@orkestrel/scaffold 0.0.46 → 0.0.48

package/dist/host/tests/config.test.ts

@@ -18,7 +18,7 @@ import { fileURLToPath, pathToFileURL } from 'node:url'
 import { build, loadConfigFromFile } from 'vite'
 import { RuleTester } from 'oxlint/plugins-dev'
 import * as configHelpers from '../configs/helpers.js'
-import { MOCKING_RULE, PRIVACY_RULE } from '../configs/policy.js'
+import { MOCKING_RULE, NESTED_RULE, PRIVACY_RULE } from '../configs/policy.js'
 import configuration, { resolveWorkspacePath } from '../vite.config.js'
 import tsconfig from '../tsconfig.json' with { type: 'json' }
 import { createPolicyScratch, inspectPolicyConfiguration } from './setupPolicy.js'
@@ -62,7 +62,13 @@ describe('root configuration', () => {
 	it('registers every workspace project with its fixed include and setup files', () => {
 		const expected = new Map<
 			string,
-			{ readonly include: string; readonly setup: readonly string[] }
+			{
+				readonly benchmark?: readonly string[]
+				readonly include: string
+				readonly parallel?: boolean
+				readonly pool?: string
+				readonly setup: readonly string[]
+			}
 		>()
 		if (existsSync(resolve(root, 'src/core'))) {
 			expected.set('src:core', {
@@ -139,7 +145,13 @@ describe('root configuration', () => {
 				setup: ['./tests/setup.ts', './tests/setupService.ts'],
 			})
 		}
-		expected.set('probe', { include: 'tmp/probe/**/*.test.ts', setup: ['./tests/setup.ts'] })
+		expected.set('probe', {
+			benchmark: ['tmp/probe/**/*.test.ts', 'tests/**/*.test.ts'],
+			include: 'tmp/probe/**/*.test.ts',
+			parallel: false,
+			pool: 'threads',
+			setup: ['./tests/setup.ts'],
+		})
 		// A row that is a configuration rather than a factory. A workspace with a
 		// browser application emits one, because that factory refuses overrides and
 		// so is not a value Vitest may call. It is required here, in a workspace that
@@ -174,7 +186,13 @@ describe('root configuration', () => {
 		const controlled = projects.concat(control, concrete)
 		const configured = new Map<
 			string,
-			{ readonly include: string; readonly setup: readonly string[] }
+			{
+				readonly benchmark?: readonly string[]
+				readonly include: string
+				readonly parallel?: boolean
+				readonly pool?: string
+				readonly setup: readonly string[]
+			}
 		>()
 		for (const [requiredLabel] of expected) {
 			const factoryName = requiredLabel.replace(/:([a-z])/gu, (_match, letter: string) =>
@@ -227,6 +245,34 @@ describe('root configuration', () => {
 			if (effective.length !== 1 || typeof effective[0] !== 'string') {
 				throw new Error(`${label} does not resolve to one effective include`)
 			}
+			if (label === 'probe') {
+				const benchmark: unknown = Object.getOwnPropertyDescriptor(test, 'benchmark')?.value
+				const parallel: unknown = Object.getOwnPropertyDescriptor(test, 'fileParallelism')?.value
+				const pool: unknown = Object.getOwnPropertyDescriptor(test, 'pool')?.value
+				if (typeof benchmark !== 'object' || benchmark === null) {
+					throw new Error('The probe project carries no benchmark block')
+				}
+				const benchmarkInclude: unknown = Object.getOwnPropertyDescriptor(
+					benchmark,
+					'include',
+				)?.value
+				if (
+					!Array.isArray(benchmarkInclude) ||
+					!benchmarkInclude.every((path) => typeof path === 'string') ||
+					typeof parallel !== 'boolean' ||
+					typeof pool !== 'string'
+				) {
+					throw new Error('The probe project carries an invalid benchmark configuration')
+				}
+				configured.set(label, {
+					benchmark: benchmarkInclude,
+					include: effective[0],
+					parallel,
+					pool,
+					setup: [...new Set(setup)],
+				})
+				continue
+			}
 			configured.set(label, { include: effective[0], setup: [...new Set(setup)] })
 		}
 
@@ -573,23 +619,114 @@ describe('policy plugin', () => {
 		],
 	})
 
+	tester.run('no-nested-functions', NESTED_RULE, {
+		valid: [
+			{
+				name: 'accepts a module-scope function',
+				code: 'function projectValue() { return 1 }',
+			},
+			{
+				name: 'accepts an anonymous callback passed directly',
+				code: 'function projectValues() { return values.map((value) => value + 1) }',
+			},
+			{
+				name: 'accepts an anonymous arrow returned directly',
+				code: 'function createProjector() { return () => 1 }',
+			},
+			{
+				name: 'accepts the sanctioned policy visitor delegation',
+				code: [
+					'function reportNode(context, node) { context.report({ node }) }',
+					'const RULE = {',
+					'create(context) {',
+					'return { CallExpression: (node) => reportNode(context, node) }',
+					'}',
+					'}',
+				].join('\n'),
+			},
+			{
+				name: 'accepts function syntax inside a class expression',
+				code: 'function projectValue() { return class { read() { const value = () => 1; return value() } } }',
+			},
+			{
+				name: 'accepts class accessors inside a factory',
+				code: 'function createAccessor() { class Accessor { get value() { return 1 } set value(value) { consume(value) } } return Accessor }',
+			},
+		],
+		invalid: [
+			{
+				name: 'accepts object accessors while rejecting nested function expressions',
+				code: [
+					'function createAccessor() {',
+					'  const control = function () { return 1 }',
+					'  return {',
+					'    get value() {',
+					'      const nested = function () { return 2 }',
+					'      return nested()',
+					'    },',
+					'    set value(value) { consume(value) },',
+					'  }',
+					'}',
+				].join('\n'),
+				errors: [
+					{ messageId: 'nested', line: 2, column: 18 },
+					{ messageId: 'nested', line: 5, column: 21 },
+				],
+			},
+			{
+				name: 'rejects a local function declaration',
+				code: 'function projectValue() { function readValue() { return 1 } return readValue() }',
+				errors: [{ messageId: 'nested' }],
+			},
+			{
+				name: 'rejects a function assigned to a local binding',
+				code: 'function projectValue() { const readValue = () => 1; return readValue() }',
+				errors: [{ messageId: 'nested' }],
+			},
+			{
+				name: 'rejects a named function expression argument',
+				code: 'function projectValue() { return read(function readValue() { return 1 }) }',
+				errors: [{ messageId: 'nested' }],
+			},
+			{
+				name: 'rejects a callback parameter default function',
+				code: 'function projectValue() { return values.map((value = () => 1) => value()) }',
+				errors: [{ messageId: 'nested' }],
+			},
+			{
+				name: 'rejects an assignment two direct callbacks down',
+				code: 'function projectValue() { return values.map((value) => read((nested) => { const project = () => nested; return project() })) }',
+				errors: [{ messageId: 'nested' }],
+			},
+			{
+				name: 'rejects a function assigned inside a class-declaration method',
+				code: 'class Project { read() { const value = () => 1; return value() } }',
+				errors: [{ messageId: 'nested' }],
+			},
+		],
+	})
+
 	it('loads every configured policy rule through the real binary', () => {
 		const scratch = createPolicyScratch({ prefix: 'orkestrel-config-policy-' })
 		try {
+			scratch.write('.oxlintrc.json', readFileSync(resolve(root, '.oxlintrc.json'), 'utf8'))
+			scratch.write('configs/policy.ts', readFileSync(resolve(root, 'configs/policy.ts'), 'utf8'))
 			scratch.write(
-				'violations/fixture.ts',
+				'src/violations/fixture.ts',
 				[
 					"vi.mock('./x')",
 					'class PrivateMember { private value = 1 }',
 					'class ParameterMember { constructor(readonly value: string) {} }',
 					'class PublicMember { public value = 1 }',
+					'function OuterFunction() { const nested = () => undefined; return nested() }',
 					'void PrivateMember',
 					'void ParameterMember',
 					'void PublicMember',
+					'void OuterFunction',
 				].join('\n'),
 			)
 			scratch.write(
-				'clean/fixture.ts',
+				'src/clean/fixture.ts',
 				[
 					'class CleanMember {',
 					'\t#value = 1',
@@ -621,16 +758,16 @@ describe('policy plugin', () => {
 				throw new Error('The oxlint package declares no bin.oxlint entry')
 			}
 			const binary = resolve(dirname(manifestPath), entry)
-			const config = resolve(root, '.oxlintrc.json')
+			const config = resolve(scratch.path, '.oxlintrc.json')
 			const violations = spawnSync(
 				process.execPath,
-				[binary, '--config', config, '--format', 'json', resolve(scratch.path, 'violations')],
-				{ cwd: root, encoding: 'utf8', timeout: 15_000 },
+				[binary, '--config', config, '--format', 'json', 'src/violations'],
+				{ cwd: scratch.path, encoding: 'utf8', timeout: 15_000 },
 			)
 			const clean = spawnSync(
 				process.execPath,
-				[binary, '--config', config, '--format', 'json', resolve(scratch.path, 'clean')],
-				{ cwd: root, encoding: 'utf8', timeout: 15_000 },
+				[binary, '--config', config, '--format', 'json', 'src/clean'],
+				{ cwd: scratch.path, encoding: 'utf8', timeout: 15_000 },
 			)
 			const reports: string[][] = []
 			for (const result of [violations, clean]) {
@@ -664,6 +801,7 @@ describe('policy plugin', () => {
 			for (const rule of [
 				'policy(no-mocking)',
 				'policy(no-keyword-privacy)',
+				'policy(no-nested-functions)',
 				'typescript(parameter-properties)',
 				'typescript(explicit-member-accessibility)',
 			]) {

package/dist/host/tests/policy.test.ts

@@ -19,6 +19,7 @@ import {
 	SKILL_POLICY_BACKTICKED,
 	SKILL_POLICY_CONTROLS,
 	SKILL_POLICY_EXCLUSION,
+	SKILL_POLICY_FENCED,
 	SKILL_POLICY_FOLDED,
 	SKILL_POLICY_PARAGRAPHS,
 	stemToPolicyCandidates,
@@ -359,6 +360,7 @@ describe('skill family policy', () => {
 			const violations = inspectPolicyControl(control)
 			expect(violations).toHaveLength(1)
 			expect(violations[0]?.rule).toBe(control.rule)
+			expect(control.line === undefined || violations[0]?.line === control.line).toBe(true)
 			expect(control.message === undefined || violations[0]?.message === control.message).toBe(true)
 		})
 	}
@@ -375,6 +377,10 @@ describe('skill family policy', () => {
 		expect(inspectPolicyControl(SKILL_POLICY_BACKTICKED)).toEqual([])
 	})
 
+	it(`${SKILL_POLICY_FENCED.label} [membership: ${SKILL_POLICY_FENCED.membership}]`, () => {
+		expect(inspectPolicyControl(SKILL_POLICY_FENCED)).toEqual([])
+	})
+
 	it('parses a folded description containing more than one paragraph', () => {
 		const skill = SKILL_POLICY_PARAGRAPHS.files.find((file) => file.path.endsWith('/SKILL.md'))
 		const frontmatter = parseSkillFrontmatter(skill?.content ?? '')
@@ -401,6 +407,7 @@ describe('skill bridge policy', () => {
 			const violations = inspectPolicyControl(control)
 			expect(violations).toHaveLength(1)
 			expect(violations[0]?.rule).toBe(control.rule)
+			expect(control.line === undefined || violations[0]?.line === control.line).toBe(true)
 			expect(control.message === undefined || violations[0]?.message === control.message).toBe(true)
 		})
 	}

package/dist/host/tests/setupPolicy.ts

@@ -47,6 +47,8 @@ export interface PolicyControl {
 	readonly membership: string
 	readonly rule: PolicyRule
 	readonly files: readonly PolicySource[]
+	readonly directories?: readonly string[]
+	readonly line?: number
 	readonly message?: string
 }
 
@@ -1169,6 +1171,67 @@ export function extractSkillReferences(content: string): readonly string[] {
 	return [...references].sort()
 }
 
+/**
+ * Inspects one skill document for template TODOs outside Markdown code.
+ *
+ * Coverage includes each literal `TODO` outside a matched pair of single backticks on one line and
+ * outside a backtick or tilde fence indented by no more than three spaces. A fence starts with at
+ * least three matching markers and ends on a later line starting with the same marker. Four spaces
+ * start an indented code block, which this fence scanner does not interpret. An unterminated fence
+ * excludes the rest of the file. Inline spans cannot cross lines, and the line discipline cannot
+ * validate escaped or repeated delimiters or distinguish a backtick inside a code span's language
+ * tag.
+ *
+ * @param rule - The canonical-skill or provider-bridge population being inspected.
+ * @param path - The workspace-relative skill document path.
+ * @param content - The raw Markdown text.
+ * @returns Every template-TODO violation in line and occurrence order.
+ */
+export function inspectSkillTemplateTODOs(
+	rule: 'bridge' | 'skill',
+	path: string,
+	content: string,
+): readonly PolicyViolation[] {
+	const violations: PolicyViolation[] = []
+	const lines = content.split(/\r\n|\r|\n/u)
+	let fence: string | undefined
+	for (let index = 0; index < lines.length; index += 1) {
+		const line = lines[index]
+		if (line === undefined) continue
+		const fenceLine = line.replace(/^ {0,3}/u, '')
+		if (fence !== undefined) {
+			if (fenceLine.startsWith(fence)) fence = undefined
+			continue
+		}
+		const opening = fenceLine.match(/^(`{3,}|~{3,})/u)?.[1]
+		if (opening !== undefined) {
+			fence = opening
+			continue
+		}
+		let cursor = 0
+		while (cursor < line.length) {
+			const openingBacktick = line.indexOf('`', cursor)
+			const end = openingBacktick === -1 ? line.length : openingBacktick
+			for (
+				let todo = line.indexOf('TODO', cursor);
+				todo !== -1 && todo < end;
+				todo = line.indexOf('TODO', todo + 4)
+			) {
+				violations.push({
+					rule,
+					path,
+					line: index + 1,
+					message: 'skill documents contain no template TODOs',
+				})
+			}
+			if (openingBacktick === -1) break
+			const closingBacktick = line.indexOf('`', openingBacktick + 1)
+			cursor = closingBacktick === -1 ? openingBacktick + 1 : closingBacktick + 1
+		}
+	}
+	return violations
+}
+
 /**
  * Inspect one discovered skill's required files, metadata, token, and references.
  *
@@ -1182,7 +1245,8 @@ export function inspectSkill(root: string, name: string): readonly PolicyViolati
 	const metadata = `${base}/agents/openai.yaml`
 	const violations: PolicyViolation[] = []
 	let content: string | undefined
-	if (!isPolicyFile(root, skill)) {
+	const hasSkill = isPolicyFile(root, skill)
+	if (!hasSkill) {
 		violations.push(
 			createPolicyViolation('skill', skill, 'skill requires an exact-case regular SKILL.md'),
 		)
@@ -1226,8 +1290,10 @@ export function inspectSkill(root: string, name: string): readonly PolicyViolati
 				)
 			}
 		}
+		violations.push(...inspectSkillTemplateTODOs('skill', skill, content))
 	}
-	if (!isPolicyFile(root, metadata)) {
+	const hasMetadata = isPolicyFile(root, metadata)
+	if (!hasMetadata) {
 		violations.push(
 			createPolicyViolation(
 				'skill',
@@ -1267,6 +1333,10 @@ export function inspectSkill(root: string, name: string): readonly PolicyViolati
 						`SKILL.md reference resolves to an exact-case regular file: ${reference}`,
 					),
 				)
+			} else {
+				violations.push(
+					...inspectSkillTemplateTODOs('skill', path, readFileSync(join(root, path), 'utf8')),
+				)
 			}
 		}
 	}
@@ -1298,8 +1368,28 @@ export function inspectSkill(root: string, name: string): readonly PolicyViolati
 	const directory = resolvePolicyDirectory(root, base)
 	if (directory !== undefined) {
 		for (const path of globSync('**/*', { cwd: directory }).map(normalizePolicyPath).sort()) {
+			if (resolvePolicyDirectory(directory, path) !== undefined) {
+				if (
+					path === 'agents' ||
+					path === 'references' ||
+					path.startsWith('references/') ||
+					(!hasSkill && path.toLowerCase() === 'skill.md') ||
+					(!hasMetadata && path.toLowerCase() === 'agents/openai.yaml')
+				) {
+					continue
+				}
+				violations.push(
+					createPolicyViolation(
+						'skill',
+						`${base}/${path}`,
+						'skill directory contains only agents/ and references/ directories',
+					),
+				)
+				continue
+			}
+			if (!isPolicyFile(directory, path)) continue
 			const file = basename(path).toLowerCase()
-			if ((file === 'readme.md' || file === 'changelog.md') && isPolicyFile(directory, path)) {
+			if (file === 'readme.md' || file === 'changelog.md') {
 				violations.push(
 					createPolicyViolation(
 						'skill',
@@ -1307,7 +1397,26 @@ export function inspectSkill(root: string, name: string): readonly PolicyViolati
 						'skill directory contains no README.md or CHANGELOG.md',
 					),
 				)
+				continue
 			}
+			if (
+				path === 'SKILL.md' ||
+				path === 'agents/openai.yaml' ||
+				/^references\/[^/]+\.md$/u.test(path) ||
+				(!hasSkill &&
+					(path.toLowerCase() === 'skill.md' || path.toLowerCase().startsWith('skill.md/'))) ||
+				(!hasMetadata && path.toLowerCase() === 'agents/openai.yaml') ||
+				(path.startsWith('references/') && path.slice('references/'.length).includes('/'))
+			) {
+				continue
+			}
+			violations.push(
+				createPolicyViolation(
+					'skill',
+					`${base}/${path}`,
+					'skill directory contains only SKILL.md, agents/openai.yaml, and references/*.md',
+				),
+			)
 		}
 	}
 	return violations
@@ -1400,6 +1509,7 @@ export function inspectBridge(root: string, name: string): readonly PolicyViolat
 			),
 		)
 	}
+	violations.push(...inspectSkillTemplateTODOs('bridge', bridgePath, content))
 	if (resolvePolicyDirectory(root, `${bridgeBase}/references`) !== undefined) {
 		violations.push(
 			createPolicyViolation(
@@ -1482,6 +1592,11 @@ export function inspectPolicyControl(control: PolicyControl): readonly PolicyVio
 		for (const file of control.files) {
 			scratch.write(file.path, file.content)
 		}
+		for (const directory of control.directories ?? []) {
+			const marker = `${directory}/.policy-control`
+			scratch.write(marker, '')
+			rmSync(join(scratch.path, marker))
+		}
 		if (control.rule === 'skill') return inspectSkillFamily(scratch.path)
 		if (control.rule === 'bridge') return inspectSkillBridges(scratch.path)
 		return inspectPolicyWorkspace(scratch.path)
@@ -1856,6 +1971,52 @@ export const SKILL_POLICY_CONTROLS: readonly PolicyControl[] = Object.freeze([
 			{ path: '.agents/skills/sample/references/orphan.md', content: '# Orphan\n' },
 		],
 	},
+	{
+		label: 'rejects a template TODO in skill prose',
+		membership:
+			'TODO occurrences outside inline backtick spans and fences indented no more than three spaces in canonical SKILL.md files and the references/*.md files they name',
+		rule: 'skill',
+		message: 'skill documents contain no template TODOs',
+		files: [
+			{
+				path: '.agents/skills/sample/SKILL.md',
+				content: `${SKILL_POLICY_TEXT}\nTODO: describe the workflow\n`,
+			},
+			{ path: '.agents/skills/sample/agents/openai.yaml', content: createSkillMetadata('sample') },
+		],
+	},
+	{
+		label: 'rejects a template TODO in a CR-only skill reference',
+		membership:
+			'TODO occurrences outside inline backtick spans and fenced code blocks in named canonical skill references using CR line endings',
+		rule: 'skill',
+		line: 5,
+		message: 'skill documents contain no template TODOs',
+		files: [
+			{ path: '.agents/skills/sample/SKILL.md', content: SKILL_REFERENCE_TEXT },
+			{ path: '.agents/skills/sample/agents/openai.yaml', content: createSkillMetadata('sample') },
+			{
+				path: '.agents/skills/sample/references/example.md',
+				content: '# Example\r```text\rTODO: fenced\r```\rTODO: describe the workflow\r',
+			},
+		],
+	},
+	{
+		label: 'rejects a template TODO in a four-space-indented fence opener',
+		membership:
+			'TODO occurrences inside a four-space-indented fence opener and closer, which forms an indented code block outside the fence population, in discovered skill documents',
+		rule: 'skill',
+		message: 'skill documents contain no template TODOs',
+		files: [
+			{
+				path: '.agents/skills/sample/SKILL.md',
+				content:
+					SKILL_POLICY_TEXT +
+					'\n3. Return the verdict.\n\n    ```text\n    TODO: describe the workflow\n    ```\n',
+			},
+			{ path: '.agents/skills/sample/agents/openai.yaml', content: createSkillMetadata('sample') },
+		],
+	},
 	{
 		label: 'rejects a nested references directory',
 		membership: 'directories directly beneath a discovered skill references directory',
@@ -1875,8 +2036,30 @@ export const SKILL_POLICY_CONTROLS: readonly PolicyControl[] = Object.freeze([
 		files: [
 			{ path: '.agents/skills/sample/SKILL.md', content: SKILL_POLICY_TEXT },
 			{ path: '.agents/skills/sample/agents/openai.yaml', content: createSkillMetadata('sample') },
-			{ path: '.agents/skills/sample/docs/CHANGELOG.MD', content: '# Changes\n' },
+			{ path: '.agents/skills/sample/CHANGELOG.MD', content: '# Changes\n' },
+		],
+	},
+	{
+		label: 'rejects a non-contract file in a skill directory',
+		membership: 'regular files at any depth inside a discovered skill directory',
+		rule: 'skill',
+		message: 'skill directory contains only SKILL.md, agents/openai.yaml, and references/*.md',
+		files: [
+			{ path: '.agents/skills/sample/SKILL.md', content: SKILL_POLICY_TEXT },
+			{ path: '.agents/skills/sample/agents/openai.yaml', content: createSkillMetadata('sample') },
+			{ path: '.agents/skills/sample/run.sh', content: '#!/bin/sh\n' },
+		],
+	},
+	{
+		label: 'rejects an empty non-contract directory in a skill directory',
+		membership: 'directories at any depth inside a discovered skill directory',
+		rule: 'skill',
+		message: 'skill directory contains only agents/ and references/ directories',
+		files: [
+			{ path: '.agents/skills/sample/SKILL.md', content: SKILL_POLICY_TEXT },
+			{ path: '.agents/skills/sample/agents/openai.yaml', content: createSkillMetadata('sample') },
 		],
+		directories: ['.agents/skills/sample/assets'],
 	},
 	{
 		label: 'rejects a missing exact-case SKILL.md',
@@ -2048,6 +2231,20 @@ export const BRIDGE_POLICY_CONTROLS: readonly PolicyControl[] = Object.freeze([
 			},
 		],
 	},
+	{
+		label: 'rejects a template TODO in bridge prose',
+		membership:
+			'TODO occurrences outside inline backtick spans and fenced code blocks in exact-case bridge SKILL.md files shared with the canonical family',
+		rule: 'bridge',
+		message: 'skill documents contain no template TODOs',
+		files: [
+			{ path: '.agents/skills/sample/SKILL.md', content: SKILL_POLICY_TEXT },
+			{
+				path: '.claude/skills/sample/SKILL.md',
+				content: `${SKILL_BRIDGE_TEXT}\nTODO: describe the bridge\n`,
+			},
+		],
+	},
 	{
 		label: 'rejects a references directory owned by a provider bridge',
 		membership: 'shared provider bridge directories',
@@ -2087,16 +2284,33 @@ export const SKILL_POLICY_FOLDED: PolicyControl = Object.freeze({
 	],
 })
 
-/** A trigger sentence whose first subject is a backticked command token. */
+/** A healthy skill reference whose prose carries the documented backticked TODO form. */
 export const SKILL_POLICY_BACKTICKED: PolicyControl = Object.freeze({
-	label: 'accepts a backticked token after Use',
-	membership: 'single-line descriptions in discovered skill frontmatter',
+	label: 'accepts a backticked TODO in skill prose',
+	membership: 'TODO occurrences inside matched inline backtick spans in discovered skill documents',
+	rule: 'skill',
+	files: [
+		{ path: '.agents/skills/sample/SKILL.md', content: SKILL_REFERENCE_TEXT },
+		{ path: '.agents/skills/sample/agents/openai.yaml', content: createSkillMetadata('sample') },
+		{
+			path: '.agents/skills/sample/references/example.md',
+			content: '- every `TODO`, deferred branch, placeholder, or documented omission in scope.\n',
+		},
+	],
+})
+
+/** A healthy skill whose fenced example carries a template-TODO spelling. */
+export const SKILL_POLICY_FENCED: PolicyControl = Object.freeze({
+	label: 'accepts a TODO in a three-space-indented fenced skill example',
+	membership:
+		'TODO occurrences inside fenced code blocks indented no more than three spaces in discovered skill documents',
 	rule: 'skill',
 	files: [
 		{
 			path: '.agents/skills/sample/SKILL.md',
 			content:
-				'---\nname: sample\ndescription: Use `--app` when a policy fixture needs it.\n---\n\n# Skill\n',
+				SKILL_POLICY_TEXT +
+				'\n3. Return the verdict.\n\n   ```text\n   TODO: describe the workflow\n   ```\n',
 		},
 		{ path: '.agents/skills/sample/agents/openai.yaml', content: createSkillMetadata('sample') },
 	],