@kuznai/inception-engine 0.25.1 → 1.0.2

package/dist/test/unit/adapters.test.js

@@ -6,6 +6,7 @@ import { compileHookActions } from "../../src/core/adapters/hooks.js";
 import { compileMcpServerActions } from "../../src/core/adapters/mcp.js";
 import { compilePermissionsActions, compilePermissionsReverts, } from "../../src/core/adapters/permissions.js";
 import { compileAgentRuleActions, compileAgentRuleReverts, } from "../../src/core/adapters/rules.js";
+import { createSourcePathValidator } from "../../src/core/validation.js";
 import { makeTmpDir } from "../helpers/fs.js";
 import { assertPathEndsWith, normalizeSlashes } from "../helpers/path.js";
 describe("compileMcpServerActions", () => {
@@ -194,13 +195,13 @@ describe("compileAgentRuleActions", () => {
         try {
             const rulesFile = path.join(dir, "CLAUDE.md");
             await writeFile(rulesFile, "# Rules");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["claude-code"],
                 path: "CLAUDE.md",
                 scope: "global",
-            }, dir, dir, realRoot, ["codex"], "/home/test");
+            }, dir, dir, validateSource, ["codex"], "/home/test");
             assert.equal(actions.length, 0);
             assert.equal(warnings.length, 0);
         }
@@ -216,7 +217,7 @@ describe("compileAgentRuleActions", () => {
                 agents: ["claude-code"],
                 path: "missing.md",
                 scope: "global",
-            }, dir, dir, dir, ["codex"], "/home/test");
+            }, dir, dir, createSourcePathValidator(dir), ["codex"], "/home/test");
             assert.equal(actions.length, 0);
             assert.equal(warnings.length, 0);
         }
@@ -230,13 +231,13 @@ describe("compileAgentRuleActions", () => {
             const rulesFile = path.join(dir, "CLAUDE.md");
             await writeFile(rulesFile, "# Rules");
             const home = "/home/test";
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["claude-code"],
                 path: "CLAUDE.md",
                 scope: "global",
-            }, dir, dir, realRoot, ["claude-code"], home);
+            }, dir, dir, validateSource, ["claude-code"], home);
             assert.equal(actions.length, 1);
             assert.equal(warnings.length, 0);
             const action = actions[0];
@@ -255,13 +256,13 @@ describe("compileAgentRuleActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "rules.md"), "---\nname: test-rule\ndescription: test\n---\n# Rules");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["github-copilot"],
                 path: "rules.md",
                 scope: "global",
-            }, dir, dir, realRoot, ["github-copilot"], "/home/test");
+            }, dir, dir, validateSource, ["github-copilot"], "/home/test");
             assert.equal(actions.length, 0);
             assert.equal(warnings.length, 1);
             assert.equal(warnings[0]?.kind, "confidence");
@@ -278,13 +279,13 @@ describe("compileAgentRuleActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "rules.md"), "---\nname: test-rule\ndescription: test\n---\n# Rules");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["antigravity"],
                 path: "rules.md",
                 scope: "global",
-            }, dir, dir, realRoot, ["antigravity"], "/home/test", "/repo/test");
+            }, dir, dir, validateSource, ["antigravity"], "/home/test", "/repo/test");
             assert.equal(actions.length, 1);
             assert.equal(warnings.length, 0);
             assert.equal(actions[0]?.kind, "file-write");
@@ -299,13 +300,13 @@ describe("compileAgentRuleActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "rules.md"), "---\nname: test-rule\ndescription: test\n---\n# Rules");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["gemini-cli", "antigravity"],
                 path: "rules.md",
                 scope: "global",
-            }, dir, dir, realRoot, ["gemini-cli", "antigravity"], "/home/test", "/repo/test");
+            }, dir, dir, validateSource, ["gemini-cli", "antigravity"], "/home/test", "/repo/test");
             // Both agents target ~/.gemini/GEMINI.md — deduplication emits only one action.
             assert.equal(actions.length, 1, "expected one deduplicated action");
             assert.equal(warnings.length, 0);
@@ -323,13 +324,13 @@ describe("compileAgentRuleActions", () => {
         try {
             await writeFile(path.join(dir, "rules.md"), "---\nname: test-rule\ndescription: test\n---\n# Rules");
             const repo = "/repo/myproject";
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["gemini-cli", "antigravity"],
                 path: "rules.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["gemini-cli", "antigravity"], "/home/test", repo);
+            }, dir, dir, validateSource, ["gemini-cli", "antigravity"], "/home/test", repo);
             assert.equal(actions.length, 1, "expected one deduplicated action");
             assert.equal(warnings.length, 0);
             assert.equal(actions[0]?.agent, "gemini-cli");
@@ -343,13 +344,13 @@ describe("compileAgentRuleActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "rules.txt"), "plain text");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             await assert.rejects(compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["codex"],
                 path: "rules.txt",
                 scope: "global",
-            }, dir, dir, realRoot, ["codex"], "/home/test"), /must point to a Markdown source file/);
+            }, dir, dir, validateSource, ["codex"], "/home/test"), /must point to a Markdown source file/);
         }
         finally {
             await rm(dir, { recursive: true });
@@ -360,13 +361,13 @@ describe("compileAgentRuleActions", () => {
         try {
             await writeFile(path.join(dir, "copilot.md"), "# Copilot rules");
             const repo = "/repo/myproject";
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "copilot-main",
                 agents: ["github-copilot"],
                 path: "copilot.md",
                 scope: "copilot-repo",
-            }, dir, dir, realRoot, ["github-copilot"], "/home/test", repo);
+            }, dir, dir, validateSource, ["github-copilot"], "/home/test", repo);
             assert.equal(actions.length, 1);
             assert.equal(warnings.length, 0);
             const action = actions[0];
@@ -384,13 +385,13 @@ describe("compileAgentRuleActions", () => {
         try {
             await writeFile(path.join(dir, "typescript.md"), "# TypeScript rules");
             const repo = "/repo/myproject";
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "typescript",
                 agents: ["github-copilot"],
                 path: "typescript.md",
                 scope: "copilot-scoped",
-            }, dir, dir, realRoot, ["github-copilot"], "/home/test", repo);
+            }, dir, dir, validateSource, ["github-copilot"], "/home/test", repo);
             assert.equal(actions.length, 1);
             assert.equal(warnings.length, 0);
             const action = actions[0];
@@ -407,13 +408,13 @@ describe("compileAgentRuleActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "copilot.md"), "# Copilot rules");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "copilot-main",
                 agents: ["github-copilot"],
                 path: "copilot.md",
                 scope: "copilot-repo",
-            }, dir, dir, realRoot, ["github-copilot"], "/home/test");
+            }, dir, dir, validateSource, ["github-copilot"], "/home/test");
             assert.equal(actions.length, 0);
             assert.equal(warnings.length, 1);
             assert.equal(warnings[0]?.kind, "confidence");
@@ -428,13 +429,13 @@ describe("compileAgentRuleActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "copilot.md"), "# Copilot rules");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "copilot-main",
                 agents: ["claude-code"],
                 path: "copilot.md",
                 scope: "copilot-repo",
-            }, dir, dir, realRoot, ["claude-code"], "/home/test", "/repo/test");
+            }, dir, dir, validateSource, ["claude-code"], "/home/test", "/repo/test");
             assert.equal(actions.length, 0);
             assert.equal(warnings.length, 1);
             assert.equal(warnings[0]?.kind, "confidence");
@@ -450,13 +451,13 @@ describe("compileAgentRuleActions", () => {
             // having instructionFrontmatterRequired: true (native agentRules scopes skip that check)
             await writeFile(path.join(dir, "plain.md"), "# Plain rules\n\nNo frontmatter.");
             const repo = "/repo/myproject";
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "plain-rules",
                 agents: ["github-copilot"],
                 path: "plain.md",
                 scope: "copilot-repo",
-            }, dir, dir, realRoot, ["github-copilot"], "/home/test", repo);
+            }, dir, dir, validateSource, ["github-copilot"], "/home/test", repo);
             assert.equal(actions.length, 1);
             assert.equal(warnings.length, 0);
         }
@@ -472,7 +473,7 @@ describe("compileAgentRuleActions", () => {
                 agents: ["claude-code"],
                 path: "nonexistent.md",
                 scope: "global",
-            }, dir, dir, dir, ["claude-code"], "/home/test"), (err) => {
+            }, dir, dir, createSourcePathValidator(dir), ["claude-code"], "/home/test"), (err) => {
                 assert.ok(err instanceof Error);
                 assert.match(err.message, /nonexistent\.md/);
                 return true;
@@ -486,13 +487,13 @@ describe("compileAgentRuleActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "rules.md"), "---\nname: test-rule\ndescription: test\n---\n# Rules");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["claude-code", "codex"],
                 path: "rules.md",
                 scope: "global",
-            }, dir, dir, realRoot, ["claude-code", "codex"], "/home/test");
+            }, dir, dir, validateSource, ["claude-code", "codex"], "/home/test");
             assert.equal(actions.length, 2);
             assert.equal(warnings.length, 0);
             const agents = actions.map((a) => a.agent);
@@ -509,13 +510,13 @@ describe("compileAgentRuleActions", () => {
             const rulesFile = path.join(dir, "CLAUDE.md");
             await writeFile(rulesFile, "# Rules");
             const repo = "/repo/myproject";
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["claude-code"],
                 path: "CLAUDE.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["claude-code"], "/home/test", repo);
+            }, dir, dir, validateSource, ["claude-code"], "/home/test", repo);
             assert.equal(actions.length, 1);
             assert.equal(warnings.length, 0);
             const action = actions[0];
@@ -534,20 +535,20 @@ describe("compileAgentRuleActions", () => {
             await writeFile(rulesFile, "# Rules");
             const home = "/home/test";
             const repo = "/repo/myproject";
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const [globalResult, repoResult] = await Promise.all([
                 compileAgentRuleActions({
                     name: "my-rule",
                     agents: ["claude-code"],
                     path: "CLAUDE.md",
                     scope: "global",
-                }, dir, dir, realRoot, ["claude-code"], home, repo),
+                }, dir, dir, validateSource, ["claude-code"], home, repo),
                 compileAgentRuleActions({
                     name: "my-rule",
                     agents: ["claude-code"],
                     path: "CLAUDE.md",
                     scope: "repo",
-                }, dir, dir, realRoot, ["claude-code"], home, repo),
+                }, dir, dir, validateSource, ["claude-code"], home, repo),
             ]);
             assert.equal(globalResult.actions.length, 1);
             assert.equal(repoResult.actions.length, 1);
@@ -564,13 +565,13 @@ describe("compileAgentRuleActions", () => {
         try {
             await writeFile(path.join(dir, "rules.md"), "---\nname: test-rule\ndescription: test\n---\n# Rules");
             const repo = "/repo/myproject";
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["antigravity"],
                 path: "rules.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["antigravity"], "/home/test", repo);
+            }, dir, dir, validateSource, ["antigravity"], "/home/test", repo);
             assert.equal(actions.length, 1);
             assert.equal(warnings.length, 0);
             assert.equal(normalizeSlashes(actions[0]?.target ?? ""), `${repo}/GEMINI.md`, "expected target to be {repo}/GEMINI.md");
@@ -585,14 +586,14 @@ describe("compileAgentRuleActions", () => {
             const rulesFile = path.join(dir, "CLAUDE.md");
             await writeFile(rulesFile, "# Rules");
             const repo = "/repo/myproject";
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["claude-code"],
                 path: "CLAUDE.md",
                 scope: "repo",
                 targetDir: "apps/frontend",
-            }, dir, dir, realRoot, ["claude-code"], "/home/test", repo);
+            }, dir, dir, validateSource, ["claude-code"], "/home/test", repo);
             assert.equal(actions.length, 1);
             assert.equal(warnings.length, 0);
             const action = actions[0];
@@ -606,13 +607,13 @@ describe("compileAgentRuleActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "rules.md"), "---\nname: test-rule\ndescription: test\n---\n# Rules");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["claude-code"],
                 path: "rules.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["claude-code"], "/home/test");
+            }, dir, dir, validateSource, ["claude-code"], "/home/test");
             assert.equal(actions.length, 0);
             assert.equal(warnings.length, 1);
             assert.equal(warnings[0]?.kind, "confidence");
@@ -626,13 +627,13 @@ describe("compileAgentRuleActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "rules.md"), "---\nname: test-rule\ndescription: test\n---\n# Rules");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["github-copilot"],
                 path: "rules.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["github-copilot"], "/home/test", "/repo/myproject");
+            }, dir, dir, validateSource, ["github-copilot"], "/home/test", "/repo/myproject");
             assert.equal(actions.length, 0);
             assert.equal(warnings.length, 1);
             assert.equal(warnings[0]?.kind, "confidence");
@@ -646,13 +647,13 @@ describe("compileAgentRuleActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "rules.md"), "---\nname: test-rule\ndescription: test\n---\n# Rules");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["claude-code", "github-copilot"],
                 path: "rules.md",
                 scope: "global",
-            }, dir, dir, realRoot, ["claude-code", "github-copilot"], "/home/test");
+            }, dir, dir, validateSource, ["claude-code", "github-copilot"], "/home/test");
             // github-copilot rides claude-code's CLAUDE.md deployment; only one
             // action should be emitted for claude-code.
             assert.equal(actions.length, 1, "expected exactly one action");
@@ -668,13 +669,13 @@ describe("compileAgentRuleActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "rules.md"), "---\nname: test-rule\ndescription: test\n---\n# Rules");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compileAgentRuleActions({
                 name: "my-rule",
                 agents: ["github-copilot"],
                 path: "rules.md",
                 scope: "global",
-            }, dir, dir, realRoot, ["github-copilot"], "/home/test");
+            }, dir, dir, validateSource, ["github-copilot"], "/home/test");
             assert.equal(actions.length, 0);
             assert.equal(warnings.length, 1);
             assert.equal(warnings[0]?.kind, "confidence");
@@ -986,13 +987,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "agent.md"), "---\nname: test-agent\ndescription: test\n---\n# Agent");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compile({
                 name: "my-agent",
                 agents: ["claude-code"],
                 path: "agent.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["codex"], "/home/test", "/repo/test");
+            }, dir, dir, validateSource, ["codex"], "/home/test", "/repo/test");
             assert.equal(actions.length, 0);
             assert.equal(warnings.length, 0);
         }
@@ -1010,7 +1011,7 @@ describe("compileAgentDefinitionActions", () => {
                 agents: ["claude-code"],
                 path: "missing.md",
                 scope: "repo",
-            }, dir, dir, dir, ["codex"], "/home/test", "/repo/test");
+            }, dir, dir, createSourcePathValidator(dir), ["codex"], "/home/test", "/repo/test");
             assert.equal(actions.length, 0);
             assert.equal(warnings.length, 0);
         }
@@ -1023,13 +1024,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "my-agent.md"), "---\nname: test-agent\ndescription: test\ntools: []\n---\n# Agent");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compile({
                 name: "my-agent",
                 agents: ["claude-code"],
                 path: "my-agent.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["claude-code"], "/home/test", "/repo/test");
+            }, dir, dir, validateSource, ["claude-code"], "/home/test", "/repo/test");
             assert.equal(warnings.length, 0);
             assert.equal(actions.length, 1);
             const action = actions[0];
@@ -1048,13 +1049,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "my-agent.md"), "---\nname: test-agent\ndescription: test\ntools: []\n---\n# Agent");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compile({
                 name: "my-agent",
                 agents: ["claude-code"],
                 path: "my-agent.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["claude-code"], "/home/test");
+            }, dir, dir, validateSource, ["claude-code"], "/home/test");
             assert.equal(actions.length, 0);
             assert.equal(warnings.length, 1);
             assert.equal(warnings[0]?.kind, "confidence");
@@ -1069,13 +1070,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "my-agent.md"), "---\nname: test-agent\ndescription: test\ntools: []\n---\n# Agent");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compile({
                 name: "my-agent",
                 agents: ["gemini-cli"],
                 path: "my-agent.md",
                 scope: "workspace",
-            }, dir, dir, realRoot, ["gemini-cli"], "/home/test", "/repo/test");
+            }, dir, dir, validateSource, ["gemini-cli"], "/home/test", "/repo/test");
             assert.equal(warnings.length, 0);
             assert.equal(actions.length, 1);
             assert.equal(normalizeSlashes(actions[0]?.target ?? ""), "/repo/test/.gemini/agents/my-agent.md");
@@ -1089,13 +1090,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "my-agent.md"), "---\nname: test-agent\ndescription: test\ntools: []\n---\n# Agent");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compile({
                 name: "my-agent",
                 agents: ["gemini-cli"],
                 path: "my-agent.md",
                 scope: "workspace",
-            }, dir, dir, realRoot, ["gemini-cli"], "/home/test");
+            }, dir, dir, validateSource, ["gemini-cli"], "/home/test");
             assert.equal(actions.length, 0);
             assert.equal(warnings.length, 1);
             assert.equal(warnings[0]?.kind, "confidence");
@@ -1110,13 +1111,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "my-agent.md"), "---\nname: test-agent\ndescription: test\ntools: []\n---\n# Agent");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compile({
                 name: "my-agent",
                 agents: ["opencode"],
                 path: "my-agent.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["opencode"], "/home/test", "/repo/test");
+            }, dir, dir, validateSource, ["opencode"], "/home/test", "/repo/test");
             assert.equal(warnings.length, 0);
             assert.equal(actions.length, 1);
             const action = actions[0];
@@ -1134,13 +1135,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "my-agent.md"), "---\nname: test-agent\ndescription: test\ntools: []\n---\n# Agent");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compile({
                 name: "my-agent",
                 agents: ["github-copilot"],
                 path: "my-agent.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["github-copilot"], "/home/test", "/repo/test");
+            }, dir, dir, validateSource, ["github-copilot"], "/home/test", "/repo/test");
             assert.equal(warnings.length, 0);
             assert.equal(actions.length, 1);
             const action = actions[0];
@@ -1161,13 +1162,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "my-agent.md"), "---\nname: test-agent\ndescription: test\ntools: []\n---\n# Agent");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compile({
                 name: "my-agent",
                 agents: ["antigravity"],
                 path: "my-agent.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["antigravity"], "/home/test", "/repo/test");
+            }, dir, dir, validateSource, ["antigravity"], "/home/test", "/repo/test");
             assert.equal(warnings.length, 0);
             assert.equal(actions.length, 1);
             const action = actions[0];
@@ -1185,13 +1186,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "my-agent.md"), "---\nname: test-agent\ndescription: test\ntools: []\n---\n# Agent");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compile({
                 name: "my-agent",
                 agents: ["codex"],
                 path: "my-agent.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["codex"], "/home/test", "/repo/test");
+            }, dir, dir, validateSource, ["codex"], "/home/test", "/repo/test");
             assert.equal(actions.length, 0);
             assert.equal(warnings.length, 1);
             assert.equal(warnings[0]?.kind, "confidence");
@@ -1206,13 +1207,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "agent.txt"), "plain text");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             await assert.rejects(compile({
                 name: "my-agent",
                 agents: ["claude-code"],
                 path: "agent.txt",
                 scope: "repo",
-            }, dir, dir, realRoot, ["claude-code"], "/home/test", "/repo/test"), /must point to a Markdown source file/);
+            }, dir, dir, validateSource, ["claude-code"], "/home/test", "/repo/test"), /must point to a Markdown source file/);
         }
         finally {
             await rm(dir, { recursive: true });
@@ -1227,7 +1228,7 @@ describe("compileAgentDefinitionActions", () => {
                 agents: ["claude-code"],
                 path: "nonexistent.md",
                 scope: "repo",
-            }, dir, dir, dir, ["claude-code"], "/home/test", "/repo/test"), (err) => {
+            }, dir, dir, createSourcePathValidator(dir), ["claude-code"], "/home/test", "/repo/test"), (err) => {
                 assert.ok(err instanceof Error);
                 assert.match(err.message, /nonexistent\.md/);
                 return true;
@@ -1242,13 +1243,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "my-agent.md"), "---\nname: test-agent\ndescription: test\ntools: []\n---\n# Agent");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const { actions, warnings } = await compile({
                 name: "my-agent",
                 agents: ["claude-code", "opencode", "github-copilot"],
                 path: "my-agent.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["claude-code", "opencode", "github-copilot"], "/home/test", "/repo/test");
+            }, dir, dir, validateSource, ["claude-code", "opencode", "github-copilot"], "/home/test", "/repo/test");
             assert.equal(warnings.length, 0);
             assert.equal(actions.length, 3);
             const agentIds = actions.map((a) => a.agent);
@@ -1265,13 +1266,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "bad-copilot.md"), "---\nname: test\ndescription: test\n---\n# Bad");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             await assert.rejects(compile({
                 name: "bad",
                 agents: ["github-copilot"],
                 path: "bad-copilot.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["github-copilot"], "/home/test", "/repo/test"), /must define "tools" or "instructions" in frontmatter/);
+            }, dir, dir, validateSource, ["github-copilot"], "/home/test", "/repo/test"), /must define "tools" or "instructions" in frontmatter/);
         }
         finally {
             await rm(dir, { recursive: true });
@@ -1282,13 +1283,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "agent.md"), "---\nname: test\ndescription: test\ntools: []\n---\n# Agent");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const result = await compile({
                 name: "agent",
                 agents: ["github-copilot"],
                 path: "agent.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["github-copilot"], "/home/test", "/repo/test");
+            }, dir, dir, validateSource, ["github-copilot"], "/home/test", "/repo/test");
             assert.ok(result.actions.length > 0, "expected at least one action");
         }
         finally {
@@ -1300,13 +1301,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "agent.md"), "---\nname: test\ndescription: test\ntools:\n  - github\n  - codebase\n---\n# Agent");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             const result = await compile({
                 name: "agent",
                 agents: ["github-copilot"],
                 path: "agent.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["github-copilot"], "/home/test", "/repo/test");
+            }, dir, dir, validateSource, ["github-copilot"], "/home/test", "/repo/test");
             assert.ok(result.actions.length > 0, "expected at least one action");
         }
         finally {
@@ -1318,13 +1319,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "bad-tools.md"), "---\nname: test\ndescription: test\ntools: not-an-array\n---\n# Bad");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             await assert.rejects(compile({
                 name: "bad",
                 agents: ["github-copilot"],
                 path: "bad-tools.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["github-copilot"], "/home/test", "/repo/test"), /"tools" field that must be an array/);
+            }, dir, dir, validateSource, ["github-copilot"], "/home/test", "/repo/test"), /"tools" field that must be an array/);
         }
         finally {
             await rm(dir, { recursive: true });
@@ -1335,13 +1336,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "bad-tools.md"), "---\nname: test\ndescription: test\ntools:\n  - github\n  - 123\n---\n# Bad");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             await assert.rejects(compile({
                 name: "bad",
                 agents: ["github-copilot"],
                 path: "bad-tools.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["github-copilot"], "/home/test", "/repo/test"), /"tools" entry that must be a string/);
+            }, dir, dir, validateSource, ["github-copilot"], "/home/test", "/repo/test"), /"tools" entry that must be a string/);
         }
         finally {
             await rm(dir, { recursive: true });
@@ -1352,13 +1353,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "bad-antigravity.md"), "---\nname: test\ndescription: test\nmcp-servers:\n  - not-an-object\n---\n# Bad");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             await assert.rejects(compile({
                 name: "bad",
                 agents: ["antigravity"],
                 path: "bad-antigravity.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["antigravity"], "/home/test", "/repo/test"), /must define "mcp-servers" as an object/);
+            }, dir, dir, validateSource, ["antigravity"], "/home/test", "/repo/test"), /must define "mcp-servers" as an object/);
         }
         finally {
             await rm(dir, { recursive: true });
@@ -1369,13 +1370,13 @@ describe("compileAgentDefinitionActions", () => {
         const dir = await makeTmpDir();
         try {
             await writeFile(path.join(dir, "bad-mcp-config.md"), "---\nname: test\ndescription: test\nmcp-servers:\n  my-server: { args: [] }\n---\n# Bad");
-            const realRoot = await realpath(dir);
+            const validateSource = createSourcePathValidator(await realpath(dir));
             await assert.rejects(compile({
                 name: "bad",
                 agents: ["antigravity"],
                 path: "bad-mcp-config.md",
                 scope: "repo",
-            }, dir, dir, realRoot, ["antigravity"], "/home/test", "/repo/test"), /must define either a non-empty "command" or "url"/);
+            }, dir, dir, validateSource, ["antigravity"], "/home/test", "/repo/test"), /must define either a non-empty "command" or "url"/);
         }
         finally {
             await rm(dir, { recursive: true });