@mmerterden/multi-agent-pipeline 8.6.1 → 10.0.6

package/pipeline/scripts/smoke-identity-isolation.sh

@@ -1,18 +1,18 @@
 #!/usr/bin/env bash
-# smoke-identity-isolation.sh — asserts identity isolation rules from §18.3
+# smoke-identity-isolation.sh  -  asserts identity isolation rules from section18.3
 # of REFACTOR_PLAN_v3.7.md are documented & wired:
 #
-#   • Identity lookup happens via platformIdentityRouting only — NEVER fall
+#   • Identity lookup happens via platformIdentityRouting only  -  NEVER fall
 #     back to "try all PATs"
-#   • If no routing match, prompt user — do not guess
-#   • servicePatMap is checked per-identity — corp identity cannot accidentally
+#   • If no routing match, prompt user  -  do not guess
+#   • servicePatMap is checked per-identity  -  corp identity cannot accidentally
 #     use personal identity's PAT even if the keychain name is discoverable
 #
 # Doc-shape smoke (no fake keychain entries; pure spec assertion).
 
 set -uo pipefail
 
-# Read from source (authoritative) — installed tree may lag behind on
+# Read from source (authoritative)  -  installed tree may lag behind on
 # machines that haven't re-run install.js after a pipeline update.
 HERE="$(cd "$(dirname "$0")" && pwd)"
 ROOT="$(cd "$HERE/../.." && pwd)"
@@ -33,12 +33,12 @@ grep -q "Enables cross-identity isolation\|cross-identity isolation" "$PREFS_SCH
   || fail "Schema description missing isolation invariant"
 
 echo ""
-echo "→ 2. Phase 0 routing — no silent fallback to 'try all PATs'"
+echo "→ 2. Phase 0 routing  -  no silent fallback to 'try all PATs'"
 grep -q "platformIdentityRouting" "$PHASE0" \
   && pass "Phase 0 Step 6 references platformIdentityRouting" \
   || fail "Phase 0 missing platformIdentityRouting reference"
 # Post-10caff1 wording: the resolution order ends with an explicit "ask once"
-# clause for the multi-identity case — same invariant as the older
+# clause for the multi-identity case  -  same invariant as the older
 # "multi-identity picker" text.
 grep -q "Multiple identities, no routing rule" "$PHASE0" \
   && pass "Phase 0 handles 'no routing match, multiple identities' branch" \

package/pipeline/scripts/smoke-install-layout.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 #
-# smoke-install-layout.sh — verify install.js shim + install/* modules produce
+# smoke-install-layout.sh  -  verify install.js shim + install/* modules produce
 # the same on-disk output as the pre-v8.0.0 monolithic installer.
 #
 # v8.0.0 split install.js (1246 LOC) into ./install/{index,claude,copilot,
@@ -81,7 +81,7 @@ shim_lines=$(wc -l < "$INSTALL_JS" | tr -d ' ')
 if [ "$shim_lines" -lt 50 ]; then
   pass "install.js is $shim_lines lines (shim, <50)"
 else
-  fail "install.js is $shim_lines lines — expected shim under 50"
+  fail "install.js is $shim_lines lines  -  expected shim under 50"
 fi
 if grep -q "from \"./install/index.mjs\"" "$INSTALL_JS"; then
   pass "install.js delegates to install/index.mjs"
@@ -98,7 +98,7 @@ trap 'rm -rf "$TMP_CLAUDE" "$TMP_COPILOT" "$TMP_ALL" 2>/dev/null || true' EXIT
 if HOME="$TMP_CLAUDE" node "$INSTALL_JS" --claude > /tmp/smoke-install-layout-claude.log 2>&1; then
   pass "node install.js --claude exited 0"
 else
-  fail "install --claude crashed — see /tmp/smoke-install-layout-claude.log"
+  fail "install --claude crashed  -  see /tmp/smoke-install-layout-claude.log"
   exit 2
 fi
 
@@ -138,7 +138,7 @@ TMP_COPILOT=$(mktemp -d)
 if HOME="$TMP_COPILOT" node "$INSTALL_JS" --copilot > /tmp/smoke-install-layout-copilot.log 2>&1; then
   pass "node install.js --copilot exited 0"
 else
-  fail "install --copilot crashed — see /tmp/smoke-install-layout-copilot.log"
+  fail "install --copilot crashed  -  see /tmp/smoke-install-layout-copilot.log"
   exit 2
 fi
 
@@ -167,7 +167,7 @@ TMP_ALL=$(mktemp -d)
 if HOME="$TMP_ALL" node "$INSTALL_JS" --all > /tmp/smoke-install-layout-all.log 2>&1; then
   pass "node install.js --all exited 0"
 else
-  fail "install --all crashed — see /tmp/smoke-install-layout-all.log"
+  fail "install --all crashed  -  see /tmp/smoke-install-layout-all.log"
   exit 2
 fi
 assert_dir_nonempty "$TMP_ALL/.claude" "~/.claude (--all)"
@@ -204,31 +204,31 @@ echo "→ 7. v8.0.0 layout fingerprint matches the fixture"
 # To regenerate the fixture after an intentional layout change:
 #   tmp=$(mktemp -d) && HOME="$tmp" node install.js --all >/dev/null 2>&1
 #   ( cd "$tmp" && find . -type f | awk -F/ '{ print $2"/"$3 }' \
-#     | sort -u | while read d; do
+#     | LC_ALL=C sort -u | while read d; do
 #         c=$(find "$d" -type f 2>/dev/null | wc -l | tr -d ' ')
 #         printf '%s\t%s\n' "$d" "$c"
 #       done ) > pipeline/scripts/fixtures/install-layout.tsv
 FIXTURE="$REPO_ROOT/pipeline/scripts/fixtures/install-layout.tsv"
 if [ ! -f "$FIXTURE" ]; then
-  fail "install-layout.tsv fixture missing — see header for regeneration recipe"
+  fail "install-layout.tsv fixture missing  -  see header for regeneration recipe"
 else
   ACTUAL_FP=$(
     cd "$TMP_ALL" && find . -type f \
       | awk -F/ '{ print $2"/"$3 }' \
-      | sort -u \
+      | LC_ALL=C sort -u \
       | while read d; do
           c=$(find "$d" -type f 2>/dev/null | wc -l | tr -d ' ')
           printf '%s\t%s\n' "$d" "$c"
         done
   )
-  # Normalize both sides to a trailing newline before hashing — the fixture
+  # Normalize both sides to a trailing newline before hashing  -  the fixture
   # is committed with one, the in-shell capture lacks one. Without this, the
   # smoke would always fail on the byte-level diff.
   if [ "$(printf '%s\n' "$ACTUAL_FP" | shasum -a 256 | cut -d' ' -f1)" = \
        "$(shasum -a 256 < "$FIXTURE" | cut -d' ' -f1)" ]; then
     pass "install layout fingerprint matches fixture"
   else
-    fail "install layout drift — fingerprint changed"
+    fail "install layout drift  -  fingerprint changed"
     diff <(printf '%s\n' "$ACTUAL_FP") "$FIXTURE" | head -20 | sed 's/^/      /'
   fi
 fi

package/pipeline/scripts/smoke-intent-guard.sh

@@ -0,0 +1,86 @@
+#!/usr/bin/env bash
+# smoke-intent-guard.sh  -  contract check for the Phase 0 conceptual-vs-edit guard.
+#
+# Verifies:
+#   1. classify-intent.sh returns task|question|ambiguous for representative
+#      EN + TR inputs (the deterministic classifier the guard relies on).
+#   2. Imperative verbs win over a trailing "?" (actionable requests are tasks).
+#   3. Empty input is ambiguous (never blocks).
+#   4. phase-0-init.md documents the guard and prefs.schema.json exposes the toggle.
+#
+# Exit 0 = all pass, 1 = any failure.
+
+set -uo pipefail
+
+ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
+CLASSIFY="$ROOT/pipeline/lib/classify-intent.sh"
+PHASE0="$ROOT/pipeline/commands/multi-agent/refs/phases/phase-0-init.md"
+PREFS="$ROOT/pipeline/schemas/prefs.schema.json"
+
+PASS=0
+FAIL=0
+pass() { PASS=$((PASS+1)); echo "  ✓ $1"; }
+fail() { FAIL=$((FAIL+1)); echo "  ✗ $1"; }
+
+[ -f "$CLASSIFY" ] || { echo "FAIL: classify-intent.sh missing" >&2; exit 1; }
+
+expect() {
+  local input="$1" want="$2"
+  local got
+  got="$(bash "$CLASSIFY" "$input")"
+  if [ "$got" = "$want" ]; then
+    pass "[$want] $input"
+  else
+    fail "expected [$want] got [$got] for: $input"
+  fi
+}
+
+echo "→ 1. Questions (no dev chain)"
+expect "how does the login flow work?" question
+expect "should I use Keychain or UserDefaults?" question
+expect "explain the auth module" question
+expect "nasıl çalışıyor bu akış?" question
+expect "Keychain mı UserDefaults mı kullanmalıyım?" question
+
+echo ""
+echo "→ 2. Tasks (proceed to dev chain)"
+expect "fix the login bug" task
+expect "refactor the cache layer" task
+expect "LoginView dark mode fix" task
+expect "login ekranına retry ekle" task
+
+echo ""
+echo "→ 3. Polite request beats interrogative; interrogative beats bare imperative"
+expect "can you add a retry to the network layer?" task
+expect "can you split this file" task
+expect "please rename the helper" task
+# Regression: action verb inside a question must NOT be read as a task
+expect "does it support offline mode" question
+expect "should we enable caching" question
+
+echo ""
+echo "→ 4. Empty / vague"
+expect "" ambiguous
+expect "the navigation feels slow" ambiguous
+
+echo ""
+echo "→ 5. Wiring + docs"
+if grep -q "classify-intent.sh" "$PHASE0"; then
+  pass "phase-0-init.md invokes classify-intent.sh"
+else
+  fail "phase-0-init.md does not reference the guard"
+fi
+if grep -q "Intent guard" "$PHASE0"; then
+  pass "phase-0-init.md documents the intent guard step"
+else
+  fail "phase-0-init.md missing intent-guard step"
+fi
+if grep -q '"intentGuard"' "$PREFS"; then
+  pass "prefs.schema.json exposes intentGuard toggle"
+else
+  fail "prefs.schema.json missing intentGuard"
+fi
+
+echo ""
+echo "══ intent-guard smoke: $PASS passed, $FAIL failed ══"
+[ "$FAIL" -eq 0 ]

package/pipeline/scripts/smoke-issue-comment-template.sh

@@ -6,7 +6,7 @@
 # is wired into Phase 7 and that the template file itself contains the required
 # section anchors.
 #
-# This is a lint, not a behavioural test — it does NOT post a real comment.
+# This is a lint, not a behavioural test  -  it does NOT post a real comment.
 # A behavioural drift check (regex against the most recent 5 issue comments by
 # the configured Git identity) lives in the e2e suite.
 
@@ -46,7 +46,7 @@ for anchor in "${REQUIRED_ANCHORS[@]}"; do
   fi
 done
 
-# 3. Phase 7 wires the issue channel — must reference both the template and
+# 3. Phase 7 wires the issue channel  -  must reference both the template and
 #    the progress sync script in the same step.
 if ! grep -qF "refs/channels/issue-comment.md" "$PHASE7"; then
   echo "FAIL [smoke-issue-comment-template]: $PHASE7 must reference refs/channels/issue-comment.md"
@@ -59,7 +59,7 @@ if ! grep -qF "update-issue-progress.sh" "$PHASE7"; then
 fi
 
 # 4. The two paired actions (comment + flag sync) must appear in the same step
-#    block — comment FIRST, flags SECOND.
+#    block  -  comment FIRST, flags SECOND.
 COMMENT_LINE=$(grep -n "gh issue comment" "$PHASE7" | head -1 | cut -d: -f1 || echo "")
 SYNC_LINE=$(grep -n "update-issue-progress.sh" "$PHASE7" | head -1 | cut -d: -f1 || echo "")
 

package/pipeline/scripts/smoke-issue-jira-triad.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# smoke-issue-jira-triad.sh — WS-6 contract for issue → jira → wiki triad.
+# smoke-issue-jira-triad.sh  -  WS-6 contract for issue → jira → wiki triad.
 #
 # Verifies:
 #   1. prefs.schema.json declares autoJiraFromGithubIssue (enum ask/always/never).

package/pipeline/scripts/smoke-keychain.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# smoke-keychain.sh — deterministic Keychain helper contract
+# smoke-keychain.sh  -  deterministic Keychain helper contract
 #
 # Verifies the Python Keychain helper that backs setup, Phase 0 token reads,
 # Phase 6 push retry, and the channel notifiers:
@@ -8,7 +8,7 @@
 #   3. Roundtrip on macOS: set / get / rotate-via-stdin / delete
 #   4. get-after-delete returns exit 1 (item missing)
 #   5. Cross-convention lookup: items written via -l (label) AND -s (service)
-#      are findable by both forms — ensures parity with the user's
+#      are findable by both forms  -  ensures parity with the user's
 #      manually-added personal tokens (-l only) and credential-store.sh
 #      managed items (-s only).
 #   6. Argparse surface: every documented subcommand registered.
@@ -48,7 +48,7 @@ fi
 # --- 2: argparse surface ---
 HELP_OUT=$(python3 "$KEYCHAIN_PY" --help 2>&1 || true)
 for sub in get set delete list doctor; do
-  if grep -qE "[{, ]$sub[},]" <<< "$HELP_OUT"; then
+  if grep -qE "[{, ]${sub}[},]" <<< "$HELP_OUT"; then
     record_pass "argparse exposes '$sub' subcommand"
   else
     record_fail "argparse missing '$sub' subcommand"
@@ -66,7 +66,7 @@ fi
 PLATFORM=$(jq -r '.platform' <<< "$DOCTOR_JSON" 2>/dev/null || echo "unknown")
 BACKEND_OK=$(jq -r '.backend_ok' <<< "$DOCTOR_JSON" 2>/dev/null || echo "false")
 
-# --- 4: live roundtrip (macOS only — Linux CI rarely has libsecret agent) ---
+# --- 4: live roundtrip (macOS only  -  Linux CI rarely has libsecret agent) ---
 if [ "$PLATFORM" = "macos" ] && [ "$BACKEND_OK" = "true" ]; then
   TEST_LABEL="_keychain_smoke_$$_$(date +%s)"
   TEST_VALUE="smoke-value-roundtrip"
@@ -97,7 +97,7 @@ if [ "$PLATFORM" = "macos" ] && [ "$BACKEND_OK" = "true" ]; then
     record_fail "set did NOT write -s (service) attribute"
   fi
 
-  # Stdin rotation (preferred — keeps secrets out of shell history).
+  # Stdin rotation (preferred  -  keeps secrets out of shell history).
   ROTATED="rotated-$$"
   if printf '%s' "$ROTATED" | python3 "$KEYCHAIN_PY" set "$TEST_LABEL" - >/dev/null 2>&1; then
     GOT2=$(python3 "$KEYCHAIN_PY" get "$TEST_LABEL" 2>/dev/null || true)
@@ -138,7 +138,7 @@ elif [ "$PLATFORM" = "linux" ] && [ "$BACKEND_OK" = "true" ]; then
   # Linux: only validate non-secret-touching paths to stay CI-safe.
   record_pass "linux backend present (libsecret); skipping live roundtrip"
 else
-  # Backend unavailable — verify doctor surfaces remediation text.
+  # Backend unavailable  -  verify doctor surfaces remediation text.
   REMEDIATION=$(jq -r '.remediation // ""' <<< "$DOCTOR_JSON")
   if [ -n "$REMEDIATION" ] && [ "$REMEDIATION" != "null" ]; then
     record_pass "doctor surfaces remediation text when backend unavailable"

package/pipeline/scripts/smoke-language-axis.sh

@@ -26,7 +26,7 @@ cd "$PIPELINE_ROOT"
 
 FAIL=0
 
-# Phrases that mean "ALL picker text English" — over-broad, contradicts the
+# Phrases that mean "ALL picker text English"  -  over-broad, contradicts the
 # rules.md matrix. Rule update is in v8.5.1 (rules.md narrowed). Anywhere
 # in phase docs / orchestrator commands that still says this is a regression.
 declare -a FORBIDDEN_PHRASES=(
@@ -47,7 +47,7 @@ TARGETS=(
   "skills/shared/core/multi-agent/SKILL.md"
 )
 
-# Allowlist: rules.md, language.md (the toggle command — explains the contract),
+# Allowlist: rules.md, language.md (the toggle command  -  explains the contract),
 # setup.md (Step 0 sets the language and explains why label stays English),
 # refs/picker-contract.md (UI contract spec).
 declare -a ALLOWLIST=(

package/pipeline/scripts/smoke-learnings-ledger.sh

@@ -0,0 +1,86 @@
+#!/usr/bin/env bash
+# smoke-learnings-ledger.sh  -  contract check for the persistent learnings ledger.
+#
+# Verifies:
+#   1. add appends a fact / convention; identical statement is deduped.
+#   2. from-triage distills rejected findings into rejected-preference entries.
+#   3. brief emits a <repo-learnings> block grouped by kind; exit 2 when empty.
+#   4. Storage is per-repo isolated (slug A never sees slug B).
+#   5. Phase docs + prefs schema wire the ledger in.
+#
+# Uses an isolated HOME so it never touches the developer's real memory store.
+# Exit 0 = all pass, 1 = any failure.
+
+set -uo pipefail
+
+ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
+L="$ROOT/pipeline/scripts/learnings-ledger.mjs"
+TMPHOME="$(mktemp -d)"
+trap 'rm -rf "$TMPHOME"' EXIT
+export HOME="$TMPHOME"   # redirect ~/.claude/memory into the sandbox
+
+PASS=0
+FAIL=0
+pass() { PASS=$((PASS+1)); echo "  ✓ $1"; }
+fail() { FAIL=$((FAIL+1)); echo "  ✗ $1"; }
+
+command -v node >/dev/null 2>&1 || { echo "error: node required" >&2; exit 127; }
+[ -f "$L" ] || { echo "FAIL: learnings-ledger.mjs missing" >&2; exit 1; }
+
+SLUG=repoA
+
+echo "→ 1. add + dedup"
+out=$(node "$L" add --kind fact --statement "Auth tokens persist via KeychainStore" --scope "Auth/*" --repo-slug "$SLUG")
+echo "$out" | grep -q '"added":1' && pass "first add writes" || fail "first add did not write ($out)"
+out=$(node "$L" add --kind fact --statement "auth tokens persist via keychainstore" --repo-slug "$SLUG"; echo "rc=$?")
+echo "$out" | grep -q '"added":0' && pass "case-insensitive dedup" || fail "dedup failed ($out)"
+echo "$out" | grep -q 'rc=2' && pass "dedup exits 2" || fail "dedup exit code wrong ($out)"
+
+echo ""
+echo "→ 2. from-triage distills rejections"
+printf '{"accepted":[],"deferred":[],"rejected":[{"finding":{"severity":"suggestion","file":"Net/Client.swift","line":12,"issue":"add Sendable annotation"},"reason":"requires Swift 6 migration"}],"approved":true}' > "$TMPHOME/tri.json"
+out=$(node "$L" from-triage --triage "$TMPHOME/tri.json" --task PROJ-9 --repo-slug "$SLUG")
+echo "$out" | grep -q '"added":1' && pass "rejected finding becomes a rejected-preference" || fail "from-triage failed ($out)"
+
+echo ""
+echo "→ 2b. SAFETY: blocking rejections are NOT auto-suppressed"
+printf '{"accepted":[],"deferred":[],"rejected":[{"finding":{"severity":"blocking","file":"Auth/x.swift","line":1,"issue":"missing access-control flag on keychain item"},"reason":"reviewer says false positive"},{"finding":{"severity":"suggestion","file":"Net/y.swift","line":2,"issue":"rename helper for clarity"},"reason":"style only"}]}' > "$TMPHOME/blk.json"
+out=$(node "$L" from-triage --triage "$TMPHOME/blk.json" --task PROJ-2 --repo-slug "$SLUG")
+echo "$out" | grep -q '"skippedBlocking":1' && pass "blocking rejection skipped" || fail "blocking not skipped ($out)"
+echo "$out" | grep -q '"added":1' && pass "non-blocking rejection still distilled" || fail "suggestion not added ($out)"
+brief2=$(node "$L" brief --repo-slug "$SLUG")
+echo "$brief2" | grep -qi "missing access-control flag" && fail "blocking issue leaked into brief (would suppress a real finding)" || pass "blocking issue absent from brief"
+
+echo ""
+echo "→ 2c. forget removes a bad/stale entry"
+node "$L" forget --statement "rename helper" --repo-slug "$SLUG" >/dev/null 2>&1
+brief3=$(node "$L" brief --repo-slug "$SLUG" 2>/dev/null || true)
+echo "$brief3" | grep -qi "rename helper" && fail "forget did not remove the entry" || pass "forget removed the targeted entry"
+
+echo ""
+echo "→ 3. brief content + emptiness"
+brief=$(node "$L" brief --repo-slug "$SLUG")
+echo "$brief" | grep -q '<repo-learnings>' && pass "brief emits repo-learnings block" || fail "brief block missing"
+echo "$brief" | grep -q 'Architectural facts' && pass "brief groups facts" || fail "facts group missing"
+echo "$brief" | grep -qi 'do not re-flag: add Sendable' && pass "brief surfaces rejected preference" || fail "rejected preference not in brief"
+rc=0
+node "$L" brief --repo-slug emptyRepo >/dev/null 2>&1 || rc=$?
+[ "$rc" = "2" ] && pass "brief on empty ledger exits 2" || fail "empty brief exit code wrong (got $rc)"
+
+echo ""
+echo "→ 4. per-repo isolation"
+node "$L" add --kind fact --statement "repoB only fact" --repo-slug repoB >/dev/null 2>&1
+briefA=$(node "$L" brief --repo-slug "$SLUG")
+echo "$briefA" | grep -q 'repoB only fact' && fail "repoA brief leaked repoB content" || pass "repoA does not see repoB entries"
+
+echo ""
+echo "→ 5. wiring + docs"
+grep -q 'learnings-ledger.mjs' "$ROOT/pipeline/commands/multi-agent/refs/phases/phase-1-analysis.md" && pass "phase-1 injects the brief" || fail "phase-1 wiring missing"
+grep -q 'learnings-ledger.mjs' "$ROOT/pipeline/commands/multi-agent/refs/phases/phase-4-review.md" && pass "phase-4 triage injects rejected prefs" || fail "phase-4 wiring missing"
+grep -q 'learnings-ledger.mjs' "$ROOT/pipeline/commands/multi-agent/refs/phases/phase-7-report.md" && pass "phase-7 distills the ledger" || fail "phase-7 wiring missing"
+grep -q '"learningsLedger"' "$ROOT/pipeline/schemas/prefs.schema.json" && pass "prefs exposes learningsLedger" || fail "prefs toggle missing"
+[ -f "$ROOT/pipeline/schemas/learnings-ledger.schema.json" ] && pass "ledger schema present" || fail "ledger schema missing"
+
+echo ""
+echo "══ learnings-ledger smoke: $PASS passed, $FAIL failed ══"
+[ "$FAIL" -eq 0 ]

package/pipeline/scripts/smoke-lib-scripts.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# smoke-lib-scripts.sh — sanity checks for picker library scripts.
+# smoke-lib-scripts.sh  -  sanity checks for picker library scripts.
 # Verifies each lib emits the expected JSON shape so the picker pipeline can
 # rely on it. Network-dependent paths (real Jira/GH fetch) are skipped; only
 # offline-detectable behavior is asserted.
@@ -215,7 +215,7 @@ else
 
   # Build two bare-repo fixtures with one initial commit each.
   for bare in "$REPO_A_BARE" "$REPO_B_BARE"; do
-    git init --quiet --bare "$bare"
+    git init --quiet --bare -b main "$bare"
     seed=$(mktemp -d)
     git -C "$seed" init --quiet -b main
     echo "init" > "$seed/README.md"

package/pipeline/scripts/smoke-mcp-gate.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+# smoke-mcp-gate.sh  -  fixture-based test harness for smoke-no-mcp-in-dev-phases.sh.
+#
+# The gate script doubles as the production check (run against a live
+# state.telemetry.mcpCalls[] after a pipeline run) and is also picked up by the
+# smoke-*.sh glob  -  but bare, with no live run, it only WARNs. This harness
+# drives the gate with crafted state files so the actual decision logic
+# (PASS / FAIL / WARN / parse-error) is exercised in CI on every run.
+
+set -uo pipefail
+
+REPO_ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
+GATE="$REPO_ROOT/pipeline/scripts/smoke-no-mcp-in-dev-phases.sh"
+
+PASS=0
+FAIL=0
+pass() { PASS=$((PASS + 1)); echo "  ✓ $1"; }
+fail() { FAIL=$((FAIL + 1)); echo "  ✗ $1"; }
+
+cleanup() { [ -n "${TMP:-}" ] && rm -rf "$TMP"; }
+trap cleanup EXIT
+TMP=$(mktemp -d)
+
+run_gate() { bash "$GATE" --state-file "$1" >/dev/null 2>&1; echo $?; }
+
+echo "→ 1. Clean run (all MCP calls in Phase 1) PASSES"
+cat > "$TMP/clean.json" <<'EOF'
+{"telemetry":{"mcpCalls":[
+  {"tool":"mcp__claude_ai_Figma__get_design_context","phase":1,"timestamp":"2026-05-29T10:00:00Z"},
+  {"tool":"mcp__claude_ai_Figma__get_screenshot","phase":1,"timestamp":"2026-05-29T10:00:05Z"}
+]}}
+EOF
+[ "$(run_gate "$TMP/clean.json")" = "0" ] && pass "phase-1-only telemetry exits 0" || fail "phase-1-only telemetry should exit 0"
+
+echo "→ 2. Violation (MCP call in Phase 3) FAILS"
+cat > "$TMP/viol.json" <<'EOF'
+{"telemetry":{"mcpCalls":[
+  {"tool":"mcp__claude_ai_Figma__get_design_context","phase":1,"timestamp":"2026-05-29T10:00:00Z"},
+  {"tool":"mcp__claude_ai_Figma__get_screenshot","phase":3,"timestamp":"2026-05-29T11:00:00Z"}
+]}}
+EOF
+[ "$(run_gate "$TMP/viol.json")" = "1" ] && pass "phase-3 MCP call exits 1" || fail "phase-3 MCP call should exit 1 (gate is a no-op?)"
+
+echo "→ 3. Phase 2+ boundary (phase 2 is a violation)"
+cat > "$TMP/viol2.json" <<'EOF'
+{"telemetry":{"mcpCalls":[{"tool":"mcp__claude_ai_Figma__get_metadata","phase":2,"timestamp":"2026-05-29T10:30:00Z"}]}}
+EOF
+[ "$(run_gate "$TMP/viol2.json")" = "1" ] && pass "phase-2 MCP call exits 1" || fail "phase-2 MCP call should exit 1"
+
+echo "→ 4. Empty mcpCalls array PASSES"
+cat > "$TMP/empty.json" <<'EOF'
+{"telemetry":{"mcpCalls":[]}}
+EOF
+[ "$(run_gate "$TMP/empty.json")" = "0" ] && pass "empty mcpCalls exits 0" || fail "empty mcpCalls should exit 0"
+
+echo "→ 5. Absent telemetry field PASSES (backward compat with pre-v9 runs)"
+cat > "$TMP/absent.json" <<'EOF'
+{"taskId":"#1","status":"complete"}
+EOF
+[ "$(run_gate "$TMP/absent.json")" = "0" ] && pass "absent telemetry exits 0" || fail "absent telemetry should exit 0"
+
+echo "→ 6. Corrupt JSON state is a hard error (not silently passed)"
+echo '{not valid json' > "$TMP/corrupt.json"
+[ "$(run_gate "$TMP/corrupt.json")" = "2" ] && pass "corrupt state exits 2" || fail "corrupt state should exit 2"
+
+echo ""
+echo "══ mcp-gate smoke: $PASS passed, $FAIL failed ══"
+[ "$FAIL" -eq 0 ]

package/pipeline/scripts/smoke-md-links.sh

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+# smoke-md-links.sh - thin wrapper so the internal markdown link gate runs
+# inside the standard smoke discovery (run-smokes.mjs picks up smoke-*.sh).
+# Logic lives in check-md-links.mjs.
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+node "$ROOT/pipeline/scripts/check-md-links.mjs"

package/pipeline/scripts/smoke-md2confluence.sh

@@ -0,0 +1,126 @@
+#!/usr/bin/env bash
+# smoke-md2confluence.sh  -  offline sanity checks for md2confluence-v3.py.
+# Imports the module from its file path and exercises the pure conversion
+# layer: front-matter parsing, the TR/EN punctuation gate (fancy punctuation
+# stripped, diacritics preserved), and markdown -> storage-XML rendering for
+# headings, tables, and code blocks. No network, no credentials, no Confluence.
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
+MOD="$REPO_ROOT/pipeline/lib/md2confluence-v3.py"
+
+if ! command -v python3 >/dev/null 2>&1; then
+  echo "smoke-md2confluence: python3 not found; skipping" >&2
+  exit 0
+fi
+
+if [ ! -f "$MOD" ]; then
+  echo "  ✗ md2confluence-v3.py missing at $MOD" >&2
+  exit 1
+fi
+
+MOD_PATH="$MOD" python3 - <<'PYEOF'
+import importlib.util
+import os
+import sys
+
+spec = importlib.util.spec_from_file_location("md2c", os.environ["MOD_PATH"])
+mod = importlib.util.module_from_spec(spec)
+sys.modules["md2c"] = mod  # dataclass introspection needs the module registered
+spec.loader.exec_module(mod)
+
+passed = 0
+failed = 0
+
+def ok(msg):
+    global passed
+    print(f"  ✓ {msg}")
+    passed += 1
+
+def fail(msg):
+    global failed
+    print(f"  ✗ {msg}", file=sys.stderr)
+    failed += 1
+
+# --- parse_front_matter ------------------------------------------------------
+print("→ parse_front_matter")
+fm, body = mod.parse_front_matter("---\nfeature: Sample\nlanguage: tr\n---\n# Heading\nbody text\n")
+if fm.get("feature") == "Sample" and fm.get("language") == "tr":
+    ok("front-matter keys parsed")
+else:
+    fail(f"front-matter parse wrong: {fm}")
+if body.startswith("# Heading"):
+    ok("body separated from front-matter")
+else:
+    fail(f"body not separated: {body[:40]!r}")
+
+fm2, body2 = mod.parse_front_matter("# No front matter\n")
+if fm2 == {} and body2.startswith("# No"):
+    ok("no-front-matter input passes through")
+else:
+    fail("no-front-matter input mangled")
+
+# --- apply_punctuation_gate ----------------------------------------------------
+print("→ apply_punctuation_gate")
+dirty = "Geliştirme Özeti — kullanıcı için “detay” …"
+clean, warnings = mod.apply_punctuation_gate(dirty, "tr")
+forbidden = ["—", "–", "…", "“", "”", "‘", "’"]
+if not any(ch in clean for ch in forbidden):
+    ok("fancy punctuation stripped")
+else:
+    fail(f"fancy punctuation survived: {clean!r}")
+for ch in ("ş", "Ö", "ı", "ç"):
+    if ch not in clean:
+        fail(f"diacritic {ch!r} was lost - gate must not ASCII-fold")
+        break
+else:
+    ok("Turkish diacritics preserved")
+
+# --- markdown_to_storage ---------------------------------------------------------
+print("→ markdown_to_storage")
+md = "\n".join([
+    "# Title",
+    "",
+    "Intro paragraph.",
+    "",
+    "| A | B |",
+    "|---|---|",
+    "| 1 | 2 |",
+    "",
+    "```swift",
+    "let x = 1",
+    "```",
+])
+res = mod.markdown_to_storage(
+    md,
+    attachments_available=set(),
+    mermaid_fallback=True,
+    tooltip_macro_supported=False,
+)
+xml = res.storage_xml
+checks = [
+    ("<h1>", "h1 heading rendered"),
+    ("<table>", "table rendered"),
+    ("ac:structured-macro", "code block rendered as macro"),
+]
+for needle, label in checks:
+    if needle in xml:
+        ok(label)
+    else:
+        fail(f"{label}: {needle!r} not found in storage XML")
+
+if res.images_referenced == []:
+    ok("no phantom image references")
+else:
+    fail(f"unexpected images referenced: {res.images_referenced}")
+
+# --- summary -------------------------------------------------------------------
+print()
+if failed == 0:
+    print(f"══ md2confluence smoke: {passed} passed, 0 failed ══")
+    sys.exit(0)
+print(f"══ md2confluence smoke: {passed} passed, {failed} failed ══", file=sys.stderr)
+sys.exit(1)
+PYEOF