fix: determinism score parser + pre-commit hook restructure

- Fix score extraction to handle nested report.score
- Add verify-staged.sh to pre-commit pipeline
- Add verification test for multimodal harness

Author: StackMemory Bot (CLI)

.husky/pre-commit

@@ -10,4 +10,5 @@ elif [ -d "$HOME/.nvm/versions/node" ]; then
 fi
 
 npx lint-staged
-npm run build
+bash scripts/verify-staged.sh
+npm run determinism:pre-commit

scripts/determinism-pre-commit.sh

@@ -53,7 +53,7 @@ printf '%s\n' "$RELEVANT_FILES" | sed 's/^/  - /'
 
 REPORT_JSON="$(node --import tsx src/cli/index.ts bench determinism --task "$TASK" --runs "$RUNS" --json)"
 
-SCORE="$(printf '%s' "$REPORT_JSON" | node -e "let data='';process.stdin.on('data',d=>data+=d);process.stdin.on('end',()=>{const report=JSON.parse(data);process.stdout.write(String(report.score));});")"
+SCORE="$(printf '%s' "$REPORT_JSON" | node -e "let data='';process.stdin.on('data',d=>data+=d);process.stdin.on('end',()=>{const stored=JSON.parse(data);const score=stored.report?.score ?? stored.score;process.stdout.write(String(score));});")"
 
 if [ "$SCORE" != "100" ] && [ "$SCORE" != "100.00" ]; then
   log_skip "Determinism smoke failed with score $SCORE/100"

scripts/verify-staged.sh

@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+ROOT="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
+cd "$ROOT"
+
+if [ "${STACKMEMORY_VERIFY_SKIP:-0}" = "1" ]; then
+  echo "[verify-staged] skipped because STACKMEMORY_VERIFY_SKIP=1"
+  exit 0
+fi
+
+CHANGED_FILES="${STACKMEMORY_VERIFY_FILES:-}"
+if [ -z "$CHANGED_FILES" ]; then
+  CHANGED_FILES="$(git diff --cached --name-only --diff-filter=ACMR)"
+fi
+
+if [ -z "$CHANGED_FILES" ]; then
+  echo "[verify-staged] no staged files"
+  exit 0
+fi
+
+matching_paths() {
+  printf '%s\n' "$CHANGED_FILES" | grep -E "$1" || true
+}
+
+has_path() {
+  printf '%s\n' "$CHANGED_FILES" | grep -E "$1" >/dev/null
+}
+
+run_shell() {
+  echo "[verify-staged] $*"
+  bash -lc "$*"
+}
+
+test_files="$(matching_paths '(^src/|^scripts/|^packages/).*((__tests__/.*)|(\.|-)test)\.ts$')"
+if [ -n "$test_files" ]; then
+  run_shell "npx vitest run $(printf '%s\n' "$test_files" | xargs) --reporter=dot"
+fi
+
+if has_path '^(src/|scripts/|packages/|templates/|Shadowbroker/|package\.json$|package-lock\.json$|tsconfig|esbuild\.config\.js$)'; then
+  run_shell 'npm run build'
+fi
+
+echo "[verify-staged] passed"

src/orchestrators/multimodal/__tests__/verification.test.ts

@@ -0,0 +1,27 @@
+import { describe, expect, it } from 'vitest';
+import { mkdtempSync, rmSync } from 'fs';
+import { join } from 'path';
+import { tmpdir } from 'os';
+
+import { runVerificationCommands } from '../providers.js';
+
+describe('multimodal verification commands', () => {
+  it('captures passing and failing command results', () => {
+    const repoPath = mkdtempSync(join(tmpdir(), 'stackmemory-verify-'));
+
+    try {
+      const results = runVerificationCommands(repoPath, [
+        'node -e "console.log(\'pass-signal\')"',
+        'node -e "console.error(\'fail-signal\'); process.exit(7)"',
+      ]);
+
+      expect(results).toHaveLength(2);
+      expect(results[0]).toMatchObject({ ok: true });
+      expect(results[0]?.output).toContain('pass-signal');
+      expect(results[1]).toMatchObject({ ok: false });
+      expect(results[1]?.output).toContain('fail-signal');
+    } finally {
+      rmSync(repoPath, { recursive: true, force: true });
+    }
+  });
+});