@mmerterden/multi-agent-pipeline 12.7.0 → 12.9.0

package/pipeline/scripts/smoke-shadow-git.sh

@@ -1,224 +0,0 @@
-#!/usr/bin/env bash
-# smoke-shadow-git.sh
-#
-# Verifies the shadow-git checkpoint surface:
-#   1. pipeline/lib/shadow-git.sh exists, parses cleanly
-#   2. --help / unknown subcommand exits non-zero with usage
-#   3. doctor runs cleanly on an empty environment
-#   4. Lifecycle: init → snapshot → list → restore (--files) → prune
-#   5. Baseline snapshot is auto-created by init
-#   6. snapshot with no changes is a no-op (exits 0, no new commit)
-#   7. node_modules / Pods / DerivedData NOT tracked even when ignored
-#      isn't already in the project's .gitignore
-#   8. restore actually reverts file contents
-#   9. prune removes the shadow dir
-#  10. prefs schema exposes shadowGit.{enabled, mode, pruneAfterDays}
-#  11. shadowGit.enabled defaults to false (opt-in)
-#  12. shadowGit.mode default is per-todo-step
-#  13. Phase 3 doc documents shadow-git.sh wiring (init + snapshot + restore)
-#
-# Exit 0 = all pass, 1 = any failure.
-
-set -uo pipefail
-
-ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
-SG="$ROOT/pipeline/lib/shadow-git.sh"
-PREFS="$ROOT/pipeline/schemas/prefs.schema.json"
-P3="$ROOT/pipeline/multi-agent-refs/phases/phase-3-dev.md"
-
-pass=0
-fail=0
-failures=()
-record_pass() { pass=$((pass + 1)); printf '  \033[0;32mPASS\033[0m %s\n' "$1"; }
-record_fail() { fail=$((fail + 1)); failures+=("$1"); printf '  \033[0;31mFAIL\033[0m %s\n' "$1"; }
-
-printf '→ smoke-shadow-git: per-tool-call checkpoint contract\n'
-
-# 1. Script exists + parses
-if [ ! -f "$SG" ]; then
-  record_fail "pipeline/lib/shadow-git.sh missing"
-elif ! bash -n "$SG" 2>/dev/null; then
-  record_fail "shadow-git.sh syntax error"
-else
-  record_pass "shadow-git.sh exists and parses"
-fi
-
-# 2. Unknown subcommand
-if bash "$SG" garbage >/dev/null 2>&1; then
-  record_fail "unknown subcommand should exit non-zero"
-else
-  record_pass "unknown subcommand rejected"
-fi
-
-# 3. Doctor on empty environment
-if bash "$SG" doctor >/dev/null 2>&1; then
-  record_pass "doctor runs cleanly"
-else
-  record_fail "doctor crashed on empty environment"
-fi
-
-# 4-9. Lifecycle on a temp project
-TMP=$(mktemp -d)
-# A failed cd here would run the relative `rm -rf DerivedData` below in the
-# caller's directory instead of the sandbox.
-cd "$TMP" || { record_fail "cannot cd into sandbox $TMP"; exit 1; }
-git init --quiet
-echo "node_modules/" > .gitignore
-echo "hello" > a.txt
-mkdir -p node_modules && echo "trash" > node_modules/x.txt
-
-TASK_ID="SMOKE-SG-$$"
-if bash "$SG" init "$TASK_ID" "$TMP" >/dev/null 2>&1; then
-  record_pass "init creates shadow repo"
-else
-  record_fail "init failed"
-fi
-
-# Baseline snapshot exists
-list_after_init=$(bash "$SG" list "$TASK_ID" 2>/dev/null | awk 'NF{c++} END{print c+0}')
-if [ "$list_after_init" -eq 1 ]; then
-  record_pass "init created exactly one baseline snapshot"
-else
-  record_fail "init should create baseline; got $list_after_init snapshots"
-fi
-
-# 6. No-op snapshot
-bash "$SG" snapshot "$TASK_ID" "$TMP" "no-op-attempt" >/dev/null 2>&1
-list_after_noop=$(bash "$SG" list "$TASK_ID" 2>/dev/null | awk 'NF{c++} END{print c+0}')
-if [ "$list_after_noop" -eq 1 ]; then
-  record_pass "snapshot with no changes is a no-op (still 1 commit)"
-else
-  record_fail "no-op snapshot created a phantom commit"
-fi
-
-# 7. node_modules NOT tracked
-if bash "$SG" list "$TASK_ID" >/dev/null 2>&1 \
-   && ! git --git-dir="$HOME/.claude/state/shadow-git/$TASK_ID/.git" --work-tree="$TMP" \
-        ls-files 2>/dev/null | grep -q "^node_modules/"; then
-  record_pass "node_modules NOT tracked by shadow repo"
-else
-  record_fail "node_modules leaked into shadow tracking"
-fi
-
-# 7b. Forced excludes apply even when NOT in the project .gitignore
-# (DerivedData is not in this fixture's .gitignore; it must be excluded via
-# the shadow repo's .git/info/exclude).
-mkdir -p DerivedData && echo "buildjunk" > DerivedData/junk.txt
-bash "$SG" snapshot "$TASK_ID" "$TMP" "derived-data-probe" >/dev/null 2>&1
-if ! git --git-dir="$HOME/.claude/state/shadow-git/$TASK_ID/.git" --work-tree="$TMP" \
-     ls-files 2>/dev/null | grep -q "^DerivedData/"; then
-  record_pass "DerivedData NOT tracked (forced exclude in .git/info/exclude)"
-else
-  record_fail "DerivedData leaked into shadow tracking (forced excludes dead)"
-fi
-rm -rf DerivedData
-
-# Make a real edit + a brand-new file + snapshot
-echo "hello-changed" > a.txt
-echo "post-baseline" > b.txt
-sha_edit=$(bash "$SG" snapshot "$TASK_ID" "$TMP" "edited a.txt" 2>/dev/null | head -1)
-if [ -n "$sha_edit" ] && [ "${#sha_edit}" -ge 7 ]; then
-  record_pass "snapshot after edit produced a sha: $sha_edit"
-else
-  record_fail "snapshot after edit returned no sha"
-fi
-
-list_now=$(bash "$SG" list "$TASK_ID" 2>/dev/null | awk 'NF{c++} END{print c+0}')
-if [ "$list_now" -eq 2 ]; then
-  record_pass "list now shows 2 snapshots"
-else
-  record_fail "expected 2 snapshots, got $list_now"
-fi
-
-# 8. Restore the baseline
-echo "never-snapshotted" > c.txt   # created after the last snapshot
-baseline_sha=$(bash "$SG" list "$TASK_ID" 2>/dev/null | tail -1 | awk '{print $1}')
-bash "$SG" restore "$TASK_ID" "$TMP" "$baseline_sha" --files >/dev/null 2>&1
-if [ "$(cat "$TMP/a.txt")" = "hello" ]; then
-  record_pass "restore reverted a.txt to baseline content"
-else
-  record_fail "restore did not revert a.txt (got '$(cat "$TMP/a.txt")')"
-fi
-
-# 8b. Restore removes files that did not exist in the snapshot
-if [ ! -f "$TMP/b.txt" ]; then
-  record_pass "restore removed b.txt (committed after baseline)"
-else
-  record_fail "restore left b.txt in place (created after snapshot must be removed)"
-fi
-if [ ! -f "$TMP/c.txt" ]; then
-  record_pass "restore removed c.txt (never snapshotted)"
-else
-  record_fail "restore left c.txt in place (untracked new file must be removed)"
-fi
-if [ -f "$TMP/node_modules/x.txt" ]; then
-  record_pass "restore left ignored node_modules untouched"
-else
-  record_fail "restore deleted ignored files (node_modules must survive clean)"
-fi
-
-# 9. Prune
-bash "$SG" prune "$TASK_ID" >/dev/null 2>&1
-if [ ! -d "$HOME/.claude/state/shadow-git/$TASK_ID" ]; then
-  record_pass "prune removed the shadow repo"
-else
-  record_fail "prune did not remove the shadow dir"
-fi
-
-# 9b. Task-id validation: traversal and separator ids are rejected before any
-# rm -rf (a "prune .." must never delete ~/.claude/state).
-for bad_id in ".." "." "a/b" "-x!"; do
-  if bash "$SG" prune "$bad_id" >/dev/null 2>&1; then
-    record_fail "prune accepted unsafe task id '$bad_id'"
-  else
-    record_pass "prune rejects unsafe task id '$bad_id'"
-  fi
-done
-if [ -d "$HOME/.claude/state" ]; then
-  record_pass "~/.claude/state survived unsafe prune attempts"
-else
-  record_fail "~/.claude/state is GONE after unsafe prune attempts"
-fi
-
-cd - >/dev/null || true
-rm -rf "$TMP"
-
-# 10-12. Prefs schema
-for prop in enabled mode pruneAfterDays; do
-  if jq -e ".properties.global.properties.shadowGit.properties.${prop}" "$PREFS" >/dev/null 2>&1; then
-    record_pass "prefs schema exposes shadowGit.${prop}"
-  else
-    record_fail "prefs schema missing shadowGit.${prop}"
-  fi
-done
-if jq -e '.properties.global.properties.shadowGit.properties.enabled
-          | has("default") and .default == false' "$PREFS" >/dev/null 2>&1; then
-  record_pass "shadowGit.enabled defaults to false"
-else
-  record_fail "shadowGit.enabled should default to false"
-fi
-mode_default=$(jq -r '.properties.global.properties.shadowGit.properties.mode.default // empty' "$PREFS")
-if [ "$mode_default" = "per-todo-step" ]; then
-  record_pass "shadowGit.mode defaults to per-todo-step"
-else
-  record_fail "shadowGit.mode default should be per-todo-step (got: ${mode_default:-missing})"
-fi
-
-# 13. Phase 3 doc wiring
-if [ ! -f "$P3" ]; then
-  record_fail "phase-3-dev.md missing"
-elif grep -qE 'shadow-git\.sh"? init' "$P3" \
-   && grep -qE 'shadow-git\.sh"? snapshot' "$P3" \
-   && grep -qE 'shadow-git\.sh"? restore' "$P3"; then
-  record_pass "phase-3-dev.md documents init + snapshot + restore"
-else
-  record_fail "phase-3-dev.md missing one of init/snapshot/restore wiring"
-fi
-
-printf '\n══ shadow-git smoke: %d passed, %d failed ══\n' "$pass" "$fail"
-if [ "$fail" -gt 0 ]; then
-  printf '\nFailures:\n'
-  for msg in "${failures[@]}"; do printf '  - %s\n' "$msg"; done
-  exit 1
-fi
-exit 0

package/pipeline/scripts/smoke-skill-authoring.sh

@@ -1,137 +0,0 @@
-#!/usr/bin/env bash
-# smoke-skill-authoring.sh  -  authoring-hygiene audit for OUR authored skills.
-#
-# Based on Anthropic's skill-authoring guide + alexop.dev "Stop Bloating Your
-# CLAUDE.md" (April 2026 community consensus).
-#
-# SCOPE: only skills we author. Specifically:
-#
-#   pipeline/skills/shared/core/          -  our orchestration + compliance skills
-#
-# INTENTIONALLY NOT AUDITED (upstream imports / different schema):
-#
-#   pipeline/skills/shared/external/      -  curated third-party skills (own frontmatter)
-#
-# Rules:
-#   1. Every SKILL.md has YAML frontmatter (--- ... ---)
-#   2. Frontmatter `name` matches the directory name
-#   3. `description` non-empty and ≥ 20 chars
-#   4. Body length ≤ 500 lines  -  WARN (split to SKILL.md + REFERENCE.md)
-#   5. Body length ≤ 1000 lines  -  HARD (catalog clearly doesn't belong in SKILL.md)
-#
-# Rule 4 is warn-only. Rule 5 fails the suite. Rules 1-3 fail the suite.
-#
-# Rationale: progressive disclosure is an emerging 2026 best practice. Large
-# skills poison the context window; splitting out REFERENCE.md keeps the
-# action-description short (what the model sees on skill dispatch) while
-# keeping the catalog discoverable on demand.
-
-set -euo pipefail
-
-HERE="$(cd "$(dirname "$0")" && pwd)"
-ROOT="$(cd "$HERE/../.." && pwd)"
-
-WARN_LINES=500
-FAIL_LINES=1000
-MIN_DESC_CHARS=20
-
-PASS=0
-WARN=0
-FAIL=0
-
-pass() { PASS=$((PASS+1)); echo "  ✓ $1"; }
-warn() { WARN=$((WARN+1)); echo "  ⚠ $1"; }
-fail() { FAIL=$((FAIL+1)); echo "  ✗ $1"; }
-
-# Only our authored skill trees  -  upstream imports live under external/
-# and are exempt (own frontmatter conventions).
-TARGETS=(
-  "$ROOT/pipeline/skills/shared/core"
-)
-
-# Collect the list once.
-SKILLS=$(find "${TARGETS[@]}" -name 'SKILL.md' -type f 2>/dev/null | sort)
-SKILL_COUNT=$(echo "$SKILLS" | grep -c . || true)
-
-echo "→ Scope: $SKILL_COUNT authored SKILL.md files under shared/core/"
-echo "  (external/ intentionally excluded  -  upstream conventions)"
-echo ""
-
-echo "→ 1. Every SKILL.md has YAML frontmatter (--- ... ---)"
-MISSING_FM=0
-while IFS= read -r f; do
-  [ -z "$f" ] && continue
-  if ! head -1 "$f" | grep -q '^---$'; then
-    fail "frontmatter missing: ${f#$ROOT/}"
-    MISSING_FM=$((MISSING_FM+1))
-  fi
-done <<< "$SKILLS"
-[ "$MISSING_FM" -eq 0 ] && pass "all authored skills have frontmatter"
-
-echo ""
-echo "→ 2. Frontmatter name matches directory name"
-MISMATCH=0
-while IFS= read -r f; do
-  [ -z "$f" ] && continue
-  dir_name=$(basename "$(dirname "$f")")
-  fm_name=$(awk -F: '/^name:/ {sub(/^name:[[:space:]]*/,"",$0); sub(/^name:[[:space:]]*/,""); gsub(/"/,""); gsub(/^[[:space:]]+/,""); gsub(/[[:space:]]+$/,""); print; exit}' "$f" 2>/dev/null || true)
-  if [ -z "$fm_name" ]; then
-    fail "frontmatter missing name: ${f#$ROOT/}"
-    MISMATCH=$((MISMATCH+1))
-  elif [ "$dir_name" != "$fm_name" ]; then
-    fail "dir='${dir_name}' vs name='${fm_name}': ${f#$ROOT/}"
-    MISMATCH=$((MISMATCH+1))
-  fi
-done <<< "$SKILLS"
-[ "$MISMATCH" -eq 0 ] && pass "all names match directory names"
-
-echo ""
-echo "→ 3. description field non-empty and ≥ $MIN_DESC_CHARS chars"
-SHORT_DESC=0
-while IFS= read -r f; do
-  [ -z "$f" ] && continue
-  desc=$(awk '
-    BEGIN { in_fm=0 }
-    /^---$/ { in_fm++; next }
-    in_fm==1 && /^description:/ {
-      sub(/^description:[[:space:]]*/,"");
-      gsub(/^["'\''"]/,"");
-      gsub(/["'\''"]$/,"");
-      print;
-      exit
-    }
-  ' "$f" 2>/dev/null || true)
-  len=${#desc}
-  if [ "$len" -lt "$MIN_DESC_CHARS" ]; then
-    fail "description too short (${len} chars, need ≥${MIN_DESC_CHARS}): ${f#$ROOT/}"
-    SHORT_DESC=$((SHORT_DESC+1))
-  fi
-done <<< "$SKILLS"
-[ "$SHORT_DESC" -eq 0 ] && pass "all descriptions meet minimum length"
-
-echo ""
-echo "→ 4. Body length within budget (warn > $WARN_LINES, hard-fail > $FAIL_LINES)"
-WARN_COUNT=0
-HARD_COUNT=0
-while IFS= read -r f; do
-  [ -z "$f" ] && continue
-  total=$(wc -l < "$f")
-  # Find the closing --- of frontmatter (line of 2nd ^---$).
-  fm_end=$(awk '/^---$/ { n++; if (n==2) { print NR; exit } }' "$f")
-  [ -z "$fm_end" ] && fm_end=0
-  body=$((total - fm_end))
-  if [ "$body" -gt "$FAIL_LINES" ]; then
-    fail "body $body lines > $FAIL_LINES (HARD  -  split into REFERENCE.md): ${f#$ROOT/}"
-    HARD_COUNT=$((HARD_COUNT+1))
-  elif [ "$body" -gt "$WARN_LINES" ]; then
-    warn "body $body lines > $WARN_LINES (consider SKILL.md + REFERENCE.md split): ${f#$ROOT/}"
-    WARN_COUNT=$((WARN_COUNT+1))
-  fi
-done <<< "$SKILLS"
-[ "$HARD_COUNT" -eq 0 ] && [ "$WARN_COUNT" -eq 0 ] && pass "all authored skills fit budget"
-
-echo ""
-echo "══ skill-authoring smoke: $PASS passed, $WARN warnings, $FAIL failed ══"
-
-# Warnings don't fail the suite; hard failures do.
-[ "$FAIL" -eq 0 ]

package/pipeline/scripts/smoke-skill-language.sh

@@ -1,83 +0,0 @@
-#!/usr/bin/env bash
-# smoke-skill-language.sh  -  guard the "skill UI is always English" rule.
-#
-# Memory rule: skill picker / confirmation / error UI exposed by the CLI host
-# stays English regardless of the user's prefs.global.outputLanguage. The
-# host renders SKILL.md frontmatter (`description`, `argument-hint`) in its
-# selector  -  so those fields must be English.
-#
-# This smoke fails if any SKILL.md description/argument-hint field contains
-# Turkish-only characters (`ç`, `ğ`, `ı`, `ö`, `ş`, `ü`, plus uppercase
-# variants `Ç`, `Ğ`, `İ`, `Ö`, `Ş`, `Ü`)  -  a cheap proxy for "non-English
-# prose snuck into a host-visible field."
-#
-# What this DOES NOT enforce:
-#   - The body of a SKILL.md may contain Turkish (the `language: tr` field
-#     declares a runtime body language). Only frontmatter description and
-#     argument-hint are checked.
-#   - Loanwords and proper nouns in EN that happen to use diacritics are
-#     rejected  -  adjust the allowlist below if a legitimate case appears.
-#
-# Exit codes: 0=pass, 1=violation, 2=structural error.
-set -uo pipefail
-
-REPO_ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
-SKILLS_ROOT="$REPO_ROOT/pipeline/skills/shared/core"
-
-if [ ! -d "$SKILLS_ROOT" ]; then
-  echo "FAIL: $SKILLS_ROOT missing" >&2
-  exit 2
-fi
-
-# Turkish-specific characters (lower + upper).
-TR_CHARS='çğıöşüÇĞİÖŞÜ'
-
-PASS=0
-FAIL=0
-pass() { PASS=$((PASS+1)); echo "  ✓ $1"; }
-fail() { FAIL=$((FAIL+1)); echo "  ✗ $1"; }
-
-extract_field() {
-  local file="$1"
-  local field="$2"
-  awk -v f="$field" '
-    /^---[[:space:]]*$/ { fm = !fm; next }
-    fm && $0 ~ "^"f":" {
-      sub("^"f":[[:space:]]*", "")
-      gsub(/^"|"$/, "")
-      print
-      exit
-    }
-  ' "$file"
-}
-
-echo "→ Scanning SKILL.md files under $SKILLS_ROOT for Turkish chars in host-visible fields"
-echo ""
-
-while IFS= read -r -d '' skill_file; do
-  rel="${skill_file#$REPO_ROOT/}"
-
-  desc=$(extract_field "$skill_file" "description")
-  hint=$(extract_field "$skill_file" "argument-hint")
-
-  if [ -n "$desc" ]; then
-    if [[ "$desc" =~ [$TR_CHARS] ]]; then
-      fail "$rel: description contains Turkish chars → '$desc'"
-    else
-      pass "$rel: description is ASCII-clean"
-    fi
-  fi
-
-  if [ -n "$hint" ]; then
-    if [[ "$hint" =~ [$TR_CHARS] ]]; then
-      fail "$rel: argument-hint contains Turkish chars → '$hint'"
-    else
-      pass "$rel: argument-hint is ASCII-clean"
-    fi
-  fi
-done < <(find "$SKILLS_ROOT" -name "SKILL.md" -print0)
-
-echo ""
-echo "══ smoke-skill-language: $PASS passed, $FAIL failed ══"
-
-[ "$FAIL" -eq 0 ] || exit 1

package/pipeline/scripts/smoke-skill-manifest.sh

@@ -1,138 +0,0 @@
-#!/usr/bin/env bash
-# smoke-skill-manifest.sh  -  v6.2.H
-#
-# Asserts the sign-skills / verify-skills contract:
-#   1. sign-skills.sh produces a valid .skill-manifest.json with schemaVersion + entries
-#   2. verify-skills.sh exits 0 on clean baseline
-#   3. verify-skills.sh exits 2 when a SKILL.md is mutated
-#   4. verify-skills.sh exits 2 when a SKILL.md is deleted
-#   5. verify-skills.sh exits 3 when a new SKILL.md is added (not in manifest)
-#   6. verify-skills.sh fail-opens (exit 0) when manifest is absent
-#
-# Works on a temp sandbox  -  never touches the repo's real manifest.
-
-set -euo pipefail
-
-ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
-SIGN="$ROOT/pipeline/scripts/sign-skills.sh"
-VERIFY="$ROOT/pipeline/scripts/verify-skills.sh"
-
-pass=0
-fail=0
-failures=()
-record_pass() { pass=$((pass + 1)); printf '  \033[0;32mPASS\033[0m %s\n' "$1"; }
-record_fail() { fail=$((fail + 1)); failures+=("$1"); printf '  \033[0;31mFAIL\033[0m %s\n' "$1"; }
-
-printf '→ smoke-skill-manifest (v6.2.H): sign + verify integrity contract\n'
-
-sandbox=$(mktemp -d)
-skills="$sandbox/skills"
-mkdir -p "$skills/group-a" "$skills/group-b"
-
-cat > "$skills/group-a/SKILL.md" <<'S'
----
-name: group-a
-description: test skill A
----
-body A
-S
-
-cat > "$skills/group-b/SKILL.md" <<'S'
----
-name: group-b
-description: test skill B
----
-body B
-S
-
-# --- 1: sign produces manifest ---
-bash "$SIGN" --root "$skills" >/dev/null
-if [ -f "$skills/.skill-manifest.json" ] && \
-   jq -e '.schemaVersion and .entries and (.skillCount == 2)' "$skills/.skill-manifest.json" >/dev/null; then
-  record_pass "sign wrote valid manifest with 2 entries"
-else
-  record_fail "sign output malformed"
-fi
-
-# --- 2: verify clean ---
-if bash "$VERIFY" --root "$skills" --quiet; then
-  record_pass "verify exits 0 on clean baseline"
-else
-  record_fail "verify should exit 0 on clean baseline"
-fi
-
-# --- 3: mutation → drift (exit 2) ---
-echo 'tampered' >> "$skills/group-a/SKILL.md"
-set +e
-bash "$VERIFY" --root "$skills" --quiet
-rc=$?
-set -e
-if [ "$rc" = "2" ]; then
-  record_pass "verify detects mutation (exit 2)"
-else
-  record_fail "verify should exit 2 on mutation (got $rc)"
-fi
-
-# restore
-bash "$SIGN" --root "$skills" >/dev/null
-
-# --- 4: deletion → missing (exit 2) ---
-rm "$skills/group-a/SKILL.md"
-set +e
-bash "$VERIFY" --root "$skills" --quiet
-rc=$?
-set -e
-if [ "$rc" = "2" ]; then
-  record_pass "verify detects deletion (exit 2)"
-else
-  record_fail "verify should exit 2 on deletion (got $rc)"
-fi
-
-# restore
-mkdir -p "$skills/group-a"
-cat > "$skills/group-a/SKILL.md" <<'S'
----
-name: group-a
-description: test skill A
----
-body A
-S
-bash "$SIGN" --root "$skills" >/dev/null
-
-# --- 5: addition → extra (exit 3) ---
-mkdir -p "$skills/group-c"
-cat > "$skills/group-c/SKILL.md" <<'S'
----
-name: group-c
-description: new skill not in manifest
----
-body C
-S
-
-set +e
-bash "$VERIFY" --root "$skills" --quiet
-rc=$?
-set -e
-if [ "$rc" = "3" ]; then
-  record_pass "verify detects extra file (exit 3)"
-else
-  record_fail "verify should exit 3 on extra file (got $rc)"
-fi
-
-# --- 6: missing manifest → fail-open exit 0 ---
-rm "$skills/.skill-manifest.json"
-if bash "$VERIFY" --root "$skills" --quiet; then
-  record_pass "verify fail-opens when manifest absent (first install)"
-else
-  record_fail "verify should fail-open with no manifest"
-fi
-
-rm -rf "$sandbox"
-
-printf '\n══ skill-manifest smoke: %d passed, %d failed ══\n' "$pass" "$fail"
-if [ "$fail" -gt 0 ]; then
-  printf '\nFailures:\n'
-  for m in "${failures[@]}"; do printf '  - %s\n' "$m"; done
-  exit 1
-fi
-exit 0