scene-capability-engine 3.6.62 → 3.6.64

package/CHANGELOG.md

@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.6.64] - 2026-03-21
+
+### Fixed
+- Stabilized the tracked project-shared problem projection for co-work/publish flows by deriving `source.project` from a stable project identity and reusing prior entry timestamps when only clone-local mtimes drift.
+
+## [3.6.63] - 2026-03-21
+
+### Fixed
+- Relaxed `audit:steering` so a clean-room checkout no longer hard-fails release validation just because the gitignored personal file `.sce/steering/CURRENT_CONTEXT.md` is absent.
+
 ## [3.6.62] - 2026-03-21
 
 ### Removed

package/README.md

@@ -230,5 +230,5 @@ MIT. See [LICENSE](LICENSE).
 
 ---
 
-**Version**: 3.6.62
+**Version**: 3.6.64
 **Last Updated**: 2026-03-21

package/README.zh.md

@@ -235,5 +235,5 @@ MIT，见 [LICENSE](LICENSE)。
 
 ---
 
-**版本**：3.6.62
+**版本**：3.6.64
 **最后更新**：2026-03-21

package/docs/releases/README.md

@@ -9,6 +9,8 @@ This directory stores release-facing documents:
 ## Archived Versions
 
 - [Release checklist](../release-checklist.md)
+- [v3.6.64 release notes](./v3.6.64.md)
+- [v3.6.63 release notes](./v3.6.63.md)
 - [v3.6.62 release notes](./v3.6.62.md)
 - [v3.6.61 release notes](./v3.6.61.md)
 - [v3.6.60 release notes](./v3.6.60.md)

package/docs/releases/v3.6.63.md

@@ -0,0 +1,34 @@
+# v3.6.63 Release Notes
+
+Release date: 2026-03-21
+
+## Highlights
+
+- Fixed a clean-room release blocker in `audit:steering`: the gitignored personal file `.sce/steering/CURRENT_CONTEXT.md` is now treated as optional when absent in a fresh checkout.
+- Added unit coverage so steering governance still enforces stable layers while no longer requiring a local-only context file to exist in Git-tracked release environments.
+- Kept the `v3.6.62` OpenHands cleanup intact; this patch only repairs the release path uncovered while publishing that cleanup.
+
+## Validation
+
+- `npx jest tests/unit/scripts/steering-content-audit.test.js --runInBand`
+- `npx jest tests/unit/commands/studio.test.js --runInBand`
+- `npm run test:release`
+- `npm run audit:release-docs`
+- `npm run audit:steering`
+- `npm run test:skip-audit`
+- `npm run test:sce-tracking`
+- `npm run gate:npm-runtime-assets`
+- `npm run test:brand-consistency`
+- `npm run audit:clarification-first`
+- `npm run audit:magicball-engineering-contract`
+- `npm run audit:magicball-project-contract`
+- `npm run gate:collab-governance`
+- `npm run gate:errorbook-registry-health`
+- `npm run gate:errorbook-release`
+- `npm run report:interactive-governance -- --fail-on-alert`
+- `npm pack --dry-run`
+
+## Release Notes
+
+- Use `v3.6.63` if you need the OpenHands cleanup from `v3.6.62` plus a clean-room-safe steering audit during publish.
+- This fix preserves the co-work rule that `CURRENT_CONTEXT.md` remains local/personal state and should not be force-committed just to satisfy release automation.

package/docs/releases/v3.6.64.md

@@ -0,0 +1,35 @@
+# v3.6.64 Release Notes
+
+Release date: 2026-03-21
+
+## Highlights
+
+- Fixed the remaining publish blocker in the managed co-work path: `.sce/knowledge/problem/project-shared-problems.json` no longer churns just because a clean clone uses a different folder name or fresh filesystem mtimes.
+- Reused prior projection timestamps when the logical problem entry is unchanged, so `gate:collab-governance` stays idempotent and no longer dirties the worktree right before `gate:git-managed`.
+- Kept the `v3.6.62` OpenHands cleanup and the `v3.6.63` clean-room steering audit fix intact; this patch closes the last publish-path drift uncovered while releasing those changes.
+
+## Validation
+
+- `npx jest tests/unit/problem/project-problem-projection.test.js --runInBand`
+- `npx jest tests/unit/scripts/steering-content-audit.test.js --runInBand`
+- `npx jest tests/unit/commands/studio.test.js --runInBand`
+- `npm run test:release`
+- `npm run audit:release-docs`
+- `npm run audit:steering`
+- `npm run test:skip-audit`
+- `npm run test:sce-tracking`
+- `npm run gate:npm-runtime-assets`
+- `npm run test:brand-consistency`
+- `npm run audit:clarification-first`
+- `npm run audit:magicball-engineering-contract`
+- `npm run audit:magicball-project-contract`
+- `npm run gate:collab-governance`
+- `npm run gate:errorbook-registry-health`
+- `npm run gate:errorbook-release`
+- `npm run report:interactive-governance -- --fail-on-alert`
+- `npm pack --dry-run`
+
+## Release Notes
+
+- Use `v3.6.64` if you need the OpenHands cleanup, clean-room steering audit, and a truly idempotent co-work publish path in one published package.
+- This fix keeps shared problem knowledge tracked while removing clone-path and clone-mtime noise from the release gate.

package/docs/zh/releases/README.md

@@ -9,6 +9,8 @@
 ## 历史版本归档
 
 - [发布检查清单](../release-checklist.md)
+- [v3.6.64 发布说明](./v3.6.64.md)
+- [v3.6.63 发布说明](./v3.6.63.md)
 - [v3.6.62 发布说明](./v3.6.62.md)
 - [v3.6.61 发布说明](./v3.6.61.md)
 - [v3.6.60 发布说明](./v3.6.60.md)

package/docs/zh/releases/v3.6.63.md

@@ -0,0 +1,34 @@
+# v3.6.63 发布说明
+
+发布日期：2026-03-21
+
+## 重点变化
+
+- 修复了 `audit:steering` 的 clean-room 发布阻断问题：在全新克隆中，如果被 `.gitignore` 排除的个人态文件 `.sce/steering/CURRENT_CONTEXT.md` 不存在，不再直接把发布校验打成失败。
+- 增加了对应单测，确保 steering 治理仍然会继续严格检查稳定层文件，但不再强迫 Git 跟踪环境必须带着本地个人上下文文件。
+- `v3.6.62` 的 OpenHands 清理内容保持不变；本补丁只修复发布那条线在真实发布过程中暴露出的流程缺陷。
+
+## 验证
+
+- `npx jest tests/unit/scripts/steering-content-audit.test.js --runInBand`
+- `npx jest tests/unit/commands/studio.test.js --runInBand`
+- `npm run test:release`
+- `npm run audit:release-docs`
+- `npm run audit:steering`
+- `npm run test:skip-audit`
+- `npm run test:sce-tracking`
+- `npm run gate:npm-runtime-assets`
+- `npm run test:brand-consistency`
+- `npm run audit:clarification-first`
+- `npm run audit:magicball-engineering-contract`
+- `npm run audit:magicball-project-contract`
+- `npm run gate:collab-governance`
+- `npm run gate:errorbook-registry-health`
+- `npm run gate:errorbook-release`
+- `npm run report:interactive-governance -- --fail-on-alert`
+- `npm pack --dry-run`
+
+## 发布说明
+
+- 如果你既需要 `v3.6.62` 的 OpenHands 清理，又需要 clean-room 发布环境下可通过的 steering 审计，请使用 `v3.6.63`。
+- 该修复保持 co-work 规则不变：`CURRENT_CONTEXT.md` 依然属于本地个人态文件，不应为了过发布门禁而被强制提交到 Git。

package/docs/zh/releases/v3.6.64.md

@@ -0,0 +1,35 @@
+# v3.6.64 发布说明
+
+发布日期：2026-03-21
+
+## 重点变化
+
+- 修复了受管 co-work 发布路径里剩余的阻断点：`.sce/knowledge/problem/project-shared-problems.json` 不再因为 clean clone 的目录名不同或文件系统时间戳刷新，就在发布前无意义改写。
+- 当问题条目的逻辑内容没有变化时，投影现在会复用上一次的稳定时间字段，保证 `gate:collab-governance` 真正幂等，不再在 `gate:git-managed` 前把工作区弄脏。
+- `v3.6.62` 的 OpenHands 清理和 `v3.6.63` 的 clean-room steering 审计修复都保持不变；本补丁把发布路径上最后一个实际暴露出来的漂移点补齐。
+
+## 验证
+
+- `npx jest tests/unit/problem/project-problem-projection.test.js --runInBand`
+- `npx jest tests/unit/scripts/steering-content-audit.test.js --runInBand`
+- `npx jest tests/unit/commands/studio.test.js --runInBand`
+- `npm run test:release`
+- `npm run audit:release-docs`
+- `npm run audit:steering`
+- `npm run test:skip-audit`
+- `npm run test:sce-tracking`
+- `npm run gate:npm-runtime-assets`
+- `npm run test:brand-consistency`
+- `npm run audit:clarification-first`
+- `npm run audit:magicball-engineering-contract`
+- `npm run audit:magicball-project-contract`
+- `npm run gate:collab-governance`
+- `npm run gate:errorbook-registry-health`
+- `npm run gate:errorbook-release`
+- `npm run report:interactive-governance -- --fail-on-alert`
+- `npm pack --dry-run`
+
+## 发布说明
+
+- 如果你需要同时拿到 OpenHands 清理、clean-room steering 审计修复，以及真正幂等的 co-work 发布链路，请使用 `v3.6.64`。
+- 该修复保留了项目共享问题库的 Git 跟踪能力，同时去掉了由克隆目录名和克隆时间戳引入的发布噪音。

package/lib/problem/project-problem-projection.js

@@ -115,6 +115,72 @@ function normalizeProjectionAgeDays(value) {
   return Math.max(0, Math.floor(numeric));
 }
 
+function toComparableEntry(entry) {
+  if (!entry || typeof entry !== 'object' || Array.isArray(entry)) {
+    return null;
+  }
+  const clone = {
+    ...entry
+  };
+  delete clone.updated_at;
+  delete clone.age_days;
+  return sortKeysDeep(clone);
+}
+
+function stabilizeEntriesWithExistingProjection(entries = [], existingProjection = null) {
+  const existingEntries = Array.isArray(existingProjection && existingProjection.entries)
+    ? existingProjection.entries
+    : [];
+  const existingBySpecId = new Map(
+    existingEntries
+      .filter((item) => item && typeof item === 'object' && !Array.isArray(item) && normalizeText(item.spec_id))
+      .map((item) => [normalizeText(item.spec_id), item])
+  );
+
+  return entries.map((entry) => {
+    const previous = existingBySpecId.get(normalizeText(entry.spec_id));
+    if (!previous) {
+      return entry;
+    }
+    const previousComparable = toComparableEntry(previous);
+    const nextComparable = toComparableEntry(entry);
+    if (
+      previousComparable
+      && nextComparable
+      && JSON.stringify(previousComparable) === JSON.stringify(nextComparable)
+    ) {
+      return {
+        ...entry,
+        updated_at: previous.updated_at || entry.updated_at || null,
+        age_days: normalizeProjectionAgeDays(previous.age_days)
+      };
+    }
+    return entry;
+  });
+}
+
+async function resolveStableProjectIdentity(projectPath = process.cwd(), fileSystem = fs, fallbackValue = '') {
+  const packageJsonPath = path.join(projectPath, 'package.json');
+  if (await fileSystem.pathExists(packageJsonPath)) {
+    try {
+      const packageJson = await fileSystem.readJson(packageJsonPath);
+      const packageName = normalizeText(packageJson && packageJson.name);
+      if (packageName) {
+        return packageName;
+      }
+    } catch (_error) {
+      // Fall through to the remaining stable identity candidates.
+    }
+  }
+
+  const fallback = normalizeText(fallbackValue);
+  if (fallback) {
+    return fallback;
+  }
+
+  return path.basename(projectPath);
+}
+
 async function buildProjectSharedProblemProjection(projectPath = process.cwd(), options = {}, dependencies = {}) {
   const fileSystem = dependencies.fileSystem || fs;
   const studioIntakePolicy = dependencies.studioIntakePolicy || await loadStudioIntakePolicy(projectPath, fileSystem);
@@ -128,6 +194,11 @@ async function buildProjectSharedProblemProjection(projectPath = process.cwd(),
   const projectionConfig = normalizeProblemProjectionConfig(
     options.projectSharedProjection || closurePolicy.project_shared_projection
   );
+  const projectIdentity = await resolveStableProjectIdentity(
+    projectPath,
+    fileSystem,
+    options.projectIdentity || dependencies.existingProjection?.source?.project
+  );
   const scanOptions = {
     staleDays
   };
@@ -193,26 +264,27 @@ async function buildProjectSharedProblemProjection(projectPath = process.cwd(),
     });
   }
 
-  entries.sort((left, right) => String(right.updated_at || '').localeCompare(String(left.updated_at || '')));
-  const activeCount = entries.filter((item) => item.lifecycle_state === 'active').length;
-  const staleCount = entries.filter((item) => item.lifecycle_state === 'stale').length;
-  const completedCount = entries.filter((item) => item.lifecycle_state === 'completed').length;
+  const stabilizedEntries = stabilizeEntriesWithExistingProjection(entries, dependencies.existingProjection);
+  stabilizedEntries.sort((left, right) => String(right.updated_at || '').localeCompare(String(left.updated_at || '')));
+  const activeCount = stabilizedEntries.filter((item) => item.lifecycle_state === 'active').length;
+  const staleCount = stabilizedEntries.filter((item) => item.lifecycle_state === 'stale').length;
+  const completedCount = stabilizedEntries.filter((item) => item.lifecycle_state === 'completed').length;
 
   return {
     api_version: PROJECT_SHARED_PROBLEM_PROJECTION_API_VERSION,
     generated_at: new Date().toISOString(),
     source: {
-      project: path.basename(projectPath),
+      project: projectIdentity,
       stale_days: staleDays,
       scope: projectionConfig.scope
     },
     summary: {
-      total_entries: entries.length,
+      total_entries: stabilizedEntries.length,
       active_entries: activeCount,
       stale_entries: staleCount,
       completed_entries: completedCount
     },
-    entries
+    entries: stabilizedEntries
   };
 }
 
@@ -238,14 +310,15 @@ async function syncProjectSharedProblemProjection(projectPath = process.cwd(), o
     };
   }
 
+  const existing = await readJsonSafe(absolutePath, fileSystem);
   const payload = await buildProjectSharedProblemProjection(projectPath, {
     ...options,
     projectSharedProjection: projectionConfig
   }, {
     ...dependencies,
-    problemClosurePolicyBundle: closurePolicy
+    problemClosurePolicyBundle: closurePolicy,
+    existingProjection: existing
   });
-  const existing = await readJsonSafe(absolutePath, fileSystem);
   const existingComparable = toComparableProjection(existing);
   const nextComparable = toComparableProjection(payload);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "scene-capability-engine",
-  "version": "3.6.62",
+  "version": "3.6.64",
   "description": "SCE (Scene Capability Engine) - A CLI tool and npm package for spec-driven development with AI coding assistants.",
   "main": "index.js",
   "bin": {

package/scripts/steering-content-audit.js

@@ -186,6 +186,10 @@ function pushViolation(violations, severity, file, rule, message, suggestion) {
   });
 }
 
+function isOptionalCurrentContextFile(fileName) {
+  return fileName === 'CURRENT_CONTEXT.md';
+}
+
 function auditSteeringContent(options = {}) {
   const projectPath = path.resolve(options.projectPath || process.cwd());
   const packageJsonPath = path.join(projectPath, 'package.json');
@@ -206,6 +210,17 @@ function auditSteeringContent(options = {}) {
   for (const fileName of fileNames) {
     const absolutePath = path.join(steeringDir, fileName);
     if (!fs.existsSync(absolutePath)) {
+      if (isOptionalCurrentContextFile(fileName)) {
+        pushViolation(
+          violations,
+          'warning',
+          fileName,
+          'missing_optional_context',
+          `${fileName} is absent in this checkout; clean-room repositories may omit personal current context until active local work begins.`,
+          'Create CURRENT_CONTEXT.md locally when active work starts, but keep it out of Git-tracked release state.'
+        );
+        continue;
+      }
       pushViolation(
         violations,
         'error',

package/template/.sce/README.md

@@ -243,6 +243,6 @@ A Spec is a complete feature definition with three parts:
 ---
 
 **Project Type**: Spec-driven development  
-**sce Version**: 3.6.62  
+**sce Version**: 3.6.64  
 **Last Updated**: 2026-03-21
 **Purpose**: Guide AI tools to work effectively with this project