@trycore/spec-build-harness 0.8.5 → 0.11.0

package/scripts/tests/test-skill-ops.sh

@@ -0,0 +1,1367 @@
+#!/usr/bin/env bash
+# test-skill-ops.sh — operaciones de dominio que conducen las skills [EP-OR-08-C].
+# Cubre lib/runtime-ops.sh, slice-ops.sh, release-ops.sh y scripts/lib/graph-bundle.py
+# contra el stub HTTP local del sub-slice A (scripts/tests/lib/http-stub.py).
+set -uo pipefail
+ROOT="$(git rev-parse --show-toplevel)"
+fail=0
+TMP="$(mktemp -d)"
+PROJ="$TMP/proj"
+mkdir -p "$PROJ/.claude/state" "$PROJ/.claude/config"
+export CLAUDE_PROJECT_DIR="$PROJ"
+export BUILD_CONFIG_FILE="$PROJ/.claude/config/build-config.json"
+echo '{"runtime":{"mode":"runtime","stale_seconds":900}}' > "$BUILD_CONFIG_FILE"
+STUBS=""
+cleanup() {
+  for p in $STUBS; do kill "$p" 2>/dev/null; done
+  rm -rf "$TMP"
+}
+trap cleanup EXIT
+
+freeport() { python3 -c "import socket;s=socket.socket();s.bind(('',0));print(s.getsockname()[1]);s.close()"; }
+
+source "$ROOT/hooks/build/lib/runtime-ops.sh" 2>/dev/null || { echo "FAIL no existe lib/runtime-ops.sh"; exit 1; }
+
+# --- constantes del contrato ---
+[ "$OPS_RC_LEGACY" = 3 ] && [ "$OPS_RC_NO_SLICE" = 4 ] && [ "$OPS_RC_OFFLINE" = 5 ] \
+  && [ "$OPS_RC_REJECTED" = 6 ] && [ "$OPS_RC_NO_WORK" = 7 ] \
+  && echo "OK codigos de salida del contrato" || { echo "FAIL codigos de salida"; fail=1; }
+[ "$(ops_path_verdicts sl-1)" = "/slices/sl-1/verdicts" ] && echo "OK ops_path_verdicts" || { echo "FAIL ops_path_verdicts"; fail=1; }
+[ "$(ops_path_mirror p-1)" = "/projects/p-1/mirror/transitions" ] && echo "OK ops_path_mirror" || { echo "FAIL ops_path_mirror"; fail=1; }
+[ "$(ops_path_front_integration f-1 ak-1)" = "/fronts/f-1/members/ak-1/integration" ] && echo "OK ops_path_front_integration" || { echo "FAIL ops_path_front_integration"; fail=1; }
+
+# --- ops_json_str: comillas, saltos de línea y tildes por STDIN (nunca por argv) ---
+got="$(ops_json_str 'una "cita" con ñ y
+salto')"
+echo "$got" | python3 -c 'import json,sys; s=json.loads(sys.stdin.read()); print("SI" if s.count(chr(10))==1 and "ñ" in s and "\"cita\"" in s else "NO")' | grep -q SI \
+  && echo "OK ops_json_str escapa comillas/saltos/tildes" || { echo "FAIL ops_json_str ($got)"; fail=1; }
+[ "$(PATH=/var/empty ops_json_str hola)" = '""' ] && echo "OK ops_json_str sin python3 -> cadena vacia" || { echo "FAIL ops_json_str sin python3"; fail=1; }
+
+# --- ops_json_str_file: trunca en el tope y nunca lanza ---
+python3 -c "open('$TMP/big.txt','w').write('x'*9000)"
+got="$(ops_json_str_file "$TMP/big.txt" 100)"
+n="$(echo "$got" | python3 -c 'import json,sys; print(len(json.loads(sys.stdin.read())))')"
+[ "$n" -lt 200 ] && echo "OK ops_json_str_file trunca" || { echo "FAIL ops_json_str_file trunca ($n)"; fail=1; }
+[ "$(ops_json_str_file "$TMP/no-existe.txt")" = '""' ] && echo "OK ops_json_str_file fichero ausente" || { echo "FAIL ops_json_str_file ausente"; fail=1; }
+
+# --- ops_context_hashes: sha256 EFECTIVO local, no el del lock (detección de drift) ---
+mkdir -p "$PROJ/.claude/config"
+printf 'allow-list-v1' > "$PROJ/.claude/config/stack-allowlist.json"
+runtime_lock_write "sha256:v1" '[{"path":"config/stack-allowlist.json","sha256":"sha-del-servidor"},{"path":"rules/no-existe.md","sha256":"otro"}]'
+got="$(ops_context_hashes)"
+real="$(python3 -c "import hashlib;print(hashlib.sha256(open('$PROJ/.claude/config/stack-allowlist.json','rb').read()).hexdigest())")"
+# Contrato del hub (#36): `TasksNextIn.context_hashes` es `dict[str, str]` — una LISTA
+# provoca 422 dict_type en TODO claim. Se exige {path: sha}, jamás [{"path":…}].
+echo "$got" | python3 -c "
+import json,sys
+d=json.load(sys.stdin)
+print('SI' if isinstance(d,dict) and d.get('config/stack-allowlist.json')=='$real' else 'NO')" | grep -q SI \
+  && echo "OK ops_context_hashes emite dict {path: sha} con el sha local efectivo" || { echo "FAIL ops_context_hashes ($got)"; fail=1; }
+echo "$got" | python3 -c 'import json,sys; d=json.load(sys.stdin); print("SI" if d.get("rules/no-existe.md")=="" else "NO")' | grep -q SI \
+  && echo "OK ops_context_hashes marca \"\" el fichero ausente (el dict del hub no admite null)" || { echo "FAIL ops_context_hashes ausente ($got)"; fail=1; }
+[ "$(PATH=/var/empty ops_context_hashes)" = "{}" ] && echo "OK ops_context_hashes sin python3 -> {}" || { echo "FAIL ops_context_hashes sin python3"; fail=1; }
+
+# --- ops_enqueue_from_file: payload por FICHERO (sin límite de ARG_MAX) ---
+python3 -c "
+import json
+json.dump({'items':[{'item_id':'w%d'%i,'kind':'e2e'} for i in range(4000)]}, open('$TMP/payload.json','w'))"
+ops_enqueue_from_file wiring_checklist_seeded "$TMP/payload.json" sl-1
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' ! -name '.dispatch-state.json' | wc -l | tr -d ' ')"
+[ "$n" = 1 ] && echo "OK ops_enqueue_from_file encola 1 evento grande" || { echo "FAIL ops_enqueue_from_file ($n)"; fail=1; }
+f="$(find "$PROJ/.claude/state/outbox" -name '*.json' | head -1)"
+python3 -c "
+import json,sys
+d=json.load(open('$f'))
+ok = d['type']=='wiring_checklist_seeded' and d.get('slice_id')=='sl-1' and len(d['payload']['items'])==4000
+print('SI' if ok else 'NO')" | grep -q SI && echo "OK ops_enqueue_from_file conserva tipo/slice_id/payload" || { echo "FAIL contenido del evento encolado"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# --- lista protegida: nombres del catálogo v2 del hub [#44] ---
+# (#38: los hechos máquina viajan como UN solo tipo del catálogo v2, project_fact_updated;
+# #44: los tipos protegidos llevan el NOMBRE del catálogo — proteger de la evicción un tipo
+# que el hub va a rechazar era absurdo. Los alias 0.10.x de los cuatro renombrados siguen
+# protegidos porque la capa de compat del despacho los traduce y entrega.)
+for t in slice_archived wiring_item_updated slice_escalated gate_verdict checkpoint_recorded \
+         project_fact_updated wiring_checklist_seeded slice_submitted handoff_recorded telemetry_gap \
+         checkpoint_created verdict_reported escalation_raised; do
+  case " $RUNTIME_OUTBOX_PROTECTED " in
+    *" $t "*) : ;;
+    *) echo "FAIL $t no está en RUNTIME_OUTBOX_PROTECTED"; fail=1 ;;
+  esac
+done
+# Tipos sin equivalente en el catálogo: fuera de la lista (el hub los rechazaría siempre).
+for t in front_integration_reported branch_drift tool_use_recorded progress_noted progress_note_recorded; do
+  case " $RUNTIME_OUTBOX_PROTECTED " in
+    *" $t "*) echo "FAIL $t no debe estar en RUNTIME_OUTBOX_PROTECTED"; fail=1 ;;
+    *) : ;;
+  esac
+done
+echo "OK lista protegida con nombres del catálogo v2 (si no hubo FAIL arriba)"
+# Regresión de comportamiento (no de la constante): 6 MB de tool_use + 1 slice_archived.
+runtime_enqueue_event slice_archived '{"epic_code":"EP-001"}' sl-1
+python3 - "$PROJ/.claude/state/outbox" <<'PY'
+import json,os,sys,uuid,datetime
+d=sys.argv[1]
+big="y"*700000
+for i in range(10):
+    cid=str(uuid.uuid4())
+    ts=datetime.datetime.now(datetime.timezone.utc)
+    json.dump({"client_event_id":cid,"type":"tool_use_recorded","payload":{"blob":big},
+               "enqueued_at":ts.strftime("%Y-%m-%dT%H:%M:%S.%fZ")},
+              open(os.path.join(d,ts.strftime("%Y%m%d%H%M%S%f")+"-"+cid+".json"),"w"))
+PY
+runtime_outbox_enforce_cap >/dev/null
+if grep -lq '"type": "slice_archived"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null; then
+  echo "OK la cota conserva slice_archived"
+else
+  echo "FAIL la cota evictó slice_archived"; fail=1
+fi
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# --- ops_mirror: sólo tiene sentido con project_id; nunca lanza sin él ---
+ops_mirror gate_reported "$TMP/payload.json"; rc=$?
+[ "$rc" -ne 0 ] && echo "OK ops_mirror sin credenciales -> rc != 0" || { echo "FAIL ops_mirror sin credenciales"; fail=1; }
+
+# ══════════════ slice-ops.sh: mode / claim / next-step [Task 2] ══════════════
+SO="$ROOT/hooks/build/slice-ops.sh"
+
+# legacy: no-op absoluto, rc 3, y CERO red (curl falso al frente del PATH, subshell aislado).
+mkdir -p "$TMP/fakebin"
+cat > "$TMP/fakebin/curl" <<'FAKE'
+#!/usr/bin/env bash
+echo "$@" >> "$FAKE_CURL_LOG"
+exit 0
+FAKE
+chmod +x "$TMP/fakebin/curl"
+: > "$TMP/curl-legacy.log"
+rc=0
+out="$(bash -c "PATH=\"$TMP/fakebin:\$PATH\" FAKE_CURL_LOG=\"$TMP/curl-legacy.log\" TRYCORE_RUNTIME_MODE=legacy CLAUDE_PROJECT_DIR=\"$PROJ\" BUILD_CONFIG_FILE=\"$BUILD_CONFIG_FILE\" bash \"$SO\" claim")" || rc=$?
+[ "$rc" = 3 ] && echo "OK claim en legacy -> rc 3" || { echo "FAIL claim legacy rc ($rc)"; fail=1; }
+echo "$out" | grep -q LEGACY && echo "OK claim en legacy anuncia LEGACY" || { echo "FAIL claim legacy stdout ($out)"; fail=1; }
+[ ! -s "$TMP/curl-legacy.log" ] && echo "OK claim en legacy no abre socket" || { echo "FAIL claim legacy tocó la red"; fail=1; }
+
+# dual: tampoco reclama (el fichero decide el slice — spec §6.1).
+rc=0; out="$(TRYCORE_RUNTIME_MODE=dual bash "$SO" claim)" || rc=$?
+[ "$rc" = 3 ] && echo "OK claim en dual -> rc 3" || { echo "FAIL claim dual rc ($rc)"; fail=1; }
+echo "$out" | grep -q DUAL_NO_CLAIM && echo "OK claim en dual anuncia DUAL_NO_CLAIM" || { echo "FAIL claim dual stdout ($out)"; fail=1; }
+
+# runtime: claim feliz -> 200, refresca la caché y rinde el slice.
+PORT_CL="$(freeport)"
+cat > "$TMP/routes-cl.json" <<JSON
+{"POST /tasks/next": {"status": 200, "body": {"slice_id": "sl-7", "epic_code": "EP-003", "epic_title": "Cobros", "phase": "dor", "gates": {"dor": false}, "branch_base": "main", "openspec_change": "add-cobros", "docs_ref": "docs/03-backlog/epicas.md#ep-003", "stories": ["HU-011"], "lease": {"ttl_s": 300, "expires_at": "2026-08-19T12:00:00Z"}, "manifest_hash": "sha256:v1", "checkpoint": null}},
+ "GET /agent/context": {"status": 200, "body": {"project": {"scaffold_confirmed": true}, "active_slice": {"slice_id": "sl-7", "epic_code": "EP-003", "phase": "dor", "gates": {"dor": false, "tdd": false}, "branch": "feature/cobros", "wiring_failing": [{"item_id": "w1", "kind": "e2e"}], "resume_hint": "cablear w1"}, "context": {"manifest_hash": "sha256:v1", "version": 4}}},
+ "GET /projects/p-1/context/manifest": {"status": 200, "body": {"manifest_hash": "sha256:v1", "files": []}}}
+JSON
+: > "$TMP/calls-cl.jsonl"
+python3 "$ROOT/scripts/tests/lib/http-stub.py" "$PORT_CL" "$TMP/routes-cl.json" "$TMP/calls-cl.jsonl" &
+STUBS="$STUBS $!"
+sleep 0.3
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_CL\",\"project_token\":\"tok-c\",\"project_id\":\"p-1\",\"agent_key\":\"ak-1\",\"manifest_hash\":\"sha256:v1\"}"
+
+# (#39) `claim --epic` NO existe en el protocolo del hub: `TasksNextIn` no declara
+# epic_code (pydantic lo ignoraba y la cola repartía OTRA épica con claim "exitoso").
+# Debe fallar EXPLÍCITO antes de tocar la red.
+: > "$TMP/calls-cl.jsonl"
+rc=0; err="$(bash "$SO" claim --epic EP-003 2>&1 >/dev/null)" || rc=$?
+[ "$rc" = 2 ] && echo "OK claim --epic en runtime -> rc 2 (uso, sin red)" || { echo "FAIL claim --epic rc ($rc)"; fail=1; }
+echo "$err" | grep -qi "cola" && echo "$err" | grep -q "epic" \
+  && echo "OK claim --epic explica que el hub reparte por orden de cola" || { echo "FAIL mensaje de claim --epic ($err)"; fail=1; }
+grep -q '"path": "/tasks/next"' "$TMP/calls-cl.jsonl" && { echo "FAIL claim --epic llamó a la red"; fail=1; } \
+  || echo "OK claim --epic no abre socket"
+
+rc=0; out="$(bash "$SO" claim)" || rc=$?
+[ "$rc" = 0 ] && echo "OK claim 200 -> rc 0" || { echo "FAIL claim 200 rc ($rc)"; fail=1; }
+echo "$out" | grep -q "sl-7" && echo "OK claim rinde el slice reclamado" || { echo "FAIL claim render ($out)"; fail=1; }
+[ "$(python3 - "$TMP/calls-cl.jsonl" <<'PYX'
+import json,sys
+ok=False
+for line in open(sys.argv[1]):
+    c=json.loads(line)
+    if c["path"]=="/tasks/next":
+        b=json.loads(c["body"])
+        # POST siempre: el GET no acepta el reporte de hashes (spec §3.1 rev. 4).
+        # (#36) context_hashes es DICT (ClaimIn del hub: dict[str,str]); (#39) epic_code
+        # jamás viaja — el hub no lo declara y lo ignoraría en silencio.
+        ok = c["method"]=="POST" and isinstance(b.get("context_hashes"), dict) and "epic_code" not in b
+print("SI" if ok else "NO")
+PYX
+)" = SI ] && echo "OK el claim usa POST con context_hashes dict y sin epic_code" || { echo "FAIL cuerpo/método del claim"; fail=1; }
+[ "$(projection_get active_slice.slice_id "")" = "sl-7" ] && echo "OK el claim refresca la caché de proyección" || { echo "FAIL la caché no se refrescó"; fail=1; }
+
+# next-step: deriva del cliente (spec §2), prioridad resume_hint > wiring > sub-slices > gate.
+out="$(bash "$SO" next-step)"
+echo "$out" | grep -q "cablear w1" && echo "OK next-step prioriza resume_hint" || { echo "FAIL next-step ($out)"; fail=1; }
+
+# 204: sin trabajo.
+python3 - "$TMP/routes-cl.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /tasks/next"]={"status":204,"body":{}}
+json.dump(d,open(p,"w"))
+PYX
+rc=0; out="$(bash "$SO" claim)" || rc=$?
+[ "$rc" = 7 ] && echo "OK claim 204 -> rc 7 (NO_WORK)" || { echo "FAIL claim 204 rc ($rc)"; fail=1; }
+
+# 409 por CUERPO: contexto irresoluble no se reintenta.
+python3 - "$TMP/routes-cl.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /tasks/next"]={"status":409,"body":{"reason":"context_unresolvable","detail":"falta publicar el manifiesto"}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-cl.jsonl"
+rc=0; bash "$SO" claim >/dev/null 2>&1 || rc=$?
+[ "$rc" = 6 ] && echo "OK 409 context_unresolvable -> rc 6" || { echo "FAIL 409 irresoluble rc ($rc)"; fail=1; }
+n="$(grep -c '"path": "/tasks/next"' "$TMP/calls-cl.jsonl")"
+[ "$n" = 1 ] && echo "OK 409 irresoluble NO se reintenta" || { echo "FAIL se reintentó un 409 irresoluble ($n)"; fail=1; }
+
+# 409 por contención: un reintento y, si persiste, NO_WORK.
+python3 - "$TMP/routes-cl.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /tasks/next"]={"status":409,"body":{"reason":"contention"}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-cl.jsonl"
+rc=0; bash "$SO" claim >/dev/null 2>&1 || rc=$?
+[ "$rc" = 7 ] && echo "OK 409 contención agotada -> rc 7" || { echo "FAIL 409 contención rc ($rc)"; fail=1; }
+n="$(grep -c '"path": "/tasks/next"' "$TMP/calls-cl.jsonl")"
+[ "$n" = 2 ] && echo "OK 409 contención reintenta exactamente una vez" || { echo "FAIL reintentos de contención ($n)"; fail=1; }
+
+# 409 por DRIFT: el reintento debe refrescar el estado REAL del servidor (GET
+# /agent/context) antes de forzar el resync. Pasar "" a context-sync.sh es un no-op en
+# este escenario: su fallback cae en runtime.credentials.manifest_hash (caché del último
+# /agents/register), que en drift YA coincide con el lock local — eso es justo lo que
+# distingue "drift" del estado real del servidor — y el primer guard de context-sync.sh
+# corta en seco sin llegar a preguntarle nada al servidor (regresión del hallazgo de
+# revisión: 0 llamadas a /agent/context y 0 al manifiesto real).
+python3 - "$TMP/routes-cl.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /tasks/next"]={"status":409,"body":{"reason":"drift"}}
+d["GET /agent/context"]["body"]["context"]["manifest_hash"]="sha256:v9"
+d["GET /projects/p-1/context/manifest"]["body"]["manifest_hash"]="sha256:v9"
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-cl.jsonl"
+rc=0; bash "$SO" claim >/dev/null 2>&1 || rc=$?
+[ "$rc" = 7 ] && echo "OK 409 drift agotado -> rc 7" || { echo "FAIL 409 drift rc ($rc)"; fail=1; }
+n="$(grep -c '"path": "/tasks/next"' "$TMP/calls-cl.jsonl")"
+[ "$n" = 2 ] && echo "OK 409 drift reintenta exactamente una vez" || { echo "FAIL reintentos de drift ($n)"; fail=1; }
+n_ctx="$(grep -c '"path": "/agent/context"' "$TMP/calls-cl.jsonl")"
+[ "$n_ctx" -ge 1 ] && echo "OK 409 drift refresca /agent/context (no confía en la caché de credenciales)" || { echo "FAIL 409 drift no refrescó /agent/context ($n_ctx)"; fail=1; }
+n_mani="$(grep -c '"path": "/projects/p-1/context/manifest"' "$TMP/calls-cl.jsonl")"
+[ "$n_mani" -ge 1 ] && echo "OK 409 drift fuerza el GET del manifiesto real (el guard de context-sync.sh no corta en seco)" || { echo "FAIL 409 drift no forzó el manifiesto real ($n_mani)"; fail=1; }
+[ "$(runtime_lock_manifest_hash)" = "sha256:v9" ] \
+  && echo "OK 409 drift converge el lock al manifiesto real del servidor" || { echo "FAIL el lock no convergió tras el drift"; fail=1; }
+
+# 401: token revocado -> rechazo accionable, sin reintento.
+python3 - "$TMP/routes-cl.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /tasks/next"]={"status":401,"body":{"error":"invalid_token"}}
+json.dump(d,open(p,"w"))
+PYX
+rc=0; err="$(bash "$SO" claim 2>&1 >/dev/null)" || rc=$?
+[ "$rc" = 6 ] && echo "OK 401 -> rc 6" || { echo "FAIL 401 rc ($rc)"; fail=1; }
+echo "$err" | grep -qi "ADMIN" && echo "OK 401 da mensaje accionable" || { echo "FAIL 401 sin mensaje accionable"; fail=1; }
+
+# Runtime caído: OFFLINE, y la caché previa intacta. El puerto 9 (discard) está siempre
+# cerrado en el loopback: no hace falta matar el stub, que sigue sirviendo a otros bloques.
+runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9"}'
+rc=0; bash "$SO" claim >/dev/null 2>&1 || rc=$?
+[ "$rc" = 5 ] && echo "OK claim offline -> rc 5" || { echo "FAIL claim offline rc ($rc)"; fail=1; }
+[ "$(projection_get active_slice.slice_id "")" = "sl-7" ] && echo "OK claim offline preserva la caché" || { echo "FAIL la caché se perdió offline"; fail=1; }
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_CL\"}"
+
+# ══════════════ slice-ops.sh: fact / propose-asset [Task 5] ══════════════
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# (#38) Hechos HUMANOS: el catálogo v2 del hub los rechaza en TODA superficie de agente
+# (HECHOS_HUMANOS en project_facts_domain) — se fijan tras el PDP por la superficie admin
+# (PATCH /orchestrator/projects/{project_id}). En runtime/dual NO se encola: rechazo local
+# con mensaje que dirige al humano a la consola del hub.
+rc=0; err="$(bash "$SO" fact scaffold-confirmed --by "ana@equipo" --notes "npm run dev arranca vacío" 2>&1 >/dev/null)" || rc=$?
+[ "$rc" = 6 ] && echo "OK fact scaffold-confirmed en runtime -> rc 6 (hecho humano)" || { echo "FAIL fact scaffold rc ($rc)"; fail=1; }
+echo "$err" | grep -q "PATCH /orchestrator/projects" \
+  && echo "OK el rechazo del hecho humano nombra la superficie admin" || { echo "FAIL mensaje de scaffold-confirmed ($err)"; fail=1; }
+[ "$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')" = 0 ] \
+  && echo "OK el hecho humano NO se encola (adiós reintento eterno)" || { echo "FAIL scaffold-confirmed encoló"; fail=1; }
+
+rc=0; err="$(bash "$SO" fact design-source --applies true --source "docs/05-prototipo/index.html" --confirmed true --by "ana@equipo" 2>&1 >/dev/null)" || rc=$?
+[ "$rc" = 6 ] && echo "$err" | grep -q "PATCH /orchestrator/projects" \
+  && echo "OK fact design-source en runtime -> rc 6 con remisión al admin" || { echo "FAIL fact design-source ($rc: $err)"; fail=1; }
+
+# (#38) Hechos MÁQUINA: UN solo tipo del catálogo v2, `project_fact_updated`, con el
+# payload EXACTO {fact, value, source:"AGENT"} (extra="forbid" en el hub), SIN slice_id.
+rc=0; bash "$SO" fact project-kind greenfield --source human >/dev/null || rc=$?
+[ "$rc" = 0 ] && echo "OK fact project-kind -> rc 0" || { echo "FAIL fact project-kind rc ($rc)"; fail=1; }
+f="$(grep -l '"fact": "project_kind"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 - "$f" <<'PYX'
+import json,sys
+d=json.load(open(sys.argv[1]))
+ok = d.get("type")=="project_fact_updated" and "slice_id" not in d \
+  and d.get("payload")=={"fact":"project_kind","value":"greenfield","source":"AGENT"}
+print("SI" if ok else "NO")
+PYX
+)" = SI ] \
+  && echo "OK project-kind viaja como project_fact_updated {fact,value,source} sin slice_id" \
+  || { echo "FAIL payload de project-kind"; fail=1; }
+
+echo '[{"id":"homepage","applies":true},{"id":"login-authn","applies":false}]' > "$TMP/checklist.json"
+rc=0; bash "$SO" fact foundation --required true --epic EP-000 --checklist-file "$TMP/checklist.json" >/dev/null || rc=$?
+f="$(grep -l '"fact": "foundation"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+# El hub proyecta foundation a un Boolean: el value es bool, sin epic/checklist extra
+# (extra=forbid los rechazaría); la checklist queda en los docs locales.
+[ "$rc" = 0 ] && [ -n "$f" ] && [ "$(python3 - "$f" <<'PYX'
+import json,sys
+p=json.load(open(sys.argv[1]))["payload"]
+print("SI" if p=={"fact":"foundation","value":True,"source":"AGENT"} else "NO")
+PYX
+)" = SI ] \
+  && echo "OK fact foundation viaja como project_fact_updated con value booleano" || { echo "FAIL fact foundation"; fail=1; }
+
+rc=0; bash "$SO" fact harness-phase building >/dev/null || rc=$?
+f="$(grep -l '"fact": "harness_phase"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ "$rc" = 0 ] && [ -n "$f" ] && [ "$(python3 - "$f" <<'PYX'
+import json,sys
+p=json.load(open(sys.argv[1]))["payload"]
+print("SI" if p=={"fact":"harness_phase","value":"building","source":"AGENT"} else "NO")
+PYX
+)" = SI ] \
+  && echo "OK fact harness-phase viaja como project_fact_updated" || { echo "FAIL fact harness-phase"; fail=1; }
+
+# Valor inválido: rechazo local, sin encolar.
+rm -f "$PROJ/.claude/state/outbox/"*.json
+rc=0; bash "$SO" fact project-kind marciano >/dev/null 2>&1 || rc=$?
+[ "$rc" = 6 ] && [ "$(find "$PROJ/.claude/state/outbox" -name '*.json' | wc -l | tr -d ' ')" = 0 ] \
+  && echo "OK fact con valor inválido -> rc 6 sin encolar" || { echo "FAIL fact inválido ($rc)"; fail=1; }
+
+# Regresión: si ops_enqueue_from_file falla (outbox no escribible: permisos, disco lleno,
+# excepción de python3), _fact_emit NUNCA debe reportar éxito -- ni rc 0 ni el mensaje
+# "encolado". Condición REAL (no simulada): quitamos permiso de escritura al directorio
+# outbox y confirmamos que mkdir/tempfile fallan de verdad antes de aserir el rc.
+rm -f "$PROJ/.claude/state/outbox/"*.json
+chmod 555 "$PROJ/.claude/state/outbox"
+rc=0; out="$(bash "$SO" fact project-kind greenfield 2>&1)" || rc=$?
+chmod 755 "$PROJ/.claude/state/outbox"
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = "$OPS_RC_OFFLINE" ] && [ "$n" = 0 ] && ! echo "$out" | grep -q 'encolado' \
+  && echo "OK fact con outbox no escribible -> rc distinguible, sin encolar, sin aviso de éxito" \
+  || { echo "FAIL fact con outbox no escribible (rc=$rc n=$n out=$out)"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# propose-asset: cuerpo {path, type_key, content} contra la superficie de AGENTE.
+# El http-stub sigue usando routes-cl.json, así que agregamos la nueva ruta ahí.
+python3 - "$TMP/routes-cl.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /projects/p-1/context/agent-proposals"]={"status":202,"body":{"proposal_id":"pr-1","status":"pending_admin"}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-cl.jsonl"
+printf -- '---\nstyle: hexagonal\n---\n# Estilo elegido\nHexagonal.\n' > "$TMP/asset.md"
+rc=0; out="$(bash "$SO" propose-asset --type-key arch.style --path "docs/adr/0001-estilo.md" --content-file "$TMP/asset.md")" || rc=$?
+[ "$rc" = 0 ] && echo "OK propose-asset -> rc 0" || { echo "FAIL propose-asset rc ($rc)"; fail=1; }
+echo "$out" | grep -qi "ADMIN" && echo "OK propose-asset recuerda que publica un ADMIN" || { echo "FAIL propose-asset sin aviso de gobierno"; fail=1; }
+[ "$(python3 - "$TMP/calls-cl.jsonl" <<'PYX'
+import json,sys
+ok=False
+for line in open(sys.argv[1]):
+    c=json.loads(line)
+    if c["path"]=="/projects/p-1/context/agent-proposals":
+        b=json.loads(c["body"])
+        ok = set(b.keys())=={"path","type_key","content"} and "hexagonal" in b["content"]
+print("SI" if ok else "NO")
+PYX
+)" = SI ] && echo "OK propose-asset manda exactamente {path,type_key,content}" || { echo "FAIL cuerpo de propose-asset"; fail=1; }
+
+# 422 del schema del tipo: razón visible, sin reintento.
+python3 - "$TMP/routes-cl.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /projects/p-1/context/agent-proposals"]={"status":422,"body":{"error":"frontmatter_schema","detail":"falta 'style'"}}
+json.dump(d,open(p,"w"))
+PYX
+rc=0; err="$(bash "$SO" propose-asset --type-key arch.style --path "x.md" --content-file "$TMP/asset.md" 2>&1 >/dev/null)" || rc=$?
+[ "$rc" = 6 ] && echo "$err" | grep -q "style" && echo "OK propose-asset 422 muestra la razón" || { echo "FAIL propose-asset 422 ($rc)"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# ══════════════ slice-ops.sh: status / escalate / usage [Task 6] ══════════════
+out="$(bash "$SO" status --no-refresh)"
+rc=$?
+[ "$rc" = 0 ] && echo "OK status -> rc 0" || { echo "FAIL status rc ($rc)"; fail=1; }
+echo "$out" | grep -q "modo:" && echo "$out" | grep -q "sl-7" && echo "$out" | grep -qi "cola" \
+  && echo "OK status informa modo, slice y cola" || { echo "FAIL status incompleto: $out"; fail=1; }
+
+# status es informativo: NUNCA falla aunque no haya nada.
+rm -f "$PROJ/.claude/state/runtime-projection.json"
+rc=0; out="$(TRYCORE_RUNTIME_MODE=legacy bash "$SO" status --no-refresh)" || rc=$?
+[ "$rc" = 0 ] && echo "OK status en legacy sin caché -> rc 0" || { echo "FAIL status legacy rc ($rc)"; fail=1; }
+agent_context_fetch_and_cache
+
+# escalate: evento tipado + instrucción de gobierno humano.
+# [#44] El catálogo v2 lo llama `slice_escalated` y su payload es EXACTAMENTE {cause}
+# (extra="forbid" en el hub): gate y fase viajan DENTRO del texto de la causa.
+rm -f "$PROJ/.claude/state/outbox/"*.json
+rc=0; out="$(bash "$SO" escalate "el AC-3 contradice el prototipo" --gate fidelity)" || rc=$?
+[ "$rc" = 0 ] && echo "OK escalate -> rc 0" || { echo "FAIL escalate rc ($rc)"; fail=1; }
+f="$(grep -l '"type": "slice_escalated"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 -c "
+import json;d=json.load(open('$f'))
+p=d['payload']
+ok = set(p.keys())=={'cause'} and 'fidelity' in p['cause'] and 'AC-3' in p['cause'] and d.get('slice_id')=='sl-7'
+print('SI' if ok else 'NO')")" = SI ] \
+  && echo "OK escalate encola slice_escalated {cause} (gate y fase dentro del texto) con slice_id" || { echo "FAIL payload de escalate"; fail=1; }
+echo "$out" | grep -qi "human" && echo "OK escalate declara que la decisión es humana" || { echo "FAIL escalate sin nota de gobierno"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# Regresión: si ops_enqueue_from_file falla (outbox no escribible), escalate NUNCA debe
+# reportar éxito -- ni rc 0, ni el mensaje "registrada", ni la nota de gobierno humano
+# (que solo tiene sentido si el evento de verdad quedó registrado). Condición REAL: quitamos
+# permiso de escritura al directorio outbox, igual que en la regresión de `fact` de arriba.
+rm -f "$PROJ/.claude/state/outbox/"*.json
+chmod 555 "$PROJ/.claude/state/outbox"
+rc=0; out="$(bash "$SO" escalate "el AC-3 contradice el prototipo" --gate fidelity 2>&1)" || rc=$?
+chmod 755 "$PROJ/.claude/state/outbox"
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = "$OPS_RC_OFFLINE" ] && [ "$n" = 0 ] && ! echo "$out" | grep -qi "registrada" \
+  && echo "OK escalate con outbox no escribible -> rc distinguible, sin encolar, sin aviso de éxito" \
+  || { echo "FAIL escalate con outbox no escribible (rc=$rc n=$n out=$out)"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# usage: lista los 13 subcomandos REALMENTE implementados (contrato con la prosa de las
+# skills) — el plan queda completo con la Task 4 (wiring/progress/checkpoint).
+usage_out="$(bash "$SO" --help 2>&1)"
+for sub in mode claim next-step gate submit archive wiring progress checkpoint fact propose-asset status escalate; do
+  echo "$usage_out" | grep -q -- "$sub" || { echo "FAIL usage no documenta $sub"; fail=1; }
+done
+echo "$usage_out" | grep -qi "pendientes" \
+  && { echo "FAIL usage todavía anuncia pendientes tras completar la Task 4"; fail=1; } \
+  || echo "OK usage documenta los 13 subcomandos como implementados, sin pendientes"
+
+# Regresión de modo LEGACY sobre TODOS los subcomandos IMPLEMENTADOS que transicionan:
+# rc 3 y cero red (los 13, ya con wiring/progress/checkpoint de la Task 4).
+: > "$TMP/curl-legacy.log"
+for sub in "gate tdd pass" "submit" "archive" "wiring update w1 passing" "progress algo" "checkpoint --note algo" "fact project-kind greenfield" "propose-asset --type-key t --path p --content-file $TMP/asset.md" "escalate algo --gate fidelity"; do
+  rc=0
+  bash -c "PATH=\"$TMP/fakebin:\$PATH\" FAKE_CURL_LOG=\"$TMP/curl-legacy.log\" TRYCORE_RUNTIME_MODE=legacy CLAUDE_PROJECT_DIR=\"$PROJ\" BUILD_CONFIG_FILE=\"$BUILD_CONFIG_FILE\" bash \"$SO\" $sub" >/dev/null 2>&1 || rc=$?
+  [ "$rc" = 3 ] || { echo "FAIL «${sub}» en legacy devolvió $rc (esperado 3)"; fail=1; }
+done
+[ ! -s "$TMP/curl-legacy.log" ] && echo "OK los subcomandos implementados no tocan la red en legacy" || { echo "FAIL algún subcomando abrió socket en legacy"; fail=1; }
+
+# ══════════════ release-ops.sh [Task 7] ══════════════
+RO="$ROOT/hooks/build/release-ops.sh"
+python3 - "$TMP/routes-cl.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /releases/R1-mvp/verdicts"]={"status":200,"body":{"ok":True}}
+d["POST /fronts/fr-1/members/ak-1/integration"]={"status":200,"body":{"ok":True}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-cl.jsonl"
+
+# Gate de release desconocido: rechazo local, sin red.
+rc=0; bash "$RO" verdict R1-mvp tdd pass >/dev/null 2>&1 || rc=$?
+[ "$rc" = 6 ] && echo "OK verdict de release con gate de slice -> rc 6" || { echo "FAIL gate de release inválido ($rc)"; fail=1; }
+
+# Regresión: bajo `set -u`, este bash (3.2.57) confunde el límite del nombre de una
+# variable cuando queda pegada sin separador a un carácter multibyte como «»» — "$var»"
+# revienta con "unbound variable" aunque $var esté definida; "${var}»" no. Reproducido
+# de forma aislada antes de corregir (script mínimo: set -u; x=1; echo "«$x»" -> revienta).
+# El mensaje de rechazo debe interpolar el gate real y NO reventar por este bug.
+errout="$(bash -c "PATH=\"$TMP/fakebin:\$PATH\" CLAUDE_PROJECT_DIR=\"$PROJ\" BUILD_CONFIG_FILE=\"$BUILD_CONFIG_FILE\" bash \"$RO\" verdict R1-mvp tdd pass" 2>&1 >/dev/null)"
+echo "$errout" | grep -q "«tdd»" && echo "OK el gate rechazado se interpola literal (no «\$gate» roto)" || { echo "FAIL el mensaje de gate rechazado no interpola: $errout"; fail=1; }
+echo "$errout" | grep -qi "unbound variable" && { echo "FAIL el rechazo de gate revienta por el bug de bash 3.2 en «\$var»"; fail=1; } || echo "OK el rechazo de gate no revienta por el bug de bash 3.2 en «\$var»"
+
+# Veredicto feliz: los 6 gates del Release Gate son hechos MEDIDOS (superficie de agente).
+rc=0; bash "$RO" verdict R1-mvp security pass --evidence "0 hallazgos bloqueantes" >/dev/null || rc=$?
+[ "$rc" = 0 ] && echo "OK verdict de release -> rc 0" || { echo "FAIL verdict de release rc ($rc)"; fail=1; }
+[ "$(python3 - "$TMP/calls-cl.jsonl" <<'PYX'
+import json,sys
+ok=False
+for line in open(sys.argv[1]):
+    c=json.loads(line)
+    if c["path"]=="/releases/R1-mvp/verdicts":
+        b=json.loads(c["body"])
+        ok = b["gate"]=="security" and b["status"]=="pass" and "bloqueantes" in b["evidence"]
+print("SI" if ok else "NO")
+PYX
+)" = SI ] && echo "OK el veredicto de release viaja completo" || { echo "FAIL cuerpo del veredicto de release"; fail=1; }
+
+# `na` es legítimo (ux en una release sin UI).
+rc=0; bash "$RO" verdict R1-mvp ux na >/dev/null || rc=$?
+[ "$rc" = 0 ] && echo "OK verdict na" || { echo "FAIL verdict na ($rc)"; fail=1; }
+
+# El CIERRE es humano: close-hint no toca la red y lo dice.
+: > "$TMP/calls-cl.jsonl"
+out="$(bash "$RO" close-hint R1-mvp)"
+rc=$?
+[ "$rc" = 0 ] && [ ! -s "$TMP/calls-cl.jsonl" ] && echo "OK close-hint no llama al runtime" || { echo "FAIL close-hint tocó la red ($rc)"; fail=1; }
+echo "$out" | grep -qi "consola" && echo "OK close-hint remite a la consola humana" || { echo "FAIL close-hint sin instrucción de gobierno"; fail=1; }
+
+# Regresión: close-hint interpola la línea real (heredoc SIN comillas), no el literal "$line"
+# — con varias releases abiertas en paralelo el hint debe decir a cuál se refiere.
+echo "$out" | grep -q '«R1-mvp»' && echo "OK close-hint interpola la línea real" || { echo "FAIL close-hint no interpola \$line: $out"; fail=1; }
+echo "$out" | grep -q '\$line' && { echo "FAIL close-hint imprime el literal \$line en vez del valor"; fail=1; } || echo "OK close-hint no imprime el literal \$line"
+
+# Reporte de integración del miembro del front (cada worktree = agente propio).
+rc=0; bash "$RO" front-integration fr-1 --merge-status merged --resmoke pass --evidence "journey verde tras merge" >/dev/null || rc=$?
+[ "$rc" = 0 ] && echo "OK front-integration -> rc 0" || { echo "FAIL front-integration rc ($rc)"; fail=1; }
+[ "$(python3 - "$TMP/calls-cl.jsonl" <<'PYX'
+import json,sys
+ok=False
+for line in open(sys.argv[1]):
+    c=json.loads(line)
+    if c["path"]=="/fronts/fr-1/members/ak-1/integration":
+        b=json.loads(c["body"])
+        ok = b["merge_status"]=="merged" and b["re_smoke"]["status"]=="pass"
+print("SI" if ok else "NO")
+PYX
+)" = SI ] && echo "OK el reporte de integración lleva merge_status y re_smoke" || { echo "FAIL cuerpo de front-integration"; fail=1; }
+
+# merge_status inválido: rechazo local.
+rc=0; bash "$RO" front-integration fr-1 --merge-status casi >/dev/null 2>&1 || rc=$?
+[ "$rc" = 6 ] && echo "OK merge_status inválido -> rc 6" || { echo "FAIL merge_status inválido ($rc)"; fail=1; }
+
+# legacy: no-op sin red en los tres subcomandos.
+: > "$TMP/curl-legacy.log"
+for sub in "verdict R1-mvp security pass" "front-integration fr-1 --merge-status merged"; do
+  rc=0
+  bash -c "PATH=\"$TMP/fakebin:\$PATH\" FAKE_CURL_LOG=\"$TMP/curl-legacy.log\" TRYCORE_RUNTIME_MODE=legacy CLAUDE_PROJECT_DIR=\"$PROJ\" BUILD_CONFIG_FILE=\"$BUILD_CONFIG_FILE\" bash \"$RO\" $sub" >/dev/null 2>&1 || rc=$?
+  [ "$rc" = 3 ] || { echo "FAIL release-ops «${sub}» en legacy devolvió $rc"; fail=1; }
+done
+[ ! -s "$TMP/curl-legacy.log" ] && echo "OK release-ops no toca la red en legacy" || { echo "FAIL release-ops abrió socket en legacy"; fail=1; }
+
+# Offline: el veredicto de release NO se encola [#44] — `release_gate_verdict` es del
+# agregado `release` y POST /events solo ingiere ámbito slice (slice_id obligatorio,
+# progress_service._apply_and_append) o proyecto: encolarlo era rechazo garantizado al
+# drenar. rc 5 con instrucción de reintentar al reconectar (mismo patrón que propose-asset).
+runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9"}'
+rm -f "$PROJ/.claude/state/outbox/"*.json
+rc=0; err="$(bash "$RO" verdict R1-mvp smell fail --evidence "3 smells" 2>&1 >/dev/null)" || rc=$?
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = 5 ] && [ "$n" = 0 ] && echo "$err" | grep -qi "reintenta" \
+  && echo "OK verdict de release offline -> rc 5 sin encolar, con instrucción de reintento" \
+  || { echo "FAIL verdict de release offline (rc=$rc n=$n err=$err)"; fail=1; }
+
+# Offline: el reporte de integración de front tampoco se encola [#44] —
+# `front_integration_reported` no existe en el catálogo v2 y su superficie síncrona en el
+# hub es de gobierno humano (`can_govern_front`); un evento encolado jamás entraría.
+rc=0; err="$(bash "$RO" front-integration fr-1 --merge-status merged --resmoke pass --evidence "x" 2>&1 >/dev/null)" || rc=$?
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = 5 ] && [ "$n" = 0 ] && echo "$err" | grep -qi "reintenta" \
+  && echo "OK front-integration offline -> rc 5 sin encolar, con instrucción de reintento" \
+  || { echo "FAIL front-integration offline (rc=$rc n=$n err=$err)"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_CL\"}"
+
+# ══════════════ slice-ops.sh: gate / submit / archive [Task 3] ══════════════
+PORT_GA="$(freeport)"
+cat > "$TMP/routes-ga.json" <<JSON
+{"POST /slices/sl-7/verdicts": {"status": 200, "body": {"ok": true}},
+ "POST /slices/sl-7/submit": {"status": 200, "body": {"ok": true}},
+ "GET /agent/context": {"status": 200, "body": {"project": {"scaffold_confirmed": true}, "active_slice": {"slice_id": "sl-7", "phase": "tdd", "gates": {"dor": true, "tdd": false}}, "context": {"manifest_hash": "sha256:v1"}}},
+ "POST /projects/p-1/mirror/transitions": {"status": 202, "body": {"accepted": true}}}
+JSON
+: > "$TMP/calls-ga.jsonl"
+python3 "$ROOT/scripts/tests/lib/http-stub.py" "$PORT_GA" "$TMP/routes-ga.json" "$TMP/calls-ga.jsonl" &
+STUBS="$STUBS $!"
+sleep 0.3
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_GA\"}"
+agent_context_fetch_and_cache
+
+# Gate desconocido: rechazo LOCAL, sin tocar la red.
+: > "$TMP/calls-ga.jsonl"
+rc=0; bash "$SO" gate inventado pass >/dev/null 2>&1 || rc=$?
+[ "$rc" = 6 ] && echo "OK gate desconocido -> rc 6" || { echo "FAIL gate desconocido rc ($rc)"; fail=1; }
+[ ! -s "$TMP/calls-ga.jsonl" ] && echo "OK gate desconocido no toca la red" || { echo "FAIL gate desconocido llamó al runtime"; fail=1; }
+
+# Gate feliz con evidencia por fichero (texto largo, tildes y comillas).
+# [#44] El contrato del hub (VerdictIn y el catálogo GateVerdict) llama `verdict` a la
+# clave y el reducer solo promueve con "PASS"/"FAIL" en MAYÚSCULA (domain.py:423-431):
+# `status:"pass"` era rechazo garantizado en el sync Y en la cola.
+python3 -c "open('$TMP/ev.txt','w').write('suite verde: 42/42 «ñ» \"ok\"\n'*50)"
+rc=0; out="$(bash "$SO" gate tdd pass --evidence-file "$TMP/ev.txt")" || rc=$?
+[ "$rc" = 0 ] && echo "OK gate pass -> rc 0" || { echo "FAIL gate pass rc ($rc)"; fail=1; }
+[ "$(python3 - "$TMP/calls-ga.jsonl" <<'PYX'
+import json,sys
+ok=False
+for line in open(sys.argv[1]):
+    c=json.loads(line)
+    if c["path"]=="/slices/sl-7/verdicts":
+        b=json.loads(c["body"])
+        ok = b["gate"]=="tdd" and b.get("verdict")=="PASS" and "status" not in b and "42/42" in b["evidence"]
+print("SI" if ok else "NO")
+PYX
+)" = SI ] && echo "OK el veredicto viaja con gate/verdict(PASS)/evidence" || { echo "FAIL cuerpo del veredicto"; fail=1; }
+
+# `na` no existe en el catálogo del hub (cualquier verdict ≠ PASS/FAIL es bloqueo,
+# invariante 5): en runtime no viaja ni se encola — aviso local y rc 0.
+: > "$TMP/calls-ga.jsonl"
+rm -f "$PROJ/.claude/state/outbox/"*.json
+rc=0; out="$(bash "$SO" gate fidelity na 2>&1)" || rc=$?
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = 0 ] && [ "$n" = 0 ] && [ ! -s "$TMP/calls-ga.jsonl" ] && echo "$out" | grep -qi "na" \
+  && echo "OK gate na en runtime -> aviso local, sin red y sin encolar (el hub no lo admite)" \
+  || { echo "FAIL gate na (rc=$rc n=$n out=$out)"; fail=1; }
+
+# 422: compuerta mecánica del servidor -> rc 6, sin reintento y sin encolar.
+python3 - "$TMP/routes-ga.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /slices/sl-7/verdicts"]={"status":422,"body":{"error":"illegal_transition","detail":"dod exige wiring_verified"}}
+json.dump(d,open(p,"w"))
+PYX
+rm -f "$PROJ/.claude/state/outbox/"*.json
+rc=0; err="$(bash "$SO" gate dod pass 2>&1 >/dev/null)" || rc=$?
+[ "$rc" = 6 ] && echo "OK gate 422 -> rc 6" || { echo "FAIL gate 422 rc ($rc)"; fail=1; }
+echo "$err" | grep -q "wiring_verified" && echo "OK gate 422 muestra la razón del servidor" || { echo "FAIL gate 422 sin razón"; fail=1; }
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' | wc -l | tr -d ' ')"
+[ "$n" = 0 ] && echo "OK gate 422 no encola (no se reintenta lo rechazado)" || { echo "FAIL gate 422 encoló ($n)"; fail=1; }
+
+# Offline: el veredicto se encola como gate_verdict (nombre del catálogo v2, #44) y rc 5.
+runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9"}'
+rc=0; bash "$SO" gate journey_smoke pass --evidence "smoke verde" >/dev/null 2>&1 || rc=$?
+[ "$rc" = 5 ] && echo "OK gate offline -> rc 5" || { echo "FAIL gate offline rc ($rc)"; fail=1; }
+f="$(grep -l '"type": "gate_verdict"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 -c "
+import json;p=json.load(open('$f'))['payload']
+print('SI' if p.get('verdict')=='PASS' and 'status' not in p else 'NO')")" = SI ] \
+  && echo "OK gate offline encola gate_verdict con verdict PASS" || { echo "FAIL gate offline no encoló gate_verdict"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# Regresión: revisión final de rama — _ops_post_or_queue (offline, la rama que gate/submit/
+# checkpoint comparten) NUNCA debe reportar "encolado" si ops_enqueue_from_file falla de
+# verdad. Red YA inalcanzable (runtime_url apunta a :9 desde el bloque anterior).
+chmod 555 "$PROJ/.claude/state/outbox"
+rc=0; out="$(bash "$SO" gate journey_smoke pass --evidence "x" 2>&1)" || rc=$?
+chmod 755 "$PROJ/.claude/state/outbox"
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = "$OPS_RC_OFFLINE" ] && [ "$n" = 0 ] && ! echo "$out" | grep -q 'encolado (tipo protegido' \
+  && echo "OK gate offline con outbox no escribible -> sin encolar, sin aviso de éxito" \
+  || { echo "FAIL gate offline con outbox no escribible (rc=$rc n=$n out=$out)"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_GA\"}"
+
+# submit
+python3 - "$TMP/routes-ga.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /slices/sl-7/verdicts"]={"status":200,"body":{"ok":True}}
+json.dump(d,open(p,"w"))
+PYX
+rc=0; bash "$SO" submit --pr-url "https://example.invalid/pr/1" --openspec-change add-cobros >/dev/null || rc=$?
+[ "$rc" = 0 ] && echo "OK submit -> rc 0" || { echo "FAIL submit rc ($rc)"; fail=1; }
+grep -q '"path": "/slices/sl-7/submit"' "$TMP/calls-ga.jsonl" && echo "OK submit llama a su endpoint" || { echo "FAIL submit endpoint"; fail=1; }
+
+# submit offline: se encola como slice_submitted con payload VACÍO [#44] — el catálogo no
+# admite ningún campo (SliceSubmitted, extra="forbid"); pr_url/openspec_change vivían solo
+# para el 422 del hub.
+runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9"}'
+rm -f "$PROJ/.claude/state/outbox/"*.json
+rc=0; bash "$SO" submit --pr-url "https://example.invalid/pr/1" --openspec-change add-cobros >/dev/null 2>&1 || rc=$?
+f="$(grep -l '"type": "slice_submitted"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ "$rc" = 5 ] && [ -n "$f" ] && [ "$(python3 -c "
+import json;d=json.load(open('$f'))
+print('SI' if d['payload']=={} and d.get('slice_id')=='sl-7' else 'NO')")" = SI ] \
+  && echo "OK submit offline encola slice_submitted con payload {} y slice_id" \
+  || { echo "FAIL submit offline (rc=$rc)"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_GA\"}"
+
+# archive: SIEMPRE por la cola (opsx:archive corre dentro del PR) y protegido de la cota.
+# [#44] SliceArchived no admite ningún campo (extra="forbid"): payload VACÍO, slice_id
+# de primer nivel — con --epic/--pr-url el hub rechazaba TODO archivado offline.
+rm -f "$PROJ/.claude/state/outbox/"*.json
+rc=0; bash "$SO" archive --epic EP-003 --openspec-change add-cobros --pr-url "https://example.invalid/pr/1" >/dev/null || rc=$?
+[ "$rc" = 0 ] && echo "OK archive -> rc 0" || { echo "FAIL archive rc ($rc)"; fail=1; }
+f="$(grep -l '"type": "slice_archived"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 -c "
+import json;d=json.load(open('$f'))
+print('SI' if d['payload']=={} and d.get('slice_id')=='sl-7' else 'NO')")" = SI ] \
+  && echo "OK archive encola slice_archived con payload {} y slice_id" || { echo "FAIL archive no encoló el formato del catálogo"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# Regresión: revisión final de rama — si ops_enqueue_from_file falla, archive NUNCA debe
+# reportar éxito (era el mismo bug ya corregido en _fact_emit, reintroducido aquí).
+chmod 555 "$PROJ/.claude/state/outbox"
+rc=0; out="$(bash "$SO" archive --epic EP-003 --openspec-change add-cobros 2>&1)" || rc=$?
+chmod 755 "$PROJ/.claude/state/outbox"
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = "$OPS_RC_OFFLINE" ] && [ "$n" = 0 ] && ! echo "$out" | grep -q 'slice_archived encolado' \
+  && echo "OK archive con outbox no escribible -> rc distinguible, sin encolar, sin aviso de éxito" \
+  || { echo "FAIL archive con outbox no escribible (rc=$rc n=$n out=$out)"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# dual: el fichero es primario -> se espeja la transición con la identidad LOCAL.
+cat > "$PROJ/.claude/state/build-state.json" <<'JSON'
+{"version":"1.0.0","active_slice":{"epica":"EP-009","openspec_change":"add-pagos","branch":"feature/pagos","phase":"tdd","gates":{"dor":true}}}
+JSON
+: > "$TMP/calls-ga.jsonl"
+rc=0; TRYCORE_RUNTIME_MODE=dual bash "$SO" gate tdd pass --evidence "verde" >/dev/null || rc=$?
+[ "$rc" = 0 ] && echo "OK gate en dual -> rc 0" || { echo "FAIL gate dual rc ($rc)"; fail=1; }
+[ "$(python3 - "$TMP/calls-ga.jsonl" <<'PYX'
+import json,sys
+ok=False
+for line in open(sys.argv[1]):
+    c=json.loads(line)
+    if c["path"]=="/projects/p-1/mirror/transitions":
+        b=json.loads(c["body"])
+        # [#44] el espejo también usa el nombre del catálogo (TIPOS_DE_ESPEJO del hub
+        # enumera gate_verdict, no verdict_reported).
+        ok = b["kind"]=="gate_verdict" and b["origin"]=="mirror" and b["payload"]["slice_ref"]["epic_code"]=="EP-009"
+print("SI" if ok else "NO")
+PYX
+)" = SI ] && echo "OK dual espeja con la identidad fichero-primaria" || { echo "FAIL espejo dual"; fail=1; }
+[ ! -s "$PROJ/.claude/state/outbox" ] || true
+grep -q '"path": "/slices/' "$TMP/calls-ga.jsonl" && { echo "FAIL dual llamó a la superficie primaria"; fail=1; } || echo "OK dual no llama a /slices (el fichero decide)"
+
+# dual con espejo caído: avisa pero NO bloquea (rc 0).
+runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9"}'
+rc=0; TRYCORE_RUNTIME_MODE=dual bash "$SO" gate tdd pass >/dev/null 2>&1 || rc=$?
+[ "$rc" = 0 ] && echo "OK dual con espejo caído no bloquea" || { echo "FAIL dual espejo caído rc ($rc)"; fail=1; }
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_GA\"}"
+
+# ══════════════ hooks/build/dual-compare.sh [Task E] ══════════════
+# build-state.json de arriba sigue en pie: EP-009, phase tdd, gates {dor:true}.
+# En dual, escalate NO encola: espeja por POST /projects/{id}/mirror/transitions (el
+# fichero es primario) — igual que el resto de cmd_* en dual (ver el bloque de arriba).
+DC="$ROOT/hooks/build/dual-compare.sh"
+mirror_escalated() {
+  # SI/NO: ¿calls-ga.jsonl tiene un POST a mirror/transitions con kind=slice_escalated?
+  # [#44] la escalada usa el nombre del catálogo v2 (slice_escalated) también en el espejo.
+  python3 - "$TMP/calls-ga.jsonl" <<'PYX'
+import json,sys
+found=False
+for line in open(sys.argv[1]):
+    try:
+        c=json.loads(line)
+    except Exception:
+        continue
+    if c.get("path")=="/projects/p-1/mirror/transitions":
+        b=json.loads(c["body"])
+        if b.get("kind")=="slice_escalated":
+            found=True
+print("SI" if found else "NO")
+PYX
+}
+
+# legacy: no toca red ni outbox (fast exit).
+: > "$TMP/calls-ga.jsonl"
+rc=0; TRYCORE_RUNTIME_MODE=legacy bash "$DC" >/dev/null 2>&1 || rc=$?
+[ "$rc" = 0 ] && [ ! -s "$TMP/calls-ga.jsonl" ] \
+  && echo "OK dual-compare en legacy no toca red" || { echo "FAIL dual-compare legacy (rc=$rc)"; fail=1; }
+
+# runtime (no dual): tampoco corre — el comparador es específico de dual.
+: > "$TMP/calls-ga.jsonl"
+rc=0; TRYCORE_RUNTIME_MODE=runtime bash "$DC" >/dev/null 2>&1 || rc=$?
+[ "$rc" = 0 ] && [ ! -s "$TMP/calls-ga.jsonl" ] && echo "OK dual-compare en runtime no corre (solo aplica a dual)" || { echo "FAIL dual-compare en runtime"; fail=1; }
+
+# dual, proyección COINCIDENTE (épica/fase/gates iguales): sin discrepancia, sin escalar.
+python3 - "$TMP/routes-ga.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["GET /agent/context"]={"status":200,"body":{"active_slice":{"slice_id":"sl-9","epic_code":"EP-009","phase":"tdd","gates":{"dor":True}}}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-ga.jsonl"
+rc=0; err="$(TRYCORE_RUNTIME_MODE=dual bash "$DC" 2>&1 1>/dev/null)" || rc=$?
+[ "$rc" = 0 ] && [ -z "$err" ] && [ "$(mirror_escalated)" = NO ] \
+  && echo "OK dual-compare sin discrepancia -> silencioso, sin escalar" || { echo "FAIL dual-compare sin discrepancia (rc=$rc err=$err)"; fail=1; }
+
+# dual, épica DISTINTA en el runtime: discrepancia -> escala vía slice-ops.sh escalate (espejo).
+python3 - "$TMP/routes-ga.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["GET /agent/context"]={"status":200,"body":{"active_slice":{"slice_id":"sl-9","epic_code":"EP-999","phase":"tdd","gates":{"dor":True}}}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-ga.jsonl"
+rc=0; err="$(TRYCORE_RUNTIME_MODE=dual bash "$DC" 2>&1 1>/dev/null)" || rc=$?
+[ "$rc" = 0 ] && [ "$(mirror_escalated)" = SI ] && echo "$err" | grep -qi "discrepancia" \
+  && echo "$err" | grep -q "EP-009" && echo "$err" | grep -q "EP-999" \
+  && echo "OK dual-compare con épica distinta escala con el detalle de ambos lados" || { echo "FAIL dual-compare épica distinta (rc=$rc err=$err)"; fail=1; }
+
+# dual, gate DISTINTO (mismo epic/fase): también cuenta como discrepancia.
+python3 - "$TMP/routes-ga.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["GET /agent/context"]={"status":200,"body":{"active_slice":{"slice_id":"sl-9","epic_code":"EP-009","phase":"tdd","gates":{"dor":False}}}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-ga.jsonl"
+rc=0; TRYCORE_RUNTIME_MODE=dual bash "$DC" >/dev/null 2>&1 || rc=$?
+[ "$(mirror_escalated)" = SI ] && echo "OK dual-compare detecta gate distinto (dor: true vs false)" || { echo "FAIL dual-compare gate distinto"; fail=1; }
+
+# dual, runtime SIN slice activo (el fichero sí tiene): también es discrepancia.
+python3 - "$TMP/routes-ga.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["GET /agent/context"]={"status":200,"body":{"project":{"scaffold_confirmed":True}}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-ga.jsonl"
+rc=0; TRYCORE_RUNTIME_MODE=dual bash "$DC" >/dev/null 2>&1 || rc=$?
+[ "$(mirror_escalated)" = SI ] && echo "OK dual-compare detecta slice ausente en el runtime" || { echo "FAIL dual-compare slice ausente en runtime"; fail=1; }
+
+# fail-open: espejo caído (runtime inalcanzable) -> nunca lanza, nunca aborta (rc 0 siempre).
+python3 - "$TMP/routes-ga.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["GET /agent/context"]={"status":200,"body":{"active_slice":{"slice_id":"sl-9","epic_code":"EP-999","phase":"tdd","gates":{"dor":True}}}}
+json.dump(d,open(p,"w"))
+PYX
+runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9"}'
+rc=0; TRYCORE_RUNTIME_MODE=dual bash "$DC" >/dev/null 2>&1 || rc=$?
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_GA\"}"
+[ "$rc" = 0 ] && echo "OK dual-compare con espejo caído sigue fail-open (rc 0)" || { echo "FAIL dual-compare espejo caído (rc=$rc)"; fail=1; }
+
+# sin build-state.json: nada que comparar, silencioso.
+rm -f "$PROJ/.claude/state/build-state.json"
+rc=0; TRYCORE_RUNTIME_MODE=dual bash "$DC" >/dev/null 2>&1 || rc=$?
+[ "$rc" = 0 ] && echo "OK dual-compare sin build-state.json -> no-op" || { echo "FAIL dual-compare sin build-state.json (rc=$rc)"; fail=1; }
+
+# Restaura /agent/context y la caché de proyección al estado que esperan los bloques
+# siguientes (slice_id=sl-7): el comparador de arriba mutó routes-ga.json varias veces.
+python3 - "$TMP/routes-ga.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["GET /agent/context"]={"status":200,"body":{"project":{"scaffold_confirmed":True},"active_slice":{"slice_id":"sl-7","phase":"tdd","gates":{"dor":True,"tdd":False}},"context":{"manifest_hash":"sha256:v1"}}}
+json.dump(d,open(p,"w"))
+PYX
+agent_context_fetch_and_cache
+
+# ══════════════ slice-ops.sh: wiring / progress / checkpoint [Task 4] ══════════════
+python3 - "$TMP/routes-ga.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /checkpoints"]={"status":200,"body":{"ok":True}}
+json.dump(d,open(p,"w"))
+PYX
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# wiring seed: un evento con TODOS los items, payload por fichero (sin ARG_MAX).
+python3 -c "
+import json
+json.dump([{'item_id':'w%d'%i,'kind':'ac' if i%2 else 'integration','ref':'HU-0%d'%i} for i in range(300)], open('$TMP/items.json','w'))"
+rc=0; bash "$SO" wiring seed --file "$TMP/items.json" >/dev/null || rc=$?
+[ "$rc" = 0 ] && echo "OK wiring seed -> rc 0" || { echo "FAIL wiring seed rc ($rc)"; fail=1; }
+f="$(grep -l '"type": "wiring_checklist_seeded"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 -c "import json;print(len(json.load(open('$f'))['payload']['items']))")" = 300 ] \
+  && echo "OK wiring seed encola los 300 items en un evento" || { echo "FAIL wiring seed payload"; fail=1; }
+[ "$(python3 -c "import json;print(json.load(open('$f')).get('slice_id'))")" = "sl-7" ] \
+  && echo "OK wiring seed lleva slice_id" || { echo "FAIL wiring seed sin slice_id"; fail=1; }
+# [#44] WiringChecklistItem del catálogo es {item_id, kind, ref} EXACTO (extra="forbid"):
+# `status` no viaja (cada ítem nace failing en el fold del hub) y kind/ref nunca son null.
+[ "$(python3 -c "
+import json
+items=json.load(open('$f'))['payload']['items']
+ok = all(sorted(i.keys())==['item_id','kind','ref'] and i['kind'] is not None and i['ref'] is not None for i in items)
+print('SI' if ok else 'NO')")" = SI ] \
+  && echo "OK wiring seed emite items {item_id,kind,ref} sin status ni nulls (catálogo v2)" \
+  || { echo "FAIL wiring seed items fuera del schema del catálogo"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# Checklist sin items válidos: rechazo LOCAL (el hub exige min_length=1), sin encolar.
+echo '[]' > "$TMP/items-vacio.json"
+rc=0; bash "$SO" wiring seed --file "$TMP/items-vacio.json" >/dev/null 2>&1 || rc=$?
+[ "$rc" = 6 ] && [ "$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')" = 0 ] \
+  && echo "OK wiring seed vacío -> rc 6 sin encolar (el hub rechaza items vacíos)" \
+  || { echo "FAIL wiring seed vacío (rc=$rc)"; fail=1; }
+
+# Regresión: revisión final de rama — outbox no escribible -> wiring seed no reporta éxito.
+python3 -c "import json;json.dump([{'item_id':'w0','kind':'ac','ref':'HU-01'}], open('$TMP/items-small.json','w'))"
+chmod 555 "$PROJ/.claude/state/outbox"
+rc=0; out="$(bash "$SO" wiring seed --file "$TMP/items-small.json" 2>&1)" || rc=$?
+chmod 755 "$PROJ/.claude/state/outbox"
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = "$OPS_RC_OFFLINE" ] && [ "$n" = 0 ] && ! echo "$out" | grep -q 'checklist de wiring sembrado' \
+  && echo "OK wiring seed con outbox no escribible -> rc distinguible, sin encolar, sin aviso de éxito" \
+  || { echo "FAIL wiring seed con outbox no escribible (rc=$rc n=$n out=$out)"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# wiring update: status + kind/ref/evidence (spec §4.1-C amplía el agregado slice).
+rc=0; bash "$SO" wiring update w1 passing --kind e2e --ref HU-011 --evidence "newman 12/12" >/dev/null || rc=$?
+[ "$rc" = 0 ] && echo "OK wiring update -> rc 0" || { echo "FAIL wiring update rc ($rc)"; fail=1; }
+f="$(grep -l '"type": "wiring_item_updated"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ "$(python3 -c "
+import json;d=json.load(open('$f'))['payload']
+print('SI' if d['item_id']=='w1' and d['status']=='passing' and d['kind']=='e2e' and d['ref']=='HU-011' and '12/12' in d['evidence'] else 'NO')")" = SI ] \
+  && echo "OK wiring update viaja completo" || { echo "FAIL wiring update payload"; fail=1; }
+# Estado inválido: rechazo local, nada encolado.
+rm -f "$PROJ/.claude/state/outbox/"*.json
+rc=0; bash "$SO" wiring update w1 verde >/dev/null 2>&1 || rc=$?
+[ "$rc" = 6 ] && echo "OK wiring update estado inválido -> rc 6" || { echo "FAIL wiring update inválido rc ($rc)"; fail=1; }
+[ "$(find "$PROJ/.claude/state/outbox" -name '*.json' | wc -l | tr -d ' ')" = 0 ] \
+  && echo "OK wiring update inválido no encola" || { echo "FAIL wiring update inválido encoló"; fail=1; }
+
+# Regresión: revisión final de rama — outbox no escribible -> wiring update no reporta éxito.
+chmod 555 "$PROJ/.claude/state/outbox"
+rc=0; out="$(bash "$SO" wiring update w1 passing --evidence "x" 2>&1)" || rc=$?
+chmod 755 "$PROJ/.claude/state/outbox"
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = "$OPS_RC_OFFLINE" ] && [ "$n" = 0 ] && ! echo "$out" | grep -q 'evento encolado' \
+  && echo "OK wiring update con outbox no escribible -> rc distinguible, sin encolar, sin aviso de éxito" \
+  || { echo "FAIL wiring update con outbox no escribible (rc=$rc n=$n out=$out)"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# progress: nota por argumento y por fichero; tipo EVICTABLE (no protegido).
+# [#44] El catálogo v2 lo llama `progress_noted` (payload {note}, sin cambios de claves).
+rc=0; bash "$SO" progress "cableado el paso 2 del journey" >/dev/null || rc=$?
+[ "$rc" = 0 ] && echo "OK progress -> rc 0" || { echo "FAIL progress rc ($rc)"; fail=1; }
+f="$(grep -l '"type": "progress_noted"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 -c "
+import json;d=json.load(open('$f'))
+print('SI' if set(d['payload'].keys())=={'note'} and d.get('slice_id')=='sl-7' else 'NO')")" = SI ] \
+  && echo "OK progress encola progress_noted {note} con slice_id" || { echo "FAIL progress no encoló progress_noted"; fail=1; }
+case " $RUNTIME_OUTBOX_PROTECTED " in
+  *" progress_noted "*) echo "FAIL progress_noted no debe estar protegido"; fail=1 ;;
+  *) echo "OK progress_noted es evictable" ;;
+esac
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# Regresión: revisión final de rama — outbox no escribible -> progress no reporta éxito.
+chmod 555 "$PROJ/.claude/state/outbox"
+rc=0; out="$(bash "$SO" progress "nota cualquiera" 2>&1)" || rc=$?
+chmod 755 "$PROJ/.claude/state/outbox"
+n="$(find "$PROJ/.claude/state/outbox" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = "$OPS_RC_OFFLINE" ] && [ "$n" = 0 ] && ! echo "$out" | grep -q 'nota de progreso encolada' \
+  && echo "OK progress con outbox no escribible -> rc distinguible, sin encolar, sin aviso de éxito" \
+  || { echo "FAIL progress con outbox no escribible (rc=$rc n=$n out=$out)"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# checkpoint: POST con rama y commit reales del repo del PROYECTO.
+# [#44] La nota viaja como `summary` (CheckpointIn del hub; `note` se descartaba en
+# silencio en el sync y era rechazo por extra="forbid" en la cola).
+: > "$TMP/calls-ga.jsonl"
+rc=0; bash "$SO" checkpoint --note "parada por contexto crítico" >/dev/null || rc=$?
+[ "$rc" = 0 ] && echo "OK checkpoint -> rc 0" || { echo "FAIL checkpoint rc ($rc)"; fail=1; }
+[ "$(python3 - "$TMP/calls-ga.jsonl" <<'PYX'
+import json,sys
+ok=False
+for line in open(sys.argv[1]):
+    c=json.loads(line)
+    if c["path"]=="/checkpoints":
+        b=json.loads(c["body"])
+        ok = b.get("slice_id")=="sl-7" and "summary" in b and "note" not in b and "branch" in b and "commit_sha" in b
+print("SI" if ok else "NO")
+PYX
+)" = SI ] && echo "OK el checkpoint viaja con slice/branch/commit/summary" || { echo "FAIL cuerpo del checkpoint"; fail=1; }
+
+# checkpoint offline: se encola como checkpoint_recorded (nombre del catálogo, protegido),
+# con el payload EXACTO del catálogo {branch, commit_sha, summary} — el slice_id va de
+# primer nivel en el evento, jamás dentro del payload (extra="forbid").
+runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9"}'
+rm -f "$PROJ/.claude/state/outbox/"*.json
+rc=0; bash "$SO" checkpoint --note "sin red" >/dev/null 2>&1 || rc=$?
+[ "$rc" = 5 ] && echo "OK checkpoint offline -> rc 5" || { echo "FAIL checkpoint offline rc ($rc)"; fail=1; }
+f="$(grep -l '"type": "checkpoint_recorded"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 -c "
+import json;d=json.load(open('$f'))
+ok = set(d['payload'].keys())<=set(['branch','commit_sha','summary']) and 'slice_id' not in d['payload'] and d.get('slice_id')=='sl-7'
+print('SI' if ok else 'NO')")" = SI ] \
+  && echo "OK checkpoint offline encola checkpoint_recorded {branch,commit_sha,summary}" \
+  || { echo "FAIL checkpoint offline no encoló el formato del catálogo"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_GA\"}"
+
+# ══════════ runtime_dispatch_outbox: sobre {"events":…}, event_type y 4xx [#37] ══════════
+# El hub exige EventBatchIn {"events":[EventIn]} y EventIn.event_type: el lote pelado con
+# la clave "type" era 422 en CADA intento y la cola no drenaba jamás (reintento eterno,
+# el usuario creía que reportó y el hub nunca recibió nada).
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
+rm -rf "$PROJ/.claude/state/outbox/rejected"
+runtime_enqueue_event slice_archived '{"epic_code":"EP-003","openspec_change":"add-cobros","pr_url":""}' sl-7
+# Compat: fichero YA encolado por un consumidor con la 0.10.0 (clave interna "type").
+cat > "$PROJ/.claude/state/outbox/00000000000000000000-compat.json" <<'JSON'
+{"client_event_id": "cid-compat-1", "type": "telemetry_gap",
+ "payload": {"dropped": 1, "window_h": 1.0, "reason": "compat"},
+ "enqueued_at": "2026-08-27T00:00:00.000000Z"}
+JSON
+cid_new="$(python3 -c "
+import json,glob
+fs=[p for p in glob.glob('$PROJ/.claude/state/outbox/*.json') if 'compat' not in p and not p.endswith('.dispatch-state.json')]
+print(json.load(open(fs[0]))['client_event_id'])")"
+python3 - "$TMP/routes-ga.json" "$cid_new" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+# Ack con la forma REAL del hub (task_router.post_events): accepted/duplicates/rejected.
+d["POST /events"]={"status":200,"body":{"accepted":[sys.argv[2]],"duplicates":["cid-compat-1"],"rejected":[]}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-ga.jsonl"
+rc=0; runtime_dispatch_outbox >/dev/null 2>&1 || rc=$?
+[ "$rc" = 0 ] && echo "OK dispatch 200 -> rc 0" || { echo "FAIL dispatch 200 rc ($rc)"; fail=1; }
+[ "$(python3 - "$TMP/calls-ga.jsonl" <<'PYX'
+import json,sys
+ok=False
+for line in open(sys.argv[1]):
+    c=json.loads(line)
+    if c["path"]=="/events":
+        b=json.loads(c["body"])
+        evs=b.get("events") if isinstance(b,dict) else None
+        # [#44] slice_archived encolado por un consumidor 0.10.x con {epic_code,…}: la capa
+        # de compat del despacho lo vacía (el catálogo no admite ningún campo).
+        ok = isinstance(evs,list) and len(evs)==2 \
+          and all("event_type" in e and "type" not in e for e in evs) \
+          and {e["event_type"] for e in evs}=={"slice_archived","telemetry_gap"} \
+          and any(e.get("slice_id")=="sl-7" for e in evs) \
+          and all(e["payload"]=={} for e in evs if e["event_type"]=="slice_archived")
+print("SI" if ok else "NO")
+PYX
+)" = SI ] && echo "OK el lote viaja como {\"events\":[…]} con event_type y payloads del catálogo (compat 0.10.x)" \
+  || { echo "FAIL sobre/clave del lote"; fail=1; }
+n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' ! -name '.dispatch-state.json' | wc -l | tr -d ' ')"
+[ "$n" = 0 ] && echo "OK la cola drena con el ack real del hub (accepted+duplicates)" || { echo "FAIL la cola no drenó ($n)"; fail=1; }
+
+# Elemento rechazado DENTRO de un 200 (fuera de catálogo/payload inválido): se aparta a
+# rejected/ con su razón — reenviarlo es inútil; el resto del protocolo sigue fail-open.
+runtime_enqueue_event verdict_reported '{"gate":"tdd","status":"pass"}' sl-7
+cid_bad="$(python3 -c "
+import json,glob
+fs=[p for p in glob.glob('$PROJ/.claude/state/outbox/*.json') if not p.endswith('.dispatch-state.json')]
+print(json.load(open(fs[0]))['client_event_id'])")"
+python3 - "$TMP/routes-ga.json" "$cid_bad" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /events"]={"status":200,"body":{"accepted":[],"duplicates":[],
+  "rejected":[{"client_event_id":sys.argv[2],"reason":"event_type desconocido para el catálogo v2"}]}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-ga.jsonl"
+rc=0; runtime_dispatch_outbox >/dev/null 2>&1 || rc=$?
+n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' ! -name '.dispatch-state.json' | wc -l | tr -d ' ')"
+nr="$(find "$PROJ/.claude/state/outbox/rejected" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$n" = 0 ] && [ "$nr" = 1 ] \
+  && echo "OK el elemento rechazado por el hub se aparta a rejected/ (no se reenvía)" \
+  || { echo "FAIL elemento rechazado (pendientes=$n rechazados=$nr)"; fail=1; }
+# [#44] El fichero 0.10.x `verdict_reported {gate, status}` viajó TRADUCIDO al catálogo v2
+# (gate_verdict {gate, verdict: PASS}) — la traducción vive en el único punto de salida.
+[ "$(python3 - "$TMP/calls-ga.jsonl" <<'PYX'
+import json,sys
+ok=False
+for line in open(sys.argv[1]):
+    c=json.loads(line)
+    if c["path"]=="/events":
+        evs=json.loads(c["body"]).get("events") or []
+        ok = len(evs)==1 and evs[0]["event_type"]=="gate_verdict" \
+          and evs[0]["payload"].get("verdict")=="PASS" and "status" not in evs[0]["payload"]
+print("SI" if ok else "NO")
+PYX
+)" = SI ] && echo "OK verdict_reported 0.10.x drena traducido a gate_verdict {verdict: PASS}" \
+  || { echo "FAIL traducción de verdict_reported en el despacho"; fail=1; }
+rm -rf "$PROJ/.claude/state/outbox/rejected"
+
+# [#44] Renombres de compat 0.10.x en el despacho: checkpoint_created, escalation_raised y
+# progress_note_recorded drenan con el nombre Y el payload del catálogo v2 sin migración
+# (note→summary + slice_id fuera del payload; reason/gate/phase→cause; note se conserva).
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
+runtime_enqueue_event checkpoint_created '{"slice_id":"sl-7","branch":"feature/x","commit_sha":"abc123","note":"parada"}'
+runtime_enqueue_event escalation_raised '{"reason":"bloqueo del AC-2","gate":"tdd","phase":"red"}' sl-7
+runtime_enqueue_event progress_note_recorded '{"note":"avance"}' sl-7
+cids_all="$(python3 -c "
+import json,glob
+fs=[p for p in glob.glob('$PROJ/.claude/state/outbox/*.json') if not p.endswith('.dispatch-state.json')]
+print(json.dumps([json.load(open(p))['client_event_id'] for p in fs]))")"
+python3 - "$TMP/routes-ga.json" "$cids_all" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /events"]={"status":200,"body":{"accepted":json.loads(sys.argv[2]),"duplicates":[],"rejected":[]}}
+json.dump(d,open(p,"w"))
+PYX
+: > "$TMP/calls-ga.jsonl"
+rc=0; runtime_dispatch_outbox >/dev/null 2>&1 || rc=$?
+[ "$(python3 - "$TMP/calls-ga.jsonl" <<'PYX'
+import json,sys
+ok=False
+for line in open(sys.argv[1]):
+    c=json.loads(line)
+    if c["path"]=="/events":
+        evs={e["event_type"]:e for e in json.loads(c["body"]).get("events") or []}
+        cp=evs.get("checkpoint_recorded"); es=evs.get("slice_escalated"); pn=evs.get("progress_noted")
+        ok = cp is not None and es is not None and pn is not None \
+          and cp["payload"]=={"branch":"feature/x","commit_sha":"abc123","summary":"parada"} \
+          and cp.get("slice_id")=="sl-7" \
+          and set(es["payload"].keys())=={"cause"} and "bloqueo del AC-2" in es["payload"]["cause"] \
+          and "tdd" in es["payload"]["cause"] \
+          and pn["payload"]=={"note":"avance"}
+print("SI" if ok else "NO")
+PYX
+)" = SI ] && echo "OK los 4 renombres 0.10.x drenan con nombre y payload del catálogo v2" \
+  || { echo "FAIL renombres de compat en el despacho"; fail=1; }
+n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' ! -name '.dispatch-state.json' | wc -l | tr -d ' ')"
+[ "$n" = 0 ] && echo "OK la cola 0.10.x drena entera tras la traducción" || { echo "FAIL cola 0.10.x no drenó ($n)"; fail=1; }
+
+# [#44] Tipos SIN equivalente en el catálogo (tool_use_recorded, branch_drift,
+# front_integration_reported): el despacho los aparta LOCALMENTE a rejected/ sin gastar
+# red — mandarlos era rechazo garantizado. Si solo había de esos, no hay POST.
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
+runtime_enqueue_event tool_use_recorded '{"tool":"Edit","path":"src/a.ts"}' sl-7
+runtime_enqueue_event branch_drift '{"real":"main","expected":"feature/x"}' sl-7
+runtime_enqueue_event front_integration_reported '{"merge_status":"merged"}'
+: > "$TMP/calls-ga.jsonl"
+rc=0; runtime_dispatch_outbox >/dev/null 2>&1 || rc=$?
+n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' ! -name '.dispatch-state.json' | wc -l | tr -d ' ')"
+nr="$(find "$PROJ/.claude/state/outbox/rejected" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$rc" = 0 ] && [ "$n" = 0 ] && [ "$nr" = 3 ] && ! grep -q '"path": "/events"' "$TMP/calls-ga.jsonl" \
+  && echo "OK los tipos sin equivalente se apartan localmente a rejected/ sin tocar la red" \
+  || { echo "FAIL pre-filtro de tipos sin equivalente (rc=$rc pendientes=$n rechazados=$nr)"; fail=1; }
+rm -rf "$PROJ/.claude/state/outbox/rejected"
+
+# [#44] telemetry_gap de la evicción con el payload del catálogo: {dropped, window_h,
+# reason} (TelemetryGap: dropped>=1, window_h>0, reason<=2000) — el {dropped_count,
+# dropped_types} de 0.10.x era rechazo garantizado.
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
+old_ev="$PROJ/.claude/state/outbox/00000000000000000001-viejo.json"
+python3 -c "import json;json.dump({'client_event_id':'ev-viejo-1','type':'progress_noted','payload':{'note':'x'},'enqueued_at':'2020-01-01T00:00:00Z'},open('$old_ev','w'))"
+touch -t 202001010000 "$old_ev"
+runtime_outbox_enforce_cap >/dev/null
+f="$(grep -l '"type": "telemetry_gap"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | head -1)"
+[ -n "$f" ] && [ "$(python3 -c "
+import json;p=json.load(open('$f'))['payload']
+ok = sorted(p.keys())==['dropped','reason','window_h'] and p['dropped']>=1 and p['window_h']==72.0 \
+  and isinstance(p['reason'],str) and 'progress_noted' in p['reason'] and len(p['reason'])<=2000
+print('SI' if ok else 'NO')")" = SI ] \
+  && echo "OK la evicción emite telemetry_gap {dropped, window_h, reason} del catálogo v2" \
+  || { echo "FAIL payload del telemetry_gap de evicción"; fail=1; }
+# Coalescer: una segunda evicción actualiza el MISMO gap acumulando dropped.
+old_ev2="$PROJ/.claude/state/outbox/00000000000000000002-viejo.json"
+python3 -c "import json;json.dump({'client_event_id':'ev-viejo-2','type':'tool_use_recorded','payload':{},'enqueued_at':'2020-01-01T00:00:00Z'},open('$old_ev2','w'))"
+touch -t 202001010000 "$old_ev2"
+runtime_outbox_enforce_cap >/dev/null
+ngaps="$(grep -l '"type": "telemetry_gap"' "$PROJ/.claude/state/outbox/"*.json 2>/dev/null | wc -l | tr -d ' ')"
+[ "$ngaps" = 1 ] && [ "$(python3 -c "
+import json;p=json.load(open('$f'))['payload']
+print('SI' if p['dropped']>=2 and sorted(p.keys())==['dropped','reason','window_h'] else 'NO')")" = SI ] \
+  && echo "OK el coalescer acumula en un único telemetry_gap con el payload del catálogo" \
+  || { echo "FAIL coalescer del telemetry_gap"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json
+
+# 4xx del LOTE (p.ej. 422 por contrato roto): NO reintentable — se loggea el cuerpo, el
+# lote se mueve a rejected/ y se avisa; nada de reintento eterno indistinguible de red caída.
+runtime_enqueue_event slice_archived '{"epic_code":"EP-004","openspec_change":"","pr_url":""}'
+python3 - "$TMP/routes-ga.json" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /events"]={"status":422,"body":{"detail":[{"type":"dict_type","loc":["body","events"]}]}}
+json.dump(d,open(p,"w"))
+PYX
+rm -f "$PROJ/.claude/state/outbox/.dispatch-state.json"
+rc=0; err="$(runtime_dispatch_outbox 2>&1 >/dev/null)" || rc=$?
+[ "$rc" != 0 ] && echo "OK dispatch 4xx -> rc != 0" || { echo "FAIL dispatch 4xx rc ($rc)"; fail=1; }
+n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' ! -name '.dispatch-state.json' | wc -l | tr -d ' ')"
+nr="$(find "$PROJ/.claude/state/outbox/rejected" -name '*.json' 2>/dev/null | wc -l | tr -d ' ')"
+[ "$n" = 0 ] && [ "$nr" = 1 ] && echo "OK el lote 4xx se mueve a rejected/ y no se reintenta" \
+  || { echo "FAIL lote 4xx (pendientes=$n rechazados=$nr)"; fail=1; }
+echo "$err" | grep -q "dict_type" && echo "OK el 4xx loggea el cuerpo del error del hub" \
+  || { echo "FAIL 4xx sin cuerpo del error ($err)"; fail=1; }
+[ ! -f "$PROJ/.claude/state/outbox/.dispatch-state.json" ] \
+  && echo "OK el 4xx no agenda backoff (no hay nada que reintentar)" || { echo "FAIL 4xx agendó backoff"; fail=1; }
+: > "$TMP/calls-ga.jsonl"
+rc=0; runtime_dispatch_outbox >/dev/null 2>&1 || rc=$?
+grep -q '"path": "/events"' "$TMP/calls-ga.jsonl" && { echo "FAIL dispatch reintentó un lote 4xx"; fail=1; } \
+  || echo "OK tras el 4xx la cola queda vacía (sin reintento)"
+rm -rf "$PROJ/.claude/state/outbox/rejected"
+
+# 5xx y 429 SIGUEN siendo fail-open: la cola se conserva y el backoff se agenda.
+runtime_enqueue_event slice_archived '{"epic_code":"EP-005","openspec_change":"","pr_url":""}'
+for st in 500 429; do
+  python3 - "$TMP/routes-ga.json" "$st" <<'PYX'
+import json,sys
+p=sys.argv[1]; d=json.load(open(p))
+d["POST /events"]={"status":int(sys.argv[2]),"body":{"detail":"transitorio"}}
+json.dump(d,open(p,"w"))
+PYX
+  rm -f "$PROJ/.claude/state/outbox/.dispatch-state.json"
+  rc=0; runtime_dispatch_outbox >/dev/null 2>&1 || rc=$?
+  n="$(find "$PROJ/.claude/state/outbox" -maxdepth 1 -name '*.json' ! -name '.dispatch-state.json' | wc -l | tr -d ' ')"
+  [ "$rc" = 1 ] && [ "$n" = 1 ] && [ -f "$PROJ/.claude/state/outbox/.dispatch-state.json" ] \
+    && echo "OK $st conserva la cola y agenda backoff (fail-open intacto)" \
+    || { echo "FAIL $st (rc=$rc pendientes=$n)"; fail=1; }
+done
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
+
+# ══════════════ [#44] anti-drift: todo tipo encolable pertenece al catálogo v2 ══════════════
+# Catálogo de REFERENCIA del test: réplica literal de `event_catalog.py` del hub
+# (trycore-ia-hub, backend/app/modules/orchestrator/event_catalog.py, catálogo v2,
+# verificado el 2026-08-28). Claves admitidas por schema (extra="forbid" en el hub; el
+# campo `source` lo estampa el SERVIDOR en la ingesta espejo y el cliente jamás lo manda).
+# Ámbito: `slice` exige slice_id de primer nivel; `project` lo PROHÍBE
+# (progress_service._apply_and_append + TIPOS_POR_AGREGADO["project"]).
+# Si mañana un productor encola un tipo o una clave nueva sin pasar por aquí, este
+# bloque debe ponerse rojo: actualiza el catálogo de referencia SOLO tras verificar
+# el catálogo real del hub.
+cat > "$TMP/catalogo-v2.py" <<'PYCAT'
+CATALOGO = {
+    "gate_verdict":            {"claves": {"gate", "verdict", "evidence", "cause", "details_ref"},
+                                "obligatorias": {"gate", "verdict"}, "ambito": "slice"},
+    "checkpoint_recorded":     {"claves": {"branch", "commit_sha", "summary"},
+                                "obligatorias": {"branch", "commit_sha"}, "ambito": "slice"},
+    "progress_noted":          {"claves": {"note"}, "obligatorias": {"note"}, "ambito": "slice"},
+    "handoff_recorded":        {"claves": {"note", "resume_hint", "stopped_at"},
+                                "obligatorias": {"note"}, "ambito": "slice"},
+    "slice_escalated":         {"claves": {"cause"}, "obligatorias": {"cause"}, "ambito": "slice"},
+    "slice_submitted":         {"claves": set(), "obligatorias": set(), "ambito": "slice"},
+    "slice_archived":          {"claves": set(), "obligatorias": set(), "ambito": "slice"},
+    "wiring_checklist_seeded": {"claves": {"items"}, "obligatorias": {"items"}, "ambito": "slice"},
+    "wiring_item_updated":     {"claves": {"item_id", "status", "evidence", "kind", "ref"},
+                                "obligatorias": {"item_id", "status"}, "ambito": "slice"},
+    "project_fact_updated":    {"claves": {"fact", "value", "source"},
+                                "obligatorias": {"fact", "source"}, "ambito": "project"},
+    "telemetry_gap":           {"claves": {"dropped", "window_h", "reason"},
+                                "obligatorias": {"dropped", "window_h", "reason"}, "ambito": "project"},
+}
+PYCAT
+
+# (a) ESTÁTICO: los tipos literales de TODOS los call sites que encolan (hooks/build/**)
+# están en el catálogo de referencia — un productor nuevo con tipo fuera de catálogo
+# pone esto rojo aunque nadie le escriba caso dinámico.
+[ "$(python3 - "$TMP/catalogo-v2.py" "$ROOT/hooks/build" <<'PYX'
+import re,sys,glob,os
+ns={}
+exec(open(sys.argv[1]).read(), ns)
+catalogo=ns["CATALOGO"]
+pat=re.compile(r'(?:runtime_enqueue_event|ops_enqueue_from_file|_ops_emit_event)\s+"?([a-z][a-z_]+)"?')
+pat_pq=re.compile(r'"\$payload"\s+([a-z][a-z_]+)')
+encontrados=set()
+for path in glob.glob(os.path.join(sys.argv[2],"**","*.sh"), recursive=True):
+    for line in open(path, encoding="utf-8"):
+        if line.lstrip().startswith("#"):
+            continue
+        for m in pat.finditer(line):
+            encontrados.add(m.group(1))
+        if "_ops_post_or_queue" in line:
+            m=pat_pq.search(line)
+            if m:
+                encontrados.add(m.group(1))
+fuera=sorted(t for t in encontrados if t not in catalogo)
+# El regex debe seguir viendo a los productores conocidos: si deja de encontrarlos,
+# el guard está ciego y también es un fallo.
+esperados={"gate_verdict","checkpoint_recorded","progress_noted","slice_escalated",
+           "slice_submitted","slice_archived","wiring_checklist_seeded",
+           "wiring_item_updated","project_fact_updated","handoff_recorded"}
+ciegos=sorted(esperados-encontrados)
+if fuera:
+    print("FUERA_DE_CATALOGO:"+",".join(fuera))
+elif ciegos:
+    print("REGEX_CIEGO:"+",".join(ciegos))
+else:
+    print("SI")
+PYX
+)" = SI ] && echo "OK todos los tipos literales encolados por hooks/build pertenecen al catálogo v2" \
+  || { echo "FAIL anti-drift estático (tipo fuera de catálogo o guard ciego)"; fail=1; }
+
+# (b) DINÁMICO: se ejecutan TODOS los productores reales en runtime sin red y se valida
+# cada evento encolado (tipo en catálogo, claves ⊆ admitidas, obligatorias presentes,
+# slice_id según el ámbito, items del wiring con la forma exacta).
+runtime_credentials_merge '{"runtime_url":"http://127.0.0.1:9"}'
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
+bash "$SO" gate tdd pass --evidence "verde" >/dev/null 2>&1
+bash "$SO" submit --pr-url "https://example.invalid/pr/9" >/dev/null 2>&1
+bash "$SO" archive --epic EP-003 >/dev/null 2>&1
+bash "$SO" wiring seed --file "$TMP/items-small.json" >/dev/null 2>&1
+bash "$SO" wiring update w1 passing --kind e2e --ref HU-1 --evidence "x" >/dev/null 2>&1
+bash "$SO" progress "nota de avance" >/dev/null 2>&1
+bash "$SO" checkpoint --note "corte" >/dev/null 2>&1
+bash "$SO" escalate "bloqueo" --gate tdd >/dev/null 2>&1
+bash "$SO" fact harness-phase building >/dev/null 2>&1
+old_ev="$PROJ/.claude/state/outbox/00000000000000000003-viejo.json"
+python3 -c "import json;json.dump({'client_event_id':'ev-viejo-3','type':'progress_noted','payload':{'note':'x'},'enqueued_at':'2020-01-01T00:00:00Z'},open('$old_ev','w'))"
+touch -t 202001010000 "$old_ev"
+runtime_outbox_enforce_cap >/dev/null
+res_antidrift="$(python3 - "$TMP/catalogo-v2.py" "$PROJ/.claude/state/outbox" <<'PYX'
+import json,sys,glob,os
+ns={}
+exec(open(sys.argv[1]).read(), ns)
+catalogo=ns["CATALOGO"]
+errores=[]
+vistos=set()
+for path in sorted(glob.glob(os.path.join(sys.argv[2],"*.json"))):
+    if os.path.basename(path)==".dispatch-state.json":
+        continue
+    d=json.load(open(path))
+    t=d.get("type") or ""
+    p=d.get("payload") or {}
+    vistos.add(t)
+    spec=catalogo.get(t)
+    if spec is None:
+        errores.append("tipo fuera de catálogo: %r" % t); continue
+    extra=set(p)-spec["claves"]
+    faltan=spec["obligatorias"]-set(p)
+    if extra: errores.append("%s: claves fuera de schema %s" % (t, sorted(extra)))
+    if faltan: errores.append("%s: faltan obligatorias %s" % (t, sorted(faltan)))
+    if spec["ambito"]=="slice" and not d.get("slice_id"):
+        errores.append("%s: ámbito slice sin slice_id de primer nivel" % t)
+    if spec["ambito"]=="project" and d.get("slice_id"):
+        errores.append("%s: ámbito proyecto con slice_id (el hub lo rechaza)" % t)
+    if t=="wiring_checklist_seeded":
+        items=p.get("items") or []
+        if not items: errores.append("wiring_checklist_seeded: items vacío (min_length=1)")
+        for it in items:
+            if set(it)!={"item_id","kind","ref"} or any(it[k] is None for k in it):
+                errores.append("wiring_checklist_seeded: item fuera de schema %r" % it); break
+esperados={"gate_verdict","slice_submitted","slice_archived","wiring_checklist_seeded",
+           "wiring_item_updated","progress_noted","checkpoint_recorded","slice_escalated",
+           "project_fact_updated","telemetry_gap"}
+faltantes=sorted(esperados-vistos)
+if faltantes:
+    errores.append("productores sin evento encolado (¿cambió un subcomando?): %s" % faltantes)
+print("SI" if not errores else "NO: "+" | ".join(errores))
+PYX
+)"
+[ "$res_antidrift" = SI ] \
+  && echo "OK todos los eventos encolados por los productores reales validan contra el catálogo v2" \
+  || { echo "FAIL anti-drift dinámico -> $res_antidrift"; fail=1; }
+rm -f "$PROJ/.claude/state/outbox/"*.json "$PROJ/.claude/state/outbox/.dispatch-state.json"
+runtime_credentials_merge "{\"runtime_url\":\"http://127.0.0.1:$PORT_GA\"}"
+
+# ══════════════ scripts/lib/graph-bundle.py [Task 13 · issue #41] ══════════════
+GB="$ROOT/scripts/lib/graph-bundle.py"
+cat > "$TMP/epics.json" <<'JSON'
+{"project_ref":"acme","epics":[
+  {"code":"EP-002","title":"Cobros","layer":"business","files_scope":["src/pagos/**"],"depends_on":["EP-001"],"stories":[{"id":"HU-011","title":"Cobrar"}]},
+  {"code":"EP-001","title":"Cimiento","layer":"foundational","files_scope":["src/core/**"],"depends_on":[]},
+  {"code":"EP-002","title":"Duplicada","layer":"business"},
+  {"code":"EP-003","depends_on":["EP-404"]}
+],"release_lines":[{"id":"R1-mvp","epics":["EP-001","EP-002"]},{"id":"R2","epics":["EP-002"]}]}
+JSON
+out="$(python3 "$GB" < "$TMP/epics.json" 2> "$TMP/gb.err")"
+rc=$?
+[ "$rc" = 0 ] && echo "OK graph-bundle rc 0" || { echo "FAIL graph-bundle rc ($rc)"; fail=1; }
+[ "$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);print(",".join(e["code"] for e in d["epics"]))')" = "EP-001,EP-002,EP-003" ] \
+  && echo "OK graph-bundle deduplica y ordena determinísticamente" || { echo "FAIL orden/dedup del bundle"; fail=1; }
+grep -q "EP-002" "$TMP/gb.err" && echo "OK graph-bundle avisa del código duplicado" || { echo "FAIL sin aviso de duplicado"; fail=1; }
+grep -q "EP-404" "$TMP/gb.err" && echo "OK graph-bundle avisa de la dependencia inexistente" || { echo "FAIL sin aviso de dep inexistente"; fail=1; }
+[ "$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);print(d["kind"],d["bundle_version"])')" = "graph 2" ] \
+  && echo "OK el bundle se autodescribe (kind/bundle_version 2)" || { echo "FAIL cabecera del bundle"; fail=1; }
+# ── Formato del hub (issue #41): GraphService.import_graph rechaza TODO el grafo
+#    si layer ∉ {FOUNDATIONAL, BUSINESS}; las historias viajan con `code` (el hub
+#    hace story_in["code"]); la línea de release es un string POR ÉPICA.
+[ "$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);print(",".join(str(e["layer"]) for e in d["epics"]))')" = "FOUNDATIONAL,BUSINESS,None" ] \
+  && echo "OK layer en MAYÚSCULA (VALID_LAYERS del hub); ausente -> null" || { echo "FAIL layer no está en formato del hub"; fail=1; }
+[ "$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);h=d["epics"][1]["stories"][0];print(h.get("code"),h.get("title"),"id" in h)')" = "HU-011 Cobrar False" ] \
+  && echo "OK las historias llevan code+title (sin id)" || { echo "FAIL historias sin code del hub"; fail=1; }
+[ "$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);print(",".join(str(e.get("release_line")) for e in d["epics"]));print("release_lines" in d)')" = "R1-mvp,R1-mvp,None
+False" ] \
+  && echo "OK release_line string por épica (sin release_lines aparte)" || { echo "FAIL release_line por épica"; fail=1; }
+grep -q "R2" "$TMP/gb.err" && echo "OK avisa de la épica en dos líneas de release (gana la primera)" || { echo "FAIL sin aviso de doble línea"; fail=1; }
+[ "$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);print(d["epics"][2]["title"])')" = "EP-003" ] \
+  && grep -q "sin .title." "$TMP/gb.err" \
+  && echo "OK title ausente cae al código con aviso (el hub lo exige)" || { echo "FAIL fallback de title"; fail=1; }
+grep -qi "layer" "$TMP/gb.err" && echo "OK avisa del layer ausente (el hub rechazará el grafo entero)" || { echo "FAIL sin aviso de layer"; fail=1; }
+# El bundle es DETERMINISTA: dos corridas idénticas salvo el sello temporal.
+out2="$(python3 "$GB" < "$TMP/epics.json" 2>/dev/null)"
+a="$(echo "$out" | python3 -c 'import json,sys;d=json.load(sys.stdin);d.pop("generated_at");print(json.dumps(d,sort_keys=True))')"
+b="$(echo "$out2" | python3 -c 'import json,sys;d=json.load(sys.stdin);d.pop("generated_at");print(json.dumps(d,sort_keys=True))')"
+[ "$a" = "$b" ] && echo "OK el bundle es determinista" || { echo "FAIL el bundle no es determinista"; fail=1; }
+# Ciclo: se avisa, no se lanza.
+echo '{"epics":[{"code":"EP-A","depends_on":["EP-B"]},{"code":"EP-B","depends_on":["EP-A"]}]}' | python3 "$GB" > /dev/null 2> "$TMP/gb2.err"
+rc=$?
+[ "$rc" = 0 ] && grep -qi "ciclo" "$TMP/gb2.err" && echo "OK graph-bundle detecta ciclos sin lanzar" || { echo "FAIL ciclos ($rc)"; fail=1; }
+# Entrada ilegible: rc 1 y mensaje, jamás traceback.
+echo 'no-json' | python3 "$GB" > /dev/null 2> "$TMP/gb3.err"
+rc=$?
+[ "$rc" = 1 ] && ! grep -q "Traceback" "$TMP/gb3.err" && echo "OK graph-bundle con entrada ilegible -> rc 1 limpio" || { echo "FAIL entrada ilegible ($rc)"; fail=1; }
+
+exit $fail