@trycore/spec-build-harness 0.10.0 → 0.11.0

package/scripts/tests/test-skill-ops.sh

@@ -50,10 +50,16 @@ printf 'allow-list-v1' > "$PROJ/.claude/config/stack-allowlist.json"
 runtime_lock_write "sha256:v1" '[{"path":"config/stack-allowlist.json","sha256":"sha-del-servidor"},{"path":"rules/no-existe.md","sha256":"otro"}]'
 got="$(ops_context_hashes)"
 real="$(python3 -c "import hashlib;print(hashlib.sha256(open('$PROJ/.claude/config/stack-allowlist.json','rb').read()).hexdigest())")"
-echo "$got" | grep -q "$real" && echo "OK ops_context_hashes reporta el sha local efectivo" || { echo "FAIL ops_context_hashes ($got)"; fail=1; }
-echo "$got" | python3 -c 'import json,sys; d=json.load(sys.stdin); print("SI" if any(x["path"]=="rules/no-existe.md" and x["sha256"] is None for x in d) else "NO")' | grep -q SI \
-  && echo "OK ops_context_hashes marca null el fichero ausente" || { echo "FAIL ops_context_hashes ausente"; fail=1; }
-[ "$(PATH=/var/empty ops_context_hashes)" = "[]" ] && echo "OK ops_context_hashes sin python3 -> []" || { echo "FAIL ops_context_hashes sin python3"; fail=1; }
+# Contrato del hub (#36): `TasksNextIn.context_hashes` es `dict[str, str]` — una LISTA
+# provoca 422 dict_type en TODO claim. Se exige {path: sha}, jamás [{"path":…}].
+echo "$got" | python3 -c "
+import json,sys
+d=json.load(sys.stdin)
+print('SI' if isinstance(d,dict) and d.get('config/stack-allowlist.json')=='$real' else 'NO')" | grep -q SI \
+  && echo "OK ops_context_hashes emite dict {path: sha} con el sha local efectivo" || { echo "FAIL ops_context_hashes ($got)"; fail=1; }
+echo "$got" | python3 -c 'import json,sys; d=json.load(sys.stdin); print("SI" if d.get("rules/no-existe.md")=="" else "NO")' | grep -q SI \
+  && echo "OK ops_context_hashes marca \"\" el fichero ausente (el dict del hub no admite null)" || { echo "FAIL ops_context_hashes ausente ($got)"; fail=1; }
+[ "$(PATH=/var/empty ops_context_hashes)" = "{}" ] && echo "OK ops_context_hashes sin python3 -> {}" || { echo "FAIL ops_context_hashes sin python3"; fail=1; }
 
 # --- ops_enqueue_from_file: payload por FICHERO (sin límite de ARG_MAX) ---
 python3 -c "
@@ -70,14 +76,27 @@ ok = d['type']=='wiring_checklist_seeded' and d.get('slice_id')=='sl-1' and len(
 print('SI' if ok else 'NO')" | grep -q SI && echo "OK ops_enqueue_from_file conserva tipo/slice_id/payload" || { echo "FAIL contenido del evento encolado"; fail=1; }
 rm -f "$PROJ/.claude/state/outbox/"*.json
 
-# --- lista protegida ampliada: la cota jamás descarta un hecho de dominio ---
-for t in slice_archived wiring_item_updated escalation_raised scaffold_confirmed design_source_declared project_kind_declared foundation_declared harness_phase_changed wiring_checklist_seeded front_integration_reported; do
+# --- lista protegida: nombres del catálogo v2 del hub [#44] ---
+# (#38: los hechos máquina viajan como UN solo tipo del catálogo v2, project_fact_updated;
+# #44: los tipos protegidos llevan el NOMBRE del catálogo — proteger de la evicción un tipo
+# que el hub va a rechazar era absurdo. Los alias 0.10.x de los cuatro renombrados siguen
+# protegidos porque la capa de compat del despacho los traduce y entrega.)
+for t in slice_archived wiring_item_updated slice_escalated gate_verdict checkpoint_recorded \
+         project_fact_updated wiring_checklist_seeded slice_submitted handoff_recorded telemetry_gap \
+         checkpoint_created verdict_reported escalation_raised; do
   case " $RUNTIME_OUTBOX_PROTECTED " in
     *" $t "*) : ;;
     *) echo "FAIL $t no está en RUNTIME_OUTBOX_PROTECTED"; fail=1 ;;
   esac
 done
-echo "OK lista protegida ampliada (si no hubo FAIL arriba)"
+# Tipos sin equivalente en el catálogo: fuera de la lista (el hub los rechazaría siempre).
+for t in front_integration_reported branch_drift tool_use_recorded progress_noted progress_note_recorded; do
+  case " $RUNTIME_OUTBOX_PROTECTED " in
+    *" $t "*) echo "FAIL $t no debe estar en RUNTIME_OUTBOX_PROTECTED"; fail=1 ;;
+    *) : ;;
+  esac
+done
+echo "OK lista protegida con nombres del catálogo v2 (si no hubo FAIL arriba)"
 # Regresión de comportamiento (no de la constante): 6 MB de tool_use + 1 slice_archived.
 runtime_enqueue_event slice_archived '{"epic_code":"EP-001"}' sl-1
 python3 - "$PROJ/.claude/state/outbox" <<'PY'
@@ -139,7 +158,18 @@ STUBS="$STUBS $!"
 sleep 0.3
 runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_CL\",\"project_token\":\"tok-c\",\"project_id\":\"p-1\",\"agent_key\":\"ak-1\",\"manifest_hash\":\"sha256:v1\"}"
 
-rc=0; out="$(bash "$SO" claim --epic EP-003)" || rc=$?
+# (#39) `claim --epic` NO existe en el protocolo del hub: `TasksNextIn` no declara
+# epic_code (pydantic lo ignoraba y la cola repartía OTRA épica con claim "exitoso").
+# Debe fallar EXPLÍCITO antes de tocar la red.
+: > "$TMP/calls-cl.jsonl"
+rc=0; err="$(bash "$SO" claim --epic EP-003 2>&1 >/dev/null)" || rc=$?
+[ "$rc" = 2 ] && echo "OK claim --epic en runtime -> rc 2 (uso, sin red)" || { echo "FAIL claim --epic rc ($rc)"; fail=1; }
+echo "$err" | grep -qi "cola" && echo "$err" | grep -q "epic" \
+  && echo "OK claim --epic explica que el hub reparte por orden de cola" || { echo "FAIL mensaje de claim --epic ($err)"; fail=1; }
+grep -q '"path": "/tasks/next"' "$TMP/calls-cl.jsonl" && { echo "FAIL claim --epic llamó a la red"; fail=1; } \
+  || echo "OK claim --epic no abre socket"
+
+rc=0; out="$(bash "$SO" claim)" || rc=$?
 [ "$rc" = 0 ] && echo "OK claim 200 -> rc 0" || { echo "FAIL claim 200 rc ($rc)"; fail=1; }
 echo "$out" | grep -q "sl-7" && echo "OK claim rinde el slice reclamado" || { echo "FAIL claim render ($out)"; fail=1; }
 [ "$(python3 - "$TMP/calls-cl.jsonl" <<'PYX'
@@ -150,10 +180,12 @@ for line in open(sys.argv[1]):
     if c["path"]=="/tasks/next":
         b=json.loads(c["body"])
         # POST siempre: el GET no acepta el reporte de hashes (spec §3.1 rev. 4).
-        ok = c["method"]=="POST" and isinstance(b.get("context_hashes"), list) and b.get("epic_code")=="EP-003"
+        # (#36) context_hashes es DICT (ClaimIn del hub: dict[str,str]); (#39) epic_code
+        # jamás viaja — el hub no lo declara y lo ignoraría en silencio.
+        ok = c["method"]=="POST" and isinstance(b.get("context_hashes"), dict) and "epic_code" not in b
 print("SI" if ok else "NO")
 PYX
-)" = SI ] && echo "OK el claim usa POST y reporta context_hashes y la épica" || { echo "FAIL cuerpo/método del claim"; fail=1; }
+)" = SI ] && echo "OK el claim usa POST con context_hashes dict y sin epic_code" || { echo "FAIL cuerpo/método del claim"; fail=1; }
 [ "$(projection_get active_slice.slice_id "")" = "sl-7" ] && echo "OK el claim refresca la caché de proyección" || { echo "FAIL la caché no se refrescó"; fail=1; }
 
 # next-step: deriva del cliente (spec §2), prioridad resume_hint > wiring > sub-slices > gate.
@@ -245,26 +277,59 @@ runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_CL\"}"
 # ══════════════ slice-ops.sh: fact / propose-asset [Task 5] ══════════════
 rm -f "$PROJ/.claude/state/outbox/"*.json
 
-# Los hechos de proyecto son de ÁMBITO PROYECTO: se encolan SIN slice_id (§3.1 rev. 3).
-rc=0; bash "$SO" fact scaffold-confirmed --by "ana@equipo" --notes "npm run dev arranca vacío" >/dev/null || rc=$?
-[ "$rc" = 0 ] && echo "OK fact scaffold-confirmed -> rc 0" || { echo "FAIL fact scaffold rc ($rc)"; fail=1; }
-f="$(grep -l '"type": "scaffold_confirmed"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
-[ -n "$f" ] && [ "$(python3 -c "import json;print('slice_id' in json.load(open('$f')))")" = False ] \
-  && echo "OK el hecho de proyecto va SIN slice_id" || { echo "FAIL scaffold_confirmed con slice_id"; fail=1; }
-[ "$(python3 -c "import json;print(json.load(open('$f'))['payload']['confirmed_by'])")" = "ana@equipo" ] \
-  && echo "OK scaffold_confirmed lleva quién confirmó" || { echo "FAIL payload de scaffold_confirmed"; fail=1; }
-
-rc=0; bash "$SO" fact design-source --applies true --source "docs/05-prototipo/index.html" --confirmed true --by "ana@equipo" >/dev/null || rc=$?
-[ "$rc" = 0 ] && grep -lq '"type": "design_source_declared"' "$PROJ/.claude/state/outbox/"*.json \
-  && echo "OK fact design-source" || { echo "FAIL fact design-source ($rc)"; fail=1; }
+# (#38) Hechos HUMANOS: el catálogo v2 del hub los rechaza en TODA superficie de agente
+# (HECHOS_HUMANOS en project_facts_domain) — se fijan tras el PDP por la superficie admin
+# (PATCH /orchestrator/projects/{project_id}). En runtime/dual NO se encola: rechazo local
+# con mensaje que dirige al humano a la consola del hub.
+rc=0; err="$(bash "$SO" fact scaffold-confirmed --by "ana@equipo" --notes "npm run dev arranca vacío" 2>&1 >/dev/null)" || rc=$?
+[ "$rc" = 6 ] && echo "OK fact scaffold-confirmed en runtime -> rc 6 (hecho humano)" || { echo "FAIL fact scaffold rc ($rc)"; fail=1; }
+echo "$err" | grep -q "PATCH /orchestrator/projects" \
+  && echo "OK el rechazo del hecho humano nombra la superficie admin" || { echo "FAIL mensaje de scaffold-confirmed ($err)"; fail=1; }
+[ "$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')" = 0 ] \
+  && echo "OK el hecho humano NO se encola (adiós reintento eterno)" || { echo "FAIL scaffold-confirmed encoló"; fail=1; }
+
+rc=0; err="$(bash "$SO" fact design-source --applies true --source "docs/05-prototipo/index.html" --confirmed true --by "ana@equipo" 2>&1 >/dev/null)" || rc=$?
+[ "$rc" = 6 ] && echo "$err" | grep -q "PATCH /orchestrator/projects" \
+  && echo "OK fact design-source en runtime -> rc 6 con remisión al admin" || { echo "FAIL fact design-source ($rc: $err)"; fail=1; }
+
+# (#38) Hechos MÁQUINA: UN solo tipo del catálogo v2, `project_fact_updated`, con el
+# payload EXACTO {fact, value, source:"AGENT"} (extra="forbid" en el hub), SIN slice_id.
 rc=0; bash "$SO" fact project-kind greenfield --source human >/dev/null || rc=$?
-[ "$rc" = 0 ] && grep -lq '"type": "project_kind_declared"' "$PROJ/.claude/state/outbox/"*.json \
-  && echo "OK fact project-kind" || { echo "FAIL fact project-kind ($rc)"; fail=1; }
+[ "$rc" = 0 ] && echo "OK fact project-kind -> rc 0" || { echo "FAIL fact project-kind rc ($rc)"; fail=1; }
+f="$(grep -l '"fact": "project_kind"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 - "$f" <<'PYX'
+import json,sys
+d=json.load(open(sys.argv[1]))
+ok = d.get("type")=="project_fact_updated" and "slice_id" not in d \
+  and d.get("payload")=={"fact":"project_kind","value":"greenfield","source":"AGENT"}
+print("SI" if ok else "NO")
+PYX
+)" = SI ] \
+  && echo "OK project-kind viaja como project_fact_updated {fact,value,source} sin slice_id" \
+  || { echo "FAIL payload de project-kind"; fail=1; }
+
 echo '[{"id":"homepage","applies":true},{"id":"login-authn","applies":false}]' > "$TMP/checklist.json"
 rc=0; bash "$SO" fact foundation --required true --epic EP-000 --checklist-file "$TMP/checklist.json" >/dev/null || rc=$?
-f="$(grep -l '"type": "foundation_declared"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
-[ "$rc" = 0 ] && [ -n "$f" ] && [ "$(python3 -c "import json;print(len(json.load(open('$f'))['payload']['checklist']))")" = 2 ] \
-  && echo "OK fact foundation con checklist" || { echo "FAIL fact foundation"; fail=1; }
+f="$(grep -l '"fact": "foundation"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+# El hub proyecta foundation a un Boolean: el value es bool, sin epic/checklist extra
+# (extra=forbid los rechazaría); la checklist queda en los docs locales.
+[ "$rc" = 0 ] && [ -n "$f" ] && [ "$(python3 - "$f" <<'PYX'
+import json,sys
+p=json.load(open(sys.argv[1]))["payload"]
+print("SI" if p=={"fact":"foundation","value":True,"source":"AGENT"} else "NO")
+PYX
+)" = SI ] \
+  && echo "OK fact foundation viaja como project_fact_updated con value booleano" || { echo "FAIL fact foundation"; fail=1; }
+
+rc=0; bash "$SO" fact harness-phase building >/dev/null || rc=$?
+f="$(grep -l '"fact": "harness_phase"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ "$rc" = 0 ] && [ -n "$f" ] && [ "$(python3 - "$f" <<'PYX'
+import json,sys
+p=json.load(open(sys.argv[1]))["payload"]
+print("SI" if p=={"fact":"harness_phase","value":"building","source":"AGENT"} else "NO")
+PYX
+)" = SI ] \
+  && echo "OK fact harness-phase viaja como project_fact_updated" || { echo "FAIL fact harness-phase"; fail=1; }
 
 # Valor inválido: rechazo local, sin encolar.
 rm -f "$PROJ/.claude/state/outbox/"*.json
@@ -278,10 +343,10 @@ rc=0; bash "$SO" fact project-kind marciano >/dev/null 2>&1 || rc=$?
 # outbox y confirmamos que mkdir/tempfile fallan de verdad antes de aserir el rc.
 rm -f "$PROJ/.claude/state/outbox/"*.json
 chmod 555 "$PROJ/.claude/state/outbox"
-rc=0; out="$(bash "$SO" fact scaffold-confirmed --by "ana@equipo" 2>&1)" || rc=$?
+rc=0; out="$(bash "$SO" fact project-kind greenfield 2>&1)" || rc=$?
 chmod 755 "$PROJ/.claude/state/outbox"
 n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
-[ "$rc" = "$OPS_RC_OFFLINE" ] && [ "$n" = 0 ] && ! echo "$out" | grep -q '"scaffold_confirmed" encolado' \
+[ "$rc" = "$OPS_RC_OFFLINE" ] && [ "$n" = 0 ] && ! echo "$out" | grep -q 'encolado' \
   && echo "OK fact con outbox no escribible -> rc distinguible, sin encolar, sin aviso de éxito" \
   || { echo "FAIL fact con outbox no escribible (rc=$rc n=$n out=$out)"; fail=1; }
 rm -f "$PROJ/.claude/state/outbox/"*.json
@@ -336,12 +401,18 @@ rc=0; out="$(TRYCORE_RUNTIME_MODE=legacy bash "$SO" status --no-refresh)" || rc=
 agent_context_fetch_and_cache
 
 # escalate: evento tipado + instrucción de gobierno humano.
+# [#44] El catálogo v2 lo llama `slice_escalated` y su payload es EXACTAMENTE {cause}
+# (extra="forbid" en el hub): gate y fase viajan DENTRO del texto de la causa.
 rm -f "$PROJ/.claude/state/outbox/"*.json
 rc=0; out="$(bash "$SO" escalate "el AC-3 contradice el prototipo" --gate fidelity)" || rc=$?
 [ "$rc" = 0 ] && echo "OK escalate -> rc 0" || { echo "FAIL escalate rc ($rc)"; fail=1; }
-f="$(grep -l '"type": "escalation_raised"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
-[ -n "$f" ] && [ "$(python3 -c "import json;d=json.load(open('$f'));print('SI' if d['payload']['gate']=='fidelity' and d.get('slice_id')=='sl-7' else 'NO')")" = SI ] \
-  && echo "OK escalate encola con gate y slice_id" || { echo "FAIL payload de escalate"; fail=1; }
+f="$(grep -l '"type": "slice_escalated"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 -c "
+import json;d=json.load(open('$f'))
+p=d['payload']
+ok = set(p.keys())=={'cause'} and 'fidelity' in p['cause'] and 'AC-3' in p['cause'] and d.get('slice_id')=='sl-7'
+print('SI' if ok else 'NO')")" = SI ] \
+  && echo "OK escalate encola slice_escalated {cause} (gate y fase dentro del texto) con slice_id" || { echo "FAIL payload de escalate"; fail=1; }
 echo "$out" | grep -qi "human" && echo "OK escalate declara que la decisión es humana" || { echo "FAIL escalate sin nota de gobierno"; fail=1; }
 rm -f "$PROJ/.claude/state/outbox/"*.json
 
@@ -462,12 +533,26 @@ for sub in "verdict R1-mvp security pass" "front-integration fr-1 --merge-status
 done
 [ ! -s "$TMP/curl-legacy.log" ] && echo "OK release-ops no toca la red en legacy" || { echo "FAIL release-ops abrió socket en legacy"; fail=1; }
 
-# Offline: el veredicto de release se encola (protegido como verdict_reported).
+# Offline: el veredicto de release NO se encola [#44] — `release_gate_verdict` es del
+# agregado `release` y POST /events solo ingiere ámbito slice (slice_id obligatorio,
+# progress_service._apply_and_append) o proyecto: encolarlo era rechazo garantizado al
+# drenar. rc 5 con instrucción de reintentar al reconectar (mismo patrón que propose-asset).
 runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9"}'
 rm -f "$PROJ/.claude/state/outbox/"*.json
-rc=0; bash "$RO" verdict R1-mvp smell fail --evidence "3 smells" >/dev/null 2>&1 || rc=$?
-[ "$rc" = 5 ] && grep -lq '"type": "verdict_reported"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null \
-  && echo "OK verdict de release offline se encola" || { echo "FAIL verdict de release offline ($rc)"; fail=1; }
+rc=0; err="$(bash "$RO" verdict R1-mvp smell fail --evidence "3 smells" 2>&1 >/dev/null)" || rc=$?
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = 5 ] && [ "$n" = 0 ] && echo "$err" | grep -qi "reintenta" \
+  && echo "OK verdict de release offline -> rc 5 sin encolar, con instrucción de reintento" \
+  || { echo "FAIL verdict de release offline (rc=$rc n=$n err=$err)"; fail=1; }
+
+# Offline: el reporte de integración de front tampoco se encola [#44] —
+# `front_integration_reported` no existe en el catálogo v2 y su superficie síncrona en el
+# hub es de gobierno humano (`can_govern_front`); un evento encolado jamás entraría.
+rc=0; err="$(bash "$RO" front-integration fr-1 --merge-status merged --resmoke pass --evidence "x" 2>&1 >/dev/null)" || rc=$?
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = 5 ] && [ "$n" = 0 ] && echo "$err" | grep -qi "reintenta" \
+  && echo "OK front-integration offline -> rc 5 sin encolar, con instrucción de reintento" \
+  || { echo "FAIL front-integration offline (rc=$rc n=$n err=$err)"; fail=1; }
 rm -f "$PROJ/.claude/state/outbox/"*.json
 runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_CL\"}"
 
@@ -493,6 +578,9 @@ rc=0; bash "$SO" gate inventado pass >/dev/null 2>&1 || rc=$?
 [ ! -s "$TMP/calls-ga.jsonl" ] && echo "OK gate desconocido no toca la red" || { echo "FAIL gate desconocido llamó al runtime"; fail=1; }
 
 # Gate feliz con evidencia por fichero (texto largo, tildes y comillas).
+# [#44] El contrato del hub (VerdictIn y el catálogo GateVerdict) llama `verdict` a la
+# clave y el reducer solo promueve con "PASS"/"FAIL" en MAYÚSCULA (domain.py:423-431):
+# `status:"pass"` era rechazo garantizado en el sync Y en la cola.
 python3 -c "open('$TMP/ev.txt','w').write('suite verde: 42/42 «ñ» \"ok\"\n'*50)"
 rc=0; out="$(bash "$SO" gate tdd pass --evidence-file "$TMP/ev.txt")" || rc=$?
 [ "$rc" = 0 ] && echo "OK gate pass -> rc 0" || { echo "FAIL gate pass rc ($rc)"; fail=1; }
@@ -503,10 +591,20 @@ for line in open(sys.argv[1]):
     c=json.loads(line)
     if c["path"]=="/slices/sl-7/verdicts":
         b=json.loads(c["body"])
-        ok = b["gate"]=="tdd" and b["status"]=="pass" and "42/42" in b["evidence"]
+        ok = b["gate"]=="tdd" and b.get("verdict")=="PASS" and "status" not in b and "42/42" in b["evidence"]
 print("SI" if ok else "NO")
 PYX
-)" = SI ] && echo "OK el veredicto viaja con gate/status/evidence" || { echo "FAIL cuerpo del veredicto"; fail=1; }
+)" = SI ] && echo "OK el veredicto viaja con gate/verdict(PASS)/evidence" || { echo "FAIL cuerpo del veredicto"; fail=1; }
+
+# `na` no existe en el catálogo del hub (cualquier verdict ≠ PASS/FAIL es bloqueo,
+# invariante 5): en runtime no viaja ni se encola — aviso local y rc 0.
+: > "$TMP/calls-ga.jsonl"
+rm -f "$PROJ/.claude/state/outbox/"*.json
+rc=0; out="$(bash "$SO" gate fidelity na 2>&1)" || rc=$?
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = 0 ] && [ "$n" = 0 ] && [ ! -s "$TMP/calls-ga.jsonl" ] && echo "$out" | grep -qi "na" \
+  && echo "OK gate na en runtime -> aviso local, sin red y sin encolar (el hub no lo admite)" \
+  || { echo "FAIL gate na (rc=$rc n=$n out=$out)"; fail=1; }
 
 # 422: compuerta mecánica del servidor -> rc 6, sin reintento y sin encolar.
 python3 - "$TMP/routes-ga.json" <<'PYX'
@@ -522,12 +620,15 @@ echo "$err" | grep -q "wiring_verified" && echo "OK gate 422 muestra la razón d
 n="$(find "$PROJ/.claude/state/outbox" -name '*.json' | wc -l | tr -d ' ')"
 [ "$n" = 0 ] && echo "OK gate 422 no encola (no se reintenta lo rechazado)" || { echo "FAIL gate 422 encoló ($n)"; fail=1; }
 
-# Offline: el veredicto se encola como verdict_reported (protegido) y rc 5.
+# Offline: el veredicto se encola como gate_verdict (nombre del catálogo v2, #44) y rc 5.
 runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9"}'
 rc=0; bash "$SO" gate journey_smoke pass --evidence "smoke verde" >/dev/null 2>&1 || rc=$?
 [ "$rc" = 5 ] && echo "OK gate offline -> rc 5" || { echo "FAIL gate offline rc ($rc)"; fail=1; }
-grep -lq '"type": "verdict_reported"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null \
-  && echo "OK gate offline encola verdict_reported" || { echo "FAIL gate offline no encoló"; fail=1; }
+f="$(grep -l '"type": "gate_verdict"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 -c "
+import json;p=json.load(open('$f'))['payload']
+print('SI' if p.get('verdict')=='PASS' and 'status' not in p else 'NO')")" = SI ] \
+  && echo "OK gate offline encola gate_verdict con verdict PASS" || { echo "FAIL gate offline no encoló gate_verdict"; fail=1; }
 rm -f "$PROJ/.claude/state/outbox/"*.json
 
 # Regresión: revisión final de rama — _ops_post_or_queue (offline, la rama que gate/submit/
@@ -554,12 +655,32 @@ rc=0; bash "$SO" submit --pr-url "https://example.invalid/pr/1" --openspec-chang
 [ "$rc" = 0 ] && echo "OK submit -> rc 0" || { echo "FAIL submit rc ($rc)"; fail=1; }
 grep -q '"path": "/slices/sl-7/submit"' "$TMP/calls-ga.jsonl" && echo "OK submit llama a su endpoint" || { echo "FAIL submit endpoint"; fail=1; }
 
+# submit offline: se encola como slice_submitted con payload VACÍO [#44] — el catálogo no
+# admite ningún campo (SliceSubmitted, extra="forbid"); pr_url/openspec_change vivían solo
+# para el 422 del hub.
+runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9"}'
+rm -f "$PROJ/.claude/state/outbox/"*.json
+rc=0; bash "$SO" submit --pr-url "https://example.invalid/pr/1" --openspec-change add-cobros >/dev/null 2>&1 || rc=$?
+f="$(grep -l '"type": "slice_submitted"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ "$rc" = 5 ] && [ -n "$f" ] && [ "$(python3 -c "
+import json;d=json.load(open('$f'))
+print('SI' if d['payload']=={} and d.get('slice_id')=='sl-7' else 'NO')")" = SI ] \
+  && echo "OK submit offline encola slice_submitted con payload {} y slice_id" \
+  || { echo "FAIL submit offline (rc=$rc)"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_GA\"}"
+
 # archive: SIEMPRE por la cola (opsx:archive corre dentro del PR) y protegido de la cota.
+# [#44] SliceArchived no admite ningún campo (extra="forbid"): payload VACÍO, slice_id
+# de primer nivel — con --epic/--pr-url el hub rechazaba TODO archivado offline.
 rm -f "$PROJ/.claude/state/outbox/"*.json
 rc=0; bash "$SO" archive --epic EP-003 --openspec-change add-cobros --pr-url "https://example.invalid/pr/1" >/dev/null || rc=$?
 [ "$rc" = 0 ] && echo "OK archive -> rc 0" || { echo "FAIL archive rc ($rc)"; fail=1; }
-grep -lq '"type": "slice_archived"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null \
-  && echo "OK archive encola slice_archived" || { echo "FAIL archive no encoló"; fail=1; }
+f="$(grep -l '"type": "slice_archived"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 -c "
+import json;d=json.load(open('$f'))
+print('SI' if d['payload']=={} and d.get('slice_id')=='sl-7' else 'NO')")" = SI ] \
+  && echo "OK archive encola slice_archived con payload {} y slice_id" || { echo "FAIL archive no encoló el formato del catálogo"; fail=1; }
 rm -f "$PROJ/.claude/state/outbox/"*.json
 
 # Regresión: revisión final de rama — si ops_enqueue_from_file falla, archive NUNCA debe
@@ -587,7 +708,9 @@ for line in open(sys.argv[1]):
     c=json.loads(line)
     if c["path"]=="/projects/p-1/mirror/transitions":
         b=json.loads(c["body"])
-        ok = b["kind"]=="verdict_reported" and b["origin"]=="mirror" and b["payload"]["slice_ref"]["epic_code"]=="EP-009"
+        # [#44] el espejo también usa el nombre del catálogo (TIPOS_DE_ESPEJO del hub
+        # enumera gate_verdict, no verdict_reported).
+        ok = b["kind"]=="gate_verdict" and b["origin"]=="mirror" and b["payload"]["slice_ref"]["epic_code"]=="EP-009"
 print("SI" if ok else "NO")
 PYX
 )" = SI ] && echo "OK dual espeja con la identidad fichero-primaria" || { echo "FAIL espejo dual"; fail=1; }
@@ -606,7 +729,8 @@ runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_GA\"}"
 # fichero es primario) — igual que el resto de cmd_* en dual (ver el bloque de arriba).
 DC="$ROOT/hooks/build/dual-compare.sh"
 mirror_escalated() {
-  # SI/NO: ¿calls-ga.jsonl tiene un POST a mirror/transitions con kind=escalation_raised?
+  # SI/NO: ¿calls-ga.jsonl tiene un POST a mirror/transitions con kind=slice_escalated?
+  # [#44] la escalada usa el nombre del catálogo v2 (slice_escalated) también en el espejo.
   python3 - "$TMP/calls-ga.jsonl" <<'PYX'
 import json,sys
 found=False
@@ -617,7 +741,7 @@ for line in open(sys.argv[1]):
         continue
     if c.get("path")=="/projects/p-1/mirror/transitions":
         b=json.loads(c["body"])
-        if b.get("kind")=="escalation_raised":
+        if b.get("kind")=="slice_escalated":
             found=True
 print("SI" if found else "NO")
 PYX
@@ -728,8 +852,24 @@ f="$(grep -l '"type": "wiring_checklist_seeded"' "$PROJ/.claude/state/outbox/"*.
   && echo "OK wiring seed encola los 300 items en un evento" || { echo "FAIL wiring seed payload"; fail=1; }
 [ "$(python3 -c "import json;print(json.load(open('$f')).get('slice_id'))")" = "sl-7" ] \
   && echo "OK wiring seed lleva slice_id" || { echo "FAIL wiring seed sin slice_id"; fail=1; }
+# [#44] WiringChecklistItem del catálogo es {item_id, kind, ref} EXACTO (extra="forbid"):
+# `status` no viaja (cada ítem nace failing en el fold del hub) y kind/ref nunca son null.
+[ "$(python3 -c "
+import json
+items=json.load(open('$f'))['payload']['items']
+ok = all(sorted(i.keys())==['item_id','kind','ref'] and i['kind'] is not None and i['ref'] is not None for i in items)
+print('SI' if ok else 'NO')")" = SI ] \
+  && echo "OK wiring seed emite items {item_id,kind,ref} sin status ni nulls (catálogo v2)" \
+  || { echo "FAIL wiring seed items fuera del schema del catálogo"; fail=1; }
 rm -f "$PROJ/.claude/state/outbox/"*.json
 
+# Checklist sin items válidos: rechazo LOCAL (el hub exige min_length=1), sin encolar.
+echo '[]' > "$TMP/items-vacio.json"
+rc=0; bash "$SO" wiring seed --file "$TMP/items-vacio.json" >/dev/null 2>&1 || rc=$?
+[ "$rc" = 6 ] && [ "$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')" = 0 ] \
+  && echo "OK wiring seed vacío -> rc 6 sin encolar (el hub rechaza items vacíos)" \
+  || { echo "FAIL wiring seed vacío (rc=$rc)"; fail=1; }
+
 # Regresión: revisión final de rama — outbox no escribible -> wiring seed no reporta éxito.
 python3 -c "import json;json.dump([{'item_id':'w0','kind':'ac','ref':'HU-01'}], open('$TMP/items-small.json','w'))"
 chmod 555 "$PROJ/.claude/state/outbox"
@@ -767,11 +907,17 @@ n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -
 rm -f "$PROJ/.claude/state/outbox/"*.json
 
 # progress: nota por argumento y por fichero; tipo EVICTABLE (no protegido).
+# [#44] El catálogo v2 lo llama `progress_noted` (payload {note}, sin cambios de claves).
 rc=0; bash "$SO" progress "cableado el paso 2 del journey" >/dev/null || rc=$?
 [ "$rc" = 0 ] && echo "OK progress -> rc 0" || { echo "FAIL progress rc ($rc)"; fail=1; }
+f="$(grep -l '"type": "progress_noted"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 -c "
+import json;d=json.load(open('$f'))
+print('SI' if set(d['payload'].keys())=={'note'} and d.get('slice_id')=='sl-7' else 'NO')")" = SI ] \
+  && echo "OK progress encola progress_noted {note} con slice_id" || { echo "FAIL progress no encoló progress_noted"; fail=1; }
 case " $RUNTIME_OUTBOX_PROTECTED " in
-  *" progress_note_recorded "*) echo "FAIL progress_note_recorded no debe estar protegido"; fail=1 ;;
-  *) echo "OK progress_note_recorded es evictable" ;;
+  *" progress_noted "*) echo "FAIL progress_noted no debe estar protegido"; fail=1 ;;
+  *) echo "OK progress_noted es evictable" ;;
 esac
 rm -f "$PROJ/.claude/state/outbox/"*.json
 
@@ -786,6 +932,8 @@ n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -
 rm -f "$PROJ/.claude/state/outbox/"*.json
 
 # checkpoint: POST con rama y commit reales del repo del PROYECTO.
+# [#44] La nota viaja como `summary` (CheckpointIn del hub; `note` se descartaba en
+# silencio en el sync y era rechazo por extra="forbid" en la cola).
 : > "$TMP/calls-ga.jsonl"
 rc=0; bash "$SO" checkpoint --note "parada por contexto crítico" >/dev/null || rc=$?
 [ "$rc" = 0 ] && echo "OK checkpoint -> rc 0" || { echo "FAIL checkpoint rc ($rc)"; fail=1; }
@@ -796,30 +944,387 @@ for line in open(sys.argv[1]):
     c=json.loads(line)
     if c["path"]=="/checkpoints":
         b=json.loads(c["body"])
-        ok = b.get("slice_id")=="sl-7" and "note" in b and "branch" in b and "commit_sha" in b
+        ok = b.get("slice_id")=="sl-7" and "summary" in b and "note" not in b and "branch" in b and "commit_sha" in b
 print("SI" if ok else "NO")
 PYX
-)" = SI ] && echo "OK el checkpoint viaja con slice/branch/commit/note" || { echo "FAIL cuerpo del checkpoint"; fail=1; }
+)" = SI ] && echo "OK el checkpoint viaja con slice/branch/commit/summary" || { echo "FAIL cuerpo del checkpoint"; fail=1; }
 
-# checkpoint offline: se encola como checkpoint_created (protegido).
+# checkpoint offline: se encola como checkpoint_recorded (nombre del catálogo, protegido),
+# con el payload EXACTO del catálogo {branch, commit_sha, summary} — el slice_id va de
+# primer nivel en el evento, jamás dentro del payload (extra="forbid").
 runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9"}'
 rm -f "$PROJ/.claude/state/outbox/"*.json
 rc=0; bash "$SO" checkpoint --note "sin red" >/dev/null 2>&1 || rc=$?
 [ "$rc" = 5 ] && echo "OK checkpoint offline -> rc 5" || { echo "FAIL checkpoint offline rc ($rc)"; fail=1; }
-grep -lq '"type": "checkpoint_created"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null \
-  && echo "OK checkpoint offline encola" || { echo "FAIL checkpoint offline no encoló"; fail=1; }
+f="$(grep -l '"type": "checkpoint_recorded"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 -c "
+import json;d=json.load(open('$f'))
+ok = set(d['payload'].keys())<=set(['branch','commit_sha','summary']) and 'slice_id' not in d['payload'] and d.get('slice_id')=='sl-7'
+print('SI' if ok else 'NO')")" = SI ] \
+  && echo "OK checkpoint offline encola checkpoint_recorded {branch,commit_sha,summary}" \
+  || { echo "FAIL checkpoint offline no encoló el formato del catálogo"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_GA\"}"
+
+# ══════════ runtime_dispatch_outbox: sobre {"events":…}, event_type y 4xx [#37] ══════════
+# El hub exige EventBatchIn {"events":[EventIn]} y EventIn.event_type: el lote pelado con
+# la clave "type" era 422 en CADA intento y la cola no drenaba jamás (reintento eterno,
+# el usuario creía que reportó y el hub nunca recibió nada).
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
+rm -rf "$PROJ/.claude/state/outbox/rejected"
+runtime_enqueue_event slice_archived '{"epic_code":"EP-003","openspec_change":"add-cobros","pr_url":""}' sl-7
+# Compat: fichero YA encolado por un consumidor con la 0.10.0 (clave interna "type").
+cat > "$PROJ/.claude/state/outbox/00000000000000000000-compat.json" <<'JSON'
+{"client_event_id": "cid-compat-1", "type": "telemetry_gap",
+ "payload": {"dropped": 1, "window_h": 1.0, "reason": "compat"},
+ "enqueued_at": "2026-08-27T00:00:00.000000Z"}
+JSON
+cid_new="$(python3 -c "
+import json,glob
+fs=[p for p in glob.glob('$PROJ/.claude/state/outbox/*.json') if 'compat' not in p and not p.endswith('.dispatch-state.json')]
+print(json.load(open(fs[0]))['client_event_id'])")"
+python3 - "$TMP/routes-ga.json" "$cid_new" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+# Ack con la forma REAL del hub (task_router.post_events): accepted/duplicates/rejected.
+d["POST /events"]={"status":200,"body":{"accepted":[sys.argv[2]],"duplicates":["cid-compat-1"],"rejected":[]}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-ga.jsonl"
+rc=0; runtime_dispatch_outbox >/dev/null 2>&1 || rc=$?
+[ "$rc" = 0 ] && echo "OK dispatch 200 -> rc 0" || { echo "FAIL dispatch 200 rc ($rc)"; fail=1; }
+[ "$(python3 - "$TMP/calls-ga.jsonl" <<'PYX'
+import json,sys
+ok=False
+for line in open(sys.argv[1]):
+    c=json.loads(line)
+    if c["path"]=="/events":
+        b=json.loads(c["body"])
+        evs=b.get("events") if isinstance(b,dict) else None
+        # [#44] slice_archived encolado por un consumidor 0.10.x con {epic_code,…}: la capa
+        # de compat del despacho lo vacía (el catálogo no admite ningún campo).
+        ok = isinstance(evs,list) and len(evs)==2 \
+          and all("event_type" in e and "type" not in e for e in evs) \
+          and {e["event_type"] for e in evs}=={"slice_archived","telemetry_gap"} \
+          and any(e.get("slice_id")=="sl-7" for e in evs) \
+          and all(e["payload"]=={} for e in evs if e["event_type"]=="slice_archived")
+print("SI" if ok else "NO")
+PYX
+)" = SI ] && echo "OK el lote viaja como {\"events\":[…]} con event_type y payloads del catálogo (compat 0.10.x)" \
+  || { echo "FAIL sobre/clave del lote"; fail=1; }
+n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' ! -name '.dispatch-state.json' | wc -l | tr -d ' ')"
+[ "$n" = 0 ] && echo "OK la cola drena con el ack real del hub (accepted+duplicates)" || { echo "FAIL la cola no drenó ($n)"; fail=1; }
+
+# Elemento rechazado DENTRO de un 200 (fuera de catálogo/payload inválido): se aparta a
+# rejected/ con su razón — reenviarlo es inútil; el resto del protocolo sigue fail-open.
+runtime_enqueue_event verdict_reported '{"gate":"tdd","status":"pass"}' sl-7
+cid_bad="$(python3 -c "
+import json,glob
+fs=[p for p in glob.glob('$PROJ/.claude/state/outbox/*.json') if not p.endswith('.dispatch-state.json')]
+print(json.load(open(fs[0]))['client_event_id'])")"
+python3 - "$TMP/routes-ga.json" "$cid_bad" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /events"]={"status":200,"body":{"accepted":[],"duplicates":[],
+  "rejected":[{"client_event_id":sys.argv[2],"reason":"event_type desconocido para el catálogo v2"}]}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-ga.jsonl"
+rc=0; runtime_dispatch_outbox >/dev/null 2>&1 || rc=$?
+n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' ! -name '.dispatch-state.json' | wc -l | tr -d ' ')"
+nr="$(find "$PROJ/.claude/state/outbox/rejected" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$n" = 0 ] && [ "$nr" = 1 ] \
+  && echo "OK el elemento rechazado por el hub se aparta a rejected/ (no se reenvía)" \
+  || { echo "FAIL elemento rechazado (pendientes=$n rechazados=$nr)"; fail=1; }
+# [#44] El fichero 0.10.x `verdict_reported {gate, status}` viajó TRADUCIDO al catálogo v2
+# (gate_verdict {gate, verdict: PASS}) — la traducción vive en el único punto de salida.
+[ "$(python3 - "$TMP/calls-ga.jsonl" <<'PYX'
+import json,sys
+ok=False
+for line in open(sys.argv[1]):
+    c=json.loads(line)
+    if c["path"]=="/events":
+        evs=json.loads(c["body"]).get("events") or []
+        ok = len(evs)==1 and evs[0]["event_type"]=="gate_verdict" \
+          and evs[0]["payload"].get("verdict")=="PASS" and "status" not in evs[0]["payload"]
+print("SI" if ok else "NO")
+PYX
+)" = SI ] && echo "OK verdict_reported 0.10.x drena traducido a gate_verdict {verdict: PASS}" \
+  || { echo "FAIL traducción de verdict_reported en el despacho"; fail=1; }
+rm -rf "$PROJ/.claude/state/outbox/rejected"
+
+# [#44] Renombres de compat 0.10.x en el despacho: checkpoint_created, escalation_raised y
+# progress_note_recorded drenan con el nombre Y el payload del catálogo v2 sin migración
+# (note→summary + slice_id fuera del payload; reason/gate/phase→cause; note se conserva).
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
+runtime_enqueue_event checkpoint_created '{"slice_id":"sl-7","branch":"feature/x","commit_sha":"abc123","note":"parada"}'
+runtime_enqueue_event escalation_raised '{"reason":"bloqueo del AC-2","gate":"tdd","phase":"red"}' sl-7
+runtime_enqueue_event progress_note_recorded '{"note":"avance"}' sl-7
+cids_all="$(python3 -c "
+import json,glob
+fs=[p for p in glob.glob('$PROJ/.claude/state/outbox/*.json') if not p.endswith('.dispatch-state.json')]
+print(json.dumps([json.load(open(p))['client_event_id'] for p in fs]))")"
+python3 - "$TMP/routes-ga.json" "$cids_all" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /events"]={"status":200,"body":{"accepted":json.loads(sys.argv[2]),"duplicates":[],"rejected":[]}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-ga.jsonl"
+rc=0; runtime_dispatch_outbox >/dev/null 2>&1 || rc=$?
+[ "$(python3 - "$TMP/calls-ga.jsonl" <<'PYX'
+import json,sys
+ok=False
+for line in open(sys.argv[1]):
+    c=json.loads(line)
+    if c["path"]=="/events":
+        evs={e["event_type"]:e for e in json.loads(c["body"]).get("events") or []}
+        cp=evs.get("checkpoint_recorded"); es=evs.get("slice_escalated"); pn=evs.get("progress_noted")
+        ok = cp is not None and es is not None and pn is not None \
+          and cp["payload"]=={"branch":"feature/x","commit_sha":"abc123","summary":"parada"} \
+          and cp.get("slice_id")=="sl-7" \
+          and set(es["payload"].keys())=={"cause"} and "bloqueo del AC-2" in es["payload"]["cause"] \
+          and "tdd" in es["payload"]["cause"] \
+          and pn["payload"]=={"note":"avance"}
+print("SI" if ok else "NO")
+PYX
+)" = SI ] && echo "OK los 4 renombres 0.10.x drenan con nombre y payload del catálogo v2" \
+  || { echo "FAIL renombres de compat en el despacho"; fail=1; }
+n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' ! -name '.dispatch-state.json' | wc -l | tr -d ' ')"
+[ "$n" = 0 ] && echo "OK la cola 0.10.x drena entera tras la traducción" || { echo "FAIL cola 0.10.x no drenó ($n)"; fail=1; }
+
+# [#44] Tipos SIN equivalente en el catálogo (tool_use_recorded, branch_drift,
+# front_integration_reported): el despacho los aparta LOCALMENTE a rejected/ sin gastar
+# red — mandarlos era rechazo garantizado. Si solo había de esos, no hay POST.
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
+runtime_enqueue_event tool_use_recorded '{"tool":"Edit","path":"src/a.ts"}' sl-7
+runtime_enqueue_event branch_drift '{"real":"main","expected":"feature/x"}' sl-7
+runtime_enqueue_event front_integration_reported '{"merge_status":"merged"}'
+: > "$TMP/calls-ga.jsonl"
+rc=0; runtime_dispatch_outbox >/dev/null 2>&1 || rc=$?
+n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' ! -name '.dispatch-state.json' | wc -l | tr -d ' ')"
+nr="$(find "$PROJ/.claude/state/outbox/rejected" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = 0 ] && [ "$n" = 0 ] && [ "$nr" = 3 ] && ! grep -q '"path": "/events"' "$TMP/calls-ga.jsonl" \
+  && echo "OK los tipos sin equivalente se apartan localmente a rejected/ sin tocar la red" \
+  || { echo "FAIL pre-filtro de tipos sin equivalente (rc=$rc pendientes=$n rechazados=$nr)"; fail=1; }
+rm -rf "$PROJ/.claude/state/outbox/rejected"
+
+# [#44] telemetry_gap de la evicción con el payload del catálogo: {dropped, window_h,
+# reason} (TelemetryGap: dropped>=1, window_h>0, reason<=2000) — el {dropped_count,
+# dropped_types} de 0.10.x era rechazo garantizado.
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
+old_ev="$PROJ/.claude/state/outbox/00000000000000000001-viejo.json"
+python3 -c "import json;json.dump({'client_event_id':'ev-viejo-1','type':'progress_noted','payload':{'note':'x'},'enqueued_at':'2020-01-01T00:00:00Z'},open('$old_ev','w'))"
+touch -t 202001010000 "$old_ev"
+runtime_outbox_enforce_cap >/dev/null
+f="$(grep -l '"type": "telemetry_gap"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 -c "
+import json;p=json.load(open('$f'))['payload']
+ok = sorted(p.keys())==['dropped','reason','window_h'] and p['dropped']>=1 and p['window_h']==72.0 \
+  and isinstance(p['reason'],str) and 'progress_noted' in p['reason'] and len(p['reason'])<=2000
+print('SI' if ok else 'NO')")" = SI ] \
+  && echo "OK la evicción emite telemetry_gap {dropped, window_h, reason} del catálogo v2" \
+  || { echo "FAIL payload del telemetry_gap de evicción"; fail=1; }
+# Coalescer: una segunda evicción actualiza el MISMO gap acumulando dropped.
+old_ev2="$PROJ/.claude/state/outbox/00000000000000000002-viejo.json"
+python3 -c "import json;json.dump({'client_event_id':'ev-viejo-2','type':'tool_use_recorded','payload':{},'enqueued_at':'2020-01-01T00:00:00Z'},open('$old_ev2','w'))"
+touch -t 202001010000 "$old_ev2"
+runtime_outbox_enforce_cap >/dev/null
+ngaps="$(grep -l '"type": "telemetry_gap"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | wc -l | tr -d ' ')"
+[ "$ngaps" = 1 ] && [ "$(python3 -c "
+import json;p=json.load(open('$f'))['payload']
+print('SI' if p['dropped']>=2 and sorted(p.keys())==['dropped','reason','window_h'] else 'NO')")" = SI ] \
+  && echo "OK el coalescer acumula en un único telemetry_gap con el payload del catálogo" \
+  || { echo "FAIL coalescer del telemetry_gap"; fail=1; }
 rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# 4xx del LOTE (p.ej. 422 por contrato roto): NO reintentable — se loggea el cuerpo, el
+# lote se mueve a rejected/ y se avisa; nada de reintento eterno indistinguible de red caída.
+runtime_enqueue_event slice_archived '{"epic_code":"EP-004","openspec_change":"","pr_url":""}'
+python3 - "$TMP/routes-ga.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /events"]={"status":422,"body":{"detail":[{"type":"dict_type","loc":["body","events"]}]}}
+json.dump(d,open(p,"w"))
+PYX
+rm -f "$PROJ/.claude/state/outbox/.dispatch-state.json"
+rc=0; err="$(runtime_dispatch_outbox 2>&1 >/dev/null)" || rc=$?
+[ "$rc" != 0 ] && echo "OK dispatch 4xx -> rc != 0" || { echo "FAIL dispatch 4xx rc ($rc)"; fail=1; }
+n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' ! -name '.dispatch-state.json' | wc -l | tr -d ' ')"
+nr="$(find "$PROJ/.claude/state/outbox/rejected" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$n" = 0 ] && [ "$nr" = 1 ] && echo "OK el lote 4xx se mueve a rejected/ y no se reintenta" \
+  || { echo "FAIL lote 4xx (pendientes=$n rechazados=$nr)"; fail=1; }
+echo "$err" | grep -q "dict_type" && echo "OK el 4xx loggea el cuerpo del error del hub" \
+  || { echo "FAIL 4xx sin cuerpo del error ($err)"; fail=1; }
+[ ! -f "$PROJ/.claude/state/outbox/.dispatch-state.json" ] \
+  && echo "OK el 4xx no agenda backoff (no hay nada que reintentar)" || { echo "FAIL 4xx agendó backoff"; fail=1; }
+: > "$TMP/calls-ga.jsonl"
+rc=0; runtime_dispatch_outbox >/dev/null 2>&1 || rc=$?
+grep -q '"path": "/events"' "$TMP/calls-ga.jsonl" && { echo "FAIL dispatch reintentó un lote 4xx"; fail=1; } \
+  || echo "OK tras el 4xx la cola queda vacía (sin reintento)"
+rm -rf "$PROJ/.claude/state/outbox/rejected"
+
+# 5xx y 429 SIGUEN siendo fail-open: la cola se conserva y el backoff se agenda.
+runtime_enqueue_event slice_archived '{"epic_code":"EP-005","openspec_change":"","pr_url":""}'
+for st in 500 429; do
+  python3 - "$TMP/routes-ga.json" "$st" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /events"]={"status":int(sys.argv[2]),"body":{"detail":"transitorio"}}
+json.dump(d,open(p,"w"))
+PYX
+  rm -f "$PROJ/.claude/state/outbox/.dispatch-state.json"
+  rc=0; runtime_dispatch_outbox >/dev/null 2>&1 || rc=$?
+  n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' ! -name '.dispatch-state.json' | wc -l | tr -d ' ')"
+  [ "$rc" = 1 ] && [ "$n" = 1 ] && [ -f "$PROJ/.claude/state/outbox/.dispatch-state.json" ] \
+    && echo "OK $st conserva la cola y agenda backoff (fail-open intacto)" \
+    || { echo "FAIL $st (rc=$rc pendientes=$n)"; fail=1; }
+done
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
+
+# ══════════════ [#44] anti-drift: todo tipo encolable pertenece al catálogo v2 ══════════════
+# Catálogo de REFERENCIA del test: réplica literal de `event_catalog.py` del hub
+# (trycore-ia-hub, backend/app/modules/orchestrator/event_catalog.py, catálogo v2,
+# verificado el 2026-08-28). Claves admitidas por schema (extra="forbid" en el hub; el
+# campo `source` lo estampa el SERVIDOR en la ingesta espejo y el cliente jamás lo manda).
+# Ámbito: `slice` exige slice_id de primer nivel; `project` lo PROHÍBE
+# (progress_service._apply_and_append + TIPOS_POR_AGREGADO["project"]).
+# Si mañana un productor encola un tipo o una clave nueva sin pasar por aquí, este
+# bloque debe ponerse rojo: actualiza el catálogo de referencia SOLO tras verificar
+# el catálogo real del hub.
+cat > "$TMP/catalogo-v2.py" <<'PYCAT'
+CATALOGO = {
+    "gate_verdict":            {"claves": {"gate", "verdict", "evidence", "cause", "details_ref"},
+                                "obligatorias": {"gate", "verdict"}, "ambito": "slice"},
+    "checkpoint_recorded":     {"claves": {"branch", "commit_sha", "summary"},
+                                "obligatorias": {"branch", "commit_sha"}, "ambito": "slice"},
+    "progress_noted":          {"claves": {"note"}, "obligatorias": {"note"}, "ambito": "slice"},
+    "handoff_recorded":        {"claves": {"note", "resume_hint", "stopped_at"},
+                                "obligatorias": {"note"}, "ambito": "slice"},
+    "slice_escalated":         {"claves": {"cause"}, "obligatorias": {"cause"}, "ambito": "slice"},
+    "slice_submitted":         {"claves": set(), "obligatorias": set(), "ambito": "slice"},
+    "slice_archived":          {"claves": set(), "obligatorias": set(), "ambito": "slice"},
+    "wiring_checklist_seeded": {"claves": {"items"}, "obligatorias": {"items"}, "ambito": "slice"},
+    "wiring_item_updated":     {"claves": {"item_id", "status", "evidence", "kind", "ref"},
+                                "obligatorias": {"item_id", "status"}, "ambito": "slice"},
+    "project_fact_updated":    {"claves": {"fact", "value", "source"},
+                                "obligatorias": {"fact", "source"}, "ambito": "project"},
+    "telemetry_gap":           {"claves": {"dropped", "window_h", "reason"},
+                                "obligatorias": {"dropped", "window_h", "reason"}, "ambito": "project"},
+}
+PYCAT
+
+# (a) ESTÁTICO: los tipos literales de TODOS los call sites que encolan (hooks/build/**)
+# están en el catálogo de referencia — un productor nuevo con tipo fuera de catálogo
+# pone esto rojo aunque nadie le escriba caso dinámico.
+[ "$(python3 - "$TMP/catalogo-v2.py" "$ROOT/hooks/build" <<'PYX'
+import re,sys,glob,os
+ns={}
+exec(open(sys.argv[1]).read(), ns)
+catalogo=ns["CATALOGO"]
+pat=re.compile(r'(?:runtime_enqueue_event|ops_enqueue_from_file|_ops_emit_event)\s+"?([a-z][a-z_]+)"?')
+pat_pq=re.compile(r'"\$payload"\s+([a-z][a-z_]+)')
+encontrados=set()
+for path in glob.glob(os.path.join(sys.argv[2],"**","*.sh"), recursive=True):
+    for line in open(path, encoding="utf-8"):
+        if line.lstrip().startswith("#"):
+            continue
+        for m in pat.finditer(line):
+            encontrados.add(m.group(1))
+        if "_ops_post_or_queue" in line:
+            m=pat_pq.search(line)
+            if m:
+                encontrados.add(m.group(1))
+fuera=sorted(t for t in encontrados if t not in catalogo)
+# El regex debe seguir viendo a los productores conocidos: si deja de encontrarlos,
+# el guard está ciego y también es un fallo.
+esperados={"gate_verdict","checkpoint_recorded","progress_noted","slice_escalated",
+           "slice_submitted","slice_archived","wiring_checklist_seeded",
+           "wiring_item_updated","project_fact_updated","handoff_recorded"}
+ciegos=sorted(esperados-encontrados)
+if fuera:
+    print("FUERA_DE_CATALOGO:"+",".join(fuera))
+elif ciegos:
+    print("REGEX_CIEGO:"+",".join(ciegos))
+else:
+    print("SI")
+PYX
+)" = SI ] && echo "OK todos los tipos literales encolados por hooks/build pertenecen al catálogo v2" \
+  || { echo "FAIL anti-drift estático (tipo fuera de catálogo o guard ciego)"; fail=1; }
+
+# (b) DINÁMICO: se ejecutan TODOS los productores reales en runtime sin red y se valida
+# cada evento encolado (tipo en catálogo, claves ⊆ admitidas, obligatorias presentes,
+# slice_id según el ámbito, items del wiring con la forma exacta).
+runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9"}'
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
+bash "$SO" gate tdd pass --evidence "verde" >/dev/null 2>&1
+bash "$SO" submit --pr-url "https://example.invalid/pr/9" >/dev/null 2>&1
+bash "$SO" archive --epic EP-003 >/dev/null 2>&1
+bash "$SO" wiring seed --file "$TMP/items-small.json" >/dev/null 2>&1
+bash "$SO" wiring update w1 passing --kind e2e --ref HU-1 --evidence "x" >/dev/null 2>&1
+bash "$SO" progress "nota de avance" >/dev/null 2>&1
+bash "$SO" checkpoint --note "corte" >/dev/null 2>&1
+bash "$SO" escalate "bloqueo" --gate tdd >/dev/null 2>&1
+bash "$SO" fact harness-phase building >/dev/null 2>&1
+old_ev="$PROJ/.claude/state/outbox/00000000000000000003-viejo.json"
+python3 -c "import json;json.dump({'client_event_id':'ev-viejo-3','type':'progress_noted','payload':{'note':'x'},'enqueued_at':'2020-01-01T00:00:00Z'},open('$old_ev','w'))"
+touch -t 202001010000 "$old_ev"
+runtime_outbox_enforce_cap >/dev/null
+res_antidrift="$(python3 - "$TMP/catalogo-v2.py" "$PROJ/.claude/state/outbox" <<'PYX'
+import json,sys,glob,os
+ns={}
+exec(open(sys.argv[1]).read(), ns)
+catalogo=ns["CATALOGO"]
+errores=[]
+vistos=set()
+for path in sorted(glob.glob(os.path.join(sys.argv[2],"*.json"))):
+    if os.path.basename(path)==".dispatch-state.json":
+        continue
+    d=json.load(open(path))
+    t=d.get("type") or ""
+    p=d.get("payload") or {}
+    vistos.add(t)
+    spec=catalogo.get(t)
+    if spec is None:
+        errores.append("tipo fuera de catálogo: %r" % t); continue
+    extra=set(p)-spec["claves"]
+    faltan=spec["obligatorias"]-set(p)
+    if extra: errores.append("%s: claves fuera de schema %s" % (t, sorted(extra)))
+    if faltan: errores.append("%s: faltan obligatorias %s" % (t, sorted(faltan)))
+    if spec["ambito"]=="slice" and not d.get("slice_id"):
+        errores.append("%s: ámbito slice sin slice_id de primer nivel" % t)
+    if spec["ambito"]=="project" and d.get("slice_id"):
+        errores.append("%s: ámbito proyecto con slice_id (el hub lo rechaza)" % t)
+    if t=="wiring_checklist_seeded":
+        items=p.get("items") or []
+        if not items: errores.append("wiring_checklist_seeded: items vacío (min_length=1)")
+        for it in items:
+            if set(it)!={"item_id","kind","ref"} or any(it[k] is None for k in it):
+                errores.append("wiring_checklist_seeded: item fuera de schema %r" % it); break
+esperados={"gate_verdict","slice_submitted","slice_archived","wiring_checklist_seeded",
+           "wiring_item_updated","progress_noted","checkpoint_recorded","slice_escalated",
+           "project_fact_updated","telemetry_gap"}
+faltantes=sorted(esperados-vistos)
+if faltantes:
+    errores.append("productores sin evento encolado (¿cambió un subcomando?): %s" % faltantes)
+print("SI" if not errores else "NO: "+" | ".join(errores))
+PYX
+)"
+[ "$res_antidrift" = SI ] \
+  && echo "OK todos los eventos encolados por los productores reales validan contra el catálogo v2" \
+  || { echo "FAIL anti-drift dinámico -> $res_antidrift"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
 runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_GA\"}"
 
-# ══════════════ scripts/lib/graph-bundle.py [Task 13] ══════════════
+# ══════════════ scripts/lib/graph-bundle.py [Task 13 · issue #41] ══════════════
 GB="$ROOT/scripts/lib/graph-bundle.py"
 cat > "$TMP/epics.json" <<'JSON'
 {"project_ref":"acme","epics":[
   {"code":"EP-002","title":"Cobros","layer":"business","files_scope":["src/pagos/**"],"depends_on":["EP-001"],"stories":[{"id":"HU-011","title":"Cobrar"}]},
   {"code":"EP-001","title":"Cimiento","layer":"foundational","files_scope":["src/core/**"],"depends_on":[]},
   {"code":"EP-002","title":"Duplicada","layer":"business"},
-  {"code":"EP-003","title":"Suelta","depends_on":["EP-404"]}
-],"release_lines":[{"id":"R1-mvp","epics":["EP-001","EP-002"]}]}
+  {"code":"EP-003","depends_on":["EP-404"]}
+],"release_lines":[{"id":"R1-mvp","epics":["EP-001","EP-002"]},{"id":"R2","epics":["EP-002"]}]}
 JSON
 out="$(python3 "$GB" < "$TMP/epics.json" 2> "$TMP/gb.err")"
 rc=$?
@@ -828,8 +1333,23 @@ rc=$?
   && echo "OK graph-bundle deduplica y ordena determinísticamente" || { echo "FAIL orden/dedup del bundle"; fail=1; }
 grep -q "EP-002" "$TMP/gb.err" && echo "OK graph-bundle avisa del código duplicado" || { echo "FAIL sin aviso de duplicado"; fail=1; }
 grep -q "EP-404" "$TMP/gb.err" && echo "OK graph-bundle avisa de la dependencia inexistente" || { echo "FAIL sin aviso de dep inexistente"; fail=1; }
-[ "$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);print(d["kind"],d["bundle_version"])')" = "graph 1" ] \
-  && echo "OK el bundle se autodescribe (kind/bundle_version)" || { echo "FAIL cabecera del bundle"; fail=1; }
+[ "$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);print(d["kind"],d["bundle_version"])')" = "graph 2" ] \
+  && echo "OK el bundle se autodescribe (kind/bundle_version 2)" || { echo "FAIL cabecera del bundle"; fail=1; }
+# ── Formato del hub (issue #41): GraphService.import_graph rechaza TODO el grafo
+#    si layer ∉ {FOUNDATIONAL, BUSINESS}; las historias viajan con `code` (el hub
+#    hace story_in["code"]); la línea de release es un string POR ÉPICA.
+[ "$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);print(",".join(str(e["layer"]) for e in d["epics"]))')" = "FOUNDATIONAL,BUSINESS,None" ] \
+  && echo "OK layer en MAYÚSCULA (VALID_LAYERS del hub); ausente -> null" || { echo "FAIL layer no está en formato del hub"; fail=1; }
+[ "$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);h=d["epics"][1]["stories"][0];print(h.get("code"),h.get("title"),"id" in h)')" = "HU-011 Cobrar False" ] \
+  && echo "OK las historias llevan code+title (sin id)" || { echo "FAIL historias sin code del hub"; fail=1; }
+[ "$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);print(",".join(str(e.get("release_line")) for e in d["epics"]));print("release_lines" in d)')" = "R1-mvp,R1-mvp,None
+False" ] \
+  && echo "OK release_line string por épica (sin release_lines aparte)" || { echo "FAIL release_line por épica"; fail=1; }
+grep -q "R2" "$TMP/gb.err" && echo "OK avisa de la épica en dos líneas de release (gana la primera)" || { echo "FAIL sin aviso de doble línea"; fail=1; }
+[ "$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);print(d["epics"][2]["title"])')" = "EP-003" ] \
+  && grep -q "sin .title." "$TMP/gb.err" \
+  && echo "OK title ausente cae al código con aviso (el hub lo exige)" || { echo "FAIL fallback de title"; fail=1; }
+grep -qi "layer" "$TMP/gb.err" && echo "OK avisa del layer ausente (el hub rechazará el grafo entero)" || { echo "FAIL sin aviso de layer"; fail=1; }
 # El bundle es DETERMINISTA: dos corridas idénticas salvo el sello temporal.
 out2="$(python3 "$GB" < "$TMP/epics.json" 2>/dev/null)"
 a="$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);d.pop("generated_at");print(json.dumps(d,sort_keys=True))')"