claude-code-session-manager 0.98.0 → 0.101.0

package/src/main/__tests__/prdCreate.test.cjs

@@ -1,979 +0,0 @@
-/**
- * prdCreate.test.cjs — unit tests for the create-PRD body builder (PRD 549,
- * gh-issue-6) and, since PRD 689, its registerAdminRoute create-prd HTTP
- * route (moved verbatim out of the former standalone admin HTTP server
- * module's handleRequest).
- *
- * Run: timeout 120 npx vitest run src/main/__tests__/prdCreate.test.cjs
- */
-
-'use strict';
-
-import { test, expect, vi } from 'vitest';
-const fs = require('node:fs');
-const fsp = require('node:fs/promises');
-const os = require('node:os');
-const path = require('node:path');
-const http = require('node:http');
-const { execFileSync } = require('node:child_process');
-const {
-  deriveSlugFromTitle,
-  buildPrdBody,
-  readStandards,
-  STANDARDS_PATH,
-  PRD_CREATE_SLUG_RE,
-  registerAdminRoute,
-  createPrd,
-  resolveSourcePromptIdFromClaudeSession,
-} = require('../lib/prdCreate.cjs');
-const { createAdminHttp } = require('../lib/localAdminHttp.cjs');
-const config = require('../config.cjs');
-const prdParser = require('../scheduler/prdParser.cjs');
-
-test('deriveSlugFromTitle lowercases, kebab-cases, and strips non-alnum runs', () => {
-  expect(deriveSlugFromTitle('Add Foo Bar!! Baz')).toBe('add-foo-bar-baz');
-  expect(deriveSlugFromTitle('  leading/trailing  ')).toBe('leading-trailing');
-});
-
-test('deriveSlugFromTitle output always satisfies PRD_CREATE_SLUG_RE', () => {
-  const slug = deriveSlugFromTitle('Some Title 123');
-  expect(PRD_CREATE_SLUG_RE.test(slug)).toBeTruthy();
-});
-
-test('readStandards reads the real standards.md and returns non-empty text', async () => {
-  const text = await readStandards();
-  expect(text.includes('Execution discipline')).toBeTruthy();
-});
-
-test('buildPrdBody emits required frontmatter keys and body sections in order', async () => {
-  const body = buildPrdBody({
-    title: 'Do the thing',
-    cwd: '~/Projects/session-manager',
-    estimateMinutes: 15,
-    goal: 'Build the thing.',
-    acceptanceCriteria: ['thing exists', 'tests pass'],
-    implementationNotes: 'See file.cjs:10.',
-    outOfScope: ['not this'],
-  });
-
-  expect(body.startsWith('---\n')).toBeTruthy();
-  expect(body).toMatch(/title: Do the thing/);
-  expect(body).toMatch(/cwd: ~\/Projects\/session-manager/);
-  expect(body).toMatch(/estimateMinutes: 15/);
-
-  const goalIdx = body.indexOf('# Goal');
-  const acIdx = body.indexOf('# Acceptance criteria');
-  const implIdx = body.indexOf('# Implementation notes');
-  const oosIdx = body.indexOf('# Out of scope');
-  const standardsIdx = body.indexOf('## Engineering standards');
-  // sections must appear in Goal -> AC -> Implementation notes -> Out of scope -> Engineering standards order
-  expect(goalIdx > 0 && goalIdx < acIdx && acIdx < implIdx && implIdx < oosIdx && oosIdx < standardsIdx).toBeTruthy();
-
-  expect(body).toMatch(/- \[ \] thing exists/);
-  expect(body).toMatch(/- \[ \] tests pass/);
-  expect(body).toMatch(/- not this/);
-  // must point at STANDARDS_PATH rather than inline the standards.md content
-  expect(body.includes(STANDARDS_PATH)).toBeTruthy();
-  expect(body).toMatch(/Your system prompt carries the ordered run contract/);
-  // the pointer block mentions "Execution discipline" by name, but must not
-  // inline the full standards.md prose (e.g. its Performance-section rules)
-  expect(body.includes('Lay out hot data contiguously')).toBeFalsy();
-});
-
-test('buildPrdBody emits agentType: dev-lead by default when omitted (PRD 1114)', () => {
-  const body = buildPrdBody({
-    title: 't', cwd: '~/x', estimateMinutes: 5, goal: 'g',
-    acceptanceCriteria: ['a'], implementationNotes: 'n',
-  });
-  expect(body).toMatch(/^agentType: dev-lead$/m);
-});
-
-test('buildPrdBody emits the supplied agentType instead of the default', () => {
-  const body = buildPrdBody({
-    title: 't', cwd: '~/x', estimateMinutes: 5, goal: 'g',
-    acceptanceCriteria: ['a'], implementationNotes: 'n',
-    agentType: 'architect',
-  });
-  expect(body).toMatch(/^agentType: architect$/m);
-});
-
-test('buildPrdBody omits parallelGroup frontmatter key when not supplied', () => {
-  const body = buildPrdBody({
-    title: 't', cwd: '~/x', estimateMinutes: 5, goal: 'g',
-    acceptanceCriteria: ['a'], implementationNotes: 'n',
-  });
-  expect(!/parallelGroup:/.test(body)).toBeTruthy();
-});
-
-test('buildPrdBody writes sourcePromptId into frontmatter when supplied (PRD 749 traceability)', () => {
-  const body = buildPrdBody({
-    title: 't', cwd: '~/x', estimateMinutes: 5, goal: 'g',
-    acceptanceCriteria: ['a'], implementationNotes: 'n',
-    sourcePromptId: 'ticket-abc-123',
-  });
-  expect(body).toMatch(/sourcePromptId: ticket-abc-123/);
-});
-
-test('buildPrdBody omits sourcePromptId frontmatter key when not supplied', () => {
-  const body = buildPrdBody({
-    title: 't', cwd: '~/x', estimateMinutes: 5, goal: 'g',
-    acceptanceCriteria: ['a'], implementationNotes: 'n',
-  });
-  expect(!/sourcePromptId:/.test(body)).toBeTruthy();
-});
-
-test('readStandards result is byte-identical to the on-disk file (single source of truth)', async () => {
-  const onDisk = fs.readFileSync(
-    path.join(__dirname, '..', '..', '..', 'plugins', 'session-manager-dev', 'skills', 'develop', 'standards.md'),
-    'utf8',
-  );
-  expect(await readStandards()).toBe(onDisk);
-});
-
-// ──────────────────────────────────────────── create-prd admin route
-
-function request(port, { method = 'GET', path: reqPath, token, body }) {
-  return new Promise((resolve, reject) => {
-    const headers = {};
-    if (token !== undefined) headers.Authorization = `Bearer ${token}`;
-    let payload;
-    if (body !== undefined) {
-      payload = JSON.stringify(body);
-      headers['Content-Type'] = 'application/json';
-      headers['Content-Length'] = Buffer.byteLength(payload);
-    }
-    const req = http.request({ hostname: '127.0.0.1', port, method, path: reqPath, headers }, (res) => {
-      const chunks = [];
-      res.on('data', (c) => chunks.push(c));
-      res.on('end', () => {
-        const text = Buffer.concat(chunks).toString('utf8');
-        let json = null;
-        try { json = JSON.parse(text); } catch { /* leave null for non-JSON bodies */ }
-        resolve({ status: res.statusCode, json, text });
-      });
-    });
-    req.on('error', reject);
-    if (payload) req.write(payload);
-    req.end();
-  });
-}
-
-// config.cjs's validateWrite only allows writes under a registered non-home
-// allowedRoot's `.claude/` subtree (mirrors the real ROOT layout, which is
-// $HOME/.claude/session-manager/...) — so the temp prdsDir must live under
-// `<root>/.claude/...`, not directly under the temp root itself.
-async function mkTmpPrdsDir() {
-  const root = await fsp.mkdtemp(path.join(os.tmpdir(), 'sm-admin-create-prd-'));
-  config.addAllowedRoot(root);
-  const prdsDir = path.join(root, '.claude', 'prds');
-  await fsp.mkdir(prdsDir, { recursive: true });
-  return prdsDir;
-}
-
-// Mirrors scheduler.cjs's real `remote.allocateParallelGroup` / `remote.writePrd`
-// (same underlying prdParser.allocateParallelGroup + config.writeTextAtomic
-// calls) but pointed at a throwaway temp dir instead of the user's real
-// scheduled-plans/prds — so these tests never touch $HOME/.claude.
-function makeFakeRemoteWithPrdsDir(prdsDir) {
-  return {
-    async allocateParallelGroup() {
-      return prdParser.allocateParallelGroup(prdsDir);
-    },
-    async readPrd(slug) {
-      try {
-        const text = await fsp.readFile(path.join(prdsDir, `${slug}.md`), 'utf8');
-        return { ok: true, text };
-      } catch (e) {
-        return { ok: false, error: e?.message };
-      }
-    },
-    async writePrd(slug, body) {
-      try {
-        const filePath = path.join(prdsDir, `${slug}.md`);
-        await config.writeTextAtomic(filePath, body, { writer: 'scheduler' });
-        return { ok: true };
-      } catch (e) {
-        return { ok: false, error: e?.message };
-      }
-    },
-    // Minimal stand-in for scheduler.cjs's real remote.listPrds: every
-    // `<slug>.md` under the fake project's prdsDir, as a `{ slug }` row —
-    // enough for prdCreate.cjs's dependsOn-existence validation, which only
-    // ever reads `.slug` off each entry.
-    async listPrds() {
-      const entries = await fsp.readdir(prdsDir);
-      const prds = entries
-        .filter((f) => f.endsWith('.md'))
-        .map((f) => ({ slug: f.slice(0, -3) }));
-      return { prds, total: prds.length, limit: prds.length, offset: 0, hasMore: false };
-    },
-  };
-}
-
-/** Pre-seed the fake project's prdsDir with an existing (empty-body) PRD file at `slug`. */
-async function seedExistingPrd(prdsDir, slug) {
-  await fsp.writeFile(path.join(prdsDir, `${slug}.md`), '---\ntitle: seed\n---\n# Goal\n');
-}
-
-function validCreateBody(overrides = {}) {
-  return {
-    title: 'Add widget frobnication',
-    cwd: os.homedir(),
-    estimateMinutes: 15,
-    goal: 'Add frobnication to the widget subsystem.',
-    acceptanceCriteria: ['widget frobnicates on click', 'timeout 300 npm run typecheck passes'],
-    implementationNotes: 'See src/widget.cjs:10.',
-    outOfScope: ['not touching gadgets'],
-    ...overrides,
-  };
-}
-
-async function startWithRemote(remote) {
-  // Force the e2e-suffixed token path so this suite never races the real
-  // ~/.claude/session-manager/admin-api.json against other test files (or a
-  // live production instance) that also call createAdminHttp() concurrently.
-  const prevE2e = process.env.SM_E2E;
-  process.env.SM_E2E = '1';
-  const admin = createAdminHttp();
-  registerAdminRoute(admin, remote);
-  const { port, token } = await admin.start();
-  if (prevE2e === undefined) delete process.env.SM_E2E; else process.env.SM_E2E = prevE2e;
-  return { admin, port, token };
-}
-
-test('POST /admin/scheduler/create-prd without token returns 401', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const { admin, port } = await startWithRemote(remote);
-  try {
-    const res = await request(port, {
-      method: 'POST', path: '/admin/scheduler/create-prd', body: validCreateBody(),
-    });
-    expect(res.status).toBe(401);
-  } finally {
-    await admin.stop();
-  }
-});
-
-test('POST /admin/scheduler/create-prd with a valid payload writes a file with frontmatter + standards appended, returns {nn, filename, enqueued:false}', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const { admin, port, token } = await startWithRemote(remote);
-  try {
-    const res = await request(port, {
-      method: 'POST', path: '/admin/scheduler/create-prd', token, body: validCreateBody(),
-    });
-    expect(res.status).toBe(200);
-    // Never a 'status' field, and never the literal 'queued' — this route
-    // only writes the PRD file; the queue row is derived by the next
-    // reconcile() pass, not created here. See prdCreate.cjs's createPrd.
-    expect(res.json.status).toBeUndefined();
-    expect(res.json.enqueued).toBe(false);
-    expect(typeof res.json.note).toBe('string');
-    expect(typeof res.json.nn).toBe('number');
-    expect(res.json.filename).toMatch(/^\d+-add-widget-frobnication\.md$/);
-
-    const written = await fsp.readFile(path.join(prdsDir, res.json.filename), 'utf8');
-    expect(written).toMatch(/^---\n/);
-    expect(written).toMatch(/title: Add widget frobnication/);
-    expect(written).toMatch(/cwd: .+/);
-    expect(written).toMatch(/estimateMinutes: 15/);
-    expect(written).toMatch(/# Goal/);
-    expect(written).toMatch(/# Acceptance criteria/);
-    expect(written).toMatch(/- \[ \] widget frobnicates on click/);
-    expect(written).toMatch(/# Implementation notes/);
-    expect(written).toMatch(/# Out of scope/);
-    expect(written).toMatch(/## Engineering standards/);
-    // must point at STANDARDS_PATH rather than inline standards.md
-    expect(written.includes(STANDARDS_PATH)).toBeTruthy();
-    expect(written.includes('Lay out hot data contiguously')).toBeFalsy();
-  } finally {
-    await admin.stop();
-  }
-});
-
-test('POST /admin/scheduler/create-prd with malformed frontmatter (missing acceptanceCriteria) is rejected and writes no file', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const { admin, port, token } = await startWithRemote(remote);
-  try {
-    const body = validCreateBody();
-    delete body.acceptanceCriteria;
-    const res = await request(port, {
-      method: 'POST', path: '/admin/scheduler/create-prd', token, body,
-    });
-    expect(res.status).toBe(400);
-    expect(res.json.ok).toBe(false);
-    const entries = await fsp.readdir(prdsDir);
-    expect(entries.filter((f) => f.endsWith('.md')).length).toBe(0);
-  } finally {
-    await admin.stop();
-  }
-});
-
-test('POST /admin/scheduler/create-prd with cwd outside allowed roots is rejected and writes no file', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const { admin, port, token } = await startWithRemote(remote);
-  try {
-    const res = await request(port, {
-      method: 'POST', path: '/admin/scheduler/create-prd', token,
-      body: validCreateBody({ cwd: '/etc/passwd-adjacent-outside-home' }),
-    });
-    expect(res.status).toBe(400);
-    expect(res.json.ok).toBe(false);
-    const entries = await fsp.readdir(prdsDir);
-    expect(entries.filter((f) => f.endsWith('.md')).length).toBe(0);
-  } finally {
-    await admin.stop();
-  }
-});
-
-test('POST /admin/scheduler/create-prd rejects a title containing a newline (frontmatter-injection guard) and writes no file', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const { admin, port, token } = await startWithRemote(remote);
-  try {
-    const res = await request(port, {
-      method: 'POST', path: '/admin/scheduler/create-prd', token,
-      body: validCreateBody({ title: 'Legit title\n---\nEvil: injected' }),
-    });
-    expect(res.status).toBe(400);
-    expect(res.json.ok).toBe(false);
-    const entries = await fsp.readdir(prdsDir);
-    expect(entries.filter((f) => f.endsWith('.md')).length).toBe(0);
-  } finally {
-    await admin.stop();
-  }
-});
-
-test('PRD 832: an explicit parallelGroup colliding with an existing file is ignored — a fresh unique NN is allocated and nothing is clobbered', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const { admin, port, token } = await startWithRemote(remote);
-  try {
-    await fsp.writeFile(path.join(prdsDir, '777-my-explicit-slug.md'), 'ORIGINAL CONTENT\n');
-    const res = await request(port, {
-      method: 'POST', path: '/admin/scheduler/create-prd', token,
-      body: validCreateBody({ slug: 'my-explicit-slug', parallelGroup: 777 }),
-    });
-    expect(res.status).toBe(200);
-    // Allocator scans past the existing 777 — unique per project, never reused.
-    expect(res.json.nn).toBe(778);
-    expect(res.json.filename).toBe('778-my-explicit-slug.md');
-    const stillThere = await fsp.readFile(path.join(prdsDir, '777-my-explicit-slug.md'), 'utf8');
-    expect(stillThere).toBe('ORIGINAL CONTENT\n');
-  } finally {
-    await admin.stop();
-  }
-});
-
-test('PRD 832: explicit parallelGroup input is deprecated and ignored — NN always comes from the allocator', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const { admin, port, token } = await startWithRemote(remote);
-  try {
-    const res = await request(port, {
-      method: 'POST', path: '/admin/scheduler/create-prd', token,
-      body: validCreateBody({ slug: 'my-explicit-slug', parallelGroup: 777 }),
-    });
-    expect(res.status).toBe(200);
-    expect(res.json.nn).toBe(1);
-    expect(res.json.filename).toBe('1-my-explicit-slug.md');
-    expect(fs.existsSync(path.join(prdsDir, '1-my-explicit-slug.md'))).toBeTruthy();
-  } finally {
-    await admin.stop();
-  }
-});
-
-// ──────────────────────────────────────────── createPrd() (chat:create-prd IPC handler, PRD 749 follow-up)
-//
-// createPrd() is the function ipcMain.handle('chat:create-prd', ...) in
-// index.cjs calls directly (in-process, no HTTP) — same function
-// registerAdminRoute's HTTP handler calls above. These tests exercise it
-// directly, mirroring the handler's own call shape: createPrd(input, remote).
-
-test('createPrd rejects a cwd outside allowedRoots before any write, returning {ok:false, status:400}', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const writePrdSpy = vi.fn(remote.writePrd);
-  remote.writePrd = writePrdSpy;
-
-  const result = await createPrd(validCreateBody({ cwd: '/etc/passwd-adjacent-outside-home' }), remote);
-
-  expect(result.ok).toBe(false);
-  expect(result.status).toBe(400);
-  expect(writePrdSpy).not.toHaveBeenCalled();
-  const entries = await fsp.readdir(prdsDir);
-  expect(entries.filter((f) => f.endsWith('.md')).length).toBe(0);
-});
-
-test('createPrd with a valid payload allocates a group, writes through remote.writePrd, and returns {ok:true, nn, filename}', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-  const result = await createPrd(validCreateBody({ sourcePromptId: 'ticket-abc', sourceTabId: 'tab-1' }), remote);
-
-  expect(result.ok).toBe(true);
-  expect(typeof result.nn).toBe('number');
-  expect(result.filename).toMatch(/^\d+-add-widget-frobnication\.md$/);
-  // PRD 1403: sizing warnings ride along in the success response, advisory only.
-  expect(Array.isArray(result.warnings)).toBe(true);
-
-  const written = await fsp.readFile(path.join(prdsDir, result.filename), 'utf8');
-  expect(written).toMatch(/^---\n/);
-  expect(written).toMatch(/title: Add widget frobnication/);
-  expect(written).toMatch(/sourcePromptId: ticket-abc/);
-  expect(written).toMatch(/sourceTabId: tab-1/);
-  expect(written).toMatch(/# Goal/);
-});
-
-test('createPrd returns {ok:false, status:409} without clobbering when the destination already exists', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  // The existence guard survives PRD 832: whatever NN the allocator picks,
-  // a pre-existing file at that exact destination must 409, never clobber.
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const realRead = remote.readPrd.bind(remote);
-  remote.readPrd = async (slug) => (slug.endsWith('my-explicit-slug') ? { ok: true, text: 'ORIGINAL' } : realRead(slug));
-  const writes = [];
-  const realWrite = remote.writePrd.bind(remote);
-  remote.writePrd = async (...a) => { writes.push(a[0]); return realWrite(...a); };
-
-  const result = await createPrd(validCreateBody({ slug: 'my-explicit-slug' }), remote);
-
-  expect(result.ok).toBe(false);
-  expect(result.status).toBe(409);
-  expect(writes).toEqual([]);
-});
-
-// ──────────────────────────────────────────── PRD 825: Epic PRD dir write grant + `~` cwd normalization
-
-test('validateWrite allows writes under <root>/session-manager-operations/scheduler/epics/<id>/prds/', async () => {
-  const root = await fsp.mkdtemp(path.join(os.tmpdir(), 'sm-scheduler-epics-'));
-  config.addAllowedRoot(root);
-  const prdsDir = path.join(root, 'session-manager-operations', 'scheduler', 'epics', 'epic-abc123', 'prds');
-  await fsp.mkdir(prdsDir, { recursive: true });
-  const filePath = path.join(prdsDir, '1-do-thing.md');
-
-  // Writes into scheduler/ must declare the owning surface (single-writer law).
-  await config.writeTextAtomic(filePath, 'PRD body\n', { writer: 'scheduler' });
-
-  expect(fs.existsSync(filePath)).toBeTruthy();
-  expect(await fsp.readFile(filePath, 'utf8')).toBe('PRD body\n');
-});
-
-test('createPrd normalizes a `~`-prefixed cwd via expandHome before calling remote', async () => {
-  const receivedCwds = [];
-  const remote = {
-    async allocateParallelGroup(cwd) { receivedCwds.push(cwd); return 42; },
-    async readPrd(slug, cwd) { receivedCwds.push(cwd); return { ok: false }; },
-    async writePrd(slug, body, cwd) { receivedCwds.push(cwd); return { ok: true, bytesWritten: body.length }; },
-  };
-
-  const result = await createPrd(validCreateBody({ cwd: '~' }), remote);
-
-  expect(result.ok).toBe(true);
-  expect(receivedCwds.length).toBeGreaterThan(0);
-  for (const cwd of receivedCwds) {
-    expect(cwd.startsWith('~')).toBe(false);
-    expect(cwd).toBe(os.homedir());
-  }
-});
-
-// ──────────────────────────────────────────── PRD 862: register cwd as an
-// allowed write root at createPrd() time, not only at pty.spawn() time
-//
-// Before this fix, config.cjs's allowedRoots (the write-boundary allowlist)
-// only ever grew via pty.cjs's addAllowedRoot call inside pty.spawn(). A
-// chat-only Epic (headless `claude -p --resume`, no Terminal PTY ever
-// spawned for its project cwd) reached createPrd() -> remote.writePrd() ->
-// config.writeTextAtomic() -> config.validateWrite() and failed with "Write
-// outside allowed write boundaries", purely because no PTY had registered
-// that cwd yet in this process's lifetime. This test reproduces that exact
-// scenario: a brand-new project root that has NEVER had config.addAllowedRoot
-// called for it (mirroring pty.spawn() never having run), writing through the
-// real config.writeTextAtomic into the real session-manager-operations/
-// scheduler/ subtree (not the mocked-remote temp dirs the other tests here
-// use, which pre-register their root via addAllowedRoot in mkTmpPrdsDir).
-test('createPrd registers cwd as an allowed write root itself, so a chat-only Epic (no Terminal PTY ever spawned for this cwd) can still write its PRD', async () => {
-  // Must live under $HOME: validatePath's read boundary is home-dir-wide
-  // regardless of allowedRoots registration (matching every real project
-  // cwd, which checkInsideHome forces inside $HOME) — the bug this test
-  // reproduces is specifically about the *write* boundary (validateWrite),
-  // not the read one.
-  const root = await fsp.mkdtemp(path.join(os.homedir(), '.sm-chat-only-epic-'));
-  // Deliberately do NOT call config.addAllowedRoot(root) here — pty.spawn()
-  // is the only other caller of addAllowedRoot, and it never runs for a
-  // chat-only Epic. createPrd() itself must perform this registration.
-  const prdsEpicDir = path.join(root, 'session-manager-operations', 'scheduler', 'epics', 'chat-only-epic', 'prds');
-
-  try {
-    const remote = {
-      async allocateParallelGroup() { return 1; },
-      async readPrd() { return { ok: false }; },
-      async writePrd(slug, body) {
-        await fsp.mkdir(prdsEpicDir, { recursive: true });
-        const filePath = path.join(prdsEpicDir, `${slug}.md`);
-        // Real config.cjs write path — this is what threw
-        // "Write outside allowed write boundaries" before the fix.
-        await config.writeTextAtomic(filePath, body, { writer: 'scheduler' });
-        return { ok: true };
-      },
-    };
-
-    const result = await createPrd(validCreateBody({ cwd: root }), remote);
-
-    expect(result.ok).toBe(true);
-    const written = await fsp.readFile(path.join(prdsEpicDir, result.filename), 'utf8');
-    expect(written).toMatch(/title: Add widget frobnication/);
-  } finally {
-    await fsp.rm(root, { recursive: true, force: true });
-  }
-});
-
-test('POST /admin/scheduler/create-prd with sourcePromptId writes it into the created PRD frontmatter', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const { admin, port, token } = await startWithRemote(remote);
-  try {
-    const res = await request(port, {
-      method: 'POST', path: '/admin/scheduler/create-prd', token,
-      body: validCreateBody({ slug: 'from-a-ticket', sourcePromptId: 'ticket-xyz-789' }),
-    });
-    expect(res.status).toBe(200);
-    const written = fs.readFileSync(path.join(prdsDir, `${res.json.nn}-from-a-ticket.md`), 'utf8');
-    expect(written).toMatch(/sourcePromptId: ticket-xyz-789/);
-  } finally {
-    await admin.stop();
-  }
-});
-
-test('POST /admin/scheduler/create-prd with tag writes it into the created PRD frontmatter (PRD 1041)', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const { admin, port, token } = await startWithRemote(remote);
-  try {
-    const res = await request(port, {
-      method: 'POST', path: '/admin/scheduler/create-prd', token,
-      body: validCreateBody({ slug: 'with-a-tag', tag: 'bug' }),
-    });
-    expect(res.status).toBe(200);
-    const written = fs.readFileSync(path.join(prdsDir, `${res.json.nn}-with-a-tag.md`), 'utf8');
-    expect(written).toMatch(/^tag: bug$/m);
-  } finally {
-    await admin.stop();
-  }
-});
-
-// ──────────────────────────────────────────── PRD 1114: agentType (WHO
-// executes a PRD) — throw on write for an unresolvable persona, default to
-// dev-lead when omitted.
-
-test('createPrd rejects an unknown agentType at write time, naming available personas, and writes no file', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const writePrdSpy = vi.fn(remote.writePrd);
-  remote.writePrd = writePrdSpy;
-
-  const result = await createPrd(
-    validCreateBody({ agentType: 'zzz-definitely-not-a-real-persona-12345' }),
-    remote,
-  );
-
-  expect(result.ok).toBe(false);
-  expect(result.status).toBe(400);
-  expect(result.error).toMatch(/does not resolve to a readable persona file/);
-  expect(result.error).toMatch(/Available personas/);
-  expect(writePrdSpy).not.toHaveBeenCalled();
-  const entries = await fsp.readdir(prdsDir);
-  expect(entries.filter((f) => f.endsWith('.md')).length).toBe(0);
-});
-
-test('createPrd accepts a caller-supplied agentType that resolves to a project-overlay persona file', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const cwd = path.dirname(path.dirname(prdsDir)); // mkTmpPrdsDir's root (prdsDir = root/.claude/prds)
-  const agentsDir = path.join(cwd, '.claude', 'agents');
-  await fsp.mkdir(agentsDir, { recursive: true });
-  await fsp.writeFile(path.join(agentsDir, 'my-persona.md'), '---\nname: my-persona\n---\nbody\n', 'utf8');
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-  const result = await createPrd(validCreateBody({ cwd, slug: 'with-agent-type', agentType: 'my-persona' }), remote);
-
-  expect(result.ok).toBe(true);
-  const written = await fsp.readFile(path.join(prdsDir, result.filename), 'utf8');
-  expect(written).toMatch(/^agentType: my-persona$/m);
-});
-
-test('createPrd defaults agentType to dev-lead when omitted, without any persona-existence check', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-  const result = await createPrd(validCreateBody({ slug: 'no-agent-type-supplied' }), remote);
-
-  expect(result.ok).toBe(true);
-  const written = await fsp.readFile(path.join(prdsDir, result.filename), 'utf8');
-  expect(written).toMatch(/^agentType: dev-lead$/m);
-});
-
-// ──────────────────────────────────────────── originClaudeSessionId fallback
-// (2026-08-01 fix: a PRD queued via the scheduler_create_prd MCP tool from
-// inside an Epic's own chat session, without an explicit sourcePromptId,
-// must still join that Epic rather than mint an unrelated sibling one.)
-
-async function writeActiveIndexFixture(cwd, sessions) {
-  const dir = path.join(cwd, 'session-manager-operations', 'prompt-sessions');
-  await fsp.mkdir(dir, { recursive: true });
-  await fsp.writeFile(path.join(dir, 'active-index.json'), JSON.stringify({ sessions, events: {} }, null, 2));
-}
-
-test('resolveSourcePromptIdFromClaudeSession finds the Epic whose claudeSessionId matches', async () => {
-  const root = await fsp.mkdtemp(path.join(os.tmpdir(), 'sm-resolve-epic-'));
-  try {
-    await writeActiveIndexFixture(root, {
-      'psess-abc123': { id: 'psess-abc123', claudeSessionId: 'claude-sess-1', status: 'active' },
-    });
-    expect(resolveSourcePromptIdFromClaudeSession(root, 'claude-sess-1')).toBe('psess-abc123');
-    expect(resolveSourcePromptIdFromClaudeSession(root, 'claude-sess-unknown')).toBeNull();
-    expect(resolveSourcePromptIdFromClaudeSession(root, null)).toBeNull();
-  } finally {
-    await fsp.rm(root, { recursive: true, force: true });
-  }
-});
-
-// Real-homedir-rooted like the chat-only-epic test above (see its comment at
-// line ~449): validatePath's read boundary is home-dir-wide, and this
-// exercises createPrd's real config.addAllowedRoot/writeTextAtomic path. Safe
-// because the random suffix is never a registered project the live scheduler
-// scans for PRDs, and it's removed in `finally`.
-test('createPrd resolves sourcePromptId from originClaudeSessionId when the caller omitted sourcePromptId', async () => {
-  const root = await fsp.mkdtemp(path.join(os.homedir(), '.sm-origin-session-epic-'));
-  config.addAllowedRoot(root);
-  try {
-    await writeActiveIndexFixture(root, {
-      'psess-always-select-tab': { id: 'psess-always-select-tab', claudeSessionId: 'claude-sess-epic-1', status: 'active' },
-    });
-    const prdsDir = path.join(root, 'session-manager-operations', 'scheduler', 'epics', 'psess-always-select-tab', 'prds');
-    const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-    const result = await createPrd(
-      validCreateBody({ cwd: root, slug: 'joins-the-epic', originClaudeSessionId: 'claude-sess-epic-1' }),
-      remote,
-    );
-
-    expect(result.ok).toBe(true);
-    const written = await fsp.readFile(path.join(prdsDir, result.filename), 'utf8');
-    expect(written).toMatch(/sourcePromptId: psess-always-select-tab/);
-  } finally {
-    await fsp.rm(root, { recursive: true, force: true });
-  }
-});
-
-// Same real-homedir rationale as the two tests above.
-// ──────────────────────────────────────────── worktree-cwd Epic-lookup
-// hazard (PRD: projectRootResolve.cjs) — reproduces the live starry-night-
-// ships shape: main's active-index.json has the Epic, a linked worktree's
-// own (git-tracked, frozen-at-branch-time) copy does not. Passing the
-// worktree's pwd as `cwd` must still resolve to main and join the Epic there.
-
-function git(args, cwd) {
-  return execFileSync('git', args, { cwd, encoding: 'utf8' });
-}
-
-function initRepo(dir) {
-  fs.mkdirSync(dir, { recursive: true });
-  git(['init', '-q'], dir);
-  git(['config', 'user.email', 'test@example.com'], dir);
-  git(['config', 'user.name', 'Test'], dir);
-  fs.writeFileSync(path.join(dir, 'README.md'), 'hello\n', 'utf8');
-  git(['add', '-A'], dir);
-  git(['commit', '-q', '-m', 'initial'], dir);
-}
-
-test('createPrd resolves a worktree cwd to the main tree and joins the Epic whose row only exists in main\'s active-index (live starry-night-ships shape)', async () => {
-  const tmpRoot = await fsp.mkdtemp(path.join(os.tmpdir(), 'sm-worktree-cwd-hazard-'));
-  const mainRepo = path.join(tmpRoot, 'main');
-  const worktreeDir = path.join(tmpRoot, 'worktree', 'epic-1');
-  config.addAllowedRoot(mainRepo);
-  try {
-    initRepo(mainRepo);
-    fs.mkdirSync(path.dirname(worktreeDir), { recursive: true });
-    git(['worktree', 'add', '-b', 'sm-epic/epic-1', worktreeDir, 'HEAD'], mainRepo);
-
-    // Main's index has the Epic; the worktree's own copy (as checked out at
-    // branch time) does not — the exact live-repro shape.
-    await writeActiveIndexFixture(mainRepo, {
-      'epic-1': { id: 'epic-1', claudeSessionId: 'claude-sess-epic-1', status: 'active' },
-    });
-
-    const prdsDir = path.join(mainRepo, 'session-manager-operations', 'scheduler', 'epics', 'epic-1', 'prds');
-    const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-    const receivedCwds = [];
-    const realAllocate = remote.allocateParallelGroup.bind(remote);
-    remote.allocateParallelGroup = async (cwd) => { receivedCwds.push(cwd); return realAllocate(cwd); };
-
-    const result = await createPrd(
-      validCreateBody({ cwd: worktreeDir, slug: 'joins-from-worktree', sourcePromptId: 'epic-1' }),
-      remote,
-    );
-
-    expect(result.ok).toBe(true);
-    // Resolved and passed to the remote as the MAIN tree, never the worktree.
-    expect(receivedCwds.every((c) => c === mainRepo)).toBe(true);
-    const written = await fsp.readFile(path.join(prdsDir, result.filename), 'utf8');
-    expect(written).toMatch(/sourcePromptId: epic-1/);
-    expect(written).toMatch(new RegExp(`cwd: ${mainRepo.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`));
-  } finally {
-    await fsp.rm(tmpRoot, { recursive: true, force: true });
-  }
-});
-
-test('createPrd omits cwd entirely and resolves the project purely from sourcePromptId (cwd optional inside an Epic session)', async () => {
-  const root = await fsp.mkdtemp(path.join(os.homedir(), '.sm-cwd-optional-epic-'));
-  config.addAllowedRoot(root);
-  // resolveProjectContext's cross-project scan (used when cwd is omitted
-  // entirely) is built on activeSessions.allProjectCwds — a scan of REAL
-  // ~/.claude/projects transcripts. In production this is always populated
-  // (the calling session itself opened `root` as a project), so seed a
-  // matching transcript here rather than the fixture root being invisible to
-  // the scan. Cleaned up in `finally`.
-  const transcriptDir = path.join(os.homedir(), '.claude', 'projects', `sm-cwd-optional-test-${Date.now()}`);
-  try {
-    await writeActiveIndexFixture(root, {
-      'epic-cwd-optional': { id: 'epic-cwd-optional', claudeSessionId: 'claude-sess-cwd-optional', status: 'active' },
-    });
-    await fsp.mkdir(transcriptDir, { recursive: true });
-    await fsp.writeFile(path.join(transcriptDir, 'a.jsonl'), `${JSON.stringify({ cwd: root })}\n`, 'utf8');
-
-    const prdsDir = path.join(root, 'session-manager-operations', 'scheduler', 'epics', 'epic-cwd-optional', 'prds');
-    const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-    const body = validCreateBody({ slug: 'no-cwd-supplied', sourcePromptId: 'epic-cwd-optional' });
-    delete body.cwd;
-
-    const result = await createPrd(body, remote);
-
-    expect(result.ok).toBe(true);
-    const written = await fsp.readFile(path.join(prdsDir, result.filename), 'utf8');
-    expect(written).toMatch(/sourcePromptId: epic-cwd-optional/);
-  } finally {
-    await fsp.rm(transcriptDir, { recursive: true, force: true });
-    await fsp.rm(root, { recursive: true, force: true });
-  }
-});
-
-test('createPrd with neither cwd nor a resolvable Epic fails with a clear cwd-required error', async () => {
-  const remote = {
-    async allocateParallelGroup() { throw new Error('must not be called'); },
-    async readPrd() { throw new Error('must not be called'); },
-    async writePrd() { throw new Error('must not be called'); },
-  };
-  const body = validCreateBody();
-  delete body.cwd;
-
-  const result = await createPrd(body, remote);
-
-  expect(result.ok).toBe(false);
-  expect(result.status).toBe(400);
-  expect(result.error).toMatch(/cwd is required/);
-});
-
-// ──────────────────────────────────────────── PRD 1113: fix-chain depth guard
-// at the authoring boundary. lib/prdCreate.cjs's createPrd() is the shared
-// write path behind both scheduler_create_prd (MCP) and chat:create-prd
-// (IPC) — enforcing here covers both callers with one check.
-
-test('createPrd refuses a depth-2 fix-chain slug (fix-of-a-fix) with a distinct, human-escalation error and writes no file', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const writePrdSpy = vi.fn(remote.writePrd);
-  remote.writePrd = writePrdSpy;
-
-  const result = await createPrd(validCreateBody({ slug: 'fix-fix-widget-frobnication' }), remote);
-
-  expect(result.ok).toBe(false);
-  expect(result.status).toBe(409);
-  // Distinct from the provenance/validation error text elsewhere in this
-  // file ('cwd rejected', 'invalid PRD payload', 'already exists') and
-  // explicitly states escalation, not another attempt, is correct.
-  expect(result.error).toMatch(/fix-chain depth cap/i);
-  expect(result.error).toMatch(/not the correct response/i);
-  expect(result.error).toMatch(/human/i);
-  expect(writePrdSpy).not.toHaveBeenCalled();
-  const entries = await fsp.readdir(prdsDir);
-  expect(entries.filter((f) => f.endsWith('.md')).length).toBe(0);
-});
-
-test('createPrd refuses a depth-3 fix-chain slug the same way as depth-2', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-  const result = await createPrd(validCreateBody({ slug: 'fix-fix-fix-widget-frobnication' }), remote);
-
-  expect(result.ok).toBe(false);
-  expect(result.status).toBe(409);
-  const entries = await fsp.readdir(prdsDir);
-  expect(entries.filter((f) => f.endsWith('.md')).length).toBe(0);
-});
-
-test('createPrd refuses a depth-1 fix slug too (PRD 1131) — that shape is reserved for spawnInvestigation-authored fix plans, not this API', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const writePrdSpy = vi.fn(remote.writePrd);
-  remote.writePrd = writePrdSpy;
-
-  const result = await createPrd(validCreateBody({ slug: 'fix-widget-frobnication' }), remote);
-
-  expect(result.ok).toBe(false);
-  expect(result.status).toBe(400);
-  expect(result.error).toMatch(/reserved NN-fix-\.\.\. fix-plan naming convention/i);
-  expect(writePrdSpy).not.toHaveBeenCalled();
-  const entries = await fsp.readdir(prdsDir);
-  expect(entries.filter((f) => f.endsWith('.md')).length).toBe(0);
-});
-
-test('createPrd is unaffected by the fix-chain guard for an ordinary slug with no fix chain at all', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-  const result = await createPrd(validCreateBody(), remote);
-
-  expect(result.ok).toBe(true);
-  const written = await fsp.readFile(path.join(prdsDir, result.filename), 'utf8');
-  expect(written).toMatch(/title: Add widget frobnication/);
-});
-
-test('createPrd refuses a slug starting with "fix-" even when a later segment merely reads "fix" (isFixPlanSlug matches on the leading segment alone, unlike fixChainDepthOf)', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-  const result = await createPrd(validCreateBody({ slug: 'fix-loop-extraction-and-round-trip' }), remote);
-
-  expect(result.ok).toBe(false);
-  expect(result.status).toBe(400);
-  expect(result.error).toMatch(/reserved NN-fix-\.\.\. fix-plan naming convention/i);
-});
-
-test('createPrd leaves sourcePromptId unset when originClaudeSessionId matches no known Epic (plain SessionTab chat)', async () => {
-  const root = await fsp.mkdtemp(path.join(os.homedir(), '.sm-origin-session-no-match-'));
-  config.addAllowedRoot(root);
-  try {
-    await writeActiveIndexFixture(root, {});
-    const prdsDir = path.join(root, 'session-manager-operations', 'scheduler', 'prds');
-    const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-    const result = await createPrd(
-      validCreateBody({ cwd: root, slug: 'no-epic-match', originClaudeSessionId: 'claude-sess-not-an-epic' }),
-      remote,
-    );
-
-    expect(result.ok).toBe(true);
-    const written = await fsp.readFile(path.join(prdsDir, result.filename), 'utf8');
-    expect(!/sourcePromptId:/.test(written)).toBeTruthy();
-  } finally {
-    await fsp.rm(root, { recursive: true, force: true });
-  }
-});
-
-// ──────────────────────────────────────────── PRD 1121: reject double-prefixed
-// slugs, validate dependsOn against existing PRDs at write time
-
-test('createPrd refuses a caller-supplied slug already starting with a numeric prefix', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-  const result = await createPrd(validCreateBody({ slug: '254-perf-x' }), remote);
-
-  expect(result.ok).toBe(false);
-  expect(result.status).toBe(400);
-  expect(result.error).toMatch(/254-/);
-  expect(result.error).toMatch(/bare name/);
-  const entries = await fsp.readdir(prdsDir);
-  expect(entries.filter((f) => f.endsWith('.md')).length).toBe(0);
-});
-
-test('createPrd still accepts a bare (non-prefixed) caller-supplied slug', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-  const result = await createPrd(validCreateBody({ slug: 'perf-x' }), remote);
-
-  expect(result.ok).toBe(true);
-  expect(result.filename).toMatch(/^\d+-perf-x\.md$/);
-});
-
-test('createPrd accepts dependsOn naming an existing bare slug', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  await seedExistingPrd(prdsDir, '3-widget-base');
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-  const result = await createPrd(validCreateBody({ slug: 'widget-follow-up', dependsOn: ['widget-base'] }), remote);
-
-  expect(result.ok).toBe(true);
-  const written = await fsp.readFile(path.join(prdsDir, result.filename), 'utf8');
-  expect(written).toMatch(/^dependsOn: \[widget-base\]$/m);
-});
-
-test('createPrd accepts dependsOn naming an existing full NN-prefixed slug', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  await seedExistingPrd(prdsDir, '3-widget-base');
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-  const result = await createPrd(validCreateBody({ slug: 'widget-follow-up-2', dependsOn: ['3-widget-base'] }), remote);
-
-  expect(result.ok).toBe(true);
-});
-
-test('createPrd refuses dependsOn naming nothing, listing near-matches in the message, and writes no file', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  await seedExistingPrd(prdsDir, '3-widget-base');
-  await seedExistingPrd(prdsDir, '4-widget-basics');
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-
-  const result = await createPrd(validCreateBody({ slug: 'widget-follow-up-3', dependsOn: ['wigdet-bsae'] }), remote);
-
-  expect(result.ok).toBe(false);
-  expect(result.status).toBe(400);
-  expect(result.error).toMatch(/wigdet-bsae/);
-  expect(result.error).toMatch(/widget-base/);
-  const entries = await fsp.readdir(prdsDir);
-  expect(entries.filter((f) => f.endsWith('.md') && f.includes('widget-follow-up-3')).length).toBe(0);
-});
-
-test('createPrd treats an empty dependsOn array as a no-op (no listPrds call, no rejection)', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const listPrdsSpy = vi.fn(remote.listPrds);
-  remote.listPrds = listPrdsSpy;
-
-  const result = await createPrd(validCreateBody({ slug: 'no-deps-here', dependsOn: [] }), remote);
-
-  expect(result.ok).toBe(true);
-  expect(listPrdsSpy).not.toHaveBeenCalled();
-});
-
-test('createPrd treats an absent dependsOn as a no-op (no listPrds call, no rejection)', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  const listPrdsSpy = vi.fn(remote.listPrds);
-  remote.listPrds = listPrdsSpy;
-
-  const result = await createPrd(validCreateBody({ slug: 'no-deps-field' }), remote);
-
-  expect(result.ok).toBe(true);
-  expect(listPrdsSpy).not.toHaveBeenCalled();
-});
-
-test('createPrd warns and skips dependsOn validation (never fails the write) when listPrds throws', async () => {
-  const prdsDir = await mkTmpPrdsDir();
-  const remote = makeFakeRemoteWithPrdsDir(prdsDir);
-  remote.listPrds = async () => { throw new Error('simulated I/O failure'); };
-  const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {});
-
-  try {
-    const result = await createPrd(validCreateBody({ slug: 'deps-during-outage', dependsOn: ['anything-at-all'] }), remote);
-    expect(result.ok).toBe(true);
-    expect(warnSpy).toHaveBeenCalled();
-  } finally {
-    warnSpy.mockRestore();
-  }
-});