@selesai/code 0.9.11 → 0.9.12

package/dist/skills/unlazy/tests/self-check.mjs

@@ -0,0 +1,165 @@
+#!/usr/bin/env node
+// self-check.mjs : structural checks on the skill's own scripts.
+//
+//   node tests/self-check.mjs
+//
+// Lives in a file rather than as an inline `node -e` in GATES.md on purpose: a
+// one-liner containing quotes, "^" or "!" is parsed differently by cmd.exe and
+// by sh, so an inline check can pass on one platform and report a phantom
+// failure on the other. A CHECK line should name a script, not embed one.
+//
+// Prints "self-check ok (N/N)" on success, which is what the gate matches.
+
+import { readFileSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const ROOT = join(dirname(fileURLToPath(import.meta.url)), "..");
+const SCRIPTS = [
+  "scripts/gate-check.mjs",
+  "scripts/gate-lint.mjs",
+  "scripts/dispatch-check.mjs",
+  "scripts/stop-hook.mjs",
+  "scripts/install-hooks.mjs",
+  "scripts/lib/gates.mjs",
+  "scripts/lib/dispatch.mjs",
+  "scripts/lib/check-supervisor.mjs",
+  "scripts/lib/process-tree.mjs",
+  "scripts/lib/regex-worker.mjs",
+  "tests/run-tests.mjs",
+  "tests/dispatch-tests.mjs",
+  "tests/hardening-tests.mjs",
+  "tests/stress-tests.mjs",
+  "tests/lint-tests.mjs",
+  "tests/contract-tests.mjs",
+  "tests/self-check.mjs",
+];
+
+const read = (p) => readFileSync(join(ROOT, p), "utf8");
+const checks = [];
+const check = (name, fn) => checks.push({ name, fn });
+
+check("zero non-stdlib imports", () => {
+  const bad = [];
+  for (const p of SCRIPTS) {
+    for (const m of read(p).matchAll(/^\s*import\s[^;]*?from\s+["']([^"']+)["']/gm)) {
+      const spec = m[1];
+      if (!spec.startsWith("node:") && !spec.startsWith(".")) bad.push(p + " -> " + spec);
+    }
+  }
+  return bad.length ? "non-stdlib import: " + bad.join(", ") : null;
+});
+
+check("one shared gate parser", () => {
+  // The v2.0 checker and hook each had their own GATE_RE and disagreed about a
+  // gate's id when it carried no "Gn:" prefix. Parsing now lives only in the lib.
+  // This file names GATE_RE to describe the rule, so it scans only scripts/.
+  const owners = SCRIPTS.filter(p => p.startsWith("scripts/") && read(p).includes("GATE_RE"));
+  return owners.length === 1 && owners[0] === "scripts/lib/gates.mjs"
+    ? null
+    : "GATE_RE should exist only in scripts/lib/gates.mjs, found in: " + owners.join(", ");
+});
+
+check("no index-arithmetic argument filtering", () => {
+  // The v2.0 arg filter dropped index tIdx+1, which is 0 when --timeout is
+  // absent, silently discarding the first file argument.
+  return read("scripts/gate-check.mjs").includes("i !== tIdx + 1")
+    ? "gate-check.mjs still filters arguments by index arithmetic"
+    : null;
+});
+
+check("gate files are written atomically", () => {
+  const src = read("scripts/gate-check.mjs");
+  if (!src.includes("writeAtomic")) return "gate-check.mjs does not write via writeAtomic";
+  if (!src.includes("withFileLock")) return "gate-check.mjs does not take a lock before writing";
+  return null;
+});
+
+check("checks wait for close and cap output", () => {
+  const src = read("scripts/gate-check.mjs");
+  if (!src.includes('child.once("close"')) return "gate runner does not settle on stdio close";
+  if (src.includes('child.once("exit"')) return "gate runner settles on exit before stdio close";
+  if (!src.includes("MAX_OUTPUT_BYTES")) return "gate runner has no explicit output cap";
+  return null;
+});
+
+check("approval identity binds execution semantics", () => {
+  const src = read("scripts/gate-check.mjs");
+  const required = [
+    "check:", "expect:", "cwd", "shell", "timeoutMs", "maxOutputBytes",
+    "regexTimeoutMs", "regexStartupTimeoutMs", "maxRegexWorkers", "platform", "path:",
+  ];
+  const missing = required.filter(token => !src.includes(token));
+  return missing.length ? "approval oracle missing source tokens: " + missing.join(", ") : null;
+});
+
+check("the hook resolves a scope rather than globbing the tree", () => {
+  const src = read("scripts/stop-hook.mjs");
+  if (!src.includes("resolveTarget")) return "stop-hook.mjs does not resolve a scope";
+  if (!src.includes("hookStatePath")) return "stop-hook.mjs does not use a per-scope state path";
+  return null;
+});
+
+check("every local resource the skill names exists", () => {
+  const skill = read("SKILL.md");
+  const missing = [];
+  const named = new Set();
+  for (const m of skill.matchAll(/`((?:references|templates|scripts)\/[^`\s]+|SECURITY\.md)`/g)) named.add(m[1]);
+  for (const path of named) {
+    try { read(path); } catch { missing.push(path); }
+  }
+  return missing.length ? "SKILL.md names missing local resources: " + missing.join(", ") : null;
+});
+
+check("all executable sources retain the Node 16 floor", () => {
+  const bad = SCRIPTS.filter(p => /Node 1[89]\+/.test(read(p)));
+  return bad.length ? "newer runtime claim in: " + bad.join(", ") : null;
+});
+
+check("the PLAN template carries a revisioned contract denominator", () => {
+  const plan = read("templates/PLAN.md");
+  const required = [
+    "Current contract inventory", "Contract revision", "Required outcome or constraint",
+    "Owner", "Observing gate or manual review", "Disposition", "REMOVED_BY_USER",
+  ];
+  const missing = required.filter((token) => !plan.includes(token));
+  return missing.length ? "PLAN contract inventory missing: " + missing.join(", ") : null;
+});
+
+check("request reconciliation keeps the focused solo cheap path", () => {
+  const skill = read("SKILL.md");
+  if (!skill.toLowerCase().includes("re-read the current request")) return "SKILL.md lacks final request reread";
+  if (!skill.includes("a PLAN table is not required")) return "focused solo path was made needlessly orchestrated";
+  if (!read("references/orchestration.md").includes("review every current contract row")) {
+    return "orchestration guide lacks final contract reconciliation";
+  }
+  return null;
+});
+
+check("abandonment is terminal handoff rather than ALL MET", () => {
+  const checker = read("scripts/gate-check.mjs");
+  const hook = read("scripts/stop-hook.mjs");
+  if (!checker.includes("HANDOFF REQUIRED") || !checker.includes("totalAbandoned === 0")) {
+    return "gate checker can still classify abandonment as completion";
+  }
+  if (!hook.includes("HANDOFF REQUIRED") || !hook.includes("handoffs")) {
+    return "Stop hook does not surface bounded abandonment handoff";
+  }
+  return null;
+});
+
+let passed = 0;
+const failures = [];
+for (const c of checks) {
+  let problem;
+  try { problem = c.fn(); } catch (e) { problem = e.message; }
+  if (problem) { failures.push(c.name + ": " + problem); console.log("FAIL " + c.name + "\n     " + problem); }
+  else { passed++; console.log("ok   " + c.name); }
+}
+
+console.log("");
+if (failures.length) {
+  console.log("self-check FAILED (" + passed + "/" + checks.length + ")");
+  process.exit(1);
+}
+console.log("self-check ok (" + passed + "/" + checks.length + ")");

package/dist/skills/unlazy/tests/stress-tests.mjs

@@ -0,0 +1,356 @@
+#!/usr/bin/env node
+// Concurrency and mutation stress tests. Zero dependencies. Node 16+.
+
+import {
+  existsSync, linkSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync,
+  symlinkSync, writeFileSync,
+} from "node:fs";
+import { execFile, spawnSync } from "node:child_process";
+import { dirname, join } from "node:path";
+import { tmpdir } from "node:os";
+import { fileURLToPath } from "node:url";
+import { claimLeases, releaseLeases, writeAtomic } from "../scripts/lib/gates.mjs";
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const GATE_CHECK = join(HERE, "..", "scripts", "gate-check.mjs");
+const STOP_HOOK = join(HERE, "..", "scripts", "stop-hook.mjs");
+const INSTALL = join(HERE, "..", "scripts", "install-hooks.mjs");
+const tests = [];
+const test = (name, fn) => tests.push({ name, fn });
+
+function sandbox() {
+  const dir = mkdtempSync(join(tmpdir(), "unlazy-stress-"));
+  return {
+    dir,
+    path(rel) { return join(dir, rel); },
+    write(rel, value) {
+      const path = join(dir, rel);
+      mkdirSync(dirname(path), { recursive: true });
+      writeFileSync(path, value);
+      return path;
+    },
+    read(rel) { return readFileSync(join(dir, rel), "utf8"); },
+    cleanup() { rmSync(dir, { recursive: true, force: true }); },
+  };
+}
+
+function run(script, args, options = {}) {
+  return new Promise((done) => {
+    const child = execFile(process.execPath, [script, ...args], {
+      cwd: options.cwd,
+      encoding: "utf8",
+      maxBuffer: 8 * 1024 * 1024,
+      env: { ...process.env, ...(options.env || {}) },
+      timeout: options.timeoutMs,
+    }, (error, stdout, stderr) => {
+      done({ code: error ? (typeof error.code === "number" ? error.code : 1) : 0, out: (stdout || "") + (stderr || "") });
+    });
+    if (options.stdin !== undefined) child.stdin.end(options.stdin);
+  });
+}
+
+const assert = (condition, message) => { if (!condition) throw new Error(message); };
+const has = (text, value) => assert(text.includes(value), "missing " + JSON.stringify(value) + "\n" + text);
+
+test("leases: 200 simultaneous conflicting claim pairs never both succeed", async () => {
+  const s = sandbox();
+  try {
+    for (let iteration = 0; iteration < 200; iteration++) {
+      const [left, right] = await Promise.all([
+        claimLeases(s.dir, { scope: "left", leaf: "leaf-left", globs: ["src/shared/**"] }),
+        claimLeases(s.dir, { scope: "right", leaf: "leaf-right", globs: ["src/shared/file.js"] }),
+      ]);
+      const successes = Number(left.ok) + Number(right.ok);
+      assert(successes === 1, "iteration " + iteration + " had " + successes + " successful claims");
+      await Promise.all([
+        releaseLeases(s.dir, { scope: "left" }),
+        releaseLeases(s.dir, { scope: "right" }),
+      ]);
+    }
+  } finally { s.cleanup(); }
+});
+
+test("leases: the same scope and leaf cannot be claimed by two workers", async () => {
+  const s = sandbox();
+  try {
+    const [left, right] = await Promise.all([
+      claimLeases(s.dir, { scope: "same", leaf: "leaf", globs: ["src/shared/**"] }),
+      claimLeases(s.dir, { scope: "same", leaf: "leaf", globs: ["src/shared/**"] }),
+    ]);
+    assert(Number(left.ok) + Number(right.ok) === 1,
+      "duplicate logical owners both claimed one lease: " + JSON.stringify({ left, right }));
+    const loser = left.ok ? right : left;
+    assert(loser.conflicts.length === 1, "losing duplicate claim did not report its conflict");
+    assert(loser.conflicts[0].with === "same/leaf", "duplicate conflict named the wrong owner");
+    const released = await releaseLeases(s.dir, { scope: "same", leaf: "leaf" });
+    assert(released === 1, "expected one exclusive lease to release, got " + released);
+  } finally { s.cleanup(); }
+});
+
+test("leases: an explicit release cleans orphaned leases after a scope directory is gone", async () => {
+  const s = sandbox();
+  try {
+    const claimed = await claimLeases(s.dir, { scope: "gone", leaf: "leaf-gone", globs: ["src/gone/**"] });
+    assert(claimed.ok, "fixture lease was not created");
+    const result = await run(GATE_CHECK, ["--scope", "gone", "--leaf", "leaf-gone", "--release"], { cwd: s.dir });
+    assert(result.code === 0, result.out);
+    has(result.out, "released 1 lease(s) for gone/leaf-gone");
+    const lockNames = readdirSync(s.path(".unlazy/locks"));
+    assert(!lockNames.some((name) => name.endsWith(".lease")), "orphan lease remained: " + lockNames.join(", "));
+
+    s.write(".unlazy/live/gates/leaf-live.md", "# malformed zero-gate ledger\n");
+    const liveClaim = await claimLeases(s.dir, { scope: "live", leaf: "leaf-live", globs: ["src/live/**"] });
+    assert(liveClaim.ok, "live fixture lease was not created");
+    const liveRelease = await run(GATE_CHECK, ["--scope", "live", "--leaf", "leaf-live", "--release"], { cwd: s.dir });
+    assert(liveRelease.code === 0, "malformed live ledger blocked release\n" + liveRelease.out);
+    has(liveRelease.out, "released 1 lease(s) for live/leaf-live");
+  } finally { s.cleanup(); }
+});
+
+test("hook: repeated 64-writer bursts are serialized without lost increments", async () => {
+  const s = sandbox();
+  try {
+    s.write("GATES.md", "- [ ] G1: pending\n  EVIDENCE: pending\n");
+    const payload = JSON.stringify({ cwd: s.dir, session_id: "one-session" });
+    for (let round = 1; round <= 3; round++) {
+      rmSync(s.path(".unlazy-hook-state.json"), { force: true });
+      const results = await Promise.all(Array.from({ length: 64 }, () =>
+        run(STOP_HOOK, [], { cwd: s.dir, stdin: payload })));
+      const crashed = results.filter((result) => result.code !== 0);
+      assert(crashed.length === 0,
+        "round " + round + ": " + crashed.length + " hook process(es) failed\n" +
+        [...new Set(crashed.map((result) => "exit=" + result.code + "\n" + result.out.trim()))]
+          .slice(0, 4).join("\n---\n"));
+      const failedUpdates = results
+        .filter((result) => result.out.includes("could not update the serialized hook state"))
+        .map((result) => result.out.trim());
+      assert(failedUpdates.length === 0,
+        "round " + round + ": " + failedUpdates.length + " hook(s) failed open on the state update\n" +
+        [...new Set(failedUpdates)].slice(0, 4).join("\n---\n"));
+      const state = JSON.parse(s.read(".unlazy-hook-state.json"));
+      const sessions = Object.values(state.sessions);
+      assert(sessions.length === 1, "round " + round + ": expected one session, got " + sessions.length);
+      assert(sessions[0].blocks === 64, "round " + round + ": expected 64 blocks, got " + sessions[0].blocks);
+    }
+  } finally { s.cleanup(); }
+});
+
+test("hook: sessions remain isolated and completion/no-gates clears stale state", async () => {
+  const s = sandbox();
+  try {
+    s.write("GATES.md", "- [ ] G1: pending\n  EVIDENCE: pending\n");
+    for (const id of ["alpha", "beta"]) {
+      const payload = JSON.stringify({ cwd: s.dir, session_id: id });
+      await Promise.all(Array.from({ length: 3 }, () => run(STOP_HOOK, [], { cwd: s.dir, stdin: payload })));
+    }
+    let state = JSON.parse(s.read(".unlazy-hook-state.json"));
+    assert(Object.keys(state.sessions).length === 2, "sessions were mixed: " + JSON.stringify(state));
+    assert(Object.values(state.sessions).every((value) => value.blocks === 3), "session counters were not isolated");
+
+    s.write("GATES.md", "- [x] G1: done\n  EVIDENCE: measured\n");
+    await run(STOP_HOOK, [], { cwd: s.dir, stdin: JSON.stringify({ cwd: s.dir, session_id: "alpha" }) });
+    state = JSON.parse(s.read(".unlazy-hook-state.json"));
+    assert(Object.keys(state.sessions).length === 1, "completed alpha state was not cleared");
+
+    rmSync(s.path("GATES.md"));
+    await run(STOP_HOOK, [], { cwd: s.dir, stdin: JSON.stringify({ cwd: s.dir, session_id: "beta" }) });
+    assert(!existsSync(s.path(".unlazy-hook-state.json")), "no-gates path did not clear final state");
+  } finally { s.cleanup(); }
+});
+
+test("atomic writer: predictable pre-created temp links are never followed", async () => {
+  if (process.platform === "win32") return;
+  const s = sandbox();
+  try {
+    s.write("victim.txt", "safe\n");
+    const target = s.path("state.json");
+    symlinkSync(s.path("victim.txt"), target + "." + process.pid + ".tmp");
+    writeAtomic(target, "new\n");
+    assert(s.read("victim.txt") === "safe\n", "predictable temp symlink was followed");
+    assert(s.read("state.json") === "new\n", "target was not written");
+  } finally { s.cleanup(); }
+});
+
+test("status log: an existing symlink is refused without touching its target", async () => {
+  if (process.platform === "win32") return;
+  const s = sandbox();
+  try {
+    s.write(".unlazy/api/GATES.md", "# Gates\n\n- [ ] G1: pending\n  EVIDENCE: pending\n");
+    s.write("victim.txt", "safe\n");
+    symlinkSync(s.path("victim.txt"), s.path(".unlazy/api/status.log"));
+    const result = await run(GATE_CHECK, ["--scope", "api", "--log", "attacker-controlled append"], { cwd: s.dir });
+    assert(result.code === 2, "symlinked status log should fail closed\n" + result.out);
+    has(result.out, "cannot append status");
+    assert(s.read("victim.txt") === "safe\n", "status append followed the symlink");
+  } finally { s.cleanup(); }
+});
+
+test("status log: an existing hard link is refused without touching its sibling", async () => {
+  const s = sandbox();
+  try {
+    s.write(".unlazy/api/GATES.md", "# Gates\n\n- [ ] G1: pending\n  EVIDENCE: pending\n");
+    s.write("victim.txt", "safe\n");
+    linkSync(s.path("victim.txt"), s.path(".unlazy/api/status.log"));
+    const result = await run(GATE_CHECK, ["--scope", "api", "--log", "attacker-controlled append"], { cwd: s.dir });
+    assert(result.code === 2, "hard-linked status log should fail closed\n" + result.out);
+    has(result.out, "cannot append status");
+    assert(s.read("victim.txt") === "safe\n", "status append followed the hard link");
+  } finally { s.cleanup(); }
+});
+
+test("status log: a FIFO is rejected without blocking the logger", async () => {
+  if (process.platform === "win32") return;
+  const s = sandbox();
+  try {
+    s.write(".unlazy/api/GATES.md", "# Gates\n\n- [ ] G1: pending\n  EVIDENCE: pending\n");
+    const fifo = s.path(".unlazy/api/status.log");
+    const made = spawnSync("mkfifo", [fifo], { encoding: "utf8" });
+    assert(made.status === 0, "could not create FIFO fixture: " + made.stderr);
+    const started = Date.now();
+    const result = await run(GATE_CHECK, ["--scope", "api", "--log", "must not block"], {
+      cwd: s.dir,
+      timeoutMs: 2000,
+    });
+    assert(result.code === 2, "FIFO logger did not fail closed\n" + result.out);
+    assert(Date.now() - started < 1800, "FIFO validation waited for the outer timeout");
+    has(result.out, "cannot append status");
+  } finally { s.cleanup(); }
+});
+
+test("installer: malformed settings shapes are refused without mutation", async () => {
+  const fixtures = [
+    "[]\n",
+    JSON.stringify({ hooks: [] }, null, 2) + "\n",
+    JSON.stringify({ hooks: { Stop: {} } }, null, 2) + "\n",
+    JSON.stringify({ hooks: { Stop: [{ hooks: {} }] } }, null, 2) + "\n",
+    JSON.stringify({ hooks: { Stop: [{ hooks: [null] }] } }, null, 2) + "\n",
+  ];
+  for (const fixture of fixtures) {
+    const s = sandbox();
+    try {
+      s.write(".claude/settings.local.json", fixture);
+      const result = await run(INSTALL, [], { cwd: s.dir });
+      assert(result.code === 1, "invalid shape should fail\n" + result.out);
+      assert(s.read(".claude/settings.local.json") === fixture, "invalid settings were mutated");
+    } finally { s.cleanup(); }
+  }
+});
+
+test("installer: a FIFO settings target is rejected without blocking", async () => {
+  if (process.platform === "win32") return;
+  const s = sandbox();
+  try {
+    mkdirSync(s.path(".claude"), { recursive: true });
+    const target = s.path(".claude/settings.local.json");
+    const made = spawnSync("mkfifo", [target], { encoding: "utf8" });
+    assert(made.status === 0, "could not create FIFO fixture: " + made.stderr);
+    const started = Date.now();
+    const result = await run(INSTALL, [], { cwd: s.dir, timeoutMs: 2000 });
+    assert(result.code === 1, "FIFO installer target did not fail closed\n" + result.out);
+    assert(Date.now() - started < 1800, "FIFO installer validation blocked");
+    has(result.out, "Refusing to touch");
+  } finally { s.cleanup(); }
+});
+
+test("installer: uninstall preserves a sibling in the same matcher group and writes a backup", async () => {
+  const s = sandbox();
+  try {
+    const original = JSON.stringify({
+      hooks: {
+        Stop: [{
+          matcher: "",
+          hooks: [
+            { type: "command", command: "node other-tool.mjs" },
+            { type: "command", command: "node /tmp/unlazy/scripts/stop-hook.mjs --unlazy" },
+          ],
+        }],
+      },
+    }, null, 2) + "\n";
+    s.write(".claude/settings.local.json", original);
+    const result = await run(INSTALL, ["--uninstall"], { cwd: s.dir });
+    assert(result.code === 0, result.out);
+    const after = JSON.parse(s.read(".claude/settings.local.json"));
+    assert(after.hooks.Stop.length === 1, "matcher group was removed");
+    assert(after.hooks.Stop[0].matcher === "", "matcher metadata was lost");
+    assert(after.hooks.Stop[0].hooks.length === 1, "wrong handler count");
+    has(after.hooks.Stop[0].hooks[0].command, "other-tool.mjs");
+    assert(s.read(".claude/settings.local.json.unlazy.bak") === original, "backup did not preserve original bytes");
+  } finally { s.cleanup(); }
+});
+
+test("installer: marker substrings do not claim an unrelated stop hook", async () => {
+  const s = sandbox();
+  try {
+    const unrelated = [
+      "node /opt/other/stop-hook.mjs --unlazy-helper",
+      "node /opt/unlazy/scripts/stop-hook.mjs --unlazy-helper",
+      "node " + JSON.stringify(STOP_HOOK) + " --unlazy-helper",
+      "node " + JSON.stringify(STOP_HOOK) + " \"--unlazy-helper\"",
+    ];
+    s.write(".claude/settings.local.json", JSON.stringify({
+      hooks: { Stop: [{ hooks: unrelated.map((command) => ({ type: "command", command, timeout: 20 })) }] },
+    }, null, 2) + "\n");
+    const result = await run(INSTALL, ["--uninstall"], { cwd: s.dir });
+    assert(result.code === 0, result.out);
+    has(result.out, "Nothing to remove");
+    const after = JSON.parse(s.read(".claude/settings.local.json"));
+    assert(after.hooks.Stop[0].hooks.map((hook) => hook.command).join("\n") === unrelated.join("\n"),
+      "unrelated hook was removed");
+  } finally { s.cleanup(); }
+});
+
+test("installer: a matching command with broken managed fields is repaired", async () => {
+  const s = sandbox();
+  try {
+    const installed = await run(INSTALL, [], { cwd: s.dir });
+    assert(installed.code === 0, installed.out);
+    const settings = JSON.parse(s.read(".claude/settings.local.json"));
+    const handler = settings.hooks.Stop[0].hooks[0];
+    handler.type = "prompt";
+    handler.timeout = 1;
+    s.write(".claude/settings.local.json", JSON.stringify(settings, null, 2) + "\n");
+    const repaired = await run(INSTALL, [], { cwd: s.dir });
+    assert(repaired.code === 0, repaired.out);
+    assert(!repaired.out.includes("Already installed"), "broken handler was treated as current");
+    const after = JSON.parse(s.read(".claude/settings.local.json"));
+    const managed = after.hooks.Stop.flatMap((group) => group.hooks)
+      .filter((item) => typeof item.command === "string" && item.command.includes("--unlazy"));
+    assert(managed.length === 1, "repair did not leave exactly one managed handler");
+    assert(managed[0].type === "command", "repair did not restore command type");
+    assert(managed[0].timeout === 20, "repair did not restore timeout");
+  } finally { s.cleanup(); }
+});
+
+test("installer: scope input is validated and local state warning is explicit", async () => {
+  const s = sandbox();
+  try {
+    const invalid = await run(INSTALL, ["--scope", "bad;echo"], { cwd: s.dir });
+    assert(invalid.code === 2, invalid.out);
+    assert(!existsSync(s.path(".claude/settings.local.json")), "invalid scope wrote settings");
+    const good = await run(INSTALL, ["--scope", "api"], { cwd: s.dir });
+    assert(good.code === 0, good.out);
+    has(good.out, ".unlazy/");
+    has(good.out, ".unlazy-hook-state.json");
+    const settings = JSON.parse(s.read(".claude/settings.local.json"));
+    const command = settings.hooks.Stop[0].hooks[0].command;
+    has(command, "--scope api");
+  } finally { s.cleanup(); }
+});
+
+let passed = 0;
+const failures = [];
+for (const item of tests) {
+  try {
+    await item.fn();
+    passed++;
+    console.log("ok   " + item.name);
+  } catch (error) {
+    failures.push(item.name);
+    console.log("FAIL " + item.name + "\n     " + String(error.message).replace(/\n/g, "\n     "));
+  }
+}
+console.log("\n" + passed + "/" + tests.length + " passed");
+if (failures.length) {
+  console.log("failed: " + failures.join(", "));
+  process.exit(1);
+}

package/dist/skills/web-design-guidelines/SKILL.md

@@ -0,0 +1,40 @@
+---
+name: web-design-guidelines
+description: Review UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "check accessibility", "audit design", "review UX", or "check my site against best practices".
+license: MIT
+metadata:
+  author: vercel
+  version: "1.0.0"
+  argument-hint: <file-or-pattern>
+---
+
+# Web Interface Guidelines
+
+Review files for compliance with Web Interface Guidelines.
+
+## How It Works
+
+1. Fetch the latest guidelines from the source URL below
+2. Read the specified files (or prompt user for files/pattern)
+3. Check against all rules in the fetched guidelines
+4. Output findings in the terse `file:line` format
+
+## Guidelines Source
+
+Fetch fresh guidelines before each review:
+
+```
+https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md
+```
+
+Use WebFetch to retrieve the latest rules. The fetched content contains all the rules and output format instructions.
+
+## Usage
+
+When a user provides a file or pattern argument:
+1. Fetch guidelines from the source URL above
+2. Read the specified files
+3. Apply all rules from the fetched guidelines
+4. Output findings using the format specified in the guidelines
+
+If no files specified, ask the user which files to review.

package/docs/settings.md

@@ -277,11 +277,6 @@ When selesai reads extensions from both `~/.selesai/agent/extensions/` and `~/.p
 
 Keys are top-level entry names (dir name for packaged extensions, file name for loose `.ts`). Values are `"selesai"` or `"pi"`. See [Shared Host Extensions](shared-host-extensions.md) for the full flow.
 
-### Prompt size
-
-| Setting | Type | Default | Description |
-|---------|------|---------|-------------|
-| `pruneToolDescriptions` | boolean | `true` | Strip per-field parameter-schema descriptions from provider tool payloads (top-level tool descriptions and UI/docs schemas are unchanged). Set `false` to send full schemas. |
 
 ## Example
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@selesai/code",
-	"version": "0.9.11",
+	"version": "0.9.12",
 	"description": "Maintained, extension-first Pi coding agent with built-in workflows, subagents, web research, questions, skills, and an enhanced terminal UI.",
 	"type": "module",
 	"repository": {

package/dist/core/tools/schema-prune.d.ts

@@ -1,16 +0,0 @@
-import type { AgentTool } from "@earendil-works/pi-agent-core";
-import type { TSchema } from "typebox";
-/**
- * Structural deep clone that omits every `description` key at any depth while
- * preserving all other own keys (including TypeBox internals such as `~kind`
- * and `~optional` symbols and function-valued keys). Uses Reflect.ownKeys +
- * property descriptors so non-enumerable metadata survives; never mutates the
- * input.
- */
-export declare function stripSchemaDescriptions<T>(value: T): T;
-/**
- * Returns a shallow copy of the tool with its parameter schema descriptions
- * stripped. Top-level tool fields (name, description, execute, ...) are
- * untouched.
- */
-export declare function stripToolParameterDescriptions<T extends TSchema>(tool: AgentTool<T>): AgentTool<T>;

package/dist/core/tools/schema-prune.js

@@ -1,39 +0,0 @@
-// Memoized stripped clones, keyed by the original schema root. The input is
-// never mutated; repeat calls return the same cached clone.
-const strippedSchemaCache = new WeakMap();
-/**
- * Structural deep clone that omits every `description` key at any depth while
- * preserving all other own keys (including TypeBox internals such as `~kind`
- * and `~optional` symbols and function-valued keys). Uses Reflect.ownKeys +
- * property descriptors so non-enumerable metadata survives; never mutates the
- * input.
- */
-export function stripSchemaDescriptions(value) {
-    if (!value || typeof value !== "object")
-        return value;
-    const cached = strippedSchemaCache.get(value);
-    if (cached !== undefined)
-        return cached;
-    const result = Array.isArray(value) ? [] : Object.create(Object.getPrototypeOf(value));
-    for (const key of Reflect.ownKeys(value)) {
-        const descriptor = Object.getOwnPropertyDescriptor(value, key);
-        if (!descriptor)
-            continue;
-        if (key === "description")
-            continue;
-        if ("value" in descriptor) {
-            descriptor.value = stripSchemaDescriptions(descriptor.value);
-        }
-        Object.defineProperty(result, key, descriptor);
-    }
-    strippedSchemaCache.set(value, result);
-    return result;
-}
-/**
- * Returns a shallow copy of the tool with its parameter schema descriptions
- * stripped. Top-level tool fields (name, description, execute, ...) are
- * untouched.
- */
-export function stripToolParameterDescriptions(tool) {
-    return { ...tool, parameters: stripSchemaDescriptions(tool.parameters) };
-}

package/dist/core/tools/schema-prune.test.d.ts

@@ -1 +0,0 @@
-export {};