@devrik-tools/claude-gates 0.2.1 → 0.3.1

package/plugins/gates/hooks/gates/brief-before-delegate/test.mjs

@@ -1,111 +0,0 @@
-import assert from 'node:assert/strict';
-import { execFileSync } from 'node:child_process';
-import { mkdtempSync, mkdirSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { test } from 'node:test';
-import { fileURLToPath } from 'node:url';
-
-const GATE = join(dirname(fileURLToPath(import.meta.url)), 'index.mjs');
-
-function runGate(payload, { config } = {}) {
-  const project = mkdtempSync(join(tmpdir(), 'brief-before-delegate-'));
-  mkdirSync(join(project, '.git'));
-  if (config) {
-    mkdirSync(join(project, '.ai'));
-    writeFileSync(join(project, '.ai', 'config.json'), JSON.stringify(config));
-  }
-  const out = execFileSync(process.execPath, [GATE], {
-    input: JSON.stringify(payload),
-    encoding: 'utf8',
-    cwd: project,
-    // Isolate from the user's real global config: point homedir() at the temp
-    // project so the global-config fallback finds nothing (registry default).
-    env: { ...process.env, HOME: project, USERPROFILE: project },
-  });
-  return out.trim() ? JSON.parse(out.trim()) : null;
-}
-
-function delegate(prompt, extra = {}) {
-  return { tool_name: 'Agent', tool_input: { prompt, ...extra } };
-}
-function isDeny(result) {
-  return result?.hookSpecificOutput?.permissionDecision === 'deny';
-}
-const ENABLED = { config: { gates: { requireBriefBeforeDelegating: true } } };
-
-test('denies an implementation delegation with no goal/steps/criterion', () => {
-  const result = runGate(
-    delegate('Fix the login bug please, thanks.'),
-    ENABLED,
-  );
-  assert.ok(isDeny(result));
-});
-
-test('allows a complete brief with goal, steps and done-when criterion', () => {
-  const prompt = [
-    'Objetivo: fix the broken login redirect so users land on the dashboard.',
-    '',
-    'Haceres:',
-    '- update src/auth/redirect.js to use the post-login route',
-    '- add a regression test for the redirect',
-    '',
-    'Criterio: se considera hecho cuando el test de regresion pasa y el login redirige correctamente.',
-  ].join('\n');
-  assert.equal(runGate(delegate(prompt), ENABLED), null);
-});
-
-test('allows a read-only exploration prompt without a brief', () => {
-  assert.equal(
-    runGate(
-      delegate('Investiga donde esta definida la funcion de login.'),
-      ENABLED,
-    ),
-    null,
-  );
-});
-
-test('allows a read-only subagent even with an implementation verb', () => {
-  assert.equal(
-    runGate(
-      delegate('Implementa un resumen de como arreglar el login.', {
-        subagent_type: 'explore',
-      }),
-      ENABLED,
-    ),
-    null,
-  );
-});
-
-test('disabled by config: the gate does not run', () => {
-  assert.equal(
-    runGate(delegate('Fix the login bug please, thanks.'), {
-      config: { gates: { requireBriefBeforeDelegating: false } },
-    }),
-    null,
-  );
-});
-
-test('off by default when config is silent', () => {
-  assert.equal(runGate(delegate('Fix the login bug please, thanks.')), null);
-});
-
-test('project minBriefLength override changes the length threshold', () => {
-  const config = {
-    gates: {
-      requireBriefBeforeDelegating: { enabled: true, minBriefLength: 20 },
-    },
-  };
-  const prompt =
-    'Fix the login bug in the auth module now, using the same approach as before.';
-  // With the default 180-char minimum, this short prompt is denied outright for length.
-  assert.ok(isDeny(runGate(delegate(prompt), ENABLED)));
-  // With the length floor lowered to 20, it clears the length check. It still misses
-  // all three signals, which is its own hard-deny path — but the reason changes: this
-  // proves the override changed the length check specifically, by using a prompt that
-  // is long enough that only two signals are missing (a goal is present), which is a
-  // warn rather than a deny.
-  const withGoal = `Goal: ${prompt}`;
-  const result = runGate(delegate(withGoal), { config });
-  assert.ok(!isDeny(result));
-});

package/plugins/gates/hooks/gates/circuit-breaker/circuit-breaker.edge.test.mjs

@@ -1,207 +0,0 @@
-// Edge-case audit for circuit-breaker. Each test demonstrates a confirmed BUG or an OK.
-// State lives at os.tmpdir()/claude-gates/circuit-breaker/<sessionId>/state.json, keyed by
-// subagent_type. Each test uses a fresh randomUUID session id and cleans up after itself
-// so it cannot contaminate other tests or other gates.
-// Run: node --test circuit-breaker.edge.test.mjs
-import assert from 'node:assert/strict';
-import { execFileSync } from 'node:child_process';
-import { randomUUID } from 'node:crypto';
-import {
-  existsSync,
-  mkdirSync,
-  mkdtempSync,
-  readFileSync,
-  rmSync,
-  writeFileSync,
-} from 'node:fs';
-import { tmpdir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { test } from 'node:test';
-import { fileURLToPath } from 'node:url';
-
-const GATE = join(dirname(fileURLToPath(import.meta.url)), 'index.mjs');
-const STATE_ROOT = join(tmpdir(), 'claude-gates', 'circuit-breaker');
-
-function runGate(payload, { config } = {}) {
-  const project = mkdtempSync(join(tmpdir(), 'circuit-breaker-edge-'));
-  mkdirSync(join(project, '.git'));
-  if (config) {
-    mkdirSync(join(project, '.ai'));
-    writeFileSync(join(project, '.ai', 'config.json'), JSON.stringify(config));
-  }
-  const out = execFileSync(process.execPath, [GATE], {
-    input: JSON.stringify(payload),
-    encoding: 'utf8',
-    cwd: project,
-    env: { ...process.env, HOME: project, USERPROFILE: project },
-  });
-  return out.trim() ? JSON.parse(out.trim()) : null;
-}
-
-function delegate(prompt, sessionId, extra = {}) {
-  return {
-    tool_name: 'Agent',
-    session_id: sessionId,
-    tool_input: { prompt, subagent_type: 'worker-senior', ...extra },
-  };
-}
-function isDeny(result) {
-  return result?.hookSpecificOutput?.permissionDecision === 'deny';
-}
-
-const ENABLED = { config: { gates: { requireCircuitBreakerOnDelegation: true } } };
-
-function freshSession() {
-  return `edge-${randomUUID()}`;
-}
-function cleanupSession(sessionId) {
-  try {
-    rmSync(join(STATE_ROOT, sessionId), { recursive: true, force: true });
-  } catch {
-    // best-effort cleanup
-  }
-}
-
-// Deliberately avoids any OVERRIDE_PATTERN word (retry/force/insist/reintenta/forz*) --
-// a prompt describing a legitimate task can innocently contain one of those words (see
-// the dedicated test below), which is itself a confirmed bug, so the other tests here
-// use neutral wording to isolate what they are actually probing.
-const SAME_TASK_PROMPT = [
-  'Objetivo: fix the queue backoff cap in the payment worker.',
-  '',
-  'QUE SI: update src/workers/payment.js to cap the backoff.',
-].join('\n');
-
-test('FIXED: varying subagent_type per retry no longer resets the counter — the key is derived from task identity', () => {
-  // The key is now a hash of the identity signature (identityKey), not subagent_type. The
-  // exact same task retried under a different subagent_type string each time lands on the
-  // same key every time, so the breaker still trips.
-  const sessionId = freshSession();
-  try {
-    assert.equal(
-      runGate(delegate(SAME_TASK_PROMPT, sessionId, { subagent_type: 'worker' }), ENABLED),
-      null,
-    );
-    assert.equal(
-      runGate(delegate(SAME_TASK_PROMPT, sessionId, { subagent_type: 'worker-senior' }), ENABLED),
-      null,
-    );
-    assert.ok(
-      isDeny(runGate(delegate(SAME_TASK_PROMPT, sessionId, { subagent_type: 'worker2' }), ENABLED)),
-      'third identical attempt now denies even though it used yet another subagent_type: the key follows the task, not the label',
-    );
-  } finally {
-    cleanupSession(sessionId);
-  }
-});
-
-test('FIXED: forging a count field on disk no longer has any effect — there is no count field to forge', () => {
-  // The persisted shape is now a list of { signature, seenAt } occurrences with no
-  // `count` field at all. The attempt count is always recomputed by counting how many
-  // stored occurrences are similar to the CURRENT signature, so writing an arbitrary
-  // number onto the state file (there being no such field) cannot manufacture a deny.
-  const sessionId = freshSession();
-  const statePath = join(STATE_ROOT, sessionId, 'state.json');
-  try {
-    runGate(delegate(SAME_TASK_PROMPT, sessionId), ENABLED); // one real occurrence recorded
-    assert.ok(existsSync(statePath), 'sanity: state file exists after first real attempt');
-
-    const state = JSON.parse(readFileSync(statePath, 'utf8'));
-    const [key] = Object.keys(state);
-    assert.ok(key, 'sanity: a key was recorded');
-    assert.equal(
-      state[key][0].count,
-      undefined,
-      'the stored entry carries no count field to forge',
-    );
-    // Attempting to inject a forged count field has no effect: the gate never reads it.
-    state[key][0].count = 999;
-    writeFileSync(statePath, JSON.stringify(state), 'utf8');
-
-    const result = runGate(delegate(SAME_TASK_PROMPT, sessionId), ENABLED);
-    assert.equal(
-      result,
-      null,
-      'the forged count field is ignored: this is only the 2nd real occurrence, below the default threshold of 3',
-    );
-  } finally {
-    cleanupSession(sessionId);
-  }
-});
-
-test('FIXED: no session_id no longer disables the breaker — it falls back to a fixed bucket', () => {
-  // A payload with no session_id lands in the fixed NO_SESSION_BUCKET ("no-session")
-  // directory; identityKey (a hash of the prompt's own identity) still discriminates
-  // this specific task from any other task sharing that bucket.
-  const payload = {
-    tool_name: 'Agent',
-    tool_input: {
-      prompt: 'Objetivo: fix a one-off no-session edge case.\n\nQUE SI: update src/edge/no-session.js.',
-      subagent_type: 'worker-senior',
-    },
-  };
-  try {
-    assert.equal(runGate(payload, ENABLED), null);
-    assert.equal(runGate(payload, ENABLED), null);
-    assert.ok(
-      isDeny(runGate(payload, ENABLED)),
-      'third identical attempt with no session_id now denies: the fallback bucket still tracks it',
-    );
-  } finally {
-    cleanupSession('no-session');
-  }
-});
-
-test('FIXED: OVERRIDE_PATTERN no longer matches the plain word "retry" inside ordinary task vocabulary', () => {
-  // OVERRIDE_PATTERN now requires an imperative phrasing (retry anyway/it/again, force
-  // it/this/anyway, reintentalo, insisti, ...), not the bare word "retry"/"force"
-  // appearing as normal task vocabulary. A task genuinely about retry logic no longer
-  // silently defeats the breaker.
-  const sessionId = freshSession();
-  try {
-    const retryWordingPrompt = [
-      'Objetivo: fix the retry loop in the payment worker.',
-      '',
-      'QUE SI: update src/workers/payment.js to cap retries.',
-    ].join('\n');
-    assert.equal(runGate(delegate(retryWordingPrompt, sessionId), ENABLED), null);
-    assert.equal(runGate(delegate(retryWordingPrompt, sessionId), ENABLED), null);
-    assert.ok(
-      isDeny(runGate(delegate(retryWordingPrompt, sessionId), ENABLED)),
-      'third identical relaunch now denies: "retry" as ordinary task vocabulary is no longer read as an override',
-    );
-  } finally {
-    cleanupSession(sessionId);
-  }
-});
-
-test('OK: a genuine override imperative ("retry anyway") still allows and resets the counter', () => {
-  const sessionId = freshSession();
-  try {
-    assert.equal(runGate(delegate(SAME_TASK_PROMPT, sessionId), ENABLED), null);
-    assert.equal(runGate(delegate(SAME_TASK_PROMPT, sessionId), ENABLED), null);
-    assert.equal(
-      runGate(delegate(`${SAME_TASK_PROMPT}\n\nretry anyway.`, sessionId), ENABLED),
-      null,
-      'genuine override imperative still allows and resets',
-    );
-    assert.equal(
-      runGate(delegate(SAME_TASK_PROMPT, sessionId), ENABLED),
-      null,
-      'counter was reset: the same prompt again does not deny immediately',
-    );
-  } finally {
-    cleanupSession(sessionId);
-  }
-});
-
-test('OK: identical prompt+subagent_type is tripped at the default retry threshold', () => {
-  const sessionId = freshSession();
-  try {
-    assert.equal(runGate(delegate(SAME_TASK_PROMPT, sessionId), ENABLED), null);
-    assert.equal(runGate(delegate(SAME_TASK_PROMPT, sessionId), ENABLED), null);
-    assert.ok(isDeny(runGate(delegate(SAME_TASK_PROMPT, sessionId), ENABLED)));
-  } finally {
-    cleanupSession(sessionId);
-  }
-});

package/plugins/gates/hooks/gates/circuit-breaker/test.mjs

@@ -1,161 +0,0 @@
-import assert from 'node:assert/strict';
-import { execFileSync } from 'node:child_process';
-import { randomUUID } from 'node:crypto';
-import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { test } from 'node:test';
-import { fileURLToPath } from 'node:url';
-
-const GATE = join(dirname(fileURLToPath(import.meta.url)), 'index.mjs');
-const STATE_ROOT = join(tmpdir(), 'claude-gates', 'circuit-breaker');
-
-function runGate(payload, { config } = {}) {
-  const project = mkdtempSync(join(tmpdir(), 'circuit-breaker-'));
-  mkdirSync(join(project, '.git'));
-  if (config) {
-    mkdirSync(join(project, '.ai'));
-    writeFileSync(join(project, '.ai', 'config.json'), JSON.stringify(config));
-  }
-  const out = execFileSync(process.execPath, [GATE], {
-    input: JSON.stringify(payload),
-    encoding: 'utf8',
-    cwd: project,
-    // Isolate from the user's real global config: point homedir() at the temp
-    // project so the global-config fallback finds nothing (registry default).
-    env: { ...process.env, HOME: project, USERPROFILE: project },
-  });
-  return out.trim() ? JSON.parse(out.trim()) : null;
-}
-
-function delegate(prompt, sessionId, extra = {}) {
-  return {
-    tool_name: 'Agent',
-    session_id: sessionId,
-    tool_input: { prompt, subagent_type: 'worker-senior', ...extra },
-  };
-}
-function isDeny(result) {
-  return result?.hookSpecificOutput?.permissionDecision === 'deny';
-}
-
-const ENABLED = {
-  config: { gates: { requireCircuitBreakerOnDelegation: true } },
-};
-
-function freshSession() {
-  return `test-${randomUUID()}`;
-}
-
-function cleanupSession(sessionId) {
-  try {
-    rmSync(join(STATE_ROOT, sessionId), { recursive: true, force: true });
-  } catch {
-    // best-effort cleanup
-  }
-}
-
-test('cuts the same delegation retried without substantial change', () => {
-  const sessionId = freshSession();
-  try {
-    const prompt = [
-      'Objetivo: fix the circuit breaker false positive in guard scoring.',
-      '',
-      'QUE SI: update lib/scoring.mjs to fix the Dice threshold.',
-    ].join('\n');
-
-    assert.equal(runGate(delegate(prompt, sessionId), ENABLED), null);
-    assert.equal(runGate(delegate(prompt, sessionId), ENABLED), null);
-    assert.ok(isDeny(runGate(delegate(prompt, sessionId), ENABLED)));
-  } finally {
-    cleanupSession(sessionId);
-  }
-});
-
-test('does not accumulate two genuinely different tasks to the same subagent', () => {
-  const sessionId = freshSession();
-  try {
-    const taskA =
-      'Objetivo: fix the login redirect bug.\n\nQUE SI: update src/auth/redirect.js.';
-    const taskB =
-      'Objetivo: migrate the billing schema to the new payments table.\n\nQUE SI: update db/migrations/billing.sql.';
-
-    assert.equal(runGate(delegate(taskA, sessionId), ENABLED), null);
-    assert.equal(runGate(delegate(taskB, sessionId), ENABLED), null);
-    assert.equal(runGate(delegate(taskA, sessionId), ENABLED), null);
-    assert.equal(runGate(delegate(taskB, sessionId), ENABLED), null);
-  } finally {
-    cleanupSession(sessionId);
-  }
-});
-
-test('the retry/force escape hatch allows and resets the counter', () => {
-  const sessionId = freshSession();
-  try {
-    const prompt =
-      'Objetivo: fix the flaky test in the payment suite.\n\nQUE SI: stabilize test/payment.spec.js.';
-
-    assert.equal(runGate(delegate(prompt, sessionId), ENABLED), null);
-    assert.equal(runGate(delegate(prompt, sessionId), ENABLED), null);
-    assert.equal(
-      runGate(delegate(`${prompt}\n\nforce it, retry.`, sessionId), ENABLED),
-      null,
-    );
-    // Counter was reset: the same prompt again should not deny immediately.
-    assert.equal(runGate(delegate(prompt, sessionId), ENABLED), null);
-  } finally {
-    cleanupSession(sessionId);
-  }
-});
-
-test('bilingual control: the Spanish override imperative resets the counter exactly like its English equivalent', () => {
-  const sessionId = freshSession();
-  try {
-    const prompt =
-      'Objetivo: fix the flaky test in the payment suite.\n\nQUE SI: stabilize test/payment.spec.js.';
-
-    assert.equal(runGate(delegate(prompt, sessionId), ENABLED), null);
-    assert.equal(runGate(delegate(prompt, sessionId), ENABLED), null);
-    assert.equal(
-      runGate(delegate(`${prompt}\n\nreintentalo, forzalo.`, sessionId), ENABLED),
-      null,
-    );
-    assert.equal(runGate(delegate(prompt, sessionId), ENABLED), null);
-  } finally {
-    cleanupSession(sessionId);
-  }
-});
-
-test('disabled by config: the gate does not run', () => {
-  const sessionId = freshSession();
-  try {
-    const prompt =
-      'Objetivo: fix the login redirect bug.\n\nQUE SI: update src/auth/redirect.js.';
-    const disabled = {
-      config: { gates: { requireCircuitBreakerOnDelegation: false } },
-    };
-    assert.equal(runGate(delegate(prompt, sessionId), disabled), null);
-    assert.equal(runGate(delegate(prompt, sessionId), disabled), null);
-    assert.equal(runGate(delegate(prompt, sessionId), disabled), null);
-    assert.equal(runGate(delegate(prompt, sessionId), disabled), null);
-  } finally {
-    cleanupSession(sessionId);
-  }
-});
-
-test('project retryThreshold override cuts sooner', () => {
-  const sessionId = freshSession();
-  try {
-    const config = {
-      gates: {
-        requireCircuitBreakerOnDelegation: { enabled: true, retryThreshold: 2 },
-      },
-    };
-    const prompt =
-      'Objetivo: fix the login redirect bug.\n\nQUE SI: update src/auth/redirect.js.';
-    assert.equal(runGate(delegate(prompt, sessionId), { config }), null);
-    assert.ok(isDeny(runGate(delegate(prompt, sessionId), { config })));
-  } finally {
-    cleanupSession(sessionId);
-  }
-});

package/plugins/gates/hooks/gates/dependency-skills/dependency-skills.edge.test.mjs

@@ -1,69 +0,0 @@
-import assert from 'node:assert/strict';
-import { execFileSync } from 'node:child_process';
-import { mkdtempSync, mkdirSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { test } from 'node:test';
-import { fileURLToPath } from 'node:url';
-
-const GATE = join(dirname(fileURLToPath(import.meta.url)), 'index.mjs');
-
-function runGate(payload, { config, skills } = {}) {
-  const project = mkdtempSync(join(tmpdir(), 'dependency-skills-edge-'));
-  mkdirSync(join(project, '.git'));
-  if (config) {
-    mkdirSync(join(project, '.ai'));
-    writeFileSync(join(project, '.ai', 'config.json'), JSON.stringify(config));
-  }
-  if (skills) {
-    for (const name of skills) {
-      mkdirSync(join(project, '.claude', 'skills', name), { recursive: true });
-    }
-  }
-  const out = execFileSync(process.execPath, [GATE], {
-    input: JSON.stringify(payload),
-    encoding: 'utf8',
-    cwd: project,
-    env: { ...process.env, HOME: project, USERPROFILE: project },
-  });
-  return out.trim() ? JSON.parse(out.trim()) : null;
-}
-
-function isWarn(result) {
-  return result?.hookSpecificOutput?.additionalContext !== undefined;
-}
-
-// FIXED: skillNameMatches no longer does bidirectional substring matching. A skill dir must
-// EQUAL the dependency or contain it as a whole `-`-segment, so an unrelated short name like
-// "rip" no longer satisfies "stripe" — the gate now correctly warns (no false exemption).
-test('FIXED: an unrelated skill directory name that is a substring of the dependency no longer satisfies the check', () => {
-  const package_ = JSON.stringify({ dependencies: { stripe: '1.0.0' } });
-  const result = runGate(writePackageJson(package_), { skills: ['rip'] });
-  assert.ok(isWarn(result), 'unrelated skill dir "rip" must NOT satisfy dependency "stripe"; the gate warns');
-
-  function writePackageJson(content) {
-    return { tool_name: 'Write', tool_input: { file_path: '/repo/package.json', content } };
-  }
-});
-
-test('OK: a genuinely matching skill segment still exempts (stripe-payments covers stripe)', () => {
-  const package_ = JSON.stringify({ dependencies: { stripe: '1.0.0' } });
-  const result = runGate(writePackageJson(package_), { skills: ['stripe-payments'] });
-  assert.equal(result, null, 'a skill whose name contains the dependency as a segment still covers it');
-
-  function writePackageJson(content) {
-    return { tool_name: 'Write', tool_input: { file_path: '/repo/package.json', content } };
-  }
-});
-
-// FIXED: content is now read through writtenContentOf, which covers write_to_file's `text`
-// field (and every other native/MCP shape). An unreviewed new dependency written via an MCP
-// write tool is no longer silently skipped.
-test('FIXED: write_to_file with a different content field name is now checked', () => {
-  const package_ = JSON.stringify({ dependencies: { stripe: '1.0.0' } });
-  const result = runGate({
-    tool_name: 'write_to_file',
-    tool_input: { file_path: '/repo/package.json', text: package_ },
-  });
-  assert.ok(isWarn(result), 'the new dependency written via write_to_file (text field) must now be caught');
-});

package/plugins/gates/hooks/gates/dependency-skills/test.mjs

@@ -1,109 +0,0 @@
-import assert from 'node:assert/strict';
-import { execFileSync } from 'node:child_process';
-import { mkdtempSync, mkdirSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { test } from 'node:test';
-import { fileURLToPath } from 'node:url';
-
-const GATE = join(dirname(fileURLToPath(import.meta.url)), 'index.mjs');
-
-function runGate(payload, { config, skills } = {}) {
-  const project = mkdtempSync(join(tmpdir(), 'dependency-skills-'));
-  mkdirSync(join(project, '.git'));
-  if (config) {
-    mkdirSync(join(project, '.ai'));
-    writeFileSync(join(project, '.ai', 'config.json'), JSON.stringify(config));
-  }
-  if (skills) {
-    for (const name of skills) {
-      mkdirSync(join(project, '.claude', 'skills', name), { recursive: true });
-    }
-  }
-  const out = execFileSync(process.execPath, [GATE], {
-    input: JSON.stringify(payload),
-    encoding: 'utf8',
-    cwd: project,
-    // Isolate from the user's real global config: point homedir() at the temp
-    // project so the global-config fallback finds nothing (registry default).
-    env: { ...process.env, HOME: project, USERPROFILE: project },
-  });
-  return out.trim() ? JSON.parse(out.trim()) : null;
-}
-
-function writePackageJson(content) {
-  return {
-    tool_name: 'Write',
-    tool_input: { file_path: '/repo/package.json', content },
-  };
-}
-function isWarn(result) {
-  return result?.hookSpecificOutput?.additionalContext !== undefined;
-}
-
-test('warns when a new dependency has no matching skill', () => {
-  const package_ = JSON.stringify({ dependencies: { stripe: '1.0.0' } });
-  assert.ok(isWarn(runGate(writePackageJson(package_))));
-});
-
-test('allows when the dependency has a matching skill directory', () => {
-  const package_ = JSON.stringify({ dependencies: { stripe: '1.0.0' } });
-  assert.equal(
-    runGate(writePackageJson(package_), { skills: ['stripe'] }),
-    null,
-  );
-});
-
-test('allows an exempt dependency without its own API', () => {
-  const package_ = JSON.stringify({
-    dependencies: { clsx: '1.0.0', '@types/node': '1.0.0' },
-  });
-  assert.equal(runGate(writePackageJson(package_)), null);
-});
-
-test('allows a non-package.json write and unparseable content', () => {
-  assert.equal(
-    runGate({
-      tool_name: 'Write',
-      tool_input: { file_path: '/repo/src/index.js', content: 'x' },
-    }),
-    null,
-  );
-  assert.equal(
-    runGate(writePackageJson('{ "dependencies": { incomplete')),
-    null,
-  );
-});
-
-test('disabled by config: the gate does not run', () => {
-  const package_ = JSON.stringify({ dependencies: { stripe: '1.0.0' } });
-  assert.equal(
-    runGate(writePackageJson(package_), {
-      config: { gates: { requireSkillForNewDependency: false } },
-    }),
-    null,
-  );
-});
-
-test('project projectSkillsDir override is honored', () => {
-  const package_ = JSON.stringify({ dependencies: { stripe: '1.0.0' } });
-  const config = {
-    gates: {
-      requireSkillForNewDependency: {
-        enabled: true,
-        projectSkillsDir: 'custom-skills',
-      },
-    },
-  };
-  const project = mkdtempSync(join(tmpdir(), 'dependency-skills-'));
-  mkdirSync(join(project, '.git'));
-  mkdirSync(join(project, '.ai'));
-  writeFileSync(join(project, '.ai', 'config.json'), JSON.stringify(config));
-  mkdirSync(join(project, 'custom-skills', 'stripe'), { recursive: true });
-  const out = execFileSync(process.execPath, [GATE], {
-    input: JSON.stringify(writePackageJson(package_)),
-    encoding: 'utf8',
-    cwd: project,
-  });
-  assert.equal(out.trim() ? JSON.parse(out.trim()) : null, null);
-});