@windyroad/voice-tone 0.7.1 → 0.7.2

package/.claude-plugin/plugin.json

@@ -123,5 +123,5 @@
     }
   },
   "name": "wr-voice-tone",
-  "version": "0.7.1"
+  "version": "0.7.2"
 }

package/hooks/external-comms-gate.sh

@@ -407,10 +407,15 @@ fi
 # Marker absent — deny + delegate.
 # P166: instruct the orchestrator to structure the agent prompt with a
 # leading `SURFACE: <name>` line and a `<draft>...</draft>` block so the
-# PostToolUse mark hook can derive the canonical marker key locally
+# Claude PostToolUse mark hook can derive the canonical marker key locally
 # (sha256(DRAFT + '\n' + SURFACE)). Single fire per gate cycle.
 VERDICT_PREFIX="${EXTERNAL_COMMS_VERDICT_PREFIX:-EXTERNAL_COMMS_${EXTERNAL_COMMS_EVALUATOR_ID^^}}"
-REASON=$(printf 'BLOCKED (external-comms gate / %s evaluator): %s draft has not been reviewed by %s. Delegate to %s (subagent_type: '"'"'%s'"'"') with a prompt that starts with the line `SURFACE: %s` and wraps the draft body verbatim inside `<draft>...</draft>` markers (for the changeset-author surface the body is the changeset summary WITHOUT the leading `---` frontmatter block — the gate strips frontmatter before hashing the marker key). The PostToolUse hook derives the marker key from that structure and marks the draft reviewed when the subagent emits %s_VERDICT: PASS — single fire suffices. Dispatch the reviewer SYNCHRONOUSLY (run_in_background: false): a background-launched reviewer does not fire its PostToolUse mark hook, so the marker never persists and this gate re-blocks (P402). Use %s for an interactive walkthrough. There is no env override (P377/RFC-029 — BYPASS_RISK_GATE removed).' \
-    "$EXTERNAL_COMMS_EVALUATOR_ID" "$SURFACE" "$EXTERNAL_COMMS_SUBAGENT_TYPE" "$EXTERNAL_COMMS_SUBAGENT_TYPE" "$EXTERNAL_COMMS_SUBAGENT_TYPE" "$SURFACE" "$VERDICT_PREFIX" "$EXTERNAL_COMMS_ASSESS_SKILL")
+if [ -n "${CODEX_THREAD_ID:-}" ]; then
+    COMPLETION_GUIDANCE='On Codex, wait for the reviewer to finish, then close that completed agent once before retrying; the PostToolUse compatibility hook consumes the completed close response and persists its structured verdict, with no transcript parsing or nested codex exec.'
+else
+    COMPLETION_GUIDANCE='On Claude Code, dispatch the reviewer SYNCHRONOUSLY (run_in_background: false): a background-launched reviewer does not fire its PostToolUse mark hook, so the marker never persists and this gate re-blocks (P402).'
+fi
+REASON=$(printf 'BLOCKED (external-comms gate / %s evaluator): %s draft has not been reviewed by %s. Delegate to %s (subagent_type: '"'"'%s'"'"') with a prompt that starts with the line `SURFACE: %s` and wraps the draft body verbatim inside `<draft>...</draft>` markers (for the changeset-author surface the body is the changeset summary WITHOUT the leading `---` frontmatter block — the gate strips frontmatter before hashing the marker key). The completion hook marks the draft reviewed when the subagent emits %s_VERDICT: PASS — single fire suffices. %s Use %s for an interactive walkthrough. There is no env override (P377/RFC-029 — BYPASS_RISK_GATE removed).' \
+    "$EXTERNAL_COMMS_EVALUATOR_ID" "$SURFACE" "$EXTERNAL_COMMS_SUBAGENT_TYPE" "$EXTERNAL_COMMS_SUBAGENT_TYPE" "$EXTERNAL_COMMS_SUBAGENT_TYPE" "$SURFACE" "$VERDICT_PREFIX" "$COMPLETION_GUIDANCE" "$EXTERNAL_COMMS_ASSESS_SKILL")
 deny_with_reason "$REASON"
 exit 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@windyroad/voice-tone",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "description": "Voice and tone enforcement for user-facing copy",
   "bin": {
     "windyroad-voice-tone": "./bin/install.mjs"
@@ -24,6 +24,7 @@
     "hooks/",
     "skills/",
     ".claude-plugin/",
-    "lib/"
+    "lib/",
+    "!hooks/test/"
   ]
 }

package/hooks/test/external-comms-gate.bats

@@ -1,444 +0,0 @@
-#!/usr/bin/env bats
-# Tests for packages/voice-tone/hooks/external-comms-gate.sh
-# (P038 / ADR-028 amended 2026-05-14).
-#
-# Behavioural: the gate denies outbound prose tool calls until the
-# wr-voice-tone:external-comms subagent has reviewed the draft and the
-# per-evaluator marker `external-comms-voice-tone-reviewed-<KEY>` has been
-# written. Voice-tone evaluator does NOT run the leak-pattern pre-filter
-# (EXTERNAL_COMMS_LEAK_PREFILTER=no in external-comms-evaluator.conf).
-# Composition with the risk-scorer evaluator happens at firing level —
-# both gates fire on the same PreToolUse event when both plugins installed.
-
-setup() {
-  HOOKS_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  HOOK="$HOOKS_DIR/external-comms-gate.sh"
-
-  TEST_SESSION="bats-vt-extcomms-gate-$$-${BATS_TEST_NUMBER}"
-  RDIR="${TMPDIR:-/tmp}/claude-risk-${TEST_SESSION}"
-  rm -rf "$RDIR"
-  mkdir -p "$RDIR"
-
-  # Voice-tone evaluator's policy file is docs/VOICE-AND-TONE.md per the .conf.
-  TEST_PROJECT_DIR="$(mktemp -d)"
-  mkdir -p "$TEST_PROJECT_DIR/docs"
-  printf "## Voice principles\n- Direct\n- No hedging\n## Banned patterns\n- 'happy to help further'\n" \
-    > "$TEST_PROJECT_DIR/docs/VOICE-AND-TONE.md"
-
-  unset BYPASS_RISK_GATE
-}
-
-teardown() {
-  rm -rf "$RDIR"
-  rm -rf "$TEST_PROJECT_DIR"
-  unset BYPASS_RISK_GATE
-}
-
-# ---------- Helpers ----------
-
-build_bash_input() {
-  local cmd="$1"
-  python3 -c "
-import json, sys
-print(json.dumps({
-    'session_id': '$TEST_SESSION',
-    'tool_name': 'Bash',
-    'tool_input': {'command': sys.argv[1]},
-}))
-" "$cmd"
-}
-
-build_write_input() {
-  local file_path="$1"
-  local content="$2"
-  python3 -c "
-import json, sys
-print(json.dumps({
-    'session_id': '$TEST_SESSION',
-    'tool_name': 'Write',
-    'tool_input': {'file_path': sys.argv[1], 'content': sys.argv[2]},
-}))
-" "$file_path" "$content"
-}
-
-# Mock `gh repo view --json visibility` for the git-commit-message surface
-# repo-visibility precondition (P365). vis ∈ {PUBLIC,PRIVATE,INTERNAL}; pass the
-# literal "FAIL" to simulate gh absent / unauthenticated (non-zero exit).
-mock_gh_visibility() {
-  local vis="$1"
-  mkdir -p "$TEST_PROJECT_DIR/mockbin"
-  if [ "$vis" = "FAIL" ]; then
-    printf '#!/usr/bin/env bash\nexit 1\n' > "$TEST_PROJECT_DIR/mockbin/gh"
-  else
-    printf '#!/usr/bin/env bash\necho %s\n' "$vis" > "$TEST_PROJECT_DIR/mockbin/gh"
-  fi
-  chmod +x "$TEST_PROJECT_DIR/mockbin/gh"
-}
-
-run_hook() {
-  local input="$1"
-  run bash -c "cd '$TEST_PROJECT_DIR' && export PATH='$TEST_PROJECT_DIR/mockbin':\$PATH && printf '%s' \"\$1\" | '$HOOK'" _ "$input"
-}
-
-# ---------- Tests ----------
-
-@test "non-matching Bash command (ls) is allowed silently" {
-  INPUT=$(build_bash_input "ls -la")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "gh issue create with clean draft denies and prompts wr-voice-tone:external-comms delegation (no marker yet)" {
-  INPUT=$(build_bash_input "gh issue create --title T --body 'we observed a build failure on Node 20'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"permissionDecision"* ]]
-  [[ "$output" == *"deny"* ]]
-  [[ "$output" == *"wr-voice-tone:external-comms"* ]]
-}
-
-# P377/RFC-029: the BYPASS_RISK_GATE env override was removed. The only
-# clearance path named in the deny is delegation to the external-comms subagent.
-@test "marker-absent deny names the reviewer and offers no env override (P377/RFC-029)" {
-  INPUT=$(build_bash_input "gh issue create --title T --body 'we observed a build failure on Node 20'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"deny"* ]]
-  [[ "$output" == *"wr-voice-tone:external-comms"* ]]
-  [[ "$output" != *"BYPASS_RISK_GATE=1"* ]]
-}
-
-@test "voice-tone evaluator skips leak pre-filter (EXTERNAL_COMMS_LEAK_PREFILTER=no)" {
-  # A draft with leak-shaped content (revenue figure with business context) would
-  # hard-fail in the risk evaluator. The voice-tone gate must NOT hard-fail; leak
-  # detection is the risk evaluator's concern. Voice-tone deny-and-delegates for
-  # subagent review, same as any clean draft.
-  INPUT=$(build_bash_input "gh issue comment 42 --body 'Acme Corp 2.4M ARR is a real concern'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"deny"* ]]
-  [[ "$output" == *"wr-voice-tone:external-comms"* ]]
-  # Must NOT name a leak class.
-  [[ "$output" != *"credential"* ]]
-  [[ "$output" != *"financial"* ]]
-}
-
-@test "BYPASS_RISK_GATE=1 does NOT bypass the gate (removed P377/RFC-029)" {
-  INPUT=$(build_bash_input "gh issue create --title T --body 'we observed a build failure'")
-  run bash -c "cd '$TEST_PROJECT_DIR' && BYPASS_RISK_GATE=1 printf '%s' \"\$1\" | BYPASS_RISK_GATE=1 '$HOOK'" _ "$INPUT"
-  [ "$status" -eq 0 ]
-  # The env override no longer short-circuits — the gate still denies the
-  # unreviewed external-comms draft.
-  [[ "$output" == *"deny"* ]]
-  [[ "$output" == *"wr-voice-tone:external-comms"* ]]
-}
-
-@test "per-evaluator marker (external-comms-voice-tone-reviewed-<KEY>) allows the call" {
-  DRAFT="we observed a build failure on Node 20"
-  SURFACE="gh-issue-create"
-  KEY=$(printf '%s\n%s' "$DRAFT" "$SURFACE" | shasum -a 256 | cut -d' ' -f1)
-  touch "${RDIR}/external-comms-voice-tone-reviewed-${KEY}"
-
-  INPUT=$(build_bash_input "gh issue create --title T --body '$DRAFT'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "risk-scorer marker (external-comms-risk-reviewed-<KEY>) does NOT satisfy the voice-tone gate" {
-  # Independent per-evaluator markers: a risk-evaluator PASS marker does not
-  # imply voice-tone has been reviewed.
-  DRAFT="we observed a build failure on Node 20"
-  SURFACE="gh-issue-create"
-  KEY=$(printf '%s\n%s' "$DRAFT" "$SURFACE" | shasum -a 256 | cut -d' ' -f1)
-  touch "${RDIR}/external-comms-risk-reviewed-${KEY}"
-
-  INPUT=$(build_bash_input "gh issue create --title T --body '$DRAFT'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"deny"* ]]
-  [[ "$output" == *"wr-voice-tone:external-comms"* ]]
-}
-
-@test "docs/VOICE-AND-TONE.md absent yields advisory-only mode (permits)" {
-  rm -f "$TEST_PROJECT_DIR/docs/VOICE-AND-TONE.md"
-  INPUT=$(build_bash_input "gh issue create --title T --body 'we observed a failure'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  # Must NOT deny when policy file is absent.
-  [[ "$output" != *"\"permissionDecision\": \"deny\""* ]]
-  [[ "$output" != *"\"permissionDecision\":\"deny\""* ]]
-  # Must surface the advisory systemMessage.
-  [[ "$output" == *"docs/VOICE-AND-TONE.md not found"* ]]
-}
-
-@test "PreToolUse:Write on .changeset/*.md triggers deny+delegate" {
-  INPUT=$(build_write_input ".changeset/test.md" "Add some feature. Happy to help further with details.")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"deny"* ]]
-  [[ "$output" == *"wr-voice-tone:external-comms"* ]]
-}
-
-@test "PreToolUse:Write on a non-changeset path is ignored" {
-  INPUT=$(build_write_input "src/foo.ts" "happy to help further")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "gh api security-advisories triggers the gate" {
-  INPUT=$(build_bash_input "gh api repos/foo/bar/security-advisories --method POST --field summary='vulnerability detail'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"deny"* ]]
-  [[ "$output" == *"wr-voice-tone:external-comms"* ]]
-}
-
-# ---------------------------------------------------------------------------
-# P405 — read-only `gh api` polls must NOT trip the gate. `gh api` defaults to
-# GET; it only carries an outbound prose body (the thing this gate reviews)
-# when a request-body flag (-f/--field, -F/--raw-field, --input) is present.
-# The `/wr-itil:review-problems` Step 4.5c security-advisories discovery poll
-# is read-only (`--jq` filter, no body flag) and was being denied as if it
-# were an advisory draft, silently blacking out one discovery channel.
-# ---------------------------------------------------------------------------
-
-@test "P405: read-only gh api security-advisories poll (--jq, no body flag) is not gated" {
-  INPUT=$(build_bash_input "gh api repos/foo/bar/security-advisories --jq '.[].ghsa_id'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "P405: bare gh api security-advisories read (no flags) is not gated" {
-  INPUT=$(build_bash_input "gh api repos/foo/bar/security-advisories")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "P405: read-only gh api comments poll (--jq, no body flag) is not gated" {
-  INPUT=$(build_bash_input "gh api repos/foo/bar/issues/1/comments --jq '.[].body'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "P405: gh api security-advisories write with -f body flag still triggers the gate" {
-  INPUT=$(build_bash_input "gh api repos/foo/bar/security-advisories -f summary='new advisory'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"deny"* ]]
-  [[ "$output" == *"wr-voice-tone:external-comms"* ]]
-}
-
-@test "npm publish triggers the gate" {
-  INPUT=$(build_bash_input "npm publish")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"deny"* ]]
-  [[ "$output" == *"wr-voice-tone:external-comms"* ]]
-}
-
-@test "deny message references the on-demand skill (/wr-voice-tone:assess-external-comms)" {
-  INPUT=$(build_bash_input "gh issue comment 42 --body 'a draft'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"/wr-voice-tone:assess-external-comms"* ]]
-}
-
-@test "marker name uses evaluator id from external-comms-evaluator.conf (voice-tone, not risk)" {
-  # Regression: the canonical hook sources the .conf and uses its EVALUATOR_ID
-  # in the marker filename. The risk-scorer's marker name does NOT satisfy the
-  # voice-tone gate even if the KEY matches.
-  DRAFT="some draft body"
-  SURFACE="gh-issue-create"
-  KEY=$(printf '%s\n%s' "$DRAFT" "$SURFACE" | shasum -a 256 | cut -d' ' -f1)
-  # Pre-amendment combined marker — should NOT satisfy the new voice-tone gate.
-  touch "${RDIR}/external-comms-reviewed-${KEY}"
-
-  INPUT=$(build_bash_input "gh issue create --title T --body '$DRAFT'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"deny"* ]]
-}
-
-# ---------------------------------------------------------------------------
-# P010 / ADR-028 amended 2026-05-25 — deny-after-PASS regression (voice-tone).
-# Mirror of the risk-scorer regression: the gate sees the FULL changeset
-# content (YAML frontmatter + body) but the mark hook keys the marker on the
-# <draft> body. After the fix the gate strips frontmatter before hashing, so
-# a body-keyed voice-tone PASS marker permits the changeset Write.
-# ---------------------------------------------------------------------------
-
-@test "P010: changeset Write permits when the voice-tone PASS marker is keyed on the <draft> body (frontmatter stripped before hash)" {
-  BODY="external-comms gate strips changeset frontmatter before key hash"
-  SURFACE="changeset-author"
-  KEY=$(printf '%s\n%s' "$BODY" "$SURFACE" | shasum -a 256 | cut -d' ' -f1)
-  touch "${RDIR}/external-comms-voice-tone-reviewed-${KEY}"
-
-  CONTENT=$'---\n"@windyroad/voice-tone": patch\n---\n\n'"$BODY"
-  INPUT=$(build_write_input ".changeset/p010-fix.md" "$CONTENT")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-# ---------------------------------------------------------------------------
-# P360 — voice-tone evaluator disclaims the git-commit-message surface.
-# docs/VOICE-AND-TONE.md § Scope explicitly excludes commit messages ("It does
-# NOT apply to: ... Commit messages (covered by ADR-014 + ADR-018)"), so a
-# voice-tone review of a commit-message body is a guaranteed-PASS no-op
-# (~19K tokens per round-trip). external-comms-evaluator.conf sets
-# EXTERNAL_COMMS_SKIP_SURFACES=git-commit-message, so the gate silent-passes the
-# prose-review delegation on this surface in EVERY repo — visibility-independent
-# (the P360 skip is placed ahead of the P365 visibility precondition). The
-# risk-scorer evaluator, whose .conf leaves the skip list empty, still gates
-# this surface (its leak check is meaningful) — covered by
-# packages/risk-scorer/hooks/test/external-comms-gate.bats.
-#
-# Supersedes the original P082 Phase 1 voice-tone commit-message tests, which
-# asserted DENY on PUBLIC — that gate fire was the no-op P360 removes.
-# ---------------------------------------------------------------------------
-
-@test "P360: git commit -m silent-passes (voice-tone disclaims commit messages)" {
-  mock_gh_visibility PUBLIC
-  INPUT=$(build_bash_input "git commit -m \"I've implemented the feature\"")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "P360: git commit --message silent-passes with no marker round-trip" {
-  mock_gh_visibility PUBLIC
-  INPUT=$(build_bash_input "git commit --message \"happy to help further with this fix\"")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "P360: git commit --amend -m silent-passes" {
-  mock_gh_visibility PUBLIC
-  INPUT=$(build_bash_input "git commit --amend -m \"rewritten subject\"")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "P360: git commit HEREDOC body silent-passes without a marker" {
-  mock_gh_visibility PUBLIC
-  BODY=$'feat(foo): add bar\n\nWe observed a build failure on Node 20.'
-  CMD=$'git commit -m "$(cat <<\'EOF\'\n'"$BODY"$'\nEOF\n)"'
-  INPUT=$(build_bash_input "$CMD")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "P360: commit-message skip is visibility-independent (PRIVATE silent-passes)" {
-  mock_gh_visibility PRIVATE
-  INPUT=$(build_bash_input "git commit -m \"I've implemented the feature\"")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "P360: commit-message skip is visibility-independent (INTERNAL silent-passes)" {
-  mock_gh_visibility INTERNAL
-  INPUT=$(build_bash_input "git commit -m \"I've implemented the feature\"")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "P360: commit-message skip is visibility-independent (indeterminate gh silent-passes)" {
-  mock_gh_visibility FAIL
-  INPUT=$(build_bash_input "git commit -m \"I've implemented the feature\"")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "P082: bare git commit (editor flow) is silently allowed per SC1" {
-  # No -m / --message → .git/COMMIT_EDITMSG doesn't exist at PreToolUse
-  # time. Phase 1 skip is pragmatic; the editor flow has user-eyeballs.
-  INPUT=$(build_bash_input "git commit")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "P082: git merge is silently allowed (not a git commit verb)" {
-  INPUT=$(build_bash_input "git merge --no-ff feature-branch")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "P082→P377/RFC-029: BYPASS_RISK_GATE=1 is inert — does not short-circuit the gate" {
-  # gh-issue is an unconditionally-gated external surface (no visibility
-  # precondition). Setting BYPASS_RISK_GATE=1 has no effect: the unreviewed
-  # draft still denies, identically to the no-env-var case.
-  INPUT=$(build_bash_input "gh issue create --title T --body 'we observed a build failure on Node 20'")
-  run bash -c "cd '$TEST_PROJECT_DIR' && BYPASS_RISK_GATE=1 printf '%s' \"\$1\" | BYPASS_RISK_GATE=1 '$HOOK'" _ "$INPUT"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"deny"* ]]
-  [[ "$output" == *"wr-voice-tone:external-comms"* ]]
-}
-
-@test "P360: the skip is surface-scoped — gh-issue is NOT skipped (still denies+delegates)" {
-  # EXTERNAL_COMMS_SKIP_SURFACES lists only git-commit-message; the inherently
-  # external gh-issue surface stays gated. Guards against the skip list over-
-  # matching (e.g. a substring or blanket-skip regression).
-  mock_gh_visibility PUBLIC
-  INPUT=$(build_bash_input "gh issue create --title x --body 'a clean issue body'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"deny"* ]]
-  [[ "$output" == *"wr-voice-tone:external-comms"* ]]
-}
-
-@test "P365: PRIVATE visibility does NOT short-circuit the gh-issue surface (still denies+delegates)" {
-  mock_gh_visibility PRIVATE
-  INPUT=$(build_bash_input "gh issue create --title x --body 'a clean issue body'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"deny"* ]]
-  [[ "$output" == *"gh-issue-create"* ]]
-}
-
-# ---------------------------------------------------------------------------
-# P364 — backtick-bearing double-quoted --body marker-key mismatch.
-# The voice-tone gate shares the byte-identical canonical external-comms-gate.sh
-# (ADR-017 sync), so the P364 shell-unescape fix applies here too: a body with
-# backslash-escaped backticks in --body "..." must unescape to the logical
-# <draft> body the PostToolUse mark hook hashes, or the PASS marker never
-# permits. DISTINCT from P276 / P010 (whitespace / frontmatter).
-# ---------------------------------------------------------------------------
-
-@test "P364: backtick-bearing double-quoted --body permits when marker keyed on the unescaped logical body" {
-  LOGICAL='Tidied the wording in `external-comms-gate` for the patch.'
-  SURFACE="gh-issue-comment"
-  KEY=$(printf '%s\n%s' "$LOGICAL" "$SURFACE" | shasum -a 256 | cut -d' ' -f1)
-  touch "${RDIR}/external-comms-voice-tone-reviewed-${KEY}"
-
-  CMD='gh issue comment 42 --body "Tidied the wording in \`external-comms-gate\` for the patch."'
-  INPUT=$(build_bash_input "$CMD")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}
-
-@test "P364: single-quoted --body with literal backticks stays literal (no unescaping applied)" {
-  LOGICAL='Tidied the wording in `plain_span` here.'
-  SURFACE="gh-issue-comment"
-  KEY=$(printf '%s\n%s' "$LOGICAL" "$SURFACE" | shasum -a 256 | cut -d' ' -f1)
-  touch "${RDIR}/external-comms-voice-tone-reviewed-${KEY}"
-
-  INPUT=$(build_bash_input "gh issue comment 42 --body 'Tidied the wording in \`plain_span\` here.'")
-  run_hook "$INPUT"
-  [ "$status" -eq 0 ]
-  [ -z "$output" ]
-}

package/hooks/test/external-comms-mark-prompt-parse.bats

@@ -1,117 +0,0 @@
-#!/usr/bin/env bats
-# Behavioural tests for packages/voice-tone/hooks/external-comms-mark-reviewed.sh
-# under P166 hook-side key derivation (ADR-028 amended 2026-05-16).
-#
-# Contract: the PostToolUse:Agent hook derives the marker key from
-# tool_input.prompt's `SURFACE: <name>` + `<draft>...</draft>` structure
-# instead of trusting an agent-emitted EXTERNAL_COMMS_VOICE_TONE_KEY line.
-# On PASS, writes external-comms-voice-tone-reviewed-<KEY> at the derived
-# key. Backward-compat: if the prompt lacks structure, falls back to the
-# agent-emitted KEY line (one release-cycle window per architect direction).
-
-setup() {
-  SCRIPT_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  HOOK="$SCRIPT_DIR/external-comms-mark-reviewed.sh"
-  ORIG_DIR="$PWD"
-  TEST_DIR=$(mktemp -d)
-  cd "$TEST_DIR"
-  TMPDIR="$TEST_DIR/tmp"
-  export TMPDIR
-  mkdir -p "$TMPDIR"
-  SESSION_ID="test-vt-mark-prompt-$$-${BATS_TEST_NUMBER}"
-  RDIR="$TMPDIR/claude-risk-${SESSION_ID}"
-}
-
-teardown() {
-  cd "$ORIG_DIR"
-  rm -rf "$TEST_DIR"
-}
-
-# Gate-side reference key — same computation as external-comms-gate.sh line 229.
-gate_key() {
-  local draft="$1" surface="$2"
-  printf '%s\n%s' "$draft" "$surface" | shasum -a 256 | cut -d' ' -f1
-}
-
-# Build the PostToolUse:Agent payload and pipe it to the hook.
-# - tool_input.prompt carries the structured prompt the orchestrator sent to the agent.
-# - tool_response.content[0].text carries the agent's stdout (verdict block).
-run_hook() {
-  local prompt="$1"
-  local agent_output="$2"
-  python3 -c "
-import json, sys
-print(json.dumps({
-  'tool_name': 'Agent',
-  'session_id': '${SESSION_ID}',
-  'tool_input': {'subagent_type': 'wr-voice-tone:external-comms', 'prompt': sys.argv[1]},
-  'tool_response': {'content': [{'type': 'text', 'text': sys.argv[2]}]}
-}))" "$prompt" "$agent_output" | bash "$HOOK"
-}
-
-@test "PASS with structured prompt: marker lands at hook-derived key" {
-  DRAFT="we noticed a build failure on Node 20"
-  SURFACE="changeset-author"
-  PROMPT=$'SURFACE: '"$SURFACE"$'\n<draft>\n'"$DRAFT"$'\n</draft>\nReview against docs/VOICE-AND-TONE.md.'
-  AGENT_OUTPUT=$'no voice/tone violation matched\nEXTERNAL_COMMS_VOICE_TONE_VERDICT: PASS'
-  run_hook "$PROMPT" "$AGENT_OUTPUT"
-  KEY=$(gate_key "$DRAFT" "$SURFACE")
-  [ -f "$RDIR/external-comms-voice-tone-reviewed-${KEY}" ]
-}
-
-@test "FAIL with structured prompt: no marker written" {
-  DRAFT="happy to help further on this 2-year-old issue"
-  SURFACE="gh-issue-comment"
-  PROMPT=$'SURFACE: '"$SURFACE"$'\n<draft>\n'"$DRAFT"$'\n</draft>'
-  AGENT_OUTPUT=$'EXTERNAL_COMMS_VOICE_TONE_VERDICT: FAIL\nEXTERNAL_COMMS_VOICE_TONE_REASON: banned closer'
-  run_hook "$PROMPT" "$AGENT_OUTPUT"
-  KEY=$(gate_key "$DRAFT" "$SURFACE")
-  [ ! -f "$RDIR/external-comms-voice-tone-reviewed-${KEY}" ]
-}
-
-@test "PASS with structured prompt AND agent-emitted KEY: hook-derived key wins" {
-  DRAFT="hook-derived path text"
-  SURFACE="gh-pr-create"
-  PROMPT=$'SURFACE: '"$SURFACE"$'\n<draft>\n'"$DRAFT"$'\n</draft>'
-  # Agent emits a different (wrong) key — hook must ignore it in favour of derived key.
-  BOGUS_KEY="0000000000000000000000000000000000000000000000000000000000000000"
-  AGENT_OUTPUT=$'EXTERNAL_COMMS_VOICE_TONE_VERDICT: PASS\nEXTERNAL_COMMS_VOICE_TONE_KEY: '"$BOGUS_KEY"
-  run_hook "$PROMPT" "$AGENT_OUTPUT"
-  DERIVED_KEY=$(gate_key "$DRAFT" "$SURFACE")
-  [ -f "$RDIR/external-comms-voice-tone-reviewed-${DERIVED_KEY}" ]
-  [ ! -f "$RDIR/external-comms-voice-tone-reviewed-${BOGUS_KEY}" ]
-}
-
-@test "backward-compat: PASS with no structured prompt but agent-emitted KEY lands marker" {
-  # Cached old SKILL.md still tells the agent to emit the KEY; hook honours it.
-  LEGACY_KEY="abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789"
-  PROMPT="please review this draft (legacy unstructured prompt)"
-  AGENT_OUTPUT=$'EXTERNAL_COMMS_VOICE_TONE_VERDICT: PASS\nEXTERNAL_COMMS_VOICE_TONE_KEY: '"$LEGACY_KEY"
-  run_hook "$PROMPT" "$AGENT_OUTPUT"
-  [ -f "$RDIR/external-comms-voice-tone-reviewed-${LEGACY_KEY}" ]
-}
-
-@test "no structured prompt and no agent KEY: no marker written" {
-  PROMPT="legacy prompt"
-  AGENT_OUTPUT=$'EXTERNAL_COMMS_VOICE_TONE_VERDICT: PASS'
-  run_hook "$PROMPT" "$AGENT_OUTPUT"
-  # Nothing to key on — no marker at any path under RDIR.
-  found=$(ls "$RDIR" 2>/dev/null | wc -l | tr -d ' ')
-  [ "$found" -eq 0 ]
-}
-
-@test "ignores unrelated subagent types" {
-  PROMPT=$'SURFACE: gh-issue-create\n<draft>\nbody\n</draft>'
-  AGENT_OUTPUT=$'EXTERNAL_COMMS_VOICE_TONE_VERDICT: PASS'
-  # Swap the subagent type in the input to an unrelated one.
-  python3 -c "
-import json, sys
-print(json.dumps({
-  'tool_name': 'Agent',
-  'session_id': '${SESSION_ID}',
-  'tool_input': {'subagent_type': 'wr-architect:agent', 'prompt': sys.argv[1]},
-  'tool_response': {'content': [{'type': 'text', 'text': sys.argv[2]}]}
-}))" "$PROMPT" "$AGENT_OUTPUT" | bash "$HOOK"
-  found=$(ls "$RDIR" 2>/dev/null | wc -l | tr -d ' ')
-  [ "$found" -eq 0 ]
-}

package/hooks/test/review-gate.bats

@@ -1,81 +0,0 @@
-#!/usr/bin/env bats
-
-# Tests for review-gate.sh (shared by voice-tone, style-guide, jtbd)
-
-setup() {
-  SCRIPT_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  source "$SCRIPT_DIR/lib/review-gate.sh"
-  TEST_SESSION="test-$$-$BATS_TEST_NUMBER"
-  TMPDIR_ORIG=$(mktemp -d)
-}
-
-teardown() {
-  rm -f "/tmp/voice-tone-reviewed-${TEST_SESSION}"
-  rm -f "/tmp/voice-tone-reviewed-${TEST_SESSION}.hash"
-  rm -rf "$TMPDIR_ORIG"
-}
-
-@test "gate denies when no marker exists" {
-  run check_review_gate "$TEST_SESSION" "voice-tone" "docs/VOICE-AND-TONE.md"
-  [ "$status" -ne 0 ]
-}
-
-@test "gate allows when marker exists and is fresh" {
-  touch "/tmp/voice-tone-reviewed-${TEST_SESSION}"
-  run check_review_gate "$TEST_SESSION" "voice-tone" "docs/VOICE-AND-TONE.md"
-  [ "$status" -eq 0 ]
-}
-
-@test "gate denies when marker is expired" {
-  touch "/tmp/voice-tone-reviewed-${TEST_SESSION}"
-  REVIEW_TTL=0 run check_review_gate "$TEST_SESSION" "voice-tone" "docs/VOICE-AND-TONE.md"
-  [ "$status" -ne 0 ]
-}
-
-@test "store_review_hash creates hash file" {
-  store_review_hash "$TEST_SESSION" "voice-tone" "docs/VOICE-AND-TONE.md"
-  [ -f "/tmp/voice-tone-reviewed-${TEST_SESSION}.hash" ]
-}
-
-@test "_mtime returns a number" {
-  touch "/tmp/voice-tone-reviewed-${TEST_SESSION}"
-  result=$(_mtime "/tmp/voice-tone-reviewed-${TEST_SESSION}")
-  [[ "$result" =~ ^[0-9]+$ ]]
-}
-
-@test "_hashcmd produces output" {
-  result=$(echo "test" | _hashcmd)
-  [ -n "$result" ]
-}
-
-# P215 / RFC-021 — REVIEW_GATE_REASON must carry an explicit recovery
-# directive naming the subagent_type and Agent tool, parallel to the
-# architect-gate ARCHITECT_GATE_REASON shape.
-
-@test "REVIEW_GATE_REASON names re-delegate directive when no marker" {
-  REVIEW_GATE_REASON=""
-  check_review_gate "$TEST_SESSION" "voice-tone" "docs/VOICE-AND-TONE.md" || true
-  [[ "$REVIEW_GATE_REASON" == *"wr-voice-tone:agent"* ]]
-  [[ "$REVIEW_GATE_REASON" == *"Agent tool"* ]]
-}
-
-@test "REVIEW_GATE_REASON names refresh-the-marker directive when TTL expired" {
-  touch "/tmp/voice-tone-reviewed-${TEST_SESSION}"
-  REVIEW_GATE_REASON=""
-  REVIEW_TTL=0 check_review_gate "$TEST_SESSION" "voice-tone" "docs/VOICE-AND-TONE.md" || true
-  [[ "$REVIEW_GATE_REASON" == *"expired"* ]]
-  [[ "$REVIEW_GATE_REASON" == *"wr-voice-tone:agent"* ]]
-  [[ "$REVIEW_GATE_REASON" == *"refresh the marker"* ]]
-}
-
-@test "REVIEW_GATE_REASON names drift directive when policy hash differs" {
-  POLICY_FILE="$TMPDIR_ORIG/VOICE-AND-TONE.md"
-  echo "# policy v1" > "$POLICY_FILE"
-  touch "/tmp/voice-tone-reviewed-${TEST_SESSION}"
-  echo "stale-hash" > "/tmp/voice-tone-reviewed-${TEST_SESSION}.hash"
-  REVIEW_GATE_REASON=""
-  check_review_gate "$TEST_SESSION" "voice-tone" "$POLICY_FILE" || true
-  [[ "$REVIEW_GATE_REASON" == *"changed"* ]] || [[ "$REVIEW_GATE_REASON" == *"drift"* ]]
-  [[ "$REVIEW_GATE_REASON" == *"wr-voice-tone:agent"* ]]
-  [[ "$REVIEW_GATE_REASON" == *"refresh the marker"* ]]
-}

package/hooks/test/slide-marker-on-subprocess-return.bats

@@ -1,118 +0,0 @@
-#!/usr/bin/env bats
-
-# Tests for slide_marker_on_subprocess_return helper (P111).
-#
-# Behavioural contract:
-# - Slides an existing marker forward (touch) on PostToolUse:Agent|Bash
-#   completion, treating subprocess wall-clock as continuous parent-session
-#   work for TTL purposes.
-# - Never CREATES a marker (creating requires a real gate review).
-# - Skips slide on subprocess error (tool_response.is_error=true) so a failed
-#   subprocess does NOT extend the parent's trust window (ADR-009 amendment).
-# - No-op when no marker exists or session_id is empty (fail-safe).
-
-setup() {
-  HOOKS_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  source "$HOOKS_DIR/lib/gate-helpers.sh"
-
-  TEST_SESSION="bats-slide-$$-${BATS_TEST_NUMBER}"
-  MARKER="/tmp/architect-reviewed-${TEST_SESSION}"
-  rm -f "$MARKER"
-}
-
-teardown() {
-  rm -f "$MARKER"
-}
-
-# Helper: backdate file mtime by N seconds (portable between macOS and Linux)
-_backdate() {
-  local file="$1" seconds="$2"
-  local stamp
-  stamp=$(date -v-${seconds}S +%Y%m%d%H%M.%S 2>/dev/null \
-       || date -d "${seconds} seconds ago" +%Y%m%d%H%M.%S 2>/dev/null)
-  touch -t "$stamp" "$file"
-}
-
-@test "slide: existing marker is touched on success response" {
-  touch "$MARKER"
-  _backdate "$MARKER" 60
-  BEFORE=$(_mtime "$MARKER")
-  _HOOK_INPUT='{"tool_response":{"content":[]}}'
-  slide_marker_on_subprocess_return "$MARKER"
-  AFTER=$(_mtime "$MARKER")
-  [ "$AFTER" -gt "$BEFORE" ]
-}
-
-@test "slide: long-running subprocess does NOT cause parent marker expiry on return (P111 reproduction)" {
-  # Simulate the P111 failure mode: parent's marker is set, then a long
-  # subprocess runs (we backdate the marker to simulate elapsed wall-clock),
-  # then PostToolUse fires with a successful tool_response. The marker mtime
-  # must be refreshed so the parent's NEXT PreToolUse gate check (which
-  # compares NOW - mtime against TTL) sees a fresh marker.
-  touch "$MARKER"
-  # Marker is 50 minutes old — under default 60-min TTL but close to expiry.
-  # Without the slide on subprocess return, a subsequent 15-min subprocess
-  # would push the mtime past TTL and the next PreToolUse would deny.
-  _backdate "$MARKER" 3000
-  BEFORE=$(_mtime "$MARKER")
-  _HOOK_INPUT='{"tool_response":{"content":[{"type":"text","text":"OK"}]}}'
-  slide_marker_on_subprocess_return "$MARKER"
-  AFTER=$(_mtime "$MARKER")
-  NOW=$(date +%s)
-  [ "$AFTER" -gt "$BEFORE" ]
-  # And the new mtime is approximately NOW (within 5 seconds of slide call)
-  AGE=$((NOW - AFTER))
-  [ "$AGE" -lt 5 ]
-}
-
-@test "slide: does NOT touch marker when tool_response.is_error=true" {
-  touch "$MARKER"
-  _backdate "$MARKER" 60
-  BEFORE=$(_mtime "$MARKER")
-  _HOOK_INPUT='{"tool_response":{"is_error":true,"content":[]}}'
-  slide_marker_on_subprocess_return "$MARKER"
-  AFTER=$(_mtime "$MARKER")
-  [ "$BEFORE" = "$AFTER" ]
-}
-
-@test "slide: no-op when marker does not exist (never creates)" {
-  [ ! -f "$MARKER" ]
-  _HOOK_INPUT='{"tool_response":{"content":[]}}'
-  slide_marker_on_subprocess_return "$MARKER"
-  [ ! -f "$MARKER" ]
-}
-
-@test "slide: no-op when marker path argument is empty" {
-  _HOOK_INPUT='{"tool_response":{"content":[]}}'
-  run slide_marker_on_subprocess_return ""
-  [ "$status" -eq 0 ]
-}
-
-@test "slide: malformed hook input is fail-safe (no slide)" {
-  touch "$MARKER"
-  _backdate "$MARKER" 60
-  BEFORE=$(_mtime "$MARKER")
-  _HOOK_INPUT='not valid json'
-  slide_marker_on_subprocess_return "$MARKER"
-  AFTER=$(_mtime "$MARKER")
-  # Fail-safe: when the hook input cannot be parsed, treat as error and skip
-  [ "$BEFORE" = "$AFTER" ]
-}
-
-@test "slide: triggers correctly on Skill tool_response shape (P213, ADR-009 2026-06-08 amendment)" {
-  # hooks.json matcher expansion Agent|Bash → Agent|Bash|Skill (P213 Option D)
-  # widens slide-marker coverage to PostToolUse:Skill completions (e.g. the
-  # /wr-risk-scorer:assess-* sibling assessor SKILLs run as long subprocesses
-  # by the AFK orchestrator). The Skill tool_response shape is identical to
-  # Agent|Bash (Claude Code's uniform PostToolUse contract), so the matcher-
-  # agnostic helper composes without code changes. This test documents that
-  # contract explicitly so a future hook_input shape divergence regression
-  # surfaces here rather than at the gate-denial site.
-  touch "$MARKER"
-  _backdate "$MARKER" 60
-  BEFORE=$(_mtime "$MARKER")
-  _HOOK_INPUT='{"tool_name":"Skill","tool_response":{"content":[{"type":"text","text":"OK"}]}}'
-  slide_marker_on_subprocess_return "$MARKER"
-  AFTER=$(_mtime "$MARKER")
-  [ "$AFTER" -gt "$BEFORE" ]
-}

package/hooks/test/substance-aware-drift.bats

@@ -1,86 +0,0 @@
-#!/usr/bin/env bats
-
-# Behavioural tests for ADR-009 amendment 2026-06-06: substance-aware drift +
-# atomic verdict-write — voice-tone gate. Sibling-coverage to architect /
-# jtbd / style-guide bats files of the same name.
-
-setup() {
-  SCRIPT_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  source "$SCRIPT_DIR/lib/review-gate.sh"
-
-  TEST_SESSION="bats-vt-substance-$$-${BATS_TEST_NUMBER}"
-  SYSTEM="voice-tone"
-  TEST_DIR=$(mktemp -d -t substance-aware-drift-vt.XXXXXX)
-  POLICY_FILE="$TEST_DIR/VOICE-AND-TONE.md"
-
-  MARKER="/tmp/${SYSTEM}-reviewed-${TEST_SESSION}"
-  HASH_FILE="${MARKER}.hash"
-  rm -f "$MARKER" "$HASH_FILE"
-}
-
-teardown() {
-  rm -f "$MARKER" "$HASH_FILE"
-  rm -rf "$TEST_DIR"
-}
-
-_install_and_mark() {
-  local body="$1"
-  printf '%s' "$body" > "$POLICY_FILE"
-  touch "$MARKER"
-  store_review_hash "$TEST_SESSION" "$SYSTEM" "$POLICY_FILE"
-}
-
-@test "voice-tone substance-aware: trailing-whitespace edit does NOT re-trigger" {
-  _install_and_mark "# Voice and Tone
-
-Plain. Direct. Concise.
-"
-  printf '%s' "# Voice and Tone
-
-Plain. Direct. Concise.
-" > "$POLICY_FILE"
-
-  run check_review_gate "$TEST_SESSION" "$SYSTEM" "$POLICY_FILE"
-  [ "$status" -eq 0 ]
-}
-
-@test "voice-tone substance-aware: new-content edit DOES re-trigger" {
-  _install_and_mark "# Voice and Tone
-
-Plain. Direct. Concise.
-"
-  printf '%s' "# Voice and Tone
-
-Plain. Direct. Concise. Friendly.
-" > "$POLICY_FILE"
-
-  run check_review_gate "$TEST_SESSION" "$SYSTEM" "$POLICY_FILE"
-  [ "$status" -ne 0 ]
-  [ ! -f "$MARKER" ]
-}
-
-@test "voice-tone atomic-write: store_review_hash lands marker + hash together" {
-  printf '%s' "# Voice and Tone
-
-Body.
-" > "$POLICY_FILE"
-  touch "$MARKER"
-  run store_review_hash "$TEST_SESSION" "$SYSTEM" "$POLICY_FILE"
-  [ "$status" -eq 0 ]
-  [ -f "$MARKER" ]
-  [ -f "$HASH_FILE" ]
-}
-
-@test "voice-tone conservative: single-numeral change DOES re-trigger" {
-  _install_and_mark "# Voice and Tone
-
-Sentences should be at most 20 words.
-"
-  printf '%s' "# Voice and Tone
-
-Sentences should be at most 25 words.
-" > "$POLICY_FILE"
-
-  run check_review_gate "$TEST_SESSION" "$SYSTEM" "$POLICY_FILE"
-  [ "$status" -ne 0 ]
-}

package/hooks/test/voice-tone-enforce-scope.bats

@@ -1,80 +0,0 @@
-#!/usr/bin/env bats
-
-# Tests for voice-tone-enforce-edit.sh — verifies the path-based exemption
-# for governance-managed surfaces (docs/story-maps/, docs/stories/) per
-# ADR-060 § Phase 2 amendment 2026-05-12 lines 481-496 (P170 Phase 2 Slice 2.5).
-#
-# The voice-tone hook is opt-in (gates *.html|*.jsx|*.tsx|*.vue|*.svelte|
-# *.ejs|*.hbs) and blocks outright when docs/VOICE-AND-TONE.md is absent.
-# Story-map HTML files would otherwise be blocked even when no policy
-# exists — this is the empirical block P170 line 297 documented when the
-# STORY-MAP-001 bootstrap was attempted. The exemption short-circuits before
-# the extension check.
-
-setup() {
-  SCRIPT_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  HOOK="$SCRIPT_DIR/voice-tone-enforce-edit.sh"
-  ORIG_DIR="$PWD"
-  TEST_DIR=$(mktemp -d)
-  cd "$TEST_DIR"
-}
-
-teardown() {
-  cd "$ORIG_DIR"
-  rm -rf "$TEST_DIR"
-}
-
-run_hook_with_file() {
-  local file_path="$1"
-  local json="{\"tool_input\":{\"file_path\":\"${file_path}\"},\"session_id\":\"test-session-$$\"}"
-  echo "$json" | bash "$HOOK"
-}
-
-assert_path_allowed() {
-  local file_path="$1"
-  run run_hook_with_file "$file_path"
-  [ "$status" -eq 0 ]
-  [[ "$output" != *"BLOCKED"* ]]
-}
-
-assert_path_blocked() {
-  local file_path="$1"
-  run run_hook_with_file "$file_path"
-  [ "$status" -eq 0 ]
-  [[ "$output" == *"BLOCKED"* ]]
-}
-
-# --- Story maps + stories exemptions (P170 Phase 2 Slice 2.5 / ADR-060) ---
-
-@test "voice-tone: exempts docs/story-maps/ HTML in per-state subdir" {
-  assert_path_allowed "$PWD/docs/story-maps/draft/STORY-MAP-001-foo.html"
-}
-
-@test "voice-tone: exempts docs/story-maps/ HTML in completed subdir" {
-  assert_path_allowed "$PWD/docs/story-maps/completed/STORY-MAP-002-bar.html"
-}
-
-@test "voice-tone: exempts docs/story-maps/ even when no VOICE-AND-TONE.md exists" {
-  # P170 line 297: STORY-MAP-001 bootstrap was blocked here exactly because
-  # this exemption did not exist. Behavioural regression-guard.
-  [ ! -f docs/VOICE-AND-TONE.md ]
-  assert_path_allowed "$PWD/docs/story-maps/in-progress/STORY-MAP-001-rfc-framework.html"
-}
-
-@test "voice-tone: exempts docs/stories/ files even though .md isn't normally gated" {
-  assert_path_allowed "$PWD/docs/stories/draft/STORY-001-foo.md"
-}
-
-# --- Regression: non-exempt HTML still gate ---
-
-@test "voice-tone: exempts VCS-internal .git/ files even with a gated extension (P458)" {
-  assert_path_allowed "$PWD/.git/hooks/prepare-commit-msg.tsx"
-}
-
-@test "voice-tone: still blocks an unrelated .html file when no policy exists" {
-  assert_path_blocked "$PWD/public/index.html"
-}
-
-@test "voice-tone: still blocks a .tsx component file when no policy exists" {
-  assert_path_blocked "$PWD/src/Component.tsx"
-}

package/hooks/test/voice-tone-eval-once-per-session.bats

@@ -1,77 +0,0 @@
-#!/usr/bin/env bats
-
-# P095 / ADR-038: voice-tone-eval.sh UserPromptSubmit hook must emit
-# the full MANDATORY block only on the first prompt of a session;
-# subsequent prompts emit a terse reminder.
-
-setup() {
-  REPO_ROOT="$(cd "$(dirname "$BATS_TEST_FILENAME")/../../../.." && pwd)"
-  HOOK="$REPO_ROOT/packages/voice-tone/hooks/voice-tone-eval.sh"
-
-  WORKDIR="$(mktemp -d)"
-  mkdir -p "$WORKDIR/docs"
-  : > "$WORKDIR/docs/VOICE-AND-TONE.md"
-
-  SID="vt-eval-test-$$-$RANDOM"
-}
-
-teardown() {
-  rm -f "/tmp/voice-tone-announced-${SID}"
-  rm -f "/tmp/voice-tone-announced-${SID}-alt"
-  rm -rf "$WORKDIR"
-}
-
-run_hook() {
-  local sid="$1"
-  (cd "$WORKDIR" && echo "{\"session_id\":\"$sid\"}" | bash "$HOOK")
-}
-
-@test "voice-tone-eval: first invocation emits the full MANDATORY block" {
-  run run_hook "$SID"
-  [ "$status" -eq 0 ]
-  [ "${#output}" -gt 400 ]
-  [[ "$output" == *"MANDATORY VOICE & TONE CHECK"* ]]
-  [[ "$output" == *"wr-voice-tone:agent"* ]]
-}
-
-@test "voice-tone-eval: first invocation writes the announcement marker" {
-  run run_hook "$SID"
-  [ -f "/tmp/voice-tone-announced-${SID}" ]
-}
-
-@test "voice-tone-eval: second invocation emits only a terse reminder" {
-  run_hook "$SID" >/dev/null
-  run run_hook "$SID"
-  [ "${#output}" -lt 250 ]
-  [[ "$output" == *"voice-and-tone"* ]] || [[ "$output" == *"VOICE"* ]] || [[ "$output" == *"voice"* ]]
-  [[ "$output" == *"wr-voice-tone:agent"* ]]
-  [[ "$output" != *"REQUIRED ACTIONS:"* ]]
-}
-
-@test "voice-tone-eval: terse reminder preserves the MANDATORY signal word" {
-  run_hook "$SID" >/dev/null
-  run run_hook "$SID"
-  [[ "$output" == *"MANDATORY"* ]] || [[ "$output" == *"REQUIRED"* ]] || [[ "$output" == *"NON-OPTIONAL"* ]]
-}
-
-@test "voice-tone-eval: terse reminder names the trigger artifact" {
-  run_hook "$SID" >/dev/null
-  run run_hook "$SID"
-  [[ "$output" == *"VOICE-AND-TONE.md"* ]]
-}
-
-@test "voice-tone-eval: different session_id re-emits the full block" {
-  run_hook "$SID" >/dev/null
-  local SID2="${SID}-alt"
-  run run_hook "$SID2"
-  [ "${#output}" -gt 400 ]
-  [[ "$output" == *"MANDATORY VOICE & TONE CHECK"* ]]
-  rm -f "/tmp/voice-tone-announced-${SID2}"
-}
-
-@test "voice-tone-eval: empty session_id emits the full block and writes no marker" {
-  run run_hook ""
-  [ "${#output}" -gt 400 ]
-  [[ "$output" == *"MANDATORY VOICE & TONE CHECK"* ]]
-  [ ! -f "/tmp/voice-tone-announced-" ]
-}

package/hooks/test/voice-tone-no-stop-hook.bats

@@ -1,15 +0,0 @@
-#!/usr/bin/env bats
-
-# P001 / ADR-009: Stop-hook marker reset removed.
-
-setup() {
-  PLUGIN_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/../.." && pwd)"
-}
-
-@test "voice-tone: hooks.json has no Stop hook entry (ADR-009)" {
-  ! grep -q '"Stop"' "$PLUGIN_DIR/hooks/hooks.json"
-}
-
-@test "voice-tone: voice-tone-reset-marker.sh has been removed" {
-  [ ! -f "$PLUGIN_DIR/hooks/voice-tone-reset-marker.sh" ]
-}

package/hooks/test/voice-tone-project-root.bats

@@ -1,20 +0,0 @@
-#!/usr/bin/env bats
-
-# P004: voice-tone-enforce-edit.sh project-root check.
-
-setup() {
-  SCRIPT_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  HOOK="$SCRIPT_DIR/voice-tone-enforce-edit.sh"
-}
-
-run_hook_with_file() {
-  local file_path="$1"
-  local json="{\"tool_input\":{\"file_path\":\"${file_path}\"},\"session_id\":\"test-$$\"}"
-  echo "$json" | bash "$HOOK"
-}
-
-@test "voice-tone project-root: absolute .tsx outside project exits 0" {
-  run run_hook_with_file "/Users/other/project/src/foo.tsx"
-  [ "$status" -eq 0 ]
-  [[ "$output" != *"BLOCKED"* ]]
-}