feat(council-archive): add council_finalize and council_read tools, refactor background_wait to metadata-only

- council_finalize: batch extract, archive, and return council results
- council_read: secure file reader for archived council responses
- background_wait: stripped to metadata-only, returns completed_tasks array
- Removed all council-specific logic from background_wait
- 28/28 tests passing across all changed files

src/tools/council-archive/create-council-read.test.ts

@@ -0,0 +1,115 @@
+/// <reference types="bun-types" />
+
+import { describe, expect, it, beforeEach, afterEach } from "bun:test"
+import { mkdtemp, writeFile, mkdir, rm } from "node:fs/promises"
+import { tmpdir } from "node:os"
+import { join } from "node:path"
+import { createCouncilRead } from "./create-council-read"
+
+let tempDir: string
+let sisyphusDir: string
+
+beforeEach(async () => {
+  tempDir = await mkdtemp(join(tmpdir(), "council-read-test-"))
+  sisyphusDir = join(tempDir, ".sisyphus")
+  await mkdir(sisyphusDir, { recursive: true })
+})
+
+afterEach(async () => {
+  await rm(tempDir, { recursive: true, force: true })
+})
+
+const toolContext = {
+  sessionID: "test-session",
+  messageID: "test-message",
+  agent: "test-agent",
+  abort: new AbortController().signal,
+}
+
+describe("createCouncilRead", () => {
+  describe("#given an archive file with complete COUNCIL_MEMBER_RESPONSE tags", () => {
+    it("#then returns has_response true, response_complete true, and the content", async () => {
+      const archivePath = join(sisyphusDir, "member-1.txt")
+      await writeFile(archivePath, "Some preamble\n<COUNCIL_MEMBER_RESPONSE>Full analysis here</COUNCIL_MEMBER_RESPONSE>")
+
+      const tool = createCouncilRead()
+      const relativePath = `.sisyphus/member-1.txt`
+
+      process.chdir(tempDir)
+      const result = await tool.execute({ file_path: relativePath }, toolContext)
+      const parsed = JSON.parse(result)
+
+      expect(parsed.has_response).toBe(true)
+      expect(parsed.response_complete).toBe(true)
+      expect(parsed.result).toBe("Full analysis here")
+    })
+  })
+
+  describe("#given an archive file with incomplete COUNCIL_MEMBER_RESPONSE tags", () => {
+    it("#then returns has_response true, response_complete false", async () => {
+      const archivePath = join(sisyphusDir, "member-2.txt")
+      await writeFile(archivePath, "<COUNCIL_MEMBER_RESPONSE>Partial analysis still writing...")
+
+      const tool = createCouncilRead()
+      const relativePath = `.sisyphus/member-2.txt`
+
+      process.chdir(tempDir)
+      const result = await tool.execute({ file_path: relativePath }, toolContext)
+      const parsed = JSON.parse(result)
+
+      expect(parsed.has_response).toBe(true)
+      expect(parsed.response_complete).toBe(false)
+    })
+  })
+
+  describe("#given an archive file with no COUNCIL_MEMBER_RESPONSE tags", () => {
+    it("#then returns has_response false", async () => {
+      const archivePath = join(sisyphusDir, "member-3.txt")
+      await writeFile(archivePath, "Just some plain text without any tags.")
+
+      const tool = createCouncilRead()
+      const relativePath = `.sisyphus/member-3.txt`
+
+      process.chdir(tempDir)
+      const result = await tool.execute({ file_path: relativePath }, toolContext)
+      const parsed = JSON.parse(result)
+
+      expect(parsed.has_response).toBe(false)
+    })
+  })
+
+  describe("#given a path outside .sisyphus/", () => {
+    it("#then returns Access denied error", async () => {
+      const tool = createCouncilRead()
+      const result = await tool.execute({ file_path: "/etc/passwd" }, toolContext)
+      const parsed = JSON.parse(result)
+
+      expect(parsed.error).toBe("Access denied: path must be within .sisyphus/")
+    })
+  })
+
+  describe("#given a missing file within .sisyphus/", () => {
+    it("#then returns has_response false with File not found error", async () => {
+      const tool = createCouncilRead()
+      const relativePath = `.sisyphus/nonexistent-file.txt`
+
+      process.chdir(tempDir)
+      const result = await tool.execute({ file_path: relativePath }, toolContext)
+      const parsed = JSON.parse(result)
+
+      expect(parsed.has_response).toBe(false)
+      expect(parsed.error).toContain("File not found")
+      expect(parsed.error).toContain(relativePath)
+    })
+  })
+
+  describe("#given a path traversal attempt", () => {
+    it("#then returns Access denied error", async () => {
+      const tool = createCouncilRead()
+      const result = await tool.execute({ file_path: "../../../etc/passwd" }, toolContext)
+      const parsed = JSON.parse(result)
+
+      expect(parsed.error).toBe("Access denied: path must be within .sisyphus/")
+    })
+  })
+})