@deltafleet/codex-goalkeeper 0.1.0 → 0.1.1

package/docs/ROADMAP.md

@@ -8,7 +8,7 @@ Goalkeeper should stay boring: a short checkpoint, a medium-density context pack
 
 ## MVP
 
-Ship a root-level Codex skill that manages project-local state:
+Ship a Codex skill under `src/codex-goalkeeper/` that manages project-local state:
 
 ```text
 .goalkeeper/
@@ -41,7 +41,7 @@ Keep these scripts central:
 
 Keep this optional and maintainer-oriented:
 
-- `test-goalkeeper-update-checkpoint.mjs`
+- `tests/test-goalkeeper-update-checkpoint.mjs`
 
 ## Non-Goals
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deltafleet/codex-goalkeeper",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "A small Codex skill for keeping long-running goals oriented across compaction, resumes, and handoffs.",
   "license": "MIT",
   "type": "module",
@@ -22,16 +22,14 @@
     "goal"
   ],
   "bin": {
-    "codex-goalkeeper-init": "src/scripts/goalkeeper-init.mjs",
-    "codex-goalkeeper-turn-start": "src/scripts/goalkeeper-turn-start.mjs",
-    "codex-goalkeeper-append-event": "src/scripts/goalkeeper-append-event.mjs",
-    "codex-goalkeeper-update-checkpoint": "src/scripts/goalkeeper-update-checkpoint.mjs",
-    "codex-goalkeeper-doctor": "src/scripts/goalkeeper-doctor.mjs"
+    "codex-goalkeeper-init": "src/codex-goalkeeper/scripts/goalkeeper-init.mjs",
+    "codex-goalkeeper-turn-start": "src/codex-goalkeeper/scripts/goalkeeper-turn-start.mjs",
+    "codex-goalkeeper-append-event": "src/codex-goalkeeper/scripts/goalkeeper-append-event.mjs",
+    "codex-goalkeeper-update-checkpoint": "src/codex-goalkeeper/scripts/goalkeeper-update-checkpoint.mjs",
+    "codex-goalkeeper-doctor": "src/codex-goalkeeper/scripts/goalkeeper-doctor.mjs"
   },
   "files": [
-    "SKILL.md",
-    "agents",
-    "src",
+    "src/codex-goalkeeper",
     "examples",
     "docs",
     "README.md",
@@ -45,8 +43,8 @@
     "CODE_OF_CONDUCT.md"
   ],
   "scripts": {
-    "check:scripts": "find src/scripts -name '*.mjs' -print0 | xargs -0 -n1 node --check",
-    "test": "node src/scripts/test-goalkeeper-update-checkpoint.mjs",
+    "check:scripts": "find src/codex-goalkeeper/scripts tests -name '*.mjs' -print0 | xargs -0 -n1 node --check",
+    "test": "node tests/test-goalkeeper-update-checkpoint.mjs",
     "validate:skill": "npx skills add . --list",
     "validate:examples": "find examples -name '*.jsonl' -print0 | xargs -0 -n1 jq -c . >/dev/null",
     "validate": "npm run check:scripts && npm test && npm run validate:examples && npm run validate:skill"

package/{SKILL.md → src/codex-goalkeeper/SKILL.md}

@@ -45,7 +45,7 @@ Use a project-local `.goalkeeper/` directory. Each long-running goal session get
 
 Use a stable, readable `<goal-session-id>` such as `2026-05-17-codex-goalkeeper-roadmap` or `ads-ops-release-hardening`.
 
-If any core file is missing during long goal work, create it from the templates in `src/templates/`.
+If any core file is missing during long goal work, create it from the templates in `templates/`.
 Use `.goalkeeper/active-session` when a workspace has one active Goalkeeper session and the agent should not have to reconstruct the session id after compaction.
 
 The directory is created inside the active project workspace, not in a global Codex directory. Example:
@@ -57,19 +57,19 @@ The directory is created inside the active project workspace, not in a global Co
 Bundled scripts live in the skill package. When the script is not located inside the target workspace, pass the target workspace explicitly:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --session <goal-session-id>
+node <skill-path>/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --session <goal-session-id>
 ```
 
 If `<workspace>/.goalkeeper/active-session` points to the session id, `--session` may be omitted:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-turn-start.mjs --workspace <workspace>
+node <skill-path>/scripts/goalkeeper-turn-start.mjs --workspace <workspace>
 ```
 
 To create a new session deterministically, run:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-init.mjs --workspace <workspace> --session <goal-session-id> --goal "<active goal>"
+node <skill-path>/scripts/goalkeeper-init.mjs --workspace <workspace> --session <goal-session-id> --goal "<active goal>"
 ```
 
 ## Recovery Rule
@@ -109,7 +109,7 @@ Update Goalkeeper state when any of these change:
 - handoff boundary
 
 Append the event first, then update the session's `checkpoint.md` when the event changes the current working state.
-Use `src/scripts/goalkeeper-update-checkpoint.mjs` when you want a bounded canonical checkpoint instead of manual Markdown edits.
+Use `scripts/goalkeeper-update-checkpoint.mjs` when you want a bounded canonical checkpoint instead of manual Markdown edits.
 
 ## Keep It Short
 
@@ -148,14 +148,14 @@ Read it when checkpoint recovery is not enough. Keep raw transcripts and long co
 
 ## Reference Map
 
-- Read `src/references/workflow.md` for lifecycle rules and examples.
-- Read `src/references/event-schema.md` before adding or validating event records.
-- Read `src/references/guardrail.md` when you need stronger always-on behavior in a target repository.
-- Run `src/scripts/goalkeeper-init.mjs` when a long-running goal needs a new `.goalkeeper/sessions/<goal-session-id>/` directory.
-- Run `src/scripts/goalkeeper-turn-start.mjs --context` when checkpoint recovery needs the larger context pack too.
-- Run `src/scripts/goalkeeper-append-event.mjs` instead of hand-writing JSONL when recording decisions, verification, failures, risks, or handoffs; it can use `.goalkeeper/active-session` when `--session` is omitted.
-- Run `src/scripts/goalkeeper-update-checkpoint.mjs` after appending a meaningful event when checkpoint state should be refreshed in a short canonical shape.
-- Run `src/scripts/goalkeeper-doctor.mjs` after creating or changing Goalkeeper state to verify the target workspace is ready.
+- Read `references/workflow.md` for lifecycle rules and examples.
+- Read `references/event-schema.md` before adding or validating event records.
+- Read `references/guardrail.md` when you need stronger always-on behavior in a target repository.
+- Run `scripts/goalkeeper-init.mjs` when a long-running goal needs a new `.goalkeeper/sessions/<goal-session-id>/` directory.
+- Run `scripts/goalkeeper-turn-start.mjs --context` when checkpoint recovery needs the larger context pack too.
+- Run `scripts/goalkeeper-append-event.mjs` instead of hand-writing JSONL when recording decisions, verification, failures, risks, or handoffs; it can use `.goalkeeper/active-session` when `--session` is omitted.
+- Run `scripts/goalkeeper-update-checkpoint.mjs` after appending a meaningful event when checkpoint state should be refreshed in a short canonical shape.
+- Run `scripts/goalkeeper-doctor.mjs` after creating or changing Goalkeeper state to verify the target workspace is ready.
 
 ## Safety Boundary
 

package/src/{references → codex-goalkeeper/references}/event-schema.md

@@ -11,7 +11,7 @@ Default path:
 Prefer the append helper when available:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-append-event.mjs --workspace <workspace> --session <goal-session-id> --type decision --text "<summary>"
+node <skill-path>/scripts/goalkeeper-append-event.mjs --workspace <workspace> --session <goal-session-id> --type decision --text "<summary>"
 ```
 
 When `<workspace>/.goalkeeper/active-session` points to the current session, `--session` may be omitted. The helper validates existing JSONL schema before writing and reports the appended line number.

package/src/{references → codex-goalkeeper/references}/guardrail.md

@@ -5,7 +5,7 @@ The skill body is not enough to guarantee checkpoint-first behavior after compac
 For high-stakes long-running work, add the AGENTS guardrail template to the target workspace:
 
 ```text
-src/templates/AGENTS.goalkeeper.md
+templates/AGENTS.goalkeeper.md
 ```
 
 Use it in one of these ways:
@@ -29,34 +29,34 @@ For an active Goalkeeper-managed goal:
 3. Use `events.jsonl` only when exact evidence is needed.
 4. Append `recovery_violation` if the agent continued after compaction or resume before reading the checkpoint.
 
-If `src/scripts/goalkeeper-turn-start.mjs` is present, it can be used as the first recovery action:
+If `scripts/goalkeeper-turn-start.mjs` is present, it can be used as the first recovery action:
 
 ```bash
-node src/scripts/goalkeeper-turn-start.mjs --session <goal-session-id>
+node scripts/goalkeeper-turn-start.mjs --session <goal-session-id>
 ```
 
 If `.goalkeeper/active-session` contains the current session id, this shorter form is valid:
 
 ```bash
-node src/scripts/goalkeeper-turn-start.mjs
+node scripts/goalkeeper-turn-start.mjs
 ```
 
 If the helper is being run from an installed skill package rather than from the target repository, pass the target workspace explicitly:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --session <goal-session-id>
+node <skill-path>/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --session <goal-session-id>
 ```
 
 Add `--context` when the medium-density context pack is needed:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --session <goal-session-id> --context
+node <skill-path>/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --session <goal-session-id> --context
 ```
 
 Before starting a high-stakes long run, use the read-only doctor to verify the target workspace has the required state and guardrail:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-doctor.mjs --workspace <workspace> --session <goal-session-id> --strict
+node <skill-path>/scripts/goalkeeper-doctor.mjs --workspace <workspace> --session <goal-session-id> --strict
 ```
 
 Parallel calls are still subject to checkpoint-first ordering. It is acceptable to batch `pwd`, `.goalkeeper/sessions` discovery, and `goalkeeper-turn-start.mjs`; it is not acceptable to include normal project files or verification in that same first post-compact parallel call.

package/src/{references → codex-goalkeeper/references}/workflow.md

@@ -17,7 +17,7 @@ When a user starts a long-running goal:
 Use the init helper when available:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-init.mjs --workspace <workspace> --session <goal-session-id> --goal "<active goal>"
+node <skill-path>/scripts/goalkeeper-init.mjs --workspace <workspace> --session <goal-session-id> --goal "<active goal>"
 ```
 
 Pass repeated `--constraint "<text>"` flags for known durable constraints. The helper refuses to overwrite an existing session unless `--force` is explicitly provided.
@@ -37,7 +37,7 @@ During normal work:
 Use the append helper for routine event writes:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-append-event.mjs --workspace <workspace> --session <goal-session-id> --type verification --text "<summary>"
+node <skill-path>/scripts/goalkeeper-append-event.mjs --workspace <workspace> --session <goal-session-id> --type verification --text "<summary>"
 ```
 
 If `.goalkeeper/active-session` points to the target session, `--session` may be omitted. The helper reports the appended JSONL line number so later checkpoint evidence can cite the event precisely.
@@ -45,7 +45,7 @@ If `.goalkeeper/active-session` points to the target session, `--session` may be
 When the event changes the recoverable working state, refresh the checkpoint in the same working segment:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-update-checkpoint.mjs \
+node <skill-path>/scripts/goalkeeper-update-checkpoint.mjs \
   --workspace <workspace> \
   --session <goal-session-id> \
   --goal "<active goal>" \
@@ -84,19 +84,19 @@ sed -n '1,220p' .goalkeeper/sessions/<goal-session-id>/checkpoint.md
 If the turn-start helper is available, use it instead of manually reading the checkpoint:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --session <goal-session-id>
+node <skill-path>/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --session <goal-session-id>
 ```
 
 If `.goalkeeper/active-session` points to the correct session id, omit `--session`:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-turn-start.mjs --workspace <workspace>
+node <skill-path>/scripts/goalkeeper-turn-start.mjs --workspace <workspace>
 ```
 
 If checkpoint recovery is too thin, include the context pack:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --context
+node <skill-path>/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --context
 ```
 
 ## Resume After Compaction
@@ -133,7 +133,7 @@ If an agent violates this order, append a `recovery_violation` event, read the c
 Before relying on a workspace for a long run, run the read-only doctor:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-doctor.mjs --workspace <workspace> --session <goal-session-id> --strict
+node <skill-path>/scripts/goalkeeper-doctor.mjs --workspace <workspace> --session <goal-session-id> --strict
 ```
 
 ## Goal Session Directory

package/src/{scripts → codex-goalkeeper/scripts}/goalkeeper-append-event.mjs

@@ -22,7 +22,7 @@ const EVENT_TYPES = new Set([
 const STATUSES = new Set(["open", "done", "failed", "blocked", "superseded"]);
 
 const USAGE = `Usage:
-  node src/scripts/goalkeeper-append-event.mjs --type <event-type> --text <summary> [--session <goal-session-id>] [--workspace <path>] [--goal <text>] [--reason <text>] [--evidence <text>] [--status <status>] [--file <path> ...] [--command <cmd> ...] [--ts <iso>] [--json]
+  node scripts/goalkeeper-append-event.mjs --type <event-type> --text <summary> [--session <goal-session-id>] [--workspace <path>] [--goal <text>] [--reason <text>] [--evidence <text>] [--status <status>] [--file <path> ...] [--command <cmd> ...] [--ts <iso>] [--json]
 
 Appends one validated JSONL event to <workspace>/.goalkeeper/sessions/<goal-session-id>/events.jsonl.
 This script writes only to the target events.jsonl file.

package/src/{scripts → codex-goalkeeper/scripts}/goalkeeper-doctor.mjs

@@ -28,7 +28,7 @@ const CONTEXT_PACK_TARGET_BYTES = 30_000;
 const CONTEXT_PACK_MAX_BYTES = 60_000;
 
 const USAGE = `Usage:
-  node src/scripts/goalkeeper-doctor.mjs --session <goal-session-id> [--workspace <path>] [--strict] [--json]
+  node scripts/goalkeeper-doctor.mjs --session <goal-session-id> [--workspace <path>] [--strict] [--json]
 
 Checks whether a target workspace has enough Goalkeeper state and guardrails for long-running Codex goal work.
 This script is read-only.

package/src/{scripts → codex-goalkeeper/scripts}/goalkeeper-init.mjs

@@ -4,7 +4,7 @@ import fs from "node:fs";
 import path from "node:path";
 
 const USAGE = `Usage:
-  node src/scripts/goalkeeper-init.mjs --session <goal-session-id> --goal <text> [--workspace <path>] [--constraint <text> ...] [--no-activate] [--force] [--json]
+  node scripts/goalkeeper-init.mjs --session <goal-session-id> --goal <text> [--workspace <path>] [--constraint <text> ...] [--no-activate] [--force] [--json]
 
 Creates a project-local Goalkeeper session with checkpoint.md, context-pack.md, and events.jsonl.
 This script writes only under <workspace>/.goalkeeper/sessions/<goal-session-id>/.

package/src/{scripts → codex-goalkeeper/scripts}/goalkeeper-turn-start.mjs

@@ -4,7 +4,7 @@ import fs from "node:fs";
 import path from "node:path";
 
 const USAGE = `Usage:
-  node src/scripts/goalkeeper-turn-start.mjs [--session <goal-session-id>] [--workspace <path>] [--events <n>] [--context] [--json]
+  node scripts/goalkeeper-turn-start.mjs [--session <goal-session-id>] [--workspace <path>] [--events <n>] [--context] [--json]
 
 Reads the active Goalkeeper checkpoint at the start of a Codex turn.
 This script reads only .goalkeeper state.

package/src/{scripts → codex-goalkeeper/scripts}/goalkeeper-update-checkpoint.mjs

@@ -7,7 +7,7 @@ const DEFAULT_MAX_BYTES = 8_000;
 const HARD_MAX_BYTES = 16_000;
 
 const USAGE = `Usage:
-  node src/scripts/goalkeeper-update-checkpoint.mjs --goal <text> --next <text> [--session <goal-session-id>] [--workspace <path>] [--done <text>] [--status <text>] [--throughline <text>] [--why <text>] [--constraint <text> ...] [--forbidden <text> ...] [--decision <text> ...] [--attempt <text> ...] [--file <path> ...] [--verified <text> ...] [--unverified <text> ...] [--risk <text> ...] [--evidence <text> ...] [--max-bytes <n>] [--dry-run] [--json]
+  node scripts/goalkeeper-update-checkpoint.mjs --goal <text> --next <text> [--session <goal-session-id>] [--workspace <path>] [--done <text>] [--status <text>] [--throughline <text>] [--why <text>] [--constraint <text> ...] [--forbidden <text> ...] [--decision <text> ...] [--attempt <text> ...] [--file <path> ...] [--verified <text> ...] [--unverified <text> ...] [--risk <text> ...] [--evidence <text> ...] [--max-bytes <n>] [--dry-run] [--json]
 
 Replaces checkpoint.md with a bounded, canonical recovery checkpoint.
 Append the corresponding event first with goalkeeper-append-event.mjs; this script writes only checkpoint.md.

package/src/{templates → codex-goalkeeper/templates}/AGENTS.goalkeeper.md

@@ -10,22 +10,22 @@ At the start of each new assistant turn, before reading normal project files or
 4. If the checkpoint is unclear or too thin, read `.goalkeeper/sessions/<goal-session-id>/context-pack.md`.
 5. If exact evidence is needed, inspect recent `.goalkeeper/sessions/<goal-session-id>/events.jsonl` entries.
 
-If this repository includes `src/scripts/goalkeeper-turn-start.mjs`, you may use:
+If this repository includes `scripts/goalkeeper-turn-start.mjs`, you may use:
 
 ```bash
-node src/scripts/goalkeeper-turn-start.mjs --session <goal-session-id>
+node scripts/goalkeeper-turn-start.mjs --session <goal-session-id>
 ```
 
 If `.goalkeeper/active-session` contains the current session id, this shorter form is also valid:
 
 ```bash
-node src/scripts/goalkeeper-turn-start.mjs
+node scripts/goalkeeper-turn-start.mjs
 ```
 
 If the helper comes from an installed skill path instead of this repository, pass the target workspace:
 
 ```bash
-node <skill-path>/src/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --session <goal-session-id>
+node <skill-path>/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --session <goal-session-id>
 ```
 
 If checkpoint recovery needs the larger context pack too, add `--context`.
@@ -36,9 +36,9 @@ Allowed before reading the checkpoint:
 - listing `.goalkeeper/sessions/`
 - reading `.goalkeeper/active-session`
 - minimal filename inspection needed to choose the active session
-- running `node src/scripts/goalkeeper-turn-start.mjs --session <goal-session-id>`
-- running `node src/scripts/goalkeeper-turn-start.mjs`
-- running `node <skill-path>/src/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --session <goal-session-id>`
+- running `node scripts/goalkeeper-turn-start.mjs --session <goal-session-id>`
+- running `node scripts/goalkeeper-turn-start.mjs`
+- running `node <skill-path>/scripts/goalkeeper-turn-start.mjs --workspace <workspace> --session <goal-session-id>`
 - adding `--context` to the turn-start command when the checkpoint is too thin
 
 Do not read project docs, source files, examples, tests, or make edits before the checkpoint read.

package/src/scripts/test-goalkeeper-update-checkpoint.mjs

@@ -1,236 +0,0 @@
-#!/usr/bin/env node
-
-import { spawnSync } from "node:child_process";
-import fs from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url));
-const REPO_ROOT = path.resolve(SCRIPT_DIR, "..", "..");
-const TMP_ROOT = path.join(REPO_ROOT, ".goalkeeper", "tmp", "checkpoint-update");
-const WORKSPACE = path.join(TMP_ROOT, "workspace");
-const SESSION_ID = "checkpoint-update-poc";
-
-function run(args, options = {}) {
-  const result = spawnSync(process.execPath, args, {
-    cwd: REPO_ROOT,
-    encoding: "utf8",
-    ...options,
-  });
-  return {
-    ...result,
-    stdout: result.stdout.trim(),
-    stderr: result.stderr.trim(),
-  };
-}
-
-function script(name) {
-  return path.join(SCRIPT_DIR, name);
-}
-
-function assert(condition, message) {
-  if (!condition) {
-    throw new Error(message);
-  }
-}
-
-function setupWorkspace() {
-  fs.rmSync(TMP_ROOT, { recursive: true, force: true });
-  fs.mkdirSync(WORKSPACE, { recursive: true });
-  fs.writeFileSync(
-    path.join(WORKSPACE, "AGENTS.md"),
-    [
-      "# Goalkeeper Guardrail",
-      "",
-      "At the start of each new assistant turn, before source work, read .goalkeeper/sessions/<goal-session-id>/checkpoint.md.",
-      "This checkpoint-first rule applies after compaction, compact, start, resume, and before normal project work.",
-      "",
-    ].join("\n"),
-  );
-}
-
-function main() {
-  setupWorkspace();
-
-  const init = run([
-    script("goalkeeper-init.mjs"),
-    "--workspace",
-    WORKSPACE,
-    "--session",
-    SESSION_ID,
-    "--goal",
-    "Validate canonical checkpoint updates.",
-    "--constraint",
-    "Keep checkpoints short.",
-    "--json",
-  ]);
-  assert(init.status === 0, `init failed:\n${init.stderr}\n${init.stdout}`);
-
-  const append = run([
-    script("goalkeeper-append-event.mjs"),
-    "--workspace",
-    WORKSPACE,
-    "--type",
-    "decision",
-    "--text",
-    "Use the update helper to rewrite checkpoint.md canonically.",
-    "--json",
-  ]);
-  assert(append.status === 0, `append failed:\n${append.stderr}\n${append.stdout}`);
-  const parsedAppend = JSON.parse(append.stdout);
-  assert(parsedAppend.sessionId === SESSION_ID, "append helper should recover the session id from active-session");
-  assert(parsedAppend.lineNumber === 4, "append helper should report the appended JSONL line number");
-
-  const contextPackPath = path.join(WORKSPACE, ".goalkeeper", "sessions", SESSION_ID, "context-pack.md");
-  assert(fs.existsSync(contextPackPath), "init should create context-pack.md");
-
-  const turnStartWithContext = run([
-    script("goalkeeper-turn-start.mjs"),
-    "--workspace",
-    WORKSPACE,
-    "--context",
-    "--json",
-  ]);
-  assert(turnStartWithContext.status === 0, `turn-start --context failed:\n${turnStartWithContext.stderr}\n${turnStartWithContext.stdout}`);
-  const parsedTurnStart = JSON.parse(turnStartWithContext.stdout);
-  assert(parsedTurnStart.contextPackPath === contextPackPath, "turn-start should report context-pack.md path");
-  assert(parsedTurnStart.contextPack.includes("Context Pack"), "turn-start --context should include context pack content");
-
-  const noActiveWorkspace = path.join(TMP_ROOT, "no-active-workspace");
-  fs.mkdirSync(path.join(noActiveWorkspace, ".goalkeeper", "sessions", SESSION_ID), { recursive: true });
-  fs.writeFileSync(path.join(noActiveWorkspace, ".goalkeeper", "sessions", SESSION_ID, "events.jsonl"), "");
-  const appendWithoutActive = run([
-    script("goalkeeper-append-event.mjs"),
-    "--workspace",
-    noActiveWorkspace,
-    "--type",
-    "decision",
-    "--text",
-    "This should fail because no active-session pointer exists.",
-    "--json",
-  ]);
-  assert(appendWithoutActive.status === 1, "append without --session should fail when active-session is missing");
-
-  const schemaInvalidWorkspace = path.join(TMP_ROOT, "schema-invalid-workspace");
-  const schemaInvalidSessionDir = path.join(schemaInvalidWorkspace, ".goalkeeper", "sessions", SESSION_ID);
-  fs.mkdirSync(schemaInvalidSessionDir, { recursive: true });
-  fs.writeFileSync(path.join(schemaInvalidWorkspace, ".goalkeeper", "active-session"), `${SESSION_ID}\n`);
-  fs.writeFileSync(
-    path.join(schemaInvalidSessionDir, "events.jsonl"),
-    `${JSON.stringify({ ts: "2026-05-18T00:00:00Z", type: "unknown", text: "bad existing event" })}\n`,
-  );
-  const appendToSchemaInvalid = run([
-    script("goalkeeper-append-event.mjs"),
-    "--workspace",
-    schemaInvalidWorkspace,
-    "--type",
-    "decision",
-    "--text",
-    "This should fail because the existing event log is schema-invalid.",
-    "--json",
-  ]);
-  assert(appendToSchemaInvalid.status === 1, "append should refuse an existing schema-invalid event log");
-
-  const update = run([
-    script("goalkeeper-update-checkpoint.mjs"),
-    "--workspace",
-    WORKSPACE,
-    "--goal",
-    "Validate canonical checkpoint updates.",
-    "--done",
-    "Doctor passes after a helper-rendered checkpoint.",
-    "--status",
-    "Helper under test.",
-    "--throughline",
-    "Use deterministic CLI rendering instead of manual checkpoint Markdown.",
-    "--why",
-    "Long sessions need bounded state that can be safely refreshed after compacted turns.",
-    "--constraint",
-    "Keep checkpoint under the routine-read budget.",
-    "--forbidden",
-    "Do not paste long command output into checkpoint.md.",
-    "--decision",
-    "Render a canonical checkpoint from CLI fields.",
-    "--attempt",
-    "Manual checkpoint edits remain possible but are not the default path.",
-    "--file",
-    "src/scripts/goalkeeper-update-checkpoint.mjs",
-    "--file",
-    "docs/path with spaces.md",
-    "--evidence",
-    "This test rewrites checkpoint.md in a guarded temporary workspace.",
-    "--verified",
-    "Update helper exits 0.",
-    "--unverified",
-    "No real compact boundary is generated by this unit test.",
-    "--risk",
-    "Overlong input should fail before writing.",
-    "--next",
-    "Run strict doctor against the updated temporary workspace.",
-    "--json",
-  ]);
-  assert(update.status === 0, `update failed:\n${update.stderr}\n${update.stdout}`);
-
-  const parsedUpdate = JSON.parse(update.stdout);
-  assert(parsedUpdate.bytes > 0 && parsedUpdate.bytes <= 8_000, "updated checkpoint should fit the default budget");
-
-  const checkpointPath = path.join(WORKSPACE, ".goalkeeper", "sessions", SESSION_ID, "checkpoint.md");
-  const checkpoint = fs.readFileSync(checkpointPath, "utf8");
-  assert(checkpoint.includes("## Active Goal"), "checkpoint should include Active Goal section");
-  assert(checkpoint.includes("## Context Pack"), "checkpoint should include Context Pack section");
-  assert(checkpoint.includes("## Next Action"), "checkpoint should include Next Action section");
-  assert(checkpoint.includes("src/scripts/goalkeeper-update-checkpoint.mjs"), "checkpoint should include important files");
-  assert(checkpoint.includes("docs/path with spaces.md"), "checkpoint should preserve spaces in file paths");
-
-  const beforeOversize = checkpoint;
-  const oversize = run([
-    script("goalkeeper-update-checkpoint.mjs"),
-    "--workspace",
-    WORKSPACE,
-    "--goal",
-    "Validate oversize refusal.",
-    "--decision",
-    "x".repeat(2_000),
-    "--next",
-    "This should not be written.",
-    "--max-bytes",
-    "1000",
-    "--json",
-  ]);
-  assert(oversize.status === 1, "oversize checkpoint update should exit 1");
-  assert(fs.readFileSync(checkpointPath, "utf8") === beforeOversize, "oversize failure should not rewrite checkpoint.md");
-
-  const doctor = run([
-    script("goalkeeper-doctor.mjs"),
-    "--workspace",
-    WORKSPACE,
-    "--session",
-    SESSION_ID,
-    "--strict",
-    "--json",
-  ]);
-  assert(doctor.status === 0, `doctor failed:\n${doctor.stderr}\n${doctor.stdout}`);
-  const parsedDoctor = JSON.parse(doctor.stdout);
-  assert(parsedDoctor.ok === true, "doctor JSON should be ok");
-
-  console.log(
-    JSON.stringify(
-      {
-        ok: true,
-        workspace: WORKSPACE,
-        sessionId: SESSION_ID,
-        checkpointBytes: parsedUpdate.bytes,
-        doctor: parsedDoctor.summary,
-      },
-      null,
-      2,
-    ),
-  );
-}
-
-try {
-  main();
-} catch (error) {
-  console.error(error.message);
-  process.exit(1);
-}