Restore CI coverage for hook argv expansion and preflight blocking

The hook escaping regression came from asserting a literal `node` prefix even
though installed hooks may be patched to an absolute node binary. The test now
captures argv after shell expansion instead of accidentally invoking the real
runner, and the pre-tool enforcer now sanitizes malformed threshold env input so
agent-heavy exhausted-context preflight keeps blocking deterministically. The
remaining CI flakes came from host config leakage in the pre-tool harness and a
tmux-availability assumption in the duplicate-worker dispatch test, so those
assertions are now hermetic and environment-agnostic.

Constraint: Installed hooks may start with an absolute quoted node path after plugin setup
Constraint: Pre-tool tests must not inherit CLAUDE config from the host, CI runner, or repo-root cwd
Constraint: Duplicate-worker dispatch coverage must not require tmux to be available
Rejected: Keep assuming a literal `node` prefix in hook tests | no longer matches shipped hook shape
Rejected: Leave malformed threshold env unchecked | comparison against NaN silently disables blocking
Rejected: Assert immediate `notified` dispatch state in the duplicate-pane test | depends on tmux availability outside the test contract
Confidence: high
Scope-risk: narrow
Directive: Keep hook argv assertions focused on post-shell tokenization, not a specific node binary spelling
Directive: Keep shell-spawned hook tests pinned to isolated HOME/CLAUDE_CONFIG_DIR values and an isolated child cwd so host routing config cannot leak in
Tested: npm test -- --run src/__tests__/pre-tool-enforcer.test.ts src/team/__tests__/api-interop.dispatch.test.ts src/__tests__/hooks-command-escaping.test.ts
Tested: npm test -- --run
Tested: npm run build
Tested: npm run lint
Not-tested: PR CI rerun on GitHub after push

Author: Yeachan-Heo

scripts/pre-tool-enforcer.mjs

@@ -91,9 +91,16 @@ const MODE_STATE_FILES = [
   'omc-teams-state.json',
 ];
 const AGENT_HEAVY_TOOLS = new Set(['Task', 'TaskCreate', 'TaskUpdate']);
-const PREFLIGHT_CONTEXT_THRESHOLD = parseInt(process.env.OMC_AGENT_PREFLIGHT_CONTEXT_THRESHOLD || '72', 10);
 const QUIET_LEVEL = getQuietLevel();
 
+function getPreflightContextThreshold() {
+  const parsed = Number.parseInt(process.env.OMC_AGENT_PREFLIGHT_CONTEXT_THRESHOLD || '72', 10);
+  if (Number.isNaN(parsed)) return 72;
+  return Math.max(1, Math.min(100, parsed));
+}
+
+const PREFLIGHT_CONTEXT_THRESHOLD = getPreflightContextThreshold();
+
 function getQuietLevel() {
   const parsed = Number.parseInt(process.env.OMC_QUIET || '0', 10);
   if (Number.isNaN(parsed)) return 0;

src/__tests__/hooks-command-escaping.test.ts

@@ -9,6 +9,23 @@ interface HooksConfig {
 
 const hooksJsonPath = join(__dirname, '..', '..', 'hooks', 'hooks.json');
 
+function expandHookCommandArgv(command: string, pluginRoot: string): string[] {
+  const shellScript =
+    `eval "set -- $HOOK_COMMAND"; ` +
+    `node -e 'console.log(JSON.stringify(process.argv.slice(1)))' -- "$@"`;
+
+  return JSON.parse(
+    execFileSync('bash', ['-lc', shellScript], {
+      encoding: 'utf-8',
+      env: {
+        ...process.env,
+        HOOK_COMMAND: command,
+        CLAUDE_PLUGIN_ROOT: pluginRoot,
+      },
+    }).trim()
+  ) as string[];
+}
+
 function getHookCommands(): string[] {
   const raw = JSON.parse(readFileSync(hooksJsonPath, 'utf-8')) as HooksConfig;
   return Object.values(raw.hooks ?? {})
@@ -31,24 +48,13 @@ describe('hooks.json command escaping', () => {
     const pluginRoot = '/c/Users/First Last/.claude/plugins/cache/omc/oh-my-claudecode/4.7.10';
 
     for (const command of getHookCommands()) {
-      const argv = JSON.parse(
-        execFileSync(
-          'bash',
-          ['-lc', command.replace(/^node\b/, `node -e "console.log(JSON.stringify(process.argv.slice(1)))"`)],
-          {
-            encoding: 'utf-8',
-            env: {
-              ...process.env,
-              CLAUDE_PLUGIN_ROOT: pluginRoot,
-            },
-          }
-        ).trim()
-      ) as string[];
-
-      expect(argv[0]).toBe(`${pluginRoot}/scripts/run.cjs`);
-      expect(argv[1]).toContain(`${pluginRoot}/scripts/`);
-      expect(argv[0]).toContain('First Last');
+      const argv = expandHookCommandArgv(command, pluginRoot);
+
+      expect(argv[0]).toMatch(/(^|[/\\])node(?:\.exe)?$/);
+      expect(argv[1]).toBe(`${pluginRoot}/scripts/run.cjs`);
+      expect(argv[2]).toContain(`${pluginRoot}/scripts/`);
       expect(argv[1]).toContain('First Last');
+      expect(argv[2]).toContain('First Last');
       expect(argv).not.toContain('/c/Users/First');
       expect(argv).not.toContain('Last/.claude/plugins/cache/omc/oh-my-claudecode/4.7.10/scripts/run.cjs');
     }

src/__tests__/pre-tool-enforcer.test.ts

@@ -14,15 +14,21 @@ function runPreToolEnforcerWithEnv(
   input: Record<string, unknown>,
   env: Record<string, string> = {},
 ): Record<string, unknown> {
+  const cwd = typeof input.cwd === 'string' ? input.cwd : process.cwd();
+  const homeDir = join(cwd, '.test-home');
   const stdout = execSync(`node "${SCRIPT_PATH}"`, {
+    cwd,
     input: JSON.stringify(input),
     encoding: 'utf-8',
     timeout: 5000,
     env: {
       ...process.env,
+      HOME: homeDir,
+      CLAUDE_CONFIG_DIR: join(homeDir, '.claude'),
       NODE_ENV: 'test',
       // Reset Bedrock/routing env vars so tests are isolated from the host environment.
       // Tests that exercise Bedrock model-routing behaviour set these explicitly via `env`.
+      OMC_AGENT_PREFLIGHT_CONTEXT_THRESHOLD: '',
       OMC_ROUTING_FORCE_INHERIT: '',
       OMC_SUBAGENT_MODEL: '',
       CLAUDE_MODEL: '',
@@ -377,6 +383,28 @@ describe('pre-tool-enforcer fallback gating (issue #970)', () => {
     expect(String(output.reason)).toContain('Safe recovery');
   });
 
+  it('falls back to the default preflight threshold when the env value is invalid', () => {
+    const transcriptPath = join(tempDir, 'transcript.jsonl');
+    writeTranscriptWithContext(transcriptPath, 1000, 800); // 80%
+
+    const output = runPreToolEnforcerWithEnv(
+      {
+        tool_name: 'Task',
+        toolInput: {
+          subagent_type: 'oh-my-claudecode:executor',
+          description: 'High fan-out execution',
+        },
+        cwd: tempDir,
+        transcript_path: transcriptPath,
+        session_id: 'session-1373-invalid-threshold',
+      },
+      { OMC_AGENT_PREFLIGHT_CONTEXT_THRESHOLD: 'abc' },
+    );
+
+    expect(output.decision).toBe('block');
+    expect(String(output.reason)).toContain('threshold: 72%');
+  });
+
   it('allows non-agent-heavy tools even when transcript context is high', () => {
     const transcriptPath = join(tempDir, 'transcript.jsonl');
     writeTranscriptWithContext(transcriptPath, 1000, 900); // 90%
@@ -392,7 +420,6 @@ describe('pre-tool-enforcer fallback gating (issue #970)', () => {
     expect(output.decision).toBeUndefined();
   });
 
-
   it('clears awaiting confirmation from session-scoped mode state when a skill is invoked', () => {
     const sessionId = 'session-confirm';
     const sessionStateDir = join(tempDir, '.omc', 'state', 'sessions', sessionId);

src/team/__tests__/api-interop.dispatch.test.ts

@@ -206,6 +206,7 @@ describe('team api dispatch-aware messaging', () => {
     const requests = await listDispatchRequests(teamName, cwd, { kind: 'mailbox', to_worker: 'worker-1' });
     expect(requests).toHaveLength(1);
     expect(requests[0]?.message_id).toBe(messageId);
-    expect(requests[0]?.status).toBe('pending');
+    expect(requests[0]?.pane_id).toBe('%9');
+    expect(['pending', 'notified']).toContain(requests[0]?.status);
   });
 });