@chrono-meta/fh-gate 1.4.74 → 1.4.76

package/scripts/test_session_close_lanes.sh

@@ -0,0 +1,99 @@
+#!/usr/bin/env bash
+# test_session_close_lanes.sh — known-pair anchor for session_close_check.sh ② (harvest-loop
+# obligation) and ⑤ (card-last invariant).
+#
+# WHY (2026-07-28): ② used to be an UNSATISFIABLE warning — it fired whenever an FH asset was
+# touched today and the script had no way to observe whether harvest-loop ran, so no session could
+# ever discharge it. A line that fires on every healthy close is noise, and noise trains the runner
+# to skim past the ❌ lines that matter. The repair gave it a mechanical discharge (a harvest-loop
+# decision recorded in TODAY's fh_completed file). This file is that repair's regression anchor:
+# the fix is only real if the ⚠️ still fires when NOTHING is recorded, and stops firing when it is.
+#
+# Lanes (each is a decision the gate must get right, not a smoke test):
+#   ②-N   FH asset touched today, no harvest-loop line anywhere  → ⚠️  MUST fire
+#   ②-P1  same, plus "harvest-loop 실행 완료"                     → ✅  must NOT fire
+#   ②-P2  same, plus an explicit SKIP note                        → ✅  must NOT fire
+#         (CLAUDE.md ② accepts "harvest-loop (or an explicit skip note)" — a recorded skip is
+#          a discharged obligation, not an evaded one)
+#   ②-C   no FH asset touched today                               → neither line appears at all
+#         (over-firing is a defect in its own right — the whole reason this repair exists)
+#   ⑤-N   a close artifact newer than the card                    → ❌ card-last MUST fire (exit 1)
+#   ⑤-P   card is the newest artifact                             → ✅ card-last holds
+#
+# Exit 0 = 7/7 lanes calibrated · exit 1 = the gate's instrument is wrong (do not trust its verdict)
+
+set -uo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+CHECK="$SCRIPT_DIR/session_close_check.sh"
+TODAY=$(date +%Y-%m-%d)
+FAILED=0
+
+if [ ! -f "$CHECK" ]; then
+  echo "FAIL  session-close lanes: subject $CHECK missing"
+  exit 1
+fi
+
+# Builds a throwaway repo whose HEAD commit touches (or does not touch) an FH asset path.
+_fixture() {  # $1=touch_fh_asset(0/1)  $2=completed-file body (empty = no file)
+  local touch_fh="$1" body="$2" T
+  T=$(mktemp -d)
+  ( cd "$T" \
+    && git init -q . \
+    && git config user.email anchor@local && git config user.name anchor \
+    && if [ "$touch_fh" = 1 ]; then echo x > CLAUDE.md; else echo x > unrelated.txt; fi \
+    && git add -A && git commit -qm "fixture" ) >/dev/null 2>&1
+  mkdir -p "$T/tracks/_meta"
+  [ -n "$body" ] && printf '%s\n' "$body" > "$T/tracks/_meta/fh_completed_${TODAY}.md"
+  printf '# card\n' > "$T/tracks/_meta/reference_next_session_starter.md"
+  printf '%s' "$T"
+}
+
+_lane() {  # $1=name  $2=grep-pattern  $3=expect(0/1)  $4=fixture dir
+  local name="$1" pat="$2" expect="$3" T="$4" out hit
+  out=$(bash "$CHECK" "$T" 2>/dev/null)
+  hit=0
+  printf '%s\n' "$out" | grep -q "$pat" && hit=1
+  rm -rf "$T"
+  if [ "$hit" = "$expect" ]; then
+    echo "✅ $name (hit=$hit, expected=$expect)"
+  else
+    echo "❌ $name — hit=$hit, expected=$expect"
+    printf '%s\n' "$out" | sed 's/^/     /'
+    FAILED=1
+  fi
+}
+
+WARN2='⚠️  ② FH assets changed today'
+OK2='✅ ② FH assets changed today'
+
+_lane "②-N  no harvest-loop decision recorded → warns" "$WARN2" 1 "$(_fixture 1 '- 항목 하나')"
+_lane "②-P1 harvest-loop run recorded → silent"        "$WARN2" 0 "$(_fixture 1 '- harvest-loop 실행 완료')"
+_lane "②-P2 explicit skip note → silent"               "$WARN2" 0 "$(_fixture 1 '- harvest-loop: skipped — 3-repo session, deferred')"
+_lane "②-P1 run recorded → prints the ✅ form"          "$OK2"   1 "$(_fixture 1 '- harvest-loop 실행 완료')"
+_lane "②-C  no FH asset touched → no ② line at all"    ' ② '    0 "$(_fixture 0 '- 항목 하나')"
+
+# ⑤ card-last: an artifact newer than the card is the bug class the invariant exists to catch.
+T=$(_fixture 1 '- harvest-loop 실행 완료')
+touch "$T/tracks/_meta/fh_completed_${TODAY}.md"   # make it strictly newer than the card
+if bash "$CHECK" "$T" >/dev/null 2>&1; then
+  echo "❌ ⑤-N  artifact newer than card → expected exit 1, got 0 (card-last not enforced)"
+  FAILED=1
+else
+  echo "✅ ⑤-N  artifact newer than card → exit 1 (card-last enforced)"
+fi
+touch "$T/tracks/_meta/reference_next_session_starter.md"   # card becomes newest
+if bash "$CHECK" "$T" >/dev/null 2>&1; then
+  echo "✅ ⑤-P  card newest → exit 0"
+else
+  echo "❌ ⑤-P  card newest → expected exit 0, got 1 (over-blocking: trains --no-verify)"
+  bash "$CHECK" "$T" 2>&1 | sed 's/^/     /'
+  FAILED=1
+fi
+rm -rf "$T"
+
+if [ "$FAILED" -ne 0 ]; then
+  echo "SESSION-CLOSE LANES: FAIL — the gate's instrument is miscalibrated"
+  exit 1
+fi
+echo "SESSION-CLOSE LANES: PASS (7/7)"
+exit 0

package/templates/degrade_direction_scan.sh

@@ -150,9 +150,24 @@ for f in "${FILES[@]}"; do
     # S5 — the pipefail-fallback disarm: `... | grep -c ... || echo 0` appends a SECOND line under
     #   `set -o pipefail`, so the later `-gt` integer test becomes a bash error (= false) and the guard
     #   passes silently, with the error going only to stderr. Measured class, 2026-07-26.
+    #
+    # NARROWED 2026-07-28 after hand-verifying all 9 hits this repo produced: 9/9 were false
+    # positives, i.e. the probe was pure noise for its own class, and 100% FP trains dismissal of
+    # the one hit that will matter. Two distinct causes, both mechanically reproduced:
+    #   (a) `a || b || echo 0` was read as a pipeline — the old regex could anchor its `\|` on the
+    #       SECOND bar of the first `||`. No pipe exists, so no second line can ever be produced.
+    #       (Every `_mtime() { stat -c %Y … || stat -f %m … || echo 0; }` in the tree was flagged.)
+    #   (b) a real pipeline whose failing stage emits NOTHING (`… | jq -r … || echo 0`) — the
+    #       fallback then supplies the only line, which is exactly the intended behavior.
+    # The disarm needs BOTH a real pipe AND a final stage that emits regardless of upstream failure
+    # — a counter (`grep -c`, `wc`). That is the measured shape: `find … | grep -c . || echo 0`
+    # yields "9\n0" and the `-gt` guard goes silent. Verified as a known pair (both directions) in
+    # scripts/test_degrade_scan_shell_probes.sh; narrowing without that anchor would just trade a
+    # noisy probe for a blind one.
     while IFS= read -r m; do
-      emit "$f" "${m%%:*}" "S5:pipefail-fallback(sh)" "\`|| echo 0\` fallback on a pipeline — under \`set -o pipefail\` this yields a multi-line value whose integer comparison errors out and silently passes the guard; split the pipeline and sanitize to an integer"
-    done < <(grep -nE '\|[^|]+\|\|[[:space:]]*echo[[:space:]]+[\"'"'"']?0' "$f" 2>/dev/null \
+      emit "$f" "${m%%:*}" "S5:pipefail-fallback(sh)" "\`|| echo 0\` fallback on a pipeline ending in a counter (grep -c/wc) — that stage emits even when an upstream stage fails, so under \`set -o pipefail\` the value gains a SECOND line, the integer comparison errors out, and the guard passes silently; split the pipeline and sanitize to an integer"
+    done < <(grep -nE '[^|]\|[[:space:]]*([a-z]+[[:space:]]+)*(grep[^|]*-c|wc)[^|]*\|\|[[:space:]]*echo[[:space:]]+[\"'"'"']?0' "$f" 2>/dev/null \
+             | grep -vE '^[0-9]+:[[:space:]]*#' \
              | grep -vE '#[[:space:]]*noqa[:[:space:]]*degrade')
   fi
 

package/plugins/fh-meta/skills/context-bridge-dispatch/SKILL.md

@@ -1,32 +0,0 @@
----
-name: context-bridge-dispatch
-description: >-
-  DEPRECATED — merged into agent-composer Step 3-a (2026-06-02).
-  Context Card injection (N≤2 standard / N≥3 Registry mode) + coordination-overhead budget + Focus Mode
-  are now part of agent-composer Step 3. Invoke /agent-composer for parallel dispatch.
-user-invocable: false
-allowed-tools: []
-model: sonnet
-deprecated: true
-deprecated_reason: absorbed into agent-composer Step 3-a
-deprecated_date: 2026-06-02
-successor: agent-composer
----
-
-# context-bridge-dispatch — DEPRECATED
-
-> **Merged into `agent-composer` Step 3-a (2026-06-02).**
-> Context Card injection, Registry mode, coordination-overhead budget, and Focus Mode are now part of agent-composer Step 3.
-> Use `/agent-composer` for all parallel dispatch with context injection.
-
-## Content preserved at
-
-`plugins/fh-meta/skills/agent-composer/SKILL.md §Step 3-a` — the live successor.
-
-> The original pre-merge content is preserved in git history (this stub's earlier revisions); the
-> shipped `SKILL_detail.md` archive was removed in the curator shrink (2026-06-16) as redundant with
-> git history. No live content lost — the functional content lives in agent-composer Step 3-a.
-
-## Done When
-
-Deprecated — no active execution path. Done When: skill is never directly invoked; all dispatch routes through `/agent-composer` Step 3-a (the successor). This entry satisfies the harness-doctor L2 M-tier requirement for missing Done When (CLAUDE.md §New Skill Creation Pre-Commit Gate).

package/plugins/fh-meta/skills/self-marketing-lint/SKILL.md

@@ -1,30 +0,0 @@
----
-name: self-marketing-lint
-description: >-
-  DEPRECATED — merged into harness-doctor --lint mode (2026-06-02).
-  Language pattern detection (self-marketing, cushion words, version labels) is now Step 3-L of harness-doctor.
-  Use /harness-doctor --lint instead.
-user-invocable: false
-allowed-tools: []
-model: sonnet
-deprecated: true
-deprecated_reason: absorbed into harness-doctor Step 3-L (--lint mode)
-deprecated_date: 2026-06-02
-successor: harness-doctor
----
-
-# self-marketing-lint — DEPRECATED
-
-This skill was absorbed into **harness-doctor** on 2026-06-02. Its self-marketing /
-cushion-word / version-brag detection patterns now live in **harness-doctor Step 3-L
-(`--lint` mode)**, which carries the canonical baseline.
-
-**Use instead:**
-
-```
-/harness-doctor --lint
-```
-
-Triggers that previously reached this skill (`check FH files`, `remove marketing
-language`, `description diet`) now route to harness-doctor Step 3-L. This stub remains
-only so old references resolve.