fix: hermetic test fixtures and acceptance step git-init fix

- test/cli/export-import.test.ts, test/agent-provenance.test.ts,
  test/gh-aw-quality.test.ts: replace franken-merge/live-state-dependent
  assertions with hermetic fixtures so the hosted test job (dev/main
  divergence) doesn't fail on main-promotion-specific repo state.
- test/acceptance/steps/cli-steps.ts: init a git repo in the scaffolded
  temp dir for the squadified-project step so 'squad consult' reaches
  its real check instead of failing at the git-repo precondition.
- remove 3 files dev deliberately deleted that were still present only
  on main (orphaned from a prior promotion).

Author: Copilot

.github/skills/agentic-workflows/SKILL.md

@@ -2,6 +2,7 @@ import { expect } from 'vitest';
 import { existsSync, mkdtempSync } from 'node:fs';
 import { join } from 'node:path';
 import { tmpdir } from 'node:os';
+import { execSync } from 'node:child_process';
 import { TerminalHarness } from '../harness.js';
 import { StepDefinitions, registerStep } from '../support/runner.js';
 
@@ -19,13 +20,33 @@ export function registerCLISteps(registry: StepDefinitions): void {
       if (!match) throw new Error('Pattern match failed');
 
       const dirName = match[1];
-      const dirPath = join(process.cwd(), dirName);
 
+      // Hermetic sandbox: scaffold a real squad setup via `squad init` in an
+      // isolated temp dir rather than depending on a live `.squad/` checked
+      // into the repo being tested (main ships with no live `.squad/`, see
+      // #2015 isolation). Mirrors the sibling "without a .squad directory"
+      // step's use of an isolated temp dir, and downstream "I run" steps pick
+      // up context.tempDir automatically.
+      const tempDir = mkdtempSync(join(tmpdir(), 'squad-e2e-'));
+      // consult/check commands gate on "is this a git repo" before the
+      // .squad check, so the sandbox must actually be a git repo (same
+      // convention as test/cli/consult.test.ts, test/sdk/consult.test.ts).
+      execSync('git init --quiet', { cwd: tempDir, stdio: 'ignore' });
+      const initHarness = await TerminalHarness.spawnWithArgs(['init'], { cwd: tempDir });
+      try {
+        await initHarness.waitForExit(15000);
+      } catch {
+        // Timeout is okay; existence check below is authoritative.
+      }
+      await initHarness.close();
+
+      const dirPath = join(tempDir, dirName);
       if (!existsSync(dirPath)) {
-        throw new Error(`Directory ${dirPath} does not exist`);
+        throw new Error(`Directory ${dirPath} does not exist after scaffolding via squad init`);
       }
 
       context.squadDirExists = true;
+      context.tempDir = tempDir;
     },
     registry
   );
@@ -77,8 +98,9 @@ export function registerCLISteps(registry: StepDefinitions): void {
 
       const command = match[1];
       const args = command.replace(/^squad\s*/, '').split(/\s+/).filter(Boolean);
+      const cwd = context.tempDir as string | undefined;
 
-      const harness = await TerminalHarness.spawnWithArgs(args);
+      const harness = await TerminalHarness.spawnWithArgs(args, cwd ? { cwd } : undefined);
 
       try {
         await harness.waitForExit(15000);

test/acceptance/steps/cli-steps.ts

@@ -1,4 +1,4 @@
-import { readFileSync } from 'node:fs';
+import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { describe, expect, it } from 'vitest';
 import {
@@ -27,17 +27,30 @@ function fixture(
 }
 
 describe('agent identity provenance contract', () => {
-  it('keeps this repository on the complete producer contract', () => {
-    const committed = JSON.parse(
-      readFileSync(join('.squad', 'casting', 'registry.json'), 'utf8'),
-    ) as unknown;
+  // This repository's own `.squad/` is an *installed live team* audit, not product
+  // behavior: main intentionally ships with no live `.squad/` (see #2015 isolation),
+  // so this check is opportunistic. The contract itself (parsing a complete v1
+  // registry) still has full, unconditional coverage via the 'valid' fixture test
+  // below; this only additionally audits whatever live team happens to be checked out.
+  const liveRegistryPath = join('.squad', 'casting', 'registry.json');
+  const hasLiveRegistry = existsSync(liveRegistryPath);
+
+  it.runIf(hasLiveRegistry)('keeps this repository on the complete producer contract', () => {
+    const committed = JSON.parse(readFileSync(liveRegistryPath, 'utf8')) as unknown;
 
     expect(parseAgentProvenanceRegistry(committed)).toMatchObject({
       completeness: 'complete',
       registry: { schema: 'squad-agent-provenance/v1', revision: 1 },
     });
   });
 
+  it.skipIf(hasLiveRegistry)(
+    'skips the live-team producer audit: no .squad/ in this checkout (expected on main)',
+    () => {
+      expect(hasLiveRegistry).toBe(false);
+    },
+  );
+
   it('parses a complete v1 registry including an explicit avatar reference', () => {
     const result = parseAgentProvenanceRegistry(fixture('valid'));