@10et/cli 1.0.0

package/scripts/session/session-sync.sh

@@ -0,0 +1,192 @@
+#!/bin/bash
+# session-sync.sh - Run at session start to ensure all repos are synced
+# This prevents the "where did my files go" problem
+
+set -e
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m' # No Color
+
+echo "========================================"
+echo "JFL Session Sync"
+echo "========================================"
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+GTM_ROOT="$(pwd)"
+
+# Track failures
+FAILURES=0
+
+# Function to sync a repo
+sync_repo() {
+    local repo_path="$1"
+    local repo_name="$2"
+
+    if [ ! -d "$repo_path" ]; then
+        echo -e "${RED}ERROR: $repo_name not found at $repo_path${NC}"
+        FAILURES=$((FAILURES + 1))
+        return 1
+    fi
+
+    echo ""
+    echo "--- Syncing $repo_name ---"
+    cd "$repo_path"
+
+    # Check if it's a git repo
+    if [ ! -d ".git" ]; then
+        echo -e "${YELLOW}WARNING: $repo_name is not a git repo${NC}"
+        return 0
+    fi
+
+    # Get current branch
+    CURRENT_BRANCH=$(git branch --show-current 2>/dev/null || echo "detached")
+
+    # Fetch latest
+    echo "Fetching from origin..."
+    git fetch origin 2>/dev/null || {
+        echo -e "${YELLOW}WARNING: Could not fetch $repo_name (no network?)${NC}"
+        return 0
+    }
+
+    # Check if behind
+    if [ "$CURRENT_BRANCH" != "detached" ] && [ "$CURRENT_BRANCH" != "" ]; then
+        LOCAL=$(git rev-parse HEAD)
+        REMOTE=$(git rev-parse "origin/$CURRENT_BRANCH" 2>/dev/null || echo "")
+
+        if [ -n "$REMOTE" ] && [ "$LOCAL" != "$REMOTE" ]; then
+            BEHIND=$(git rev-list --count HEAD.."origin/$CURRENT_BRANCH" 2>/dev/null || echo "0")
+            AHEAD=$(git rev-list --count "origin/$CURRENT_BRANCH"..HEAD 2>/dev/null || echo "0")
+
+            if [ "$BEHIND" -gt 0 ]; then
+                echo -e "${YELLOW}$repo_name is $BEHIND commits behind origin/$CURRENT_BRANCH${NC}"
+
+                # Check for uncommitted changes
+                if [ -n "$(git status --porcelain)" ]; then
+                    echo -e "${RED}ERROR: $repo_name has uncommitted changes AND is behind${NC}"
+                    echo "Please commit or stash changes, then pull"
+                    FAILURES=$((FAILURES + 1))
+                else
+                    echo "Pulling latest..."
+                    git pull origin "$CURRENT_BRANCH" || {
+                        echo -e "${RED}ERROR: Failed to pull $repo_name${NC}"
+                        FAILURES=$((FAILURES + 1))
+                    }
+                fi
+            fi
+
+            if [ "$AHEAD" -gt 0 ]; then
+                echo -e "${YELLOW}$repo_name is $AHEAD commits ahead (unpushed)${NC}"
+            fi
+        else
+            echo -e "${GREEN}$repo_name is up to date${NC}"
+        fi
+    else
+        echo -e "${YELLOW}$repo_name is in detached HEAD state${NC}"
+        # Try to checkout main and pull
+        echo "Attempting to checkout main and pull..."
+        git checkout main 2>/dev/null && git pull origin main 2>/dev/null || {
+            echo -e "${YELLOW}Could not auto-fix detached HEAD${NC}"
+        }
+    fi
+
+    # Show current state
+    echo "Current: $(git log --oneline -1)"
+}
+
+# Sync main GTM repo
+sync_repo "$GTM_ROOT" "jfl-gtm"
+
+# Check for product - submodule or symlink
+PRODUCT_PATH="$GTM_ROOT/product"
+if [ -d "$PRODUCT_PATH" ] && [ -f "$PRODUCT_PATH/.git" ]; then
+    # It's a submodule (submodules have .git as a FILE, not directory)
+    echo ""
+    echo "--- Updating product submodule ---"
+    cd "$GTM_ROOT"
+
+    # First, init if needed
+    git submodule init product 2>/dev/null || true
+
+    # Update to latest from remote
+    git submodule update --remote product || {
+        echo -e "${YELLOW}WARNING: Could not update product submodule${NC}"
+    }
+
+    # Show what commit we're on
+    cd "$PRODUCT_PATH"
+    echo -e "${GREEN}product submodule at: $(git log --oneline -1)${NC}"
+    cd "$GTM_ROOT"
+
+elif [ -L "$PRODUCT_PATH" ]; then
+    # It's a symlink - resolve and sync the target (legacy support)
+    echo -e "${YELLOW}WARNING: product/ is a symlink, not a submodule${NC}"
+    echo "Consider converting to submodule for better reliability"
+
+    TARGET=$(readlink "$PRODUCT_PATH")
+    if [[ "$TARGET" == ../* ]]; then
+        RESOLVED_TARGET="$GTM_ROOT/$TARGET"
+    else
+        RESOLVED_TARGET="$TARGET"
+    fi
+    RESOLVED_TARGET=$(cd "$RESOLVED_TARGET" 2>/dev/null && pwd)
+
+    if [ -n "$RESOLVED_TARGET" ]; then
+        sync_repo "$RESOLVED_TARGET" "jfl-platform (product symlink target)"
+    else
+        echo -e "${RED}ERROR: Could not resolve product symlink target${NC}"
+        FAILURES=$((FAILURES + 1))
+    fi
+elif [ ! -e "$PRODUCT_PATH" ]; then
+    # Product doesn't exist - try to init submodule
+    echo ""
+    echo "--- Initializing product submodule ---"
+    cd "$GTM_ROOT"
+    git submodule init product 2>/dev/null && git submodule update product || {
+        echo -e "${YELLOW}WARNING: Could not initialize product submodule${NC}"
+    }
+fi
+
+# Sync other submodules
+echo ""
+echo "--- Syncing submodules ---"
+cd "$GTM_ROOT"
+git submodule update --init --recursive 2>/dev/null || true
+
+# Sync registered services (cross-repo safety net)
+# Edits to services from a GTM session aren't auto-committed — this catches them
+if [ -f ".jfl/config.json" ]; then
+    SERVICE_COUNT=$(jq -r '.registered_services | length // 0' .jfl/config.json 2>/dev/null)
+    if [ "$SERVICE_COUNT" -gt 0 ]; then
+        echo ""
+        echo "--- Syncing registered services ---"
+        for i in $(seq 0 $((SERVICE_COUNT - 1))); do
+            SVC_NAME=$(jq -r ".registered_services[$i].name" .jfl/config.json)
+            SVC_PATH=$(jq -r ".registered_services[$i].path" .jfl/config.json)
+            SVC_STATUS=$(jq -r ".registered_services[$i].status // \"active\"" .jfl/config.json)
+
+            if [ "$SVC_STATUS" != "active" ]; then
+                continue
+            fi
+
+            if [ -d "$SVC_PATH" ] && [ -d "$SVC_PATH/.git" ]; then
+                sync_repo "$SVC_PATH" "$SVC_NAME"
+            else
+                echo -e "${YELLOW}WARNING: Service $SVC_NAME not found at $SVC_PATH${NC}"
+            fi
+        done
+    fi
+fi
+
+# Final status
+echo ""
+echo "========================================"
+if [ $FAILURES -gt 0 ]; then
+    echo -e "${RED}Session sync completed with $FAILURES errors${NC}"
+    echo "Please fix the above issues before continuing"
+    exit 1
+else
+    echo -e "${GREEN}Session sync completed successfully${NC}"
+fi
+echo "========================================"

package/scripts/session/test-context-preservation.sh

@@ -0,0 +1,160 @@
+#!/bin/bash
+# test-context-preservation.sh - Verify that context files exist and are in sync
+# Run this to catch "missing files" issues before they become problems
+
+set -e
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+echo "========================================"
+echo "Context Preservation Test"
+echo "========================================"
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+GTM_ROOT="$(pwd)"
+
+FAILURES=0
+WARNINGS=0
+
+# Test 1: Critical GTM knowledge files exist
+echo ""
+echo "Test 1: Critical knowledge files"
+CRITICAL_FILES=(
+    "knowledge/VISION.md"
+    "knowledge/NARRATIVE.md"
+    "knowledge/ROADMAP.md"
+    "knowledge/BRAND_DECISIONS.md"
+    "knowledge/DESIGN_SYSTEM.md"
+    "knowledge/NAMING.md"
+    "knowledge/PRODUCT_SPEC_V2.md"
+)
+
+for file in "${CRITICAL_FILES[@]}"; do
+    if [ -f "$GTM_ROOT/$file" ]; then
+        SIZE=$(wc -c < "$GTM_ROOT/$file")
+        if [ "$SIZE" -lt 100 ]; then
+            echo -e "${YELLOW}  WARNING: $file exists but is very small ($SIZE bytes)${NC}"
+            WARNINGS=$((WARNINGS + 1))
+        else
+            echo -e "${GREEN}  ✓ $file ($SIZE bytes)${NC}"
+        fi
+    else
+        echo -e "${RED}  ✗ $file MISSING${NC}"
+        FAILURES=$((FAILURES + 1))
+    fi
+done
+
+# Test 2: Product platform specs exist
+echo ""
+echo "Test 2: Product platform specs"
+PRODUCT_PATH="$GTM_ROOT/product"
+if [ -L "$PRODUCT_PATH" ]; then
+    PRODUCT_PATH=$(cd "$PRODUCT_PATH" 2>/dev/null && pwd)
+fi
+
+PLATFORM_FILES=(
+    "PLATFORM_SPEC.md"
+    "TEMPLATE_SPEC.md"
+    "CONTEXT_GRAPH_SPEC.md"
+)
+
+for file in "${PLATFORM_FILES[@]}"; do
+    if [ -f "$PRODUCT_PATH/$file" ]; then
+        SIZE=$(wc -c < "$PRODUCT_PATH/$file")
+        echo -e "${GREEN}  ✓ product/$file ($SIZE bytes)${NC}"
+    else
+        echo -e "${RED}  ✗ product/$file MISSING${NC}"
+        FAILURES=$((FAILURES + 1))
+    fi
+done
+
+# Test 3: Git repos are in sync with remotes
+echo ""
+echo "Test 3: Git sync status"
+
+check_git_sync() {
+    local repo_path="$1"
+    local repo_name="$2"
+
+    cd "$repo_path" 2>/dev/null || return 1
+
+    git fetch origin 2>/dev/null || {
+        echo -e "${YELLOW}  WARNING: Could not fetch $repo_name${NC}"
+        WARNINGS=$((WARNINGS + 1))
+        return 0
+    }
+
+    BRANCH=$(git branch --show-current 2>/dev/null || echo "")
+    if [ -z "$BRANCH" ]; then
+        echo -e "${YELLOW}  WARNING: $repo_name is in detached HEAD${NC}"
+        WARNINGS=$((WARNINGS + 1))
+        return 0
+    fi
+
+    LOCAL=$(git rev-parse HEAD)
+    REMOTE=$(git rev-parse "origin/$BRANCH" 2>/dev/null || echo "")
+
+    if [ -z "$REMOTE" ]; then
+        echo -e "${YELLOW}  WARNING: $repo_name has no remote tracking${NC}"
+        WARNINGS=$((WARNINGS + 1))
+        return 0
+    fi
+
+    BEHIND=$(git rev-list --count HEAD.."origin/$BRANCH" 2>/dev/null || echo "0")
+
+    if [ "$BEHIND" -gt 0 ]; then
+        echo -e "${RED}  ✗ $repo_name is $BEHIND commits BEHIND origin${NC}"
+        FAILURES=$((FAILURES + 1))
+    else
+        echo -e "${GREEN}  ✓ $repo_name is in sync${NC}"
+    fi
+}
+
+check_git_sync "$GTM_ROOT" "jfl-gtm"
+
+# Check product target
+PRODUCT_LINK="$GTM_ROOT/product"
+if [ -L "$PRODUCT_LINK" ]; then
+    TARGET=$(readlink "$PRODUCT_LINK")
+    if [[ "$TARGET" == ../* ]]; then
+        RESOLVED="$GTM_ROOT/$TARGET"
+    else
+        RESOLVED="$TARGET"
+    fi
+    RESOLVED=$(cd "$RESOLVED" 2>/dev/null && pwd)
+    if [ -n "$RESOLVED" ]; then
+        check_git_sync "$RESOLVED" "jfl-platform"
+    fi
+fi
+
+# Test 4: No uncommitted critical changes
+echo ""
+echo "Test 4: Uncommitted changes check"
+cd "$GTM_ROOT"
+UNCOMMITTED=$(git status --porcelain knowledge/ 2>/dev/null | wc -l)
+if [ "$UNCOMMITTED" -gt 0 ]; then
+    echo -e "${YELLOW}  WARNING: $UNCOMMITTED uncommitted changes in knowledge/${NC}"
+    git status --porcelain knowledge/ | head -5
+    WARNINGS=$((WARNINGS + 1))
+else
+    echo -e "${GREEN}  ✓ No uncommitted knowledge changes${NC}"
+fi
+
+# Summary
+echo ""
+echo "========================================"
+if [ $FAILURES -gt 0 ]; then
+    echo -e "${RED}FAILED: $FAILURES critical issues found${NC}"
+    echo "Run: ./scripts/session-sync.sh to fix sync issues"
+    exit 1
+elif [ $WARNINGS -gt 0 ]; then
+    echo -e "${YELLOW}PASSED with $WARNINGS warnings${NC}"
+    exit 0
+else
+    echo -e "${GREEN}PASSED: All context preservation checks passed${NC}"
+    exit 0
+fi
+echo "========================================"

package/scripts/session/test-critical-infrastructure.sh

@@ -0,0 +1,293 @@
+#!/usr/bin/env bash
+#
+# Critical Infrastructure Tests - Work Loss Prevention
+#
+# Tests the three pillars that prevent work loss:
+# 1. Signal handling (Ctrl+C, crashes)
+# 2. Unmerged branch detection
+# 3. Crash reconciliation
+#
+# @purpose Rigorous testing of work-loss-prevention infrastructure
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_DIR="$(git rev-parse --path-format=absolute --git-common-dir)"
+REPO_DIR="${REPO_DIR%/.git}"
+WORKTREES_DIR="$REPO_DIR/worktrees"
+
+# Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m'
+
+TESTS_PASSED=0
+TESTS_FAILED=0
+
+# Test helper functions
+pass() {
+    echo -e "${GREEN}✓${NC} $1"
+    TESTS_PASSED=$((TESTS_PASSED + 1))
+}
+
+fail() {
+    echo -e "${RED}✗${NC} $1"
+    TESTS_FAILED=$((TESTS_FAILED + 1))
+}
+
+section() {
+    echo ""
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+    echo -e "${BLUE}$1${NC}"
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+}
+
+cleanup_test_branches() {
+    # Clean up any test branches from previous runs
+    git branch -D test-merged-branch 2>/dev/null || true
+    git branch -D test-unmerged-branch 2>/dev/null || true
+}
+
+# ==============================================================================
+# Test 1: Signal Handling in Auto-Commit
+# ==============================================================================
+
+test_signal_handling() {
+    section "Test 1: Signal Handling (auto-commit graceful shutdown)"
+
+    # Check for signal trap in auto-commit.sh
+    if grep -q "trap graceful_shutdown" "$SCRIPT_DIR/auto-commit.sh"; then
+        pass "Signal trap registered for graceful shutdown"
+    else
+        fail "No signal trap found in auto-commit.sh"
+    fi
+
+    # Check for graceful_shutdown function
+    if grep -q "graceful_shutdown()" "$SCRIPT_DIR/auto-commit.sh"; then
+        pass "graceful_shutdown() function exists"
+    else
+        fail "graceful_shutdown() function missing"
+    fi
+
+    # Check that stop_daemon sends SIGTERM (not hard kill)
+    if grep -A10 "stop_daemon()" "$SCRIPT_DIR/auto-commit.sh" | grep -q "kill -TERM"; then
+        pass "stop_daemon() sends SIGTERM for graceful shutdown"
+    else
+        fail "stop_daemon() uses hard kill instead of graceful shutdown"
+    fi
+
+    # Anti-test: Verify old behavior is removed
+    if grep -A10 "stop_daemon()" "$SCRIPT_DIR/auto-commit.sh" | grep -q "kill \"\$pid\" 2>/dev/null$"; then
+        fail "Old hard-kill behavior still present"
+    else
+        pass "Old hard-kill behavior removed"
+    fi
+}
+
+# ==============================================================================
+# Test 2: Doctor Script - Unmerged Branch Detection
+# ==============================================================================
+
+test_unmerged_detection() {
+    section "Test 2: Unmerged Branch Detection"
+
+    cd "$REPO_DIR"
+
+    # Create test branches
+    cleanup_test_branches
+
+    # Create merged branch (0 commits ahead)
+    git branch test-merged-branch HEAD 2>/dev/null || true
+
+    # Create unmerged branch (1 commit ahead)
+    git checkout -b test-unmerged-branch 2>/dev/null || git checkout test-unmerged-branch
+    echo "test change" >> .jfl/test-file.txt
+    git add .jfl/test-file.txt
+    git commit -m "test: unmerged commit" >/dev/null 2>&1 || true
+    git checkout main 2>/dev/null
+
+    # Run doctor and capture output
+    output=$("$SCRIPT_DIR/jfl-doctor.sh" --verbose 2>&1 || true)
+
+    # Test: Check code has MERGED label (may not appear in output if no merged orphans exist)
+    if grep -q "✓ MERGED (safe to delete):" "$SCRIPT_DIR/jfl-doctor.sh"; then
+        pass "Merged branches labeled as safe in code"
+    else
+        fail "Merged branches not properly labeled in code"
+    fi
+
+    # Test: UNMERGED branch shows up as do NOT delete
+    if echo "$output" | grep -q "⚠️  UNMERGED (do NOT delete):"; then
+        pass "Unmerged branches labeled as dangerous"
+    else
+        fail "Unmerged branches not properly labeled"
+    fi
+
+    # Test: Check code formats commit counts correctly
+    if grep -q "commits NOT in main" "$SCRIPT_DIR/jfl-doctor.sh"; then
+        pass "Unmerged commit count format present in code"
+    else
+        fail "Unmerged commit count format missing"
+    fi
+
+    # Anti-test: Verify unmerged branches are NEVER deleted in --fix mode
+    before_count=$(git branch --list 'test-*' | wc -l | tr -d ' ')
+    "$SCRIPT_DIR/jfl-doctor.sh" --fix >/dev/null 2>&1 || true
+    after_count=$(git branch --list 'test-*' | wc -l | tr -d ' ')
+
+    if git rev-parse test-unmerged-branch >/dev/null 2>&1; then
+        pass "Unmerged branch NOT deleted by --fix mode"
+    else
+        fail "DANGER: --fix mode deleted unmerged branch!"
+    fi
+
+    # Cleanup
+    cleanup_test_branches
+    rm -f .jfl/test-file.txt
+}
+
+# ==============================================================================
+# Test 3: Crash Reconciliation
+# ==============================================================================
+
+test_crash_reconciliation() {
+    section "Test 3: Crash Reconciliation (uncommitted work detection)"
+
+    # Check that session-init scans for uncommitted work
+    if grep -q "Check for uncommitted work in stale sessions" "$SCRIPT_DIR/session-init.sh"; then
+        pass "Crash reconciliation code present in session-init"
+    else
+        fail "No crash reconciliation in session-init"
+    fi
+
+    # Check for the prompt
+    if grep -q "This work needs to be saved before continuing" "$SCRIPT_DIR/session-init.sh"; then
+        pass "User prompt for uncommitted work exists"
+    else
+        fail "No prompt for uncommitted work"
+    fi
+
+    # Check for auto-commit option
+    if grep -q "Auto-commit all and continue" "$SCRIPT_DIR/session-init.sh"; then
+        pass "Auto-commit option available"
+    else
+        fail "No auto-commit option in crash recovery"
+    fi
+
+    # Anti-test: Verify it doesn't just skip uncommitted work
+    if grep -q "git status --porcelain" "$SCRIPT_DIR/session-init.sh"; then
+        pass "Checks for uncommitted changes properly"
+    else
+        fail "Doesn't check for uncommitted changes"
+    fi
+}
+
+# ==============================================================================
+# Test 4: REPO_DIR Resolution (worktree-aware)
+# ==============================================================================
+
+test_repo_dir_resolution() {
+    section "Test 4: REPO_DIR Resolution (works from worktrees)"
+
+    # Check that doctor uses git to find main repo
+    if grep -q "git rev-parse --path-format=absolute --git-common-dir" "$SCRIPT_DIR/jfl-doctor.sh"; then
+        pass "Doctor script uses git to find main repo"
+    else
+        fail "Doctor script doesn't resolve repo correctly"
+    fi
+
+    # Test from main repo
+    cd "$REPO_DIR"
+    detected_repo=$("$SCRIPT_DIR/jfl-doctor.sh" 2>&1 | grep -c "jfl doctor" || echo "0")
+    if [[ "$detected_repo" -gt 0 ]]; then
+        pass "Doctor runs from main repo"
+    else
+        fail "Doctor fails from main repo"
+    fi
+
+    # Test from worktree (if any exist)
+    if [[ -d "$WORKTREES_DIR" ]]; then
+        first_worktree=$(ls "$WORKTREES_DIR" | head -1)
+        if [[ -n "$first_worktree" ]]; then
+            cd "$WORKTREES_DIR/$first_worktree"
+            detected_repo=$("$SCRIPT_DIR/jfl-doctor.sh" 2>&1 | grep -c "jfl doctor" || echo "0")
+            if [[ "$detected_repo" -gt 0 ]]; then
+                pass "Doctor runs from worktree"
+            else
+                fail "Doctor fails from worktree"
+            fi
+        fi
+    fi
+
+    cd "$REPO_DIR"
+}
+
+# ==============================================================================
+# Test 5: Session Sync (pulls main into worktree)
+# ==============================================================================
+
+test_session_sync() {
+    section "Test 5: Session Sync (main branch updates)"
+
+    # Check if session-sync exists
+    if [[ -f "$SCRIPT_DIR/session-sync.sh" ]]; then
+        pass "session-sync.sh exists"
+
+        # Check if it pulls main
+        if grep -q "git pull\|git fetch" "$SCRIPT_DIR/session-sync.sh"; then
+            pass "session-sync pulls from remote"
+        else
+            fail "session-sync doesn't pull from remote"
+        fi
+    else
+        fail "session-sync.sh missing"
+    fi
+
+    # Check if session-init calls session-sync
+    if [[ -f "$SCRIPT_DIR/session-init.sh" ]]; then
+        if grep -q "session-sync" "$SCRIPT_DIR/session-init.sh"; then
+            pass "session-init calls session-sync"
+        else
+            fail "session-init doesn't call session-sync"
+        fi
+    fi
+}
+
+# ==============================================================================
+# Run All Tests
+# ==============================================================================
+
+main() {
+    echo ""
+    echo "╔══════════════════════════════════════════════════════════╗"
+    echo "║  JFL Critical Infrastructure Tests                       ║"
+    echo "║  Work Loss Prevention                                    ║"
+    echo "╚══════════════════════════════════════════════════════════╝"
+
+    test_signal_handling
+    test_unmerged_detection
+    test_crash_reconciliation
+    test_repo_dir_resolution
+    test_session_sync
+
+    # Summary
+    echo ""
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+    echo -e "${BLUE}Test Results${NC}"
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+    echo -e "${GREEN}Passed:${NC} $TESTS_PASSED"
+    if [[ $TESTS_FAILED -gt 0 ]]; then
+        echo -e "${RED}Failed:${NC} $TESTS_FAILED"
+        echo ""
+        echo -e "${RED}CRITICAL INFRASTRUCTURE HAS ISSUES${NC}"
+        exit 1
+    else
+        echo ""
+        echo -e "${GREEN}✓ All critical infrastructure tests passed${NC}"
+        exit 0
+    fi
+}
+
+main "$@"