@mmerterden/multi-agent-pipeline 12.7.0 → 12.8.0

package/pipeline/scripts/smoke-gc-tmp.sh

@@ -1,130 +0,0 @@
-#!/usr/bin/env bash
-# smoke-gc-tmp.sh  -  gc-tmp.sh sweeps only known scratch prefixes, is dry-run
-# by default, never touches unrelated files, refuses unsafe scratch roots,
-# never deletes the root itself, and spares fresh scratch by default.
-#
-# Exit 0 = all pass, 1 = any failure.
-
-set -uo pipefail
-
-ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
-GC="$ROOT/pipeline/scripts/gc-tmp.sh"
-PASS=0
-FAIL=0
-pass() {
-  PASS=$((PASS + 1))
-  echo "  ✓ $1"
-}
-fail() {
-  FAIL=$((FAIL + 1))
-  echo "  ✗ $1"
-}
-[ -f "$GC" ] || {
-  echo "FAIL: gc-tmp.sh missing" >&2
-  exit 1
-}
-
-SB="$(mktemp -d)"
-trap 'rm -rf "$SB"' EXIT
-
-seed() {
-  rm -rf "${SB:?}"/*
-  mkdir -p "$SB/multi-agent-review-PROJ-1-x" "$SB/analysis-foo-123"
-  touch "$SB/multi-agent-picker-PROJ-1.json" \
-    "$SB/issue-progress-PROJ-1-ab.md" \
-    "$SB/channels-PROJ-1-pr.md" \
-    "$SB/context-links-PROJ-1.json" \
-    "$SB/context-by-type-PROJ-1.json" \
-    "$SB/unrelated-file.txt"
-}
-
-echo "→ 1. dry-run lists matches and deletes nothing"
-seed
-before=$(find "$SB" -mindepth 1 | wc -l | tr -d ' ')
-out=$(GC_TMP_ROOT="$SB" GC_TMP_GRACE_MIN=0 bash "$GC" 2>&1)
-after=$(find "$SB" -mindepth 1 | wc -l | tr -d ' ')
-echo "$out" | grep -q "DRY-RUN" && pass "dry-run banner shown" || fail "dry-run banner missing"
-[ "$before" = "$after" ] && pass "dry-run deleted nothing ($after entries intact)" || fail "dry-run changed the tree ($before -> $after)"
-echo "$out" | grep -q "unrelated-file.txt" && fail "dry-run matched an unrelated file" || pass "unrelated file not matched"
-
-echo ""
-echo "→ 2. --yes removes only matched scratch"
-seed
-GC_TMP_ROOT="$SB" GC_TMP_GRACE_MIN=0 bash "$GC" --yes >/dev/null 2>&1
-[ -f "$SB/unrelated-file.txt" ] && pass "unrelated file preserved" || fail "unrelated file was deleted"
-[ ! -e "$SB/multi-agent-picker-PROJ-1.json" ] && pass "multi-agent-* file removed" || fail "multi-agent-* file survived"
-[ ! -e "$SB/multi-agent-review-PROJ-1-x" ] && pass "scratch dir removed" || fail "scratch dir survived"
-[ ! -e "$SB/analysis-foo-123" ] && pass "analysis draft dir removed" || fail "analysis draft survived"
-[ ! -e "$SB/channels-PROJ-1-pr.md" ] && pass "channels payload removed" || fail "channels payload survived"
-remaining=$(find "$SB" -mindepth 1 | wc -l | tr -d ' ')
-[ "$remaining" = "1" ] && pass "exactly the 1 unrelated entry remains" || fail "expected 1 survivor, got $remaining"
-
-echo ""
-echo "→ 3. --older-than excludes fresh scratch"
-seed
-out=$(GC_TMP_ROOT="$SB" GC_TMP_GRACE_MIN=0 bash "$GC" --older-than=1 2>&1)
-echo "$out" | grep -q "nothing to do" && pass "freshly-created scratch excluded by --older-than=1" || fail "--older-than did not exclude fresh files"
-
-echo ""
-echo "→ 4. usage errors exit 2"
-GC_TMP_ROOT="$SB" bash "$GC" --bogus >/dev/null 2>&1
-[ "$?" = "2" ] && pass "unknown argument exits 2" || fail "unknown argument did not exit 2"
-GC_TMP_ROOT="$SB" bash "$GC" --older-than=abc >/dev/null 2>&1
-[ "$?" = "2" ] && pass "non-numeric --older-than exits 2" || fail "bad --older-than did not exit 2"
-
-echo ""
-echo "→ 5. empty root is a clean no-op"
-EMPTY="$(mktemp -d)"
-out=$(GC_TMP_ROOT="$EMPTY" bash "$GC" 2>&1)
-rc=$?
-rm -rf "$EMPTY"
-{ [ "$rc" = "0" ] && echo "$out" | grep -q "nothing to do"; } && pass "empty root exits 0 with no-op message" || fail "empty root not a clean no-op"
-
-echo ""
-echo "→ 6. unsafe scratch roots are refused (exit 2)"
-GC_TMP_ROOT="$HOME" bash "$GC" >/dev/null 2>&1
-[ "$?" = "2" ] && pass "\$HOME as scratch root refused" || fail "\$HOME as scratch root not refused"
-GC_TMP_ROOT="/" bash "$GC" >/dev/null 2>&1
-[ "$?" = "2" ] && pass "/ as scratch root refused" || fail "/ as scratch root not refused"
-GITROOT="$(mktemp -d)"
-mkdir -p "$GITROOT/.git"
-touch "$GITROOT/multi-agent-bait.json"
-GC_TMP_ROOT="$GITROOT" bash "$GC" --yes >/dev/null 2>&1
-rc=$?
-[ "$rc" = "2" ] && pass "git work tree as scratch root refused" || fail "git work tree as scratch root not refused"
-[ -f "$GITROOT/multi-agent-bait.json" ] && pass "bait file inside refused root untouched" || fail "refused root was still swept"
-rm -rf "$GITROOT"
-
-echo ""
-echo "→ 7. a root itself named like scratch is never deleted"
-SR="$(mktemp -d)"
-mkdir -p "$SR/multi-agent-root"
-touch "$SR/multi-agent-root/multi-agent-inner.json"
-GC_TMP_ROOT="$SR/multi-agent-root" GC_TMP_GRACE_MIN=0 bash "$GC" --yes >/dev/null 2>&1
-[ -d "$SR/multi-agent-root" ] && pass "matching-named root survives --yes" || fail "root dir itself was deleted"
-[ ! -e "$SR/multi-agent-root/multi-agent-inner.json" ] && pass "inner scratch still removed" || fail "inner scratch survived"
-rm -rf "$SR"
-
-echo ""
-echo "→ 8. symlinked scratch is unlinked without following it"
-seed
-VICTIM="$(mktemp -d)"
-echo keep >"$VICTIM/keep.txt"
-ln -s "$VICTIM" "$SB/multi-agent-linked"
-GC_TMP_ROOT="$SB" GC_TMP_GRACE_MIN=0 bash "$GC" --yes >/dev/null 2>&1
-[ ! -e "$SB/multi-agent-linked" ] && pass "symlink itself removed" || fail "symlink survived"
-[ -f "$VICTIM/keep.txt" ] && pass "symlink target untouched" || fail "symlink target was deleted"
-rm -rf "$VICTIM"
-
-echo ""
-echo "→ 9. default grace spares fresh scratch"
-seed
-out=$(GC_TMP_ROOT="$SB" bash "$GC" --yes 2>&1)
-rc=$?
-[ "$rc" = "0" ] && pass "grace run exits 0" || fail "grace run exited $rc"
-[ -f "$SB/multi-agent-picker-PROJ-1.json" ] && pass "fresh scratch spared by default grace" || fail "default grace deleted fresh scratch"
-echo "$out" | grep -qi "spared" && pass "output mentions spared fresh items" || fail "no spared note in output"
-
-echo ""
-echo "══ gc-tmp smoke: $PASS passed, $FAIL failed ══"
-[ "$FAIL" -eq 0 ]

package/pipeline/scripts/smoke-gc-worktrees.sh

@@ -1,125 +0,0 @@
-#!/usr/bin/env bash
-# smoke-gc-worktrees.sh  -  contract of the worktree residue sweeper.
-#
-# Verifies gc-worktrees.sh: dry-run-by-default, orphan-dir removal only with
-# --yes, registered worktrees untouched, gitlink residue unstaged, exclude
-# guard added idempotently, --older-than sparing, non-repo no-op, and flag
-# validation.
-
-set -uo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-SCRIPT="$SCRIPT_DIR/gc-worktrees.sh"
-
-PASS=0
-FAIL=0
-record_pass() { PASS=$((PASS + 1)); printf '  \342\234\223 %s\n' "$1"; }
-record_fail() { FAIL=$((FAIL + 1)); printf '  \342\234\227 %s\n' "$1"; }
-
-printf '\342\206\222 smoke-gc-worktrees: worktree residue sweep contract\n'
-
-tmpdir=$(mktemp -d)
-trap 'rm -rf "$tmpdir"' EXIT
-
-# Fixture repo: one registered worktree, one orphan dir, one gitlink residue.
-REPO="$tmpdir/repo"
-mkdir -p "$REPO"
-git -C "$REPO" init -q -b main
-git -C "$REPO" config user.email smoke@test
-git -C "$REPO" config user.name smoke
-echo hi > "$REPO/f.txt"
-git -C "$REPO" add f.txt
-git -C "$REPO" commit -qm init
-git -C "$REPO" worktree add -q "$REPO/.worktrees/REG" -b reg-branch
-mkdir -p "$REPO/.worktrees/ORPHAN"
-echo x > "$REPO/.worktrees/ORPHAN/file"
-git -C "$REPO" update-index --add --cacheinfo "160000,$(git -C "$REPO" rev-parse HEAD),.worktrees/GONE"
-
-# 1. Script parses
-if bash -n "$SCRIPT" 2>/dev/null; then
-  record_pass "gc-worktrees.sh parses (bash -n)"
-else
-  record_fail "gc-worktrees.sh has syntax errors"
-fi
-
-# 2. Dry-run lists all three findings and deletes nothing
-out=$(bash "$SCRIPT" --repo "$REPO" 2>&1); rc=$?
-if [ "$rc" -eq 0 ] \
-  && printf '%s' "$out" | grep -q "would remove orphan worktree dir: .worktrees/ORPHAN" \
-  && printf '%s' "$out" | grep -q "would unstage gitlink residue from the index: .worktrees/GONE" \
-  && printf '%s' "$out" | grep -q "would add .worktrees/ to .git/info/exclude"; then
-  record_pass "dry-run lists orphan dir + gitlink + missing guard"
-else
-  record_fail "dry-run should list all three findings (rc=$rc): $out"
-fi
-if [ -d "$REPO/.worktrees/ORPHAN" ] && git -C "$REPO" ls-files -s -- .worktrees | grep -q 160000; then
-  record_pass "dry-run changed nothing"
-else
-  record_fail "dry-run must not delete or unstage anything"
-fi
-
-# 3. --older-than spares the freshly-touched orphan
-out=$(bash "$SCRIPT" --repo "$REPO" --older-than=60 2>&1)
-if printf '%s' "$out" | grep -q "would remove orphan"; then
-  record_fail "--older-than=60 should spare the fresh orphan dir"
-else
-  record_pass "--older-than spares recently-touched orphan dirs"
-fi
-
-# 4. --yes applies all three
-out=$(bash "$SCRIPT" --repo "$REPO" --yes 2>&1); rc=$?
-if [ "$rc" -eq 0 ] && [ ! -d "$REPO/.worktrees/ORPHAN" ]; then
-  record_pass "--yes removes the orphan dir"
-else
-  record_fail "--yes should remove the orphan dir (rc=$rc): $out"
-fi
-if git -C "$REPO" ls-files -s -- .worktrees | grep -q 160000; then
-  record_fail "--yes should unstage the gitlink residue"
-else
-  record_pass "--yes unstages the gitlink residue"
-fi
-if [ "$(grep -cxF '.worktrees/' "$REPO/.git/info/exclude" 2>/dev/null)" = "1" ]; then
-  record_pass "--yes adds the exclude guard exactly once"
-else
-  record_fail "exclude guard missing or duplicated"
-fi
-
-# 5. Registered worktree untouched
-if [ -d "$REPO/.worktrees/REG" ] && git -C "$REPO" worktree list | grep -q "REG"; then
-  record_pass "registered worktree left untouched"
-else
-  record_fail "registered worktree must never be touched"
-fi
-
-# 6. Re-run -> nothing to do, guard not duplicated
-out=$(bash "$SCRIPT" --repo "$REPO" 2>&1); rc=$?
-if [ "$rc" -eq 0 ] && printf '%s' "$out" | grep -q "nothing to do"; then
-  record_pass "clean repo -> nothing to do (exit 0)"
-else
-  record_fail "clean repo should be a no-op (rc=$rc): $out"
-fi
-bash "$SCRIPT" --repo "$REPO" --yes >/dev/null 2>&1
-if [ "$(grep -cxF '.worktrees/' "$REPO/.git/info/exclude")" = "1" ]; then
-  record_pass "exclude guard is idempotent across --yes reruns"
-else
-  record_fail "exclude guard duplicated on rerun"
-fi
-
-# 7. Non-repo -> silent no-op exit 0
-out=$(bash "$SCRIPT" --repo "$tmpdir" 2>&1); rc=$?
-if [ "$rc" -eq 0 ] && printf '%s' "$out" | grep -q "not a git work tree"; then
-  record_pass "non-repo -> exit 0 no-op"
-else
-  record_fail "non-repo should exit 0 with a no-op message (rc=$rc)"
-fi
-
-# 8. Unknown flag -> usage error exit 2
-bash "$SCRIPT" --definitely-not-a-flag >/dev/null 2>&1; rc=$?
-if [ "$rc" -eq 2 ]; then
-  record_pass "unknown flag -> exit 2"
-else
-  record_fail "unknown flag should exit 2 (got $rc)"
-fi
-
-printf '\n\342\225\220\342\225\220 smoke-gc-worktrees: %d passed, %d failed \342\225\220\342\225\220\n' "$PASS" "$FAIL"
-[ "$FAIL" -eq 0 ]

package/pipeline/scripts/smoke-generate-issue.sh

@@ -1,120 +0,0 @@
-#!/usr/bin/env bash
-# smoke-generate-issue.sh  -  contract for /multi-agent:create-jira.
-#
-# Verifies:
-#   1. All 3 files exist (1 command, shared ref, 1 Copilot/plugin SKILL.md).
-#   2. Frontmatter keys present on both surfaces.
-#   3. Command delegates to refs/generate-issue.md and asks the issue type.
-#   4. Approval gate documented and marked unskippable in the ref.
-#   5. Convention mining + createmeta + Agile sprint endpoints present.
-#   6. UTF-8 verbatim POST path (--rawfile + --data-binary) present.
-#   7. Standard template vocab: Task/Story (Scope/Acceptance/Test Scenarios), Bug (Steps/Expected/Actual/Environment), Swagger.
-#   8. Registration: dispatcher rows, inventory lists, count derived from the command tree.
-#   9. Forbidden strings absent (em-dash, section sign, the M-word, unicode_escape).
-
-set -euo pipefail
-
-HERE="$(cd "$(dirname "$0")" && pwd)"
-ROOT="$(cd "$HERE/../.." && pwd)"
-CMD="$ROOT/pipeline/commands/multi-agent/create-jira/SKILL.md"
-REF="$ROOT/pipeline/multi-agent-refs/generate-issue.md"
-SKILL="$ROOT/pipeline/skills/shared/core/multi-agent-create-jira/SKILL.md"
-DISPATCHER="$ROOT/pipeline/commands/multi-agent/SKILL.md"
-CONTRACT="$ROOT/pipeline/multi-agent-refs/cross-cli-contract.md"
-CMD_COUNT=$(find "$ROOT/pipeline/commands/multi-agent" -mindepth 1 -maxdepth 1 -type d | wc -l | tr -d ' ')
-SYNC="$ROOT/pipeline/commands/multi-agent/sync/SKILL.md"
-HELP="$ROOT/pipeline/commands/multi-agent/help/SKILL.md"
-
-PASS=0
-FAIL=0
-pass() { PASS=$((PASS+1)); echo "  ✓ $1"; }
-fail() { FAIL=$((FAIL+1)); echo "  ✗ $1"; }
-
-echo "→ 1. files exist"
-for f in "$CMD" "$REF" "$SKILL"; do
-  if [ -f "$f" ]; then pass "exists: ${f#$ROOT/}"; else fail "missing: ${f#$ROOT/}"; fi
-done
-# old split commands must be gone
-for f in "$ROOT/pipeline/commands/multi-agent/generate-task/SKILL.md" "$ROOT/pipeline/commands/multi-agent/generate-bug/SKILL.md"; do
-  if [ -f "$f" ]; then fail "stale file present: ${f#$ROOT/}"; else pass "removed: ${f##*/}"; fi
-done
-[ "$FAIL" -eq 0 ] || { echo "══ generate-issue smoke: $PASS passed, $FAIL failed ══"; exit 1; }
-
-echo ""
-echo "→ 2. frontmatter keys"
-head -5 "$CMD" | grep -q '^description:' && pass "description: ${CMD##*/}" || fail "description missing: ${CMD##*/}"
-head -5 "$CMD" | grep -q '^argument-hint:' && pass "argument-hint: ${CMD##*/}" || fail "argument-hint missing: ${CMD##*/}"
-head -8 "$SKILL" | grep -q '^name: multi-agent-create-jira$' && pass "name: multi-agent-create-jira" || fail "name wrong: $SKILL"
-head -8 "$SKILL" | grep -q '^language: en' && pass "language en" || fail "language missing: $SKILL"
-head -8 "$SKILL" | grep -q '^user-invocable: true' && pass "user-invocable" || fail "user-invocable missing: $SKILL"
-
-echo ""
-echo "→ 3. command delegates to the shared ref and asks the type"
-grep -Fq "refs/generate-issue.md" "$CMD" && pass "ref link present" || fail "ref link missing"
-for t in "Task" "Bug" "Story"; do
-  grep -Fq "$t" "$CMD" && pass "type offered: $t" || fail "type missing: $t"
-done
-grep -Fqi "Pick issue type" "$REF" && pass "type-selection step present" || fail "type-selection step missing"
-
-echo ""
-echo "→ 4. approval gate documented and unskippable"
-grep -Fq "Full preview + approval gate (never skipped)" "$REF" && pass "gate section present" || fail "gate section missing"
-for marker in "Approve" "Edit" "Cancel" "no bypass" "Nothing was created"; do
-  grep -Fqi "$marker" "$REF" && pass "gate marker: $marker" || fail "gate marker missing: $marker"
-done
-grep -Fq "no autopilot variant" "$REF" && pass "no-autopilot rule" || fail "no-autopilot rule missing"
-
-echo ""
-echo "→ 5. mining + createmeta + agile endpoints"
-for marker in "rest/api/2/search" "rest/api/2/issue/createmeta" "rest/agile/1.0/board" "sprint?state=active" 'sprint/${SPRINT_ID}/issue' "remotelink" "attachments"; do
-  grep -Fq "$marker" "$REF" && pass "endpoint marker: $marker" || fail "endpoint marker missing: $marker"
-done
-grep -Fq "gh-sprint" "$REF" && pass "generic sprint-field detection" || fail "generic sprint-field detection missing"
-
-echo ""
-echo "→ 6. UTF-8 verbatim POST path"
-grep -Fq -- "--rawfile" "$REF" && pass "--rawfile present" || fail "--rawfile missing"
-grep -Fq -- "--data-binary" "$REF" && pass "--data-binary present" || fail "--data-binary missing"
-grep -Fqi "humanizer" "$REF" && pass "humanizer pass referenced" || fail "humanizer missing"
-
-echo ""
-echo "→ 7. standard template vocabulary + auto-sizing + swagger"
-for s in "Scope" "Acceptance Criteria" "Test Scenarios"; do
-  grep -Fq "$s" "$REF" && pass "task/story section: $s" || fail "task/story section missing: $s"
-done
-for s in "Steps to Reproduce" "Expected Result" "Actual Result" "Environment"; do
-  grep -Fq "$s" "$REF" && pass "bug section: $s" || fail "bug section missing: $s"
-done
-grep -Fqi "auto-sizing" "$REF" && pass "auto-sizing rule present" || fail "auto-sizing rule missing"
-grep -Fqi "swagger" "$REF" && pass "swagger context present" || fail "swagger context missing"
-
-echo ""
-echo "→ 8. registration + count consistency (derived)"
-grep -Fq '| `create-jira ' "$DISPATCHER" && pass "dispatcher routing: create-jira" || fail "dispatcher routing missing: generate"
-grep -Fq "create-jira/SKILL.md" "$DISPATCHER" && pass "dispatcher loading row" || fail "dispatcher loading row missing"
-grep -Fq "## 1. Command Inventory ($CMD_COUNT commands)" "$CONTRACT" && pass "contract count = $CMD_COUNT (derived)" || fail "contract count wrong"
-grep -Eq '(^|[ ,])create-jira([ ,]|$)' "$CONTRACT" && pass "contract list has create-jira" || fail "contract list missing generate"
-grep -Fq "**$CMD_COUNT commands are synced**" "$SYNC" && pass "sync count = $CMD_COUNT (derived)" || fail "sync count wrong"
-SYNC_SKILL="$ROOT/pipeline/skills/shared/core/multi-agent-sync/SKILL.md"
-grep -Fq "**$CMD_COUNT commands are synced**" "$SYNC_SKILL" && pass "sync SKILL count = $CMD_COUNT (derived)" || fail "sync SKILL count wrong (Copilot parity)"
-grep -Fq "create-jira" "$ROOT/pipeline/skills/shared/core/multi-agent-help/SKILL.md" && pass "help SKILL lists create-jira" || fail "help SKILL missing create-jira (Copilot parity)"
-grep -c "multi-agent:create-jira" "$HELP" | awk '{exit !($1>=2)}' && pass "help.md has EN + TR entries" || fail "help.md entries incomplete"
-# no stale split-command references anywhere in the synced surfaces
-if grep -rqE "generate-task|generate-bug" "$DISPATCHER" "$CONTRACT" "$SYNC" "$HELP" "$CMD" "$REF" "$SKILL"; then
-  fail "stale generate-task/generate-bug reference found"
-else
-  pass "no stale split-command references"
-fi
-
-echo ""
-echo "→ 9. forbidden strings absent"
-MWORD="MAN""DATORY"
-for f in "$CMD" "$REF" "$SKILL"; do
-  if grep -q $'—\|§\|…' "$f"; then fail "forbidden unicode punctuation in ${f##*/}"; else pass "punctuation clean: ${f##*/}"; fi
-  if grep -q "$MWORD" "$f"; then fail "forbidden word in ${f##*/}"; else pass "vocabulary clean: ${f##*/}"; fi
-  if grep -q "unicode_escape" "$f" && ! grep -q "Never round-trip" "$f"; then fail "unicode_escape misuse in ${f##*/}"; else pass "encoding rule clean: ${f##*/}"; fi
-done
-
-echo ""
-echo "══ generate-issue smoke: $PASS passed, $FAIL failed ══"
-[ "$FAIL" -eq 0 ]

package/pipeline/scripts/smoke-handoff-contract.sh

@@ -1,92 +0,0 @@
-#!/usr/bin/env bash
-# smoke-handoff-contract.sh
-#
-# Verifies the v10.8.0 structured-handoff contract (fresh-context re-entry):
-#   1. operations.md documents the Handoff block with all 5 required lines
-#   2. operations.md compaction trigger re-reads state AND the latest handoff
-#   3. log-format.md documents the Handoff section in the canonical log shape
-#   4. resume.md Step 3 reads the latest handoff FIRST with pre-v10.8 fallback
-#
-# Exit 0 = all pass, 1 = any failure.
-
-set -euo pipefail
-
-ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
-OPS="$ROOT/pipeline/multi-agent-refs/phases/operations.md"
-LOGFMT="$ROOT/pipeline/multi-agent-refs/phases/log-format.md"
-RESUME="$ROOT/pipeline/commands/multi-agent/resume/SKILL.md"
-
-pass=0
-fail=0
-failures=()
-record_pass() { pass=$((pass + 1)); printf '  \033[0;32mPASS\033[0m %s\n' "$1"; }
-record_fail() { fail=$((fail + 1)); failures+=("$1"); printf '  \033[0;31mFAIL\033[0m %s\n' "$1"; }
-
-printf '→ smoke-handoff-contract: structured handoff (fresh-context re-entry)\n'
-
-# 1. operations.md documents the Handoff block with the 5 required lines
-if [ ! -f "$OPS" ]; then
-  record_fail "operations.md missing"
-else
-  if grep -qF "Handoff block (v10.8.0)" "$OPS"; then
-    record_pass "operations.md documents the Handoff block"
-  else
-    record_fail "operations.md missing 'Handoff block (v10.8.0)' spec"
-  fi
-  for line in "- Done:" "- Remaining:" "- Decisions:" "- Open findings:" "- Next:"; do
-    if grep -qF -- "$line" "$OPS"; then
-      record_pass "operations.md handoff spec has '$line'"
-    else
-      record_fail "operations.md handoff spec missing '$line'"
-    fi
-  done
-  if grep -qF "no agent dispatch, no extra LLM call" "$OPS"; then
-    record_pass "operations.md states handoff is orchestrator-written (no LLM call)"
-  else
-    record_fail "operations.md must state the handoff costs no LLM call"
-  fi
-fi
-
-# 2. Compaction trigger re-reads state AND latest handoff
-if grep -qE 'agent-state\.json.*AND the latest.*Handoff' "$OPS"; then
-  record_pass "compaction trigger re-reads state + latest handoff"
-else
-  record_fail "operations.md compaction trigger must re-read agent-state.json AND the latest Handoff block"
-fi
-
-# 3. log-format.md documents the Handoff section
-if grep -qF "## Handoff - end of Phase" "$LOGFMT"; then
-  record_pass "log-format.md documents the Handoff section"
-else
-  record_fail "log-format.md missing the Handoff section"
-fi
-if grep -qF "LATEST block is authoritative" "$LOGFMT"; then
-  record_pass "log-format.md states latest-block-wins semantics"
-else
-  record_fail "log-format.md must state the latest handoff block is authoritative"
-fi
-
-# 4. resume.md reads handoff first, with fallback for older logs
-if grep -qE 'LATEST .?## Handoff.? block' "$RESUME"; then
-  record_pass "resume.md Step 3 reads the latest Handoff block first"
-else
-  record_fail "resume.md Step 3 must read the latest Handoff block first"
-fi
-if grep -qiF "fall back to per-phase findings" "$RESUME"; then
-  record_pass "resume.md keeps the pre-v10.8 per-phase fallback"
-else
-  record_fail "resume.md must keep the pre-v10.8 per-phase findings fallback"
-fi
-if grep -qF "trust state on mismatch" "$RESUME"; then
-  record_pass "resume.md defines state-wins conflict rule"
-else
-  record_fail "resume.md must define the handoff-vs-state conflict rule (state wins)"
-fi
-
-printf '\n══ handoff-contract smoke: %d passed, %d failed ══\n' "$pass" "$fail"
-if [ "$fail" -gt 0 ]; then
-  printf '\nFailures:\n'
-  for msg in "${failures[@]}"; do printf '  - %s\n' "$msg"; done
-  exit 1
-fi
-exit 0

package/pipeline/scripts/smoke-identity-isolation.sh

@@ -1,70 +0,0 @@
-#!/usr/bin/env bash
-# smoke-identity-isolation.sh  -  asserts identity isolation rules from section18.3
-# of REFACTOR_PLAN_v3.7.md are documented & wired:
-#
-#   • Identity lookup happens via platformIdentityRouting only  -  NEVER fall
-#     back to "try all PATs"
-#   • If no routing match, prompt user  -  do not guess
-#   • servicePatMap is checked per-identity  -  corp identity cannot accidentally
-#     use personal identity's PAT even if the keychain name is discoverable
-#
-# Doc-shape smoke (no fake keychain entries; pure spec assertion).
-
-set -uo pipefail
-
-# Read from source (authoritative)  -  installed tree may lag behind on
-# machines that haven't re-run install.js after a pipeline update.
-HERE="$(cd "$(dirname "$0")" && pwd)"
-ROOT="$(cd "$HERE/../.." && pwd)"
-PHASE0="$ROOT/pipeline/multi-agent-refs/phases/phase-0-init.md"
-SETUP="$ROOT/pipeline/commands/multi-agent/setup/SKILL.md"
-PREFS_SCHEMA="$ROOT/pipeline/schemas/prefs.schema.json"
-
-PASS=0; FAIL=0
-pass() { PASS=$((PASS+1)); echo "  ✓ $1"; }
-fail() { FAIL=$((FAIL+1)); echo "  ✗ $1"; }
-
-echo "→ 1. servicePatMap is per-identity (schema)"
-grep -q "servicePatMap" "$PREFS_SCHEMA" \
-  && pass "Schema declares identities[].servicePatMap" \
-  || fail "Schema missing servicePatMap on identities"
-grep -q "Enables cross-identity isolation\|cross-identity isolation" "$PREFS_SCHEMA" \
-  && pass "Schema description articulates cross-identity isolation invariant" \
-  || fail "Schema description missing isolation invariant"
-
-echo ""
-echo "→ 2. Phase 0 routing  -  no silent fallback to 'try all PATs'"
-grep -q "platformIdentityRouting" "$PHASE0" \
-  && pass "Phase 0 Step 6 references platformIdentityRouting" \
-  || fail "Phase 0 missing platformIdentityRouting reference"
-# Post-10caff1 wording: the resolution order ends with an explicit "ask once"
-# clause for the multi-identity case  -  same invariant as the older
-# "multi-identity picker" text.
-grep -q "Multiple identities, no routing rule" "$PHASE0" \
-  && pass "Phase 0 handles 'no routing match, multiple identities' branch" \
-  || fail "Phase 0 missing no-match + multi-identity handling"
-grep -q "No identities" "$PHASE0" \
-  && pass "Phase 0 handles 'no identities ever' branch (Token Save Flow)" \
-  || fail "Phase 0 missing 'no identities' branch"
-grep -qE "save routing rule so it never asks again" "$PHASE0" \
-  && pass "Phase 0 persists routing on first ask (no silent guess)" \
-  || fail "Phase 0 missing routing-persistence guarantee"
-
-echo ""
-echo "→ 3. Setup Step 4 wires per-identity service ownership"
-grep -q "servicePatMap" "$SETUP" \
-  && pass "Setup Step 4 documents servicePatMap" \
-  || fail "Setup Step 4 missing servicePatMap"
-grep -qE "own tokens for|owns.*jira|per-identity" "$SETUP" \
-  && pass "Setup Step 4 describes per-identity ownership" \
-  || fail "Setup Step 4 missing per-identity ownership description"
-
-echo ""
-echo "→ 4. Multi-repo: identity routed per-repo (not shared)"
-grep -qE "per repo( independently)?|routed per-repo" "$PHASE0" \
-  && pass "Multi-repo Step 6 routes identity per-repo" \
-  || fail "Multi-repo per-repo identity routing missing"
-
-echo ""
-echo "══ identity-isolation smoke: $PASS passed, $FAIL failed ══"
-[ "$FAIL" -eq 0 ]