@jaybeeuu/agent-cortex 1.20.0 → 1.38.1

package/test/installer.test.mjs

@@ -0,0 +1,179 @@
+// Integration tests for `agent-cortex install claude`: the install-time
+// generator for the Claude Code plugin subtree. All tests install into
+// mkdtemp dirs so the real repo claude/ and ~/.claude are never touched.
+
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { execFile } from "node:child_process";
+import { mkdtempSync, readFileSync, readdirSync, existsSync, lstatSync, readlinkSync, realpathSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { fileURLToPath } from "node:url";
+import { dirname, join, relative } from "node:path";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const ROOT = join(__dirname, "..");
+const CLI_PATH = join(ROOT, "bin", "agent-cortex.mjs");
+
+function runCli(args) {
+  return new Promise((resolve) => {
+    execFile(process.execPath, [CLI_PATH, ...args], (error, stdout, stderr) => {
+      resolve({ exitCode: error ? error.code ?? 1 : 0, stdout, stderr });
+    });
+  });
+}
+
+function makeTmp() {
+  return mkdtempSync(join(tmpdir(), "agent-cortex-installer-"));
+}
+
+/** Deterministic snapshot of a generated tree: relative paths, kind, and for
+ * files/symlinks their byte content / link target. */
+function snapshot(dir) {
+  const entries = [];
+  const walk = (p) => {
+    for (const e of readdirSync(p, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+      const full = join(p, e.name);
+      const rel = relative(dir, full);
+      if (e.isSymbolicLink()) entries.push([rel, "link", readlinkSync(full)]);
+      else if (e.isDirectory()) {
+        entries.push([rel, "dir"]);
+        walk(full);
+      } else entries.push([rel, "file", readFileSync(full, "utf-8")]);
+    }
+  };
+  walk(dir);
+  return entries;
+}
+
+describe("install claude", () => {
+  it("composes agents from the composable sources (claude names, no tokens)", async () => {
+    const out = makeTmp();
+    const { exitCode } = await runCli(["install", "claude", "--output", out]);
+    assert.equal(exitCode, 0);
+
+    const plan = readFileSync(join(out, "agents", "plan.md"), "utf-8");
+    assert.match(plan, /^---\n# GENERATED from agents\/plan\//);
+    // provenance names the shared installer (no build-time script), so the
+    // committed subtree can only come from the install-time generator.
+    assert.match(plan, /bin\/installers\/claude\.mjs/);
+    assert.doesNotMatch(plan, /build-claude-agents/);
+    assert.match(plan, /\nname: plan\n/);
+    assert.doesNotMatch(plan, /\{\{(TOOL|PATH|SECTION):/);
+
+    const ralphPlan = readFileSync(join(out, "agents", "ralph-plan.md"), "utf-8");
+    assert.match(ralphPlan, /^---\n# GENERATED from agents\/ralph-plan\//);
+    assert.match(ralphPlan, /\nname: ralph-plan\n/);
+  });
+
+  it("copies native agents verbatim (ralph stays native, no composed counterpart)", async () => {
+    const out = makeTmp();
+    await runCli(["install", "claude", "--output", out]);
+    const native = readFileSync(join(ROOT, "agents-native", "ralph.md"), "utf-8");
+    assert.equal(readFileSync(join(out, "agents", "ralph.md"), "utf-8"), native);
+  });
+
+  it("symlinks flattened skills and excludes ralph-coupled skills", async () => {
+    const out = makeTmp();
+    await runCli(["install", "claude", "--output", out]);
+    const skills = join(out, "skills");
+    const names = readdirSync(skills);
+    assert.ok(names.includes("tdd"));
+    assert.ok(names.includes("plan"));
+    assert.ok(!names.includes("ralph"));
+    assert.ok(!names.includes("run-pipeline-stage"));
+    assert.ok(lstatSync(join(skills, "tdd")).isSymbolicLink());
+    assert.equal(realpathSync(join(skills, "tdd")), realpathSync(join(ROOT, "skills", "engineering", "tdd")));
+  });
+
+  it("generates plugin.json tracking the package version and referencing hooks.json", async () => {
+    const out = makeTmp();
+    await runCli(["install", "claude", "--output", out]);
+    const pkgVersion = JSON.parse(readFileSync(join(ROOT, "package.json"), "utf-8")).version;
+    const plugin = JSON.parse(readFileSync(join(out, ".claude-plugin", "plugin.json"), "utf-8"));
+    assert.equal(plugin.name, "agent-cortex");
+    assert.equal(plugin.version, pkgVersion);
+    assert.equal(plugin.hooks, "./hooks.json");
+  });
+
+  it("generates hooks.json from the canonical hooks/claude/ source", async () => {
+    const out = makeTmp();
+    await runCli(["install", "claude", "--output", out]);
+    const source = JSON.parse(readFileSync(join(ROOT, "hooks", "claude", "hooks.json"), "utf-8"));
+    const installed = JSON.parse(readFileSync(join(out, "hooks.json"), "utf-8"));
+    assert.deepStrictEqual(installed, source);
+    assert.ok(source.hooks.SessionStart);
+  });
+
+  it("matches the Notification hook only on documented notification types", async () => {
+    // The Notification matcher is an exact-string list over `notification_type` —
+    // there are no success/error types, so that matcher would never fire. Guard
+    // against it recurring (see docs/claude-hooks.md for the documented type list).
+    const out = makeTmp();
+    await runCli(["install", "claude", "--output", out]);
+    const installed = JSON.parse(readFileSync(join(out, "hooks.json"), "utf-8"));
+    const matcher = installed.hooks.Notification.flatMap((g) => g.hooks).length
+      ? installed.hooks.Notification[0].matcher
+      : "";
+    const documented = new Set([
+      "permission_prompt",
+      "idle_prompt",
+      "auth_success",
+      "elicitation_dialog",
+      "elicitation_url_dialog",
+      "elicitation_complete",
+      "elicitation_response",
+      "agent_needs_input",
+      "agent_completed",
+      "quota_auto_resume_fired",
+      "quota_auto_resume_stale",
+      "quota_auto_resume_disabled",
+    ]);
+    const types = matcher ? matcher.split("|") : [];
+    assert.ok(types.length > 0, "Notification hook should list at least one matcher type");
+    for (const t of types) {
+      assert.ok(documented.has(t), `Notification matcher references unknown type "${t}"`);
+    }
+  });
+
+  it("bundles hook support scripts into claude/hooks/ and references them via the plugin root", async () => {
+    const out = makeTmp();
+    await runCli(["install", "claude", "--output", out]);
+
+    const canonical = readFileSync(join(ROOT, "hooks", "claude", "scripts", "notify.mjs"), "utf-8");
+    const bundled = readFileSync(join(out, "hooks", "scripts", "notify.mjs"), "utf-8");
+    assert.equal(bundled, canonical);
+
+    const installed = JSON.parse(readFileSync(join(out, "hooks.json"), "utf-8"));
+    const notify = installed.hooks.Notification.flatMap((g) => g.hooks)
+      .filter((h) => h.command?.includes("notify.mjs"));
+    assert.ok(notify.length === 1, "hooks.json should reference the notification script");
+    assert.match(notify[0].command, /^node "\$\{CLAUDE_PLUGIN_ROOT\}\/hooks\/scripts\/notify\.mjs"$/);
+  });
+
+  it("is deterministic across repeated installs into the same output", async () => {
+    const out = makeTmp();
+    await runCli(["install", "claude", "--output", out]);
+    const first = snapshot(out);
+    await runCli(["install", "claude", "--output", out]);
+    assert.deepStrictEqual(snapshot(out), first);
+  });
+
+  it("--dry-run reports the plan without writing anything", async () => {
+    const out = makeTmp();
+    const { exitCode, stdout } = await runCli(["install", "claude", "--output", out, "--dry-run"]);
+    assert.equal(exitCode, 0);
+    assert.ok(/would/i.test(stdout));
+    assert.equal(existsSync(join(out, "agents")), false);
+    assert.equal(existsSync(join(out, "skills")), false);
+    assert.equal(existsSync(join(out, ".claude-plugin")), false);
+  });
+
+  it("leaves the committed claude/ subtree untouched when --output is given", async () => {
+    const out = makeTmp();
+    const beforeSkills = readdirSync(join(ROOT, "claude", "skills")).sort();
+    const beforePlugin = readFileSync(join(ROOT, "claude", ".claude-plugin", "plugin.json"), "utf-8");
+    await runCli(["install", "claude", "--output", out]);
+    assert.deepStrictEqual(readdirSync(join(ROOT, "claude", "skills")).sort(), beforeSkills);
+    assert.equal(readFileSync(join(ROOT, "claude", ".claude-plugin", "plugin.json"), "utf-8"), beforePlugin);
+  });
+});

package/test/notify-hook.test.mjs

@@ -0,0 +1,63 @@
+// Tests for the Claude Code Notification hook script (hooks/claude/scripts/notify.mjs).
+// The script reads the Notification hook JSON payload from stdin and prints a
+// `{ "terminalSequence": "..." }` JSON response that Claude Code emits for us
+// (hooks run without a controlling terminal, so OSC sequences must go through
+// terminalSequence — see the Claude Code hooks reference).
+
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { execFile } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import { dirname, join } from "node:path";
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), "..");
+const SCRIPT = join(ROOT, "hooks", "claude", "scripts", "notify.mjs");
+
+/** Run the hook script with the given payload on stdin and a controlled env. */
+function runNotify(payload, env = {}) {
+  return new Promise((resolve) => {
+    const child = execFile(
+      process.execPath,
+      [SCRIPT],
+      { env, timeout: 10_000 },
+      (error, stdout, stderr) => {
+        resolve({ exitCode: error ? error.code ?? 1 : 0, stdout, stderr });
+      },
+    );
+    child.stdin.end(JSON.stringify(payload));
+  });
+}
+
+describe("notify.mjs (Claude Notification hook)", () => {
+  it("emits an OSC 777 desktop notification on a bare-terminal agent_completed payload", async () => {
+    const { exitCode, stdout } = await runNotify(
+      { notification_type: "agent_completed", title: "task done", message: "all tests pass" },
+      { PATH: process.env.PATH },
+    );
+    assert.equal(exitCode, 0);
+    const out = JSON.parse(stdout);
+    assert.ok(out.terminalSequence.startsWith("\u001b]777;notify;"));
+    assert.match(out.terminalSequence, /task done/);
+    assert.match(out.terminalSequence, /all tests pass/);
+  });
+
+  it("switches to OSC 99 when running inside Kitty", async () => {
+    const { exitCode, stdout } = await runNotify(
+      { notification_type: "agent_needs_input", title: "input needed", message: "build broke" },
+      { PATH: process.env.PATH, KITTY_WINDOW_ID: "0" },
+    );
+    assert.equal(exitCode, 0);
+    const out = JSON.parse(stdout);
+    assert.ok(out.terminalSequence.startsWith("\u001b]99;"));
+    assert.match(out.terminalSequence, /build broke/);
+  });
+
+  it("stays silent (no output, exit 0) when the payload has no message", async () => {
+    const { exitCode, stdout } = await runNotify(
+      { notification_type: "permission_prompt" },
+      { PATH: process.env.PATH },
+    );
+    assert.equal(exitCode, 0);
+    assert.equal(stdout, "");
+  });
+});

package/test/pi-installer.test.mjs

@@ -0,0 +1,371 @@
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { mkdtempSync, mkdirSync, writeFileSync, rmSync, readFileSync, existsSync, readdirSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { tmpdir } from "node:os";
+import { fileURLToPath } from "node:url";
+import { installPi } from "../bin/installers/pi.mjs";
+
+// Real repo root — used by the integration smoke test to prove the installer
+// works against the canonical sources (agents/, skills/, token-map.json).
+const REPO_ROOT = join(dirname(fileURLToPath(import.meta.url)), "..");
+
+// ─── Fixtures ────────────────────────────────────────────────────────────────
+
+const TOOL_MAP = {
+  bash: { pi: "bash" },
+  view: { pi: "read" },
+  create: { pi: "write" },
+  glob: { pi: "find" },
+  ask_user: { pi: null },
+  skill: { pi: null },
+  task: { pi: "task" },
+};
+
+function tokenMap(extra = {}) {
+  return {
+    name: "fixture token map",
+    version: 1,
+    harnesses: ["pi"],
+    tools: { ...TOOL_MAP },
+    paths: {
+      plugin_root: { pi: "~/.pi/agent/npm/node_modules/@jaybeeuu/agent-cortex" },
+      skills_dir: { pi: { base: "plugin_root", relative: "skills" } },
+      agents_dir: { pi: { base: "plugin_root", relative: "agents" } },
+    },
+    ...extra,
+  };
+}
+
+function makeFixture() {
+  const root = mkdtempSync(join(tmpdir(), "pi-installer-"));
+  const output = join(root, "out");
+  return {
+    root,
+    output,
+    cleanup: () => rmSync(root, { recursive: true, force: true }),
+  };
+}
+
+function writeFixture(fx, relPath, content) {
+  const p = join(fx.root, relPath);
+  mkdirSync(dirname(p), { recursive: true });
+  writeFileSync(p, content);
+}
+
+/** Seed a minimal but realistic package tree (agents + token-map + skills). */
+function seedPackage(fx, opts = {}) {
+  const { agents = {}, skills = {}, tokenMap: map, version } = opts;
+  writeFixture(fx, "token-map.json", JSON.stringify(map ?? tokenMap(version ? { version } : {})));
+  for (const [name, def] of Object.entries(agents)) {
+    writeFixture(fx, `agents/${name}/agent.md`, def.body ?? `# ${name}\nBody of ${name}.`);
+    writeFixture(
+      fx,
+      `agents/${name}/pi/frontmatter.json`,
+      JSON.stringify(
+        def.frontmatter ?? {
+          name: `agent-cortex:${name}`,
+          description: `Description of ${name}`,
+          tools: ["bash", "view"],
+          argumentHint: `Hint for ${name}`,
+        },
+      ),
+    );
+    for (const [section, content] of Object.entries(def.sections ?? {})) {
+      writeFixture(fx, `agents/${name}/pi/${section}.md`, content);
+    }
+  }
+  for (const [path, content] of Object.entries(skills)) {
+    writeFixture(fx, `skills/${path}`, content);
+  }
+}
+
+function listFiles(dir) {
+  if (!existsSync(dir)) return [];
+  const out = [];
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    const p = join(dir, entry.name);
+    if (entry.isDirectory()) out.push(...listFiles(p).map((f) => join(entry.name, f)));
+    else out.push(entry.name);
+  }
+  return out;
+}
+
+// ─── Agent composition ───────────────────────────────────────────────────────
+
+describe("installPi — agent composition", () => {
+  it("writes one .agent.md per composable agent dir with pi frontmatter and no leftover tokens", () => {
+    const fx = makeFixture();
+    try {
+      seedPackage(fx, {
+        agents: {
+          alpha: {
+            body: "# alpha\nUse {{TOOL:view}} to read.\n{{SECTION:polling}}\nRead {{PATH:skills_dir}}.",
+            sections: { polling: "Spawn with {{TOOL:task}}." },
+            frontmatter: {
+              name: "agent-cortex:alpha",
+              description: "Reads things.",
+              tools: ["bash", "view", "glob", "ask_user"],
+              argumentHint: "Read something",
+            },
+          },
+        },
+      });
+
+      const result = installPi({ root: fx.root, output: fx.output });
+
+      const file = join(fx.output, "agents", "alpha.agent.md");
+      assert.ok(existsSync(file), "agent file written");
+      const content = readFileSync(file, "utf-8");
+      assert.ok(content.startsWith("---\n"), "yaml frontmatter");
+      assert.match(content, /name: "agent-cortex:alpha"/);
+      assert.match(content, /description: "Reads things\."/);
+      assert.match(content, /tools: "bash read find"/, "tools translated to pi names, ask_user omitted");
+      assert.match(content, /argument-hint: "Read something"/);
+      assert.ok(content.includes("Use read to read."), "{{TOOL:view}} substituted");
+      assert.ok(content.includes("Spawn with task."), "{{SECTION:polling}} composed from pi/polling.md");
+      assert.ok(!/{{/.test(content), "no literal tokens remain");
+      assert.equal(result.agents.length, 1);
+      assert.deepEqual(result.agents[0], { name: "alpha", filePath: file });
+    } finally {
+      fx.cleanup();
+    }
+  });
+
+  it("drops null-mapped tool tokens in prose and reports a warning", () => {
+    const fx = makeFixture();
+    try {
+      seedPackage(fx, {
+        agents: {
+          alpha: { body: "# alpha\nAsk the user with {{TOOL:ask_user}}, then use {{TOOL:bash}}." },
+        },
+      });
+
+      const result = installPi({ root: fx.root, output: fx.output });
+      const content = readFileSync(join(fx.output, "agents", "alpha.agent.md"), "utf-8");
+
+      assert.ok(!content.includes("ask_user"), "null-mapped token dropped from prose");
+      assert.ok(content.includes("use bash"), "mapped token substituted");
+      assert.ok(!/{{/.test(content));
+      assert.ok(result.warnings.some((w) => w.includes("{{TOOL:ask_user}}")), "drop reported as warning");
+    } finally {
+      fx.cleanup();
+    }
+  });
+
+  it("throws on an unknown tool token", () => {
+    const fx = makeFixture();
+    try {
+      seedPackage(fx, { agents: { alpha: { body: "# alpha\nUse {{TOOL:nope}} now." } } });
+      assert.throws(() => installPi({ root: fx.root, output: fx.output }), /unknown tool token {{TOOL:nope}}/);
+    } finally {
+      fx.cleanup();
+    }
+  });
+
+  it("throws when a section file referenced by {{SECTION:...}} is missing", () => {
+    const fx = makeFixture();
+    try {
+      seedPackage(fx, { agents: { alpha: { body: "# alpha\n{{SECTION:missing}}" } } });
+      assert.throws(() => installPi({ root: fx.root, output: fx.output }), /missing section "missing"/);
+    } finally {
+      fx.cleanup();
+    }
+  });
+
+  it("resolves named and relative {{PATH:...}} tokens against the plugin root", () => {
+    const fx = makeFixture();
+    try {
+      seedPackage(fx, {
+        agents: {
+          alpha: {
+            body: "# alpha\nNamed: {{PATH:skills_dir}}\nRelative: {{PATH:skills/x/SKILL.md}}",
+          },
+        },
+      });
+
+      const result = installPi({ root: fx.root, output: fx.output });
+      const content = readFileSync(join(fx.output, "agents", "alpha.agent.md"), "utf-8");
+
+      assert.ok(
+        content.includes("Named: ~/.pi/agent/npm/node_modules/@jaybeeuu/agent-cortex/skills"),
+        "named path resolves through token-map paths table",
+      );
+      assert.ok(
+        content.includes("Relative: ~/.pi/agent/npm/node_modules/@jaybeeuu/agent-cortex/skills/x/SKILL.md"),
+        "relative path resolves against plugin root",
+      );
+      assert.equal(result.warnings.length, 0);
+    } finally {
+      fx.cleanup();
+    }
+  });
+
+  it("honours the --plugin-root override for path resolution", () => {
+    const fx = makeFixture();
+    try {
+      seedPackage(fx, {
+        agents: {
+          alpha: { body: "# alpha\n{{PATH:skills/x/SKILL.md}}" },
+        },
+      });
+
+      const pluginRoot = join(fx.root, "checkout");
+      installPi({ root: fx.root, output: fx.output, pluginRoot });
+      const content = readFileSync(join(fx.output, "agents", "alpha.agent.md"), "utf-8");
+      assert.ok(content.includes(join(pluginRoot, "skills", "x", "SKILL.md")), "plugin root override used");
+    } finally {
+      fx.cleanup();
+    }
+  });
+
+  it("rejects token-map.json versions newer than the implemented contract", () => {
+    const fx = makeFixture();
+    try {
+      seedPackage(fx, {
+        version: 99,
+        agents: { alpha: { body: "# alpha" } },
+      });
+      assert.throws(() => installPi({ root: fx.root, output: fx.output }), /version 99/);
+    } finally {
+      fx.cleanup();
+    }
+  });
+});
+
+// ─── Skills ──────────────────────────────────────────────────────────────────
+
+describe("installPi — skills", () => {
+  it("copies skills into <output>/skills preserving the grouped layout with substituted tokens", () => {
+    const fx = makeFixture();
+    try {
+      seedPackage(fx, {
+        agents: { alpha: { body: "# alpha" } },
+        skills: {
+          "engineering/echo/SKILL.md":
+            "---\nname: echo\ndescription: Echoes {{TOOL:view}}.\n---\n\nUse {{TOOL:view}} to read and {{TOOL:skill}} for help.\nOpen {{PATH:skills/echo/SKILL.md}}.",
+          "engineering/echo/scripts/run.sh": "#!/bin/sh\necho hi\n",
+        },
+      });
+
+      installPi({ root: fx.root, output: fx.output });
+
+      const skillFile = join(fx.output, "skills", "engineering", "echo", "SKILL.md");
+      assert.ok(existsSync(skillFile), "skill copied");
+      const content = readFileSync(skillFile, "utf-8");
+      assert.ok(content.includes("description: Echoes read."), "token substituted in skill frontmatter");
+      assert.ok(content.includes("Use read to read and  for help."), "null-mapped {{TOOL:skill}} dropped");
+      assert.ok(
+        content.includes(
+          "Open ~/.pi/agent/npm/node_modules/@jaybeeuu/agent-cortex/skills/echo/SKILL.md.",
+        ),
+        "relative path resolved against plugin root",
+      );
+      assert.ok(!/{{/.test(content), "no literal tokens remain in skill");
+
+      const script = readFileSync(join(fx.output, "skills", "engineering", "echo", "scripts", "run.sh"), "utf-8");
+      assert.equal(script, "#!/bin/sh\necho hi\n", "non-md files copied verbatim");
+    } finally {
+      fx.cleanup();
+    }
+  });
+});
+
+// ─── Output / dry-run ────────────────────────────────────────────────────────
+
+describe("installPi — output & dry-run", () => {
+  it("dry-run writes nothing but reports the planned output", () => {
+    const fx = makeFixture();
+    try {
+      seedPackage(fx, {
+        agents: { alpha: { body: "# alpha" } },
+        skills: { "engineering/echo/SKILL.md": "---\nname: echo\ndescription: d\n---\n\nBody." },
+      });
+
+      const result = installPi({ root: fx.root, output: fx.output, dryRun: true });
+
+      assert.equal(result.dryRun, true);
+      assert.equal(listFiles(fx.output).length, 0, "no files written in dry-run");
+      assert.equal(result.agents.length, 1);
+      assert.equal(result.agents[0].name, "alpha");
+      assert.equal(result.skills.skills, 1);
+      // Planned paths are still reported so the user can see what would happen.
+      assert.ok(result.agents[0].filePath.startsWith(fx.output));
+    } finally {
+      fx.cleanup();
+    }
+  });
+
+  it("creates the output directory hierarchy when needed", () => {
+    const fx = makeFixture();
+    try {
+      seedPackage(fx, { agents: { alpha: { body: "# alpha" } } });
+      const deep = join(fx.output, "nested", "deep");
+      installPi({ root: fx.root, output: deep });
+      assert.ok(existsSync(join(deep, "agents", "alpha.agent.md")));
+    } finally {
+      fx.cleanup();
+    }
+  });
+});
+
+// ─── Integration against the real repo ───────────────────────────────────────
+
+describe("installPi — real repo integration", () => {
+  it("installs every canonical agent with pi tool names and no leftover tokens", () => {
+    const fx = makeFixture();
+    try {
+      const result = installPi({ root: REPO_ROOT, output: fx.output });
+
+      const names = result.agents.map((a) => a.name).sort();
+      assert.deepEqual(names, ["plan", "ralph", "ralph-plan", "strategy"]);
+
+      // ralph pi frontmatter: ["bash", "view", "rg", "glob", "task", "read_agent", "wait_for_agents"]
+      const ralph = readFileSync(join(fx.output, "agents", "ralph.agent.md"), "utf-8");
+      assert.match(ralph, /name: "agent-cortex:ralph"/);
+      assert.match(ralph, /tools: "bash read grep find task read_agent wait_for_agents"/);
+      assert.ok(ralph.includes("## Spawning subagents (PI)"), "{{SECTION:polling}} composed from pi/polling.md");
+      const bodyTokens = ralph.split("---\n").slice(2).join("---\n");
+      assert.ok(!/{{/.test(bodyTokens), "no literal tokens in ralph body");
+
+      // plan body carries the relative {{PATH:...}} resolved against the plugin root
+      const plan = readFileSync(join(fx.output, "agents", "plan.agent.md"), "utf-8");
+      assert.match(plan, /tools: "bash read edit write grep find task read_agent"/);
+      assert.ok(
+        plan.includes("~/.pi/agent/npm/node_modules/@jaybeeuu/agent-cortex/skills/workflow/plan/SKILL.md"),
+        "plan PATH token resolved against token-map plugin root",
+      );
+
+      // ralph-plan prose {{TOOL:ask_user}} is dropped (null for pi)
+      const ralphPlan = readFileSync(join(fx.output, "agents", "ralph-plan.agent.md"), "utf-8");
+      assert.ok(!ralphPlan.includes("ask_user"), "null-mapped tool omitted from ralph-plan body");
+      assert.ok(
+        result.warnings.some((w) => w.includes("ask_user")),
+        "ralph-plan null tool dropped with a warning",
+      );
+
+      // strategy: web_fetch → fetch_content; ask_user/skill omitted
+      const strategy = readFileSync(join(fx.output, "agents", "strategy.agent.md"), "utf-8");
+      assert.match(strategy, /tools: "bash read grep find fetch_content edit write"/);
+    } finally {
+      fx.cleanup();
+    }
+  });
+
+  it("substitutes tokens in every installed skill markdown", () => {
+    const fx = makeFixture();
+    try {
+      const result = installPi({ root: REPO_ROOT, output: fx.output });
+      assert.ok(result.skills.skills > 20, `expected the full skill tree, got ${result.skills.skills}`);
+
+      const files = listFiles(join(fx.output, "skills")).filter((f) => f.endsWith(".md"));
+      assert.ok(files.length > 0);
+      for (const f of files) {
+        const content = readFileSync(join(fx.output, "skills", f), "utf-8");
+        assert.ok(!/{{/.test(content), `no literal tokens in skill ${f}`);
+      }
+    } finally {
+      fx.cleanup();
+    }
+  });
+});