurrence: learning note'),
+      '--json',
+    ]
+    const impact = readRestValue(rest, '--impact')
+    if (impact) learningArgs.push('--impact', impact)
+    if (execute) learningArgs.push('--execute')
+    execution = runNode('record-learning.mjs', learningArgs)
+  }
+}
 
 const report = {
   root,

package/scripts/run-validation-profile.mjs

@@ -48,11 +48,30 @@ function run(script, commandArgs) {
 }
 
 function commandList(selectedProfile) {
-  const common = [
-    ['audit-commands.mjs', ['--root', root, '--json']],
-    ['audit-command-execution.mjs', ['--root', root, '--profile', 'lite', '--json']],
-    ['audit-learning-system.mjs', ['--root', root, '--json']],
-  ]
+  const common = [
+    ['audit-commands.mjs', ['--root', root, '--json']],
+    ['audit-continue-preflight.mjs', ['--root', root, '--json']],
+    ['audit-completion-plan-drill.mjs', ['--root', root, '--json']],
+    ['audit-project-guards.mjs', ['--root', root, '--json']],
+    ['backfill-evidence-levels.mjs', ['--root', target, '--json']],
+    ['audit-evidence-levels.mjs', ['--root', root, '--target', target, '--json']],
+    ['audit-evidence-review-queue.mjs', ['--root', root, '--target', target, '--json']],
+    ['audit-ui-browser-evidence-policy.mjs', ['--root', root, '--target', target, '--json']],
+    ['audit-role-dispatch-fallback.mjs', ['--root', root, '--target', target, '--json']],
+    ['audit-close-gate-hardening.mjs', ['--root', root, '--json']],
+    ['audit-state-repair.mjs', ['--root', root, '--target', target, '--json']],
+    ['audit-learning-promotion.mjs', ['--root', root, '--target', target, '--json']],
+    ['audit-learning-drift.mjs', ['--root', root, '--target', target, '--json']],
+    ['audit-host-capabilities.mjs', ['--root', root, '--target', target, '--json']],
+    ['audit-tool-fallback-policy.mjs', ['--root', root, '--target', target, '--json']],
+    ['audit-target-hardening-drills.mjs', ['--root', root, '--json']],
+    ['audit-maintenance-cadence.mjs', ['--root', root, '--json']],
+    ['audit-maintenance-snapshot.mjs', ['--root', root, '--json']],
+    ['audit-installed-sync.mjs', ['--root', root, '--json']],
+    ['audit-session-sync.mjs', ['--root', root, '--json']],
+    ['audit-command-execution.mjs', ['--root', root, '--profile', 'lite', '--json']],
+    ['audit-learning-system.mjs', ['--root', root, '--json']],
+  ]
 
   const targetChecks = target === root
     ? []