@ikon85/agent-workflow-kit 0.28.0 → 0.29.0

package/agent-workflow-kit.package.json

@@ -1,5 +1,5 @@
 {
-  "kitVersion": "0.28.0",
+  "kitVersion": "0.29.0",
   "files": [
     {
       "path": ".agents/skills/ask-matt/SKILL.md",
@@ -37,7 +37,7 @@
       "ownerSkill": "board-to-waves",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "1e145fd3da4426aa210169d9a47c5558588ee7317cbeb4ae8d0852c2cd672943",
+      "sha256": "aaa326544b53b43635f1f212ac3bd18a368e9440c41de748c4eccc911bc615bb",
       "mode": 420,
       "origin": "kit"
     },
@@ -817,7 +817,7 @@
       "ownerSkill": "to-issues",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "ed0acff1d04f04b55b9350e360c8249d1e4dbd44fd445909f11703361746e931",
+      "sha256": "2fc271cda4d1b46b82ac32a9e8aa04cf4349bbac0ea31133ee03458d2c6c2b13",
       "mode": 420,
       "origin": "kit"
     },
@@ -847,7 +847,7 @@
       "ownerSkill": "to-prd",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "0c7c556dfae2641a452ba5874e2e977b3e6f33d941b40be93b5009cb1d959ff8",
+      "sha256": "33c5229fcdae4309c2a5c7ea28c60b8708be276960c628f906a6da5a4450cbbb",
       "mode": 420,
       "origin": "kit"
     },
@@ -867,7 +867,7 @@
       "ownerSkill": "to-waves",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "5ac4fd5d26d6ea2327fc50ad4bcc8f3d8c80186afb976410d8c3e8f3c21d896e",
+      "sha256": "8bed0af37f81f0160079c316f26815f220e1eb3e47359a723262f6fe37978ea0",
       "mode": 420,
       "origin": "kit"
     },
@@ -957,7 +957,7 @@
       "ownerSkill": "wrapup",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "69cf375285a8c793e3b55e70047bf114ec12ab529a705127da0730ca42db238e",
+      "sha256": "0b973d9531514f4400e107858ff0070c522d5e542c47123473667ca8337627fd",
       "mode": 420,
       "origin": "kit"
     },
@@ -1199,7 +1199,7 @@
       "ownerSkill": "board-to-waves",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "28c47d10f7508cadf5056c66a62d5891dfb61733a30ae517be24dd766c7996dd",
+      "sha256": "1433f500d64adfd0365c0ec74366075fd54e053846c95aafa5ee6773a5fb2ea4",
       "mode": 420,
       "origin": "kit"
     },
@@ -1269,7 +1269,7 @@
       "ownerSkill": "codex-build",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "5f546bfc08b37a829ccb16faab497a69146a7bc4118578b1fe080356f471a5a2",
+      "sha256": "ddf64d487b8bbfd8cbd0cc5cf8eaff81fb46576f201fe29ad20d48f9e5055e13",
       "mode": 420,
       "origin": "kit"
     },
@@ -1289,7 +1289,7 @@
       "ownerSkill": "codex-review",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "77ee99adbbd69cd21bb431e8aa0457dd8c55f5ab7c0ca4af120c91b77af68de3",
+      "sha256": "053da37cb29396d613383f90b0abf3e6ce6279c22a062921dcf50348ca30fd95",
       "mode": 420,
       "origin": "kit"
     },
@@ -1429,7 +1429,7 @@
       "ownerSkill": "grill-me-codex",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "ab73dd6b147e05837082db5d5ab68ab118e51e59767a717c8b7a0262cfbd07b5",
+      "sha256": "77e0254e203232909898f868bb803aaff15dcc0c62515d9366b1dfda79fa249f",
       "mode": 420,
       "origin": "kit"
     },
@@ -1489,7 +1489,7 @@
       "ownerSkill": "grill-with-docs-codex",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "5c7635bf31a3dc575762793ae80dfe7a26498aedcf7f1ce0513822ea1ebdb100",
+      "sha256": "095d6aa09d88d07178677fb02a7e5c830d22fc60fe517bddfd283856c3dd2264",
       "mode": 420,
       "origin": "kit"
     },
@@ -2119,7 +2119,7 @@
       "ownerSkill": "to-issues",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "29795b85ec699433ec88cfd1b48c8996160eda307974056f19d66226d9541f09",
+      "sha256": "c53523f2b7b4023ea33cb25903d7b7a018041ac135fa11777f64fa4bebfcba11",
       "mode": 420,
       "origin": "kit"
     },
@@ -2149,7 +2149,7 @@
       "ownerSkill": "to-prd",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "38352d6e792114cc6c2352c34af841033ccaf06cf34e9ccab1bc76b51a0ca4a1",
+      "sha256": "9fd7582508fb33cbca2ce945a628b43b502fe942a83d3a16ff495f7c42e59109",
       "mode": 420,
       "origin": "kit"
     },
@@ -2169,7 +2169,7 @@
       "ownerSkill": "to-waves",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "5ac4fd5d26d6ea2327fc50ad4bcc8f3d8c80186afb976410d8c3e8f3c21d896e",
+      "sha256": "8bed0af37f81f0160079c316f26815f220e1eb3e47359a723262f6fe37978ea0",
       "mode": 420,
       "origin": "kit"
     },
@@ -2259,7 +2259,7 @@
       "ownerSkill": "wrapup",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "eece58a858c826f8690a1443bc125e7550e6224ffccf909c06b9796d51e245e7",
+      "sha256": "7b3266caaf53d0eadae2e16617fbf89fa170c50aaa9a916023c37afb41f05a79",
       "mode": 420,
       "origin": "kit"
     },
@@ -2363,7 +2363,7 @@
       "path": "scripts/board-sync.py",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "64444f57456b9032f427650fe110a1f0a03924cfe0ec7293b03bdf0ab9eefa67",
+      "sha256": "d0c4cd8f05c619e5d24f26796eb759467f3ae97b154f12e9526a3017fd5b1eb9",
       "mode": 493,
       "origin": "kit"
     },
@@ -2415,6 +2415,22 @@
       "mode": 420,
       "origin": "kit"
     },
+    {
+      "path": "scripts/codex_proc.py",
+      "kind": "script",
+      "installRole": "consumer",
+      "sha256": "39b00b516b69dd80c34525241991b7a57d37f701d833e92a98d373be86191e05",
+      "mode": 420,
+      "origin": "kit"
+    },
+    {
+      "path": "scripts/codex-exec.sh",
+      "kind": "script",
+      "installRole": "consumer",
+      "sha256": "c5d60648cb09343996efc98614dbd0c78b18672891bf466e5a8c5aba359d5df8",
+      "mode": 493,
+      "origin": "kit"
+    },
     {
       "path": "scripts/execute-ready-check.py",
       "kind": "script",
@@ -2423,6 +2439,14 @@
       "mode": 493,
       "origin": "kit"
     },
+    {
+      "path": "scripts/find-by-marker.py",
+      "kind": "script",
+      "installRole": "consumer",
+      "sha256": "afaec50d8214dc3d89d28fbcb20faa9f997fc58158593618fcc80fb800b367ea",
+      "mode": 493,
+      "origin": "kit"
+    },
     {
       "path": "scripts/issue_deps.py",
       "kind": "script",
@@ -2463,6 +2487,14 @@
       "mode": 493,
       "origin": "kit"
     },
+    {
+      "path": "scripts/marker_lib.py",
+      "kind": "script",
+      "installRole": "consumer",
+      "sha256": "015a22041ee7a66609123c1944e915a869f208789914811674c0c350e07a7b11",
+      "mode": 420,
+      "origin": "kit"
+    },
     {
       "path": "scripts/memory-lifecycle/index.mjs",
       "kind": "script",
@@ -2567,6 +2599,14 @@
       "mode": 420,
       "origin": "kit"
     },
+    {
+      "path": "scripts/render-anchor.py",
+      "kind": "script",
+      "installRole": "consumer",
+      "sha256": "c16ca661662c35761ec1d39f6ae946319a198a0ea39892fcce484288d319fb16",
+      "mode": 493,
+      "origin": "kit"
+    },
     {
       "path": "scripts/safety-guardrails/core.py",
       "kind": "script",

package/docs/research/wave-152-consumer-acceptance.md

@@ -0,0 +1,98 @@
+# Wave 152 consumer acceptance and release checklist
+
+Verified on 2026-07-19 for candidate `52ea49856a03f6e4bb13f24913990769126f81a8`.
+
+## Candidate
+
+- Source repository: `iKon85/agent-workflow-kit`
+- Candidate tarball: `/tmp/wave152-final-candidate.8CRnlP/ikon85-agent-workflow-kit-0.28.0.tgz`
+- Extracted kit: `/tmp/wave152-final-package.QQTOvE/package/dist-kit`
+- Disposable consumer checkout: `/tmp/wave152-testreporter.ZZg8zY/checkout`
+- Consumer base: `iKon85/Testreporter` `origin/main` at
+  `76bcaa91`
+
+The temporary paths record the exact acceptance input. They are not release
+artifacts; a repeat run creates fresh temporary directories and a fresh
+test-only marker identity.
+
+## Repeatable procedure
+
+1. Build the kit from the candidate commit, create an npm tarball, extract it,
+   and run its `kit:build`. Install that built kit into a disposable checkout
+   of the consumer's current `origin/main`.
+2. Run `scripts/codex-exec.sh new` with the `review` profile and `read-only`
+   mode. Capture the opaque run ID, resume it for round 2, verify both rounds
+   return `OK`, then finalize and verify that the run state is deleted.
+3. Run `scripts/codex-exec.sh new` with the `build` profile and
+   `workspace-write` mode. Ask it to create only an allowlisted ignored scratch
+   file containing a fixed sentinel, verify the sentinel, finalize the run,
+   and remove the scratch file.
+4. Create a disposable consumer issue through `scripts/board-sync.py` with a
+   unique `wave-stub-source` marker. Resolve it through
+   `scripts/find-by-marker.py`, verify one exact match, move its board status to
+   Done, close it, and repeat the lookup. The terminal lookup must report the
+   closed/user-decision branch and an all-open scan must find zero disposable
+   issues.
+
+## Acceptance evidence
+
+| Smoke | Evidence | Result |
+|---|---|---|
+| `codex-review` read-only | Real new round returned `OK` with a thread; resume round 2 returned `OK`; finalize deleted run state. | PASS |
+| `codex-build` workspace-write | Created only ignored `_ai_temp/wave152-build-smoke.txt` with `WAVE152_BUILD_SMOKE_OK`; finalize succeeded; scratch file removed. | PASS |
+| Marker roundtrip | Identity `wave-stub-source=awkit-wave152-20260719-acceptance-52ea498` created Testreporter issue #2168 through board-sync; exact lookup was unique; board status became Done; issue was closed; final lookup selected closed/user-decision; `openDisposable=0`. | PASS |
+
+No open disposable issue or scratch file remained after acceptance. The closed
+issue remains deliberate cleanup evidence and is excluded from open productive
+work by the all-state lookup's closed/user-decision result.
+
+## Counted surface census: 31 of 31
+
+The denominator is re-derived from the current skill manifest and the delivery
+surfaces, not from the changed-file list.
+
+| Surface class | Derivation | Covered |
+|---|---|---:|
+| Skill surfaces | Nine records from `.claude/skills/skill-manifest.json`: four Claude-only Codex skills (4), three dual-surface marker callers (6), dual-surface `to-issues` (2), and dual-surface `wrapup` (2). The four Codex skills intentionally have no invented `.agents` mirrors. | 14/14 |
+| Bundle registrations | The five Wave helpers in `HELPER_FILES`, with their declared kind and mode. | 5/5 |
+| Checked manifest entries | The same five helpers in the freshly built and checked `agent-workflow-kit.package.json`. | 5/5 |
+| Test surfaces | Harness scenarios, thin-skill lifecycle, marker library/CLI, anchor renderer/promotion, wrapup contradiction absence, and bundle/manifest/tarball modes. | 6/6 |
+| Shared board callsite | `scripts/board-sync.py` imports and uses the shared marker parser instead of retaining a second grammar. | 1/1 |
+| **Total** | **No unexplained gap.** | **31/31** |
+
+The exact manifest-derived skill set is:
+
+- Claude-only: `codex-review`, `codex-build`, `grill-me-codex`,
+  `grill-with-docs-codex`.
+- Dual-surface: `to-prd`, `to-waves`, `board-to-waves`, `to-issues`, `wrapup`.
+
+The five helper modes are:
+
+- `scripts/marker_lib.py` — `0644`
+- `scripts/find-by-marker.py` — `0755`
+- `scripts/codex-exec.sh` — `0755`
+- `scripts/codex_proc.py` — `0644`
+- `scripts/render-anchor.py` — `0755`
+
+## Release checklist
+
+- [x] K1-K5 integrated into one candidate.
+- [x] K1, K2, and K4 passed independent Standards and Spec reviews.
+- [x] Candidate tarball passed all three real consumer smokes.
+- [x] Disposable consumer issue and scratch file cleaned up; no open disposable
+      issue remains.
+- [x] Bundle, built-manifest, and npm-tarball mode assertions cover all five
+      helpers.
+- [x] Surface census is 31 of 31 with zero unexplained gaps.
+- [x] Prepared the user-authorized single minor bump from 0.28.0 to 0.29.0 and
+      refresh checked release state.
+- [x] `release:prepare -- --version 0.29.0` completed its release guard, full
+      test suite, manifest rebuild, and dry-run npm pack.
+- [x] Re-ran the full suite (354 Node tests and 277 Python tests),
+      `kit:staleness` (`OK`), and `release:guard` (`OK (minor)`).
+- [x] Created and extracted the final `0.29.0` npm tarball (380 package
+      entries); all five helper modes matched both pack metadata and extracted
+      filesystem modes.
+- [ ] After merge, let the trusted release workflow publish and verify
+      `npm run release:status` reports `released` before declaring the release
+      complete.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ikon85/agent-workflow-kit",
-  "version": "0.28.0",
+  "version": "0.29.0",
   "description": "Portable AI-agent workflow skills (plan → execute → land → learn) for Claude Code & Codex — grilling, TDD, diagnosis, two-axis code review, cross-model Codex review, design & domain-modeling, plus a skill router (ask-matt). npx init/update/diff/uninstall.",
   "type": "module",
   "bin": {

package/scripts/board-sync.py

@@ -53,6 +53,7 @@ from node_kind import classify_node, PROGRAM  # noqa: E402
 # "open blocker" predicate, shared with the execute-ready drift check;
 # native dependencies (API) are the truth.
 from issue_deps import open_blocker_numbers, splice_blocked_by_section  # noqa: E402
+from marker_lib import first_marker  # noqa: E402
 
 # --- Board profile (SSOT: docs/agents/board-sync.md `board-sync:profile`) ----
 # No inline board IDs: board_config reads them from the profile so the published
@@ -162,15 +163,10 @@ def _print_dry(args: list[str]) -> None:
 
 
 # --- pure logic (directly unit-tested) ---------------------------------------
-_PROGRAM_CREATE_IDENTITY_RE = re.compile(
-    r"<!--\s*(program-(?:stub|leaf)-source):\s*([^>]+?)\s*-->"
-)
-
-
 def extract_program_create_identity(body: str) -> Optional[str]:
     """Stable to-waves identity carried by a stub/leaf body, if present."""
-    match = _PROGRAM_CREATE_IDENTITY_RE.search(body)
-    return f"{match.group(1)}: {match.group(2).strip()}" if match else None
+    marker = first_marker(body, ("program-stub-source", "program-leaf-source"))
+    return f"{marker[0]}: {marker[1]}" if marker else None
 
 
 def _find_open_issue_by_program_identity(body: str) -> Optional[dict]:

package/scripts/build-kit.test.mjs

@@ -1,6 +1,6 @@
 import { test } from 'node:test';
 import assert from 'node:assert/strict';
-import { access, mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { access, mkdir, mkdtemp, readFile, rm, stat, writeFile } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -8,12 +8,20 @@ import { createHash } from 'node:crypto';
 import { execFileSync } from 'node:child_process';
 import { buildKit } from './build-kit.mjs';
 import { init } from '../src/commands/init.mjs';
+import { HELPER_FILES } from '../src/lib/bundle.mjs';
 import { CONSUMER_MANIFEST_NAME, readManifest } from '../src/lib/manifest.mjs';
 
 const REPO = join(dirname(fileURLToPath(import.meta.url)), '..');
 const PUBLIC_CENSUS_UNIT = JSON.parse(await readFile(
   join(REPO, 'test/fixtures/census-consumers/public-unit.json'), 'utf8',
 )).paths;
+const WAVE_152_HELPERS = [
+  { path: 'scripts/marker_lib.py', kind: 'script', mode: 0o644 },
+  { path: 'scripts/find-by-marker.py', kind: 'script', mode: 0o755 },
+  { path: 'scripts/codex-exec.sh', kind: 'script', mode: 0o755 },
+  { path: 'scripts/codex_proc.py', kind: 'script', mode: 0o644 },
+  { path: 'scripts/render-anchor.py', kind: 'script', mode: 0o755 },
+];
 async function withBuild(fn) {
   const dist = await mkdtemp(join(tmpdir(), 'awkit-build-'));
   try { return await fn(dist, await buildKit({ repoRoot: REPO, distDir: dist })); }
@@ -89,6 +97,24 @@ test('current build contains post-tag public files and repository metadata', asy
   });
 });
 
+test('Wave 152 helpers keep their bundle and built-manifest modes', async () => {
+  assert.deepEqual(
+    WAVE_152_HELPERS.map(({ path }) => HELPER_FILES.find((entry) => entry.path === path)),
+    WAVE_152_HELPERS,
+  );
+  await withBuild(async (dist) => {
+    const manifest = JSON.parse(await readFile(join(dist, 'agent-workflow-kit.package.json'), 'utf8'));
+    const byPath = new Map(manifest.files.map((entry) => [entry.path, entry]));
+    assert.deepEqual(
+      WAVE_152_HELPERS.map(({ path }) => {
+        const { kind, mode, installRole } = byPath.get(path);
+        return { path, kind, mode, installRole };
+      }),
+      WAVE_152_HELPERS.map((entry) => ({ ...entry, installRole: 'consumer' })),
+    );
+  });
+});
+
 test('current build contains the complete dual-surface census consumer unit', async () => {
   await withBuild(async (dist, report) => {
     const manifest = JSON.parse(await readFile(join(dist, 'agent-workflow-kit.package.json'), 'utf8'));
@@ -129,6 +155,11 @@ test('npm pack keeps product files but excludes runtime residue', async () => {
     for (const path of PUBLIC_CENSUS_UNIT) {
       assert.ok(files.includes(path), `pack missing ${path}`);
     }
+    const packedByPath = new Map(JSON.parse(output)[0].files.map((file) => [file.path, file]));
+    assert.deepEqual(
+      WAVE_152_HELPERS.map(({ path, mode }) => ({ path, mode: packedByPath.get(path)?.mode })),
+      WAVE_152_HELPERS.map(({ path, mode }) => ({ path, mode })),
+    );
     assert.ok(files.every((path) => !path.startsWith('.claude/logs/')));
     assert.ok(files.every((path) => !path.includes('__pycache__') && !path.endsWith('.pyc')));
     const pkg = JSON.parse(execFileSync('node', ['-p', 'JSON.stringify(require("./package.json"))'], {
@@ -147,6 +178,16 @@ test('packed scoped artifact keeps the existing npx default-bin inference', asyn
     const packed = JSON.parse(execFileSync('npm', [
       'pack', '--pack-destination', destination, '--json',
     ], { cwd: REPO, encoding: 'utf8' }));
+    const packedByPath = new Map(packed[0].files.map((file) => [file.path, file]));
+    execFileSync('tar', ['-xzf', join(destination, packed[0].filename), '-C', destination]);
+    for (const { path, mode } of WAVE_152_HELPERS) {
+      assert.equal(packedByPath.get(path)?.mode, mode, `packed mode mismatch: ${path}`);
+      assert.equal(
+        (await stat(join(destination, 'package', path))).mode & 0o777,
+        mode,
+        `extracted mode mismatch: ${path}`,
+      );
+    }
     const output = execFileSync('npx', [
       '--yes', '--offline', `./${packed[0].filename}`,
     ], { cwd: destination, encoding: 'utf8' });

package/scripts/codex-exec-scenarios/fake-codex.mjs

@@ -0,0 +1,152 @@
+#!/usr/bin/env node
+import { appendFileSync, writeFileSync } from 'node:fs';
+import { spawn } from 'node:child_process';
+
+const args = process.argv.slice(2);
+const scenario = process.env.FAKE_CODEX_SCENARIO ?? 'ok';
+const pause = Number(process.env.FAKE_CODEX_PAUSE_MS ?? 1_000);
+
+if (args.includes('--version') || args[0] === '--version') {
+  console.log(`codex-cli ${process.env.FAKE_CODEX_VERSION ?? '0.144.6'}`);
+  process.exit(0);
+}
+if (args[0] === 'login' && args[1] === 'status') {
+  if (scenario === 'auth-fail') {
+    console.error('Not logged in');
+    process.exit(1);
+  }
+  console.log('Logged in using fake credentials');
+  process.exit(0);
+}
+if (args.includes('--help')) {
+  const resumeHelp = args[0] === 'exec' && args[1] === 'resume';
+  if (process.env.FAKE_CODEX_MISSING_CAPABILITY === '1'
+      || (resumeHelp && process.env.FAKE_CODEX_RESUME_MISSING_CAPABILITY === '1')) {
+    console.log('Usage: codex exec [PROMPT]');
+  } else if (resumeHelp) {
+    console.log('Usage: codex exec resume [--config key=value] [--json] THREAD PROMPT');
+  } else {
+    console.log('Usage: codex exec [--json] [--sandbox MODE] resume THREAD');
+  }
+  process.exit(0);
+}
+
+if (process.env.FAKE_CODEX_LAUNCH_LOG) {
+  appendFileSync(process.env.FAKE_CODEX_LAUNCH_LOG, `${JSON.stringify(args)}\n`);
+}
+
+if (args[0] === 'exec' && args[1] === 'resume') {
+  const configIndex = args.indexOf('-c');
+  const expected = `sandbox_mode=${process.env.FAKE_EXPECTED_SANDBOX ?? 'read-only'}`;
+  if (args.includes('--sandbox') || configIndex < 0 || args[configIndex + 1] !== expected) {
+    console.error('invalid resume sandbox contract');
+    process.exit(64);
+  }
+}
+
+const emit = (value) => console.log(JSON.stringify(value));
+const thread = process.env.FAKE_CODEX_THREAD ?? 'fake-thread-1';
+const started = () => emit({ type: 'thread.started', thread_id: thread });
+const verdict = () => emit({
+  type: 'item.completed',
+  item: { id: 'fake-item', type: 'agent_message', text: 'fake verdict' },
+});
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+
+switch (scenario) {
+  case 'silent':
+    await sleep(pause);
+    break;
+  case 'startup-byte-silence':
+    process.stderr.write('x');
+    await sleep(pause);
+    break;
+  case 'quiet-post-thread':
+    started();
+    await sleep(pause);
+    verdict();
+    break;
+  case 'malformed':
+    console.log('{definitely-not-json');
+    break;
+  case 'json-null':
+    emit(null);
+    break;
+  case 'json-array':
+    emit([]);
+    break;
+  case 'json-scalar':
+    emit('scalar');
+    break;
+  case 'item-null':
+    emit({ type: 'item.completed', item: null });
+    break;
+  case 'item-array':
+    emit({ type: 'item.completed', item: [] });
+    break;
+  case 'event-type-null':
+    emit({ type: null });
+    break;
+  case 'event-type-array':
+    emit({ type: [] });
+    break;
+  case 'item-type-null':
+    emit({ type: 'item.completed', item: { type: null } });
+    break;
+  case 'item-type-array':
+    emit({ type: 'item.completed', item: { type: [] } });
+    break;
+  case 'thread-non-string':
+    emit({ type: 'thread.started', thread_id: 42 });
+    break;
+  case 'verdict-non-string':
+    started();
+    emit({ type: 'item.completed', item: { type: 'agent_message', text: 42 } });
+    break;
+  case 'missing-thread':
+    verdict();
+    break;
+  case 'missing-verdict':
+    started();
+    emit({ type: 'turn.completed' });
+    break;
+  case 'exec-fail':
+    started();
+    console.error('fake execution failed token=super-secret');
+    process.exit(23);
+    break;
+  case 'split-secret':
+    started();
+    writeFileSync(2, `${'x'.repeat(65_530)}token=super-secret`);
+    process.exit(24);
+    break;
+  case 'signal':
+    process.kill(process.pid, 'SIGTERM');
+    break;
+  case 'group-hang': {
+    started();
+    const child = spawn(process.execPath, ['-e', 'setInterval(() => {}, 1000)']);
+    if (process.env.FAKE_CODEX_CHILD_PID) {
+      writeFileSync(process.env.FAKE_CODEX_CHILD_PID, String(child.pid));
+    }
+    await sleep(pause);
+    break;
+  }
+  case 'orphan-group': {
+    started();
+    const child = spawn(process.execPath, ['-e', 'setInterval(() => {}, 1000)'], { stdio: 'inherit' });
+    if (process.env.FAKE_CODEX_CHILD_PID) {
+      writeFileSync(process.env.FAKE_CODEX_CHILD_PID, String(child.pid));
+    }
+    child.unref();
+    break;
+  }
+  case 'pipe-burst':
+    process.stderr.write('x'.repeat(2 * 1024 * 1024));
+    started();
+    verdict();
+    break;
+  default:
+    started();
+    verdict();
+}