@lifeaitools/rdc-skills 0.35.17 → 0.35.20

package/skills/tests/rdc-regen-media.test.json

@@ -1,29 +1,29 @@
-{
-  "manifest_version": 1,
-  "skill": "rdc:regen-media",
-  "description": "Regen Media uses local keyless Codex gpt-image-2 as the primary image-generation path and avoids live generation under RDC_TEST.",
-  "fixture": {
-    "prompt": "rdc:regen-media generate a 2048x1152 homepage hero image",
-    "env": { "RDC_TEST": "1" }
-  },
-  "assertions": {
-    "exit_code": 0,
-    "commits_made": { "min": 0 },
-    "stdout_contains": ["image_gen", "gpt-image-2"]
-  },
-  "acceptance": {
-    "output_contains": [
-      "image_gen",
-      "gpt-image-2",
-      "--enable image_generation",
-      "RDC_TEST"
-    ],
-    "output_not_contains": [
-      "OPENAI_API_KEY=",
-      "generate_gpt_image is the default",
-      "upload completed",
-      "raw MCP"
-    ]
-  },
-  "teardown": { "reset_branch": true }
-}
+{
+  "manifest_version": 1,
+  "skill": "rdc:regen-media",
+  "description": "Regen Media uses local keyless Codex gpt-image-2 as the primary image-generation path and avoids live generation under RDC_TEST.",
+  "fixture": {
+    "prompt": "rdc:regen-media generate a 2048x1152 homepage hero image",
+    "env": { "RDC_TEST": "1" }
+  },
+  "assertions": {
+    "exit_code": 0,
+    "commits_made": { "min": 0 },
+    "stdout_contains": ["image_gen", "gpt-image-2"]
+  },
+  "acceptance": {
+    "output_contains": [
+      "image_gen",
+      "gpt-image-2",
+      "--enable image_generation",
+      "RDC_TEST"
+    ],
+    "output_not_contains": [
+      "OPENAI_API_KEY=",
+      "generate_gpt_image is the default",
+      "upload completed",
+      "raw MCP"
+    ]
+  },
+  "teardown": { "reset_branch": true }
+}

package/tests/foreground-process-gate.test.mjs

@@ -20,6 +20,8 @@
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { spawnSync } from 'node:child_process';
+import { mkdtempSync } from 'node:fs';
+import { tmpdir } from 'node:os';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const REPO_ROOT = resolve(__dirname, '..');
@@ -31,10 +33,27 @@ function assert(name, condition, detail = '') {
   else process.stdout.write(`  ok  ${name}\n`);
 }
 
+/**
+ * Every spawn gets an ISOLATED block ledger.
+ *
+ * This suite deliberately drives blocking fixtures, and the hook now records
+ * each refusal through the guard mitigator. Without an override it writes the
+ * REAL session ledger under %TEMP%/lifeai-guard-blocks — measured 2026-08-30,
+ * which already held this suite's fixtures ("npx playwright test --headed" and
+ * friends). A few suite runs cross REPEAT_THRESHOLD, after which a genuine
+ * --headed block reports "RULE DEFECT SUSPECTED" against a rule that is working
+ * perfectly. Test runs must never be able to discredit a live guard.
+ *
+ * lifeai-env's own guard tests carry this isolation plus a regression assertion
+ * that the live ledger is untouched; these two hooks shipped without either.
+ */
+const LEDGER = mkdtempSync(join(tmpdir(), 'fpg-ledger-'));
+
 function runGate(command) {
   const res = spawnSync(process.execPath, [HOOK], {
     input: JSON.stringify({ tool_name: 'Bash', tool_input: { command } }),
     encoding: 'utf8',
+    env: { ...process.env, LIFEAI_GUARD_BLOCK_DIR: LEDGER, RDC_TEST: '1' },
   });
   const blocked = res.status === 1;
   return { blocked, stdout: res.stdout, status: res.status };

package/tests/require-work-item-on-commit.test.mjs

@@ -66,11 +66,24 @@ function makeRepo() {
   return { dir, head };
 }
 
+/**
+ * Isolated block ledger — see the same note in foreground-process-gate.test.mjs.
+ *
+ * This hook records refusals through the guard mitigator, which keys on
+ * (rule id, argv shape) and escalates once a shape repeats. Fixtures that
+ * deliberately trigger a refusal would otherwise accumulate in the REAL session
+ * ledger under %TEMP%/lifeai-guard-blocks and eventually make a genuine refusal
+ * report "RULE DEFECT SUSPECTED" against a rule that is working.
+ *
+ * extraEnv still wins, so a case can override either value deliberately.
+ */
+const LEDGER = mkdtempSync(join(tmpdir(), 'rwi-ledger-'));
+
 function runHook(payload, extraEnv = {}) {
   return spawnSync(process.execPath, [HOOK], {
     input: JSON.stringify(payload),
     encoding: 'utf8',
-    env: { ...process.env, ...extraEnv },
+    env: { ...process.env, LIFEAI_GUARD_BLOCK_DIR: LEDGER, RDC_TEST: '1', ...extraEnv },
   });
 }