@ikon85/agent-workflow-kit 0.43.0 → 0.44.0

package/docs/research/provider-neutral-agent-routing.md

@@ -1,207 +0,0 @@
-# Provider-neutral agent routing for shared work items
-
-**Researched:** 2026-07-22  
-**Question:** How should shared agent-workflow issues express model-routing intent across Claude Code and OpenAI Codex without embedding short-lived provider model names?
-
-## Recommendation
-
-Persist **task intent, not a model selection**, in shared issues. Use two small,
-provider-neutral fields:
-
-```yaml
-routing-intent: judgment | development | mechanical
-reasoning-intent: deep | balanced | light
-```
-
-The exact vocabulary is a Kit domain decision; the important constraint is that
-the values describe the work and desired trade-off, not Anthropic or OpenAI
-products. A surface-local resolver maps those values at dispatch time:
-
-```text
-shared issue intent
-        |
-        +-- Claude resolver -> current Claude alias/model + session effort
-        |
-        `-- Codex resolver  -> current Codex model + model_reasoning_effort
-```
-
-The default resolution must be `inherit` when no local policy exists or when a
-configured target cannot be proven usable. The orchestrator should report the
-effective resolution at session start, but it should not write that volatile
-result back into the issue.
-
-This separates three ownership layers:
-
-1. **Kit-owned schema and validation:** allowed intent values, inheritance,
-   diagnostics, and dispatch contract.
-2. **User/organization-owned surface policy:** how intent maps to models and
-   effort for that account, budget, provider, and current catalog.
-3. **Project-owned constraints, only when genuinely shared:** for example, a
-   prohibition on a model or a minimum capability required by every
-   collaborator. A project should not carry one maintainer's preferred model
-   mapping.
-
-## Verified platform facts
-
-### Claude Code
-
-Claude Code has Managed, User, Project, and Local scopes. For ordinary scalar
-settings, precedence is Managed, command-line, Local, Project, then User. A
-committed `.claude/settings.json` therefore affects all collaborators and
-overrides their user settings, while `.claude/settings.local.json` is personal
-and repository-specific ([Claude Code settings: scopes and precedence](https://code.claude.com/docs/en/settings#configuration-scopes)).
-
-Claude accepts provider aliases as well as full model IDs. Aliases such as
-`fable` and `sonnet` resolve to current models, while `default` returns to the
-runtime default for the account or organization. Aliases reduce version churn,
-but remain Claude-specific and do not encode a cross-provider task class
-([Claude Code model aliases](https://code.claude.com/docs/en/model-config#model-aliases)).
-
-The main-session model can be changed for a session with `/model` or at launch
-with `--model`; `ANTHROPIC_MODEL` and the persistent `model` setting are also
-supported. Organization restrictions and managed settings can replace or
-reject a requested selection, so a repository cannot assume that a named model
-is usable for every collaborator ([Claude Code model selection](https://code.claude.com/docs/en/model-config#setting-your-model),
-[Claude Code model restrictions](https://code.claude.com/docs/en/model-config#restrict-model-selection)).
-
-Claude subagent definitions support an alias, a full ID, or `inherit`; omission
-means `inherit`. Resolution currently considers
-`CLAUDE_CODE_SUBAGENT_MODEL`, a per-invocation value, subagent frontmatter, and
-finally the main conversation model. Excluded selections fall back to the
-inherited model. Extended-thinking configuration is inherited from the main
-conversation and has no per-subagent setting
-([Claude Code subagent model resolution](https://code.claude.com/docs/en/sub-agents#choose-a-model)).
-
-Claude effort levels are model-dependent. Unsupported levels are reduced to a
-supported level, organization policy can cap them, and some effort choices are
-session-only. Skill and subagent frontmatter can override the inherited session
-effort, subject to higher-precedence environment and organization constraints.
-Therefore a provider-neutral reasoning intent can be resolved on Claude, but a
-shared issue must not claim that one literal effort value has identical
-enforcement everywhere
-([Claude Code effort levels](https://code.claude.com/docs/en/model-config#adjust-effort-level),
-[Claude Code subagent effort](https://code.claude.com/docs/en/sub-agents#supported-frontmatter-fields)).
-
-Anthropic exposes `GET /v1/models`, whose result describes models available to
-that API credential ([Anthropic Models API](https://platform.claude.com/docs/en/api/models/list)).
-That is not a universal Claude Code discovery contract: Claude Code may run
-through a Claude subscription, Bedrock, Vertex, Foundry, or a gateway. Gateway
-discovery is optional, limited to compatible `/v1/models` gateways, cached,
-and falls back to built-in entries if discovery fails
-([Claude Code gateway model discovery](https://code.claude.com/docs/en/llm-gateway#model-selection)).
-
-### OpenAI Codex
-
-Codex reads personal defaults from `~/.codex/config.toml` and project overrides
-from trusted `.codex/config.toml` files. Its documented precedence is CLI,
-project config, selected user profile, user config, system config, then built-in
-defaults. Consequently, a committed project routing table can override a
-collaborator's personal defaults; untrusted projects skip project-local layers
-entirely ([Codex configuration precedence](https://learn.chatgpt.com/docs/config-file/config-basic#configuration-precedence)).
-
-Codex exposes `model` and `model_reasoning_effort` as separate configuration
-values ([Codex common configuration options](https://learn.chatgpt.com/docs/config-file/config-basic#common-configuration-options)).
-For custom subagents, a custom-agent file may override both. Otherwise each is
-resolved independently from an explicit spawn value, the `[agents]` default,
-and the parent session. Omitting a setting inherits it; changing the model
-without an explicit effort uses the selected model's default effort
-([Codex custom-agent resolution](https://learn.chatgpt.com/docs/agent-configuration/subagents#custom-agents)).
-
-Official Codex guidance explicitly allows leaving both values unpinned so the
-runtime can balance capability, speed, and price. It also documents that
-available reasoning levels depend on the selected model
-([Codex choosing models and reasoning](https://learn.chatgpt.com/docs/agent-configuration/subagents#choosing-models-and-reasoning)).
-
-OpenAI exposes `GET /v1/models` for models available to an API key
-([OpenAI Models API](https://platform.openai.com/docs/api-reference/models/list)).
-The Codex documentation does not provide a stable, public model-discovery API
-for the effective catalog of every Codex/ChatGPT account and local client.
-An API-key catalog therefore cannot safely populate routing for users whose
-Codex authentication, plan, organization policy, or client surface differs.
-
-## Options compared
-
-| Option | Survives catalog changes | Works across Claude and Codex | Multi-user behavior | Offline/update behavior | Verdict |
-|---|---:|---:|---|---|---|
-| Concrete model names in issues | No. Every rename, replacement, or access change makes existing issues stale. | No. Names and effort controls are provider-specific. | Assumes every collaborator has the same entitlement and budget. | Old issues remain wrong until rewritten. | Reject. Suitable only for an explicit reproducibility pin in a provider-specific experiment. |
-| Stable task intent resolved by user/org surface policy | Yes. Existing issues survive mapping changes. | Yes. Each surface resolves independently or inherits. | Preserves personal and organization choices. | Cached/local policy continues to work; unknown targets can inherit and warn. | **Adopt.** |
-| Project-local concrete routing table | Partly. One table can be updated, but every checkout still receives volatile provider data. | Only by maintaining multiple provider sections. | Project config outranks user config on both surfaces, so the maintainer's preferences can override collaborators. | Fresh clones can start stale; offline discovery cannot repair it. | Reject as the default. Permit only explicit team policy/constraints. |
-
-## Setup and update implications
-
-### `setup-workflow`
-
-`setup-workflow` should install or reconcile only the Kit-owned intent schema,
-templates, validation, and a documented inheritance fallback. It may **offer**
-to create a user-local routing policy for the detected surface, but only with
-explicit consent and never as a committed project default.
-
-Setup must not attempt to infer a complete routing table from `/v1/models`:
-
-- API discovery requires credentials and network access.
-- API availability is not equivalent to Claude Code or Codex subscription
-  availability across all supported providers and account types.
-- A discovered model ID says nothing about the user's desired cost/capability
-  trade-off.
-
-An interactive setup may validate explicitly selected targets using the active
-surface and show a preview. Failure or absence of discovery should leave the
-policy at `inherit`, not install guessed names.
-
-### `kit-update`
-
-`kit-update` should update the Kit-owned schema, resolver implementation, and
-provider adapter capabilities transactionally. It must preserve user-owned
-mappings and project-owned constraints. If the schema changes, migration must
-be semantic (for example, rename an intent key), previewed, and reversible;
-ordinary updates must not rewrite historical issues or replace personal model
-choices.
-
-At dispatch, the resolver should:
-
-1. read the issue's stable intent;
-2. apply organization/user policy and explicit session overrides according to
-   the active surface;
-3. resolve or inherit without network-dependent mutation;
-4. reject a malformed intent, but fall back to `inherit` with a visible warning
-   when a volatile target is unavailable;
-5. record the effective model and effort in run evidence, not in the durable
-   issue contract.
-
-This lets a later Kit release improve mappings for users who accept Kit
-defaults while allowing a maintainer's user-local policy to evolve independently.
-
-## Implication for #213
-
-#213 should not hardcode `sol`, `terra`, `luna`, Claude aliases, or full model
-IDs into the issue template or validator. It should instead establish the
-provider-neutral intent schema and make `to-issues` emit that schema. The
-execute-ready check should reject concrete provider model recommendations in
-shared handoffs, while orchestration resolves the intent on the active surface.
-
-The existing free-text `Recommended model: <Model [Effort]>` field conflates a
-durable work classification with a volatile local decision. Replace it with
-machine-readable intent and render the effective local recommendation only
-when a session is actually dispatched.
-
-## Open risks and decisions
-
-1. **Vocabulary quality:** `judgment/development/mechanical` and
-   `deep/balanced/light` need task-based definitions and contract tests so they
-   do not become disguised provider tiers.
-2. **Enforcement asymmetry:** Both surfaces can override model and effort for
-   subagents, but their precedence, supported values, organization controls,
-   and fallback behavior differ. The Kit must promise intent resolution, not
-   identical low-level enforcement.
-3. **Unavailable targets:** silent substitution hides policy drift. Inheritance
-   should be visible in run evidence, and strict team policies may choose to
-   fail instead.
-4. **Organization policy:** managed restrictions outrank personal/project
-   wishes. The resolver must treat the surface's effective selection as
-   authoritative.
-5. **Reproducibility exception:** a benchmark or regression reproduction may
-   legitimately pin a provider/model snapshot. That is a distinct,
-   provider-specific execution constraint, not the normal issue-routing field.
-6. **No universal discovery source:** model catalogs are useful validation
-   inputs where available, but cannot be the SSOT for setup or updates across
-   all supported account types and providers.

package/docs/research/wave-152-consumer-acceptance.md

@@ -1,98 +0,0 @@
-# Wave 152 consumer acceptance and release checklist
-
-Verified on 2026-07-19 for candidate `52ea49856a03f6e4bb13f24913990769126f81a8`.
-
-## Candidate
-
-- Source repository: `iKon85/agent-workflow-kit`
-- Candidate tarball: `/tmp/wave152-final-candidate.8CRnlP/ikon85-agent-workflow-kit-0.28.0.tgz`
-- Extracted kit: `/tmp/wave152-final-package.QQTOvE/package/dist-kit`
-- Disposable consumer checkout: `/tmp/wave152-testreporter.ZZg8zY/checkout`
-- Consumer base: `iKon85/Testreporter` `origin/main` at
-  `76bcaa91`
-
-The temporary paths record the exact acceptance input. They are not release
-artifacts; a repeat run creates fresh temporary directories and a fresh
-test-only marker identity.
-
-## Repeatable procedure
-
-1. Build the kit from the candidate commit, create an npm tarball, extract it,
-   and run its `kit:build`. Install that built kit into a disposable checkout
-   of the consumer's current `origin/main`.
-2. Run `scripts/codex-exec.sh new` with the `review` profile and `read-only`
-   mode. Capture the opaque run ID, resume it for round 2, verify both rounds
-   return `OK`, then finalize and verify that the run state is deleted.
-3. Run `scripts/codex-exec.sh new` with the `build` profile and
-   `workspace-write` mode. Ask it to create only an allowlisted ignored scratch
-   file containing a fixed sentinel, verify the sentinel, finalize the run,
-   and remove the scratch file.
-4. Create a disposable consumer issue through `scripts/board-sync.py` with a
-   unique `wave-stub-source` marker. Resolve it through
-   `scripts/find-by-marker.py`, verify one exact match, move its board status to
-   Done, close it, and repeat the lookup. The terminal lookup must report the
-   closed/user-decision branch and an all-open scan must find zero disposable
-   issues.
-
-## Acceptance evidence
-
-| Smoke | Evidence | Result |
-|---|---|---|
-| `codex-review` read-only | Real new round returned `OK` with a thread; resume round 2 returned `OK`; finalize deleted run state. | PASS |
-| `codex-build` workspace-write | Created only ignored `_ai_temp/wave152-build-smoke.txt` with `WAVE152_BUILD_SMOKE_OK`; finalize succeeded; scratch file removed. | PASS |
-| Marker roundtrip | Identity `wave-stub-source=awkit-wave152-20260719-acceptance-52ea498` created Testreporter issue #2168 through board-sync; exact lookup was unique; board status became Done; issue was closed; final lookup selected closed/user-decision; `openDisposable=0`. | PASS |
-
-No open disposable issue or scratch file remained after acceptance. The closed
-issue remains deliberate cleanup evidence and is excluded from open productive
-work by the all-state lookup's closed/user-decision result.
-
-## Counted surface census: 31 of 31
-
-The denominator is re-derived from the current skill manifest and the delivery
-surfaces, not from the changed-file list.
-
-| Surface class | Derivation | Covered |
-|---|---|---:|
-| Skill surfaces | Nine records from `.claude/skills/skill-manifest.json`: four Claude-only Codex skills (4), three dual-surface marker callers (6), dual-surface `to-issues` (2), and dual-surface `wrapup` (2). The four Codex skills intentionally have no invented `.agents` mirrors. | 14/14 |
-| Bundle registrations | The five Wave helpers in `HELPER_FILES`, with their declared kind and mode. | 5/5 |
-| Checked manifest entries | The same five helpers in the freshly built and checked `agent-workflow-kit.package.json`. | 5/5 |
-| Test surfaces | Harness scenarios, thin-skill lifecycle, marker library/CLI, anchor renderer/promotion, wrapup contradiction absence, and bundle/manifest/tarball modes. | 6/6 |
-| Shared board callsite | `scripts/board-sync.py` imports and uses the shared marker parser instead of retaining a second grammar. | 1/1 |
-| **Total** | **No unexplained gap.** | **31/31** |
-
-The exact manifest-derived skill set is:
-
-- Claude-only: `codex-review`, `codex-build`, `grill-me-codex`,
-  `grill-with-docs-codex`.
-- Dual-surface: `to-prd`, `to-waves`, `board-to-waves`, `to-issues`, `wrapup`.
-
-The five helper modes are:
-
-- `scripts/marker_lib.py` — `0644`
-- `scripts/find-by-marker.py` — `0755`
-- `scripts/codex-exec.sh` — `0755`
-- `scripts/codex_proc.py` — `0644`
-- `scripts/render-anchor.py` — `0755`
-
-## Release checklist
-
-- [x] K1-K5 integrated into one candidate.
-- [x] K1, K2, and K4 passed independent Standards and Spec reviews.
-- [x] Candidate tarball passed all three real consumer smokes.
-- [x] Disposable consumer issue and scratch file cleaned up; no open disposable
-      issue remains.
-- [x] Bundle, built-manifest, and npm-tarball mode assertions cover all five
-      helpers.
-- [x] Surface census is 31 of 31 with zero unexplained gaps.
-- [x] Prepared the user-authorized single minor bump from 0.28.0 to 0.29.0 and
-      refresh checked release state.
-- [x] `release:prepare -- --version 0.29.0` completed its release guard, full
-      test suite, manifest rebuild, and dry-run npm pack.
-- [x] Re-ran the full suite (354 Node tests and 277 Python tests),
-      `kit:staleness` (`OK`), and `release:guard` (`OK (minor)`).
-- [x] Created and extracted the final `0.29.0` npm tarball (380 package
-      entries); all five helper modes matched both pack metadata and extracted
-      filesystem modes.
-- [ ] After merge, let the trusted release workflow publish and verify
-      `npm run release:status` reports `released` before declaring the release
-      complete.

package/docs/research/wave-43-script-hook-census.md

@@ -1,128 +0,0 @@
-# Wave 43 script and hook census
-
-Verified on 2026-07-15 against `agent-workflow-kit` commit
-`2d47dce23d9204b44951334c3c370bdb997c0943` and Testreporter commit
-[`458747ebe8d67f66840cb3c1e75284cf2be7fb20`](https://github.com/iKon85/Testreporter/tree/458747ebe8d67f66840cb3c1e75284cf2be7fb20).
-This is the research input for issue #59. It records facts only; it does not make
-ship, opt-in, profile-seam, or maintenance decisions.
-
-## Method and reconciliation
-
-The public-repository denominator is every tracked file below `scripts/**` and
-`.claude/hooks/**`, excluding `test_*.py`, `*.test.mjs`, and the metadata file
-`scripts/.npmignore`. The recount is:
-
-```text
-68 tracked entries
-- 31 tests
--  1 metadata file
-= 36 current script/hook entries
-= 32 scripts + 4 hooks
-= 30 shipped helpers + 6 maintainer-only helpers
-```
-
-The shipped/helper split is derived from
-[`src/lib/bundle.mjs`](../../src/lib/bundle.mjs), whose `HELPER_FILES` list is
-the public distribution authority. The historical input is the 26-candidate
-list in [Testreporter #1976](https://github.com/iKon85/Testreporter/issues/1976),
-originally reconciled as 11 portable plus 15 generalize-first candidates in
-[Testreporter #1964](https://github.com/iKon85/Testreporter/issues/1964).
-
-Fresh exact-path comparison:
-
-```text
-Historical candidates:                       26/26 accounted for
-Still present at the exact Testreporter path: 26/26
-Present at the exact public-repo path:         0/26
-Proven exact rename in the public repo:        0/26
-Explicitly retired by a locked decision:       0/26
-```
-
-Therefore every historical row is classified as **present in the current
-consumer and absent from the current public denominator**. Related public
-primitives are called out only as inputs to the later grill; similarity is not
-treated as proof of a rename or as a ship decision.
-
-## Fresh public denominator: 36 of 36
-
-| Current path | Distribution status |
-|---|---|
-| `.claude/hooks/_hook_utils.py` | shipped helper |
-| `.claude/hooks/drift-guard.py` | shipped helper |
-| `.claude/hooks/skill-drift-hint.py` | shipped helper |
-| `.claude/hooks/sync-board-status.py` | shipped helper |
-| `scripts/anchor_table.py` | shipped helper |
-| `scripts/board-sync.py` | shipped helper |
-| `scripts/board_config.py` | shipped helper |
-| `scripts/board_fields.py` | shipped helper |
-| `scripts/build-kit.mjs` | maintainer-only |
-| `scripts/census/delta.mjs` | shipped helper |
-| `scripts/census/fingerprint.mjs` | shipped helper |
-| `scripts/census/index.mjs` | shipped helper |
-| `scripts/census/scan.mjs` | shipped helper |
-| `scripts/census/state.mjs` | shipped helper |
-| `scripts/census/transaction.mjs` | shipped helper |
-| `scripts/check-kit-staleness.mjs` | maintainer-only |
-| `scripts/execute-ready-check.py` | shipped helper |
-| `scripts/grill-census-wiring-guard.mjs` | maintainer-only |
-| `scripts/issue_deps.py` | shipped helper |
-| `scripts/kit-release.mjs` | shipped helper |
-| `scripts/kit-update-pr.mjs` | shipped helper |
-| `scripts/lib/audit-refs.mjs` | maintainer-only |
-| `scripts/lib/scrub.mjs` | maintainer-only |
-| `scripts/loc_offender_core.py` | shipped helper |
-| `scripts/loc_offender_gate.py` | shipped helper |
-| `scripts/node_kind.py` | shipped helper |
-| `scripts/portability_profile_scan.py` | maintainer-only |
-| `scripts/pr-body-check.py` | shipped helper |
-| `scripts/program_graph.py` | shipped helper |
-| `scripts/program_graph_parse.py` | shipped helper |
-| `scripts/program_graph_validate.py` | shipped helper |
-| `scripts/program_sync.py` | shipped helper |
-| `scripts/release-delta-guard.mjs` | shipped helper |
-| `scripts/release-parity.mjs` | shipped helper |
-| `scripts/release-state.mjs` | shipped helper |
-| `scripts/wrapup-land.py` | shipped helper |
-
-## Historical candidate crosswalk: 26 of 26
-
-All Testreporter links below are pinned to the verified consumer commit. “No
-dedicated tracked test found” means the fresh tracked-tree search found no test
-named for that candidate; it is not a statement about runtime correctness.
-
-| Historical candidate | Current public status and adjacent evidence | Current consumer dependency | Existing consumer test evidence |
-|---|---|---|---|
-| `scripts/audit_gate.py` | Exact path absent. | [`package.json#L44`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/package.json#L44) and `.githooks/pre-push` invoke it. | [`scripts/test_audit_gate.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/scripts/test_audit_gate.py), [`scripts/test_pre_push_audit_gate.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/scripts/test_pre_push_audit_gate.py) |
-| `scripts/cleanup-worktrees.sh` | Exact path absent. Public `scripts/wrapup-land.py` has adjacent worktree-cleanup behavior, not a proven rename. | No separate tracked consumer found beyond direct/manual use. | No dedicated tracked test found. |
-| `scripts/install-git-hooks.sh` | Exact path absent. | [`package.json#L45`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/package.json#L45) invokes it during postinstall. | [`scripts/test_install_git_hooks.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/scripts/test_install_git_hooks.py) |
-| `scripts/ensure-gitleaks.sh` | Exact path absent. | [`package.json#L45`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/package.json#L45) invokes it during postinstall; `docs/security/secret-scan.md` documents it. | No dedicated tracked test found. |
-| `.claude/hooks/block-bg-double-background.py` | Exact path absent. | [`.claude/settings.json#L85`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L85) wires it. | [`.claude/hooks/test_block_bg_double_background.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_block_bg_double_background.py) |
-| `.claude/hooks/block-npm-install-in-pnpm.py` | Exact path absent. | [`.claude/settings.json#L75`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L75) wires it. | [`.claude/hooks/test_block_npm_install_in_pnpm.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_block_npm_install_in_pnpm.py) |
-| `.claude/hooks/block-secrets.py` | Exact path absent. | [`.claude/settings.json#L56-L65`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L56-L65) wires it at two hook events. | [`.claude/hooks/test_block_secrets_smoke.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_block_secrets_smoke.py) |
-| `.claude/hooks/branch-watch.py` | Exact path absent. | [`.claude/settings.json#L161`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L161) wires it. | [`.claude/hooks/test_branch_watch_smoke.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_branch_watch_smoke.py) |
-| `.claude/hooks/grep-shim-guard.py` | Exact path absent. | [`.claude/settings.json#L80`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L80) wires it. | [`.claude/hooks/test_grep_shim_guard.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_grep_shim_guard.py) |
-| `.claude/hooks/recon-size-hint.py` | Exact path absent. | [`.claude/settings.json#L134`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L134) wires it. | [`.claude/hooks/test_recon_size_hint.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_recon_size_hint.py) |
-| `.claude/hooks/loc-offender-forewarn.py` | Exact path absent. Public `scripts/loc_offender_core.py` and `scripts/loc_offender_gate.py` are related shipped primitives, not a proven rename. | [`.claude/settings.json#L18`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L18) wires it. | [`scripts/test_loc_offender_forewarn.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/scripts/test_loc_offender_forewarn.py) |
-| `scripts/bump-version.sh` | Exact path absent. Public `scripts/kit-release.mjs` contains tested SemVer and metadata-update behavior, not a proven rename. | No separate consumer wiring found; the script is directly invoked. | No dedicated tracked test found for the historical script. |
-| `scripts/consolidate-memories.sh` | Exact path absent. | The two historical memory templates name it as their consolidator. | No dedicated tracked test found. |
-| `scripts/memory-templates/meta_decision_layer_choice.md` | Exact path absent. | Input consumed by `scripts/consolidate-memories.sh`. | No dedicated tracked test found. |
-| `scripts/memory-templates/meta_memory_lifecycle.md` | Exact path absent. | Input consumed by `scripts/consolidate-memories.sh`. | No dedicated tracked test found. |
-| `scripts/setup-worktree.sh` | Exact path absent. Public workflow prose allows a project helper or plain `git worktree add`; that is not a rename. | Central Testreporter worktree, port, and local-env setup primitive referenced by workflow documentation. | [`scripts/setup-worktree.test.mjs`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/scripts/setup-worktree.test.mjs), [`scripts/test_pre_push_loc_gate.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/scripts/test_pre_push_loc_gate.py) |
-| `.claude/hooks/baseline-capture-hint.py` | Exact path absent. | [`.claude/settings.json#L114`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L114) wires it. | [`.claude/hooks/test_baseline_capture_hint_smoke.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_baseline_capture_hint_smoke.py) |
-| `.claude/hooks/branch-context.py` | Exact path absent. | [`.claude/settings.json#L13`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L13) wires it. | [`.claude/hooks/test_branch_context_smoke.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_branch_context_smoke.py) |
-| `.claude/hooks/convention-drift-hint.py` | Exact path absent. Public `.claude/hooks/skill-drift-hint.py` and `drift-guard.py` are narrower adjacent mechanisms, not proven renames. | [`.claude/settings.json#L33`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L33) and rule `SOURCES.txt` files refer to it. | No dedicated tracked test found. |
-| `.claude/hooks/enforce-worktree.py` | Exact path absent. | [`.claude/settings.json#L109`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L109) wires it. | [`.claude/hooks/test_enforce_worktree.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_enforce_worktree.py) |
-| `.claude/hooks/enforce-worktree-cwd.py` | Exact path absent. | [`.claude/settings.json#L95`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L95) wires it. | [`.claude/hooks/test_enforce_worktree_cwd_smoke.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_enforce_worktree_cwd_smoke.py) |
-| `.claude/hooks/enforce-worktree-discipline.py` | Exact path absent. | [`.claude/settings.json#L70`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L70) wires it. | [`.claude/hooks/test_enforce_worktree_discipline_smoke.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_enforce_worktree_discipline_smoke.py) |
-| `.claude/hooks/migration-snapshot-reminder.py` | Exact path absent. | [`.claude/settings.json#L166`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L166) wires it. | [`.claude/hooks/test_migration_snapshot_reminder_smoke.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_migration_snapshot_reminder_smoke.py) |
-| `.claude/hooks/pre-refactor-sweep.py` | Exact path absent. | [`.claude/settings.json#L23`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L23) wires it. | [`.claude/hooks/test_pre_refactor_sweep.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_pre_refactor_sweep.py) |
-| `.claude/hooks/typecheck-on-stop.sh` | Exact path absent. | [`.claude/settings.json#L145`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L145) wires it. | No dedicated tracked test found. |
-| `.claude/hooks/slice-handoff-hint.py` | Exact path absent. | [`.claude/settings.json#L44`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/settings.json#L44) wires it. | [`.claude/hooks/test_slice_handoff_hint_smoke.py`](https://github.com/iKon85/Testreporter/blob/458747ebe8d67f66840cb3c1e75284cf2be7fb20/.claude/hooks/test_slice_handoff_hint_smoke.py) |
-
-## Inputs for the decision grill
-
-The crosswalk establishes the decision set but intentionally leaves its verdict
-columns blank. Issue #59 must decide, with the user, each row’s outcome, opt-in,
-profile seam, security and maintenance cost, and ship verdict. In particular,
-the adjacent public primitives identified above must be compared behaviorally
-before any row is called replaced, redundant, or already shipped.

package/scripts/build-kit.mjs

@@ -1,117 +0,0 @@
-/** Build the distributable kit from this public repository's current SSOT. */
-import { chmod, mkdir, readFile, readdir, rm, writeFile } from 'node:fs/promises';
-import { dirname, join, relative } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { collectBundle } from '../src/lib/bundle.mjs';
-import { sha256 } from '../src/lib/hash.mjs';
-import { scrub } from './lib/scrub.mjs';
-import { auditExecRefs, auditModuleImports, auditSkillNameRefs } from './lib/audit-refs.mjs';
-
-const ROOT_FILES = ['LICENSE', 'README.md', 'PROVENANCE.md'];
-const DOC_ASSETS = ['index.html', 'methodology.html', 'methodology.svg', 'workflow.png'];
-
-const isBinary = (buf) => buf.includes(0);
-
-async function walk(dir) {
-  const files = [];
-  let entries;
-  try { entries = await readdir(dir, { withFileTypes: true }); }
-  catch (error) { if (error.code === 'ENOENT') return files; throw error; }
-  for (const entry of entries) {
-    const path = join(dir, entry.name);
-    if (entry.isDirectory()) files.push(...await walk(path));
-    else if (entry.isFile()) files.push(path);
-  }
-  return files.sort();
-}
-
-async function writeOut(path, content, mode = 0o644) {
-  await mkdir(dirname(path), { recursive: true });
-  await writeFile(path, content);
-  await chmod(path, mode);
-}
-
-async function copySource(repoRoot, distDir, source, destination, mode = 0o644, shouldScrub = true) {
-  const raw = await readFile(join(repoRoot, source));
-  const content = shouldScrub && !isBinary(raw)
-    ? Buffer.from(scrub(raw.toString('utf8')), 'utf8') : raw;
-  await writeOut(join(distDir, destination), content, mode);
-  return content;
-}
-
-async function shipBundle(repoRoot, distDir, bundleFiles) {
-  const entries = [];
-  for (const file of bundleFiles) {
-    const content = await copySource(repoRoot, distDir, file.src, file.dest, file.mode);
-    entries.push({
-      path: file.dest, kind: file.kind, ownerSkill: file.ownerSkill,
-      surface: file.surface, installRole: file.installRole,
-      sha256: sha256(content), mode: file.mode, origin: 'kit',
-    });
-  }
-  return entries.sort((a, b) => a.path.localeCompare(b.path));
-}
-
-async function shipRepositoryFiles(repoRoot, distDir, packageJson) {
-  for (const file of ROOT_FILES) await copySource(repoRoot, distDir, file, file, 0o644, false);
-  for (const file of DOC_ASSETS) {
-    await copySource(repoRoot, distDir, `docs/${file}`, `docs/${file}`);
-  }
-  for (const absolute of await walk(join(repoRoot, 'src'))) {
-    const path = `src/${relative(join(repoRoot, 'src'), absolute)}`;
-    await copySource(repoRoot, distDir, path, path);
-  }
-  const distributable = {
-    ...packageJson,
-    repository: {
-      type: 'git', url: 'git+https://github.com/iKon85/agent-workflow-kit.git',
-    },
-  };
-  await writeOut(join(distDir, 'package.json'), Buffer.from(`${JSON.stringify(distributable, null, 2)}\n`));
-}
-
-async function auditBuild(repoRoot, distDir, manifest, entries) {
-  const bodies = new Map();
-  for (const entry of entries) {
-    if (entry.path.endsWith('.md') || entry.path.endsWith('.py')) {
-      bodies.set(entry.path, await readFile(join(distDir, entry.path), 'utf8'));
-    }
-  }
-  const localModules = (await Promise.all(
-    ['scripts', '.claude/hooks'].map(async (dir) => {
-      try { return await readdir(join(repoRoot, dir)); } catch { return []; }
-    }),
-  )).flat().filter((name) => name.endsWith('.py')).map((name) => name.slice(0, -3));
-  const known = Object.keys(manifest.skills);
-  const published = known.filter((name) => manifest.skills[name].publish);
-  const read = (path) => bodies.get(path) ?? null;
-  const failures = [
-    ...auditExecRefs(entries, read).map((v) => `${v.file} -> ${v.ref}`),
-    ...auditModuleImports(entries, read, localModules).map((v) => `${v.file} -> ${v.module}`),
-    ...auditSkillNameRefs(entries, read, { known, published }).map((v) => `${v.file} -> ${v.skill}`),
-  ];
-  if (failures.length) throw new Error(`build-kit: dangling dependencies:\n${failures.join('\n')}`);
-}
-
-export async function buildKit({ repoRoot, distDir } = {}) {
-  repoRoot ??= join(dirname(fileURLToPath(import.meta.url)), '..');
-  distDir ??= join(repoRoot, 'dist-kit');
-  const manifest = JSON.parse(await readFile(join(repoRoot, '.claude/skills/skill-manifest.json'), 'utf8'));
-  const packageJson = JSON.parse(await readFile(join(repoRoot, 'package.json'), 'utf8'));
-  await rm(distDir, { recursive: true, force: true });
-  await mkdir(distDir, { recursive: true });
-  const { files } = await collectBundle(repoRoot, manifest);
-  const entries = await shipBundle(repoRoot, distDir, files);
-  await shipRepositoryFiles(repoRoot, distDir, packageJson);
-  await writeOut(join(distDir, 'agent-workflow-kit.package.json'), Buffer.from(
-    `${JSON.stringify({ kitVersion: packageJson.version, files: entries }, null, 2)}\n`,
-  ));
-  await auditBuild(repoRoot, distDir, manifest, entries);
-  return { distDir, kitVersion: packageJson.version, fileCount: entries.length };
-}
-
-if (import.meta.url === `file://${process.argv[1]}`) {
-  buildKit().then(({ distDir, kitVersion, fileCount }) => {
-    console.log(`built ${distDir} · kitVersion ${kitVersion} · ${fileCount} files`);
-  }).catch((error) => { console.error(error.message); process.exitCode = 1; });
-}