{"id":"paseo-gsd-observer","repo":"drungrin/paseo-gsd-observer","url":"https://github.com/drungrin/paseo-gsd-observer","name":"paseo-gsd-observer","description":"A read-only Paseo plugin for understanding the persisted state of a GSD project. It turns the selected workspace's planning evidence into an accessible board of milestones, phases, and plans—without running GSD, creating worktrees, merging code, or declaring work complete.","categories":["productivity","developer-tools"],"platforms":[],"caveats":[],"images":["https://raw.githubusercontent.com/drungrin/paseo-gsd-observer/66116b167f9403e306c40a8ff1c99a55d9711768/images/board-overview.png","https://raw.githubusercontent.com/drungrin/paseo-gsd-observer/66116b167f9403e306c40a8ff1c99a55d9711768/images/phase-inspector.png","https://raw.githubusercontent.com/drungrin/paseo-gsd-observer/66116b167f9403e306c40a8ff1c99a55d9711768/images/plan-inspector.png"],"health":{"manifestValid":true,"hasReadme":true,"hasLicense":true,"hasTests":true,"hasTypecheckScript":true,"updatedRecently":true},"scannedAt":"2026-09-14T21:52:13.294Z","addedAt":"2026-09-14T20:12:23Z","version":"0.1.0","security":{"status":"passed","blockingFindings":0,"advisoryFindings":0,"scannedAt":"2026-09-14T21:50:51.523Z","commit":"66116b167f9403e306c40a8ff1c99a55d9711768"},"license":"MIT","paseoVersionRequirement":">=0.8.0 <0.9.0","manifest":{"id":"paseo-gsd-observer","requirements":{"paseo":">=0.8.0 <0.9.0"}},"repoMeta":{"stars":0,"defaultBranch":"main","pushedAt":"2026-09-14T20:07:35Z"},"owner":{"login":"drungrin","avatarUrl":"https://avatars.githubusercontent.com/u/13048606?v=4"},"limitationsNotesHtml":"<p>The plugin requires a selected workspace with GSD planning artifacts. It presents only evidence it can safely read; absent, malformed, oversized, or inaccessible artifacts remain explicit warnings or unavailable states.</p>","readmeText":"# Paseo GSD Observer\n\nA read-only Paseo plugin for understanding the persisted state of a GSD project. It turns the selected workspace's planning evidence into an accessible board of milestones, phases, and plans—without running GSD, creating worktrees, merging code, or declaring work complete.\n\n## Phase 1: Safe Evidence Board\n\nThis public release contains the Safe Evidence Board. It lets you:\n\n- Browse the current roadmap and safely observed archived milestones.\n- Read phase status, plan and summary counts, and evidence limitations without treating missing data as success or failure.\n- Select a phase, inspect its plans, and open focused phase or plan details.\n- Refresh evidence explicitly; filesystem changes only mark the view as potentially stale.\n\nThe board is an observer, not a control surface. It contains no terminal, agent, lifecycle, merge, cleanup, or write action.\n\n## Screenshots\n\n### Roadmap board\n\n![Roadmap board showing numerically ordered phases and selected-phase plans](images/board-overview.png)\n\n### Phase details\n\n![Phase details panel with requirements and evidence maturity](images/phase-inspector.png)\n\n### Plan details\n\n![Plan details panel with intent, architecture impact, and guardrails](images/plan-inspector.png)\n\n## Requirements\n\n- Paseo plugin support compatible with the manifest range: `>=0.8.0 <0.9.0`.\n- Node.js and this repository's dependencies installed with `npm ci`.\n- An open, selected workspace containing GSD planning artifacts.\n\n## Install locally\n\nClone this repository, install dependencies, then point Paseo at the absolute checkout path:\n\n```sh\ngit clone <repository-url> paseo-gsd-observer\ncd paseo-gsd-observer\nnpm ci\npaseo plugin install \"$(pwd)\"\n```\n\nOpen a GSD workspace in Paseo and select **Open GSD Board** from its workspace panels. The plugin receives only the host-selected workspace ID; it never accepts a filesystem path from the client.\n\n## Trust and safety boundary\n\nAll filesystem access stays in the Paseo server process. Before reading, the plugin resolves the selected workspace through Paseo, follows real paths, enforces containment under the real `.planning` root, and reads only a fixed allowlist of artifacts.\n\n- Individual artifact reads are capped at **256 KiB**; a snapshot has a **4 MiB** total budget.\n- Symlinks, file replacement, oversized input, malformed content, unknown formats, and paths outside the trusted root become explicit warnings or unavailable evidence.\n- The client receives validated IDs, labels, counts, warnings, and evidence categories—not raw artifact bodies, paths, logs, prompts, arguments, tokens, or secrets.\n- Completion is shown only when allowlisted evidence establishes it. The observer never infers lifecycle state from a process, log, timestamp, or absent file.\n\nThe plugin adds no HTTP service, database, telemetry, terminal, agent action, or write access to GSD artifacts.\n\n## Development\n\n```sh\nnpm ci\nnpm run typecheck\nnpm test -- --run\n```\n\nThe Vitest suite covers RPC boundaries, restricted decoders, path containment, snapshots, watcher behavior, and panel flows using a fake host. It complements, but does not replace, validation in a rendered Paseo host.\n\n## Limitations\n\nThe plugin requires a selected workspace with GSD planning artifacts. It presents only evidence it can safely read; absent, malformed, oversized, or inaccessible artifacts remain explicit warnings or unavailable states.\n\n## Scope\n\nThe public repository intentionally contains only the plugin source, tests, and user-facing documentation. Local GSD planning state, agent instructions, and verification dossiers are excluded.\n"}