qualia-framework 6.22.0 → 7.0.0

package/tests/batch-plan.test.sh

@@ -0,0 +1,56 @@
+#!/bin/bash
+# batch-plan.test.sh — bin/batch-plan.js (/qualia-build --batch split, R20)
+# Run: bash tests/batch-plan.test.sh
+
+PASS=0
+FAIL=0
+BIN_DIR="$(cd "$(dirname "$0")/../bin" && pwd)"
+NODE="${NODE:-node}"
+BP="$BIN_DIR/batch-plan.js"
+
+assert_exit()     { if [ "$2" = "$3" ]; then echo "  ✓ $1"; PASS=$((PASS+1)); else echo "  ✗ $1 (expected exit $2, got $3)"; FAIL=$((FAIL+1)); fi; }
+assert_contains() { if echo "$2" | grep -qF -- "$3"; then echo "  ✓ $1"; PASS=$((PASS+1)); else echo "  ✗ $1 (missing '$3')"; FAIL=$((FAIL+1)); fi; }
+jcheck() { echo "$1" | $NODE -e "let s='';process.stdin.on('data',d=>s+=d).on('end',()=>{const p=JSON.parse(s);process.exit(($2)?0:1)})"; }
+
+echo "batch-plan.test.sh — bin/batch-plan.js"
+echo ""
+
+$NODE -c "$BP" 2>/dev/null && { echo "  ✓ syntax valid"; PASS=$((PASS+1)); } || { echo "  ✗ syntax invalid"; FAIL=$((FAIL+1)); }
+
+FILES=$(seq -f "src/f%g.ts" 1 23)
+
+# ── split math ──
+JSON=$($NODE "$BP" $FILES --batch-size 10 --max-workers 3 --json 2>&1); assert_exit "valid run → exit 0" 0 $?
+jcheck "$JSON" "p.total_files===23"   && { echo "  ✓ counts all files"; PASS=$((PASS+1)); } || { echo "  ✗ total_files"; FAIL=$((FAIL+1)); }
+jcheck "$JSON" "p.batch_count===3"    && { echo "  ✓ ceil(23/10)=3 batches"; PASS=$((PASS+1)); } || { echo "  ✗ batch_count"; FAIL=$((FAIL+1)); }
+jcheck "$JSON" "p.batches.every(b=>b.files.length<=10)" && { echo "  ✓ every batch ≤ batch-size"; PASS=$((PASS+1)); } || { echo "  ✗ batch size cap"; FAIL=$((FAIL+1)); }
+
+# ── disjoint + complete: every file in exactly one batch ──
+jcheck "$JSON" "(()=>{const a=p.batches.flatMap(b=>b.files);return a.length===23&&new Set(a).size===23})()" \
+  && { echo "  ✓ file-disjoint + complete (each file exactly once)"; PASS=$((PASS+1)); } || { echo "  ✗ disjointness"; FAIL=$((FAIL+1)); }
+
+# ── waves cap at max-workers ──
+jcheck "$JSON" "p.waves.every(w=>w.length<=3)" && { echo "  ✓ waves capped at max-workers"; PASS=$((PASS+1)); } || { echo "  ✗ wave cap"; FAIL=$((FAIL+1)); }
+jcheck "$JSON" "typeof p.staging_branch==='string'&&Array.isArray(p.waves)&&Array.isArray(p.batches)" \
+  && { echo "  ✓ --json shape (staging_branch/waves/batches)"; PASS=$((PASS+1)); } || { echo "  ✗ json shape"; FAIL=$((FAIL+1)); }
+
+# ── dedup ──
+jcheck "$($NODE "$BP" a a b --json 2>&1)" "p.total_files===2" && { echo "  ✓ de-dups repeated files"; PASS=$((PASS+1)); } || { echo "  ✗ dedup"; FAIL=$((FAIL+1)); }
+
+# ── --from FILE + stdin ──
+TMP=$(mktemp -d); printf 'x.ts\ny.ts\nz.ts\n' > "$TMP/list.txt"
+jcheck "$($NODE "$BP" --from "$TMP/list.txt" --json 2>&1)" "p.total_files===3" && { echo "  ✓ reads --from FILE"; PASS=$((PASS+1)); } || { echo "  ✗ --from file"; FAIL=$((FAIL+1)); }
+jcheck "$(printf 'a\nb\n' | $NODE "$BP" --from - --json 2>&1)" "p.total_files===2" && { echo "  ✓ reads --from - (stdin)"; PASS=$((PASS+1)); } || { echo "  ✗ --from stdin"; FAIL=$((FAIL+1)); }
+
+# ── human output mentions staging branch ──
+assert_contains "human output names staging branch" "$($NODE "$BP" a b --staging mig/x 2>&1)" "mig/x"
+
+# ── edge cases ──
+$NODE "$BP" --from /no/such/list.txt >/dev/null 2>&1; assert_exit "missing --from file → exit 2" 2 $?
+EOUT=$($NODE "$BP" 2>&1); assert_exit "no files → exit 0" 0 $?
+assert_contains "no files → friendly message" "$EOUT" "nothing to migrate"
+
+rm -rf "$TMP"
+echo ""
+echo "=== Results: $PASS passed, $FAIL failed ==="
+[ "$FAIL" -eq 0 ]

package/tests/design-tokens.test.sh

@@ -0,0 +1,53 @@
+#!/bin/bash
+# design-tokens.test.sh — bin/design-tokens.js (per-client token registry, R10)
+# Run: bash tests/design-tokens.test.sh
+
+PASS=0
+FAIL=0
+BIN_DIR="$(cd "$(dirname "$0")/../bin" && pwd)"
+NODE="${NODE:-node}"
+DT="$BIN_DIR/design-tokens.js"
+
+assert_exit()     { if [ "$2" = "$3" ]; then echo "  ✓ $1"; PASS=$((PASS+1)); else echo "  ✗ $1 (expected exit $2, got $3)"; FAIL=$((FAIL+1)); fi; }
+assert_contains() { if echo "$2" | grep -qF -- "$3"; then echo "  ✓ $1"; PASS=$((PASS+1)); else echo "  ✗ $1 (missing '$3')"; FAIL=$((FAIL+1)); fi; }
+
+echo "design-tokens.test.sh — bin/design-tokens.js"
+echo ""
+
+$NODE -c "$DT" 2>/dev/null && { echo "  ✓ syntax valid"; PASS=$((PASS+1)); } || { echo "  ✗ syntax invalid"; FAIL=$((FAIL+1)); }
+
+TMP=$(mktemp -d)
+
+# ── init ──
+$NODE "$DT" init --out "$TMP/tokens.json" >/dev/null 2>&1; assert_exit "init → exit 0" 0 $?
+INITJSON=$(cat "$TMP/tokens.json")
+echo "$INITJSON" | $NODE -e "let s='';process.stdin.on('data',d=>s+=d).on('end',()=>{const j=JSON.parse(s);process.exit(j.color&&j.font?0:1)})" \
+  && { echo "  ✓ init writes valid registry JSON (color+font)"; PASS=$((PASS+1)); } || { echo "  ✗ init JSON shape"; FAIL=$((FAIL+1)); }
+
+# ── compile → CSS ──
+CSS=$($NODE "$DT" compile "$TMP/tokens.json" 2>&1); assert_exit "compile → exit 0" 0 $?
+assert_contains "emits :root block"            "$CSS" ":root {"
+assert_contains "flattens nested color → var"  "$CSS" "--color-accent:"
+assert_contains "flattens nested font → var"   "$CSS" "--font-sans:"
+assert_contains "flattens nested radius → var" "$CSS" "--radius-md:"
+assert_contains "carries the hardcoded-hex ban reminder" "$CSS" "ABS-HEX-IN-JSX"
+
+# ── compile --json (flat map) ──
+FLAT=$($NODE "$DT" compile "$TMP/tokens.json" --json 2>&1)
+echo "$FLAT" | $NODE -e "let s='';process.stdin.on('data',d=>s+=d).on('end',()=>{const j=JSON.parse(s);process.exit(j['color-bg']?0:1)})" \
+  && { echo "  ✓ --json flat var map valid"; PASS=$((PASS+1)); } || { echo "  ✗ --json flat map"; FAIL=$((FAIL+1)); }
+
+# ── compile --out writes file ──
+$NODE "$DT" compile "$TMP/tokens.json" --out "$TMP/tokens.css" >/dev/null 2>&1
+[ -f "$TMP/tokens.css" ] && grep -q "^:root" "$TMP/tokens.css" && { echo "  ✓ compile --out writes tokens.css"; PASS=$((PASS+1)); } || { echo "  ✗ compile --out"; FAIL=$((FAIL+1)); }
+
+# ── error paths ──
+$NODE "$DT" compile /no/such/file.json >/dev/null 2>&1; assert_exit "missing file → exit 2" 2 $?
+echo '{ broken' > "$TMP/bad.json"
+$NODE "$DT" compile "$TMP/bad.json" >/dev/null 2>&1; assert_exit "invalid JSON → exit 2" 2 $?
+$NODE "$DT" bogus-cmd >/dev/null 2>&1; assert_exit "unknown command → exit 2" 2 $?
+
+rm -rf "$TMP"
+echo ""
+echo "=== Results: $PASS passed, $FAIL failed ==="
+[ "$FAIL" -eq 0 ]

package/tests/erp-event.test.sh

@@ -0,0 +1,78 @@
+#!/bin/bash
+# erp-event.test.sh — bin/erp-event.js (framework EMIT side of the R14 event log)
+# Run: bash tests/erp-event.test.sh
+
+PASS=0
+FAIL=0
+BIN_DIR="$(cd "$(dirname "$0")/../bin" && pwd)"
+NODE="${NODE:-node}"
+EE="$BIN_DIR/erp-event.js"
+
+assert_exit()     { if [ "$2" = "$3" ]; then echo "  ✓ $1"; PASS=$((PASS+1)); else echo "  ✗ $1 (expected exit $2, got $3)"; FAIL=$((FAIL+1)); fi; }
+assert_contains() { if echo "$2" | grep -qF -- "$3"; then echo "  ✓ $1"; PASS=$((PASS+1)); else echo "  ✗ $1 (missing '$3')"; FAIL=$((FAIL+1)); fi; }
+assert_absent()   { if echo "$2" | grep -qF -- "$3"; then echo "  ✗ $1 (unexpected '$3')"; FAIL=$((FAIL+1)); else echo "  ✓ $1"; PASS=$((PASS+1)); fi; }
+
+echo "erp-event.test.sh — bin/erp-event.js"
+echo ""
+
+$NODE -c "$EE" 2>/dev/null && { echo "  ✓ syntax valid"; PASS=$((PASS+1)); } || { echo "  ✗ syntax invalid"; FAIL=$((FAIL+1)); }
+
+# ── unit: build + sign (the cross-repo contract) ──
+$NODE -e '
+const { buildSignedEvent, signingContent, computeSignature } = require("'"$EE"'");
+const cfg = { code: "QS-FAWZI-11", installed_by: "Fawzi", role: "OWNER" };
+const b = buildSignedEvent("verify_pass", { id: "evt1", now: 1750000000, apiKey: "qlt_k", config: cfg, targets: [{type:"project",ref:"acme"}] });
+const ok =
+  b.event.action === "verify_pass" &&
+  b.event.actor.code === "QS-FAWZI-11" && b.event.actor.role === "OWNER" &&
+  b.headers["Qualia-Event-Id"] === "evt1" &&
+  b.headers["Qualia-Event-Timestamp"] === "1750000000" &&
+  // signature must equal a fresh recompute over `${id}.${ts}.${payload}` (the ERP verify)
+  b.headers["Qualia-Signature"] === computeSignature(signingContent("evt1","1750000000",b.payload), "qlt_k") &&
+  // and must NOT match a wrong key
+  b.headers["Qualia-Signature"] !== computeSignature(signingContent("evt1","1750000000",b.payload), "qlt_other");
+process.exit(ok ? 0 : 1);
+' && { echo "  ✓ builds envelope + signature byte-matches the ERP verify algorithm"; PASS=$((PASS+1)); } || { echo "  ✗ build/sign contract"; FAIL=$((FAIL+1)); }
+
+# unsigned when no key: no Qualia-Signature header, still a valid envelope
+$NODE -e '
+const { buildSignedEvent } = require("'"$EE"'");
+const b = buildSignedEvent("session_started", { id:"e", now:1, apiKey:"", config:{} });
+process.exit(b.headers["Qualia-Signature"] === undefined && b.headers["Qualia-Event-Id"] === "e" ? 0 : 1);
+' && { echo "  ✓ no API key → unsigned envelope (Bearer still authenticates server-side)"; PASS=$((PASS+1)); } || { echo "  ✗ unsigned path"; FAIL=$((FAIL+1)); }
+
+# ── CLI behavior with a temp install home ──
+HOME_DIR=$(mktemp -d)
+mkdir -p "$HOME_DIR/bin"
+cp "$BIN_DIR/erp-retry.js" "$HOME_DIR/bin/erp-retry.js"
+printf '{"role":"OWNER","code":"QS-FAWZI-11","installed_by":"Fawzi","erp":{"enabled":true,"url":"https://example.test"}}' > "$HOME_DIR/.qualia-config.json"
+printf 'qlt_testkey' > "$HOME_DIR/.erp-api-key"
+RUN(){ QUALIA_HOME="$HOME_DIR" $NODE "$EE" "$@"; }
+
+# dry-run: does NOT enqueue
+OUT=$(RUN emit verify_pass --target project:x --dry-run --json 2>&1); assert_exit "dry-run → exit 0" 0 $?
+assert_contains "dry-run builds a signature" "$OUT" "Qualia-Signature"
+[ ! -f "$HOME_DIR/.erp-retry-queue.json" ] && { echo "  ✓ dry-run does not enqueue"; PASS=$((PASS+1)); } || { echo "  ✗ dry-run enqueued"; FAIL=$((FAIL+1)); }
+
+# real emit: enqueues an item carrying the signed headers + /events url
+RUN emit build_wave_started --target project:x --project 7b5d3b4e-2b8a-4de4-91a1-9b2f3182f5ef >/dev/null 2>&1
+Q=$(cat "$HOME_DIR/.erp-retry-queue.json" 2>/dev/null)
+assert_contains "emit enqueues to /api/v1/events"  "$Q" "/api/v1/events"
+assert_contains "queued item carries the signature header" "$Q" "Qualia-Signature"
+assert_contains "queued item carries the event action"     "$Q" "build_wave_started"
+
+# ERP disabled → skipped, no enqueue
+HOME2=$(mktemp -d)
+printf '{"role":"OWNER","erp":{"enabled":false}}' > "$HOME2/.qualia-config.json"
+OUT=$(QUALIA_HOME="$HOME2" $NODE "$EE" emit verify_fail 2>&1); assert_exit "erp disabled → exit 0" 0 $?
+assert_contains "erp disabled → skipped" "$OUT" "skipped"
+[ ! -f "$HOME2/.erp-retry-queue.json" ] && { echo "  ✓ erp disabled → no enqueue"; PASS=$((PASS+1)); } || { echo "  ✗ enqueued while disabled"; FAIL=$((FAIL+1)); }
+
+# bad invocation
+$NODE "$EE" >/dev/null 2>&1; assert_exit "no action → exit 2" 2 $?
+$NODE "$EE" emit >/dev/null 2>&1; assert_exit "emit without action → exit 2" 2 $?
+
+rm -rf "$HOME_DIR" "$HOME2"
+echo ""
+echo "=== Results: $PASS passed, $FAIL failed ==="
+[ "$FAIL" -eq 0 ]

package/tests/lib.test.sh

@@ -365,6 +365,31 @@ console.log(c.includes(".codex/bin/state.js") && c.includes(".codex/agents/plann
 ')
 [ "$RES" = "HOST-RENDER-OK" ] && ok "host-adapters renders Qualia path tokens per host" || fail "host-adapters render: $RES"
 
+RES=$($NODE -e '
+const { adapter, hostForHome } = require("'"$HA"'");
+const c = adapter("claude"), x = adapter("codex");
+const ok =
+  c.agentCli === "claude" && JSON.stringify(c.agentExec("P")) === JSON.stringify(["-p","P"]) &&
+  x.agentCli === "codex"  && JSON.stringify(x.agentExec("P")) === JSON.stringify(["exec","P"]) &&
+  hostForHome("/x/.codex") === "codex" && hostForHome("/x/.claude") === "claude";
+console.log(ok ? "ADAPTER-EXEC-OK" : JSON.stringify({c:c.agentExec("P"),x:x.agentExec("P")}));
+')
+[ "$RES" = "ADAPTER-EXEC-OK" ] && ok "host-adapters owns agent-CLI invocation (agentCli/agentExec) + hostForHome" || fail "host-adapters agent-exec: $RES"
+
+# ─── R9 design dials: the 3 dials exist in the reference AND the DESIGN template ─
+DIALS="$FRAMEWORK_DIR/qualia-design/design-dials.md"
+DTMPL="$FRAMEWORK_DIR/templates/DESIGN.md"
+RES=$($NODE -e '
+const fs = require("fs");
+const ref = fs.readFileSync("'"$DIALS"'", "utf8");
+const tpl = fs.readFileSync("'"$DTMPL"'", "utf8");
+const dials = ["DESIGN_VARIANCE", "MOTION_INTENSITY", "VISUAL_DENSITY"];
+const refOk = dials.every(d => ref.includes(d)) && /ban\b/i.test(ref) && /do instead/i.test(ref);
+const tplOk = dials.every(d => tpl.includes(d));
+console.log(refOk && tplOk ? "DIALS-OK" : "FAIL ref="+refOk+" tpl="+tplOk);
+')
+[ "$RES" = "DIALS-OK" ] && ok "design dials + ban→do-instead present in design-dials.md AND DESIGN.md template" || fail "design dials: $RES"
+
 CS="$FRAMEWORK_DIR/bin/command-surface.js"
 $NODE --check "$CS" >/dev/null 2>&1 && ok "command-surface.js parses" || fail "command-surface.js parse"
 RES=$($NODE -e '
@@ -507,14 +532,14 @@ TMP=$(mktmp)
 mkdir -p "$TMP/home/.claude/bin" "$TMP/home/.claude/hooks" "$TMP/home/.claude/knowledge/daily-log" "$TMP/home/.claude/qualia-design" "$TMP/home/.claude/agents" "$TMP/home/.claude/qualia-templates" "$TMP/project"
 echo '{"installed_by":"Test","role":"OWNER","version":"6.3.0","erp":{"enabled":false}}' > "$TMP/home/.claude/.qualia-config.json"
 touch "$TMP/home/.claude/CLAUDE.md" "$TMP/home/.claude/settings.json"
-for f in runtime-manifest.js command-surface.js host-adapters.js state.js qualia-ui.js statusline.js knowledge.js knowledge-flush.js state-ledger.js plan-contract.js contract-runner.js agent-status.js analyze-gate.js verify-panel.js wave-plan.js eval-runner.js branch-hygiene.js last-report.js harness-eval.js trust-score.js agent-runs.js slop-detect.mjs erp-retry.js work-packet.js report-payload.js project-snapshot.js project-sync.js codex-goal.js planning-hygiene.js prune-deprecated.js learning-candidates.js status-snapshot.js security-scan.js auto-report.js; do
+for f in runtime-manifest.js command-surface.js host-adapters.js state.js qualia-ui.js statusline.js knowledge.js knowledge-flush.js recall.js vault-access.js repo-map.js design-tokens.js batch-plan.js state-ledger.js plan-contract.js contract-runner.js agent-status.js analyze-gate.js verify-panel.js wave-plan.js eval-runner.js branch-hygiene.js last-report.js harness-eval.js trust-score.js agent-runs.js slop-detect.mjs erp-retry.js erp-event.js work-packet.js report-payload.js project-snapshot.js project-sync.js codex-goal.js planning-hygiene.js prune-deprecated.js learning-candidates.js status-snapshot.js security-scan.js auto-report.js; do
   touch "$TMP/home/.claude/bin/$f"
 done
 for h in session-start.js auto-update.js branch-guard.js pre-push.js pre-deploy-gate.js migration-guard.js git-guardrails.js stop-session-log.js fawzi-approval-guard.js vercel-account-guard.js env-empty-guard.js supabase-destructive-guard.js; do
   touch "$TMP/home/.claude/hooks/$h"
 done
 touch "$TMP/home/.claude/knowledge/index.md" "$TMP/home/.claude/knowledge/agents.md" "$TMP/home/.claude/agents/visual-evaluator.md" "$TMP/home/.claude/qualia-guide.md" "$TMP/home/.claude/qualia-templates/help.html"
-for f in design-laws.md design-rubric.md design-brand.md design-product.md design-reference.md frontend.md graphics.md; do
+for f in design-laws.md design-rubric.md design-brand.md design-product.md design-reference.md design-dials.md frontend.md graphics.md; do
   touch "$TMP/home/.claude/qualia-design/$f"
 done
 for s in $($NODE -e 'console.log(require(process.argv[1]).ACTIVE_SKILLS.join(" "))' "$CS"); do
@@ -622,14 +647,14 @@ TMP=$(mktmp)
 mkdir -p "$TMP/.claude/bin" "$TMP/.claude/hooks" "$TMP/.claude/knowledge/daily-log" "$TMP/.claude/qualia-design" "$TMP/.claude/agents" "$TMP/.claude/qualia-templates" "$TMP/project/.planning"
 echo '{"installed_by":"Test","role":"OWNER","erp":{"enabled":false}}' > "$TMP/.claude/.qualia-config.json"
 touch "$TMP/.claude/CLAUDE.md" "$TMP/.claude/settings.json"
-for f in runtime-manifest.js command-surface.js host-adapters.js state.js qualia-ui.js statusline.js knowledge.js knowledge-flush.js state-ledger.js plan-contract.js contract-runner.js agent-status.js analyze-gate.js verify-panel.js wave-plan.js eval-runner.js branch-hygiene.js last-report.js harness-eval.js trust-score.js agent-runs.js slop-detect.mjs erp-retry.js work-packet.js report-payload.js project-snapshot.js project-sync.js codex-goal.js planning-hygiene.js prune-deprecated.js learning-candidates.js status-snapshot.js security-scan.js auto-report.js; do
+for f in runtime-manifest.js command-surface.js host-adapters.js state.js qualia-ui.js statusline.js knowledge.js knowledge-flush.js recall.js vault-access.js repo-map.js design-tokens.js batch-plan.js state-ledger.js plan-contract.js contract-runner.js agent-status.js analyze-gate.js verify-panel.js wave-plan.js eval-runner.js branch-hygiene.js last-report.js harness-eval.js trust-score.js agent-runs.js slop-detect.mjs erp-retry.js erp-event.js work-packet.js report-payload.js project-snapshot.js project-sync.js codex-goal.js planning-hygiene.js prune-deprecated.js learning-candidates.js status-snapshot.js security-scan.js auto-report.js; do
   touch "$TMP/.claude/bin/$f"
 done
 for h in session-start.js auto-update.js branch-guard.js pre-push.js pre-deploy-gate.js migration-guard.js git-guardrails.js stop-session-log.js fawzi-approval-guard.js vercel-account-guard.js env-empty-guard.js supabase-destructive-guard.js; do
   touch "$TMP/.claude/hooks/$h"
 done
 touch "$TMP/.claude/knowledge/index.md" "$TMP/.claude/knowledge/agents.md"
-for f in design-laws.md design-rubric.md design-brand.md design-product.md design-reference.md frontend.md graphics.md; do
+for f in design-laws.md design-rubric.md design-brand.md design-product.md design-reference.md design-dials.md frontend.md graphics.md; do
   touch "$TMP/.claude/qualia-design/$f"
 done
 for s in $($NODE -e 'console.log(require(process.argv[1]).ACTIVE_SKILLS.join(" "))' "$CS"); do

package/tests/recall.test.sh

@@ -0,0 +1,91 @@
+#!/bin/bash
+# recall.test.sh — bin/recall.js (read-side memory recall, role-filtered vault)
+# Run: bash tests/recall.test.sh
+
+PASS=0
+FAIL=0
+BIN_DIR="$(cd "$(dirname "$0")/../bin" && pwd)"
+NODE="${NODE:-node}"
+RECALL="$BIN_DIR/recall.js"
+
+assert_exit()     { if [ "$2" = "$3" ]; then echo "  ✓ $1"; PASS=$((PASS+1)); else echo "  ✗ $1 (expected exit $2, got $3)"; FAIL=$((FAIL+1)); fi; }
+assert_contains() { if echo "$2" | grep -qF "$3"; then echo "  ✓ $1"; PASS=$((PASS+1)); else echo "  ✗ $1 (missing '$3')"; FAIL=$((FAIL+1)); fi; }
+assert_absent()   { if echo "$2" | grep -qF "$3"; then echo "  ✗ $1 (LEAK: found '$3')"; FAIL=$((FAIL+1)); else echo "  ✓ $1"; PASS=$((PASS+1)); fi; }
+
+echo "recall.test.sh — bin/recall.js"
+echo ""
+
+$NODE -c "$RECALL" 2>/dev/null && { echo "  ✓ syntax valid"; PASS=$((PASS+1)); } || { echo "  ✗ syntax invalid"; FAIL=$((FAIL+1)); }
+
+# ── Fixture: a temp knowledge home + a temp vault with an access manifest ──
+HOME_DIR=$(mktemp -d)
+VAULT=$(mktemp -d)
+mkdir -p "$HOME_DIR/knowledge" "$VAULT/wiki/concepts" "$VAULT/wiki/_meta"
+
+# knowledge layer hit
+cat > "$HOME_DIR/knowledge/learned-patterns.md" <<'EOF'
+# Patterns
+- The zebrafish pattern: batch writes before fanout.
+EOF
+# vault ALL_ROLES hit
+cat > "$VAULT/wiki/concepts/notes.md" <<'EOF'
+A lesson about the zebrafish approach to retries.
+EOF
+# vault OWNER_ONLY hit (the access manifest itself names wiki/_meta/access.md)
+cat > "$VAULT/wiki/_meta/access.md" <<'EOF'
+# Vault Access Manifest
+## OWNER_ONLY
+| Path | Why |
+|---|---|
+| `Clients/*.md` | commercial |
+| `wiki/_meta/access.md` | this file (zebrafish marker) |
+## ALL_ROLES
+| `wiki/concepts/` | lessons |
+EOF
+
+export QUALIA_MEMORY_ROOT="$VAULT"
+RUN() { QUALIA_HOME="$HOME_DIR" "$@"; }
+
+# ── Invocation guards ──
+RUN $NODE "$RECALL" >/dev/null 2>&1; assert_exit "no query → exit 2" 2 $?
+RUN $NODE "$RECALL" zebrafish --scope bogus >/dev/null 2>&1; assert_exit "bad scope → exit 2" 2 $?
+
+# ── Hits across both stores ──
+OUT=$(QUALIA_ROLE=OWNER RUN $NODE "$RECALL" zebrafish 2>&1); assert_exit "valid query → exit 0" 0 $?
+assert_contains "knowledge-layer hit"    "$OUT" "learned-patterns.md"
+assert_contains "vault ALL_ROLES hit"    "$OUT" "concepts/notes.md"
+
+# ── Role enforcement (the security boundary) ──
+OWNER_OUT=$(QUALIA_ROLE=OWNER RUN $NODE "$RECALL" zebrafish --scope vault 2>&1)
+assert_contains "OWNER sees OWNER_ONLY path"  "$OWNER_OUT" "_meta/access.md"
+EMP_OUT=$(QUALIA_ROLE=EMPLOYEE RUN $NODE "$RECALL" zebrafish --scope vault 2>&1)
+assert_contains "EMPLOYEE still sees ALL_ROLES" "$EMP_OUT" "concepts/notes.md"
+assert_absent   "EMPLOYEE blocked from OWNER_ONLY" "$EMP_OUT" "_meta/access.md"
+# fail-closed: no role config + no QUALIA_ROLE → RESTRICTED
+NOROLE_OUT=$(QUALIA_HOME="$VAULT" env -u QUALIA_ROLE $NODE "$RECALL" zebrafish --scope vault 2>&1)
+assert_absent   "RESTRICTED (fail-closed) blocked from OWNER_ONLY" "$NOROLE_OUT" "_meta/access.md"
+
+# ── JSON shape ──
+JSON=$(QUALIA_ROLE=OWNER RUN $NODE "$RECALL" zebrafish --json 2>&1)
+echo "$JSON" | $NODE -e "let s='';process.stdin.on('data',d=>s+=d).on('end',()=>{const j=JSON.parse(s);if(j.role&&j.scope==='all'&&typeof j.total==='number'&&Array.isArray(j.knowledge)&&Array.isArray(j.vault))process.exit(0);process.exit(1)})" \
+  && { echo "  ✓ --json valid shape (role/scope/total/knowledge/vault)"; PASS=$((PASS+1)); } \
+  || { echo "  ✗ --json shape"; FAIL=$((FAIL+1)); }
+
+# ── Scope isolation ──
+KONLY=$(QUALIA_ROLE=OWNER RUN $NODE "$RECALL" zebrafish --scope knowledge 2>&1)
+assert_contains "scope=knowledge includes knowledge" "$KONLY" "learned-patterns.md"
+assert_absent   "scope=knowledge excludes vault"     "$KONLY" "concepts/notes.md"
+VONLY=$(QUALIA_ROLE=OWNER RUN $NODE "$RECALL" zebrafish --scope vault 2>&1)
+assert_absent   "scope=vault excludes knowledge"     "$VONLY" "learned-patterns.md"
+
+# ── Graceful degradation ──
+NOVAULT=$(QUALIA_HOME="$HOME_DIR" QUALIA_MEMORY_ROOT="/tmp/qualia-no-such-vault-$$" QUALIA_ROLE=OWNER $NODE "$RECALL" zebrafish 2>&1); RC=$?
+assert_exit     "missing vault → still exit 0" 0 $RC
+assert_contains "missing vault → knowledge still searched" "$NOVAULT" "learned-patterns.md"
+ZERO=$(QUALIA_ROLE=OWNER RUN $NODE "$RECALL" "noyzzqxmatch" 2>&1); assert_exit "zero hits → exit 0" 0 $?
+assert_contains "zero hits → friendly message" "$ZERO" "no matches"
+
+rm -rf "$HOME_DIR" "$VAULT"
+echo ""
+echo "=== Results: $PASS passed, $FAIL failed ==="
+[ "$FAIL" -eq 0 ]

package/tests/repo-map.test.sh

@@ -0,0 +1,70 @@
+#!/bin/bash
+# repo-map.test.sh — bin/repo-map.js (zero-dep symbol map for /qualia-map)
+# Run: bash tests/repo-map.test.sh
+
+PASS=0
+FAIL=0
+BIN_DIR="$(cd "$(dirname "$0")/../bin" && pwd)"
+NODE="${NODE:-node}"
+RM="$BIN_DIR/repo-map.js"
+
+assert_exit()     { if [ "$2" = "$3" ]; then echo "  ✓ $1"; PASS=$((PASS+1)); else echo "  ✗ $1 (expected exit $2, got $3)"; FAIL=$((FAIL+1)); fi; }
+assert_contains() { if echo "$2" | grep -qF "$3"; then echo "  ✓ $1"; PASS=$((PASS+1)); else echo "  ✗ $1 (missing '$3')"; FAIL=$((FAIL+1)); fi; }
+assert_absent()   { if echo "$2" | grep -qF "$3"; then echo "  ✗ $1 (unexpected '$3')"; FAIL=$((FAIL+1)); else echo "  ✓ $1"; PASS=$((PASS+1)); fi; }
+
+echo "repo-map.test.sh — bin/repo-map.js"
+echo ""
+
+$NODE -c "$RM" 2>/dev/null && { echo "  ✓ syntax valid"; PASS=$((PASS+1)); } || { echo "  ✗ syntax invalid"; FAIL=$((FAIL+1)); }
+
+# ── Fixture repo ──
+REPO=$(mktemp -d)
+mkdir -p "$REPO/src" "$REPO/node_modules/pkg" "$REPO/api"
+cat > "$REPO/src/widget.ts" <<'EOF'
+export function makeWidget() {}
+export class WidgetStore {}
+export const WIDGET_LIMIT = 5;
+export type WidgetId = string;
+function internalHelper() {}
+EOF
+cat > "$REPO/api/handler.py" <<'EOF'
+class Handler:
+    pass
+def serve():
+    pass
+async def serve_async():
+    pass
+EOF
+cat > "$REPO/node_modules/pkg/index.js" <<'EOF'
+export function shouldBeIgnored() {}
+EOF
+
+# ── Symbol extraction ──
+OUT=$($NODE "$RM" "$REPO" 2>&1); assert_exit "valid dir → exit 0" 0 $?
+assert_contains "extracts JS export function" "$OUT" "makeWidget"
+assert_contains "extracts JS export class"    "$OUT" "WidgetStore"
+assert_contains "extracts JS export const"    "$OUT" "WIDGET_LIMIT"
+assert_contains "extracts JS export type"     "$OUT" "WidgetId"
+assert_contains "extracts Python def"         "$OUT" "serve"
+assert_contains "extracts Python class"       "$OUT" "Handler"
+assert_absent   "ignores node_modules"        "$OUT" "shouldBeIgnored"
+
+# ── JSON shape ──
+JSON=$($NODE "$RM" "$REPO" --json 2>&1)
+echo "$JSON" | $NODE -e "let s='';process.stdin.on('data',d=>s+=d).on('end',()=>{const j=JSON.parse(s);if(typeof j.total_files==='number'&&typeof j.total_symbols==='number'&&Array.isArray(j.files)&&j.files[0].symbols)process.exit(0);process.exit(1)})" \
+  && { echo "  ✓ --json valid shape (total_files/total_symbols/files[].symbols)"; PASS=$((PASS+1)); } \
+  || { echo "  ✗ --json shape"; FAIL=$((FAIL+1)); }
+# densest file first (widget.ts has 5 symbols, handler.py has 3)
+FIRST=$(echo "$JSON" | $NODE -e "let s='';process.stdin.on('data',d=>s+=d).on('end',()=>{console.log(JSON.parse(s).files[0].file)})")
+[ "$FIRST" = "src/widget.ts" ] && { echo "  ✓ ranks densest file first"; PASS=$((PASS+1)); } || { echo "  ✗ ranking (got '$FIRST')"; FAIL=$((FAIL+1)); }
+
+# ── Edge cases ──
+$NODE "$RM" /no/such/dir-xyz >/dev/null 2>&1; assert_exit "missing dir → exit 2" 2 $?
+EMPTY=$(mktemp -d)
+EOUT=$($NODE "$RM" "$EMPTY" 2>&1); assert_exit "empty dir → exit 0" 0 $?
+assert_contains "empty dir → 0 source files" "$EOUT" "0 source files"
+
+rm -rf "$REPO" "$EMPTY"
+echo ""
+echo "=== Results: $PASS passed, $FAIL failed ==="
+[ "$FAIL" -eq 0 ]

package/tests/run-all.sh

@@ -27,6 +27,11 @@ SUITES=(
   "branch-hygiene"
   "last-report"
   "project-sync"
+  "erp-event"
+  "recall"
+  "repo-map"
+  "design-tokens"
+  "batch-plan"
 )
 
 FAILED=()