@desplega.ai/agent-swarm 1.149.1 → 1.151.0

package/src/tests/pi-mono-adapter.test.ts

@@ -205,7 +205,7 @@ describe("PiMonoAdapter.createSession — MCP runtime identity header", () => {
       agentId: "test-agent",
       taskId: "test-task",
       apiUrl,
-      apiKey: "test-key",
+      apiKey: "example-test-key",
       cwd: "/tmp",
       logFile: `/tmp/pi-mcp-header-test-${Date.now()}-${Math.random().toString(36).slice(2)}.log`,
     };
@@ -438,28 +438,28 @@ describe("resolveModel — OpenRouter reroute for anthropic shortnames", () => {
 
 describe("createPiRuntimeAuth", () => {
   test("threads resolved OpenRouter key into pi runtime auth without process.env", async () => {
-    const modelRuntime = await createPiRuntimeAuth({ OPENROUTER_API_KEY: "sk-or-runtime" });
+    const modelRuntime = await createPiRuntimeAuth({ OPENROUTER_API_KEY: "example-sk-or-runtime" });
 
     await expect(modelRuntime.getAuth("openrouter")).resolves.toMatchObject({
-      auth: { apiKey: "sk-or-runtime" },
+      auth: { apiKey: "example-sk-or-runtime" },
     });
   });
 
   test("supports all pi env-backed providers", async () => {
     const modelRuntime = await createPiRuntimeAuth({
-      ANTHROPIC_API_KEY: "sk-ant-runtime",
-      OPENAI_API_KEY: "sk-openai-runtime",
-      GOOGLE_API_KEY: "sk-google-runtime",
+      ANTHROPIC_API_KEY: "example-sk-ant-runtime",
+      OPENAI_API_KEY: "example-sk-openai-runtime",
+      GOOGLE_API_KEY: "example-sk-google-runtime",
     });
 
     await expect(modelRuntime.getAuth("anthropic")).resolves.toMatchObject({
-      auth: { apiKey: "sk-ant-runtime" },
+      auth: { apiKey: "example-sk-ant-runtime" },
     });
     await expect(modelRuntime.getAuth("openai")).resolves.toMatchObject({
-      auth: { apiKey: "sk-openai-runtime" },
+      auth: { apiKey: "example-sk-openai-runtime" },
     });
     await expect(modelRuntime.getAuth("google")).resolves.toMatchObject({
-      auth: { apiKey: "sk-google-runtime" },
+      auth: { apiKey: "example-sk-google-runtime" },
     });
   });
 });
@@ -641,7 +641,7 @@ function makeSessionConfig(logFile: string): ProviderSessionConfig {
     agentId: "test-agent-id",
     taskId: "test-task-id",
     apiUrl: "http://localhost:3013",
-    apiKey: "test-key",
+    apiKey: "example-test-key",
     cwd: "/tmp",
     logFile,
     iteration: 1,

package/src/tests/pi-mono-extension.test.ts

@@ -27,7 +27,7 @@ import { summarizeSessionForPi } from "../providers/pi-mono-extension";
 function makeConfig(): SwarmHooksConfig {
   return {
     apiUrl: "http://localhost:3013",
-    apiKey: "test-key",
+    apiKey: "example-test-key",
     agentId: "agent-pi-1",
     taskId: "task-pi-1",
     isLead: false,
@@ -135,7 +135,7 @@ describe("summarizeSessionForPi", () => {
     expect(lastRunSummarizeArgs!.taskContext.sourceTaskId).toBe("task-pi-1");
     expect(lastRunSummarizeArgs!.taskContext.agentId).toBe("agent-pi-1");
     expect(lastRunSummarizeArgs!.apiUrl).toBe("http://localhost:3013");
-    expect(lastRunSummarizeArgs!.apiKey).toBe("test-key");
+    expect(lastRunSummarizeArgs!.apiKey).toBe("example-test-key");
 
     const indexCalls = fetchCalls.filter((c) => c.url.endsWith("/api/memory/index"));
     expect(indexCalls.length).toBe(1);

package/src/tests/preload.ts

@@ -73,6 +73,11 @@ const testTemplateGlobals = globalThis as typeof globalThis & {
 // so removing the key just forces the fast failure path (~0ms vs ~2s of API calls).
 delete process.env.OPENROUTER_API_KEY;
 
+// Deployment flags must not change the test suite's default registration and
+// task-admission contracts. Multi-runtime suites opt in by setting this to "true"
+// and restore it themselves. Tests of the code default explicitly delete it.
+process.env.MULTI_RUNTIME_ENABLED = "false";
+
 // Fixed fixture key for deterministic test runs (32 bytes of 0x00, base64-encoded).
 // Never used in production — the key bootstrap's `:memory:` special case requires
 // an explicit env-var key, so we set one here before initDb runs. Individual tests

package/src/tests/pricing-routes.test.ts

@@ -20,7 +20,7 @@ import { CODEX_MODEL_PRICING } from "../providers/codex-models";
 import { listenOnFreePort } from "./test-net";
 
 const TEST_DB_PATH = "./test-pricing-routes.sqlite";
-const API_KEY = "test-pricing-secret-key";
+const API_KEY = "example-test-pricing-secret-key";
 
 async function removeDbFiles(path: string): Promise<void> {
   for (const suffix of ["", "-wal", "-shm"]) {

package/src/tests/profile-sync-warning.test.ts

@@ -72,7 +72,7 @@ describe("profile sync rejection session warning", () => {
       "ORIGINAL TASK PROMPT",
       {
         apiUrl: "https://api.example.test",
-        apiKey: "secret-key",
+        apiKey: "example-secret-key",
         agentId: "agent-1",
       },
       fetchImpl,
@@ -92,7 +92,7 @@ describe("profile sync rejection session warning", () => {
     const taskPrompt = "/work-on-task child-id\n\nTask: follow up";
     const followUp = await prependProfileSyncRejectionBanner(
       prependContextPreamble(taskPrompt, context),
-      { apiUrl: "https://api.example.test", apiKey: "secret-key", agentId: "agent-1" },
+      { apiUrl: "https://api.example.test", apiKey: "example-secret-key", agentId: "agent-1" },
       fetchImpl,
     );
     expect(followUp.prompt).toStartWith("/work-on-task child-id\n");
@@ -120,7 +120,7 @@ describe("profile sync rejection session warning", () => {
     const banner = await fetchProfileSyncRejectionBanner(
       {
         apiUrl: "https://api.example.test",
-        apiKey: "secret-key",
+        apiKey: "example-secret-key",
         agentId: "agent-1",
       },
       fetchImpl,
@@ -153,7 +153,7 @@ describe("profile sync rejection session warning", () => {
     const banner = await fetchProfileSyncRejectionBanner(
       {
         apiUrl: "https://api.example.test",
-        apiKey: "secret-key",
+        apiKey: "example-secret-key",
         agentId: "agent-1",
       },
       fetchImpl,
@@ -190,7 +190,7 @@ describe("profile sync rejection session warning", () => {
     const banner = await fetchProfileSyncRejectionBanner(
       {
         apiUrl: "https://api.example.test",
-        apiKey: "secret-key",
+        apiKey: "example-secret-key",
         agentId: "agent-1",
       },
       fetchImpl,
@@ -219,7 +219,7 @@ describe("profile sync rejection session warning", () => {
     }) as typeof fetch;
     const config = {
       apiUrl: "https://api.example.test",
-      apiKey: "secret-key",
+      apiKey: "example-secret-key",
       agentId: "agent-1",
       claudeMdPath: WORKSPACE_CLAUDE_MD_PATH,
     };
@@ -266,7 +266,7 @@ describe("profile sync rejection session warning", () => {
     const banner = await fetchProfileSyncRejectionBanner(
       {
         apiUrl: "https://api.example.test",
-        apiKey: "secret-key",
+        apiKey: "example-secret-key",
         agentId: "agent-1",
       },
       fetchImpl,
@@ -282,7 +282,7 @@ describe("profile sync rejection session warning", () => {
     const banner = await fetchProfileSyncRejectionBanner(
       {
         apiUrl: "https://api.example.test",
-        apiKey: "secret-key",
+        apiKey: "example-secret-key",
         agentId: "agent-1",
       },
       (async () => new Response("unavailable", { status: 503 })) as typeof fetch,

package/src/tests/profile-sync.test.ts

@@ -97,7 +97,7 @@ describe("profile divergence audit", () => {
       {
         agentId: "agent-1",
         apiUrl: "https://api.example.test",
-        apiKey: "secret-key",
+        apiKey: "example-secret-key",
         claudeMdPath: WORKSPACE_CLAUDE_MD_PATH,
       },
       { fetchImpl, readFile },
@@ -131,7 +131,7 @@ describe("profile divergence audit", () => {
       {
         agentId: "agent-codex",
         apiUrl: "https://api.example.test",
-        apiKey: "secret-key",
+        apiKey: "example-secret-key",
       },
       { fetchImpl, readFile },
     );
@@ -153,7 +153,7 @@ describe("profile divergence audit", () => {
         {
           agentId: "agent-unregistered",
           apiUrl: "https://api.example.test",
-          apiKey: "secret-key",
+          apiKey: "example-secret-key",
         },
         { fetchImpl, readFile: async () => undefined },
       ),
@@ -172,7 +172,7 @@ describe("profile divergence audit", () => {
       {
         agentId: "agent-unset",
         apiUrl: "https://api.example.test",
-        apiKey: "secret-key",
+        apiKey: "example-secret-key",
         claudeMdPath: WORKSPACE_CLAUDE_MD_PATH,
       },
       { fetchImpl, readFile },
@@ -415,7 +415,7 @@ describe("postProfileUpdate (non-2xx is surfaced, not swallowed)", () => {
   const opts = {
     agentId: "agent-1",
     apiUrl: "https://api.example.test",
-    apiKey: "secret-key",
+    apiKey: "example-secret-key",
   };
   const payload = {
     label: "setup",
@@ -477,7 +477,7 @@ describe("postProfileUpdate (non-2xx is surfaced, not swallowed)", () => {
     expect(capturedUrl).toBe("https://api.example.test/api/agents/agent-1/profile");
     expect(capturedInit?.method).toBe("PUT");
     const headers = capturedInit?.headers as Record<string, string>;
-    expect(headers.Authorization).toBe("Bearer secret-key");
+    expect(headers.Authorization).toBe("Bearer example-secret-key");
     expect(headers["X-Agent-ID"]).toBe("agent-1");
     expect(JSON.parse(String(capturedInit?.body))).toEqual(payload.body);
   });
@@ -498,7 +498,7 @@ describe("syncProfileFilesToServer (orchestration is non-fatal)", () => {
       await syncProfileFilesToServer({
         agentId: "agent-1",
         apiUrl: "https://api.example.test",
-        apiKey: "secret-key",
+        apiKey: "example-secret-key",
         changeSource: "session_sync",
         fields: ["claude"],
         claudeMdLock: { path: lockPath, waitMs: 100 },
@@ -522,7 +522,7 @@ describe("syncProfileFilesToServer (orchestration is non-fatal)", () => {
         syncProfileFilesToServer({
           agentId: "agent-1",
           apiUrl: "https://api.example.test",
-          apiKey: "secret-key",
+          apiKey: "example-secret-key",
           changeSource: "session_sync",
           // No files on a CI box → typically no payloads; still must never throw.
           claudeMdLock: { path: join(tmpdir(), `claude-md-${crypto.randomUUID()}.lock`) },

package/src/tests/prompt-template-session.test.ts

@@ -227,7 +227,7 @@ describe("Session templates: MUST pointers", () => {
   test("the lead contract names the delegation tools", () => {
     const result = resolveTemplate("system.agent.lead", {});
     expect(result.text).toContain(
-      "`send-task`: include `routingReason` with `agentId`. Read results via `get-task-details`.",
+      "`send-task`: include `routingReason` and `routingNote` (at least 10 characters after trim, maximum 200) with `agentId`. Read results via `get-task-details`.",
     );
   });
 
@@ -264,17 +264,48 @@ describe("Session templates: composite resolution", () => {
       expect(result.text).not.toContain("{{@template[");
       expect(result.text).toContain("You are Ada,");
       expect(result.text).toContain("composite-agent-001");
-      // Every provider receives the same reply limits, skill routing, and exceptions.
+      // Bind the budget to task output in the shared writing block itself,
+      // so a budget elsewhere in the composite cannot mask a reply-only rule.
+      const writingBlock = result.text.split("## How you write\n")[1]?.split("\n## ")[0];
+      expect(writingBlock).toContain("task output (`output` or a remote final message)");
+      expect(writingBlock).toContain(
+        "Routine replies and free-text task output: under 120 words by default",
+      );
+      expect(writingBlock).toContain("requested depth, enumerated results, essential evidence");
+      expect(writingBlock).toContain("longer output required by the task's `outputSchema`");
+      expect(writingBlock).toContain("Preserve investigation and required artifacts");
+      expect(writingBlock).toContain(
+        "Schema exemptions apply to `outputSchema`-constrained completions",
+      );
+      expect(writingBlock).toContain("free-text `output` follows the target");
+      expect(writingBlock).toContain("link documents instead of inlining them");
+      expect(writingBlock).not.toContain("schema-defined output");
       expect(result.text).toContain("Simple replies: one to three sentences");
-      expect(result.text).toContain("Routine replies: under 120 words");
-      expect(result.text).toContain("Use more detail for requested depth or essential evidence");
       expect(result.text).toContain("Use the `comms` skill when available");
       expect(result.text).toContain("Follow the current request and Requester Profile");
-      expect(result.text).toContain("Do not shorten investigation, required artifacts");
       expect(result.text).toContain("Output schemas and channel delivery rules");
     });
   }
 
+  for (const eventType of ["system.agent.worker", "system.agent.worker.remote"]) {
+    test(`${eventType} pairs completion requirements with the output budget`, () => {
+      const { text } = resolveTemplate(eventType, {});
+      expect(text).toContain("under 120 words by default");
+      expect(text).toContain("Link documents instead of inlining them; omit process narration");
+      expect(text).toContain("under 120 words by default, with the exceptions in How you write");
+    });
+  }
+
+  for (const eventType of ["system.agent.slack", "system.agent.scripts_only_mode.slack"]) {
+    test(`${eventType} applies the output budget to the engine-owned card`, () => {
+      const { text } = resolveTemplate(eventType, { slackChannelId: "C123", slackThreadTs: "1.2" });
+      expect(text).toContain("The outcome card publishes your `output` verbatim");
+      expect(text).toContain(
+        "Keep free-text `output` under 120 words by default, with the exceptions in How you write",
+      );
+    });
+  }
+
   test("lead and worker differ only in the contract block", () => {
     const lead = resolveTemplate("system.session.lead", { ...vars, role: "lead" }).text;
     const worker = resolveTemplate("system.session.worker", vars).text;

package/src/tests/provider-process-group.test.ts

@@ -3,7 +3,7 @@ import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { ClaudeAdapter } from "../providers/claude-adapter";
-import type { ProviderSessionConfig } from "../providers/types";
+import type { ProviderSession, ProviderSessionConfig } from "../providers/types";
 import { CHILD_PROCESS_TEST_BUDGET_MS } from "./test-proc";
 
 function processExists(pid: number): boolean {
@@ -31,6 +31,18 @@ async function waitForProcessGone(pid: number, timeoutMs: number): Promise<boole
   return true;
 }
 
+async function waitForPidFile(path: string, timeoutMs: number): Promise<number> {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    if (await Bun.file(path).exists()) {
+      const pid = Number(await Bun.file(path).text());
+      if (Number.isInteger(pid) && pid > 0) return pid;
+    }
+    await Bun.sleep(20);
+  }
+  throw new Error(`Timed out waiting for PID file: ${path}`);
+}
+
 const PROCESS_GONE_TIMEOUT_MS = 5_000;
 
 describe("provider process groups", () => {
@@ -44,6 +56,7 @@ describe("provider process groups", () => {
       const grandchildPidPath = join(dir, "grandchild.pid");
       const logFile = join(dir, "claude.jsonl");
       let grandchildPid: number | undefined;
+      let session: ProviderSession | undefined;
 
       await writeFile(
         fixturePath,
@@ -75,21 +88,23 @@ describe("provider process groups", () => {
         logFile,
         env: {
           PATH: process.env.PATH ?? "/usr/bin:/bin",
-          CLAUDE_CODE_OAUTH_TOKEN: "test-oauth-token",
+          CLAUDE_CODE_OAUTH_TOKEN: "example-test-oauth-token",
           CLAUDE_BINARY: `bun ${fixturePath}`,
+          CLAUDE_TRANSPORT: "cli",
           GRANDCHILD_PID_FILE: grandchildPidPath,
         },
       };
 
       try {
-        const session = await new ClaudeAdapter(async () => {}).createSession(config);
+        session = await new ClaudeAdapter(async () => {}).createSession(config);
+        grandchildPid = await waitForPidFile(grandchildPidPath, PROCESS_GONE_TIMEOUT_MS);
         const result = await session.waitForCompletion();
-        grandchildPid = Number(await Bun.file(grandchildPidPath).text());
 
         expect(result.exitCode).toBe(0);
         expect(Number.isInteger(grandchildPid)).toBe(true);
         expect(await waitForProcessGone(grandchildPid, PROCESS_GONE_TIMEOUT_MS)).toBe(true);
       } finally {
+        await session?.abort();
         if (grandchildPid && processExists(grandchildPid)) {
           try {
             process.kill(grandchildPid, "SIGKILL");
@@ -102,4 +117,80 @@ describe("provider process groups", () => {
     },
     CHILD_PROCESS_TEST_BUDGET_MS,
   );
+
+  posixTest(
+    "Claude adapter bounds a hanging version probe",
+    async () => {
+      const dir = await mkdtemp(join(tmpdir(), "claude-version-probe-"));
+      const fixturePath = join(dir, "fake-claude.ts");
+      const versionChildPidPath = join(dir, "version-child.pid");
+      const logFile = join(dir, "claude.jsonl");
+      let session: ProviderSession | undefined;
+      let versionChildPid: number | undefined;
+
+      await writeFile(
+        fixturePath,
+        `if (Bun.argv.includes("--version")) {
+  const child = Bun.spawn(["sh", "-c", "trap '' TERM; while :; do sleep 1; done"], {
+    stdin: "ignore",
+    stdout: "inherit",
+    stderr: "inherit",
+  });
+  child.unref();
+  await Bun.write(process.env.VERSION_CHILD_PID_FILE!, String(child.pid));
+  await Bun.sleep(60_000);
+} else {
+  console.log(JSON.stringify({ type: "result", total_cost_usd: 0, is_error: false }));
+}
+`,
+      );
+
+      const config: ProviderSessionConfig = {
+        prompt: "finish immediately",
+        systemPrompt: "",
+        model: "sonnet",
+        role: "worker",
+        agentId: "test-agent-id",
+        taskId: crypto.randomUUID(),
+        apiUrl: "",
+        apiKey: "",
+        cwd: dir,
+        logFile,
+        env: {
+          PATH: process.env.PATH ?? "/usr/bin:/bin",
+          CLAUDE_CODE_OAUTH_TOKEN: "test-oauth-token",
+          CLAUDE_BINARY: `bun ${fixturePath}`,
+          CLAUDE_TRANSPORT: "cli",
+          VERSION_CHILD_PID_FILE: versionChildPidPath,
+        },
+      };
+
+      const startedAt = performance.now();
+      try {
+        session = await new ClaudeAdapter(async () => {}).createSession(config);
+        const sessionCreationMs = performance.now() - startedAt;
+        versionChildPid = await waitForPidFile(versionChildPidPath, PROCESS_GONE_TIMEOUT_MS);
+
+        expect(sessionCreationMs).toBeLessThan(PROCESS_GONE_TIMEOUT_MS);
+        expect(await waitForProcessGone(versionChildPid, PROCESS_GONE_TIMEOUT_MS)).toBe(true);
+        expect(session.deliverSteering).toBeUndefined();
+        const result = await session.waitForCompletion();
+        expect(result.exitCode).toBe(0);
+      } finally {
+        await session?.abort();
+        if (!versionChildPid && (await Bun.file(versionChildPidPath).exists())) {
+          versionChildPid = Number(await Bun.file(versionChildPidPath).text());
+        }
+        if (versionChildPid && processExists(versionChildPid)) {
+          try {
+            process.kill(versionChildPid, "SIGKILL");
+          } catch {
+            // Already reaped.
+          }
+        }
+        await rm(dir, { recursive: true, force: true });
+      }
+    },
+    CHILD_PROCESS_TEST_BUDGET_MS,
+  );
 });

package/src/tests/providers/pi-cost.test.ts

@@ -85,7 +85,7 @@ function makeConfig(logFile: string): ProviderSessionConfig {
     agentId: "agent-1",
     taskId: "task-1",
     apiUrl: "http://localhost:0",
-    apiKey: "test-key",
+    apiKey: "example-test-key",
     cwd: "/tmp",
     logFile,
   };

package/src/tests/queue-stall-alarm.test.ts

@@ -213,7 +213,7 @@ describe("queue stall alarm", () => {
   });
 
   test("scrubs secrets from notification failures before logging", () => {
-    const token = "ghp_1234567890abcdefABCDEF1234567890ABCD";
+    const token = "example-ghp_1234567890abcdefABCDEF1234567890ABCD";
 
     const output = _test.formatCheckFailure(new Error(`Slack rejected token ${token}`));
 

package/src/tests/rbac-admission.test.ts

@@ -22,11 +22,11 @@ import { handleFs } from "../http/fs";
 import { handleMcpOAuth } from "../http/mcp-oauth";
 import { handleTasks } from "../http/tasks";
 import { getPathSegments, parseQueryParams } from "../http/utils";
-import { decideAdmission, decideToolAdmission, type PermissionVerb } from "../rbac";
+import { decideAdmission, decideToolAdmission, isRbacEnabled, type PermissionVerb } from "../rbac";
 import { listenOnFreePort } from "./test-net";
 
 const TEST_DB_PATH = "./test-rbac-admission.sqlite";
-const API_KEY = "test-api-key";
+const API_KEY = "example-test-api-key";
 const LEAD_ID = "aaaa7000-0000-4000-8000-000000000001";
 const ACTOR: IdentityActor = { kind: "operator", id: "op:test" };
 const MISSING_TASK_ID = "00000000-0000-4000-8000-000000000000";
@@ -149,7 +149,7 @@ beforeEach(async () => {
   closeDb();
   await removeDbFiles();
 
-  delete process.env.RBAC_ENABLED;
+  process.env.RBAC_ENABLED = "false";
   delete process.env.RBAC_AUDIT_DISABLED;
   delete process.env.RBAC_AUDIT_RETENTION_DAYS;
 
@@ -387,7 +387,7 @@ describe("handleCore admission wiring", () => {
     expect(admin.status).not.toBe(403);
     expect(admin.status).toBe(404);
 
-    delete process.env.RBAC_ENABLED;
+    process.env.RBAC_ENABLED = "false";
 
     const flagOff = await api(port, "GET", "/api/mcp-oauth/missing-server/authorize-url", {
       bearer: requesterToken,
@@ -482,3 +482,18 @@ describe("handleCore admission wiring", () => {
     });
   });
 });
+
+test("RBAC defaults on and accepts explicit opt-outs", () => {
+  const previous = process.env.RBAC_ENABLED;
+  try {
+    delete process.env.RBAC_ENABLED;
+    expect(isRbacEnabled()).toBe(true);
+    for (const value of ["false", "0"]) {
+      process.env.RBAC_ENABLED = value;
+      expect(isRbacEnabled()).toBe(false);
+    }
+  } finally {
+    if (previous === undefined) delete process.env.RBAC_ENABLED;
+    else process.env.RBAC_ENABLED = previous;
+  }
+});

package/src/tests/rbac-charact-http.test.ts

@@ -50,7 +50,7 @@ import { listenOnFreePort } from "./test-net";
 
 const TEST_DB_PATH = "./test-rbac-charact-http.sqlite";
 const TEST_FS_DIR = "./test-rbac-charact-http-data";
-const API_KEY = "test-rbac-http-key";
+const API_KEY = "example-test-rbac-http-key";
 const ACTOR: IdentityActor = { kind: "operator", id: "test" };
 
 async function removeDbFiles(path: string): Promise<void> {

package/src/tests/rbac-e2e-helpers.ts

@@ -20,7 +20,7 @@ import { getFreePort } from "./test-net";
 export { getFreePort };
 
 export const REPO_ROOT = join(import.meta.dir, "../..");
-export const E2E_API_KEY = "rbac-e2e-key";
+export const E2E_API_KEY = "example-rbac-e2e-key";
 
 const SERVER_LOG_TAIL_BYTES = 8 * 1024;
 

package/src/tests/rbac-engine.test.ts

@@ -81,6 +81,9 @@ const LEAD_ONLY_VERBS: PermissionVerb[] = [
   "script.api.delete",
 ];
 
+const OPERATOR_ONLY_VERBS: PermissionVerb[] = ["extension.activate"];
+const LEAD_OR_OPERATOR_VERBS: PermissionVerb[] = ["extension.write"];
+
 const LEAD_OR_RESOURCE_OWNER_VERBS: PermissionVerb[] = [
   "memory.edit.any",
   "skill.update.any",
@@ -171,6 +174,8 @@ describe("verb-group partition", () => {
       ...ANY_AUTHENTICATED_VERBS,
       ...REQUESTER_OWNS_TASK_VERBS,
       ...COMPOSITE_VERBS,
+      ...OPERATOR_ONLY_VERBS,
+      ...LEAD_OR_OPERATOR_VERBS,
     ];
     expect(new Set(grouped).size).toBe(grouped.length);
     expect(grouped.sort()).toEqual([...PERMISSION_VERBS].sort());
@@ -216,6 +221,40 @@ describe("lead-only verbs", () => {
   });
 });
 
+describe("operator-or-user verbs", () => {
+  const expected: Expected = {
+    lead: false,
+    worker: false,
+    ownerWorker: false,
+    creatorWorker: false,
+    userRequester: true,
+    foreignUser: true,
+    operator: true,
+  };
+  for (const verb of OPERATOR_ONLY_VERBS) {
+    test(`${verb}: operator or user allowed`, () => {
+      expectDecisions(verb, { kind: "none" }, expected);
+    });
+  }
+});
+
+describe("lead-or-operator-or-user verbs", () => {
+  const expected: Expected = {
+    lead: true,
+    worker: false,
+    ownerWorker: false,
+    creatorWorker: false,
+    userRequester: true,
+    foreignUser: true,
+    operator: true,
+  };
+  for (const verb of LEAD_OR_OPERATOR_VERBS) {
+    test(`${verb}: lead, operator, or user allowed`, () => {
+      expectDecisions(verb, { kind: "none" }, expected);
+    });
+  }
+});
+
 describe("lead-or-resource-owner verbs", () => {
   const expected: Expected = {
     lead: true,

package/src/tests/realtime-room-auth.test.ts

@@ -44,7 +44,7 @@ describe("realtime room namespace guards", () => {
 
   test("allows page writes for user and operator contexts when RBAC is disabled", async () => {
     const previous = process.env.RBAC_ENABLED;
-    delete process.env.RBAC_ENABLED;
+    process.env.RBAC_ENABLED = "false";
     try {
       await expect(
         authorizeRoomNamespace(

package/src/tests/realtime-room-surfaces.test.ts

@@ -23,7 +23,7 @@ import { registerRoomDecodeTool } from "../tools/rooms";
 import { listenOnFreePort } from "./test-net";
 
 const TEST_DB_PATH = "./test-realtime-room-surfaces.sqlite";
-const API_KEY = "test-realtime-room-key";
+const API_KEY = "example-test-realtime-room-key";
 
 async function removeDbFiles(): Promise<void> {
   for (const suffix of ["", "-wal", "-shm"]) {