@lifeaitools/rdc-skills 0.37.4 → 0.37.5

package/skills/terminal-config/SKILL.md

@@ -58,6 +58,11 @@ rdc:terminal-config: <task>
 Get-Content "$env:LOCALAPPDATA\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\LocalState\settings.json" | ConvertFrom-Json
 ```
 
+- **A `%VAR%` in `commandline`/`startingDirectory` that does not expand has two causes; check which before editing:**
+  - **Stale inherited environment** (most common): the variable was set after `explorer.exe`, Terminal's parent, last started. Confirm it is set (`[Environment]::GetEnvironmentVariable('VAR','User')`), then `Stop-Process -Name explorer -Force` (it relaunches) and restart Windows Terminal fully — a new tab in a running instance keeps the old block.
+  - **Hardcoded path**: the config never used a variable. Only this case is fixed by editing the config.
+  - Never replace a `%VAR%` with a literal path to fix a stale environment; a restart fixes it and the literal breaks portability.
+
 ## Startup Scripts
 
 If a project uses role/cell startup scripts, keep those scripts under the project root and commit them with the project. Do not bake one user's absolute machine paths into shared RDC skill files.

package/tests/harness-gates.test.mjs

@@ -1,12 +1,10 @@
 #!/usr/bin/env node
 /**
- * Truth Gate 3.0 — Layers 5+6 harness-gate tests (WP-5).
+ * Truth Gate 3.0 — Layer 6 harness-gate tests (WP-5).
  *
- * Covers the three new hooks, fully offline (no DB, no brain, no clauth):
- *   task-completed-gate.js   — flag OFF no-op; flag ON + no/unsound closure BLOCK;
- *                              flag ON + sound closure PASS.
- *   post-tool-batch-gate.js  — flag OFF no-op; flag ON + stale worktree base FLAG;
- *                              flag ON + current base PASS.
+ * Fully offline (no DB, no brain, no clauth). task-completed-gate.js and
+ * post-tool-batch-gate.js were deleted in 0.37.5 (LIFEAI/regen-root#237): both
+ * sat behind env flags nothing ever set.
  *   gate-watchdog-selfcheck  — STOP-banner when a gate file/registration absent;
  *                              silent when all present; checks the LIVE hookify
  *                              hooks.json (plugin manifest), not the dead wrappers.
@@ -17,7 +15,6 @@ import { mkdtempSync, rmSync, writeFileSync, mkdirSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join, resolve, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { spawnSync } from 'node:child_process';
 import { createRequire } from 'node:module';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -31,120 +28,6 @@ function assert(name, condition, detail = '') {
   else process.stdout.write(`  ok  ${name}\n`);
 }
 
-function runHook(file, payload, extraEnv = {}) {
-  return spawnSync(process.execPath, [join(HOOKS, file)], {
-    input: JSON.stringify(payload),
-    encoding: 'utf8',
-    env: { ...process.env, ...extraEnv },
-  });
-}
-
-const WI = 'aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee';
-
-// ===========================================================================
-// 1. task-completed-gate.js
-// ===========================================================================
-{
-  const tcg = require(join(HOOKS, 'task-completed-gate.js'));
-
-  // pure: closureIsSound branches
-  assert('TCG closureIsSound: null row → not ok', tcg.closureIsSound(null).ok === false);
-  assert('TCG closureIsSound: not-done task → not ok',
-    tcg.closureIsSound({ id: WI, item_type: 'task', status: 'review' }).ok === false);
-  assert('TCG closureIsSound: done but witness:agent → not ok',
-    tcg.closureIsSound({ id: WI, item_type: 'task', status: 'done', implementation_report: { codeflow_post: { witness: 'agent', commit: 'x', files_changed: ['f'], verification: [{ exit_code: 0 }] } } }).ok === false);
-  const soundRow = {
-    id: WI, item_type: 'task', status: 'done',
-    implementation_report: { codeflow_post: { witness: 'validator-rerun', commit: 'c3189c9d58a37d648e9de4a6bcd7d46772053eea', files_changed: ['hooks/x.js'], verification: [{ exit_code: 0 }] } },
-  };
-  assert('TCG closureIsSound: full sound closure → ok', tcg.closureIsSound(soundRow).ok === true,
-    tcg.closureIsSound(soundRow).reason || '');
-  assert('TCG closureIsSound: epic done → ok',
-    tcg.closureIsSound({ id: WI, item_type: 'epic', status: 'done' }).ok === true);
-
-  // pure: extractWorkItemId
-  assert('TCG extractWorkItemId: from field', tcg.extractWorkItemId({ work_item_id: WI }) === WI);
-  assert('TCG extractWorkItemId: from blob', tcg.extractWorkItemId({ task: { note: `closes ${WI}` } }) === WI);
-  assert('TCG extractWorkItemId: none → null', tcg.extractWorkItemId({ task: { note: 'no uuid' } }) === null);
-
-  // pure: flagEnabledEnv default OFF
-  {
-    const prev = process.env.RDC_TRUTHGATE_TASKCOMPLETED;
-    delete process.env.RDC_TRUTHGATE_TASKCOMPLETED;
-    assert('TCG flag default OFF', tcg.flagEnabledEnv() === false);
-    process.env.RDC_TRUTHGATE_TASKCOMPLETED = 'true';
-    assert('TCG flag ON via env', tcg.flagEnabledEnv() === true);
-    if (prev === undefined) delete process.env.RDC_TRUTHGATE_TASKCOMPLETED;
-    else process.env.RDC_TRUTHGATE_TASKCOMPLETED = prev;
-  }
-
-  // pure: flagDbOptIn default OFF, ON via env
-  {
-    const prev = process.env.RDC_TRUTHGATE_TASKCOMPLETED_DB;
-    delete process.env.RDC_TRUTHGATE_TASKCOMPLETED_DB;
-    assert('TCG DB-opt-in default OFF', tcg.flagDbOptIn() === false);
-    process.env.RDC_TRUTHGATE_TASKCOMPLETED_DB = 'on';
-    assert('TCG DB-opt-in ON via env', tcg.flagDbOptIn() === true);
-    if (prev === undefined) delete process.env.RDC_TRUTHGATE_TASKCOMPLETED_DB;
-    else process.env.RDC_TRUTHGATE_TASKCOMPLETED_DB = prev;
-  }
-
-  // process: flag OFF → no-op (exit 0, no block)
-  {
-    const r = runHook('task-completed-gate.js', { work_item_id: WI }, { RDC_TRUTHGATE_TASKCOMPLETED: '' });
-    assert('TCG flag OFF → exit 0 no-op', r.status === 0, `status=${r.status} ${r.stderr}`);
-  }
-
-  // process: flag OFF + DB-opt-in unset → ZERO-COST OFF path makes NO DB call.
-  // Point Supabase + the clauth daemon at a non-routable, slow-to-fail address.
-  // If the OFF path consulted the DB, the call would stall near the hook's
-  // Supabase timeout (~3.5s) / clauth timeout (~2s). The run completing far
-  // under that floor proves no round-trip was attempted.
-  {
-    const t0 = Date.now();
-    const r = runHook('task-completed-gate.js', { work_item_id: WI }, {
-      RDC_TRUTHGATE_TASKCOMPLETED: '',
-      RDC_TRUTHGATE_TASKCOMPLETED_DB: '',     // DB check NOT opted into
-      SUPABASE_URL: 'http://10.255.255.1',    // non-routable: any call would hang
-      SUPABASE_SERVICE_ROLE_KEY: 'x',         // a key IS present, so only the opt-in gate keeps us off the network
-    });
-    const elapsed = Date.now() - t0;
-    assert('TCG OFF path → exit 0', r.status === 0, `status=${r.status} ${r.stderr}`);
-    assert('TCG OFF path makes no DB call (returns well under the network-timeout floor)',
-      elapsed < 1500, `elapsed=${elapsed}ms (a DB round-trip would approach the ~3.5s timeout)`);
-  }
-
-  // process: flag ON + no closure ref → BLOCK (exit 2)
-  {
-    const r = runHook('task-completed-gate.js', { task: { note: 'no uuid here' } },
-      { RDC_TRUTHGATE_TASKCOMPLETED: '1' });
-    assert('TCG flag ON + no work-item ref → exit 2 BLOCK', r.status === 2, `status=${r.status}`);
-    assert('TCG block mentions no work-item reference', /no work-item reference/.test(r.stdout + r.stderr), r.stdout);
-  }
-
-  // process: flag ON + unsound closure (status review via sink) → BLOCK
-  {
-    const dir = mkdtempSync(join(tmpdir(), 'tcg-'));
-    const sink = join(dir, 'closure.json');
-    writeFileSync(sink, JSON.stringify({ id: WI, item_type: 'task', status: 'review', implementation_report: null }));
-    const r = runHook('task-completed-gate.js', { work_item_id: WI },
-      { RDC_TRUTHGATE_TASKCOMPLETED: '1', RDC_TASKCOMPLETED_CLOSURE_SINK: sink });
-    assert('TCG flag ON + unsound closure → exit 2 BLOCK', r.status === 2, `status=${r.status} ${r.stdout}`);
-    rmSync(dir, { recursive: true, force: true });
-  }
-
-  // process: flag ON + sound closure (via sink) → PASS (exit 0)
-  {
-    const dir = mkdtempSync(join(tmpdir(), 'tcg-'));
-    const sink = join(dir, 'closure.json');
-    writeFileSync(sink, JSON.stringify(soundRow));
-    const r = runHook('task-completed-gate.js', { work_item_id: WI },
-      { RDC_TRUTHGATE_TASKCOMPLETED: '1', RDC_TASKCOMPLETED_CLOSURE_SINK: sink });
-    assert('TCG flag ON + sound closure → exit 0 PASS', r.status === 0, `status=${r.status} ${r.stdout}${r.stderr}`);
-    rmSync(dir, { recursive: true, force: true });
-  }
-}
-
 // ===========================================================================
 // 2. foreground-process-gate.js — moved to its own file, tests/foreground-process-gate.test.mjs
 //
@@ -157,57 +40,6 @@ const WI = 'aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee';
 // section is not a coverage loss — see that file instead.
 // ===========================================================================
 
-// ===========================================================================
-// 3. post-tool-batch-gate.js
-// ===========================================================================
-{
-  const ptb = require(join(HOOKS, 'post-tool-batch-gate.js'));
-  const DEV = 'c3189c9d58a37d648e9de4a6bcd7d46772053eea';
-  const STALE = 'deadbeefdeadbeefdeadbeefdeadbeefdeadbeef';
-  const FRESH = '1234567812345678123456781234567812345678';
-
-  // pure: evaluateWave — cannotEvaluate when no develop HEAD
-  {
-    const v = ptb.evaluateWave({ developHead: null, worktrees: [], isAncestor: () => true });
-    assert('PTB evaluateWave: no develop HEAD → cannotEvaluate', v.cannotEvaluate === true && v.ok === false);
-  }
-  // pure: current base (develop is ancestor of worktree HEAD) → ok
-  {
-    const v = ptb.evaluateWave({
-      developHead: DEV,
-      worktrees: [{ path: '/wt/a', head: FRESH }],
-      isAncestor: (a, b) => a === DEV && b === FRESH, // DEV is ancestor of FRESH
-    });
-    assert('PTB evaluateWave: current base → ok, no stale', v.ok === true && v.stale.length === 0);
-  }
-  // pure: worktree HEAD == develop HEAD → ok
-  {
-    const v = ptb.evaluateWave({
-      developHead: DEV,
-      worktrees: [{ path: '/wt/a', head: DEV }],
-      isAncestor: () => false,
-    });
-    assert('PTB evaluateWave: head==develop → ok', v.ok === true && v.stale.length === 0);
-  }
-  // pure: stale base (develop NOT an ancestor) → flagged
-  {
-    const v = ptb.evaluateWave({
-      developHead: DEV,
-      worktrees: [{ path: '/wt/stale', head: STALE }],
-      isAncestor: () => false, // DEV is NOT an ancestor of STALE
-    });
-    assert('PTB evaluateWave: stale base → not ok', v.ok === false, JSON.stringify(v));
-    assert('PTB evaluateWave: stale worktree listed', v.stale.length === 1 && v.stale[0].head === STALE);
-  }
-
-  // process: flag OFF → no-op (exit 0)
-  {
-    const r = runHook('post-tool-batch-gate.js', { hook_event_name: 'PostToolBatch' },
-      { RDC_TRUTHGATE_POSTTOOLBATCH: '' });
-    assert('PTB flag OFF → exit 0 no-op', r.status === 0, `status=${r.status} ${r.stderr}`);
-  }
-}
-
 // ===========================================================================
 // 4. gate-watchdog-selfcheck.js
 // ===========================================================================
@@ -296,6 +128,26 @@ const WI = 'aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee';
     rmSync(home, { recursive: true, force: true });
     rmSync(repo, { recursive: true, force: true });
   }
+
+  // truthGateWiredForEvent (LIFEAI/regen-root#212): since the stage merge the
+  // event registers ONE dispatcher; truth-gate.mjs is named only inside it.
+  {
+    const dir = mkdtempSync(join(tmpdir(), 'wd-stage-'));
+    const stop = join(dir, 'stop.mjs');
+    const other = join(dir, 'other.mjs');
+    writeFileSync(stop, "import './truth-gate.mjs';\n");
+    writeFileSync(other, "console.log('unrelated');\n");
+    const N = 'truth-gate.mjs';
+    assert('WD wired: direct registration → true',
+      wd.truthGateWiredForEvent('Stop::node .claude/hooks/truth-gate.mjs', 'Stop', N) === true);
+    assert('WD wired: via stage dispatcher → true (positive control)',
+      wd.truthGateWiredForEvent(`Stop::node "${stop}"`, 'Stop', N) === true);
+    assert('WD wired: dispatcher that does not reference it → false (negative control)',
+      wd.truthGateWiredForEvent(`Stop::node "${other}"`, 'Stop', N) === false);
+    assert('WD wired: registered on a different event only → false',
+      wd.truthGateWiredForEvent(`SubagentStop::node "${stop}"`, 'Stop', N) === false);
+    rmSync(dir, { recursive: true, force: true });
+  }
 }
 
 // ===========================================================================

package/tests/install-stale-checkout.test.mjs

@@ -0,0 +1,42 @@
+// The installer warns when it runs from a checkout behind origin/master
+// (LIFEAI/regen-root#230). Builds a throwaway origin + clone; no network.
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { test } from 'node:test';
+
+const require = createRequire(import.meta.url);
+const { checkoutBehindMaster } = require('../scripts/install-rdc-skills.js');
+
+const git = (cwd, ...args) => execFileSync('git', args, { cwd, encoding: 'utf8', stdio: 'pipe' }).trim();
+const commit = (cwd, name) => {
+  writeFileSync(join(cwd, name), name);
+  git(cwd, 'add', name);
+  git(cwd, '-c', 'user.name=t', '-c', 'user.email=t@t', 'commit', '-q', '-m', name);
+};
+
+test('checkoutBehindMaster', () => {
+  const dir = mkdtempSync(join(tmpdir(), 'rdc-stale-'));
+  try {
+    const origin = join(dir, 'origin');
+    const clone = join(dir, 'clone');
+    execFileSync('git', ['init', '-q', '-b', 'master', origin]);
+    commit(origin, 'a');
+    execFileSync('git', ['clone', '-q', origin, clone]);
+
+    assert.deepEqual(checkoutBehindMaster(clone), { behind: 0, branch: 'master' });
+
+    git(clone, 'checkout', '-q', '-b', 'old-feature');
+    commit(origin, 'b');
+    commit(origin, 'c');
+    git(clone, 'fetch', '-q', 'origin');
+    assert.deepEqual(checkoutBehindMaster(clone), { behind: 2, branch: 'old-feature' });
+
+    assert.equal(checkoutBehindMaster(join(dir, 'origin-not-a-clone-dir')), null);
+  } finally {
+    rmSync(dir, { recursive: true, force: true });
+  }
+});

package/tests/publish-manifest-staging-gates.test.mjs

@@ -0,0 +1,30 @@
+// staging_gates in a PUBLISH.md DEPLOY block must be a mapping, the shape
+// regen-root scripts/gen-deploy-blocks.mjs emits (LIFEAI/regen-root#210).
+import assert from 'node:assert/strict';
+import { createRequire } from 'node:module';
+import { test } from 'node:test';
+
+const require = createRequire(import.meta.url);
+const { stagingGatesShapeError } = require('../scripts/validate-publish-manifests.js');
+
+const block = (gates) => `\nruntime: next\nport: registry\nhealth_path: /\n${gates}\n# slug: x\n`;
+
+test('generated mapping passes', () => {
+  assert.equal(stagingGatesShapeError(block('staging_gates:\n  tsc_clean: true\n  health_200: true\n  content_probe: true')), null);
+});
+
+test('absent key passes', () => {
+  assert.equal(stagingGatesShapeError(block('')), null);
+});
+
+test('a list fails', () => {
+  assert.match(stagingGatesShapeError(block('staging_gates:\n  - tsc_clean\n  - health_200')), /mapping.*not a list item/);
+});
+
+test('an inline value fails', () => {
+  assert.match(stagingGatesShapeError(block('staging_gates: [tsc_clean]')), /not inline/);
+});
+
+test('a bare key fails', () => {
+  assert.match(stagingGatesShapeError(block('staging_gates:\n  tsc_clean')), /not 'key: value'/);
+});

package/tests/require-work-item-on-commit.test.mjs

@@ -45,6 +45,19 @@ assert('isGitCommit: false for --help',
   hook.isGitCommit('git commit --help') === false);
 assert('isGitCommit: false for unrelated',
   hook.isGitCommit('git status') === false);
+// LIFEAI/regen-root#243: git must be the command word, not a substring anywhere.
+for (const [cmd, want] of [
+  ['( cd /repo && git add a.js && git commit -q -F - <<\'EOF\'\nfix(x): y\nEOF\n)', true],
+  ['git -C "C:/Dev/my repo" commit -m "fix: x"', true],
+  ['GIT_AUTHOR_NAME=x git -c user.email=a@b commit -m "fix: x"', true],
+  ['cd a; git --no-pager commit --amend --no-edit', true],
+  ['node rdc-lesson.mjs submit --what "the git hook fired before commit ran"', false],
+  ['git log --oneline --grep commit', false],
+  ['gh issue create --body "run git commit after staging"', false],
+  ['echo git && echo commit', false],
+]) {
+  assert(`isGitCommit(${JSON.stringify(cmd).slice(0, 60)}) === ${want}`, hook.isGitCommit(cmd) === want);
+}
 assert('commitSucceeded: false on nothing-to-commit',
   hook.commitSucceeded({ stdout: 'nothing to commit, working tree clean' }) === false);
 assert('commitSucceeded: true on exit 0',

package/hooks/post-tool-batch-gate.js

@@ -1,203 +0,0 @@
-#!/usr/bin/env node
-/**
- * post-tool-batch-gate.js — Truth Gate 3.0 Layer 5 (per-wave batch gate).
- *
- * Registered on the `PostToolBatch` event — it fires after a full batch of
- * parallel tool calls resolves, BEFORE the next model call. Per the Claude Code
- * hooks reference, `PostToolBatch` CAN block (exit code 2 stops the agentic
- * loop). After a parallel build wave (multiple Agent dispatches into isolated
- * worktrees), this gate asserts the wave's worktree bases are sane — every agent
- * worktree must be based on the current `develop` HEAD — so a stale-base wave
- * cannot feed fabricated/diverged closures into the next model turn.
- *
- * ⛔ FLAG-GATED, DEFAULT OFF. Until the flag is flipped at deploy this hook is a
- * pure no-op (exit 0) so the in-flight build session is NOT disrupted. When the
- * flag is ON it is FAIL-CLOSED: an inability to confirm worktree-base sanity is
- * a BLOCK, never a silent pass.
- *
- * Flag (default OFF):
- *   - env RDC_TRUTHGATE_POSTTOOLBATCH in {1,true,on,yes}.
- *
- * Worktree-base sanity, per worktree:
- *   - resolve develop HEAD: `git rev-parse refs/heads/develop` in the main repo.
- *   - for each linked worktree (`git worktree list --porcelain`), its base must
- *     equal develop HEAD — i.e. develop is an ancestor of the worktree HEAD
- *     (`git merge-base --is-ancestor <developHead> <worktreeHead>`), OR the
- *     worktree HEAD already IS develop HEAD. A worktree whose base predates the
- *     current develop HEAD is STALE and the wave is flagged.
- *
- * Test seam: inject the git surface via the exported pure `evaluateWave({
- * developHead, worktrees, isAncestor })`, where `worktrees` is
- * [{ path, head }] and `isAncestor(a,b)` returns whether a is an ancestor of b.
- * The pure evaluator has no process/network dependency, so the flag-OFF no-op
- * and the stale-base FLAG branches are provable offline.
- */
-'use strict';
-
-const { execFileSync } = require('child_process');
-const hookLog = require('./hook-logger');
-
-const FULL_SHA_RE = /^[0-9a-f]{40}$/i;
-const MAIN_REPO = process.env.RDC_TRUTH_GATE_REPO || 'C:/Dev/regen-root';
-
-function readStdin() {
-  return new Promise((resolve) => {
-    let input = '';
-    process.stdin.setEncoding('utf8');
-    process.stdin.on('data', (chunk) => { input += chunk; });
-    process.stdin.on('end', () => resolve(input));
-    process.stdin.resume();
-  });
-}
-
-/** Block the batch with exit code 2 (the blocking semantics for PostToolBatch). */
-function block(reason, details = {}) {
-  hookLog('post-tool-batch-gate', 'PostToolBatch', 'block', { reason, ...details });
-  process.stdout.write(JSON.stringify({
-    decision: 'block',
-    reason: `BUILD WAVE FLAGGED — Truth Gate Layer 5 (PostToolBatch).\n\n${reason}`,
-  }));
-  process.stderr.write(`BUILD WAVE FLAGGED: ${reason}\n`);
-  process.exit(2);
-}
-
-function pass(details = {}) {
-  hookLog('post-tool-batch-gate', 'PostToolBatch', 'pass', details);
-  process.exit(0);
-}
-
-/** Default OFF. Only the env switch enables it (test-stable, deploy-flippable). */
-function flagEnabledEnv() {
-  const v = String(process.env.RDC_TRUTHGATE_POSTTOOLBATCH || '').trim().toLowerCase();
-  return v === '1' || v === 'true' || v === 'on' || v === 'yes';
-}
-
-function git(args, { cwd = MAIN_REPO, allowFail = false } = {}) {
-  try {
-    return execFileSync('git', args, {
-      cwd,
-      encoding: 'utf8',
-      stdio: ['ignore', 'pipe', 'pipe'],
-      maxBuffer: 8 * 1024 * 1024,
-    }).trim();
-  } catch (e) {
-    if (allowFail) return null;
-    throw e;
-  }
-}
-
-/** Resolve develop's HEAD SHA in the main repo, or null. */
-function developHead() {
-  const sha = git(['rev-parse', '--verify', '--quiet', 'refs/heads/develop'], { allowFail: true });
-  return sha && FULL_SHA_RE.test(sha) ? sha.toLowerCase() : null;
-}
-
-/** Parse `git worktree list --porcelain` into [{ path, head }] (linked only). */
-function listWorktrees() {
-  const out = git(['worktree', 'list', '--porcelain'], { allowFail: true });
-  if (out == null) return null;
-  const worktrees = [];
-  let cur = null;
-  for (const line of out.split('\n')) {
-    if (line.startsWith('worktree ')) {
-      if (cur) worktrees.push(cur);
-      cur = { path: line.slice('worktree '.length).trim(), head: null, bare: false };
-    } else if (line.startsWith('HEAD ')) {
-      if (cur) cur.head = line.slice('HEAD '.length).trim().toLowerCase();
-    } else if (line.trim() === 'bare') {
-      if (cur) cur.bare = true;
-    }
-  }
-  if (cur) worktrees.push(cur);
-  // Linked worktrees only: drop the bare entry and the primary checkout (== MAIN_REPO).
-  const norm = (p) => String(p || '').replace(/\\/g, '/').replace(/\/+$/, '').toLowerCase();
-  const mainNorm = norm(MAIN_REPO);
-  return worktrees.filter((w) => !w.bare && w.head && norm(w.path) !== mainNorm);
-}
-
-/** True when `git merge-base --is-ancestor a b` (a is an ancestor of b). */
-function isAncestor(a, b) {
-  if (!a || !b) return false;
-  if (a === b) return true;
-  // exit 0 = ancestor, exit 1 = not. allowFail captures the non-zero exit.
-  try {
-    execFileSync('git', ['merge-base', '--is-ancestor', a, b], {
-      cwd: MAIN_REPO,
-      stdio: ['ignore', 'ignore', 'ignore'],
-    });
-    return true;
-  } catch (_) {
-    return false;
-  }
-}
-
-/**
- * Pure wave evaluator (unit-testable, no process/network). Returns
- * { stale: [{ path, head }], ok: boolean }. A worktree is STALE when develop
- * HEAD is NOT an ancestor of its HEAD (its base predates current develop), and
- * its HEAD is not develop HEAD itself.
- *
- * @param {object} surface
- * @param {string|null}            surface.developHead  develop HEAD SHA (null → cannot evaluate)
- * @param {Array<{path,head}>}     surface.worktrees    linked worktrees
- * @param {(a:string,b:string)=>boolean} surface.isAncestor
- */
-function evaluateWave({ developHead, worktrees, isAncestor: anc }) {
-  if (!developHead) {
-    return { ok: false, cannotEvaluate: true, stale: [] };
-  }
-  const list = Array.isArray(worktrees) ? worktrees : [];
-  const stale = [];
-  for (const w of list) {
-    if (!w || !w.head) continue;
-    const based = w.head === developHead || anc(developHead, w.head);
-    if (!based) stale.push({ path: w.path, head: w.head });
-  }
-  return { ok: stale.length === 0, cannotEvaluate: false, stale };
-}
-
-async function main() {
-  // Drain stdin (PostToolBatch payload) — we don't need its body, but the event
-  // delivers JSON on stdin and the process should consume it cleanly.
-  try { await readStdin(); } catch (_) {}
-
-  // Default-OFF: a no-op until the flag is flipped at deploy.
-  if (!flagEnabledEnv()) return pass({ reason: 'flag-off' });
-
-  // FAIL-CLOSED from here.
-  const head = developHead();
-  const worktrees = listWorktrees();
-  if (head == null || worktrees == null) {
-    block(
-      `Could not read git state in ${MAIN_REPO} (develop HEAD or worktree list unavailable). ` +
-      `Fail-closed: cannot confirm the build wave's worktree bases are current.`,
-    );
-  }
-
-  const verdict = evaluateWave({ developHead: head, worktrees, isAncestor });
-  if (verdict.cannotEvaluate) {
-    block(`develop HEAD could not be resolved; fail-closed — cannot confirm worktree-base sanity for this wave.`);
-  }
-  if (!verdict.ok) {
-    const lines = verdict.stale.map((s) => `  - ${s.path} @ ${s.head.slice(0, 9)} (base predates develop ${head.slice(0, 9)})`).join('\n');
-    block(
-      `One or more build-wave worktrees are NOT based on the current develop HEAD ${head.slice(0, 9)}:\n${lines}\n\n` +
-      `A wave built on a stale base can feed diverged/fabricated closures into the next turn. ` +
-      `Rebase each worktree onto develop (git fetch && git rebase origin/develop), re-run its verification, then continue.`,
-      { developHead: head, stale: verdict.stale },
-    );
-  }
-
-  pass({ developHead: head, worktreeCount: worktrees.length });
-}
-
-if (require.main === module) {
-  main().catch((e) => block(`post-tool-batch-gate crashed: ${e.message}`));
-} else {
-  module.exports = {
-    flagEnabledEnv,
-    evaluateWave,
-    listWorktrees,
-    developHead,
-  };
-}