bigpowers 2.86.5 → 2.86.7

package/scripts/lib/install-targets-b.sh

@@ -107,10 +107,6 @@ install_agy() {
   echo "  NOTE: Antigravity uses ~/.gemini/antigravity-cli/skills/ — not .gemini/extensions/ (Gemini CLI)"
 }
 
-install_antigravity() {
-  install_agy
-}
-
 uninstall_agy() {
   echo ""
   echo "Antigravity CLI → removing management from $AGY_CONFIG_DIR/"
@@ -122,10 +118,6 @@ uninstall_agy() {
   fi
 }
 
-uninstall_antigravity() {
-  uninstall_agy
-}
-
 # ── Codex CLI (e65s02) ───────────────────────────────────────────────────────
 
 CODEX_CONFIG_DIR="$HOME/.codex"

package/scripts/lib/sync-render.sh

@@ -54,49 +54,6 @@ render_gemini_command() {
   } > "$GEMINI_COMMANDS/$IR_NAME.toml"
 }
 
-render_gemini_hooks_manifest() {
-  local hookdir="${GEMINI_HOOKS_DIR:-$GEMINI_EXT_DIR/hooks}"
-  mkdir -p "$hookdir"
-  cat > "$hookdir/hooks-manifest.json" <<'JSON'
-{
-  "schema_version": 1,
-  "target": "gemini",
-  "config_path": "~/.gemini/settings.json",
-  "events_total": 11,
-  "events": [
-    "BeforeTool",
-    "AfterTool",
-    "BeforeAgent",
-    "AfterAgent",
-    "BeforeModel",
-    "BeforeToolSelection",
-    "AfterModel",
-    "SessionStart",
-    "SessionEnd",
-    "Notification",
-    "PreCompress"
-  ],
-  "shipped_hooks": [
-    {
-      "event": "SessionStart",
-      "script": "session-start",
-      "matcher": "startup|clear|compact",
-      "wave": "a",
-      "status": "shipped"
-    },
-    {
-      "event": "BeforeTool",
-      "script": "before-tool-git-guard.sh",
-      "matcher": "run_shell_command",
-      "wave": "a",
-      "status": "template"
-    }
-  ],
-  "polyglot_launcher": "run-hook.cmd"
-}
-JSON
-}
-
 render_pi_skill() {
   mkdir -p "$PI_SKILLS/$IR_NAME"
   {

package/scripts/lib/test-assertions.sh

@@ -19,3 +19,7 @@ ta_cleanup() {
 ta_pass() { echo "  PASS $1"; TA_PASS=$((TA_PASS + 1)); }
 
 ta_fail() { echo "  FAIL $1"; TA_FAIL=$((TA_FAIL + 1)); }
+
+# Strip ANSI color codes — used by scripts that grep the colored output of a
+# gate/skill they're testing, where the escape codes would break the match.
+ta_strip_ansi() { sed -E 's/\x1b\[[0-9;]*m//g'; }

package/scripts/snapshot-catalog-baseline.sh

@@ -2,6 +2,10 @@
 # story: e54s01
 # snapshot-catalog-baseline.sh — freeze the live skill catalog into a dated,
 # immutable YAML baseline for e56's reclassification diff.
+# bp-manual-utility: e56 (reclassify-catalog) is still `backlog` in
+# execution-status.yaml — its sole consumer hasn't started, so there is
+# nothing to wire this into yet. Promote to a gate when e56 kicks off; run
+# manually until then: bash scripts/snapshot-catalog-baseline.sh
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/targets.yaml

@@ -47,7 +47,9 @@ targets:
   - id: cline
     name: Cline
     tier: default_on
-    skill: null
+    skill:
+      adapter: cline
+      output: .cline/skills
     context:
       adapter: cline
       mode: native
@@ -164,7 +166,9 @@ targets:
     # story: e68s02
     name: Qwen (Alibaba)
     tier: opt_in
-    skill: null
+    skill:
+      adapter: qwen
+      output: .qwen/skills
     context:
       adapter: qwen
       mode: symlink
@@ -172,17 +176,6 @@ targets:
     contracts:
       - agents_md_exists
       - qwen_hooks_manifest
-    name: Kilocode
-    tier: opt_in
-    skill:
-      adapter: kilocode
-      output: .kilocode/rules
-    context:
-      adapter: kilocode
-      mode: copy
-      file: AGENTS.md
-    contracts:
-      - agents_md_exists
 
   # Wave D (e37s12)
   - id: continue
@@ -303,3 +296,32 @@ targets:
       file: AGENTS.md
     contracts:
       - windsurf_hooks_manifest
+
+  # Registered by BUG-2026-07-26-null-skill-adapters-install-nothing: both ship
+  # a render_skill() adapter and an install function, but had no registry row,
+  # so srp-engine never rendered for them and install found nothing.
+  - id: opencode
+    name: OpenCode
+    tier: opt_in
+    skill:
+      adapter: opencode
+      output: .opencode/skills
+    context:
+      adapter: opencode
+      mode: symlink
+      file: AGENTS.md
+    contracts:
+      - agents_md_exists
+
+  - id: copilot
+    name: Copilot CLI
+    tier: opt_in
+    skill:
+      adapter: copilot
+      output: .copilot/skills
+    context:
+      adapter: copilot
+      mode: copy
+      file: AGENTS.md
+    contracts:
+      - agents_md_exists

package/scripts/test-adapter-render.sh

@@ -0,0 +1,114 @@
+#!/usr/bin/env bash
+# story: e37s05
+# test-adapter-render.sh — render, path-traversal and hook-guard checks for
+# every adapter, replacing 11 hand-written test-<target>-adapter.sh scripts.
+#
+# The 11 originals were the same five assertions with the target name
+# substituted, none of them reachable from any gate, and they covered 11 of the
+# 18 adapters that define render_skill(). Their fifth assertion was pure
+# delegation to test-adapters.sh, which is already registry-driven.
+#
+# Adapters are discovered from scripts/adapters/*.sh, and each adapter's output
+# directory variable is read out of its own source (they vary: *_SKILLS,
+# *_RULES, *_EXT_DIR), so adding an adapter needs no edit here.
+#
+# Usage: bash scripts/test-adapter-render.sh
+set -euo pipefail
+source "$(dirname "${BASH_SOURCE[0]}")/lib/skill-common.sh"
+resolve_repo_root
+cd "$REPO_ROOT"
+
+TA_PASS=0
+TA_FAIL=0
+TA_TMPDIR=""
+
+source "$(dirname "${BASH_SOURCE[0]}")/lib/test-assertions.sh"
+trap ta_cleanup EXIT
+
+TA_TMPDIR=$(mktemp -d)
+TMP_ROOT="$TA_TMPDIR"
+echo "=== test-adapter-render.sh ==="
+
+for adapter in scripts/adapters/*.sh; do
+  id="$(basename "$adapter" .sh)"
+
+  grep -q "^render_skill()" "$adapter" || continue
+
+  # Adapters are sourced, not executed: several (continue, omp, zed) are stubs
+  # with no stdin entrypoint and would silently no-op — and exit 0 — if run as
+  # scripts. Sourcing and calling render_skill directly is how test-adapters.sh
+  # drives them, and it exercises every adapter the same way.
+  #
+  # An adapter may read more than one output variable (gemini uses GEMINI_SKILLS
+  # and GEMINI_EXT_DIR), so point all of them at the sandbox rather than
+  # guessing which one matters.
+  mapfile -t outvars < <(grep -oE '\$\{?[A-Z][A-Z0-9_]*_(SKILLS|RULES|EXT_DIR|OUT|COMMANDS|PROMPTS|HOOKS_DIR)[:-]' "$adapter" \
+    | tr -d '${:-' | sort -u)
+  if [[ ${#outvars[@]} -eq 0 ]]; then
+    echo "  skip: $id — no output directory variable found"
+    continue
+  fi
+
+  render_into() { # $1 = destination dir, $2 = skill name
+    local dir="$1" nm="$2" v
+    local -a envs=()
+    for v in "${outvars[@]}"; do envs+=("$v=$dir"); done
+    ( set +e
+      env "${envs[@]}" bash -c '
+        source "$1" 2>/dev/null || exit 1
+        IR_NAME="$2"; IR_DESCRIPTION="test desc"; IR_BODY="test body"
+        IR_DESC_ESCAPED="test desc"; IR_MODEL=""
+        declare -f render_skill >/dev/null || exit 1
+        render_skill
+      ' _ "$PWD/$adapter" "$nm" >/dev/null 2>&1 )
+  }
+
+  dest="$TMP_ROOT/$id"
+  mkdir -p "$dest"
+  if render_into "$dest" "test-skill" && [[ -n "$(find "$dest" -mindepth 1 2>/dev/null)" ]]; then
+    ta_pass "$id: render_skill writes an artifact from a SkillIR"
+  else
+    ta_fail "$id: render_skill produced no artifact (${outvars[*]})"
+  fi
+
+  # Path traversal must be refused — this is the security assertion the
+  # per-target scripts carried and nothing else covers.
+  #
+  # Each adapter gets its own sandbox parent so the escape probe is isolated:
+  # ../escape from <sandbox>/out lands in <sandbox>, and a single shared parent
+  # would make one adapter's artifact fail every later adapter.
+  sandbox="$TMP_ROOT/sandbox-$id"
+  mkdir -p "$sandbox/out"
+  if render_into "$sandbox/out" "../escape"; then
+    ta_fail "$id: accepted a path-traversal skill name"
+  else
+    ta_pass "$id: rejects path traversal in skill name"
+  fi
+  if [[ -e "$sandbox/escape" ]]; then
+    ta_fail "$id: path traversal escaped into $sandbox"
+  else
+    ta_pass "$id: traversal wrote nothing outside the destination"
+  fi
+
+  # Hook bundle + guard behaviour, only where the target ships hooks.
+  hookdir="scripts/hooks/$id"
+  guard="$hookdir/pre-tool-git-guard.sh"
+  if [[ -f "$guard" ]]; then
+    out="$(echo '{"tool_input":{"command":"git push --force origin main"}}' \
+      | bash "$guard" 2>/dev/null || true)"
+    grep -q 'block' <<<"$out" \
+      && ta_pass "$id: pre-tool guard blocks a dangerous git command" \
+      || ta_fail "$id: pre-tool guard did not block git push --force"
+  fi
+done
+
+# The generic adapter-contract runner stays the source of truth for
+# render_skill/wire_context wiring; assert it is green rather than restating it.
+if bash scripts/test-adapters.sh 2>&1 | grep -q '0 failed'; then
+  ta_pass "test-adapters.sh reports 0 failed across the registry"
+else
+  ta_fail "test-adapters.sh reported failures"
+fi
+
+echo "test-adapter-render: $TA_PASS passed, $TA_FAIL failed"
+[[ "$TA_FAIL" -eq 0 ]] || exit 1

package/scripts/test-adapters.sh

@@ -40,8 +40,13 @@ test_adapter() {
   [[ -f "$adapter_file" ]] || { ta_fail "$id: adapter missing"; return; }
   ta_pass "$id: exists"
 
+  # </dev/null is load-bearing. The caller feeds the target list into a
+  # `while read` loop, so a sourced adapter inherits it on fd 0 — and every
+  # adapter ends in a main block that reads stdin. agy.sh was consuming the
+  # remaining target list and running render_skill with an empty IR_NAME, so
+  # this "registry-driven" runner silently tested exactly one adapter.
   # shellcheck source=/dev/null
-  source "$adapter_file" 2>/dev/null && ta_pass "$id: sourceable" || { ta_fail "$id: source error"; return; }
+  source "$adapter_file" </dev/null 2>/dev/null && ta_pass "$id: sourceable" || { ta_fail "$id: source error"; return; }
 
   local has_skill has_context mode
   has_skill=$(yq -r ".targets[] | select(.id==\"$id\") | .skill != null" "$TARGETS_FILE")
@@ -62,11 +67,13 @@ test_adapter() {
     # to print 5 PASS lines and report 4. Capture the status, tally in-process.
     if (
       cd "$TA_TMPDIR"
+      # </dev/null for the same reason as above — this subshell also inherits
+      # the caller's target list on fd 0.
       # shellcheck source=/dev/null
-      source "$adapter_file"
+      source "$adapter_file" </dev/null
       wire_context >/dev/null 2>&1 || true
       wire_context >/dev/null 2>&1
-    ); then
+    ) </dev/null; then
       ta_pass "$id: idempotent wire_context"
     else
       ta_fail "$id: wire_context failed"

package/scripts/test-completeness-critic-scope.sh

@@ -15,9 +15,12 @@ RED='\033[0;31m'
 GREEN='\033[0;32m'
 NC='\033[0m'
 
-FAILURES=0
-tt_pass() { echo -e "${GREEN}PASS${NC} $1"; }
-tt_fail() { echo -e "${RED}FAIL${NC} $1"; FAILURES=$((FAILURES + 1)); }
+TA_PASS=0
+TA_FAIL=0
+TA_TMPDIR=""
+source "$REPO_ROOT/scripts/lib/test-assertions.sh"
+# NOT `trap ta_cleanup EXIT` — this script's cleanup restores backed-up
+# specs/state.yaml and specs/traceability-matrix.json, not a TA_TMPDIR.
 
 STATE_FILE="specs/state.yaml"
 MATRIX_FILE="specs/traceability-matrix.json"
@@ -26,12 +29,12 @@ MATRIX_BACKUP=$(mktemp)
 cp "$STATE_FILE" "$STATE_BACKUP"
 cp "$MATRIX_FILE" "$MATRIX_BACKUP"
 
-cleanup() {
+completeness_critic_test_cleanup() {
   cp "$STATE_BACKUP" "$STATE_FILE"
   cp "$MATRIX_BACKUP" "$MATRIX_FILE"
   rm -f "$STATE_BACKUP" "$MATRIX_BACKUP"
 }
-trap cleanup EXIT
+trap completeness_critic_test_cleanup EXIT
 
 run_critic() {
   bash scripts/lib/completeness-critic.sh 2>&1 || true
@@ -56,18 +59,18 @@ sed -i.bak '/^active_story:/d' "$STATE_FILE" && rm -f "${STATE_FILE}.bak"
 write_matrix '[]'
 output=$(run_critic)
 if echo "$output" | grep -q "\[WARNING\].*no active_story set"; then
-  tt_pass "unset active_story produces an explicit WARNING"
+  ta_pass "unset active_story produces an explicit WARNING"
 else
-  tt_fail "unset active_story did not produce the expected WARNING"
+  ta_fail "unset active_story did not produce the expected WARNING"
 fi
 
 # --- Scenario: active_story set but absent from the matrix → WARNING ---
 printf 'active_story: e99s99\n' >> "$STATE_FILE"
 output=$(run_critic)
 if echo "$output" | grep -q "\[WARNING\].*e99s99 not found"; then
-  tt_pass "unresolved active_story produces an explicit WARNING"
+  ta_pass "unresolved active_story produces an explicit WARNING"
 else
-  tt_fail "unresolved active_story did not produce the expected WARNING"
+  ta_fail "unresolved active_story did not produce the expected WARNING"
 fi
 sed -i.bak '/^active_story:/d' "$STATE_FILE" && rm -f "${STATE_FILE}.bak"
 
@@ -76,24 +79,20 @@ printf 'active_story: e00s01\n' >> "$STATE_FILE"
 write_matrix '[]'
 output=$(run_critic)
 if echo "$output" | grep -q "\[BLOCKER\] active story e00s01 has zero explicit story-tag links"; then
-  tt_pass "active story with zero tags is correctly flagged as BLOCKER"
+  ta_pass "active story with zero tags is correctly flagged as BLOCKER"
 else
-  tt_fail "active story with zero tags was not flagged as BLOCKER"
+  ta_fail "active story with zero tags was not flagged as BLOCKER"
 fi
 
 # --- Scenario: active story IS tagged → no BLOCKER, even though sibling e00s02 is untagged ---
 write_matrix '[{"method": "explicit_tag", "file": "scripts/fixture.sh", "line": 1, "confidence": 1.0}]'
 output=$(run_critic)
 if echo "$output" | grep -q "\[BLOCKER\] active story e00s01"; then
-  tt_fail "tagged active story incorrectly flagged as BLOCKER"
+  ta_fail "tagged active story incorrectly flagged as BLOCKER"
 else
-  tt_pass "tagged active story is not flagged, and untagged sibling e00s02 does not leak into the check"
+  ta_pass "tagged active story is not flagged, and untagged sibling e00s02 does not leak into the check"
 fi
 
 echo "---"
-if [[ "$FAILURES" -eq 0 ]]; then
-  echo -e "${GREEN}test-completeness-critic-scope: ALL PASS${NC}"
-else
-  echo -e "${RED}test-completeness-critic-scope: $FAILURES failure(s)${NC}"
-fi
-exit "$FAILURES"
+echo "test-completeness-critic-scope: $TA_PASS passed, $TA_FAIL failed"
+exit "$TA_FAIL"

package/scripts/test-generate-epics-wiki-zero-stories.sh

@@ -16,19 +16,22 @@ RED='\033[0;31m'
 GREEN='\033[0;32m'
 NC='\033[0m'
 
-FAILURES=0
-tt_pass() { echo -e "${GREEN}PASS${NC} $1"; }
-tt_fail() { echo -e "${RED}FAIL${NC} $1"; FAILURES=$((FAILURES + 1)); }
+TA_PASS=0
+TA_FAIL=0
+TA_TMPDIR=""
+source "$(dirname "${BASH_SOURCE[0]}")/lib/test-assertions.sh"
+# NOT `trap ta_cleanup EXIT` — this script's cleanup removes a named fixture
+# epic dir and its OKF bundle, not a TA_TMPDIR.
 
 FIXTURE_ID="e00"
 FIXTURE_DIR="specs/epics/e00-zero-story-fixture"
 FIXTURE_BUNDLE="specs/epics-wiki/${FIXTURE_ID}.okf.md"
 
-cleanup() {
+epics_wiki_test_cleanup() {
   rm -rf "$FIXTURE_DIR"
   rm -f "$FIXTURE_BUNDLE"
 }
-trap cleanup EXIT
+trap epics_wiki_test_cleanup EXIT
 
 mkdir -p "$FIXTURE_DIR"
 cat > "${FIXTURE_DIR}/epic.yaml" <<'FIXTUREEOF'
@@ -50,15 +53,11 @@ FIXTUREEOF
 bash scripts/generate-epics-wiki.sh > /dev/null
 
 if [[ ! -f "$FIXTURE_BUNDLE" ]]; then
-  tt_pass "generate-epics-wiki.sh skips a zero-story epic (no bundle emitted)"
+  ta_pass "generate-epics-wiki.sh skips a zero-story epic (no bundle emitted)"
 else
-  tt_fail "generate-epics-wiki.sh emitted a bundle for a zero-story epic: $FIXTURE_BUNDLE"
+  ta_fail "generate-epics-wiki.sh emitted a bundle for a zero-story epic: $FIXTURE_BUNDLE"
 fi
 
 echo "---"
-if [[ "$FAILURES" -eq 0 ]]; then
-  echo -e "${GREEN}test-generate-epics-wiki-zero-stories: ALL PASS${NC}"
-else
-  echo -e "${RED}test-generate-epics-wiki-zero-stories: $FAILURES failure(s)${NC}"
-fi
-exit "$FAILURES"
+echo "test-generate-epics-wiki-zero-stories: $TA_PASS passed, $TA_FAIL failed"
+exit "$TA_FAIL"

package/scripts/test-golden-g11-worktree-venv.sh

@@ -15,10 +15,12 @@ RED='\033[0;31m'
 GREEN='\033[0;32m'
 NC='\033[0m'
 
-FAILURES=0
-tt_pass() { echo -e "${GREEN}PASS${NC} $1"; }
-tt_fail() { echo -e "${RED}FAIL${NC} $1"; FAILURES=$((FAILURES + 1)); }
-strip_ansi() { sed -E 's/\x1b\[[0-9;]*m//g'; }
+TA_PASS=0
+TA_FAIL=0
+TA_TMPDIR=""
+source "$REPO_ROOT/scripts/lib/test-assertions.sh"
+# NOT `trap ta_cleanup EXIT` — this script's cleanup moves a real .venv aside
+# and back, not a TA_TMPDIR.
 
 VENV_MOVED=0
 if [[ -e .venv ]]; then
@@ -26,38 +28,34 @@ if [[ -e .venv ]]; then
   VENV_MOVED=1
 fi
 
-cleanup() {
+golden_g11_test_cleanup() {
   rm -rf .venv
   if [[ "$VENV_MOVED" -eq 1 ]]; then
     mv .venv.test-golden-g11-backup .venv
   fi
 }
-trap cleanup EXIT
+trap golden_g11_test_cleanup EXIT
 
 # --- Scenario: .venv absent (fresh worktree) → gate still PASSes ---
 if [[ -e .venv ]]; then
-  tt_fail "test setup failed to remove .venv before running the gate"
+  ta_fail "test setup failed to remove .venv before running the gate"
 else
-  output=$(bash scripts/golden-g11-gitignore-venv.sh 2>&1 | strip_ansi) && exit_code=0 || exit_code=$?
+  output=$(bash scripts/golden-g11-gitignore-venv.sh 2>&1 | ta_strip_ansi) && exit_code=0 || exit_code=$?
   if [[ "$exit_code" -eq 0 ]] && echo "$output" | grep -q "PASS git check-ignore .venv"; then
-    tt_pass "gate PASSes when .venv does not exist on disk"
+    ta_pass "gate PASSes when .venv does not exist on disk"
   else
-    tt_fail "gate did not PASS with .venv absent (exit=$exit_code)"
+    ta_fail "gate did not PASS with .venv absent (exit=$exit_code)"
   fi
 
   # The gate must clean up the .venv it created for the check — a fresh
   # worktree shouldn't be left with a stray directory after a gate run.
   if [[ ! -e .venv ]]; then
-    tt_pass "gate removes the .venv it created for the check"
+    ta_pass "gate removes the .venv it created for the check"
   else
-    tt_fail "gate left a stray .venv behind after the check"
+    ta_fail "gate left a stray .venv behind after the check"
   fi
 fi
 
 echo "---"
-if [[ "$FAILURES" -eq 0 ]]; then
-  echo -e "${GREEN}test-golden-g11-worktree-venv: ALL PASS${NC}"
-else
-  echo -e "${RED}test-golden-g11-worktree-venv: $FAILURES failure(s)${NC}"
-fi
-exit "$FAILURES"
+echo "test-golden-g11-worktree-venv: $TA_PASS passed, $TA_FAIL failed"
+exit "$TA_FAIL"

package/scripts/test-install-distribute-only.sh

@@ -5,24 +5,25 @@
 set -euo pipefail
 
 REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-PASS=0
-FAIL=0
+TA_PASS=0
+TA_FAIL=0
+TA_TMPDIR=""
 
-pass() { echo "PASS: $1"; PASS=$((PASS + 1)); }
-fail() { echo "FAIL: $1" >&2; FAIL=$((FAIL + 1)); }
+source "$REPO_ROOT/scripts/lib/test-assertions.sh"
+trap ta_cleanup EXIT
 
 echo "=== test-install-distribute-only.sh ==="
 
 SYNC_SH="$REPO_ROOT/scripts/sync-skills.sh"
 SETUP_JS="$REPO_ROOT/bin/setup.js"
 
-grep -q -- '--distribute-only' "$SYNC_SH" && pass 'sync-skills.sh: --distribute-only flag defined' \
-  || fail 'sync-skills.sh: missing --distribute-only flag'
-grep -q "sync-skills.sh --distribute-only" "$SETUP_JS" && pass 'setup.js: invokes sync-skills.sh with --distribute-only' \
-  || fail 'setup.js: does not pass --distribute-only'
+grep -q -- '--distribute-only' "$SYNC_SH" && ta_pass 'sync-skills.sh: --distribute-only flag defined' \
+  || ta_fail 'sync-skills.sh: missing --distribute-only flag'
+grep -q "sync-skills.sh --distribute-only" "$SETUP_JS" && ta_pass 'setup.js: invokes sync-skills.sh with --distribute-only' \
+  || ta_fail 'setup.js: does not pass --distribute-only'
 grep -q "runInheritedAsync('bash scripts/sync-skills.sh --distribute-only')" "$SETUP_JS" \
-  && pass 'setup.js: sync-skills call is async (spinner can animate)' \
-  || fail 'setup.js: sync-skills call reverted to blocking runInherited (spinner would freeze)'
+  && ta_pass 'setup.js: sync-skills call is async (spinner can animate)' \
+  || ta_fail 'setup.js: sync-skills call reverted to blocking runInherited (spinner would freeze)'
 
 hash_of() { [[ -f "$1" ]] && shasum -a 256 "$1" | awk '{print $1}' || echo "absent"; }
 listing_of() { [[ -d "$1" ]] && (find "$1" -maxdepth 1 -type f | sort) || echo "absent"; }
@@ -34,29 +35,29 @@ EPICS_WIKI_BEFORE=$(listing_of "$REPO_ROOT/specs/epics-wiki")
 
 OUT="$(cd "$REPO_ROOT" && bash scripts/sync-skills.sh --distribute-only 2>&1)"
 echo "$OUT" | grep -q -- '--distribute-only: dev-maintenance regen skipped' \
-  && pass 'sync-skills.sh --distribute-only: confirmation message printed' \
-  || fail 'sync-skills.sh --distribute-only: missing confirmation message'
+  && ta_pass 'sync-skills.sh --distribute-only: confirmation message printed' \
+  || ta_fail 'sync-skills.sh --distribute-only: missing confirmation message'
 echo "$OUT" | grep -q 'Generating OKF wikis' \
-  && fail 'sync-skills.sh --distribute-only: still generated OKF wikis' \
-  || pass 'sync-skills.sh --distribute-only: no OKF wiki generation'
+  && ta_fail 'sync-skills.sh --distribute-only: still generated OKF wikis' \
+  || ta_pass 'sync-skills.sh --distribute-only: no OKF wiki generation'
 echo "$OUT" | grep -q 'regenerate-lockfile' \
-  && fail 'sync-skills.sh --distribute-only: still regenerated lockfile' \
-  || pass 'sync-skills.sh --distribute-only: no lockfile regen'
+  && ta_fail 'sync-skills.sh --distribute-only: still regenerated lockfile' \
+  || ta_pass 'sync-skills.sh --distribute-only: no lockfile regen'
 
 [[ "$(hash_of "$REPO_ROOT/skills-lock.json")" == "$LOCK_BEFORE" ]] \
-  && pass 'skills-lock.json untouched' || fail 'skills-lock.json was modified'
+  && ta_pass 'skills-lock.json untouched' || ta_fail 'skills-lock.json was modified'
 [[ "$(hash_of "$REPO_ROOT/SKILL-INDEX.md")" == "$INDEX_BEFORE" ]] \
-  && pass 'SKILL-INDEX.md untouched' || fail 'SKILL-INDEX.md was modified'
+  && ta_pass 'SKILL-INDEX.md untouched' || ta_fail 'SKILL-INDEX.md was modified'
 [[ "$(hash_of "$REPO_ROOT/specs/SKILL-SEARCH-INDEX_LATEST.md")" == "$SEARCH_INDEX_BEFORE" ]] \
-  && pass 'SKILL-SEARCH-INDEX_LATEST.md untouched' || fail 'SKILL-SEARCH-INDEX_LATEST.md was modified'
+  && ta_pass 'SKILL-SEARCH-INDEX_LATEST.md untouched' || ta_fail 'SKILL-SEARCH-INDEX_LATEST.md was modified'
 [[ "$(listing_of "$REPO_ROOT/specs/epics-wiki")" == "$EPICS_WIKI_BEFORE" ]] \
-  && pass 'specs/epics-wiki/ untouched' || fail 'specs/epics-wiki/ was modified'
+  && ta_pass 'specs/epics-wiki/ untouched' || ta_fail 'specs/epics-wiki/ was modified'
 
-[[ -f "$REPO_ROOT/.cursor/rules/fix-bug.mdc" ]] && pass 'skills still distributed (.cursor/rules populated)' \
-  || fail 'skill distribution did not run'
+[[ -f "$REPO_ROOT/.cursor/rules/fix-bug.mdc" ]] && ta_pass 'skills still distributed (.cursor/rules populated)' \
+  || ta_fail 'skill distribution did not run'
 
-bash -n "$SYNC_SH" && pass 'bash -n sync-skills.sh' || fail 'bash -n sync-skills.sh'
-node --check "$SETUP_JS" && pass 'node --check setup.js' || fail 'node --check setup.js'
+bash -n "$SYNC_SH" && ta_pass 'bash -n sync-skills.sh' || ta_fail 'bash -n sync-skills.sh'
+node --check "$SETUP_JS" && ta_pass 'node --check setup.js' || ta_fail 'node --check setup.js'
 
-echo "test-install-distribute-only: $PASS passed, $FAIL failed"
-[[ "$FAIL" -eq 0 ]] || exit 1
+echo "test-install-distribute-only: $TA_PASS passed, $TA_FAIL failed"
+[[ "$TA_FAIL" -eq 0 ]] || exit 1