claude-code-session-manager 0.86.0 → 0.88.0

package/src/main/__tests__/scheduler-broadcast-reconcile.test.cjs

@@ -0,0 +1,121 @@
+/**
+ * scheduler-broadcast-reconcile.test.cjs — broadcast() used to do its own bare
+ * `readQueue() -> reconcile(state) -> writeQueue(state)` BEFORE ever touching
+ * the broadcastCoalescer, so a burst of N broadcast() calls inside one
+ * BROADCAST_COALESCE_MS window cost N full reconcile passes + N queue writes
+ * to produce ONE coalesced payload — and did so outside mutate()'s lock, so a
+ * concurrent mutation's update could be lost. The fix moves the
+ * reconcile+write pair inside the coalescer's `getPayload`, run through
+ * `mutate()`, so N broadcast() calls in one window cost exactly one reconcile
+ * and one write.
+ *
+ * `reconcile` is a bare local call inside getPayload's mutate() callback, so
+ * — matching this file's existing testable-seam convention (module.exports.
+ * stashList / evaluateSharedTreeGuard / committedInWindow) — it is invoked as
+ * `module.exports.reconcile(state)` specifically so tests can spy on it here.
+ * `queueStore.readMerged`/`writeSplit` are genuine cross-module property
+ * calls already, so they're spied on directly with no source change needed.
+ *
+ * HOME-isolated (mirrors reconcileFlatPrdSweep.test.cjs): stub HOME to a
+ * mkdtemp dir before requiring scheduler.cjs so `ensureDirs()` (called by the
+ * real `writeQueue()` wrapper before the now-mocked `queueStore.writeSplit`)
+ * never touches the real machine.
+ *
+ * Run: timeout 60 npx vitest run src/main/__tests__/scheduler-broadcast-reconcile.test.cjs
+ */
+'use strict';
+
+import { test, expect, beforeAll, afterAll, beforeEach, afterEach, vi } from 'vitest';
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+
+let tmpHome;
+let originalHome;
+let scheduler;
+let queueStore;
+
+beforeAll(() => {
+  originalHome = process.env.HOME;
+  tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'sm-broadcast-reconcile-home-'));
+  process.env.HOME = tmpHome;
+
+  scheduler = require('../scheduler.cjs');
+  queueStore = require('../lib/queueStore.cjs');
+
+  if (!scheduler.PRDS_DIR.startsWith(tmpHome)) {
+    throw new Error(`refusing to run: PRDS_DIR (${scheduler.PRDS_DIR}) is not under the temp HOME (${tmpHome})`);
+  }
+});
+
+afterAll(() => {
+  process.env.HOME = originalHome;
+  fs.rmSync(tmpHome, { recursive: true, force: true });
+});
+
+function freshState() {
+  return { config: {}, jobs: [], scheduledFor: null, lastRunAt: null, paused: null };
+}
+
+function fakeWindow() {
+  return {
+    isDestroyed: () => false,
+    webContents: { isDestroyed: () => false, isCrashed: () => false, send: vi.fn() },
+  };
+}
+
+function wait(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+afterEach(() => {
+  vi.restoreAllMocks();
+  scheduler.attachWindow(null);
+});
+
+test('10 broadcast() calls inside one coalesce window trigger exactly one reconcile and one queue write', async () => {
+  vi.spyOn(queueStore, 'readMerged').mockImplementation(async () => freshState());
+  const writeSpy = vi.spyOn(queueStore, 'writeSplit').mockResolvedValue(undefined);
+  const reconcileSpy = vi.spyOn(scheduler, 'reconcile').mockResolvedValue(undefined);
+
+  for (let i = 0; i < 10; i += 1) scheduler.broadcast();
+
+  // BROADCAST_COALESCE_MS is 200ms; give the trailing-edge timer room to fire.
+  await wait(400);
+
+  expect(reconcileSpy).toHaveBeenCalledTimes(1);
+  expect(writeSpy).toHaveBeenCalledTimes(1);
+});
+
+test('a window-less (flush) broadcast() still reconciles, even with no window attached', async () => {
+  scheduler.attachWindow(null);
+  vi.spyOn(queueStore, 'readMerged').mockImplementation(async () => freshState());
+  const writeSpy = vi.spyOn(queueStore, 'writeSplit').mockResolvedValue(undefined);
+  const reconcileSpy = vi.spyOn(scheduler, 'reconcile').mockResolvedValue(undefined);
+
+  await scheduler.broadcast({ flush: true });
+
+  expect(reconcileSpy).toHaveBeenCalledTimes(1);
+  expect(writeSpy).toHaveBeenCalledTimes(1);
+});
+
+test('a reconcile() that throws does not wedge the coalescer — the next broadcast() still sends', async () => {
+  const win = fakeWindow();
+  scheduler.attachWindow(win);
+  vi.spyOn(queueStore, 'readMerged').mockImplementation(async () => freshState());
+  vi.spyOn(queueStore, 'writeSplit').mockResolvedValue(undefined);
+  const reconcileSpy = vi.spyOn(scheduler, 'reconcile')
+    .mockRejectedValueOnce(new Error('boom'))
+    .mockResolvedValue(undefined);
+
+  scheduler.broadcast();
+  await wait(400);
+  expect(win.webContents.send).not.toHaveBeenCalled();
+
+  scheduler.broadcast();
+  await wait(400);
+
+  expect(reconcileSpy).toHaveBeenCalledTimes(2);
+  expect(win.webContents.send).toHaveBeenCalledTimes(1);
+  expect(win.webContents.send).toHaveBeenCalledWith('schedule:state', expect.any(Object));
+});

package/src/main/__tests__/scheduler-cross-project-batch.test.cjs

@@ -0,0 +1,43 @@
+'use strict';
+
+// Ported from the retired top-level test-root directory (a node:test suite,
+// never runnable by this repo's vitest-only setup — see CLAUDE.md's Commands
+// section). Pins the two basic cross-project pickNextBatch contracts that
+// were asserted there but not literally exercised elsewhere: N independent
+// projects each with a single pending job all fire together when the global
+// slot pool is generous, and a global cap BELOW the total pending count
+// across projects admits exactly that many, not more.
+//
+// Run: timeout 120 npx vitest run src/main/__tests__/scheduler-cross-project-batch.test.cjs
+
+const assert = require('node:assert/strict');
+const { pickNextBatch } = require('../lib/schedulerBatch.cjs');
+
+function job(slug, status, cwd, parallelGroup) {
+  return { slug, status, cwd, parallelGroup, dependsOn: [] };
+}
+
+test('3 independent projects, 1 pending each, generous cap (6) → all 3 fire', () => {
+  const jobs = [
+    job('a-job', 'pending', '/a', 5),
+    job('b-job', 'pending', '/b', 5),
+    job('c-job', 'pending', '/c', 5),
+  ];
+  const { batch, reason } = pickNextBatch(jobs, new Set(), 6);
+  assert.equal(batch.length, 3);
+  assert.equal(reason, null);
+  const slugs = new Set(batch.map((j) => j.slug));
+  assert.ok(slugs.has('a-job'));
+  assert.ok(slugs.has('b-job'));
+  assert.ok(slugs.has('c-job'));
+});
+
+test('3 independent projects, 1 pending each, cap 2 (below total pending) → exactly 2 fire', () => {
+  const jobs = [
+    job('a-job', 'pending', '/a', 5),
+    job('b-job', 'pending', '/b', 5),
+    job('c-job', 'pending', '/c', 5),
+  ];
+  const { batch } = pickNextBatch(jobs, new Set(), 2);
+  assert.equal(batch.length, 2);
+});

package/src/main/__tests__/scheduler-default-eligible-heal.test.cjs

@@ -0,0 +1,161 @@
+/**
+ * scheduler-default-eligible-heal.test.cjs — the periodic heal ladder is
+ * default-ELIGIBLE (2026-09-18, 1229-fo-03 parked shared_tree_reverted and
+ * blocked 19 of 20 pending rows because that verdict was on no allow-list).
+ *
+ * Covers: any needs_review verdict is a candidate unless named in
+ * RESCAN_EXCLUDED_VERDICTS; the evidence rung is bounded; a row that cannot
+ * heal terminates under the bounded ladder; health names a silent blocker.
+ *
+ * Run: timeout 120 npx vitest run src/main/__tests__/scheduler-default-eligible-heal.test.cjs
+ */
+
+'use strict';
+
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+
+process.env.HOME = fs.mkdtempSync(path.join(os.tmpdir(), 'default-eligible-heal-test-'));
+
+const {
+  isRescanCandidate,
+  isTranscriptRescannable,
+  isStrandedAutoFixPark,
+  isEligibleForNeedsReviewAutoResolve,
+  shouldRunPeriodicReverify,
+  selectEvidenceScanTargets,
+  selectAutoFixTargets,
+  selectMechanicalRecoveryTarget,
+  selectResumeRecoveryTarget,
+  applyNeedsReviewAutoResolve,
+  RESCAN_EXCLUDED_VERDICTS,
+  RESCANNABLE_VERDICTS,
+  EVIDENCE_SCAN_MAX_PER_PASS,
+  EVIDENCE_SCAN_MIN_INTERVAL_MS,
+  REVERIFY_INTERVAL_MS,
+  NEEDS_REVIEW_RESOLVE_CAP,
+} = require('../scheduler.cjs');
+const { evaluateBlockingParkHealth } = require('../health.cjs');
+
+const row = (o = {}) => ({ slug: '10-x', status: 'needs_review', runId: 'r1', cwd: '/p', ...o });
+
+test('shared_tree_reverted is a rescan candidate without being on any list', () => {
+  assert.equal(RESCANNABLE_VERDICTS.has('shared_tree_reverted'), false);
+  assert.equal(isRescanCandidate(row({ verifierVerdict: 'shared_tree_reverted' })), true);
+});
+
+test('an invented verdict name the code has never seen is a rescan candidate', () => {
+  const j = row({ verifierVerdict: 'some_future_guard_verdict' });
+  assert.equal(isRescanCandidate(j), true);
+  assert.equal(shouldRunPeriodicReverify([j]), true);
+  // Not transcript-rescannable: it gets the evidence rung, never a verifyRun heal.
+  assert.equal(isTranscriptRescannable(j), false);
+  assert.deepEqual(selectEvidenceScanTargets([j]).map((x) => x.slug), ['10-x']);
+});
+
+test('a needs_review row with no runId and no verdict is still a candidate', () => {
+  assert.equal(isRescanCandidate({ slug: 's', status: 'needs_review' }), true);
+});
+
+test('only the named exclusions are refused, each verdict in the set', () => {
+  for (const v of RESCAN_EXCLUDED_VERDICTS) assert.equal(isRescanCandidate(row({ verifierVerdict: v })), false, v);
+  assert.deepEqual([...RESCAN_EXCLUDED_VERDICTS].sort(), ['budget_exceeded', 'uncommitted_changes', 'worktree_integration_failed']);
+});
+
+test('rescannable verdict keeps the transcript rung as a hint', () => {
+  assert.equal(isTranscriptRescannable(row({ verifierVerdict: 'transcript_errors' })), true);
+  assert.deepEqual(selectEvidenceScanTargets([row({ verifierVerdict: 'transcript_errors' })]), []);
+});
+
+test('1229-fo-03 shape: stranded auto-fix park is an auto-resolve door AND an evidence-scan target', () => {
+  const j = row({ verifierVerdict: 'shared_tree_reverted', autoFixAttempted: true });
+  assert.equal(isStrandedAutoFixPark(j, [j]), true);
+  assert.equal(isEligibleForNeedsReviewAutoResolve(j, [j]), true);
+  assert.equal(selectEvidenceScanTargets([j]).length, 1, 'looksDone evidence is now computed for it, so the door can fire');
+});
+
+test('a live auto-fix history that is not an auto-resolve door gets no evidence scan (PRD 1136)', () => {
+  const j = row({ verifierVerdict: 'some_future_guard_verdict', autoFixAttempted: true, autoFixOutcome: 'plan' });
+  assert.equal(selectEvidenceScanTargets([j]).length, 0);
+});
+
+test('cost bound: per-pass cap, looksDone skip, and per-row re-scan throttle', () => {
+  const now = Date.now();
+  const many = Array.from({ length: 100 }, (_, i) => row({ slug: `${i}-p`, verifierVerdict: 'v_new' }));
+  assert.equal(selectEvidenceScanTargets(many, now).length, EVIDENCE_SCAN_MAX_PER_PASS);
+  const done = many.map((j) => ({ ...j, looksDone: { commits: ['a'] } }));
+  assert.equal(selectEvidenceScanTargets(done, now).length, 0);
+  const fresh = many.map((j) => ({ ...j, evidenceScannedAt: new Date(now - EVIDENCE_SCAN_MIN_INTERVAL_MS + 1000).toISOString() }));
+  assert.equal(selectEvidenceScanTargets(fresh, now).length, 0);
+  // never-scanned rows go before stale-scanned ones
+  const mixed = [
+    row({ slug: 'old', verifierVerdict: 'v', evidenceScannedAt: new Date(now - 10 * EVIDENCE_SCAN_MIN_INTERVAL_MS).toISOString() }),
+    row({ slug: 'never', verifierVerdict: 'v' }),
+  ];
+  assert.equal(selectEvidenceScanTargets(mixed, now)[0].slug, 'never');
+});
+
+test('unhealable row terminates: N passes yield a bounded number of recovery attempts, reason intact', () => {
+  let now = Date.now();
+  const job = row({ slug: '20-stuck', verifierVerdict: 'some_future_guard_verdict' });
+  const jobs = [job];
+  let evidenceScans = 0;
+  let autoFixDispatches = 0;
+  let resumeOrMechanical = 0;
+  const PASSES = 500;
+  for (let n = 0; n < PASSES; n++) {
+    now += REVERIFY_INTERVAL_MS;
+    for (const t of selectEvidenceScanTargets(jobs, now)) { evidenceScans++; t.evidenceScannedAt = new Date(now).toISOString(); }
+    resumeOrMechanical += jobs.filter((j) => selectMechanicalRecoveryTarget(j) || selectResumeRecoveryTarget(j)).length;
+    for (const t of selectAutoFixTargets(jobs, { fixSlugExists: () => false, resolveJobRunId: () => 'r1' })) {
+      autoFixDispatches++;
+      // what reverifyNeedsReview stamps before spawning
+      t.autoFixRetries = t.autoFixAttempted === true ? (t.autoFixRetries ?? 0) + 1 : t.autoFixRetries;
+      t.autoFixAttempted = true;
+    }
+  }
+  assert.ok(autoFixDispatches <= 2, `auto-fix dispatched ${autoFixDispatches}x`);
+  assert.equal(resumeOrMechanical, 0);
+  // one scan per throttle window, not one per pass
+  assert.ok(evidenceScans <= Math.ceil(PASSES * REVERIFY_INTERVAL_MS / EVIDENCE_SCAN_MIN_INTERVAL_MS), `evidence scans ${evidenceScans}`);
+  assert.ok(evidenceScans < PASSES / 2);
+  assert.equal(job.status, 'needs_review');
+  assert.equal(job.verifierVerdict, 'some_future_guard_verdict');
+});
+
+test('auto-resolve ladder is capped: requeue attempts stop at NEEDS_REVIEW_RESOLVE_CAP then skip', () => {
+  const j = row({ slug: '30-cap', verifierVerdict: 'x', autoFixAttempted: true });
+  const outcomes = [];
+  for (let i = 0; i < NEEDS_REVIEW_RESOLVE_CAP + 3; i++) {
+    const o = applyNeedsReviewAutoResolve(j, [j]);
+    if (!o) break;
+    outcomes.push(o);
+    if (o === 'requeued') j.status = 'needs_review';
+    if (o === 'skipped') break;
+  }
+  assert.equal(outcomes.filter((o) => o === 'requeued').length, NEEDS_REVIEW_RESOLVE_CAP);
+  assert.equal(outcomes.at(-1), 'skipped');
+});
+
+describe('evaluateBlockingParkHealth', () => {
+  const now = Date.parse('2026-09-18T20:00:00Z');
+  const parkedAgo = (ms) => [{ to: 'needs_review', at: new Date(now - ms).toISOString() }];
+  const park = (ms, o = {}) => ({ slug: '5-park', status: 'needs_review', cwd: '/p', verifierVerdict: 'shared_tree_reverted', statusHistory: parkedAgo(ms), ...o });
+  const dep = (slug, dependsOn) => ({ slug, status: 'pending', cwd: '/p', dependsOn });
+
+  test('parked past one interval with pending dependents (transitive) is non-green, naming row + count', () => {
+    const r = evaluateBlockingParkHealth([park(REVERIFY_INTERVAL_MS + 1000), dep('6-a', ['5-park']), dep('7-b', ['6-a']), dep('8-c', [])], now);
+    assert.equal(r.ok, false);
+    assert.equal(r.parks[0].slug, '5-park');
+    assert.equal(r.parks[0].dependents, 2);
+    assert.match(r.message, /5-park/);
+    assert.match(r.message, /blocking 2 pending dependent/);
+  });
+
+  test('young park, or park with no dependents, is healthy', () => {
+    assert.equal(evaluateBlockingParkHealth([park(1000), dep('6-a', ['5-park'])], now).ok, true);
+    assert.equal(evaluateBlockingParkHealth([park(REVERIFY_INTERVAL_MS * 5), dep('6-a', [])], now).ok, true);
+  });
+});

package/src/main/__tests__/scheduler-dispatch-loop.test.cjs

@@ -0,0 +1,58 @@
+/**
+ * scheduler-dispatch-loop.test.cjs — dispatch cadence is the loop's, not the billing
+ * poller's: with the meter failing (backoff at 480 s) a pending dispatchable row still
+ * gets a tickQueue within 30 s.
+ *
+ * Run: timeout 120 npx vitest run src/main/__tests__/scheduler-dispatch-loop.test.cjs
+ */
+'use strict';
+
+import { test, expect, vi, beforeAll, afterAll } from 'vitest';
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+
+let tmpHome;
+let originalHome;
+let scheduler;
+
+beforeAll(() => {
+  originalHome = process.env.HOME;
+  tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'sm-dispatch-loop-'));
+  process.env.HOME = tmpHome;
+  process.env.SM_AUTOFIX_DISABLE = '1';
+  fs.mkdirSync(path.join(tmpHome, '.claude', 'session-manager'), { recursive: true });
+  fs.mkdirSync(path.join(tmpHome, '.claude', 'projects'), { recursive: true });
+  scheduler = require('../scheduler.cjs');
+});
+
+afterAll(() => {
+  process.env.HOME = originalHome;
+  delete process.env.SM_AUTOFIX_DISABLE;
+  fs.rmSync(tmpHome, { recursive: true, force: true });
+});
+
+test('with the billing poll backed off to 480 s, a pending row is still ticked within 30 s', async () => {
+  const { startDispatchLoop } = require('../lib/dispatchLoop.cjs');
+  await scheduler.writeQueue({
+    jobs: [{ slug: `9004-dispatch-loop-${process.pid}`, title: 'x', cwd: tmpHome, status: 'pending', dependsOn: [] }],
+    config: {},
+    paused: null,
+  });
+  vi.useFakeTimers({ toFake: ['setInterval', 'clearInterval'] });
+  const seen = [];
+  const h = startDispatchLoop({
+    // Same wiring init() uses (tick: () => tickQueue()), observed.
+    tick: async () => { seen.push(await scheduler.tickQueue()); },
+  });
+  try {
+    // Billing poll is at 480 s backoff: nothing else fires. The loop's own 30 s cadence does.
+    await vi.advanceTimersByTimeAsync(30_000);
+    // tickQueue does real file I/O; wait for the (real-time) pass to settle.
+    await vi.waitFor(() => expect(seen.length).toBe(1), { timeout: 10_000 });
+    expect(seen[0]).toBeTruthy(); // tickQueue ran and recorded an outcome for the pending row
+  } finally {
+    h.stop();
+    vi.useRealTimers();
+  }
+});

package/src/main/__tests__/scheduler-epic-digest.test.cjs

@@ -19,6 +19,7 @@ import { test, expect, beforeAll, afterAll, afterEach } from 'vitest';
 const fs = require('node:fs');
 const os = require('node:os');
 const path = require('node:path');
+const claudeStub = require('../../../tests/helpers/claudeStub.cjs');
 
 let tmpHome;
 let originalHome;
@@ -51,17 +52,14 @@ afterEach(() => {
 // Stub `claude` binary: captures the '-p' prompt argv to `capturePath`, then
 // emits one stream-json result line and exits 0.
 function writeClaudeStub(capturePath) {
-  const stubPath = path.join(os.tmpdir(), `sm-claude-stub-${process.pid}-${Math.floor(Math.random() * 1e9)}.cjs`);
-  const body = `
+  return claudeStub.writeClaudeStub({ body: `
     const fs = require('fs');
     const idx = process.argv.indexOf('-p');
     const prompt = idx >= 0 ? process.argv[idx + 1] : '';
     fs.writeFileSync(${JSON.stringify(capturePath)}, prompt, 'utf8');
     process.stdout.write(JSON.stringify({ type: 'result', subtype: 'success', result: 'ok' }) + '\\n');
     process.exit(0);
-  `;
-  fs.writeFileSync(stubPath, `#!${process.execPath}\n${body}\n`, { mode: 0o755 });
-  return stubPath;
+  ` });
 }
 
 function setupProject(prefix) {

package/src/main/__tests__/scheduler-force-tick-outcome.test.cjs

@@ -8,12 +8,12 @@
  * against a manual force-tick click), the message must say so instead of
  * flatly claiming nothing is pending.
  *
- * Run: timeout 120 node --test src/main/__tests__/scheduler-force-tick-outcome.test.cjs
+ * Run: timeout 300 npx vitest run src/main/__tests__/scheduler-force-tick-outcome.test.cjs
  */
 
 'use strict';
 
-const { test } = require('node:test');
+import { test } from 'vitest';
 const assert = require('node:assert/strict');
 const { forceTickOutcome } = require('../scheduler.cjs');
 

package/src/main/__tests__/scheduler-gate-shadow.test.cjs

@@ -0,0 +1,119 @@
+/**
+ * scheduler-gate-shadow.test.cjs — the shadow gate records `gateShadow` on the
+ * verdicts sidecar and the row, and NEVER changes a status.
+ *
+ * HOME is overridden BEFORE requiring scheduler.cjs (top-level consts bake in
+ * os.homedir() — see scheduler-looks-done.test.cjs).
+ *
+ * Run: timeout 180 npx vitest run src/main/__tests__/scheduler-gate-shadow.test.cjs
+ */
+'use strict';
+
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { execFileSync } = require('node:child_process');
+
+const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'gate-shadow-test-'));
+process.env.HOME = tmpHome;
+
+const { runGateShadow } = require('../scheduler.cjs');
+const { runGateSequence } = require('../lib/definitionOfDone.cjs');
+const { resolveEpicPrdWriteDir } = require('../lib/prdLocations.cjs');
+const { bustCwdCache } = require('../lib/queueStore.cjs');
+
+function git(args, cwd) { return execFileSync('git', args, { cwd, encoding: 'utf8' }); }
+
+function setup(name, gateBody) {
+  const cwd = path.join(tmpHome, name);
+  fs.mkdirSync(cwd, { recursive: true });
+  git(['init', '-q'], cwd);
+  git(['config', 'user.email', 't@example.com'], cwd);
+  git(['config', 'user.name', 'T'], cwd);
+  fs.writeFileSync(path.join(cwd, 'README.md'), 'x\n');
+  git(['add', '-A'], cwd);
+  git(['commit', '-q', '-m', 'init'], cwd);
+  const slugDir = path.join(tmpHome, '.claude', 'projects', `${name}-slug`);
+  fs.mkdirSync(slugDir, { recursive: true });
+  fs.writeFileSync(path.join(slugDir, 't.jsonl'), JSON.stringify({ cwd }) + '\n');
+  bustCwdCache();
+  const prdDir = resolveEpicPrdWriteDir(cwd, 'gate-epic');
+  fs.mkdirSync(prdDir, { recursive: true });
+  const slug = `01-${name}`;
+  fs.writeFileSync(path.join(prdDir, `${slug}.md`), `---\ntitle: T\ncwd: ${cwd}\nestimateMinutes: 5\n---\n${gateBody}\n`);
+  const runId = `run-${name}`;
+  const runDir = path.join(tmpHome, '.claude', 'session-manager', 'scheduled-plans', 'runs', runId);
+  fs.mkdirSync(runDir, { recursive: true });
+  const verdictsPath = path.join(runDir, `${slug}.verdicts.json`);
+  fs.writeFileSync(verdictsPath, JSON.stringify({ verdict: 'transcript_errors', reason: 'r' }));
+  const stateDir = path.join(cwd, 'session-manager-operations', 'scheduler', 'state');
+  fs.mkdirSync(stateDir, { recursive: true });
+  const queuePath = path.join(stateDir, 'queue.json');
+  const job = { slug, status: 'needs_review', cwd, runId, verifierVerdict: 'transcript_errors', startedAt: new Date().toISOString(), finishedAt: new Date().toISOString() };
+  fs.writeFileSync(queuePath, JSON.stringify({ jobs: [job] }, null, 2));
+  return { cwd, slug, job, verdictsPath, queuePath };
+}
+
+const ac = (cmd) => `# Acceptance criteria\n\n- [ ] Gate: \`${cmd}\`\n`;
+
+test('green gate: recorded on sidecar + row, status untouched, verdict keys preserved', async () => {
+  const t = setup('green', ac('timeout 30 node -e "process.exit(0)" && timeout 30 node -e "process.exit(0)"'));
+  const rec = await runGateShadow(t.job);
+  assert.equal(rec.status, 'green');
+  assert.equal(rec.results.length, 2);
+  const sidecar = JSON.parse(fs.readFileSync(t.verdictsPath, 'utf8'));
+  assert.equal(sidecar.verdict, 'transcript_errors', 'read-merge keeps runVerify keys');
+  assert.equal(sidecar.gateShadow.status, 'green');
+  const row = JSON.parse(fs.readFileSync(t.queuePath, 'utf8')).jobs.find((j) => j.slug === t.slug);
+  assert.equal(row.status, 'needs_review', 'shadow never transitions');
+  assert.equal(row.gateShadow.status, 'green');
+});
+
+test('red gate stops at the first failure and records red; status still untouched', async () => {
+  const t = setup('red', ac('timeout 30 node -e "process.exit(3)" && timeout 30 node -e "process.exit(0)"'));
+  const rec = await runGateShadow(t.job);
+  assert.equal(rec.status, 'red');
+  assert.equal(rec.results.length, 1);
+  assert.equal(rec.results[0].code, 3);
+  const row = JSON.parse(fs.readFileSync(t.queuePath, 'utf8')).jobs.find((j) => j.slug === t.slug);
+  assert.equal(row.status, 'needs_review');
+});
+
+test('the gate runs with CI=1 and an isolated TMPDIR', async () => {
+  const t = setup('env', ac('timeout 30 node -e "process.exit(process.env.CI===\'1\'&&process.env.TMPDIR.includes(\'sm-gate-shadow-\')?0:9)"'));
+  assert.equal((await runGateShadow(t.job)).status, 'green');
+});
+
+test('gate: none is recorded as an explicit opt-out (unavailable), nothing spawned', async () => {
+  const t = setup('optout', '# Acceptance criteria\n\n- [ ] `timeout 30 node -e "process.exit(9)"`\n');
+  t.job.slug = t.slug;
+  fs.writeFileSync(path.join(resolveEpicPrdWriteDir(t.cwd, 'gate-epic'), `${t.slug}.md`), `---\ntitle: T\ncwd: ${t.cwd}\ngate: none\n---\nbody\n`);
+  const rec = await runGateShadow(t.job);
+  assert.equal(rec.status, 'unavailable');
+  assert.equal(rec.reason, 'gate-opt-out');
+  assert.deepEqual(rec.results, []);
+});
+
+test('no parseable gate → unavailable', async () => {
+  const t = setup('nogate', '# Acceptance criteria\n\n- [ ] just prose\n');
+  const rec = await runGateShadow(t.job);
+  assert.equal(rec.status, 'unavailable');
+  assert.equal(rec.reason, 'no-parseable-gate');
+});
+
+test('at most one shadow gate in flight: a concurrent run reports busy and runs nothing', async () => {
+  const slow = [{ argv: ['node', '-e', 'setTimeout(()=>{},400)'], timeoutMs: 10_000, env: {} }];
+  const first = runGateSequence(slow, { cwd: tmpHome });
+  const second = await runGateSequence(slow, { cwd: tmpHome });
+  assert.equal(second.status, 'busy');
+  assert.deepEqual(second.results, []);
+  assert.equal((await first).status, 'green');
+});
+
+test('a hung command is killed at its timeout and the gate is red', async () => {
+  const hang = [{ argv: ['node', '-e', 'setTimeout(()=>{},60000)'], timeoutMs: 300, env: {} }];
+  const r = await runGateSequence(hang, { cwd: tmpHome });
+  assert.equal(r.status, 'red');
+  assert.equal(r.results[0].timedOut, true);
+});