ma-agents 3.6.2 → 3.8.0

package/test/enforcement-hooks.test.js

@@ -1,324 +0,0 @@
-#!/usr/bin/env node
-/**
- * Tests for Story 8.5: Per-Agent Enforcement Hooks Research
- *
- * Tests the Claude Code hook deployment/removal in installer.js
- * and the verify-manifest.js hook script.
- */
-'use strict';
-
-const assert = require('assert');
-const fs = require('fs-extra');
-const path = require('path');
-const os = require('os');
-const { execSync } = require('child_process');
-
-let passed = 0;
-let failed = 0;
-const errors = [];
-
-function test(name, fn) {
-  try {
-    fn();
-    console.log(`  \u2713 ${name}`);
-    passed++;
-  } catch (err) {
-    console.error(`  \u2717 ${name}: ${err.message}`);
-    failed++;
-    errors.push({ name, error: err.message });
-  }
-}
-
-async function asyncTest(name, fn) {
-  try {
-    await fn();
-    console.log(`  \u2713 ${name}`);
-    passed++;
-  } catch (err) {
-    console.error(`  \u2717 ${name}: ${err.message}`);
-    failed++;
-    errors.push({ name, error: err.message });
-  }
-}
-
-const { deployClaudeCodeHook, removeClaudeCodeHook } = require('../lib/installer');
-
-// Helper to create a temp directory for each test
-function createTempDir() {
-  return fs.mkdtempSync(path.join(os.tmpdir(), 'hooks-test-'));
-}
-
-/**
- * Helper: run the hook script with JSON input via a temp file piped to stdin.
- * Works cross-platform (avoids shell quoting issues with echo).
- */
-function runHookWithInput(inputObj) {
-  const hs = path.join(__dirname, '..', 'lib', 'hooks', 'claude-code', 'verify-manifest.js');
-  const tmpInput = path.join(os.tmpdir(), `hook-input-${Date.now()}.json`);
-  fs.writeFileSync(tmpInput, typeof inputObj === 'string' ? inputObj : JSON.stringify(inputObj), 'utf-8');
-  try {
-    return execSync(`node "${hs}" < "${tmpInput}"`, {
-      encoding: 'utf-8',
-      timeout: 5000
-    });
-  } finally {
-    fs.removeSync(tmpInput);
-  }
-}
-
-// ─── Task 1: deployClaudeCodeHook() tests ───────────────────────────────────
-
-console.log('\nTask 1 — deployClaudeCodeHook()');
-
-asyncTest('1.1: creates settings.json with hook when file does not exist', async () => {
-  const tmpDir = createTempDir();
-  try {
-    await deployClaudeCodeHook(tmpDir);
-
-    const settingsPath = path.join(tmpDir, '.claude', 'settings.json');
-    assert.ok(fs.existsSync(settingsPath), 'settings.json should be created');
-
-    const settings = JSON.parse(fs.readFileSync(settingsPath, 'utf-8'));
-    assert.ok(settings.hooks, 'hooks key should exist');
-    assert.ok(settings.hooks.SessionStart, 'SessionStart hooks should exist');
-    assert.strictEqual(settings.hooks.SessionStart.length, 1);
-    assert.strictEqual(settings.hooks.SessionStart[0].matcher, 'startup');
-    assert.strictEqual(settings.hooks.SessionStart[0].hooks[0].type, 'command');
-    assert.ok(settings.hooks.SessionStart[0].hooks[0].command.includes('verify-manifest.js'));
-  } finally {
-    fs.removeSync(tmpDir);
-  }
-}).then(() =>
-
-asyncTest('1.2: preserves existing settings when adding hook', async () => {
-  const tmpDir = createTempDir();
-  try {
-    const settingsDir = path.join(tmpDir, '.claude');
-    await fs.ensureDir(settingsDir);
-    const existingSettings = {
-      permissions: {
-        allow: ['Bash(node:*)']
-      },
-      someOtherSetting: true
-    };
-    await fs.writeFile(
-      path.join(settingsDir, 'settings.json'),
-      JSON.stringify(existingSettings, null, 2),
-      'utf-8'
-    );
-
-    await deployClaudeCodeHook(tmpDir);
-
-    const settings = JSON.parse(fs.readFileSync(path.join(settingsDir, 'settings.json'), 'utf-8'));
-    assert.ok(settings.permissions, 'existing permissions should be preserved');
-    assert.deepStrictEqual(settings.permissions.allow, ['Bash(node:*)']);
-    assert.strictEqual(settings.someOtherSetting, true);
-    assert.ok(settings.hooks.SessionStart, 'hook should be added');
-  } finally {
-    fs.removeSync(tmpDir);
-  }
-})).then(() =>
-
-asyncTest('1.3: preserves existing hooks when adding our hook', async () => {
-  const tmpDir = createTempDir();
-  try {
-    const settingsDir = path.join(tmpDir, '.claude');
-    await fs.ensureDir(settingsDir);
-    const existingSettings = {
-      hooks: {
-        SessionStart: [
-          {
-            matcher: 'startup',
-            hooks: [{ type: 'command', command: 'echo "existing hook"' }]
-          }
-        ],
-        PreToolUse: [
-          {
-            matcher: 'Bash',
-            hooks: [{ type: 'command', command: 'echo "pre-tool"' }]
-          }
-        ]
-      }
-    };
-    await fs.writeFile(
-      path.join(settingsDir, 'settings.json'),
-      JSON.stringify(existingSettings, null, 2),
-      'utf-8'
-    );
-
-    await deployClaudeCodeHook(tmpDir);
-
-    const settings = JSON.parse(fs.readFileSync(path.join(settingsDir, 'settings.json'), 'utf-8'));
-    assert.strictEqual(settings.hooks.SessionStart.length, 2, 'should have 2 SessionStart hook groups');
-    assert.ok(settings.hooks.PreToolUse, 'PreToolUse hooks should be preserved');
-  } finally {
-    fs.removeSync(tmpDir);
-  }
-})).then(() =>
-
-asyncTest('1.4: is idempotent — does not duplicate hook on second call', async () => {
-  const tmpDir = createTempDir();
-  try {
-    await deployClaudeCodeHook(tmpDir);
-    await deployClaudeCodeHook(tmpDir);
-
-    const settingsPath = path.join(tmpDir, '.claude', 'settings.json');
-    const settings = JSON.parse(fs.readFileSync(settingsPath, 'utf-8'));
-    assert.strictEqual(settings.hooks.SessionStart.length, 1, 'should not duplicate hook');
-  } finally {
-    fs.removeSync(tmpDir);
-  }
-})).then(() => {
-
-// ─── Task 2: removeClaudeCodeHook() tests ──────────────────────────────────
-
-console.log('\nTask 2 — removeClaudeCodeHook()');
-
-return asyncTest('2.1: removes our hook while preserving other hooks', async () => {
-  const tmpDir = createTempDir();
-  try {
-    const settingsDir = path.join(tmpDir, '.claude');
-    await fs.ensureDir(settingsDir);
-
-    // Deploy our hook first
-    await deployClaudeCodeHook(tmpDir);
-
-    // Add another hook manually
-    const settingsPath = path.join(settingsDir, 'settings.json');
-    const settings = JSON.parse(fs.readFileSync(settingsPath, 'utf-8'));
-    settings.hooks.SessionStart.unshift({
-      matcher: 'startup',
-      hooks: [{ type: 'command', command: 'echo "other hook"' }]
-    });
-    settings.hooks.PreToolUse = [{ matcher: 'Bash', hooks: [{ type: 'command', command: 'echo "bash"' }] }];
-    await fs.writeFile(settingsPath, JSON.stringify(settings, null, 2), 'utf-8');
-
-    await removeClaudeCodeHook(tmpDir);
-
-    const updated = JSON.parse(fs.readFileSync(settingsPath, 'utf-8'));
-    assert.strictEqual(updated.hooks.SessionStart.length, 1, 'should keep other SessionStart hook');
-    assert.ok(updated.hooks.PreToolUse, 'PreToolUse hooks should be preserved');
-    assert.ok(!updated.hooks.SessionStart[0].hooks[0].command.includes('verify-manifest'), 'our hook should be removed');
-  } finally {
-    fs.removeSync(tmpDir);
-  }
-});
-
-}).then(() =>
-
-asyncTest('2.2: cleans up empty hooks object when last hook removed', async () => {
-  const tmpDir = createTempDir();
-  try {
-    await deployClaudeCodeHook(tmpDir);
-    await removeClaudeCodeHook(tmpDir);
-
-    const settingsPath = path.join(tmpDir, '.claude', 'settings.json');
-    const settings = JSON.parse(fs.readFileSync(settingsPath, 'utf-8'));
-    assert.ok(!settings.hooks, 'hooks key should be removed when empty');
-  } finally {
-    fs.removeSync(tmpDir);
-  }
-})).then(() =>
-
-asyncTest('2.3: no-op when settings.json does not exist', async () => {
-  const tmpDir = createTempDir();
-  try {
-    // Should not throw
-    await removeClaudeCodeHook(tmpDir);
-    assert.ok(!fs.existsSync(path.join(tmpDir, '.claude', 'settings.json')));
-  } finally {
-    fs.removeSync(tmpDir);
-  }
-})).then(() => {
-
-// ─── Task 3: verify-manifest.js hook script tests ──────────────────────────
-
-console.log('\nTask 3 — verify-manifest.js hook script');
-
-return asyncTest('3.1: outputs reminder when MANIFEST.yaml exists', async () => {
-  const tmpDir = createTempDir();
-  try {
-    const skillsDir = path.join(tmpDir, '.claude', 'skills');
-    await fs.ensureDir(skillsDir);
-    await fs.writeFile(path.join(skillsDir, 'MANIFEST.yaml'), '# test manifest\n', 'utf-8');
-
-    const result = runHookWithInput({ cwd: tmpDir, session_id: 'test', hook_event_name: 'SessionStart' });
-
-    assert.ok(result.includes('SKILL ENFORCEMENT ACTIVE'), 'should output enforcement reminder');
-    assert.ok(result.includes('MANIFEST.yaml'), 'should reference MANIFEST.yaml');
-  } finally {
-    fs.removeSync(tmpDir);
-  }
-});
-
-}).then(() =>
-
-asyncTest('3.2: silent when no MANIFEST.yaml exists', async () => {
-  const tmpDir = createTempDir();
-  try {
-    const result = runHookWithInput({ cwd: tmpDir, session_id: 'test', hook_event_name: 'SessionStart' });
-    assert.strictEqual(result.trim(), '', 'should produce no output when no manifest');
-  } finally {
-    fs.removeSync(tmpDir);
-  }
-})).then(() =>
-
-asyncTest('3.3: exits 0 on malformed JSON input', async () => {
-  const tmpDir = createTempDir();
-  try {
-    // Pipe invalid JSON — should exit 0 (not crash)
-    const result = runHookWithInput('not json at all');
-    // If we get here, exit code was 0
-    assert.ok(true, 'should exit 0 on malformed input');
-  } finally {
-    fs.removeSync(tmpDir);
-  }
-})).then(() => {
-
-// ─── Task 4: Technical note document exists ─────────────────────────────────
-
-console.log('\nTask 4 — Technical note document');
-
-test('4.1: enforcement-hooks-research.md exists', () => {
-  const docPath = path.join(__dirname, '..', 'docs', 'technical-notes', 'enforcement-hooks-research.md');
-  assert.ok(fs.existsSync(docPath), 'technical note should exist');
-});
-
-test('4.2: document contains agent summary table', () => {
-  const docPath = path.join(__dirname, '..', 'docs', 'technical-notes', 'enforcement-hooks-research.md');
-  const content = fs.readFileSync(docPath, 'utf-8');
-  assert.ok(content.includes('| Agent |'), 'should contain agent summary table');
-  assert.ok(content.includes('Claude Code'), 'should reference Claude Code');
-  assert.ok(content.includes('Cursor'), 'should reference Cursor');
-  assert.ok(content.includes('GitHub Copilot'), 'should reference GitHub Copilot');
-  assert.ok(content.includes('Gemini'), 'should reference Gemini');
-  assert.ok(content.includes('Cline'), 'should reference Cline');
-  assert.ok(content.includes('Kilocode'), 'should reference Kilocode');
-  assert.ok(content.includes('Antigravity'), 'should reference Antigravity');
-  assert.ok(content.includes('BMAD'), 'should reference BMAD agents');
-});
-
-test('4.3: document contains recommendations section', () => {
-  const docPath = path.join(__dirname, '..', 'docs', 'technical-notes', 'enforcement-hooks-research.md');
-  const content = fs.readFileSync(docPath, 'utf-8');
-  assert.ok(content.includes('## Recommendations'), 'should contain recommendations section');
-});
-
-test('4.4: document contains prototype implementation section', () => {
-  const docPath = path.join(__dirname, '..', 'docs', 'technical-notes', 'enforcement-hooks-research.md');
-  const content = fs.readFileSync(docPath, 'utf-8');
-  assert.ok(content.includes('Prototype Implementation'), 'should contain prototype section');
-  assert.ok(content.includes('verify-manifest'), 'should reference the hook script');
-});
-
-// ─── Summary ────────────────────────────────────────────────────────────────
-
-console.log(`\n${'─'.repeat(60)}`);
-console.log(`Results: ${passed} passed, ${failed} failed`);
-if (errors.length > 0) {
-  console.log('\nFailures:');
-  errors.forEach(e => console.log(`  - ${e.name}: ${e.error}`));
-  process.exit(1);
-}
-
-});

package/test/experimental-warning.test.js

@@ -1,314 +0,0 @@
-#!/usr/bin/env node
-/**
- * Tests for Bug A: ExperimentalWarning about CommonJS loading ES Module
- * during installer startup.
- *
- * Contract:
- *   lib/warning-filter.js exports installExperimentalWarningFilter().
- *   When installed, the process-level 'warning' listener swallows
- *   ExperimentalWarning messages that describe CJS require() of an
- *   ES Module, but lets every other warning through unchanged.
- *
- * Additionally, bin/cli.js must install the filter at startup, and
- * lib/bmad.js must pass NODE_OPTIONS="--no-warnings=ExperimentalWarning"
- * (or equivalent) to the bmad-method child spawn env.
- */
-'use strict';
-
-const assert = require('assert');
-const { spawnSync } = require('child_process');
-const path = require('path');
-const fs = require('fs');
-
-const REPO_ROOT = path.join(__dirname, '..');
-const FILTER_PATH = path.join(REPO_ROOT, 'lib', 'warning-filter.js');
-const CLI_PATH = path.join(REPO_ROOT, 'bin', 'cli.js');
-const BMAD_PATH = path.join(REPO_ROOT, 'lib', 'bmad.js');
-
-let passed = 0;
-let failed = 0;
-
-function test(name, fn) {
-  try {
-    fn();
-    console.log(`  ✓ ${name}`);
-    passed++;
-  } catch (err) {
-    console.error(`  ✗ ${name}: ${err.message}`);
-    if (err.stack) console.error(err.stack.split('\n').slice(1, 4).join('\n'));
-    failed++;
-  }
-}
-
-console.log('\n── Bug A: ExperimentalWarning filter tests ──────────────────────\n');
-
-// ─── Test 1: filter module exists and exports the expected API ────────────────
-test('lib/warning-filter.js exists', () => {
-  assert.ok(fs.existsSync(FILTER_PATH), 'expected lib/warning-filter.js to exist');
-});
-
-test('filter module exports installExperimentalWarningFilter()', () => {
-  const mod = require(FILTER_PATH);
-  assert.strictEqual(typeof mod.installExperimentalWarningFilter, 'function');
-});
-
-test('filter module exports isRequireEsmWarning() predicate', () => {
-  const mod = require(FILTER_PATH);
-  assert.strictEqual(typeof mod.isRequireEsmWarning, 'function');
-});
-
-// ─── Test 2: isRequireEsmWarning() correctly classifies warnings ──────────────
-test('isRequireEsmWarning matches CJS-loading-ESM ExperimentalWarning', () => {
-  const { isRequireEsmWarning } = require(FILTER_PATH);
-  const w = new Error(
-    'CommonJS module /a/b.js is loading ES Module /c/d.js using require(). ' +
-    'Support for loading ES Module in require() is an experimental feature ' +
-    'and might change at any time.'
-  );
-  w.name = 'ExperimentalWarning';
-  assert.strictEqual(isRequireEsmWarning(w), true);
-});
-
-test('isRequireEsmWarning matches require(ESM) variant phrasing', () => {
-  const { isRequireEsmWarning } = require(FILTER_PATH);
-  const w = new Error('Support for loading ES Module in require() is an experimental feature.');
-  w.name = 'ExperimentalWarning';
-  assert.strictEqual(isRequireEsmWarning(w), true);
-});
-
-test('isRequireEsmWarning ignores unrelated ExperimentalWarning', () => {
-  const { isRequireEsmWarning } = require(FILTER_PATH);
-  const w = new Error('Fetch API is an experimental feature.');
-  w.name = 'ExperimentalWarning';
-  assert.strictEqual(isRequireEsmWarning(w), false);
-});
-
-test('isRequireEsmWarning ignores DeprecationWarning with require() text', () => {
-  const { isRequireEsmWarning } = require(FILTER_PATH);
-  const w = new Error('Some deprecated require() usage in ES Module.');
-  w.name = 'DeprecationWarning';
-  assert.strictEqual(isRequireEsmWarning(w), false);
-});
-
-// ─── Test 3: end-to-end — re-exec flow silences ExperimentalWarning ──────────
-test('installed filter (with re-exec) silences CJS-require-ESM ExperimentalWarning', () => {
-  // Drive the full re-exec path: parent re-execs with NODE_OPTIONS set,
-  // child emits the warning, expects ZERO bytes of ExperimentalWarning.
-  const child = spawnSync(process.execPath, [
-    '-e',
-    `const { installExperimentalWarningFilter } = require(${JSON.stringify(FILTER_PATH)});
-     installExperimentalWarningFilter();
-     // After re-exec we land here in the child:
-     process.emitWarning('CommonJS module /a.js is loading ES Module /b.mjs using require().', 'ExperimentalWarning');`,
-  ], { encoding: 'utf8' });
-  assert.strictEqual(child.status, 0, `child exited non-zero: ${child.stderr}`);
-  assert.ok(
-    !/ExperimentalWarning/.test(child.stderr),
-    `expected no ExperimentalWarning in stderr, got:\n${child.stderr}`
-  );
-});
-
-// ─── Test 3b: NODE_OPTIONS-only test bypasses re-exec ─────────────────────────
-test('listener-only mode swallows the matched warning at user-land', () => {
-  // reexec:false means we only attach the listener; target warning still
-  // hits Node's internal printer in some Node versions, but our listener
-  // returns silently so the listener path itself never re-emits it.
-  const child = spawnSync(process.execPath, [
-    '-e',
-    `const { installExperimentalWarningFilter, _attachListener } = require(${JSON.stringify(FILTER_PATH)});
-     installExperimentalWarningFilter({ reexec: false });
-     // Emit a custom-named warning identical in shape so we don't depend
-     // on Node's internal experimental-warning path:
-     const w = new Error('CommonJS module /a.js is loading ES Module /b.mjs using require().');
-     w.name = 'ExperimentalWarning';
-     // Drive the listener directly to assert it returns without writing.
-     const listener = process.listeners('warning').find(fn => fn.__maAgentsFilter);
-     if (!listener) { console.error('no filter listener'); process.exit(2); }
-     // capture stderr writes
-     let captured = '';
-     const orig = process.stderr.write.bind(process.stderr);
-     process.stderr.write = (c) => { captured += String(c); return true; };
-     listener(w);
-     process.stderr.write = orig;
-     if (captured.length !== 0) { console.error('LEAKED:', captured); process.exit(3); }
-     process.exit(0);`,
-  ], { encoding: 'utf8', env: { ...process.env, [require(FILTER_PATH)._SENTINEL_ENV]: '1' } });
-  assert.strictEqual(child.status, 0, `child exited ${child.status}: ${child.stderr}`);
-});
-
-// ─── Test 4: filter preserves unrelated warnings ──────────────────────────────
-test('installed filter preserves DeprecationWarning', () => {
-  // Drive the listener directly to verify it re-emits non-matching warnings.
-  const child = spawnSync(process.execPath, [
-    '-e',
-    `const { installExperimentalWarningFilter } = require(${JSON.stringify(FILTER_PATH)});
-     installExperimentalWarningFilter({ reexec: false });
-     const listener = process.listeners('warning').find(fn => fn.__maAgentsFilter);
-     const w = new Error('legacy api — do not use');
-     w.name = 'DeprecationWarning';
-     let captured = '';
-     const orig = process.stderr.write.bind(process.stderr);
-     process.stderr.write = (c) => { captured += String(c); return true; };
-     listener(w);
-     process.stderr.write = orig;
-     process.stdout.write(captured);`,
-  ], { encoding: 'utf8' });
-  assert.strictEqual(child.status, 0);
-  assert.ok(
-    /DeprecationWarning/.test(child.stdout),
-    `expected DeprecationWarning to be preserved, stdout=\n${child.stdout}\nstderr=\n${child.stderr}`
-  );
-});
-
-test('installed filter preserves unrelated ExperimentalWarning', () => {
-  const child = spawnSync(process.execPath, [
-    '-e',
-    `const { installExperimentalWarningFilter } = require(${JSON.stringify(FILTER_PATH)});
-     installExperimentalWarningFilter({ reexec: false });
-     const listener = process.listeners('warning').find(fn => fn.__maAgentsFilter);
-     const w = new Error('Fetch API is an experimental feature.');
-     w.name = 'ExperimentalWarning';
-     let captured = '';
-     const orig = process.stderr.write.bind(process.stderr);
-     process.stderr.write = (c) => { captured += String(c); return true; };
-     listener(w);
-     process.stderr.write = orig;
-     process.stdout.write(captured);`,
-  ], { encoding: 'utf8' });
-  assert.strictEqual(child.status, 0);
-  assert.ok(
-    /Fetch API/.test(child.stdout),
-    `expected unrelated ExperimentalWarning preserved, stdout=\n${child.stdout}`
-  );
-});
-
-// ─── Test 5: idempotent — installing twice doesn't double-suppress or leak ────
-test('installExperimentalWarningFilter is idempotent', () => {
-  const child = spawnSync(process.execPath, [
-    '-e',
-    `const { installExperimentalWarningFilter } = require(${JSON.stringify(FILTER_PATH)});
-     installExperimentalWarningFilter({ reexec: false });
-     installExperimentalWarningFilter({ reexec: false });
-     const listeners = process.listeners('warning').filter(fn => fn.__maAgentsFilter === true);
-     if (listeners.length !== 1) {
-       console.error('EXPECTED 1 filter listener, got', listeners.length);
-       process.exit(2);
-     }
-     process.exit(0);`,
-  ], { encoding: 'utf8' });
-  assert.strictEqual(child.status, 0, `child exited ${child.status}: ${child.stderr}`);
-});
-
-// ─── Test 6: bin/cli.js wires the filter at startup ───────────────────────────
-test('bin/cli.js requires warning-filter and installs it', () => {
-  const src = fs.readFileSync(CLI_PATH, 'utf8');
-  assert.ok(
-    /require\(['"]\.\.\/lib\/warning-filter['"]\)/.test(src) ||
-    /require\(['"]\.\.\/lib\/warning-filter\.js['"]\)/.test(src),
-    'expected bin/cli.js to require ../lib/warning-filter'
-  );
-  assert.ok(
-    /installExperimentalWarningFilter\s*\(/.test(src),
-    'expected bin/cli.js to call installExperimentalWarningFilter(...)'
-  );
-});
-
-// ─── Test 7: lib/bmad.js propagates suppression to child spawn via NODE_OPTIONS
-test('lib/bmad.js builds child env that suppresses ExperimentalWarning', () => {
-  const src = fs.readFileSync(BMAD_PATH, 'utf8');
-  // Either calls the helper directly or inlines the flag.
-  const usesHelper = /withExperimentalWarningSuppressed/.test(src) &&
-                     /require\(['"]\.\/warning-filter['"]\)/.test(src);
-  const inlinesFlag = /--no-warnings=ExperimentalWarning/.test(src);
-  assert.ok(
-    usesHelper || inlinesFlag,
-    'expected lib/bmad.js to either import withExperimentalWarningSuppressed ' +
-    'from ./warning-filter, or inline --no-warnings=ExperimentalWarning'
-  );
-  assert.ok(
-    /NODE_OPTIONS/.test(src),
-    'expected lib/bmad.js to set NODE_OPTIONS for the child spawn'
-  );
-});
-
-// ─── Test 8: integration — running bin/cli.js --help is silent on stderr ──────
-test('bin/cli.js --help produces no ExperimentalWarning on stderr', () => {
-  const child = spawnSync(process.execPath, [CLI_PATH, '--help'], {
-    encoding: 'utf8',
-    env: { ...process.env, [require(FILTER_PATH)._SENTINEL_ENV]: '' },
-  });
-  assert.strictEqual(child.status, 0, `cli --help exited non-zero: ${child.stderr}`);
-  assert.ok(
-    !/ExperimentalWarning/.test(child.stderr),
-    `expected no ExperimentalWarning from cli --help, got:\n${child.stderr}`
-  );
-});
-
-// ─── Test 9: withExperimentalWarningSuppressed helper is well-behaved ─────────
-test('withExperimentalWarningSuppressed adds flag when none present', () => {
-  const { withExperimentalWarningSuppressed } = require(FILTER_PATH);
-  assert.strictEqual(withExperimentalWarningSuppressed(undefined), '--no-warnings=ExperimentalWarning');
-  assert.strictEqual(withExperimentalWarningSuppressed(''), '--no-warnings=ExperimentalWarning');
-});
-
-test('withExperimentalWarningSuppressed preserves existing --no-warnings', () => {
-  const { withExperimentalWarningSuppressed } = require(FILTER_PATH);
-  assert.strictEqual(withExperimentalWarningSuppressed('--no-warnings'), '--no-warnings');
-  assert.strictEqual(
-    withExperimentalWarningSuppressed('--no-warnings=DeprecationWarning'),
-    '--no-warnings=DeprecationWarning'
-  );
-});
-
-test('withExperimentalWarningSuppressed appends flag to other NODE_OPTIONS', () => {
-  const { withExperimentalWarningSuppressed } = require(FILTER_PATH);
-  assert.strictEqual(
-    withExperimentalWarningSuppressed('--max-old-space-size=4096'),
-    '--max-old-space-size=4096 --no-warnings=ExperimentalWarning'
-  );
-});
-
-// ─── Test 10: regression — require('bin/cli.js') must NOT re-exec ───────────
-test('require("bin/cli.js") from another process does not re-exec', () => {
-  // If the CLI silently re-execs on require, the "before pid" line
-  // would print twice in the stderr/stdout stream.
-  const child = spawnSync(process.execPath, [
-    '-e',
-    `const before = process.pid;
-     console.log('MARK_BEFORE', before);
-     require(${JSON.stringify(CLI_PATH)});
-     console.log('MARK_AFTER', process.pid, 'same:', process.pid === before);`,
-  ], { encoding: 'utf8' });
-  assert.strictEqual(child.status, 0, `child exited non-zero: ${child.stderr}`);
-  const beforeCount = (child.stdout.match(/MARK_BEFORE/g) || []).length;
-  assert.strictEqual(beforeCount, 1, `expected exactly one MARK_BEFORE, got ${beforeCount}\n${child.stdout}`);
-  assert.ok(/same: true/.test(child.stdout), 'expected PID to be unchanged after require');
-});
-
-// ─── Test 11: regression — fast commands must NOT re-exec ────────────────────
-test('bin/cli.js --version runs in a single process (no re-exec)', () => {
-  // Spawn cli.js --version and assert PID stability via NODE_OPTIONS check.
-  // We approximate by running it with the sentinel unset and checking it
-  // still completes without looping. A process-tree check is overkill;
-  // we just verify exit code and output shape.
-  const child = spawnSync(process.execPath, [CLI_PATH, '--version'], {
-    encoding: 'utf8',
-    env: { ...process.env, [require(FILTER_PATH)._SENTINEL_ENV]: '' },
-  });
-  assert.strictEqual(child.status, 0);
-  assert.ok(/ma-agents v/.test(child.stdout), `expected version banner, got: ${child.stdout}`);
-  assert.ok(!/ExperimentalWarning/.test(child.stderr));
-});
-
-// ─── Test 12: --inspect is not forwarded to the re-exec child ────────────────
-test('installExperimentalWarningFilter drops --inspect* from forwarded execArgv', () => {
-  const src = fs.readFileSync(FILTER_PATH, 'utf8');
-  assert.ok(
-    /--inspect/.test(src) && /filter/.test(src),
-    'expected warning-filter.js to filter --inspect out of forwarded execArgv'
-  );
-});
-
-// ─── Summary ──────────────────────────────────────────────────────────────────
-console.log(`\n  ${passed} passed, ${failed} failed\n`);
-if (failed > 0) process.exit(1);