@mmerterden/multi-agent-pipeline 12.7.0 → 12.9.0

package/pipeline/scripts/smoke-validator-contradiction.sh

@@ -1,67 +0,0 @@
-#!/usr/bin/env bash
-# smoke-validator-contradiction.sh  -  verify bidirectional approved↔blocking auto-correction.
-# Tests both directions of the triage validator's contradiction detection.
-
-set -uo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-VALIDATOR="$SCRIPT_DIR/validate-triage.mjs"
-
-PASS=0
-FAIL=0
-
-pass() { PASS=$((PASS+1)); echo "  ✓ $1"; }
-fail() { FAIL=$((FAIL+1)); echo "  ✗ $1"; }
-
-echo "→ 1. approved=false but no blocking items → auto-correct to true (exit 3)"
-RESULT=$(echo '{"accepted":[{"severity":"suggestion","file":"x.ts","line":1,"issue":"naming convention","fix":"rename to camelCase","reviewer":"opus"}],"deferred":[],"rejected":[],"approved":false}' | node "$VALIDATOR" -)
-CODE=$?
-if [ "$CODE" -eq 3 ]; then pass "exit code 3 (contradiction corrected)"; else fail "expected exit 3, got $CODE"; fi
-CORRECTED=$(echo "$RESULT" | jq -r '.corrected.approved')
-if [ "$CORRECTED" = "true" ]; then pass "corrected.approved == true"; else fail "corrected.approved = $CORRECTED, expected true"; fi
-
-echo ""
-echo "→ 2. approved=true but has blocking item → auto-correct to false (exit 3)"
-RESULT=$(echo '{"accepted":[{"severity":"blocking","file":"auth.ts","line":42,"issue":"SQL injection vulnerability","fix":"use parameterized query","reviewer":"opus"}],"deferred":[],"rejected":[],"approved":true}' | node "$VALIDATOR" -)
-CODE=$?
-if [ "$CODE" -eq 3 ]; then pass "exit code 3 (contradiction corrected)"; else fail "expected exit 3, got $CODE"; fi
-CORRECTED=$(echo "$RESULT" | jq -r '.corrected.approved')
-if [ "$CORRECTED" = "false" ]; then pass "corrected.approved == false"; else fail "corrected.approved = $CORRECTED, expected false"; fi
-
-echo ""
-echo "→ 3. approved=true with no blocking → valid (exit 0)"
-RESULT=$(echo '{"accepted":[{"severity":"important","file":"x.ts","line":1,"issue":"missing null check","fix":"add guard clause","reviewer":"sonnet"}],"deferred":[],"rejected":[],"approved":true}' | node "$VALIDATOR" -)
-CODE=$?
-if [ "$CODE" -eq 0 ]; then pass "exit code 0 (valid, no contradiction)"; else fail "expected exit 0, got $CODE"; fi
-OK=$(echo "$RESULT" | jq -r '.ok')
-if [ "$OK" = "true" ]; then pass "ok == true"; else fail "ok = $OK, expected true"; fi
-
-echo ""
-echo "→ 4. approved=false with blocking → valid (exit 0)"
-RESULT=$(echo '{"accepted":[{"severity":"blocking","file":"x.ts","line":1,"issue":"memory leak in closure","fix":"add [weak self]","reviewer":"opus"}],"deferred":[],"rejected":[],"approved":false}' | node "$VALIDATOR" -)
-CODE=$?
-if [ "$CODE" -eq 0 ]; then pass "exit code 0 (valid, correct state)"; else fail "expected exit 0, got $CODE"; fi
-OK=$(echo "$RESULT" | jq -r '.ok')
-if [ "$OK" = "true" ]; then pass "ok == true"; else fail "ok = $OK, expected true"; fi
-
-echo ""
-echo "→ 5. empty accepted + approved=true → valid (exit 0)"
-RESULT=$(echo '{"accepted":[],"deferred":[],"rejected":[],"approved":true}' | node "$VALIDATOR" -)
-CODE=$?
-if [ "$CODE" -eq 0 ]; then pass "exit code 0 (empty, approved=true is correct)"; else fail "expected exit 0, got $CODE"; fi
-
-echo ""
-echo "→ 6. all suggestions + approved=false → auto-correct (exit 3)"
-RESULT=$(echo '{"accepted":[{"severity":"suggestion","file":"a.ts","line":1,"issue":"test name convention","fix":"rename test","reviewer":"sonnet"},{"severity":"suggestion","file":"b.ts","line":2,"issue":"unused import","fix":"remove import","reviewer":"opus"}],"deferred":[],"rejected":[],"approved":false}' | node "$VALIDATOR" -)
-CODE=$?
-if [ "$CODE" -eq 3 ]; then pass "exit code 3 (no blockers, corrected to true)"; else fail "expected exit 3, got $CODE"; fi
-
-echo ""
-echo "→ 7. mixed blocking+suggestion + approved=true → auto-correct to false (exit 3)"
-RESULT=$(echo '{"accepted":[{"severity":"blocking","file":"a.ts","line":1,"issue":"auth bypass","fix":"add auth check","reviewer":"opus"},{"severity":"suggestion","file":"b.ts","line":2,"issue":"naming","fix":"rename","reviewer":"sonnet"}],"deferred":[],"rejected":[],"approved":true}' | node "$VALIDATOR" -)
-CODE=$?
-if [ "$CODE" -eq 3 ]; then pass "exit code 3 (has blocker, corrected to false)"; else fail "expected exit 3, got $CODE"; fi
-
-echo ""
-echo "══ validator-contradiction smoke: $PASS passed, $FAIL failed ══"
-[ "$FAIL" -eq 0 ]

package/pipeline/scripts/smoke-validator-gates.sh

@@ -1,164 +0,0 @@
-#!/usr/bin/env bash
-# smoke-validator-gates.sh  -  v9.11.0
-#
-# Validates that the orchestrator phase docs wire the structured-output
-# validators (validate-analysis / validate-planning / validate-reviewer /
-# validate-triage) as deterministic gates, not just npm-test fixtures.
-#
-# Without this, a malformed analysis spec, plan, reviewer verdict, or triage
-# verdict flows downstream unchecked  -  the validators existed but only ran
-# in `npm test`, never in the live pipeline.
-#
-# What this enforces:
-#   1. Each validator accepts a FILE argument (the gate invocation form) and
-#      exits 0 on a valid artifact / 1 on a malformed one.
-#   2. phase-1-analysis.md gates the analysis object via validate-analysis.mjs.
-#   3. phase-2-planning.md gates the plan object via validate-planning.mjs.
-#   4. phase-4-review.md gates reviewer outputs via validate-reviewer.mjs AND
-#      the triage verdict via validate-triage.mjs.
-#   5. Every gate block documents the failure protocol: emit stderr, ONE
-#      self-correction rework, re-run, then HALT with a recovery hint.
-#
-# What this does NOT enforce:
-#   - Runtime  -  that the agent actually invokes the gate. This smoke catches
-#     the prompt-side gap, same as smoke-tracker-contract.sh.
-
-set -euo pipefail
-
-REPO_ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
-SCRIPTS_DIR="$REPO_ROOT/pipeline/scripts"
-PHASES_DIR="$REPO_ROOT/pipeline/multi-agent-refs/phases"
-
-PASS=0
-FAIL=0
-pass() { PASS=$((PASS + 1)); echo "  ✓ $1"; }
-fail() { FAIL=$((FAIL + 1)); echo "  ✗ $1"; }
-
-command -v node >/dev/null 2>&1 || { echo "error: node required" >&2; exit 127; }
-
-TMP="$(mktemp -d)"
-trap 'rm -rf "$TMP"' EXIT
-
-# ──────────────────────────────────────────────────────────────────────────
-echo "→ 1. Validators exist and accept a file argument (gate invocation form)"
-
-printf '%s' '{"stack":{"primary":"ios"},"touchedAreas":[{"path":"Sources/App/Login.swift","why":"target of the change"}],"risks":[],"summary":"Valid analysis fixture used by the validator-gates smoke."}' > "$TMP/analysis.json"
-printf '%s' '{"approved":true,"tasks":[{"id":"T1","title":"Add validator gate","type":"code","files":["Sources/App/Login.swift"]}]}' > "$TMP/plan.json"
-printf '%s' '{"findings":[],"approved":true}' > "$TMP/reviewer.json"
-printf '%s' '{"accepted":[],"deferred":[],"rejected":[],"approved":true}' > "$TMP/triage.json"
-
-declare -a CHECKS=(
-  "validate-analysis.mjs|$TMP/analysis.json"
-  "validate-planning.mjs|$TMP/plan.json"
-  "validate-reviewer.mjs|$TMP/reviewer.json"
-  "validate-triage.mjs|$TMP/triage.json"
-)
-for entry in "${CHECKS[@]}"; do
-  validator="${entry%%|*}"
-  fixture="${entry##*|}"
-  if [ ! -f "$SCRIPTS_DIR/$validator" ]; then
-    fail "$validator missing under pipeline/scripts/"
-    continue
-  fi
-  if node "$SCRIPTS_DIR/$validator" "$fixture" >/dev/null 2>&1; then
-    pass "$validator accepts a file argument (exit 0 on valid fixture)"
-  else
-    fail "$validator rejected a valid fixture via file argument"
-  fi
-done
-
-rc=0
-printf '%s' '{}' > "$TMP/malformed.json"
-node "$SCRIPTS_DIR/validate-analysis.mjs" "$TMP/malformed.json" >/dev/null 2>&1 || rc=$?
-if [ "$rc" -eq 1 ]; then
-  pass "validate-analysis.mjs fails CLOSED on a malformed file (exit 1)"
-else
-  fail "validate-analysis.mjs malformed-file exit wrong (got $rc, expected 1)"
-fi
-
-# ──────────────────────────────────────────────────────────────────────────
-echo "→ 2. Phase docs carry the file-based gate invocation marker"
-
-declare -a GATES=(
-  "phase-1-analysis.md|validate-analysis.mjs \"\$ANALYSIS_FILE\""
-  "phase-2-planning.md|validate-planning.mjs \"\$PLAN_FILE\""
-  "phase-4-review.md|validate-reviewer.mjs \"\$REVIEWER_FILE\""
-  "phase-4-review.md|validate-triage.mjs \"\$TRIAGE_FILE\""
-)
-for entry in "${GATES[@]}"; do
-  doc="${entry%%|*}"
-  marker="${entry##*|}"
-  if [ ! -f "$PHASES_DIR/$doc" ]; then
-    fail "$doc missing"
-    continue
-  fi
-  if grep -qF "$marker" "$PHASES_DIR/$doc"; then
-    pass "$doc invokes $marker"
-  else
-    fail "$doc missing gate invocation marker: $marker"
-  fi
-done
-
-# ──────────────────────────────────────────────────────────────────────────
-echo "→ 3. Gate invocations use the installed-scripts path (\$HOME/.claude/scripts)"
-
-declare -a INSTALLED=(
-  "phase-1-analysis.md|validate-analysis.mjs"
-  "phase-2-planning.md|validate-planning.mjs"
-  "phase-4-review.md|validate-reviewer.mjs"
-  "phase-4-review.md|validate-triage.mjs"
-)
-for entry in "${INSTALLED[@]}"; do
-  doc="${entry%%|*}"
-  validator="${entry##*|}"
-  if grep -qF "\$HOME/.claude/scripts/$validator" "$PHASES_DIR/$doc" 2>/dev/null; then
-    pass "$doc invokes \$HOME/.claude/scripts/$validator"
-  else
-    fail "$doc missing \$HOME/.claude/scripts/$validator invocation"
-  fi
-done
-
-# ──────────────────────────────────────────────────────────────────────────
-echo "→ 4. Every gate block documents the failure protocol (rework once, then halt)"
-
-declare -a PROTOCOL_DOCS=(
-  "phase-1-analysis.md"
-  "phase-2-planning.md"
-  "phase-4-review.md"
-)
-for doc in "${PROTOCOL_DOCS[@]}"; do
-  full="$PHASES_DIR/$doc"
-  [ -f "$full" ] || { fail "$doc missing"; continue; }
-  if grep -qi "ONE self-correction rework" "$full"; then
-    pass "$doc documents the single self-correction rework"
-  else
-    fail "$doc missing the self-correction rework step"
-  fi
-  if grep -q "HALT the phase" "$full"; then
-    pass "$doc halts the phase on second validator failure"
-  else
-    fail "$doc missing the halt-on-second-failure rule"
-  fi
-done
-
-# Recovery hints name the validator and the schema to inspect.
-declare -a HINTS=(
-  "phase-1-analysis.md|failed validate-analysis.mjs twice"
-  "phase-2-planning.md|failed validate-planning.mjs twice"
-  "phase-4-review.md|failed validate-reviewer.mjs twice"
-  "phase-4-review.md|failed validate-triage.mjs twice"
-)
-for entry in "${HINTS[@]}"; do
-  doc="${entry%%|*}"
-  hint="${entry##*|}"
-  if grep -qF "$hint" "$PHASES_DIR/$doc" 2>/dev/null; then
-    pass "$doc carries recovery hint: $hint"
-  else
-    fail "$doc missing recovery hint: $hint"
-  fi
-done
-
-# ──────────────────────────────────────────────────────────────────────────
-echo ""
-echo "══ validator-gates smoke: $PASS passed, $FAIL failed ══"
-[ "$FAIL" -eq 0 ]

package/pipeline/scripts/smoke-vercel-deploy-redact.sh

@@ -1,129 +0,0 @@
-#!/usr/bin/env bash
-#
-# smoke-vercel-deploy-redact.sh  -  verify pipeline/lib/vercel-deploy.sh
-# scrubs every known token-leak shape from CLI output.
-#
-# Background: v7.9.1 production deploy failed with the Vercel CLI
-# printing `vercel deploy --token=vcp_...` in the retry hint. The token leaked
-# into the conversation transcript and required rotation. v8.0.0 added
-# vercel-deploy.sh as the safe wrapper. This smoke is the regression gate  - 
-# any future change to the redact filter must keep these patterns covered.
-#
-# Patterns under test:
-#   - --token=vcp_<hex>           (the original 7.9.1 leak shape)
-#   - --token vcp_<hex>           (space-separated argv)
-#   - vcp_<bare>                  (token-only mention)
-#   - Bearer <jwt-ish>            (HTTP auth header)
-#   - "token":"<val>"             (JSON body)
-#   - "VERCEL_TOKEN":"<val>"      (env-dump JSON)
-#
-# Exit codes: 0=pass, 1=at least one pattern survived redaction
-set -euo pipefail
-
-REPO_ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
-WRAPPER="$REPO_ROOT/pipeline/lib/vercel-deploy.sh"
-
-[ -x "$WRAPPER" ] || chmod +x "$WRAPPER" 2>/dev/null || true
-[ -f "$WRAPPER" ] || { echo "FAIL: vercel-deploy.sh missing"; exit 2; }
-
-PASS=0
-FAIL=0
-pass() { echo "  ✓ $*"; PASS=$((PASS + 1)); }
-fail() { echo "  ✗ $*"; FAIL=$((FAIL + 1)); }
-
-assert_redacts() {
-  local label="$1"
-  local input="$2"
-  local must_not_contain="$3"
-  local out
-  out=$(printf '%s' "$input" | bash "$WRAPPER" redact)
-  if echo "$out" | grep -qE "$must_not_contain"; then
-    fail "$label  -  leak survived: $(echo "$out" | grep -oE "$must_not_contain" | head -1)"
-  else
-    pass "$label"
-  fi
-}
-
-# --- Pattern 1: --token=vcp_... (original v7.9.1 leak) ---
-assert_redacts "--token=vcp_... argv form scrubbed" \
-  'Run `vercel deploy --token=vcp_AbCdEf123456789abcdef --prod` to retry' \
-  'vcp_AbCdEf123456789abcdef'
-
-# --- Pattern 2: --token <space> vcp_... ---
-assert_redacts "--token <space> argv form scrubbed" \
-  'next.command: vercel deploy --token vcp_QwertyUiopASDFghj1234' \
-  'vcp_QwertyUiopASDFghj1234'
-
-# --- Pattern 3: bare vcp_... token mention ---
-assert_redacts "bare vcp_... token mention scrubbed" \
-  'Authentication failed for token vcp_BareLeak987654321xyz on retry.' \
-  'vcp_BareLeak987654321xyz'
-
-# --- Pattern 4: Bearer <jwt-ish> auth header ---
-assert_redacts "Bearer <jwt> auth header scrubbed" \
-  'Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0In0.signature' \
-  'eyJhbGciOiJIUzI1NiJ9'
-
-# --- Pattern 5: "token":"<val>" JSON body ---
-assert_redacts '"token":"<val>" JSON body scrubbed' \
-  '{"token":"vcp_JsonBodyLeak555","scope":"deploy"}' \
-  'vcp_JsonBodyLeak555'
-
-# --- Pattern 6: "VERCEL_TOKEN":"<val>" env-dump JSON ---
-assert_redacts '"VERCEL_TOKEN":"<val>" env-dump scrubbed' \
-  'env: { "VERCEL_TOKEN":"vcp_EnvDumpLeak777", "NODE_ENV":"production" }' \
-  'vcp_EnvDumpLeak777'
-
-# --- Pattern 7: multi-line CLI failure dump (real-world shape from v7.9.1) ---
-multiline=$'Error: failed to deploy\n  next.command: vercel deploy --token=vcp_RealDumpLeak888 --prod\n  retry: yes'
-assert_redacts "multi-line CLI failure dump scrubbed" \
-  "$multiline" \
-  'vcp_RealDumpLeak888'
-
-# --- Negative: non-token text passes through unchanged ---
-echo ""
-echo "→ Negative cases  -  non-token text MUST pass through verbatim"
-sample='Deployment URL: https://example.vercel.app/page (200 OK)'
-roundtrip=$(printf '%s' "$sample" | bash "$WRAPPER" redact)
-if [ "$roundtrip" = "$sample" ]; then
-  pass "innocuous output unchanged"
-else
-  fail "redactor mangled innocuous output: '$roundtrip' != '$sample'"
-fi
-
-# --- Wrapper guard: refuses --token argv ---
-echo ""
-echo "→ Wrapper guard  -  refuses to deploy with --token argv"
-guard_out=$(VERCEL_TOKEN=vcp_GuardCheck111 bash "$WRAPPER" deploy --token=vcp_BadArg 2>&1 || true)
-if echo "$guard_out" | grep -q "refused to deploy with --token argv"; then
-  pass "wrapper rejects --token argv with explicit error"
-else
-  fail "wrapper did not reject --token argv (output: $guard_out)"
-fi
-# Verify the refusal message itself doesn't leak the bad token
-if echo "$guard_out" | grep -q "vcp_BadArg"; then
-  fail "refusal message leaked the bad token (vcp_BadArg)"
-else
-  pass "refusal message does not echo the offending token"
-fi
-
-# --- Doctor mode runs without VERCEL_TOKEN crashing ---
-echo ""
-echo "→ doctor subcommand"
-doctor_out=$(VERCEL_TOKEN= bash "$WRAPPER" doctor 2>&1 || true)
-if echo "$doctor_out" | grep -q "VERCEL_TOKEN: unset"; then
-  pass "doctor reports unset token clearly"
-else
-  fail "doctor did not handle unset VERCEL_TOKEN gracefully"
-fi
-
-doctor_set_out=$(VERCEL_TOKEN=vcp_DoctorTokenABCDEF12345 bash "$WRAPPER" doctor 2>&1 || true)
-if echo "$doctor_set_out" | grep -q "vcp_DoctorTokenABCDEF12345"; then
-  fail "doctor leaked the token in set-mode output"
-else
-  pass "doctor masks the token in set-mode output"
-fi
-
-echo ""
-echo "══ smoke-vercel-deploy-redact: $PASS passed, $FAIL failed ══"
-[ "$FAIL" -gt 0 ] && exit 1 || exit 0

package/pipeline/scripts/smoke-verify-by-test.sh

@@ -1,148 +0,0 @@
-#!/usr/bin/env bash
-# smoke-verify-by-test.sh
-#
-# Verifies the Phase 4 Step 3.7 verify-by-test contract:
-#   1. phase-4-review.md documents Step 3.7 with evidence-gate invocation + feature-doc pointer
-#   2. refs/features/verify-by-test.md exists and covers the verdict table + red-test handoff
-#   3. prefs.schema.json exposes global.verifyByTest.{enabled,maxFindings,model,stepTimeoutSec}
-#   4. verifyByTest.enabled defaults to false (opt-in, no surprise cost)
-#   5. triage-output.schema.json is v3.2.0 with the $defs.verification result enum
-#   6. validate-triage.mjs accepts a valid `confirmed` verification and rejects bad ones
-#   7. phase-3-dev.md documents the redTests rework re-entry
-#
-# Exit 0 = all pass, 1 = any failure.
-
-set -euo pipefail
-
-ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
-PHASE4_DOC="$ROOT/pipeline/multi-agent-refs/phases/phase-4-review.md"
-PHASE3_DOC="$ROOT/pipeline/multi-agent-refs/phases/phase-3-dev.md"
-FEATURE_DOC="$ROOT/pipeline/multi-agent-refs/features/verify-by-test.md"
-PREFS_SCHEMA="$ROOT/pipeline/schemas/prefs.schema.json"
-TRIAGE_SCHEMA="$ROOT/pipeline/schemas/triage-output.schema.json"
-VALIDATOR="$ROOT/pipeline/scripts/validate-triage.mjs"
-
-pass=0
-fail=0
-failures=()
-record_pass() { pass=$((pass + 1)); printf '  \033[0;32mPASS\033[0m %s\n' "$1"; }
-record_fail() { fail=$((fail + 1)); failures+=("$1"); printf '  \033[0;31mFAIL\033[0m %s\n' "$1"; }
-
-printf '→ smoke-verify-by-test: Phase 4 Step 3.7 contract\n'
-
-# 1. Phase 4 doc documents Step 3.7
-if [ ! -f "$PHASE4_DOC" ]; then
-  record_fail "phase-4-review.md missing"
-else
-  if grep -qF "3.7 Verify-by-test" "$PHASE4_DOC"; then
-    record_pass "phase-4-review.md documents Step 3.7"
-  else
-    record_fail "phase-4-review.md missing Step 3.7 section"
-  fi
-  if grep -qF "evidence-gate.mjs --claim test --status passed" "$PHASE4_DOC"; then
-    record_pass "Step 3.7 downgrade is evidence-gated"
-  else
-    record_fail "Step 3.7 must gate downgrades via evidence-gate.mjs --claim test --status passed"
-  fi
-  if grep -qF "refs/features/verify-by-test.md" "$PHASE4_DOC"; then
-    record_pass "phase-4-review.md points to the feature doc"
-  else
-    record_fail "phase-4-review.md must reference refs/features/verify-by-test.md"
-  fi
-  if grep -qF "review.verify_by_test" "$PHASE4_DOC"; then
-    record_pass "Step 3.7 emits review.verify_by_test telemetry"
-  else
-    record_fail "Step 3.7 must document the review.verify_by_test metric"
-  fi
-fi
-
-# 2. Feature doc exists with verdict + handoff coverage
-if [ ! -f "$FEATURE_DOC" ]; then
-  record_fail "refs/features/verify-by-test.md missing"
-else
-  for token in "not-reproduced" "inconclusive" "redTests" "Off by default"; do
-    if grep -qF "$token" "$FEATURE_DOC"; then
-      record_pass "feature doc covers '$token'"
-    else
-      record_fail "feature doc missing '$token'"
-    fi
-  done
-fi
-
-# 3. Prefs schema exposes verifyByTest knobs
-for prop in enabled maxFindings model stepTimeoutSec; do
-  if jq -e ".properties.global.properties.verifyByTest.properties.${prop}" "$PREFS_SCHEMA" >/dev/null 2>&1; then
-    record_pass "prefs schema exposes verifyByTest.${prop}"
-  else
-    record_fail "prefs schema missing verifyByTest.${prop}"
-  fi
-done
-
-# 4. Off by default  -  preserves existing-user baseline
-if jq -e '.properties.global.properties.verifyByTest.properties.enabled
-          | has("default") and .default == false' "$PREFS_SCHEMA" >/dev/null 2>&1; then
-  record_pass "verifyByTest.enabled defaults to false (opt-in)"
-else
-  record_fail "verifyByTest.enabled must default to false"
-fi
-
-# 5. Triage schema version + verification enum
-schema_version=$(jq -r '.version // empty' "$TRIAGE_SCHEMA")
-if [ "$schema_version" = "3.2.0" ]; then
-  record_pass "triage-output schema version is 3.2.0"
-else
-  record_fail "triage-output schema version should be 3.2.0 (was: ${schema_version:-missing})"
-fi
-if jq -e '.["$defs"].verification.properties.result.enum
-          | (index("confirmed") != null
-             and index("not-reproduced") != null
-             and index("inconclusive") != null)' "$TRIAGE_SCHEMA" >/dev/null 2>&1; then
-  record_pass "schema verification.result enum complete"
-else
-  record_fail "schema \$defs.verification.result enum must be confirmed/not-reproduced/inconclusive"
-fi
-
-# 6. Behavioral validator round-trips
-valid_fixture='{"accepted":[{"severity":"blocking","file":"Sources/Auth/Login.swift","line":42,"issue":"expired token accepted as valid","fix":"reject tokens past expiry in validateToken()","reviewer":"fable","verification":{"result":"confirmed","testRef":"AuthTests/LoginTests/testExpiredTokenRejected","evidencePath":".pipeline/verify-1.test.log"}}],"deferred":[],"rejected":[],"approved":false}'
-if printf '%s' "$valid_fixture" | node "$VALIDATOR" - >/dev/null 2>&1; then
-  record_pass "validator accepts confirmed verification with testRef+evidencePath"
-else
-  record_fail "validator rejected a valid confirmed verification"
-fi
-
-bad_result_fixture='{"accepted":[{"severity":"blocking","file":"a.swift","line":1,"issue":"some issue here","fix":"do the fix","reviewer":"fable","verification":{"result":"maybe"}}],"deferred":[],"rejected":[],"approved":false}'
-if printf '%s' "$bad_result_fixture" | node "$VALIDATOR" - >/dev/null 2>&1; then
-  record_fail "validator must reject verification.result 'maybe'"
-else
-  record_pass "validator rejects bad verification.result"
-fi
-
-missing_ref_fixture='{"accepted":[{"severity":"blocking","file":"a.swift","line":1,"issue":"some issue here","fix":"do the fix","reviewer":"fable","verification":{"result":"confirmed"}}],"deferred":[],"rejected":[],"approved":false}'
-if printf '%s' "$missing_ref_fixture" | node "$VALIDATOR" - >/dev/null 2>&1; then
-  record_fail "validator must reject confirmed verification without testRef/evidencePath"
-else
-  record_pass "validator rejects confirmed verification lacking testRef/evidencePath"
-fi
-
-# Reviewer enum parity: fable (Claude Code default) and gpt (Copilot CLI) accepted
-fable_fixture='{"accepted":[{"severity":"important","file":"a.swift","line":1,"issue":"some issue here","fix":"do the fix","reviewer":"gpt"}],"deferred":[],"rejected":[],"approved":true}'
-if printf '%s' "$fable_fixture" | node "$VALIDATOR" - >/dev/null 2>&1; then
-  record_pass "validator accepts schema-allowed reviewers (fable/gpt)"
-else
-  record_fail "validator must accept reviewer values fable and gpt (schema v3.1.0 parity)"
-fi
-
-# 7. Phase 3 doc documents the red-test rework re-entry
-if grep -qF "verifyByTest.redTests" "$PHASE3_DOC"; then
-  record_pass "phase-3-dev.md documents redTests rework re-entry"
-else
-  record_fail "phase-3-dev.md must document verifyByTest.redTests re-entry"
-fi
-
-printf '\n══ verify-by-test smoke: %d passed, %d failed ══\n' "$pass" "$fail"
-if [ "$fail" -gt 0 ]; then
-  printf '\nFailures:\n'
-  for msg in "${failures[@]}"; do printf '  - %s\n' "$msg"; done
-  exit 1
-fi
-exit 0

package/pipeline/scripts/smoke-wiki-integration.sh

@@ -1,122 +0,0 @@
-#!/usr/bin/env bash
-# smoke-wiki-integration.sh  -  v5.7+ wiki channel adapter contract.
-#
-# Verifies:
-#   1. prefs.schema.json declares global.wikiScope (array of enum) + reportChannels.wiki (boolean).
-#   2. figma-project-config schema declares wiki.mode enum with 4 adapters.
-#   3. Wiki adapter surface (channels.md + wiki-capture.md) documents:
-#      - Case A (preconditions met) scope multi-select
-#      - Case B (preconditions missing) actionable menu
-#      - taskType === "component" gate
-#      - wiki.enabled gate
-#      - 4 adapter modes (submodule / in-repo / github-wiki / separate-repo)
-#      - Writing wiki progress line
-#   4. figma-component-wiki SKILL.md has dispatch contract + 4 adapters.
-
-set -euo pipefail
-
-HERE="$(cd "$(dirname "$0")" && pwd)"
-ROOT="$(cd "$HERE/../.." && pwd)"
-PREFS="$ROOT/pipeline/schemas/prefs.schema.json"
-FIGMA_SCHEMA="$ROOT/pipeline/schemas/figma-project-config.schema.json"
-CHANNELS="$ROOT/pipeline/commands/multi-agent/channels/SKILL.md"
-WIKI_REF="$ROOT/pipeline/multi-agent-refs/wiki-capture.md"
-PHASE7="$ROOT/pipeline/multi-agent-refs/phases/phase-7-report.md"
-MODES="$ROOT/pipeline/multi-agent-refs/phases/modes.md"
-# (figma-component-wiki skill now lives in the ai-ios-engineering-toolkit plugin, not this repo)
-
-PASS=0
-FAIL=0
-pass() { PASS=$((PASS+1)); echo "  ✓ $1"; }
-fail() { FAIL=$((FAIL+1)); echo "  ✗ $1"; }
-
-need() { command -v "$1" >/dev/null 2>&1 || { echo "error: $1 required" >&2; exit 127; }; }
-need jq
-
-for f in "$PREFS" "$FIGMA_SCHEMA" "$CHANNELS" "$WIKI_REF" "$PHASE7" "$MODES"; do
-  [ -f "$f" ] || { echo "error: missing $f" >&2; exit 1; }
-done
-
-# Combined surface  -  channels.md + wiki-capture.md + phase-7-report.md + modes.md. Any may carry assertion.
-WIKI_SURFACE="$(mktemp)"
-trap 'rm -f "$WIKI_SURFACE"' EXIT
-cat "$CHANNELS" "$WIKI_REF" "$PHASE7" "$MODES" > "$WIKI_SURFACE"
-
-echo "→ 1. prefs schema declares wikiScope (array) + reportChannels.wiki (boolean)"
-SCOPE_TYPE=$(jq -r '.properties.global.properties.wikiScope.type // "missing"' "$PREFS")
-[ "$SCOPE_TYPE" = "array" ] && pass "wikiScope is array" || fail "wikiScope type = '$SCOPE_TYPE' (want array)"
-SCOPE_ENUM=$(jq -c '.properties.global.properties.wikiScope.items.enum // []' "$PREFS")
-EXPECTED_ENUM='["main","ios","screenshots","index"]'
-[ "$SCOPE_ENUM" = "$EXPECTED_ENUM" ] && pass "wikiScope enum = [main,ios,screenshots,index]" || fail "wikiScope enum mismatch: $SCOPE_ENUM"
-
-CHAN_WIKI_TYPE=$(jq -r '.properties.global.properties.reportChannels.properties.wiki.type // "missing"' "$PREFS")
-[ "$CHAN_WIKI_TYPE" = "boolean" ] && pass "reportChannels.wiki is boolean" || fail "reportChannels.wiki type = '$CHAN_WIKI_TYPE'"
-
-echo ""
-echo "→ 2. figma-project-config schema declares wiki.mode with 4 adapters"
-MODE_ENUM=$(jq -c '.properties.wiki.properties.mode.enum' "$FIGMA_SCHEMA")
-EXPECTED='["submodule","in-repo","github-wiki","separate-repo"]'
-[ "$MODE_ENUM" = "$EXPECTED" ] && pass "wiki.mode enum = 4 adapters" || fail "wiki.mode enum mismatch: $MODE_ENUM"
-
-echo ""
-echo "→ 3. Wiki adapter (channels.md + wiki-capture.md) has Case A + Case B"
-if grep -Fq "Case A" "$WIKI_REF" || grep -Fq "preconditions met" "$WIKI_REF"; then
-  pass "Case A (preconditions met) documented"
-else
-  fail "Case A not documented"
-fi
-if grep -Fq "Case B" "$WIKI_REF" || grep -Fq "preconditions missing" "$WIKI_REF"; then
-  pass "Case B (preconditions missing) documented"
-else
-  fail "Case B not documented"
-fi
-
-echo ""
-echo "→ 4. Wiki surface gates on taskType === component"
-if grep -Fq 'state.taskType === "component"' "$WIKI_SURFACE" || grep -Fq 'taskType=component' "$WIKI_SURFACE"; then
-  pass "taskType gate documented"
-else
-  fail "taskType gate missing"
-fi
-
-echo ""
-echo "→ 5. Wiki surface references wiki.enabled"
-if grep -Fq "wiki.enabled" "$WIKI_SURFACE"; then
-  pass "wiki.enabled gate documented"
-else
-  fail "wiki.enabled gate missing"
-fi
-
-echo ""
-echo "→ 6. Wiki surface lists all 4 adapter modes"
-MODES_HIT=0
-for mode in submodule in-repo github-wiki separate-repo; do
-  if grep -Fq "\`$mode\`" "$WIKI_SURFACE"; then
-    MODES_HIT=$((MODES_HIT+1))
-  fi
-done
-[ "$MODES_HIT" -eq 4 ] && pass "all 4 modes listed" || fail "wiki surface lists $MODES_HIT/4 modes"
-
-echo ""
-echo "→ 7. Wiki surface emits wiki progress line"
-if grep -qE '→ writing wiki' "$WIKI_SURFACE"; then
-  pass "progress line shape documented"
-else
-  fail "missing progress line"
-fi
-
-echo ""
-echo "→ 8. Wiki surface documents autopilot always-pause behaviour"
-if grep -qiE 'autopilot.*pause|ALWAYS pauses|Phase 7 autopilot exception' "$WIKI_SURFACE"; then
-  pass "autopilot always-pause documented"
-else
-  fail "autopilot always-pause not documented"
-fi
-
-# (The figma-component-wiki SKILL.md and its dispatch-contract / 4-adapter / frontmatter
-#  assertions moved with the skill into the ai-ios-engineering-toolkit marketplace plugin;
-#  this pipeline smoke now only covers the wiki CHANNEL wiring on the pipeline side.)
-
-echo ""
-echo "══ wiki-integration smoke: $PASS passed, $FAIL failed ══"
-[ "$FAIL" -eq 0 ]