@mmerterden/multi-agent-pipeline 8.6.1 → 10.0.6

package/pipeline/scripts/test-gap-scan.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 /**
- * @file test-gap-scan.mjs — v8.3.0
+ * @file test-gap-scan.mjs  -  v8.3.0
  *
  * Static test-gap detector for Phase 5. Walks the diff between base and head
  * to find newly added/changed public symbols, then checks whether the diff
@@ -20,25 +20,25 @@
  *   --root <path>      Repo root for git -C and tree scan. Default: cwd
  *   --stack <id>       ios | android | python | node. Required.
  *   --scan-tree        When set, also scan repo for existing tests by symbol
- *                      name (slower; default off — diff-only is sufficient
+ *                      name (slower; default off  -  diff-only is sufficient
  *                      for the common case).
  *   --json             Pretty-print
  *   --severity-promote Make every gap "important" instead of "suggestion".
  *                      Used by Phase 5 when audit-mode is on.
  *
  * Output:
- *   stdout — JSON conforming to pipeline/schemas/test-gap.schema.json
+ *   stdout  -  JSON conforming to pipeline/schemas/test-gap.schema.json
  *
  * Exit codes:
- *   0 — success (gap report rendered, possibly empty)
- *   1 — git invocation or rule-load error
- *   2 — empty diff (no changed sources for this stack)
- *  64 — usage error
+ *   0  -  success (gap report rendered, possibly empty)
+ *   1  -  git invocation or rule-load error
+ *   2  -  empty diff (no changed sources for this stack)
+ *  64  -  usage error
  *
  * @module pipeline/scripts/test-gap-scan
  */
 
-import { readFileSync, existsSync, readdirSync, statSync } from "node:fs";
+import { readFileSync, existsSync, readdirSync } from "node:fs";
 import { execFileSync } from "node:child_process";
 import { join, dirname, extname, basename } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -163,12 +163,10 @@ function expectedTestPathsFor(srcPath) {
 function parseDiffAddedLines(diffText) {
   const perFile = new Map();
   let cur = null;
-  let isAdditionFile = false;
   for (const line of diffText.split("\n")) {
     const m = line.match(/^diff --git a\/(.+?) b\/(.+)$/);
     if (m) {
       cur = m[2];
-      isAdditionFile = false;
       if (!perFile.has(cur)) perFile.set(cur, { lines: [], isNew: false });
       continue;
     }
@@ -228,7 +226,7 @@ function scanTreeForTests() {
         if (ent.name.startsWith(".") || ent.name === "node_modules") continue;
         visit(full);
       } else if (ent.isFile() && isTestPath(rel)) {
-        let body = "";
+        let body;
         try { body = readFileSync(full, "utf8"); } catch { continue; }
         // crude symbol mention: any Identifier-ish token. Cap body size.
         const slice = body.slice(0, 400_000);
@@ -256,7 +254,7 @@ function severityFor(symbol, kind) {
   return "suggestion";
 }
 
-function symbolMentionedInTest(diffText, symbol, srcPath) {
+function symbolMentionedInTest(diffText, symbol) {
   // Was the symbol mentioned in any *added* test line (whole-word)?
   const re = new RegExp("\\b" + symbol.replace(/[-/\\^$*+?.()|[\]{}]/g, "\\$&") + "\\b");
   const lines = diffText.split("\n");
@@ -298,7 +296,7 @@ function main() {
     if (symbols.length === 0) continue;
     for (const { symbol, kind } of symbols) {
       // Mentioned in any added test line?
-      if (symbolMentionedInTest(diffText, symbol, src.path)) continue;
+      if (symbolMentionedInTest(diffText, symbol)) continue;
       // Tree scan fallback (when --scan-tree)
       const lower = symbol.toLowerCase();
       if (SCAN_TREE && treeIndex.has(lower)) continue;

package/pipeline/scripts/token-budget-report.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// token-budget-report.mjs — aggregates token + cost metrics from metrics.jsonl,
+// token-budget-report.mjs  -  aggregates token + cost metrics from metrics.jsonl,
 // alerts on budget breach per token-budget.json.
 //
 // Usage:
@@ -11,7 +11,7 @@
 //
 // Reads:
 //   $METRICS_FILE  (default $HOME/.claude/logs/multi-agent/metrics.jsonl)
-//   $BUDGET_FILE   (default $HOME/.claude/configs/token-budget.json — optional)
+//   $BUDGET_FILE   (default $HOME/.claude/configs/token-budget.json  -  optional)
 //
 // Writes:
 //   stdout (text or json depending on --json)
@@ -35,7 +35,7 @@ const cutoffMs = Date.now() - periodDays * 24 * 3600 * 1000;
 
 if (!fs.existsSync(METRICS)) {
   console.error(`metrics file not found: ${METRICS}`);
-  console.error("(no telemetry has been emitted yet — run a task first)");
+  console.error("(no telemetry has been emitted yet  -  run a task first)");
   process.exit(args.json ? 0 : 2);
 }
 
@@ -107,7 +107,7 @@ for (const [taskId, t] of byTask) {
 if (args.json) {
   console.log(JSON.stringify(summary, null, 2));
 } else {
-  console.log(`Token & cost report — ${summary.period} (${summary.windowStart} → ${summary.windowEnd})`);
+  console.log(`Token & cost report  -  ${summary.period} (${summary.windowStart} → ${summary.windowEnd})`);
   console.log(`  tasks:        ${summary.taskCount}`);
   console.log(`  tokens in:    ${summary.totalTokensIn.toLocaleString()}`);
   console.log(`  tokens out:   ${summary.totalTokensOut.toLocaleString()}`);

package/pipeline/scripts/triage-memory.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 /**
- * @file triage-memory.mjs — v8.3.0
+ * @file triage-memory.mjs  -  v8.3.0
  *
  * Lightweight, zero-dep persistence layer for past Phase 4 triage findings.
  * Used by Phase 7 to ingest results, by Phase 1/4 to look up prior art when
@@ -14,7 +14,7 @@
  *
  * Why JSONL not SQLite: zero deps, Node 18+ compatible, easy to grep/diff,
  * easy to delete a single row by line. The cost of a full corpus scan is
- * O(N) per query — at ~200 bytes/row that's millions of rows before a
+ * O(N) per query  -  at ~200 bytes/row that's millions of rows before a
  * query budget breaks. We can swap in SQLite later without changing the
  * row schema.
  *
@@ -33,9 +33,9 @@
  *   4. "default" fallback
  *
  * Exit codes:
- *   0 — success
- *   1 — usage / IO error
- *   2 — corpus missing (query) or no findings to ingest
+ *   0  -  success
+ *   1  -  usage / IO error
+ *   2  -  corpus missing (query) or no findings to ingest
  *
  * @module pipeline/scripts/triage-memory
  */
@@ -105,7 +105,7 @@ function score(queryTokens, row) {
   const hay = tokenize((row.issue || "") + " " + (row.fix || "") + " " + (row.reason || ""));
   let overlap = 0;
   for (const t of queryTokens) if (hay.has(t)) overlap++;
-  // Jaccard-ish — overlap / sqrt(|q|*|hay|+1)
+  // Jaccard-ish  -  overlap / sqrt(|q|*|hay|+1)
   return overlap / Math.sqrt(queryTokens.size * (hay.size + 1));
 }
 

package/pipeline/scripts/uninstall.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
 /**
- * @file Token-preserving uninstaller — removes the multi-agent-pipeline
- * footprint from Claude Code, Copilot CLI, Cursor, Windsurf, and Cline
- * without touching personal access tokens stored in the OS credential store
+ * @file Token-preserving uninstaller  -  removes the multi-agent-pipeline
+ * footprint from Claude Code, Copilot CLI, Cursor, Antigravity, and VS Code
+ * Copilot Chat without touching personal access tokens stored in the OS credential store
  * (macOS Keychain / Windows Credential Manager / Linux libsecret).
  *
  * Invocation:
@@ -44,6 +44,8 @@ const TOOL_FLAGS = [
   "--copilot",
   "--cursor",
   "--copilot-chat",
+  "--antigravity",
+  "--codex",
 ];
 const explicitlyTargeted =
   flags.some((f) => TOOL_FLAGS.includes(f)) || flags.includes("--all");
@@ -52,6 +54,8 @@ const forClaude = flags.includes("--claude") || flags.includes("--all") || !expl
 const forCopilot = flags.includes("--copilot") || flags.includes("--all") || !explicitlyTargeted;
 const forCursor = flags.includes("--cursor") || flags.includes("--all") || !explicitlyTargeted;
 const forCopilotChat = flags.includes("--copilot-chat") || flags.includes("--all") || !explicitlyTargeted;
+const forAntigravity = flags.includes("--antigravity") || flags.includes("--all") || !explicitlyTargeted;
+const forCodex = flags.includes("--codex") || flags.includes("--all") || !explicitlyTargeted;
 
 const dryRun = flags.includes("--dry-run");
 const skipPrompt = flags.includes("--yes") || flags.includes("-y");
@@ -72,7 +76,7 @@ function report(verb, path) {
 }
 
 /**
- * Conditional rm — respects --dry-run.
+ * Conditional rm  -  respects --dry-run.
  * @param {string} path
  */
 function rmIfExists(path) {
@@ -218,6 +222,8 @@ async function main() {
   if (forCopilot) console.log("    - Copilot CLI (~/.copilot/{skills,agents,scripts}/multi-agent* + copilot-instructions.md section)");
   if (forCursor) console.log(`    - Cursor (${adapterTarget}/.cursor/rules/multi-agent-* + .cursorrules)`);
   if (forCopilotChat) console.log(`    - GitHub Copilot Chat (${adapterTarget}/.github/copilot-instructions.md block + .github/instructions/multi-agent-*)`);
+  if (forAntigravity) console.log(`    - Antigravity (${adapterTarget}/.agent/rules + .agent/workflows + AGENTS.md block + .agent/mcp_config.json)`);
+  if (forCodex) console.log("    - OpenAI Codex CLI (~/.codex/prompts/multi-agent.md + AGENTS.md block + config.toml mcp block)");
   console.log("");
   console.log("  PRESERVED (never touched):");
   console.log("    - Personal access tokens in OS credential store (Keychain / Credential Manager / libsecret)");
@@ -313,6 +319,38 @@ async function main() {
     }
   }
 
+  if (forAntigravity) {
+    console.log("");
+    console.log(`  [Antigravity] Removing from ${adapterTarget}...`);
+    if (!dryRun) {
+      try {
+        const adapter = (await import(join(PIPELINE_ROOT, "adapters", "antigravity.mjs"))).default;
+        const result = adapter.uninstall({ target: adapterTarget });
+        console.log(`    .agent + AGENTS.md artifacts removed: ${result.removed}`);
+      } catch (e) {
+        console.log(`    skipped (adapter unavailable): ${e.message}`);
+      }
+    } else {
+      report("would invoke", "antigravity adapter uninstall");
+    }
+  }
+
+  if (forCodex) {
+    console.log("");
+    console.log("  [OpenAI Codex CLI] Removing from ~/.codex...");
+    if (!dryRun) {
+      try {
+        const adapter = (await import(join(PIPELINE_ROOT, "adapters", "codex.mjs"))).default;
+        const result = adapter.uninstall();
+        console.log(`    ~/.codex artifacts removed: ${result.removed}`);
+      } catch (e) {
+        console.log(`    skipped (adapter unavailable): ${e.message}`);
+      }
+    } else {
+      report("would invoke", "codex adapter uninstall");
+    }
+  }
+
   console.log("");
   console.log("  ✓ Pipeline removed.");
   console.log("");

package/pipeline/scripts/update-issue-progress.sh

@@ -3,7 +3,7 @@
 # update-issue-progress.sh
 #
 # Synchronises the GitHub issue body's `### Progress` table with the run's
-# state.flags. Idempotent — running twice with the same state produces the
+# state.flags. Idempotent  -  running twice with the same state produces the
 # same body and a no-op edit.
 #
 # Replaces the python `update-issue-from-registry.py` referenced in the issue
@@ -36,7 +36,7 @@ if [ -z "$TASK_ID" ]; then
 fi
 
 # Resolve the project state directory (matches phase-tracker convention).
-STATE_GLOB="$HOME/.claude/projects/-Users-*"
+STATE_GLOB="$HOME/.claude/projects/*"
 AGENT_STATE=""
 for dir in $STATE_GLOB; do
   candidate="$dir/state/$TASK_ID/agent-state.json"

package/pipeline/scripts/validate-analysis.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// validate-analysis.mjs — runtime validator for Phase 1 Explorer subagent output.
+// validate-analysis.mjs  -  runtime validator for Phase 1 Explorer subagent output.
 //
 // Phase 1's Explorer returns a structured research summary conforming to
 // pipeline/schemas/analysis-output.schema.json. Phase 2 and Phase 4 consume
@@ -12,8 +12,8 @@
 //   cat analysis.json | node validate-analysis.mjs -
 //
 // Exit codes:
-//   0 — valid
-//   1 — invalid structure, missing field, or bad enum
+//   0  -  valid
+//   1  -  invalid structure, missing field, or bad enum
 
 import { readFileSync } from "node:fs";
 
@@ -88,24 +88,22 @@ async function main() {
     });
   }
 
-  // risks (optional array, but if present must be well-formed)
-  if (parsed.risks !== undefined) {
-    if (!Array.isArray(parsed.risks)) {
-      errors.push("risks must be an array if present");
-    } else {
-      parsed.risks.forEach((r, i) => {
-        if (typeof r !== "object" || r === null) {
-          errors.push(`risks[${i}]: not an object`);
-          return;
-        }
-        if (typeof r.risk !== "string" || r.risk.length < 4) {
-          errors.push(`risks[${i}].risk: too short`);
-        }
-        if (!ALLOWED_SEVERITIES.has(r.severity)) {
-          errors.push(`risks[${i}].severity: invalid`);
-        }
-      });
-    }
+  // risks (required array per schema; may be empty, but the key must exist)
+  if (!Array.isArray(parsed.risks)) {
+    errors.push("risks must be an array (required by analysis-output.schema.json)");
+  } else {
+    parsed.risks.forEach((r, i) => {
+      if (typeof r !== "object" || r === null) {
+        errors.push(`risks[${i}]: not an object`);
+        return;
+      }
+      if (typeof r.risk !== "string" || r.risk.length < 4) {
+        errors.push(`risks[${i}].risk: too short`);
+      }
+      if (!ALLOWED_SEVERITIES.has(r.severity)) {
+        errors.push(`risks[${i}].severity: invalid`);
+      }
+    });
   }
 
   // summary

package/pipeline/scripts/validate-diff-risk.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// validate-diff-risk.mjs — schema validator for diff-risk-score.mjs output.
+// validate-diff-risk.mjs  -  schema validator for diff-risk-score.mjs output.
 //
 // Zero deps. Reads JSON from a path arg or STDIN, validates against
 // pipeline/schemas/diff-risk.schema.json (structural + value-range rules).
@@ -9,9 +9,9 @@
 //   cat diff-risk.json | node pipeline/scripts/validate-diff-risk.mjs -
 //
 // Exit codes:
-//   0 — valid
-//   1 — invalid structure
-//  64 — usage error
+//   0  -  valid
+//   1  -  invalid structure
+//  64  -  usage error
 
 import { readFileSync } from "node:fs";
 

package/pipeline/scripts/validate-planning.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// validate-planning.mjs — runtime validator for Phase 2 planning output.
+// validate-planning.mjs  -  runtime validator for Phase 2 planning output.
 //
 // Phase 2 returns a task decomposition conforming to
 // pipeline/schemas/planning-output.schema.json. Phase 3 iterates over `tasks`
@@ -12,8 +12,8 @@
 //   cat plan.json | node validate-planning.mjs -
 //
 // Exit codes:
-//   0 — valid
-//   1 — invalid structure, missing field, bad enum, or broken dependsOn edges
+//   0  -  valid
+//   1  -  invalid structure, missing field, bad enum, or broken dependsOn edges
 
 import { readFileSync } from "node:fs";
 

package/pipeline/scripts/validate-reviewer.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// validate-reviewer.mjs — runtime validator for Phase 4 reviewer subagent output.
+// validate-reviewer.mjs  -  runtime validator for Phase 4 reviewer subagent output.
 //
 // Each of the 3 parallel reviewers (Opus, GPT-5.4, Sonnet) must return an
 // object matching pipeline/schemas/reviewer-output.schema.json. This validator
@@ -12,9 +12,9 @@
 //   cat reviewer.json | node validate-reviewer.mjs -
 //
 // Exit codes:
-//   0 — valid
-//   1 — invalid structure or required-field violation
-//   2 — internally inconsistent (e.g. approved=true but blocking findings present)
+//   0  -  valid
+//   1  -  invalid structure or required-field violation
+//   2  -  internally inconsistent (e.g. approved=true but blocking findings present)
 
 import { readFileSync } from "node:fs";
 

package/pipeline/scripts/validate-schemas.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 // Shallow schema sanity check for pipeline/schemas/*.schema.json.
 //
-// Zero dependencies — uses only Node.js built-ins. This keeps the shipped
+// Zero dependencies  -  uses only Node.js built-ins. This keeps the shipped
 // npm package fully self-contained (no ajv / ajv-formats / anything).
 // CI runs this on every push; you can run it locally with:
 //
@@ -26,7 +26,7 @@ const here = dirname(fileURLToPath(import.meta.url));
 const schemaDir = join(here, "..", "schemas");
 
 function fail(file, reason) {
-  console.error(`FAIL: ${file} — ${reason}`);
+  console.error(`FAIL: ${file}  -  ${reason}`);
   return 1;
 }
 
@@ -64,12 +64,12 @@ let files;
 try {
   files = readdirSync(schemaDir).filter((f) => f.endsWith(".schema.json"));
 } catch (err) {
-  console.error(`FAIL: cannot read schema directory ${schemaDir} — ${err.message}`);
+  console.error(`FAIL: cannot read schema directory ${schemaDir}  -  ${err.message}`);
   process.exit(1);
 }
 
 if (files.length === 0) {
-  console.log("No schemas found under pipeline/schemas/ — nothing to validate.");
+  console.log("No schemas found under pipeline/schemas/  -  nothing to validate.");
   process.exit(0);
 }
 

package/pipeline/scripts/validate-test-gap.mjs

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
-// validate-test-gap.mjs — schema validator for test-gap-scan.mjs output.
+// validate-test-gap.mjs  -  schema validator for test-gap-scan.mjs output.
 //
 // Zero deps. Reads JSON from path or STDIN, validates against
 // pipeline/schemas/test-gap.schema.json.
 //
 // Exit codes:
-//   0 — valid
-//   1 — invalid
-//  64 — usage error
+//   0  -  valid
+//   1  -  invalid
+//  64  -  usage error
 
 import { readFileSync } from "node:fs";
 

package/pipeline/scripts/validate-triage.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-// validate-triage.mjs — behavioral validator for Phase 4 triage output.
+// validate-triage.mjs  -  behavioral validator for Phase 4 triage output.
 //
 // Zero dependencies. Reads a triage JSON from a path arg or STDIN, enforces
 // the contract documented in pipeline/schemas/triage-output.schema.json AND
-// the edge-case rules from phase-4-review.md §3.3.
+// the edge-case rules from phase-4-review.md section3.3.
 //
 // Unlike validate-schemas.mjs (which only checks schema files are well-formed),
 // this validates an ACTUAL triage run's output.
@@ -13,10 +13,10 @@
 //   cat triage.json | node pipeline/scripts/validate-triage.mjs -
 //
 // Exit codes:
-//   0 — valid, safe to act on
-//   1 — invalid structure or required-field violation — caller MUST retry or fallback
-//   2 — over-rejection guard tripped — caller MUST pause for human (or log+accept in autopilot)
-//   3 — contradiction auto-corrected — caller MAY proceed with corrected output
+//   0  -  valid, safe to act on
+//   1  -  invalid structure or required-field violation  -  caller MUST retry or fallback
+//   2  -  over-rejection guard tripped  -  caller MUST pause for human (or log+accept in autopilot)
+//   3  -  contradiction auto-corrected  -  caller MAY proceed with corrected output
 //
 // Output: JSON result to stdout with shape:
 //   {"ok": bool, "code": N, "errors": [...], "warnings": [...], "corrected": {...}|null}
@@ -25,6 +25,7 @@ import { readFileSync } from "node:fs";
 
 const ALLOWED_REVIEWERS = new Set(["opus", "sonnet"]);
 const ALLOWED_SEVERITIES = new Set(["blocking", "important", "suggestion"]);
+const ALLOWED_CONSENSUS_VERDICTS = new Set(["unanimous-pass", "unanimous-block", "split", "unverified"]);
 const OVER_REJECT_THRESHOLD = 0.8;
 const OVER_REJECT_MIN_FINDINGS = 5;
 
@@ -79,6 +80,40 @@ function validateAccepted(f, i, errors) {
   }
 }
 
+function validateConsensus(c, errors) {
+  if (typeof c !== "object" || c === null || Array.isArray(c)) {
+    errors.push("consensus: must be an object when present");
+    return;
+  }
+  if (!Number.isInteger(c.reviewerCount) || c.reviewerCount < 1) {
+    errors.push(`consensus: reviewerCount must be an integer >= 1 (got ${JSON.stringify(c.reviewerCount)})`);
+  }
+  if (!ALLOWED_CONSENSUS_VERDICTS.has(c.verdict)) {
+    errors.push(`consensus: bad verdict "${c.verdict}" (allowed: unanimous-pass|unanimous-block|split|unverified)`);
+  }
+  if (c.disagreements !== undefined) {
+    if (!Array.isArray(c.disagreements)) {
+      errors.push("consensus.disagreements: must be an array when present");
+    } else {
+      c.disagreements.forEach((d, i) => {
+        if (typeof d !== "object" || d === null) {
+          errors.push(`consensus.disagreements[${i}]: not an object`);
+          return;
+        }
+        if (typeof d.file !== "string" || d.file.length === 0) {
+          errors.push(`consensus.disagreements[${i}]: missing or empty file`);
+        }
+        if (typeof d.issue !== "string" || d.issue.length < 4) {
+          errors.push(`consensus.disagreements[${i}]: issue must be a string >= 4 chars`);
+        }
+        if (typeof d.note !== "string" || d.note.length < 4) {
+          errors.push(`consensus.disagreements[${i}]: note must be a string >= 4 chars`);
+        }
+      });
+    }
+  }
+}
+
 function validateClassified(entry, listName, i, errors) {
   if (typeof entry !== "object" || entry === null) {
     errors.push(`${listName}[${i}]: not an object`);
@@ -133,6 +168,30 @@ function validate(raw) {
   parsed.deferred.forEach((f, i) => validateClassified(f, "deferred", i, errors));
   parsed.rejected.forEach((f, i) => validateClassified(f, "rejected", i, errors));
 
+  // Optional consensus block (v3.1.0) + cross-check against the actual verdict
+  // so the block is not merely decorative.
+  if (parsed.consensus !== undefined) {
+    validateConsensus(parsed.consensus, errors);
+    const c = parsed.consensus;
+    if (c && typeof c === "object" && !Array.isArray(c)) {
+      const acceptedBlocker = parsed.accepted.some((f) => f && f.severity === "blocking");
+      if (c.verdict === "unanimous-block" && parsed.approved === true) {
+        errors.push('consensus.verdict "unanimous-block" contradicts approved=true');
+      }
+      if (c.verdict === "unanimous-pass" && acceptedBlocker) {
+        errors.push('consensus.verdict "unanimous-pass" contradicts an accepted blocking finding');
+      }
+      if (
+        typeof c.reviewerCount === "number" && c.reviewerCount < 2 &&
+        (c.verdict === "unanimous-pass" || c.verdict === "unanimous-block")
+      ) {
+        errors.push(
+          `consensus.verdict "${c.verdict}" needs >= 2 reviewers (got reviewerCount=${c.reviewerCount}); a single reviewer cannot be unanimous`,
+        );
+      }
+    }
+  }
+
   if (errors.length > 0) {
     return { ok: false, code: 1, errors, warnings, corrected };
   }
@@ -141,14 +200,14 @@ function validate(raw) {
   const hasBlocker = parsed.accepted.some((f) => f.severity === "blocking");
   if (parsed.approved === false && !hasBlocker) {
     warnings.push(
-      "approved=false but no blocking items in accepted — auto-correcting to approved=true (triage=contradiction-corrected)",
+      "approved=false but no blocking items in accepted  -  auto-correcting to approved=true (triage=contradiction-corrected)",
     );
     corrected = { ...parsed, approved: true };
     triageCode = 3;
   }
   if (parsed.approved === true && hasBlocker) {
     warnings.push(
-      "approved=true but accepted contains blocking items — auto-correcting to approved=false (triage=contradiction-corrected)",
+      "approved=true but accepted contains blocking items  -  auto-correcting to approved=false (triage=contradiction-corrected)",
     );
     corrected = { ...parsed, approved: false };
     triageCode = 3;
@@ -160,7 +219,7 @@ function validate(raw) {
     const ratio = parsed.rejected.length / total;
     if (ratio > OVER_REJECT_THRESHOLD) {
       warnings.push(
-        `over-rejection guard: ${parsed.rejected.length}/${total} rejected (${(ratio * 100).toFixed(0)}%) — caller must pause for human confirm (triage=high-rejection-rate); autopilot may accept and log`,
+        `over-rejection guard: ${parsed.rejected.length}/${total} rejected (${(ratio * 100).toFixed(0)}%)  -  caller must pause for human confirm (triage=high-rejection-rate); autopilot may accept and log`,
       );
       triageCode = Math.max(triageCode, 2);
     }

package/pipeline/scripts/verify-skills.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# verify-skills.sh — v6.2.H
+# verify-skills.sh  -  v6.2.H
 #
 # Verifies the integrity of SKILL.md files under a skills root against the
 # .skill-manifest.json that was shipped alongside them.
@@ -7,7 +7,7 @@
 # Usage: verify-skills.sh [--root <dir>] [--quiet]
 #
 # Default root: ./pipeline/skills (in a source checkout) OR $HOME/.claude/skills
-# if that exists and the source one doesn't — lets the install script call
+# if that exists and the source one doesn't  -  lets the install script call
 # `verify-skills.sh` post-copy without knowing which side it's on.
 #
 # Behavior:
@@ -20,10 +20,10 @@
 #     print warnings. User likely added a local skill; not tampering.
 #
 # Exit codes:
-#   0 — verified (or fail-open first-install)
-#   1 — setup error (missing tooling)
-#   2 — drift detected (hash mismatch / missing file)
-#   3 — extras detected (files on disk not in manifest)
+#   0  -  verified (or fail-open first-install)
+#   1  -  setup error (missing tooling)
+#   2  -  drift detected (hash mismatch / missing file)
+#   3  -  extras detected (files on disk not in manifest)
 
 set -euo pipefail
 
@@ -87,7 +87,7 @@ while IFS=$'\t' read -r rel expected; do
   fi
 done < <(jq -r '.entries[] | [.path, .sha256] | @tsv' "$MANIFEST")
 
-# Detect extras (files on disk not in manifest) — warn only
+# Detect extras (files on disk not in manifest)  -  warn only
 # shellcheck disable=SC2046
 known_paths=$(jq -r '.entries[].path' "$MANIFEST" | sort -u)
 while IFS= read -r -d '' f; do