@kontourai/flow-agents 2.3.0 → 2.4.0

package/evals/integration/test_promote_gate.sh

@@ -0,0 +1,178 @@
+#!/usr/bin/env bash
+# test_promote_gate.sh - promote-then-archive gate (issue #312).
+#
+# Durable-residue extraction is the archival act. Covers:
+#   1. promote writes a well-formed, session-local promotion claim referencing
+#      existing durable doc paths (metadata.promotion + policy_rule evidence, no
+#      execution.label) and an auditable promotion.json.
+#   2. promote REJECTS a nonexistent --evidence-path (fail loud).
+#   3. promote --none --reason records an explicit no-residue claim; --none without
+#      --reason is refused.
+#   4. cleanup-audit classification: a delivered/accepted session WITHOUT a promotion
+#      claim is a cleanup_candidate (blocked from archive) with a remedy naming the
+#      promote step; WITH a real claim OR a --none claim it stays terminal_done (AC1-3).
+#   5. CRITICAL: trust-reconcile stays exit 0 on a bundle carrying a promotion claim -
+#      the claim classifies session-local (ATTESTED), never an unbacked/not-run command
+#      divergence (proves R1 reconcile-safety, no new manifest entry required).
+#
+# Deterministic, no model spend, self-cleaning.
+# Usage: bash evals/integration/test_promote_gate.sh
+set -uo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+source "$ROOT/evals/lib/node.sh"
+
+TMP="$(mktemp -d)"
+trap 'rm -rf "$TMP"' EXIT
+unset FORCE_COLOR  # known local artifact that can perturb child-process output
+
+errors=0
+pass() { echo "  PASS: $1"; }
+fail() { echo "  FAIL: $1"; errors=$((errors + 1)); }
+
+echo "=== Promote-then-archive gate (#312) ==="
+
+# JSON reader helpers (dedicated files; no inline interpreter flags).
+cat > "$TMP/inspect.cjs" <<'JS'
+const fs = require("fs");
+const b = JSON.parse(fs.readFileSync(process.argv[2], "utf8"));
+const claim = (b.claims || []).find((c) => c.metadata && c.metadata.promotion);
+const ev = claim && (b.evidence || []).find((e) => e.claimId === claim.id);
+const out = {
+  found: String(!!claim),
+  status: (claim && claim.status) || "",
+  targets: (claim && claim.metadata.promotion.targets) || [],
+  none: String(claim ? claim.metadata.promotion.none : ""),
+  evidenceType: (ev && ev.evidenceType) || "",
+  hasExecutionLabel: String(!!(ev && ev.execution && ev.execution.label)),
+};
+fs.writeFileSync(process.argv[3], JSON.stringify(out));
+JS
+cat > "$TMP/field.cjs" <<'JS'
+const fs = require("fs");
+const o = JSON.parse(fs.readFileSync(process.argv[2], "utf8"));
+let v = o;
+for (const k of process.argv[3].split(".")) v = v[k];
+console.log(Array.isArray(v) ? v.join(",") : v);
+JS
+cat > "$TMP/bucketof.cjs" <<'JS'
+const fs = require("fs");
+const d = JSON.parse(fs.readFileSync(process.argv[2], "utf8"));
+for (const [b, arr] of Object.entries(d.buckets)) {
+  for (const it of arr) if (it.slug === process.argv[3]) { console.log(b + "|" + (it.reasons[0] || "")); process.exit(0); }
+}
+console.log("MISSING|");
+JS
+
+REPO="$TMP/repo"
+mkdir -p "$REPO/kits" "$REPO/docs/decisions" "$REPO/docs/learnings"
+printf 'x\n' > "$REPO/docs/decisions/promotion-gate.md"
+printf 'y\n' > "$REPO/docs/learnings/note.md"
+SESSION_ROOT="$REPO/.kontourai/flow-agents"
+
+ensure() {
+  flow_agents_node workflow-sidecar ensure-session \
+    --artifact-root "$SESSION_ROOT" --task-slug "$1" \
+    --source-request "r" --title "T" --summary "s" \
+    --criterion "c1" --next-action "n" --timestamp "2026-07-02T00:00:00Z" \
+    >/dev/null 2>"$TMP/$1.ensure.err"
+}
+seed_evidence() {
+  flow_agents_node workflow-sidecar record-evidence "$1" --verdict pass \
+    --check-json '{"id":"docs-check","kind":"policy","status":"pass","summary":"docs reviewed"}' \
+    --timestamp "2026-07-02T00:01:00Z" >/dev/null 2>"$TMP/ev.err"
+}
+term_state() {
+  printf '{"schema_version":"1.0","task_slug":"%s","status":"accepted","phase":"done","updated_at":"2026-07-02T00:00:00Z","next_action":{"status":"done","summary":"done"}}' "$2" > "$1/state.json"
+}
+field() { node "$TMP/field.cjs" "$1" "$2"; }
+
+# --- 1. promote writes a well-formed session-local claim ---------------------
+ensure promoted
+PDIR="$SESSION_ROOT/promoted"
+seed_evidence "$PDIR"
+if flow_agents_node workflow-sidecar promote "$PDIR" --repo-root "$REPO" \
+     --evidence-path docs/decisions/promotion-gate.md \
+     --evidence-path docs/learnings/note.md \
+     --timestamp "2026-07-02T00:02:00Z" >"$TMP/promote.out" 2>"$TMP/promote.err"; then
+  pass "promote with existing paths exits 0"
+else
+  fail "promote with existing paths should exit 0: $(cat "$TMP/promote.err")"
+fi
+[[ -f "$PDIR/promotion.json" ]] && pass "promote writes auditable promotion.json" || fail "promote writes auditable promotion.json"
+
+node "$TMP/inspect.cjs" "$PDIR/trust.bundle" "$TMP/shape.json"
+[[ "$(field "$TMP/shape.json" found)" == "true" ]] && pass "bundle carries a promotion claim (metadata.promotion)" || fail "bundle carries a promotion claim"
+[[ "$(field "$TMP/shape.json" status)" == "verified" ]] && pass "promotion claim derives status verified" || fail "promotion claim derives status verified (got $(field "$TMP/shape.json" status))"
+[[ "$(field "$TMP/shape.json" evidenceType)" == "policy_rule" ]] && pass "promotion evidence is session-local policy_rule" || fail "promotion evidence is session-local policy_rule (got $(field "$TMP/shape.json" evidenceType))"
+[[ "$(field "$TMP/shape.json" hasExecutionLabel)" == "false" ]] && pass "promotion claim carries no execution.label (never a manifest command)" || fail "promotion claim must not carry an execution.label"
+[[ "$(field "$TMP/shape.json" targets)" == "docs/decisions/promotion-gate.md,docs/learnings/note.md" ]] && pass "promotion evidence refs = the durable doc paths written" || fail "promotion targets wrong: $(field "$TMP/shape.json" targets)"
+
+# --- 2. promote rejects a nonexistent path -----------------------------------
+if flow_agents_node workflow-sidecar promote "$PDIR" --repo-root "$REPO" \
+     --evidence-path docs/decisions/does-not-exist.md \
+     --timestamp "2026-07-02T00:03:00Z" >"$TMP/bad.out" 2>"$TMP/bad.err"; then
+  fail "promote should reject a nonexistent evidence path"
+else
+  grep -q "does not exist on disk" "$TMP/bad.err" && pass "promote rejects a nonexistent evidence path (fail loud)" || fail "promote rejection message unclear: $(cat "$TMP/bad.err")"
+fi
+
+# --- 3. explicit no-residue promotion ----------------------------------------
+ensure none-promoted
+NDIR="$SESSION_ROOT/none-promoted"
+seed_evidence "$NDIR"
+if flow_agents_node workflow-sidecar promote "$NDIR" --repo-root "$REPO" \
+     --none --reason "no durable residue: pure refactor" \
+     --timestamp "2026-07-02T00:04:00Z" >"$TMP/none.out" 2>"$TMP/none.err"; then
+  pass "promote --none --reason exits 0"
+else
+  fail "promote --none --reason should exit 0: $(cat "$TMP/none.err")"
+fi
+node "$TMP/inspect.cjs" "$NDIR/trust.bundle" "$TMP/noneshape.json"
+[[ "$(field "$TMP/noneshape.json" none)" == "true" ]] && pass "no-residue claim records none=true" || fail "no-residue claim should record none=true"
+
+if flow_agents_node workflow-sidecar promote "$NDIR" --none \
+     --timestamp "2026-07-02T00:05:00Z" >"$TMP/none2.out" 2>"$TMP/none2.err"; then
+  fail "promote --none without --reason should be refused"
+else
+  grep -q "requires --reason" "$TMP/none2.err" && pass "promote --none without --reason is refused" || fail "promote --none reason-required message unclear"
+fi
+
+# --- 4. cleanup-audit classification with/without the claim ------------------
+AUDIT_ROOT="$TMP/audit-root"
+mkdir -p "$AUDIT_ROOT/promoted" "$AUDIT_ROOT/none-promoted" "$AUDIT_ROOT/unpromoted"
+term_state "$AUDIT_ROOT/promoted" promoted
+term_state "$AUDIT_ROOT/none-promoted" none-promoted
+term_state "$AUDIT_ROOT/unpromoted" unpromoted
+cp "$PDIR/trust.bundle" "$AUDIT_ROOT/promoted/trust.bundle"
+cp "$NDIR/trust.bundle" "$AUDIT_ROOT/none-promoted/trust.bundle"
+# unpromoted: deliberately no trust.bundle
+
+flow_agents_node workflow-artifact-cleanup-audit --artifact-root "$AUDIT_ROOT" --json > "$TMP/audit.json" 2>&1
+bucketof() { node "$TMP/bucketof.cjs" "$TMP/audit.json" "$1"; }
+[[ "$(bucketof promoted | cut -d'|' -f1)" == "terminal_done" ]] && pass "promoted session stays terminal_done" || fail "promoted session should be terminal_done (got $(bucketof promoted))"
+[[ "$(bucketof none-promoted | cut -d'|' -f1)" == "terminal_done" ]] && pass "no-residue promoted session stays terminal_done" || fail "no-residue session should be terminal_done (got $(bucketof none-promoted))"
+[[ "$(bucketof unpromoted | cut -d'|' -f1)" == "cleanup_candidate" ]] && pass "unpromoted delivered session is a cleanup_candidate (archive blocked)" || fail "unpromoted session should be cleanup_candidate (got $(bucketof unpromoted))"
+bucketof unpromoted | grep -q "promote" && pass "cleanup_candidate reason names the promote remedy" || fail "cleanup_candidate reason should name the promote step"
+
+# --- 5. CRITICAL: trust-reconcile exit 0 on a bundle with a promotion claim --
+if node "$ROOT/scripts/ci/trust-reconcile.js" --bundle "$PDIR/trust.bundle" \
+     --commands "true" --repo-root "$REPO" >"$TMP/reconcile.out" 2>&1; then
+  pass "trust-reconcile exits 0 on a bundle carrying a promotion claim"
+else
+  fail "trust-reconcile should exit 0 on a promotion-claim bundle: $(tail -5 "$TMP/reconcile.out")"
+fi
+if grep -q "ATTESTED" "$TMP/reconcile.out" && ! grep -q "trust divergence" "$TMP/reconcile.out"; then
+  pass "promotion claim classifies session-local (ATTESTED), never an unbacked/not-run command"
+else
+  fail "promotion claim must classify session-local, not as a command divergence"
+  grep -iE "classified|ATTESTED|trust divergence" "$TMP/reconcile.out"
+fi
+
+echo ""
+if [[ "$errors" -eq 0 ]]; then
+  echo "Promote-then-archive gate checks passed"
+else
+  echo "Promote-then-archive gate checks failed: $errors"
+  exit 1
+fi

package/evals/integration/test_publish_delivery.sh

@@ -41,10 +41,10 @@ code_lines = [
   "const fs = require('fs');",
   "const [,, dest, label, passingStr] = process.argv;",
   "const passing = passingStr === 'true';",
-  "const b = { schemaVersion: 3, source: 'test-fixture',",
+  "const b = { schemaVersion: 5, source: 'test-fixture',",
   "  claims: [{ id: 'c1', claimType: 'workflow.check.build',",
   "    value: passing ? 'pass' : 'fail', status: passing ? 'verified' : 'disputed',",
-  "    subjectId: 'ts/build', surface: 'flow-agents.workflow',",
+  "    subjectId: 'ts/build', facet: 'flow-agents.workflow',",
   "    subjectType: 'workflow-check', fieldOrBehavior: 'build',",
   "    createdAt: '2026-06-27T00:00:00Z', updatedAt: '2026-06-27T00:00:00Z',",
   "    impactLevel: 'high', verificationPolicyId: 'policy:wf.build' }],",

package/evals/integration/test_pull_work_liveness_preflight.sh

@@ -0,0 +1,386 @@
+#!/usr/bin/env bash
+# test_pull_work_liveness_preflight.sh — integration eval for the pull-work liveness
+# selection preflight (issue #166, extended by ADR 0021 §1/§3; plan artifact at
+# .kontourai/flow-agents/kontourai-flow-agents-166/kontourai-flow-agents-166--plan-work.md,
+# Wave 2). Deterministic, no model spend, self-cleaning (mktemp -d + trap EXIT).
+#
+# Covers, per the plan's Wave 2 eval tasks (writer-shape unit checks + two-actor CLI-level
+# exclusion simulation + static skill-text assertions, folded into one file):
+#   A. `liveness whoami` / `resolve-slug` CLI unit shapes (AC7):
+#      derived-actor fallback (ancestry/env chain), explicit --actor override, forced-unresolved
+#      non-throwing shape (contrasted with `liveness claim`'s still-fail-loud behavior), and
+#      resolve-slug's deterministic slug format + malformed-ref rejection (proving no duplicate
+#      validation logic exists outside workItemSlug()).
+#   B. resolve-slug parity with the workItemSlug()-derived `ensure-session --work-item` session
+#      directory (AC4).
+#   C. The deterministic two-actor CLI-level classification simulation (AC1, AC2, AC3, AC5):
+#      held (other-actor verified) / mine (self-actor verified) / reclaimable (stale, raw status
+#      not label) / free (no rows) / claim-emit-on-selection / force-write unconstrained at the
+#      CLI layer (Design Decision 4 — no holder-conflict check to override).
+#   D. Static skill-text require_text/reject_text assertions against the plan's prescribed
+#      sentences in kits/builder/skills/pull-work/SKILL.md and
+#      kits/builder/skills/pickup-probe/SKILL.md (AC6, AC8), including that the existing
+#      no-provider-mutation sentence is present and unchanged.
+#
+# Usage: bash evals/integration/test_pull_work_liveness_preflight.sh
+
+set -uo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+source "$ROOT/evals/lib/node.sh"
+
+WRITER="workflow-sidecar"
+SIDECAR_SRC="$ROOT/src/cli/workflow-sidecar.ts"
+PULL="$ROOT/kits/builder/skills/pull-work/SKILL.md"
+PICKUP_PROBE="$ROOT/kits/builder/skills/pickup-probe/SKILL.md"
+
+for m in "$SIDECAR_SRC" "$PULL" "$PICKUP_PROBE"; do
+  if [[ ! -f "$m" ]]; then
+    echo "pull-work liveness preflight eval skipped: $m does not exist yet." >&2
+    exit 1
+  fi
+done
+
+TMPDIR_EVAL="$(mktemp -d)"
+trap 'rm -rf "$TMPDIR_EVAL"' EXIT
+
+errors=0
+_pass() { echo "  ✓ $1"; }
+_fail() { echo "  ✗ $1"; errors=$((errors + 1)); }
+
+require_text() {
+  local path="$1" pattern="$2" label="$3"
+  if rg -q -- "$pattern" "$path"; then _pass "$label"; else _fail "$label"; fi
+}
+
+reject_text() {
+  local path="$1" pattern="$2" label="$3"
+  if rg -q -- "$pattern" "$path"; then _fail "$label"; else _pass "$label"; fi
+}
+
+# new_scratch — fresh scratch artifact-root under the eval's own tmpdir.
+new_scratch() {
+  mktemp -d "$TMPDIR_EVAL/scratch-XXXXXX"
+}
+
+echo "=== Pull work liveness preflight (#166) ==="
+
+# ─── A. `liveness whoami` / `resolve-slug` CLI unit shapes (AC7) ────────────
+echo "--- A. whoami / resolve-slug unit shapes ---"
+
+A_ROOT="$(new_scratch)/.kontourai/flow-agents"
+
+# A1: derived-actor fallback — no explicit --actor/--json flag beyond a CLAUDE_CODE_SESSION_ID
+# env override (mirrors the two-holders env-injection pattern from
+# evals/integration/test_workflow_sidecar_writer.sh) — returns a JSON object with non-empty
+# actor/source fields, exit 0.
+A1_OUT="$(CLAUDE_CODE_SESSION_ID=sess-a flow_agents_node "$WRITER" liveness whoami --json --artifact-root "$A_ROOT" 2>"$TMPDIR_EVAL/a1.err")"
+A1_STATUS=$?
+if [[ "$A1_STATUS" -eq 0 ]] && node -e '
+const o = JSON.parse(process.argv[1]);
+if (typeof o.actor !== "string" || !o.actor) throw new Error("actor missing/empty");
+if (typeof o.source !== "string" || !o.source) throw new Error("source missing/empty");
+' "$A1_OUT" 2>"$TMPDIR_EVAL/a1-check.err"; then
+  _pass "liveness whoami --json (derived-actor fallback) exits 0 with non-empty actor/source (AC7)"
+else
+  _fail "liveness whoami derived-actor fallback did not return the expected shape: out=$A1_OUT status=$A1_STATUS err=$(cat "$TMPDIR_EVAL/a1.err" "$TMPDIR_EVAL/a1-check.err" 2>/dev/null)"
+fi
+
+# A2: explicit --actor override, after sanitizeSegment.
+A2_OUT="$(flow_agents_node "$WRITER" liveness whoami --actor custom-name --json --artifact-root "$A_ROOT" 2>"$TMPDIR_EVAL/a2.err")"
+if [[ "$A2_OUT" == '{"actor":"custom-name","source":"explicit-override"}' ]]; then
+  _pass "liveness whoami --actor custom-name --json returns {actor, source: explicit-override} (AC7)"
+else
+  _fail "liveness whoami --actor override mismatch: out=$A2_OUT err=$(cat "$TMPDIR_EVAL/a2.err")"
+fi
+
+# A3: forced-unresolved actor — whoami never dies / never exits nonzero (read-only, advisory,
+# non-enforcing contract), even though the actor could not be resolved.
+if A3_OUT="$(FLOW_AGENTS_ACTOR_TEST_FORCE_UNRESOLVED=1 NODE_ENV=test flow_agents_node "$WRITER" liveness whoami --json --artifact-root "$A_ROOT" 2>"$TMPDIR_EVAL/a3.err")" \
+  && [[ "$A3_OUT" == '{"actor":"","source":"test-forced-unresolved"}' ]]; then
+  _pass "liveness whoami never dies under a forced-unresolved actor — prints {actor:\"\", source:\"test-forced-unresolved\"} and exits 0 (AC7, read-only contract)"
+else
+  _fail "liveness whoami under forced-unresolved actor did not behave as expected: out=$A3_OUT err=$(cat "$TMPDIR_EVAL/a3.err")"
+fi
+
+# A4: contrast — `liveness claim` under the SAME forced-unresolved env still fails loud (dies),
+# proving the enforcement point stays at the write path, not whoami.
+if FLOW_AGENTS_ACTOR_TEST_FORCE_UNRESOLVED=1 NODE_ENV=test flow_agents_node "$WRITER" liveness claim forced-unresolved-preflight-subj --artifact-root "$A_ROOT" >"$TMPDIR_EVAL/a4.out" 2>"$TMPDIR_EVAL/a4.err"; then
+  _fail "liveness claim under a forced-unresolved actor should have exited nonzero (contrast with whoami)"
+elif rg -q -- '--actor' "$TMPDIR_EVAL/a4.err" && rg -q -- 'FLOW_AGENTS_ACTOR' "$TMPDIR_EVAL/a4.err"; then
+  _pass "liveness claim still fails loud (nonzero exit, remediation naming --actor/FLOW_AGENTS_ACTOR) under the same forced-unresolved env whoami tolerates (AC7 contrast)"
+else
+  _fail "liveness claim forced-unresolved rejection lacked expected remediation: $(cat "$TMPDIR_EVAL/a4.out" "$TMPDIR_EVAL/a4.err")"
+fi
+
+# A5: resolve-slug deterministic slug format.
+A5_OUT="$(flow_agents_node "$WRITER" resolve-slug 'kontourai/flow-agents#166' 2>"$TMPDIR_EVAL/a5.err")"
+A5_STATUS=$?
+if [[ "$A5_STATUS" -eq 0 ]] && [[ "$A5_OUT" == "kontourai-flow-agents-166" ]]; then
+  _pass "resolve-slug kontourai/flow-agents#166 prints kontourai-flow-agents-166 and exits 0 (AC4, AC7)"
+else
+  _fail "resolve-slug deterministic format mismatch: out=$A5_OUT status=$A5_STATUS err=$(cat "$TMPDIR_EVAL/a5.err")"
+fi
+
+# A6: malformed ref (no #id) is rejected with workItemSlug()'s existing message — proves no
+# duplicate validation logic was introduced for resolve-slug.
+if flow_agents_node "$WRITER" resolve-slug 'owner/repo' >"$TMPDIR_EVAL/a6.out" 2>"$TMPDIR_EVAL/a6.err"; then
+  _fail "resolve-slug should reject a ref with no # separator"
+elif rg -q -- 'owner/repo#id format' "$TMPDIR_EVAL/a6.err"; then
+  _pass "resolve-slug rejects a ref with no # separator using workItemSlug()'s existing message (AC7)"
+else
+  _fail "resolve-slug malformed-ref rejection message mismatch: $(cat "$TMPDIR_EVAL/a6.out" "$TMPDIR_EVAL/a6.err")"
+fi
+
+# A7: non-numeric id is rejected with workItemSlug()'s existing message.
+if flow_agents_node "$WRITER" resolve-slug 'owner/repo#abc' >"$TMPDIR_EVAL/a7.out" 2>"$TMPDIR_EVAL/a7.err"; then
+  _fail "resolve-slug should reject a non-numeric issue id"
+elif rg -q -- 'numeric issue number' "$TMPDIR_EVAL/a7.err"; then
+  _pass "resolve-slug rejects a non-numeric issue id using workItemSlug()'s existing message (AC7)"
+else
+  _fail "resolve-slug non-numeric-id rejection message mismatch: $(cat "$TMPDIR_EVAL/a7.out" "$TMPDIR_EVAL/a7.err")"
+fi
+
+# ─── B. resolve-slug parity with ensure-session --work-item session dir (AC4) ───
+echo "--- B. resolve-slug parity with ensure-session --work-item ---"
+
+B_ROOT="$(new_scratch)/.kontourai/flow-agents"
+if flow_agents_node "$WRITER" ensure-session \
+  --artifact-root "$B_ROOT" \
+  --work-item 'owner/repo#42' \
+  --title "Parity Check" \
+  --summary "resolve-slug parity fixture." \
+  --timestamp "2026-07-01T00:00:00Z" >"$TMPDIR_EVAL/b-ensure.out" 2>"$TMPDIR_EVAL/b-ensure.err"; then
+  B_SESSION_DIR="$(find "$B_ROOT" -mindepth 1 -maxdepth 1 -type d ! -name liveness | head -n1)"
+  B_SLUG_FROM_DIR="$(basename "$B_SESSION_DIR")"
+  B_SLUG_FROM_RESOLVE="$(flow_agents_node "$WRITER" resolve-slug 'owner/repo#42' 2>"$TMPDIR_EVAL/b-resolve.err")"
+  if [[ -n "$B_SESSION_DIR" ]] && [[ "$B_SLUG_FROM_DIR" == "$B_SLUG_FROM_RESOLVE" ]]; then
+    _pass "resolve-slug owner/repo#42 ($B_SLUG_FROM_RESOLVE) matches the ensure-session --work-item session directory name ($B_SLUG_FROM_DIR) (AC4)"
+  else
+    _fail "resolve-slug/ensure-session session-dir parity mismatch: dir=$B_SLUG_FROM_DIR resolve-slug=$B_SLUG_FROM_RESOLVE err=$(cat "$TMPDIR_EVAL/b-resolve.err")"
+  fi
+else
+  _fail "ensure-session --work-item owner/repo#42 fixture setup failed: $(cat "$TMPDIR_EVAL/b-ensure.out" "$TMPDIR_EVAL/b-ensure.err")"
+fi
+
+# ─── C. Two-actor CLI-level classification simulation (AC1, AC2, AC3, AC5) ──
+echo "--- C. Two-actor classification simulation ---"
+
+C_ROOT="$(new_scratch)/.kontourai/flow-agents"
+
+# status_row_json <root> <subjectId> <now_iso> — prints the raw `liveness status --json --subject`
+# array for the given subject (the preflight's exact read shape: full row set, one call).
+status_row_json() {
+  local root="$1" subject="$2" now="$3"
+  flow_agents_node "$WRITER" liveness status --json --subject "$subject" --now "$now" --artifact-root "$root"
+}
+
+# C1/C2: Held-exclusion + own-actor mine — actor agent-a claims subject subj-held.
+flow_agents_node "$WRITER" liveness claim subj-held --actor agent-a --at "2026-07-01T12:00:00Z" --ttl 1800 --artifact-root "$C_ROOT" >/dev/null 2>"$TMPDIR_EVAL/c-claim-a.err"
+C1_STATUS="$(status_row_json "$C_ROOT" subj-held "2026-07-01T12:10:00Z")"
+C1_ROW_ACTOR="$(printf '%s' "$C1_STATUS" | node -e 'const rows=JSON.parse(require("fs").readFileSync(0,"utf8")); process.stdout.write(rows[0] ? rows[0].actor : "");')"
+C1_ROW_STATUS="$(printf '%s' "$C1_STATUS" | node -e 'const rows=JSON.parse(require("fs").readFileSync(0,"utf8")); process.stdout.write(rows[0] ? rows[0].status : "");')"
+C1_WHOAMI_B="$(flow_agents_node "$WRITER" liveness whoami --actor agent-b --json --artifact-root "$C_ROOT" | node -e 'const o=JSON.parse(require("fs").readFileSync(0,"utf8")); process.stdout.write(o.actor);')"
+C1_WHOAMI_A="$(flow_agents_node "$WRITER" liveness whoami --actor agent-a --json --artifact-root "$C_ROOT" | node -e 'const o=JSON.parse(require("fs").readFileSync(0,"utf8")); process.stdout.write(o.actor);')"
+
+if [[ "$C1_ROW_STATUS" == "verified" ]] && [[ "$C1_ROW_ACTOR" == "agent-a" ]] && [[ "$C1_ROW_ACTOR" != "$C1_WHOAMI_B" ]]; then
+  _pass "held-exclusion: a verified row for agent-a, read as agent-b's whoami, classifies subj-held as held (row actor != self) (AC1, AC2)"
+else
+  _fail "held-exclusion classification failed: row_status=$C1_ROW_STATUS row_actor=$C1_ROW_ACTOR whoami_b=$C1_WHOAMI_B raw=$C1_STATUS"
+fi
+
+if [[ "$C1_ROW_STATUS" == "verified" ]] && [[ "$C1_ROW_ACTOR" == "agent-a" ]] && [[ "$C1_ROW_ACTOR" == "$C1_WHOAMI_A" ]]; then
+  _pass "own-actor mine: the SAME verified row, read as agent-a's own whoami, classifies subj-held as mine, not held (AC5)"
+else
+  _fail "own-actor mine classification failed: row_status=$C1_ROW_STATUS row_actor=$C1_ROW_ACTOR whoami_a=$C1_WHOAMI_A raw=$C1_STATUS"
+fi
+
+# C3: Reclaimable — actor agent-c's claim is seeded far enough in the past (beyond ttlSeconds)
+# that `--now` places it past TTL expiry. Assert the row's RAW `status` field reads `stale`
+# (never `label`, which collapses stale to the coarser "free" and would lose the distinction —
+# proving the "consume status, not label" design decision is real and observable).
+flow_agents_node "$WRITER" liveness claim subj-stale --actor agent-c --at "2026-06-25T11:00:00Z" --ttl 1800 --artifact-root "$C_ROOT" >/dev/null 2>"$TMPDIR_EVAL/c-claim-c.err"
+C3_STATUS="$(status_row_json "$C_ROOT" subj-stale "2026-07-01T12:10:00Z")"
+C3_ROW_STATUS="$(printf '%s' "$C3_STATUS" | node -e 'const rows=JSON.parse(require("fs").readFileSync(0,"utf8")); process.stdout.write(rows[0] ? rows[0].status : "");')"
+C3_ROW_LABEL="$(printf '%s' "$C3_STATUS" | node -e 'const rows=JSON.parse(require("fs").readFileSync(0,"utf8")); process.stdout.write(rows[0] ? rows[0].label : "");')"
+if [[ "$C3_ROW_STATUS" == "stale" ]] && [[ "$C3_ROW_LABEL" == "free" ]]; then
+  _pass "reclaimable: raw status field reads 'stale' (distinct from the coarser label 'free') — proves 'consume status, not label' is real, not just documented (AC3)"
+else
+  _fail "reclaimable classification failed: raw status=$C3_ROW_STATUS label=$C3_ROW_LABEL raw=$C3_STATUS"
+fi
+
+# C4: Free — a subject with no liveness events at all returns an empty row set.
+C4_STATUS="$(status_row_json "$C_ROOT" subj-never-claimed "2026-07-01T12:10:00Z")"
+if [[ "$C4_STATUS" == "[]" ]]; then
+  _pass "free: a never-claimed subject returns an empty row set for liveness status --json --subject (AC1)"
+else
+  _fail "free-case status was not empty: $C4_STATUS"
+fi
+
+# C5: Claim-emit-on-selection — subjectId derived via resolve-slug; a "selection" runs
+# `liveness claim <subjectId>` exactly once, appending exactly one new claim event for that
+# (subjectId, actor) pair, and a subsequent status read shows that actor verified/held.
+C5_SUBJECT_ID="$(flow_agents_node "$WRITER" resolve-slug 'owner/repo#77' 2>"$TMPDIR_EVAL/c5-resolve.err")"
+C5_STREAM="$C_ROOT/liveness/events.jsonl"
+C5_LINES_BEFORE=0
+[[ -f "$C5_STREAM" ]] && C5_LINES_BEFORE="$(wc -l <"$C5_STREAM" | tr -d ' ')"
+flow_agents_node "$WRITER" liveness claim "$C5_SUBJECT_ID" --actor agent-selector --artifact-root "$C_ROOT" >/dev/null 2>"$TMPDIR_EVAL/c5-claim.err"
+C5_LINES_AFTER="$(wc -l <"$C5_STREAM" | tr -d ' ')"
+C5_APPENDED=$((C5_LINES_AFTER - C5_LINES_BEFORE))
+C5_STATUS_AFTER="$(status_row_json "$C_ROOT" "$C5_SUBJECT_ID" "2026-07-01T12:10:00Z")"
+C5_ROW_STATUS_AFTER="$(printf '%s' "$C5_STATUS_AFTER" | node -e 'const rows=JSON.parse(require("fs").readFileSync(0,"utf8")); const r=rows.find(x=>x.actor==="agent-selector"); process.stdout.write(r ? r.status : "");')"
+if [[ "$C5_SUBJECT_ID" == "owner-repo-77" ]] && [[ "$C5_APPENDED" -eq 1 ]] && [[ "$C5_ROW_STATUS_AFTER" == "verified" ]]; then
+  _pass "claim-emit-on-selection: liveness claim <resolve-slug-derived subjectId> appends exactly one event and shows verified/held for that actor thereafter (AC4)"
+else
+  _fail "claim-emit-on-selection failed: subjectId=$C5_SUBJECT_ID appended=$C5_APPENDED row_status_after=$C5_ROW_STATUS_AFTER raw=$C5_STATUS_AFTER"
+fi
+
+# C6: Force-write unconstrained at the CLI layer — `liveness claim` on subj-held (already held
+# fresh by agent-a, per C1/C2) succeeds unconditionally for a different actor. Proves --force
+# needs no CLI-side change: the write path has no holder-conflict check to override (Design
+# Decision 4).
+if flow_agents_node "$WRITER" liveness claim subj-held --actor agent-force --artifact-root "$C_ROOT" >"$TMPDIR_EVAL/c6.out" 2>"$TMPDIR_EVAL/c6.err"; then
+  C6_STATUS="$(status_row_json "$C_ROOT" subj-held "2026-07-01T12:15:00Z")"
+  C6_BOTH_HELD="$(printf '%s' "$C6_STATUS" | node -e '
+const rows = JSON.parse(require("fs").readFileSync(0, "utf8"));
+const a = rows.find((r) => r.actor === "agent-a");
+const f = rows.find((r) => r.actor === "agent-force");
+process.stdout.write(a && f && a.status === "verified" && f.status === "verified" ? "yes" : "no");
+')"
+  if [[ "$C6_BOTH_HELD" == "yes" ]]; then
+    _pass "force-write unconstrained: liveness claim on an already-held subject succeeds unconditionally for a different actor (no CLI-side holder-conflict check) (Design Decision 4)"
+  else
+    _fail "force-write left an unexpected status row set: $C6_STATUS"
+  fi
+else
+  _fail "liveness claim on an already-held subject unexpectedly failed (CLI should have no holder-conflict check): $(cat "$TMPDIR_EVAL/c6.out" "$TMPDIR_EVAL/c6.err")"
+fi
+
+# ─── E. F1 (fix-plan iteration 1) — liveness whoami never touches the workflow-sidecar
+# lock, regardless of artifact-root state (mirrors resolve-slug's empty lockRoot) ──────────
+echo "--- E. F1: liveness whoami lock-bypass proof ---"
+
+# E1: existing artifact root + FLOW_AGENTS_WORKFLOW_SIDECAR_LOCK_DELAY set -> whoami never
+# creates .workflow-sidecar.lockdir (polled live during the delay window, not just checked
+# post-hoc — a post-hoc-only check could not distinguish "never locked" from "locked, delayed,
+# then cleaned up before we looked") -> exits 0.
+E1_ROOT="$(new_scratch)/.kontourai/flow-agents"
+mkdir -p "$E1_ROOT"
+FLOW_AGENTS_WORKFLOW_SIDECAR_LOCK_DELAY=3 flow_agents_node "$WRITER" liveness whoami --json --artifact-root "$E1_ROOT" >"$TMPDIR_EVAL/e1.out" 2>"$TMPDIR_EVAL/e1.err" &
+E1_PID=$!
+E1_LOCKDIR_SEEN="no"
+E1_POLL_DEADLINE=$(( $(date +%s%N) + 1500000000 ))
+while [[ "$(date +%s%N)" -lt "$E1_POLL_DEADLINE" ]]; do
+  if [[ -e "$E1_ROOT/.workflow-sidecar.lockdir" ]]; then E1_LOCKDIR_SEEN="yes"; break; fi
+  if ! kill -0 "$E1_PID" 2>/dev/null; then break; fi
+  sleep 0.05
+done
+wait "$E1_PID"
+E1_STATUS=$?
+if [[ "$E1_STATUS" -eq 0 ]] && [[ "$E1_LOCKDIR_SEEN" == "no" ]]; then
+  _pass "liveness whoami against an EXISTING artifact root with FLOW_AGENTS_WORKFLOW_SIDECAR_LOCK_DELAY set never creates .workflow-sidecar.lockdir (polled live) and exits 0 (F1)"
+else
+  _fail "liveness whoami lock-bypass failed: status=$E1_STATUS lockdir_seen=$E1_LOCKDIR_SEEN out=$(cat "$TMPDIR_EVAL/e1.out") err=$(cat "$TMPDIR_EVAL/e1.err")"
+fi
+
+# E2: existing but non-writable (555) artifact root -> whoami still exits 0 (no lock attempt,
+# so no mkdir-under-a-read-only-dir failure is even possible).
+E2_ROOT="$(new_scratch)/.kontourai/flow-agents"
+mkdir -p "$E2_ROOT"
+chmod 555 "$E2_ROOT"
+E2_STATUS=0
+flow_agents_node "$WRITER" liveness whoami --json --artifact-root "$E2_ROOT" >"$TMPDIR_EVAL/e2.out" 2>"$TMPDIR_EVAL/e2.err" || E2_STATUS=$?
+chmod 755 "$E2_ROOT"
+if [[ "$E2_STATUS" -eq 0 ]]; then
+  _pass "liveness whoami against a non-writable (555) EXISTING artifact root still exits 0 (F1)"
+else
+  _fail "liveness whoami under a 555 artifact root unexpectedly failed: status=$E2_STATUS out=$(cat "$TMPDIR_EVAL/e2.out") err=$(cat "$TMPDIR_EVAL/e2.err")"
+fi
+
+# E3: contrast — `liveness status` (out of scope for F1, pre-existing lock behavior preserved)
+# still acquires the lock against an existing root with the delay set. Proves F1's bypass is
+# scoped to the `whoami` action only, not a blanket change to `liveness` command lock routing.
+E3_ROOT="$(new_scratch)/.kontourai/flow-agents"
+mkdir -p "$E3_ROOT"
+FLOW_AGENTS_WORKFLOW_SIDECAR_LOCK_DELAY=1.5 flow_agents_node "$WRITER" liveness status --json --artifact-root "$E3_ROOT" >"$TMPDIR_EVAL/e3.out" 2>"$TMPDIR_EVAL/e3.err" &
+E3_PID=$!
+E3_LOCKDIR_SEEN="no"
+E3_POLL_DEADLINE=$(( $(date +%s%N) + 1200000000 ))
+while [[ "$(date +%s%N)" -lt "$E3_POLL_DEADLINE" ]]; do
+  if [[ -e "$E3_ROOT/.workflow-sidecar.lockdir" ]]; then E3_LOCKDIR_SEEN="yes"; break; fi
+  if ! kill -0 "$E3_PID" 2>/dev/null; then break; fi
+  sleep 0.05
+done
+wait "$E3_PID"
+if [[ "$E3_LOCKDIR_SEEN" == "yes" ]]; then
+  _pass "liveness status (out of scope for F1) still acquires .workflow-sidecar.lockdir against an existing root — proves F1's bypass is action-scoped to whoami, not a blanket liveness-command change"
+else
+  _fail "liveness status unexpectedly did not acquire the lock — F1's bypass may have leaked beyond the whoami action: out=$(cat "$TMPDIR_EVAL/e3.out") err=$(cat "$TMPDIR_EVAL/e3.err")"
+fi
+
+# ─── D. Static skill-text assertions (AC6, AC8) ─────────────────────────────
+echo "--- D. Static skill-text assertions ---"
+
+require_text "$PULL" '### 1a\. Liveness Selection Preflight' "pull-work documents the Liveness Selection Preflight subsection (AC1, AC8)"
+require_text "$PULL" 'liveness whoami --json' "pull-work references liveness whoami --json by exact command name (AC1, AC8)"
+require_text "$PULL" 'liveness status --json' "pull-work references liveness status --json by exact command name (AC1, AC8)"
+require_text "$PULL" 'resolve-slug <owner>/<repo>#<issue-number>' "pull-work references resolve-slug by exact command name (AC1, AC4, AC8)"
+require_text "$PULL" 'liveness claim <subjectId>' "pull-work references liveness claim <subjectId> by exact command name (AC4, AC8)"
+require_text "$PULL" 'reading each row.s raw .status. field \(never .label.\)' "pull-work instructs consuming raw status, never label (AC1, AC8)"
+require_text "$PULL" 'a .verified. row for an actor other than self.*.held.' "pull-work documents held classification (AC1, AC2, AC8)"
+require_text "$PULL" 'excluded from the ready set by default' "pull-work excludes held candidates by default (AC2, AC8)"
+require_text "$PULL" 'a .stale. row \(any actor\).*.reclaimable.' "pull-work documents reclaimable classification (AC1, AC3, AC8)"
+require_text "$PULL" 'requires an explicit recorded opt-in' "pull-work requires an explicit recorded opt-in for reclaimable selection (AC3, AC8)"
+require_text "$PULL" 'never a silent normal pick' "pull-work states reclaimable is never a silent normal pick (AC3, AC8)"
+require_text "$PULL" 'a .verified. row for the resolved self actor.*.mine.' "pull-work documents mine classification (AC1, AC5, AC8)"
+require_text "$PULL" 'do not re-offer as new, do not exclude as held-by-other' "pull-work folds own-actor mine into WIP logic, not re-offered or re-excluded (AC5, AC8)"
+require_text "$PULL" 'An explicit user instruction to proceed despite a .held. or .reclaimable. classification' "pull-work documents the --force/explicit-instruction override (AC2, AC3, AC8)"
+require_text "$PULL" '.--force.' "pull-work names --force as the override mechanism (AC2, AC8)"
+require_text "$PULL" 'override and its stated reason must be recorded in the artifact' "pull-work requires the override + reason to be recorded (AC2, AC8)"
+require_text "$PULL" 'do not mutate GitHub Projects, provider fields, or cross-repo provider state from this skill' "pull-work's existing no-provider-mutation sentence is present verbatim and unchanged (AC6, AC8)"
+require_text "$PULL" 'read/write the local runtime liveness stream, never GitHub issue/label/assignee state' "pull-work states the liveness claim is local runtime state, not a provider mutation (AC6, AC8)"
+require_text "$PULL" 'this is not\s*$|this is not a provider mutation' "pull-work explicitly states the liveness claim is not a provider mutation (AC6, AC8)"
+require_text "$PULL" '#290' "pull-work names #290 as the deferred assignment-provider seam (AC6, AC8)"
+require_text "$PULL" 'liveness_preflight' "pull-work artifact contract records liveness_preflight (AC1, AC8)"
+require_text "$PULL" 'liveness_claim' "pull-work artifact contract records liveness_claim (AC4, AC8)"
+require_text "$PICKUP_PROBE" 'flags the selected item .reclaimable., treat the recorded opt-in as a decision to re-confirm' "pickup-probe re-confirms (not silently accepts) a reclaimable opt-in on drift (AC3, AC8)"
+
+# ─── F2-F6 (fix-plan iteration 1) static assertions ─────────────────────────
+require_text "$PULL" 'group all rows for that .subjectId. by subject' "pull-work classifies per-subject (grouped rows), not per-row (F2, AC1, AC8)"
+require_text "$PULL" 'classify in this precedence order' "pull-work states the classification is an ordered precedence rule (F2, AC8)"
+require_text "$PULL" '^1\. a .verified. row for an actor other than self' "pull-work's precedence rule step 1 (held) is numbered verbatim (F2, AC8)"
+require_text "$PULL" '^2\. else, a .verified. row for the resolved self actor' "pull-work's precedence rule step 2 (mine) is numbered verbatim (F2, AC8)"
+require_text "$PULL" '^3\. else, a .stale. row' "pull-work's precedence rule step 3 (reclaimable) is numbered verbatim (F2, AC8)"
+require_text "$PULL" '^4\. else \(a .revoked.-only row' "pull-work's precedence rule step 4 (free) is numbered verbatim (F2, AC8)"
+require_text "$PULL" 'double-hold' "pull-work names the own-actor + other-actor co-existing row combination a double-hold (F2, AC8)"
+require_text "$PULL" 'explicit conflict warning \(per ADR 0012 §4 detection' "pull-work cites ADR 0012 §4 detection for the double-hold conflict warning (F2, AC8)"
+require_text "$PULL" 'never silently resolve it to .mine.' "pull-work states a double-hold is never silently resolved to mine (F2, AC8)"
+
+require_text "$PULL" 'pin it for reuse' "pull-work pins self_actor for reuse across the pass (F3, AC8)"
+require_text "$PULL" 'Capture the returned .actor. value as .self_actor.' "pull-work captures self_actor exactly once per pass from whoami (F3, AC8)"
+require_text "$PULL" 'liveness claim <subjectId> --actor <self_actor>' "pull-work's claim-on-selection command passes --actor <self_actor> explicitly (F3, AC4, AC8)"
+require_text "$PULL" 'always pass .--actor <self_actor>. explicitly on every claim in this pass' "pull-work requires --actor <self_actor> on every claim in the pass, not just the first (F3, AC8)"
+require_text "$PULL" 'never a fresh derivation per claim call' "pull-work states the actor is never re-derived per claim call (F3, AC8)"
+
+require_text "$PULL" 'On any claim-emit failure \(non-zero exit, unresolved actor, or liveness disabled/unavailable\)' "pull-work names the precise claim-emit failure modes covered by fail-open (F4, AC8)"
+require_text "$PULL" '\{skipped: <stderr reason>\}' "pull-work's fail-open shape records {skipped: <stderr reason>} (F4, AC8)"
+require_text "$PULL" 'also surface that skip reason in pull-work.s user-facing output' "pull-work requires the skip reason to be surfaced in user-facing output, never silent (F4, AC8)"
+require_text "$PULL" 'unresolved-actor failure.? additionally names? the remediation' "pull-work requires unresolved-actor failures to additionally name the remediation (F4, AC8)"
+
+require_text "$PULL" '.reclaimable_override.: recorded only when a .reclaimable.' "pull-work's Artifact Contract declares the reclaimable_override field (F5, AC8)"
+
+require_text "$PULL" '### Post-Claim Conflict Re-check' "pull-work documents the Post-Claim Conflict Re-check subsection (F6, AC8)"
+require_text "$PULL" 'coexists with this session.s own just-emitted claim on the same subject' "pull-work's post-claim re-check detects a double-hold against the just-emitted claim (F6, AC8)"
+require_text "$PULL" 'surface the conflict prominently in the user-facing output and instruct the user to coordinate before proceeding' "pull-work instructs surfacing the post-claim conflict prominently and coordinating before proceeding, not silently continuing (F6, AC8)"
+require_text "$PULL" 'does not provide true mutual exclusion across the read-then-write race window itself' "pull-work's honesty note states the exclusion guarantee still does not provide true mutual exclusion across the read-then-write race window (F6, AC8; updated #320 wording — see also test_liveness_verdict.sh)"
+require_text "$PULL" 'True mutual exclusion arrives with the provider assignment lease \(#290\) and the .verify-hold. publish gate \(#293\)' "pull-work names #290/#293 as where true mutual exclusion actually arrives (F6, AC8)"
+
+
+echo ""
+if [[ "$errors" -eq 0 ]]; then
+  echo "Pull work liveness preflight integration passed."
+  exit 0
+fi
+
+echo "Pull work liveness preflight integration failed: $errors issue(s)."
+exit 1

package/evals/integration/test_pull_work_provider.sh

@@ -35,7 +35,7 @@ status=$?
 [[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.0.id")" == "github:kontourai/flow-agents#22" ]] && pass "normalizes provider-qualified id" || fail "normalizes provider-qualified id"
 [[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.0.source_provider.role")" == "WorkItemProvider" ]] && pass "preserves work item provider ref" || fail "preserves work item provider ref"
 [[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.0.board_membership.role")" == "BoardProvider" ]] && pass "preserves board provider ref" || fail "preserves board provider ref"
-[[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.0.artifact_refs.0")" == ".flow-agents/flow-agents-kit-platform-backlog/flow-agents-kit-platform-backlog--idea-to-backlog.md" ]] && pass "preserves source artifact ref" || fail "preserves source artifact ref"
+[[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.0.artifact_refs.0")" == ".kontourai/flow-agents/flow-agents-kit-platform-backlog/flow-agents-kit-platform-backlog--idea-to-backlog.md" ]] && pass "preserves source artifact ref" || fail "preserves source artifact ref"
 [[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.0.blockers.0.ref.owner")" == "kontourai" ]] && pass "preserves blocker owner" || fail "preserves blocker owner"
 [[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.0.blockers.0.ref.repo")" == "flow" ]] && pass "preserves cross-repo blocker repo" || fail "preserves cross-repo blocker repo"
 [[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.0.dependency_impacts.0.ref.owner")" == "kontourai" ]] && pass "projects prose blocker impact owner" || fail "projects prose blocker impact owner"
@@ -51,7 +51,7 @@ status=$?
 [[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.5.planned_base_ref")" == "main" ]] && pass "marker normalizes planned_base_ref" || fail "marker normalizes planned_base_ref"
 [[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.5.planned_base_sha")" == "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ]] && pass "marker normalizes planned_base_sha" || fail "marker normalizes planned_base_sha"
 [[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.5.planned_at")" == "2026-06-03T03:23:14Z" ]] && pass "marker normalizes planned_at" || fail "marker normalizes planned_at"
-[[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.5.planning_artifact_ref")" == ".flow-agents/idea-to-backlog-source-revision-structured-blockers/idea-to-backlog-source-revision-structured-blockers--plan.md" ]] && pass "marker normalizes planning_artifact_ref" || fail "marker normalizes planning_artifact_ref"
+[[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.5.planning_artifact_ref")" == ".kontourai/flow-agents/idea-to-backlog-source-revision-structured-blockers/idea-to-backlog-source-revision-structured-blockers--plan.md" ]] && pass "marker normalizes planning_artifact_ref" || fail "marker normalizes planning_artifact_ref"
 [[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.5.planning_scope_refs.0")" == "kits/builder/skills/idea-to-backlog/SKILL.md" ]] && pass "marker normalizes planning_scope_refs" || fail "marker normalizes planning_scope_refs"
 [[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.5.source_revisions.1.repo")" == "kontourai/flow" ]] && pass "marker preserves repo-scoped source_revisions" || fail "marker preserves repo-scoped source_revisions"
 [[ "$(json_query "$TMPDIR_EVAL/normalized.json" "items.5.blockers.0.ref.owner")" == "kontourai" ]] && pass "structured blocker preserves provider owner" || fail "structured blocker preserves provider owner"