@windyroad/itil 0.47.0-preview.516 → 0.47.1-preview.521

package/.claude-plugin/plugin.json

@@ -497,5 +497,5 @@
     }
   },
   "name": "wr-itil",
-  "version": "0.47.0"
+  "version": "0.47.1"
 }

package/bin/wr-itil-check-locale-discipline

@@ -0,0 +1,51 @@
+#!/usr/bin/env bash
+# Generated by scripts/sync-shim-wrappers.sh from
+# packages/shared/lib/shim-wrapper-template.sh. DO NOT EDIT individual
+# shim files in packages/*/bin/wr-* directly; edit the template + run
+# `npm run sync:shim-wrappers` to regenerate.
+#
+# Resolution (ADR-080):
+#   1. If the wrapper's parent dir is semver-shaped, treat as installed-
+#      cache execution and resolve to the highest-version sibling's
+#      scripts/ entry below.
+#   2. Otherwise (parent dir is e.g. `architect`), treat as source-
+#      monorepo execution and dispatch to own scripts/. The source-repo-
+#      guard `exec` is the anchor parsed by
+#      packages/retrospective/scripts/check-tarball-shipped-shims.sh.
+#   3. If the cache parent contains zero semver-shaped siblings, exit
+#      127 with a stderr message naming the cache parent (per SQ-080-2).
+#
+# @adr ADR-080 (highest-version-wins shim wrapper plugin scaffold)
+# @adr ADR-049 (plugin-bundled scripts resolve via bin/ on $PATH — amended)
+# @problem P343 (mid-session staleness window)
+
+set -euo pipefail
+
+SHIM_DIR="$(cd "$(dirname "$0")" && pwd)"
+OWN_VERSION_DIR="$(dirname "$SHIM_DIR")"
+OWN_VERSION_NAME="$(basename "$OWN_VERSION_DIR")"
+CACHE_PARENT="$(dirname "$OWN_VERSION_DIR")"
+
+SEMVER_RE='^[0-9]+\.[0-9]+\.[0-9]+([-+][0-9A-Za-z.-]+)?$'
+
+# Source-repo guard: own parent dir is NOT semver → dispatch to own scripts/.
+if ! [[ "$OWN_VERSION_NAME" =~ $SEMVER_RE ]]; then
+  exec "$SHIM_DIR/../scripts/check-locale-discipline.sh" "$@"
+fi
+
+# Cache execution: pick the highest-semver sibling under CACHE_PARENT.
+HIGHEST=""
+while IFS= read -r dir; do
+  name="$(basename "$dir")"
+  [[ "$name" =~ $SEMVER_RE ]] || continue
+  if [[ -z "$HIGHEST" ]] || [[ "$(printf '%s\n%s\n' "$HIGHEST" "$name" | sort -V | tail -1)" == "$name" ]]; then
+    HIGHEST="$name"
+  fi
+done < <(find "$CACHE_PARENT" -mindepth 1 -maxdepth 1 -type d 2>/dev/null)
+
+if [[ -z "$HIGHEST" ]]; then
+  printf 'wr-shim: no cached versions in %s\n' "$CACHE_PARENT" >&2
+  exit 127
+fi
+
+exec "$CACHE_PARENT/$HIGHEST/scripts/check-locale-discipline.sh" "$@"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@windyroad/itil",
-  "version": "0.47.0-preview.516",
+  "version": "0.47.1-preview.521",
   "description": "ITIL-aligned IT service management for Claude Code (problem, and future incident/change skills)",
   "bin": {
     "windyroad-itil": "./bin/install.mjs"

package/scripts/check-locale-discipline.sh

@@ -0,0 +1,185 @@
+#!/usr/bin/env bash
+# check-locale-discipline.sh — advisory lint for P328 (BSD locale UTF-8
+# friction on macOS).
+#
+# BSD `grep` / `sed` / `awk` on macOS silently fail (or emit
+# `multibyte conversion failure` / `illegal byte sequence`) when processing
+# UTF-8 multi-byte characters (em-dash `—`, smart quotes, en-dash) without
+# `LC_ALL=en_US.UTF-8` set. Our prose surfaces (ADRs, problem-ticket bodies,
+# briefing entries, SKILL.md files) are pervasively em-dash / smart-quote
+# rich, so any script that grep / sed / awks those surfaces is exposed.
+# P328 captures three distinct incident classes from the 2026-05-30
+# ADR-077 compendium session.
+#
+# This lint walks `packages/*/scripts/*.sh`, `packages/*/hooks/*.sh`, and
+# `packages/*/lib/*.sh` (including `packages/*/hooks/lib/*.sh`) and reports
+# any line invoking `grep` / `sed` / `awk` that is NOT preceded — in the
+# same script — by an `export LC_ALL=` statement OR an inline `LC_ALL=`
+# prefix on the same line. `git grep` is skipped (different binary).
+#
+# Usage:
+#   check-locale-discipline.sh [<repo-root>]
+#     <repo-root> defaults to the current working directory.
+#
+# Environment:
+#   WR_LOCALE_DISCIPLINE_WARN_ONLY=1   Phase 1 advisory (default) — exit 0
+#                                       even when violations exist.
+#   WR_LOCALE_DISCIPLINE_WARN_ONLY=0   Phase 2 load-bearing — exit 1 when
+#                                       violations exist.
+#
+# Exit codes:
+#   0 = clean OR Phase 1 advisory with violations
+#   1 = Phase 2 load-bearing with violations
+#   2 = usage / path error
+#
+# Output format (one line per violation, to stderr):
+#   WARN  <relpath>:<line>  <tool> without preceding LC_ALL=en_US.UTF-8
+#
+# Promotion criteria (Phase 1 → Phase 2):
+#   Promote `WR_LOCALE_DISCIPLINE_WARN_ONLY=0` once existing scripts have
+#   been migrated. Until then, the warnings are signal-only — they identify
+#   scripts that may silently mis-process UTF-8 input on macOS.
+#
+# @adr ADR-040 (advisory-then-load-bearing reusable pattern)
+# @adr ADR-049 (plugin-bundled scripts; PATH shim)
+# @adr ADR-052 (behavioural-tests-default)
+# @adr ADR-080 (highest-version-wins shim wrapper)
+# @adr ADR-013 Rule 6 (non-interactive fail-safe — advisory exit 0)
+# @adr ADR-005 (Plugin testing strategy)
+# @jtbd JTBD-001 (Enforce Governance Without Slowing Down)
+# @jtbd JTBD-101 (Extend the Suite with New Plugins)
+# @problem P328 (BSD grep/sed/awk on macOS friction with UTF-8)
+
+set -uo pipefail
+
+# Self-application: this lint itself grep / sed / awks script content.
+export LC_ALL=en_US.UTF-8
+
+REPO_ROOT="${1:-$(pwd)}"
+WARN_ONLY="${WR_LOCALE_DISCIPLINE_WARN_ONLY:-1}"
+
+if [ ! -d "$REPO_ROOT" ]; then
+  echo "check-locale-discipline: not a directory: $REPO_ROOT" >&2
+  exit 2
+fi
+
+if [ ! -d "$REPO_ROOT/packages" ]; then
+  echo "check-locale-discipline: no packages/ subdir under $REPO_ROOT" >&2
+  exit 2
+fi
+
+# Enumerate target scripts: any *.sh under packages/<pkg>/scripts/,
+# packages/<pkg>/hooks/ (incl. nested lib/), packages/<pkg>/lib/.
+# Depth 3-5 covers packages/<pkg>/scripts/foo.sh and
+# packages/<pkg>/hooks/lib/foo.sh.
+mapfile -t TARGETS < <(
+  find "$REPO_ROOT/packages" \
+    -mindepth 3 -maxdepth 5 \
+    -type f -name '*.sh' \
+    \( -path '*/scripts/*' -o -path '*/hooks/*' -o -path '*/lib/*' \) \
+    2>/dev/null | sort
+)
+
+violations=0
+scanned=0
+
+scan_one() {
+  local file="$1"
+  local rel="${file#"$REPO_ROOT"/}"
+  local line_no=0
+  local lc_all_set=0
+  local in_heredoc=0
+  local heredoc_token=''
+  local line
+
+  while IFS= read -r line || [ -n "$line" ]; do
+    line_no=$((line_no + 1))
+
+    # Heredoc body — skip until the closing token. The closing token
+    # appears on a line of its own (optionally leading whitespace when
+    # opened with `<<-`).
+    if [ "$in_heredoc" -eq 1 ]; then
+      local trimmed="${line#"${line%%[![:space:]]*}"}"
+      if [ "$trimmed" = "$heredoc_token" ]; then
+        in_heredoc=0
+        heredoc_token=''
+      fi
+      continue
+    fi
+
+    # Comment-only line — skip.
+    if [[ "$line" =~ ^[[:space:]]*\# ]]; then
+      continue
+    fi
+
+    # LC_ALL set state. An `export LC_ALL=...` line flips the file-wide
+    # protection on. An inline `LC_ALL=...` prefix on the same line as a
+    # grep / sed / awk invocation protects only that line.
+    if [[ "$line" =~ ^[[:space:]]*export[[:space:]]+LC_ALL= ]]; then
+      lc_all_set=1
+      continue
+    fi
+    if [[ "$line" =~ ^[[:space:]]*LC_ALL= ]]; then
+      continue
+    fi
+
+    # Detect a heredoc-open ON THIS LINE (before deciding it's a violation
+    # — heredoc-open lines may carry a grep/sed/awk invocation that runs).
+    # Grammar: `<<` or `<<-` followed by optional single/double quote then
+    # an identifier-shaped token. Set state for subsequent lines.
+    local opened_heredoc=0
+    if [[ "$line" =~ \<\<-?[\'\"]?([A-Za-z_][A-Za-z0-9_]*)[\'\"]? ]]; then
+      heredoc_token="${BASH_REMATCH[1]}"
+      opened_heredoc=1
+    fi
+
+    # If file-wide LC_ALL is set above this point, no violation possible.
+    if [ "$lc_all_set" -eq 1 ]; then
+      [ "$opened_heredoc" -eq 1 ] && in_heredoc=1
+      continue
+    fi
+
+    # Tool-invocation detector. Word-boundary match on grep / sed / awk
+    # at a command position: start of line, after a pipe, semicolon,
+    # ampersand, open-paren, backtick, or whitespace. Followed by
+    # whitespace (so we skip `grep_helper`, `$grep`, etc.). We scan
+    # for ALL three tools by checking each in turn so multiple
+    # invocations on one line still flag the line once per distinct
+    # tool — keeps output deterministic and bounded.
+    local matched_tool=''
+    if [[ "$line" =~ (^|[[:space:]\|\;\&\(\`\$\{])(grep|sed|awk)([[:space:]]|$) ]]; then
+      matched_tool="${BASH_REMATCH[2]}"
+    fi
+
+    if [ -n "$matched_tool" ]; then
+      # Skip `git grep` (different binary; uses git's own pattern engine).
+      if [ "$matched_tool" = "grep" ] && [[ "$line" =~ git[[:space:]]+grep ]]; then
+        [ "$opened_heredoc" -eq 1 ] && in_heredoc=1
+        continue
+      fi
+      printf 'WARN  %s:%d  %s without preceding LC_ALL=en_US.UTF-8\n' \
+        "$rel" "$line_no" "$matched_tool" >&2
+      violations=$((violations + 1))
+    fi
+
+    [ "$opened_heredoc" -eq 1 ] && in_heredoc=1
+  done < "$file"
+}
+
+for f in "${TARGETS[@]}"; do
+  scanned=$((scanned + 1))
+  scan_one "$f"
+done
+
+if [ "$violations" -gt 0 ]; then
+  printf 'check-locale-discipline: %d violation(s) across %d script(s) — add `export LC_ALL=en_US.UTF-8` at the top of each script that calls grep/sed/awk on UTF-8 content, or use an inline `LC_ALL=...` prefix per invocation (P328).\n' \
+    "$violations" "$scanned" >&2
+  if [ "$WARN_ONLY" = "1" ]; then
+    exit 0
+  else
+    exit 1
+  fi
+fi
+
+printf 'check-locale-discipline: clean (%d script(s) scanned; no unprotected grep/sed/awk invocations).\n' "$scanned"
+exit 0

package/scripts/test/check-locale-discipline.bats

@@ -0,0 +1,291 @@
+#!/usr/bin/env bats
+
+# @problem P328 — BSD `grep` / `sed` / `awk` on macOS silently mis-process
+# UTF-8 multi-byte characters (em-dash, smart quotes) without
+# `LC_ALL=en_US.UTF-8` set. Lint detects unprotected invocations so the
+# class of silent-wrong-result bugs can't reach the codebase undetected.
+#
+# Contract: `check-locale-discipline.sh [<repo-root>]` walks scripts under
+# `packages/*/scripts/`, `packages/*/hooks/` (incl. nested `lib/`), and
+# `packages/*/lib/`, then emits one WARN line per unprotected grep/sed/awk
+# invocation. Default Phase 1 advisory exits 0; `WR_LOCALE_DISCIPLINE_WARN_ONLY=0`
+# promotes to Phase 2 load-bearing (exit 1 on any violation).
+#
+# Behavioural fixture (ADR-052 default): every test exercises the script
+# against a synthesised packages/ fixture tree containing known-state
+# scripts. No grep of SKILL.md / agent prose / source content.
+#
+# @adr ADR-040 (advisory-then-load-bearing reusable pattern)
+# @adr ADR-049 (plugin-bundled scripts; PATH shim)
+# @adr ADR-052 (behavioural-tests-default — temp script with known violations)
+# @adr ADR-080 (highest-version-wins shim wrapper)
+# @adr ADR-005 (Plugin testing strategy — bats coverage)
+# @jtbd JTBD-001 (Enforce Governance Without Slowing Down)
+# @jtbd JTBD-101 (Extend the Suite with New Plugins)
+
+setup() {
+  SCRIPTS_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
+  SCRIPT="$SCRIPTS_DIR/check-locale-discipline.sh"
+  FIXTURE_ROOT="$(mktemp -d)"
+  mkdir -p "$FIXTURE_ROOT/packages/demo/scripts"
+  mkdir -p "$FIXTURE_ROOT/packages/demo/hooks"
+  mkdir -p "$FIXTURE_ROOT/packages/demo/hooks/lib"
+  mkdir -p "$FIXTURE_ROOT/packages/demo/lib"
+}
+
+teardown() {
+  rm -rf "$FIXTURE_ROOT"
+}
+
+# ── Existence + executable ──────────────────────────────────────────────────
+
+@test "check-locale-discipline: script exists" {
+  [ -f "$SCRIPT" ]
+}
+
+@test "check-locale-discipline: script is executable" {
+  [ -x "$SCRIPT" ]
+}
+
+# ── Negative cases (violations expected) ────────────────────────────────────
+
+@test "check-locale-discipline: grep without LC_ALL emits WARN and counts violation" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/raw-grep.sh" <<'EOF'
+#!/usr/bin/env bash
+grep -c '^### ' README.md
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]  # Phase 1 advisory
+  echo "$output" | grep -E "WARN.*raw-grep.sh:2.*grep without preceding LC_ALL"
+  echo "$output" | grep -E "1 violation"
+}
+
+@test "check-locale-discipline: sed without LC_ALL emits WARN" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/raw-sed.sh" <<'EOF'
+#!/usr/bin/env bash
+sed -n '/^### /p' README.md
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  echo "$output" | grep -E "WARN.*raw-sed.sh:2.*sed without preceding LC_ALL"
+}
+
+@test "check-locale-discipline: awk without LC_ALL emits WARN" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/raw-awk.sh" <<'EOF'
+#!/usr/bin/env bash
+awk '/^### /' README.md
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  echo "$output" | grep -E "WARN.*raw-awk.sh:2.*awk without preceding LC_ALL"
+}
+
+# ── Positive cases (file-wide protection — silent pass) ─────────────────────
+
+@test "check-locale-discipline: file-wide export LC_ALL above grep — silent pass" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/protected.sh" <<'EOF'
+#!/usr/bin/env bash
+export LC_ALL=en_US.UTF-8
+grep -c '^### ' README.md
+sed -n '/^### /p' README.md
+awk '/^### /' README.md
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  ! echo "$output" | grep -qE "protected.sh.*WARN"
+  echo "$output" | grep -E "clean"
+}
+
+@test "check-locale-discipline: inline LC_ALL= prefix on same line — silent pass" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/inline.sh" <<'EOF'
+#!/usr/bin/env bash
+LC_ALL=en_US.UTF-8 grep -c '^### ' README.md
+LC_ALL=en_US.UTF-8 sed -n '/^### /p' README.md
+LC_ALL=en_US.UTF-8 awk '/^### /' README.md
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  ! echo "$output" | grep -qE "inline.sh.*WARN"
+}
+
+# ── Edge cases ──────────────────────────────────────────────────────────────
+
+@test "check-locale-discipline: multiple grep/sed/awk on one line — line is flagged" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/multi.sh" <<'EOF'
+#!/usr/bin/env bash
+grep -c '^### ' README.md | sed 's/ //g' | awk '{print $1}'
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  # At least one tool is reported; we don't over-specify the count.
+  echo "$output" | grep -E "WARN.*multi.sh:2.*(grep|sed|awk) without preceding LC_ALL"
+}
+
+@test "check-locale-discipline: git grep is skipped" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/git-grep.sh" <<'EOF'
+#!/usr/bin/env bash
+git grep -nE 'pattern' -- '*.md'
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  ! echo "$output" | grep -qE "git-grep.sh.*WARN"
+}
+
+@test "check-locale-discipline: heredoc body containing grep is not flagged" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/heredoc.sh" <<'EOF'
+#!/usr/bin/env bash
+cat <<'INNER'
+The way to do this is to run: grep '^### ' README.md
+And then: sed -n '/^### /p'
+INNER
+echo "done"
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  # Heredoc body lines must NOT produce WARNs.
+  ! echo "$output" | grep -qE "heredoc.sh:[34].*WARN"
+}
+
+@test "check-locale-discipline: comment-only line is not flagged" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/commented.sh" <<'EOF'
+#!/usr/bin/env bash
+# Future work: replace this awk with a sed | grep pipeline.
+echo "no grep here"
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  ! echo "$output" | grep -qE "commented.sh.*WARN"
+}
+
+@test "check-locale-discipline: identifiers containing grep/sed/awk substrings are not flagged" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/identifiers.sh" <<'EOF'
+#!/usr/bin/env bash
+grep_helper="something"
+result_from_sed=42
+my_awkward_var="x"
+echo "$grep_helper $result_from_sed $my_awkward_var"
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  ! echo "$output" | grep -qE "identifiers.sh.*WARN"
+}
+
+# ── Scope: hooks/ + lib/ + nested hooks/lib/ ────────────────────────────────
+
+@test "check-locale-discipline: scans packages/*/hooks/ scripts" {
+  cat > "$FIXTURE_ROOT/packages/demo/hooks/raw-grep-hook.sh" <<'EOF'
+#!/usr/bin/env bash
+grep -c '^### ' README.md
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  echo "$output" | grep -E "WARN.*hooks/raw-grep-hook.sh:2"
+}
+
+@test "check-locale-discipline: scans packages/*/hooks/lib/ scripts" {
+  cat > "$FIXTURE_ROOT/packages/demo/hooks/lib/nested.sh" <<'EOF'
+#!/usr/bin/env bash
+awk '/^### /' README.md
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  echo "$output" | grep -E "WARN.*hooks/lib/nested.sh:2"
+}
+
+@test "check-locale-discipline: scans packages/*/lib/ scripts" {
+  cat > "$FIXTURE_ROOT/packages/demo/lib/raw-sed-lib.sh" <<'EOF'
+#!/usr/bin/env bash
+sed -n '/^### /p' README.md
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  echo "$output" | grep -E "WARN.*lib/raw-sed-lib.sh:2"
+}
+
+# ── Phase 1 advisory vs Phase 2 load-bearing ────────────────────────────────
+
+@test "check-locale-discipline: Phase 1 default exits 0 even with violations" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/violation.sh" <<'EOF'
+#!/usr/bin/env bash
+grep -c '^### ' README.md
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+}
+
+@test "check-locale-discipline: Phase 2 load-bearing exits 1 on violations" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/violation.sh" <<'EOF'
+#!/usr/bin/env bash
+grep -c '^### ' README.md
+EOF
+  WR_LOCALE_DISCIPLINE_WARN_ONLY=0 run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 1 ]
+}
+
+@test "check-locale-discipline: Phase 2 load-bearing exits 0 on clean tree" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/clean.sh" <<'EOF'
+#!/usr/bin/env bash
+export LC_ALL=en_US.UTF-8
+grep -c '^### ' README.md
+EOF
+  WR_LOCALE_DISCIPLINE_WARN_ONLY=0 run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+}
+
+# ── Argument and error handling ─────────────────────────────────────────────
+
+@test "check-locale-discipline: missing repo-root directory exits 2" {
+  run "$SCRIPT" "$FIXTURE_ROOT/does-not-exist"
+  [ "$status" -eq 2 ]
+  echo "$output" | grep -iE "not a directory"
+}
+
+@test "check-locale-discipline: repo-root without packages/ subdir exits 2" {
+  mkdir -p "$FIXTURE_ROOT/empty"
+  run "$SCRIPT" "$FIXTURE_ROOT/empty"
+  [ "$status" -eq 2 ]
+  echo "$output" | grep -iE "no packages/"
+}
+
+@test "check-locale-discipline: defaults to current working directory when no arg" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/violation.sh" <<'EOF'
+#!/usr/bin/env bash
+grep -c '^### ' README.md
+EOF
+  cd "$FIXTURE_ROOT"
+  run "$SCRIPT"
+  [ "$status" -eq 0 ]
+  echo "$output" | grep -E "WARN.*scripts/violation.sh:2"
+}
+
+# ── Output shape ────────────────────────────────────────────────────────────
+
+@test "check-locale-discipline: clean tree emits summary on stdout" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/clean.sh" <<'EOF'
+#!/usr/bin/env bash
+export LC_ALL=en_US.UTF-8
+grep -c '^### ' README.md
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  echo "$output" | grep -E "^check-locale-discipline: clean"
+}
+
+@test "check-locale-discipline: violation summary cites P328" {
+  cat > "$FIXTURE_ROOT/packages/demo/scripts/violation.sh" <<'EOF'
+#!/usr/bin/env bash
+grep -c '^### ' README.md
+EOF
+  run "$SCRIPT" "$FIXTURE_ROOT"
+  [ "$status" -eq 0 ]
+  echo "$output" | grep -E "P328"
+}
+
+# ── Self-application: lint script itself is locale-discipline-compliant ─────
+
+@test "check-locale-discipline: own script declares export LC_ALL at top" {
+  # The lint walks UTF-8 prose; it must lead by example. This guards
+  # against a future edit that strips the export and reintroduces P328
+  # in the lint itself.
+  head -80 "$SCRIPT" | grep -qE "^export LC_ALL=en_US.UTF-8$"
+}

package/scripts/test/no-type-regression-guard.bats

@@ -65,9 +65,10 @@ setup() {
   diff -q "$HELPER" "$REPO_ROOT/packages/architect/lib/derive-first-dispatch.sh"
 }
 
-@test "P287: capture-problem SKILL.md does not carry --type= or --no-prompt flag rows" {
+@test "P287: capture-problem SKILL.md does not carry --type= flag rows (--no-prompt REVIVED per ADR-060 Amendment 2026-06-02 as AFK marker)" {
   # The retired Step 1.5 dispatch flags must not appear in the flag table.
+  # NB: --no-prompt was REVIVED per ADR-060 Amendment 2026-06-02 — see
+  # capture-problem-step-1-5b-jtbd-trace.bats line 327 (positive assertion).
   ! grep -E '^\| `--type=technical`' "$SKILL_FILE"
   ! grep -E '^\| `--type=user-business`' "$SKILL_FILE"
-  ! grep -E '^\| `--no-prompt`' "$SKILL_FILE"
 }

package/skills/capture-problem/test/capture-problem-step-1-5b-jtbd-trace.bats

@@ -317,7 +317,7 @@ parse_no_prompt_flag() {
 }
 
 @test "SKILL.md: Step 1.5b preserves JTBD-301 firewall on plugin-user-side intake" {
-  grep -qE 'plugin-user-side .* MUST NOT (prompt|carry)' "$SKILL_FILE"
+  grep -qE '[Pp]lugin-user-side.*MUST NOT (prompt|carry)' "$SKILL_FILE"
 }
 
 @test "SKILL.md: Step 1.5b names derive-then-ratify contract" {