housebroken-cli 0.1.0__py3-none-any.whl

housebroken/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.1.0"

housebroken/cli.py

@@ -0,0 +1,92 @@
+"""Console entry point: run the packaged bash dispatcher.
+
+The gate scripts are bash and stay bash. This module only finds a bash, points
+HOUSEBROKEN_SCRIPTS at the copy of the scripts inside the installed package,
+and hands every argument to bin/housebroken unchanged. Three subcommands are
+answered in Python because they are about the package, not about a gate:
+version, skill-path and install-skill.
+"""
+
+import contextlib
+import os
+import shutil
+import subprocess
+import sys
+from importlib import metadata, resources
+from pathlib import Path
+
+DISTRIBUTION = "housebroken-cli"
+
+
+def find_bash():
+    bash = shutil.which("bash")
+    if bash:
+        return bash
+    if os.name == "nt":
+        git = shutil.which("git")
+        if git:
+            git_root = Path(git).resolve().parent.parent
+            for candidate in (
+                git_root / "bin" / "bash.exe",
+                git_root / "usr" / "bin" / "bash.exe",
+            ):
+                if candidate.is_file():
+                    return str(candidate)
+    return None
+
+
+def package_version():
+    try:
+        return metadata.version(DISTRIBUTION)
+    except metadata.PackageNotFoundError:
+        from housebroken import __version__
+
+        return __version__
+
+
+def install_skill(skill_md):
+    target = Path(os.path.expanduser("~")) / ".claude" / "skills" / "housebroken" / "SKILL.md"
+    target.parent.mkdir(parents=True, exist_ok=True)
+    shutil.copyfile(skill_md, target)
+    print(f"installed {target}")
+
+
+def main():
+    args = sys.argv[1:]
+    cmd = args[0] if args else "help"
+
+    if cmd == "version" or cmd == "--version":
+        print(f"housebroken {package_version()}")
+        return 0
+
+    with contextlib.ExitStack() as stack:
+        root = stack.enter_context(resources.as_file(resources.files("housebroken")))
+
+        if cmd == "skill-path":
+            print(root / "skill" / "SKILL.md")
+            return 0
+        if cmd == "install-skill":
+            install_skill(root / "skill" / "SKILL.md")
+            return 0
+
+        bash = find_bash()
+        if bash is None:
+            print(
+                "housebroken: no bash found. Install Git Bash on Windows "
+                "(https://git-scm.com/download/win) or bash on Unix, and make "
+                "sure bash is on PATH.",
+                file=sys.stderr,
+            )
+            return 2
+
+        scripts = root / "scripts"
+        env = dict(os.environ)
+        env["HOUSEBROKEN_SCRIPTS"] = str(scripts)
+        completed = subprocess.run(
+            [bash, str(scripts / "housebroken"), *args], env=env
+        )
+        return completed.returncode
+
+
+if __name__ == "__main__":
+    sys.exit(main())

housebroken/scripts/check-ai-policy.sh

@@ -0,0 +1,109 @@
+#!/bin/bash
+# check-ai-policy.sh - independently verify a repo's stance on AI-assisted
+# contributions. Scouts report a policy; this reads it. Never adopt a target on
+# a scout's description of its policy (cold-cohort-2026-08-09 lesson, applied to
+# a new criterion).
+#
+# Checks a branch of the real repo, not a memory of it, and then the
+# organization's .github repository, where an org-wide policy often lives.
+# Prints every hit with its file so the operator reads the sentence, not a
+# verdict. The branch is overridable because some projects keep the policy on a
+# development branch and not on the default branch.
+#
+# Usage:
+#   ./check-ai-policy.sh [--branch <name>] owner/repo [owner/repo ...]
+#   ./check-ai-policy.sh --help
+#
+# Environment:
+#   HOUSEBROKEN_HOME  work directory, default $HOME/.housebroken. Not written
+#                     by this script; it prints to stdout only.
+#
+# Assumes gh is installed and authenticated. Read-only: GET calls only.
+set -u
+
+usage() {
+  cat <<'EOF'
+usage: check-ai-policy.sh [--branch <name>] owner/repo [owner/repo ...]
+       check-ai-policy.sh --help
+
+  --branch <name>  read the policy files from this branch instead of the
+                   repository default branch; some projects keep the policy
+                   on a development branch
+
+environment:
+  HOUSEBROKEN_HOME  work directory, default $HOME/.housebroken (unused here)
+EOF
+}
+
+FILES="CONTRIBUTING.md CONTRIBUTING.rst CONTRIBUTING .github/CONTRIBUTING.md
+docs/CONTRIBUTING.md docs/contributing.md CODE_OF_CONDUCT.md
+.github/CODE_OF_CONDUCT.md README.md AI.md AI_POLICY.md POLICY.md
+.github/AI_POLICY.md .github/AI.md .github/POLICY.md .github/PULL_REQUEST_TEMPLATE.md .github/pull_request_template.md
+.github/ISSUE_TEMPLATE/config.yml CLAUDE.md AGENTS.md .cursorrules"
+
+PATTERN='[Aa][Ii]-generated|[Aa]rtificial [Ii]ntelligence|\bLLM|[Ll]arge [Ll]anguage [Mm]odel|Copilot|ChatGPT|[Cc]laude|[Gg]enerative|AI assistance|AI-assisted|AI tool|AI slop|machine-generated'
+
+branch_opt=""
+repos=()
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --help|-h) usage; exit 0 ;;
+    --branch) shift; [ "$#" -gt 0 ] || { echo "check-ai-policy.sh: --branch needs a name" >&2; exit 1; }
+              branch_opt="$1" ;;
+    --branch=*) branch_opt="${1#--branch=}" ;;
+    --*) usage >&2; echo "check-ai-policy.sh: unknown option $1" >&2; exit 1 ;;
+    */*) repos+=("$1") ;;
+    *) usage >&2; echo "check-ai-policy.sh: '$1' is not owner/repo" >&2; exit 1 ;;
+  esac
+  shift
+done
+[ "${#repos[@]}" -gt 0 ] || { usage >&2; exit 1; }
+
+command -v gh >/dev/null 2>&1 || { echo "check-ai-policy.sh: gh is not on PATH" >&2; exit 1; }
+
+# print every policy hit in one repo at one ref; returns 1 when nothing matched
+scan() {
+  local target="$1" ref="$2" label="$3" found=0 f body hits
+  for f in $FILES; do
+    body=$(gh api "repos/$target/contents/$f?ref=$ref" --jq '.content' 2>/dev/null | base64 -d 2>/dev/null)
+    [ -z "$body" ] && continue
+    hits=$(printf '%s' "$body" | grep -nEi "$PATTERN" | head -12)
+    if [ -n "$hits" ]; then
+      found=1
+      echo "  --- $label$f ---"
+      printf '%s\n' "$hits" | cut -c1-300 | sed 's/^/      /'
+    else
+      echo "  (clean) $label$f"
+    fi
+  done
+  [ "$found" -eq 1 ]
+}
+
+status=0
+for repo in "${repos[@]}"; do
+  echo "=================================================================="
+  echo "$repo"
+  branch="$branch_opt"
+  if [ -z "$branch" ]; then
+    branch=$(gh api "repos/$repo" --jq .default_branch 2>/dev/null) || branch=""
+    if [ -z "$branch" ]; then
+      echo "check-ai-policy.sh: cannot read $repo from GitHub" >&2
+      status=1
+      continue
+    fi
+  fi
+  echo "  branch: $branch"
+  found_any=0
+  scan "$repo" "$branch" "" && found_any=1
+
+  # an org-wide policy often lives in the organization's .github repository
+  org="${repo%%/*}"
+  org_branch=$(gh api "repos/$org/.github" --jq .default_branch 2>/dev/null) || org_branch=""
+  if [ -n "$org_branch" ]; then
+    echo "  org repo: $org/.github ($org_branch)"
+    scan "$org/.github" "$org_branch" "$org/.github: " && found_any=1
+  fi
+
+  [ "$found_any" -eq 0 ] && echo "  RESULT: no AI/LLM language in any policy file checked"
+done
+exit "$status"

housebroken/scripts/comment-census.sh

@@ -0,0 +1,83 @@
+#!/bin/bash
+# comment-census.sh - added code lines against added comment lines, per branch.
+#
+# A patch that carries a paragraph of comments into a file that has none reads
+# as machine-written and gets closed. This counts, for every branch in every
+# clone under a directory, the added non-comment lines and the added comment
+# lines, so a pull request can be made to match the comment density of the file
+# it lands in. Three maintainers asked for exactly this, in three separate
+# reviews, before it became a script.
+#
+# Usage:
+#   bash comment-census.sh [CLONE_ROOT]
+#   bash comment-census.sh --help
+#
+# CLONE_ROOT is any directory whose immediate subdirectories are git clones.
+# Defaults to $HOUSEBROKEN_CLONES, then to $HOUSEBROKEN_HOME/clones.
+#
+# Environment:
+#   HOUSEBROKEN_CLONES  default clone root
+#   HOUSEBROKEN_HOME    workshop root, default $HOME/.housebroken
+#
+# Assumes: each clone has an origin remote whose default branch is discoverable
+# (origin/HEAD, else origin/main, else origin/master); every other local branch
+# is a candidate patch. Tests, markdown and lock files are excluded from the
+# code and comment counts. Comment detection covers //, /* */, * and #.
+set -u
+
+usage() {
+  sed -n '2,/^set -u$/p' "$0" | sed 's/^# \{0,1\}//; /^set -u$/d'
+}
+
+case "${1:-}" in
+  --help|-h) usage; exit 0 ;;
+esac
+
+HOUSEBROKEN_HOME="${HOUSEBROKEN_HOME:-$HOME/.housebroken}"
+root="${1:-${HOUSEBROKEN_CLONES:-$HOUSEBROKEN_HOME/clones}}"
+
+if [ ! -d "$root" ]; then
+  echo "comment-census.sh: not a directory: $root" >&2
+  echo "give a clone root as an argument or set HOUSEBROKEN_CLONES" >&2
+  exit 1
+fi
+
+printf '%-28s %-36s %5s %5s %5s\n' repo branch code cmnt tests
+
+found=0
+for d in "$root"/*/; do
+  [ -d "$d/.git" ] || continue
+  found=1
+  name=$(basename "$d")
+  base=$(git -C "$d" symbolic-ref -q --short refs/remotes/origin/HEAD || true)
+  if [ -z "$base" ]; then
+    if git -C "$d" rev-parse --verify -q origin/main >/dev/null; then
+      base=origin/main
+    elif git -C "$d" rev-parse --verify -q origin/master >/dev/null; then
+      base=origin/master
+    else
+      echo "comment-census.sh: no default branch in $d, skipped" >&2
+      continue
+    fi
+  fi
+  default_branch="${base#origin/}"
+  while read -r br; do
+    [ -n "$br" ] || continue
+    [ "$br" = "$default_branch" ] && continue
+    [ "$(git -C "$d" rev-list --count "$base..$br")" = "0" ] && continue
+    added=$(git -C "$d" diff "$base..$br" -- . ':(exclude)*test*' ':(exclude)*Test*' ':(exclude)*_test.go' ':(exclude)Tests/*' ':(exclude)*.md' ':(exclude)*.sum' | grep '^+' | grep -v '^+++' || true)
+    if [ -z "$added" ]; then
+      code=0; cmnt=0
+    else
+      code=$(printf '%s\n' "$added" | grep -v -E '^\+\s*(//|/\*|\*|#|///|\*/)' | grep -c -v -E '^\+\s*$' || true)
+      cmnt=$(printf '%s\n' "$added" | grep -c -E '^\+\s*(//|/\*|\*|///|\*/)' || true)
+    fi
+    tests=$(git -C "$d" diff "$base..$br" --numstat | awk '/[Tt]est/{s+=$1} END{print s+0}')
+    printf '%-28s %-36s %5s %5s %5s\n' "$name" "$br" "$code" "$cmnt" "$tests"
+  done < <(git -C "$d" for-each-ref --format='%(refname:short)' refs/heads/)
+done
+
+if [ "$found" = 0 ]; then
+  echo "comment-census.sh: no git clones found under $root" >&2
+  exit 1
+fi

housebroken/scripts/distinct-outside.sh

@@ -0,0 +1,85 @@
+#!/bin/bash
+# distinct-outside.sh - distinct outside humans whose PRs were merged in the
+# last N days. A project that has merged none is closed to outsiders whatever
+# its README says, so this number is read before a target is adopted.
+#
+# Outside means the PR's author_association is CONTRIBUTOR, FIRST_TIMER,
+# FIRST_TIME_CONTRIBUTOR or NONE; everything else is counted as team. Known bot
+# accounts are dropped. Only the two most recently updated pages of closed PRs
+# are read, so a very busy repo is a lower bound on a long window.
+#
+# Usage:
+#   bash distinct-outside.sh [--days N] owner/repo [owner/repo ...]
+#   bash distinct-outside.sh --help
+#
+# Environment:
+#   HOUSEBROKEN_HOME  work directory, default $HOME/.housebroken. The PR pages
+#                     are staged in its cache/ subdirectory, created if missing.
+#
+# Assumes gh is installed and authenticated, and jq is on PATH. Read-only: GET
+# calls only.
+set -u
+
+usage() {
+  cat <<'EOF'
+usage: distinct-outside.sh [--days N] owner/repo [owner/repo ...]
+       distinct-outside.sh --help
+
+  --days N  window in days, default 120
+
+environment:
+  HOUSEBROKEN_HOME  work directory, default $HOME/.housebroken
+EOF
+}
+
+days=120
+repos=()
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --help|-h) usage; exit 0 ;;
+    --days) shift; [ "$#" -gt 0 ] || { echo "distinct-outside.sh: --days needs a number" >&2; exit 1; }
+            days="$1" ;;
+    --days=*) days="${1#--days=}" ;;
+    --*) usage >&2; echo "distinct-outside.sh: unknown option $1" >&2; exit 1 ;;
+    */*) repos+=("$1") ;;
+    *) usage >&2; echo "distinct-outside.sh: '$1' is not owner/repo" >&2; exit 1 ;;
+  esac
+  shift
+done
+[ "${#repos[@]}" -gt 0 ] || { usage >&2; exit 1; }
+case "$days" in
+  ''|*[!0-9]*) echo "distinct-outside.sh: --days must be a whole number, got '$days'" >&2; exit 1 ;;
+esac
+
+command -v gh >/dev/null 2>&1 || { echo "distinct-outside.sh: gh is not on PATH" >&2; exit 1; }
+command -v jq >/dev/null 2>&1 || { echo "distinct-outside.sh: jq is not on PATH" >&2; exit 1; }
+
+home="${HOUSEBROKEN_HOME:-$HOME/.housebroken}"
+cache="$home/cache"
+mkdir -p "$cache" || { echo "distinct-outside.sh: cannot create $cache" >&2; exit 1; }
+
+cutoff=$(date -u -d "$days days ago" '+%Y-%m-%dT%H:%M:%SZ') ||
+  { echo "distinct-outside.sh: cannot compute the cutoff date" >&2; exit 1; }
+
+for repo in "${repos[@]}"; do
+  json="$cache/prs-${repo%%/*}-${repo##*/}.json"
+  : >"$json"
+  for page in 1 2; do
+    gh api "repos/$repo/pulls?state=closed&per_page=100&sort=updated&direction=desc&page=$page" >>"$json" ||
+      { echo "distinct-outside.sh: cannot list closed PRs for $repo" >&2; exit 1; }
+  done
+  jq -s -r --arg repo "$repo" --arg cutoff "$cutoff" --arg days "$days" '
+    def bot: ascii_downcase | test("dependabot|renovate|github-actions|pre-commit-ci|allcontributors|snyk|\\[bot\\]");
+    def tally: reduce .[] as $l ({}; .[$l] += 1);
+    (add // [])
+    | map(select(.merged_at != null and .merged_at >= $cutoff))
+    | map(select((.user.login // "") | bot | not))
+    | (map(select(.author_association as $a
+        | ["CONTRIBUTOR","FIRST_TIME_CONTRIBUTOR","FIRST_TIMER","NONE"] | index($a)))
+        | map(.user.login) | tally) as $out
+    | (map(select(.author_association as $a
+        | ["CONTRIBUTOR","FIRST_TIME_CONTRIBUTOR","FIRST_TIMER","NONE"] | index($a) | not))
+        | map(.user.login) | tally) as $team
+    | "\($repo): \($out | length) distinct outside humans in \($days)d -> \($out | tojson) | team merges \($team | tojson)"
+  ' "$json" || { echo "distinct-outside.sh: cannot parse the PR list for $repo" >&2; exit 1; }
+done

housebroken/scripts/file-pr.sh

@@ -0,0 +1,118 @@
+#!/bin/bash
+# file-pr.sh - the only way a PR gets filed: gh pr create behind two gates.
+#
+# Gate one is prior art. typer #1946 (closed 2026-08-31) duplicated an open PR
+# and swift-http-types #153 (closed 2026-09-04) reargued a closed issue, both
+# because the check was a memory rather than a file. This refuses unless
+# prior-art-<owner>-<repo>.md exists under $HOUSEBROKEN_HOME/prior-art/ and is
+# under 24 hours old.
+# Gate two is the prose. Tool footers, session trailers and em or en dashes have
+# no place in somebody else's repository, so a body carrying one is refused.
+# Written 2026-09-07.
+#
+# Usage:
+#   bash file-pr.sh owner/repo <gh pr create args...>
+#   FILE_PR_DRY=1 bash file-pr.sh owner/repo ...   # print the command, run nothing
+#   bash file-pr.sh --help
+#
+# Environment:
+#   HOUSEBROKEN_HOME  work directory, default $HOME/.housebroken. The prior art
+#                     is read from its prior-art/ subdirectory, where
+#                     prior-art.sh --out puts it.
+#   FILE_PR_DRY       set to 1 to print the gh command instead of running it.
+#
+# Assumes gh is installed and authenticated. This is the one script here that
+# writes to GitHub, and only after both gates pass and only when FILE_PR_DRY
+# is not 1.
+set -u
+
+usage() {
+  cat <<'EOF'
+usage: file-pr.sh owner/repo <gh pr create args...>
+       file-pr.sh --help
+
+  owner/repo  the upstream repository the PR is filed against
+  the remaining arguments are passed to gh pr create unchanged
+
+gates:
+  prior art   $HOUSEBROKEN_HOME/prior-art/prior-art-<owner>-<repo>.md must
+              exist and be under 24 hours old
+  prose       no tool footer, session trailer, co-author trailer, em dash or
+              en dash in --body or --body-file
+
+environment:
+  HOUSEBROKEN_HOME  work directory, default $HOME/.housebroken
+  FILE_PR_DRY       1 prints the gh command and files nothing
+EOF
+}
+
+if [ "$#" -eq 0 ] || [ "${1:-}" = "--help" ] || [ "${1:-}" = "-h" ]; then
+  usage
+  [ "$#" -eq 0 ] && exit 2
+  exit 0
+fi
+
+command -v gh >/dev/null 2>&1 || { echo "REFUSED: gh is not on PATH" >&2; exit 2; }
+
+repo="$1"
+shift
+case "$repo" in
+  */*) : ;;
+  *) echo "REFUSED: first argument must be owner/repo" >&2; exit 2 ;;
+esac
+[ "$#" -gt 0 ] || { echo "REFUSED: no gh pr create arguments given" >&2; exit 2; }
+
+home="${HOUSEBROKEN_HOME:-$HOME/.housebroken}"
+art="$home/prior-art/prior-art-${repo%%/*}-${repo##*/}.md"
+if [ ! -f "$art" ]; then
+  echo "REFUSED: no prior art at $art - run prior-art.sh $repo <terms> --out first" >&2
+  exit 2
+fi
+now=$(date +%s)
+made=$(date -r "$art" +%s) || { echo "REFUSED: cannot read the age of $art" >&2; exit 2; }
+if [ $((now - made)) -gt 86400 ]; then
+  echo "REFUSED: prior art $art is $(( (now - made) / 3600 ))h old - rerun prior-art.sh --out" >&2
+  exit 2
+fi
+
+em=$(printf '\xe2\x80\x94')   # em dash U+2014, built at runtime to keep this file ASCII
+en=$(printf '\xe2\x80\x93')   # en dash U+2013
+banned_re="Generated with|Claude-Session|Co-Authored-By|$em|$en"
+check_text() {
+  local what="$1" text="$2" hit
+  hit=$(printf '%s' "$text" | grep -oE "$banned_re" | head -1) || true
+  if [ -n "$hit" ]; then
+    echo "REFUSED: $what contains '$hit' - strip it before filing" >&2
+    exit 2
+  fi
+}
+
+prev=""
+for arg in "$@"; do
+  case "$prev" in
+    --body-file|-F)
+      [ -f "$arg" ] || { echo "REFUSED: body file $arg does not exist" >&2; exit 2; }
+      check_text "body file $arg" "$(cat "$arg")"
+      ;;
+    --body|-b)
+      check_text "--body" "$arg"
+      ;;
+  esac
+  case "$arg" in
+    --body-file=*)
+      f="${arg#--body-file=}"
+      [ -f "$f" ] || { echo "REFUSED: body file $f does not exist" >&2; exit 2; }
+      check_text "body file $f" "$(cat "$f")"
+      ;;
+    --body=*) check_text "--body" "${arg#--body=}" ;;
+  esac
+  prev="$arg"
+done
+
+if [ "${FILE_PR_DRY:-0}" = "1" ]; then
+  printf 'DRY RUN, not filed:\ngh pr create -R %s' "$repo"
+  for arg in "$@"; do printf ' %q' "$arg"; done
+  printf '\n'
+  exit 0
+fi
+gh pr create -R "$repo" "$@"

housebroken/scripts/fork-hygiene.sh

@@ -0,0 +1,82 @@
+#!/bin/bash
+# fork-hygiene.sh - clean up after ourselves on GitHub (rule adopted 2026-09-06):
+# delete the fork branch of every upstream PR that is merged or closed, and list
+# the forks that carry no PR at all, which are deleted by hand when the work is
+# over. Never touches the branch of an open PR, never touches our own repositories.
+#
+# Usage:
+#   bash fork-hygiene.sh              # deletes the branches it names
+#   bash fork-hygiene.sh --dry-run    # prints what it would delete, deletes nothing
+#   bash fork-hygiene.sh --help
+#
+# Environment:
+#   HOUSEBROKEN_USER  GitHub login whose forks are cleaned, default the
+#                     authenticated user
+#
+# Assumes: gh is installed and authenticated with delete access to the fork,
+# that our forks live under that login, and that a closed or merged PR's head
+# branch has no other use. -n is accepted as a synonym for --dry-run.
+set -u
+
+usage() {
+  sed -n '2,/^set -u$/p' "$0" | sed 's/^# \{0,1\}//; /^set -u$/d'
+}
+
+DRY=0
+case "${1:-}" in
+  --help|-h) usage; exit 0 ;;
+  --dry-run|-n) DRY=1 ;;
+  "") ;;
+  *) echo "fork-hygiene.sh: unknown argument: $1" >&2; usage >&2; exit 2 ;;
+esac
+
+ME="${HOUSEBROKEN_USER:-$(gh api user --jq .login)}"
+if [ -z "$ME" ]; then
+  echo "fork-hygiene.sh: cannot determine the GitHub login; set HOUSEBROKEN_USER" >&2
+  exit 1
+fi
+
+if ! closed="$(gh search prs --author "$ME" --state closed --json repository,number --limit 100 \
+  --jq '.[] | "\(.repository.nameWithOwner) \(.number)"')"; then
+  echo "fork-hygiene.sh: gh search prs failed for author $ME" >&2
+  exit 1
+fi
+
+while read -r repo n; do
+  [ -n "$repo" ] || continue
+  case "$repo" in "$ME"/*) continue ;; esac
+  info=$(gh pr view "$n" --repo "$repo" --json headRefName,headRepository,headRepositoryOwner,state \
+    --jq '"\(.headRepositoryOwner.login)|\(.headRepository.name)|\(.headRefName)|\(.state)"' 2>/dev/null) || {
+    echo "fork-hygiene.sh: gh pr view $repo#$n failed" >&2
+    continue
+  }
+  IFS='|' read -r owner fork branch state <<< "$info"
+  if [ "$owner" != "$ME" ] || [ -z "$branch" ]; then continue; fi
+  gh api "repos/$ME/$fork/git/refs/heads/$branch" >/dev/null 2>&1 || continue
+  if [ "$DRY" = 1 ]; then
+    echo "would delete $ME/$fork $branch ($state $repo#$n)"
+    continue
+  fi
+  if gh api -X DELETE "repos/$ME/$fork/git/refs/heads/$branch" >/dev/null 2>&1; then
+    echo "deleted $ME/$fork $branch ($state $repo#$n)"
+  else
+    echo "FAILED $ME/$fork $branch" >&2
+  fi
+done <<< "$closed"
+
+echo "--- forks with no PR (delete by hand when a wave is over):"
+forks=$(mktemp) || { echo "fork-hygiene.sh: mktemp failed" >&2; exit 1; }
+prrepos=$(mktemp) || { echo "fork-hygiene.sh: mktemp failed" >&2; exit 1; }
+trap 'rm -f "$forks" "$prrepos"' EXIT
+
+if ! gh repo list "$ME" --fork --limit 200 --json name,parent \
+  --jq '.[] | "\(.parent.owner.login)/\(.parent.name)"' | sort -u > "$forks"; then
+  echo "fork-hygiene.sh: gh repo list failed for $ME" >&2
+  exit 1
+fi
+if ! gh search prs --author "$ME" --json repository --limit 200 \
+  --jq '.[].repository.nameWithOwner' | sort -u > "$prrepos"; then
+  echo "fork-hygiene.sh: gh search prs failed for author $ME" >&2
+  exit 1
+fi
+comm -23 "$forks" "$prrepos" | tr '\n' ' '; echo

housebroken/scripts/housebroken

@@ -0,0 +1,110 @@
+#!/bin/bash
+# housebroken - one command name for the eight gate scripts.
+#
+# The skill file, and any future adapter for another agent host, must be able
+# to say `housebroken prior-art owner/repo term` without knowing where the
+# scripts live. This dispatcher is that stable name: it finds the scripts
+# directory, maps a short subcommand to a script, and hands over every
+# remaining argument unchanged. Nothing else. No gate logic lives here.
+#
+# Usage:
+#   housebroken <subcommand> [args...]
+#   housebroken help
+#   housebroken version
+#
+# Environment:
+#   HOUSEBROKEN_SCRIPTS  directory holding the eight *.sh gate scripts. When
+#                        unset, the scripts directory next to this file
+#                        (../scripts), then this file's own directory, then
+#                        $HOUSEBROKEN_HOME/scripts are tried in that order.
+#   HOUSEBROKEN_HOME     workshop root, default $HOME/.housebroken. The gate
+#                        scripts read it too; it is passed through untouched.
+#
+# Assumes bash. The scripts themselves assume gh and jq.
+set -u
+
+self_dir=$(cd "$(dirname "$0")" && pwd)
+HOUSEBROKEN_HOME="${HOUSEBROKEN_HOME:-$HOME/.housebroken}"
+
+candidates=()
+if [ -n "${HOUSEBROKEN_SCRIPTS:-}" ]; then
+  candidates+=("$HOUSEBROKEN_SCRIPTS")
+fi
+candidates+=("$self_dir/../scripts" "$self_dir" "$HOUSEBROKEN_HOME/scripts")
+
+scripts_dir=""
+for d in "${candidates[@]}"; do
+  if [ -f "$d/prior-art.sh" ]; then
+    scripts_dir=$(cd "$d" && pwd)
+    break
+  fi
+done
+
+door() {
+  cat <<'EOF'
+usage: housebroken <subcommand> [args...]
+
+  1  policy      read the repository's AI-contribution policy where it lives
+  1  outside     count outside contributors merged in the last 120 days
+  2  prior-art   issues and pull requests on the touched files, rulings quoted
+  6  census      added code lines against added comment lines, per branch
+  9  file        the only way a pull request gets filed
+ 10  verify      the filed pull request is what was meant, and CI settled
+ 10  sweep       every open pull request where the ball is in your court
+ 11  hygiene     delete fork branches after merge or close, list orphan forks
+
+  help           this list
+  version        the installed housebroken version
+
+Step numbers are the steps of "How it works" in the README. Every argument
+after the subcommand is passed to the script unchanged.
+EOF
+}
+
+version() {
+  vpaths=("$self_dir/../VERSION" "$self_dir/VERSION")
+  if [ -n "$scripts_dir" ]; then
+    vpaths=("$scripts_dir/../VERSION" "$scripts_dir/VERSION" "${vpaths[@]}")
+  fi
+  for v in "${vpaths[@]}"; do
+    if [ -f "$v" ]; then
+      head -1 "$v"
+      return 0
+    fi
+  done
+  echo "housebroken (unversioned)"
+}
+
+cmd="${1:-help}"
+case "$cmd" in
+  help|--help|-h) door; exit 0 ;;
+  version|--version) version; exit 0 ;;
+esac
+shift
+
+case "$cmd" in
+  policy)    script=check-ai-policy.sh ;;
+  outside)   script=distinct-outside.sh ;;
+  prior-art) script=prior-art.sh ;;
+  census)    script=comment-census.sh ;;
+  file)      script=file-pr.sh ;;
+  verify)    script=verify-filed-pr.sh ;;
+  sweep)     script=pr-sweep.sh ;;
+  hygiene)   script=fork-hygiene.sh ;;
+  *)
+    echo "housebroken: unknown subcommand: $cmd (try: housebroken help)" >&2
+    exit 2
+    ;;
+esac
+
+if [ -z "$scripts_dir" ] || [ ! -f "$scripts_dir/$script" ]; then
+  {
+    echo "housebroken: cannot find $script. Looked in:"
+    for d in "${candidates[@]}"; do echo "  $d"; done
+    echo "Set HOUSEBROKEN_SCRIPTS to the directory holding the gate scripts."
+  } >&2
+  exit 2
+fi
+
+export HOUSEBROKEN_HOME
+exec bash "$scripts_dir/$script" "$@"