@trycore/spec-build-harness 0.8.4 → 0.10.0

package/scripts/tests/test-hooks-runtime.sh

@@ -0,0 +1,853 @@
+#!/usr/bin/env bash
+# test-hooks-runtime.sh — hooks del arnés como cliente del runtime [EP-OR-08-B].
+set -uo pipefail
+ROOT="$(git rev-parse --show-toplevel)"
+fail=0
+TMP="$(mktemp -d)"
+PROJ="$TMP/proj"
+mkdir -p "$PROJ/.claude/state" "$PROJ/.claude/config"
+export CLAUDE_PROJECT_DIR="$PROJ"
+export BUILD_CONFIG_FILE="$PROJ/.claude/config/build-config.json"
+echo '{"runtime":{"mode":"runtime","stale_seconds":900},"context":{"warning_pct":35,"critical_pct":25,"stale_seconds":60,"auto_checkpoint":false}}' > "$BUILD_CONFIG_FILE"
+# El daemon de heartbeat puede quedar vivo si un test falla a mitad: se apaga en el trap.
+# (heartbeat.sh nace en la Task 5; hasta entonces el trap simplemente no encuentra el script
+# y el error queda silenciado — nunca ensucia la salida del test.)
+cleanup() {
+  bash "$ROOT/hooks/build/heartbeat.sh" --stop >/dev/null 2>&1
+  rm -rf "$TMP"
+}
+trap cleanup EXIT
+
+source "$ROOT/hooks/build/lib/projection.sh" 2>/dev/null || { echo "FAIL no existe lib/projection.sh"; exit 1; }
+
+# --- lib/projection.sh ---
+got="$(projection_get active_slice.phase sin-cache)"
+[ "$got" = "sin-cache" ] && echo "OK projection_get sin cache -> default" || { echo "FAIL projection_get sin cache ($got)"; fail=1; }
+
+runtime_projection_write '{"fetched_at":"2026-08-19T10:00:00Z","project":{"scaffold_confirmed":true,"design_source_applies":false},"active_slice":{"slice_id":"sl-1","phase":"green","gates":{"dor":true,"tdd":false},"wiring_failing":[{"item_id":"w1","kind":"e2e"}]},"nudges":[]}'
+
+got="$(projection_get active_slice.phase "")"
+[ "$got" = green ] && echo "OK projection_get escalar" || { echo "FAIL projection_get escalar ($got)"; fail=1; }
+got="$(projection_get project.scaffold_confirmed false)"
+[ "$got" = true ] && echo "OK projection_get bool en minusculas" || { echo "FAIL projection_get bool ($got)"; fail=1; }
+got="$(projection_get active_slice.gates '{}')"
+echo "$got" | grep -q '"tdd": *false' && echo "OK projection_get subarbol como JSON" || { echo "FAIL projection_get subarbol ($got)"; fail=1; }
+got="$(projection_get active_slice.no_existe fallback)"
+[ "$got" = fallback ] && echo "OK projection_get clave ausente -> default" || { echo "FAIL projection_get ausente ($got)"; fail=1; }
+
+# python3 ausente: PATH vacío -> default, jamás excepción (config_root usa CLAUDE_PROJECT_DIR,
+# así que no necesita git en el PATH para resolver la ruta).
+got="$(PATH=/var/empty projection_get active_slice.phase degradado)"
+[ "$got" = degradado ] && echo "OK projection_get sin python3 -> default" || { echo "FAIL projection_get sin python3 ($got)"; fail=1; }
+
+# Frescura: la caché escrita arriba tiene fetched_at de 2026-08-19 (fija) -> con
+# stale_seconds=900 el veredicto depende del reloj; se re-escribe con la hora actual
+# para una comprobación determinista de "fresca", y con una vieja para "stale".
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"active_slice\":null,\"nudges\":[]}"
+if projection_is_stale; then echo "FAIL caché recién escrita se declara stale"; fail=1; else echo "OK caché fresca no es stale"; fi
+runtime_projection_write '{"fetched_at":"2000-01-01T00:00:00Z","active_slice":null,"nudges":[]}'
+if projection_is_stale; then echo "OK caché vieja es stale"; else echo "FAIL caché vieja no se declara stale"; fail=1; fi
+age="$(projection_age_seconds)"
+[ "$age" -gt 900 ] && echo "OK projection_age_seconds" || { echo "FAIL projection_age_seconds ($age)"; fail=1; }
+
+# --- lib/agent-context.sh: normalización tolerante ---
+source "$ROOT/hooks/build/lib/agent-context.sh" 2>/dev/null || { echo "FAIL no existe lib/agent-context.sh"; fail=1; }
+
+cat > "$TMP/raw1.json" <<'JSON'
+{"project":{"scaffold":{"confirmed":true},"design_source":{"applies":true,"confirmed":false},
+            "project_kind":"greenfield","harness_phase":"active"},
+ "active_slice":{"slice_id":"sl-7","epic_code":"EP-003","epic_title":"Cobros","stories":["HU-011","HU-012"],
+                 "phase":"green","gates":{"dor":true,"tdd":false},"branch":"feature/cobros",
+                 "openspec_change":"add-cobros",
+                 "wiring_checklist":[{"item_id":"w1","kind":"e2e","status":"failing"},
+                                     {"item_id":"w2","kind":"api","status":"passing"}],
+                 "sub_slices":[{"id":"ss-1","status":"done"},{"id":"ss-2","status":"pending"}],
+                 "session_continuity":{"resume_hint":"cablear w1"}},
+ "nudges":[{"kind":"reflect","message":"3 slices sin reflexionar"},"recordatorio suelto"],
+ "context":{"manifest_hash":"sha256:aaa","version":14},
+ "lease":{"expires_at":"2026-08-19T12:00:00Z","ttl_s":300}}
+JSON
+norm="$(agent_context_normalize "$TMP/raw1.json")"
+echo "$norm" | python3 -c '
+import json,sys
+d=json.load(sys.stdin)
+ok=True
+ok &= d["project"]["scaffold_confirmed"] is True
+ok &= d["project"]["design_source_applies"] is True
+ok &= d["project"]["design_source_confirmed"] is False
+ok &= d["active_slice"]["slice_id"]=="sl-7"
+ok &= d["active_slice"]["epic_code"]=="EP-003"
+ok &= d["active_slice"]["hus"]==["HU-011","HU-012"]
+ok &= d["active_slice"]["wiring_failing"]==[{"item_id":"w1","kind":"e2e"}]
+ok &= d["active_slice"]["sub_slices_pending"]==["ss-2"]
+ok &= d["active_slice"]["resume_hint"]=="cablear w1"
+ok &= d["context"]["manifest_hash"]=="sha256:aaa"
+ok &= d["lease"]["ttl_s"]==300
+ok &= len(d["nudges"])==2 and d["nudges"][1]["kind"]=="info"
+ok &= "fetched_at" in d
+sys.exit(0 if ok else 1)' \
+  && echo "OK agent_context_normalize mapea el contrato completo" \
+  || { echo "FAIL agent_context_normalize ($norm)"; fail=1; }
+
+# Respuesta pobre/desconocida: nunca lanza, produce el esqueleto con defaults seguros.
+echo '{"unknown":true}' > "$TMP/raw2.json"
+norm2="$(agent_context_normalize "$TMP/raw2.json")"
+echo "$norm2" | python3 -c '
+import json,sys
+d=json.load(sys.stdin)
+sys.exit(0 if d["active_slice"] is None and d["project"]["scaffold_confirmed"] is False and d["nudges"]==[] else 1)' \
+  && echo "OK agent_context_normalize tolera respuesta desconocida" \
+  || { echo "FAIL normalize respuesta desconocida ($norm2)"; fail=1; }
+
+# JSON corrupto: degrada a {} y rc 1 (no solo el stdout: el rc debe distinguir
+# "parseo OK con datos vacíos" de "entrada corrupta" para quien consuma la función
+# directamente, fuera de agent_context_fetch_and_cache).
+printf 'no-json' > "$TMP/raw3.json"
+norm3="$(agent_context_normalize "$TMP/raw3.json")"
+rc3=$?
+[ "$norm3" = "{}" ] && echo "OK agent_context_normalize JSON corrupto -> {}" || { echo "FAIL normalize corrupto ($norm3)"; fail=1; }
+[ "$rc3" -eq 1 ] && echo "OK agent_context_normalize JSON corrupto -> rc 1" || { echo "FAIL normalize corrupto rc ($rc3)"; fail=1; }
+
+# --- agent_context_fetch_and_cache contra el stub ---
+PORT_AC="$(python3 -c "import socket;s=socket.socket();s.bind(('',0));print(s.getsockname()[1]);s.close()")"
+cat > "$TMP/routes-ac.json" <<JSON
+{"GET /agent/context": {"status": 200, "body": {"active_slice": {"slice_id": "sl-9", "phase": "red", "gates": {"dor": true}}, "context": {"manifest_hash": "sha256:bbb", "version": 3}}}}
+JSON
+: > "$TMP/calls-ac.jsonl"
+python3 "$ROOT/scripts/tests/lib/http-stub.py" "$PORT_AC" "$TMP/routes-ac.json" "$TMP/calls-ac.jsonl" &
+STUB_AC=$!
+sleep 0.3
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_AC\",\"project_token\":\"tok-b\",\"project_id\":\"p-1\",\"agent_key\":\"ak-1\"}"
+
+agent_context_fetch_and_cache
+rc=$?
+[ $rc -eq 0 ] && echo "OK fetch_and_cache rc 0" || { echo "FAIL fetch_and_cache rc ($rc)"; fail=1; }
+got="$(projection_get active_slice.slice_id "")"
+[ "$got" = "sl-9" ] && echo "OK fetch_and_cache escribe la cache" || { echo "FAIL cache tras fetch ($got)"; fail=1; }
+if projection_is_stale; then echo "FAIL cache recien traida es stale"; fail=1; else echo "OK cache recien traida es fresca"; fi
+
+kill "$STUB_AC" 2>/dev/null; wait "$STUB_AC" 2>/dev/null
+# Servidor caído: rc 1 y la caché ANTERIOR intacta (nunca se pisa con vacío).
+agent_context_fetch_and_cache
+rc=$?
+[ $rc -eq 1 ] && echo "OK fetch_and_cache offline rc 1" || { echo "FAIL fetch offline rc ($rc)"; fail=1; }
+got="$(projection_get active_slice.slice_id "")"
+[ "$got" = "sl-9" ] && echo "OK fetch offline preserva la cache previa" || { echo "FAIL cache pisada offline ($got)"; fail=1; }
+
+# --- context-sync.sh ---
+PORT_CS="$(python3 -c "import socket;s=socket.socket();s.bind(('',0));print(s.getsockname()[1]);s.close()")"
+python3 - "$TMP/routes-cs.json" <<'PY'
+import json,sys
+allow={"allow":["react","vite"]}
+policy={"branch_prefixes":["feature","fix","chore"],"protected_branches":["main"]}
+routes={
+ "GET /projects/p-1/context/manifest": {"status":200,"body":{
+    "manifest_hash":"sha256:v2",
+    "files":[
+      {"path":"config/stack-allowlist.json","sha256":"h1","type_key":"core.library_allowlist","version":7},
+      {"path":"config/policy.json","sha256":"h2","type_key":"core.policy","version":3},
+      {"path":"../../../etc/evil.json","sha256":"h3","type_key":"core.policy","version":1},
+      {"path":"CLAUDE.md","sha256":"h4","type_key":"core.claude_md","version":2}]}},
+ "GET /projects/p-1/context/files?path=config%2Fstack-allowlist.json&sha256=h1": {"status":200,"body":{
+    "path":"config/stack-allowlist.json","sha256":"h1","content":json.dumps(allow)}},
+ "GET /projects/p-1/context/files?path=config%2Fpolicy.json&sha256=h2": {"status":200,"body":{
+    "path":"config/policy.json","sha256":"h2","content":json.dumps(policy)}},
+ "POST /context/synced": {"status":200,"body":{"ok":True}},
+}
+json.dump(routes,open(sys.argv[1],"w"))
+PY
+: > "$TMP/calls-cs.jsonl"
+python3 "$ROOT/scripts/tests/lib/http-stub.py" "$PORT_CS" "$TMP/routes-cs.json" "$TMP/calls-cs.jsonl" &
+STUB_CS=$!
+sleep 0.3
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_CS\",\"project_token\":\"tok-c\",\"project_id\":\"p-1\",\"manifest_hash\":\"sha256:v2\"}"
+
+out="$(bash "$ROOT/hooks/build/context-sync.sh" 2>&1)"
+[ -f "$PROJ/.claude/config/stack-allowlist.json" ] && echo "OK context-sync escribe allowlist" || { echo "FAIL allowlist no escrita ($out)"; fail=1; }
+[ -f "$PROJ/.claude/config/policy.json" ] && echo "OK context-sync escribe policy" || { echo "FAIL policy no escrita"; fail=1; }
+got="$(python3 -c "import json;print(json.load(open('$PROJ/.claude/config/stack-allowlist.json'))['allow'][0])")"
+[ "$got" = react ] && echo "OK contenido sincronizado" || { echo "FAIL contenido ($got)"; fail=1; }
+[ ! -e "$TMP/etc/evil.json" ] && [ ! -e "/etc/evil.json" ] && echo "OK context-sync rechaza traversal" || { echo "FAIL traversal aplicado"; fail=1; }
+echo "$out" | grep -q 'CLAUDE.md' && echo "OK context-sync lista lo no aplicado" || { echo "FAIL no reporta destinos no gobernados ($out)"; fail=1; }
+got="$(runtime_lock_manifest_hash)"
+[ "$got" = "sha256:v2" ] && echo "OK context-sync actualiza el lock" || { echo "FAIL lock ($got)"; fail=1; }
+sleep 0.2
+synced="$(grep -c '"method": "POST".*"/context/synced"' "$TMP/calls-cs.jsonl" 2>/dev/null | tr -d ' ')"
+if [ -z "$synced" ]; then synced=0; fi
+[ "$synced" -ge 1 ] && echo "OK context-sync emite context/synced" || { echo "FAIL sin context/synced"; fail=1; }
+
+# Segunda corrida: hash igual -> no-op, ni una sola llamada más al stub.
+before="$(wc -l < "$TMP/calls-cs.jsonl" | tr -d ' ')"
+bash "$ROOT/hooks/build/context-sync.sh" >/dev/null 2>&1
+after="$(wc -l < "$TMP/calls-cs.jsonl" | tr -d ' ')"
+[ "$before" = "$after" ] && echo "OK context-sync no-op con hash igual" || { echo "FAIL context-sync re-sincroniza ($before -> $after)"; fail=1; }
+
+# legacy: no-op absoluto aunque el hash difiera.
+runtime_credentials_merge '{"manifest_hash":"sha256:v3"}'
+before="$(wc -l < "$TMP/calls-cs.jsonl" | tr -d ' ')"
+TRYCORE_RUNTIME_MODE=legacy bash "$ROOT/hooks/build/context-sync.sh" >/dev/null 2>&1
+after="$(wc -l < "$TMP/calls-cs.jsonl" | tr -d ' ')"
+[ "$before" = "$after" ] && echo "OK context-sync no-op en legacy" || { echo "FAIL context-sync corrio en legacy"; fail=1; }
+
+# Regresión: manifiesto servido con status 200 pero body no-objeto (JSON válido, p.ej. un
+# array) — el lock existente NO debe corromperse ni emitirse context/synced con hash vacío.
+python3 - "$TMP/routes-cs.json" <<'PY'
+import json,sys
+routes=json.load(open(sys.argv[1]))
+routes["GET /projects/p-1/context/manifest"]={"status":200,"body":["not","an","object"]}
+json.dump(routes,open(sys.argv[1],"w"))
+PY
+before_lock="$(runtime_lock_manifest_hash)"
+bash "$ROOT/hooks/build/context-sync.sh" >/dev/null 2>&1
+rc=$?
+after_lock="$(runtime_lock_manifest_hash)"
+if [ $rc -eq 0 ] && [ "$after_lock" = "$before_lock" ]; then
+  echo "OK context-sync ignora manifiesto no-objeto (lock intacto)"
+else
+  echo "FAIL manifiesto no-objeto corrompio el lock (rc=$rc, '$before_lock' -> '$after_lock')"; fail=1
+fi
+
+kill "$STUB_CS" 2>/dev/null; wait "$STUB_CS" 2>/dev/null
+# Servidor caído: sale limpio y NO degrada el lock existente.
+bash "$ROOT/hooks/build/context-sync.sh" >/dev/null 2>&1
+rc=$?
+[ $rc -eq 0 ] && echo "OK context-sync offline exit 0" || { echo "FAIL context-sync offline rc ($rc)"; fail=1; }
+got="$(runtime_lock_manifest_hash)"
+[ "$got" = "sha256:v2" ] && echo "OK context-sync offline preserva el lock" || { echo "FAIL lock pisado offline ($got)"; fail=1; }
+runtime_credentials_merge '{"manifest_hash":"sha256:v2"}'
+
+# --- heartbeat.sh (daemon §4.3) ---
+PORT_HB="$(python3 -c "import socket;s=socket.socket();s.bind(('',0));print(s.getsockname()[1]);s.close()")"
+cat > "$TMP/routes-hb.json" <<JSON
+{"PUT /leases/renew": {"status": 200, "body": {"expires_at": "2099-01-01T00:00:00Z"}},
+ "POST /events": {"status": 200, "body": {"results": []}}}
+JSON
+: > "$TMP/calls-hb.jsonl"
+python3 "$ROOT/scripts/tests/lib/http-stub.py" "$PORT_HB" "$TMP/routes-hb.json" "$TMP/calls-hb.jsonl" &
+STUB_HB=$!
+sleep 0.3
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_HB\",\"project_token\":\"tok-h\",\"agent_key\":\"ak-1\",\"project_id\":\"p-1\",\"lease_ttl_s\":300}"
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"active_slice\":{\"slice_id\":\"sl-9\",\"phase\":\"green\",\"gates\":{},\"wiring_failing\":[]},\"nudges\":[]}"
+
+export TRYCORE_HEARTBEAT_TICK_S=1
+export TRYCORE_HEARTBEAT_INTERVAL_S=1
+
+# legacy: --ensure es no-op absoluto (ni pidfile, ni proceso).
+TRYCORE_RUNTIME_MODE=legacy bash "$ROOT/hooks/build/heartbeat.sh" --ensure $$ >/dev/null 2>&1
+[ ! -f "$PROJ/.claude/state/heartbeat.pid" ] && echo "OK heartbeat no-op en legacy" || { echo "FAIL heartbeat arranco en legacy"; fail=1; }
+
+# Sesiones falsas: dos procesos vivos que hacen de "sesiones de Claude Code".
+sleep 60 & SESS1=$!
+sleep 60 & SESS2=$!
+
+bash "$ROOT/hooks/build/heartbeat.sh" --ensure "$SESS1" >/dev/null 2>&1
+sleep 1
+HBPID="$(cat "$PROJ/.claude/state/heartbeat.pid" 2>/dev/null)"
+[ -n "$HBPID" ] && kill -0 "$HBPID" 2>/dev/null && echo "OK heartbeat lanza el daemon" || { echo "FAIL daemon no arranco"; fail=1; }
+
+# Segundo --ensure: comparte daemon (mismo pid), no lanza otro.
+bash "$ROOT/hooks/build/heartbeat.sh" --ensure "$SESS2" >/dev/null 2>&1
+sleep 1
+HBPID2="$(cat "$PROJ/.claude/state/heartbeat.pid" 2>/dev/null)"
+[ "$HBPID" = "$HBPID2" ] && echo "OK dos sesiones comparten daemon" || { echo "FAIL se lanzo un segundo daemon ($HBPID -> $HBPID2)"; fail=1; }
+
+# Late: con TTL 300 el intervalo real sería 100 s; el override lo baja a 1 s.
+sleep 3
+renews="$(grep -c '"method": "PUT"' "$TMP/calls-hb.jsonl" 2>/dev/null | tr -d ' ')"
+[ "${renews:-0}" -ge 1 ] && echo "OK daemon renueva el lease" || { echo "FAIL sin renew ($renews)"; fail=1; }
+
+# Flush: el sentinela dispara un despacho de la cola sin que el hook toque la red.
+runtime_enqueue_event "checkpoint_created" '{"n":1}' "sl-9"
+mkdir -p "$PROJ/.claude/state/outbox"
+: > "$PROJ/.claude/state/outbox/.flush-request"
+sleep 3
+[ ! -f "$PROJ/.claude/state/outbox/.flush-request" ] && echo "OK daemon consume el sentinela de flush" || { echo "FAIL sentinela sin consumir"; fail=1; }
+posts="$(grep -c '"method": "POST"' "$TMP/calls-hb.jsonl" 2>/dev/null | tr -d ' ')"
+[ "${posts:-0}" -ge 1 ] && echo "OK daemon despacha la cola" || { echo "FAIL cola sin despachar ($posts)"; fail=1; }
+
+# Cerrar la PRIMERA sesión NO mata el daemon (regresión del diseño anterior).
+kill "$SESS1" 2>/dev/null; wait "$SESS1" 2>/dev/null
+sleep 3
+kill -0 "$HBPID" 2>/dev/null && echo "OK daemon sobrevive al cierre de la primera sesion" || { echo "FAIL daemon murio con la primera sesion"; fail=1; }
+
+# kill -9 del daemon: el siguiente --ensure lo relanza con OTRO pid.
+kill -9 "$HBPID" 2>/dev/null; sleep 1
+bash "$ROOT/hooks/build/heartbeat.sh" --ensure "$SESS2" >/dev/null 2>&1
+sleep 1
+HBPID3="$(cat "$PROJ/.claude/state/heartbeat.pid" 2>/dev/null)"
+[ -n "$HBPID3" ] && [ "$HBPID3" != "$HBPID" ] && kill -0 "$HBPID3" 2>/dev/null \
+  && echo "OK heartbeat relanza el daemon muerto" || { echo "FAIL daemon no relanzado ($HBPID3)"; fail=1; }
+
+# Muere la ÚLTIMA sesión -> el daemon se apaga solo y limpia el pidfile.
+kill "$SESS2" 2>/dev/null; wait "$SESS2" 2>/dev/null
+sleep 4
+kill -0 "$HBPID3" 2>/dev/null && { echo "FAIL daemon sobrevive sin sesiones"; fail=1; } || echo "OK daemon muere con la ultima sesion"
+[ ! -f "$PROJ/.claude/state/heartbeat.pid" ] && echo "OK daemon limpia el pidfile" || { echo "FAIL pidfile huerfano"; fail=1; }
+
+# 409 en el renew: se marca lease perdido y NO se apaga el daemon (spec §4.3).
+cat > "$TMP/routes-hb.json" <<JSON
+{"PUT /leases/renew": {"status": 409, "body": {"error": "lease_conflict"}},
+ "POST /events": {"status": 200, "body": {"results": []}}}
+JSON
+sleep 60 & SESS3=$!
+bash "$ROOT/hooks/build/heartbeat.sh" --ensure "$SESS3" >/dev/null 2>&1
+sleep 3
+lost="$(python3 -c "import json;print(json.load(open('$PROJ/.claude/state/heartbeat-status.json')).get('lease_lost'))" 2>/dev/null)"
+[ "$lost" = True ] && echo "OK renew 409 marca lease perdido" || { echo "FAIL 409 no marcado ($lost)"; fail=1; }
+HBPID4="$(cat "$PROJ/.claude/state/heartbeat.pid" 2>/dev/null)"
+kill -0 "$HBPID4" 2>/dev/null && echo "OK daemon sigue vivo tras 409" || { echo "FAIL daemon murio por 409"; fail=1; }
+
+bash "$ROOT/hooks/build/heartbeat.sh" --stop >/dev/null 2>&1
+sleep 1
+kill -0 "$HBPID4" 2>/dev/null && { echo "FAIL --stop no apago el daemon"; fail=1; } || echo "OK --stop apaga el daemon"
+kill "$SESS3" 2>/dev/null; wait "$SESS3" 2>/dev/null
+kill "$STUB_HB" 2>/dev/null; wait "$STUB_HB" 2>/dev/null
+unset TRYCORE_HEARTBEAT_TICK_S TRYCORE_HEARTBEAT_INTERVAL_S
+
+# --- session-start.sh ---
+PORT_SS="$(python3 -c "import socket;s=socket.socket();s.bind(('',0));print(s.getsockname()[1]);s.close()")"
+cat > "$TMP/routes-ss.json" <<JSON
+{"POST /agents/register": {"status": 200, "body": {"agent_key": "ak-2", "project_id": "p-1", "poll_interval_s": 30, "lease_ttl_s": 300, "manifest_hash": "sha256:v2"}},
+ "GET /agent/context": {"status": 200, "body": {"project": {"scaffold": {"confirmed": true}}, "active_slice": {"slice_id": "sl-11", "epic_code": "EP-009", "phase": "green", "gates": {"dor": true, "tdd": false}}, "nudges": [{"kind": "reflect", "message": "2 slices sin reflexionar"}], "context": {"manifest_hash": "sha256:v2", "version": 9}}}}
+JSON
+: > "$TMP/calls-ss.jsonl"
+python3 "$ROOT/scripts/tests/lib/http-stub.py" "$PORT_SS" "$TMP/routes-ss.json" "$TMP/calls-ss.jsonl" &
+STUB_SS=$!
+sleep 0.3
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_SS\",\"project_token\":\"tok-s\",\"manifest_hash\":\"sha256:v2\"}"
+export TRYCORE_HEARTBEAT_TICK_S=1 TRYCORE_HEARTBEAT_INTERVAL_S=1
+
+# legacy: cero llamadas.
+before="$(wc -l < "$TMP/calls-ss.jsonl" | tr -d ' ')"
+echo '{"session_id":"s-legacy"}' | TRYCORE_RUNTIME_MODE=legacy bash "$ROOT/hooks/build/session-start.sh" >/dev/null 2>&1
+after="$(wc -l < "$TMP/calls-ss.jsonl" | tr -d ' ')"
+[ "$before" = "$after" ] && echo "OK session-start no-op en legacy" || { echo "FAIL session-start hablo en legacy"; fail=1; }
+
+echo '{"session_id":"s-1"}' | bash "$ROOT/hooks/build/session-start.sh" >/dev/null 2>&1
+got="$(runtime_field agent_key)"
+[ "$got" = "ak-2" ] && echo "OK session-start registra el agente" || { echo "FAIL registro ($got)"; fail=1; }
+got="$(projection_get active_slice.slice_id "")"
+[ "$got" = "sl-11" ] && echo "OK session-start hidrata la cache" || { echo "FAIL cache ($got)"; fail=1; }
+at_sent="$(python3 -c "
+import json
+body=None
+for line in open('$TMP/calls-ss.jsonl'):
+    c=json.loads(line)
+    if c['path']=='/agents/register': body=json.loads(c['body'])
+print(len(body.get('asset_types') or []) if body else -1)
+")"
+[ "$at_sent" -ge 1 ] && echo "OK session-start declara asset_types del paquete" || { echo "FAIL asset_types ($at_sent)"; fail=1; }
+hv_sent="$(python3 -c "
+import json
+body=None
+for line in open('$TMP/calls-ss.jsonl'):
+    c=json.loads(line)
+    if c['path']=='/agents/register': body=json.loads(c['body'])
+print((body or {}).get('harness_version',''))
+")"
+[ -n "$hv_sent" ] && [ "$hv_sent" != "0.0.0" ] && echo "OK session-start envia la version real del arnes" || { echo "FAIL harness_version ($hv_sent)"; fail=1; }
+sleep 1
+[ -f "$PROJ/.claude/state/heartbeat.pid" ] && echo "OK session-start asegura el daemon" || { echo "FAIL daemon no asegurado"; fail=1; }
+bash "$ROOT/hooks/build/heartbeat.sh" --stop >/dev/null 2>&1
+
+# 409 incompatible_version: avisa y sale 0 (jamás rompe el arranque de sesión).
+cat > "$TMP/routes-ss.json" <<JSON
+{"POST /agents/register": {"status": 409, "body": {"error": "incompatible_version", "min_version": "0.9.0"}}}
+JSON
+out="$(echo '{"session_id":"s-2"}' | bash "$ROOT/hooks/build/session-start.sh" 2>&1)"
+rc=$?
+[ $rc -eq 0 ] && echo "OK session-start exit 0 con 409" || { echo "FAIL session-start rc con 409 ($rc)"; fail=1; }
+echo "$out" | grep -q 'incompatible\|Actualiza' && echo "OK session-start explica el 409" || { echo "FAIL 409 sin mensaje ($out)"; fail=1; }
+
+kill "$STUB_SS" 2>/dev/null; wait "$STUB_SS" 2>/dev/null
+# Runtime caído: sale 0, avisa y NO borra la caché previa.
+out="$(echo '{"session_id":"s-3"}' | bash "$ROOT/hooks/build/session-start.sh" 2>&1)"
+rc=$?
+[ $rc -eq 0 ] && echo "OK session-start exit 0 offline" || { echo "FAIL session-start rc offline ($rc)"; fail=1; }
+got="$(projection_get active_slice.slice_id "")"
+[ "$got" = "sl-11" ] && echo "OK session-start offline preserva la cache" || { echo "FAIL cache perdida offline ($got)"; fail=1; }
+bash "$ROOT/hooks/build/heartbeat.sh" --stop >/dev/null 2>&1
+unset TRYCORE_HEARTBEAT_TICK_S TRYCORE_HEARTBEAT_INTERVAL_S
+
+# --- event-emitter.sh ---
+rm -f "$PROJ"/.claude/state/outbox/*.json 2>/dev/null
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"active_slice\":{\"slice_id\":\"sl-11\",\"phase\":\"green\",\"gates\":{},\"wiring_failing\":[]},\"nudges\":[]}"
+export TRYCORE_HEARTBEAT_TICK_S=1 TRYCORE_HEARTBEAT_INTERVAL_S=1
+
+# legacy: ni encola ni arranca daemon.
+echo '{"tool_name":"Edit","tool_input":{"file_path":"'"$PROJ"'/src/a.ts"}}' \
+  | TRYCORE_RUNTIME_MODE=legacy bash "$ROOT/hooks/build/event-emitter.sh" >/dev/null 2>&1
+n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$n" = 0 ] && echo "OK event-emitter no-op en legacy" || { echo "FAIL event-emitter encolo en legacy ($n)"; fail=1; }
+
+echo '{"tool_name":"Edit","tool_input":{"file_path":"'"$PROJ"'/src/a.ts"}}' \
+  | bash "$ROOT/hooks/build/event-emitter.sh" >/dev/null 2>&1
+ev="$(python3 -c "
+import json,glob
+files=sorted(p for p in glob.glob('$PROJ/.claude/state/outbox/*.json') if not p.endswith('.dispatch-state.json'))
+d=json.load(open(files[0]))
+print(d['type'], d.get('slice_id'), d['payload'].get('path'), d['payload'].get('tool'))
+" 2>/dev/null)"
+[ "$ev" = "tool_use_recorded sl-11 src/a.ts Edit" ] && echo "OK event-emitter encola ruta relativa con slice_id" || { echo "FAIL evento ($ev)"; fail=1; }
+
+# Bash: solo el binario, jamás el comando completo (puede llevar secretos — protocolo §8).
+rm -f "$PROJ"/.claude/state/outbox/*.json
+echo '{"tool_name":"Bash","tool_input":{"command":"curl -H \"Authorization: Bearer SECRETO\" https://x"}}' \
+  | bash "$ROOT/hooks/build/event-emitter.sh" >/dev/null 2>&1
+body="$(cat "$PROJ"/.claude/state/outbox/*.json 2>/dev/null)"
+echo "$body" | grep -q 'SECRETO' && { echo "FAIL event-emitter filtra el comando completo"; fail=1; } || echo "OK event-emitter no filtra el comando"
+echo "$body" | grep -q '"argv0": *"curl"' && echo "OK event-emitter reporta solo argv0" || { echo "FAIL argv0 ($body)"; fail=1; }
+
+# Bash: secreto en asignación de entorno inline al frente del comando (`VAR=valor cmd ...`)
+# tampoco debe filtrarse — argv0 debe ser el binario, no la asignación (protocolo §8).
+rm -f "$PROJ"/.claude/state/outbox/*.json
+echo '{"tool_name":"Bash","tool_input":{"command":"API_TOKEN=sk-live-XYZ curl https://api.example.com"}}' \
+  | bash "$ROOT/hooks/build/event-emitter.sh" >/dev/null 2>&1
+body="$(cat "$PROJ"/.claude/state/outbox/*.json 2>/dev/null)"
+echo "$body" | grep -q 'sk-live-XYZ' && { echo "FAIL event-emitter filtra secreto en asignacion de entorno"; fail=1; } || echo "OK event-emitter no filtra secreto en asignacion de entorno"
+echo "$body" | grep -q 'API_TOKEN' && { echo "FAIL event-emitter filtra nombre de variable de entorno"; fail=1; } || echo "OK event-emitter no filtra nombre de variable de entorno"
+echo "$body" | grep -q '"argv0": *"curl"' && echo "OK event-emitter salta asignacion de entorno y reporta binario" || { echo "FAIL argv0 con asignacion de entorno ($body)"; fail=1; }
+
+# Bash: el valor citado de la asignación de entorno inline lleva un espacio interno
+# (`KEY="a b" cmd`) — una tokenización naïve por espacios trocearía el valor citado y el
+# segundo fragmento (parte del secreto) se colaría como argv0. shlex debe tratarlo como
+# un solo token y seguir saltándolo.
+rm -f "$PROJ"/.claude/state/outbox/*.json
+echo '{"tool_name":"Bash","tool_input":{"command":"AWS_SECRET_ACCESS_KEY=\"abc def-secretpart\" aws s3 ls"}}' \
+  | bash "$ROOT/hooks/build/event-emitter.sh" >/dev/null 2>&1
+body="$(cat "$PROJ"/.claude/state/outbox/*.json 2>/dev/null)"
+echo "$body" | grep -q 'def-secretpart' && { echo "FAIL event-emitter filtra fragmento de secreto citado con espacio"; fail=1; } || echo "OK event-emitter no filtra fragmento de secreto citado con espacio"
+echo "$body" | grep -q '"argv0": *"aws"' && echo "OK event-emitter reporta binario con asignacion de entorno citada" || { echo "FAIL argv0 con asignacion citada ($body)"; fail=1; }
+
+# Sin slice reclamado: no se encola nada de ámbito slice (el servidor lo rechazaría).
+rm -f "$PROJ"/.claude/state/outbox/*.json
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"active_slice\":null,\"nudges\":[]}"
+echo '{"tool_name":"Write","tool_input":{"file_path":"'"$PROJ"'/src/b.ts"}}' \
+  | bash "$ROOT/hooks/build/event-emitter.sh" >/dev/null 2>&1
+n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$n" = 0 ] && echo "OK event-emitter no encola sin slice" || { echo "FAIL encolo sin slice ($n)"; fail=1; }
+
+# Nunca abre socket: un `curl` falso al frente del PATH no debe llegar a ejecutarse.
+mkdir -p "$TMP/fakebin"
+cat > "$TMP/fakebin/curl" <<'FAKE'
+#!/usr/bin/env bash
+touch "$FAKE_CURL_MARK"
+exit 0
+FAKE
+chmod +x "$TMP/fakebin/curl"
+rm -f "$TMP/curl-was-called"
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"active_slice\":{\"slice_id\":\"sl-11\",\"phase\":\"green\",\"gates\":{},\"wiring_failing\":[]},\"nudges\":[]}"
+echo '{"tool_name":"Edit","tool_input":{"file_path":"'"$PROJ"'/src/c.ts"}}' \
+  | FAKE_CURL_MARK="$TMP/curl-was-called" PATH="$TMP/fakebin:$PATH" bash "$ROOT/hooks/build/event-emitter.sh" >/dev/null 2>&1
+[ ! -f "$TMP/curl-was-called" ] && echo "OK event-emitter no toca la red" || { echo "FAIL event-emitter llamo a curl"; fail=1; }
+
+bash "$ROOT/hooks/build/heartbeat.sh" --stop >/dev/null 2>&1
+unset TRYCORE_HEARTBEAT_TICK_S TRYCORE_HEARTBEAT_INTERVAL_S
+
+# --- load-build-state.sh en modo runtime ---
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",
+ \"project\":{\"scaffold_confirmed\":true,\"harness_phase\":\"active\",\"design_source_applies\":false,\"design_source_confirmed\":false,\"project_kind\":\"greenfield\",\"foundation_done\":true},
+ \"active_slice\":{\"slice_id\":\"sl-11\",\"epic_code\":\"EP-009\",\"epic_title\":\"Cobros\",\"hus\":[\"HU-021\"],
+   \"phase\":\"green\",\"gates\":{\"dor\":true,\"tdd\":false,\"dod\":false},\"branch\":\"feature/cobros\",
+   \"openspec_change\":\"add-cobros\",\"wiring_failing\":[{\"item_id\":\"w1\",\"kind\":\"e2e\"}],
+   \"sub_slices_pending\":[\"ss-2\"],\"resume_hint\":\"cablear w1\",\"checkpoint\":null},
+ \"nudges\":[],\"context\":{\"manifest_hash\":\"sha256:v2\",\"version\":9},\"lease\":{\"expires_at\":null,\"ttl_s\":300}}"
+
+out="$(echo '{"session_id":"s-render"}' | bash "$ROOT/hooks/build/load-build-state.sh" 2>&1)"
+echo "$out" | grep -q 'EP-009' && echo "OK render runtime muestra la epica" || { echo "FAIL render epica ($out)"; fail=1; }
+echo "$out" | grep -q 'tdd' && echo "OK render runtime lista gates abiertos" || { echo "FAIL render gates ($out)"; fail=1; }
+echo "$out" | grep -q 'w1' && echo "OK render runtime muestra wiring failing" || { echo "FAIL render wiring ($out)"; fail=1; }
+echo "$out" | grep -q 'cablear w1' && echo "OK render runtime muestra resume_hint" || { echo "FAIL render resume_hint ($out)"; fail=1; }
+echo "$out" | grep -q 'ss-2' && echo "OK render runtime muestra sub-slices pendientes" || { echo "FAIL render sub-slices ($out)"; fail=1; }
+
+# En runtime NO se toca build-state.json aunque exista (el fichero es fósil).
+cat > "$PROJ/.claude/state/build-state.json" <<'JSON'
+{"version":"1.0","harness_phase":"authoring","scaffold":{"confirmed":false},"active_slice":null,"history":[],"releases":[]}
+JSON
+before="$(md5 -q "$PROJ/.claude/state/build-state.json" 2>/dev/null || md5sum "$PROJ/.claude/state/build-state.json" | cut -d' ' -f1)"
+echo '{"session_id":"s-render2"}' | bash "$ROOT/hooks/build/load-build-state.sh" >/dev/null 2>&1
+after="$(md5 -q "$PROJ/.claude/state/build-state.json" 2>/dev/null || md5sum "$PROJ/.claude/state/build-state.json" | cut -d' ' -f1)"
+[ "$before" = "$after" ] && echo "OK runtime no escribe build-state.json" || { echo "FAIL runtime escribio el fichero legacy"; fail=1; }
+
+# Caché vieja: avisa de stale pero sigue rindiendo (guards offline, spec §8).
+runtime_projection_write '{"fetched_at":"2000-01-01T00:00:00Z","project":{},"active_slice":null,"nudges":[]}'
+out="$(echo '{"session_id":"s-render3"}' | bash "$ROOT/hooks/build/load-build-state.sh" 2>&1)"
+echo "$out" | grep -q 'stale\|sin refrescar' && echo "OK render runtime avisa de cache vieja" || { echo "FAIL sin aviso de stale ($out)"; fail=1; }
+echo "$out" | grep -q 'ninguno\|/build:claim' && echo "OK render runtime sin slice sugiere reclamar" || { echo "FAIL sin sugerencia de claim ($out)"; fail=1; }
+
+# Regresión legacy: el camino v0.8.5 sigue intacto (lo cubre además test-context-monitor.sh).
+out="$(echo '{"session_id":"s-legacy"}' | TRYCORE_RUNTIME_MODE=legacy bash "$ROOT/hooks/build/load-build-state.sh" 2>&1)"
+echo "$out" | grep -q 'Arnés de construcción' && echo "OK load-build-state legacy sigue rindiendo" || { echo "FAIL legacy roto ($out)"; fail=1; }
+rm -f "$PROJ/.claude/state/build-state.json"
+
+# --- guards desde la caché de proyección (modo runtime) ---
+HOOK_IN='{"tool_name":"Write","tool_input":{"file_path":"'"$PROJ"'/src/x.ts","content":"x"}}'
+
+# Sin caché: auto-arme, no bloquea (nada que vigilar todavía).
+rm -f "$PROJ/.claude/state/runtime-projection.json"
+echo "$HOOK_IN" | bash "$ROOT/hooks/build/scaffold-guard.sh" >/dev/null 2>&1
+[ $? -eq 0 ] && echo "OK scaffold-guard sin cache no bloquea" || { echo "FAIL scaffold-guard bloqueo sin cache"; fail=1; }
+
+# Fase de código + scaffold NO confirmado -> bloquea.
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"project\":{\"scaffold_confirmed\":false,\"design_source_applies\":true,\"design_source_confirmed\":false},\"active_slice\":{\"slice_id\":\"sl-11\",\"phase\":\"green\",\"gates\":{\"fidelity\":false},\"wiring_failing\":[]},\"nudges\":[]}"
+out="$(echo "$HOOK_IN" | bash "$ROOT/hooks/build/scaffold-guard.sh" 2>&1)"
+rc=$?
+[ $rc -eq 2 ] && echo "OK scaffold-guard bloquea desde la cache" || { echo "FAIL scaffold-guard rc ($rc)"; fail=1; }
+
+# Fase de planificación -> permitido.
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"project\":{\"scaffold_confirmed\":false},\"active_slice\":{\"slice_id\":\"sl-11\",\"phase\":\"dor\",\"gates\":{},\"wiring_failing\":[]},\"nudges\":[]}"
+echo "$HOOK_IN" | bash "$ROOT/hooks/build/scaffold-guard.sh" >/dev/null 2>&1
+[ $? -eq 0 ] && echo "OK scaffold-guard permite en fase dor" || { echo "FAIL scaffold-guard bloqueo en dor"; fail=1; }
+
+# Scaffold confirmado -> permitido.
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"project\":{\"scaffold_confirmed\":true},\"active_slice\":{\"slice_id\":\"sl-11\",\"phase\":\"green\",\"gates\":{},\"wiring_failing\":[]},\"nudges\":[]}"
+echo "$HOOK_IN" | bash "$ROOT/hooks/build/scaffold-guard.sh" >/dev/null 2>&1
+[ $? -eq 0 ] && echo "OK scaffold-guard permite con scaffold confirmado" || { echo "FAIL scaffold-guard bloqueo con scaffold ok"; fail=1; }
+
+# Caché vieja: sigue bloqueando y lo dice (guards offline, spec §8).
+runtime_projection_write '{"fetched_at":"2000-01-01T00:00:00Z","project":{"scaffold_confirmed":false},"active_slice":{"slice_id":"sl-11","phase":"green","gates":{},"wiring_failing":[]},"nudges":[]}'
+out="$(echo "$HOOK_IN" | bash "$ROOT/hooks/build/scaffold-guard.sh" 2>&1)"
+rc=$?
+[ $rc -eq 2 ] && echo "$out" | grep -q 'stale\|sin refrescar' && echo "OK scaffold-guard bloquea offline y marca stale" || { echo "FAIL guard offline ($rc / $out)"; fail=1; }
+
+# design-source-guard: UI pendiente + fuente sin confirmar -> bloquea; confirmada -> permite.
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"project\":{\"scaffold_confirmed\":true,\"design_source_applies\":true,\"design_source_confirmed\":false},\"active_slice\":{\"slice_id\":\"sl-11\",\"phase\":\"green\",\"gates\":{\"fidelity\":false},\"wiring_failing\":[]},\"nudges\":[]}"
+echo "$HOOK_IN" | bash "$ROOT/hooks/build/design-source-guard.sh" >/dev/null 2>&1
+[ $? -eq 2 ] && echo "OK design-source-guard bloquea desde la cache" || { echo "FAIL design-source-guard no bloqueo"; fail=1; }
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"project\":{\"scaffold_confirmed\":true,\"design_source_applies\":true,\"design_source_confirmed\":true},\"active_slice\":{\"slice_id\":\"sl-11\",\"phase\":\"green\",\"gates\":{\"fidelity\":false},\"wiring_failing\":[]},\"nudges\":[]}"
+echo "$HOOK_IN" | bash "$ROOT/hooks/build/design-source-guard.sh" >/dev/null 2>&1
+[ $? -eq 0 ] && echo "OK design-source-guard permite con fuente confirmada" || { echo "FAIL design-source-guard bloqueo con fuente ok"; fail=1; }
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"project\":{\"scaffold_confirmed\":true,\"design_source_applies\":false,\"design_source_confirmed\":false},\"active_slice\":{\"slice_id\":\"sl-11\",\"phase\":\"green\",\"gates\":{\"fidelity\":false},\"wiring_failing\":[]},\"nudges\":[]}"
+echo "$HOOK_IN" | bash "$ROOT/hooks/build/design-source-guard.sh" >/dev/null 2>&1
+[ $? -eq 0 ] && echo "OK design-source-guard apagado sin UI" || { echo "FAIL design-source-guard bloqueo sin UI"; fail=1; }
+
+# ── PreToolUse: prohibida la red (spec §4.2-B) ──
+# Reutiliza el `curl` falso creado en el bloque de event-emitter (más arriba en este mismo
+# fichero de test): si ese bloque se moviera, hay que recrear $TMP/fakebin/curl aquí.
+# Entorno REALMENTE aislado: subshell bash -c con un `curl` falso al frente del PATH y
+# credenciales apuntando a un puerto vivo. Si cualquiera de los cuatro guards abriera
+# socket, el falso curl dejaría su marca. No se comprueba por grep del código (eso no
+# demuestra comportamiento) sino ejecutando los guards de verdad.
+runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9","project_token":"tok-x"}'
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"project\":{\"scaffold_confirmed\":false},\"active_slice\":{\"slice_id\":\"sl-11\",\"phase\":\"green\",\"gates\":{\"fidelity\":false},\"wiring_failing\":[]},\"nudges\":[]}"
+for g in gitflow-guard stack-guard scaffold-guard design-source-guard; do
+  rm -f "$TMP/curl-was-called"
+  bash -c '
+    echo "{\"tool_name\":\"Bash\",\"tool_input\":{\"command\":\"git commit -m x\",\"file_path\":\"'"$PROJ"'/package.json\",\"content\":\"{}\"}}" \
+      | FAKE_CURL_MARK="'"$TMP"'/curl-was-called" PATH="'"$TMP"'/fakebin:$PATH" \
+        CLAUDE_PROJECT_DIR="'"$PROJ"'" BUILD_CONFIG_FILE="'"$BUILD_CONFIG_FILE"'" \
+        bash "'"$ROOT"'/hooks/build/'"$g"'.sh"' >/dev/null 2>&1
+  [ ! -f "$TMP/curl-was-called" ] && echo "OK $g no toca la red" || { echo "FAIL $g abrio socket"; fail=1; }
+done
+
+# --- gitflow-guard: repo del comando, no el de la sesión (spec §9) ---
+OTHER="$TMP/otro-repo"
+mkdir -p "$OTHER"
+git -C "$OTHER" init -q 2>/dev/null
+git -C "$OTHER" checkout -q -b main 2>/dev/null
+git -C "$OTHER" commit -q --allow-empty -m init 2>/dev/null
+
+SESSION_REPO="$TMP/sesion-repo"
+mkdir -p "$SESSION_REPO"
+git -C "$SESSION_REPO" init -q 2>/dev/null
+git -C "$SESSION_REPO" checkout -q -b feature/ok 2>/dev/null
+git -C "$SESSION_REPO" commit -q --allow-empty -m init 2>/dev/null
+
+# La sesión está en feature/ok, pero el comando commitea en OTRO repo que está en main:
+# el guard debe bloquear por la rama del repo del COMANDO.
+out="$(cd "$SESSION_REPO" && echo '{"tool_name":"Bash","tool_input":{"command":"git -C '"$OTHER"' commit -m x"}}' \
+  | CLAUDE_PROJECT_DIR="$SESSION_REPO" bash "$ROOT/hooks/build/gitflow-guard.sh" 2>&1)"
+rc=$?
+[ $rc -eq 2 ] && echo "OK gitflow-guard resuelve el repo del comando (-C)" || { echo "FAIL gitflow-guard no vio el repo del comando ($rc / $out)"; fail=1; }
+
+# Mismo caso con `cd <dir> && git commit`.
+out="$(cd "$SESSION_REPO" && echo '{"tool_name":"Bash","tool_input":{"command":"cd '"$OTHER"' && git commit -m x"}}' \
+  | CLAUDE_PROJECT_DIR="$SESSION_REPO" bash "$ROOT/hooks/build/gitflow-guard.sh" 2>&1)"
+rc=$?
+[ $rc -eq 2 ] && echo "OK gitflow-guard resuelve el repo tras un cd" || { echo "FAIL gitflow-guard ignoro el cd ($rc)"; fail=1; }
+
+# Sin pistas: cae al repo de la sesión (feature/ok) -> permitido.
+(cd "$SESSION_REPO" && echo '{"tool_name":"Bash","tool_input":{"command":"git commit -m x"}}' \
+  | CLAUDE_PROJECT_DIR="$SESSION_REPO" bash "$ROOT/hooks/build/gitflow-guard.sh" >/dev/null 2>&1)
+[ $? -eq 0 ] && echo "OK gitflow-guard permite en rama tipada del repo de sesion" || { echo "FAIL gitflow-guard bloqueo rama valida"; fail=1; }
+
+# Política desde el asset sincronizado: con `release` como prefijo permitido y `develop`
+# protegida, el guard cambia de veredicto sin tocar el código.
+mkdir -p "$SESSION_REPO/.claude/config"
+cat > "$SESSION_REPO/.claude/config/policy.json" <<'JSON'
+{"branch_prefixes":["release"],"protected_branches":["main","develop"]}
+JSON
+(cd "$SESSION_REPO" && echo '{"tool_name":"Bash","tool_input":{"command":"git commit -m x"}}' \
+  | CLAUDE_PROJECT_DIR="$SESSION_REPO" bash "$ROOT/hooks/build/gitflow-guard.sh" >/dev/null 2>&1)
+[ $? -eq 2 ] && echo "OK gitflow-guard aplica los prefijos de la politica sincronizada" || { echo "FAIL politica sincronizada ignorada"; fail=1; }
+git -C "$SESSION_REPO" checkout -q -b release/1.0 2>/dev/null
+(cd "$SESSION_REPO" && echo '{"tool_name":"Bash","tool_input":{"command":"git commit -m x"}}' \
+  | CLAUDE_PROJECT_DIR="$SESSION_REPO" bash "$ROOT/hooks/build/gitflow-guard.sh" >/dev/null 2>&1)
+[ $? -eq 0 ] && echo "OK gitflow-guard permite el prefijo declarado en la politica" || { echo "FAIL prefijo de politica no permitido"; fail=1; }
+
+# --- Revision Task 10 (hallazgo 1): varios `cd` encadenados antes del git — gana el
+# ULTIMO (el directorio real en el que corre el commit), no el primero. En este punto la
+# politica de SESSION_REPO exige prefijo "release" y protege "main"/"develop".
+TYPED_REPO="$TMP/typed-repo"
+mkdir -p "$TYPED_REPO"
+git -C "$TYPED_REPO" init -q 2>/dev/null
+git -C "$TYPED_REPO" checkout -q -b release/typed 2>/dev/null
+git -C "$TYPED_REPO" commit -q --allow-empty -m init 2>/dev/null
+# TYPED_REPO (primer cd) esta en una rama permitida por la politica; OTHER (ultimo cd)
+# esta en "main", protegida. Si el guard tomara el PRIMER cd (el bug), esto pasaria
+# (rc=0); si toma el ULTIMO (el fix), debe bloquear (rc=2).
+out="$(cd "$SESSION_REPO" && echo '{"tool_name":"Bash","tool_input":{"command":"cd '"$TYPED_REPO"' && cd '"$OTHER"' && git commit -m x"}}' \
+  | CLAUDE_PROJECT_DIR="$SESSION_REPO" bash "$ROOT/hooks/build/gitflow-guard.sh" 2>&1)"
+rc=$?
+[ $rc -eq 2 ] && echo "OK gitflow-guard usa el ultimo cd de una cadena, no el primero" || { echo "FAIL gitflow-guard tomo el primer cd de la cadena ($rc / $out)"; fail=1; }
+
+# --- Revision Task 10 (hallazgo 2): `git commit -C <ref>` (flag del subcomando, reusa
+# mensaje/autoria) no debe confundirse con el flag GLOBAL `git -C <dir> commit`. El guard
+# debe seguir evaluando el repo real (SESSION_REPO) y su rama real.
+git -C "$SESSION_REPO" checkout -q -b main 2>/dev/null
+NOGIT_DIR="$TMP/nogit-dir"
+mkdir -p "$NOGIT_DIR"
+out="$(cd "$SESSION_REPO" && echo '{"tool_name":"Bash","tool_input":{"command":"git commit -C '"$NOGIT_DIR"' -m x"}}' \
+  | CLAUDE_PROJECT_DIR="$SESSION_REPO" bash "$ROOT/hooks/build/gitflow-guard.sh" 2>&1)"
+rc=$?
+[ $rc -eq 2 ] && echo "OK gitflow-guard no confunde 'commit -C <ref>' con el -C global" || { echo "FAIL gitflow-guard confundio commit -C con el flag global ($rc / $out)"; fail=1; }
+
+# --- Revision Task 10 (hallazgo 3): un metacaracter (p.ej. un punto) en un prefijo o rama
+# protegida de policy.json se trata como texto LITERAL, nunca como wildcard de regex
+# (regresion sobre el re.escape del commit 0b7c053).
+cat > "$SESSION_REPO/.claude/config/policy.json" <<'JSON'
+{"branch_prefixes":["rel.ease"],"protected_branches":["main"]}
+JSON
+git -C "$SESSION_REPO" checkout -q -b relXease/1 2>/dev/null
+(cd "$SESSION_REPO" && echo '{"tool_name":"Bash","tool_input":{"command":"git commit -m x"}}' \
+  | CLAUDE_PROJECT_DIR="$SESSION_REPO" bash "$ROOT/hooks/build/gitflow-guard.sh" >/dev/null 2>&1)
+[ $? -eq 2 ] && echo "OK gitflow-guard trata el punto del prefijo como literal, no wildcard" || { echo "FAIL gitflow-guard trato el punto de la politica como wildcard de regex"; fail=1; }
+git -C "$SESSION_REPO" checkout -q -b rel.ease/1 2>/dev/null
+(cd "$SESSION_REPO" && echo '{"tool_name":"Bash","tool_input":{"command":"git commit -m x"}}' \
+  | CLAUDE_PROJECT_DIR="$SESSION_REPO" bash "$ROOT/hooks/build/gitflow-guard.sh" >/dev/null 2>&1)
+[ $? -eq 0 ] && echo "OK gitflow-guard permite el prefijo literal con punto de la politica" || { echo "FAIL gitflow-guard bloqueo el prefijo literal con punto"; fail=1; }
+
+# --- Revision final de rama: dos bypasses de git_global_dash_c reproducidos en vivo tras
+# el fix del hallazgo 2 — un prefijo de entorno o una flag global con valor ANTES de -C
+# hacian que el walk de tokens nunca llegara a leer el -C real, cayendo al repo de sesion
+# (feature/ok, permitido) en vez del repo real del comando (OTHER, en "main", protegida).
+git -C "$SESSION_REPO" checkout -q -b feature/ok 2>/dev/null
+
+# hallazgo A: `VAR=val git -C <dir> commit` — la asignacion de entorno antes de `git` hacia
+# que toks[0] != "git" y el segmento se descartaba entero.
+out="$(cd "$SESSION_REPO" && echo '{"tool_name":"Bash","tool_input":{"command":"GIT_AUTHOR_NAME=x git -C '"$OTHER"' commit -m x"}}' \
+  | CLAUDE_PROJECT_DIR="$SESSION_REPO" bash "$ROOT/hooks/build/gitflow-guard.sh" 2>&1)"
+rc=$?
+[ $rc -eq 2 ] && echo "OK gitflow-guard resuelve -C tras un prefijo de variable de entorno" || { echo "FAIL gitflow-guard bypass via prefijo de entorno ($rc / $out)"; fail=1; }
+
+# hallazgo B: `git -c clave=valor -C <dir> commit` — `-c` toma su valor en un token
+# SEPARADO; sin saltar el par completo, el walk trataba ese valor como si fuera el
+# subcomando y paraba ahi, sin llegar nunca al -C real.
+out="$(cd "$SESSION_REPO" && echo '{"tool_name":"Bash","tool_input":{"command":"git -c user.name=x -C '"$OTHER"' commit -m x"}}' \
+  | CLAUDE_PROJECT_DIR="$SESSION_REPO" bash "$ROOT/hooks/build/gitflow-guard.sh" 2>&1)"
+rc=$?
+[ $rc -eq 2 ] && echo "OK gitflow-guard resuelve -C tras una flag global con valor (-c)" || { echo "FAIL gitflow-guard bypass via -c antes de -C ($rc / $out)"; fail=1; }
+
+# stack-guard: bloquea igual que siempre y, con contexto stale, lo anota.
+mkdir -p "$PROJ/.claude/config"
+echo '{"allow":["react"]}' > "$PROJ/.claude/config/stack-allowlist.json"
+runtime_projection_write '{"fetched_at":"2000-01-01T00:00:00Z","project":{},"active_slice":null,"nudges":[]}'
+out="$(echo '{"tool_name":"Write","tool_input":{"file_path":"'"$PROJ"'/package.json","content":"{\"dependencies\":{\"lodash\":\"^4.0.0\"}}"}}' \
+  | bash "$ROOT/hooks/build/stack-guard.sh" 2>&1)"
+rc=$?
+[ $rc -eq 2 ] && echo "OK stack-guard sigue bloqueando deps fuera del allowlist" || { echo "FAIL stack-guard rc ($rc / $out)"; fail=1; }
+echo "$out" | grep -q 'stale\|sin sincronizar' && echo "OK stack-guard anota contexto stale" || { echo "FAIL stack-guard sin nota de stale ($out)"; fail=1; }
+
+# --- context-monitor.sh en modo runtime: handoff como evento, sin escritura local ---
+export TMPDIR="$TMP"
+rm -f "$PROJ"/.claude/state/outbox/*.json 2>/dev/null
+rm -f "$PROJ"/.claude/state/.handoff-* 2>/dev/null
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"project\":{},\"active_slice\":{\"slice_id\":\"sl-11\",\"phase\":\"green\",\"gates\":{},\"wiring_failing\":[{\"item_id\":\"w1\",\"kind\":\"e2e\"}],\"resume_hint\":null},\"nudges\":[],\"context\":{\"version\":9}}"
+echo "{\"remaining_pct\":20,\"used_pct\":80,\"ts\":$(date +%s)}" > "$TMP/claude-ctx-cm1.json"
+
+out="$(echo '{"session_id":"cm1","hook_event_name":"PostToolUse"}' | bash "$ROOT/hooks/build/context-monitor.sh" 2>&1)"
+echo "$out" | grep -q 'additionalContext' && echo "OK context-monitor runtime inyecta aviso" || { echo "FAIL sin aviso runtime ($out)"; fail=1; }
+ev="$(python3 -c "
+import json,glob
+files=[p for p in glob.glob('$PROJ/.claude/state/outbox/*.json') if not p.endswith('.dispatch-state.json')]
+d=[json.load(open(p)) for p in files]
+h=[x for x in d if x['type']=='handoff_recorded']
+print(h[0]['slice_id'], 'w1' in (h[0]['payload'].get('resume_hint') or '')) if h else print('none')
+" 2>/dev/null)"
+[ "$ev" = "sl-11 True" ] && echo "OK context-monitor encola handoff_recorded con resume_hint" || { echo "FAIL handoff_recorded ($ev)"; fail=1; }
+[ ! -f "$PROJ/.claude/state/build-state.json" ] && echo "OK context-monitor runtime no crea estado local" || { echo "FAIL estado local creado en runtime"; fail=1; }
+
+# Once-per-sesión: un segundo disparo no duplica el evento.
+n_before="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' | wc -l | tr -d ' ')"
+echo '{"session_id":"cm1","hook_event_name":"PostToolUse"}' | bash "$ROOT/hooks/build/context-monitor.sh" >/dev/null 2>&1
+n_after="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' | wc -l | tr -d ' ')"
+[ "$n_before" = "$n_after" ] && echo "OK handoff_recorded no se duplica en la misma sesion" || { echo "FAIL handoff duplicado ($n_before -> $n_after)"; fail=1; }
+
+# --- Regresión revisión final de rama (hallazgo 1): context-monitor.sh en modo `dual` SIN
+# slice_id conocido NO debe encolar handoff_recorded sin la clave slice_id. `dual` no reclama
+# vía runtime, así que /agent/context normalmente no trae active_slice y el slice_id sale
+# vacío: es el caso NORMAL en dual, no el borde. Sin la guardia, el evento se encolaba sin
+# slice_id (violando protocolo §1) y, al estar en RUNTIME_OUTBOX_PROTECTED, quedaba como
+# poison pill si el servidor rechazaba el lote.
+rm -f "$PROJ"/.claude/state/outbox/*.json 2>/dev/null
+rm -f "$PROJ"/.claude/state/.handoff-* 2>/dev/null
+rm -f "$PROJ/.claude/state/build-state.json"
+cat > "$PROJ/.claude/state/build-state.json" <<'JSON'
+{"version":"1.0","harness_phase":"active","scaffold":{"confirmed":true},
+ "active_slice":{"epica":"EP-001","hus":["HU-001"],"openspec_change":"x","branch":"feature/x","phase":"tdd",
+   "gates":{"dor":true,"tdd":false,"dod":false},"updated_at":"2026-07-03T00:00:00Z","updated_by":"t","progress_log":[]},
+ "history":[],"releases":[]}
+JSON
+# Caché de proyección de un cliente dual real: sin claim vía runtime, active_slice llega null.
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"project\":{},\"active_slice\":null,\"nudges\":[]}"
+echo "{\"remaining_pct\":20,\"used_pct\":80,\"ts\":$(date +%s)}" > "$TMP/claude-ctx-cmdual.json"
+
+out="$(echo '{"session_id":"cmdual","hook_event_name":"PostToolUse"}' | TRYCORE_RUNTIME_MODE=dual bash "$ROOT/hooks/build/context-monitor.sh" 2>&1)"
+echo "$out" | grep -q 'additionalContext' && echo "OK context-monitor dual inyecta aviso" || { echo "FAIL sin aviso dual ($out)"; fail=1; }
+sc="$(python3 -c "import json;print(json.load(open('$PROJ/.claude/state/build-state.json'))['active_slice'].get('session_continuity',{}).get('critical_recorded'))" 2>/dev/null)"
+[ "$sc" = True ] && echo "OK context-monitor dual sigue escribiendo el fichero local" || { echo "FAIL dual no escribio build-state.json ($sc)"; fail=1; }
+n_ev="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' ! -name '.dispatch-state.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$n_ev" = 0 ] && echo "OK context-monitor dual sin slice_id NO encola handoff_recorded (evita poison pill)" || { echo "FAIL dual encolo handoff_recorded sin slice_id (n=$n_ev)"; fail=1; }
+
+rm -f "$PROJ/.claude/state/build-state.json"
+rm -f "$PROJ"/.claude/state/outbox/*.json 2>/dev/null
+rm -f "$PROJ"/.claude/state/.handoff-* 2>/dev/null
+# Restaura la caché de proyección que el bloque siguiente (statusline-bridge) da por sentada.
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"project\":{},\"active_slice\":{\"slice_id\":\"sl-11\",\"phase\":\"green\",\"gates\":{},\"wiring_failing\":[{\"item_id\":\"w1\",\"kind\":\"e2e\"}],\"resume_hint\":null},\"nudges\":[],\"context\":{\"version\":9}}"
+
+# --- statusline-bridge.sh: versión de contexto, stale y lease ---
+out="$(echo '{"session_id":"sl1","context_window":{"remaining_percentage":40}}' | bash "$ROOT/hooks/build/statusline-bridge.sh" 2>/dev/null)"
+echo "$out" | grep -q 'ctx 40%' && echo "OK statusline conserva el porcentaje de contexto" || { echo "FAIL statusline ctx% ($out)"; fail=1; }
+echo "$out" | grep -q 'v9' && echo "OK statusline muestra la version de contexto" || { echo "FAIL statusline version ($out)"; fail=1; }
+
+runtime_projection_write '{"fetched_at":"2000-01-01T00:00:00Z","project":{},"active_slice":null,"nudges":[],"context":{"version":9}}'
+out="$(echo '{"session_id":"sl2","context_window":{"remaining_percentage":40}}' | bash "$ROOT/hooks/build/statusline-bridge.sh" 2>/dev/null)"
+echo "$out" | grep -q 'stale' && echo "OK statusline marca stale" || { echo "FAIL statusline stale ($out)"; fail=1; }
+
+echo '{"lease_lost": true}' > "$PROJ/.claude/state/heartbeat-status.json"
+out="$(echo '{"session_id":"sl3","context_window":{"remaining_percentage":40}}' | bash "$ROOT/hooks/build/statusline-bridge.sh" 2>/dev/null)"
+echo "$out" | grep -q 'lease' && echo "OK statusline marca lease perdido" || { echo "FAIL statusline lease ($out)"; fail=1; }
+rm -f "$PROJ/.claude/state/heartbeat-status.json"
+
+# legacy: la statusline vuelve a su forma v0.8.5 (sin marcas de runtime).
+out="$(echo '{"session_id":"sl4","context_window":{"remaining_percentage":40}}' | TRYCORE_RUNTIME_MODE=legacy bash "$ROOT/hooks/build/statusline-bridge.sh" 2>/dev/null)"
+[ "$out" = "🏗️ build · ctx 40%" ] && echo "OK statusline legacy intacta" || { echo "FAIL statusline legacy ($out)"; fail=1; }
+unset TMPDIR
+
+# --- Stop adelgazado: nudges del runtime ---
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"project\":{},
+ \"active_slice\":{\"slice_id\":\"sl-11\",\"epic_code\":\"EP-009\",\"hus\":[\"HU-021\"],\"phase\":\"green\",
+   \"gates\":{\"dor\":true,\"tdd\":false},\"wiring_failing\":[]},
+ \"nudges\":[{\"kind\":\"reflect\",\"message\":\"2 slices archivados sin reflexionar\"},
+             {\"kind\":\"release_gate\",\"message\":\"3 épicas sin auditar desde el último release\"},
+             {\"kind\":\"info\",\"message\":\"ruido que no debe salir por los nudges tipados\"}]}"
+
+out="$(bash "$ROOT/hooks/build/build-gate-check.sh" 2>&1)"
+echo "$out" | grep -q 'tdd' && echo "OK build-gate-check runtime lista gates abiertos" || { echo "FAIL build-gate-check runtime ($out)"; fail=1; }
+out="$(bash "$ROOT/hooks/build/reflect-nudge.sh" 2>&1)"
+echo "$out" | grep -q 'sin reflexionar' && echo "OK reflect-nudge renderiza el nudge del runtime" || { echo "FAIL reflect-nudge ($out)"; fail=1; }
+echo "$out" | grep -q 'ruido' && { echo "FAIL reflect-nudge saca nudges de otro tipo"; fail=1; } || echo "OK reflect-nudge filtra por tipo"
+out="$(bash "$ROOT/hooks/build/release-gate-nudge.sh" 2>&1)"
+echo "$out" | grep -q 'sin auditar' && echo "OK release-gate-nudge renderiza el nudge del runtime" || { echo "FAIL release-gate-nudge ($out)"; fail=1; }
+
+# Los tres son no-bloqueantes SIEMPRE (exit 0), pase lo que pase.
+for h in build-gate-check reflect-nudge release-gate-nudge; do
+  bash "$ROOT/hooks/build/$h.sh" >/dev/null 2>&1
+  [ $? -eq 0 ] && echo "OK $h exit 0" || { echo "FAIL $h no salio 0"; fail=1; }
+done
+
+# Sin nudges y sin slice: silencio (nada que decir).
+runtime_projection_write "{\"fetched_at\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\",\"project\":{},\"active_slice\":null,\"nudges\":[]}"
+out="$(bash "$ROOT/hooks/build/reflect-nudge.sh" 2>&1; bash "$ROOT/hooks/build/build-gate-check.sh" 2>&1)"
+[ -z "$out" ] && echo "OK Stop silencioso sin nudges" || { echo "FAIL Stop ruidoso ($out)"; fail=1; }
+
+# --- session-stop.sh: sentinela de flush, sin red ---
+export TRYCORE_HEARTBEAT_TICK_S=1 TRYCORE_HEARTBEAT_INTERVAL_S=1
+rm -f "$TMP/curl-was-called" "$PROJ/.claude/state/outbox/.flush-request"
+mkdir -p "$TMP/fakebin"
+echo '#!/bin/bash' > "$TMP/fakebin/curl" && echo 'touch "$FAKE_CURL_MARK"' >> "$TMP/fakebin/curl" && chmod +x "$TMP/fakebin/curl"
+FAKE_CURL_MARK="$TMP/curl-was-called" PATH="$TMP/fakebin:$PATH" bash "$ROOT/hooks/build/session-stop.sh" >/dev/null 2>&1
+rc=$?
+[ $rc -eq 0 ] && echo "OK session-stop exit 0" || { echo "FAIL session-stop rc ($rc)"; fail=1; }
+[ -f "$PROJ/.claude/state/outbox/.flush-request" ] && echo "OK session-stop deja el sentinela de flush" || { echo "FAIL sin sentinela"; fail=1; }
+[ ! -f "$TMP/curl-was-called" ] && echo "OK session-stop no toca la red" || { echo "FAIL session-stop abrio socket"; fail=1; }
+
+rm -f "$PROJ/.claude/state/outbox/.flush-request"
+TRYCORE_RUNTIME_MODE=legacy bash "$ROOT/hooks/build/session-stop.sh" >/dev/null 2>&1
+[ ! -f "$PROJ/.claude/state/outbox/.flush-request" ] && echo "OK session-stop no-op en legacy" || { echo "FAIL session-stop actuo en legacy"; fail=1; }
+bash "$ROOT/hooks/build/heartbeat.sh" --stop >/dev/null 2>&1
+unset TRYCORE_HEARTBEAT_TICK_S TRYCORE_HEARTBEAT_INTERVAL_S
+
+# --- registro en los tres canales, sincronizados entre sí ---
+sync_check="$(ROOT="$ROOT" python3 <<'PY' 2>&1
+import json,os,re,sys
+root=os.environ["ROOT"]
+ts=open(os.path.join(root,"src/lib/settings-merge.ts")).read()
+block=re.search(r"HOOK_SPECS:\s*HookSpec\[\]\s*=\s*\[(.*?)\n\];", ts, re.S)
+if not block:
+    print("FALLO: no se pudo leer HOOK_SPECS de settings-merge.ts"); sys.exit(0)
+ts_specs={}
+for m in re.finditer(r"\{\s*event:\s*'([^']+)',\s*matcher:\s*'([^']*)',\s*scripts:\s*\[([^\]]*)\]", block.group(1)):
+    ev,matcher,scripts=m.group(1),m.group(2),m.group(3)
+    ts_specs[(ev,matcher)]=[s.strip().strip("'") for s in scripts.split(",") if s.strip()]
+
+def from_json(path):
+    d=json.load(open(os.path.join(root,path)))
+    out={}
+    for ev,groups in (d.get("hooks") or {}).items():
+        for g in groups:
+            key=(ev,g.get("matcher",""))
+            out.setdefault(key,[])
+            for h in (g.get("hooks") or []):
+                out[key].append(h["command"].rstrip('"').split("/hooks/build/")[-1])
+    return out
+
+plugin=from_json("hooks/build-harness.json")
+tmpl=from_json("templates/settings-hooks.template.json")
+problemas=[]
+for key in set(list(ts_specs.keys())+list(plugin.keys())+list(tmpl.keys())):
+    a,b,c=ts_specs.get(key),plugin.get(key),tmpl.get(key)
+    if not (a==b==c):
+        problemas.append(f"{key}: ts={a} plugin={b} template={c}")
+esperado={
+ ("SessionStart","startup|clear|compact"):["session-start.sh","load-build-state.sh"],
+ ("PreToolUse","Bash"):["gitflow-guard.sh"],
+ ("PreToolUse","Write|Edit|MultiEdit"):["stack-guard.sh","scaffold-guard.sh","design-source-guard.sh"],
+ ("PostToolUse","Write|Edit|MultiEdit"):["lint-typecheck.sh","coherence-flag.sh"],
+ ("PostToolUse","Bash|Edit|Write|MultiEdit|Task"):["context-monitor.sh","event-emitter.sh"],
+ ("PreCompact",".*"):["context-monitor.sh"],
+ ("Stop",".*"):["build-gate-check.sh","reflect-nudge.sh","release-gate-nudge.sh","dual-compare.sh","context-monitor.sh","session-stop.sh"],
+}
+if ts_specs!=esperado:
+    problemas.append(f"settings-merge.ts no coincide con el mapa objetivo: {ts_specs}")
+print("SYNC-OK" if not problemas else "SYNC-FAIL: "+" | ".join(problemas))
+PY
+)"
+echo "$sync_check" | grep -q '^SYNC-OK$' && echo "OK los tres canales registran los mismos hooks" || { echo "FAIL registro desincronizado: $sync_check"; fail=1; }
+
+# Los scripts registrados existen y son ejecutables.
+for s in session-start.sh load-build-state.sh gitflow-guard.sh stack-guard.sh scaffold-guard.sh \
+         design-source-guard.sh lint-typecheck.sh coherence-flag.sh context-monitor.sh \
+         event-emitter.sh build-gate-check.sh reflect-nudge.sh release-gate-nudge.sh dual-compare.sh session-stop.sh \
+         context-sync.sh heartbeat.sh; do
+  [ -x "$ROOT/hooks/build/$s" ] || { echo "FAIL $s no existe o no es ejecutable"; fail=1; }
+done
+echo "OK todos los hooks del mapa existen y son ejecutables"
+
+# Checklist de aceptación v0.9.0 [EP-OR-08-E, plan-migracion-harness-v0.9.md §3]: "Los 4
+# guards bloqueantes conservan latencia local (sin red en el camino de PreToolUse)". Ratchet
+# estático: ninguno de los 4 debe llamar curl/runtime_get/runtime_post/runtime_put/
+# _runtime_http/agent_context_fetch_and_cache — ni directo ni transitivo por lo que sourcean.
+for g in gitflow-guard.sh stack-guard.sh scaffold-guard.sh design-source-guard.sh; do
+  if grep -qE '\b(curl|runtime_get|runtime_post|runtime_put|_runtime_http|agent_context_fetch_and_cache)\b' "$ROOT/hooks/build/$g"; then
+    echo "FAIL $g toca la red -- PreToolUse debe permanecer 100% local (spec §3 checklist v0.9.0)"
+    fail=1
+  fi
+  if grep -qE "^\s*source .*lib/runtime-client\.sh" "$ROOT/hooks/build/$g"; then
+    echo "FAIL $g sourcea runtime-client.sh -- solo config.sh/state-io.sh/projection.sh son válidos en PreToolUse"
+    fail=1
+  fi
+done
+echo "OK los 4 guards de PreToolUse no tocan la red (ni directo ni por runtime-client.sh)"
+
+exit $fail