@ionivetech/mugiwara 0.6.5 → 0.7.0

package/scripts/evidence.sh

@@ -1,81 +0,0 @@
-#!/usr/bin/env bash
-# scripts/evidence.sh — run a check and capture its evidence.
-# Usage: evidence.sh <mission> <label> [-- command args...]
-# output: .mugiwara/results/<mission>/<label>-<hash>.log
-set -u
-
-die() { echo "evidence: $*" >&2; exit 1; }
-
-MISSION="${1:-}"
-LABEL="${2:-}"
-shift 2 2>/dev/null || true
-
-# strip an optional "--" separator between <label> and the command
-[ "${1:-}" = "--" ] && shift
-
-[ -z "$MISSION" ] && die "usage: evidence.sh <mission> <label> [-- command args...]"
-[ -z "$LABEL" ] && die "usage: evidence.sh <mission> <label> [-- command args...]"
-
-# mission allowlist — path-traversal guard (same rule as mission-report.sh)
-case "$MISSION" in
-  *[!a-zA-Z0-9._-]*) die "invalid mission name \"$MISSION\" (allowlist: [a-zA-Z0-9._-])" ;;
-esac
-
-# label allowlist — LABEL feeds the output filename; traversal or shell
-# metacharacters must not reach the filesystem (same rule as MISSION)
-case "$LABEL" in
-  *[!a-zA-Z0-9._-]*) die "invalid label \"$LABEL\" (allowlist: [a-zA-Z0-9._-])" ;;
-esac
-# dot-only labels (".", "..", "...") pass the char allowlist but escape the
-# results dir — reject them before any filename is built from LABEL.
-if [[ "$LABEL" =~ ^\.+$ ]]; then
-  die "invalid label \"$LABEL\" (allowlist: [a-zA-Z0-9._-], not a dot-path)"
-fi
-
-MUGIWARA_DIR="${MUGIWARA_DIR:-.mugiwara}"
-RESULTS_DIR="$MUGIWARA_DIR/results/$MISSION"
-mkdir -p "$RESULTS_DIR"
-
-TIMESTAMP=$(date +%Y%m%d-%H%M%S)
-HASH=$(echo "${LABEL}-${TIMESTAMP}-$$-${RANDOM}" | (sha256sum 2>/dev/null || shasum -a 256 2>/dev/null || openssl sha256) | cut -c1-12 2>/dev/null || echo "${TIMESTAMP}")
-EVIDENCE_FILE="$RESULTS_DIR/${LABEL}-${HASH}.log"
-
-# Neutralize forged verdict/exit header lines in captured output. The agent
-# trusts the real trailer only (# Exit:/# Verdict: appended after the block);
-# attacker output may try to impersonate it under any spelling — leading
-# whitespace, ANSI prefix, no space, CRLF. Idempotent: already-neutralized
-# #-Verdict: / #-Exit: lines pass through unchanged.
-SANITIZE='s/^[[:space:]]*(\x1b\[[0-9;]*m)*#[[:space:]]*(Verdict|Exit):/#-\2:/'
-
-# command line echoed in the header — collapse embedded newlines so an arg
-# cannot forge a header line inside "# Command:" (the header block is written
-# verbatim, outside the sanitizer).
-COMMAND_LINE=$(printf '%s ' "$@" 2>/dev/null | tr '\n\r' '  ' | sed 's/  *$//')
-
-{
-  echo "# Evidence: $LABEL"
-  echo "# At: $(date -u +%Y-%m-%dT%H:%M:%SZ)"
-  echo "# Command: ${COMMAND_LINE:-<stdin pipeline>}"
-  echo "# ---"
-  echo
-
-  if [ $# -gt 0 ]; then
-    "$@" 2>&1 | sed -E "$SANITIZE"
-    EXIT_CODE=${PIPESTATUS[0]}
-  else
-    sed -E "$SANITIZE"
-    EXIT_CODE=0
-  fi
-} > "$EVIDENCE_FILE"
-
-# trailer: exit code + verdict (D6). The verdict is PASS/FAIL derived from the
-# exit code — the check's own outcome, not the harness's opinion.
-if [ "$EXIT_CODE" -eq 0 ]; then
-  VERDICT="PASS"
-else
-  VERDICT="FAIL"
-fi
-printf '# Exit: %s\n# Verdict: %s\n' "$EXIT_CODE" "$VERDICT" >> "$EVIDENCE_FILE"
-
-echo "$EVIDENCE_FILE"
-exit $EXIT_CODE

package/scripts/initiative.ts

@@ -1,296 +0,0 @@
-#!/usr/bin/env bun
-import { readFileSync, writeFileSync, existsSync } from 'node:fs';
-import { join, resolve } from 'node:path';
-
-const USAGE = `initiative — team sub-mission coordination for mugiwara plans
-
-Usage:
-  bun run scripts/initiative.ts status <plan-file>
-  bun run scripts/initiative.ts conflict-check <plan-file>
-  bun run scripts/initiative.ts set-status <plan-file> --id <id> --status <pending|in-progress|done|blocked>
-
-Commands:
-  status          Parse Sub-missions table, render ASCII dashboard
-  conflict-check  Detect overlapping Touched Files across in-progress sub-missions
-  set-status      Update status marker for a sub-mission row
-`;
-
-interface SubMission {
-  id: string;
-  name: string;
-  assignee: string;
-  branch: string;
-  status: string;
-  dependsOn: string;
-  touchedFiles: string[];
-}
-
-const STATUS_MARKERS: Record<string, string> = {
-  pending: '[ ]',
-  'in-progress': '[~]',
-  done: '[x]',
-  blocked: '[!]',
-};
-
-function resolvePlan(planFile: string): string {
-  const resolved = resolve(process.cwd(), planFile);
-  if (existsSync(resolved)) return resolved;
-
-  const plansDir = join(process.cwd(), '.mugiwara', 'plans');
-  const plansPath = join(plansDir, planFile.endsWith('.md') ? planFile : `${planFile}.md`);
-  if (existsSync(plansPath)) return plansPath;
-  if (!planFile.endsWith('.md') && existsSync(join(plansDir, planFile))) return join(plansDir, planFile);
-
-  const alt = join(plansDir, `${planFile}.md`);
-  const err = `Plan not found: "${planFile}" (tried: ${resolved}, ${plansPath}, ${alt})`;
-  throw new Error(err);
-}
-
-// A plan is a markdown document. Garbage (no markdown structure) is not a
-// "solo mission" — it is a malformed plan. Heading check keeps the
-// no-sub-missions-but-valid-markdown case working as solo mission.
-function assertPlanContent(content: string, planFile: string): void {
-  if (!/^#{1,6}\s/m.test(content)) {
-    throw new Error(`Not a valid plan file: "${planFile}" — expected markdown (no heading found)`);
-  }
-}
-
-function parseSubMissions(content: string): { subs: SubMission[]; hasSection: boolean } {
-  const lines = content.split('\n');
-  let inTable = false;
-  let inSubSection = false;
-  let hasSection = false;
-  const subs: SubMission[] = [];
-
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i];
-    if (line.trim().toLowerCase().startsWith('## sub-missions')) {
-      inSubSection = true;
-      hasSection = true;
-      continue;
-    }
-    if (inSubSection && line.startsWith('## ') && !line.trim().toLowerCase().startsWith('## sub-missions')) {
-      break;
-    }
-    if (!inSubSection) continue;
-
-    const trimmed = line.trim();
-    const lower = trimmed.toLowerCase();
-    if (lower.startsWith('| id ') && lower.includes('| name ')) {
-      inTable = true;
-      continue;
-    }
-    if (inTable && trimmed.startsWith('|---')) continue;
-    if (inTable && trimmed.startsWith('|')) {
-      // Keep interior empty cells (e.g. empty "depends on"): filter(Boolean)
-      // would shift columns and drop the touched-files tail.
-      const cols = trimmed.split('|').map(c => c.trim());
-      while (cols.length && cols[0] === '') cols.shift();
-      while (cols.length && cols[cols.length - 1] === '') cols.pop();
-      if (cols.length >= 6) {
-        subs.push({
-          id: cols[0],
-          name: cols[1],
-          assignee: cols[2],
-          branch: cols[3],
-          status: cols[4].replace('[X]', '[x]'),
-          dependsOn: cols[5],
-          touchedFiles: cols.slice(6).join(' ').split(/[,\s]+/).map(s => s.trim()).filter(Boolean),
-        });
-      }
-    }
-    if (inTable && !trimmed.startsWith('|')) {
-      inTable = false;
-    }
-  }
-
-  return { subs, hasSection };
-}
-
-function assertRowsParsed(planFile: string, content: string): { subs: SubMission[]; hasSection: boolean } {
-  const { subs, hasSection } = parseSubMissions(content);
-  if (hasSection && subs.length === 0) {
-    console.error('initiative: "## Sub-missions" section found but no rows parsed.');
-    console.error('  Expected header: | ID | Name | Assignee | Branch | Status | Depends On | Touched Files |');
-    process.exit(1);
-  }
-  return { subs, hasSection };
-}
-
-function cmdStatus(planFile: string): void {
-  const content = readFileSync(planFile, 'utf8');
-  assertPlanContent(content, planFile);
-  const { subs } = assertRowsParsed(planFile, content);
-
-  if (subs.length === 0) {
-    console.log('No sub-missions found — solo mission.');
-    return;
-  }
-
-  const doneCount = subs.filter(s => s.status === '[x]').length;
-  const total = subs.length;
-  const pct = Math.round((doneCount / total) * 100);
-  const barLen = 20;
-  const filled = Math.round((doneCount / total) * barLen);
-  const bar = '█'.repeat(filled) + '░'.repeat(barLen - filled);
-
-  // dependency blocking: a sub whose dependency is not done is blocked
-  const statusById = new Map(subs.map(s => [s.id, s.status]));
-  const blockedBy = new Map<string, string>();
-  for (const s of subs) {
-    if (s.dependsOn && statusById.has(s.dependsOn) && statusById.get(s.dependsOn) !== '[x]') {
-      blockedBy.set(s.id, s.dependsOn);
-    }
-  }
-
-  console.log(`\n${doneCount}/${total} done [${bar}] ${pct}%\n`);
-  console.log(`${'ID'.padEnd(8)} ${'Name'.padEnd(20)} ${'Assignee'.padEnd(12)} ${'Branch'.padEnd(28)} ${'Status'.padEnd(8)} ${'Depends'.padEnd(10)} ${'Files'}`);
-  console.log('─'.repeat(120));
-
-  for (const s of subs) {
-    const icon = { '[ ]': '◻', '[~]': '◉', '[x]': '✓', '[!]': '✗' }[s.status] || '?';
-    const blocked = blockedBy.has(s.id) ? ` ⛔ blocked-by ${blockedBy.get(s.id)}` : '';
-    console.log(
-      `${s.id.padEnd(8)} ${s.name.padEnd(20)} ${s.assignee.padEnd(12)} ${s.branch.padEnd(28)} ${icon} ${s.status.padEnd(3)} ${s.dependsOn.padEnd(10)} ${s.touchedFiles.join(', ')}${blocked}`
-    );
-  }
-  console.log();
-}
-
-function cmdConflictCheck(planFile: string): void {
-  const content = readFileSync(planFile, 'utf8');
-  assertPlanContent(content, planFile);
-  const { subs } = assertRowsParsed(planFile, content);
-
-  if (subs.length === 0) {
-    console.log('No sub-missions — no conflicts possible.');
-    return;
-  }
-
-  const active = subs.filter(s => s.status === '[~]');
-  if (active.length < 2) {
-    console.log('Fewer than 2 in-progress sub-missions — no conflicts to check.');
-    return;
-  }
-
-  const fileToSubs = new Map<string, string[]>();
-  for (const s of active) {
-    for (const f of s.touchedFiles) {
-      const entries = fileToSubs.get(f) || [];
-      entries.push(s.id);
-      fileToSubs.set(f, entries);
-    }
-  }
-
-  const conflicts: string[] = [];
-  for (const [file, ids] of fileToSubs) {
-    if (ids.length > 1) {
-      conflicts.push(`  ⚠ ${file} — touched by: ${ids.join(', ')}`);
-    }
-  }
-
-  if (conflicts.length === 0) {
-    console.log('No file conflicts among in-progress sub-missions.');
-  } else {
-    console.log(`\n${conflicts.length} file conflict(s) detected:\n`);
-    console.log(conflicts.join('\n'));
-    console.log();
-    process.exit(1);
-  }
-}
-
-function cmdSetStatus(planFile: string, id: string, status: string): void {
-  if (!STATUS_MARKERS[status]) {
-    console.error(`Invalid status: "${status}". Use: pending, in-progress, done, blocked`);
-    process.exit(1);
-  }
-
-  const content = readFileSync(planFile, 'utf8');
-  assertPlanContent(content, planFile);
-  const lines = content.split('\n');
-  const newMarker = STATUS_MARKERS[status];
-  let inTable = false;
-  let inSubSection = false;
-  let found = false;
-
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i];
-    if (line.trim().toLowerCase().startsWith('## sub-missions')) {
-      inSubSection = true;
-      continue;
-    }
-    if (inSubSection && line.startsWith('## ') && !line.trim().toLowerCase().startsWith('## sub-missions')) {
-      break;
-    }
-    if (!inSubSection) continue;
-
-    const trimmed = line.trim();
-    if (trimmed.toLowerCase().startsWith('| id ')) { inTable = true; continue; }
-    if (!inTable || !trimmed.startsWith('|')) continue;
-    if (trimmed.startsWith('|---')) continue;
-
-    // same cell handling as parseSubMissions: interior empty cells preserved
-    const cols = trimmed.split('|').map(c => c.trim());
-    while (cols.length && cols[0] === '') cols.shift();
-    while (cols.length && cols[cols.length - 1] === '') cols.pop();
-    if (cols[0] === id) {
-      let oldMarker = cols[4];
-      if (oldMarker === '[X]') oldMarker = '[x]';
-      if (!Object.values(STATUS_MARKERS).includes(oldMarker)) {
-        console.error(`Row ${id}: status column "${oldMarker}" is not a recognized marker`);
-        process.exit(1);
-      }
-      // rewrite only the status cell — a marker string elsewhere in the row
-      // (name, touched files) must not be clobbered by a row-wide replace
-      lines[i] = `| ${cols.slice(0, 4).join(' | ')} | ${newMarker} | ${cols.slice(5).join(' | ')} |`;
-      found = true;
-      break;
-    }
-  }
-
-  if (!found) {
-    console.error(`Sub-mission "${id}" not found in Sub-missions table.`);
-    process.exit(1);
-  }
-
-  writeFileSync(planFile, lines.join('\n'));
-  console.log(`✓ ${id}: ${status}`);
-}
-
-// --- main ---
-
-const args = process.argv.slice(2);
-
-if (args.length === 0 || args.includes('--help') || args.includes('-h')) {
-  console.log(USAGE);
-  process.exit(0);
-}
-
-const cmd = args[0];
-
-try {
-  if (cmd === 'status') {
-    if (args.length < 2) { console.error('Missing plan-file argument.'); process.exit(1); }
-    cmdStatus(resolvePlan(args[1]));
-  } else if (cmd === 'conflict-check') {
-    if (args.length < 2) { console.error('Missing plan-file argument.'); process.exit(1); }
-    cmdConflictCheck(resolvePlan(args[1]));
-  } else if (cmd === 'set-status') {
-    const idIdx = args.indexOf('--id');
-    const statusIdx = args.indexOf('--status');
-    if (idIdx === -1 || statusIdx === -1 || args.length < 6) {
-      console.error('set-status requires --id <id> --status <status>');
-      process.exit(1);
-    }
-    const id = args[idIdx + 1];
-    const statusVal = args[statusIdx + 1];
-    cmdSetStatus(resolvePlan(args[1]), id, statusVal);
-  } else {
-    console.error(`Unknown command: "${cmd}"`);
-    console.log(USAGE);
-    process.exit(1);
-  }
-} catch (err) {
-  console.error(err instanceof Error ? err.message : String(err));
-  process.exit(1);
-}

package/scripts/mission-report.sh

@@ -1,292 +0,0 @@
-#!/usr/bin/env bash
-# scripts/mission-report.sh — generate aggregate mission report from state.json
-# + per-mission wave artifacts. Usage: mission-report.sh <mission>
-# Output: .mugiwara/reports/YYYY-MM-DD-<mission>.md — one-file summary of all waves.
-# Enriched: mission header, token budget (WARN/STOP flag), tasks (state or plan
-# doc fallback), gate/quality excerpt from 06-closure.md, evidence file list.
-# Every section degrades to n/a when state.json or results/ artifacts are absent.
-set -u
-
-MISSION="${1:-}"
-[ -z "$MISSION" ] && { echo "usage: mission-report.sh <mission>" >&2; exit 1; }
-case "$MISSION" in
-  *[!a-zA-Z0-9._-]*) echo "mission-report: invalid mission name \"$MISSION\" (allowlist: [a-zA-Z0-9._-])" >&2; exit 1 ;;
-esac
-if [[ "$MISSION" =~ ^\.+$ ]]; then
-  echo "mission-report: invalid mission name \"$MISSION\" (allowlist: [a-zA-Z0-9._-], not a dot-path)" >&2; exit 1
-fi
-
-MUGIWARA_DIR="${MUGIWARA_DIR:-.mugiwara}"
-# state lives per (mission, member): solo = state/<mission>/state.json;
-# MEMBER env selects a team member's state, else the solo state.
-MEMBER="${MEMBER:-}"
-case "$MEMBER" in
-  *[!a-zA-Z0-9._-]*) echo "mission-report: invalid member \"$MEMBER\" (allowlist: [a-zA-Z0-9._-])" >&2; exit 1 ;;
-esac
-if [ -n "$MEMBER" ]; then
-  STATE_FILE="$MUGIWARA_DIR/state/$MISSION/$MEMBER.json"
-else
-  STATE_FILE="$MUGIWARA_DIR/state/$MISSION/state.json"
-fi
-REPORT_DIR="$MUGIWARA_DIR/reports"
-RESULTS_DIR="$MUGIWARA_DIR/results/$MISSION"
-REVIEW_DIR="$MUGIWARA_DIR/review"
-ISSUES_DIR="$MUGIWARA_DIR/issues"
-
-export STATE_FILE REPORT_DIR RESULTS_DIR REVIEW_DIR ISSUES_DIR MISSION MUGIWARA_DIR
-node << 'NODE'
-const fs = require('fs');
-const path = require('path');
-
-const stateFile = process.env.STATE_FILE || ".mugiwara/state/unknown/state.json";
-const reportDir = process.env.REPORT_DIR || ".mugiwara/reports";
-const resultsDir = process.env.RESULTS_DIR || ".mugiwara/results/unknown";
-const reviewDir = process.env.REVIEW_DIR || ".mugiwara/review";
-const issuesDir = process.env.ISSUES_DIR || ".mugiwara/issues";
-const mugiDir = process.env.MUGIWARA_DIR || ".mugiwara";
-const mission = process.env.MISSION || "unknown";
-
-fs.mkdirSync(reportDir, { recursive: true });
-
-// state.json is optional — degrade gracefully, never hard-exit
-let s = null;
-if (fs.existsSync(stateFile)) {
-  try {
-    s = JSON.parse(fs.readFileSync(stateFile, 'utf8'));
-  } catch (e) {
-    console.error("mission-report: warning: " + stateFile + " unreadable — degraded report");
-  }
-} else {
-  console.error("mission-report: warning: " + stateFile + " not found — degraded report");
-}
-
-const val = (obj, key, dflt) => {
-  if (!s || !obj) return dflt;
-  const v = obj[key];
-  return (v === undefined || v === null || v === "") ? dflt : v;
-};
-
-const now = new Date().toISOString().slice(0, 10);
-const reportFile = path.join(reportDir, now + "-" + mission + ".md");
-const lane = val(s, 'lane', 'n/a');
-const lanePeak = val(s, 'lane_peak', 'n/a');
-const laneReason = val(s, 'lane_reason', 'n/a');
-const mode = val(s, 'mode', 'n/a');
-const actor = val(s, 'actor', 'n/a');
-const branch = val(s, 'branch', 'n/a');
-const wave = val(s, 'wave', 'n/a');
-const filesTouched = val(s, 'files_touched', 0);
-const locDelta = val(s, 'loc_delta', 0);
-const locChurn = val(s, 'loc_churn', 0);
-const sensitive = s ? (s.sensitive_paths || []) : [];
-const tasks = s ? (s.tasks || {}) : {};
-const blockers = val(s, 'blockers_open', 0);
-const healCycle = val(s, 'heal_cycle', 1);
-const tokens = Number(val(s, 'tokens_est', 0)) || 0;
-const tokensSource = val(s, 'tokens_source', 'n/a');
-const budget = Number(val(s, 'budget', 0)) || 0;
-const budgetStatus = val(s, 'budget_status', 'n/a');
-const evidence = s ? (s.evidence || []) : [];
-const updated = val(s, 'updated_at', now);
-
-// --- wave artifact scan: results/<mission>/NN-*.md with verdict sniffing ---
-const WAVE_LABEL = {
-  "01-execution": "Execute (Wave 3)",
-  "02-audit": "Checkpoint (Wave 4)",
-  "03-quality": "Quality (Wave 5)",
-  "04-gates": "Gates (Wave 6)",
-  "05-healing": "Healing (Wave 8)",
-  "06-closure": "Closure (Wave 9)",
-  "07-pr-verdict": "PR material",
-};
-
-const WAVE_FILES = new Set(Object.keys(WAVE_LABEL));
-
-function sniffVerdict(file) {
-  const text = fs.readFileSync(file, 'utf8');
-  const lines = text.split(/\r?\n/).filter(l => /pass|fail|✅|❌|verdict|go|no-go/i.test(l));
-  for (const l of lines) {
-    const m = l.match(/(NO-GO|GO|PASS|FAIL|✅|❌)/i);
-    if (m) return m[1].toUpperCase();
-  }
-  return "?";
-}
-
-const waveRows = [];
-if (fs.existsSync(resultsDir)) {
-  const files = fs.readdirSync(resultsDir).filter(f => f.endsWith('.md')).sort();
-  for (const f of files) {
-    const base = f.replace(/\.md$/, '');
-    if (!WAVE_FILES.has(base)) continue; // support files (todos.md, resume.md, eval.md, evidence logs) not in waves table
-    const label = WAVE_LABEL[base];
-    const verdict = sniffVerdict(path.join(resultsDir, f));
-    waveRows.push({ label, file: f, verdict });
-  }
-}
-
-// --- review + issues scan: aggregate findings count + open blockers ---
-let reviewFiles = [];
-let reviewFindings = 0;
-if (fs.existsSync(reviewDir)) {
-  reviewFiles = fs.readdirSync(reviewDir).filter(f => (f.startsWith(mission + "-") || f.startsWith(mission + "/")) && f.endsWith('.md'));
-  for (const f of reviewFiles) {
-    const text = fs.readFileSync(path.join(reviewDir, f), 'utf8');
-    reviewFindings += (text.match(/^\s*(?:#+\s*)?(?:🔴|🟠|🟡|⚪)(?:\s*\/\s*(?:🔴|🟠|🟡|⚪))?\s+.*/gm) || []).length;
-  }
-}
-
-let issueRows = [];
-if (fs.existsSync(issuesDir)) {
-  const issueFiles = fs.readdirSync(issuesDir).filter(f => (f.startsWith(mission + "-") || f.startsWith(mission + "/")) && f.endsWith('.md'));
-  for (const f of issueFiles) {
-    const text = fs.readFileSync(path.join(issuesDir, f), 'utf8');
-    for (const line of text.split(/\r?\n/)) {
-      if (line.trim().startsWith('|') && line.includes('|') && !line.includes('---')) {
-        const cells = line.split('|').map(c => c.trim()).filter(Boolean);
-        if (cells.length >= 5 && !/^wave$/i.test(cells[0])) issueRows.push(cells.join(" | "));
-      }
-    }
-  }
-}
-
-// --- tasks: state.json counts, plan-doc fallback (savepoint-style counting) ---
-function findPlan(mDir, m) {
-  const plansDir = path.join(mDir, 'plans');
-  if (!fs.existsSync(plansDir)) return null;
-  const direct = path.join(plansDir, m + '.md');
-  if (fs.existsSync(direct)) return direct;
-  const matches = fs.readdirSync(plansDir).filter(f => f.endsWith('-' + m + '.md'));
-  return matches.length ? path.join(plansDir, matches.sort()[0]) : null;
-}
-
-let tasksDone = tasks.done || 0;
-let tasksTotal = tasks.total || 0;
-let tasksSource = "state.json";
-if (tasksTotal === 0) {
-  const plan = findPlan(mugiDir, mission);
-  if (plan) {
-    const lines = fs.readFileSync(plan, 'utf8').split(/\r?\n/);
-    const done = lines.filter(l => l.includes('[x]')).length;
-    const total = done + lines.filter(l => l.includes('[ ]')).length;
-    if (total > 0) {
-      tasksDone = done;
-      tasksTotal = total;
-      tasksSource = "plan doc";
-    }
-  }
-}
-if (tasksDone === 0 && tasksTotal === 0) { tasksDone = 'n/a'; tasksTotal = 'n/a'; }
-
-// --- token budget flag: WARN/STOP line when status is not ok ---
-let budgetFlag = "";
-if (budgetStatus === "warn" || budgetStatus === "stop") {
-  const warnAt = Math.floor(budget * 3 / 2);
-  const stopAt = budget * 3;
-  if (budgetStatus === "stop") {
-    budgetFlag = "🛑 STOP: tokens " + tokens.toLocaleString() + " ≥ 3× budget " + budget.toLocaleString() + " (stop at " + stopAt.toLocaleString() + ") — halt; escalate to Luffy";
-  } else {
-    budgetFlag = "⚠ WARN: tokens " + tokens.toLocaleString() + " ≥ 1.5× budget " + budget.toLocaleString() + " (warn at " + warnAt.toLocaleString() + ") — checkpoint before continuing";
-  }
-}
-
-// --- gate/quality excerpt: headings + body from 06-closure.md, as-is ---
-function sectionExcerpt(file, heading) {
-  if (!fs.existsSync(file)) return null;
-  const lines = fs.readFileSync(file, 'utf8').split(/\r?\n/);
-  let collecting = false;
-  let content = 0;
-  const out = [];
-  for (const l of lines) {
-    if (/^##\s/.test(l)) {
-      if (collecting) break;
-      if (l.trim() === heading) { collecting = true; out.push(l); continue; }
-    } else if (collecting) {
-      if (l.trim()) {
-        out.push(l);
-        content++;
-        if (content >= 20) break; // cap excerpt
-      }
-    }
-  }
-  return collecting ? out : null;
-}
-
-const closureFile = path.join(resultsDir, "06-closure.md");
-const gateSec = sectionExcerpt(closureFile, "## Gate verdicts");
-const testsSec = sectionExcerpt(closureFile, "## Tests");
-
-// --- evidence file list: all .md artifacts in results/<mission>/ ---
-let evidenceFiles = [];
-if (fs.existsSync(resultsDir)) {
-  evidenceFiles = fs.readdirSync(resultsDir).filter(f => f.endsWith('.md')).sort();
-}
-
-// --- assemble report ---
-let report = "# Mission: " + mission + " . " + now + "\n\n";
-
-report += "## Mission header\n\n| Field | Value |\n|-------|-------|\n";
-report += "| Mission | " + mission + " |\n";
-report += "| Branch | " + branch + " |\n";
-report += "| Lane | " + lane + " |\n";
-report += "| Lane peak | " + lanePeak + " |\n";
-report += "| Lane reason | " + laneReason + " |\n";
-report += "| Mode | " + mode + " |\n";
-report += "| Wave | " + wave + " |\n";
-report += "| Actor | " + actor + " |\n\n";
-
-report += "## Token budget\n\n| Field | Value |\n|-------|-------|\n";
-report += "| Tokens (est) | " + tokens.toLocaleString() + " |\n";
-report += "| Tokens source | " + tokensSource + " |\n";
-report += "| Budget | " + budget.toLocaleString() + " |\n";
-report += "| Budget status | " + budgetStatus + " |\n";
-if (budgetFlag) report += "\n" + budgetFlag;
-report += "\n\n";
-
-report += "## Tasks\n\n| Field | Value |\n|-------|-------|\n";
-report += "| Done | " + tasksDone + " |\n";
-report += "| Total | " + tasksTotal + " |\n";
-report += "| Source | " + tasksSource + " |\n\n";
-
-report += "## What changed\n\n";
-report += filesTouched + " files, +" + locDelta + " LOC (" + locChurn + " churn)";
-if (sensitive.length) report += "\nSensitive paths: " + sensitive.join(", ");
-report += "\n\n";
-
-report += "## Waves\n\n| Wave | Artifact | Verdict |\n|------|----------|---------|";
-if (waveRows.length) {
-  for (const r of waveRows) report += "\n| " + r.label + " | `" + r.file + "` | " + r.verdict + " |";
-} else {
-  report += "\n| (no wave artifacts found in `" + resultsDir + "`) | | |";
-}
-report += "\n\n";
-
-report += "## Gate & quality\n\n";
-if (gateSec) report += gateSec.join("\n") + "\n";
-if (testsSec) report += (gateSec ? "\n" : "") + testsSec.join("\n") + "\n";
-if (!gateSec && !testsSec) report += "n/a\n";
-report += "\n";
-
-report += "## Evidence files\n\n";
-report += evidenceFiles.length ? evidenceFiles.map(f => "- " + f).join("\n") : "n/a";
-report += "\n\n";
-
-report += "## Review & blockers\n\n";
-report += "Review + security files: " + (reviewFiles.length ? reviewFiles.join(", ") : "none") + "\n";
-report += "Findings: " + reviewFindings + "\n";
-report += "Blocker ledger rows: " + issueRows.length + (issueRows.length ? "\n" + issueRows.map(r => "- " + r).join("\n") : "");
-report += "\n\n";
-
-report += "## State\n\n| Field | Value |\n|-------|-------|\n";
-report += "| Wave | " + wave + " |\n";
-report += "| Tasks | " + (tasks.done || 0) + "/" + (tasks.total || 0) + " done |\n";
-report += "| Blockers open | " + blockers + " |\n";
-report += "| Heal cycles | " + healCycle + " |\n";
-report += "| Tokens used | " + tokens.toLocaleString() + " / " + budget.toLocaleString() + " |\n\n";
-
-report += "## Evidence\n\n";
-report += evidence.length ? evidence.map(e => "- " + e).join("\n") : "n/a";
-report += "\n\n## Updated\n\n" + updated + "\n";
-
-fs.writeFileSync(reportFile, report);
-console.log("\u2713 mission report: " + reportFile);
-NODE