stylegallery 0.1.0 → 0.1.2

package/scripts/test-validate-governance.mjs

@@ -1,292 +0,0 @@
-#!/usr/bin/env node
-
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { spawnSync } from "node:child_process";
-import { fileURLToPath } from "node:url";
-import { files, generatedWarning, sentinelProvenanceClauses } from "./governance-test-fixture.mjs";
-import { governanceMatrixCases } from "./governance-matrix-negative-cases.mjs";
-import { componentStateWorkflowCases } from "./component-state-workflow-negative-cases.mjs";
-import { workflowSafetyCases } from "./governance-workflow-negative-cases.mjs";
-
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const validator = path.join(root, "scripts", "validate-governance.mjs");
-const adapterHarness = path.join(root, "scripts", "test-reference-adapters.mjs");
-const adapterPipeParser = 'let output = ""; process.stdin.setEncoding("utf8"); process.stdin.on("data", (chunk) => { output += chunk; }); process.stdin.on("end", () => { const report = JSON.parse(output); const complete = report.ok === true && report.failures.length === 0 && report.results.length === 42; process.stdout.write(complete ? "42\\n" : "incomplete\\n"); process.exitCode = complete ? 0 : 1; });';
-
-const cases = [
-  { name: "missing_governance", omit: ["GOVERNANCE.md"], expect: "GOVERNANCE.md: missing file" },
-  { name: "broad_profile_sources_claim_no_generated_artifacts", mutate: { "GOVERNANCE.md": files["GOVERNANCE.md"].replace(/`design-engineering\/reference-profiles\/governed-local\/editorial\/profile\.json`[^|]+/, "`design-engineering/reference-profiles/governed-local/**`") }, expect: "GOVERNANCE.md: governed local reference profile sources must be the six explicit canonical profile files" },
-  { name: "missing_matrix_stale_trigger", mutate: { "GOVERNANCE.md": files["GOVERNANCE.md"].replace("Generated structure changes, generated-warning changes, or generated metadata changes.", "Generated structure changes.") }, expect: "GOVERNANCE.md: missing Generated structure changes, generated-warning changes, or generated metadata changes." },
-  { name: "missing_game_ui_domain_family", mutate: { "GOVERNANCE.md": files["GOVERNANCE.md"].replace(/^\| Game UI domain guidance .*\n/m, "") }, expect: "GOVERNANCE.md: missing Game UI domain guidance" },
-  { name: "missing_evidence_fixture_coverage", mutate: { "quality/evidence/executable-evidence.md": "Missing governance file or generated warning fixtures must fail." }, expect: "quality/evidence/executable-evidence.md: missing Missing governance file, generated warning, generated metadata, CODEOWNERS coverage, or stale policy fixtures must fail." },
-  {
-    name: "missing_generated_warning",
-    mutate: {
-      "patterns/stacking/stack.md": [
-        "---",
-        "lifecycle: generated",
-        "generated_from: scripts/generate-patterns.mjs, scripts/pattern-data.mjs",
-        "---",
-        "",
-        "# stack",
-        "",
-      ].join("\n"),
-    },
-    expect: "patterns/stacking/stack.md: missing generated warning",
-  },
-  { name: "missing_generated_metadata", mutate: { "patterns/stacking/stack.md": `# stack\n\n${generatedWarning}\n` }, expect: "patterns/stacking/stack.md: missing lifecycle: generated" },
-  {
-    name: "missing_codeowners_coverage",
-    mutate: {
-      ".github/CODEOWNERS": [
-        "* @changeroa",
-        "/GOVERNANCE.md @changeroa",
-        "/scripts/pattern-data.mjs @changeroa",
-        "/patterns/ @changeroa",
-        "",
-      ].join("\n"),
-    },
-    expect: ".github/CODEOWNERS: missing /README.md @changeroa",
-  },
-  {
-    name: "missing_workflow_permissions",
-    mutate: {
-      ".github/workflows/validate.yml": [
-        "node -c scripts/validate-governance.mjs",
-        "node -c scripts/test-validate-governance.mjs",
-        "node scripts/validate-governance.mjs --json",
-        "node scripts/test-validate-governance.mjs --json",
-        "",
-      ].join("\n"),
-    },
-    expect: ".github/workflows/validate.yml: missing permissions:",
-  },
-  { name: "missing_stale_policy", mutate: { "GOVERNANCE.md": files["GOVERNANCE.md"].replace("scheduled_stale_audit: deferred\n", "") }, expect: "GOVERNANCE.md: missing scheduled_stale_audit: deferred" },
-  { name: "missing_evidence_audit_policy", mutate: { "GOVERNANCE.md": files["GOVERNANCE.md"].replace("scheduled_evidence_audit: active_advisory\n", "") }, expect: "GOVERNANCE.md: missing scheduled_evidence_audit: active_advisory" },
-  {
-    name: "paraphrased_stale_policy",
-    mutate: {
-      "GOVERNANCE.md": files["GOVERNANCE.md"].replace(
-        "Decision: run a weekly advisory audit only for evidence records that already declare `expires_at` or `review_by`.",
-        "Decision: inspect old evidence from time to time.",
-      ),
-    },
-    expect: "GOVERNANCE.md: missing Decision: run a weekly advisory audit only for evidence records that already declare `expires_at` or `review_by`.",
-  },
-  { name: "missing_no_universal_age_boundary", mutate: { "GOVERNANCE.md": files["GOVERNANCE.md"].replace("No repository-wide maximum age or inferred time-to-live applies.", "Evidence gets old after 30 days.") }, expect: "GOVERNANCE.md: missing No repository-wide maximum age or inferred time-to-live applies." },
-  { name: "missing_freshness_workflow", omit: [".github/workflows/evidence-freshness.yml"], expect: ".github/workflows/evidence-freshness.yml: missing file" },
-  { name: "freshness_schedule_drift", mutate: { ".github/workflows/evidence-freshness.yml": files[".github/workflows/evidence-freshness.yml"].replace("cron: '0 5 * * 1'", "cron: '0 5 * * 2'") }, expect: ".github/workflows/evidence-freshness.yml: missing Monday 05:00 UTC schedule" },
-  { name: "freshness_mode_became_blocking", mutate: { ".github/workflows/evidence-freshness.yml": files[".github/workflows/evidence-freshness.yml"].replace("--mode advisory", "--mode blocking") }, expect: ".github/workflows/evidence-freshness.yml: missing --mode advisory" },
-  { name: "freshness_blanket_continue", mutate: { ".github/workflows/evidence-freshness.yml": `${files[".github/workflows/evidence-freshness.yml"]}\ncontinue-on-error: true\n` }, expect: ".github/workflows/evidence-freshness.yml: continue-on-error is forbidden because malformed records and tool failures must block" },
-  { name: "consumer_browser_became_nonblocking", mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("  consumer-conformance:\n", "  consumer-conformance:\n    continue-on-error: true\n") }, expect: ".github/workflows/validate.yml: consumer-conformance must be blocking" },
-  {
-    name: "consumer_browser_command_commented_out",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - run: |\n        # npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line\n        true") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_command_relocated",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - run: true").replace("  chromium-sentinel:\n", "  chromium-sentinel:\n    steps:\n      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line\n") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_command_hidden_in_env",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - name: Hidden browser command\n        env:\n          run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line\n        run: true") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_command_hidden_in_inline_comment",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - run: true # npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_command_in_disabled_step",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - name: Disabled browser command\n        if: false\n        run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_command_hidden_in_heredoc",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - run: |\n          cat <<'PROBE'\n          npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line\n          PROBE\n          true") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_command_hidden_in_numeric_heredoc",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - run: |\n          cat <<'123'\n          npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line\n          123\n          true") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_command_echo_only",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - run: echo npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_command_shell_builtin_echo",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - run: command echo npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_command_short_circuited",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - run: false && npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_command_failure_ignored",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line || true") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_command_split_failure_ignored",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - run: |\n          npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line \\\n          || true") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_command_folded_failure_ignored",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - run: >-\n          npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line\n          || true") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_command_compound_false_step",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - if: ${{ false && true }}\n        run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: required command steps must be unconditional",
-  },
-  {
-    name: "consumer_browser_job_compound_false",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("  consumer-conformance:\n", "  consumer-conformance:\n    if: ${{ false && true }}\n") },
-    expect: ".github/workflows/validate.yml: consumer-conformance job must be unconditional",
-  },
-  {
-    name: "consumer_browser_command_quoted_disabled_step",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line", "      - name: Disabled browser command\n        \"if\": false # disabled\n        run: npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line") },
-    expect: ".github/workflows/validate.yml: consumer-conformance: missing npx playwright test tests/consumer-conformance.spec.mjs --project=chromium --reporter=line",
-  },
-  {
-    name: "consumer_browser_job_disabled",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("  consumer-conformance:\n", "  consumer-conformance:\n    if: false\n") },
-    expect: ".github/workflows/validate.yml: consumer-conformance job must be enabled",
-  },
-  {
-    name: "page_lifecycle_command_commented_out",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("      - run: node scripts/finalize-page-evidence.mjs --json", "      - run: |\n        # node scripts/finalize-page-evidence.mjs --json\n        true") },
-    expect: ".github/workflows/validate.yml: consumer-page-evidence: missing node scripts/finalize-page-evidence.mjs",
-  },
-  { name: "page_capture_became_blocking", mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("    continue-on-error: true\n    env:\n      CONSUMER_CONFORMANCE_CAPTURE_DIR", "    env:\n      CONSUMER_CONFORMANCE_CAPTURE_DIR") }, expect: ".github/workflows/validate.yml: consumer-page-evidence must be nonblocking" },
-  { name: "paraphrased_governance_link_label", mutate: { "README.md": files["README.md"].replace("[Governance, Lifecycle, And Docs-As-Code]", "[Governance reference]") }, expectWarning: "README.md: recommended link label missing [Governance, Lifecycle, And Docs-As-Code](GOVERNANCE.md)" },
-  { name: "missing_motion_codeowner", mutate: { ".github/CODEOWNERS": files[".github/CODEOWNERS"].replace("/motion/ @changeroa\n", "") }, expect: ".github/CODEOWNERS: missing /motion/ @changeroa" },
-  { name: "missing_game_ui_codeowner", mutate: { ".github/CODEOWNERS": files[".github/CODEOWNERS"].replace("/game-ui/ @changeroa\n", "") }, expect: ".github/CODEOWNERS: missing /game-ui/ @changeroa" },
-  { name: "missing_consumer_reference_codeowner", mutate: { ".github/CODEOWNERS": files[".github/CODEOWNERS"].replace("/consumer-reference/ @changeroa\n", "") }, expect: ".github/CODEOWNERS: missing /consumer-reference/ @changeroa" },
-  { name: "missing_baseline_codeowner", mutate: { ".github/CODEOWNERS": files[".github/CODEOWNERS"].replace("/consumer-reference/baselines/ @changeroa\n", "") }, expect: ".github/CODEOWNERS: missing /consumer-reference/baselines/ @changeroa" },
-  { name: "missing_promotion_codeowner", mutate: { ".github/CODEOWNERS": files[".github/CODEOWNERS"].replace("/consumer-reference/policies/ @changeroa\n", "") }, expect: ".github/CODEOWNERS: missing /consumer-reference/policies/ @changeroa" },
-  { name: "missing_promotion_ci_wiring", mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("node scripts/test-validate-promotion-rfc.mjs --json\n", "") }, expect: ".github/workflows/validate.yml: missing node scripts/test-validate-promotion-rfc.mjs --json" },
-  { name: "missing_stable_count_boundary", mutate: { "GOVERNANCE.md": files["GOVERNANCE.md"].replace("Shared stable has no numeric adoption threshold.", "Stable uses an adoption threshold.") }, expect: "GOVERNANCE.md: missing Shared stable has no numeric adoption threshold" },
-  { name: "fake_promotion_policy_claim", mutate: { "consumer-reference/policies/shared-experimental.json": files["consumer-reference/policies/shared-experimental.json"].replace('"promotion_occurred": false', '"promotion_occurred": true') }, expect: 'consumer-reference/policies/shared-experimental.json: missing "promotion_occurred": false' },
-  { name: "missing_domain_family", mutate: { "GOVERNANCE.md": files["GOVERNANCE.md"].replace("| Motion domain guidance |", "| Motion reference notes |") }, expect: "GOVERNANCE.md: missing Motion domain guidance" },
-  { name: "missing_domain_ci_wiring", mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("node scripts/validate-domains.mjs --json\n", "") }, expect: ".github/workflows/validate.yml: missing node scripts/validate-domains.mjs --json" },
-  { name: "missing_domain_evidence_coverage", mutate: { "quality/evidence/executable-evidence.md": files["quality/evidence/executable-evidence.md"].replace("Domain metadata, immutable provenance, scope boundaries, and root-route fixtures must fail.", "Domain fixtures must fail.") }, expect: "quality/evidence/executable-evidence.md: missing Domain metadata, immutable provenance, scope boundaries, and root-route fixtures must fail." },
-  { name: "missing_sentinel_ci_wiring", mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replaceAll("node scripts/test-consumer-reference-sentinel.mjs", "") }, expect: ".github/workflows/validate.yml: missing node scripts/test-consumer-reference-sentinel.mjs" },
-  { name: "missing_component_source_contract_ci", mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("node scripts/test-component-state-source-contract.mjs", "") }, expect: ".github/workflows/validate.yml: missing node scripts/test-component-state-source-contract.mjs" },
-  { name: "missing_visual_schema_ci", mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("consumer-reference/schema/visual-evidence.schema.json", "") }, expect: ".github/workflows/validate.yml: missing consumer-reference/schema/visual-evidence.schema.json" },
-  ...componentStateWorkflowCases(files[".github/workflows/validate.yml"]),
-  { name: "missing_sentinel_evidence_coverage", mutate: { "quality/evidence/executable-evidence.md": files["quality/evidence/executable-evidence.md"].replace("The proposed Chromium sentinel preserves canonical card-grid geometry and truth-derived calibration evidence.", "Chromium evidence exists.") }, expect: "quality/evidence/executable-evidence.md: missing The proposed Chromium sentinel preserves canonical card-grid geometry and truth-derived calibration evidence." },
-  { name: "missing_component_state_evidence_coverage", mutate: { "quality/evidence/executable-evidence.md": files["quality/evidence/executable-evidence.md"].replace("Governed-local button states retain source-bound visual, DOM, and accessibility-tree evidence across both example profiles.", "Component evidence exists.") }, expect: "quality/evidence/executable-evidence.md: missing Governed-local button states retain source-bound visual, DOM, and accessibility-tree evidence across both example profiles." },
-  {
-    name: "missing_scoped_checkout_sha_trust",
-    mutate: {
-      ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace(
-        "checkout_sha=\"$(git -c safe.directory=\"$GITHUB_WORKSPACE\" rev-parse HEAD)\"",
-        "checkout_sha=\"$(git rev-parse HEAD)\"",
-      ),
-    },
-    expect: ".github/workflows/validate.yml: missing checkout_sha=\"$(git -c safe.directory=\"$GITHUB_WORKSPACE\" rev-parse HEAD)\"",
-  },
-  {
-    name: "reject_broad_checkout_sha_trust",
-    mutate: {
-      ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace(
-        "checkout_sha=\"$(git -c safe.directory=\"$GITHUB_WORKSPACE\" rev-parse HEAD)\"",
-        "checkout_sha=\"$(git -c safe.directory='*' rev-parse HEAD)\"",
-      ),
-    },
-    expect: ".github/workflows/validate.yml: broad Git safe.directory wildcard is forbidden",
-  },
-  {
-    name: "missing_canonical_repository_wiring",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("--repository \"changeroa/StyleGallery\" \\", "--repository \"$GITHUB_REPOSITORY\" \\") },
-    expect: ".github/workflows/validate.yml: missing --repository \"changeroa/StyleGallery\" \\",
-  },
-  {
-    name: "missing_execution_repository_wiring",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("--execution-repository \"$GITHUB_REPOSITORY\" \\\n", "") },
-    expect: ".github/workflows/validate.yml: missing --execution-repository \"$GITHUB_REPOSITORY\" \\",
-  },
-  {
-    name: "workflow_metadata_repository_mismatch",
-    mutate: { ".github/workflows/validate.yml": files[".github/workflows/validate.yml"].replace("\"changeroa/StyleGallery\" \"$GITHUB_REPOSITORY\" \"$GITHUB_RUN_ID\"", "\"$GITHUB_REPOSITORY\" \"changeroa/StyleGallery\" \"$GITHUB_RUN_ID\"") },
-    expect: ".github/workflows/validate.yml: missing \"changeroa/StyleGallery\" \"$GITHUB_REPOSITORY\" \"$GITHUB_RUN_ID\"",
-  },
-  ...governanceMatrixCases(files["GOVERNANCE.md"]),
-  ...workflowSafetyCases(files[".github/workflows/validate.yml"]),
-  { name: "success_path", expect: null },
-];
-
-for (const [pathIndex, relative] of ["consumer-reference/contract.md", "quality/evidence/executable-evidence.md", "GOVERNANCE.md"].entries()) {
-  for (const [clauseIndex, clause] of sentinelProvenanceClauses.entries()) {
-    cases.splice(cases.length - 1, 0,
-      { name: `provenance_clause_deleted_${pathIndex}_${clauseIndex}`, mutate: { [relative]: files[relative].replace(clause, "") }, expect: `${relative}: missing ${clause}` },
-      { name: `provenance_clause_misworded_${pathIndex}_${clauseIndex}`, mutate: { [relative]: files[relative].replace(clause, `Misworded ${clause.slice(1)}`) }, expect: `${relative}: missing ${clause}` },
-    );
-  }
-}
-
-function writeFixture(testCase) {
-  const dir = fs.mkdtempSync(path.join(os.tmpdir(), `layout-gallery-governance-${testCase.name}-`));
-  const omitted = new Set(testCase.omit ?? []);
-  const entries = { ...files, ...(testCase.mutate ?? {}) };
-  for (const [relative, content] of Object.entries(entries)) {
-    if (omitted.has(relative)) continue;
-    const target = path.join(dir, relative);
-    fs.mkdirSync(path.dirname(target), { recursive: true });
-    fs.writeFileSync(target, content);
-  }
-  return dir;
-}
-
-function runCase(testCase) {
-  const dir = writeFixture(testCase);
-  const result = spawnSync(process.execPath, [validator, "--json"], {
-    cwd: dir,
-    encoding: "utf8",
-  });
-  fs.rmSync(dir, { force: true, recursive: true });
-  const output = JSON.parse(result.stdout);
-  const passed = testCase.expectWarning
-    ? output.ok && output.warnings?.includes(testCase.expectWarning)
-    : testCase.expect
-      ? !output.ok && output.failures.includes(testCase.expect)
-      : output.ok;
-  return {
-    actual: output,
-    expected: testCase.expectWarning ?? testCase.expect ?? "ok:true",
-    name: testCase.name,
-    ok: passed,
-  };
-}
-
-const results = cases.map(runCase);
-const adapterPipeCheck = spawnSync("sh", ["-c", '"$NODE_BIN" "$ADAPTER_HARNESS" --json | "$NODE_BIN" -e "$ADAPTER_PIPE_PARSER"'], {
-  cwd: root, encoding: "utf8", env: { ...process.env, ADAPTER_HARNESS: adapterHarness, ADAPTER_PIPE_PARSER: adapterPipeParser, NODE_BIN: process.execPath },
-});
-results.push({
-  actual: { status: adapterPipeCheck.status, stdout: adapterPipeCheck.stdout.trim() },
-  expected: "complete 42-result JSON report through a pipe",
-  name: "adapter_json_pipe_complete",
-  ok: adapterPipeCheck.status === 0 && adapterPipeCheck.stdout.trim() === "42",
-});
-const report = {
-  ok: results.every((result) => result.ok),
-  results,
-};
-
-console.log(JSON.stringify(report, null, 2));
-process.exitCode = report.ok ? 0 : 1;

package/scripts/test-validate-ia.mjs

@@ -1,262 +0,0 @@
-#!/usr/bin/env node
-
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { spawnSync } from "node:child_process";
-import { fileURLToPath } from "node:url";
-
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const validator = path.join(root, "scripts", "validate-ia.mjs");
-const governedProfileRoutes = [
-  ["Editorial profile", "editorial/profile.json"],
-  ["Editorial state matrix", "editorial/generated/state-matrix.md"],
-  ["Editorial keyboard matrix", "editorial/generated/keyboard-matrix.md"],
-  ["Editorial evidence coverage", "editorial/generated/evidence-coverage.md"],
-  ["Terminal profile", "terminal/profile.json"],
-  ["Terminal state matrix", "terminal/generated/state-matrix.md"],
-  ["Terminal keyboard matrix", "terminal/generated/keyboard-matrix.md"],
-  ["Terminal evidence coverage", "terminal/generated/evidence-coverage.md"],
-];
-
-const baseFiles = {
-  "README.md": [
-    "# layout-gallery",
-    "",
-    "Primary role: repository guide.",
-    "",
-    "## Repository Entry Roles",
-    "",
-    "| Entry | Primary role |",
-    "| --- | --- |",
-    "| [README](README.md) | Repository guide |",
-    "| [Layout](layout/index.md) | Layout domain |",
-    "| [Motion](motion/index.md) | Motion domain |",
-    "| [Design Engineering](design-engineering/index.md) | Design Engineering domain |",
-    "| [Platform Guides](platform-guides/index.md) | Platform Guides domain |",
-    "| [Consumer Reference](consumer-reference/index.md) | Shared infrastructure contract |",
-    "| [Consumer Migration Readiness](design-engineering/consumer-migration-readiness.md) | Migration method |",
-    "",
-    "## Task Routes",
-    "",
-    "| Task | Primary route |",
-    "| --- | --- |",
-    "| `plan a layout` | [Guide](GUIDE.md) |",
-    "| `make a homepage` | [Homepage](recipes/homepage.md) |",
-    "| `choose a primitive` | [Catalog](CATALOG.md) |",
-    "| `review quality` | [Quality](quality/index.md) |",
-    "| `check links` | [Quality](quality/index.md) |",
-    "| `write a recipe` | [Recipes](recipes/index.md) |",
-    "| `inspect pattern categories` | [Patterns](patterns/index.md) |",
-    "| `fill a brief` | [Brief](guides/layout-brief.md) |",
-    "| `record evidence` | [Evidence](quality/evidence/index.md) |",
-    "| `run findability QA` | [Findability](quality/index.md) |",
-    "",
-    "## Link Policy",
-    "",
-    "- Navigation links move a reader to the next decision point.",
-    "- Citation links identify source lineage or evidence boundaries.",
-    "- Dependency links identify generated, validation, or composition relationships.",
-    "",
-  ].join("\n"),
-  "index.md": [
-    "# Bundle",
-    "",
-    "Primary role: OKF bundle map.",
-    "",
-    "- [Layout](layout/index.md)",
-    "- [Motion](motion/index.md)",
-    "- [Design Engineering](design-engineering/index.md)",
-    "- [Platform Guides](platform-guides/index.md)",
-    "- [Consumer reference](consumer-reference/index.md)",
-    "- [Consumer migration readiness](design-engineering/consumer-migration-readiness.md)",
-    "",
-  ].join("\n"),
-  "GUIDE.md": "# Guide\n\nPrimary role: planning workflow.\n",
-  "CATALOG.md": "# Catalog\n\nPrimary role: pattern lookup.\n",
-  "patterns/index.md": "# Patterns\n",
-  "patterns/stacking/index.md": "# Stacking\n",
-  "patterns/stacking/stack.md": leaf("Stack", "index.md", "../../recipes/index.md"),
-  "recipes/index.md": "# Recipes\n",
-  "recipes/homepage.md": leaf("Homepage", "index.md", "../quality/index.md"),
-  "quality/index.md": "# Quality\n\n- [Consumer migration evidence gate](gates/consumer-migration-evidence.md)\n\n## Tree-Test Findability QA\n",
-  "quality/gates/index.md": "# Gates\n\n- [Consumer migration evidence gate](consumer-migration-evidence.md)\n",
-  "quality/gates/layout.md": leaf("Layout", "index.md", "../evidence/index.md"),
-  "quality/gates/consumer-migration-evidence.md": leaf("Consumer Migration Evidence Gate", "index.md", "../evidence/consumer-migration.md"),
-  "quality/evidence/index.md": "# Evidence\n\n- [Consumer migration evidence](consumer-migration.md)\n",
-  "quality/evidence/consumer-migration.md": leaf("Consumer Migration Evidence", "index.md", "../../design-engineering/consumer-migration-readiness.md"),
-  "layout/index.md": "# Layout\n\n- [Catalog](../CATALOG.md)\n",
-  "motion/index.md": "# Motion\n\n- [Review](review.md)\n",
-  "motion/review.md": leaf("Motion review", "index.md", "../design-engineering/index.md"),
-  "design-engineering/index.md": "# Design Engineering\n\n- [Craft](craft.md)\n- [Consumer Migration Readiness](consumer-migration-readiness.md)\n- [Reference Profiles](reference-profiles/index.md)\n",
-  "design-engineering/craft.md": leaf("Craft", "index.md", "../platform-guides/index.md"),
-  "design-engineering/consumer-migration-readiness.md": leaf("Consumer Migration Readiness", "index.md", "../quality/gates/consumer-migration-evidence.md"),
-  "design-engineering/reference-profiles/index.md": "# Reference Profiles\n\n- [Governed Local Profiles](governed-local/index.md)\n- [External Adaptation](external-adaptation/index.md)\n\nParent: [Design Engineering](../index.md).\nNext: [Governed Local Profiles](governed-local/index.md).\n",
-  "design-engineering/reference-profiles/governed-local/index.md": [
-    "# Governed Local Profiles",
-    "",
-    ...governedProfileRoutes.map(([label, target]) => `- [${label}](${target})`),
-    "",
-    "Parent: [Reference Profiles](../index.md).",
-    "Next: [External Adaptation](../external-adaptation/index.md).",
-    "",
-  ].join("\n"),
-  "design-engineering/reference-profiles/external-adaptation/index.md": "# External Adaptation\n\nParent: [Reference Profiles](../index.md).\nNext: [Platform Guides](../../../platform-guides/index.md).\n",
-  "platform-guides/index.md": "# Platform Guides\n\n- [Apple](apple.md)\n",
-  "platform-guides/apple.md": leaf("Apple", "index.md", "../layout/index.md"),
-  "consumer-reference/index.md": "# Consumer Reference\n\n- [Contract](contract.md)\n- [Consumer Migration Readiness](../design-engineering/consumer-migration-readiness.md)\n",
-  "consumer-reference/contract.md": leaf("Consumer Reference Contract", "index.md", "../quality/index.md"),
-};
-
-const cases = [
-  {
-    name: "missing_leaf_parent",
-    mutate: {
-      "patterns/stacking/stack.md": "# Stack\n\nNext: [Recipes](../../recipes/index.md)\n",
-    },
-    expect: "patterns/stacking/stack.md: missing Parent navigation link",
-  },
-  {
-    name: "missing_leaf_next",
-    mutate: {
-      "patterns/stacking/stack.md": "# Stack\n\nParent: [Stacking](index.md)\n",
-    },
-    expect: "patterns/stacking/stack.md: missing Next navigation link",
-  },
-  {
-    name: "missing_task_routes",
-    mutate: {
-      "README.md": "# layout-gallery\n\nPrimary role: repository guide.\n\n## Repository Entry Roles\n",
-    },
-    expect: "README.md: missing ## Task Routes",
-  },
-  {
-    name: "missing_link_policy",
-    mutate: {
-      "README.md": baseFiles["README.md"].replace(/\n## Link Policy\n[\s\S]*$/, "\n"),
-    },
-    expect: "README.md: missing ## Link Policy",
-  },
-  {
-    name: "missing_motion_readme_route",
-    mutate: {
-      "README.md": baseFiles["README.md"].replace("| [Motion](motion/index.md) | Motion domain |\n", ""),
-    },
-    expect: "README.md: missing [Motion](motion/index.md)",
-  },
-  {
-    name: "motion_readme_route_only_in_fence",
-    mutate: {
-      "README.md": baseFiles["README.md"].replace("| [Motion](motion/index.md) | Motion domain |\n", "```md\n[Motion](motion/index.md)\n```\n"),
-    },
-    expect: "README.md: missing [Motion](motion/index.md)",
-  },
-  {
-    name: "missing_design_engineering_index_route",
-    mutate: {
-      "index.md": baseFiles["index.md"].replace("- [Design Engineering](design-engineering/index.md)\n", ""),
-    },
-    expect: "index.md: missing [Design Engineering](design-engineering/index.md)",
-  },
-  {
-    name: "missing_reference_profile_route",
-    mutate: {
-      "design-engineering/index.md": "# Design Engineering\n\n- [Craft](craft.md)\n",
-    },
-    expect: "design-engineering/index.md: missing [Reference Profiles](reference-profiles/index.md)",
-  },
-  ...governedProfileRoutes.map(([label, target]) => ({
-    name: `missing_governed_route_${target.replace(/[^a-z]+/g, "_").replace(/^_|_$/g, "")}`,
-    mutate: {
-      "design-engineering/reference-profiles/governed-local/index.md": baseFiles["design-engineering/reference-profiles/governed-local/index.md"].replace(`- [${label}](${target})\n`, ""),
-    },
-    expect: `design-engineering/reference-profiles/governed-local/index.md: missing [${label}](${target})`,
-  })),
-  {
-    name: "missing_external_adaptation_parent",
-    mutate: {
-      "design-engineering/reference-profiles/external-adaptation/index.md": "# External Adaptation\n\nNext: [Platform Guides](../../../platform-guides/index.md).\n",
-    },
-    expect: "design-engineering/reference-profiles/external-adaptation/index.md: missing Parent navigation link",
-  },
-  {
-    name: "missing_consumer_reference_route",
-    mutate: {
-      "index.md": baseFiles["index.md"].replace("- [Consumer reference](consumer-reference/index.md)\n", ""),
-    },
-    expect: "index.md: missing [Consumer reference](consumer-reference/index.md)",
-  },
-  {
-    name: "missing_consumer_migration_root_route",
-    mutate: {
-      "README.md": baseFiles["README.md"].replace("| [Consumer Migration Readiness](design-engineering/consumer-migration-readiness.md) | Migration method |\n", ""),
-    },
-    expect: "README.md: missing [Consumer Migration Readiness](design-engineering/consumer-migration-readiness.md)",
-  },
-  {
-    name: "missing_consumer_migration_gate_route",
-    mutate: {
-      "quality/index.md": "# Quality\n\n## Tree-Test Findability QA\n",
-    },
-    expect: "quality/index.md: missing [Consumer migration evidence gate](gates/consumer-migration-evidence.md)",
-  },
-  {
-    name: "missing_domain_leaf_parent",
-    mutate: {
-      "motion/review.md": "# Motion review\n\nNext: [Next](../design-engineering/index.md)\n",
-    },
-    expect: "motion/review.md: missing Parent navigation link",
-  },
-  {
-    name: "missing_domain_leaf_next",
-    mutate: {
-      "motion/review.md": "# Motion review\n\nParent: [Motion](index.md)\n",
-    },
-    expect: "motion/review.md: missing Next navigation link",
-  },
-  {
-    name: "success_path",
-    expect: null,
-  },
-];
-
-function leaf(title, parent, next) {
-  return `# ${title}\n\n## IA Navigation\n\nParent: [Parent](${parent}).\nNext: [Next](${next}).\n`;
-}
-
-function writeFixture(testCase) {
-  const dir = fs.mkdtempSync(path.join(os.tmpdir(), `layout-gallery-ia-${testCase.name}-`));
-  const entries = { ...baseFiles, ...(testCase.mutate ?? {}) };
-  for (const [relative, content] of Object.entries(entries)) {
-    const target = path.join(dir, relative);
-    fs.mkdirSync(path.dirname(target), { recursive: true });
-    fs.writeFileSync(target, content);
-  }
-  return dir;
-}
-
-function runCase(testCase) {
-  const dir = writeFixture(testCase);
-  const result = spawnSync(process.execPath, [validator, "--json"], {
-    cwd: dir,
-    encoding: "utf8",
-  });
-  fs.rmSync(dir, { force: true, recursive: true });
-  const output = JSON.parse(result.stdout);
-  const passed = testCase.expect ? !output.ok && output.failures.includes(testCase.expect) : output.ok;
-  return {
-    name: testCase.name,
-    ok: passed,
-    expected: testCase.expect ?? "ok:true",
-    actual: output,
-  };
-}
-
-const results = cases.map(runCase);
-const report = {
-  ok: results.every((result) => result.ok),
-  results,
-};
-
-console.log(JSON.stringify(report, null, 2));
-process.exitCode = report.ok ? 0 : 1;

package/scripts/test-validate-okf.mjs

@@ -1,73 +0,0 @@
-#!/usr/bin/env node
-
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { spawnSync } from "node:child_process";
-import { fileURLToPath } from "node:url";
-
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const validator = path.join(root, "scripts", "validate-okf.mjs");
-
-const cases = [
-  {
-    name: "missing_frontmatter",
-    files: { "index.md": "# Bundle\n\n* [Bad](bad.md) - Bad\n", "log.md": "# Log\n\n## 2026-07-02\n* Init.\n", "bad.md": "# Bad\n" },
-    expect: "missing OKF frontmatter",
-  },
-  {
-    name: "missing_type",
-    files: { "index.md": "# Bundle\n\n* [Bad](bad.md) - Bad\n", "log.md": "# Log\n\n## 2026-07-02\n* Init.\n", "bad.md": "---\ntitle: Bad\n---\n# Bad\n" },
-    expect: "missing required OKF type",
-  },
-  {
-    name: "index_frontmatter",
-    files: { "index.md": "---\ntype: Index\n---\n# Bundle\n\n* [Good](good.md) - Good\n", "log.md": "# Log\n\n## 2026-07-02\n* Init.\n", "good.md": concept("Concept", "Good") },
-    expect: "index.md must not contain concept frontmatter",
-  },
-  {
-    name: "malformed_log_date",
-    files: { "index.md": "# Bundle\n\n* [Good](good.md) - Good\n", "log.md": "# Log\n\n## July 2, 2026\n* Init.\n", "good.md": concept("Concept", "Good") },
-    expect: "log.md date heading must be YYYY-MM-DD",
-  },
-  {
-    name: "success_path",
-    files: { "index.md": "---\nokf_version: \"0.1\"\n---\n# Bundle\n\n* [Good](good.md) - Good\n", "log.md": "# Log\n\n## 2026-07-02\n* Init.\n", "good.md": concept("Concept", "Good") },
-    expect: null,
-  },
-];
-
-function concept(type, title) {
-  return `---\ntype: ${type}\ntitle: ${title}\ndescription: Valid OKF concept.\n---\n# ${title}\n`;
-}
-
-function runCase(testCase) {
-  const dir = fs.mkdtempSync(path.join(os.tmpdir(), `layout-gallery-okf-${testCase.name}-`));
-  for (const [relative, content] of Object.entries(testCase.files)) {
-    const target = path.join(dir, relative);
-    fs.mkdirSync(path.dirname(target), { recursive: true });
-    fs.writeFileSync(target, content);
-  }
-  const result = spawnSync(process.execPath, [validator, "--json"], {
-    cwd: dir,
-    encoding: "utf8",
-  });
-  fs.rmSync(dir, { force: true, recursive: true });
-  const output = JSON.parse(result.stdout);
-  const passed = testCase.expect ? !output.ok && output.failures.some((failure) => failure.includes(testCase.expect)) : output.ok;
-  return {
-    name: testCase.name,
-    ok: passed,
-    expected: testCase.expect ?? "ok:true",
-    actual: output,
-  };
-}
-
-const results = cases.map(runCase);
-const report = {
-  ok: results.every((result) => result.ok),
-  results,
-};
-
-console.log(JSON.stringify(report, null, 2));
-process.exitCode = report.ok ? 0 : 1;