feat: add morning review packet generator (#966 )

Implements one concrete Phase 2 slice for the morning review packet epic: - add a script that fetches an epic and child QA issues from Gitea - parse structured QA issue sections into a reusable packet model - render a review-ready markdown packet - add a generated 2026-04-21 Hermes harness review packet artifact - cover parsing and rendering with targeted tests Refs #966
2026-04-22 10:59:01 -04:00
7 changed files with 850 additions and 620 deletions
--- a/docs/morning-review-packet-2026-04-21-status.md
+++ b/docs/morning-review-packet-2026-04-21-status.md
@@ -1,66 +0,0 @@
-# Morning Review Packet Status — #949
-
-Generated: 2026-04-22T14:57:44.332419+00:00
-Epic: [EPIC: Morning review packet — Hermes harness features landed 2026-04-21](https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/949)
-
-## Summary
-
- Child QA issues tracked: 13
- Open child issues: 11
- Closed child issues: 2
- Open child issues already backed by PRs: 7
- Open child issues still unowned on forge: 4
-
-## Child QA Matrix
-
-| Issue | State | Open PRs | Title |
-|------:|-------|----------|-------|
-| #950 | open | — | [QA] Verify AI Gateway provider UX + attribution headers |
-| #951 | open | — | [QA] Verify transport abstraction + AnthropicTransport wiring |
-| #952 | open | — | [QA] Verify CLI voice beep toggle |
-| #953 | open | [#1020](https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1020) | [QA] Verify bundled skill scripts run out of the box |
-| #954 | open | [#1021](https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1021) | [QA] Verify maps skill guest_house / camp_site / bakery expansion |
-| #955 | open | — | [QA] Verify KittenTTS local provider end-to-end |
-| #956 | open | [#1018](https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1018) | [QA] Verify numbered keyboard shortcuts for approval + clarify prompts |
-| #957 | open | [#1015](https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1015) | [QA] Verify optional adversarial-ux-test skill catalog flow |
-| #958 | open | [#1016](https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1016) | [QA] Verify /usage account limits in CLI + gateway |
-| #959 | open | [#1014](https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1014) | [QA] Verify OpenCode-Go curated catalog additions |
-| #960 | open | [#1017](https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1017) | [QA] Verify patch 'did you mean?' suggestions |
-| #961 | closed | — | [QA] Verify web dashboard update/restart action buttons |
-| #962 | closed | — | [QA] Verify hardcoded-home path guard on burn/921 branch |
-
-## Drift Signals
-
-forge/main is still catching up to the upstream packet.
-
-Active PR-backed child lanes:
- #953 -> #1020 ([QA] Verify bundled skill scripts run out of the box)
- #954 -> #1021 ([QA] Verify maps skill guest_house / camp_site / bakery expansion)
- #956 -> #1018 ([QA] Verify numbered keyboard shortcuts for approval + clarify prompts)
- #957 -> #1015 ([QA] Verify optional adversarial-ux-test skill catalog flow)
- #958 -> #1016 ([QA] Verify /usage account limits in CLI + gateway)
- #959 -> #1014 ([QA] Verify OpenCode-Go curated catalog additions)
- #960 -> #1017 ([QA] Verify patch 'did you mean?' suggestions)
-
-## Unowned Open QA Issues
-
- #950 [QA] Verify AI Gateway provider UX + attribution headers
- #951 [QA] Verify transport abstraction + AnthropicTransport wiring
- #952 [QA] Verify CLI voice beep toggle
- #955 [QA] Verify KittenTTS local provider end-to-end
-
-## Decomposition Follow-Ups
-
- #965 [open] [EPIC: Morning review packet — Hermes harness features landed 2026-04-21] Phase 1: Landscape Analysis & Scaffolding
- #966 [open] [EPIC: Morning review packet — Hermes harness features landed 2026-04-21] Phase 2: Core Logic Implementation
- #967 [closed] [EPIC: Morning review packet — Hermes harness features landed 2026-04-21] Phase 3: Poka-yoke Integration & Fleet Verification
-
-## Conclusion
-
-Refs #949 only. This epic remains open until every child QA issue has a truthful PASS/FAIL outcome, attached evidence, and any upstream/main versus forge/main drift is resolved or explicitly documented.
-
-## Regeneration
-
-```bash
-python3 scripts/morning_review_packet_status.py --fetch-live --json-out docs/morning-review-packet-2026-04-21.snapshot.json --markdown-out docs/morning-review-packet-2026-04-21-status.md
-```
--- a/docs/morning-review-packet-2026-04-21.snapshot.json
+++ b/docs/morning-review-packet-2026-04-21.snapshot.json
@@ -1,172 +0,0 @@
-{
-  "generated_at": "2026-04-22T14:57:44.332419+00:00",
-  "repo": "Timmy_Foundation/hermes-agent",
-  "epic": {
-    "number": 949,
-    "title": "EPIC: Morning review packet \u2014 Hermes harness features landed 2026-04-21",
-    "state": "open",
-    "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/949"
-  },
-  "children": [
-    {
-      "number": 950,
-      "title": "[QA] Verify AI Gateway provider UX + attribution headers",
-      "state": "open",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/950",
-      "open_prs": []
-    },
-    {
-      "number": 951,
-      "title": "[QA] Verify transport abstraction + AnthropicTransport wiring",
-      "state": "open",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/951",
-      "open_prs": []
-    },
-    {
-      "number": 952,
-      "title": "[QA] Verify CLI voice beep toggle",
-      "state": "open",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/952",
-      "open_prs": []
-    },
-    {
-      "number": 953,
-      "title": "[QA] Verify bundled skill scripts run out of the box",
-      "state": "open",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/953",
-      "open_prs": [
-        {
-          "number": 1020,
-          "title": "fix: ship bundled skill scripts executable",
-          "head": "fix/953",
-          "url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1020"
-        }
-      ]
-    },
-    {
-      "number": 954,
-      "title": "[QA] Verify maps skill guest_house / camp_site / bakery expansion",
-      "state": "open",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/954",
-      "open_prs": [
-        {
-          "number": 1021,
-          "title": "feat: sync maps skill and verify guest_house/camp_site/bakery (#954)",
-          "head": "fix/954",
-          "url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1021"
-        }
-      ]
-    },
-    {
-      "number": 955,
-      "title": "[QA] Verify KittenTTS local provider end-to-end",
-      "state": "open",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/955",
-      "open_prs": []
-    },
-    {
-      "number": 956,
-      "title": "[QA] Verify numbered keyboard shortcuts for approval + clarify prompts",
-      "state": "open",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/956",
-      "open_prs": [
-        {
-          "number": 1018,
-          "title": "fix: add numbered approval and clarify shortcuts (#956)",
-          "head": "fix/956",
-          "url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1018"
-        }
-      ]
-    },
-    {
-      "number": 957,
-      "title": "[QA] Verify optional adversarial-ux-test skill catalog flow",
-      "state": "open",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/957",
-      "open_prs": [
-        {
-          "number": 1015,
-          "title": "feat(skills): backport adversarial-ux-test optional skill",
-          "head": "fix/957",
-          "url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1015"
-        }
-      ]
-    },
-    {
-      "number": 958,
-      "title": "[QA] Verify /usage account limits in CLI + gateway",
-      "state": "open",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/958",
-      "open_prs": [
-        {
-          "number": 1016,
-          "title": "fix: restore /usage account limits in CLI + gateway (#958)",
-          "head": "fix/958",
-          "url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1016"
-        }
-      ]
-    },
-    {
-      "number": 959,
-      "title": "[QA] Verify OpenCode-Go curated catalog additions",
-      "state": "open",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/959",
-      "open_prs": [
-        {
-          "number": 1014,
-          "title": "fix(opencode-go): restore curated catalog additions",
-          "head": "fix/959",
-          "url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1014"
-        }
-      ]
-    },
-    {
-      "number": 960,
-      "title": "[QA] Verify patch 'did you mean?' suggestions",
-      "state": "open",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/960",
-      "open_prs": [
-        {
-          "number": 1017,
-          "title": "fix(patch): port and verify did-you-mean suggestions (#960)",
-          "head": "fix/960",
-          "url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/1017"
-        }
-      ]
-    },
-    {
-      "number": 961,
-      "title": "[QA] Verify web dashboard update/restart action buttons",
-      "state": "closed",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/961",
-      "open_prs": []
-    },
-    {
-      "number": 962,
-      "title": "[QA] Verify hardcoded-home path guard on burn/921 branch",
-      "state": "closed",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/962",
-      "open_prs": []
-    }
-  ],
-  "decomposition_issues": [
-    {
-      "number": 965,
-      "title": "[EPIC: Morning review packet \u2014 Hermes harness features landed 2026-04-21] Phase 1: Landscape Analysis & Scaffolding",
-      "state": "open",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/965"
-    },
-    {
-      "number": 966,
-      "title": "[EPIC: Morning review packet \u2014 Hermes harness features landed 2026-04-21] Phase 2: Core Logic Implementation",
-      "state": "open",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/966"
-    },
-    {
-      "number": 967,
-      "title": "[EPIC: Morning review packet \u2014 Hermes harness features landed 2026-04-21] Phase 3: Poka-yoke Integration & Fleet Verification",
-      "state": "closed",
-      "html_url": "https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/967"
-    }
-  ]
-}
--- a/docs/review_packets/hermes-harness-2026-04-21.md
+++ b/docs/review_packets/hermes-harness-2026-04-21.md
@@ -0,0 +1,387 @@
+# Morning Review Packet
+
+Source epic: [EPIC: Morning review packet — Hermes harness features landed 2026-04-21](https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/949)
+
+## Epic context
+
+EPIC: Morning review packet — Hermes harness features landed 2026-04-21
+
+Source: git log on upstream/main since 2026-04-21 00:00 EDT, plus the current local branch `burn/921-poka-yoke-hardcoded-paths` for the branch-only path-guard work.
+
+Important review note:
+- Validate upstream-landed features on `upstream/main` or a synced branch.
+- Validate the path-guard work on `burn/921-poka-yoke-hardcoded-paths`.
+
+This epic is a morning-review packet: one QA issue per feature cluster, each with concrete acceptance criteria and targeted tests or manual checks.
+
+## Success criteria
+- [ ] Every issue has a clear PASS / FAIL outcome.
+- [ ] Test output or manual evidence is attached to each issue.
+- [ ] Any drift between upstream/main and forge/main is called out explicitly.
+
+## Sub-issues
+### Upstream/main features landed 2026-04-21
+- [ ] #950 [QA] Verify AI Gateway provider UX + attribution headers
+- [ ] #951 [QA] Verify transport abstraction + AnthropicTransport wiring
+- [ ] #952 [QA] Verify CLI voice beep toggle
+- [ ] #953 [QA] Verify bundled skill scripts run out of the box
+- [ ] #954 [QA] Verify maps skill guest_house / camp_site / bakery expansion
+- [ ] #955 [QA] Verify KittenTTS local provider end-to-end
+- [ ] #956 [QA] Verify numbered keyboard shortcuts for approval + clarify prompts
+- [ ] #957 [QA] Verify optional adversarial-ux-test skill catalog flow
+- [ ] #958 [QA] Verify /usage account limits in CLI + gateway
+- [ ] #959 [QA] Verify OpenCode-Go curated catalog additions
+- [ ] #960 [QA] Verify patch 'did you mean?' suggestions
+- [ ] #961 [QA] Verify web dashboard update/restart action buttons
+
+### Local branch-only work
+- [ ] #962 [QA] Verify hardcoded-home path guard on burn/921 branch
+
+## Summary
+
+| Issue | State | Commits | Tests |
+| --- | --- | --- | --- |
+| #950 | open | 5 | 2 |
+| #951 | open | 2 | 2 |
+| #952 | open | 1 | 1 |
+| #953 | open | 1 | 2 |
+| #954 | open | 1 | 0 |
+| #955 | open | 2 | 1 |
+| #956 | open | 1 | 0 |
+| #957 | open | 1 | 0 |
+| #958 | open | 2 | 2 |
+| #959 | open | 1 | 1 |
+| #960 | open | 2 | 1 |
+| #961 | closed | 1 | 0 |
+| #962 | closed | 1 | 1 |
+
+## #950 — [QA] Verify AI Gateway provider UX + attribution headers
+
+State: open
+URL: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/950
+
+### Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+### Commits
+- `b11753879` — attribution default_headers for ai-gateway provider
+- `700437440` — curated picker with live pricing
+- `ac26a460f` — promote ai-gateway in provider picker ordering
+- `5bb2d11b0` — auto-promote free Moonshot models
+- `29f57ec95` — Vercel deep-link for API key creation
+
+### Targeted tests
+- `tests/hermes_cli/test_ai_gateway_models.py`
+- `tests/run_agent/test_provider_attribution_headers.py`
+
+### Tasks
+- [ ] Open `hermes model` and verify `ai-gateway` appears near the top.
+- [ ] Verify live pricing appears in the picker.
+- [ ] Verify free Moonshot models are promoted.
+- [ ] Trigger API-key setup flow and verify the Vercel deep link.
+- [ ] Send one ai-gateway request and verify attribution headers are attached.
+
+### Acceptance criteria
+- [ ] UI ordering and pricing match the landed behavior.
+- [ ] Attribution headers are present on ai-gateway requests.
+- [ ] Targeted tests pass.
+
+## #951 — [QA] Verify transport abstraction + AnthropicTransport wiring
+
+State: open
+URL: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/951
+
+### Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+### Commits
+- `7ab5eebd0` — transport types + Anthropic normalize migration
+- `731f4fbae` — transport ABC + AnthropicTransport wired to all paths
+
+### Targeted tests
+- `tests/agent/transports/test_types.py`
+- `tests/agent/test_anthropic_normalize_v2.py`
+
+### Tasks
+- [ ] Verify plain-text Anthropic responses normalize correctly.
+- [ ] Verify tool-call responses preserve IDs, names, and arguments.
+- [ ] Verify reasoning/thinking is preserved separately from visible content.
+- [ ] Verify finish_reason mapping remains correct across paths.
+
+### Acceptance criteria
+- [ ] Normalized response shape is stable.
+- [ ] Tool-call and reasoning payloads survive normalization.
+- [ ] Targeted tests pass.
+
+## #952 — [QA] Verify CLI voice beep toggle
+
+State: open
+URL: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/952
+
+### Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+### Commits
+- `b48ea41d2` — voice: add CLI beep toggle
+
+### Targeted tests
+- `tests/tools/test_voice_cli_integration.py`
+
+### Tasks
+- [ ] Enable the beep option in config and confirm voice mode emits the beep.
+- [ ] Disable the option and confirm the same path is silent.
+- [ ] Verify voice mode still strips markdown before speech output.
+- [ ] Verify voice mode does not pollute conversation history with TTS-only text.
+
+### Acceptance criteria
+- [ ] Beep behavior is actually toggled by config.
+- [ ] Existing voice/TTS integration behavior is not regressed.
+- [ ] Targeted tests pass.
+
+## #953 — [QA] Verify bundled skill scripts run out of the box
+
+State: open
+URL: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/953
+
+### Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+### Commits
+- `328223576` — make bundled skill scripts runnable out of the box
+
+### Targeted tests
+- `tests/agent/test_skill_commands.py`
+- `tests/tools/test_local_shell_init.py`
+
+### Tasks
+- [ ] Pick a bundled skill that ships a script and run it without manual chmod/PATH surgery.
+- [ ] Verify local terminal execution resolves the installed skill script correctly.
+- [ ] Verify local shell init still behaves correctly.
+
+### Acceptance criteria
+- [ ] Bundled skill scripts execute from the installed skill location with no manual prep.
+- [ ] Local shell init remains healthy.
+- [ ] Targeted tests pass.
+
+## #954 — [QA] Verify maps skill guest_house / camp_site / bakery expansion
+
+State: open
+URL: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/954
+
+### Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+### Commits
+- `c5a814b23` — maps: add guest_house, camp_site, and dual-key bakery lookup
+
+### Tasks
+- [ ] Use the maps skill to search for a guest house in a known populated area.
+- [ ] Use the maps skill to search for a camp site in a known populated area.
+- [ ] Use the maps skill to search for a bakery and verify both supported keys resolve correctly.
+- [ ] Confirm results are sensible and non-empty.
+
+### Acceptance criteria
+- [ ] All three place types resolve correctly.
+- [ ] Bakery lookup works through both supported keys.
+- [ ] Manual evidence is attached in the issue.
+
+## #955 — [QA] Verify KittenTTS local provider end-to-end
+
+State: open
+URL: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/955
+
+### Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+### Commits
+- `1830ebfc5` — add KittenTTS provider
+- `2d7ff9c5b` — complete KittenTTS integration across tools/setup/docs/tests
+
+### Targeted tests
+- `tests/tools/test_tts_kittentts.py`
+
+### Tasks
+- [ ] Configure TTS to use `kittentts`.
+- [ ] Generate speech to `.wav` and verify playable output.
+- [ ] Verify voice / speed / cleaned text are passed correctly.
+- [ ] Generate repeated requests and verify model caching behavior.
+- [ ] Generate a non-wav output and verify ffmpeg conversion path.
+- [ ] Verify missing-package behavior returns a helpful error.
+
+### Acceptance criteria
+- [ ] KittenTTS works end-to-end when installed.
+- [ ] Failure mode is operator-friendly when not installed.
+- [ ] Targeted tests pass.
+
+## #956 — [QA] Verify numbered keyboard shortcuts for approval + clarify prompts
+
+State: open
+URL: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/956
+
+### Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+### Commits
+- `d1ed6f4fb` — CLI: add numbered keyboard shortcuts to approval and clarify prompts
+
+### Tasks
+- [ ] Trigger an approval prompt and choose an option with number keys.
+- [ ] Trigger a clarify prompt and choose an option with number keys.
+- [ ] Verify the correct option is submitted both times.
+- [ ] Verify normal keyboard navigation still works.
+
+### Acceptance criteria
+- [ ] Number-key selection works for both prompt types.
+- [ ] Legacy keyboard navigation is not broken.
+- [ ] Manual evidence is attached in the issue.
+
+## #957 — [QA] Verify optional adversarial-ux-test skill catalog flow
+
+State: open
+URL: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/957
+
+### Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+### Commits
+- `e50e7f11b` — skills: add adversarial-ux-test optional skill
+
+### Tasks
+- [ ] Verify the optional skill appears in the optional skill catalog.
+- [ ] Install or enable the skill.
+- [ ] Load it successfully through Hermes.
+- [ ] Disable or remove it and verify catalog state updates cleanly.
+
+### Acceptance criteria
+- [ ] Catalog listing is correct.
+- [ ] Install / load / disable lifecycle works cleanly.
+- [ ] Manual evidence is attached in the issue.
+
+## #958 — [QA] Verify /usage account limits in CLI + gateway
+
+State: open
+URL: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/958
+
+### Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+### Commits
+- `8a11b0a20` — per-provider account limits module
+- `bcc5d7b67` — append account limits section in CLI and gateway
+
+### Targeted tests
+- `tests/test_account_usage.py`
+- `tests/gateway/test_usage_command.py`
+
+### Tasks
+- [ ] Run `/usage` in CLI for a provider with account limits.
+- [ ] Verify provider, remaining quota, total limit, and reset window render correctly.
+- [ ] Run `/usage` through the gateway and verify the same section appears.
+- [ ] Verify zero-value cache read/write sections stay hidden when appropriate.
+
+### Acceptance criteria
+- [ ] CLI and gateway both show the landed account-limits section correctly.
+- [ ] Targeted tests pass.
+
+## #959 — [QA] Verify OpenCode-Go curated catalog additions
+
+State: open
+URL: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/959
+
+### Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+### Commits
+- `4fea1769d` — opencode-go: add Kimi K2.6 and Qwen3.5/3.6 Plus to curated catalog
+
+### Targeted tests
+- `tests/hermes_cli/test_opencode_go_in_model_list.py`
+
+### Tasks
+- [ ] With valid OpenCode-Go credentials, open `hermes model`.
+- [ ] Verify Kimi K2.6 appears.
+- [ ] Verify Qwen 3.5 Plus and 3.6 Plus appear.
+- [ ] Unset credentials and verify the provider/catalog hides correctly.
+
+### Acceptance criteria
+- [ ] New curated models are present when credentials exist.
+- [ ] Catalog visibility still respects credential gating.
+- [ ] Targeted tests pass.
+
+## #960 — [QA] Verify patch 'did you mean?' suggestions
+
+State: open
+URL: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/960
+
+### Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+### Commits
+- `15abf4ed8` — add `did you mean?` feedback when patch fails to match
+- `5e6427a42` — gate it to true no-match cases and extend to v4a / skill_manage
+
+### Targeted tests
+- `tests/tools/test_fuzzy_match.py`
+
+### Tasks
+- [ ] Intentionally run a replace/patch with a near-miss `old_string`.
+- [ ] Verify the tool suggests a useful nearby line/context.
+- [ ] Verify suggestions only appear on true no-match failures.
+- [ ] Verify the behavior also works via file tools, v4a patching, and skill_manage.
+
+### Acceptance criteria
+- [ ] Suggestion quality is helpful, not noisy.
+- [ ] Suggestions are correctly gated to no-match cases.
+- [ ] Targeted tests pass.
+
+## #961 — [QA] Verify web dashboard update/restart action buttons
+
+State: closed
+URL: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/961
+
+### Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+### Commits
+- `fc21c1420` — add buttons to update Hermes and restart gateway
+
+### Files touched
+- `web/src/pages/StatusPage.tsx`
+- `web/src/lib/api.ts`
+- `web/src/i18n/en.ts`
+
+### Tasks
+- [ ] Open the Web UI status page and verify both buttons are present.
+- [ ] Click Restart Gateway in a safe environment and verify running/output/success-or-failure states render.
+- [ ] Click Update Hermes and verify the same action lifecycle.
+- [ ] Verify the page remains responsive while actions are running.
+
+### Acceptance criteria
+- [ ] Both action buttons are present and wired.
+- [ ] Action status polling and result rendering work end-to-end.
+- [ ] Manual evidence is attached in the issue.
+
+## #962 — [QA] Verify hardcoded-home path guard on burn/921 branch
+
+State: closed
+URL: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/issues/962
+
+### Branch / checkout
+- Validate specifically on `burn/921-poka-yoke-hardcoded-paths` (not upstream/main).
+
+### Commits
+- `5dcb90531` — Poka-yoke: prevent hardcoded home-directory paths
+
+### Targeted tests
+- `tests/test_path_guard.py`
+
+### Tasks
+- [ ] Verify hardcoded `/Users/...` paths are rejected.
+- [ ] Verify hardcoded `~/.hermes/...` paths are rejected in guarded contexts.
+- [ ] Verify valid relative paths still pass.
+- [ ] Verify appropriate absolute paths still pass where intended.
+- [ ] Verify linting catches violations in non-test files.
+
+### Acceptance criteria
+- [ ] Guard blocks the dangerous patterns and preserves allowed ones.
+- [ ] Targeted tests pass.
--- a/scripts/morning_review_packet.py
+++ b/scripts/morning_review_packet.py
@@ -0,0 +1,301 @@
+#!/usr/bin/env python3
+"""Build a morning review packet from a Gitea epic and its child QA issues.
+
+This script fetches a parent epic plus its sub-issues, extracts the structured
+sections from each QA issue body, and renders a single markdown packet suitable
+for morning review.
+
+Usage:
+    python scripts/morning_review_packet.py --epic-number 949
+    python scripts/morning_review_packet.py --epic-number 949 --children 950-962
+    python scripts/morning_review_packet.py --epic-number 949 --output docs/review_packets/hermes-harness-2026-04-21.md
+"""
+
+from __future__ import annotations
+
+import argparse
+import json
+import os
+import re
+import urllib.request
+from dataclasses import dataclass, field
+from pathlib import Path
+from typing import Iterable
+
+DEFAULT_BASE_URL = "https://forge.alexanderwhitestone.com"
+DEFAULT_OWNER = "Timmy_Foundation"
+DEFAULT_REPO = "hermes-agent"
+DEFAULT_TOKEN_PATH = Path.home() / ".config" / "gitea" / "token"
+
+
+@dataclass(frozen=True)
+class CommitEvidence:
+    sha: str
+    summary: str
+
+
+@dataclass
+class ReviewIssue:
+    number: int
+    title: str
+    state: str
+    url: str
+    comments: int = 0
+    parent_issue: int | None = None
+    checkout_notes: list[str] = field(default_factory=list)
+    commits: list[CommitEvidence] = field(default_factory=list)
+    targeted_tests: list[str] = field(default_factory=list)
+    files_touched: list[str] = field(default_factory=list)
+    tasks: list[str] = field(default_factory=list)
+    acceptance_criteria: list[str] = field(default_factory=list)
+
+
+def parse_issue_number_spec(spec: str) -> list[int]:
+    """Parse a comma-separated issue list like ``950-952,955,962``."""
+    numbers: list[int] = []
+    seen: set[int] = set()
+    for chunk in (part.strip() for part in spec.split(",")):
+        if not chunk:
+            continue
+        if "-" in chunk:
+            start_str, end_str = (part.strip() for part in chunk.split("-", 1))
+            start = int(start_str)
+            end = int(end_str)
+            if end < start:
+                raise ValueError(f"Invalid descending issue range: {chunk}")
+            for number in range(start, end + 1):
+                if number not in seen:
+                    numbers.append(number)
+                    seen.add(number)
+        else:
+            number = int(chunk)
+            if number not in seen:
+                numbers.append(number)
+                seen.add(number)
+    return numbers
+
+
+def _parse_sections(body: str) -> dict[str, list[str]]:
+    sections: dict[str, list[str]] = {}
+    current: str | None = None
+    for raw_line in body.splitlines():
+        line = raw_line.rstrip()
+        if line.startswith("## "):
+            current = line[3:].strip()
+            sections[current] = []
+            continue
+        if current is not None:
+            sections[current].append(line)
+    return sections
+
+
+def _clean_bullet(line: str) -> str | None:
+    stripped = line.strip()
+    if not stripped:
+        return None
+    stripped = re.sub(r"^-\s*\[(?: |x|X)\]\s*", "", stripped)
+    stripped = re.sub(r"^-\s*", "", stripped)
+    return stripped.strip() or None
+
+
+def _extract_bullets(lines: Iterable[str]) -> list[str]:
+    items: list[str] = []
+    for line in lines:
+        cleaned = _clean_bullet(line)
+        if cleaned:
+            items.append(cleaned)
+    return items
+
+
+def _extract_parent_issue(body: str, sections: dict[str, list[str]]) -> int | None:
+    parent_lines = sections.get("Parent", [])
+    for line in parent_lines:
+        match = re.search(r"#(\d+)", line)
+        if match:
+            return int(match.group(1))
+    match = re.search(r"Linked to Epic\s+#(\d+)", body, flags=re.IGNORECASE)
+    if match:
+        return int(match.group(1))
+    return None
+
+
+def _extract_commits(lines: Iterable[str]) -> list[CommitEvidence]:
+    commits: list[CommitEvidence] = []
+    for item in _extract_bullets(lines):
+        match = re.match(r"`([^`]+)`\s*(.*)", item)
+        if match:
+            commits.append(CommitEvidence(sha=match.group(1).strip(), summary=match.group(2).strip()))
+        else:
+            commits.append(CommitEvidence(sha="", summary=item))
+    return commits
+
+
+def _strip_backticks(items: Iterable[str]) -> list[str]:
+    cleaned: list[str] = []
+    for item in items:
+        cleaned.append(item.replace("`", "").strip())
+    return cleaned
+
+
+def discover_child_issue_numbers(epic_body: str) -> list[int]:
+    """Discover sub-issue numbers from an epic body."""
+    sections = _parse_sections(epic_body)
+    sub_lines = sections.get("Sub-issues")
+    if not sub_lines:
+        return []
+    numbers: list[int] = []
+    seen: set[int] = set()
+    for line in sub_lines:
+        for match in re.finditer(r"#(\d+)", line):
+            number = int(match.group(1))
+            if number not in seen:
+                numbers.append(number)
+                seen.add(number)
+    return numbers
+
+
+def parse_child_issue(issue: dict) -> ReviewIssue:
+    body = issue.get("body") or ""
+    sections = _parse_sections(body)
+    commit_lines = sections.get("Commits landed today", []) or sections.get("Commit landed today", [])
+
+    return ReviewIssue(
+        number=int(issue["number"]),
+        title=issue.get("title") or "",
+        state=(issue.get("state") or "unknown").lower(),
+        url=issue.get("html_url") or issue.get("url") or "",
+        comments=int(issue.get("comments") or 0),
+        parent_issue=_extract_parent_issue(body, sections),
+        checkout_notes=_extract_bullets(sections.get("Branch / checkout", [])),
+        commits=_extract_commits(commit_lines),
+        targeted_tests=_strip_backticks(_extract_bullets(sections.get("Targeted tests", []))),
+        files_touched=_strip_backticks(_extract_bullets(sections.get("Files touched", []))),
+        tasks=_extract_bullets(sections.get("Tasks", [])),
+        acceptance_criteria=_extract_bullets(sections.get("Acceptance Criteria", [])),
+    )
+
+
+def build_packet_markdown(epic_issue: dict, child_issues: list[ReviewIssue]) -> str:
+    title = epic_issue.get("title") or f"Epic #{epic_issue.get('number')}"
+    url = epic_issue.get("html_url") or epic_issue.get("url") or ""
+    body = epic_issue.get("body") or ""
+    children = sorted(child_issues, key=lambda item: item.number)
+
+    lines: list[str] = []
+    lines.append("# Morning Review Packet")
+    lines.append("")
+    lines.append(f"Source epic: [{title}]({url})")
+    lines.append("")
+    lines.append("## Epic context")
+    lines.append("")
+    lines.append(title)
+    lines.append("")
+    for line in body.splitlines():
+        if line.strip():
+            lines.append(line)
+        else:
+            lines.append("")
+    lines.append("")
+    lines.append("## Summary")
+    lines.append("")
+    lines.append("| Issue | State | Commits | Tests |")
+    lines.append("| --- | --- | --- | --- |")
+    for child in children:
+        lines.append(
+            f"| #{child.number} | {child.state} | {len(child.commits)} | {len(child.targeted_tests)} |"
+        )
+    lines.append("")
+
+    for child in children:
+        lines.append(f"## #{child.number} — {child.title}")
+        lines.append("")
+        lines.append(f"State: {child.state}")
+        lines.append(f"URL: {child.url}")
+        lines.append("")
+        if child.checkout_notes:
+            lines.append("### Branch / checkout")
+            for note in child.checkout_notes:
+                lines.append(f"- {note}")
+            lines.append("")
+        if child.commits:
+            lines.append("### Commits")
+            for commit in child.commits:
+                if commit.sha:
+                    lines.append(f"- `{commit.sha}` — {commit.summary}")
+                else:
+                    lines.append(f"- {commit.summary}")
+            lines.append("")
+        if child.targeted_tests:
+            lines.append("### Targeted tests")
+            for test_path in child.targeted_tests:
+                lines.append(f"- `{test_path}`")
+            lines.append("")
+        if child.files_touched:
+            lines.append("### Files touched")
+            for file_path in child.files_touched:
+                lines.append(f"- `{file_path}`")
+            lines.append("")
+        if child.tasks:
+            lines.append("### Tasks")
+            for task in child.tasks:
+                lines.append(f"- [ ] {task}")
+            lines.append("")
+        if child.acceptance_criteria:
+            lines.append("### Acceptance criteria")
+            for item in child.acceptance_criteria:
+                lines.append(f"- [ ] {item}")
+            lines.append("")
+
+    return "\n".join(lines).rstrip() + "\n"
+
+
+def _resolve_token(explicit_token: str | None = None) -> str:
+    if explicit_token:
+        return explicit_token.strip()
+    env_token = os.getenv("GITEA_TOKEN")
+    if env_token:
+        return env_token.strip()
+    if DEFAULT_TOKEN_PATH.exists():
+        return DEFAULT_TOKEN_PATH.read_text().strip()
+    raise FileNotFoundError(f"No Gitea token found. Set GITEA_TOKEN or create {DEFAULT_TOKEN_PATH}")
+
+
+def fetch_issue(base_url: str, owner: str, repo: str, number: int, token: str) -> dict:
+    url = f"{base_url.rstrip('/')}/api/v1/repos/{owner}/{repo}/issues/{number}"
+    request = urllib.request.Request(url, headers={"Authorization": f"token {token}"})
+    with urllib.request.urlopen(request, timeout=30) as response:
+        return json.loads(response.read().decode())
+
+
+def collect_child_issues(base_url: str, owner: str, repo: str, epic_issue: dict, token: str, children_spec: str | None = None) -> list[dict]:
+    numbers = parse_issue_number_spec(children_spec) if children_spec else discover_child_issue_numbers(epic_issue.get("body") or "")
+    return [fetch_issue(base_url, owner, repo, number, token) for number in numbers]
+
+
+def main(argv: list[str] | None = None) -> int:
+    parser = argparse.ArgumentParser(description="Build a markdown morning review packet from a Gitea epic")
+    parser.add_argument("--base-url", default=DEFAULT_BASE_URL)
+    parser.add_argument("--owner", default=DEFAULT_OWNER)
+    parser.add_argument("--repo", default=DEFAULT_REPO)
+    parser.add_argument("--epic-number", type=int, required=True)
+    parser.add_argument("--children", help="Explicit issue list/ranges, e.g. 950-962")
+    parser.add_argument("--token", help="Gitea token (defaults to GITEA_TOKEN or ~/.config/gitea/token)")
+    parser.add_argument("--output", help="Write markdown packet to this path instead of stdout")
+    args = parser.parse_args(argv)
+
+    token = _resolve_token(args.token)
+    epic_issue = fetch_issue(args.base_url, args.owner, args.repo, args.epic_number, token)
+    child_issue_dicts = collect_child_issues(args.base_url, args.owner, args.repo, epic_issue, token, args.children)
+    packet = build_packet_markdown(epic_issue, [parse_child_issue(issue) for issue in child_issue_dicts])
+
+    if args.output:
+        output_path = Path(args.output)
+        output_path.parent.mkdir(parents=True, exist_ok=True)
+        output_path.write_text(packet)
+    else:
+        print(packet, end="")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())
--- a/scripts/morning_review_packet_status.py
+++ b/scripts/morning_review_packet_status.py
@@ -1,288 +0,0 @@
-#!/usr/bin/env python3
-"""Generate a grounded status report for hermes-agent morning review packet epic #949."""
-
-from __future__ import annotations
-
-import argparse
-import base64
-import json
-import os
-import re
-import ssl
-import urllib.request
-from datetime import datetime, timezone
-from pathlib import Path
-from typing import Any
-
-BASE_API = "https://forge.alexanderwhitestone.com/api/v1"
-REPO = "Timmy_Foundation/hermes-agent"
-TOKEN_PATH = Path("~/.config/gitea/token").expanduser()
-DEFAULT_JSON_OUT = Path("docs/morning-review-packet-2026-04-21.snapshot.json")
-DEFAULT_MARKDOWN_OUT = Path("docs/morning-review-packet-2026-04-21-status.md")
-
-
-def extract_issue_numbers(text: str) -> list[int]:
-    seen: set[int] = set()
-    numbers: list[int] = []
-    for match in re.finditer(r"#(\d+)", text or ""):
-        num = int(match.group(1))
-        if num not in seen:
-            seen.add(num)
-            numbers.append(num)
-    return numbers
-
-
-def _auth_headers(token: str) -> list[dict[str, str]]:
-    basic = base64.b64encode(f"{token}:".encode()).decode()
-    return [
-        {"Authorization": f"token {token}", "Accept": "application/json"},
-        {"Authorization": f"Basic {basic}", "Accept": "application/json"},
-    ]
-
-
-def api_get(path: str, *, headers_options: list[dict[str, str]] | None = None) -> Any:
-    token = TOKEN_PATH.read_text(encoding="utf-8").strip()
-    headers_options = headers_options or _auth_headers(token)
-    ctx = ssl.create_default_context()
-    url = f"{BASE_API}{path}"
-    last_error: Exception | None = None
-    for headers in headers_options:
-        try:
-            req = urllib.request.Request(url, headers=headers)
-            with urllib.request.urlopen(req, context=ctx, timeout=30) as resp:
-                return json.loads(resp.read().decode())
-        except Exception as exc:  # pragma: no cover - exercised via live CLI use
-            last_error = exc
-    raise RuntimeError(f"GET {url} failed: {last_error}")
-
-
-def issue_pr_matches(pr: dict[str, Any], issue_num: int) -> bool:
-    title = pr.get("title") or ""
-    body = pr.get("body") or ""
-    head = (pr.get("head") or {}).get("ref") or ""
-    exact_ref = re.compile(rf"(?<!\d)#{issue_num}(?!\d)")
-    body_ref = re.compile(rf"(?i)(closes|close|fixes|fix|resolves|resolve|refs|ref)\s+#?{issue_num}(?!\d)")
-    branch_variants = {
-        f"fix/{issue_num}",
-        f"issue-{issue_num}",
-        f"burn/{issue_num}",
-        f"fix/issue-{issue_num}",
-    }
-    return bool(
-        exact_ref.search(title)
-        or exact_ref.search(body)
-        or body_ref.search(body)
-        or head in branch_variants
-    )
-
-
-def fetch_open_prs(*, headers_options: list[dict[str, str]]) -> list[dict[str, Any]]:
-    prs: list[dict[str, Any]] = []
-    page = 1
-    while True:
-        batch = api_get(
-            f"/repos/{REPO}/pulls?state=open&limit=100&page={page}",
-            headers_options=headers_options,
-        )
-        if not batch:
-            break
-        prs.extend(batch)
-        if len(batch) < 100:
-            break
-        page += 1
-    return prs
-
-
-def fetch_live_snapshot(epic_issue_num: int = 949) -> dict[str, Any]:
-    token = TOKEN_PATH.read_text(encoding="utf-8").strip()
-    headers_options = _auth_headers(token)
-
-    epic = api_get(f"/repos/{REPO}/issues/{epic_issue_num}", headers_options=headers_options)
-    comments = api_get(f"/repos/{REPO}/issues/{epic_issue_num}/comments", headers_options=headers_options)
-    child_numbers = [n for n in extract_issue_numbers(epic.get("body") or "") if n != epic_issue_num]
-    decomposition_numbers = [
-        n
-        for comment in comments
-        for n in extract_issue_numbers(comment.get("body") or "")
-        if n not in child_numbers and n != epic_issue_num
-    ]
-
-    open_prs = fetch_open_prs(headers_options=headers_options)
-
-    children = []
-    for number in child_numbers:
-        issue = api_get(f"/repos/{REPO}/issues/{number}", headers_options=headers_options)
-        matching_prs = [
-            {
-                "number": pr["number"],
-                "title": pr["title"],
-                "head": pr.get("head", {}).get("ref", ""),
-                "url": pr["html_url"],
-            }
-            for pr in open_prs
-            if issue_pr_matches(pr, number)
-        ]
-        children.append(
-            {
-                "number": issue["number"],
-                "title": issue["title"],
-                "state": issue["state"],
-                "html_url": issue["html_url"],
-                "open_prs": matching_prs,
-            }
-        )
-
-    decomposition_issues = []
-    for number in decomposition_numbers:
-        issue = api_get(f"/repos/{REPO}/issues/{number}", headers_options=headers_options)
-        decomposition_issues.append(
-            {
-                "number": issue["number"],
-                "title": issue["title"],
-                "state": issue["state"],
-                "html_url": issue["html_url"],
-            }
-        )
-
-    return {
-        "generated_at": datetime.now(timezone.utc).isoformat(),
-        "repo": REPO,
-        "epic": {
-            "number": epic["number"],
-            "title": epic["title"],
-            "state": epic["state"],
-            "html_url": epic["html_url"],
-        },
-        "children": children,
-        "decomposition_issues": decomposition_issues,
-    }
-
-
-def summarize_snapshot(snapshot: dict[str, Any]) -> dict[str, int]:
-    children = snapshot.get("children", [])
-    open_children = [issue for issue in children if issue.get("state") == "open"]
-    closed_children = [issue for issue in children if issue.get("state") == "closed"]
-    open_with_pr = [issue for issue in open_children if issue.get("open_prs")]
-    open_without_pr = [issue for issue in open_children if not issue.get("open_prs")]
-    return {
-        "total_children": len(children),
-        "open_children": len(open_children),
-        "closed_children": len(closed_children),
-        "open_with_pr": len(open_with_pr),
-        "open_without_pr": len(open_without_pr),
-    }
-
-
-def render_markdown(snapshot: dict[str, Any]) -> str:
-    epic = snapshot["epic"]
-    children = snapshot.get("children", [])
-    summary = summarize_snapshot(snapshot)
-    open_with_pr = [issue for issue in children if issue.get("state") == "open" and issue.get("open_prs")]
-    open_without_pr = [issue for issue in children if issue.get("state") == "open" and not issue.get("open_prs")]
-    decomposition = snapshot.get("decomposition_issues", [])
-
-    lines = [
-        f"# Morning Review Packet Status — #{epic['number']}",
-        "",
-        f"Generated: {snapshot.get('generated_at', '')}",
-        f"Epic: [{epic['title']}]({epic.get('html_url', '')})",
-        "",
-        "## Summary",
-        "",
-        f"- Child QA issues tracked: {summary['total_children']}",
-        f"- Open child issues: {summary['open_children']}",
-        f"- Closed child issues: {summary['closed_children']}",
-        f"- Open child issues already backed by PRs: {summary['open_with_pr']}",
-        f"- Open child issues still unowned on forge: {summary['open_without_pr']}",
-        "",
-        "## Child QA Matrix",
-        "",
-        "| Issue | State | Open PRs | Title |",
-        "|------:|-------|----------|-------|",
-    ]
-
-    for issue in children:
-        rendered_prs = []
-        for pr in issue.get("open_prs", []):
-            pr_num = pr.get("number", "?")
-            pr_url = pr.get("url") or pr.get("html_url") or ""
-            rendered_prs.append(f"[#{pr_num}]({pr_url})" if pr_url else f"#{pr_num}")
-        pr_text = ", ".join(rendered_prs) or "—"
-        lines.append(
-            f"| #{issue['number']} | {issue['state']} | {pr_text} | {issue['title']} |"
-        )
-
-    lines.extend([
-        "",
-        "## Drift Signals",
-        "",
-        "forge/main is still catching up to the upstream packet.",
-    ])
-
-    if open_with_pr:
-        lines.append("")
-        lines.append("Active PR-backed child lanes:")
-        for issue in open_with_pr:
-            pr_numbers = ", ".join(f"#{pr['number']}" for pr in issue.get("open_prs", []))
-            lines.append(f"- #{issue['number']} -> {pr_numbers} ({issue['title']})")
-
-    if open_without_pr:
-        lines.extend([
-            "",
-            "## Unowned Open QA Issues",
-            "",
-        ])
-        for issue in open_without_pr:
-            lines.append(f"- #{issue['number']} {issue['title']}")
-
-    if decomposition:
-        lines.extend([
-            "",
-            "## Decomposition Follow-Ups",
-            "",
-        ])
-        for issue in decomposition:
-            lines.append(f"- #{issue['number']} [{issue['state']}] {issue['title']}")
-
-    lines.extend([
-        "",
-        "## Conclusion",
-        "",
-        "Refs #949 only. This epic remains open until every child QA issue has a truthful PASS/FAIL outcome, attached evidence, and any upstream/main versus forge/main drift is resolved or explicitly documented.",
-        "",
-        "## Regeneration",
-        "",
-        "```bash",
-        "python3 scripts/morning_review_packet_status.py --fetch-live --json-out docs/morning-review-packet-2026-04-21.snapshot.json --markdown-out docs/morning-review-packet-2026-04-21-status.md",
-        "```",
-    ])
-
-    return "\n".join(lines) + "\n"
-
-
-def write_json(path: Path, data: dict[str, Any]) -> None:
-    path.parent.mkdir(parents=True, exist_ok=True)
-    path.write_text(json.dumps(data, indent=2) + "\n", encoding="utf-8")
-
-
-def main() -> None:
-    parser = argparse.ArgumentParser(description="Generate grounded status docs for epic #949")
-    parser.add_argument("--fetch-live", action="store_true", help="Fetch the current packet state from Forge")
-    parser.add_argument("--snapshot", type=Path, help="Read a local JSON snapshot instead of hitting the API")
-    parser.add_argument("--json-out", type=Path, default=DEFAULT_JSON_OUT, help="Path to write JSON snapshot")
-    parser.add_argument("--markdown-out", type=Path, default=DEFAULT_MARKDOWN_OUT, help="Path to write markdown report")
-    args = parser.parse_args()
-
-    if args.fetch_live or not args.snapshot:
-        snapshot = fetch_live_snapshot()
-    else:
-        snapshot = json.loads(args.snapshot.read_text(encoding="utf-8"))
-
-    write_json(args.json_out, snapshot)
-    args.markdown_out.parent.mkdir(parents=True, exist_ok=True)
-    args.markdown_out.write_text(render_markdown(snapshot), encoding="utf-8")
-    print(args.markdown_out)
-
-
-if __name__ == "__main__":
-    main()
--- a/tests/test_morning_review_packet.py
+++ b/tests/test_morning_review_packet.py
@@ -0,0 +1,162 @@
+from pathlib import Path
+import sys
+
+SCRIPT_DIR = Path(__file__).resolve().parents[1] / "scripts"
+sys.path.insert(0, str(SCRIPT_DIR))
+
+import morning_review_packet as mrp
+
+
+EPIC_BODY = """Source: git log on upstream/main since 2026-04-21 00:00 EDT.
+
+## Success criteria
+- [ ] Every issue has a clear PASS / FAIL outcome.
+
+## Sub-issues
+- [ ] #950 [QA] Verify AI Gateway provider UX + attribution headers
+- [ ] #951 [QA] Verify transport abstraction + AnthropicTransport wiring
+- [x] #962 [QA] Verify hardcoded-home path guard on burn/921 branch
+"""
+
+
+CHILD_BODY_PLURAL = """## Parent
+#949
+
+## Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+## Commits landed today
+- `b11753879` attribution default_headers for ai-gateway provider
+- `700437440` curated picker with live pricing
+
+## Targeted tests
+- `tests/hermes_cli/test_ai_gateway_models.py`
+- `tests/run_agent/test_provider_attribution_headers.py`
+
+## Tasks
+- [ ] Verify the picker ordering.
+- [ ] Verify attribution headers.
+
+## Acceptance Criteria
+- [ ] Picker shows AI Gateway prominently.
+- [ ] Headers appear on OpenRouter calls.
+"""
+
+
+CHILD_BODY_SINGULAR = """## Parent
+#949
+
+## Branch / checkout
+- Validate on `upstream/main` or an equivalent synced checkout.
+
+## Commit landed today
+- `fc21c1420` add buttons to update Hermes and restart gateway
+
+## Files touched
+- `web/src/pages/StatusPage.tsx`
+- `web/src/lib/api.ts`
+- `web/src/i18n/en.ts`
+
+## Tasks
+- [ ] Open the Web UI status page and verify both buttons are present.
+- [ ] Click Restart Gateway in a safe environment.
+"""
+
+
+def test_discover_child_issue_numbers_from_epic_body():
+    assert mrp.discover_child_issue_numbers(EPIC_BODY) == [950, 951, 962]
+
+
+def test_parse_issue_number_spec_supports_ranges_and_lists():
+    assert mrp.parse_issue_number_spec("950-952,955,962") == [950, 951, 952, 955, 962]
+
+
+def test_parse_child_issue_extracts_structured_sections():
+    issue = {
+        "number": 950,
+        "title": "[QA] Verify AI Gateway provider UX + attribution headers",
+        "state": "open",
+        "html_url": "https://forge.example/950",
+        "comments": 0,
+        "body": CHILD_BODY_PLURAL,
+    }
+
+    parsed = mrp.parse_child_issue(issue)
+
+    assert parsed.number == 950
+    assert parsed.parent_issue == 949
+    assert parsed.checkout_notes == ["Validate on `upstream/main` or an equivalent synced checkout."]
+    assert [c.sha for c in parsed.commits] == ["b11753879", "700437440"]
+    assert parsed.targeted_tests == [
+        "tests/hermes_cli/test_ai_gateway_models.py",
+        "tests/run_agent/test_provider_attribution_headers.py",
+    ]
+    assert parsed.tasks == [
+        "Verify the picker ordering.",
+        "Verify attribution headers.",
+    ]
+    assert parsed.acceptance_criteria == [
+        "Picker shows AI Gateway prominently.",
+        "Headers appear on OpenRouter calls.",
+    ]
+
+
+def test_parse_child_issue_handles_singular_commit_heading_and_files_touched():
+    issue = {
+        "number": 961,
+        "title": "[QA] Verify web dashboard update/restart action buttons",
+        "state": "closed",
+        "html_url": "https://forge.example/961",
+        "comments": 16,
+        "body": CHILD_BODY_SINGULAR,
+    }
+
+    parsed = mrp.parse_child_issue(issue)
+
+    assert [c.sha for c in parsed.commits] == ["fc21c1420"]
+    assert parsed.files_touched == [
+        "web/src/pages/StatusPage.tsx",
+        "web/src/lib/api.ts",
+        "web/src/i18n/en.ts",
+    ]
+    assert parsed.tasks == [
+        "Open the Web UI status page and verify both buttons are present.",
+        "Click Restart Gateway in a safe environment.",
+    ]
+
+
+def test_build_packet_markdown_renders_summary_and_details():
+    epic_issue = {
+        "number": 949,
+        "title": "EPIC: Morning review packet — Hermes harness features landed 2026-04-21",
+        "state": "open",
+        "html_url": "https://forge.example/949",
+        "body": EPIC_BODY,
+    }
+    child_a = mrp.parse_child_issue({
+        "number": 950,
+        "title": "[QA] Verify AI Gateway provider UX + attribution headers",
+        "state": "open",
+        "html_url": "https://forge.example/950",
+        "comments": 0,
+        "body": CHILD_BODY_PLURAL,
+    })
+    child_b = mrp.parse_child_issue({
+        "number": 961,
+        "title": "[QA] Verify web dashboard update/restart action buttons",
+        "state": "closed",
+        "html_url": "https://forge.example/961",
+        "comments": 16,
+        "body": CHILD_BODY_SINGULAR,
+    })
+
+    markdown = mrp.build_packet_markdown(epic_issue, [child_a, child_b])
+
+    assert "# Morning Review Packet" in markdown
+    assert "EPIC: Morning review packet — Hermes harness features landed 2026-04-21" in markdown
+    assert "| #950 | open | 2 | 2 |" in markdown
+    assert "| #961 | closed | 1 | 0 |" in markdown
+    assert "## #950 — [QA] Verify AI Gateway provider UX + attribution headers" in markdown
+    assert "## #961 — [QA] Verify web dashboard update/restart action buttons" in markdown
+    assert "`b11753879` — attribution default_headers for ai-gateway provider" in markdown
+    assert "`web/src/pages/StatusPage.tsx`" in markdown
--- a/tests/test_morning_review_packet_status.py
+++ b/tests/test_morning_review_packet_status.py
@@ -1,94 +0,0 @@
-"""Tests for the morning review packet status report generator."""
-
-from __future__ import annotations
-
-import importlib.util
-from pathlib import Path
-
-SCRIPT_PATH = Path(__file__).resolve().parents[1] / "scripts" / "morning_review_packet_status.py"
-DOC_PATH = Path(__file__).resolve().parents[1] / "docs" / "morning-review-packet-2026-04-21-status.md"
-
-
-def load_module():
-    assert SCRIPT_PATH.exists(), f"missing status script: {SCRIPT_PATH}"
-    spec = importlib.util.spec_from_file_location("morning_review_packet_status_test", SCRIPT_PATH)
-    module = importlib.util.module_from_spec(spec)
-    assert spec.loader is not None
-    spec.loader.exec_module(module)
-    return module
-
-
-def sample_snapshot():
-    return {
-        "epic": {"number": 949, "title": "Morning review packet", "state": "open"},
-        "children": [
-            {
-                "number": 950,
-                "title": "Verify AI Gateway provider UX + attribution headers",
-                "state": "open",
-                "open_prs": [],
-            },
-            {
-                "number": 954,
-                "title": "Verify maps skill guest_house / camp_site / bakery expansion",
-                "state": "open",
-                "open_prs": [
-                    {"number": 1021, "head": "fix/954", "title": "feat: sync maps skill and verify guest_house/camp_site/bakery (#954)"}
-                ],
-            },
-            {
-                "number": 961,
-                "title": "Verify web dashboard update/restart action buttons",
-                "state": "closed",
-                "open_prs": [],
-            },
-        ],
-        "decomposition_issues": [
-            {"number": 965, "title": "Phase 1: Landscape Analysis & Scaffolding", "state": "open"},
-            {"number": 967, "title": "Phase 3: Poka-yoke Integration & Fleet Verification", "state": "closed"},
-        ],
-    }
-
-
-def test_extract_child_issue_numbers_from_epic_body():
-    module = load_module()
-    body = """
- [ ] #950 one
- [ ] #951 two
- [ ] #962 three
-"""
-    assert module.extract_issue_numbers(body) == [950, 951, 962]
-
-
-def test_summarize_snapshot_counts_open_closed_and_pr_backing():
-    module = load_module()
-    summary = module.summarize_snapshot(sample_snapshot())
-
-    assert summary["total_children"] == 3
-    assert summary["open_children"] == 2
-    assert summary["closed_children"] == 1
-    assert summary["open_with_pr"] == 1
-    assert summary["open_without_pr"] == 1
-
-
-def test_render_markdown_includes_issue_matrix_and_drift_sections():
-    module = load_module()
-    md = module.render_markdown(sample_snapshot())
-
-    assert "# Morning Review Packet Status — #949" in md
-    assert "## Child QA Matrix" in md
-    assert "#950" in md
-    assert "#954" in md
-    assert "#1021" in md
-    assert "## Unowned Open QA Issues" in md
-    assert "## Drift Signals" in md
-    assert "forge/main is still catching up to the upstream packet" in md
-
-
-def test_committed_status_doc_exists_and_mentions_live_examples():
-    assert DOC_PATH.exists(), f"missing generated status doc: {DOC_PATH}"
-    text = DOC_PATH.read_text(encoding="utf-8")
-    assert "# Morning Review Packet Status — #949" in text
-    assert "#954" in text
-    assert "#1021" in text
-    assert "#950" in text