@amg555/frameforge-mcp 2.7.6 → 2.7.7

package/.agent/skills/gstack-make-pdf/test/e2e/ci-prereqs.test.ts

@@ -1,48 +0,0 @@
-/**
- * CI tripwire for the silent-skip class (#audit-2026-08: the 9 make-pdf e2e
- * gate tests self-skipped on Linux for their entire life because the
- * free-tests lane never built the binaries they probe — exit 0, no signal).
- *
- * Every sibling gate file guards itself with test.skipIf(!prerequisitesAvailable()),
- * which is correct for LOCAL runs (a contributor without a build shouldn't
- * fail) but is exactly how CI green stopped meaning "ran". This file inverts
- * the polarity in CI: when GSTACK_EXPECT_BINARIES=1 (set by free-tests.yml's
- * "Run free suite" step), the prerequisites are ASSERTED, so dropping the
- * gate-build step or poppler from the workflow fails the required lane
- * instead of quietly skipping the gates.
- *
- * Not set locally → the whole file self-skips, same as the gates.
- */
-import { describe, expect, test } from "bun:test";
-import * as fs from "node:fs";
-import * as path from "node:path";
-
-import { resolvePdftotext } from "../../src/pdftotext";
-
-const ROOT = path.resolve(__dirname, "../../..");
-const EXPECT_BINARIES = process.env.GSTACK_EXPECT_BINARIES === "1";
-
-describe("gate prerequisites (CI tripwire)", () => {
-  test.skipIf(!EXPECT_BINARIES)("gate artifacts and tools exist when the lane promises them", () => {
-    const missing: string[] = [];
-    // Aside itself is deliberately NOT asserted: CI runners have no Aside. The
-    // gates print through gstack's own browse binary there (the fallback in
-    // lib/aside-render), so THAT build artifact is promised alongside the
-    // make-pdf binary, the diagram bundle, and poppler.
-    for (const rel of [
-      "make-pdf/dist/pdf",
-      "browse/dist/browse",
-      "lib/diagram-render/dist/diagram-render.html",
-    ]) {
-      if (!fs.existsSync(path.join(ROOT, rel))) missing.push(rel);
-    }
-    try {
-      resolvePdftotext();
-    } catch (err: any) {
-      missing.push(`pdftotext (${err?.message ?? "unresolvable"})`);
-    }
-    // One assertion naming everything missing beats N opaque ones: the fix
-    // is always "restore the build:gates step / apt packages in free-tests.yml".
-    expect(missing).toEqual([]);
-  });
-});

package/.agent/skills/gstack-make-pdf/test/e2e/combined-gate.test.ts

@@ -1,74 +0,0 @@
-/**
- * Combined-features copy-paste gate — the P0 CI gate.
- *
- * This test runs the compiled `make-pdf/dist/pdf` binary against a fixture
- * that has every v1 typography feature on (smartypants, hyphens, chapter
- * breaks, bold/italic, inline code, blockquote, lists, headings). It then
- * pipes the output through pdftotext and asserts the extracted text
- * matches the handwritten expected.txt.
- *
- * Codex round 2 told us this (not per-feature gates) is the real gate a
- * user actually cares about — features interact, and the combined
- * extraction is what predicts production quality.
- *
- * Gating: only runs when the compiled binary + a browser (Aside or browse) + pdftotext
- * are all available. Skipped cleanly otherwise (local dev, CI runners).
- */
-
-import { describe, expect, test } from "bun:test";
-import { execFileSync } from "node:child_process";
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-
-import { copyPasteGate, resolvePdftotext } from "../../src/pdftotext";
-import { browserAvailable, NO_BROWSER_REASON } from "../../../test/helpers/browser-available";
-
-const FIXTURE = path.resolve(__dirname, "../fixtures/combined-gate.md");
-const EXPECTED = path.resolve(__dirname, "../fixtures/combined-gate.expected.txt");
-const ROOT = path.resolve(__dirname, "../../..");
-const PDF_BIN = path.join(ROOT, "make-pdf/dist/pdf");
-
-function prerequisitesAvailable(): { ok: true } | { ok: false; reason: string } {
-  if (!fs.existsSync(PDF_BIN)) return { ok: false, reason: `make-pdf binary missing (${PDF_BIN}). Run bun run build.` };
-  // Aside (macOS) or gstack's own browse binary (what CI builds) — a skip only when neither exists.
-  if (!browserAvailable()) return { ok: false, reason: NO_BROWSER_REASON };
-  if (!fs.existsSync(FIXTURE)) return { ok: false, reason: `fixture missing (${FIXTURE}).` };
-  if (!fs.existsSync(EXPECTED)) return { ok: false, reason: `expected.txt missing (${EXPECTED}).` };
-  try { resolvePdftotext(); } catch (err: any) { return { ok: false, reason: err.message }; }
-  return { ok: true };
-}
-
-describe("combined-features copy-paste gate", () => {
-  const avail = prerequisitesAvailable();
-
-  test.skipIf(!avail.ok)("fixture PDF extracts cleanly through pdftotext", () => {
-    if (!avail.ok) return; // satisfies the type checker
-    const outputPdf = path.join(os.tmpdir(), `make-pdf-combined-gate-${process.pid}.pdf`);
-    try {
-      execFileSync(PDF_BIN, ["generate", FIXTURE, outputPdf, "--quiet"], {
-        encoding: "utf8",
-        timeout: 60_000,
-        stdio: ["ignore", "pipe", "pipe"],
-      });
-      expect(fs.existsSync(outputPdf)).toBe(true);
-
-      const expected = fs.readFileSync(EXPECTED, "utf8");
-      const result = copyPasteGate(outputPdf, expected);
-      if (!result.ok) {
-        // Attach the extracted text so CI logs make the failure diagnosable
-        process.stderr.write(`\n--- EXTRACTED ---\n${result.extracted}\n--- END ---\n\n`);
-        process.stderr.write(`--- REASONS ---\n${result.reasons.join("\n")}\n--- END ---\n`);
-      }
-      expect(result.ok).toBe(true);
-    } finally {
-      try { fs.unlinkSync(outputPdf); } catch { /* ignore */ }
-    }
-  }, 60000);
-
-  if (!avail.ok) {
-    test("prerequisites check", () => {
-      console.warn(`[skip] ${avail.reason}`);
-    });
-  }
-});

package/.agent/skills/gstack-make-pdf/test/e2e/diagram-gate.test.ts

@@ -1,173 +0,0 @@
-/**
- * Diagram render gate — proves the diagram pre-pass works end-to-end through
- * the compiled binary: mermaid fences render as vector SVG (not raw code),
- * multiple fences coexist (id-collision check), render=false keeps source,
- * a broken fence yields a visible diagnostic block, and a relative local
- * image actually renders (CRITICAL regression — pre-pass D1 fixed the
- * setContent/about:blank path where relative images silently 404'd).
- *
- * Oracles (per the emoji-gate lessons — text extraction alone lies):
- *   1. pdftotext: node labels from BOTH diagrams present (vector text made it
- *      into the PDF), diagnostic title present, raw mermaid only where
- *      render=false kept it.
- *   2. pdftoppm + saturated-pixel count: the red fixture image rasterizes to
- *      colored pixels — text extraction can't fake that.
- *
- * Free-tier deterministic gate: runs under plain `bun test` when the compiled
- * binary, a browser (Aside or the browse binary), and poppler are available; self-skips otherwise (ci-prereqs.test.ts
- * is the CI tripwire for the build artifacts).
- */
-
-import { describe, expect, test } from "bun:test";
-import { execFileSync } from "node:child_process";
-import * as fs from "node:fs";
-import * as path from "node:path";
-
-import { resolvePopplerTool } from "../../src/pdftotext";
-import { browserAvailable, NO_BROWSER_REASON } from "../../../test/helpers/browser-available";
-
-const FIXTURE = path.resolve(__dirname, "../fixtures/diagram-gate.md");
-const ROOT = path.resolve(__dirname, "../../..");
-const PDF_BIN = path.join(ROOT, "make-pdf/dist/pdf");
-const BUNDLE = path.join(ROOT, "lib/diagram-render/dist/diagram-render.html");
-
-const CHILD_TIMEOUT_MS = 60_000;
-// The 80x40 red fixture image at 100dpi occupies ~80x40 px of strong red.
-// Floor sits well below that but far above AA noise.
-const SATURATED_PIXEL_FLOOR = 500;
-const SATURATION_DELTA = 60;
-
-function prerequisitesAvailable(): { ok: true } | { ok: false; reason: string } {
-  if (!fs.existsSync(PDF_BIN)) return { ok: false, reason: `make-pdf binary missing (${PDF_BIN}). Run bun run build.` };
-  // Aside (macOS) or gstack's own browse binary (what CI builds) — a skip only when neither exists.
-  if (!browserAvailable()) return { ok: false, reason: NO_BROWSER_REASON };
-  if (!fs.existsSync(BUNDLE)) return { ok: false, reason: `diagram-render bundle missing (${BUNDLE}). Run bun run build:diagram-render.` };
-  if (!fs.existsSync(FIXTURE)) return { ok: false, reason: `fixture missing (${FIXTURE}).` };
-  if (!resolvePopplerTool("pdftotext")) return { ok: false, reason: "pdftotext not found (install poppler-utils)." };
-  if (!resolvePopplerTool("pdftoppm")) return { ok: false, reason: "pdftoppm not found (install poppler-utils)." };
-  return { ok: true };
-}
-
-function countSaturatedPixels(ppmPath: string, delta: number): number {
-  const b = fs.readFileSync(ppmPath);
-  let i = 0;
-  const token = (): string => {
-    while (i < b.length && (b[i] === 0x20 || b[i] === 0x0a || b[i] === 0x09 || b[i] === 0x0d)) i++;
-    if (b[i] === 0x23) { while (i < b.length && b[i] !== 0x0a) i++; return token(); }
-    const s = i;
-    while (i < b.length && b[i] !== 0x20 && b[i] !== 0x0a && b[i] !== 0x09 && b[i] !== 0x0d) i++;
-    return b.slice(s, i).toString("ascii");
-  };
-  if (token() !== "P6") throw new Error("expected P6 PPM");
-  const w = Number(token());
-  const h = Number(token());
-  if (Number(token()) !== 255) throw new Error("expected 8-bit PPM");
-  i++;
-  let sat = 0;
-  for (let p = 0; p < w * h; p++) {
-    const o = i + p * 3;
-    if (Math.max(b[o], b[o + 1], b[o + 2]) - Math.min(b[o], b[o + 1], b[o + 2]) > delta) sat++;
-  }
-  return sat;
-}
-
-describe("diagram render gate", () => {
-  const avail = prerequisitesAvailable();
-
-  test.skipIf(!avail.ok)("mermaid fences render as vector diagrams; images and diagnostics behave", () => {
-    if (!avail.ok) return;
-    const workDir = fs.mkdtempSync("/tmp/make-pdf-diagram-gate-");
-    const outputPdf = path.join(workDir, "out.pdf");
-    const ppmPrefix = path.join(workDir, "page");
-    try {
-      // No --quiet: stderr carries the downscale warning asserted below.
-      const run = Bun.spawnSync([PDF_BIN, "generate", FIXTURE, outputPdf], {
-        stdout: "pipe",
-        stderr: "pipe",
-        timeout: 120_000,
-      });
-      const stderr = new TextDecoder().decode(run.stderr);
-      if (run.exitCode !== 0) {
-        throw new Error(`generate failed (exit ${run.exitCode}):\n${stderr}`);
-      }
-      expect(fs.existsSync(outputPdf)).toBe(true);
-
-      // 0. Print-resolution downscale fired on the 4200px noise photo — this
-      //    is the only live coverage of __downscaleRaster AND the served-dir
-      //    payload transport (the data URI is far too big for argv).
-      expect(stderr).toMatch(/downscaled huge-noise\.png 4200px → \d+px/);
-
-      const pdftotext = resolvePopplerTool("pdftotext")!;
-      const text = execFileSync(pdftotext, [outputPdf, "-"], { encoding: "utf8", timeout: CHILD_TIMEOUT_MS });
-
-      // 1. Vector text from BOTH diagrams (multi-fence + id-collision check).
-      //    The broken fence sits BETWEEN them in the fixture, so the second
-      //    diagram rendering at all proves a failed fence never poisons the
-      //    batch (D6.2): the script kept going and the next render succeeded.
-      for (const label of ["gatealphanode", "gatebetanode", "gategammanode", "gatedeltanode", "gateepsilonnode"]) {
-        expect(text).toContain(label);
-      }
-
-      // 1b. The excalidraw fence rendered through exportToSvg (vector text
-      //     from the scene file, plus its caption).
-      expect(text).toContain("excalialphanode");
-      expect(text).toContain("excalibetanode");
-      expect(text).toContain("Converted flowchart");
-
-      // 2. Rendered fences must NOT ship raw mermaid/scene JSON; render=false must.
-      expect(text).not.toContain("GATEALPHA[");
-      expect(text).not.toContain('"type":"excalidraw"');
-      expect(text).toContain("RAWKEPT");
-      expect(text).toContain("ASCODE");
-
-      // 3. The broken fence produced a visible diagnostic, not silence.
-      expect(text).toContain("Diagram failed to render (mermaid)");
-
-      // 4. CRITICAL regression: the relative image rasterizes to color.
-      const pdftoppm = resolvePopplerTool("pdftoppm")!;
-      execFileSync(pdftoppm, ["-r", "100", "-f", "1", "-l", "1", "-singlefile", outputPdf, ppmPrefix], {
-        stdio: ["ignore", "pipe", "pipe"],
-        timeout: CHILD_TIMEOUT_MS,
-      });
-      const saturated = countSaturatedPixels(`${ppmPrefix}.ppm`, SATURATION_DELTA);
-      if (saturated < SATURATED_PIXEL_FLOOR) {
-        process.stderr.write(`\n[diagram-gate] saturated pixels: ${saturated} (floor ${SATURATED_PIXEL_FLOOR})\n`);
-      }
-      expect(saturated).toBeGreaterThanOrEqual(SATURATED_PIXEL_FLOOR);
-    } finally {
-      try { fs.rmSync(workDir, { recursive: true, force: true }); } catch { /* ignore */ }
-    }
-  }, 120000);
-
-  test.skipIf(!avail.ok)("--strict fails on a missing image with a non-zero exit", () => {
-    if (!avail.ok) return;
-    const workDir = fs.mkdtempSync("/tmp/make-pdf-diagram-strict-");
-    const md = path.join(workDir, "doc.md");
-    fs.writeFileSync(md, "# T\n\n![gone](./does-not-exist.png)\n");
-    try {
-      let failed = false;
-      try {
-        execFileSync(PDF_BIN, ["generate", md, path.join(workDir, "out.pdf"), "--quiet", "--strict"], {
-          encoding: "utf8",
-            stdio: ["ignore", "pipe", "pipe"],
-          timeout: CHILD_TIMEOUT_MS,
-        });
-      } catch (err: any) {
-        failed = true;
-        const stderr = err.stderr?.toString() ?? "";
-        expect(stderr).toContain("image not found");
-      }
-      expect(failed).toBe(true);
-    } finally {
-      try { fs.rmSync(workDir, { recursive: true, force: true }); } catch { /* ignore */ }
-    }
-  }, 120000);
-
-  if (!avail.ok) {
-    // A visible skip, never a failure: ci-prereqs.test.ts is the CI tripwire for
-    // the build artifacts + poppler this gate needs; CI prints through the browse binary it builds.
-    test("diagram gate prerequisites are present", () => {
-      console.warn(`[skip] ${avail.reason}`);
-    });
-  }
-});

package/.agent/skills/gstack-make-pdf/test/e2e/emoji-gate.test.ts

@@ -1,191 +0,0 @@
-/**
- * Emoji render gate — proves emoji code points render as real color glyphs in
- * the output PDF instead of .notdef tofu boxes (▯). This is the regression gate
- * for fix/make-pdf-emoji-tofu.
- *
- * Why not just check pdftotext? Because text extraction is a FALSE oracle for
- * emoji: Skia preserves the Unicode in the text cluster even when the displayed
- * glyph is .notdef, so pdftotext can report the emoji survived on a render that
- * actually drew tofu. Verified empirically on macOS — pdftotext extracts 😀
- * regardless of whether a color font was available.
- *
- * Two assertions that DO distinguish a real render from tofu:
- *   1. pdffonts shows an emoji family embedded in the PDF (the cascade selected
- *      a real emoji font — AppleColorEmoji as Type 3 on macOS, NotoColorEmoji
- *      on Linux). Missing-fallback => no emoji font embedded.
- *   2. pdftoppm rasterizes the page and we count saturated (colored) pixels.
- *      A color-emoji render has hundreds (measured: ~1650 at 100dpi); a tofu
- *      render is a monochrome black outline on white (~0 saturated). Tolerant
- *      threshold, not an exact-pixel fixture diff, to dodge cross-platform AA
- *      and font-version variance.
- *
- * Note: pdfimages -list is intentionally NOT used — macOS embeds color emoji as
- * Type 3 fonts, so pdfimages lists nothing even on a correct render.
- *
- * Gating: runs only when the compiled binary + a browser (Aside or browse) + pdffonts +
- * pdftoppm are available AND a color-emoji font is installed to fall back to.
- * In CI (process.env.CI set) missing prerequisites are a HARD FAILURE, not a
- * skip — CI is expected to install poppler-utils + fonts-noto-color-emoji, so a
- * silent skip there would let the tofu regression ship behind a green build.
- * Local dev without those tools skips cleanly.
- */
-
-import { describe, expect, test } from "bun:test";
-import { execFileSync } from "node:child_process";
-import * as fs from "node:fs";
-import * as path from "node:path";
-
-import { resolvePopplerTool } from "../../src/pdftotext";
-import { browserAvailable, NO_BROWSER_REASON } from "../../../test/helpers/browser-available";
-
-const FIXTURE = path.resolve(__dirname, "../fixtures/emoji-gate.md");
-const ROOT = path.resolve(__dirname, "../../..");
-const PDF_BIN = path.join(ROOT, "make-pdf/dist/pdf");
-
-// Saturated-pixel floor. Measured ~1650 at 100dpi for the fixture's color
-// emoji; a tofu render yields ~0. 200 sits well clear of both.
-const SATURATED_PIXEL_FLOOR = 200;
-// A pixel is "colored" when its max-min channel spread exceeds this. Black text,
-// gray rules, and white background all stay near 0; color emoji spike high.
-const SATURATION_DELTA = 40;
-// Per-child wall-clock bound. Bun's test timeout doesn't reliably interrupt a
-// synchronous execFileSync, so each child gets its own ceiling — a wedged
-// browser session or poppler binary (or a hostile GSTACK_PDF*_BIN poppler override)
-// fails instead of hanging the whole job.
-const CHILD_TIMEOUT_MS = 60_000;
-
-/** Is a color-emoji font available for Chromium to fall back to? */
-function emojiFontAvailable(): boolean {
-  if (process.platform === "darwin") {
-    return fs.existsSync("/System/Library/Fonts/Apple Color Emoji.ttc");
-  }
-  if (process.platform === "linux") {
-    const fcMatch = Bun.which("fc-match");
-    if (!fcMatch) return false;
-    try {
-      const out = execFileSync(
-        fcMatch,
-        ["-f", "%{color}\n", ":lang=und-zsye:charset=1F600"],
-        { encoding: "utf8", timeout: CHILD_TIMEOUT_MS },
-      );
-      return /true/i.test(out);
-    } catch {
-      return false;
-    }
-  }
-  return false;
-}
-
-function prerequisitesAvailable(): { ok: true } | { ok: false; reason: string } {
-  if (!fs.existsSync(PDF_BIN)) return { ok: false, reason: `make-pdf binary missing (${PDF_BIN}). Run bun run build.` };
-  // Aside (macOS) or gstack's own browse binary (what CI builds) — a skip only when neither exists.
-  if (!browserAvailable()) return { ok: false, reason: NO_BROWSER_REASON };
-  if (!fs.existsSync(FIXTURE)) return { ok: false, reason: `fixture missing (${FIXTURE}).` };
-  if (!resolvePopplerTool("pdffonts")) return { ok: false, reason: "pdffonts not found (install poppler-utils)." };
-  if (!resolvePopplerTool("pdftoppm")) return { ok: false, reason: "pdftoppm not found (install poppler-utils)." };
-  if (!emojiFontAvailable()) return { ok: false, reason: "no color-emoji font installed; run ./setup (Linux) or install one." };
-  return { ok: true };
-}
-
-/**
- * Count pixels in a P6 (binary) PPM whose RGB channel spread exceeds delta.
- * Validates the header and buffer length so malformed/variant output is a hard
- * diagnostic (thrown), never a silently-wrong count.
- */
-function countSaturatedPixels(ppmPath: string, delta: number): number {
-  const b = fs.readFileSync(ppmPath);
-  let i = 0;
-  const skipWhitespaceAndComments = () => {
-    for (;;) {
-      while (i < b.length && (b[i] === 0x20 || b[i] === 0x0a || b[i] === 0x09 || b[i] === 0x0d)) i++;
-      if (b[i] === 0x23) { // '#': comment runs to end of line
-        while (i < b.length && b[i] !== 0x0a) i++;
-        continue;
-      }
-      break;
-    }
-  };
-  const token = (): string => {
-    skipWhitespaceAndComments();
-    const s = i;
-    while (i < b.length && b[i] !== 0x20 && b[i] !== 0x0a && b[i] !== 0x09 && b[i] !== 0x0d) i++;
-    return b.slice(s, i).toString("ascii");
-  };
-  const magic = token();
-  if (magic !== "P6") throw new Error(`expected P6 PPM, got "${magic}"`);
-  const w = Number(token());
-  const h = Number(token());
-  const maxval = Number(token());
-  if (!Number.isInteger(w) || w <= 0 || !Number.isInteger(h) || h <= 0) {
-    throw new Error(`invalid PPM dimensions: ${w}x${h}`);
-  }
-  if (maxval !== 255) {
-    // pdftoppm emits 8-bit P6 (maxval 255). 16-bit would be 2 bytes/channel and
-    // would break the byte math below — fail loudly rather than miscount.
-    throw new Error(`unexpected PPM maxval ${maxval} (expected 255)`);
-  }
-  i++; // single whitespace byte after maxval precedes the pixel block
-  const total = w * h;
-  if (b.length - i < total * 3) {
-    throw new Error(`PPM pixel buffer too short: have ${b.length - i}, need ${total * 3}`);
-  }
-  let sat = 0;
-  for (let p = 0; p < total; p++) {
-    const o = i + p * 3;
-    const r = b[o], g = b[o + 1], bl = b[o + 2];
-    if (Math.max(r, g, bl) - Math.min(r, g, bl) > delta) sat++;
-  }
-  return sat;
-}
-
-describe("emoji render gate", () => {
-  const avail = prerequisitesAvailable();
-
-  test.skipIf(!avail.ok)("emoji render as color glyphs, not tofu", () => {
-    if (!avail.ok) return; // type narrowing
-    const workDir = fs.mkdtempSync("/tmp/make-pdf-emoji-gate-");
-    const outputPdf = path.join(workDir, "out.pdf");
-    const ppmPrefix = path.join(workDir, "page");
-    const ppmPath = `${ppmPrefix}.ppm`;
-    try {
-      execFileSync(PDF_BIN, ["generate", FIXTURE, outputPdf, "--quiet"], {
-        encoding: "utf8",
-        stdio: ["ignore", "pipe", "pipe"],
-        timeout: CHILD_TIMEOUT_MS,
-      });
-      expect(fs.existsSync(outputPdf)).toBe(true);
-
-      // 1. An emoji family must be embedded — the cascade found a real emoji
-      //    font instead of falling through to .notdef.
-      const pdffonts = resolvePopplerTool("pdffonts")!;
-      const fontList = execFileSync(pdffonts, [outputPdf], { encoding: "utf8", timeout: CHILD_TIMEOUT_MS });
-      if (!/emoji/i.test(fontList)) {
-        process.stderr.write(`\n--- pdffonts ---\n${fontList}\n--- END ---\n`);
-      }
-      expect(/emoji/i.test(fontList)).toBe(true);
-
-      // 2. The page must actually rasterize to color, not a monochrome tofu box.
-      const pdftoppm = resolvePopplerTool("pdftoppm")!;
-      execFileSync(pdftoppm, ["-r", "100", "-singlefile", outputPdf, ppmPrefix], {
-        stdio: ["ignore", "pipe", "pipe"],
-        timeout: CHILD_TIMEOUT_MS,
-      });
-      expect(fs.existsSync(ppmPath)).toBe(true);
-      const saturated = countSaturatedPixels(ppmPath, SATURATION_DELTA);
-      if (saturated < SATURATED_PIXEL_FLOOR) {
-        process.stderr.write(`\n[emoji-gate] saturated pixels: ${saturated} (floor ${SATURATED_PIXEL_FLOOR})\n`);
-      }
-      expect(saturated).toBeGreaterThanOrEqual(SATURATED_PIXEL_FLOOR);
-    } finally {
-      try { fs.rmSync(workDir, { recursive: true, force: true }); } catch { /* ignore */ }
-    }
-  }, 60000);
-
-  if (!avail.ok) {
-    // A visible skip, never a failure: ci-prereqs.test.ts is the CI tripwire for
-    // the build artifacts + poppler this gate needs; CI prints through the browse binary it builds.
-    test("emoji gate prerequisites are present", () => {
-      console.warn(`[skip] ${avail.reason}`);
-    });
-  }
-});

package/.agent/skills/gstack-make-pdf/test/e2e/format-gate.test.ts

@@ -1,130 +0,0 @@
-/**
- * Output-format gate for `--to html` and `--to docx` (eng-review P7/P8),
- * driven through the compiled binary against the diagram-gate fixture
- * (diagrams + relative image + broken fence + render=false fence).
- *
- * HTML contract: ONE self-contained file — zero network references, no
- * scripts, diagrams as inline SVG, images as data URIs, screen media layer.
- *
- * DOCX contract: content fidelity, not layout fidelity — valid OOXML zip,
- * document.xml carries headings/code/diagnostics, diagrams embedded as PNG
- * media. (A .docx is a zip: unzip -p is the oracle.)
- */
-
-import { describe, expect, test } from "bun:test";
-import { execFileSync } from "node:child_process";
-import * as fs from "node:fs";
-import * as path from "node:path";
-
-import { browserAvailable, NO_BROWSER_REASON } from "../../../test/helpers/browser-available";
-
-const FIXTURE = path.resolve(__dirname, "../fixtures/diagram-gate.md");
-const ROOT = path.resolve(__dirname, "../../..");
-const PDF_BIN = path.join(ROOT, "make-pdf/dist/pdf");
-const BUNDLE = path.join(ROOT, "lib/diagram-render/dist/diagram-render.html");
-
-const CHILD_TIMEOUT_MS = 60_000;
-
-function prerequisitesAvailable(): { ok: true } | { ok: false; reason: string } {
-  if (!fs.existsSync(PDF_BIN)) return { ok: false, reason: `make-pdf binary missing (${PDF_BIN}). Run bun run build.` };
-  // Aside (macOS) or gstack's own browse binary (what CI builds) — a skip only when neither exists.
-  if (!browserAvailable()) return { ok: false, reason: NO_BROWSER_REASON };
-  if (!fs.existsSync(BUNDLE)) return { ok: false, reason: `diagram-render bundle missing (${BUNDLE}).` };
-  if (!fs.existsSync(FIXTURE)) return { ok: false, reason: `fixture missing (${FIXTURE}).` };
-  if (!Bun.which("unzip")) return { ok: false, reason: "unzip not found (needed for docx zip checks)." };
-  return { ok: true };
-}
-
-function generate(to: string, outputPath: string): void {
-  execFileSync(PDF_BIN, ["generate", FIXTURE, outputPath, "--quiet", "--to", to], {
-    encoding: "utf8",
-    stdio: ["ignore", "pipe", "pipe"],
-    timeout: CHILD_TIMEOUT_MS,
-  });
-}
-
-describe("output format gate", () => {
-  const avail = prerequisitesAvailable();
-
-  test.skipIf(!avail.ok)("--to html: single self-contained file, zero network refs", () => {
-    if (!avail.ok) return;
-    const workDir = fs.mkdtempSync("/tmp/make-pdf-format-html-");
-    const out = path.join(workDir, "out.html");
-    try {
-      generate("html", out);
-      const html = fs.readFileSync(out, "utf8");
-
-      // Zero network references and zero scripts. (The only http(s) tokens
-      // allowed are XML namespace identifiers inside inline SVG, which are
-      // never fetched.)
-      const refs = html.match(/\b(?:src|href)\s*=\s*"https?:[^"]*"/gi) ?? [];
-      expect(refs).toEqual([]);
-      expect(html).not.toMatch(/<script\b/i);
-      expect(html).not.toMatch(/<link\b/i);
-
-      // Diagrams inline as vector SVG; images inline as data URIs.
-      expect(html).toContain('<figure class="diagram"');
-      expect(html).toMatch(/<svg/i);
-      expect(html).toContain("data:image/png;base64,");
-
-      // Screen layer present; diagnostic block survived.
-      expect(html).toContain("@media screen");
-      expect(html).toContain("Diagram failed to render (mermaid)");
-    } finally {
-      try { fs.rmSync(workDir, { recursive: true, force: true }); } catch { /* ignore */ }
-    }
-  }, 120000);
-
-  test.skipIf(!avail.ok)("--to docx: valid OOXML with content + PNG diagram media", () => {
-    if (!avail.ok) return;
-    const workDir = fs.mkdtempSync("/tmp/make-pdf-format-docx-");
-    const out = path.join(workDir, "out.docx");
-    try {
-      generate("docx", out);
-
-      const listing = execFileSync("unzip", ["-l", out], { encoding: "utf8", timeout: CHILD_TIMEOUT_MS });
-      expect(listing).toContain("word/document.xml");
-      expect(listing).toContain("[Content_Types].xml");
-      // Diagram PNGs + fixture image land in media/.
-      expect((listing.match(/word\/media\/image[^\s]*\.png/g) ?? []).length).toBeGreaterThanOrEqual(2);
-
-      const xml = execFileSync("unzip", ["-p", out, "word/document.xml"], { encoding: "utf8", timeout: CHILD_TIMEOUT_MS });
-      const text = xml
-        .replace(/<[^>]+>/g, " ")
-        .replace(/&gt;/g, ">").replace(/&lt;/g, "<").replace(/&amp;/g, "&");
-
-      // Headings, render=false code, and the diagnostic all survive.
-      expect(text).toContain("Diagram Gate");
-      expect(text).toContain("RAWKEPT");
-      expect(text).toContain("Diagram failed to render");
-      // Rendered fences ship as images, not leaked source.
-      expect(text).not.toContain("GATEALPHA[");
-    } finally {
-      try { fs.rmSync(workDir, { recursive: true, force: true }); } catch { /* ignore */ }
-    }
-  }, 120000);
-
-  test.skipIf(!avail.ok)("--to rejects unknown formats with a --format disambiguation hint", () => {
-    if (!avail.ok) return;
-    let stderr = "";
-    try {
-      execFileSync(PDF_BIN, ["generate", FIXTURE, "--to", "epub"], {
-        encoding: "utf8",
-        stdio: ["ignore", "pipe", "pipe"],
-        timeout: CHILD_TIMEOUT_MS,
-      });
-    } catch (err: any) {
-      stderr = err.stderr?.toString() ?? "";
-    }
-    expect(stderr).toContain("invalid --to");
-    expect(stderr).toContain("--page-size alias");
-  }, 60000);
-
-  if (!avail.ok) {
-    // A visible skip, never a failure: ci-prereqs.test.ts is the CI tripwire for
-    // the build artifacts + poppler this gate needs; CI prints through the browse binary it builds.
-    test("format gate prerequisites are present", () => {
-      console.warn(`[skip] ${avail.reason}`);
-    });
-  }
-});