cleargate 0.10.0 → 0.11.1

package/CHANGELOG.md

@@ -3,6 +3,33 @@
 All notable changes to this project are documented in this file.
 Format: [Common Changelog](https://common-changelog.org/) — most-recent version first.
 
+## [0.11.1] — 2026-05-05
+
+Hotfix.
+
+### Fixed
+- **`cleargate doctor` no longer reports false-positive `cleargate misconfigured: cleargate-planning/MANIFEST.json not found`** — `cleargate-cli/src/commands/doctor.ts` `runHookHealth()` was checking `cleargate-planning/MANIFEST.json`, a path that `copy-payload.ts` (CR-053, v0.11.0) explicitly never creates in target repos. Doctor now checks `.cleargate/.install-manifest.json` (the actual install snapshot written by `init`). Every healthy v0.11.0 install previously printed the warning + exited 2 from `doctor`.
+
+## [0.11.0] — 2026-05-04
+
+SDLC Hardening Wrap-Up + Docs Aligned (SPRINT-25). Six CRs shipped (CR-053..CR-058); the SDLC Hardening arc closes here.
+
+### Added
+- **`run_script.sh` byte-correct UTF-8 truncation** (CR-054) — `_truncate_stream()` now uses `head -c $MAX_BYTES` with a separate `wc -c` source-file check gating the suffix append; `${var:0:N}` was char-index, not byte-count, and silently mis-truncated multi-byte input (cyrillic, CJK).
+- **wrapScript helper adoption in 4 caller tests** (CR-055) — `cleargate-cli/test/commands/{sprint,state,gate,story}.node.test.ts` now consume the `wrapScript` helper end-to-end (one new `await wrapScript(...)` scenario per file). JSDoc canonical-pattern block added at top of `cleargate-cli/test/helpers/wrap-script.ts`. Suite runtime: 52s → 57s (1.09×).
+- **Skill-candidate heuristic — session-shared filter + cross-sprint dedup + threshold raise** (CR-056) — `.cleargate/scripts/suggest_improvements.mjs` (live + canonical) tightens `scanSkillCandidates`: (1) `isSessionShared()` filters buckets where all entries share one session UUID (token-attribution artifact); (2) cross-sprint hash dedup scans prior `improvement-suggestions.md`; (3) threshold raised to "≥3× across ≥2 distinct sprints AND not session-shared". Eliminates the every-sprint "CR-045 × architect" false-positive.
+- **`script-incident-corpus-analysis.md` knowledge doc** (CR-057) — `.cleargate/knowledge/script-incident-corpus-analysis.md` formally closes CR-046 §0.5 Q3 deferred self-repair question. DOCS-MODE shipped (no `run_script.sh` self-repair logic) — corpus = 3 incidents, no recurring failure pattern. Revisit-trigger documented.
+- **Five-role agent team** in README (CR-058) — root `README.md` rebranded "Four-Agent Loop" → "Five-Role Agent Loop"; describes Architect (4 modes: SDR/M1/TPV/post-flight), Developer, QA (Red + Verify modes), DevOps (mechanical merge + state), Reporter (sprint close); 4 explicit gates documented (Gate 1 Initiative, Gate 2 Ambiguity, Gate 3 preflight, Gate 4 close); §What's New section recaps SPRINT-22..SPRINT-24 (CR-042..CR-052); MCP adapter claim softened to "in development" (only LinearAdapter currently shipped). New `.cleargate/sprint-runs/SPRINT-25/lifecycle-diagram-prompt.md` (164 lines, structured headings) ready for external image-generator.
+- **`cleargate-cli/README.md` Commands section** (CR-058) — documents `sprint preflight/init/close`, `gate check`, `doctor`, `state update/validate`, `story start/done/bouncing`.
+
+### Fixed
+- **`cleargate init` no longer writes `MANIFEST.json` to user-repo root** (CR-053) — `cleargate-cli/src/init/copy-payload.ts` `SKIP_FILES` adds `'MANIFEST.json'`; the npm-payload-root MANIFEST.json (parity manifest for the meta-repo's payload-copy verification) was being copied into every user repo as a side-effect of `copyPayload` walking the payload root. Removes the SPRINT-24 `.gitignore` `/MANIFEST.json` stopgap (commit `5fd8b22`).
+
+### Changed
+- Package description rebranded "four-agent loop" → "five-role agent team".
+
+---
+
 ## [0.10.0] — 2026-05-02
 
 ### Added

package/README.md

@@ -1,6 +1,6 @@
 # cleargate
 
-**ClearGate** gives Claude Code a disciplined ship-loop — proposals → epics → stories → sprints → four-agent execution (architect plans, developer codes, qa verifies, reporter retrospects). One command bootstraps a downstream repo:
+**ClearGate** gives Claude Code a disciplined ship-loop — proposals → epics → stories → sprints → five-role agent execution (architect plans, developer codes, qa verifies, devops merges, reporter retrospects). One command bootstraps a downstream repo:
 
 ```bash
 npx cleargate init
@@ -22,6 +22,7 @@ npm i -D cleargate        # local devDep, run via `npx cleargate ...`
 
 ```bash
 cleargate init                      # scaffold a target repo (CLAUDE.md block, .claude/, .cleargate/)
+cleargate doctor                    # check scaffold health — drift, missing hooks, blocked items
 cleargate wiki build                # full rebuild from .cleargate/delivery/ → .cleargate/wiki/
 cleargate wiki ingest <file>        # single-file update (also called by PostToolUse hook)
 cleargate wiki query "<topic>"      # read-only synthesis with [[ID]] citations
@@ -29,6 +30,15 @@ cleargate wiki query "<topic>" --persist   # file the answer to wiki/topics/<slu
 cleargate wiki lint                 # drift check — exits non-zero on inconsistency, blocks Gates 1 + 3
 cleargate wiki lint --suggest       # advisory mode — surfaces candidate cross-refs, exits 0
 cleargate join <invite-url>         # join an existing ClearGate workspace via MCP
+cleargate sprint init               # initialize a sprint — cut sprint branch, create state.json
+cleargate sprint preflight          # Gate 3 readiness check — no orphans, no ambiguity drift
+cleargate sprint close              # close a sprint — runs lifecycle reconciler, prints handoff summary
+cleargate gate check                # run the configured gate command (test/typecheck/lint/precommit)
+cleargate state update <id> <state> # transition a work item to the given state
+cleargate state validate            # validate state.json against the schema
+cleargate story start <id>          # create worktree + branch for a story, flip state to In Progress
+cleargate story done <id>           # mark a story done after DevOps merge (alias for state update Done)
+cleargate story bouncing <id>       # flag a story as bouncing (QA kick-back); increments bounce counter
 ```
 
 After `init`, edits to `.cleargate/delivery/**` auto-trigger `wiki ingest` via the PostToolUse hook. The wiki stays fresh; no manual maintenance.

package/dist/MANIFEST.json

@@ -1,10 +1,10 @@
 {
-  "cleargate_version": "0.10.0",
-  "generated_at": "2026-05-02T19:21:41.996Z",
+  "cleargate_version": "0.11.1",
+  "generated_at": "2026-05-04T22:23:50.738Z",
   "files": [
     {
       "path": ".claude/agents/architect.md",
-      "sha256": "5aa58a549f74ecc73be1630428ef1903faae5c3779b7b5371307c5cb63621026",
+      "sha256": "a2d11d6a7f21bce22730ba9076af9ddde44b258082e33aa99fcd57c14ad75f55",
       "tier": "agent",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
@@ -39,21 +39,28 @@
     },
     {
       "path": ".claude/agents/developer.md",
-      "sha256": "55790014320187e500f6b904756bbc8bda4806274805e883d62492bf75a34f12",
+      "sha256": "36f75fe9f8dc8412eb22706dfd021f5db5694c81d73e0c938e701a83c0149126",
+      "tier": "agent",
+      "overwrite_policy": "always",
+      "preserve_on_uninstall": false
+    },
+    {
+      "path": ".claude/agents/devops.md",
+      "sha256": "65e84275b7a6480be2144250cc00573e8c26840abed98768ce4c168d594c7f8e",
       "tier": "agent",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
     },
     {
       "path": ".claude/agents/qa.md",
-      "sha256": "b6ac9d814e1bbd1fb9a062ce7775e34da1d1e5e6fc35140b977f30b2632654fa",
+      "sha256": "c6fab6b64acc717a6bb5618531e6568010b3aeb10a98e33ba10b8dde45f5becb",
       "tier": "agent",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
     },
     {
       "path": ".claude/agents/reporter.md",
-      "sha256": "d8e11e0a5eeb7bf298df2e79ce0f6b8b4d87e3a2d6666f458ae143ef8e593ea1",
+      "sha256": "36558f7f90e2e52192df88f243631735a880b7d371e6df17025933151a825c56",
       "tier": "agent",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
@@ -67,7 +74,7 @@
     },
     {
       "path": ".claude/hooks/pre-commit-surface-gate.sh",
-      "sha256": "a58f3b3c3dbb615a14bf6e2355f5122e80a5cb1e8ef9442648324f3124723ee3",
+      "sha256": "6741422cd8ca75b45e26bd0e9cb54126ad9e933f763c9094ceba6b84794b761a",
       "tier": "hook",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
@@ -109,14 +116,14 @@
     },
     {
       "path": ".claude/hooks/stamp-and-gate.sh",
-      "sha256": "3488dfea2874e8069453a2fdf40164d2c3fefe9ad7e2453190501391707aee7b",
+      "sha256": "2c654dc3a6707d394f782f68d7318410d4acbbcb70c0a9d0d674d966241fc310",
       "tier": "hook",
       "overwrite_policy": "pin-aware",
       "preserve_on_uninstall": false
     },
     {
       "path": ".claude/hooks/token-ledger.sh",
-      "sha256": "b766f18e005dea89d63c2dae9c436e3e52ef0e4828ea895ce94abfecc68f0ce2",
+      "sha256": "6678f814520c379b3ab055f3a1b98c92f631fd415ae24752d45aa8bee058c29c",
       "tier": "hook",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
@@ -137,7 +144,7 @@
     },
     {
       "path": ".claude/skills/sprint-execution/SKILL.md",
-      "sha256": "f403bb55f4cdce4b82ce3fdd59b03dd55d8f3f64bdc0e1d1c2abf9b2121efa3d",
+      "sha256": "877fabf8fcc682d9ba55421e6ba8c2a4ccf2b84a83d66e77dedc418b5aa47a3a",
       "tier": "skill",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
@@ -163,9 +170,16 @@
       "overwrite_policy": "merge-3way",
       "preserve_on_uninstall": false
     },
+    {
+      "path": ".cleargate/knowledge/mid-sprint-triage-rubric.md",
+      "sha256": "170f762b427074a84c183a91fb65d1d6408650b7746de3bbc460d21194bda30a",
+      "tier": "protocol",
+      "overwrite_policy": "merge-3way",
+      "preserve_on_uninstall": false
+    },
     {
       "path": ".cleargate/knowledge/readiness-gates.md",
-      "sha256": "6125b57bfdcdd5d4fabe886770d9b062d76df9a232f4997dbedf3322aefdf1b5",
+      "sha256": "10cb46cdaf264f8aa7c3841d12101bfad422a45f36c758be5327b0e4009a46a0",
       "tier": "protocol",
       "overwrite_policy": "merge-3way",
       "preserve_on_uninstall": false
@@ -186,7 +200,7 @@
     },
     {
       "path": ".cleargate/scripts/close_sprint.mjs",
-      "sha256": "d02be1cb8e0290782197a8b775c52b8f3064aaf661f5466c218dadb62179690a",
+      "sha256": "1807e5b27f1501476c9dec41cbb350c432d2894cb0727d8da0c860ad3f9181c7",
       "tier": "script",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
@@ -214,7 +228,7 @@
     },
     {
       "path": ".cleargate/scripts/gate-checks.json",
-      "sha256": "188ef9995ce14e609ecf042563bab44d461df5315a4fd698e3eebfaf84db3b6a",
+      "sha256": "9c520e63ac582289b6905a1c5704326590923eeef90d1e02801d1a57b4262877",
       "tier": "script",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
@@ -228,7 +242,7 @@
     },
     {
       "path": ".cleargate/scripts/init_sprint.mjs",
-      "sha256": "1d0f41df4325ea32981256aec15ed43eef09aba2a16ab4ba6d310cd61685556e",
+      "sha256": "80d532754b0b27bb274aca4e30a0e9a208f2528d079c24d4e319de2e429cd268",
       "tier": "script",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
@@ -277,7 +291,7 @@
     },
     {
       "path": ".cleargate/scripts/run_script.sh",
-      "sha256": "63ff100bb56361b06825d20dc601975e6df32bb688fe112b0d705dc45129ca20",
+      "sha256": "f2bd931d3b7bb4d30f5da9c116714345480163e9afb4c244c1a1c074410c15d0",
       "tier": "script",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
@@ -298,7 +312,7 @@
     },
     {
       "path": ".cleargate/scripts/suggest_improvements.mjs",
-      "sha256": "7d5853bf477447ae9090485648c3ba9426419504c6d36626c32454bf578c74a6",
+      "sha256": "62e71e7bf43abb6f015290f6ff3e06f15fb097682ddb95dbdf9532922d27925a",
       "tier": "script",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
@@ -333,7 +347,7 @@
     },
     {
       "path": ".cleargate/scripts/test/test_flashcard_gate.sh",
-      "sha256": "0e05a7fbaa86aeb9401e7df09696b9c547896512c41aa738a7c812d69d135916",
+      "sha256": "40fb023b0db1556295b92858b303ba90745ef89c3131bc760232e5cd8ebe7815",
       "tier": "script",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
@@ -368,49 +382,49 @@
     },
     {
       "path": ".cleargate/scripts/validate_state.mjs",
-      "sha256": "a1ad7e5f0525d3302759f9a04514e7205141c124abeb42fcda1f9d6042eca926",
+      "sha256": "ee3e8c0aeadb9a4e182d2a061cd992b6751e5bf067e0729b88da58582c67dbf1",
       "tier": "script",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
     },
     {
       "path": ".cleargate/scripts/write_dispatch.sh",
-      "sha256": "4af4035555f4c6852ffd8f4635734931cfa2baef706f27f001bf0b2c64f7a0be",
+      "sha256": "abdcaf09b09251f3ab42cb7ec8bdedc5806fd0eb337578f55043bffb158d8128",
       "tier": "script",
       "overwrite_policy": "always",
       "preserve_on_uninstall": false
     },
     {
       "path": ".cleargate/templates/Bug.md",
-      "sha256": "d58c3d5d19387e7749c62570931a829fd1fc31bda83b6edba2b0854dafd6936d",
+      "sha256": "570112e3a60856c891652837307fc6f296cc39acc20451f8bde62da0fe033026",
       "tier": "template",
       "overwrite_policy": "merge-3way",
       "preserve_on_uninstall": false
     },
     {
       "path": ".cleargate/templates/CR.md",
-      "sha256": "434ac96bfd9aa8732a89d18ceb546101737b2b6fdc1b3858b5ea0153837bc6ee",
+      "sha256": "ab111792dc79fd5181b44a63c76ac696fa4e456161ac44e2c4d0dc609e8dd904",
       "tier": "template",
       "overwrite_policy": "merge-3way",
       "preserve_on_uninstall": false
     },
     {
       "path": ".cleargate/templates/epic.md",
-      "sha256": "bbb250b5ca905ed6f48b55b0c982296899d04a492f9427195960cee3e3632594",
+      "sha256": "fd3b54de89befe7c5bcef65e2fa5550fc7f371d55c8f15143ae73d84f3ae6d36",
       "tier": "template",
       "overwrite_policy": "merge-3way",
       "preserve_on_uninstall": false
     },
     {
       "path": ".cleargate/templates/hotfix.md",
-      "sha256": "2d4fe14f12dbdae75cd8298bc547f39da89ecc9aaf917d32b3298a9b4936aaa2",
+      "sha256": "b75dd154c156e68a44ae01b85eff7ec16f54050e4fe7eb71f59e17d87c03a298",
       "tier": "template",
       "overwrite_policy": "merge-3way",
       "preserve_on_uninstall": false
     },
     {
       "path": ".cleargate/templates/initiative.md",
-      "sha256": "08730306824f184a7d972346640493f100a5d1b44f0efe0ed855e1acedfd65d6",
+      "sha256": "28680917228e5d9887c8820193cc21bfecc6aad3bc0658e8a59087adf63551fd",
       "tier": "template",
       "overwrite_policy": "merge-3way",
       "preserve_on_uninstall": false
@@ -424,7 +438,7 @@
     },
     {
       "path": ".cleargate/templates/sprint_context.md",
-      "sha256": "56c8c401b56d4c654dc41a19bd524f1b8860a8006cc3cd90e784d101c3d7721a",
+      "sha256": "82a95b8e5e9a5842a9dcad68bc3ed7405819a616d13d616cdb80083c32cc1fc3",
       "tier": "template",
       "overwrite_policy": "merge-3way",
       "preserve_on_uninstall": false
@@ -438,7 +452,7 @@
     },
     {
       "path": ".cleargate/templates/story.md",
-      "sha256": "a1413c4af5d854163741e92575fb913b93bdac1c1b7cfc59be8c3e0c8780eac0",
+      "sha256": "56d793983614d832e84193d99ee5318c061d2f3ea4f019cefb861c026513cb31",
       "tier": "template",
       "overwrite_policy": "merge-3way",
       "preserve_on_uninstall": false