qualia-framework 6.2.10 → 6.3.0

package/tests/bin.test.sh

@@ -137,7 +137,7 @@ TMP=$(mktmp)
 mkdir -p "$TMP/.claude"
 cat > "$TMP/.claude/.qualia-config.json" <<'EOF'
 {
-  "code": "QS-FAWZI-01",
+  "code": "QS-FAWZI-11",
   "installed_by": "Fawzi Goussous",
   "role": "OWNER",
   "version": "2.8.1",
@@ -421,7 +421,7 @@ TMP=$(mktmp)
 mkdir -p "$TMP/.claude"
 cat > "$TMP/.claude/.qualia-config.json" <<'EOF'
 {
-  "code": "QS-FAWZI-01",
+  "code": "QS-FAWZI-11",
   "installed_by": "Fawzi Goussous",
   "role": "OWNER",
   "version": "2.8.1",
@@ -446,29 +446,32 @@ echo "install.js:"
 
 # 28. Happy path: valid code installs everything
 TMP=$(mktmp)
-echo "QS-FAWZI-01" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
+echo "QS-FAWZI-11" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
 EXIT=$?
 if [ "$EXIT" -eq 0 ] \
    && [ -f "$TMP/.claude/skills/qualia/SKILL.md" ] \
    && [ -f "$TMP/.claude/hooks/session-start.js" ] \
    && [ -f "$TMP/.claude/bin/state.js" ] \
    && [ -f "$TMP/.claude/bin/runtime-manifest.js" ] \
+   && [ -f "$TMP/.claude/bin/command-surface.js" ] \
    && [ -f "$TMP/.claude/bin/host-adapters.js" ] \
    && [ -f "$TMP/.claude/bin/qualia-ui.js" ] \
    && [ -f "$TMP/.claude/bin/statusline.js" ] \
    && [ -f "$TMP/.claude/bin/state-ledger.js" ] \
    && [ -f "$TMP/.claude/bin/contract-runner.js" ] \
+   && [ -f "$TMP/.claude/bin/harness-eval.js" ] \
    && [ -f "$TMP/.claude/bin/trust-score.js" ] \
+   && [ -f "$TMP/.claude/bin/work-packet.js" ] \
    && [ -f "$TMP/.claude/bin/project-snapshot.js" ] \
    && [ -f "$TMP/.claude/bin/planning-hygiene.js" ] \
    && [ -f "$TMP/.claude/.qualia-config.json" ]; then
-  pass "QS-FAWZI-01 → installs skills, hooks, bin/, config"
+  pass "QS-FAWZI-11 → installs skills, hooks, bin/, config"
 else
-  fail_case "QS-FAWZI-01 happy path" "exit=$EXIT"
+  fail_case "QS-FAWZI-11 happy path" "exit=$EXIT"
 fi
 
 # 29. Config JSON has correct fields after happy path
-if grep -q '"code": "QS-FAWZI-01"' "$TMP/.claude/.qualia-config.json" \
+if grep -q '"code": "QS-FAWZI-11"' "$TMP/.claude/.qualia-config.json" \
    && grep -q '"installed_by": "Fawzi Goussous"' "$TMP/.claude/.qualia-config.json" \
    && grep -q '"role": "OWNER"' "$TMP/.claude/.qualia-config.json"; then
   pass "config JSON has code, installed_by, role=OWNER"
@@ -484,13 +487,13 @@ else
   fail_case "CLAUDE.md role substitution"
 fi
 
-# 31. All 11 hooks installed (block-env-edit removed in v3.2.0;
+# 31. All 12 hooks installed (block-env-edit removed in v3.2.0;
 # git-guardrails + stop-session-log added in v4.2.0;
 # vercel-account-guard + env-empty-guard + supabase-destructive-guard added in v5.0.0;
-# pre-compact removed in v6.2.0)
+# pre-compact removed in v6.2.0; fawzi-approval-guard added in v6.2.11)
 HOOK_COUNT=$(ls "$TMP/.claude/hooks/"*.js 2>/dev/null | wc -l)
-if [ "$HOOK_COUNT" -eq 11 ]; then
-  pass "11 hooks installed in hooks/"
+if [ "$HOOK_COUNT" -eq 12 ]; then
+  pass "12 hooks installed in hooks/"
 else
   fail_case "hook count" "got $HOOK_COUNT"
 fi
@@ -506,7 +509,7 @@ else
   fail_case "settings.json contents"
 fi
 
-# 33. settings.json contains all 11 hooks wired correctly
+# 33. settings.json contains all 12 hooks wired correctly
 #     pre-compact.js was removed in v6.2.0 — verify it's NOT in settings.json.
 if grep -q 'branch-guard.js' "$TMP/.claude/settings.json" \
    && grep -q 'migration-guard.js' "$TMP/.claude/settings.json" \
@@ -517,33 +520,34 @@ if grep -q 'branch-guard.js' "$TMP/.claude/settings.json" \
    && grep -q 'git-guardrails.js' "$TMP/.claude/settings.json" \
    && grep -q 'stop-session-log.js' "$TMP/.claude/settings.json" \
    && grep -q 'vercel-account-guard.js' "$TMP/.claude/settings.json" \
+   && grep -q 'fawzi-approval-guard.js' "$TMP/.claude/settings.json" \
    && grep -q 'env-empty-guard.js' "$TMP/.claude/settings.json" \
    && grep -q 'supabase-destructive-guard.js' "$TMP/.claude/settings.json" \
    && ! grep -q 'pre-compact.js' "$TMP/.claude/settings.json"; then
-  pass "settings.json has all 11 hooks wired (no pre-compact)"
+  pass "settings.json has all 12 hooks wired (no pre-compact)"
 else
   fail_case "settings.json hooks misconfigured (check for stale pre-compact entry)"
 fi
 
 # 34. Lowercase code works (resolveTeamCode normalizes)
 TMP=$(mktmp)
-echo "qs-fawzi-01" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
+echo "qs-fawzi-11" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
 EXIT=$?
 if [ "$EXIT" -eq 0 ] \
    && [ -f "$TMP/.claude/.qualia-config.json" ] \
-   && grep -q '"code": "QS-FAWZI-01"' "$TMP/.claude/.qualia-config.json"; then
-  pass "lowercase 'qs-fawzi-01' → canonical 'QS-FAWZI-01'"
+   && grep -q '"code": "QS-FAWZI-11"' "$TMP/.claude/.qualia-config.json"; then
+  pass "lowercase 'qs-fawzi-11' → canonical 'QS-FAWZI-11'"
 else
   fail_case "lowercase normalization" "exit=$EXIT"
 fi
 
-# 34. O/0 typo tolerance — letter O in suffix normalized to digit 0
+# 34b. O/0 typo tolerance — letter O in suffix normalized to digit 0
 TMP=$(mktmp)
-echo "QS-FAWZI-O1" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
+echo "QS-HASAN-O2" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
 EXIT=$?
 if [ "$EXIT" -eq 0 ] \
    && [ -f "$TMP/.claude/.qualia-config.json" ] \
-   && grep -q '"code": "QS-FAWZI-01"' "$TMP/.claude/.qualia-config.json"; then
+   && grep -q '"code": "QS-HASAN-02"' "$TMP/.claude/.qualia-config.json"; then
   pass "letter 'O' in suffix → normalized to digit '0'"
 else
   fail_case "O/0 fuzzy match" "exit=$EXIT"
@@ -598,10 +602,10 @@ fi
 
 # 39. Code with surrounding whitespace is accepted
 TMP=$(mktmp)
-printf '  QS-FAWZI-01  \n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
+printf '  QS-FAWZI-11  \n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
 EXIT=$?
 if [ "$EXIT" -eq 0 ] \
-   && grep -q '"code": "QS-FAWZI-01"' "$TMP/.claude/.qualia-config.json"; then
+   && grep -q '"code": "QS-FAWZI-11"' "$TMP/.claude/.qualia-config.json"; then
   pass "whitespace-padded code → accepted and trimmed"
 else
   fail_case "whitespace trim" "exit=$EXIT"
@@ -618,7 +622,7 @@ cat > "$TMP/.claude/settings.json" <<'EOF'
   }
 }
 EOF
-echo "QS-FAWZI-01" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
+echo "QS-FAWZI-11" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
 EXIT=$?
 MERGED=$($NODE -e 'const s=JSON.parse(require("fs").readFileSync(process.argv[1],"utf8"));console.log([s.customKey,s.env&&s.env.MY_CUSTOM_VAR,s.env&&s.env.CLAUDE_CODE_NO_FLICKER,!!s.hooks,!!s.statusLine].join("|"))' "$TMP/.claude/settings.json" 2>/dev/null)
 if [ "$EXIT" -eq 0 ] \
@@ -630,7 +634,7 @@ fi
 
 # 41. Knowledge files created on first install
 TMP=$(mktmp)
-echo "QS-FAWZI-01" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
+echo "QS-FAWZI-11" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
 EXIT=$?
 if [ "$EXIT" -eq 0 ] \
    && [ -f "$TMP/.claude/knowledge/learned-patterns.md" ] \
@@ -643,7 +647,7 @@ fi
 
 # 42. Idempotent re-install preserves user edits to knowledge files
 printf '\n## CUSTOM LEARNING — DO NOT OVERWRITE\n' >> "$TMP/.claude/knowledge/learned-patterns.md"
-echo "QS-FAWZI-01" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out2.log" 2>&1
+echo "QS-FAWZI-11" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out2.log" 2>&1
 EXIT=$?
 if [ "$EXIT" -eq 0 ] \
    && grep -q "CUSTOM LEARNING" "$TMP/.claude/knowledge/learned-patterns.md"; then
@@ -658,7 +662,7 @@ if [ ! -f "$TMP/.claude/.erp-api-key" ] && [ "$CONFIG_ENABLED" = "disabled" ]; t
   echo "  ✓ ERP disabled when no API key is provided"
   PASS=$((PASS + 1))
   echo "custom-erp-key" > "$TMP/.claude/.erp-api-key"
-  echo "QS-FAWZI-01" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out3.log" 2>&1
+  echo "QS-FAWZI-11" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out3.log" 2>&1
   if grep -q "custom-erp-key" "$TMP/.claude/.erp-api-key"; then
     pass ".erp-api-key preserved on re-install"
   else
@@ -670,7 +674,7 @@ fi
 
 # 44. Templates copied to qualia-templates/
 TMP=$(mktmp)
-echo "QS-FAWZI-01" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
+echo "QS-FAWZI-11" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/out.log" 2>&1
 EXIT=$?
 TMPL_COUNT=$(ls "$TMP/.claude/qualia-templates/" 2>/dev/null | wc -l)
 if [ "$EXIT" -eq 0 ] && [ "$TMPL_COUNT" -gt 0 ]; then
@@ -719,13 +723,14 @@ fi
 echo ""
 echo "--- v4.2.0 phase 3 (flush + forks + model matrix) ---"
 
-# 61. qualia-flush skill installs
+# 61. qualia-flush is retired from the default slash-command surface
 TMP=$(mktmp)
-echo "QS-FAWZI-01" | HOME="$TMP" $NODE "$INSTALL_JS" >/dev/null 2>&1
-if [ -f "$TMP/.claude/skills/qualia-flush/SKILL.md" ]; then
-  pass "qualia-flush skill installs"
+echo "QS-FAWZI-11" | HOME="$TMP" $NODE "$INSTALL_JS" >/dev/null 2>&1
+if [ ! -f "$TMP/.claude/skills/qualia-flush/SKILL.md" ] \
+   && [ -f "$TMP/.claude/bin/knowledge-flush.js" ]; then
+  pass "qualia-flush retired; knowledge-flush.js remains installed"
 else
-  fail_case "qualia-flush skill missing after install"
+  fail_case "qualia-flush retirement/install state"
 fi
 
 # 62. CLAUDE_AGENT_FORK_ENABLED=1 in settings.json
@@ -966,7 +971,7 @@ fi
 
 # 70. qualia-postmortem skill installs
 TMP=$(mktmp)
-echo "QS-FAWZI-01" | HOME="$TMP" $NODE "$INSTALL_JS" >/dev/null 2>&1
+echo "QS-FAWZI-11" | HOME="$TMP" $NODE "$INSTALL_JS" >/dev/null 2>&1
 if [ -f "$TMP/.claude/skills/qualia-postmortem/SKILL.md" ]; then
   pass "qualia-postmortem skill installs"
 else
@@ -1043,7 +1048,7 @@ echo "--- v5.0.0 (alignment substrate + new skills) ---"
 
 # 79. CONTEXT.md template installs to qualia-templates/
 TMP=$(mktmp)
-echo "QS-FAWZI-01" | HOME="$TMP" $NODE "$INSTALL_JS" >/dev/null 2>&1
+echo "QS-FAWZI-11" | HOME="$TMP" $NODE "$INSTALL_JS" >/dev/null 2>&1
 if [ -f "$TMP/.claude/qualia-templates/CONTEXT.md" ]; then
   pass "CONTEXT.md template installs to qualia-templates/"
 else
@@ -1057,12 +1062,17 @@ else
   fail_case "decisions/ADR-template.md missing"
 fi
 
-# 81-84. The 4 new v5 skills install with their SKILL.md
-for SKILL in qualia-zoom qualia-road qualia-issues qualia-triage; do
-  if [ -f "$TMP/.claude/skills/$SKILL/SKILL.md" ]; then
-    pass "$SKILL skill installs"
+# 81-84. v6.3 keeps road active and retires queue/zoom helper commands
+if [ -f "$TMP/.claude/skills/qualia-road/SKILL.md" ]; then
+  pass "qualia-road skill installs"
+else
+  fail_case "qualia-road skill missing after install"
+fi
+for SKILL in qualia-zoom qualia-issues qualia-triage; do
+  if [ ! -f "$TMP/.claude/skills/$SKILL/SKILL.md" ]; then
+    pass "$SKILL retired from default install"
   else
-    fail_case "$SKILL skill missing after install"
+    fail_case "$SKILL should be retired from default install"
   fi
 done
 
@@ -1109,12 +1119,11 @@ else
   fail_case "builder.md missing Trust boundary block"
 fi
 
-# 91. qualia-issues uses --body-file (not vulnerable heredoc) for gh issue create
-if grep -q -- "--body-file" "$TMP/.claude/skills/qualia-issues/SKILL.md" \
-   && ! grep -q "gh issue create.*--body \"\$(cat <<" "$TMP/.claude/skills/qualia-issues/SKILL.md"; then
-  pass "qualia-issues uses --body-file (no heredoc shell injection)"
+# 91. qualia-issues source is removed from the shipped command surface
+if [ ! -d "$FRAMEWORK_DIR/skills/qualia-issues" ]; then
+  pass "qualia-issues source removed from shipped command surface"
 else
-  fail_case "qualia-issues still uses heredoc for gh issue body"
+  fail_case "qualia-issues source directory should not be shipped"
 fi
 
 # 92-94. v5.0 insights-driven hooks parse as valid Node and install
@@ -1174,7 +1183,7 @@ echo "--- v5.0.0 (visual-polish loop addendum) ---"
 
 # 99. qualia-polish SKILL.md installs (v5.8: polish-loop consolidated into --loop flag)
 TMP=$(mktmp)
-echo "QS-FAWZI-01" | HOME="$TMP" $NODE "$INSTALL_JS" >/dev/null 2>&1
+echo "QS-FAWZI-11" | HOME="$TMP" $NODE "$INSTALL_JS" >/dev/null 2>&1
 if [ -f "$TMP/.claude/skills/qualia-polish/SKILL.md" ]; then
   pass "qualia-polish SKILL.md installs"
 else
@@ -1353,7 +1362,7 @@ echo "--- v5.1.0 (multi-target install: Claude / Codex / Both) ---"
 
 # 118. Target=1 (Claude only) installs to ~/.claude/, not ~/.codex/
 TMP=$(mktmp)
-printf 'QS-FAWZI-01\n1\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
+printf 'QS-FAWZI-11\n1\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
 EXIT=$?
 if [ "$EXIT" -eq 0 ] \
    && [ -f "$TMP/.claude/.qualia-config.json" ] \
@@ -1365,7 +1374,7 @@ fi
 
 # 119. Target=2 (Codex only) writes native Codex runtime files, skips ~/.claude/
 TMP=$(mktmp)
-printf 'QS-FAWZI-01\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
+printf 'QS-FAWZI-11\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
 EXIT=$?
 if [ "$EXIT" -eq 0 ] \
    && [ -f "$TMP/.codex/AGENTS.md" ] \
@@ -1373,11 +1382,14 @@ if [ "$EXIT" -eq 0 ] \
    && [ -f "$TMP/.codex/config.toml" ] \
    && [ -f "$TMP/.codex/hooks.json" ] \
    && [ -f "$TMP/.codex/bin/runtime-manifest.js" ] \
+   && [ -f "$TMP/.codex/bin/command-surface.js" ] \
    && [ -f "$TMP/.codex/bin/host-adapters.js" ] \
    && [ -f "$TMP/.codex/bin/statusline.js" ] \
    && [ -f "$TMP/.codex/bin/state-ledger.js" ] \
    && [ -f "$TMP/.codex/bin/contract-runner.js" ] \
+   && [ -f "$TMP/.codex/bin/harness-eval.js" ] \
    && [ -f "$TMP/.codex/bin/trust-score.js" ] \
+   && [ -f "$TMP/.codex/bin/work-packet.js" ] \
    && [ -f "$TMP/.codex/bin/project-snapshot.js" ] \
    && [ -f "$TMP/.codex/bin/planning-hygiene.js" ] \
    && [ -f "$TMP/.codex/agents/planner.toml" ] \
@@ -1418,7 +1430,7 @@ fi
 
 # 120. Target=3 (Both) populates both directories with the right artifacts
 TMP=$(mktmp)
-printf 'QS-FAWZI-01\n3\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
+printf 'QS-FAWZI-11\n3\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
 EXIT=$?
 if [ "$EXIT" -eq 0 ] \
    && [ -f "$TMP/.claude/.qualia-config.json" ] \
@@ -1437,7 +1449,7 @@ fi
 # 121. Backward compat: legacy single-line piped install (no target line)
 # defaults to Claude only. Same exact invocation as pre-v5.1.
 TMP=$(mktmp)
-echo "QS-FAWZI-01" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
+echo "QS-FAWZI-11" | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
 EXIT=$?
 if [ "$EXIT" -eq 0 ] \
    && [ -f "$TMP/.claude/.qualia-config.json" ] \
@@ -1452,7 +1464,7 @@ fi
 TMP=$(mktmp)
 mkdir -p "$TMP/.codex"
 echo "OLD USER CONTENT" > "$TMP/.codex/AGENTS.md"
-printf 'QS-FAWZI-01\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
+printf 'QS-FAWZI-11\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
 EXIT=$?
 BAK_COUNT=$(ls "$TMP/.codex/"AGENTS.md.bak.* 2>/dev/null | wc -l)
 if [ "$EXIT" -eq 0 ] \
@@ -1467,9 +1479,9 @@ fi
 # 123. Codex install with same content does NOT create a redundant .bak
 # (the v5.0 CLAUDE.md backup discipline only backs up if content differs).
 TMP=$(mktmp)
-printf 'QS-FAWZI-01\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
+printf 'QS-FAWZI-11\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
 # Re-run with same input — content should be identical, no new backup.
-printf 'QS-FAWZI-01\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log2.txt" 2>&1
+printf 'QS-FAWZI-11\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log2.txt" 2>&1
 BAK_COUNT=$(ls "$TMP/.codex/"AGENTS.md.bak.* 2>/dev/null | wc -l)
 if [ "$BAK_COUNT" -eq 0 ]; then
   pass "Codex re-install with identical content → no redundant .bak"
@@ -1494,7 +1506,7 @@ cat > "$TMP/.codex/hooks.json" <<'JSON'
   }
 }
 JSON
-printf 'QS-FAWZI-01\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
+printf 'QS-FAWZI-11\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
 if grep -q "custom-session-hook.js" "$TMP/.codex/hooks.json" \
    && grep -q "session-start.js" "$TMP/.codex/hooks.json"; then
   pass "Codex hooks.json merge preserves non-Qualia hooks"
@@ -1520,7 +1532,7 @@ cat > "$TMP/.codex/hooks.json" <<'JSON'
   }
 }
 JSON
-printf 'QS-FAWZI-01\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
+printf 'QS-FAWZI-11\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
 EXIT=0; HOME="$TMP" $NODE "$CLI_JS" uninstall --yes > "$TMP/uninstall.log" 2>&1 || EXIT=$?
 if [ "$EXIT" -eq 0 ] \
    && [ -f "$TMP/.codex/AGENTS.md" ] \
@@ -1540,7 +1552,7 @@ fi
 
 # 123d. Team management writes to Codex-only installs without creating ~/.claude.
 TMP=$(mktmp)
-printf 'QS-FAWZI-01\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
+printf 'QS-FAWZI-11\n2\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
 EXIT=0; HOME="$TMP" $NODE "$CLI_JS" team add --code QS-TEST-99 --name "Test User" > "$TMP/team.log" 2>&1 || EXIT=$?
 if [ "$EXIT" -eq 0 ] \
    && [ -f "$TMP/.codex/.qualia-team.json" ] \
@@ -1555,7 +1567,7 @@ fi
 # sequences (\r, \x1b[?25l/h hide-cursor, \x1b[2K clear-line). Spinner +
 # overwrite primitives must degrade cleanly when output is piped.
 TMP=$(mktmp)
-printf 'QS-FAWZI-01\n3\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
+printf 'QS-FAWZI-11\n3\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
 # Look for any of: bare CR, hide-cursor (?25), clear-line (\x1b[2K).
 if [ -s "$TMP/log.txt" ] \
    && ! grep -q $'\r' "$TMP/log.txt" \
@@ -1568,7 +1580,7 @@ fi
 
 # 125. Final summary card includes the new "Targets" + "Time" rows
 TMP=$(mktmp)
-printf 'QS-FAWZI-01\n3\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
+printf 'QS-FAWZI-11\n3\n' | HOME="$TMP" $NODE "$INSTALL_JS" > "$TMP/log.txt" 2>&1
 CLEAN=$(strip_ansi < "$TMP/log.txt")
 if echo "$CLEAN" | grep -q "Targets" \
    && echo "$CLEAN" | grep -q "Claude Code · Codex" \
@@ -1676,7 +1688,7 @@ echo "--- v5.3.0 (Matt Pocock gaps: prd, hook-gen, parallel-interface) ---"
 
 # Re-install for v5.3 assertions (TMP from #99 may have v5.1 state)
 TMP=$(mktmp)
-echo "QS-FAWZI-01" | HOME="$TMP" $NODE "$INSTALL_JS" >/dev/null 2>&1
+echo "QS-FAWZI-11" | HOME="$TMP" $NODE "$INSTALL_JS" >/dev/null 2>&1
 
 # 135-137. /qualia-prd removed in v5.8.0 (was deprecated, overlapped /qualia-discuss).
 # Assert non-existence so the framework cannot accidentally re-ship it.
@@ -1706,28 +1718,28 @@ else
   fail_case "qualia-feature missing after install"
 fi
 
-# 138. qualia-hook-gen skill installs
-if [ -f "$TMP/.claude/skills/qualia-hook-gen/SKILL.md" ]; then
-  pass "qualia-hook-gen skill installs"
+# 138. qualia-hook-gen is removed from source and retired from default install
+if [ ! -f "$TMP/.claude/skills/qualia-hook-gen/SKILL.md" ] \
+   && [ ! -d "$FRAMEWORK_DIR/skills/qualia-hook-gen" ]; then
+  pass "qualia-hook-gen removed from source and default install"
 else
-  fail_case "qualia-hook-gen SKILL.md missing after install"
+  fail_case "qualia-hook-gen should be absent from source and install"
 fi
 
-# 139. qualia-hook-gen documents the three enforcement patterns (block/rewrite/warn)
-if grep -q "Block" "$TMP/.claude/skills/qualia-hook-gen/SKILL.md" \
-   && grep -q "Rewrite" "$TMP/.claude/skills/qualia-hook-gen/SKILL.md" \
-   && grep -q "Warn" "$TMP/.claude/skills/qualia-hook-gen/SKILL.md"; then
-  pass "qualia-hook-gen documents block/rewrite/warn patterns"
+# 139. hook generation knowledge moved out of slash-command source
+if grep -q "proxy_owner_approval_claim" "$FRAMEWORK_DIR/hooks/fawzi-approval-guard.js" \
+   && grep -q "/api/v1/policy-events" "$FRAMEWORK_DIR/hooks/fawzi-approval-guard.js"; then
+  pass "hook enforcement lives in runtime hooks, not qualia-hook-gen"
 else
-  fail_case "qualia-hook-gen missing one of block/rewrite/warn patterns"
+  fail_case "runtime hook enforcement guard missing"
 fi
 
-# 140. qualia-hook-gen mandates Node hooks (cross-platform), not .sh scripts
-if grep -q "pure Node\|pure-node\|cross-platform" "$TMP/.claude/skills/qualia-hook-gen/SKILL.md" \
-   && grep -q "No \`.sh\`\|No \\.sh\|exit 0/2\|exit 2 to" "$TMP/.claude/skills/qualia-hook-gen/SKILL.md"; then
-  pass "qualia-hook-gen mandates pure-Node hooks (cross-platform discipline)"
+# 140. retired hook-gen behavior remains covered by Node hook files
+if find "$FRAMEWORK_DIR/hooks" -maxdepth 1 -name "*.js" -print | grep -q . \
+   && ! find "$FRAMEWORK_DIR/hooks" -maxdepth 1 -name "*.sh" -print | grep -q .; then
+  pass "runtime hooks are pure Node files"
 else
-  fail_case "qualia-hook-gen missing pure-Node mandate"
+  fail_case "runtime hooks should remain pure Node"
 fi
 
 # 141. qualia-optimize SKILL.md adds Step 5b (parallel-interface design)
@@ -1892,13 +1904,63 @@ else
   fail_case "report-payload UUID pass-through failed" "$OUT"
 fi
 
+# 148b. work-packet links flow into report payloads
+TMP_PACKET=$(mktmp)
+OUT=$(FRAMEWORK_DIR="$FRAMEWORK_DIR" TMP_PACKET="$TMP_PACKET" $NODE <<'NODE' 2>&1
+const assert = require("assert/strict");
+const fs = require("fs");
+const path = require("path");
+const { buildPayload } = require(path.join(process.env.FRAMEWORK_DIR, "bin", "report-payload.js"));
+const { readLocalWorkPacket } = require(path.join(process.env.FRAMEWORK_DIR, "bin", "work-packet.js"));
+
+const root = process.env.TMP_PACKET;
+const cwd = path.join(root, "project");
+const home = path.join(root, "home");
+fs.mkdirSync(path.join(cwd, ".planning"), { recursive: true });
+fs.mkdirSync(path.join(home, ".claude"), { recursive: true });
+fs.writeFileSync(path.join(home, ".claude", ".qualia-config.json"), JSON.stringify({ version: "test-version" }));
+fs.writeFileSync(path.join(cwd, ".planning", "tracking.json"), JSON.stringify({
+  project: "acme-portal",
+  project_id: "qs-acme-portal",
+  erp_project_id: "7b5d3b4e-2b8a-4de4-91a1-9b2f3182f5ef",
+  phase: 1,
+  status: "built"
+}));
+fs.writeFileSync(path.join(cwd, ".planning", "work-packet.json"), JSON.stringify({
+  id: "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+  project_id: "7b5d3b4e-2b8a-4de4-91a1-9b2f3182f5ef",
+  assignment_id: "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+  deadline_date: "2026-06-01",
+  next_command: "/qualia-verify"
+}));
+
+const packet = readLocalWorkPacket(cwd);
+assert.equal(packet.next_command, "/qualia-verify");
+const payload = buildPayload({
+  cwd,
+  home,
+  env: { SUBMITTED_BY: "Fawzi Goussous", SUBMITTED_AT: "2026-05-21T01:30:00Z" },
+});
+assert.equal(payload.work_packet_id, "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa");
+assert.equal(payload.assignment_id, "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb");
+assert.equal(payload.assignment_deadline, "2026-06-01");
+NODE
+)
+EXIT=$?
+if [ "$EXIT" -eq 0 ]; then
+  pass "work-packet links flow into report payloads"
+else
+  fail_case "work-packet report payload link failed" "$OUT"
+fi
+
 # 149. Installer ships the payload builder used by /qualia-report
 TMP_INSTALL=$(mktmp)
-echo "QS-FAWZI-01" | HOME="$TMP_INSTALL" $NODE "$INSTALL_JS" > "$TMP_INSTALL/out.log" 2>&1
+echo "QS-FAWZI-11" | HOME="$TMP_INSTALL" $NODE "$INSTALL_JS" > "$TMP_INSTALL/out.log" 2>&1
 EXIT=$?
 if [ "$EXIT" -eq 0 ] \
    && [ -f "$TMP_INSTALL/.claude/bin/report-payload.js" ] \
    && [ -f "$TMP_INSTALL/.claude/bin/project-snapshot.js" ] \
+   && [ -f "$TMP_INSTALL/.claude/bin/work-packet.js" ] \
    && grep -q "report-payload.js" "$TMP_INSTALL/.claude/skills/qualia-report/SKILL.md"; then
   pass "installer ships ERP report/snapshot helpers"
 else
@@ -1954,12 +2016,22 @@ fs.writeFileSync(path.join(cwd, ".planning", "tracking.json"), JSON.stringify({
     last_closed_milestone: 1
   }
 }));
+fs.writeFileSync(path.join(cwd, ".planning", "work-packet.json"), JSON.stringify({
+  id: "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+  project_id: "7b5d3b4e-2b8a-4de4-91a1-9b2f3182f5ef",
+  assignment_id: "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+  deadline_date: "2026-06-01",
+  next_command: "/qualia-verify"
+}));
 
 const snapshot = buildSnapshot({ cwd, home, now: "2026-05-21T00:00:00.000Z" });
 assert.equal(snapshot.snapshot_version, 1);
 assert.equal(snapshot.framework_version, "test-version");
 assert.equal(snapshot.identifiers.project_id, "qs-acme-portal");
 assert.equal(snapshot.identifiers.erp_project_id, "7b5d3b4e-2b8a-4de4-91a1-9b2f3182f5ef");
+assert.equal(snapshot.identifiers.work_packet_id, "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa");
+assert.equal(snapshot.identifiers.assignment_id, "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb");
+assert.equal(snapshot.identifiers.assignment_deadline, "2026-06-01");
 assert.equal(snapshot.project.progress_percent, 42);
 assert.equal(snapshot.current.gap_cycles, 1);
 assert.equal(snapshot.journey.total_milestones, 3);

package/tests/hooks.test.sh

@@ -154,6 +154,46 @@ echo '{"role":""}' > "$TMP/.claude/.qualia-config.json"
 assert_exit "empty role field → blocked" 2 $?
 rm -rf "$TMP"
 
+# --- fawzi-approval-guard.js ---
+echo ""
+echo "fawzi-approval-guard:"
+
+TMP=$(mktemp -d)
+mkdir -p "$TMP/.claude"
+cat > "$TMP/.claude/.qualia-config.json" <<'EOF'
+{"code":"QS-HASAN-02","installed_by":"Hasan","role":"EMPLOYEE","erp":{"enabled":false}}
+EOF
+OUT=$(echo '{"tool_input":{"content":"Fawzi said ok, ship it now."}}' | HOME="$TMP" $NODE "$HOOKS_DIR/fawzi-approval-guard.js" 2>&1)
+RC=$?
+if [ "$RC" -eq 0 ] \
+   && [ -z "$OUT" ] \
+   && [ -f "$TMP/.claude/.approval-policy-events.json" ] \
+   && grep -q '"proxy_owner_approval_claim"' "$TMP/.claude/.approval-policy-events.json" \
+   && grep -q '"total": 1' "$TMP/.claude/.approval-policy-events.json"; then
+  echo "  ✓ employee proxy approval claim → silently recorded"
+  PASS=$((PASS + 1))
+else
+  echo "  ✗ employee proxy approval claim record failed (exit=$RC out=$OUT)"
+  FAIL=$((FAIL + 1))
+fi
+rm -rf "$TMP"
+
+TMP=$(mktemp -d)
+mkdir -p "$TMP/.claude"
+cat > "$TMP/.claude/.qualia-config.json" <<'EOF'
+{"code":"QS-FAWZI-11","installed_by":"Fawzi Goussous","role":"OWNER","erp":{"enabled":false}}
+EOF
+echo '{"tool_input":{"content":"Fawzi said ok, ship it now."}}' | HOME="$TMP" $NODE "$HOOKS_DIR/fawzi-approval-guard.js" >/dev/null 2>&1
+RC=$?
+if [ "$RC" -eq 0 ] && [ ! -f "$TMP/.claude/.approval-policy-events.json" ]; then
+  echo "  ✓ OWNER phrasing → not recorded as employee violation"
+  PASS=$((PASS + 1))
+else
+  echo "  ✗ OWNER phrasing should not record (exit=$RC)"
+  FAIL=$((FAIL + 1))
+fi
+rm -rf "$TMP"
+
 # --- pre-push.js ---
 echo ""
 echo "pre-push:"
@@ -184,6 +224,27 @@ rm -rf "$TMP"
 echo ""
 echo "pre-deploy-gate:"
 
+TMP=$(mktemp -d)
+mkdir -p "$TMP/.claude" "$TMP/proj/.planning"
+cat > "$TMP/.claude/.qualia-config.json" <<'EOF'
+{"code":"QS-HASAN-02","installed_by":"Hasan","role":"EMPLOYEE"}
+EOF
+cat > "$TMP/proj/.planning/tracking.json" <<'EOF'
+{"status":"built","verification":"pending","next_command":"/qualia-report"}
+EOF
+OUT=$(cd "$TMP/proj" && echo '{"tool_input":{"command":"QUALIA_SHIP_FORCE=1 vercel --prod"}}' | HOME="$TMP" $NODE "$HOOKS_DIR/pre-deploy-gate.js" 2>&1)
+RC=$?
+if [ "$RC" -eq 2 ] \
+   && echo "$OUT" | grep -q "OWNER-only" \
+   && echo "$OUT" | grep -q "/qualia-report"; then
+  echo "  ✓ employee force ship → blocked with short next command"
+  PASS=$((PASS + 1))
+else
+  echo "  ✗ employee force ship block failed (exit=$RC out=$OUT)"
+  FAIL=$((FAIL + 1))
+fi
+rm -rf "$TMP"
+
 # Empty project (no package.json, no tsconfig) → nothing to gate → exit 0
 TMP=$(mktemp -d)
 (cd "$TMP" && $NODE "$HOOKS_DIR/pre-deploy-gate.js" >/dev/null 2>&1)
@@ -338,6 +399,25 @@ Status: setup
 EOF
 (cd "$TMP" && $NODE "$HOOKS_DIR/session-start.js" >/dev/null 2>&1)
 assert_exit "exits 0 with STATE.md" 0 $?
+
+cat > "$TMP/.planning/work-packet.json" <<'EOF'
+{
+  "id": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+  "project_id": "7b5d3b4e-2b8a-4de4-91a1-9b2f3182f5ef",
+  "deadline_date": "2026-06-01",
+  "next_command": "/qualia-verify",
+  "project": { "name": "Acme Portal" }
+}
+EOF
+OUT=$(cd "$TMP" && $NODE "$HOOKS_DIR/session-start.js" 2>&1)
+RC=$?
+if [ "$RC" -eq 0 ] && echo "$OUT" | grep -q "Acme Portal" && echo "$OUT" | grep -q "/qualia-verify"; then
+  echo "  ✓ renders local ERP work packet context"
+  PASS=$((PASS + 1))
+else
+  echo "  ✗ ERP work packet context missing (exit=$RC)"
+  FAIL=$((FAIL + 1))
+fi
 rm -rf "$TMP"
 
 # pre-compact.js removed in v6.2.0 — state.js journal provides crash safety.
@@ -348,7 +428,7 @@ echo "auto-update:"
 
 TMP=$(mktemp -d)
 mkdir -p "$TMP/.claude"
-echo '{"code":"QS-FAWZI-01","version":"99.99.99"}' > "$TMP/.claude/.qualia-config.json"
+echo '{"code":"QS-FAWZI-11","version":"99.99.99"}' > "$TMP/.claude/.qualia-config.json"
 HOME="$TMP" $NODE "$HOOKS_DIR/auto-update.js" >/dev/null 2>&1
 assert_exit "exits 0 (fast path)" 0 $?
 # Should now have cache file