@xulthekl/team-flow 0.31.0 → 0.32.2

package/tests/lib/cmd-execution.test.mjs

@@ -1,647 +0,0 @@
-import { afterEach, beforeEach, describe, it } from 'node:test';
-import assert from 'node:assert/strict';
-import { execFileSync } from 'node:child_process';
-import { existsSync, mkdtempSync, mkdirSync, readFileSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { tmpdir } from 'node:os';
-
-const CLI = join(process.cwd(), 'scripts/team-flow.mjs');
-let changeDir;
-let gitRefs;
-
-function runSsf(args, cwd = process.cwd(), { confirmPlan = true, acknowledgePlan = true, prepareRecommendation = true } = {}) {
-  const isPlan = args[0] === 'execution' && ['plan', 'revise'].includes(args[1]);
-  let effectiveArgs = args;
-  if (confirmPlan && isPlan && !effectiveArgs.includes('--confirm')) effectiveArgs = [...effectiveArgs, '--confirm'];
-  if (confirmPlan && acknowledgePlan && isPlan && requiresAcknowledgement(effectiveArgs) && !effectiveArgs.includes('--acknowledge-recommendation')) {
-    effectiveArgs = [...effectiveArgs, '--acknowledge-recommendation'];
-  }
-  if (prepareRecommendation && isPlan) {
-    const changePath = effectiveArgs[2];
-    const waves = effectiveArgs.flatMap((value, index) => value === '--wave' ? ['--wave', effectiveArgs[index + 1]] : []).filter(Boolean);
-    try {
-      execFileSync(process.execPath, [CLI, 'execution', 'recommend', changePath, ...waves], {
-        cwd,
-        encoding: 'utf8',
-        stdio: ['ignore', 'ignore', 'pipe'],
-      });
-    } catch {
-      // Let the requested command report malformed arguments through the usual test helper.
-    }
-  }
-  try {
-    const stdout = execFileSync(process.execPath, [CLI, ...effectiveArgs], {
-      cwd,
-      encoding: 'utf8',
-      stdio: ['ignore', 'pipe', 'pipe'],
-    });
-    return { exitCode: 0, stdout, stderr: '', json: tryJson(stdout) };
-  } catch (error) {
-    return {
-      exitCode: error.status ?? 1,
-      stdout: error.stdout?.toString() ?? '',
-      stderr: error.stderr?.toString() ?? '',
-      json: tryJson(error.stdout?.toString() ?? ''),
-    };
-  }
-}
-
-function requiresAcknowledgement(args) {
-  const mode = args[args.indexOf('--mode') + 1];
-  const waves = args.flatMap((value, index) => value === '--wave' ? [args[index + 1]] : []).filter(Boolean);
-  const hasParallelWave = waves.some(wave => wave.split(':')[1] === 'parallel');
-  const plannedTaskCount = waves.reduce((count, wave) => count + (wave.split(':')[2]?.split(',').filter(Boolean).length || 0), 0);
-  const isSddRecommendation = hasParallelWave || waves.length > 1 || plannedTaskCount > 3;
-  const recommendedMode = isSddRecommendation ? 'sdd' : plannedTaskCount === 1 ? 'inline' : 'batch-inline';
-  return mode !== recommendedMode;
-}
-
-function runGit(directory, args) {
-  return execFileSync('git', args, { cwd: directory, encoding: 'utf8' }).trim();
-}
-
-function tryJson(text) {
-  try { return JSON.parse(text); } catch { return null; }
-}
-
-function writeChangeDirectory(directory, workflow = 'full', revision = null) {
-  writeFileSync(join(directory, 'proposal.md'), '## Why\nEnough context to create a controlled execution plan.\n## What Changes\n- Guard execution.\n');
-  writeFileSync(join(directory, 'design.md'), '# Design\n');
-  writeFileSync(join(directory, 'tasks.md'), '# Tasks\n\n- [ ] 1.1 First task\n- [ ] 1.2 Second task\n');
-  writeFileSync(join(directory, 'execution-contract.md'), '# Execution Contract\n');
-  mkdirSync(join(directory, 'specs', 'execution'), { recursive: true });
-  writeFileSync(join(directory, 'specs', 'execution', 'spec.md'), '## ADDED Requirements\n### Requirement: Guarded execution\nThe system SHALL guard execution.\n#### Scenario: Create plan\n- **WHEN** a plan is created\n- **THEN** it is persisted.\n');
-  writeFileSync(join(directory, '.team-flow.yaml'), [
-    'state: approved-for-build',
-    `workflow: ${workflow}`,
-    revision === null ? null : `revision: ${revision}`,
-    '',
-  ].filter(line => line !== null).join('\n'));
-}
-
-function writeReviewReport(name, content = 'Review completed without blocking findings.\n') {
-  const reportsDir = join(changeDir, '.superpowers', 'sdd', 'reviews');
-  mkdirSync(reportsDir, { recursive: true });
-  const reportPath = join(reportsDir, name);
-  writeFileSync(reportPath, content);
-  return reportPath;
-}
-
-function initializeGitRepository(directory) {
-  runGit(directory, ['init', '--quiet']);
-  runGit(directory, ['config', 'user.email', 'tests@example.invalid']);
-  runGit(directory, ['config', 'user.name', 'Execution Test']);
-  runGit(directory, ['add', '--all']);
-  runGit(directory, ['commit', '--quiet', '--message', 'initial execution change']);
-  const base = runGit(directory, ['rev-parse', 'HEAD']);
-
-  writeFileSync(join(directory, 'git-range-marker.txt'), 'second commit\n');
-  runGit(directory, ['add', 'git-range-marker.txt']);
-  runGit(directory, ['commit', '--quiet', '--message', 'second execution change']);
-  const head = runGit(directory, ['rev-parse', 'HEAD']);
-  const divergent = runGit(directory, ['commit-tree', `${head}^{tree}`, '-m', 'independent execution change']);
-  return { base, head, divergent };
-}
-
-beforeEach(() => {
-  changeDir = mkdtempSync(join(tmpdir(), 'tf-execution-cmd-'));
-  writeChangeDirectory(changeDir);
-  gitRefs = initializeGitRepository(changeDir);
-});
-
-afterEach(() => {
-  rmSync(changeDir, { recursive: true, force: true });
-});
-
-describe('tf execution', () => {
-  it('records DP-4 and state summary after a user-confirmed recommended SDD plan', () => {
-    const result = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd',
-      '--reason', 'full workflow default', '--wave', 'wave-1:parallel:1.1,1.2', '--json']);
-
-    assert.equal(result.exitCode, 0, result.stderr);
-    assert.equal(result.json.plan.mode, 'sdd');
-    assert.equal(result.json.plan.revision, 1);
-    assert.equal(runSsf(['state', 'get', changeDir, 'execution_mode', '--json']).json.value, 'sdd');
-    assert.match(runSsf(['state', 'get', changeDir, 'execution_plan_hash', '--json']).json.value, /^sha256:/);
-    assert.equal(runSsf(['state', 'get', changeDir, 'execution_plan_revision', '--json']).json.value, 1);
-    assert.match(runSsf(['state', 'get', changeDir, 'dp_4_result', '--json']).json.value, /plan revision 1/);
-  });
-
-  it('lists applicable execution modes and recommends one from the change evidence', () => {
-    const result = runSsf(['execution', 'recommend', changeDir, '--json']);
-
-    assert.equal(result.exitCode, 0, result.stderr);
-    assert.deepEqual(result.json.recommendation.available_modes, ['inline', 'batch-inline', 'sdd']);
-    assert.equal(result.json.recommendation.recommendation.mode, 'batch-inline');
-    assert.equal(result.json.recommendation.facts.documented_task_count, 2);
-  });
-
-  it('requires a current persisted recommendation before a plan can be confirmed', () => {
-    const result = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--confirm',
-      '--reason', 'independent implementation', '--wave', 'wave-1:parallel:1.1,1.2', '--json'], process.cwd(), {
-      prepareRecommendation: false,
-    });
-
-    assert.notEqual(result.exitCode, 0);
-    assert.match(result.stderr, /recommend/i);
-  });
-
-  it('rejects a mode that is not available for the current workflow', () => {
-    const workflow = runSsf(['state', 'set', changeDir, 'workflow', 'tweak']);
-    assert.equal(workflow.exitCode, 0, workflow.stderr);
-    const recommended = runSsf(['execution', 'recommend', changeDir,
-      '--wave', 'wave-1:serial:1.1']);
-    assert.equal(recommended.exitCode, 0, recommended.stderr);
-
-    const result = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--confirm',
-      '--acknowledge-recommendation', '--reason', 'operator wants delegated review',
-      '--wave', 'wave-1:serial:1.1'], process.cwd(), { prepareRecommendation: false });
-
-    assert.notEqual(result.exitCode, 0);
-    assert.match(result.stderr, /available|mode/i);
-  });
-
-  it('rejects a plan when the saved recommendation was for different waves', () => {
-    const recommended = runSsf(['execution', 'recommend', changeDir,
-      '--wave', 'wave-1:serial:1.1,1.2']);
-    assert.equal(recommended.exitCode, 0, recommended.stderr);
-
-    const result = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--confirm',
-      '--reason', 'independent implementation', '--wave', 'wave-1:parallel:1.1,1.2', '--json'], process.cwd(), {
-      prepareRecommendation: false,
-    });
-
-    assert.notEqual(result.exitCode, 0);
-    assert.match(result.stderr, /recommend/i);
-  });
-
-  it('requires a user confirmation before recording any execution plan', () => {
-    const result = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd',
-      '--reason', 'independent implementation', '--wave', 'wave-1:parallel:1.1,1.2', '--json'], process.cwd(), { confirmPlan: false });
-
-    assert.notEqual(result.exitCode, 0);
-    assert.match(result.stderr, /confirm/i);
-  });
-
-  it('records an acknowledged non-recommended selection instead of an override', () => {
-    const result = runSsf(['execution', 'plan', changeDir, '--mode', 'inline', '--confirm',
-      '--acknowledge-recommendation', '--reason', 'operator will keep this focused',
-      '--wave', 'wave-1:serial:1.1,1.2', '--json']);
-
-    assert.equal(result.exitCode, 0, result.stderr);
-    assert.equal(result.json.plan.mode, 'inline');
-    assert.equal(result.json.plan.source, 'user-confirmed');
-    assert.equal(result.json.plan.selection.followed_recommendation, false);
-    assert.equal(result.json.plan.selection.acknowledged_non_recommendation, true);
-  });
-
-  it('requires acknowledgement for a non-recommended selection', () => {
-    const result = runSsf(['execution', 'plan', changeDir, '--mode', 'batch-inline',
-      '--reason', 'operator wants a batch', '--wave', 'wave-1:serial:1.1', '--json'], process.cwd(), { acknowledgePlan: false });
-
-    assert.notEqual(result.exitCode, 0);
-    assert.match(result.stderr, /acknowledge/i);
-  });
-
-  it('rejects multiline and control-character reasons before mutating the plan or state', () => {
-    const statePath = join(changeDir, '.team-flow.yaml');
-    const planPath = join(changeDir, '.superpowers', 'sdd', 'execution-plan.json');
-    const originalState = readFileSync(statePath, 'utf8');
-
-    for (const reason of ['approved\nexecution_mode: inline', 'approved\u0001inline']) {
-      const result = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', reason,
-        '--wave', 'wave-1:parallel:1.1,1.2', '--json']);
-
-      assert.notEqual(result.exitCode, 0);
-      assert.match(result.stderr, /reason.*control|reason.*line/i);
-      assert.equal(readFileSync(statePath, 'utf8'), originalState);
-      assert.equal(existsSync(planPath), false);
-    }
-  });
-
-  it('shows the persisted execution plan', () => {
-    runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'full workflow default',
-      '--wave', 'wave-1:parallel:1.1,1.2']);
-
-    const result = runSsf(['execution', 'show', changeDir, '--json']);
-
-    assert.equal(result.exitCode, 0, result.stderr);
-    assert.equal(result.json.plan.mode, 'sdd');
-    assert.equal(result.json.valid, true);
-    assert.equal(result.json.current, true);
-    assert.deepEqual(result.json.waves, [{
-      id: 'wave-1',
-      strategy: 'parallel',
-      tasks: ['1.1', '1.2'],
-      depends_on: [],
-      eligible: true,
-      retryable: false,
-      receipt: null,
-      blockers: [],
-    }]);
-  });
-
-  it('keeps an overlay-relative review report current across working directories', () => {
-    const planned = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'full workflow default',
-      '--wave', 'wave-1:serial:1.1']);
-    assert.equal(planned.exitCode, 0, planned.stderr);
-    writeReviewReport('wave-1.md');
-    const reviewCwd = mkdtempSync(join(tmpdir(), 'tf-review-cwd-'));
-    const showCwd = mkdtempSync(join(tmpdir(), 'tf-show-cwd-'));
-
-    try {
-      const reviewed = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-        '--base', gitRefs.base, '--head', gitRefs.head,
-        '--report', '.superpowers/sdd/reviews/wave-1.md', '--verdict', 'pass'], reviewCwd);
-      assert.equal(reviewed.exitCode, 0, reviewed.stderr);
-
-      const shown = runSsf(['execution', 'show', changeDir, '--json'], showCwd);
-      assert.equal(shown.exitCode, 0, shown.stderr);
-      assert.equal(shown.json.current, true);
-      assert.equal(shown.json.waves[0].receipt.status, 'pass');
-    } finally {
-      rmSync(reviewCwd, { recursive: true, force: true });
-      rmSync(showCwd, { recursive: true, force: true });
-    }
-  });
-
-  it('rejects review reports outside the change overlay', () => {
-    const planned = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'full workflow default',
-      '--wave', 'wave-1:serial:1.1']);
-    assert.equal(planned.exitCode, 0, planned.stderr);
-    const outsideReport = join(changeDir, 'reports', 'wave-1.md');
-    mkdirSync(join(changeDir, 'reports'), { recursive: true });
-    writeFileSync(outsideReport, 'Review completed without blocking findings.\n');
-
-    const reviewed = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-      '--base', gitRefs.base, '--head', gitRefs.head, '--report', outsideReport, '--verdict', 'pass']);
-
-    assert.notEqual(reviewed.exitCode, 0);
-    assert.match(reviewed.stderr, /overlay|review/i);
-  });
-
-  it('rejects a report reached through a nested review-directory symlink', () => {
-    const planned = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'full workflow default',
-      '--wave', 'wave-1:serial:1.1']);
-    assert.equal(planned.exitCode, 0, planned.stderr);
-    const outsideDir = join(changeDir, 'reports');
-    mkdirSync(outsideDir, { recursive: true });
-    writeFileSync(join(outsideDir, 'escaped.md'), 'Review completed without blocking findings.\n');
-    const reviewsDir = join(changeDir, '.superpowers', 'sdd', 'reviews');
-    mkdirSync(reviewsDir, { recursive: true });
-    symlinkSync(outsideDir, join(reviewsDir, 'linked'), 'dir');
-
-    const reviewed = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-      '--base', gitRefs.base, '--head', gitRefs.head,
-      '--report', '.superpowers/sdd/reviews/linked/escaped.md', '--verdict', 'pass']);
-
-    assert.notEqual(reviewed.exitCode, 0);
-    assert.match(reviewed.stderr, /overlay|review/i);
-  });
-
-  it('rejects a report when the reviews overlay root is a symlink', () => {
-    const planned = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'full workflow default',
-      '--wave', 'wave-1:serial:1.1']);
-    assert.equal(planned.exitCode, 0, planned.stderr);
-    const outsideReviewsDir = mkdtempSync(join(tmpdir(), 'tf-external-reviews-'));
-    const reviewsDir = join(changeDir, '.superpowers', 'sdd', 'reviews');
-
-    try {
-      writeFileSync(join(outsideReviewsDir, 'wave-1.md'), 'Review completed without blocking findings.\n');
-      symlinkSync(outsideReviewsDir, reviewsDir, 'dir');
-
-      const reviewed = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-        '--base', gitRefs.base, '--head', gitRefs.head,
-        '--report', '.superpowers/sdd/reviews/wave-1.md', '--verdict', 'pass']);
-
-      assert.notEqual(reviewed.exitCode, 0);
-      assert.match(reviewed.stderr, /overlay|review|symbolic/i);
-    } finally {
-      rmSync(outsideReviewsDir, { recursive: true, force: true });
-    }
-  });
-
-  it('rejects a receipt range containing a nonexistent Git commit', () => {
-    const planned = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'full workflow default',
-      '--wave', 'wave-1:serial:1.1']);
-    assert.equal(planned.exitCode, 0, planned.stderr);
-    const forgedCommit = '0000000000000000000000000000000000000001';
-
-    const reviewed = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-      '--base', forgedCommit, '--head', gitRefs.head, '--report', writeReviewReport('wave-1.md'), '--verdict', 'pass']);
-
-    assert.notEqual(reviewed.exitCode, 0);
-    assert.match(reviewed.stderr, /base|commit|Git/i);
-  });
-
-  it('rejects a receipt range whose base is not an ancestor of head', () => {
-    const planned = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'full workflow default',
-      '--wave', 'wave-1:serial:1.1']);
-    assert.equal(planned.exitCode, 0, planned.stderr);
-
-    const reviewed = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-      '--base', gitRefs.head, '--head', gitRefs.divergent,
-      '--report', writeReviewReport('wave-1.md'), '--verdict', 'pass']);
-
-    assert.notEqual(reviewed.exitCode, 0);
-    assert.match(reviewed.stderr, /ancestor|range|base/i);
-  });
-
-  it('treats a persisted pass receipt with a forged Git base as unusable', () => {
-    const planned = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'full workflow default',
-      '--wave', 'wave-1:serial:1.1', '--wave', 'wave-2:serial:1.2:wave-1']);
-    assert.equal(planned.exitCode, 0, planned.stderr);
-    const reviewed = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-      '--base', gitRefs.base, '--head', gitRefs.head, '--report', writeReviewReport('wave-1.md'), '--verdict', 'pass']);
-    assert.equal(reviewed.exitCode, 0, reviewed.stderr);
-
-    const receiptPath = join(changeDir, '.superpowers', 'sdd', 'reviews', Buffer.from('wave-1', 'utf8').toString('base64url') + '.json');
-    const receipt = JSON.parse(readFileSync(receiptPath, 'utf8'));
-    receipt.base = '0000000000000000000000000000000000000001';
-    writeFileSync(receiptPath, `${JSON.stringify(receipt, null, 2)}\n`);
-
-    const shown = runSsf(['execution', 'show', changeDir, '--json']);
-    assert.equal(shown.exitCode, 0, shown.stderr);
-    assert.equal(shown.json.waves[0].receipt, null);
-    assert.deepEqual(shown.json.waves[1].blockers, ['wave-1']);
-    assert.equal(shown.json.waves[1].eligible, false);
-  });
-
-  it('treats a persisted pass receipt with a non-ancestral Git range as unusable', () => {
-    const planned = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'full workflow default',
-      '--wave', 'wave-1:serial:1.1', '--wave', 'wave-2:serial:1.2:wave-1']);
-    assert.equal(planned.exitCode, 0, planned.stderr);
-    const reviewed = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-      '--base', gitRefs.base, '--head', gitRefs.head, '--report', writeReviewReport('wave-1.md'), '--verdict', 'pass']);
-    assert.equal(reviewed.exitCode, 0, reviewed.stderr);
-
-    const receiptPath = join(changeDir, '.superpowers', 'sdd', 'reviews', Buffer.from('wave-1', 'utf8').toString('base64url') + '.json');
-    const receipt = JSON.parse(readFileSync(receiptPath, 'utf8'));
-    receipt.base = gitRefs.head;
-    receipt.head = gitRefs.divergent;
-    writeFileSync(receiptPath, `${JSON.stringify(receipt, null, 2)}\n`);
-
-    const shown = runSsf(['execution', 'show', changeDir, '--json']);
-    assert.equal(shown.exitCode, 0, shown.stderr);
-    assert.equal(shown.json.waves[0].receipt, null);
-    assert.deepEqual(shown.json.waves[1].blockers, ['wave-1']);
-    assert.equal(shown.json.waves[1].eligible, false);
-  });
-
-  it('does not show a pass receipt after its report evidence is deleted', () => {
-    runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'full workflow default',
-      '--wave', 'wave-1:serial:1.1']);
-    const reportPath = writeReviewReport('wave-1.md');
-    const reviewed = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-      '--base', gitRefs.base, '--head', gitRefs.head, '--report', reportPath, '--verdict', 'pass']);
-    assert.equal(reviewed.exitCode, 0, reviewed.stderr);
-
-    rmSync(reportPath);
-
-    const shown = runSsf(['execution', 'show', changeDir, '--json']);
-    assert.equal(shown.exitCode, 0, shown.stderr);
-    assert.equal(shown.json.waves[0].receipt, null);
-    assert.equal(shown.json.waves[0].eligible, true);
-  });
-
-  it('encodes wave dependencies and refuses review of a wave before its dependencies pass', () => {
-    const planned = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd',
-      '--reason', 'full workflow default',
-      '--wave', 'wave-1:parallel:1.1,1.2',
-      '--wave', 'wave-2:serial:2.1:wave-1', '--json']);
-    assert.equal(planned.exitCode, 0, planned.stderr);
-    assert.deepEqual(planned.json.plan.waves[1].depends_on, ['wave-1']);
-
-    const shown = runSsf(['execution', 'show', changeDir, '--json']);
-    assert.equal(shown.exitCode, 0, shown.stderr);
-    assert.equal(shown.json.waves[0].eligible, true);
-    assert.equal(shown.json.waves[1].eligible, false);
-    assert.deepEqual(shown.json.waves[1].blockers, ['wave-1']);
-
-    const premature = runSsf(['execution', 'review', changeDir, '--wave', 'wave-2',
-      '--base', gitRefs.base, '--head', gitRefs.head, '--report', 'reports/wave-2.md', '--verdict', 'pass']);
-    assert.notEqual(premature.exitCode, 0);
-    assert.match(premature.stderr, /wave-1.*pass|dependencies/i);
-  });
-
-  it('rejects a plan when state mode differs from the frozen plan mode', () => {
-    runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'full workflow default',
-      '--wave', 'wave-1:parallel:1.1,1.2']);
-    const statePath = join(changeDir, '.team-flow.yaml');
-    writeFileSync(statePath, readFileSync(statePath, 'utf8').replace('execution_mode: sdd', 'execution_mode: inline'));
-
-    const result = runSsf(['execution', 'show', changeDir, '--json']);
-
-    assert.notEqual(result.exitCode, 0);
-    assert.equal(result.json.valid, false);
-    assert.ok(result.json.failures.includes('execution plan mode does not match state'));
-  });
-
-  it('increments revision when a batch-inline plan is revised to SDD', () => {
-    const initial = runSsf(['execution', 'plan', changeDir, '--mode', 'batch-inline', '--confirm', '--acknowledge-recommendation',
-      '--reason', 'operator requested a batch', '--wave', 'wave-1:serial:1.1']);
-    assert.equal(initial.exitCode, 0, initial.stderr);
-
-    const revised = runSsf(['execution', 'revise', changeDir, '--mode', 'sdd',
-      '--reason', 'risk requires independent review', '--wave', 'wave-1:parallel:1.1,1.2', '--json']);
-
-    assert.equal(revised.exitCode, 0, revised.stderr);
-    assert.equal(revised.json.plan.revision, 2);
-    assert.equal(runSsf(['state', 'get', changeDir, 'execution_plan_revision', '--json']).json.value, 2);
-  });
-
-  it('requires confirmation and acknowledgement when a revision differs from its recommendation', () => {
-    const initial = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd',
-      '--reason', 'parallel work needs review', '--wave', 'wave-1:parallel:1.1,1.2']);
-    assert.equal(initial.exitCode, 0, initial.stderr);
-
-    const recommended = runSsf(['execution', 'recommend', changeDir,
-      '--wave', 'wave-1:serial:1.1']);
-    assert.equal(recommended.exitCode, 0, recommended.stderr);
-
-    const missingConfirm = runSsf(['execution', 'revise', changeDir, '--mode', 'sdd',
-      '--reason', 'retain SDD for the revised work', '--wave', 'wave-1:serial:1.1'], process.cwd(), {
-      confirmPlan: false,
-      prepareRecommendation: false,
-    });
-    assert.notEqual(missingConfirm.exitCode, 0);
-    assert.match(missingConfirm.stderr, /confirm/i);
-
-    const missingAcknowledgement = runSsf(['execution', 'revise', changeDir, '--mode', 'sdd', '--confirm',
-      '--reason', 'retain SDD for the revised work', '--wave', 'wave-1:serial:1.1'], process.cwd(), {
-      acknowledgePlan: false,
-      prepareRecommendation: false,
-    });
-    assert.notEqual(missingAcknowledgement.exitCode, 0);
-    assert.match(missingAcknowledgement.stderr, /acknowledge/i);
-
-    const revised = runSsf(['execution', 'revise', changeDir, '--mode', 'sdd', '--confirm',
-      '--acknowledge-recommendation', '--reason', 'retain SDD for the revised work',
-      '--wave', 'wave-1:serial:1.1', '--json'], process.cwd(), { prepareRecommendation: false });
-    assert.equal(revised.exitCode, 0, revised.stderr);
-    assert.equal(revised.json.plan.selection.confirmed, true);
-    assert.equal(revised.json.plan.selection.followed_recommendation, false);
-  });
-
-  it('requires a fresh recommendation after the prior plan before recording a revision', () => {
-    const initial = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd',
-      '--reason', 'parallel work needs review', '--wave', 'wave-1:parallel:1.1,1.2']);
-    assert.equal(initial.exitCode, 0, initial.stderr);
-
-    const result = runSsf(['execution', 'revise', changeDir, '--mode', 'sdd', '--confirm',
-      '--reason', 'reconfirm the same work as a new revision', '--wave', 'wave-1:parallel:1.1,1.2'], process.cwd(), {
-      prepareRecommendation: false,
-    });
-
-    assert.notEqual(result.exitCode, 0);
-    assert.match(result.stderr, /recommend/i);
-  });
-
-  it('invalidates receipts from the replaced plan revision', () => {
-    const initial = runSsf(['execution', 'plan', changeDir, '--mode', 'batch-inline', '--confirm', '--acknowledge-recommendation',
-      '--reason', 'operator requested a batch', '--wave', 'wave-1:serial:1.1']);
-    assert.equal(initial.exitCode, 0, initial.stderr);
-    const reportPath = writeReviewReport('wave-1.md');
-    const reviewed = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-      '--base', gitRefs.base, '--head', gitRefs.head, '--report', reportPath, '--verdict', 'pass']);
-    assert.equal(reviewed.exitCode, 0, reviewed.stderr);
-
-    const revised = runSsf(['execution', 'revise', changeDir, '--mode', 'sdd',
-      '--reason', 'risk requires independent review', '--wave', 'wave-1:parallel:1.1,1.2', '--json']);
-    assert.equal(revised.exitCode, 0, revised.stderr);
-
-    const shown = runSsf(['execution', 'show', changeDir, '--json']);
-    assert.equal(shown.exitCode, 0, shown.stderr);
-    assert.equal(shown.json.current, true);
-    assert.equal(shown.json.waves[0].receipt, null);
-    assert.equal(shown.json.waves[0].eligible, true);
-  });
-
-  it('replans a current SDD plan with a new revision, renewed DP-4 state, and cleared receipts', () => {
-    const initial = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd',
-      '--reason', 'full workflow default', '--wave', 'wave-1:serial:1.1']);
-    assert.equal(initial.exitCode, 0, initial.stderr);
-    const reviewed = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-      '--base', gitRefs.base, '--head', gitRefs.head, '--report', writeReviewReport('wave-1.md'), '--verdict', 'pass']);
-    assert.equal(reviewed.exitCode, 0, reviewed.stderr);
-
-    const replanned = runSsf(['execution', 'revise', changeDir, '--mode', 'sdd',
-      '--reason', 'split independent work into a recovery wave',
-      '--wave', 'wave-1:parallel:1.1,1.2', '--json']);
-
-    assert.equal(replanned.exitCode, 0, replanned.stderr);
-    assert.equal(replanned.json.plan.revision, 2);
-    assert.equal(runSsf(['state', 'get', changeDir, 'execution_plan_revision', '--json']).json.value, 2);
-    assert.match(runSsf(['state', 'get', changeDir, 'dp_4_result', '--json']).json.value, /plan revision 2/);
-    const shown = runSsf(['execution', 'show', changeDir, '--json']);
-    assert.equal(shown.exitCode, 0, shown.stderr);
-    assert.equal(shown.json.current, true);
-    assert.equal(shown.json.waves[0].receipt, null);
-  });
-
-  it('recovers a stale SDD plan by revising it to current artifacts and clearing old receipts', () => {
-    const initial = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd',
-      '--reason', 'full workflow default', '--wave', 'wave-1:serial:1.1']);
-    assert.equal(initial.exitCode, 0, initial.stderr);
-    const reviewed = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-      '--base', gitRefs.base, '--head', gitRefs.head, '--report', writeReviewReport('stale-wave-1.md'), '--verdict', 'pass']);
-    assert.equal(reviewed.exitCode, 0, reviewed.stderr);
-    writeFileSync(join(changeDir, 'tasks.md'), '# Tasks\n\n- [ ] 1.1 Updated task\n- [ ] 1.2 Recovery task\n');
-
-    const replanned = runSsf(['execution', 'revise', changeDir, '--mode', 'sdd',
-      '--reason', 'refresh the plan after task scope changed',
-      '--wave', 'wave-1:parallel:1.1,1.2', '--json']);
-
-    assert.equal(replanned.exitCode, 0, replanned.stderr);
-    assert.equal(replanned.json.plan.revision, 2);
-    const shown = runSsf(['execution', 'show', changeDir, '--json']);
-    assert.equal(shown.exitCode, 0, shown.stderr);
-    assert.equal(shown.json.current, true);
-    assert.equal(shown.json.waves[0].receipt, null);
-    assert.match(runSsf(['state', 'get', changeDir, 'dp_4_result', '--json']).json.value, /plan revision 2/);
-  });
-
-  it('makes a failed current wave retryable while blocking dependents until its replacement pass receipt', () => {
-    const planned = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd',
-      '--reason', 'repair reviews before dependent work',
-      '--wave', 'wave-1:serial:1.1',
-      '--wave', 'wave-2:serial:1.2:wave-1']);
-    assert.equal(planned.exitCode, 0, planned.stderr);
-
-    const failed = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-      '--base', gitRefs.base, '--head', gitRefs.head, '--report', writeReviewReport('wave-1-fail.md'), '--verdict', 'fail']);
-    assert.equal(failed.exitCode, 0, failed.stderr);
-
-    let shown = runSsf(['execution', 'show', changeDir, '--json']);
-    assert.equal(shown.exitCode, 0, shown.stderr);
-    assert.equal(shown.json.waves[0].receipt.status, 'fail');
-    assert.equal(shown.json.waves[0].retryable, true);
-    assert.equal(shown.json.waves[0].eligible, true);
-    assert.equal(shown.json.waves[1].eligible, false);
-    assert.deepEqual(shown.json.waves[1].blockers, ['wave-1']);
-
-    const replacement = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-      '--base', gitRefs.base, '--head', gitRefs.head, '--report', writeReviewReport('wave-1-pass.md'), '--verdict', 'pass']);
-    assert.equal(replacement.exitCode, 0, replacement.stderr);
-
-    shown = runSsf(['execution', 'show', changeDir, '--json']);
-    assert.equal(shown.exitCode, 0, shown.stderr);
-    assert.equal(shown.json.waves[0].receipt.status, 'pass');
-    assert.equal(shown.json.waves[0].retryable, false);
-    assert.equal(shown.json.waves[0].eligible, false);
-    assert.equal(shown.json.waves[1].eligible, true);
-  });
-
-  it('keeps the Task 1 state revision aligned through plan, show, revise, and show', () => {
-    writeChangeDirectory(changeDir, 'full', 2);
-    const initial = runSsf(['execution', 'plan', changeDir, '--mode', 'batch-inline', '--confirm', '--acknowledge-recommendation',
-      '--reason', 'operator requested a batch', '--wave', 'wave-1:serial:1.1', '--json']);
-    assert.equal(initial.exitCode, 0, initial.stderr);
-    assert.equal(initial.json.plan.revision, 2);
-
-    const firstShow = runSsf(['execution', 'show', changeDir, '--json']);
-    assert.equal(firstShow.exitCode, 0, firstShow.stderr);
-    assert.equal(firstShow.json.valid, true);
-    assert.equal(runSsf(['state', 'get', changeDir, 'revision', '--json']).json.value, 2);
-
-    const revised = runSsf(['execution', 'revise', changeDir, '--mode', 'sdd',
-      '--reason', 'risk requires independent review', '--wave', 'wave-1:parallel:1.1,1.2', '--json']);
-    assert.equal(revised.exitCode, 0, revised.stderr);
-    assert.equal(revised.json.plan.revision, 3);
-
-    const secondShow = runSsf(['execution', 'show', changeDir, '--json']);
-    assert.equal(secondShow.exitCode, 0, secondShow.stderr);
-    assert.equal(secondShow.json.valid, true);
-    assert.equal(runSsf(['state', 'get', changeDir, 'revision', '--json']).json.value, 3);
-  });
-
-  it('rejects an invalid review verdict without writing a receipt', () => {
-    runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'full workflow default',
-      '--wave', 'wave-1:parallel:1.1,1.2']);
-
-    const result = runSsf(['execution', 'review', changeDir, '--wave', 'wave-1',
-      '--base', gitRefs.base, '--head', gitRefs.head, '--report', 'reports/wave-1.md', '--verdict', 'maybe', '--json']);
-
-    assert.notEqual(result.exitCode, 0);
-    assert.match(result.stderr, /pass.*fail|verdict/i);
-  });
-
-  it('rejects a review without exactly one wave selector', () => {
-    const result = runSsf(['execution', 'review', changeDir, '--base', gitRefs.base,
-      '--head', gitRefs.head, '--report', 'reports/wave-1.md', '--verdict', 'pass']);
-
-    assert.notEqual(result.exitCode, 0);
-    assert.match(result.stderr, /--wave is required/);
-  });
-
-  it('rejects malformed waves and SDD plan downgrades', () => {
-    const malformed = runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'bad wave', '--wave', 'missing-parts']);
-    assert.notEqual(malformed.exitCode, 0);
-    assert.match(malformed.stderr, /wave/i);
-
-    runSsf(['execution', 'plan', changeDir, '--mode', 'sdd', '--reason', 'full workflow default', '--wave', 'wave-1:serial:1.1']);
-    const invalidRevision = runSsf(['execution', 'revise', changeDir, '--mode', 'inline', '--reason', 'downgrade', '--wave', 'wave-1:serial:1.1']);
-    assert.notEqual(invalidRevision.exitCode, 0);
-    assert.match(invalidRevision.stderr, /sdd|downgrade|upgrade/i);
-  });
-});