@hegemonart/get-design-done 1.31.0 → 1.32.0

package/scripts/run-injection-scanner-ci.cjs

@@ -1,83 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-// CI-mode wrapper over hooks/gdd-read-injection-scanner.js.
-// Scans all shipped reference/*.md, skills/**/SKILL.md, and agents/*.md for
-// prompt-injection patterns. Exits 0 on a clean tree, 1 on any finding.
-//
-// The patterns are imported indirectly by re-declaring them — the hook itself
-// is stdin-driven and cannot be required as a module. Keep these in sync with
-// hooks/gdd-read-injection-scanner.js.
-
-const fs = require('fs');
-const path = require('path');
-
-const REPO_ROOT = path.resolve(__dirname, '..');
-
-const { INJECTION_PATTERNS } = require('./injection-patterns.cjs');
-
-function walkMd(dir, out) {
-  if (!fs.existsSync(dir)) return;
-  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-    const full = path.join(dir, entry.name);
-    if (entry.isDirectory()) walkMd(full, out);
-    else if (entry.isFile() && entry.name.endsWith('.md')) out.push(full);
-  }
-}
-
-function collectTargets() {
-  const targets = [];
-  // reference/ — all .md recursively
-  walkMd(path.join(REPO_ROOT, 'reference'), targets);
-  // skills/**/SKILL.md — only SKILL.md files
-  const skillsRoot = path.join(REPO_ROOT, 'skills');
-  const skillAccum = [];
-  walkMd(skillsRoot, skillAccum);
-  for (const f of skillAccum) {
-    if (path.basename(f) === 'SKILL.md') targets.push(f);
-  }
-  // agents/*.md (non-recursive)
-  const agentsRoot = path.join(REPO_ROOT, 'agents');
-  if (fs.existsSync(agentsRoot)) {
-    for (const entry of fs.readdirSync(agentsRoot, { withFileTypes: true })) {
-      if (entry.isFile() && entry.name.endsWith('.md')) {
-        targets.push(path.join(agentsRoot, entry.name));
-      }
-    }
-  }
-  return targets;
-}
-
-function main() {
-  const targets = collectTargets();
-  let findings = 0;
-
-  for (const file of targets) {
-    const body = fs.readFileSync(file, 'utf8');
-    const lines = body.split('\n');
-    let inFence = false;
-    for (let i = 0; i < lines.length; i++) {
-      const line = lines[i];
-      // Track code fences — prompt-injection attacks live in prose, not in
-      // literal code/template blocks. Skip lines inside ``` ... ``` fences.
-      if (/^\s*```/.test(line)) {
-        inFence = !inFence;
-        continue;
-      }
-      if (inFence) continue;
-      for (const pat of INJECTION_PATTERNS) {
-        if (pat.re.test(line)) {
-          const rel = path.relative(REPO_ROOT, file);
-          const excerpt = line.trim().slice(0, 120);
-          console.log(`${rel}:${i + 1}: ${pat.name}: ${excerpt}`);
-          findings++;
-          break; // one finding per line is enough
-        }
-      }
-    }
-  }
-
-  console.log(`summary: ${targets.length} files scanned, ${findings} findings`);
-  process.exit(findings === 0 ? 0 : 1);
-}
-
-main();

package/scripts/tests/test-authority-rejected-kinds.sh

@@ -1,58 +0,0 @@
-#!/usr/bin/env bash
-# test-authority-rejected-kinds.sh
-#
-# Asserts that reference/authority-feeds.md does NOT contain trend-aggregator
-# hosts OUTSIDE the explicit "## Rejected kinds" section. Enforces the anti-slop
-# thesis structurally (CONTEXT.md D-08, D-28).
-#
-# Exit 0 = clean. Exit 1 = at least one rejected host appeared in the active
-# whitelist, or the rejected-kinds section itself was removed.
-
-set -euo pipefail
-
-WHITELIST="${WHITELIST:-reference/authority-feeds.md}"
-
-if [ ! -f "$WHITELIST" ]; then
-  echo "FAIL: $WHITELIST not found." >&2
-  exit 1
-fi
-
-# Split the file at the "## Rejected kinds" heading. Everything BEFORE it is
-# the active whitelist; everything AFTER is the rejection manifest (which is
-# allowed to mention these hosts — that's the whole point).
-ACTIVE_SECTION="$(awk '/^## Rejected kinds/{exit} {print}' "$WHITELIST")"
-
-REJECTED_PATTERNS=(
-  'dribbble\.com'
-  'behance\.net'
-  'linkedin\.com'
-  'medium\.com/topic'
-  'producthunt\.com/posts'
-  'top[[:space:]]*10[[:space:]]*ui'
-  'trending-ui'
-)
-
-FAIL=0
-for pat in "${REJECTED_PATTERNS[@]}"; do
-  if echo "$ACTIVE_SECTION" | grep -iEq "$pat"; then
-    echo "FAIL: rejected pattern '$pat' matched in active whitelist section of $WHITELIST." >&2
-    FAIL=1
-  fi
-done
-
-if [ "$FAIL" -ne 0 ]; then
-  echo "" >&2
-  echo "The whitelist must not contain trend-aggregator hosts outside the '## Rejected kinds' block." >&2
-  echo "See .planning/phases/13.2-external-authority-watcher/13.2-CONTEXT.md §D-08." >&2
-  exit 1
-fi
-
-# Also assert the rejected-kinds section itself is present — regression against
-# someone deleting the section entirely.
-if ! grep -q '^## Rejected kinds$' "$WHITELIST"; then
-  echo "FAIL: '## Rejected kinds' section is missing from $WHITELIST." >&2
-  exit 1
-fi
-
-echo "OK: $WHITELIST passes rejected-kinds check."
-exit 0

package/scripts/tests/test-authority-watcher-diff.sh

@@ -1,113 +0,0 @@
-#!/usr/bin/env bash
-# test-authority-watcher-diff.sh
-#
-# Structural-only v1: validates that the frozen authority-report baseline at
-# test-fixture/baselines/phase-13.2/authority-report.expected.md preserves the
-# shape the watcher-diff test depends on. Full end-to-end byte-diff against a
-# live watcher run is deferred — CI cannot spawn Claude Code agents.
-#
-# What this test asserts (structural-only v1):
-#   1. The fixture directory exists and is non-empty.
-#   2. The baseline file exists, is non-empty, and starts with an Authority
-#      Report header.
-#   3. The baseline contains the canonical classification section headings in
-#      the D-21 weighted order (spec > heuristic > pattern > craft).
-#   4. The baseline declares a total-entries line consistent with the count of
-#      bulleted entries under its classification sections.
-#   5. The baseline ends with a `**Skipped:**` footer.
-#
-# Exit 0 = structural shape preserved. Exit 1 = shape drift detected.
-#
-# Full end-to-end byte-diff (running the watcher against the fixtures and
-# diffing stdout against the baseline) is a follow-up tracked in STATE.md
-# "Open follow-ups". When the agent runtime becomes available in CI this
-# script graduates from structural-only v1 to the full diff check.
-
-set -euo pipefail
-
-FIXTURE_DIR="test-fixture/authority-feeds"
-BASELINE="test-fixture/baselines/phase-13.2/authority-report.expected.md"
-
-if [ ! -d "$FIXTURE_DIR" ]; then
-  echo "FAIL: fixture dir $FIXTURE_DIR missing." >&2
-  exit 1
-fi
-
-# Count actual fixture files (should be 4 frozen feeds + 1 README; we only
-# care that at least one XML/JSON fixture is present).
-# Use null-delimited find to handle filenames with spaces/newlines (WR-05).
-FIXTURE_COUNT=0
-while IFS= read -r -d '' _f; do
-  FIXTURE_COUNT=$((FIXTURE_COUNT + 1))
-done < <(find "$FIXTURE_DIR" -maxdepth 1 -type f \( -name '*.atom' -o -name '*.rss' -o -name '*.json' \) -print0)
-if [ "$FIXTURE_COUNT" -lt 1 ]; then
-  echo "FAIL: $FIXTURE_DIR contains no feed fixtures (.atom/.rss/.json)." >&2
-  exit 1
-fi
-
-if [ ! -f "$BASELINE" ]; then
-  echo "FAIL: baseline $BASELINE missing." >&2
-  exit 1
-fi
-
-if [ ! -s "$BASELINE" ]; then
-  echo "FAIL: baseline $BASELINE is empty." >&2
-  exit 1
-fi
-
-# Header: must start with "# Authority Report"
-if ! head -1 "$BASELINE" | grep -q '^# Authority Report'; then
-  echo "FAIL: baseline does not begin with '# Authority Report' header." >&2
-  exit 1
-fi
-
-# Totals line must declare a non-negative surfaced-entries count.
-if ! grep -qE '^[0-9]+ entries surfaced across [0-9]+ feeds\. [0-9]+ skipped\.$' "$BASELINE"; then
-  echo "FAIL: baseline is missing the 'N entries surfaced across M feeds. K skipped.' totals line." >&2
-  exit 1
-fi
-
-# Classification sections — at least one of the four non-skip buckets must
-# appear. (Empty buckets are omitted by D-21, but a well-shaped baseline
-# always has at least one.)
-SECTION_HITS=0
-for heading in '^## spec-change' '^## heuristic-update' '^## pattern-guidance' '^## craft-tip'; do
-  if grep -qE "$heading" "$BASELINE"; then
-    SECTION_HITS=$((SECTION_HITS + 1))
-  fi
-done
-
-if [ "$SECTION_HITS" -lt 1 ]; then
-  echo "FAIL: baseline does not contain any classification heading (spec-change / heuristic-update / pattern-guidance / craft-tip)." >&2
-  exit 1
-fi
-
-# Count consistency check: the header's "N entries surfaced" must match the
-# total bulleted entries across the four classification sections.
-HEADER_COUNT=$(grep -oE '^[0-9]+ entries surfaced' "$BASELINE" | head -1 | grep -oE '^[0-9]+')
-
-# Extract the body between the first "## spec-change|heuristic-update|pattern-guidance|craft-tip"
-# heading and the closing "---" horizontal rule before the Skipped footer.
-BULLET_COUNT=$(awk '
-  /^## (spec-change|heuristic-update|pattern-guidance|craft-tip)/ { in_section=1; next }
-  /^---$/ { in_section=0 }
-  in_section && /^- / { count++ }
-  END { print count+0 }
-' "$BASELINE")
-
-if [ "$HEADER_COUNT" != "$BULLET_COUNT" ]; then
-  echo "FAIL: baseline header declares $HEADER_COUNT entries but the classification sections contain $BULLET_COUNT bullets." >&2
-  echo "      Counts MUST match — regenerate the baseline or fix the header." >&2
-  exit 1
-fi
-
-# Footer: must have a Skipped line.
-if ! grep -qE '^\*\*Skipped:\*\*' "$BASELINE"; then
-  echo "FAIL: baseline is missing the '**Skipped:**' footer line." >&2
-  exit 1
-fi
-
-echo "OK: authority-report baseline shape preserved (structural-only v1)."
-echo "    Fixtures: $FIXTURE_COUNT files under $FIXTURE_DIR"
-echo "    Entries:  $HEADER_COUNT (header) = $BULLET_COUNT (bullets)"
-exit 0

package/scripts/tests/test-motion-provenance.sh

@@ -1,64 +0,0 @@
-#!/usr/bin/env bash
-set -e
-
-# Provenance test: verifies RN-MIT attribution is present in all motion files
-# and that no file contains incorrect "Remotion/" provenance.
-#
-# Run from the project root:
-#   bash scripts/tests/test-motion-provenance.sh
-
-PASS_COUNT=0
-FAIL_COUNT=0
-
-check_attribution() {
-  local file="$1"
-  local needle="React Native"
-
-  if grep -q "$needle" "$file"; then
-    echo "PASS: $file contains RN-MIT attribution"
-    PASS_COUNT=$((PASS_COUNT + 1))
-  else
-    echo "FAIL: $file is missing RN-MIT attribution (expected: '$needle')"
-    FAIL_COUNT=$((FAIL_COUNT + 1))
-  fi
-}
-
-check_no_remotion() {
-  local file="$1"
-
-  if grep -q "Remotion/" "$file"; then
-    echo "FAIL: $file contains wrong provenance string 'Remotion/'"
-    FAIL_COUNT=$((FAIL_COUNT + 1))
-  else
-    echo "PASS: $file does not contain 'Remotion/'"
-    PASS_COUNT=$((PASS_COUNT + 1))
-  fi
-}
-
-FILES=(
-  "reference/motion-easings.md"
-  "reference/motion-interpolate.md"
-  "reference/motion-spring.md"
-  "scripts/lib/easings.cjs"
-  "scripts/lib/spring.cjs"
-)
-
-echo "=== Attribution checks ==="
-for f in "${FILES[@]}"; do
-  check_attribution "$f"
-done
-
-echo ""
-echo "=== Provenance contamination checks ==="
-for f in "${FILES[@]}"; do
-  check_no_remotion "$f"
-done
-
-echo ""
-echo "=== Results: $PASS_COUNT passed, $FAIL_COUNT failed ==="
-
-if [ "$FAIL_COUNT" -gt 0 ]; then
-  exit 1
-fi
-
-exit 0