@lifeaitools/rdc-skills 0.24.9 → 0.24.11

package/scripts/install-rdc-skills.js

@@ -88,6 +88,9 @@ const projectRoot = projectRootArg || codexRoot || detectedLifeaiRoot;
 
 const PLUGIN_KEY   = 'rdc-skills@rdc-skills';
 const MARKETPLACE  = 'rdc-skills';
+const NPM_PACKAGE  = '@lifeaitools/rdc-skills';
+const MCP_NAME     = 'rdc-skills-mcp';
+const MCP_PORT     = '3110';
 
 // ── Logging ───────────────────────────────────────────────────────────────────
 const ok   = msg => console.log(`  \x1b[32m✓\x1b[0m ${msg}`);
@@ -95,6 +98,10 @@ const info = msg => console.log(`  \x1b[36m→\x1b[0m ${msg}`);
 const warn = msg => console.log(`  \x1b[33m⚠\x1b[0m ${msg}`);
 const fail = msg => console.log(`  \x1b[31m✗\x1b[0m ${msg}`);
 
+function run(cmd, options = {}) {
+  return execSync(cmd, { encoding: 'utf8', stdio: 'pipe', ...options }).trim();
+}
+
 // ── Filesystem helpers ────────────────────────────────────────────────────────
 function copyDir(src, dst, ext) {
   if (!fs.existsSync(src)) { warn(`Source not found: ${src}`); return 0; }
@@ -248,6 +255,76 @@ function buildPluginCache(cacheDir, version, gitSha) {
   }
 }
 
+function getPm2Process(name) {
+  try {
+    const list = JSON.parse(run('pm2 jlist'));
+    return Array.isArray(list) ? list.find((p) => p.name === name) || null : null;
+  } catch {
+    return null;
+  }
+}
+
+function isGlobalNpmRdcSkillsPath(scriptPath) {
+  if (!scriptPath) return false;
+  const normalized = scriptPath.replace(/\\/g, '/').toLowerCase();
+  return normalized.includes('/node_modules/@lifeaitools/rdc-skills/');
+}
+
+function packageRootFromMcpScript(scriptPath) {
+  return scriptPath ? path.resolve(path.dirname(scriptPath), '..') : null;
+}
+
+function readInstalledPackageVersion(scriptPath) {
+  const packageRoot = packageRootFromMcpScript(scriptPath);
+  if (!packageRoot) return null;
+  return readJson(path.join(packageRoot, 'package.json'), {}).version || null;
+}
+
+function syncGlobalMcpInstall(version) {
+  const proc = getPm2Process(MCP_NAME);
+  if (!proc) {
+    info('[2.9] MCP pkg    — PM2 process not registered yet; start handled below');
+    return;
+  }
+
+  const scriptPath = proc.pm2_env?.pm_exec_path || proc.pm_exec_path || '';
+  if (!isGlobalNpmRdcSkillsPath(scriptPath)) {
+    info(`[2.9] MCP pkg    — PM2 uses source checkout, not global npm (${scriptPath || 'unknown path'})`);
+    return;
+  }
+
+  const installedVersion = readInstalledPackageVersion(scriptPath);
+  if (installedVersion === version) {
+    ok(`[2.9] MCP pkg    — global ${NPM_PACKAGE}@${version} already installed`);
+    return;
+  }
+
+  let stopped = false;
+  let installed = false;
+  try {
+    info(`[2.9] MCP pkg    — updating global ${NPM_PACKAGE} ${installedVersion || '?'} → ${version}`);
+    run(`pm2 stop ${MCP_NAME}`);
+    stopped = true;
+    run(`npm install -g ${NPM_PACKAGE}@${version}`);
+    installed = true;
+    ok(`[2.9] MCP pkg    — installed global ${NPM_PACKAGE}@${version}`);
+  } catch (e) {
+    warn(`[2.9] MCP pkg    — global install failed (${String(e.message || e).split('\n')[0]})`);
+    if (String(e.message || '').includes('EBUSY')) {
+      info('       PM2 was stopped first; if EBUSY persists, another Node/npm process still holds the package directory.');
+    }
+  } finally {
+    if (stopped) {
+      try {
+        run(`pm2 restart ${MCP_NAME} --update-env`, { env: { ...process.env, PORT: MCP_PORT } });
+        ok(`[2.9] MCP pkg    — pm2 restarted ${MCP_NAME}${installed ? '' : ' (previous install restored)'}`);
+      } catch (e) {
+        warn(`[2.9] MCP pkg    — pm2 restart failed (${String(e.message || e).split('\n')[0]})`);
+      }
+    }
+  }
+}
+
 // ── User-skills cleanup ───────────────────────────────────────────────────────
 // Older installer versions wrote skill files directly to ~/.claude/skills/user/.
 // Claude Code loads that directory AND the plugin cache, so any rdc skills left
@@ -753,8 +830,6 @@ function buildHooksConfig(hooksDir, profile = 'core') {
 // under PM2 as `rdc-skills-mcp` on PORT=3110, and prints the claude.ai connector
 // line. Every failure here WARNs — it must never abort the installer.
 function registerMcpServer() {
-  const MCP_NAME = 'rdc-skills-mcp';
-  const MCP_PORT = '3110';
   const binPath = path.join(repoRoot, 'bin', 'rdc-skills-mcp.mjs');
   const connector = 'https://rdc-skills.regendevcorp.com/mcp';
 
@@ -907,12 +982,6 @@ async function main() {
     info(`       created settings.json`);
   }
 
-  // Read version + git SHA once
-  const pkg     = readJson(path.join(repoRoot, 'package.json'));
-  const version = pkg.version || '0.7.0';
-  let   gitSha  = '';
-  try { gitSha = execSync('git rev-parse HEAD', { cwd: repoRoot, encoding: 'utf8', stdio: 'pipe' }).trim(); } catch {}
-
   // 0. Pull latest
   try {
     const before = execSync('git rev-parse HEAD', { cwd: repoRoot, encoding: 'utf8', stdio: 'pipe' }).trim();
@@ -923,6 +992,13 @@ async function main() {
     warn('[0/6] git pull failed — installing from local copy');
   }
 
+  // Read version + git SHA after pull so plugin caches and the MCP install do
+  // not stamp the pre-update checkout.
+  const pkg     = readJson(path.join(repoRoot, 'package.json'));
+  const version = pkg.version || '0.7.0';
+  let   gitSha  = '';
+  try { gitSha = execSync('git rev-parse HEAD', { cwd: repoRoot, encoding: 'utf8', stdio: 'pipe' }).trim(); } catch {}
+
   // 0.5a. User-skills cleanup — remove any rdc: skills from ~/.claude/skills/user/
   // (older installer versions wrote there; plugin cache is the only authoritative source)
   {
@@ -1000,6 +1076,11 @@ async function main() {
     info('[2.6] MCP        — rdc-skills endpoint already registered (claude + codex)');
   }
 
+  // If the live MCP is served from the global npm package, update that exact
+  // install before restarting PM2. Windows otherwise holds the package tree open
+  // and `npm install -g` can fail with EBUSY.
+  syncGlobalMcpInstall(version);
+
   // 2.7. Symlinks in regen-root/.claude/skills/ (FS MCP + claude.ai access)
   if (codexRoot) {
     const skillsLinkDir = path.join(codexRoot, '.claude', 'skills');

package/scripts/lib/assertions.mjs

@@ -128,6 +128,20 @@ export function checkStdoutContains(expected, observed) {
   };
 }
 
+export function checkStdoutNotContains(expected, observed) {
+  if (expected === undefined) return { pass: true };
+  if (!Array.isArray(expected)) {
+    return { pass: false, message: "stdout_not_contains assertion is not an array" };
+  }
+  const stdout = observed.stdout || "";
+  const present = expected.filter((s) => stdout.includes(s));
+  if (present.length === 0) return { pass: true };
+  return {
+    pass: false,
+    message: `stdout_not_contains: forbidden substrings present: ${present.map((s) => JSON.stringify(s)).join(", ")}`,
+  };
+}
+
 // ─── evaluator ──────────────────────────────────────────────────────────────
 
 const PREDICATES = [
@@ -137,6 +151,7 @@ const PREDICATES = [
   ["commits_made", checkCommitsMade],
   ["stderr_empty", checkStderrEmpty],
   ["stdout_contains", checkStdoutContains],
+  ["stdout_not_contains", checkStdoutNotContains],
 ];
 
 export function evaluateAssertions(assertions, observed) {
@@ -185,6 +200,7 @@ if (__isMain) {
         commits_made: { min: 1, message_matches: "fix.*README" },
         stderr_empty: true,
         stdout_contains: ["✓", "Verdict:"],
+        stdout_not_contains: ["NOTPRESENT"],
       },
       observed: baseObserved,
       expect: (r) => r.pass && r.failures.length === 0,
@@ -226,20 +242,27 @@ if (__isMain) {
     },
     {
       n: 7,
+      desc: "stdout_not_contains catches forbidden substring",
+      assertions: { stdout_not_contains: ["Verdict:"] },
+      observed: baseObserved,
+      expect: (r) => !r.pass && r.failures.some((f) => f.predicate === "stdout_not_contains"),
+    },
+    {
+      n: 8,
       desc: "work_items_created label filter rejects",
       assertions: { work_items_created: { min: 1, labels_include: ["nonexistent"] } },
       observed: baseObserved,
       expect: (r) => !r.pass && r.failures.some((f) => f.predicate === "work_items_created"),
     },
     {
-      n: 8,
+      n: 9,
       desc: "work_items_created max exceeded",
       assertions: { work_items_created: { max: 0 } },
       observed: baseObserved,
       expect: (r) => !r.pass && r.failures.some((f) => f.predicate === "work_items_created"),
     },
     {
-      n: 9,
+      n: 10,
       desc: "empty assertions → pass",
       assertions: {},
       observed: baseObserved,

package/scripts/lib/manifest-schema.mjs

@@ -36,6 +36,7 @@ const TOP_LEVEL_FIELDS = new Set([
   "description",
   "fixture",
   "assertions",
+  "acceptance",
   "teardown",
 ]);
 
@@ -48,6 +49,7 @@ const ASSERTION_FIELDS = new Set([
   "commits_made",
   "stderr_empty",
   "stdout_contains",
+  "stdout_not_contains",
 ]);
 
 const WIC_FIELDS = new Set(["min", "max", "status", "labels_include"]);
@@ -337,6 +339,17 @@ function validateAssertions(a, errors, warnings) {
       });
     }
   }
+  if (a.stdout_not_contains !== undefined) {
+    if (!Array.isArray(a.stdout_not_contains)) {
+      err(errors, "assertions.stdout_not_contains", "type", "stdout_not_contains must be an array");
+    } else {
+      a.stdout_not_contains.forEach((s, i) => {
+        if (typeof s !== "string") {
+          err(errors, `assertions.stdout_not_contains[${i}]`, "type", "entry must be a string");
+        }
+      });
+    }
+  }
   for (const k of Object.keys(a)) {
     if (!ASSERTION_FIELDS.has(k)) {
       warn(warnings, `assertions.${k}`, "unknown-field", `unknown assertion "${k}"`);

package/scripts/self-test.mjs

@@ -92,10 +92,12 @@ const KNOWN_CLAUTH_KEYS = new Set([
   "coolify-api",
   "cloudflare",
   "npm",
-  "supabase",
-  "supabase-anon",
-  "supabase-db",
-  "r2-access-key-id",
+  "supabase",
+  "supabase-anon",
+  "supabase-db",
+  "supabase-service",
+  "supabase-service-role",
+  "r2-access-key-id",
   "r2-secret-key",
   "anthropic",
   "openai",

package/scripts/test-guide-validator.mjs

@@ -64,6 +64,8 @@ const KNOWN_CLAUTH_KEYS = new Set([
   "supabase",
   "supabase-anon",
   "supabase-db",
+  "supabase-service",
+  "supabase-service-role",
   "r2-access-key-id",
   "r2-secret-key",
   "anthropic",

package/skills/channel-formatter/SKILL.md

@@ -83,11 +83,33 @@ skills named in the scope boundary.
 
 1. **Detect channel or pack mode** from the request using the tables above.
 2. **Classify the source**: already-drafted copy, long article/report, transcript, notes, or brief.
-3. **For long sources**, extract thesis, audience, proof points, CTA, constraints, and factual risks before writing.
-4. **Jump to the target channel or pack section** below and apply all rules exactly — do not rely on memory.
-5. **Never mix** markdown conventions across channels.
-6. If the channel or pack is ambiguous, ask once: "Is this for [Channel A] or [Channel B]?"
-7. Produce the formatted or repurposed output directly as the deliverable.
+3. **For thin or under-specified long sources**, enrich before writing instead
+   of inventing context:
+   - If the source names a corpus path, read it.
+   - Otherwise search/read the approved corpus first when available. Resolve
+     `CORPUS_ROOT` (usually `H:/My Drive/global-corpus`) and
+     `LOCAL_CORPUS_ROOT` (usually `C:/Dev/local-corpus`) before searching the
+     repo. If environment variables are not visible, try those default paths.
+   - The corpus search must use an explicit corpus path in the tool arguments
+     (`H:/My Drive/global-corpus` or `C:/Dev/local-corpus`). A relative repo
+     search does not count as enrichment.
+   - Use `Grep`/`Glob`/`Read` or the environment's equivalent tools so the
+     transcript records what was consulted.
+   - Use web search only when the requested output needs current/public facts,
+     the user asks for external context, or corpus context is absent and network
+     search is allowed. Cite/use only what the search actually supports.
+   - Searching only the project repo is not enough for enrichment unless the
+     source itself points to a repo-local corpus file.
+   - If neither corpus nor web context is available, keep the output sparse and
+     mark missing context in assumptions; do not fill gaps creatively.
+4. **For long sources**, extract thesis, audience, proof points, CTA, constraints, and factual risks before writing.
+5. **Jump to the target channel or pack section** below and apply all rules exactly — do not rely on memory.
+6. **Never mix** markdown conventions across channels.
+7. If the channel or pack is ambiguous, ask once: "Is this for [Channel A] or [Channel B]?"
+8. Produce the formatted or repurposed output directly as the deliverable.
+9. Treat extraction notes and source-fidelity guardrails as internal scratchwork.
+   Do not print a "Long-Source Extraction Checklist", factual guardrail list, or
+   absent-topic list unless the user explicitly asks for analysis.
 
 ## Hard Rules (all channels)
 
@@ -167,7 +189,7 @@ Repurpose one source for an announcement:
 - 3 CTA variants
 
 ### Long-Source Extraction Checklist
-Before writing from a long source, identify:
+Before writing from a long source, identify internally:
 - **Thesis:** the central argument or announcement
 - **Audience:** who this is for
 - **Proof:** facts, examples, data, names, dates, or quotes explicitly present
@@ -179,13 +201,39 @@ Before writing from a long source, identify:
 ### Source-Fidelity Rules
 - Do not invent statistics, dates, quotes, citations, partnerships, revenue,
   legal claims, customer names, or outcomes.
+- Do not infer adjacent finance/reporting concepts that sound plausible but are
+  absent from the source, such as pro forma assumptions, reporting cadence,
+  offset mechanisms, governance structures, verification status, or portfolio
+  implications.
+- If corpus or web context was consulted, use it only for facts it directly
+  supports. Do not blend generic domain knowledge into the source as if it were
+  documented.
+- If the source provides a theme label without an explanation, keep the theme
+  label or paraphrase it conservatively. Do not add explanatory clauses that
+  define how it works, who governs it, how it is verified, how often it reports,
+  or what financial model it opposes unless those details are explicit.
+- Do not contrast patient capital with quarters, earnings calls, fund cycles,
+  exits, venture speed, or portfolio management unless those words or concepts
+  appear in the source or consulted corpus/web material.
 - Do not upgrade tentative language into certainty.
 - Do not turn illustrative examples into facts.
 - Preserve caveats when they affect meaning.
 - If a stronger hook needs a proof point the source does not provide, write a
   proof-neutral hook instead.
+- If the source says a topic is absent, excluded, or not mentioned, treat that
+  as an internal guardrail. Do not repeat the absent topic in public-facing
+  channel copy, assumptions, caveats, notes, headings, or summaries unless the
+  user explicitly asks for a contrast, compliance note, or risk disclosure.
+  Strip absent-topic lists from the deliverable entirely.
 - When assumptions are material, include a short "Assumptions:" line before the
   deliverable rather than burying uncertainty in polished copy.
+- Do not output your extraction checklist. The deliverable should start with the
+  requested channel/pack output, except for a brief "Assumptions:" line when a
+  material gap affects the copy.
+- If you include an "Assumptions:" line, limit it to missing useful inputs such
+  as org name, audience, location, date, CTA, or link. Never list absent,
+  excluded, or not-mentioned topics in the assumptions line. If the only
+  uncertainty is an absent-topic guardrail, omit the assumptions line.
 
 ---
 
@@ -231,6 +279,8 @@ channel-native. A pack is not a generic summary repeated in several lengths.
   email/web, concise in Slack.
 - Use channel-specific formatting rules from the sections below.
 - If source proof is weak, use curiosity and framing instead of inflated claims.
+- Do not include extraction notes, guardrail notes, or absent-topic caveats in
+  the pack. Those are reasoning aids, not channel outputs.
 
 ---
 

package/skills/lifeai-brochure-author/SKILL.md

@@ -21,6 +21,8 @@ required_validators:
 ---
 
 # LIFEAI Brochure Authoring Contract
+> **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
+> Return the authored JSX guidance or verification result directly; do not dump raw tool logs.
 
 This is the contract every AI engine obeys when generating brochure JSX. The contract is non-negotiable. If you cannot generate output that complies, **stop and ask for clarification rather than emit non-compliant code.**
 

package/skills/rdc-brochurify/SKILL.md

@@ -13,6 +13,8 @@ triggers:
 ---
 
 # rdc:brochurify Orchestrator
+> **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
+> Report brochure job state, artifacts, and blockers directly; do not dump raw tool logs.
 
 The orchestrator dispatches six waves of typed sub-agents in sequence. Each wave has a clear input contract, an output contract, and a parallelism profile.
 

package/skills/rdc-extract-verifier-rules/SKILL.md

@@ -13,6 +13,8 @@ triggers:
 ---
 
 # rdc:extract-verifier-rules
+> **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
+> Return candidate rules, evidence, and PR status directly; do not dump raw tool logs.
 
 The self-learning loop. The verifier corpus is the moat (per `DECISIONS-LOG.md` D-009). This skill is how the corpus grows.
 

package/skills/rpms-filemap/SKILL.cloud.md

@@ -1,4 +1,5 @@
 ---
+name: rpms-filemap
 description: "Generated RPMS file map — RULE #1, canonical homes, and Context Export pointers served from regen-root manifest."
 slash: "rdc:rpms-filemap"
 category: "tooling"
@@ -12,6 +13,9 @@ triggers:
   - "where should pm artifacts go"
 ---
 # RPMS File Map
+> **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
+> Return the requested file-map guidance directly; do not dump raw manifests or logs.
+
 > GENERATED FILE - DO NOT HAND-EDIT.
 > Source of truth: `docs/architecture/rpms.locations.json`
 > Regenerate: `pnpm rpms:gen-filemap`

package/skills/rpms-filemap/SKILL.md

@@ -1,4 +1,5 @@
 ---
+name: rpms-filemap
 description: "Generated RPMS file map — RULE #1, canonical homes, and Context Export pointers served from regen-root manifest."
 slash: "rdc:rpms-filemap"
 category: "tooling"
@@ -12,6 +13,9 @@ triggers:
   - "where should pm artifacts go"
 ---
 # RPMS File Map
+> **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
+> Return the requested file-map guidance directly; do not dump raw manifests or logs.
+
 > GENERATED FILE - DO NOT HAND-EDIT.
 > Source of truth: `docs/architecture/rpms.locations.json`
 > Regenerate: `pnpm rpms:gen-filemap`

package/skills/tests/README.md

@@ -23,6 +23,11 @@ is the source of truth. Top-level fields:
 4. Run `node scripts/self-test.mjs --tier2 --skill rdc:<name>` to smoke-test
 5. Commit manifest + any skill changes together
 
+For content-producing skills, include both positive and negative output checks.
+Use `stdout_contains` for expected channel-native structure and source facts;
+use `stdout_not_contains` for source-fidelity violations or explicitly forbidden
+claims.
+
 ## Adding a new skill
 
 New skills MUST ship with a manifest. Tier 2 CI will block tag push if a

package/skills/tests/rdc-channel-formatter.test.json

@@ -0,0 +1,45 @@
+{
+  "manifest_version": 1,
+  "skill": "rdc:channel-formatter",
+  "description": "Channel formatter turns a long article into a social content pack in RDC_TEST mode without fabricating source claims.",
+  "fixture": {
+    "prompt": "rdc:channel-formatter social-pack docs/source/channel-formatter-long-article.md",
+    "precondition_files": [
+      {
+        "path": "docs/source/channel-formatter-long-article.md",
+        "content": "# Wetland Finance Article\n\nA 2026 field note from the finance team says the pilot restored 42 acres of riparian habitat, reduced annual irrigation demand by 18 percent, and produced three investor update themes: patient capital, measurable ecological return, and community operating discipline.\n\nThis is intentionally thin. Before writing, consult available corpus context for regenerative finance / wetland finance language. Use an explicit corpus-path search of `C:/Dev/local-corpus` or `H:/My Drive/global-corpus`; if neither path has support, keep claims limited to the source.\n\nThe absent-topic list below is a private guardrail only. Do not repeat these terms in assumptions, notes, caveats, headings, summaries, or public-facing output.\n\nThe source does not mention carbon credits, tokenization, celebrity partners, guaranteed returns, quarterly earnings, fund cycles, verification status, portfolio management, or governance structures."
+      }
+    ],
+    "env": { "RDC_TEST": "1" }
+  },
+  "assertions": {
+    "exit_code": 0,
+    "stdout_contains": ["LinkedIn", "Twitter/X", "Slack", "42 acres", "18 percent"]
+  },
+  "acceptance": {
+    "output_contains": ["LinkedIn", "Twitter/X", "Slack", "42 acres", "18%"],
+    "output_not_contains": [
+      "carbon credits",
+      "tokenization",
+      "celebrity partners",
+      "guaranteed returns",
+      "pro forma",
+      "offsets",
+      "governance",
+      "quarterly",
+      "verified",
+      "fund cycle",
+      "fund-cycle",
+      "portfolio manager",
+      "portfolio management"
+    ],
+    "tool_calls_include_any": ["Grep", "Glob", "WebSearch"],
+    "tool_calls_argument_matches": [
+      {
+        "tools": ["Grep", "Glob", "WebSearch"],
+        "pattern": "global-corpus|local-corpus|CORPUS_ROOT|LOCAL_CORPUS_ROOT|web"
+      }
+    ]
+  },
+  "teardown": { "reset_branch": true }
+}

package/tests/acceptance.test.mjs

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { dirname } from 'node:path';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const REPO_ROOT = resolve(__dirname, '..');
+const script = join(REPO_ROOT, 'scripts', 'acceptance.mjs');
+
+const syntax = spawnSync(process.execPath, ['--check', script], { encoding: 'utf8' });
+assert.equal(syntax.status, 0, syntax.stderr);
+
+const missing = spawnSync(process.execPath, [script, '--skill', 'rdc:not-a-real-skill'], {
+  cwd: REPO_ROOT,
+  encoding: 'utf8',
+});
+assert.equal(missing.status, 1);
+assert.match(missing.stderr, /missing acceptance manifest/);
+
+const codex = spawnSync(process.execPath, [script, '--engine', 'codex', '--skill', 'rdc:plan'], {
+  cwd: REPO_ROOT,
+  encoding: 'utf8',
+});
+assert.equal(codex.status, 2);
+assert.match(codex.stderr, /Codex JSONL/);
+
+const emptyProject = mkdtempSync(join(tmpdir(), 'rdc-acceptance-empty-'));
+try {
+  const none = spawnSync(process.execPath, [script, '--changed', '--base', 'HEAD', '--project-root', emptyProject], {
+    cwd: REPO_ROOT,
+    encoding: 'utf8',
+  });
+  assert.notEqual(none.status, 0);
+} finally {
+  rmSync(emptyProject, { recursive: true, force: true });
+}
+
+console.log('acceptance tests — PASS');

package/tests/harness-gates.test.mjs

@@ -146,7 +146,37 @@ const WI = 'aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee';
 }
 
 // ===========================================================================
-// 2. post-tool-batch-gate.js
+// 2. foreground-process-gate.js
+// ===========================================================================
+{
+  const focusPayload = {
+    tool_input: {
+      command: "powershell -NoProfile -Command \"Add-Type '[DllImport(\\\"user32.dll\\\")] public static extern bool SetForegroundWindow(System.IntPtr hWnd);'\"",
+    },
+  };
+  const r = runHook('foreground-process-gate.js', focusPayload, {});
+  assert('FPG blocks SetForegroundWindow focus API', r.status === 1, `status=${r.status} ${r.stdout}${r.stderr}`);
+  assert('FPG block mentions window focus operations', /Window focus\/restore\/minimize\/collapse/.test(r.stdout + r.stderr));
+
+  const hiddenPayload = {
+    tool_input: {
+      command: 'powershell.exe -NoProfile -NonInteractive -WindowStyle Hidden -File ".\\\\scripts\\\\helper.ps1"',
+    },
+  };
+  const h = runHook('foreground-process-gate.js', hiddenPayload, {});
+  assert('FPG allows hidden PowerShell helper', h.status === 0, `status=${h.status} ${h.stdout}${h.stderr}`);
+
+  const minimizedPayload = {
+    tool_input: {
+      command: 'Start-Process powershell.exe -WindowStyle Minimized -ArgumentList "-NoProfile"',
+    },
+  };
+  const m = runHook('foreground-process-gate.js', minimizedPayload, {});
+  assert('FPG allows minimized Start-Process without focus APIs', m.status === 0, `status=${m.status} ${m.stdout}${m.stderr}`);
+}
+
+// ===========================================================================
+// 3. post-tool-batch-gate.js
 // ===========================================================================
 {
   const ptb = require(join(HOOKS, 'post-tool-batch-gate.js'));
@@ -197,7 +227,7 @@ const WI = 'aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee';
 }
 
 // ===========================================================================
-// 3. gate-watchdog-selfcheck.js
+// 4. gate-watchdog-selfcheck.js
 // ===========================================================================
 {
   const wd = require(join(HOOKS, 'gate-watchdog-selfcheck.js'));