@ikon85/agent-workflow-kit 0.43.0 → 0.44.0

package/scripts/grill-census-wiring-guard.mjs

@@ -1,87 +0,0 @@
-#!/usr/bin/env node
-
-import { access, readFile } from 'node:fs/promises';
-import { constants } from 'node:fs';
-import { dirname, join } from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-export const CENSUS_PREFLIGHT_INVOCATION =
-  'python3 .claude/hooks/drift-guard.py --census-status';
-export const CENSUS_PREFLIGHT_CONTRACT =
-  'For a cross-cutting plan, run `python3 .claude/hooks/drift-guard.py --census-status` before locking it. When an activated census reports `block_handoff: true` (including stale or open surfaces), stop the lock, run `$census-update`, resolve the findings, and retry. When the census is disabled or not activated, keep the status visible and perform the existing manual surface walk; do not replace that walk with census guesses.';
-
-const GRILL_FAMILY_NAME = /^grill-/;
-const SURFACE_TREES = { claude: '.claude', codex: '.agents' };
-const LOCAL_CENSUS_LOGIC = /\b(?:scanCensus|diffCensus|fingerprintCensus|resolveCensusState|activateCensus)\s*\(/;
-
-async function exists(path) {
-  try {
-    await access(path, constants.R_OK);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-export async function auditGrillCensusWiring(repoRoot) {
-  const manifestPath = join(repoRoot, '.claude', 'skills', 'skill-manifest.json');
-  const manifest = JSON.parse(await readFile(manifestPath, 'utf8'));
-  const entries = Object.entries(manifest.skills ?? {})
-    .filter(([name]) => GRILL_FAMILY_NAME.test(name));
-  const problems = [];
-  const physical = [];
-
-  for (const [name, entry] of entries) {
-    if (!Array.isArray(entry.surfaces) || entry.surfaces.length === 0) {
-      problems.push(`manifest grill has no surfaces: ${name}`);
-      continue;
-    }
-    for (const surface of entry.surfaces) {
-      const tree = SURFACE_TREES[surface];
-      if (!tree) {
-        problems.push(`manifest names an unknown surface for ${name}: ${surface}`);
-        continue;
-      }
-      const path = join(repoRoot, tree, 'skills', name, 'SKILL.md');
-      physical.push({ name, surface, path });
-      if (!(await exists(path))) {
-        problems.push(`manifest surface has no skill file: ${surface}:${name}`);
-        continue;
-      }
-      const prose = await readFile(path, 'utf8');
-      const invocationCount = prose.split(CENSUS_PREFLIGHT_INVOCATION).length - 1;
-      if (invocationCount !== 1) {
-        problems.push(
-          invocationCount === 0
-            ? `missing census preflight invocation: ${surface}:${name}`
-            : `duplicate census preflight invocation: ${surface}:${name}`,
-        );
-      }
-      if (!prose.includes(CENSUS_PREFLIGHT_CONTRACT)) {
-        problems.push(`census preflight contract drifted: ${surface}:${name}`);
-      }
-      if (LOCAL_CENSUS_LOGIC.test(prose)) {
-        problems.push(`grill duplicates census engine logic: ${surface}:${name}`);
-      }
-    }
-  }
-
-  return {
-    counts: { logical: entries.length, physical: physical.length },
-    problems,
-  };
-}
-
-async function main() {
-  const repoRoot = join(dirname(fileURLToPath(import.meta.url)), '..');
-  const result = await auditGrillCensusWiring(repoRoot);
-  console.log(`grill census wiring: ${result.counts.logical} logical, ${result.counts.physical} physical`);
-  if (result.problems.length > 0) {
-    for (const problem of result.problems) console.error(`- ${problem}`);
-    process.exitCode = 1;
-  }
-}
-
-if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) {
-  await main();
-}

package/scripts/grill-census-wiring-guard.test.mjs

@@ -1,107 +0,0 @@
-import assert from 'node:assert/strict';
-import { mkdtemp, mkdir, readFile, writeFile } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import { dirname, join } from 'node:path';
-import test from 'node:test';
-import { fileURLToPath } from 'node:url';
-
-import {
-  CENSUS_PREFLIGHT_CONTRACT,
-  auditGrillCensusWiring,
-} from './grill-census-wiring-guard.mjs';
-
-const REPO = join(dirname(fileURLToPath(import.meta.url)), '..');
-const realManifest = JSON.parse(await readFile(
-  join(REPO, '.claude', 'skills', 'skill-manifest.json'),
-  'utf8',
-)).skills;
-const baselineGrills = Object.fromEntries(
-  Object.entries(realManifest).filter(([name]) => name.startsWith('grill-')),
-);
-const baselineCounts = {
-  logical: Object.keys(baselineGrills).length,
-  physical: Object.values(baselineGrills)
-    .reduce((count, entry) => count + entry.surfaces.length, 0),
-};
-const [baselineName, baselineEntry] = Object.entries(baselineGrills)[0];
-const baselineSurface = baselineEntry.surfaces[0];
-let extraGrillName = 'grill-fixture-extra';
-while (extraGrillName in baselineGrills) extraGrillName += '-next';
-
-async function fixture({ manifest = baselineGrills, omitInvocation, omitFile } = {}) {
-  const root = await mkdtemp(join(tmpdir(), 'grill-census-guard-'));
-  await mkdir(join(root, '.claude', 'skills'), { recursive: true });
-  await writeFile(
-    join(root, '.claude', 'skills', 'skill-manifest.json'),
-    `${JSON.stringify({ skills: manifest })}\n`,
-  );
-  for (const [name, entry] of Object.entries(manifest)) {
-    for (const surface of entry.surfaces) {
-      const relative = `${surface}:${name}`;
-      if (relative === omitFile) continue;
-      const tree = surface === 'claude' ? '.claude' : '.agents';
-      const directory = join(root, tree, 'skills', name);
-      await mkdir(directory, { recursive: true });
-      const invocation = relative === omitInvocation ? '' : CENSUS_PREFLIGHT_CONTRACT;
-      await writeFile(join(directory, 'SKILL.md'), `# ${name}\n${invocation}\n`);
-    }
-  }
-  return root;
-}
-
-test('fixture wiring covers every grill and surface in the real manifest', async () => {
-  const result = await auditGrillCensusWiring(await fixture());
-
-  assert.deepEqual(result.counts, baselineCounts);
-  assert.deepEqual(result.problems, []);
-});
-
-test('a grill surface missing the shared preflight invocation is rejected', async () => {
-  const result = await auditGrillCensusWiring(await fixture({
-    omitInvocation: `${baselineSurface}:${baselineName}`,
-  }));
-
-  assert.match(
-    result.problems.join('\n'),
-    new RegExp(`missing census preflight invocation.*${baselineName}`, 'i'),
-  );
-});
-
-test('a dead manifest surface reference is rejected', async () => {
-  const result = await auditGrillCensusWiring(await fixture({
-    omitFile: `${baselineSurface}:${baselineName}`,
-  }));
-
-  assert.match(
-    result.problems.join('\n'),
-    new RegExp(`manifest surface has no skill file.*${baselineName}`, 'i'),
-  );
-});
-
-test('a newly manifested grill variant expands the family and cannot hide a missing surface', async () => {
-  const addedSurfaces = ['claude', 'codex'];
-  const manifest = {
-    ...baselineGrills,
-    [extraGrillName]: { surfaces: addedSurfaces },
-  };
-  const result = await auditGrillCensusWiring(await fixture({
-    manifest,
-    omitFile: `codex:${extraGrillName}`,
-  }));
-
-  assert.deepEqual(result.counts, {
-    logical: baselineCounts.logical + 1,
-    physical: baselineCounts.physical + addedSurfaces.length,
-  });
-  assert.match(
-    result.problems.join('\n'),
-    new RegExp(`manifest surface has no skill file.*${extraGrillName}`, 'i'),
-  );
-});
-
-test('the repository wiring covers the complete manifest-derived grill family', async () => {
-  const result = await auditGrillCensusWiring(REPO);
-
-  assert.deepEqual(result.counts, baselineCounts);
-  assert.deepEqual(result.problems, []);
-});

package/scripts/kit-release.test.mjs

@@ -1,273 +0,0 @@
-import { test } from 'node:test';
-import assert from 'node:assert/strict';
-import { execFile } from 'node:child_process';
-import { mkdtemp, mkdir, readFile, rm, writeFile } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { promisify } from 'node:util';
-import { fileURLToPath } from 'node:url';
-import { nextVersion, prepareRelease } from './kit-release.mjs';
-
-const REPO = join(dirname(fileURLToPath(import.meta.url)), '..');
-const exec = promisify(execFile);
-
-async function releaseWorkflow() {
-  return readFile(join(REPO, '.github/workflows/release.yml'), 'utf8');
-}
-
-function workflowRunScript(workflow, stepName) {
-  const lines = workflow.split('\n');
-  const nameIndex = lines.findIndex((line) => line.trim() === `- name: ${stepName}`);
-  assert.notEqual(nameIndex, -1, `workflow step not found: ${stepName}`);
-  const runIndex = lines.findIndex(
-    (line, index) => index > nameIndex && line.trim() === 'run: |',
-  );
-  assert.notEqual(runIndex, -1, `run block not found for workflow step: ${stepName}`);
-  const indent = lines[runIndex].match(/^\s*/)[0].length + 2;
-  const body = [];
-  for (const line of lines.slice(runIndex + 1)) {
-    if (line.trim() && line.match(/^\s*/)[0].length < indent) break;
-    body.push(line.slice(indent));
-  }
-  return body.join('\n');
-}
-
-async function git(runCwd, args, options = {}) {
-  return exec('git', args, { cwd: runCwd, ...options });
-}
-
-async function releaseIntentFixture({
-  packageVersion = '1.2.3',
-  annotated = true,
-  onMain = true,
-  mainAhead = false,
-} = {}) {
-  const root = await mkdtemp(join(tmpdir(), 'kit-release-intent-'));
-  const origin = join(root, 'origin.git');
-  const repo = join(root, 'repo');
-  await git(root, ['init', '--bare', origin]);
-  await git(root, ['init', '--initial-branch=main', repo]);
-  await git(repo, ['config', 'user.name', 'Release Test']);
-  await git(repo, ['config', 'user.email', 'release-test@example.invalid']);
-  await writeFile(join(repo, 'package.json'), `${JSON.stringify({
-    name: '@ikon85/agent-workflow-kit',
-    version: packageVersion,
-  }, null, 2)}\n`);
-  await git(repo, ['add', 'package.json']);
-  await git(repo, ['commit', '-m', 'release fixture']);
-  await git(repo, ['remote', 'add', 'origin', origin]);
-  await git(repo, ['push', '-u', 'origin', 'main']);
-  if (!onMain) {
-    await git(repo, ['checkout', '-b', 'not-main']);
-    await writeFile(join(repo, 'outside-main.txt'), 'not canonical\n');
-    await git(repo, ['add', 'outside-main.txt']);
-    await git(repo, ['commit', '-m', 'outside main']);
-  }
-  const tag = 'v1.2.3';
-  await git(repo, annotated
-    ? ['tag', '-a', tag, '-m', `Release ${tag}`]
-    : ['tag', tag]);
-  if (mainAhead) {
-    await writeFile(join(repo, 'after-release.txt'), 'main moved\n');
-    await git(repo, ['add', 'after-release.txt']);
-    await git(repo, ['commit', '-m', 'move canonical main']);
-    await git(repo, ['push', 'origin', 'main']);
-  }
-  return { root, repo, tag };
-}
-
-async function validateReleaseIntent(fixture, releaseTag = fixture.tag) {
-  const workflow = await releaseWorkflow();
-  const script = workflowRunScript(workflow, 'Validate release intent');
-  const output = join(fixture.root, 'github-output');
-  try {
-    const result = await exec('bash', ['-euo', 'pipefail', '-c', script], {
-      cwd: fixture.repo,
-      env: {
-        ...process.env,
-        GITHUB_OUTPUT: output,
-        RELEASE_TAG: releaseTag,
-      },
-    });
-    return { ...result, output: await readFile(output, 'utf8') };
-  } catch (error) {
-    return { error, stderr: error.stderr ?? '', stdout: error.stdout ?? '' };
-  }
-}
-
-test('release workflow treats an annotated version tag as normal intent and merge as integration only', async () => {
-  const workflow = await releaseWorkflow();
-  assert.match(workflow, /push:\s*\n\s+tags:\s*\n\s+- ['"]v\*\.\*\.\*['"]/);
-  assert.doesNotMatch(workflow, /push:\s*\n\s+branches:\s*\[main\]/);
-  assert.match(workflow, /workflow_dispatch:\s*\n\s+inputs:\s*\n\s+tag:/);
-  assert.match(workflow, /tag:[\s\S]*?required:\s*true/);
-  assert.match(
-    workflow,
-    /group:\s*release-\$\{\{ github\.event_name == 'workflow_dispatch' && inputs\.tag \|\| github\.ref_name \}\}/,
-  );
-  assert.doesNotMatch(workflow, /git diff --name-only[\s\S]*package\.json/);
-  assert.ok(
-    workflow.indexOf('- name: Validate release intent')
-      < workflow.indexOf('node scripts/release-state.mjs'),
-    'release intent must be validated before the reconciler can publish',
-  );
-  assert.equal(workflow.match(/node scripts\/release-state\.mjs/g)?.length, 1);
-});
-
-test('the same pre-publish validator accepts a matching annotated tag', async () => {
-  const fixture = await releaseIntentFixture();
-  try {
-    const result = await validateReleaseIntent(fixture);
-    assert.equal(result.error, undefined, result.stderr);
-    assert.match(result.output, /^tag=v1\.2\.3$/m);
-    assert.match(result.output, /^commit=[0-9a-f]{40}$/m);
-  } finally {
-    await rm(fixture.root, { recursive: true, force: true });
-  }
-});
-
-for (const scenario of [
-  {
-    name: 'missing manual recovery tag',
-    options: {},
-    tag: 'v9.9.9',
-    error: /does not exist/,
-  },
-  {
-    name: 'tag/package version mismatch',
-    options: { packageVersion: '1.2.4' },
-    error: /does not match package version/,
-  },
-  {
-    name: 'lightweight tag',
-    options: { annotated: false },
-    error: /must be annotated/,
-  },
-  {
-    name: 'tag outside canonical main ancestry',
-    options: { onMain: false },
-    error: /not an ancestor of origin\/main/,
-  },
-  {
-    name: 'stale canonical main commit with the same package version',
-    options: { mainAhead: true },
-    error: /does not identify the current origin\/main commit/,
-  },
-]) {
-  test(`the pre-publish validator rejects a ${scenario.name}`, async () => {
-    const fixture = await releaseIntentFixture(scenario.options);
-    try {
-      const result = await validateReleaseIntent(fixture, scenario.tag);
-      assert.ok(result.error, 'validation unexpectedly succeeded');
-      assert.match(`${result.stderr}\n${result.stdout}`, scenario.error);
-    } finally {
-      await rm(fixture.root, { recursive: true, force: true });
-    }
-  });
-}
-
-test('the install manifest ships both release primitives named by the skill', async () => {
-  const manifest = JSON.parse(await readFile(join(REPO, 'agent-workflow-kit.package.json')));
-  const paths = manifest.files.map((entry) => entry.path);
-  assert.ok(paths.includes('scripts/kit-release.mjs'));
-  assert.ok(paths.includes('scripts/release-delta-guard.mjs'));
-  assert.ok(paths.includes('scripts/release-parity.mjs'));
-  assert.ok(paths.includes('scripts/release-state.mjs'));
-});
-
-test('both release skill surfaces name only the owned scoped npm package', async () => {
-  const claude = await readFile(join(REPO, '.claude/skills/kit-release/SKILL.md'), 'utf8');
-  const codex = await readFile(join(REPO, '.agents/skills/kit-release/SKILL.md'), 'utf8');
-  assert.equal(codex, claude);
-  for (const body of [claude, codex]) {
-    assert.match(body, /`@ikon85\/agent-workflow-kit`/);
-  }
-});
-
-// Amended by #257: one gate, at the Semver. The previous contract required a
-// second confirmation before the tag; that gate left prepared versions stranded
-// in `awaiting-tag` and is gone. What must survive is the narrowing rule — a
-// build-only request never becomes release authority.
-test('one confirmed Semver authorizes the release through tag and publish', async () => {
-  const claude = await readFile(join(REPO, '.claude/skills/kit-release/SKILL.md'), 'utf8');
-  const codex = await readFile(join(REPO, '.agents/skills/kit-release/SKILL.md'), 'utf8');
-  assert.equal(codex.split('\n---\n')[1], claude.split('\n---\n')[1]);
-  for (const body of [claude, codex]) {
-    assert.match(body, /explicit AFK end-to-end mandate/i);
-    assert.match(body, /deterministic recommendation/i);
-    assert.match(body, /annotated\s+`v<version>` tag/i);
-    assert.match(body, /confirmed Semver authorizes[\s\S]*without asking again/i);
-    assert.match(body, /narrower build-only or single-action request/i);
-    assert.doesNotMatch(body, /separate explicit confirmation/i);
-  }
-});
-
-test('maintainer docs and the accepted ADR agree that merge integrates and an annotated tag publishes', async () => {
-  const paths = [
-    'CLAUDE.md',
-    'AGENTS.md',
-    'README.md',
-    '.claude/skills/kit-release/SKILL.md',
-    '.agents/skills/kit-release/SKILL.md',
-    'docs/adr/0004-release-intent-is-a-version-tag.md',
-  ];
-  const bodies = await Promise.all(
-    paths.map((path) => readFile(join(REPO, path), 'utf8')),
-  );
-  for (const [index, body] of bodies.entries()) {
-    assert.match(body, /annotated\s+[`*]?v<version>[`*]?\s+tag/i, paths[index]);
-    assert.match(body, /integrat/i, paths[index]);
-  }
-  assert.match(bodies.at(-1), /Status: accepted \(2026-07-22, issue #204\)/);
-});
-
-test('patch, minor, and major confirmations select exactly one target version', () => {
-  assert.equal(nextVersion('1.2.3', 'patch'), '1.2.4');
-  assert.equal(nextVersion('1.2.3', 'minor'), '1.3.0');
-  assert.equal(nextVersion('1.2.3', 'major'), '2.0.0');
-});
-
-async function fixture() {
-  const root = await mkdtemp(join(tmpdir(), 'kit-release-'));
-  await mkdir(join(root, 'scripts'));
-  await writeFile(join(root, 'package.json'), '{"name":"kit","version":"1.2.3"}\n');
-  await writeFile(join(root, 'README.md'), '# Kit\n\n## Release notes\n\n### 1.2.3\n\n- Old.\n');
-  await writeFile(join(root, 'agent-workflow-kit.package.json'), '{"kitVersion":"1.2.3","files":[]}\n');
-  return root;
-}
-
-test('confirmed target updates package, release notes, and regenerated manifest', async () => {
-  const root = await fixture();
-  const commands = [];
-  try {
-    const result = await prepareRelease({
-      repoRoot: root, targetVersion: '1.3.0',
-      delta: { added: ['scripts/new.mjs'], removed: [], changed: ['README.md'] },
-      buildManifest: async () => ({ kitVersion: '1.3.0', files: [{ path: 'scripts/new.mjs' }] }),
-      run: async (command, args) => commands.push([command, ...args].join(' ')),
-    });
-    assert.equal(result.status, 'prepared');
-    assert.equal(JSON.parse(await readFile(join(root, 'package.json'))).version, '1.3.0');
-    assert.equal(JSON.parse(await readFile(join(root, 'agent-workflow-kit.package.json'))).kitVersion, '1.3.0');
-    assert.match(await readFile(join(root, 'README.md'), 'utf8'), /### 1\.3\.0[\s\S]*scripts\/new\.mjs/);
-    assert.deepEqual(commands, [
-      'npm run release:guard', 'npm test', 'npm pack --dry-run',
-    ]);
-  } finally { await rm(root, { recursive: true, force: true }); }
-});
-
-test('a failed gate leaves an explainable target that retries without another bump', async () => {
-  const root = await fixture();
-  const options = {
-    repoRoot: root, targetVersion: '1.2.4',
-    delta: { added: [], removed: [], changed: ['README.md'] },
-    buildManifest: async () => ({ kitVersion: '1.2.4', files: [] }),
-  };
-  try {
-    await assert.rejects(prepareRelease({ ...options, run: async () => { throw new Error('test red'); } }), /test red/);
-    assert.equal(JSON.parse(await readFile(join(root, 'package.json'))).version, '1.2.4');
-    const retried = await prepareRelease({ ...options, run: async () => {} });
-    assert.equal(retried.status, 'resumed');
-    assert.equal(JSON.parse(await readFile(join(root, 'package.json'))).version, '1.2.4');
-  } finally { await rm(root, { recursive: true, force: true }); }
-});

package/scripts/kit-update-pr.test.mjs

@@ -1,151 +0,0 @@
-import test from 'node:test';
-import assert from 'node:assert/strict';
-import { createSystemAdapters, orchestrateUpdatePullRequest } from './kit-update-pr.mjs';
-
-function harness({ update = { exitCode: 0 }, changed = true, pulls = [] } = {}) {
-  const calls = [];
-  return {
-    calls,
-    options: {
-      runUpdate: async () => (calls.push('update'), update),
-      hasChanges: async () => (calls.push('changes'), changed),
-      listPullRequests: async (branch) => (calls.push(['list', branch]), pulls),
-      publishBranch: async (branch) => calls.push(['publish', branch]),
-      createPullRequest: async (input) => calls.push(['create', input]),
-      updatePullRequest: async (number, input) => calls.push(['upsert', number, input]),
-    },
-  };
-}
-
-test('a successful update creates one stable update pull request', async () => {
-  const h = harness();
-  const report = await orchestrateUpdatePullRequest(h.options);
-
-  assert.equal(report.status, 'created');
-  assert.equal(report.branch, 'agent-workflow-kit/update');
-  assert.deepEqual(h.calls.map((call) => Array.isArray(call) ? call[0] : call), [
-    'update', 'changes', 'list', 'publish', 'create',
-  ]);
-});
-
-test('automated update pull requests carry the behavior availability summary', async () => {
-  const h = harness({ update: {
-    exitCode: 0,
-    stdout: [
-      'newly available: orchestrate-wave',
-      'newly degraded: orchestrate-wave.projectRecipe',
-      'newly blocked: none',
-      'still unresolved: orchestrateWaveRecipe:invalid',
-    ].join('\n'),
-    stderr: '',
-  } });
-
-  await orchestrateUpdatePullRequest(h.options);
-
-  const created = h.calls.find((call) => Array.isArray(call) && call[0] === 'create')[1];
-  assert.match(created.body, /## Availability/);
-  assert.match(created.body, /newly degraded: orchestrate-wave\.projectRecipe/);
-  assert.match(created.body, /still unresolved: orchestrateWaveRecipe:invalid/);
-  assert.match(created.body, /built-in Kit invariants/);
-  assert.doesNotMatch(created.body, /consumer test/i);
-  assert.match(created.body, /never merged automatically/);
-});
-
-test('automated update pull requests carry the required consumer migrations', async () => {
-  const h = harness({ update: {
-    exitCode: 0,
-    stdout: [
-      'newly available: none',
-      'required migration: wrapup-landing-artifact-policy · setup-workflow · '
-        + 'docs/agents/workflow-capabilities.json · wrapup.landingGeneratedArtifactPatterns',
-    ].join('\n'),
-    stderr: '',
-  } });
-
-  await orchestrateUpdatePullRequest(h.options);
-
-  const created = h.calls.find((call) => Array.isArray(call) && call[0] === 'create')[1];
-  assert.match(created.body, /## Required migrations/);
-  assert.match(created.body, /required migration: wrapup-landing-artifact-policy/);
-  assert.match(created.body, /docs\/agents\/workflow-capabilities\.json/);
-  assert.match(created.body, /wrapup\.landingGeneratedArtifactPatterns/);
-});
-
-test('a pull request without pending migrations says so explicitly', async () => {
-  const h = harness({ update: { exitCode: 0, stdout: 'newly available: none', stderr: '' } });
-
-  await orchestrateUpdatePullRequest(h.options);
-
-  const created = h.calls.find((call) => Array.isArray(call) && call[0] === 'create')[1];
-  assert.match(created.body, /## Required migrations\n\nNo required consumer migrations reported\./);
-});
-
-test('a conflict produces a structured report without touching the stable branch', async () => {
-  const h = harness({ update: { exitCode: 2, stdout: 'conflicts: 1', stderr: '' } });
-  const report = await orchestrateUpdatePullRequest(h.options);
-
-  assert.deepEqual(report, {
-    status: 'conflicted',
-    branch: 'agent-workflow-kit/update',
-    update: { exitCode: 2, stdout: 'conflicts: 1', stderr: '' },
-  });
-  assert.deepEqual(h.calls, ['update']);
-});
-
-test('a release mismatch fails without touching the consumer update branch', async () => {
-  const h = harness({ update: { exitCode: 1, stdout: '', stderr: 'release mismatch' } });
-  const report = await orchestrateUpdatePullRequest(h.options);
-
-  assert.equal(report.status, 'failed');
-  assert.equal(report.update.stderr, 'release mismatch');
-  assert.deepEqual(h.calls, ['update']);
-});
-
-test('ambiguous existing pull requests fail before the last good branch is changed', async () => {
-  const h = harness({ pulls: [{ number: 7 }, { number: 9 }] });
-  const report = await orchestrateUpdatePullRequest(h.options);
-
-  assert.equal(report.status, 'failed');
-  assert.equal(report.reason, 'multiple-open-pull-requests');
-  assert.deepEqual(h.calls.map((call) => Array.isArray(call) ? call[0] : call), [
-    'update', 'changes', 'list',
-  ]);
-});
-
-test('an already current consumer is a no-op', async () => {
-  const h = harness({ changed: false });
-  const report = await orchestrateUpdatePullRequest(h.options);
-
-  assert.equal(report.status, 'current');
-  assert.deepEqual(h.calls, ['update', 'changes']);
-});
-
-test('a repeated run updates the one existing stable pull request', async () => {
-  const h = harness({ pulls: [{ number: 7 }] });
-  const report = await orchestrateUpdatePullRequest(h.options);
-
-  assert.equal(report.status, 'updated');
-  assert.equal(report.pullRequest, 7);
-  assert.deepEqual(h.calls.map((call) => Array.isArray(call) ? call[0] : call), [
-    'update', 'changes', 'list', 'publish', 'upsert',
-  ]);
-});
-
-test('publishing commits in place and lease-protects the stable remote branch', async () => {
-  const commands = [];
-  const execute = async (file, args) => {
-    commands.push([file, ...args]);
-    if (args[0] === 'ls-remote') return { stdout: 'abc123\trefs/heads/agent-workflow-kit/update\n', stderr: '' };
-    return { stdout: '', stderr: '' };
-  };
-  const adapter = createSystemAdapters({ cwd: '/consumer', env: {}, execute });
-
-  await adapter.publishBranch('agent-workflow-kit/update');
-
-  const gitCommands = commands.map((command) => command.slice(1));
-  assert.equal(gitCommands.some(([verb]) => ['switch', 'checkout', 'reset'].includes(verb)), false);
-  assert.deepEqual(gitCommands.at(-1), [
-    'push', '--force-with-lease=refs/heads/agent-workflow-kit/update:abc123',
-    'origin', 'HEAD:refs/heads/agent-workflow-kit/update',
-  ]);
-});