qualia-framework 6.2.10 → 6.3.0

package/tests/install-smoke.test.sh

@@ -62,9 +62,12 @@ fi
 tar -xzf "$TARBALL_PATH" -C "$TMP" 2>"$TMP/tar.err"
 if [ -f "$TMP/package/bin/install.js" ] \
   && [ -f "$TMP/package/bin/runtime-manifest.js" ] \
+  && [ -f "$TMP/package/bin/command-surface.js" ] \
   && [ -f "$TMP/package/bin/host-adapters.js" ] \
   && [ -f "$TMP/package/bin/report-payload.js" ] \
+  && [ -f "$TMP/package/bin/work-packet.js" ] \
   && [ -f "$TMP/package/bin/project-snapshot.js" ] \
+  && [ -f "$TMP/package/bin/harness-eval.js" ] \
   && [ -f "$TMP/package/bin/planning-hygiene.js" ] \
   && [ -f "$TMP/package/bin/state-ledger.js" ] \
   && [ -f "$TMP/package/AGENTS.md" ] \
@@ -74,7 +77,7 @@ else
   fail_case "tarball missing install surfaces" "$(cat "$TMP/tar.err" 2>/dev/null)"
 fi
 
-printf 'QS-FAWZI-01\n3\n' | HOME="$HOME_DIR" "$NODE" "$TMP/package/bin/install.js" >"$TMP/install.log" 2>&1
+printf 'QS-FAWZI-11\n3\n' | HOME="$HOME_DIR" "$NODE" "$TMP/package/bin/install.js" >"$TMP/install.log" 2>&1
 EXIT=$?
 if [ "$EXIT" -eq 0 ]; then
   pass "packaged installer exits 0 for target=Both"
@@ -94,11 +97,14 @@ if [ -f "$HOME_DIR/.codex/AGENTS.md" ] \
   && [ -f "$HOME_DIR/.codex/hooks.json" ] \
   && [ -f "$HOME_DIR/.codex/config.toml" ] \
   && [ -f "$HOME_DIR/.codex/bin/runtime-manifest.js" ] \
+  && [ -f "$HOME_DIR/.codex/bin/command-surface.js" ] \
   && [ -f "$HOME_DIR/.codex/bin/host-adapters.js" ] \
   && [ -f "$HOME_DIR/.codex/bin/statusline.js" ] \
   && [ -f "$HOME_DIR/.codex/bin/state-ledger.js" ] \
   && [ -f "$HOME_DIR/.codex/bin/contract-runner.js" ] \
+  && [ -f "$HOME_DIR/.codex/bin/harness-eval.js" ] \
   && [ -f "$HOME_DIR/.codex/bin/trust-score.js" ] \
+  && [ -f "$HOME_DIR/.codex/bin/work-packet.js" ] \
   && [ -f "$HOME_DIR/.codex/bin/project-snapshot.js" ] \
   && [ -f "$HOME_DIR/.codex/bin/planning-hygiene.js" ] \
   && [ -f "$HOME_DIR/.codex/agents/planner.toml" ] \
@@ -118,19 +124,23 @@ else
 fi
 
 if [ -d "$HOME_DIR/.claude/hooks" ] \
-  && [ "$(find "$HOME_DIR/.claude/hooks" -maxdepth 1 -name '*.js' | wc -l | tr -d ' ')" = "11" ] \
+  && [ "$(find "$HOME_DIR/.claude/hooks" -maxdepth 1 -name '*.js' | wc -l | tr -d ' ')" = "12" ] \
+  && [ -f "$HOME_DIR/.claude/hooks/fawzi-approval-guard.js" ] \
   && [ ! -f "$HOME_DIR/.claude/hooks/pre-compact.js" ]; then
-  pass "packaged install has 11 hooks and no pre-compact"
+  pass "packaged install has 12 hooks and no pre-compact"
 else
   fail_case "packaged hook set mismatch"
 fi
 
 if [ -f "$HOME_DIR/.claude/bin/report-payload.js" ] \
+  && [ -f "$HOME_DIR/.claude/bin/work-packet.js" ] \
   && [ -f "$HOME_DIR/.claude/bin/project-snapshot.js" ] \
   && [ -f "$HOME_DIR/.claude/bin/runtime-manifest.js" ] \
+  && [ -f "$HOME_DIR/.claude/bin/command-surface.js" ] \
   && [ -f "$HOME_DIR/.claude/bin/host-adapters.js" ] \
   && [ -f "$HOME_DIR/.claude/bin/state-ledger.js" ] \
   && [ -f "$HOME_DIR/.claude/bin/contract-runner.js" ] \
+  && [ -f "$HOME_DIR/.claude/bin/harness-eval.js" ] \
   && [ -f "$HOME_DIR/.claude/bin/trust-score.js" ] \
   && [ -f "$HOME_DIR/.claude/bin/planning-hygiene.js" ] \
   && grep -q "report-payload.js" "$HOME_DIR/.claude/skills/qualia-report/SKILL.md"; then

package/tests/lib.test.sh

@@ -365,6 +365,30 @@ console.log(c.includes(".codex/bin/state.js") && c.includes(".codex/agents/plann
 ')
 [ "$RES" = "HOST-RENDER-OK" ] && ok "host-adapters renders Qualia path tokens per host" || fail "host-adapters render: $RES"
 
+CS="$FRAMEWORK_DIR/bin/command-surface.js"
+$NODE --check "$CS" >/dev/null 2>&1 && ok "command-surface.js parses" || fail "command-surface.js parse"
+RES=$($NODE -e '
+const cs = require("'"$CS"'");
+console.log(cs.ACTIVE_SKILLS.length === 23 && cs.RETIRED_SKILLS.includes("qualia-debug") && cs.RETIRED_SKILLS.includes("qualia-vibe") ? "SURFACE-OK" : JSON.stringify(cs));
+')
+[ "$RES" = "SURFACE-OK" ] && ok "command-surface defines 23 active skills and retired folds" || fail "command-surface manifest: $RES"
+RES=$($NODE -e '
+const fs = require("fs");
+const path = require("path");
+const root = "'"$FRAMEWORK_DIR"'";
+const { ACTIVE_SKILLS, RETIRED_SKILLS } = require(path.join(root, "bin/command-surface.js"));
+const dirs = fs.readdirSync(path.join(root, "skills"), { withFileTypes: true })
+  .filter((d) => d.isDirectory())
+  .map((d) => d.name)
+  .sort();
+const active = [...ACTIVE_SKILLS].sort();
+const extra = dirs.filter((d) => !active.includes(d));
+const missing = active.filter((d) => !dirs.includes(d));
+const retiredPresent = RETIRED_SKILLS.filter((d) => dirs.includes(d));
+console.log(!extra.length && !missing.length && !retiredPresent.length ? "SKILL-DIRS-OK" : JSON.stringify({ extra, missing, retiredPresent }));
+')
+[ "$RES" = "SKILL-DIRS-OK" ] && ok "skills directory matches active command surface only" || fail "skill directory surface: $RES"
+
 TMP=$(mktmp)
 RES=$(cd "$TMP" && $NODE -e '
 const ledger = require("'"$SL"'");
@@ -460,6 +484,124 @@ fi
 TS="$FRAMEWORK_DIR/bin/trust-score.js"
 $NODE --check "$TS" >/dev/null 2>&1 && ok "trust-score.js parses" || fail "trust-score.js parse"
 
+HE="$FRAMEWORK_DIR/bin/harness-eval.js"
+$NODE --check "$HE" >/dev/null 2>&1 && ok "harness-eval.js parses" || fail "harness-eval.js parse"
+
+TMP=$(mktmp)
+OUT=$(cd "$TMP" && $NODE "$HE" --json 2>/dev/null)
+EXIT=$?
+if [ "$EXIT" -eq 1 ] && echo "$OUT" | grep -q '"status": "FAIL"' && echo "$OUT" | grep -q 'No .planning directory'; then
+  ok "harness-eval fails closed without planning state"
+else
+  fail "harness-eval no-planning behavior: exit=$EXIT out=$OUT"
+fi
+
+TMP=$(mktmp)
+mkdir -p "$TMP/home/.claude/bin" "$TMP/home/.claude/hooks" "$TMP/home/.claude/knowledge/daily-log" "$TMP/home/.claude/qualia-design" "$TMP/home/.claude/agents" "$TMP/home/.claude/qualia-templates" "$TMP/project"
+echo '{"installed_by":"Test","role":"OWNER","version":"6.3.0","erp":{"enabled":false}}' > "$TMP/home/.claude/.qualia-config.json"
+touch "$TMP/home/.claude/CLAUDE.md" "$TMP/home/.claude/settings.json"
+for f in runtime-manifest.js command-surface.js host-adapters.js state.js qualia-ui.js statusline.js knowledge.js knowledge-flush.js state-ledger.js plan-contract.js contract-runner.js harness-eval.js trust-score.js agent-runs.js slop-detect.mjs erp-retry.js work-packet.js report-payload.js project-snapshot.js codex-goal.js planning-hygiene.js; do
+  touch "$TMP/home/.claude/bin/$f"
+done
+for h in session-start.js auto-update.js branch-guard.js pre-push.js pre-deploy-gate.js migration-guard.js git-guardrails.js stop-session-log.js fawzi-approval-guard.js vercel-account-guard.js env-empty-guard.js supabase-destructive-guard.js; do
+  touch "$TMP/home/.claude/hooks/$h"
+done
+touch "$TMP/home/.claude/knowledge/index.md" "$TMP/home/.claude/knowledge/agents.md" "$TMP/home/.claude/agents/visual-evaluator.md" "$TMP/home/.claude/qualia-guide.md" "$TMP/home/.claude/qualia-templates/help.html"
+for f in design-laws.md design-rubric.md design-brand.md design-product.md design-reference.md frontend.md graphics.md; do
+  touch "$TMP/home/.claude/qualia-design/$f"
+done
+for s in qualia qualia-new qualia-discuss qualia-map qualia-research qualia-plan qualia-build qualia-verify qualia-fix qualia-feature qualia-review qualia-optimize qualia-polish qualia-test qualia-milestone qualia-ship qualia-handoff qualia-report qualia-doctor qualia-road qualia-learn qualia-postmortem zoho-workflow; do
+  mkdir -p "$TMP/home/.claude/skills/$s"
+  touch "$TMP/home/.claude/skills/$s/SKILL.md"
+done
+(
+  cd "$TMP/project" || exit 1
+  HOME="$TMP/home" $NODE "$FRAMEWORK_DIR/bin/state.js" init --project "HarnessEvalProject" --phases '[{"name":"Foundation","goal":"Eval"}]' >/dev/null 2>&1
+)
+cat > "$TMP/project/eval-target.txt" <<'EOF'
+contract ok
+EOF
+cat > "$TMP/project/.planning/phase-1-plan.md" <<'EOF'
+# Phase 1 Plan
+
+## Task 1
+Create the eval target.
+
+**Acceptance Criteria:**
+- eval target exists
+
+## Success Criteria
+- [x] eval target exists
+EOF
+$NODE -e '
+const fs = require("fs");
+const path = require("path");
+const pc = require("'"$PC"'");
+const root = "'"$TMP"'/project";
+const plan = fs.readFileSync(path.join(root, ".planning/phase-1-plan.md"), "utf8");
+const trackingPath = path.join(root, ".planning/tracking.json");
+const tracking = JSON.parse(fs.readFileSync(trackingPath, "utf8"));
+Object.assign(tracking, {
+  project_id: "harness-eval-project",
+  erp_project_id: "7b5d3b4e-2b8a-4de4-91a1-9b2f3182f5ef",
+  phase_name: "Foundation",
+  tasks_done: 1,
+  tasks_total: 1
+});
+fs.writeFileSync(trackingPath, JSON.stringify(tracking, null, 2) + "\n");
+const contract = {
+  version: 1,
+  phase: 1,
+  goal: "Harness eval positive path",
+  why: "Prove scoring writes artifacts and passes on machine evidence",
+  generated_at: "2026-05-23T00:00:00Z",
+  generated_by: "manual",
+  source_plan_hash: pc.hashPlan(plan),
+  success_criteria: ["eval target exists"],
+  tasks: [{
+    id: "T1",
+    title: "Eval target",
+    wave: 1,
+    depends_on: [],
+    files_modify: [],
+    files_create: ["eval-target.txt"],
+    files_delete: [],
+    acceptance_criteria: ["eval target exists"],
+    action: "Create eval target",
+    context_files: [],
+    verification: [
+      { type: "file-exists", path: "eval-target.txt", must_contain: "contract ok" },
+      { type: "command-exit", command: process.execPath, args: ["-e", "console.log(\"ok\")"], expected_exit: 0, expect_stdout_match: "ok" }
+    ]
+  }]
+};
+fs.writeFileSync(path.join(root, ".planning/phase-1-contract.json"), JSON.stringify(contract, null, 2) + "\n");
+fs.writeFileSync(path.join(root, ".planning/phase-1-verification.md"), "Result: PASS\n\nEvidence checked.\n");
+'
+OUT=$(cd "$TMP/project" && HOME="$TMP/home" $NODE "$HE" --phase 1 --run --write --json 2>/dev/null)
+EXIT=$?
+if [ "$EXIT" -eq 0 ] \
+  && echo "$OUT" | grep -q '"status": "PASS"' \
+  && echo "$OUT" | grep -q '"machine_evidence"' \
+  && [ -f "$TMP/project/.planning/evidence/phase-1-contract-run.json" ] \
+  && ls "$TMP/project"/.planning/evals/harness-eval-*.json >/dev/null 2>&1 \
+  && ls "$TMP/project"/.planning/evals/harness-eval-*.md >/dev/null 2>&1; then
+  ok "harness-eval passes with machine evidence and writes artifacts"
+else
+  fail "harness-eval positive path: exit=$EXIT out=$OUT"
+fi
+RES=$(cd "$TMP/project" && HOME="$TMP/home" $NODE -e '
+const path = require("path");
+const { latestEval } = require("'"$HE"'");
+const { buildPayload } = require("'"$FRAMEWORK_DIR"'/bin/report-payload.js");
+const { buildSnapshot } = require("'"$FRAMEWORK_DIR"'/bin/project-snapshot.js");
+const ev = latestEval(process.cwd());
+const payload = buildPayload({ cwd: process.cwd(), home: "'"$TMP"'/home", env: { SUBMITTED_BY: "Test", SUBMITTED_AT: "2026-05-23T00:30:00Z" } });
+const snapshot = buildSnapshot({ cwd: process.cwd(), home: "'"$TMP"'/home", now: "2026-05-23T00:30:00Z" });
+console.log(ev && payload.harness_eval && snapshot.quality.harness_eval && payload.harness_eval.score === ev.score && snapshot.quality.harness_eval.score === ev.score ? "ERP-EVAL-OK" : JSON.stringify({ ev, payload: payload.harness_eval, snapshot: snapshot.quality.harness_eval }));
+')
+[ "$RES" = "ERP-EVAL-OK" ] && ok "latest harness eval flows into ERP report and project snapshot" || fail "ERP harness eval wiring: $RES"
+
 TMP=$(mktmp)
 OUT=$(HOME="$TMP" $NODE "$TS" --json 2>/dev/null)
 EXIT=$?
@@ -473,17 +615,17 @@ TMP=$(mktmp)
 mkdir -p "$TMP/.claude/bin" "$TMP/.claude/hooks" "$TMP/.claude/knowledge/daily-log" "$TMP/.claude/qualia-design" "$TMP/.claude/agents" "$TMP/.claude/qualia-templates" "$TMP/project/.planning"
 echo '{"installed_by":"Test","role":"OWNER","erp":{"enabled":false}}' > "$TMP/.claude/.qualia-config.json"
 touch "$TMP/.claude/CLAUDE.md" "$TMP/.claude/settings.json"
-for f in runtime-manifest.js host-adapters.js state.js qualia-ui.js statusline.js knowledge.js knowledge-flush.js state-ledger.js plan-contract.js contract-runner.js trust-score.js agent-runs.js slop-detect.mjs erp-retry.js report-payload.js project-snapshot.js codex-goal.js planning-hygiene.js; do
+for f in runtime-manifest.js command-surface.js host-adapters.js state.js qualia-ui.js statusline.js knowledge.js knowledge-flush.js state-ledger.js plan-contract.js contract-runner.js harness-eval.js trust-score.js agent-runs.js slop-detect.mjs erp-retry.js work-packet.js report-payload.js project-snapshot.js codex-goal.js planning-hygiene.js; do
   touch "$TMP/.claude/bin/$f"
 done
-for h in session-start.js auto-update.js branch-guard.js pre-push.js pre-deploy-gate.js migration-guard.js git-guardrails.js stop-session-log.js vercel-account-guard.js env-empty-guard.js supabase-destructive-guard.js; do
+for h in session-start.js auto-update.js branch-guard.js pre-push.js pre-deploy-gate.js migration-guard.js git-guardrails.js stop-session-log.js fawzi-approval-guard.js vercel-account-guard.js env-empty-guard.js supabase-destructive-guard.js; do
   touch "$TMP/.claude/hooks/$h"
 done
 touch "$TMP/.claude/knowledge/index.md" "$TMP/.claude/knowledge/agents.md"
 for f in design-laws.md design-rubric.md design-brand.md design-product.md design-reference.md frontend.md graphics.md; do
   touch "$TMP/.claude/qualia-design/$f"
 done
-for s in qualia-doctor qualia-road qualia-resume qualia-pause qualia-report qualia-polish qualia-vibe; do
+for s in qualia qualia-new qualia-discuss qualia-map qualia-research qualia-plan qualia-build qualia-verify qualia-fix qualia-feature qualia-review qualia-optimize qualia-polish qualia-test qualia-milestone qualia-ship qualia-handoff qualia-report qualia-doctor qualia-road qualia-learn qualia-postmortem zoho-workflow; do
   mkdir -p "$TMP/.claude/skills/$s"
   touch "$TMP/.claude/skills/$s/SKILL.md"
 done

package/tests/published-install-smoke.test.sh

@@ -69,7 +69,7 @@ else
   exit 1
 fi
 
-printf 'QS-FAWZI-01\n3\n' >"$TMP/install.input"
+printf 'QS-FAWZI-11\n3\n' >"$TMP/install.input"
 timeout "$INSTALL_TIMEOUT_SECONDS" env \
   HOME="$HOME_DIR" \
   NPM_CONFIG_CACHE="$CACHE_DIR" \
@@ -102,9 +102,10 @@ else
 fi
 
 if [ -d "$HOME_DIR/.claude/hooks" ] \
-  && [ "$(find "$HOME_DIR/.claude/hooks" -maxdepth 1 -name '*.js' | wc -l | tr -d ' ')" = "11" ] \
+  && [ "$(find "$HOME_DIR/.claude/hooks" -maxdepth 1 -name '*.js' | wc -l | tr -d ' ')" = "12" ] \
+  && [ -f "$HOME_DIR/.claude/hooks/fawzi-approval-guard.js" ] \
   && [ ! -f "$HOME_DIR/.claude/hooks/pre-compact.js" ]; then
-  pass "public install has 11 hooks and no pre-compact"
+  pass "public install has 12 hooks and no pre-compact"
 else
   fail_case "public install hook set mismatch"
 fi

package/tests/refs.test.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 # Qualia Framework — surface-drift guard
 # Greps every active surface for backtick-quoted /qualia-{name} command references.
-# Asserts each name has a matching skills/qualia-{name}/SKILL.md.
+# Asserts each name is in bin/command-surface.js and has a matching SKILL.md.
 #
 # Why: v5.7 + v5.8 removed /qualia-quick, /qualia-task, /qualia-prd, /qualia-design,
 # /qualia-polish-loop. Three user-facing files (rules/speed.md, templates/help.html,
@@ -81,6 +81,11 @@ SCAN_FILES=$(
 # We capture name + file:line so we can show context per failure.
 declare -A SEEN_REFS
 declare -A REF_LOCATIONS
+declare -A ACTIVE_SKILL_MAP
+
+while IFS= read -r skill; do
+  [ -n "$skill" ] && ACTIVE_SKILL_MAP["/$skill"]=1
+done < <("$NODE" -e 'const {ACTIVE_SKILLS}=require(process.argv[1]); for (const s of ACTIVE_SKILLS) console.log(s)' "$FRAMEWORK_ROOT/bin/command-surface.js")
 
 while IFS= read -r file; do
   # Pattern A: backtick-quoted commands. Allow trailing flag/word but only capture base name.
@@ -124,11 +129,11 @@ for ref in $(printf '%s\n' "${!SEEN_REFS[@]}" | sort); do
   name="${ref#/}"
   skill_dir="$SKILLS_DIR/$name"
   locations="${REF_LOCATIONS[$ref]}"
-  if [ -d "$skill_dir" ] && [ -f "$skill_dir/SKILL.md" ]; then
-    pass "$ref → skills/$name/SKILL.md"
+  if [ "${ACTIVE_SKILL_MAP[$ref]:-}" = "1" ] && [ -d "$skill_dir" ] && [ -f "$skill_dir/SKILL.md" ]; then
+    pass "$ref → active skills/$name/SKILL.md"
     continue
   fi
-  fail_case "$ref" "no skills/$name/SKILL.md — referenced by: $locations"
+  fail_case "$ref" "not an active shipped command or missing skills/$name/SKILL.md — referenced by: $locations"
 done
 
 PACKAGE_VERSION="$("$NODE" -e 'console.log(require(process.argv[1]).version)' "$FRAMEWORK_ROOT/package.json" 2>/dev/null || echo "")"

package/tests/runner.js

@@ -212,7 +212,7 @@ describe("CLI", () => {
   it("team list works", () => {
     const r = run("cli.js", ["team", "list"]);
     assert.equal(r.status, 0);
-    assert.match(stripAnsi(r.stdout), /QS-FAWZI-01/);
+    assert.match(stripAnsi(r.stdout), /QS-FAWZI-11/);
   });
 
   it("traces handles missing traces dir", () => {
@@ -230,7 +230,7 @@ describe("CLI", () => {
     try {
       fs.mkdirSync(path.join(tmpHome, ".claude"), { recursive: true });
       fs.writeFileSync(path.join(tmpHome, ".claude", ".qualia-config.json"), JSON.stringify({
-        code: "QS-FAWZI-01",
+        code: "QS-FAWZI-11",
         installed_by: "Fawzi Goussous",
         role: "OWNER",
         version: "2.8.1",
@@ -1607,7 +1607,7 @@ describe("Hooks", () => {
     try {
       fs.mkdirSync(path.join(tmpHome, ".claude"), { recursive: true });
       fs.writeFileSync(path.join(tmpHome, ".claude", ".qualia-config.json"), JSON.stringify({
-        code: "QS-FAWZI-01", version: "99.99.99",
+        code: "QS-FAWZI-11", version: "99.99.99",
       }));
       const r = spawnSync(NODE, [path.join(HOOKS, "auto-update.js")], {
         encoding: "utf8", timeout: 5000,
@@ -2441,7 +2441,7 @@ describe("qualia-ui.js", () => {
     try {
       fs.mkdirSync(path.join(tmpHome, ".claude"), { recursive: true });
       fs.writeFileSync(path.join(tmpHome, ".claude", ".qualia-config.json"), JSON.stringify({
-        code: "QS-FAWZI-01",
+        code: "QS-FAWZI-11",
         installed_by: "Fawzi Goussous",
         role: "OWNER",
         version: "2.8.1",
@@ -2535,7 +2535,7 @@ describe("install.js", () => {
   it("valid code installs everything", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      const r = runInstall("QS-FAWZI-01", tmpHome);
+      const r = runInstall("QS-FAWZI-11", tmpHome);
       assert.equal(r.status, 0);
       assert.ok(fs.existsSync(path.join(tmpHome, ".claude", "skills", "qualia", "SKILL.md")));
       assert.ok(fs.existsSync(path.join(tmpHome, ".claude", "hooks", "session-start.js")));
@@ -2556,9 +2556,9 @@ describe("install.js", () => {
   it("config JSON has correct fields", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      runInstall("QS-FAWZI-01", tmpHome);
+      runInstall("QS-FAWZI-11", tmpHome);
       const config = JSON.parse(fs.readFileSync(path.join(tmpHome, ".claude", ".qualia-config.json"), "utf8"));
-      assert.equal(config.code, "QS-FAWZI-01");
+      assert.equal(config.code, "QS-FAWZI-11");
       assert.equal(config.installed_by, "Fawzi Goussous");
       assert.equal(config.role, "OWNER");
     } finally {
@@ -2569,7 +2569,7 @@ describe("install.js", () => {
   it("CLAUDE.md role placeholder replaced", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      runInstall("QS-FAWZI-01", tmpHome);
+      runInstall("QS-FAWZI-11", tmpHome);
       const claude = fs.readFileSync(path.join(tmpHome, ".claude", "CLAUDE.md"), "utf8");
       assert.match(claude, /Role: OWNER/);
       assert.doesNotMatch(claude, /\{\{ROLE\}\}/);
@@ -2578,12 +2578,13 @@ describe("install.js", () => {
     }
   });
 
-  it("11 hooks installed (v6.2.0: pre-compact removed; v5.0: vercel-account-guard, env-empty-guard, supabase-destructive-guard added)", () => {
+  it("12 hooks installed (v6.2.11: proxy approval guard added; v6.2.0: pre-compact removed)", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      runInstall("QS-FAWZI-01", tmpHome);
+      runInstall("QS-FAWZI-11", tmpHome);
       const hooks = fs.readdirSync(path.join(tmpHome, ".claude", "hooks")).filter(f => f.endsWith(".js"));
-      assert.equal(hooks.length, 11, `expected 11 hooks, got ${hooks.length}: ${hooks.join(", ")}`);
+      assert.equal(hooks.length, 12, `expected 12 hooks, got ${hooks.length}: ${hooks.join(", ")}`);
+      assert.ok(hooks.includes("fawzi-approval-guard.js"), "fawzi-approval-guard.js must be installed");
       assert.ok(!hooks.includes("pre-compact.js"), "pre-compact.js must NOT be installed (removed in v6.2.0)");
     } finally {
       fs.rmSync(tmpHome, { recursive: true, force: true });
@@ -2593,7 +2594,7 @@ describe("install.js", () => {
   it("settings.json has hooks and statusLine", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      runInstall("QS-FAWZI-01", tmpHome);
+      runInstall("QS-FAWZI-11", tmpHome);
       const settings = fs.readFileSync(path.join(tmpHome, ".claude", "settings.json"), "utf8");
       assert.match(settings, /SessionStart/);
       assert.match(settings, /PreToolUse/);
@@ -2606,10 +2607,10 @@ describe("install.js", () => {
   it("lowercase code is normalized", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      const r = runInstall("qs-fawzi-01", tmpHome);
+      const r = runInstall("qs-fawzi-11", tmpHome);
       assert.equal(r.status, 0);
       const config = JSON.parse(fs.readFileSync(path.join(tmpHome, ".claude", ".qualia-config.json"), "utf8"));
-      assert.equal(config.code, "QS-FAWZI-01");
+      assert.equal(config.code, "QS-FAWZI-11");
     } finally {
       fs.rmSync(tmpHome, { recursive: true, force: true });
     }
@@ -2618,10 +2619,10 @@ describe("install.js", () => {
   it("O/0 typo tolerance in code suffix", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      const r = runInstall("QS-FAWZI-O1", tmpHome);
+      const r = runInstall("QS-HASAN-O2", tmpHome);
       assert.equal(r.status, 0);
       const config = JSON.parse(fs.readFileSync(path.join(tmpHome, ".claude", ".qualia-config.json"), "utf8"));
-      assert.equal(config.code, "QS-FAWZI-01");
+      assert.equal(config.code, "QS-HASAN-02");
     } finally {
       fs.rmSync(tmpHome, { recursive: true, force: true });
     }
@@ -2672,10 +2673,10 @@ describe("install.js", () => {
   it("whitespace-padded code is accepted", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      const r = runInstall("  QS-FAWZI-01  ", tmpHome);
+      const r = runInstall("  QS-FAWZI-11  ", tmpHome);
       assert.equal(r.status, 0);
       const config = JSON.parse(fs.readFileSync(path.join(tmpHome, ".claude", ".qualia-config.json"), "utf8"));
-      assert.equal(config.code, "QS-FAWZI-01");
+      assert.equal(config.code, "QS-FAWZI-11");
     } finally {
       fs.rmSync(tmpHome, { recursive: true, force: true });
     }
@@ -2689,7 +2690,7 @@ describe("install.js", () => {
         customKey: "preserved",
         env: { MY_CUSTOM_VAR: "hello" },
       }));
-      const r = runInstall("QS-FAWZI-01", tmpHome);
+      const r = runInstall("QS-FAWZI-11", tmpHome);
       assert.equal(r.status, 0);
       const settings = JSON.parse(fs.readFileSync(path.join(tmpHome, ".claude", "settings.json"), "utf8"));
       assert.equal(settings.customKey, "preserved");
@@ -2704,7 +2705,7 @@ describe("install.js", () => {
   it("knowledge files created on first install", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      runInstall("QS-FAWZI-01", tmpHome);
+      runInstall("QS-FAWZI-11", tmpHome);
       assert.ok(fs.existsSync(path.join(tmpHome, ".claude", "knowledge", "learned-patterns.md")));
       assert.ok(fs.existsSync(path.join(tmpHome, ".claude", "knowledge", "common-fixes.md")));
       assert.ok(fs.existsSync(path.join(tmpHome, ".claude", "knowledge", "client-prefs.md")));
@@ -2716,10 +2717,10 @@ describe("install.js", () => {
   it("re-install preserves user edits in knowledge files", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      runInstall("QS-FAWZI-01", tmpHome);
+      runInstall("QS-FAWZI-11", tmpHome);
       fs.appendFileSync(path.join(tmpHome, ".claude", "knowledge", "learned-patterns.md"),
         "\n## CUSTOM LEARNING — DO NOT OVERWRITE\n");
-      runInstall("QS-FAWZI-01", tmpHome);
+      runInstall("QS-FAWZI-11", tmpHome);
       const content = fs.readFileSync(path.join(tmpHome, ".claude", "knowledge", "learned-patterns.md"), "utf8");
       assert.match(content, /CUSTOM LEARNING/);
     } finally {
@@ -2732,7 +2733,7 @@ describe("install.js", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
       // Fresh install first, then inject a user-owned hook, then reinstall.
-      runInstall("QS-FAWZI-01", tmpHome);
+      runInstall("QS-FAWZI-11", tmpHome);
       const settingsPath = path.join(tmpHome, ".claude", "settings.json");
       const before = JSON.parse(fs.readFileSync(settingsPath, "utf8"));
 
@@ -2746,7 +2747,7 @@ describe("install.js", () => {
       before.hooks.PreToolUse = [userHook, ...(before.hooks.PreToolUse || [])];
       fs.writeFileSync(settingsPath, JSON.stringify(before, null, 2));
 
-      const r = runInstall("QS-FAWZI-01", tmpHome);
+      const r = runInstall("QS-FAWZI-11", tmpHome);
       assert.equal(r.status, 0);
       const after = JSON.parse(fs.readFileSync(settingsPath, "utf8"));
       const allCmds = [];
@@ -2770,7 +2771,7 @@ describe("install.js", () => {
   it("templates copied to qualia-templates/", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      runInstall("QS-FAWZI-01", tmpHome);
+      runInstall("QS-FAWZI-11", tmpHome);
       const tmplDir = path.join(tmpHome, ".claude", "qualia-templates");
       assert.ok(fs.existsSync(tmplDir));
       const files = fs.readdirSync(tmplDir);
@@ -2783,7 +2784,7 @@ describe("install.js", () => {
   it("agents copied", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      runInstall("QS-FAWZI-01", tmpHome);
+      runInstall("QS-FAWZI-11", tmpHome);
       const agentDir = path.join(tmpHome, ".claude", "agents");
       assert.ok(fs.existsSync(agentDir));
       const files = fs.readdirSync(agentDir);
@@ -2796,7 +2797,7 @@ describe("install.js", () => {
   it("rules copied", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      runInstall("QS-FAWZI-01", tmpHome);
+      runInstall("QS-FAWZI-11", tmpHome);
       const rulesDir = path.join(tmpHome, ".claude", "rules");
       assert.ok(fs.existsSync(rulesDir));
       const files = fs.readdirSync(rulesDir);
@@ -2812,7 +2813,7 @@ describe("install.js", () => {
   it("config version matches package.json", () => {
     const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), "qualia-install-"));
     try {
-      runInstall("QS-FAWZI-01", tmpHome);
+      runInstall("QS-FAWZI-11", tmpHome);
       const config = JSON.parse(fs.readFileSync(path.join(tmpHome, ".claude", ".qualia-config.json"), "utf8"));
       assert.equal(config.version, PKG_VERSION);
     } finally {

package/tests/state.test.sh

@@ -75,6 +75,47 @@ Goal: Test goal
 PLAN
 }
 
+make_valid_contract() {
+  local dir="$1"
+  local phase="${2:-1}"
+  cat > "$dir/.planning/phase-${phase}-contract.json" <<'JSON'
+{
+  "version": 1,
+  "phase": 1,
+  "goal": "Test goal",
+  "why": "Exercise machine evidence",
+  "generated_at": "2026-05-23T00:00:00.000Z",
+  "generated_by": "manual",
+  "source_plan_hash": "",
+  "success_criteria": ["Machine check passes"],
+  "tasks": [
+    {
+      "id": "T1",
+      "title": "Machine check",
+      "wave": 1,
+      "depends_on": [],
+      "persona": "none",
+      "files_modify": [],
+      "files_create": [],
+      "files_delete": [],
+      "acceptance_criteria": ["Node command exits 0"],
+      "action": "Run deterministic evidence check",
+      "context_files": [],
+      "verification": [
+        {
+          "type": "command-exit",
+          "command": "node",
+          "args": ["-e", "process.exit(0)"],
+          "expected_exit": 0,
+          "timeout_ms": 5000
+        }
+      ]
+    }
+  ]
+}
+JSON
+}
+
 echo "=== state.js Behavioral Tests ==="
 echo ""
 
@@ -213,6 +254,33 @@ else
   fail_case "built → verified(pass) auto-advance" "exit=$EXIT out=$OUT"
 fi
 
+# 6b. verified(pass) refuses when a contract exists but machine evidence is missing
+TMP=$(make_project)
+make_valid_plan "$TMP" 1
+make_valid_contract "$TMP" 1
+(cd "$TMP" && $NODE "$STATE_JS" transition --to planned >/dev/null 2>&1)
+(cd "$TMP" && $NODE "$STATE_JS" transition --to built --tasks-done 1 --tasks-total 1 >/dev/null 2>&1)
+echo "result: PASS" > "$TMP/.planning/phase-1-verification.md"
+OUT=$(cd "$TMP" && $NODE "$STATE_JS" transition --to verified --verification pass 2>&1)
+EXIT=$?
+if [ "$EXIT" -ne 0 ] && echo "$OUT" | grep -q '"error": "MISSING_EVIDENCE"'; then
+  pass "verified(pass) refuses missing machine evidence when contract exists"
+else
+  fail_case "verified(pass) missing evidence guard" "exit=$EXIT out=$OUT"
+fi
+
+# 6c. verified(pass) succeeds after contract-runner writes passing evidence
+(cd "$TMP" && $NODE "$FRAMEWORK_DIR/bin/contract-runner.js" .planning/phase-1-contract.json >/dev/null 2>&1)
+OUT=$(cd "$TMP" && $NODE "$STATE_JS" transition --to verified --verification pass 2>&1)
+EXIT=$?
+if [ "$EXIT" -eq 0 ] \
+   && echo "$OUT" | grep -q '"ok": true' \
+   && echo "$OUT" | grep -q '"phase": 2'; then
+  pass "verified(pass) accepts passing machine evidence"
+else
+  fail_case "verified(pass) with machine evidence" "exit=$EXIT out=$OUT"
+fi
+
 # 7. built → verified(fail) stays on phase 1, records verification=fail
 TMP=$(make_project)
 make_valid_plan "$TMP" 1