fix(cli): emit init, hold the docs to the template, and pin the scaffold on CI

Three follow-ons measured while building the pin for this card:

- the `plugin` template emitted an `initialize` method. `Plugin` carries an
  index signature, so the excess property was accepted but got no contextual
  type: the scaffold failed its own `strict` type-check with TS7006, and the
  kernel loader refuses a plugin without `init` outright. It emits `init` now,
  and the kernel protocol docs lose the warning that told readers to rename it.
- `test/create-plugin-docs-parity.test.ts` holds the template's emitted file set
  equal to the tree each of the three plugin doc pages prints. Both sides are
  derived, so a template that grows a file reddens every page that does not say
  so. The three pages are declared as cross-package test inputs and mirrored
  into turbo.json; `check-ci-filter-parity`'s rollback pin records them by name.
- `scripts/create-scaffold-smoke.sh` avoids `mapfile`, which does not exist on
  the bash 3.2 floor `check:bash32-floor` holds.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01D47qPfEWVPmhguWgBZCi5N

Author: claude

.changeset/os-create-emits-an-installable-project.md

@@ -17,6 +17,13 @@ project `pnpm install` refuses. The default emission is now standalone:
 - a `pnpm-workspace.yaml` carries the build approvals a fresh `pnpm install`
   needs on pnpm 11.
 
+The `plugin` template also emits `init` where it used to emit `initialize`.
+`initialize` is not part of the `Plugin` contract, so the scaffold did not
+type-check under its own `strict` config (TS7006 on the untyped `context`
+parameter) and `kernel.use()` refused the plugin at load with
+`Plugin init function is required` — a defect the kernel protocol docs
+previously carried a warning about instead of a fix.
+
 The previous monorepo-internal placement is still available for ObjectStack
 platform work as the explicit `--in-repo` flag, which keeps the `workspace:*`
 specs and writes into `packages/plugins/` or `examples/`.

content/docs/protocol/kernel/index.mdx

@@ -390,7 +390,7 @@ plugin-slack-integration/
   tsconfig.json         # self-contained, extends nothing outside the project
   pnpm-workspace.yaml   # the pnpm build approvals a fresh install needs
   src/
-    index.ts            # default-export Plugin object (name, version, initialize, destroy)
+    index.ts            # default-export Plugin object (name, version, init, destroy)
   README.md
 ```
 
@@ -399,12 +399,13 @@ generated them, so `pnpm install && pnpm build` works in the new directory
 without a workspace around it. `os create plugin --in-repo` is the opt-in for
 platform work inside an ObjectStack checkout; it emits `workspace:*` instead.
 
-<Callout type="warn">
-  The scaffold still emits an `initialize` method. The kernel's plugin contract
-  only invokes `init` / `start` / `destroy`, and `init` is **required** — rename
-  `initialize` to `init` in the generated `src/index.ts` or `kernel.use()`
-  rejects the plugin outright with
+<Callout type="info">
+  The scaffold emits `init` and `destroy`. `init` is the **required** phase —
+  `kernel.use()` rejects a plugin without it, with
   `Failed to load plugin: slack-integration - Plugin init function is required`.
+  `start` is optional and is called after every plugin has initialized; add it
+  when your plugin needs the rest of the graph to be up first. See
+  [Plugin Anatomy](/docs/plugins/anatomy#plugin-lifecycle) for the phase model.
 </Callout>
 
 ### Configuration Management

scripts/check-ci-filter-parity.mjs

@@ -676,14 +676,18 @@ export async function selfTest() {
   // is the one of the three no earlier declaration had reached. Its two
   // siblings move nothing here -- `content/**` and `skills/**` were already
   // unique members of this set from #10015 and #12201.
-  // Ten plus one plus two plus one plus one plus one: the rollback now uncovers
-  // sixteen. This pin is judged over the LIVE declaration table on
+  // Plus, since #14824, the three doc pages that card declared for
+  // @objectstack/cli: `os create`'s emitted plugin shape is stated nowhere but
+  // its documentation, so the pin holding the template to it reads all three
+  // pages, each covered only through the `content/**` root #10015 added.
+  // Ten plus one plus two plus one plus one plus one plus three: the rollback
+  // now uncovers nineteen. This pin is judged over the LIVE declaration table on
   // purpose: a declaration added under a root the rollback keeps leaves the
   // count alone, one under a new root moves it and is recorded here by name.
   const preFix = judge(fixtureWorkflow({ core: real.filters?.core, crosspkg: ['scripts/**'] }), CROSS_PACKAGE_TEST_INPUTS);
   assert(
-    new Set(uncoveredGlobs(preFix)).size === 16,
-    `rolling \`crosspkg\` back to its pre-#10015 list uncovers the ten it fixed plus #10848's one plus #10178's two plus #12201's one plus #12924's one plus #14561's one -- got ${new Set(uncoveredGlobs(preFix)).size}`,
+    new Set(uncoveredGlobs(preFix)).size === 19,
+    `rolling \`crosspkg\` back to its pre-#10015 list uncovers the ten it fixed plus #10848's one plus #10178's two plus #12201's one plus #12924's one plus #14561's one plus #14824's three -- got ${new Set(uncoveredGlobs(preFix)).size}`,
   );
   assert(
     uncoveredGlobs(preFix).includes('skills/**'),
@@ -709,6 +713,16 @@ export async function selfTest() {
     uncoveredGlobs(preFix).includes('docs/**'),
     `-- and #14561 added the authored-prose root the discovered teaching-site population reads, by name`,
   );
+  for (const page of [
+    'content/docs/plugins/index.mdx',
+    'content/docs/protocol/kernel/index.mdx',
+    'content/docs/protocol/kernel/plugin-spec.mdx',
+  ]) {
+    assert(
+      uncoveredGlobs(preFix).includes(page),
+      `-- and #14824 added the \`os create plugin\` scaffold-listing page ${page}, by name`,
+    );
+  }
 
   // ── (7) WIRING: the gate and its self-test really run in CI ──────────────
   battery('(7) WIRING: the gate and its self-test really run in CI');
@@ -780,7 +794,7 @@ export async function selfTest() {
       `same-root-different-file case observed failing and then covered by naming the file, a glob covered by ` +
       `\`core\`, one covered only by \`crosspkg\` and one covered by neither judged separately in one table, the ` +
       `stale-entry direction, seven refusals over subjects that could not be read, the checked-in ci.yml, the ` +
-      `pre-#10015 rollback uncovering the ten it fixed plus #10848's one plus #10178's two plus #12201's one plus #12924's one plus #14561's one, ` +
+      `pre-#10015 rollback uncovering the ten it fixed plus #10848's one plus #10178's two plus #12201's one plus #12924's one plus #14561's one plus #14824's three, ` +
       `and the CI wiring read out of lint.yml.`,
   );
   selfTestReachedVerdict = true;

scripts/create-scaffold-smoke.sh

@@ -106,9 +106,15 @@ for KEY in $TEMPLATE_KEYS; do
   log "os create $KEY $NAME  (from $WORK, default location)"
   (cd "$WORK" && node "$CLI_BIN" create "$KEY" "$NAME")
 
-  mapfile -t ENTRIES < <(cd "$WORK" && ls -A)
-  [ "${#ENTRIES[@]}" -eq 1 ] || fail "os create $KEY wrote ${#ENTRIES[@]} top-level entries (${ENTRIES[*]}), expected exactly one project directory"
-  APP_DIR="$WORK/${ENTRIES[0]}"
+  # Counted with `wc -l` and read back as one string rather than into an array:
+  # the shell floor here is bash 3.2 (what macOS ships), where the array
+  # builtins this would otherwise reach for do not exist and an empty array
+  # under `set -u` is itself an error. `pnpm check:bash32-floor` holds the floor.
+  ENTRY_COUNT="$(cd "$WORK" && ls -A | wc -l | tr -d ' ')"
+  if [ "$ENTRY_COUNT" -ne 1 ]; then
+    fail "os create $KEY wrote $ENTRY_COUNT top-level entries ($(cd "$WORK" && ls -A | tr '\n' ' ')), expected exactly one project directory"
+  fi
+  APP_DIR="$WORK/$(cd "$WORK" && ls -A)"
   [ -d "$APP_DIR" ] || fail "os create $KEY did not create a directory (${ENTRIES[0]})"
   [ -f "$APP_DIR/package.json" ] || fail "os create $KEY wrote no package.json into $APP_DIR — the default location is still not the developer's directory"
   echo "  scaffolded → $APP_DIR"