feat: Orquestra - sequential orchestration runtime

- Context isolation: fresh Pi process per stage (run_stage.py)
- Gate enforcement: blocks close without approved gates
- Auto commit/push on feature close (close_feature.py)
- Write restrictions: only allowed directories (ALLOWED_WRITE_DIRS)
- Pi extension: orquestra-status with /orquestra-stage command
- Documentation: context-handoff.md, updated README
- Scripts: agent_status.py, verify.sh, install.sh updated

scripts/verify.sh

@@ -23,12 +23,25 @@ required=(
   "harness/policies/quality.md"
   "harness/contracts/handoff.md"
   "harness/contracts/evidence.schema.json"
+  "harness/model-routing.yml"
+  "docs/context-handoff.md"
   "spec/product.md"
   "spec/tech.md"
   "spec/acceptance.md"
   "backlog/features.json"
   "work/current.md"
   "work/history.md"
+  "work/runtime-status.json"
+  "scripts/install.sh"
+  "scripts/agent_status.py"
+  "scripts/new_ticket.py"
+  "scripts/pi_orquestra.sh"
+  "scripts/run_stage.py"
+  "scripts/commit_feature.sh"
+  "scripts/close_feature.py"
+  "platforms/pi/README.md"
+  "platforms/pi/extensions/orquestra-status/index.ts"
+  "platforms/pi/extensions/orquestra-web-fetch.ts"
 )
 
 for f in "${required[@]}"; do
@@ -40,8 +53,68 @@ for f in "${required[@]}"; do
   fi
 done
 
+required_dirs=("project")
+for d in "${required_dirs[@]}"; do
+  if [ -d "$d" ]; then
+    ok "Existe directorio $d"
+  else
+    fail "Falta directorio $d"
+    EXIT_CODE=1
+  fi
+done
+
+root_product_files=$(find . -mindepth 1 -maxdepth 1 -type f \( \
+  -name '*.py' -o -name '*.js' -o -name '*.ts' -o -name '*.go' -o -name '*.rs' -o \
+  -name '*.java' -o -name '*.php' -o -name '*.rb' \
+\) -print 2>/dev/null)
+if [ -n "$root_product_files" ]; then
+  fail "Archivos de producto/código en la raíz no permitidos; usar project/: $root_product_files"
+  EXIT_CODE=1
+else
+  ok "Sin archivos de producto/código en la raíz"
+fi
+
 echo ""
-echo "── 2) Validando backlog + gates ───────────────────────"
+echo "── 2) Validando requisitos Pi ─────────────────────────"
+if command -v pi >/dev/null 2>&1; then
+  ok "Pi instalado: $(command -v pi)"
+else
+  fail "Pi es obligatorio antes de instalar Orquestra"
+  EXIT_CODE=1
+fi
+
+ENGRAM_EXT="$HOME/.pi/agent/npm/node_modules/gentle-engram/index.ts"
+if [ -f "$ENGRAM_EXT" ]; then
+  ok "Engram instalado: $ENGRAM_EXT"
+else
+  fail "Engram es obligatorio para la memoria Orquestra: falta $ENGRAM_EXT"
+  EXIT_CODE=1
+fi
+
+if [ -d ".pi/subagents" ] || [ -f ".pi/subagents.json" ]; then
+  fail "Orquestra es secuencial: no debe instalar .pi/subagents ni .pi/subagents.json"
+  EXIT_CODE=1
+else
+  ok "Sin subagentes project-local"
+fi
+
+if [ -d ".pi/extensions" ]; then
+  extra_extensions=$(find .pi/extensions -mindepth 1 -maxdepth 1 \
+    ! -name orquestra-status \
+    ! -name orquestra-web-fetch.ts \
+    -print 2>/dev/null)
+  if [ -n "$extra_extensions" ]; then
+    fail "Extensiones project-local no declaradas: $extra_extensions"
+    EXIT_CODE=1
+  else
+    ok "Extensiones project-local declaradas"
+  fi
+else
+  warn "Sin .pi/extensions; la instalación debe copiar extensiones Orquestra en proyectos"
+fi
+
+echo ""
+echo "── 3) Validando backlog + runtime ─────────────────────"
 python3 - <<'PY'
 import json
 import pathlib
@@ -102,12 +175,29 @@ for f in features:
                 print(f"[FAIL] {fid}/{filename} no está APPROVED")
                 sys.exit(1)
 
+runtime_path = root / 'work' / 'runtime-status.json'
+try:
+    runtime = json.loads(runtime_path.read_text(encoding='utf-8'))
+except Exception as e:
+    print(f"[FAIL] work/runtime-status.json inválido: {e}")
+    sys.exit(1)
+
+required_runtime = ['feature_id', 'stage', 'agent', 'action', 'state', 'next_agent', 'waiting_for', 'updated_at', 'timeline']
+missing_runtime = [key for key in required_runtime if key not in runtime]
+if missing_runtime:
+    print(f"[FAIL] work/runtime-status.json incompleto: {', '.join(missing_runtime)}")
+    sys.exit(1)
+if not isinstance(runtime.get('timeline'), list):
+    print('[FAIL] work/runtime-status.json timeline debe ser una lista')
+    sys.exit(1)
+
 print(f"[OK] backlog válido ({len(features)} features)")
+print('[OK] runtime-status válido')
 PY
 if [ $? -ne 0 ]; then EXIT_CODE=1; fi
 
 echo ""
-echo "── 3) Verificación de tests/build (opcional auto-detect) ─"
+echo "── 4) Verificación de tests/build (opcional auto-detect) ─"
 if [ -f "Makefile" ] && grep -qE '^test:' Makefile; then
   if make test; then ok "make test OK"; else fail "make test falló"; EXIT_CODE=1; fi
 elif [ -f "package.json" ]; then
@@ -123,15 +213,15 @@ elif [ -d "tests" ]; then
     if python3 -m unittest discover -s tests -v; then ok "unittest OK"; else fail "unittest falló"; EXIT_CODE=1; fi
   fi
 else
-  warn "No se detectó suite automática (tests/ | Makefile test | package.json test)"
+  ok "Sin suite de producto detectada; no aplica al harness base"
 fi
 
 echo ""
-echo "── 4) Resumen ─────────────────────────────────────────"
+echo "── 5) Resumen ─────────────────────────────────────────"
 if [ $EXIT_CODE -eq 0 ]; then
-  ok "Harness verificado. Puedes trabajar."
+  ok "Orquestra verificado. Puedes trabajar."
 else
-  fail "Harness NO verificado. Corrige antes de continuar."
+  fail "Orquestra NO verificado. Corrige antes de continuar."
 fi
 
 exit $EXIT_CODE