@givolt/i3-composer-agent 2.2.2 → 2.3.0

package/package.json

@@ -55,6 +55,7 @@
     "evals/cases/i3-source-driven-development.json",
     "evals/cases/i3-spec-driven-development.json",
     "evals/cases/i3-test-driven-development.json",
+    "evals/cases/i3-ui-prototype.json",
     "evals/cases/i3-using-agent-skills.json",
     "evals/fixtures/i3-api-and-interface-design/service-brief.md",
     "evals/fixtures/i3-browser-testing-with-devtools/README.md",
@@ -72,6 +73,8 @@
     "evals/fixtures/i3-debugging-and-error-recovery/time-pressure.md",
     "evals/fixtures/i3-deprecation-and-migration/api-inventory.md",
     "evals/fixtures/i3-documentation-and-adrs/decision-context.md",
+    "evals/fixtures/i3-documentation-and-adrs/prose-review/README.md",
+    "evals/fixtures/i3-documentation-and-adrs/prose-review/queue.js",
     "evals/fixtures/i3-doubt-driven-development/migration-plan.md",
     "evals/fixtures/i3-frontend-ui-engineering/Button.tsx",
     "evals/fixtures/i3-frontend-ui-engineering/design-system.md",
@@ -97,6 +100,7 @@
     "evals/fixtures/i3-test-driven-development/package.json",
     "evals/fixtures/i3-test-driven-development/src/split.js",
     "evals/fixtures/i3-test-driven-development/test/split.test.js",
+    "evals/fixtures/i3-ui-prototype/business-brief.md",
     "evals/fixtures/i3-using-agent-skills/incident.md",
     "evals/fixtures/incremental-implementation-pressure/draft-export.js",
     "evals/fixtures/incremental-implementation-pressure/scenario.md",
@@ -113,6 +117,11 @@
     "evals/plugin/code-review-stays-quiet/graders/not-fired.md",
     "evals/plugin/code-review-stays-quiet/graders/tdd-fired.md",
     "evals/plugin/code-review-stays-quiet/prompt.md",
+    "evals/plugin/tdd-fires-on-pasted-bug/graders/failing-test-first.md",
+    "evals/plugin/tdd-fires-on-pasted-bug/graders/skill-fired.md",
+    "evals/plugin/tdd-fires-on-pasted-bug/prompt.md",
+    "evals/plugin/tdd-stays-quiet-on-debug/graders/not-fired.md",
+    "evals/plugin/tdd-stays-quiet-on-debug/prompt.md",
     "evals/skill-impact.md",
     "evals/zh-CN/cases/i3-api-and-interface-design.json",
     "evals/zh-CN/cases/i3-browser-testing-with-devtools.json",
@@ -138,15 +147,10 @@
     "evals/zh-CN/cases/i3-source-driven-development.json",
     "evals/zh-CN/cases/i3-spec-driven-development.json",
     "evals/zh-CN/cases/i3-test-driven-development.json",
+    "evals/zh-CN/cases/i3-ui-prototype.json",
     "evals/zh-CN/cases/i3-using-agent-skills.json",
-    "scripts/run-evals.js",
-    "scripts/validate-skills.js",
-    "scripts/validate-versions.js",
-    "scripts/validate-commands.js",
-    "scripts/validate-reference-links.js",
-    "scripts/validate-artifact-paths.js",
-    "scripts/lib/skill-lint.js",
     "docs/adoption-guide.md",
+    "docs/advanced-per-agent-configuration.md",
     "docs/agents.md",
     "docs/antigravity-setup.md",
     "docs/codebuddy-setup.md",
@@ -163,12 +167,31 @@
     "docs/workbuddy-setup.md",
     "plugin.json",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "scripts/enterprise-template-test.js",
+    "scripts/floor-guard-reference-test.js",
+    "scripts/lib/skill-lint-test.js",
+    "scripts/lib/skill-lint.js",
+    "scripts/run-evals-test.js",
+    "scripts/run-evals.js",
+    "scripts/run-regressions.js",
+    "scripts/template-adapter-test.js",
+    "scripts/ui-prototype-test.js",
+    "scripts/validate-artifact-paths-test.js",
+    "scripts/validate-artifact-paths.js",
+    "scripts/validate-commands-test.js",
+    "scripts/validate-commands.js",
+    "scripts/validate-reference-links-test.js",
+    "scripts/validate-reference-links.js",
+    "scripts/validate-skills.js",
+    "scripts/validate-versions-test.js",
+    "scripts/validate-versions.js"
   ],
   "scripts": {
     "validate": "node scripts/validate-skills.js && node scripts/validate-versions.js && node scripts/validate-commands.js && node scripts/validate-reference-links.js && node scripts/validate-artifact-paths.js",
     "eval": "node scripts/run-evals.js",
-    "test": "npm run validate && npm run eval -- --min-rank1 95",
+    "test": "npm run validate && npm run eval -- --min-rank1 95 && npm run test:regression",
+    "test:regression": "node scripts/run-regressions.js",
     "prepack": "npm run validate"
   },
   "keywords": [
@@ -217,6 +240,7 @@
       "evals/cases/i3-source-driven-development.json",
       "evals/cases/i3-spec-driven-development.json",
       "evals/cases/i3-test-driven-development.json",
+      "evals/cases/i3-ui-prototype.json",
       "evals/cases/i3-using-agent-skills.json",
       "evals/fixtures/i3-api-and-interface-design/service-brief.md",
       "evals/fixtures/i3-browser-testing-with-devtools/README.md",
@@ -234,6 +258,8 @@
       "evals/fixtures/i3-debugging-and-error-recovery/time-pressure.md",
       "evals/fixtures/i3-deprecation-and-migration/api-inventory.md",
       "evals/fixtures/i3-documentation-and-adrs/decision-context.md",
+      "evals/fixtures/i3-documentation-and-adrs/prose-review/README.md",
+      "evals/fixtures/i3-documentation-and-adrs/prose-review/queue.js",
       "evals/fixtures/i3-doubt-driven-development/migration-plan.md",
       "evals/fixtures/i3-frontend-ui-engineering/Button.tsx",
       "evals/fixtures/i3-frontend-ui-engineering/design-system.md",
@@ -259,6 +285,7 @@
       "evals/fixtures/i3-test-driven-development/package.json",
       "evals/fixtures/i3-test-driven-development/src/split.js",
       "evals/fixtures/i3-test-driven-development/test/split.test.js",
+      "evals/fixtures/i3-ui-prototype/business-brief.md",
       "evals/fixtures/i3-using-agent-skills/incident.md",
       "evals/fixtures/incremental-implementation-pressure/draft-export.js",
       "evals/fixtures/incremental-implementation-pressure/scenario.md",
@@ -275,6 +302,11 @@
       "evals/plugin/code-review-stays-quiet/graders/not-fired.md",
       "evals/plugin/code-review-stays-quiet/graders/tdd-fired.md",
       "evals/plugin/code-review-stays-quiet/prompt.md",
+      "evals/plugin/tdd-fires-on-pasted-bug/graders/failing-test-first.md",
+      "evals/plugin/tdd-fires-on-pasted-bug/graders/skill-fired.md",
+      "evals/plugin/tdd-fires-on-pasted-bug/prompt.md",
+      "evals/plugin/tdd-stays-quiet-on-debug/graders/not-fired.md",
+      "evals/plugin/tdd-stays-quiet-on-debug/prompt.md",
       "evals/skill-impact.md",
       "evals/zh-CN/cases/i3-api-and-interface-design.json",
       "evals/zh-CN/cases/i3-browser-testing-with-devtools.json",
@@ -300,15 +332,10 @@
       "evals/zh-CN/cases/i3-source-driven-development.json",
       "evals/zh-CN/cases/i3-spec-driven-development.json",
       "evals/zh-CN/cases/i3-test-driven-development.json",
+      "evals/zh-CN/cases/i3-ui-prototype.json",
       "evals/zh-CN/cases/i3-using-agent-skills.json",
-      "scripts/run-evals.js",
-      "scripts/validate-skills.js",
-      "scripts/validate-versions.js",
-      "scripts/validate-commands.js",
-      "scripts/validate-reference-links.js",
-      "scripts/validate-artifact-paths.js",
-      "scripts/lib/skill-lint.js",
       "docs/adoption-guide.md",
+      "docs/advanced-per-agent-configuration.md",
       "docs/agents.md",
       "docs/antigravity-setup.md",
       "docs/codebuddy-setup.md",
@@ -326,10 +353,28 @@
       "plugin.json",
       "package.json",
       "README.md",
-      "LICENSE"
+      "LICENSE",
+      "scripts/enterprise-template-test.js",
+      "scripts/floor-guard-reference-test.js",
+      "scripts/lib/skill-lint-test.js",
+      "scripts/lib/skill-lint.js",
+      "scripts/run-evals-test.js",
+      "scripts/run-evals.js",
+      "scripts/run-regressions.js",
+      "scripts/template-adapter-test.js",
+      "scripts/ui-prototype-test.js",
+      "scripts/validate-artifact-paths-test.js",
+      "scripts/validate-artifact-paths.js",
+      "scripts/validate-commands-test.js",
+      "scripts/validate-commands.js",
+      "scripts/validate-reference-links-test.js",
+      "scripts/validate-reference-links.js",
+      "scripts/validate-skills.js",
+      "scripts/validate-versions-test.js",
+      "scripts/validate-versions.js"
     ]
   },
-  "version": "2.2.2",
+  "version": "2.3.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/49780522/i3-composer-agent.git"

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "i3-composer-agent",
-  "version": "2.2.2",
+  "version": "2.3.0",
   "description": "覆盖需求、计划、开发、测试、审查与发布的软件工程技能，默认使用简体中文。",
   "homepage": "https://github.com/49780522/i3-composer-agent",
   "repository": "https://github.com/49780522/i3-composer-agent"

package/references/performance-checklist.md

@@ -209,14 +209,16 @@ npx vite-bundle-visualizer
 
 # Check bundle size
 npx bundlesize
+```
 
-# Web Vitals in code
+```javascript
+// Web Vitals in code
 import { onLCP, onINP, onCLS } from 'web-vitals';
 onLCP(console.log);
 onINP(console.log);
 onCLS(console.log);
 
-# INP with interaction-level detail (attribution build)
+// INP with interaction-level detail (attribution build)
 import { onINP } from 'web-vitals/attribution';
 onINP(({ value, attribution }) => {
   const { interactionTarget, inputDelay, processingDuration, presentationDelay } = attribution;

package/scripts/enterprise-template-test.js

@@ -0,0 +1,139 @@
+'use strict';
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const os = require('node:os');
+const crypto = require('node:crypto');
+const { spawn, spawnSync } = require('node:child_process');
+const install = path.join(__dirname, 'lib/installation.js');
+const skills = fs.existsSync(install) ? require(install).loadInstallation().skillsDirectory : path.resolve(__dirname, '../skills');
+const skill = path.join(skills, 'i3-ui-prototype');
+const lib = require(path.join(skill, 'scripts/prototype-lib.cjs'));
+const read = (root, file) => JSON.parse(fs.readFileSync(path.join(root, file), 'utf8'));
+function project(t) {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'enterprise-template-'));
+  t.after(() => fs.rmSync(root, { recursive: true, force: true }));
+  return root;
+}
+function initialize(t, options = {}) {
+  return lib.initPrototype({ project: project(t), id: 'enterprise-demo', expertMode: 'template', purpose: 'template-review', ...options }).directory;
+}
+test('four prototype families expose the EASEL enterprise template and explicitly defer the other three', () => {
+  const entries = lib.listTemplates();
+  assert.deepEqual(entries.map(x => x.id), ['enterprise-admin', 'ai-workbench', 'digital-twin', 'mobile-app']);
+  assert.deepEqual(entries.filter(x => x.availability === 'available').map(x => x.id), ['enterprise-admin']);
+  for (const entry of entries.slice(1)) assert.equal(entry.availability, 'planned');
+});
+test('default enterprise initializer preserves the complete EASEL runtime and its review scope', t => {
+  const dir = initialize(t), metadata = read(dir, 'prototype.json');
+  assert.equal(metadata.template.id, 'enterprise-admin');
+  assert.equal(metadata.purpose, 'template-review');
+  assert.equal(metadata.review.status, 'pending-review');
+  const inspection = lib.checkPrototype(dir);
+  assert.equal(inspection.status, 'passed', JSON.stringify(inspection));
+  const routes = read(dir, 'app/routes.json').filter(x => x.component && !x.path.startsWith('/module/'));
+  assert.equal(routes.length, 37);
+  assert.equal(new Set(routes.map(x => x.component)).size, 34);
+  for (const file of ['app/runtime/dom.js', 'app/styles/antdv.css', 'app/src/shell/ConsoleShell.html', 'app/licenses/antdv-next.txt', 'design-system/source.json']) {
+    assert.ok(fs.existsSync(path.join(dir, file)), file);
+  }
+});
+test('planned template families refuse initialization without silently generating a desktop demo', t => {
+  const root = project(t);
+  for (const template of ['ai-workbench', 'digital-twin', 'mobile-app']) {
+    assert.throws(() => lib.initPrototype({ project: root, id: template, template, expertMode: 'template' }), /planned|尚未|待建设/);
+  }
+  assert.equal(fs.existsSync(path.join(root, 'prototypes')), false);
+});
+test('all imported reference files retain their declared source hashes', () => {
+  const origin = read(skill, 'assets/templates/enterprise-admin/origin.json');
+  assert.equal(Object.keys(origin.files).length, 326);
+  for (const [file, expected] of Object.entries(origin.files)) {
+    const contents = fs.readFileSync(path.join(skill, 'assets/templates/enterprise-admin/reference', origin.storagePaths?.[file] || file));
+    assert.equal(crypto.createHash('sha256').update(contents).digest('hex'), expected, file);
+  }
+});
+test('an unadapted EASEL example cannot pass new-business acceptance', t => {
+  const dir = initialize(t, { purpose: 'business-prototype' });
+  assert.equal(read(dir, 'prototype.json').business.status, 'needs-adaptation');
+  assert.match(lib.checkPrototype(dir, { acceptance: true }).errors.join(' '), /业务|adapt/);
+});
+test('generated enterprise instances isolate their local demo storage and retain the original route behavior', t => {
+  const dir = initialize(t);
+  const source = fs.readFileSync(path.join(dir, 'app/src/shared/session.js'), 'utf8');
+  assert.match(source, /i3-enterprise-enterprise-demo-/);
+  assert.doesNotMatch(source, /i3-prototype-antdv-/);
+  assert.match(fs.readFileSync(path.join(dir, 'app/index.html'), 'utf8'), /enterprise-bootstrap\.mjs/);
+  assert.match(fs.readFileSync(path.join(dir, 'app/index.html'), 'utf8'), /tokens\.css/);
+  const other = initialize(t);
+  assert.notEqual(read(dir, 'prototype.json').runtime.storagePrefix, read(other, 'prototype.json').runtime.storagePrefix);
+});
+test('missing enterprise runtime imports are rejected while declarative data-bind attributes remain valid', t => {
+  const dir = initialize(t);
+  assert.equal(lib.checkPrototype(dir).status, 'passed');
+  fs.unlinkSync(path.join(dir, 'app/runtime/controls.js'));
+  const result = lib.checkPrototype(dir);
+  assert.equal(result.status, 'failed');
+  assert.match(result.errors.join(' '), /controls\.js/);
+});
+test('tampered template source assets are rejected before a new instance can be trusted', t => {
+  const temp = project(t);
+  const copy = path.join(temp, 'enterprise-admin');
+  fs.cpSync(path.join(skill, 'assets/templates/enterprise-admin'), copy, { recursive: true });
+  fs.appendFileSync(path.join(copy, 'reference/styles/app.css'), '\n/* unexpected source edit */');
+  const { verifyReference } = require(path.join(skill, 'scripts/enterprise-template.cjs'));
+  assert.throws(() => verifyReference(copy), /integrity|来源完整性/);
+});
+test('enterprise preview serves JavaScript modules and SVG assets with browser-compatible MIME types', async t => {
+  const dir = initialize(t);
+  const child = spawn(process.execPath, ['app/serve.cjs'], { cwd: dir, stdio: ['ignore', 'pipe', 'pipe'] });
+  t.after(() => child.kill());
+  const url = await new Promise((resolve, reject) => {
+    const timer = setTimeout(() => reject(new Error('Preview start timed out')), 5000);
+    child.stdout.on('data', data => { const match = data.toString().match(/http:\/\/127\.0\.0\.1:\d+\//); if (match) { clearTimeout(timer); resolve(match[0]); } });
+    child.once('error', reject);
+  });
+  const js = await fetch(url + 'app/app.js');
+  assert.equal(js.status, 200);
+  assert.match(js.headers.get('content-type'), /javascript/);
+  const svg = await fetch(url + 'app/assets/empty.svg');
+  assert.equal(svg.status, 200);
+  assert.match(svg.headers.get('content-type'), /image\/svg\+xml/);
+});
+test('gallery and generated enterprise instances deliver the same scrolling adapter while retaining the complete reference', t => {
+  const dir = initialize(t);
+  const css = fs.readFileSync(path.join(dir, 'app/usability.css'));
+  assert.equal(css.compare(fs.readFileSync(path.join(skill, 'assets/templates/enterprise-admin/usability.css'))), 0);
+  assert.match(fs.readFileSync(path.join(dir, 'app/index.html'), 'utf8'), /href="usability\.css"/);
+  const preview = lib.listTemplates()[0].preview.split('#')[0];
+  const entry = path.join(skill, 'assets/templates', preview);
+  assert.notEqual(preview, 'enterprise-admin/reference/index.html');
+  const html = fs.readFileSync(entry, 'utf8');
+  assert.match(html, /href="usability\.css"/);
+  for (const match of html.matchAll(/(?:src|href)="([^"#]+)"/g)) {
+    if (match[1].startsWith('data:')) continue;
+    assert.ok(fs.existsSync(path.resolve(path.dirname(entry), match[1])), match[1]);
+  }
+  const { verifyReference } = require(path.join(skill, 'scripts/enterprise-template.cjs'));
+  assert.equal(verifyReference().fileCount, 326);
+});
+test('scrolling behavior remains protected after an enterprise baseline is confirmed', t => {
+  const dir = initialize(t);
+  // Unit fixture only: these records exercise the baseline guard and do not
+  // claim real browser execution or human acceptance of a delivered prototype.
+  fs.writeFileSync(path.join(dir, 'qa/unit-fixture.txt'), 'UNIT FIXTURE ONLY');
+  const manifest = lib.contentManifest(dir);
+  const scenarios = new Set(read(dir, 'requirements-map.json').requirements.flatMap(x => x.scenarios));
+  fs.writeFileSync(path.join(dir, 'qa/browser.json'), JSON.stringify({
+    ...manifest, status: 'passed', source: 'UNIT FIXTURE ONLY', consoleErrors: [],
+    screenshots: ['qa/unit-fixture.txt'], viewports: [390, 1440],
+    journeys: [...scenarios].map(id => ({ id, status: 'passed' })),
+  }));
+  lib.freezeBaseline(dir, { revision: manifest.revision, digest: manifest.digest, reviewer: 'unit fixture', statement: 'UNIT FIXTURE ONLY', source: 'test fixture' });
+  fs.appendFileSync(path.join(dir, 'app/usability.css'), '\n/* changed scrolling behavior */\n');
+  assert.ok(lib.compareBaseline(dir).protectedChanges.includes('app/usability.css'));
+  const guard = spawnSync(process.execPath, [path.join(skill, 'scripts/check-prototype.cjs'), dir, '--enforce-baseline'], { encoding: 'utf8' });
+  assert.equal(guard.status, 1);
+  assert.match(guard.stdout, /Design constraints changed/);
+});

package/scripts/floor-guard-reference-test.js

@@ -0,0 +1,291 @@
+#!/usr/bin/env node
+
+'use strict';
+
+// Contract test for skills/i3-constraint-driven-development/references/floor-guard.md.
+// The fenced `js` block is extracted unchanged and run, with real git, against small
+// fixtures: each is a fresh repository with one source file, one test file and a
+// CONSTRAINTS.md carrying a floor bullet, a coverage minimum, a bundle maximum and an
+// Exceptions table. Loosening moves must exit 1, tightening and no-op moves must exit 0.
+
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { spawnSync } = require('node:child_process');
+const { after, before, test } = require('node:test');
+
+const REFERENCE = path.join(
+  __dirname, '..', 'skills', 'i3-constraint-driven-development', 'references', 'floor-guard.md',
+);
+const CONSTRAINTS = [
+  '# Constraints',
+  '',
+  'Last reviewed: 2026-08-08 by @owner',
+  '',
+  '## Floor',
+  '- No skipped tests.',
+  '- Latency: p95 under 200 ms and p99 under 900 ms.',
+  '',
+  '| Dimension | Rule |',
+  '|---|---|',
+  '| Coverage | >= 80% |',
+  '| Bundle | <= 200 KB |',
+  '',
+  '## Exceptions',
+  '',
+  '| ID | Rule | Owner | Expires |',
+  '|---|---|---|---|',
+  '| W1 | no-explicit-any | @owner | 2026-11-01 |',
+  '',
+].join('\n');
+
+let scratch;
+let guard;
+const sandboxes = [];
+
+before(() => {
+  scratch = fs.mkdtempSync(path.join(os.tmpdir(), 'agent-skills-floor-guard-test-'));
+  const source = fs.readFileSync(REFERENCE, 'utf8');
+  const match = source.match(/```js\n([\s\S]*?)\n```/);
+  assert.ok(match, 'floor-guard.md must contain one fenced js block');
+  guard = path.join(scratch, 'floor-guard.mjs');
+  fs.writeFileSync(guard, match[1] + '\n');
+});
+
+after(() => {
+  for (const dir of sandboxes) fs.rmSync(dir, { recursive: true, force: true });
+  if (scratch) fs.rmSync(scratch, { recursive: true, force: true });
+});
+
+function git(cwd, ...args) {
+  const result = spawnSync('git', args, {
+    cwd,
+    encoding: 'utf8',
+    env: {
+      ...process.env,
+      GIT_AUTHOR_NAME: 'Floor Guard Test',
+      GIT_AUTHOR_EMAIL: 'floor-guard@example.invalid',
+      GIT_COMMITTER_NAME: 'Floor Guard Test',
+      GIT_COMMITTER_EMAIL: 'floor-guard@example.invalid',
+      GIT_CONFIG_GLOBAL: '/dev/null',
+    },
+  });
+  assert.equal(result.status, 0, `git ${args.join(' ')} failed: ${result.stderr}`);
+  return result.stdout;
+}
+
+function makeRepo() {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'agent-skills-floor-guard-fixture-'));
+  sandboxes.push(root);
+  git(root, 'init', '-q');
+  fs.writeFileSync(path.join(root, 'app.js'), 'module.exports = 1;\n');
+  fs.writeFileSync(
+    path.join(root, 'app.test.js'),
+    "const assert = require('assert');\nassert.equal(require('./app'), 1);\n",
+  );
+  fs.writeFileSync(path.join(root, 'CONSTRAINTS.md'), CONSTRAINTS);
+  git(root, 'add', '.');
+  git(root, 'commit', '-qm', 'baseline');
+  return root;
+}
+
+function editConstraints(root, from, to) {
+  const file = path.join(root, 'CONSTRAINTS.md');
+  const text = fs.readFileSync(file, 'utf8');
+  assert.ok(text.includes(from), `fixture CONSTRAINTS.md must contain ${JSON.stringify(from)}`);
+  fs.writeFileSync(file, text.replace(from, to));
+}
+
+function commitFile(root, name, text) {
+  fs.writeFileSync(path.join(root, name), text);
+  git(root, 'add', name);
+  git(root, 'commit', '-qm', `add ${name}`);
+}
+
+function runGuard(root, cwd = root) {
+  return spawnSync(process.execPath, [guard, '--base', 'HEAD'], { cwd, encoding: 'utf8' });
+}
+
+const cases = [
+  ['unchanged repository is clean', 0, () => {}],
+  ['a suppression added to a tracked file is a violation', 1, (root) => {
+    fs.writeFileSync(path.join(root, 'app.js'), '// @ts-ignore\nmodule.exports = 1;\n');
+  }],
+  ['a suppression in a new untracked file is a violation', 1, (root) => {
+    fs.writeFileSync(path.join(root, 'new.js'), '// @ts-ignore\nmodule.exports = 1;\n');
+  }],
+  ['a skipped test in a new untracked file is a violation', 1, (root) => {
+    fs.writeFileSync(path.join(root, 'new.test.js'), "test.skip('regression', () => {});\n");
+  }],
+  ['a suppression in a staged new file is a violation', 1, (root) => {
+    fs.writeFileSync(path.join(root, 'new.js'), '// @ts-ignore\nmodule.exports = 1;\n');
+    git(root, 'add', '-A');
+  }],
+  ['a deleted test file is a violation', 1, (root) => {
+    fs.unlinkSync(path.join(root, 'app.test.js'));
+  }],
+  ['a staged deleted test file is a violation', 1, (root) => {
+    fs.unlinkSync(path.join(root, 'app.test.js'));
+    git(root, 'add', '-A');
+  }],
+  ['an assertion removed from a surviving test file is a violation', 1, (root) => {
+    fs.writeFileSync(path.join(root, 'app.test.js'), "const assert = require('assert');\n");
+  }],
+  ['lowering a minimum is a violation', 1, (root) => {
+    editConstraints(root, '| Coverage | >= 80% |', '| Coverage | >= 60% |');
+  }],
+  ['raising a minimum is silent', 0, (root) => {
+    editConstraints(root, '| Coverage | >= 80% |', '| Coverage | >= 90% |');
+  }],
+  ['raising a maximum is a violation', 1, (root) => {
+    editConstraints(root, '| Bundle | <= 200 KB |', '| Bundle | <= 300 KB |');
+  }],
+  ['lowering a maximum is silent', 0, (root) => {
+    editConstraints(root, '| Bundle | <= 200 KB |', '| Bundle | <= 150 KB |');
+  }],
+  ['deleting one threshold from a rule is a violation', 1, (root) => {
+    editConstraints(root, 'p95 under 200 ms and p99 under 900 ms.', 'p95 under 200 ms.');
+  }],
+  ['a number inserted before a threshold is silent', 0, (root) => {
+    editConstraints(root, '| Coverage | >= 80% |', '| Coverage | per ADR 7, >= 80% |');
+  }],
+  ['adding a threshold to a rule is silent', 0, (root) => {
+    editConstraints(root, '| Bundle | <= 200 KB |', '| Bundle | <= 200 KB, <= 60 KB gzipped |');
+  }],
+  ['a deleted floor rule is a violation', 1, (root) => {
+    editConstraints(root, '- No skipped tests.\n', '');
+  }],
+  ['a new exception row is a violation', 1, (root) => {
+    const file = path.join(root, 'CONSTRAINTS.md');
+    fs.appendFileSync(file, '| W2 | temporary waiver | @owner | 2026-10-01 |\n');
+  }],
+];
+
+for (const [name, expectedExit, mutate] of cases) {
+  test(`floor guard: ${name}`, () => {
+    const root = makeRepo();
+    mutate(root);
+    const result = runGuard(root);
+    assert.equal(
+      result.status, expectedExit,
+      `expected exit ${expectedExit}, got ${result.status}\nstdout: ${result.stdout}\nstderr: ${result.stderr}`,
+    );
+  });
+}
+
+test('floor guard: a removed exception row is silent', () => {
+  const root = makeRepo();
+  editConstraints(root, '| W1 | no-explicit-any | @owner | 2026-11-01 |\n', '');
+  const result = runGuard(root);
+  assert.equal(result.status, 0, result.stderr);
+});
+
+test('floor guard: a missing merge base exits 2, never 0', () => {
+  const root = makeRepo();
+  const result = spawnSync(process.execPath, [guard, '--base', 'no-such-ref'], {
+    cwd: root, encoding: 'utf8',
+  });
+  assert.equal(result.status, 2, result.stderr);
+});
+
+test('floor guard: a threshold with no readable direction is reported when it changes', () => {
+  const root = makeRepo();
+  editConstraints(root, '| W1 | no-explicit-any | @owner | 2026-11-01 |', '| W1 | no-explicit-any | @owner | 2027-11-01 |');
+  const result = runGuard(root);
+  assert.equal(result.status, 1, result.stderr);
+  assert.match(result.stderr, /threshold-changed/);
+});
+
+test('floor guard: a renamed rule is reported as removed, with a note that its label may have changed', () => {
+  const root = makeRepo();
+  editConstraints(root, '| Coverage | >= 80% |', '| Code coverage | >= 80% |');
+  const result = runGuard(root);
+  assert.equal(result.status, 1, result.stderr);
+  assert.match(result.stderr, /\[rule-removed\]/);
+  assert.match(result.stderr, /label changed/);
+});
+
+test('floor guard: a threshold that loses its direction words is reported as removed, with a note saying so', () => {
+  const root = makeRepo();
+  editConstraints(root, '| Coverage | >= 80% |', '| Coverage | 80% |');
+  const result = runGuard(root);
+  assert.equal(result.status, 1, result.stderr);
+  assert.match(result.stderr, /\[threshold-removed\]/);
+  assert.match(result.stderr, /direction words/);
+});
+
+// Inside a hunk every line is content. An added line that starts with `++` shows in the diff
+// as `+++...`, and a removed line that starts with `--` as `---...`: neither is a file header.
+test('floor guard: an added line that starts with ++ is still checked', () => {
+  const root = makeRepo();
+  fs.writeFileSync(
+    path.join(root, 'app.js'),
+    'let n = 0;\n++n; // eslint-disable-line no-plusplus\nmodule.exports = n;\n',
+  );
+  const result = runGuard(root);
+  assert.equal(result.status, 1, result.stderr);
+  assert.match(result.stderr, /\[silenced-checker\] app\.js:/);
+});
+
+test('floor guard: an added line that starts with "++ " does not rename the file for later hunks', () => {
+  const root = makeRepo();
+  commitFile(root, 'counter.test.js', [
+    "const assert = require('assert');",
+    'let n = 0;',
+    'n += 1;',
+    'const m = 2;',
+    'assert.equal(n, 1);',
+    'assert.equal(m, 2);',
+    '',
+  ].join('\n'));
+  const file = path.join(root, 'counter.test.js');
+  const text = fs.readFileSync(file, 'utf8');
+  fs.writeFileSync(file, text.replace('n += 1;', '++ n;').replace('assert.equal(m, 2);\n', ''));
+  const result = runGuard(root);
+  assert.equal(result.status, 1, result.stderr);
+  assert.match(result.stderr, /\[assertion-removed\] counter\.test\.js:/);
+});
+
+test('floor guard: a removed line that starts with -- is still checked', () => {
+  const root = makeRepo();
+  commitFile(root, 'countdown.test.js', [
+    "const assert = require('assert');",
+    'let n = 1;',
+    '--n; assert.equal(n, 0);',
+    '',
+  ].join('\n'));
+  const file = path.join(root, 'countdown.test.js');
+  fs.writeFileSync(file, fs.readFileSync(file, 'utf8').replace('--n; assert.equal(n, 0);\n', ''));
+  const result = runGuard(root);
+  assert.equal(result.status, 1, result.stderr);
+  assert.match(result.stderr, /\[assertion-removed\] countdown\.test\.js:/);
+});
+
+// `git ls-files` lists only the current directory's subtree, relative to it, while `git diff`
+// covers the whole tree with paths from the top. Run from a subfolder, the guard has to see the
+// same files, under the same names, as it does from the top.
+test('floor guard: run from a subfolder, an untracked file outside it is still checked', () => {
+  const root = makeRepo();
+  fs.mkdirSync(path.join(root, 'sub'));
+  fs.writeFileSync(path.join(root, 'new.js'), '// @ts-ignore\nmodule.exports = 1;\n');
+  const result = runGuard(root, path.join(root, 'sub'));
+  assert.equal(result.status, 1, result.stderr);
+  assert.match(result.stderr, /\[silenced-checker\] new\.js:/);
+});
+
+test('floor guard: run from a subfolder, an untracked file inside it is named from the top', () => {
+  const root = makeRepo();
+  fs.mkdirSync(path.join(root, 'sub'));
+  fs.writeFileSync(path.join(root, 'sub', 'new.js'), '// @ts-ignore\nmodule.exports = 1;\n');
+  const result = runGuard(root, path.join(root, 'sub'));
+  assert.equal(result.status, 1, result.stderr);
+  assert.match(result.stderr, /\[silenced-checker\] sub\/new\.js:/);
+});
+
+test('floor guard: outside a git work tree exits 2, never 0', () => {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'agent-skills-floor-guard-no-repo-'));
+  sandboxes.push(dir);
+  const result = runGuard(dir);
+  assert.equal(result.status, 2, result.stderr);
+});