@ikon85/agent-workflow-kit 0.36.4 → 0.37.0

package/agent-workflow-kit.package.json

@@ -1,5 +1,5 @@
 {
-  "kitVersion": "0.36.4",
+  "kitVersion": "0.37.0",
   "files": [
     {
       "path": ".agents/skills/ask-matt/SKILL.md",
@@ -447,7 +447,7 @@
       "ownerSkill": "orchestrate-wave",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "36570dfccd6dcfa41774e56fd8e31c794a31da72a609753291cf29f87d2636d6",
+      "sha256": "b64529b6449a99a013a97be21826a3ced210ec03458dfd980d3a5e0c257e5238",
       "mode": 420,
       "origin": "kit"
     },
@@ -667,7 +667,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "4ced75934cb409903344f196253e99c1166d7c8705d92c477bfeda92f8a9cadf",
+      "sha256": "78f24c6f32bb4b3dd65293c2121b726fbf495f95d884d0527a32b6f1cfae52f5",
       "mode": 420,
       "origin": "kit"
     },
@@ -687,7 +687,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "697ef6f6cdb749bf0646b2add95d4d3246df39c48ca6d9ade063a775690ce462",
+      "sha256": "6021b95b7ef2f070b7968d3d5c87f72749b0418f22441f0c7b6e2a339c859664",
       "mode": 420,
       "origin": "kit"
     },
@@ -757,7 +757,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "5e0914874f0b9f940205fbcfcfbba87d0c2df8f31db104d2c5328a0d20c80616",
+      "sha256": "a124d7a9f96471ac93202c8fa78b76f98f8396a12a786b921ed704320eb63c4e",
       "mode": 420,
       "origin": "kit"
     },
@@ -997,7 +997,7 @@
       "ownerSkill": "wrapup",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "51fcbabb90f3b04c46079ed9fb491592d0dbad1e1069723e6054376415127fa0",
+      "sha256": "7e50b98441747d370b1feefae6ee5e63b859d2243b64f72024534a71b1d64482",
       "mode": 420,
       "origin": "kit"
     },
@@ -1143,7 +1143,7 @@
       "path": ".claude/hooks/migration-snapshot-reminder.py",
       "kind": "hook",
       "installRole": "consumer",
-      "sha256": "693227fae1aa3e782ed5b61a9e8c3fc8c1880a617efd14cb86ca7f38d9a8f204",
+      "sha256": "0cf691143fc4dbac210f45be35e037686adf678f6f521cfd80d9100bcfbb7e02",
       "mode": 493,
       "origin": "kit"
     },
@@ -1769,7 +1769,7 @@
       "ownerSkill": "orchestrate-wave",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "672d251912886ac4e44f2a60fd3a35ee82c44e86bef4c19ae40d506eb1cf1427",
+      "sha256": "b64529b6449a99a013a97be21826a3ced210ec03458dfd980d3a5e0c257e5238",
       "mode": 420,
       "origin": "kit"
     },
@@ -2009,7 +2009,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "4ced75934cb409903344f196253e99c1166d7c8705d92c477bfeda92f8a9cadf",
+      "sha256": "78f24c6f32bb4b3dd65293c2121b726fbf495f95d884d0527a32b6f1cfae52f5",
       "mode": 420,
       "origin": "kit"
     },
@@ -2029,7 +2029,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "697ef6f6cdb749bf0646b2add95d4d3246df39c48ca6d9ade063a775690ce462",
+      "sha256": "6021b95b7ef2f070b7968d3d5c87f72749b0418f22441f0c7b6e2a339c859664",
       "mode": 420,
       "origin": "kit"
     },
@@ -2099,7 +2099,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "5e0914874f0b9f940205fbcfcfbba87d0c2df8f31db104d2c5328a0d20c80616",
+      "sha256": "a124d7a9f96471ac93202c8fa78b76f98f8396a12a786b921ed704320eb63c4e",
       "mode": 420,
       "origin": "kit"
     },
@@ -2107,7 +2107,7 @@
       "path": ".claude/skills/skill-manifest.json",
       "kind": "doc",
       "installRole": "consumer",
-      "sha256": "290cc3e847a10cb10b4ecb17cf0d45be0f60f95e96b7a70417b3e8da0a32e23c",
+      "sha256": "d2f918149db5d75cc389279afc93516d7c12aca790ddb49de23b198d055c8377",
       "mode": 420,
       "origin": "kit"
     },
@@ -2347,7 +2347,7 @@
       "ownerSkill": "wrapup",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "33b1de1f10d6ca94b89057d8b1f1afe06ae89209991ea3b6d811a8fb61f910b6",
+      "sha256": "7e50b98441747d370b1feefae6ee5e63b859d2243b64f72024534a71b1d64482",
       "mode": 420,
       "origin": "kit"
     },
@@ -2427,7 +2427,7 @@
       "path": "scripts/anchor_table.py",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "204f2cfce8e641721656e745aa5b9bb664be5fc37667dcd8bc6528b8209aaec3",
+      "sha256": "b8bd0e654137a1e7d309f431ab6e7f76e8049c6a3206730323ae7cc90ebc06e8",
       "mode": 420,
       "origin": "kit"
     },
@@ -2667,7 +2667,7 @@
       "path": "scripts/project-skill-extension.mjs",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "12b7c381774a3db6c0d99ec855337a928b70bbe612012bb06f546afb397efc87",
+      "sha256": "9b038bfef135ba2f8487ced43b863631ddbcb3772700a87b6208f0e95b5213e9",
       "mode": 493,
       "origin": "kit"
     },
@@ -2675,7 +2675,7 @@
       "path": "scripts/readiness.mjs",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "26514c49316aa29fdeeb74fca0655cd7aa801f37e3c81cbd2551bb158138ebe8",
+      "sha256": "385854b0a1d8f7915c59cc4f35a3ee6774c4d4ac631a96357abe11cb81be3021",
       "mode": 493,
       "origin": "kit"
     },
@@ -2699,7 +2699,7 @@
       "path": "scripts/release-state.mjs",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "fd9f7f86e26ab3faba819e0c46e5e87c2dd3a84dc9a6111b4eceb4ebe6a3a344",
+      "sha256": "8e3f640aee36bf83ae4b49e449dd98eac6b747b323909ea947d4829345ccb743",
       "mode": 420,
       "origin": "kit"
     },
@@ -2771,7 +2771,7 @@
       "path": "scripts/workflow-advisories/core.py",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "dc47bc20ed1107d230f45ff7158e4fd81d6473be515e03cbd52274f3e87d840d",
+      "sha256": "75b8d8b781344c54edf9f83c6976a999c10ceea6904af765c7179161e82d3bd6",
       "mode": 420,
       "origin": "kit"
     },
@@ -2787,7 +2787,7 @@
       "path": "scripts/worktree-lifecycle/cleanup.py",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "370af8840732db3b6ba39b4825686f3980f69f612038123bc86b2c68921f02ca",
+      "sha256": "3c1c1113298c7c81b26850df95db8571574a49610cea25b57e208e2fa0a40af9",
       "mode": 493,
       "origin": "kit"
     },
@@ -2795,7 +2795,7 @@
       "path": "scripts/worktree-lifecycle/core.py",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "d54c4d663c234b7d2e607b99f6090b46104c21ba4326ef03bcb65de39d1cce19",
+      "sha256": "d4846481f0e7eaeb8e87324a705f94ca323163e3d368b2d809bb572dfea6cd9b",
       "mode": 420,
       "origin": "kit"
     },
@@ -2803,7 +2803,7 @@
       "path": "scripts/worktree-lifecycle/profile.py",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "993b105efd2329b3a206b0c79399aff1c7840017362745966f9b158b1f165f09",
+      "sha256": "ad98f18aa6a24a08fdcbf271c0a7f14543ebb1a085ff3343966ce18f115781a5",
       "mode": 420,
       "origin": "kit"
     },
@@ -2811,7 +2811,7 @@
       "path": "scripts/worktree-lifecycle/README.md",
       "kind": "doc",
       "installRole": "consumer",
-      "sha256": "5dba0332253c37162ad1b2f1b7bf504a23af85bf297fdaa8920036f610ff754a",
+      "sha256": "567a59845db059fc6385ea200a8f361e1250f857babaef01d9fa15054be0f753",
       "mode": 420,
       "origin": "kit"
     },
@@ -2827,7 +2827,7 @@
       "path": "scripts/wrapup-land.py",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "ee1f567e7be4f7baae222ed3974d39e5efee93edb2a663cacc8e18b567fa837e",
+      "sha256": "0f365204c5fd1b707a19fda0c4b4c4c9395f371adeaa8aa808f47e8d94a54bf6",
       "mode": 493,
       "origin": "kit"
     },
@@ -2883,7 +2883,7 @@
       "path": "src/lib/manifest.mjs",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "f2920f2b25a700be080fbba122a809bf509080673b806aaab2b0c773c8d8267f",
+      "sha256": "9f8b4cc90d710a616efd82dce2389504efb27781ffa769f9617108dcba96cb0e",
       "mode": 420,
       "origin": "kit"
     },
@@ -2899,7 +2899,7 @@
       "path": "src/lib/projectSkillExtension.mjs",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "2d8708b230bd9d34474c613cfffc89bdbd11cc128837cdaeab12fc06acea2b04",
+      "sha256": "63fa51c0aa6a0bf1b7168467c33810ecca95d9f1252a1455cbce122d3d4cf8d2",
       "mode": 420,
       "origin": "kit"
     },
@@ -3091,7 +3091,7 @@
       "path": "src/lib/updateDecisions.mjs",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "d80969d5d8c6b084289dfc4871924fb1835bbec6cf08b859ecd81bb95e6f767b",
+      "sha256": "1df6ce6a281fb559b9c7663905f67ab3a4cdae80b365882a395f7b37b57e1672",
       "mode": 420,
       "origin": "kit"
     },

package/docs/agents/workflow-capabilities.json

@@ -7,6 +7,7 @@
     "branchRegex": "^(?:feat|fix|chore|docs)/(?P<issue>\\d+)-",
     "mainBranches": ["main"],
     "protectedBranches": ["main"],
+    "scratchPatterns": ["PLAN.md", "PLAN-REVIEW-LOG.md"],
     "setupEntry": "python3 scripts/worktree-lifecycle/setup.py",
     "setupSteps": [],
     "riskyCommandPatterns": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ikon85/agent-workflow-kit",
-  "version": "0.36.4",
+  "version": "0.37.0",
   "description": "Portable AI-agent workflow skills (plan → execute → land → learn) for Claude Code & Codex — grilling, TDD, diagnosis, two-axis code review, cross-model Codex review, design & domain-modeling, plus a skill router (ask-matt). npx init/update/diff/uninstall.",
   "type": "module",
   "bin": {

package/scripts/anchor_table.py

@@ -29,7 +29,7 @@ SLICE_TABLE_START = "<!-- slice-table:start -->"
 SLICE_TABLE_END = "<!-- slice-table:end -->"
 
 _SUBISSUE_NUM_RE = re.compile(r"#(\d+)")
-_STATUS_BASE_RE = re.compile(r"^(✅\s*#\d+|🔄|⬜)")
+_STATUS_BASE_RE = re.compile(r"^(✅(?:\s*#\d+)?|🔄|⬜)")
 _STATUS_RANK = {"⬜": 0, "🔄": 1}
 
 
@@ -113,17 +113,23 @@ def first_subissue_num(cell: str) -> Optional[int]:
 
 # --- volatile-cell refresh (board → cell) ------------------------------------
 def status_token_from_board(entry: dict, roles: dict) -> str:
-    """Canonical Status token from board state: ✅ #<PR> (merged) · 🔄 (open PR or
-    an in-flight board status) · ⬜ (otherwise).
-
-    Which status NAMES count as in-flight comes from the profile's role map
-    (`roles["inProgress"]`/`roles["review"]`) — passed in as a plain
-    dict so this module stays pure (no board_config import). Empty roles →
-    board-status names can't be interpreted (⬜), PR signals still work."""
+    """Canonical Status token from board state: ✅ #<PR> (merged) · ✅ (closed
+    issue in the configured done status) · 🔄 (open PR or an in-flight board
+    status) · ⬜ (otherwise).
+
+    Status NAMES come from the profile's role map (`roles["done"]`,
+    `roles["inProgress"]`, `roles["review"]`) — passed in as a plain dict so
+    this module stays pure (no board_config import). Empty roles → board-status
+    names can't be interpreted (⬜), PR signals still work."""
     prs = entry.get("prs") or []
     merged = [p for p in prs if p.get("state") == "MERGED"]
     if merged:
         return f"✅ #{merged[-1]['number']}"
+    done = roles.get("done")
+    if (done is not None
+            and entry.get("state") == "closed"
+            and entry.get("status") == done):
+        return "✅"
     active = {roles.get("inProgress"), roles.get("review")} - {None}
     if [p for p in prs if p.get("state") == "OPEN"] or entry.get("status") in active:
         return "🔄"

package/scripts/project-skill-extension.mjs

@@ -1,7 +1,11 @@
 #!/usr/bin/env node
-import { resolve } from 'node:path';
+import { readFile } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { inspectProjectSkillExtension } from '../src/lib/projectSkillExtension.mjs';
+import { readComposedSkillRegistry } from '../src/lib/skillRegistry.mjs';
+
+const CORE_REGISTRY = '.claude/skills/skill-manifest.json';
 
 function argumentsFor(argv) {
   const args = [...argv];
@@ -23,7 +27,22 @@ function argumentsFor(argv) {
 
 export async function main(argv = process.argv.slice(2)) {
   const options = argumentsFor(argv);
-  return inspectProjectSkillExtension(options);
+  let activation;
+  try {
+    const core = JSON.parse(await readFile(join(options.root, CORE_REGISTRY), 'utf8'));
+    const registry = await readComposedSkillRegistry(options.root, core);
+    const matches = Object.values(registry.readiness?.capabilities ?? {})
+      .map((capability) => capability?.evidence)
+      .filter((evidence) =>
+        evidence?.type === 'project-extension' && evidence.skill === options.skill);
+    if (matches.length > 1) {
+      throw new Error(`multiple Project extension activation policies for ${options.skill}`);
+    }
+    activation = matches[0]?.activation;
+  } catch (error) {
+    if (error.code !== 'ENOENT') throw error;
+  }
+  return inspectProjectSkillExtension({ ...options, activation });
 }
 
 if (process.argv[1] === fileURLToPath(import.meta.url)) {

package/scripts/readiness.mjs

@@ -4,6 +4,7 @@ import { join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { firstLineState } from '../src/lib/sentinel.mjs';
 import { CONSUMER_MANIFEST_NAME, readManifest, writeManifest } from '../src/lib/manifest.mjs';
+import { inspectProjectSkillExtension } from '../src/lib/projectSkillExtension.mjs';
 import { readComposedSkillRegistry } from '../src/lib/skillRegistry.mjs';
 
 const SOURCE_MANIFEST = '.claude/skills/skill-manifest.json';
@@ -87,6 +88,19 @@ async function runbookVerdict(root, evidence) {
   return 'invalid';
 }
 
+async function projectExtensionVerdict(root, evidence) {
+  try {
+    const result = await inspectProjectSkillExtension({
+      root,
+      skill: evidence.skill,
+      activation: evidence.activation,
+    });
+    return { verdict: result.state === 'active' ? 'valid' : 'absent' };
+  } catch (error) {
+    return { verdict: 'invalid', blocking: true, diagnostic: error.message };
+  }
+}
+
 function section(text, heading) {
   if (text === null) return null;
   const lines = text.split('\n');
@@ -148,6 +162,7 @@ async function prodEvidence(root, paths) {
 async function evidenceVerdict(root, evidence) {
   if (evidence.type === 'prod-section') return (await prodEvidence(root, evidence.paths)).verdict;
   if (evidence.type === 'runbook-reference') return runbookVerdict(root, evidence);
+  if (evidence.type === 'project-extension') return projectExtensionVerdict(root, evidence);
   const verdicts = await Promise.all((evidence.paths ?? []).map(async (path) => {
     const text = await readText(root, path);
     if (evidence.type === 'sentinel') return sentinelVerdict(text, evidence.allowLegacy);
@@ -163,9 +178,19 @@ async function evidenceVerdict(root, evidence) {
 export async function evaluateCapability({ root, capability, decision }) {
   const prod = capability.evidence.type === 'prod-section'
     ? await prodEvidence(root, capability.evidence.paths) : null;
-  const evidence = prod?.verdict ?? await evidenceVerdict(root, capability.evidence);
-  const diagnostics = prod?.diagnostics?.length ? { diagnostics: prod.diagnostics } : {};
-  if (evidence === 'invalid') return { state: 'invalid', clearDecision: false, ...diagnostics };
+  const evaluated = prod ?? await evidenceVerdict(root, capability.evidence);
+  const evidence = typeof evaluated === 'string' ? evaluated : evaluated.verdict;
+  const diagnostics = evaluated?.diagnostics?.length
+    ? { diagnostics: evaluated.diagnostics }
+    : (evaluated?.diagnostic ? { diagnostic: evaluated.diagnostic } : {});
+  if (evidence === 'invalid') {
+    return {
+      state: 'invalid',
+      clearDecision: false,
+      ...(evaluated?.blocking ? { blocking: true } : {}),
+      ...diagnostics,
+    };
+  }
   if (evidence === 'valid') return { state: 'ready', clearDecision: Boolean(decision) };
   if (decision === 'pending') return { state: 'pending', clearDecision: false, ...diagnostics };
   if (decision === 'not-applicable' && capability.allowNotApplicable) {
@@ -206,7 +231,10 @@ export async function checkSkill({ root, skill, manifest }) {
     (capabilities[name].state === 'ready' ? activeBlocks : inactiveBlocks).push(block);
   }
   const invalid = Object.values(capabilities).some(({ state }) => state === 'invalid');
-  const verdict = requiredBlocked ? 'blocked' : (inactiveBlocks.length || invalid ? 'degraded' : 'ready');
+  const fatal = Object.values(capabilities).some(({ blocking }) => blocking === true);
+  const verdict = requiredBlocked || fatal
+    ? 'blocked'
+    : (inactiveBlocks.length || invalid ? 'degraded' : 'ready');
   return { contractVersion: manifest.readiness.contractVersion, verdict, capabilities, activeBlocks, inactiveBlocks };
 }
 

package/scripts/release-state.mjs

@@ -8,11 +8,21 @@ import { fileURLToPath } from 'node:url';
 import { assertReleaseParity, releaseIdentityFromTarball } from './release-parity.mjs';
 
 const exec = promisify(execFile);
+export const DEFAULT_VISIBILITY_DELAYS_MS = Object.freeze([
+  1_000,
+  2_000,
+  4_000,
+  8_000,
+  16_000,
+  32_000,
+  64_000,
+  128_000,
+  256_000,
+]);
 const DEFAULT_VISIBILITY = {
-  attempts: 6,
-  initialDelayMs: 1_000,
-  backoffFactor: 2,
+  delaysMs: DEFAULT_VISIBILITY_DELAYS_MS,
   sleep,
+  log: console.log,
 };
 
 const assertMatches = (local, remote, label) => assertReleaseParity({
@@ -37,18 +47,18 @@ export async function inspectRelease(adapter) {
 
 async function awaitVisibility(read, phase, options = {}) {
   const policy = { ...DEFAULT_VISIBILITY, ...options };
-  let delay = policy.initialDelayMs;
-  for (let attempt = 1; attempt <= policy.attempts; attempt += 1) {
+  const attempts = policy.delaysMs.length + 1;
+  for (let attempt = 1; attempt <= attempts; attempt += 1) {
+    policy.log(`${phase.service} visibility: attempt ${attempt}/${attempts}`);
     const visible = await read();
     if (visible) return visible;
-    if (attempt < policy.attempts) {
-      await policy.sleep(delay);
-      delay *= policy.backoffFactor;
+    if (attempt < attempts) {
+      await policy.sleep(policy.delaysMs[attempt - 1]);
     }
   }
   throw new Error(
     `${phase.operation} succeeded but ${phase.subject} was not visible `
-    + `after ${policy.attempts} ${phase.service} read attempts`,
+    + `after ${attempts} ${phase.service} read attempts`,
   );
 }
 

package/scripts/release-state.test.mjs

@@ -7,8 +7,8 @@ import { dirname, join } from 'node:path';
 import { tmpdir } from 'node:os';
 import { fileURLToPath } from 'node:url';
 import {
-  createCommandAdapter, githubReleaseArgs, inspectRelease, isMissingRelease,
-  npmTarballFilename, reconcileRelease,
+  createCommandAdapter, DEFAULT_VISIBILITY_DELAYS_MS, githubReleaseArgs, inspectRelease,
+  isMissingRelease, npmTarballFilename, reconcileRelease,
 } from './release-state.mjs';
 
 const REPO = join(dirname(fileURLToPath(import.meta.url)), '..');
@@ -26,6 +26,7 @@ function adapter({
   githubInvisibleReads = 0,
   publishNpmError,
   createGithubError,
+  npmReadErrorAfterPublish,
 } = {}) {
   const events = [];
   let npmExists = npmPublished;
@@ -38,6 +39,7 @@ function adapter({
     npm: async () => {
       events.push('read npm');
       if (!npmExists) return null;
+      if (npmReadErrorAfterPublish) throw npmReadErrorAfterPublish;
       if (npmReadsUntilVisible > 0) {
         npmReadsUntilVisible -= 1;
         return null;
@@ -66,17 +68,25 @@ function adapter({
   };
 }
 
-function visibilityOptions(attempts, delays = []) {
+function visibilityOptions(attempts, delays = [], progress = []) {
   return {
     visibility: {
-      attempts,
-      initialDelayMs: 10,
-      backoffFactor: 2,
+      delaysMs: Array.from({ length: attempts - 1 }, (_, index) => 10 * (2 ** index)),
       sleep: async (delay) => delays.push(delay),
+      log: (message) => progress.push(message),
     },
   };
 }
 
+test('the default npm visibility window spans at least five minutes', () => {
+  assert.ok(
+    DEFAULT_VISIBILITY_DELAYS_MS.reduce((total, delay) => total + delay, 0) >= 300_000,
+  );
+  assert.deepEqual(DEFAULT_VISIBILITY_DELAYS_MS, [
+    1_000, 2_000, 4_000, 8_000, 16_000, 32_000, 64_000, 128_000, 256_000,
+  ]);
+});
+
 test('a fresh release publishes npm, verifies registry readback, then creates GitHub release', async () => {
   const fixture = adapter();
   assert.deepEqual(await reconcileRelease(fixture), { status: 'released', identity });
@@ -88,8 +98,9 @@ test('a fresh release publishes npm, verifies registry readback, then creates Gi
 test('npm visibility is retried with bounded backoff after a successful publish', async () => {
   const fixture = adapter({ npmInvisibleReads: 2 });
   const delays = [];
+  const progress = [];
   assert.deepEqual(
-    await reconcileRelease(fixture, visibilityOptions(4, delays)),
+    await reconcileRelease(fixture, visibilityOptions(4, delays, progress)),
     { status: 'released', identity },
   );
   assert.deepEqual(fixture.events, [
@@ -98,6 +109,12 @@ test('npm visibility is retried with bounded backoff after a successful publish'
     'create github', 'read github',
   ]);
   assert.deepEqual(delays, [10, 20]);
+  assert.deepEqual(progress, [
+    'npm visibility: attempt 1/4',
+    'npm visibility: attempt 2/4',
+    'npm visibility: attempt 3/4',
+    'GitHub visibility: attempt 1/4',
+  ]);
 });
 
 test('GitHub visibility is retried with bounded backoff after a successful create', async () => {
@@ -116,11 +133,17 @@ test('GitHub visibility is retried with bounded backoff after a successful creat
 test('permanent npm absence fails at the bound with post-publish phase evidence', async () => {
   const fixture = adapter({ npmInvisibleReads: 4 });
   const delays = [];
+  const progress = [];
   await assert.rejects(
-    reconcileRelease(fixture, visibilityOptions(3, delays)),
+    reconcileRelease(fixture, visibilityOptions(3, delays, progress)),
     /npm publish succeeded but package was not visible after 3 npm read attempts/,
   );
   assert.deepEqual(delays, [10, 20]);
+  assert.deepEqual(progress, [
+    'npm visibility: attempt 1/3',
+    'npm visibility: attempt 2/3',
+    'npm visibility: attempt 3/3',
+  ]);
   assert.equal(fixture.events.filter((event) => event === 'read npm').length, 4);
   assert.ok(!fixture.events.includes('create github'));
 });
@@ -158,6 +181,14 @@ test('an npm-published release resumes at GitHub without a second npm publish',
   assert.ok(!fixture.events.includes('publish npm'));
 });
 
+test('a rerun after eventual npm visibility never publishes the version twice', async () => {
+  const fixture = adapter({ npmInvisibleReads: 2 });
+  await reconcileRelease(fixture, visibilityOptions(4));
+  await reconcileRelease(fixture, visibilityOptions(4));
+  assert.equal(fixture.events.filter((event) => event === 'publish npm').length, 1);
+  assert.equal(fixture.events.filter((event) => event === 'create github').length, 1);
+});
+
 test('an already-published release at parity is a read-only no-op', async () => {
   const fixture = adapter({ npmPublished: true, githubReleased: true });
   assert.deepEqual(await reconcileRelease(fixture), { status: 'released', identity });
@@ -256,6 +287,38 @@ test('a mismatching npm package blocks GitHub release creation', async () => {
   assert.ok(!fixture.events.includes('create github'));
 });
 
+test('a post-publish npm mismatch hard-stops without retrying or creating GitHub', async () => {
+  const fixture = adapter({
+    npmIdentity: { ...identity, manifestSha256: 'wrong' },
+  });
+  const delays = [];
+  const progress = [];
+  await assert.rejects(
+    reconcileRelease(fixture, visibilityOptions(4, delays, progress)),
+    /npm manifestSha256 mismatch/,
+  );
+  assert.deepEqual(delays, []);
+  assert.deepEqual(progress, ['npm visibility: attempt 1/4']);
+  assert.equal(fixture.events.filter((event) => event === 'publish npm').length, 1);
+  assert.equal(fixture.events.filter((event) => event === 'read npm').length, 2);
+  assert.ok(!fixture.events.includes('create github'));
+});
+
+test('a post-publish non-missing registry error hard-stops without retrying', async () => {
+  const registryError = new Error('registry authentication failed');
+  const fixture = adapter({ npmReadErrorAfterPublish: registryError });
+  const delays = [];
+  const progress = [];
+  await assert.rejects(
+    reconcileRelease(fixture, visibilityOptions(4, delays, progress)),
+    (error) => error === registryError,
+  );
+  assert.deepEqual(delays, []);
+  assert.deepEqual(progress, ['npm visibility: attempt 1/4']);
+  assert.equal(fixture.events.filter((event) => event === 'publish npm').length, 1);
+  assert.ok(!fixture.events.includes('create github'));
+});
+
 test('release workflow uses supported OIDC trusted publishing without a long-lived npm token', async () => {
   const workflow = await readFile(join(REPO, '.github/workflows/release.yml'), 'utf8');
   assert.match(workflow, /node-version:\s*22\.14/);

package/scripts/test_anchor_table.py

@@ -0,0 +1,69 @@
+#!/usr/bin/env python3
+"""Focused regression tests for pure anchor-table status decisions."""
+
+from __future__ import annotations
+
+import unittest
+
+from scripts.anchor_table import refresh_status_cell, status_token_from_board
+
+
+ROLES = {
+    "inProgress": "In Progress",
+    "review": "In Review",
+    "done": "Done",
+}
+
+
+class AnchorTableStatusTest(unittest.TestCase):
+    def test_closed_done_issue_without_pr_is_done(self):
+        entry = {"state": "closed", "status": "Done", "prs": []}
+
+        self.assertEqual(status_token_from_board(entry, ROLES), "✅")
+
+    def test_open_issue_without_pr_is_never_done(self):
+        cases = (
+            ({"state": "open", "status": "Done", "prs": []}, "⬜"),
+            ({"state": "open", "status": "In Progress", "prs": []}, "🔄"),
+        )
+
+        for entry, expected in cases:
+            with self.subTest(status=entry["status"]):
+                self.assertEqual(status_token_from_board(entry, ROLES), expected)
+
+    def test_merged_pr_keeps_numbered_done_token(self):
+        entry = {
+            "state": "closed",
+            "status": "Done",
+            "prs": [{"state": "MERGED", "number": 203}],
+        }
+
+        self.assertEqual(status_token_from_board(entry, ROLES), "✅ #203")
+
+    def test_refresh_never_regresses_existing_progress(self):
+        open_unstarted = {"state": "open", "status": "To Do", "prs": []}
+
+        self.assertEqual(
+            refresh_status_cell("✅ spike proven", open_unstarted, ROLES),
+            "✅ spike proven",
+        )
+        self.assertEqual(
+            refresh_status_cell("🔄 spike running", open_unstarted, ROLES),
+            "🔄 spike running",
+        )
+        self.assertEqual(
+            refresh_status_cell("✅ #199", open_unstarted, ROLES),
+            "✅ #199",
+        )
+
+    def test_refresh_advances_to_prless_done(self):
+        closed_done = {"state": "closed", "status": "Done", "prs": []}
+
+        self.assertEqual(
+            refresh_status_cell("🔄 spike running", closed_done, ROLES),
+            "✅",
+        )
+
+
+if __name__ == "__main__":
+    unittest.main()