@windyroad/itil 0.61.1 → 0.61.2

package/scripts/test/no-type-regression-guard.bats

@@ -1,74 +0,0 @@
-#!/usr/bin/env bats
-
-# P287 regression guard — replaces the historical i2-no-type-branching.bats
-# (which asserted no-control-flow-branch-on-type as an I2 invariant).
-#
-# With the type axis retired per twice-confirmed user direction
-# (2026-05-25 + 2026-06-02), the I2 branch-protection invariant is
-# vacuous (no `type` field to branch on). This regression guard
-# preserves the audit-trail compliance evidence per architect-review
-# verdict 2026-06-02 by asserting the POSITIVE state:
-#
-# - The `**Type**:` body field is GONE from the capture-problem
-#   skeleton template and from every committed problem ticket.
-# - The `lexical_classify_two_sided` helper function is removed.
-# - capture-problem SKILL.md no longer carries the Step 1.5 Type
-#   classification section or its dispatch flags.
-#
-# Drift here = silent reintroduction of the type axis = P287 regression.
-#
-# @problem P287 (type-classification retirement)
-# @problem P176 (agent-side I2 coverage gap — historical; with the
-#   type axis retired the gap is vacuous on that axis)
-# @adr ADR-052 (behavioural-by-default; this is a regression-guard
-#   structural assertion per Surface 2 escape-hatch contract — the
-#   contract surface IS the on-disk artefact state)
-# @adr ADR-014 (single-purpose; one mechanical regression invariant)
-# @jtbd JTBD-001 (enforce governance without slowing down — primary)
-
-setup() {
-  REPO_ROOT="$(cd "$(dirname "$BATS_TEST_FILENAME")/../../../.." && pwd)"
-  PKG_ROOT="$REPO_ROOT/packages/itil"
-  SKILL_FILE="$PKG_ROOT/skills/capture-problem/SKILL.md"
-  HELPER="$REPO_ROOT/packages/shared/derive-first-dispatch.sh"
-  [ -f "$SKILL_FILE" ]
-  [ -f "$HELPER" ]
-}
-
-@test "P287: no committed problem ticket carries a **Type**: body field" {
-  # Find any docs/problems/**/*.md ticket that still carries the
-  # retired type field on a body line. Any match = P287 regression.
-  result=$(grep -r --include='*.md' -l '^\*\*Type\*\*: ' "$REPO_ROOT/docs/problems/" 2>/dev/null || true)
-  [ -z "$result" ]
-}
-
-@test "P287: capture-problem skeleton template does not include a **Type**: line" {
-  ! grep -F '**Type**: <type_value>' "$SKILL_FILE"
-  ! grep -F '**Type**: technical' "$SKILL_FILE"
-  ! grep -F '**Type**: user-business' "$SKILL_FILE"
-}
-
-@test "P287: capture-problem SKILL.md does not carry a Step 1.5 Type classification header" {
-  # The retired Step 1.5 section was titled "### 1.5 Type classification".
-  ! grep -E '^### 1\.5 Type classification' "$SKILL_FILE"
-}
-
-@test "P287: shared dispatch helper does not export lexical_classify_two_sided" {
-  ! grep -E '^lexical_classify_two_sided\(\)' "$HELPER"
-}
-
-@test "P287: per-package lib/ copies are byte-identical to the canonical shared/ source" {
-  # ADR-017 sync compliance — the strip removed lexical_classify_two_sided
-  # from the canonical packages/shared/derive-first-dispatch.sh; the
-  # sync script must propagate the removal to per-package copies.
-  diff -q "$HELPER" "$REPO_ROOT/packages/itil/lib/derive-first-dispatch.sh"
-  diff -q "$HELPER" "$REPO_ROOT/packages/architect/lib/derive-first-dispatch.sh"
-}
-
-@test "P287: capture-problem SKILL.md does not carry --type= flag rows (--no-prompt REVIVED per ADR-060 Amendment 2026-06-02 as AFK marker)" {
-  # The retired Step 1.5 dispatch flags must not appear in the flag table.
-  # NB: --no-prompt was REVIVED per ADR-060 Amendment 2026-06-02 — see
-  # capture-problem-step-1-5b-jtbd-trace.bats line 327 (positive assertion).
-  ! grep -E '^\| `--type=technical`' "$SKILL_FILE"
-  ! grep -E '^\| `--type=user-business`' "$SKILL_FILE"
-}

package/scripts/test/oversight-mirror-corpus-lint.bats

@@ -1,150 +0,0 @@
-#!/usr/bin/env bats
-# P474 / STORY-055 — corpus lint: no artefact may mirror an excluded key.
-#
-# This is a LINT, not a behavioural test, and the distinction is deliberate rather
-# than an ADR-052 exception. ADR-052's forbidden class is structural assertion on
-# document content *as a proxy for behaviour*; all its documented failure modes
-# are proxy failures. Here the content IS the deliverable — "no live artefact
-# carries a mirror" is a property of data, and data has no behaviour to assert.
-# So it homes under ADR-005's script/data-validation authority, which ADR-052
-# explicitly leaves intact.
-#
-# WHY it exists: P474's mirror audit was a one-time inspection, and a one-time
-# inspection has no cadence. The fingerprint excludes four frontmatter keys; if
-# any of them acquires a body mirror, accepting a story silently drops its own
-# ratification and the no-implement gate then denies its own implementing commit.
-# That already happened once with `status`.
-#
-# The behavioural half lives in the last test: it covers a mirror of ANY excluded
-# key in ANY shape, including an HTML meta mirror, which the lint's line-anchored
-# bold-key pattern structurally cannot reach.
-#
-# Two things this lint does NOT catch, recorded rather than implied:
-#   1. The story-map `href` leg (open P474 task) — a card links
-#      `../../stories/<state>/…`, so the lifecycle directory sits inside the map's
-#      hashed content while the card's `data-status` is normalised out. No
-#      bold-key pattern can see that.
-#   2. A mirror written with leading whitespace or inside a list item — the cost
-#      of line-anchoring, taken so no exclusion set is needed.
-#
-# @problem P474  @adr ADR-090 ADR-005 ADR-052  @story STORY-055
-
-setup() {
-  REPO_ROOT="$(cd "$(dirname "$BATS_TEST_FILENAME")/../../../.." && pwd)"
-  LIB="${REPO_ROOT}/packages/itil/lib/story-oversight.sh"
-  # shellcheck source=/dev/null
-  source "$LIB"
-  STORIES="$REPO_ROOT/docs/stories"
-  MAPS="$REPO_ROOT/docs/story-maps"
-  TMPD="$(mktemp -d)"
-}
-teardown() { rm -rf "$TMPD"; }
-
-# Build the pattern from the lib's own accessor, so a key added to the exclusion
-# set is covered without editing this file. Case-INSENSITIVE is load-bearing: the
-# accessor holds lowercase keys (`status`) while every real mirror is Title-Case
-# (`**Status**:`), so a case-sensitive pattern built from the accessor matches
-# nothing on arrival AND stays green when a mirror is reintroduced.
-mirror_pattern() {
-  local alt; alt="$(oversight_excluded_keys | paste -sd'|' -)"
-  printf '^\\*\\*(%s)\\*\\*[[:space:]]*:' "$alt"
-}
-
-# Line-anchored on purpose. Unanchored, this matches four lines of legitimate
-# prose *about* the defect (the stories README, two lines in STORY-054, and
-# STORY-055's own problem trace), which would redden on arrival and require an
-# exclusion list growing with every future story that discusses a mirror.
-scan() {
-  # -H is load-bearing, not decoration. Given exactly ONE file argument, GNU grep
-  # OMITS the filename prefix while this machine's grep emits it — so a fixture
-  # scan over a single file produced output containing the matched line but not
-  # the file it came from, and the assertion naming that file passed locally and
-  # failed on CI. Forcing the prefix makes output identical across grep
-  # implementations, and makes the two production diagnostics below name the
-  # offending artefact rather than only quoting the line.
-  grep -rHniE "$(mirror_pattern)" "$@" 2>/dev/null || true
-}
-
-@test "lint: the excluded-key accessor is non-empty and the pattern is well-formed" {
-  # Guard against a silently-empty pattern — the whole lint would go vacuous.
-  local keys; keys="$(oversight_excluded_keys)"
-  [ -n "$keys" ]
-  [ "$(printf '%s\n' "$keys" | wc -l | tr -d ' ')" -ge 4 ]
-  [[ "$(mirror_pattern)" == *'status'* ]]
-}
-
-@test "lint: search roots exist and hold artefacts — fails loudly, never vacuously" {
-  # A renamed or adopter-relative path must fail here rather than let the scan
-  # below pass by matching nothing. This is the shape that reddened main once.
-  [ -d "$STORIES" ]
-  [ -d "$MAPS" ]
-  local n
-  n="$(find "$STORIES" -name 'STORY-*.md' -type f 2>/dev/null | wc -l | tr -d ' ')"
-  [ "$n" -ge 1 ] || { echo "no STORY-*.md under $STORIES — lint would be vacuous"; false; }
-  n="$(find "$MAPS" -name '*.html' -type f 2>/dev/null | wc -l | tr -d ' ')"
-  [ "$n" -ge 1 ] || { echo "no maps under $MAPS — lint would be vacuous"; false; }
-}
-
-@test "lint: no story artefact mirrors an excluded frontmatter key in its body" {
-  local hits
-  hits="$(scan "$STORIES"/*/STORY-*.md)"
-  [ -z "$hits" ] || {
-    printf 'body mirror of an excluded key found — accepting these stories will drop their ratification:\n%s\n' "$hits"
-    printf 'remove the line; run `wr-itil-migrate-story-status-mirror docs/stories` for an existing corpus.\n'
-    false
-  }
-}
-
-@test "lint: no story map mirrors an excluded frontmatter key in its body" {
-  # The map's own `<meta name="status">` is the key's HOME in the HTML encoding,
-  # not a mirror of it, and the lib's filter already excludes it — so the
-  # line-anchored bold-key pattern correctly does not flag it.
-  local hits
-  hits="$(scan "$MAPS"/*/*.html)"
-  [ -z "$hits" ] || {
-    printf 'body mirror of an excluded key found in a map:\n%s\n' "$hits"
-    false
-  }
-}
-
-@test "lint: RED on an injected mirror — proves the pattern actually fires" {
-  mkdir -p "$TMPD/stories/draft"
-  printf -- '---\nstatus: accepted\n---\n\n# STORY-999: x\n\n**Status**: accepted\n**Reported**: 2026-07-30\n' \
-    > "$TMPD/stories/draft/STORY-999-x.md"
-  local hits; hits="$(scan "$TMPD/stories"/*/STORY-*.md)"
-  [ -n "$hits" ] || { echo "lint failed to detect an injected line-start **Status**: mirror"; false; }
-  [[ "$hits" == *"STORY-999"* ]]
-}
-
-@test "lint: prose ABOUT a mirror is not flagged — that is what line-anchoring buys" {
-  mkdir -p "$TMPD/prose/draft"
-  printf -- '---\nstatus: accepted\n---\n\n# STORY-998: y\n\nThe `**Status**:` line used to be hashed.\n<!-- No **Status**: body line, deliberately. -->\n' \
-    > "$TMPD/prose/draft/STORY-998-y.md"
-  [ -z "$(scan "$TMPD/prose"/*/STORY-*.md)" ]
-}
-
-# The behavioural half. Covers a mirror of ANY excluded key in ANY shape,
-# including the HTML meta form the lint's pattern cannot reach.
-@test "behavioural: a mirror of any excluded key drifts a ratified artefact" {
-  local k
-  for k in $(oversight_excluded_keys); do
-    # Skip the marker keys themselves — those are excluded BY the marker write,
-    # so a "mirror" of them is what the filter is for.
-    case "$k" in human-oversight|oversight-hash|oversight-basis) continue ;; esac
-    local f="$TMPD/mirror-$k.md"
-    printf -- '---\n%s: draft\nhuman-oversight: confirmed\noversight-hash: P\n---\n\n# STORY-997\n\nbody\n' "$k" > "$f"
-    local h; h="$(oversight_content_hash "$f")"
-    sed -i.bak "s/oversight-hash: P/oversight-hash: $h/" "$f" && rm -f "$f.bak"
-    run is_story_map_ratified "$f"
-    [ "$status" -eq 0 ]
-    # Add a body mirror of that key, then advance BOTH copies the way a
-    # transition would. The frontmatter change alone is excluded; the body
-    # mirror is not — so ratification must drop, which is P474 exactly.
-    printf -- '**%s**: accepted\n' "$k" >> "$f"
-    h="$(oversight_content_hash "$f")"
-    sed -i.bak "s/^oversight-hash: .*/oversight-hash: $h/" "$f" && rm -f "$f.bak"
-    sed -i.bak "s/^${k}: draft/${k}: accepted/; s/^\\*\\*${k}\\*\\*: accepted/**${k}**: DIFFERENT/" "$f" && rm -f "$f.bak"
-    run is_story_map_ratified "$f"
-    [ "$status" -ne 0 ] || { echo "a body mirror of '$k' did not drift the hash"; false; }
-  done
-}

package/scripts/test/plugin-exercise-index.bats

@@ -1,386 +0,0 @@
-#!/usr/bin/env bats
-
-# @problem P087 — Phase 2b git-axis script behavioural confirmation.
-#
-# Contract under test: `packages/itil/scripts/plugin-exercise-index.sh` runs
-# `git log --since=<N>d --name-only --pretty=format:%H|%aI|%s` once at the
-# project root, auto-discovers plugins by listing `packages/*/`, and emits
-# one NDJSON record per plugin with the v1.0 schema fields per ADR-058
-# §Script contracts (line 87-113). Exit code 0 always per ADR-013 Rule 6
-# fail-safe (outside-git-repo, missing `packages/`, opt-out marker all hit
-# the zero-records/stderr-comment path).
-#
-# Confirmation criteria 6-8 from ADR-058 §Confirmation are the load-bearing
-# behavioural assertions in this file. Sibling to Phase 2a's
-# `skill-invocations.bats` (criteria 1-5).
-#
-# @adr ADR-058 (Plugin maturity measurement mechanism)
-# @adr ADR-049 (Shim grammar — `wr-itil-plugin-exercise-index` on $PATH)
-# @adr ADR-035 (Privacy posture — opt-out marker, no network primitive,
-#   content sanitisation — commit subjects parsed only for `BREAKING|feat!|fix!`
-#   token presence, never echoed to stdout)
-# @adr ADR-052 (Behavioural tests default — NDJSON-output-driven against
-#   fixture git repos, not source-greps on script body; the no-network
-#   negative-grep at Confirmation #3 is the documented carve-out)
-# @adr ADR-013 Rule 6 (non-interactive fail-safe — exit 0 always)
-# @jtbd JTBD-101 (Extend the Suite — hardening-prioritisation outcome,
-#   commits_window + closed_tickets_window + days_shipped serve the
-#   git-axis half of the 2026-05-04 outcome amendment)
-# @jtbd JTBD-201 (Restore Service Fast — audit-trail composition)
-
-setup() {
-  SCRIPTS_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  SCRIPT="$SCRIPTS_DIR/plugin-exercise-index.sh"
-  FIXTURE_DIR="$(mktemp -d)"
-  REPO_ROOT="$FIXTURE_DIR/repo"
-  mkdir -p "$REPO_ROOT"
-}
-
-teardown() {
-  rm -rf "$FIXTURE_DIR"
-}
-
-# Helper: initialise a temp git repo at REPO_ROOT with a stable author/email
-# (otherwise `git commit` aborts on systems without user.name configured).
-init_repo() {
-  (
-    cd "$REPO_ROOT"
-    git init -q -b main
-    git config user.email "bats@example.com"
-    git config user.name "bats"
-    git config commit.gpgsign false
-  )
-}
-
-# Helper: stage a file under packages/<plugin>/ and commit at a given date.
-# Date is ISO 8601 (e.g. 2026-05-01T12:00:00) — fed to GIT_AUTHOR_DATE /
-# GIT_COMMITTER_DATE so log --since works deterministically.
-commit_under_plugin() {
-  local plugin="$1"; local relpath="$2"; local subject="$3"; local date="$4"
-  local full="$REPO_ROOT/packages/$plugin/$relpath"
-  mkdir -p "$(dirname "$full")"
-  echo "content-$RANDOM" >> "$full"
-  (
-    cd "$REPO_ROOT"
-    GIT_AUTHOR_DATE="$date" GIT_COMMITTER_DATE="$date" \
-      git -c user.email=bats@example.com -c user.name=bats \
-      add "packages/$plugin/$relpath" >/dev/null
-    GIT_AUTHOR_DATE="$date" GIT_COMMITTER_DATE="$date" \
-      git -c user.email=bats@example.com -c user.name=bats \
-      commit -q -m "$subject"
-  )
-}
-
-# Helper: ISO timestamp N days ago (UTC). Cross-platform — uses python3.
-days_ago_iso() {
-  python3 -c "import sys, datetime; print((datetime.datetime.utcnow() - datetime.timedelta(days=int(sys.argv[1]))).strftime('%Y-%m-%dT%H:%M:%S'))" "$1"
-}
-
-# ── Existence / executable ──────────────────────────────────────────────────
-
-@test "plugin-exercise-index: canonical script exists" {
-  [ -f "$SCRIPT" ]
-}
-
-@test "plugin-exercise-index: canonical script is executable" {
-  [ -x "$SCRIPT" ]
-}
-
-@test "plugin-exercise-index: shim file exists with ADR-049 grammar" {
-  local shim="$SCRIPTS_DIR/../bin/wr-itil-plugin-exercise-index"
-  [ -f "$shim" ]
-  [ -x "$shim" ]
-  grep -q 'exec.*scripts/plugin-exercise-index.sh' "$shim"
-}
-
-# ── Confirmation #6: git-axis composite fixture ─────────────────────────────
-# Seed a temp git repo with packages/dummy/ + three commits (one in window,
-# two out of window). Assert NDJSON record for plugin="dummy" has
-# commits_window=1 under the 60-day default window.
-
-@test "Confirmation #6: three commits, one in window, commits_window=1" {
-  init_repo
-  local in_window=$(days_ago_iso 10)
-  local out_window_1=$(days_ago_iso 90)
-  local out_window_2=$(days_ago_iso 120)
-  commit_under_plugin "dummy" "src/a.txt" "feat: in-window change" "$in_window"
-  commit_under_plugin "dummy" "src/b.txt" "feat: out-of-window 1" "$out_window_1"
-  commit_under_plugin "dummy" "src/c.txt" "feat: out-of-window 2" "$out_window_2"
-
-  run "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT"
-  [ "$status" -eq 0 ]
-  # Exactly one NDJSON record for plugin="dummy"
-  local rec
-  rec="$(echo "$output" | grep '"plugin":"dummy"')"
-  [ -n "$rec" ]
-  echo "$rec" | python3 -c "
-import json, sys
-r = json.loads(sys.stdin.read().strip())
-assert r['schema_version'] == '1.0', r
-assert r['axis'] == 'plugin-exercise-index', r
-assert r['plugin'] == 'dummy', r
-assert r['commits_window'] == 1, r
-assert r['window_days'] == 60, r
-assert r['days_shipped'] >= 120, r
-"
-}
-
-@test "Confirmation #6: emits one record per discovered plugin" {
-  init_repo
-  local ts=$(days_ago_iso 5)
-  commit_under_plugin "alpha" "src/a.txt" "feat: alpha change" "$ts"
-  commit_under_plugin "beta" "src/b.txt" "feat: beta change" "$ts"
-
-  run "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT"
-  [ "$status" -eq 0 ]
-  echo "$output" | grep -q '"plugin":"alpha"'
-  echo "$output" | grep -q '"plugin":"beta"'
-  # Line count = number of discovered plugins (alpha + beta)
-  local line_count
-  line_count="$(printf '%s' "$output" | grep -c .)"
-  [ "$line_count" -eq 2 ]
-}
-
-@test "Confirmation #6: commit subject containing literal pipe parses correctly" {
-  # ADR-058 line 89 pins `--pretty=format:%H|%aI|%s` — the parser must
-  # split on first two `|` only (line.split('|', 2)) so subjects with
-  # literal `|` characters do not corrupt parsing. Architect advisory.
-  init_repo
-  local ts=$(days_ago_iso 5)
-  commit_under_plugin "pipey" "src/a.txt" "feat: subject with | pipe in it" "$ts"
-
-  run "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT"
-  [ "$status" -eq 0 ]
-  echo "$output" | grep -q '"plugin":"pipey"'
-  echo "$output" | grep -q '"commits_window":1'
-}
-
-# ── Confirmation #7: outside-git-repo fixture ───────────────────────────────
-
-@test "Confirmation #7: outside-git-repo emits zero records, stderr comment, exit 0" {
-  # REPO_ROOT exists but no `git init` ran — it is not a git repo.
-  local stdout_file="$FIXTURE_DIR/nogit.out"
-  local stderr_file="$FIXTURE_DIR/nogit.err"
-  "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT" >"$stdout_file" 2>"$stderr_file"
-  local rc=$?
-  [ "$rc" -eq 0 ]
-  [ ! -s "$stdout_file" ]
-  grep -q "not a git repository" "$stderr_file"
-}
-
-@test "Confirmation #7: missing packages/ directory emits zero records, exit 0" {
-  init_repo
-  # Repo has no packages/ directory at all. Make a non-packages commit so
-  # `git log` returns something but no plugins are discovered.
-  (
-    cd "$REPO_ROOT"
-    echo readme > README.md
-    GIT_AUTHOR_DATE="$(days_ago_iso 5)" GIT_COMMITTER_DATE="$(days_ago_iso 5)" \
-      git -c user.email=bats@example.com -c user.name=bats add README.md >/dev/null
-    GIT_AUTHOR_DATE="$(days_ago_iso 5)" GIT_COMMITTER_DATE="$(days_ago_iso 5)" \
-      git -c user.email=bats@example.com -c user.name=bats commit -q -m "feat: readme"
-  )
-
-  local stdout_file="$FIXTURE_DIR/nopkg.out"
-  local stderr_file="$FIXTURE_DIR/nopkg.err"
-  "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT" >"$stdout_file" 2>"$stderr_file"
-  local rc=$?
-  [ "$rc" -eq 0 ]
-  [ ! -s "$stdout_file" ]
-  grep -q "no packages/ directory" "$stderr_file"
-}
-
-# ── Confirmation #8: schema-version contract ────────────────────────────────
-
-@test "Confirmation #8: every NDJSON record has schema_version=1.0" {
-  init_repo
-  local ts=$(days_ago_iso 5)
-  commit_under_plugin "p1" "src/a.txt" "feat: p1" "$ts"
-  commit_under_plugin "p2" "src/b.txt" "feat: p2" "$ts"
-
-  run "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT"
-  [ "$status" -eq 0 ]
-  # Validate every line carries schema_version="1.0"
-  echo "$output" | python3 -c "
-import json, sys
-for line in sys.stdin:
-  line = line.strip()
-  if not line: continue
-  r = json.loads(line)
-  assert r['schema_version'] == '1.0', r
-  assert r['axis'] == 'plugin-exercise-index', r
-"
-}
-
-# ── Privacy: opt-out marker ─────────────────────────────────────────────────
-
-@test "opt-out marker disables reads, stderr comment, exit 0" {
-  init_repo
-  local ts=$(days_ago_iso 5)
-  commit_under_plugin "x" "src/a.txt" "feat: would-be-recorded" "$ts"
-  mkdir -p "$REPO_ROOT/.claude"
-  touch "$REPO_ROOT/.claude/.skill-metrics-opt-out"
-
-  local stdout_file="$FIXTURE_DIR/opt.out"
-  local stderr_file="$FIXTURE_DIR/opt.err"
-  "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT" >"$stdout_file" 2>"$stderr_file"
-  local rc=$?
-  [ "$rc" -eq 0 ]
-  [ ! -s "$stdout_file" ]
-  grep -q "opt-out marker present at" "$stderr_file"
-}
-
-# ── Privacy: no-network-primitive (ADR-052 negative-grep carve-out) ─────────
-
-@test "canonical body contains no network primitives" {
-  run grep -nE '\bcurl\b|\bwget\b|\bnc[[:space:]]|\bfetch\b|http\.client|\burllib\b' "$SCRIPT"
-  [ "$status" -eq 1 ]
-  [ -z "$output" ]
-}
-
-# ── Privacy: commit-subject prose never leaks beyond breaking-marker test ───
-
-@test "commit subjects never appear in NDJSON output beyond BREAKING/feat!/fix! parse" {
-  init_repo
-  local ts=$(days_ago_iso 5)
-  # Subject contains a recognisable token that must NOT echo to stdout.
-  commit_under_plugin "secrety" "src/a.txt" "feat: contains SECRETPROSEXYZ token" "$ts"
-
-  run "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT"
-  [ "$status" -eq 0 ]
-  echo "$output" | grep -q '"plugin":"secrety"'
-  ! echo "$output" | grep -q "SECRETPROSEXYZ"
-}
-
-# ── composite_index calculation ─────────────────────────────────────────────
-
-@test "composite_index = log10(commits+1) + log10(closed+1) + days_shipped_bonus" {
-  init_repo
-  # Set the OLDEST commit > 60 days ago to earn the days_shipped >= 60 bonus
-  # of +1.0. Then add 9 in-window commits so log10(9+1) = 1.0.
-  commit_under_plugin "calc" "src/old.txt" "feat: old" "$(days_ago_iso 90)"
-  for i in 1 2 3 4 5 6 7 8 9; do
-    commit_under_plugin "calc" "src/n$i.txt" "feat: n$i" "$(days_ago_iso 5)"
-  done
-
-  run "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT"
-  [ "$status" -eq 0 ]
-  # commits_window=9 (only the 9 recent ones), days_shipped >= 60 (90 days
-  # since oldest), closed_tickets_window=0 (no docs/problems/).
-  # composite_index = log10(10) + log10(1) + 1.0 = 1.0 + 0.0 + 1.0 = 2.0
-  echo "$output" | grep '"plugin":"calc"' | python3 -c "
-import json, sys
-r = json.loads(sys.stdin.read().strip())
-assert r['commits_window'] == 9, r
-assert r['days_shipped'] >= 60, r
-assert r['closed_tickets_window'] == 0, r
-assert abs(r['composite_index'] - 2.0) < 0.01, r
-"
-}
-
-@test "composite_index respects days_shipped < 60 (no bonus)" {
-  init_repo
-  # All commits within last 30 days; days_shipped < 60.
-  for i in 1 2 3 4 5 6 7 8 9; do
-    commit_under_plugin "young" "src/n$i.txt" "feat: n$i" "$(days_ago_iso 5)"
-  done
-
-  run "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT"
-  [ "$status" -eq 0 ]
-  # commits_window=9, days_shipped=5, closed_tickets_window=0
-  # composite_index = log10(10) + log10(1) + 0.0 = 1.0
-  echo "$output" | grep '"plugin":"young"' | python3 -c "
-import json, sys
-r = json.loads(sys.stdin.read().strip())
-assert r['commits_window'] == 9, r
-assert r['days_shipped'] < 60, r
-assert abs(r['composite_index'] - 1.0) < 0.01, r
-"
-}
-
-# ── closed_tickets_window ──────────────────────────────────────────────────
-
-@test "closed_tickets_window counts .closed/.verifying tickets citing the plugin" {
-  init_repo
-  local ts=$(days_ago_iso 5)
-  commit_under_plugin "cited" "src/a.txt" "feat: cited" "$ts"
-  # Seed two closed tickets in docs/problems/ — one cites packages/cited/,
-  # one does not. Both have recent mtime so the 90-day window includes them.
-  mkdir -p "$REPO_ROOT/docs/problems"
-  echo "## Related
-- packages/cited/scripts/foo.sh" > "$REPO_ROOT/docs/problems/100-something.closed.md"
-  echo "## Related
-- packages/other/scripts/bar.sh" > "$REPO_ROOT/docs/problems/101-other.closed.md"
-
-  run "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT"
-  [ "$status" -eq 0 ]
-  echo "$output" | grep '"plugin":"cited"' | python3 -c "
-import json, sys
-r = json.loads(sys.stdin.read().strip())
-assert r['closed_tickets_window'] == 1, r
-"
-}
-
-# ── breaking_change_age_days ───────────────────────────────────────────────
-
-@test "breaking_change_age_days surfaces BREAKING/feat!/fix! marker presence" {
-  init_repo
-  local recent=$(days_ago_iso 3)
-  local older=$(days_ago_iso 20)
-  commit_under_plugin "brk" "src/a.txt" "feat: normal change" "$older"
-  commit_under_plugin "brk" "src/b.txt" "feat!: breaking change" "$recent"
-
-  run "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT"
-  [ "$status" -eq 0 ]
-  echo "$output" | grep '"plugin":"brk"' | python3 -c "
-import json, sys
-r = json.loads(sys.stdin.read().strip())
-v = r['breaking_change_age_days']
-assert v is not None, r
-assert 0 <= v <= 7, r
-"
-}
-
-@test "breaking_change_age_days is null when no breaking marker in window" {
-  init_repo
-  local ts=$(days_ago_iso 5)
-  commit_under_plugin "nobreak" "src/a.txt" "feat: ordinary" "$ts"
-  commit_under_plugin "nobreak" "src/b.txt" "fix: ordinary" "$ts"
-
-  run "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT"
-  [ "$status" -eq 0 ]
-  echo "$output" | grep '"plugin":"nobreak"' | python3 -c "
-import json, sys
-r = json.loads(sys.stdin.read().strip())
-assert r['breaking_change_age_days'] is None, r
-"
-}
-
-# ── Forward-extension flag: --category-overrides ────────────────────────────
-
-@test "category-overrides flag is accepted without functional effect" {
-  init_repo
-  commit_under_plugin "cat" "src/a.txt" "feat: cat" "$(days_ago_iso 5)"
-  echo '{}' > "$FIXTURE_DIR/overrides.json"
-
-  run "$SCRIPT" --window-days=60 --project-root="$REPO_ROOT" --category-overrides="$FIXTURE_DIR/overrides.json"
-  [ "$status" -eq 0 ]
-  echo "$output" | grep -q '"plugin":"cat"'
-}
-
-# ── Window-days filter ──────────────────────────────────────────────────────
-
-@test "window-days filter excludes commits older than the window" {
-  init_repo
-  commit_under_plugin "win" "src/old.txt" "feat: old" "$(days_ago_iso 30)"
-  commit_under_plugin "win" "src/new.txt" "feat: new" "$(days_ago_iso 1)"
-
-  run "$SCRIPT" --window-days=7 --project-root="$REPO_ROOT"
-  [ "$status" -eq 0 ]
-  echo "$output" | grep '"plugin":"win"' | python3 -c "
-import json, sys
-r = json.loads(sys.stdin.read().strip())
-assert r['commits_window'] == 1, r
-assert r['window_days'] == 7, r
-"
-}