@windyroad/itil 0.61.1 → 0.61.2

package/scripts/test/plugin-maturity-render.bats

@@ -1,469 +0,0 @@
-#!/usr/bin/env bats
-
-# @problem P238 — Phase 3b renderer behavioural confirmation.
-# @problem P087 — parent: plugin maturity battle-hardening signal.
-#
-# Contract under test: `packages/itil/scripts/plugin-maturity-render.sh`
-# reads `plugin.json` `maturity:` field (per Phase 3a populate output)
-# and writes a prose-woven rollup badge into each plugin's README.md
-# value-framing lead prose AND populates a per-skill `Maturity` column
-# in the existing `## Skills` table. Idempotent — re-running with
-# unchanged inputs produces byte-identical README output.
-#
-# Anti-patterns enforced (ADR-063 §README badge rendering format):
-#   - NO standalone `## Maturity` section
-#   - NO header block immediately after H1 before any prose framing
-#   - NO shields.io URL or inline SVG (markdown text only)
-#
-# Bootstrapping rendering: rollup carries compound form during the
-# suite-bootstrap window; per-skill column carries band name only
-# (compound stays at rollup, never at cell).
-#
-# @adr ADR-063 (Plugin maturity presentation layer — Phase 3b contract)
-# @adr ADR-053 (Plugin maturity taxonomy — Bootstrapping clause rendering)
-# @adr ADR-051 (JTBD-anchored README — prose-weaving precedent)
-# @adr ADR-049 (Shim grammar — `wr-itil-plugin-maturity-render` on $PATH)
-# @adr ADR-052 (Behavioural tests default)
-# @adr ADR-013 Rule 6 (non-interactive fail-safe — exit 0 always)
-
-setup() {
-  SCRIPTS_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  SCRIPT="$SCRIPTS_DIR/plugin-maturity-render.sh"
-  FIXTURE_DIR="$(mktemp -d)"
-  PROJECT_ROOT="$FIXTURE_DIR/project"
-  mkdir -p "$PROJECT_ROOT/packages"
-}
-
-teardown() {
-  rm -rf "$FIXTURE_DIR"
-}
-
-# Helper: write a synthetic plugin layout with plugin.json + README.md
-make_plugin() {
-  local name="$1"
-  local plugin_json="$2"
-  local readme="$3"
-  local pkg="$PROJECT_ROOT/packages/$name"
-  mkdir -p "$pkg/.claude-plugin"
-  printf '%s\n' "$plugin_json" > "$pkg/.claude-plugin/plugin.json"
-  printf '%s\n' "$readme" > "$pkg/README.md"
-}
-
-# ── Pre-checks ──────────────────────────────────────────────────────────────
-
-@test "script file exists and is executable" {
-  [ -f "$SCRIPT" ]
-  [ -x "$SCRIPT" ]
-}
-
-@test "missing packages dir exits 0 with stderr comment" {
-  run bash "$SCRIPT" --project-root="$FIXTURE_DIR/does-not-exist"
-  [ "$status" -eq 0 ]
-}
-
-@test "opt-out marker present: skips all writes" {
-  make_plugin "stub" '{"name":"wr-stub","version":"0.1.0","description":"Stub","maturity":{"schema_version":"1.0","band":"Alpha"}}' \
-"# @windyroad/stub
-
-**Stub plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-stub:thing | Does a thing |
-"
-  mkdir -p "$PROJECT_ROOT/.claude"
-  touch "$PROJECT_ROOT/.claude/.skill-metrics-opt-out"
-  local before; before="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-
-  local after; after="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-  [ "$before" = "$after" ]
-}
-
-# ── Confirmation #1 (ADR-063): rollup badge prose-woven into lead prose ─────
-
-@test "rollup badge: inserts prose-woven Maturity span into bold lead prose line" {
-  make_plugin "stub" '{"name":"wr-stub","version":"0.1.0","description":"Stub","maturity":{"schema_version":"1.0","band":"Alpha"}}' \
-"# @windyroad/stub
-
-**Stub plugin description.** Some more prose.
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-stub:thing | Does a thing |
-"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-
-  local out; out="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-  # Prose-woven Maturity span appears, italicised, in the lead-prose area
-  [[ "$out" == *"*Maturity: Alpha"* ]]
-}
-
-@test "rollup badge: bootstrapping window renders compound form with invocation count" {
-  make_plugin "stub" '{"name":"wr-stub","version":"0.1.0","description":"Stub","maturity":{"schema_version":"1.0","band":"Experimental","bootstrapping":true,"rollup_invocations_30d":796}}' \
-"# @windyroad/stub
-
-**Stub plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-stub:thing | Does a thing |
-"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-
-  local out; out="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-  [[ "$out" == *"Experimental"* ]]
-  [[ "$out" == *"suite-bootstrap window"* ]]
-  [[ "$out" == *"796 invocations"* ]]
-}
-
-@test "rollup badge: post-bootstrap renders band name only (no compound)" {
-  make_plugin "stub" '{"name":"wr-stub","version":"0.1.0","description":"Stub","maturity":{"schema_version":"1.0","band":"Beta"}}' \
-"# @windyroad/stub
-
-**Stub plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-stub:thing | Does a thing |
-"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-
-  local out; out="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-  [[ "$out" == *"*Maturity: Beta.*"* ]]
-  [[ "$out" != *"suite-bootstrap"* ]]
-  [[ "$out" != *"invocations"* ]]
-}
-
-# ── P269: AND-gated compound predicate — null rollup_invocations_30d → bare ─
-
-@test "rollup badge: bootstrapping=true + rollup_invocations_30d=null → bare-band (hook-only plugin)" {
-  # P269: when populate writes bootstrapping=true but rollup_invocations_30d
-  # is null (hook-only plugin — no countable surfaces), the renderer's
-  # AND-gated compound predicate at plugin-maturity-render.sh:146 must fall
-  # through to bare-band. `0 invocations / 30d` would lie; bare-band is the
-  # honest fall-through.
-  make_plugin "hookonly" '{"name":"wr-hookonly","version":"0.1.0","description":"Hook-only","maturity":{"schema_version":"2.0","band":"Experimental","bootstrapping":true,"rollup_invocations_30d":null}}' \
-"# @windyroad/hookonly
-
-**Hook-only plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-hookonly:thing | Does a thing |
-"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-
-  local out; out="$(cat "$PROJECT_ROOT/packages/hookonly/README.md")"
-  [[ "$out" == *"*Maturity: Experimental.*"* ]]
-  [[ "$out" != *"suite-bootstrap"* ]]
-  [[ "$out" != *"invocations"* ]]
-}
-
-# ── P269: AND-gated compound predicate — bootstrapping=false → bare-band ────
-
-@test "rollup badge: bootstrapping=false + rollup_invocations_30d=integer → bare-band (post-sunset)" {
-  # P269: when bootstrapping has lapsed (suite_oldest_days >= 60), populate
-  # writes bootstrapping=false. Even with a non-null rollup_invocations_30d,
-  # the AND-gated predicate falls through to bare-band — the compound
-  # rendering is scoped to the bootstrapping window per ADR-053 §Bootstrapping
-  # clause Phase 3 rendering requirement.
-  make_plugin "stedp" '{"name":"wr-stedp","version":"0.1.0","description":"Steady","maturity":{"schema_version":"2.0","band":"Beta","bootstrapping":false,"rollup_invocations_30d":1500}}' \
-"# @windyroad/stedp
-
-**Steady-state plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-stedp:thing | Does a thing |
-"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-
-  local out; out="$(cat "$PROJECT_ROOT/packages/stedp/README.md")"
-  [[ "$out" == *"*Maturity: Beta.*"* ]]
-  [[ "$out" != *"suite-bootstrap"* ]]
-  [[ "$out" != *"invocations"* ]]
-}
-
-# ── Confirmation #2 (ADR-063): per-skill Maturity column populated ──────────
-
-@test "per-skill column: adds Maturity column to existing Skills table" {
-  make_plugin "stub" '{
-"name":"wr-stub","version":"0.1.0","description":"Stub",
-"maturity":{"schema_version":"2.0","band":"Alpha","skills":{
-"thing":{"schema_version":"2.0","band":"Alpha","computed_at":"2026-05-18T00:00:00Z","evidence":{"invocations_30d":50,"days_shipped":30,"closed_tickets_window":5,"breaking_change_age_days":null}},
-"widget":{"schema_version":"2.0","band":"Experimental","computed_at":"2026-05-18T00:00:00Z","evidence":{"invocations_30d":2,"days_shipped":5,"closed_tickets_window":0,"breaking_change_age_days":null}}
-}}
-}' \
-"# @windyroad/stub
-
-**Stub plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-stub:thing | Does a thing |
-| /wr-stub:widget | Widgets things |
-"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-
-  local out; out="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-  # Header row gains Maturity column
-  [[ "$out" == *"| Skill | Purpose | Maturity |"* ]]
-  # Cells populated
-  [[ "$out" == *"/wr-stub:thing"*"| Alpha |"* ]]
-  [[ "$out" == *"/wr-stub:widget"*"| Experimental |"* ]]
-  # Per-skill cell carries band name ONLY (no compound)
-  [[ "$out" != *"| Alpha (suite"* ]]
-}
-
-# ── Idempotency: second run produces no diff ────────────────────────────────
-
-@test "idempotency: second run against unchanged plugin.json produces byte-equal README" {
-  make_plugin "stub" '{"name":"wr-stub","version":"0.1.0","description":"Stub","maturity":{"schema_version":"1.0","band":"Alpha"}}' \
-"# @windyroad/stub
-
-**Stub plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-stub:thing | Does a thing |
-"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-  local first; first="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-  local second; second="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-
-  [ "$first" = "$second" ]
-}
-
-@test "idempotency: existing Maturity badge gets replaced (not appended)" {
-  make_plugin "stub" '{"name":"wr-stub","version":"0.1.0","description":"Stub","maturity":{"schema_version":"1.0","band":"Beta"}}' \
-"# @windyroad/stub
-
-**Stub plugin description.** *Maturity: Alpha.*
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-stub:thing | Does a thing |
-"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-
-  local out; out="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-  # Beta replaced Alpha (no duplication)
-  [[ "$out" == *"*Maturity: Beta"* ]]
-  [[ "$out" != *"*Maturity: Alpha"* ]]
-  # Single Maturity span (no duplication)
-  local count
-  count="$(grep -oE '\*Maturity: [^*]+\*' "$PROJECT_ROOT/packages/stub/README.md" | wc -l)"
-  [ "$count" -eq 1 ]
-}
-
-# ── Anti-pattern: no standalone ## Maturity section emitted ─────────────────
-
-@test "anti-pattern: renderer never emits a standalone ## Maturity section" {
-  make_plugin "stub" '{"name":"wr-stub","version":"0.1.0","description":"Stub","maturity":{"schema_version":"1.0","band":"Alpha"}}' \
-"# @windyroad/stub
-
-**Stub plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-stub:thing | Does a thing |
-"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-
-  local out; out="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-  [[ "$out" != *"## Maturity"* ]]
-  [[ "$out" != *"# Maturity"* ]]
-}
-
-@test "anti-pattern: no shields.io badge URL emitted" {
-  make_plugin "stub" '{"name":"wr-stub","version":"0.1.0","description":"Stub","maturity":{"schema_version":"1.0","band":"Alpha"}}' \
-"# @windyroad/stub
-
-**Stub plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-stub:thing | Does a thing |
-"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-
-  local out; out="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-  [[ "$out" != *"shields.io"* ]]
-  [[ "$out" != *"img.shields"* ]]
-}
-
-# ── Fail-safe: missing maturity field is a no-op (Phase 3a not yet run) ─────
-
-@test "fail-safe: plugin.json without maturity: field is skipped" {
-  make_plugin "stub" '{"name":"wr-stub","version":"0.1.0","description":"Stub"}' \
-"# @windyroad/stub
-
-**Stub plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-stub:thing | Does a thing |
-"
-  local before; before="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-
-  local after; after="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-  [ "$before" = "$after" ]
-}
-
-# ── Fail-safe: plugin without README is skipped ─────────────────────────────
-
-@test "fail-safe: plugin without README.md is silently skipped" {
-  local pkg="$PROJECT_ROOT/packages/no-readme"
-  mkdir -p "$pkg/.claude-plugin"
-  echo '{"name":"wr-no-readme","version":"0.1.0","description":"No README","maturity":{"schema_version":"1.0","band":"Alpha"}}' > "$pkg/.claude-plugin/plugin.json"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-  [ ! -f "$pkg/README.md" ]
-}
-
-# ── No-AskUserQuestion: ADR-044 silent-framework carve-out ──────────────────
-
-@test "ADR-044: renderer never invokes AskUserQuestion per re-render" {
-  # Negative-presence behavioural assertion per ADR-052 §carve-out — the
-  # renderer is mechanical (band already computed by Phase 3a) and must
-  # not surface a consent gate per re-render. Scans combined stdout +
-  # stderr output for any AskUserQuestion-token spelling, case-insensitive
-  # per architect adjustment G to plugin-maturity-populate.bats.
-  make_plugin "silentp" '{"name":"wr-silentp","version":"0.1.0","description":"Silent","maturity":{"schema_version":"1.0","band":"Alpha"}}' \
-"# @windyroad/silentp
-
-**Silent plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-silentp:thing | Does a thing |
-"
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-  printf '%s' "$output" | grep -i -E 'askuserquestion|<askuser' && return 1 || true
-}
-
-# ── No-network primitive: ADR-035 privacy posture ───────────────────────────
-
-@test "ADR-035: script body invokes no network primitive" {
-  # Negative-presence behavioural assertion — the renderer reads
-  # plugin.json + README.md from filesystem only; never reaches a
-  # network endpoint. Mirrors plugin-maturity-populate.bats.
-  run grep -E "(curl|wget|nc -|netcat|ssh |scp |rsync|http\.client|urllib|requests)" "$SCRIPT"
-  [ "$status" -ne 0 ]
-}
-
-# ── Multi-plugin: renders each plugin independently ─────────────────────────
-
-@test "multi-plugin: renders each packages/<plugin>/README.md independently" {
-  make_plugin "alpha" '{"name":"wr-alpha","version":"0.1.0","description":"Alpha","maturity":{"schema_version":"1.0","band":"Alpha"}}' \
-"# @windyroad/alpha
-
-**Alpha plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-alpha:thing | Does a thing |
-"
-  make_plugin "bravo" '{"name":"wr-bravo","version":"0.1.0","description":"Bravo","maturity":{"schema_version":"1.0","band":"Beta"}}' \
-"# @windyroad/bravo
-
-**Bravo plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-bravo:thing | Does a thing |
-"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT"
-  [ "$status" -eq 0 ]
-
-  local out_a; out_a="$(cat "$PROJECT_ROOT/packages/alpha/README.md")"
-  local out_b; out_b="$(cat "$PROJECT_ROOT/packages/bravo/README.md")"
-  [[ "$out_a" == *"*Maturity: Alpha"* ]]
-  [[ "$out_b" == *"*Maturity: Beta"* ]]
-}
-
-# ── Dry-run: prints diff to stdout, does not write ──────────────────────────
-
-@test "dry-run: --dry-run flag prints intended diff to stdout without modifying README" {
-  make_plugin "stub" '{"name":"wr-stub","version":"0.1.0","description":"Stub","maturity":{"schema_version":"1.0","band":"Alpha"}}' \
-"# @windyroad/stub
-
-**Stub plugin description.**
-
-## Skills
-
-| Skill | Purpose |
-|-------|---------|
-| /wr-stub:thing | Does a thing |
-"
-  local before; before="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-
-  run bash "$SCRIPT" --project-root="$PROJECT_ROOT" --dry-run
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"Maturity: Alpha"* ]]
-
-  local after; after="$(cat "$PROJECT_ROOT/packages/stub/README.md")"
-  [ "$before" = "$after" ]
-}

package/scripts/test/plugin-validate-ci-gate.bats

@@ -1,208 +0,0 @@
-#!/usr/bin/env bats
-
-# @problem P263 — CI pre-publish manifest-validity gate. Adds the
-#                 `claude plugin validate` (non-strict) loop ADR-063
-#                 §Confirmation #11 names as the post-bats coverage
-#                 layer that catches P258-class manifest breakages
-#                 (recognised top-level key with wrong-typed content)
-#                 without rejecting the ADR-063 `maturity:` safe-
-#                 extension pattern that --strict would reject.
-#
-# Contract: `plugin-validate-ci-gate.sh` (invoked via ADR-049 shim
-# `wr-itil-plugin-validate-ci-gate`) walks every
-# `packages/*/.claude-plugin/plugin.json` in CWD, invokes `claude
-# plugin validate <plugin_dir>` (NON-strict) per plugin, and exits
-# non-zero if ANY plugin's manifest fails validation. The loop does
-# NOT short-circuit on first failure — every plugin is exercised so
-# the CI failure surfaces every defect at once.
-#
-# Behavioural test strategy (ADR-052): a programmable stub `claude`
-# on PATH simulates `claude plugin validate`. The stub exits 1 when
-# the manifest carries a top-level `hooks:` key whose body holds a
-# `schema_version` sub-key (the P258 reproduction class — recognised
-# key, wrong-typed content); exits 0 otherwise (including the ADR-063
-# top-level `maturity:` safe-extension shape — unrecognised key, warn-
-# only under non-strict). The stub captures the load-bearing
-# behavioural contract of `claude plugin validate` non-strict for
-# the two manifest shapes P263's design tension turns on. The real
-# CLI is exercised at the CI workflow layer (`.github/workflows/
-# ci.yml`) — split per ADR-052 (bats covers script-owned loop +
-# failure-aggregation behaviour with a faithful test double; CI
-# exercises the real CLI surface end-to-end).
-#
-# @adr ADR-063 Amendment 2026-05-18 §Confirmation #11 (the gate
-#               criterion this script satisfies)
-# @adr ADR-049 (bin/ on PATH shim — `wr-itil-plugin-validate-ci-gate`)
-# @adr ADR-052 (Behavioural tests default — stub-claude faithfully
-#               models the validator's non-strict exit contract for
-#               the two manifest shapes P263 turns on)
-# @adr ADR-014 (single-commit grain — script + shim + bats + CI +
-#               ADR amendment + changeset land together)
-# @adr ADR-022 (KE WSJF multiplier — informs prioritisation)
-# @jtbd JTBD-101 (Extend the Suite with New Plugins — primary
-#                 alignment; named Desired Outcome at L19 strengthened
-#                 by this gate)
-# @jtbd JTBD-202 (Pre-Flight Governance Checks Before Release —
-#                 secondary alignment; gate fires in Quality Gates job)
-
-setup() {
-  SCRIPTS_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  SCRIPT="$SCRIPTS_DIR/plugin-validate-ci-gate.sh"
-  SHIM="$(cd "$SCRIPTS_DIR/../bin" && pwd)/wr-itil-plugin-validate-ci-gate"
-  FIXTURE_DIR="$(mktemp -d)"
-  STUB_DIR="$FIXTURE_DIR/stub-bin"
-  mkdir -p "$STUB_DIR"
-  cd "$FIXTURE_DIR"
-  mkdir -p packages
-  write_stub_claude
-  export PATH="$STUB_DIR:$PATH"
-}
-
-teardown() {
-  cd /
-  rm -rf "$FIXTURE_DIR"
-}
-
-# Programmable stub for `claude plugin validate <plugin_dir>`. Faithful
-# model of the non-strict exit contract for the two manifest shapes
-# P263 turns on:
-#   - Top-level `hooks:` carrying a `schema_version` sub-key (the P258
-#     reproduction — recognised key with wrong-typed content) → exit 1.
-#   - Anything else (including ADR-063 top-level `maturity:` safe-
-#     extension shape, where `maturity:` is unrecognised → warn-only
-#     under non-strict) → exit 0.
-write_stub_claude() {
-  cat > "$STUB_DIR/claude" <<'STUB'
-#!/usr/bin/env bash
-[[ "$1" == "plugin" && "$2" == "validate" ]] || { echo "stub: unsupported args $*" >&2; exit 2; }
-plugin_dir="$3"
-manifest="$plugin_dir/.claude-plugin/plugin.json"
-[ -f "$manifest" ] || { echo "stub: manifest not found at $manifest" >&2; exit 1; }
-# Detect P258 reproduction: top-level "hooks": { ... "schema_version": ... }
-if python3 -c "
-import json, sys
-with open(sys.argv[1]) as f:
-    m = json.load(f)
-for key in ('hooks', 'skills', 'agents', 'commands'):
-    v = m.get(key)
-    if isinstance(v, dict):
-        for sub in v.values():
-            if isinstance(sub, dict) and 'schema_version' in sub:
-                sys.exit(1)
-sys.exit(0)
-" "$manifest"; then
-  echo "stub: $plugin_dir OK"
-  exit 0
-else
-  echo "stub: $plugin_dir Validation errors: hooks: Invalid input" >&2
-  exit 1
-fi
-STUB
-  chmod +x "$STUB_DIR/claude"
-}
-
-# Helper: write a synthetic plugin manifest at packages/<name>/.claude-plugin/plugin.json
-write_plugin() {
-  local name="$1"
-  local body="$2"
-  mkdir -p "packages/$name/.claude-plugin"
-  printf '%s\n' "$body" > "packages/$name/.claude-plugin/plugin.json"
-}
-
-# ── Existence / executable ──────────────────────────────────────────────────
-
-@test "plugin-validate-ci-gate: canonical script exists" {
-  [ -f "$SCRIPT" ]
-}
-
-@test "plugin-validate-ci-gate: canonical script is executable" {
-  [ -x "$SCRIPT" ]
-}
-
-@test "plugin-validate-ci-gate: ADR-049 shim exists" {
-  [ -f "$SHIM" ]
-}
-
-@test "plugin-validate-ci-gate: ADR-049 shim is executable" {
-  [ -x "$SHIM" ]
-}
-
-@test "plugin-validate-ci-gate: shim is thin (single exec line to canonical body)" {
-  grep -qE '^exec .*plugin-validate-ci-gate\.sh' "$SHIM"
-}
-
-# ── Fixture A: positive — ADR-063 safe-extension shape passes ───────────────
-
-@test "plugin-validate-ci-gate: ADR-063 maturity: top-level safe-extension shape → exit 0" {
-  write_plugin "alpha" '{
-  "name": "alpha",
-  "version": "1.0.0",
-  "description": "test plugin",
-  "maturity": {
-    "schema_version": "2.0",
-    "band": "Experimental"
-  }
-}'
-
-  run "$SCRIPT"
-  [ "$status" -eq 0 ]
-}
-
-@test "plugin-validate-ci-gate: multiple plugins all ADR-063-shaped → exit 0" {
-  write_plugin "alpha" '{"name":"alpha","version":"1.0.0","description":"t","maturity":{"schema_version":"2.0","band":"Experimental"}}'
-  write_plugin "beta"  '{"name":"beta","version":"1.0.0","description":"t","maturity":{"schema_version":"2.0","band":"Stable"}}'
-  write_plugin "gamma" '{"name":"gamma","version":"1.0.0","description":"t"}'
-
-  run "$SCRIPT"
-  [ "$status" -eq 0 ]
-}
-
-# ── Fixture B: negative — P258 reproduction shape fails ─────────────────────
-
-@test "plugin-validate-ci-gate: P258 reproduction (top-level hooks: with schema_version) → exit 1" {
-  write_plugin "broken" '{
-  "name": "broken",
-  "version": "1.0.0",
-  "description": "test plugin with P258 mistake",
-  "hooks": {
-    "some-hook": {
-      "schema_version": "1.0",
-      "band": "Experimental"
-    }
-  }
-}'
-
-  run "$SCRIPT"
-  [ "$status" -ne 0 ]
-}
-
-@test "plugin-validate-ci-gate: mixed pass/fail loops every plugin (no short-circuit) → exit 1" {
-  write_plugin "alpha"  '{"name":"alpha","version":"1.0.0","description":"t","maturity":{"schema_version":"2.0","band":"Experimental"}}'
-  write_plugin "broken" '{"name":"broken","version":"1.0.0","description":"t","hooks":{"h":{"schema_version":"1.0","band":"Experimental"}}}'
-  write_plugin "gamma"  '{"name":"gamma","version":"1.0.0","description":"t"}'
-
-  run "$SCRIPT"
-  [ "$status" -ne 0 ]
-  # All three plugins must be exercised — no short-circuit on first failure.
-  echo "$output" | grep -q "alpha"
-  echo "$output" | grep -q "broken"
-  echo "$output" | grep -q "gamma"
-}
-
-# ── No-plugins case (CI is always run against the monorepo tree, but the
-#    fail-safe matters for adopter-tree invocation per ADR-049 portability).
-
-@test "plugin-validate-ci-gate: no plugins under packages/ → exit 0 (nothing to validate)" {
-  # No packages/<name>/.claude-plugin/plugin.json written.
-  run "$SCRIPT"
-  [ "$status" -eq 0 ]
-}
-
-# ── Shim PATH-resolution behaviour (ADR-049 contract) ──────────────────────
-
-@test "plugin-validate-ci-gate: invoking shim runs the canonical body" {
-  write_plugin "alpha" '{"name":"alpha","version":"1.0.0","description":"t","maturity":{"schema_version":"2.0","band":"Experimental"}}'
-
-  run "$SHIM"
-  [ "$status" -eq 0 ]
-}