@mmerterden/multi-agent-pipeline 12.6.0 → 12.8.0

package/pipeline/scripts/smoke-no-mcp-in-dev-phases.sh

@@ -1,115 +0,0 @@
-#!/usr/bin/env bash
-#
-# smoke-no-mcp-in-dev-phases.sh
-#
-# Gate: pipeline run telemetry must not contain MCP calls outside Phase 1
-# (Analysis). Per Locked decision 30, MCP usage is permitted only during
-# Phase 1; any entry in state.telemetry.mcpCalls[] with phase >= 2 is a
-# violation.
-#
-# Inputs
-#   --state-file <path>   Optional override (default: ~/.claude/state/run/latest.json)
-#
-# Outcomes
-#   - State file missing      -> WARN, exit 0 (no run to check)
-#   - telemetry.mcpCalls field absent -> PASS, exit 0 (older run, no telemetry)
-#   - All entries phase < 2   -> PASS, exit 0
-#   - One or more violations  -> FAIL summary on stdout, exit 1
-#
-# stdout: human-readable summary only. stderr: empty in normal operation.
-
-set -euo pipefail
-
-STATE_FILE="${HOME}/.claude/state/run/latest.json"
-
-while [ "$#" -gt 0 ]; do
-  case "$1" in
-    --state-file)
-      shift
-      if [ "$#" -eq 0 ]; then
-        echo "FAIL: --state-file requires a path argument"
-        exit 2
-      fi
-      STATE_FILE="$1"
-      shift
-      ;;
-    --state-file=*)
-      STATE_FILE="${1#--state-file=}"
-      shift
-      ;;
-    -h|--help)
-      echo "Usage: $0 [--state-file <path>]"
-      echo ""
-      echo "Default state file: ~/.claude/state/run/latest.json"
-      exit 0
-      ;;
-    *)
-      echo "FAIL: unknown argument: $1"
-      exit 2
-      ;;
-  esac
-done
-
-if ! command -v jq >/dev/null 2>&1; then
-  echo "FAIL: jq is required but not installed"
-  exit 2
-fi
-
-if [ ! -f "$STATE_FILE" ]; then
-  echo "WARN: state file not found at $STATE_FILE - no run to check"
-  exit 0
-fi
-
-# Validate JSON parse first; corrupt state cannot be silently passed.
-if ! jq empty "$STATE_FILE" >/dev/null 2>&1; then
-  echo "FAIL: state file is not valid JSON: $STATE_FILE"
-  exit 2
-fi
-
-# If telemetry.mcpCalls is absent or not an array, this is an older state
-# format that did not record MCP usage. PASS by contract.
-HAS_FIELD=$(jq -r '
-  if (.telemetry // empty) | type == "object"
-  then
-    if (.telemetry.mcpCalls // empty) | type == "array" then "yes" else "no" end
-  else "no" end
-' "$STATE_FILE")
-
-if [ "$HAS_FIELD" != "yes" ]; then
-  echo "PASS: telemetry.mcpCalls field absent - no MCP usage recorded"
-  exit 0
-fi
-
-# Count total entries and violations (phase >= 2).
-TOTAL=$(jq -r '.telemetry.mcpCalls | length' "$STATE_FILE")
-VIOLATIONS=$(jq -r '
-  .telemetry.mcpCalls
-  | map(select((.phase // 0) >= 2))
-  | length
-' "$STATE_FILE")
-
-if [ "$VIOLATIONS" -eq 0 ]; then
-  if [ "$TOTAL" -eq 0 ]; then
-    echo "PASS: no MCP calls outside Phase 1 (Analysis) - 0 entries"
-  else
-    echo "PASS: no MCP calls outside Phase 1 (Analysis) - ${TOTAL} entries, all in Phase 1"
-  fi
-  exit 0
-fi
-
-# Emit FAIL summary with up to first 5 offenders.
-echo "FAIL: ${VIOLATIONS} MCP call(s) outside Phase 1 (Analysis) - Locked decision 30 violation"
-echo ""
-echo "First $([ "$VIOLATIONS" -lt 5 ] && echo "$VIOLATIONS" || echo 5) violation(s):"
-
-jq -r '
-  .telemetry.mcpCalls
-  | map(select((.phase // 0) >= 2))
-  | .[0:5]
-  | .[]
-  | "  FAIL: MCP call \(.tool // "<unknown>") in Phase \(.phase) at \(.timestamp // "<no timestamp>") - Locked decision 30 violation"
-' "$STATE_FILE"
-
-echo ""
-echo "Total violations: ${VIOLATIONS} of ${TOTAL} entries"
-exit 1

package/pipeline/scripts/smoke-no-token-prompt.sh

@@ -1,85 +0,0 @@
-#!/usr/bin/env bash
-#
-# smoke-no-token-prompt.sh
-#
-# Asserts the pipeline never asks the user to type a token in chat. Tokens
-# are resolved via credential-store.sh; missing/expired tokens trigger the
-# Setup Wizard, not an inline prompt. See refs/keychain.md Rule 1.
-#
-# Greps shell scripts, markdown adapters, and orchestrator commands for
-# hardcoded prompt patterns. Allowlist for legitimate setup wizard prompts.
-
-set -euo pipefail
-
-SELF_DIR=$(cd "$(dirname "$0")" && pwd)
-PIPELINE_ROOT=$(cd "$SELF_DIR/.." && pwd)
-
-cd "$PIPELINE_ROOT"
-
-FAIL=0
-
-# Pattern: anything that looks like the script asking for a token interactively.
-# Acceptable: setup wizard explicitly tagged with `# allow: token-prompt`.
-PATTERNS=(
-  "read -rp.*[Tt]oken"
-  "read -rp.*[Aa]pi.[Kk]ey"
-  "read -rp.*[Pp]aste.*token"
-  "read -rp.*[Ee]nter.*token"
-  'echo "Enter your.*[Tt]oken'
-  'echo "Paste.*[Tt]oken'
-  "AskUserQuestion.*[Tt]oken"
-)
-
-# Files in scope: shell scripts + adapter markdown.
-TARGET_GLOB=(
-  "scripts/*.sh"
-  "scripts/*.mjs"
-  "multi-agent-refs/channels/*.md"
-  "multi-agent-refs/phases/*.md"
-  "commands/multi-agent/dev/SKILL.md"
-  "commands/multi-agent/dev-autopilot/SKILL.md"
-  "commands/multi-agent/autopilot/SKILL.md"
-)
-
-# Build a single grep invocation: all patterns via repeated -e flags,
-# all target globs expanded once. Drops 7x7=49 grep subprocesses down to 1.
-GREP_PATTERN_ARGS=()
-for pattern in "${PATTERNS[@]}"; do
-  GREP_PATTERN_ARGS+=(-e "$pattern")
-done
-
-# Expand all target globs to actual paths once. Globs that don't match are
-# silently dropped so the single grep call sees only existing files.
-TARGET_PATHS=()
-for glob in "${TARGET_GLOB[@]}"; do
-  for path in pipeline/$glob; do
-    [ -e "$path" ] && TARGET_PATHS+=("$path")
-  done
-done
-
-if [ "${#TARGET_PATHS[@]}" -gt 0 ]; then
-  while IFS= read -r match; do
-    [ -z "$match" ] && continue
-    file="${match%%:*}"
-    # Allowlist: setup.md and setup-related files explicitly handle token entry
-    # via the inline Token Save Flow (clipboard-based, not chat).
-    case "$file" in
-      */setup.md|*setup-token-flow*|*credential-store*) continue ;;
-    esac
-    # Allowlist: explicit `# allow: token-prompt` annotation on the line.
-    case "$match" in
-      *'# allow: token-prompt'*) continue ;;
-    esac
-    echo "FAIL [smoke-no-token-prompt]: token prompt found in $file"
-    echo "  $match"
-    FAIL=$((FAIL + 1))
-  done < <(grep -rEn "${GREP_PATTERN_ARGS[@]}" "${TARGET_PATHS[@]}" 2>/dev/null || true)
-fi
-
-if [ "$FAIL" -gt 0 ]; then
-  echo ""
-  echo "smoke-no-token-prompt: $FAIL violation(s). Tokens must be resolved via credential-store.sh; see refs/keychain.md Rule 1."
-  exit 1
-fi
-
-echo "smoke-no-token-prompt: ok"

package/pipeline/scripts/smoke-pack-contents.sh

@@ -1,140 +0,0 @@
-#!/usr/bin/env bash
-#
-# smoke-pack-contents.sh  -  guard what `npm publish` would actually ship.
-#
-#   1. Deny patterns: package.json files[] carries negations (`!...`) for
-#      dev-only / personal-data files. The published tarball must contain
-#      no file matching any of them. Patterns are read from package.json at
-#      runtime (via node), so the smoke never goes stale when the deny list
-#      changes.
-#   2. File-count band: the total packed file count is compared against the
-#      committed fixture pipeline/scripts/fixtures/pack-expected-count.txt.
-#      Drift beyond +-15 percent fails - that magnitude means the files[]
-#      globs picked up (or dropped) a whole subtree, which deserves a human
-#      look. Refresh the fixture after reviewing:
-#        npm pack --dry-run --json 2>/dev/null \
-#          | node -e 'let s="";process.stdin.on("data",d=>s+=d).on("end",()=>console.log(JSON.parse(s)[0].files.length))' \
-#          > pipeline/scripts/fixtures/pack-expected-count.txt
-#   3. publint (optional): linted via `npx --no-install` so it only runs
-#      when the package is already installed - never a network fetch.
-#
-# Exit codes: 0=pass, 1=violation, 2=environment broken
-
-set -uo pipefail
-
-REPO_ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
-FIXTURE="$REPO_ROOT/pipeline/scripts/fixtures/pack-expected-count.txt"
-
-command -v npm >/dev/null 2>&1 || { echo "FAIL: npm not on PATH"; exit 2; }
-command -v node >/dev/null 2>&1 || { echo "FAIL: node not on PATH"; exit 2; }
-
-PASS=0
-FAIL=0
-pass() { PASS=$((PASS + 1)); echo "  ✓ $1"; }
-fail() { FAIL=$((FAIL + 1)); echo "  ✗ $1"; }
-
-cleanup() { [ -n "${TMP:-}" ] && rm -rf "$TMP"; }
-trap cleanup EXIT
-TMP=$(mktemp -d)
-
-# ──────────────────────────────────────────────────────────────────────────
-echo "→ 1. npm pack --dry-run --json"
-if ! (cd "$REPO_ROOT" && npm pack --dry-run --json 2>/dev/null > "$TMP/pack.json"); then
-  echo "FAIL: npm pack --dry-run failed"
-  exit 2
-fi
-
-# Deny check runs in node so the patterns come straight from package.json
-# files[] negations - never hardcoded here.
-cat > "$TMP/check.mjs" <<'MJS'
-import { readFileSync } from "node:fs";
-
-const [packJsonPath, pkgJsonPath] = process.argv.slice(2);
-const packed = JSON.parse(readFileSync(packJsonPath, "utf-8"))[0].files.map((f) => f.path);
-const files = JSON.parse(readFileSync(pkgJsonPath, "utf-8")).files || [];
-const denies = files.filter((p) => p.startsWith("!")).map((p) => p.slice(1));
-
-// Minimal glob -> regex: '**' spans path separators, '*' does not.
-const toRegex = (glob) => {
-  const escaped = glob.replace(/[.+^${}()|[\]\\]/g, "\\$&");
-  const body = escaped
-    .split("**")
-    .map((part) => part.replace(/\*/g, "[^/]*"))
-    .join(".*");
-  return new RegExp("^" + body + "$");
-};
-
-const regexes = denies.map((d) => [d, toRegex(d)]);
-let bad = 0;
-for (const path of packed) {
-  for (const [glob, re] of regexes) {
-    if (re.test(path)) {
-      console.log(`DENY ${path} (matches !${glob})`);
-      bad++;
-    }
-  }
-}
-console.log(`DENYCOUNT ${bad}`);
-console.log(`PATTERNS ${denies.length}`);
-console.log(`COUNT ${packed.length}`);
-MJS
-
-CHECK=$(node "$TMP/check.mjs" "$TMP/pack.json" "$REPO_ROOT/package.json")
-COUNT=$(echo "$CHECK" | awk '/^COUNT /{print $2}')
-DENYCOUNT=$(echo "$CHECK" | awk '/^DENYCOUNT /{print $2}')
-PATTERNS=$(echo "$CHECK" | awk '/^PATTERNS /{print $2}')
-
-if [ -z "$COUNT" ] || [ -z "$DENYCOUNT" ]; then
-  echo "FAIL: deny-pattern checker produced no result (node error?)"
-  exit 2
-fi
-
-pass "pack dry-run produced $COUNT files ($PATTERNS deny patterns loaded from package.json)"
-
-# ──────────────────────────────────────────────────────────────────────────
-echo "→ 2. deny patterns (files[] negations must not ship)"
-if [ "$DENYCOUNT" -eq 0 ]; then
-  pass "no packed file matches a files[] negation"
-else
-  fail "$DENYCOUNT packed file(s) match dev-only/personal-data exclusions:"
-  echo "$CHECK" | grep '^DENY ' | sed 's/^/    /'
-fi
-
-# ──────────────────────────────────────────────────────────────────────────
-echo "→ 3. file-count band vs fixture (+-15 percent)"
-if [ ! -f "$FIXTURE" ]; then
-  fail "fixture missing: $FIXTURE - create it from the refresh command in this script's header"
-else
-  EXPECTED=$(tr -cd '0-9' < "$FIXTURE")
-  if [ -z "$EXPECTED" ] || [ "$EXPECTED" -eq 0 ]; then
-    fail "fixture unreadable or zero: $FIXTURE"
-  else
-    DIFF=$((COUNT - EXPECTED))
-    [ "$DIFF" -lt 0 ] && DIFF=$((-DIFF))
-    LIMIT=$((EXPECTED * 15 / 100))
-    if [ "$DIFF" -le "$LIMIT" ]; then
-      pass "count $COUNT within +-15 percent of expected $EXPECTED (drift $DIFF, limit $LIMIT)"
-    else
-      fail "count $COUNT drifted beyond +-15 percent of expected $EXPECTED (drift $DIFF, limit $LIMIT)"
-      echo "    Review what the files[] globs now include, then refresh the fixture"
-      echo "    (refresh command is in this script's header comment)."
-    fi
-  fi
-fi
-
-# ──────────────────────────────────────────────────────────────────────────
-echo "→ 4. publint (optional, npx --no-install only)"
-if (cd "$REPO_ROOT" && npx --no-install publint --help >/dev/null 2>&1); then
-  if OUT=$(cd "$REPO_ROOT" && npx --no-install publint 2>&1); then
-    pass "publint: no errors"
-  else
-    fail "publint reported errors"
-    echo "$OUT" | sed 's/^/    /'
-  fi
-else
-  echo "  ↷ SKIP: publint not installed (npx --no-install found no local package)"
-fi
-
-echo ""
-echo "══ smoke-pack-contents: $PASS passed, $FAIL failed ══"
-[ "$FAIL" -gt 0 ] && exit 1 || exit 0

package/pipeline/scripts/smoke-pat-audit.sh

@@ -1,128 +0,0 @@
-#!/usr/bin/env bash
-# smoke-pat-audit.sh  -  exercises audit-log.sh + audit-log-rotate.sh and
-# asserts the section18.2 contract:
-#
-#   • Every PAT lookup writes a structured event to audit.jsonl
-#   • Repo URLs are SHA-256 hashed (no plaintext)
-#   • Identity is logged by name (NOT anonymized  -  user's own debug)
-#   • Audit log is gitignored
-#   • Daily rotation script preserves history (gzipped) + drops >30d archives
-
-set -uo pipefail
-
-AUDIT_FILE="$HOME/.claude/logs/multi-agent/audit.jsonl"
-TMP_AUDIT="$(mktemp -d -t ma-audit-smoke-XXXX)"
-TMP_FILE="$TMP_AUDIT/audit.jsonl"
-trap 'rm -rf "$TMP_AUDIT"' EXIT
-
-PASS=0; FAIL=0
-pass() { PASS=$((PASS+1)); echo "  ✓ $1"; }
-fail() { FAIL=$((FAIL+1)); echo "  ✗ $1"; }
-
-LOG="$HOME/.claude/scripts/audit-log.sh"
-ROTATE="$HOME/.claude/scripts/audit-log-rotate.sh"
-
-if [ ! -x "$LOG" ]; then
-  fail "audit-log.sh missing or not executable: $LOG"
-  echo "══ aborted ══"; exit 2
-fi
-
-echo "→ 1. Emit a sample PAT lookup"
-TEST_IDENTITY="smoke-user"
-AUDIT_FILE="$TMP_FILE" "$LOG" pat_lookup bitbucket "$TEST_IDENTITY" \
-  "https://bitbucket.example.com/proj/repo" true scope=REPO_WRITE
-[ -s "$TMP_FILE" ] && pass "audit.jsonl has content after emit" \
-  || fail "audit.jsonl empty after emit"
-
-LINE=$(tail -1 "$TMP_FILE")
-echo "  emitted: $LINE"
-
-echo ""
-echo "→ 2. Repo URL is SHA-256 hashed (not plaintext)"
-echo "$LINE" | grep -q '"repo_url_sha":"[a-f0-9]\{64\}"' \
-  && pass "repo_url_sha is a 64-char hex SHA-256" \
-  || fail "repo_url_sha not in expected SHA-256 form"
-echo "$LINE" | grep -q "bitbucket.example.com" \
-  && fail "PLAINTEXT URL leaked into audit log!" \
-  || pass "Plaintext URL absent (only hash present)"
-
-echo ""
-echo "→ 3. Identity is logged by name (per section18.2.3  -  not anonymized)"
-echo "$LINE" | grep -q "\"identity\":\"$TEST_IDENTITY\"" \
-  && pass "identity logged as plaintext name" \
-  || fail "identity not logged or anonymized"
-
-echo ""
-echo "→ 4. Service is captured"
-echo "$LINE" | grep -q '"service":"bitbucket"' \
-  && pass "service field captured" \
-  || fail "service field missing"
-
-echo ""
-echo "→ 5. Success flag is a JSON bool (not string)"
-echo "$LINE" | grep -q '"success":true' \
-  && pass "success is JSON bool" \
-  || fail "success is not bool"
-
-echo ""
-echo "→ 6. Extras (key=value pairs) preserved"
-echo "$LINE" | grep -q '"scope":"REPO_WRITE"' \
-  && pass "extras preserved (scope=REPO_WRITE)" \
-  || fail "extras not preserved"
-
-echo ""
-echo "→ 7. Rotation script exists + executable"
-[ -x "$ROTATE" ] \
-  && pass "audit-log-rotate.sh present + executable" \
-  || fail "audit-log-rotate.sh missing or not executable"
-
-echo ""
-echo "→ 8. Rotation produces a dated archive + truncates live file"
-# Drive a dry rotation in our TMP dir
-AUDIT_DIR="$TMP_AUDIT" bash "$ROTATE" >/dev/null 2>&1
-ROTATED=$(find "$TMP_AUDIT" -name 'audit.*.jsonl*' -type f 2>/dev/null | head -1)
-[ -n "$ROTATED" ] \
-  && pass "rotation produced archive: $(basename "$ROTATED")" \
-  || fail "rotation produced no archive"
-[ -f "$TMP_FILE" ] && [ ! -s "$TMP_FILE" ] \
-  && pass "live audit.jsonl truncated to empty after rotation" \
-  || fail "live audit.jsonl not properly truncated"
-
-echo ""
-echo "→ 9. .gitignore covers audit logs (sensitive  -  never sync upstream)"
-SMOKE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-GITIGNORES=(
-  "$HOME/.claude/.gitignore"
-  "$SMOKE_DIR/../../.gitignore"
-  "$HOME/multi-agent-pipeline/.gitignore"
-)
-GITIGNORE_OK=false
-for gi in "${GITIGNORES[@]}"; do
-  [ -f "$gi" ] && grep -qE 'audit\.jsonl|logs/multi-agent' "$gi" 2>/dev/null && GITIGNORE_OK=true
-done
-$GITIGNORE_OK \
-  && pass ".gitignore covers audit.jsonl / logs/multi-agent" \
-  || fail ".gitignore does NOT cover audit logs (sensitive!)"
-
-echo ""
-echo "→ 10. Quote-bearing fields are JSON-escaped (no malformed lines)"
-REPO_LOG="$(cd "$(dirname "$0")" && pwd)/audit-log.sh"
-ESC_FILE="$TMP_AUDIT/escape.jsonl"
-AUDIT_FILE="$ESC_FILE" bash "$REPO_LOG" \
-  'pat_"lookup' 'bit"bucket' 'evil" ,"injected":"x' \
-  "https://x.example/r" true 'rea"son=quote'
-ESC_LINE=$(tail -1 "$ESC_FILE")
-if printf '%s' "$ESC_LINE" | python3 -c 'import json,sys; json.loads(sys.stdin.read())' 2>/dev/null; then
-  pass "line with embedded double-quotes parses as valid JSON"
-else
-  fail "embedded quotes produced malformed JSON: $ESC_LINE"
-fi
-if printf '%s' "$ESC_LINE" | python3 -c 'import json,sys; d=json.load(sys.stdin); sys.exit(0 if "injected" not in d else 1)' 2>/dev/null; then
-  pass "quote in field value did not inject a sibling JSON key"
-else
-  fail "quote in field value injected an extra top-level key"
-fi
-
-echo ""
-echo "══ pat-audit smoke: $PASS passed, $FAIL failed ══"
-[ "$FAIL" -eq 0 ]

package/pipeline/scripts/smoke-per-repo-memory.sh

@@ -1,156 +0,0 @@
-#!/usr/bin/env bash
-# smoke-per-repo-memory.sh  -  v6.2.E
-#
-# Verifies the per-repo memory layer contract:
-#   1. memory-load.sh exits silently when pref is off
-#   2. memory-load.sh prints the wrapped block when pref is on + MEMORY.md exists
-#   3. memory-save.sh writes the file + .gitignore + index entry
-#   4. memory-save.sh overwrites existing slug idempotently (no duplicate index row)
-#   5. memory-save.sh rejects invalid type + invalid slug
-#   6. prefs schema exposes perRepoMemory toggle
-#
-# Exit 0 = all pass, 1 = any failure.
-
-set -euo pipefail
-
-ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
-LOAD="$ROOT/pipeline/scripts/memory-load.sh"
-SAVE="$ROOT/pipeline/scripts/memory-save.sh"
-SCHEMA="$ROOT/pipeline/schemas/prefs.schema.json"
-
-pass=0
-fail=0
-failures=()
-record_pass() { pass=$((pass + 1)); printf '  \033[0;32mPASS\033[0m %s\n' "$1"; }
-record_fail() { fail=$((fail + 1)); failures+=("$1"); printf '  \033[0;31mFAIL\033[0m %s\n' "$1"; }
-
-printf '→ smoke-per-repo-memory (v6.2.E): opt-in memory layer contract\n'
-
-# Fresh sandbox + fake prefs
-sandbox=$(mktemp -d)
-mkdir -p "$sandbox/.claude"
-HOME_SAVE="$HOME"
-export HOME="$sandbox"
-repo="$sandbox/repo"
-mkdir -p "$repo"
-
-# --- 1: pref off → silent exit 0 ---
-printf '{"global":{"perRepoMemory":false}}' > "$HOME/.claude/multi-agent-preferences.json"
-out=$(bash "$LOAD" "$repo" 2>&1 || true)
-if [ -z "$out" ]; then
-  record_pass "load exits silent when pref off"
-else
-  record_fail "load should be silent when pref off (got: $out)"
-fi
-
-# --- 2: pref on + no memory → silent exit 0 ---
-printf '{"global":{"perRepoMemory":true}}' > "$HOME/.claude/multi-agent-preferences.json"
-out=$(bash "$LOAD" "$repo" 2>&1 || true)
-if [ -z "$out" ]; then
-  record_pass "load exits silent when pref on but no memory present"
-else
-  record_fail "load should be silent with pref on + no memory (got: $out)"
-fi
-
-# --- 3: save writes file + index + gitignore ---
-body=$(mktemp)
-cat > "$body" <<'BODY'
----
-name: audit-exhaustiveness
-description: Audits must grep all surfaces before stating counts
-type: feedback
----
-
-Lead rule.
-BODY
-
-bash "$SAVE" "$repo" feedback audit-exhaustiveness "$body" >/dev/null
-
-if [ -f "$repo/.multi-agent/memory/feedback_audit-exhaustiveness.md" ]; then
-  record_pass "save wrote memory file"
-else
-  record_fail "save did not create memory file"
-fi
-
-if [ -f "$repo/.multi-agent/.gitignore" ]; then
-  record_pass "save created .gitignore"
-else
-  record_fail "save did not create .gitignore"
-fi
-
-if grep -q 'feedback_audit-exhaustiveness.md' "$repo/.multi-agent/memory/MEMORY.md"; then
-  record_pass "save added index entry to MEMORY.md"
-else
-  record_fail "save did not add index entry"
-fi
-
-# --- 2 (second leg): pref on + memory present → emits block ---
-out=$(bash "$LOAD" "$repo" 2>&1)
-if grep -q '<repo-memory' <<< "$out" && grep -q 'audit-exhaustiveness' <<< "$out"; then
-  record_pass "load emits wrapped block + pointer"
-else
-  record_fail "load should emit wrapped block with pref on + memory present"
-fi
-
-# --- 4: idempotent save (no duplicate index row) ---
-cat > "$body" <<'BODY'
----
-name: audit-exhaustiveness
-description: Updated rule text (v2)
-type: feedback
----
-
-Updated body.
-BODY
-bash "$SAVE" "$repo" feedback audit-exhaustiveness "$body" >/dev/null
-
-idx_count=$(grep -c 'feedback_audit-exhaustiveness.md' "$repo/.multi-agent/memory/MEMORY.md" || true)
-if [ "$idx_count" = "1" ]; then
-  record_pass "idempotent save keeps index at 1 entry"
-else
-  record_fail "idempotent save produced $idx_count entries (expected 1)"
-fi
-
-if grep -q 'Updated body' "$repo/.multi-agent/memory/feedback_audit-exhaustiveness.md"; then
-  record_pass "idempotent save overwrote body"
-else
-  record_fail "idempotent save did not update body"
-fi
-
-# --- 5: invalid type / slug rejected ---
-set +e
-bash "$SAVE" "$repo" invalid-type bad-slug "$body" >/dev/null 2>&1
-rc_type=$?
-bash "$SAVE" "$repo" feedback "Bad Slug With Spaces" "$body" >/dev/null 2>&1
-rc_slug=$?
-set -e
-if [ "$rc_type" != "0" ]; then
-  record_pass "save rejects invalid type"
-else
-  record_fail "save should reject invalid type"
-fi
-if [ "$rc_slug" != "0" ]; then
-  record_pass "save rejects invalid slug"
-else
-  record_fail "save should reject invalid slug"
-fi
-
-# --- 6: schema exposes pref ---
-if jq -e '.properties.global.properties.perRepoMemory.default == false' "$SCHEMA" >/dev/null 2>&1; then
-  record_pass "prefs schema exposes perRepoMemory with default false"
-else
-  record_fail "prefs schema missing perRepoMemory or wrong default"
-fi
-
-# cleanup
-rm -f "$body"
-rm -rf "$sandbox"
-export HOME="$HOME_SAVE"
-
-printf '\n══ per-repo-memory smoke: %d passed, %d failed ══\n' "$pass" "$fail"
-if [ "$fail" -gt 0 ]; then
-  printf '\nFailures:\n'
-  for msg in "${failures[@]}"; do printf '  - %s\n' "$msg"; done
-  exit 1
-fi
-exit 0