create-quiver 0.15.3 → 0.16.0

package/specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-05-evidence-robustness-path-safety/pr.md

@@ -0,0 +1,146 @@
+# PR - QUIVER-51-05 - Evidence robustness and path safety
+
+## Title
+
+QUIVER-51-05 evidence robustness and path safety
+
+## Summary
+
+Hardens `evidence run/list/show` for production failure modes without changing the existing evidence Markdown contract. The slice preserves child exit codes, writes evidence on failures, records signal metadata, enforces safe project-local output/read paths, keeps redaction/truncation behavior, and documents JSON list/show usage.
+
+## PR Policy
+
+- [x] One slice only.
+- [ ] Grouped PR exception: at most 2-3 slices, all docs-only, research-only, or low-risk mechanical cleanup.
+- [x] No behavior changes in a grouped PR.
+- [x] No mixed docs with UI, backend, refactor, or performance work.
+- [x] Separate evidence for this slice is recorded in `EVIDENCE_REPORT.md`.
+- [x] Whole PR is revertible without leaving partial state.
+
+Individual PR required classification: functional CLI behavior, tests, docs, and audit matrix coverage.
+
+### Merge Policy
+
+- [x] Human merge expected.
+- [ ] Assisted auto-merge explicitly authorized for this PR or documented category.
+- [ ] Assisted auto-merge conditions met: docs-only or chore-only, low risk, no runtime changes, no production configuration changes, green checks, and no pending comments.
+
+Assisted auto-merge is not requested.
+
+## Scope
+
+- Preserve `evidence run` child exit-code behavior for successful and failing commands.
+- Keep writing evidence when the wrapped command exits with a non-zero status.
+- Record signal termination metadata and return standard `128 + signal` exit codes for signaled processes.
+- Add safe `evidence list` and `evidence show` helpers with parseable `--json` output.
+- Reject output/read path traversal and symlink escapes before execution or reads.
+- Preserve redaction and truncation.
+- Update CLI help, command docs, and i18n audit matrix coverage.
+
+## Files
+
+- `src/create-quiver/commands/evidence.js`
+- `src/create-quiver/lib/evidence.js`
+- `src/create-quiver/index.js`
+- `src/create-quiver/lib/i18n/messages/en.js`
+- `src/create-quiver/lib/i18n/messages/es.js`
+- `tests/commands/cli-contract.test.js`
+- `tests/commands/evidence.test.js`
+- `tests/lib/evidence.test.js`
+- `docs/reference/commands.md`
+- `docs/COMMANDS.md.template`
+- `specs/quiver-v43-cli-i18n-audit-release-readiness/command-language-mode-matrix.json`
+- `specs/quiver-v51-cli-ergonomics-automation-contracts/STATUS.md`
+- `specs/quiver-v51-cli-ergonomics-automation-contracts/EVIDENCE_REPORT.md`
+- `specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-05-evidence-robustness-path-safety/slice.json`
+- `specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-05-evidence-robustness-path-safety/CLOSURE_BRIEF.md`
+- `specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-05-evidence-robustness-path-safety/pr.md`
+
+## How to Test (DETAILED - REQUIRED)
+
+### Required Environment
+
+- Node.js supported by the repo.
+- npm.
+- Git.
+
+### Worktree Access
+
+```bash
+cd /Users/fabrijk/Documents/Work/Proyectos\ Personales/nika/frameworks/quiver
+git switch feature/QUIVER-51-05-v51-evidence-robustness
+```
+
+### Run the Project
+
+No runtime server is required. This is CLI behavior, tests, docs, and spec evidence.
+
+### Use Cases
+
+#### Case 1: failing command still writes evidence
+
+1. Run `node bin/create-quiver.js evidence run --output .quiver/evidence/failure.md -- node -e "console.error('failing command'); process.exit(7)"`.
+2. Inspect `.quiver/evidence/failure.md`.
+
+**Expected result:** CLI exits with code `7`; evidence file exists and contains `Exit code: 7` plus captured stderr.
+
+#### Case 2: JSON list/show contract
+
+1. Run `node bin/create-quiver.js evidence run -- node -e "console.log('json evidence')"`.
+2. Run `node bin/create-quiver.js evidence list --json`.
+3. Run `node bin/create-quiver.js evidence show <path-from-list> --json`.
+4. Parse both JSON outputs.
+
+**Expected result:** both commands emit parseable JSON; `show` includes the evidence content and parsed metadata.
+
+#### Case 3: unsafe output path is rejected before command execution
+
+1. Run `node bin/create-quiver.js evidence run --output ../escape.md -- node -e "require('fs').writeFileSync('marker.txt','ran')"`.
+2. Inspect the project root and parent directory.
+
+**Expected result:** CLI exits with an error before running the child command; no `marker.txt` or escaped evidence file is created.
+
+#### Case 4: signal metadata
+
+**Prerequisite:** signal behavior is covered by unit tests with a mocked `spawnSync` result.
+
+1. Run `node --test tests/lib/evidence.test.js`.
+2. Inspect the `runEvidenceCommand records signal metadata and signal exit code` test.
+
+**Expected result:** signaled process records `Signal: SIGTERM` and returns exit code `143`.
+
+### Technical Verification
+
+```bash
+node --test tests/commands/evidence.test.js
+node --test tests/lib/evidence.test.js
+node --test tests/commands/evidence.test.js tests/lib/evidence.test.js tests/lib/i18n-catalog.test.js tests/commands/cli-contract.test.js
+node --test tests/commands/i18n-audit-matrix.test.js tests/commands/evidence.test.js tests/lib/evidence.test.js tests/lib/i18n-catalog.test.js tests/commands/cli-contract.test.js
+node --test
+npm run docs:check
+git diff --check
+node bin/create-quiver.js spec validate specs/quiver-v51-cli-ergonomics-automation-contracts
+node bin/create-quiver.js check-slice specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-05-evidence-robustness-path-safety/slice.json --local --gate validation
+node bin/create-quiver.js check-scope specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-05-evidence-robustness-path-safety/slice.json --base main --strict
+node bin/create-quiver.js check-pr specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-05-evidence-robustness-path-safety/slice.json --base main
+```
+
+## Evidence
+
+- `node --test tests/commands/evidence.test.js tests/lib/evidence.test.js tests/lib/i18n-catalog.test.js tests/commands/cli-contract.test.js`: passed, 38 tests.
+- `node --test tests/commands/i18n-audit-matrix.test.js tests/commands/evidence.test.js tests/lib/evidence.test.js tests/lib/i18n-catalog.test.js tests/commands/cli-contract.test.js`: passed, 40 tests.
+- `node --test`: passed, 638 tests.
+- `npm run docs:check`: passed.
+- `git diff --check`: passed.
+
+## Rollback
+
+1. Revert this slice commit with `git revert <commit-sha>`.
+2. Run the technical verification commands above.
+3. Confirm `evidence run` returns to the previous baseline behavior and `evidence list/show` docs/help changes are removed.
+
+## Risks / Notes
+
+- Path checks intentionally reject traversal and symlink escapes for explicit output/read paths.
+- `evidence run` still uses synchronous direct child execution with `shell: false`; this avoids introducing shell-created child processes.
+- Redaction remains best effort; users should avoid commands that deliberately print secrets.

package/specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-05-evidence-robustness-path-safety/slice.json

@@ -0,0 +1,100 @@
+{
+  "slice_id": "slice-05-evidence-robustness-path-safety",
+  "ticket": "QUIVER-51-05",
+  "type": "feature",
+  "title": "Evidence robustness and path safety",
+  "objective": "Make evidence run/list/show robust for failures, signals, output limits, redaction, JSON, and safe paths.",
+  "description": "Hardens evidence commands while preserving existing output and exit-code contracts.",
+  "git": {
+    "branch_type": "feature",
+    "base_branch": "main",
+    "branch_slug": "v51-evidence-robustness",
+    "branch_name": "feature/QUIVER-51-05-v51-evidence-robustness"
+  },
+  "files": [
+    "src/create-quiver/commands/evidence.js",
+    "src/create-quiver/lib/evidence.js",
+    "src/create-quiver/index.js",
+    "src/create-quiver/lib/i18n/messages/en.js",
+    "src/create-quiver/lib/i18n/messages/es.js",
+    "tests/commands/cli-contract.test.js",
+    "tests/commands/evidence.test.js",
+    "tests/lib/evidence.test.js",
+    "docs/COMMANDS.md.template",
+    "docs/reference/commands.md",
+    "specs/quiver-v43-cli-i18n-audit-release-readiness/command-language-mode-matrix.json",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/**"
+  ],
+  "expected_read_paths": [
+    "src/create-quiver/commands/evidence.js",
+    "src/create-quiver/lib/evidence.js",
+    "src/create-quiver/index.js",
+    "src/create-quiver/lib/i18n/messages/en.js",
+    "src/create-quiver/lib/i18n/messages/es.js",
+    "tests/commands/cli-contract.test.js",
+    "tests/commands/evidence.test.js",
+    "tests/lib/evidence.test.js",
+    "docs/reference/commands.md",
+    "docs/COMMANDS.md.template",
+    "specs/quiver-v43-cli-i18n-audit-release-readiness/command-language-mode-matrix.json"
+  ],
+  "allowed_write_paths": [
+    "src/create-quiver/commands/evidence.js",
+    "src/create-quiver/lib/evidence.js",
+    "src/create-quiver/index.js",
+    "src/create-quiver/lib/i18n/messages/en.js",
+    "src/create-quiver/lib/i18n/messages/es.js",
+    "tests/commands/cli-contract.test.js",
+    "tests/commands/evidence.test.js",
+    "tests/lib/evidence.test.js",
+    "docs/COMMANDS.md.template",
+    "docs/reference/commands.md",
+    "specs/quiver-v43-cli-i18n-audit-release-readiness/command-language-mode-matrix.json",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/STATUS.md",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/EVIDENCE_REPORT.md",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-05-evidence-robustness-path-safety/CLOSURE_BRIEF.md",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-05-evidence-robustness-path-safety/slice.json",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-05-evidence-robustness-path-safety/pr.md"
+  ],
+  "depends_on": [
+    "slice-00-cli-contract-baseline"
+  ],
+  "parallel_safe": "no",
+  "parallel_safe_reason": "Evidence run async/signal/path behavior is sensitive and should be isolated.",
+  "must": [
+    "Preserve child exit code behavior.",
+    "Document and test signal behavior.",
+    "Keep evidence writing on command failure.",
+    "Preserve redaction and truncation.",
+    "Define and enforce safe output/read path policy."
+  ],
+  "not_included": [
+    "Changing evidence storage format unless compatible and documented.",
+    "Dashboard integration."
+  ],
+  "acceptance": [
+    "Failing commands preserve exit codes and write evidence.",
+    "Signals do not leave orphan child processes.",
+    "Path traversal and symlink escape are covered.",
+    "JSON list/show remain parseable.",
+    "Secrets stay redacted."
+  ],
+  "tests": [
+    "node --test tests/commands/evidence.test.js",
+    "node --test tests/lib/evidence.test.js",
+    "node --test tests/commands/i18n-audit-matrix.test.js",
+    "node --test tests/commands/cli-contract.test.js",
+    "npm run docs:check",
+    "node --test",
+    "git diff --check"
+  ],
+  "validation_hints": [
+    "If replacing spawnSync with spawn, preserve existing CLI exit-code behavior."
+  ],
+  "estimated_hours": 8,
+  "status": "completed",
+  "blocked_reason": null,
+  "actual_hours": 4,
+  "started_at": "2026-06-02T17:05:00-0300",
+  "completed_at": "2026-06-02T17:24:19-0300"
+}

package/specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/CLOSURE_BRIEF.md

@@ -0,0 +1,36 @@
+# CLOSURE_BRIEF - slice-06 namespace compatibility and Windows npm scripts
+
+## Summary
+
+Implemented namespace compatibility and portable script hardening for the final v51 slice.
+
+- Added canonical `slice` and `handoff` namespace parsing in the CLI while reusing existing command handlers.
+- Preserved legacy top-level aliases with deprecation guidance on stderr only.
+- Kept machine-readable JSON stdout clean by suppressing legacy warnings for `--json`.
+- Added PowerShell-safe root `quiver:*` package scripts and updated generated project scripts to canonical namespaces.
+- Added Windows CI smoke coverage for canonical namespace commands and portable npm script usage.
+- Updated README, contributing guidance, command reference, generated command template, i18n audit matrix, and Spanish help descriptions.
+
+## Validation
+
+- [x] `node --test tests/commands/slice-namespace.test.js tests/commands/handoff-namespace.test.js tests/commands/parser-contract.test.js tests/commands/cli-contract.test.js tests/lib/init-layout.test.js tests/commands/i18n-audit-matrix.test.js tests/lib/i18n-catalog.test.js`
+- [x] `npm ci`
+- [x] `node bin/create-quiver.js slice check --local specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-00-cli-contract-baseline/slice.json`
+- [x] `node bin/create-quiver.js handoff check specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/EXECUTION_BRIEF.md`
+- [x] `npm run quiver:check-handoff -- specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/EXECUTION_BRIEF.md`
+- [x] `npm run docs:check`
+- [x] `git diff --check`
+- [x] `node --test`
+
+## Closure Conditions
+
+- [x] Canonical and legacy commands remain compatible.
+- [x] Warnings remain stderr-only.
+- [x] JSON stdout stays clean for automation.
+- [x] Windows PowerShell path is covered by CI smoke configuration.
+- [x] Portable package scripts are available without removing Bash legacy scripts.
+- [x] Lockfile synchronization checked; no package-lock update was required.
+
+## Open Items
+
+- Local Windows shell execution was not run on this macOS workspace; CI now performs the Windows PowerShell smoke.

package/specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/EXECUTION_BRIEF.md

@@ -0,0 +1,76 @@
+# EXECUTION_BRIEF - slice-06 namespace compatibility and Windows npm scripts
+
+## Context
+
+Canonical `slice` and `handoff` namespaces exist. This slice protects compatibility and provides a portable path for Windows users.
+
+## Objective
+
+Preserve canonical/legacy namespace compatibility and make recommended npm scripts portable.
+
+## Scope
+
+- Slice/handoff namespace parity.
+- Legacy alias warnings.
+- JSON stdout cleanliness.
+- Package scripts and docs.
+- Windows `pwsh` validation.
+
+## Acceptance Criteria
+
+- Canonical commands and aliases remain behaviorally equivalent.
+- Legacy warnings go only to stderr and are suppressed for JSON where required.
+- Recommended npm/CLI paths work under Windows PowerShell.
+- Bash-only scripts are replaced, wrapped, or clearly documented as legacy.
+- Lockfile is synchronized if package metadata changes.
+
+## Expected Files To Modify
+
+- `package.json`
+- `package-lock.json`
+- `src/create-quiver/index.js`
+- `src/create-quiver/commands/slice.js`
+- `src/create-quiver/commands/handoff.js`
+- `tests/commands/slice-namespace.test.js`
+- `tests/commands/handoff-namespace.test.js`
+- `tests/commands/parser-contract.test.js`
+- `.github/workflows/ci.yml`
+- `README.md`
+- `CONTRIBUTING.md`
+- `specs/quiver-v51-cli-ergonomics-automation-contracts/EVIDENCE_REPORT.md`
+
+## Validations Required
+
+- `node --test tests/commands/slice-namespace.test.js`
+- `node --test tests/commands/handoff-namespace.test.js`
+- `node --test tests/commands/parser-contract.test.js`
+- `npm ci`
+- `node --test`
+- `git diff --check`
+
+## Risks
+
+- Breaking legacy users.
+- Marking Bash scripts portable when they are not.
+- Lockfile drift.
+
+## Dependencies
+
+- Depends on `slice-00-cli-contract-baseline`.
+
+## Instructions For Executor
+
+1. Treat current namespace behavior as compatibility contract.
+2. Validate stdout/stderr behavior.
+3. Provide a Windows PowerShell-supported command path.
+4. Do not remove aliases.
+
+## Completion Checklist
+
+- [ ] Acceptance criteria satisfied.
+- [ ] Required validations run or blockers documented.
+- [ ] Closure brief updated.
+
+## Conditions Of Closure
+
+- Namespace compatibility is protected and Windows users have a supported path.

package/specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/pr.md

@@ -0,0 +1,155 @@
+# PR - QUIVER-51-06 - Namespace compatibility and Windows npm scripts
+
+## Title
+
+QUIVER-51-06 namespace compatibility and Windows npm scripts
+
+## Summary
+
+Adds canonical `slice` and `handoff` CLI namespaces while preserving legacy aliases, protects JSON stdout from deprecation warnings, and makes recommended package scripts portable for PowerShell users. Existing Bash scripts remain available as legacy compatibility paths.
+
+## PR Policy
+
+- [x] One slice only.
+- [ ] Grouped PR exception: at most 2-3 slices, all docs-only, research-only, or low-risk mechanical cleanup.
+- [x] No behavior changes in a grouped PR.
+- [x] No mixed docs with UI, backend, refactor, or performance work.
+- [x] Separate evidence for this slice is recorded in `EVIDENCE_REPORT.md`.
+- [x] Whole PR is revertible without leaving partial state.
+
+Individual PR required classification: functional CLI behavior, package scripts, tests, docs, audit matrix, and CI smoke coverage.
+
+### Merge Policy
+
+- [x] Human merge expected.
+- [ ] Assisted auto-merge explicitly authorized for this PR or documented category.
+- [ ] Assisted auto-merge conditions met: docs-only or chore-only, low risk, no runtime changes, no production configuration changes, green checks, and no pending comments.
+
+Assisted auto-merge is not requested.
+
+## Scope
+
+- Add canonical `slice start|check|pr|scope|cleanup|refresh-active` parser support.
+- Add canonical `handoff check|new` parser support.
+- Preserve legacy top-level aliases including `start-slice`, `check-slice`, `check-pr`, `check-scope`, `cleanup-slice`, `refresh-active-slices`, `check-handoff`, and `new-handoff`.
+- Emit legacy alias guidance to stderr only, and suppress it for `--json`.
+- Add portable root `quiver:*` npm scripts that use the Node CLI entrypoint.
+- Keep existing Bash scripts as legacy compatibility scripts.
+- Update generated project package scripts to use canonical namespaces.
+- Update Windows CI smoke coverage for canonical namespaces and portable package scripts.
+- Update command docs, onboarding docs, generated command template, Spanish help descriptions, and i18n audit matrix coverage.
+
+## Files
+
+- `.github/workflows/ci.yml`
+- `CONTRIBUTING.md`
+- `README.md`
+- `docs/COMMANDS.md.template`
+- `docs/reference/commands.md`
+- `package.json`
+- `src/create-quiver/index.js`
+- `src/create-quiver/lib/i18n/messages/es.js`
+- `src/create-quiver/lib/init-layout.js`
+- `tests/commands/cli-contract.test.js`
+- `tests/commands/handoff-namespace.test.js`
+- `tests/commands/parser-contract.test.js`
+- `tests/commands/slice-namespace.test.js`
+- `tests/lib/init-layout.test.js`
+- `specs/quiver-v43-cli-i18n-audit-release-readiness/command-language-mode-matrix.json`
+- `specs/quiver-v51-cli-ergonomics-automation-contracts/STATUS.md`
+- `specs/quiver-v51-cli-ergonomics-automation-contracts/EVIDENCE_REPORT.md`
+- `specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/slice.json`
+- `specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/CLOSURE_BRIEF.md`
+- `specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/pr.md`
+
+## How to Test (DETAILED - REQUIRED)
+
+### Required Environment
+
+- Node.js supported by the repo.
+- npm.
+- Git.
+
+### Worktree Access
+
+```bash
+cd /Users/fabrijk/Documents/Work/Proyectos\ Personales/nika/frameworks/quiver
+git switch feature/QUIVER-51-06-v51-namespace-windows-scripts
+```
+
+### Run the Project
+
+No runtime server is required. This is CLI behavior, package script, docs, CI configuration, and spec evidence.
+
+### Use Cases
+
+#### Case 1: canonical slice namespace
+
+1. Run `node bin/create-quiver.js slice check --local specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-00-cli-contract-baseline/slice.json`.
+2. Inspect stdout and stderr.
+
+**Expected result:** command succeeds with the same behavior as the legacy `check-slice` command and no legacy warning appears.
+
+#### Case 2: legacy alias warning stays automation-safe
+
+1. Run `node bin/create-quiver.js check-slice --local specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-00-cli-contract-baseline/slice.json`.
+2. Run `node bin/create-quiver.js check-slice --json --local specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-00-cli-contract-baseline/slice.json`.
+3. Parse JSON stdout from the second command.
+
+**Expected result:** legacy human command emits deprecation guidance on stderr only; JSON stdout remains parseable and does not include the warning.
+
+#### Case 3: canonical handoff namespace and portable npm script
+
+1. Run `node bin/create-quiver.js handoff check specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/EXECUTION_BRIEF.md`.
+2. Run `npm run quiver:check-handoff -- specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/EXECUTION_BRIEF.md`.
+
+**Expected result:** both commands succeed using the canonical handoff path without requiring Bash.
+
+#### Case 4: unsupported namespace subcommand fails before execution
+
+1. Run `node bin/create-quiver.js slice unknown specs/example/slice.json`.
+2. Run `node bin/create-quiver.js handoff unknown specs/example/EXECUTION_BRIEF.md`.
+
+**Expected result:** both commands fail with parser-level unsupported subcommand errors before command execution.
+
+### Technical Verification
+
+```bash
+node --test tests/commands/slice-namespace.test.js
+node --test tests/commands/handoff-namespace.test.js
+node --test tests/commands/parser-contract.test.js
+node --test tests/commands/slice-namespace.test.js tests/commands/handoff-namespace.test.js tests/commands/parser-contract.test.js tests/commands/cli-contract.test.js tests/lib/init-layout.test.js tests/commands/i18n-audit-matrix.test.js tests/lib/i18n-catalog.test.js
+npm ci
+node bin/create-quiver.js slice check --local specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-00-cli-contract-baseline/slice.json
+node bin/create-quiver.js handoff check specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/EXECUTION_BRIEF.md
+npm run quiver:check-handoff -- specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/EXECUTION_BRIEF.md
+node --test
+npm run docs:check
+git diff --check
+node bin/create-quiver.js spec validate specs/quiver-v51-cli-ergonomics-automation-contracts
+node bin/create-quiver.js check-slice specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/slice.json --local --gate validation
+node bin/create-quiver.js check-scope specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/slice.json --base main --strict
+node bin/create-quiver.js check-pr specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/slice.json --base main
+```
+
+## Evidence
+
+- `node --test tests/commands/slice-namespace.test.js tests/commands/handoff-namespace.test.js tests/commands/parser-contract.test.js tests/commands/cli-contract.test.js tests/lib/init-layout.test.js tests/commands/i18n-audit-matrix.test.js tests/lib/i18n-catalog.test.js`: passed, 40 tests.
+- `npm ci`: passed; no package-lock update required.
+- `node bin/create-quiver.js slice check --local specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-00-cli-contract-baseline/slice.json && node bin/create-quiver.js handoff check specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/EXECUTION_BRIEF.md && npm run quiver:check-handoff -- specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/EXECUTION_BRIEF.md`: passed after dependency installation.
+- `npm run docs:check`: passed.
+- `git diff --check`: passed.
+- `node --test`: passed, 646 tests.
+
+## Rollback
+
+1. Revert this slice commit with `git revert <commit-sha>`.
+2. Run the technical verification commands above.
+3. Confirm legacy aliases still work and canonical namespace additions, portable script updates, docs, tests, and CI smoke changes are removed.
+
+## Risks / Notes
+
+- Legacy aliases intentionally remain available; this PR does not remove or hard-fail legacy command names.
+- Deprecation guidance is intentionally not printed for JSON mode to preserve machine-readable stdout.
+- Local Windows shell execution was not run on this macOS workspace; the Windows PowerShell smoke is configured in CI.
+- Existing Bash scripts are retained as legacy paths, while recommended `quiver:*` scripts use Node CLI entrypoints.

package/specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/slice.json

@@ -0,0 +1,111 @@
+{
+  "slice_id": "slice-06-namespace-compatibility-windows-scripts",
+  "ticket": "QUIVER-51-06",
+  "type": "quality",
+  "title": "Namespace compatibility and Windows npm scripts",
+  "objective": "Preserve canonical/legacy namespace compatibility and make recommended npm scripts portable.",
+  "description": "Protects slice/handoff aliases and replaces or documents Bash-only npm scripts so Windows PowerShell users have a supported path.",
+  "git": {
+    "branch_type": "feature",
+    "base_branch": "main",
+    "branch_slug": "v51-namespace-windows-scripts",
+    "branch_name": "feature/QUIVER-51-06-v51-namespace-windows-scripts"
+  },
+  "files": [
+    ".github/workflows/ci.yml",
+    "CONTRIBUTING.md",
+    "README.md",
+    "docs/COMMANDS.md.template",
+    "docs/reference/commands.md",
+    "package.json",
+    "src/create-quiver/index.js",
+    "src/create-quiver/lib/i18n/messages/es.js",
+    "src/create-quiver/lib/init-layout.js",
+    "tests/commands/cli-contract.test.js",
+    "tests/commands/handoff-namespace.test.js",
+    "tests/commands/parser-contract.test.js",
+    "tests/commands/slice-namespace.test.js",
+    "tests/lib/init-layout.test.js",
+    "specs/quiver-v43-cli-i18n-audit-release-readiness/command-language-mode-matrix.json",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/STATUS.md",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/EVIDENCE_REPORT.md",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/CLOSURE_BRIEF.md",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/slice.json",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/pr.md"
+  ],
+  "expected_read_paths": [
+    ".github/workflows/ci.yml",
+    "CONTRIBUTING.md",
+    "README.md",
+    "docs/COMMANDS.md.template",
+    "docs/reference/commands.md",
+    "package.json",
+    "src/create-quiver/index.js",
+    "src/create-quiver/lib/i18n/messages/es.js",
+    "src/create-quiver/lib/init-layout.js",
+    "tests/commands/cli-contract.test.js",
+    "tests/lib/init-layout.test.js",
+    "specs/quiver-v43-cli-i18n-audit-release-readiness/command-language-mode-matrix.json"
+  ],
+  "allowed_write_paths": [
+    ".github/workflows/ci.yml",
+    "CONTRIBUTING.md",
+    "README.md",
+    "docs/COMMANDS.md.template",
+    "docs/reference/commands.md",
+    "package.json",
+    "src/create-quiver/index.js",
+    "src/create-quiver/lib/i18n/messages/es.js",
+    "src/create-quiver/lib/init-layout.js",
+    "tests/commands/cli-contract.test.js",
+    "tests/commands/handoff-namespace.test.js",
+    "tests/commands/parser-contract.test.js",
+    "tests/commands/slice-namespace.test.js",
+    "tests/lib/init-layout.test.js",
+    "specs/quiver-v43-cli-i18n-audit-release-readiness/command-language-mode-matrix.json",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/STATUS.md",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/EVIDENCE_REPORT.md",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/CLOSURE_BRIEF.md",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/slice.json",
+    "specs/quiver-v51-cli-ergonomics-automation-contracts/slices/slice-06-namespace-compatibility-windows-scripts/pr.md"
+  ],
+  "depends_on": [
+    "slice-00-cli-contract-baseline"
+  ],
+  "parallel_safe": "no",
+  "parallel_safe_reason": "Touches package scripts and compatibility aliases; should be isolated with CI evidence.",
+  "must": [
+    "Preserve slice and handoff canonical namespaces.",
+    "Preserve legacy aliases with stderr-only warnings.",
+    "Keep JSON stdout clean.",
+    "Replace, wrap, or document Bash-only scripts as legacy.",
+    "Validate recommended commands under Windows pwsh."
+  ],
+  "not_included": [
+    "Removing legacy aliases.",
+    "Removing Bash scripts without compatibility plan."
+  ],
+  "acceptance": [
+    "Canonical and legacy commands remain behaviorally equivalent.",
+    "Deprecation warnings are stderr-only and suppressed for JSON as required.",
+    "Recommended npm/CLI paths work in Windows pwsh.",
+    "package-lock.json is synchronized if package.json changes."
+  ],
+  "tests": [
+    "node --test tests/commands/slice-namespace.test.js",
+    "node --test tests/commands/handoff-namespace.test.js",
+    "node --test tests/commands/parser-contract.test.js",
+    "npm ci",
+    "node --test",
+    "git diff --check"
+  ],
+  "validation_hints": [
+    "Do not remove old Bash scripts unless the compatibility story is explicit."
+  ],
+  "estimated_hours": 6,
+  "status": "completed",
+  "blocked_reason": null,
+  "actual_hours": 5,
+  "started_at": "2026-06-02T21:35:00-0300",
+  "completed_at": "2026-06-02T22:26:31-0300"
+}