create-quiver 0.15.4 → 0.17.0

package/specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/pr.md

@@ -0,0 +1,144 @@
+# PR - QUIVER-52-02 - Generated CLI reference
+
+## Title
+
+QUIVER-52-02 Generated CLI reference
+
+## Summary
+
+Adds a protected generated CLI command reference block to `docs/reference/commands.md` and a no-dependency drift check that validates the generated content against CLI help metadata and runtime `--help` output. The check is wired into `npm run docs:check` so CI/release validation can fail on drift without rewriting docs.
+
+## PR Policy
+
+- [x] One slice only.
+- [ ] Grouped PR exception: at most 2-3 slices, all docs-only, research-only, or low-risk mechanical cleanup.
+- [x] No behavior changes in a grouped PR.
+- [x] No mixed docs with UI, backend, refactor, or performance work.
+- [x] Separate evidence for this slice is recorded in `EVIDENCE_REPORT.md`.
+- [x] Whole PR is revertible without leaving partial state.
+
+Individual PR required classification: docs generation tooling, docs drift check, tests affecting docs gate, and slice metadata.
+
+### Merge Policy
+
+- [x] Human merge expected.
+- [ ] Assisted auto-merge explicitly authorized for this PR or documented category.
+- [ ] Assisted auto-merge conditions met: docs-only or chore-only, low risk, no runtime changes, no production configuration changes, green checks, and no pending comments.
+
+Assisted auto-merge is not requested.
+
+## Scope
+
+- Add `scripts/ci/check-command-reference.js` with `--write` and `--check` modes.
+- Add a protected generated block to `docs/reference/commands.md`.
+- Preserve curated command documentation outside generated markers.
+- Add `docs:commands:write` and `docs:commands:check` npm scripts.
+- Wire `docs:commands:check` into `docs:check`.
+- Add tests for runtime help consistency, drift synchronization, and manual-content preservation.
+- Update v52 status, evidence, closure, slice metadata, and PR body.
+
+## Files
+
+- `docs/reference/commands.md`
+- `package.json`
+- `scripts/ci/check-command-reference.js`
+- `tests/docs/command-reference.test.js`
+- `specs/quiver-v52-schema-docs-release-hygiene/SPEC.md`
+- `specs/quiver-v52-schema-docs-release-hygiene/spec.md`
+- `specs/quiver-v52-schema-docs-release-hygiene/STATUS.md`
+- `specs/quiver-v52-schema-docs-release-hygiene/EVIDENCE_REPORT.md`
+- `specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/CLOSURE_BRIEF.md`
+- `specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/slice.json`
+- `specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/pr.md`
+
+## How to Test (DETAILED - REQUIRED)
+
+### Required Environment
+
+- Node.js supported by the repo.
+- npm.
+- Git.
+
+### Worktree Access
+
+```bash
+cd /Users/fabrijk/Documents/Work/Proyectos\ Personales/nika/frameworks/quiver
+git switch feature/QUIVER-52-02-v52-generated-cli-reference
+```
+
+### Run the Project
+
+No runtime server is required. This is docs generation tooling, docs drift validation, tests, and spec evidence.
+
+### Use Cases
+
+#### Case 1: regenerate command reference
+
+1. Run `npm run docs:commands:write`.
+2. Inspect `docs/reference/commands.md`.
+
+**Expected result:** only the generated block between `<!-- quiver:generated-cli-reference:start -->` and `<!-- quiver:generated-cli-reference:end -->` changes.
+
+#### Case 2: detect docs drift without rewriting
+
+1. Run `npm run docs:commands:check`.
+2. Inspect the command summary.
+
+**Expected result:** check mode exits successfully when the generated block is synchronized and exits non-zero with guidance to run `docs:commands:write` when stale or missing.
+
+#### Case 3: preserve curated docs
+
+1. Review content before and after the generated markers in `docs/reference/commands.md`.
+2. Run `node --test tests/docs/command-reference.test.js`.
+
+**Expected result:** manual content outside markers is preserved and the focused preservation test passes.
+
+#### Case 4: CI/docs gate includes drift check
+
+1. Run `npm run docs:check`.
+2. Inspect the final step.
+
+**Expected result:** markdown lint, link check, and generated CLI reference drift check all pass.
+
+### Technical Verification
+
+```bash
+npm ci
+npm run docs:commands:write
+npm run docs:commands:check
+node --test tests/docs/command-reference.test.js
+npm run docs:check
+node bin/create-quiver.js --help
+node --test
+git diff --check
+node bin/create-quiver.js spec validate specs/quiver-v52-schema-docs-release-hygiene
+node bin/create-quiver.js check-slice specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/slice.json --local --gate validation
+node bin/create-quiver.js check-scope specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/slice.json --base main --strict
+node bin/create-quiver.js check-pr specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/slice.json --base main
+```
+
+## Evidence
+
+- `npm run docs:commands:write`: passed; generated 7 groups and 59 commands.
+- `npm run docs:commands:check`: passed; generated block is synchronized.
+- `node --test tests/docs/command-reference.test.js`: passed, 3 tests.
+- `node bin/create-quiver.js --help`: passed.
+- `npm run docs:check`: passed, including generated CLI reference drift check.
+- `npm ci`: passed; 165 packages installed/audited, 0 vulnerabilities reported.
+- `node --test`: passed, 651 tests.
+- `git diff --check`: passed.
+- `node bin/create-quiver.js spec validate specs/quiver-v52-schema-docs-release-hygiene`: passed.
+- `node bin/create-quiver.js check-slice specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/slice.json --local --gate validation`: passed.
+
+## Rollback
+
+1. Revert this slice commit with `git revert <commit-sha>`.
+2. Run the technical verification commands above.
+3. Confirm `docs:commands:write`, `docs:commands:check`, the generated block, command reference script, and focused tests are removed.
+
+## Risks / Notes
+
+- The generator reads `COMMAND_HELP_GROUPS` from `src/create-quiver/index.js` because that is the current source used by runtime help.
+- The drift check also runs `node bin/create-quiver.js --lang en --help --no-color` to detect mismatch between metadata and runtime help.
+- The generated block is English because the runtime help metadata is English. Existing curated Spanish documentation remains outside the generated block.
+- No package dependency or lockfile update is required.

package/specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/slice.json

@@ -0,0 +1,86 @@
+{
+  "slice_id": "slice-02-generated-cli-reference",
+  "ticket": "QUIVER-52-02",
+  "type": "automation",
+  "title": "Generated CLI reference",
+  "objective": "Generate or drift-check CLI command reference without overwriting curated documentation.",
+  "description": "Adds a safe generation/drift-check path for docs/reference/commands.md based on runtime help or registry metadata.",
+  "git": {
+    "branch_type": "feature",
+    "base_branch": "main",
+    "branch_slug": "v52-generated-cli-reference",
+    "branch_name": "feature/QUIVER-52-02-v52-generated-cli-reference"
+  },
+  "files": [
+    "docs/reference/commands.md",
+    "scripts/ci/check-command-reference.js",
+    "package.json",
+    "tests/docs/command-reference.test.js",
+    "specs/quiver-v52-schema-docs-release-hygiene/SPEC.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/spec.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/STATUS.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/EVIDENCE_REPORT.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/CLOSURE_BRIEF.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/slice.json",
+    "specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/pr.md"
+  ],
+  "expected_read_paths": [
+    "src/create-quiver/index.js",
+    "src/create-quiver/lib/cli/command-registry.js",
+    "docs/reference/commands.md",
+    "tests/commands/cli-contract.test.js"
+  ],
+  "allowed_write_paths": [
+    "docs/reference/commands.md",
+    "scripts/ci/check-command-reference.js",
+    "package.json",
+    "tests/docs/command-reference.test.js",
+    "specs/quiver-v52-schema-docs-release-hygiene/SPEC.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/spec.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/STATUS.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/EVIDENCE_REPORT.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/CLOSURE_BRIEF.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/slice.json",
+    "specs/quiver-v52-schema-docs-release-hygiene/slices/slice-02-generated-cli-reference/pr.md"
+  ],
+  "depends_on": [
+    "slice-00-schema-docs-release-baseline"
+  ],
+  "parallel_safe": "yes",
+  "parallel_safe_reason": "Generated reference work can run independently after baseline.",
+  "must": [
+    "Protect curated manual docs content.",
+    "Generate only delimited blocks or a separate generated file.",
+    "Add drift check against runtime help or registry.",
+    "Document the local generation/check command."
+  ],
+  "not_included": [
+    "Replacing all docs with generated output.",
+    "Changing command help semantics."
+  ],
+  "acceptance": [
+    "Manual content outside generated blocks remains untouched.",
+    "Generated content matches runtime help/registry.",
+    "CI or release can detect drift.",
+    "Script command is documented."
+  ],
+  "tests": [
+    "npm ci",
+    "npm run docs:commands:write",
+    "npm run docs:commands:check",
+    "node --test tests/docs/command-reference.test.js",
+    "npm run docs:check",
+    "node --test",
+    "node bin/create-quiver.js --help",
+    "git diff --check"
+  ],
+  "validation_hints": [
+    "Prefer a --check mode so CI can fail on drift without rewriting files."
+  ],
+  "estimated_hours": 6,
+  "status": "completed",
+  "blocked_reason": null,
+  "actual_hours": 4,
+  "started_at": "2026-06-03T00:45:00-0300",
+  "completed_at": "2026-06-03T01:00:00-0300"
+}

package/specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/CLOSURE_BRIEF.md

@@ -0,0 +1,38 @@
+# CLOSURE_BRIEF - slice-03 changelog, package, and release smoke hygiene
+
+## Summary
+
+Formalized changelog and release/package hygiene while keeping publishing manually guarded.
+
+- Added `npm run changelog:check` and focused tests.
+- Updated `[Unreleased]` changelog entries for v52.
+- Hardened `.npmignore` and package smoke exclusions for local audit/tool/secret artifacts.
+- Extended package smoke to install the tarball and run installed CLI `--version`, `--help`, and `init --dry-run`.
+- Wired docs CI to `npm run docs:check`.
+- Added changelog/docs/schema gates to release dry-run.
+- Required `QUIVER_ALLOW_NPM_PUBLISH=1` for release publish flags.
+
+## Validation
+
+- [x] `npm run changelog:check`
+- [x] `node --test tests/ci/changelog.test.js`
+- [x] `bash -n scripts/package-quiver.sh scripts/release-quiver.sh`
+- [x] `shellcheck scripts/package-quiver.sh scripts/release-quiver.sh`
+- [x] `npm run package:quiver`
+- [x] installed tarball smoke
+- [x] `npm run release:quiver`
+- [x] `npm run docs:check`
+- [x] `npm ci`
+- [x] `node --test`
+- [x] `git diff --check`
+
+## Closure Conditions
+
+- [x] Changelog process documented.
+- [x] Package smoke validates required and forbidden files.
+- [x] Installed tarball smoke passes.
+- [x] Publish automation remains safely scoped.
+
+## Open Items
+
+- None.

package/specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/EXECUTION_BRIEF.md

@@ -0,0 +1,75 @@
+# EXECUTION_BRIEF - slice-03 changelog, package, and release smoke hygiene
+
+## Context
+
+Release confidence requires validating the actual npm tarball and installed CLI, not only local source. New schema/docs/scripts must be included or excluded deliberately.
+
+## Objective
+
+Formalize changelog handling and validate actual npm package installation behavior.
+
+## Scope
+
+- `[Unreleased]` changelog handling.
+- `.npmignore`.
+- Package safety.
+- Tarball contents.
+- Installed tarball smoke.
+- Release script dry-run gates.
+
+## Acceptance Criteria
+
+- Package smoke validates required public files.
+- Package smoke rejects forbidden local artifacts.
+- Tarball installs in a temporary project.
+- Installed CLI runs `--version`, `--help`, and one safe dry-run command.
+- Changelog process is documented.
+- npm publish automation remains out of scope unless prerequisites are explicit.
+
+## Expected Files To Modify
+
+- `CHANGELOG.md`
+- `.npmignore`
+- `scripts/package-quiver.sh`
+- `scripts/release-quiver.sh`
+- `scripts/ci/**`
+- `package.json`
+- `package-lock.json`
+- `.github/workflows/ci.yml`
+- `CONTRIBUTING.md`
+- `specs/quiver-v52-schema-docs-release-hygiene/EVIDENCE_REPORT.md`
+
+## Validations Required
+
+- `npm ci`
+- `node --test`
+- `npm run package:quiver`
+- installed tarball smoke
+- `git diff --check`
+
+## Risks
+
+- Publishing local audit artifacts or PDFs.
+- Excluding required public schema/docs.
+- Release script relying on local-only files.
+
+## Dependencies
+
+- Depends on `slice-01-json-schema-for-slice-json`.
+- Depends on `slice-02-generated-cli-reference`.
+
+## Instructions For Executor
+
+1. Update package checks after schema/docs decisions are known.
+2. Validate the installed tarball, not only source checkout.
+3. Keep publish steps manual unless prerequisites are explicitly present.
+
+## Completion Checklist
+
+- [ ] Acceptance criteria satisfied.
+- [ ] Required validations run or blockers documented.
+- [ ] Closure brief updated.
+
+## Conditions Of Closure
+
+- Release/package checks catch missing required files and forbidden local artifacts before publish.

package/specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/pr.md

@@ -0,0 +1,159 @@
+# PR - QUIVER-52-03 - Changelog, package, and release smoke hygiene
+
+## Title
+
+QUIVER-52-03 Changelog, package, and release smoke hygiene
+
+## Summary
+
+Formalizes changelog handling and hardens release/package validation. The package smoke now validates required public files, rejects local audit/tool/secret artifacts, installs the generated tarball, and verifies the installed CLI with `--version`, `--help`, and `init --dry-run`. Release dry-run gates now include changelog, docs, schema, installer, package, and installed CLI checks, while publish flags remain explicitly guarded.
+
+## PR Policy
+
+- [x] One slice only.
+- [ ] Grouped PR exception: at most 2-3 slices, all docs-only, research-only, or low-risk mechanical cleanup.
+- [x] No behavior changes in a grouped PR.
+- [x] No mixed docs with UI, backend, refactor, or performance work.
+- [x] Separate evidence for this slice is recorded in `EVIDENCE_REPORT.md`.
+- [x] Whole PR is revertible without leaving partial state.
+
+Individual PR required classification: release/package gates, CI docs gate, tests affecting validation gates, docs, and slice metadata.
+
+### Merge Policy
+
+- [x] Human merge expected.
+- [ ] Assisted auto-merge explicitly authorized for this PR or documented category.
+- [ ] Assisted auto-merge conditions met: docs-only or chore-only, low risk, no runtime changes, no production configuration changes, green checks, and no pending comments.
+
+Assisted auto-merge is not requested.
+
+## Scope
+
+- Add `npm run changelog:check`.
+- Add `scripts/ci/check-changelog.js` and focused tests.
+- Update `[Unreleased]` changelog entries.
+- Harden `.npmignore` for local audit, PDF, SSH/key, and local-noise artifacts.
+- Extend `npm run package:quiver` to validate required public files, forbidden local artifacts, installed tarball, installed `--version`, installed `--help`, and installed `init --dry-run`.
+- Wire CI docs job to `npm run docs:check`.
+- Add changelog/docs/schema gates to `scripts/release-quiver.sh`.
+- Require `QUIVER_ALLOW_NPM_PUBLISH=1` for release publish flags.
+- Document changelog/package/release expectations in `CONTRIBUTING.md` and release validation docs.
+- Update v52 status, evidence, closure, slice metadata, and PR body.
+
+## Files
+
+- `.github/workflows/ci.yml`
+- `.npmignore`
+- `CHANGELOG.md`
+- `CONTRIBUTING.md`
+- `README.md`
+- `package.json`
+- `scripts/ci/check-changelog.js`
+- `scripts/package-quiver.sh`
+- `scripts/release-quiver.sh`
+- `tests/ci/changelog.test.js`
+- `specs/quiver-v52-schema-docs-release-hygiene/SPEC.md`
+- `specs/quiver-v52-schema-docs-release-hygiene/STATUS.md`
+- `specs/quiver-v52-schema-docs-release-hygiene/EVIDENCE_REPORT.md`
+- `specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/CLOSURE_BRIEF.md`
+- `specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/slice.json`
+- `specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/pr.md`
+
+## How to Test (DETAILED - REQUIRED)
+
+### Required Environment
+
+- Node.js supported by the repo.
+- npm.
+- Git.
+- ShellCheck for local shell lint validation.
+
+### Worktree Access
+
+```bash
+cd /Users/fabrijk/Documents/Work/Proyectos\ Personales/nika/frameworks/quiver
+git switch feature/QUIVER-52-03-v52-release-package-hygiene
+```
+
+### Run the Project
+
+No runtime server is required. This is release/package automation, docs, CI gate, tests, and spec evidence.
+
+### Use Cases
+
+#### Case 1: validate changelog hygiene
+
+1. Run `npm run changelog:check`.
+2. Inspect the report.
+
+**Expected result:** the checker finds `CHANGELOG.md`, detects `[Unreleased]`, and reports categorized entries.
+
+#### Case 2: validate package boundary and installed CLI
+
+1. Run `npm run package:quiver`.
+2. Inspect the output.
+
+**Expected result:** the package smoke requires public files, rejects forbidden local artifacts, installs the tarball, and verifies installed `--version`, `--help`, and `init --dry-run`.
+
+#### Case 3: validate release dry-run gates
+
+1. Run `npm run release:quiver`.
+2. Inspect the gate sequence.
+
+**Expected result:** release dry-run requires a clean worktree, then runs changelog, docs, schema, installer smoke, package smoke, and installed CLI checks before printing publish guidance.
+
+#### Case 4: verify publish remains guarded
+
+1. Run `bash scripts/release-quiver.sh --help`.
+2. Review the publish text.
+
+**Expected result:** publish flags are documented as requiring `QUIVER_ALLOW_NPM_PUBLISH=1`; publish remains opt-in and human-authorized.
+
+### Technical Verification
+
+```bash
+npm ci
+npm run changelog:check
+node --test tests/ci/changelog.test.js
+bash -n scripts/package-quiver.sh scripts/release-quiver.sh
+shellcheck scripts/package-quiver.sh scripts/release-quiver.sh
+npm run docs:check
+npm run schema:slice:check
+npm run package:quiver
+npm run release:quiver
+node --test
+git diff --check
+node bin/create-quiver.js spec validate specs/quiver-v52-schema-docs-release-hygiene
+node bin/create-quiver.js check-slice specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/slice.json --local --gate validation
+node bin/create-quiver.js check-scope specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/slice.json --base main --strict
+node bin/create-quiver.js check-pr specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/slice.json --base main
+```
+
+## Evidence
+
+- `npm run changelog:check`: passed; 22 `[Unreleased]` entries detected.
+- `node --test tests/ci/changelog.test.js`: passed, 3 tests.
+- `bash -n scripts/package-quiver.sh scripts/release-quiver.sh`: passed.
+- `shellcheck scripts/package-quiver.sh scripts/release-quiver.sh`: passed.
+- `npm run package:quiver`: passed; generated `create-quiver-0.15.3.tgz` and installed CLI smoke passed.
+- `npm run docs:check`: passed, including generated CLI reference drift check.
+- `npm run schema:slice:check`: passed; 266 runtime-valid fixtures validated, 1 historical/non-runtime fixture skipped, 4 invalid fixtures rejected.
+- `npm ci`: passed; 165 packages installed/audited, 0 vulnerabilities reported.
+- `node --test`: passed, 654 tests.
+- `git diff --check`: passed.
+- `node bin/create-quiver.js spec validate specs/quiver-v52-schema-docs-release-hygiene`: passed.
+- `node bin/create-quiver.js check-slice specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/slice.json --local --gate validation`: passed.
+- `npm run release:quiver`: passed; changelog, docs, schema, installer smoke, package smoke, and installed CLI smoke passed before printing manual publish guidance.
+
+## Rollback
+
+1. Revert this slice commit with `git revert <commit-sha>`.
+2. Run the technical verification commands above.
+3. Confirm changelog check, installed package smoke, release dry-run gates, CI docs gate change, package exclusions, docs updates, and focused tests are removed.
+
+## Risks / Notes
+
+- `npm run package:quiver` now performs an npm install from the generated tarball, so package smoke is intentionally stricter and slightly slower.
+- `scripts/release-quiver.sh --publish` and `--publish-current` now require `QUIVER_ALLOW_NPM_PUBLISH=1` to avoid accidental publish automation.
+- CI docs job now uses `npm run docs:check`, so generated CLI reference drift can fail the docs gate.
+- No package dependency or lockfile update is required.

package/specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/slice.json

@@ -0,0 +1,105 @@
+{
+  "slice_id": "slice-03-changelog-package-release-smoke-hygiene",
+  "ticket": "QUIVER-52-03",
+  "type": "automation",
+  "title": "Changelog, package, and release smoke hygiene",
+  "objective": "Formalize changelog handling and validate actual npm package installation behavior.",
+  "description": "Updates release/package smoke gates so new docs/schema/scripts are included or excluded intentionally and installed CLI behavior is verified.",
+  "git": {
+    "branch_type": "feature",
+    "base_branch": "main",
+    "branch_slug": "v52-release-package-hygiene",
+    "branch_name": "feature/QUIVER-52-03-v52-release-package-hygiene"
+  },
+  "files": [
+    ".github/workflows/ci.yml",
+    ".npmignore",
+    "CHANGELOG.md",
+    "CONTRIBUTING.md",
+    "README.md",
+    "package.json",
+    "scripts/package-quiver.sh",
+    "scripts/release-quiver.sh",
+    "scripts/ci/check-changelog.js",
+    "scripts/ci/smoke-create-quiver.sh",
+    "tests/ci/changelog.test.js",
+    "specs/quiver-v52-schema-docs-release-hygiene/SPEC.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/STATUS.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/EVIDENCE_REPORT.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/CLOSURE_BRIEF.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/slice.json",
+    "specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/pr.md"
+  ],
+  "expected_read_paths": [
+    "CHANGELOG.md",
+    ".npmignore",
+    "scripts/package-quiver.sh",
+    "scripts/release-quiver.sh",
+    "package.json",
+    "package-lock.json"
+  ],
+  "allowed_write_paths": [
+    ".github/workflows/ci.yml",
+    ".npmignore",
+    "CHANGELOG.md",
+    "CONTRIBUTING.md",
+    "README.md",
+    "package.json",
+    "scripts/package-quiver.sh",
+    "scripts/release-quiver.sh",
+    "scripts/ci/check-changelog.js",
+    "scripts/ci/smoke-create-quiver.sh",
+    "tests/ci/changelog.test.js",
+    "specs/quiver-v52-schema-docs-release-hygiene/SPEC.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/STATUS.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/EVIDENCE_REPORT.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/CLOSURE_BRIEF.md",
+    "specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/slice.json",
+    "specs/quiver-v52-schema-docs-release-hygiene/slices/slice-03-changelog-package-release-smoke-hygiene/pr.md"
+  ],
+  "depends_on": [
+    "slice-01-json-schema-for-slice-json",
+    "slice-02-generated-cli-reference"
+  ],
+  "parallel_safe": "no",
+  "parallel_safe_reason": "Release/package hygiene must include outputs from schema and docs generation slices.",
+  "must": [
+    "Formalize [Unreleased] changelog handling.",
+    "Validate npm pack tarball contents.",
+    "Install tarball in a temp project and execute installed CLI.",
+    "Update package safety for new public/repo-only files.",
+    "Keep npm publish automation out of scope unless prerequisites are explicit."
+  ],
+  "not_included": [
+    "Publishing to npm.",
+    "Adding secrets to CI.",
+    "Removing manual release safeguards."
+  ],
+  "acceptance": [
+    "Package smoke fails for forbidden local artifacts.",
+    "Package smoke fails if required public files are missing.",
+    "Installed tarball smoke runs --version, --help, and a safe dry-run command.",
+    "Changelog process is documented and coherent."
+  ],
+  "tests": [
+    "npm ci",
+    "npm run changelog:check",
+    "node --test tests/ci/changelog.test.js",
+    "bash -n scripts/package-quiver.sh scripts/release-quiver.sh",
+    "shellcheck scripts/package-quiver.sh scripts/release-quiver.sh",
+    "npm run docs:check",
+    "node --test",
+    "npm run package:quiver",
+    "npm run release:quiver",
+    "git diff --check"
+  ],
+  "validation_hints": [
+    "Explicitly reject audit files, PDFs, tests, worktrees, secrets, .DS_Store, and tool state from the package."
+  ],
+  "estimated_hours": 6,
+  "status": "completed",
+  "blocked_reason": null,
+  "actual_hours": 5,
+  "started_at": "2026-06-03T01:05:00-0300",
+  "completed_at": "2026-06-03T01:13:00-0300"
+}