scene-capability-engine 3.0.7 → 3.1.0

package/docs/starter-kit/README.md

@@ -0,0 +1,50 @@
+# SCE Release-Ready Starter Kit
+
+This starter kit is the default baseline for onboarding an external project (including Moqui-based solutions) into SCE without project-specific flags.
+
+## Included Assets
+
+- `handoff-manifest.starter.json`: minimal manifest contract that works with `sce auto handoff` and `sce scene package-publish-batch`.
+- `release.workflow.sample.yml`: GitHub Actions sample for release-gate + weekly ops evidence publication.
+- `handoff-profile-ci.sample.yml`: profile-based intake pipeline sample (`default|moqui|enterprise`).
+- profile fixture references (for validation/testing):
+  - `tests/fixtures/handoff-profile-intake/default/*`
+  - `tests/fixtures/handoff-profile-intake/moqui/*`
+  - `tests/fixtures/handoff-profile-intake/enterprise/*`
+
+## Quick Start
+
+1. Prepare your manifest using `handoff-manifest.starter.json` as baseline.
+2. Run default intake pipeline:
+
+```bash
+npx sce auto handoff capability-matrix --manifest docs/handoffs/handoff-manifest.json --profile moqui --fail-on-gap --json
+npx sce auto handoff run --manifest docs/handoffs/handoff-manifest.json --profile moqui --json
+node scripts/release-ops-weekly-summary.js --json
+```
+
+3. Wire release workflow using `release.workflow.sample.yml` sections:
+   - release-gate history index
+   - governance snapshot export
+   - weekly ops summary export
+4. Optional: use `handoff-profile-ci.sample.yml` to run profile-based intake against external projects.
+
+## Default Acceptance
+
+- `scene package publish-batch` gate passes.
+- capability lexicon unknown count is zero.
+- release preflight is not blocked for hard-gate profiles.
+- weekly ops summary risk is not `high` unless explicitly approved.
+
+## Profile Recommendation
+
+- `default`: generic strict baseline intake.
+- `moqui`: preferred profile for Moqui template sedimentation.
+- `enterprise`: production rollout profile (release preflight hard-gate enabled).
+
+## Default Evidence Set
+
+- `.kiro/reports/release-evidence/handoff-runs.json`
+- `.kiro/reports/release-evidence/release-gate-history.json`
+- `.kiro/reports/release-evidence/governance-snapshot-<tag>.json`
+- `.kiro/reports/release-evidence/weekly-ops-summary-<tag>.json`

package/docs/starter-kit/handoff-manifest.starter.json

@@ -0,0 +1,32 @@
+{
+  "timestamp": "2026-02-20T00:00:00.000Z",
+  "source_project": "E:/workspace/your-project",
+  "specs": [
+    {
+      "id": "60-10-example-capability-spec",
+      "status": "completed",
+      "scene_package": ".kiro/specs/60-10-example-capability-spec/custom/scene-package.json",
+      "scene_manifest": ".kiro/specs/60-10-example-capability-spec/custom/scene.yaml"
+    }
+  ],
+  "templates": [
+    "sce.scene--example-capability-template--0.1.0"
+  ],
+  "capabilities": [
+    "example-capability-a",
+    "example-capability-b"
+  ],
+  "known_gaps": [],
+  "ontology_validation": {
+    "status": "passed",
+    "quality_score": 90,
+    "business_rules": {
+      "total": 1,
+      "mapped": 1
+    },
+    "decision_logic": {
+      "total": 1,
+      "resolved": 1
+    }
+  }
+}

package/docs/starter-kit/handoff-profile-ci.sample.yml

@@ -0,0 +1,53 @@
+name: Handoff Intake (Profile)
+
+on:
+  workflow_dispatch:
+    inputs:
+      profile:
+        description: "handoff profile: default|moqui|enterprise"
+        required: true
+        default: "moqui"
+      manifest:
+        description: "handoff manifest path"
+        required: true
+        default: "docs/handoffs/handoff-manifest.json"
+
+jobs:
+  handoff-intake:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: actions/setup-node@v3
+        with:
+          node-version: "20.x"
+          cache: "npm"
+
+      - run: npm ci
+
+      - name: Validate capability matrix (profile scoped)
+        shell: bash
+        run: |
+          set -euo pipefail
+          PROFILE="${{ github.event.inputs.profile }}"
+          MANIFEST="${{ github.event.inputs.manifest }}"
+          npx sce auto handoff capability-matrix \
+            --manifest "${MANIFEST}" \
+            --profile "${PROFILE}" \
+            --fail-on-gap \
+            --json
+
+      - name: Execute handoff run (profile scoped)
+        shell: bash
+        run: |
+          set -euo pipefail
+          PROFILE="${{ github.event.inputs.profile }}"
+          MANIFEST="${{ github.event.inputs.manifest }}"
+          npx sce auto handoff run \
+            --manifest "${MANIFEST}" \
+            --profile "${PROFILE}" \
+            --json
+
+      - name: Build weekly ops summary
+        run: node scripts/release-ops-weekly-summary.js --json
+

package/docs/starter-kit/release.workflow.sample.yml

@@ -0,0 +1,41 @@
+name: Release Starter (SCE)
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: actions/setup-node@v3
+        with:
+          node-version: "20.x"
+          cache: "npm"
+
+      - run: npm ci
+      - run: npm test -- --runInBand
+      - run: node scripts/interactive-governance-report.js --period weekly --fail-on-alert --json
+
+      - name: Build release evidence cards
+        shell: bash
+        run: |
+          set -euo pipefail
+          TAG="${GITHUB_REF_NAME}"
+          NOTES_DIR=".kiro/reports/release-evidence"
+          mkdir -p "${NOTES_DIR}"
+
+          node scripts/release-ops-weekly-summary.js \
+            --out "${NOTES_DIR}/weekly-ops-summary-${TAG}.json" \
+            --markdown-out "${NOTES_DIR}/weekly-ops-summary-${TAG}.md" \
+            --json
+
+          RELEASE_TAG="${TAG}" \
+          RELEASE_EVIDENCE_SUMMARY_FILE="${NOTES_DIR}/release-evidence-summary-${TAG}.json" \
+          RELEASE_GOVERNANCE_SNAPSHOT_JSON="${NOTES_DIR}/governance-snapshot-${TAG}.json" \
+          RELEASE_GOVERNANCE_SNAPSHOT_MD="${NOTES_DIR}/governance-snapshot-${TAG}.md" \
+            node scripts/release-governance-snapshot-export.js
+

package/docs/zh/README.md

@@ -190,6 +190,12 @@
 - 主从编排与门禁增强
 - 跨轮次回归与发布治理集成
 
+### [Handoff Profile Integration Guide](../handoff-profile-integration-guide.md)
+**外部项目接入规范（英文）** - `default|moqui|enterprise` 三档 handoff profile 契约
+- profile 默认策略与显式参数覆盖规则
+- 外部项目 manifest/evidence 最小要求
+- 从 `moqui` 到 `enterprise` 的分阶段上线建议
+
 ### [Value 可观测指南](value-observability-guide.md)
 **KPI 量化交付指南** - 快照、基线、趋势、门禁证据
 - 周度 KPI 快照生成
@@ -207,6 +213,12 @@
 - 测试、命令冒烟、打包检查
 - 文档一致性和 Git 准备状态
 
+### [安全治理默认基线](../security-governance-default-baseline.md)
+**默认安全控制（英文）** - 上下文脱敏、审批策略、发布审计证据最小集合
+
+### [发布即用 Starter Kit](../starter-kit/README.md)
+**外部项目接入脚手架（英文）** - handoff manifest 样例与 release workflow 样例
+
 ### [发布归档](releases/README.md)
 **历史发布入口** - 集中查看发布说明与验证报告
 - 版本化发布说明

package/lib/auto/moqui-recovery-sequence.js

@@ -0,0 +1,62 @@
+'use strict';
+
+const DEFAULT_CLUSTER_GOALS_ARG = '.kiro/auto/matrix-remediation.capability-clusters.json';
+const DEFAULT_BASELINE_ARG = '.kiro/reports/release-evidence/moqui-template-baseline.json';
+const DEFAULT_CLUSTER_PHASED_ALIAS = 'npm run run:matrix-remediation-clusters-phased -- --json';
+const DEFAULT_CLUSTER_BATCH_ALIAS = 'npm run run:matrix-remediation-clusters';
+const DEFAULT_BASELINE_PHASED_ALIAS = 'npm run run:matrix-remediation-from-baseline -- --json';
+
+function buildMoquiRegressionRecoverySequenceLines(options = {}) {
+  const clusterGoalsArg = options.clusterGoalsArg || DEFAULT_CLUSTER_GOALS_ARG;
+  const baselineArg = options.baselineArg || DEFAULT_BASELINE_ARG;
+  const clusterPhasedCommand = options.clusterPhasedCommand
+    || `node scripts/moqui-matrix-remediation-phased-runner.js --cluster-goals ${clusterGoalsArg} --json`;
+  const clusterBatchCommand = options.clusterBatchCommand
+    || `sce auto close-loop-batch ${clusterGoalsArg} --format json --batch-parallel 1 --batch-agent-budget 2 --batch-retry-until-complete --json`;
+  const baselinePhasedCommand = options.baselinePhasedCommand
+    || `node scripts/moqui-matrix-remediation-phased-runner.js --baseline ${baselineArg} --json`;
+  const clusterPhasedAlias = options.clusterPhasedAlias || DEFAULT_CLUSTER_PHASED_ALIAS;
+  const clusterBatchAlias = options.clusterBatchAlias || DEFAULT_CLUSTER_BATCH_ALIAS;
+  const baselinePhasedAlias = options.baselinePhasedAlias || DEFAULT_BASELINE_PHASED_ALIAS;
+
+  const includeLabel = options.includeLabel !== false;
+  const includeStep1Alias = options.includeStep1Alias !== false;
+  const includeStep1Fallback = options.includeStep1Fallback !== false;
+  const includeStep1FallbackAlias = options.includeStep1FallbackAlias !== false;
+  const includeStep2Alias = options.includeStep2Alias !== false;
+
+  const wrapCommands = options.wrapCommands === true;
+  const withPeriod = options.withPeriod === true;
+  const formatCommand = command => (wrapCommands ? `\`${command}\`` : command);
+  const suffix = withPeriod ? '.' : '';
+  const lines = [];
+
+  if (includeLabel) {
+    lines.push('Moqui regression recovery sequence (recommended):');
+  }
+  lines.push(`Step 1 (Cluster phased): ${formatCommand(clusterPhasedCommand)}${suffix}`);
+  if (includeStep1Alias) {
+    lines.push(`Step 1 alias: ${formatCommand(clusterPhasedAlias)}${suffix}`);
+  }
+  if (includeStep1Fallback) {
+    lines.push(`Step 1 fallback (cluster batch): ${formatCommand(clusterBatchCommand)}${suffix}`);
+  }
+  if (includeStep1FallbackAlias) {
+    lines.push(`Step 1 fallback alias: ${formatCommand(clusterBatchAlias)}${suffix}`);
+  }
+  lines.push(`Step 2 (Baseline phased): ${formatCommand(baselinePhasedCommand)}${suffix}`);
+  if (includeStep2Alias) {
+    lines.push(`Step 2 alias: ${formatCommand(baselinePhasedAlias)}${suffix}`);
+  }
+
+  return lines;
+}
+
+module.exports = {
+  DEFAULT_CLUSTER_GOALS_ARG,
+  DEFAULT_BASELINE_ARG,
+  DEFAULT_CLUSTER_PHASED_ALIAS,
+  DEFAULT_CLUSTER_BATCH_ALIAS,
+  DEFAULT_BASELINE_PHASED_ALIAS,
+  buildMoquiRegressionRecoverySequenceLines
+};