@qijenchen/design-system 0.1.0-beta.10 → 0.1.0-beta.13

package/ds-canonical/hooks/tests/test_check_solo_workflow.sh

@@ -0,0 +1,201 @@
+#!/bin/bash
+# Tests for check_solo_workflow.sh(M28,2026-05-08 codified)
+#
+# Hook 規則(PreToolUse,Bash + mcp__github__create_pull_request + mcp__github__merge_pull_request):
+#   R1. `git checkout -b claude/X` 第 2 次 in same session → BLOCK exit 2
+#       (1st creation OK,record to TRACK_FILE)
+#   R2. `gh pr create` / `gh api -X POST .../pulls` / mcp__github__create_pull_request → BLOCK exit 2
+#       (read-only `gh api .../pulls/N/comments` 不 block)
+#   R3. `git push ... main` / mcp__github__merge_pull_request 無 user "push" trigger → BLOCK exit 2
+#       (transcript 含 push/OK/合 main keyword → silent pass)
+# Override:CLAUDE_BYPASS_SOLO_WORKFLOW=1 → silent (audit-logged)。
+# Non-Bash non-MCP / 非觸發 command → silent。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_solo_workflow.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+
+# Override CLAUDE_PROJECT_DIR so TRACK_FILE / BYPASS_LOG land in TMP_DIR
+# (避免污染 repo .claude/logs/)
+export CLAUDE_PROJECT_DIR="$TMP_DIR"
+mkdir -p "$TMP_DIR/.claude/logs"
+TRACK_FILE="$TMP_DIR/.claude/logs/session-branch-track.jsonl"
+
+build_transcript() {
+  local path="$1"; shift
+  : > "$path"
+  for msg in "$@"; do
+    jq -n --arg t "$msg" \
+      '{type:"user", message:{role:"user", content:$t}}' >> "$path"
+  done
+}
+
+run_hook_bash() {
+  local cmd="$1"; local session="${2:-sess-1}"; local transcript="${3:-}"
+  local payload
+  if [ -n "$transcript" ]; then
+    payload=$(jq -n \
+      --arg c "$cmd" --arg s "$session" --arg tp "$transcript" \
+      '{tool_name:"Bash", session_id:$s, transcript_path:$tp, tool_input:{command:$c}}')
+  else
+    payload=$(jq -n \
+      --arg c "$cmd" --arg s "$session" \
+      '{tool_name:"Bash", session_id:$s, tool_input:{command:$c}}')
+  fi
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+run_hook_mcp() {
+  local tool="$1"; local transcript="${2:-}"
+  local payload
+  if [ -n "$transcript" ]; then
+    payload=$(jq -n --arg t "$tool" --arg tp "$transcript" \
+      '{tool_name:$t, transcript_path:$tp, tool_input:{}}')
+  else
+    payload=$(jq -n --arg t "$tool" \
+      '{tool_name:$t, tool_input:{}}')
+  fi
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent, exit=$EXIT, stderr=$([ -n "$STDERR_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_block() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected BLOCK exit=2 + '$needle', got exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_solo_workflow tests ==="
+
+TX_NO_TRIGGER="$TMP_DIR/tx_no_trigger.jsonl"
+build_transcript "$TX_NO_TRIGGER" \
+  "請幫我看一下" \
+  "改個 padding" \
+  "audit 一下" \
+  "謝謝" \
+  "再 review"
+
+TX_PUSH_TRIGGER="$TMP_DIR/tx_push_trigger.jsonl"
+build_transcript "$TX_PUSH_TRIGGER" \
+  "請改" \
+  "OK 看起來不錯" \
+  "可以 push 了" \
+  "合進去" \
+  "謝謝"
+
+# 1. Non-Bash / Non-MCP tool → silent
+payload_other=$(jq -n '{tool_name:"Read", tool_input:{file_path:"/a"}}')
+STDOUT=$(mktemp); STDERR=$(mktemp)
+set +e
+printf '%s' "$payload_other" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+EXIT=$?
+set -e
+STDERR_TEXT=$(cat "$STDERR")
+rm -f "$STDOUT" "$STDERR"
+expect_pass_silent "1. tool=Read → skip"
+
+# 2. Non-trigger Bash command → silent
+run_hook_bash "ls -la"
+expect_pass_silent "2. innocuous bash → silent"
+
+# 3. R1: First `git checkout -b claude/foo` for session → silent + record
+rm -f "$TRACK_FILE"
+run_hook_bash "git checkout -b claude/foo" "sess-A"
+expect_pass_silent "3. R1 first claude/foo branch → silent (recorded)"
+
+# 4. R1: Second different branch in SAME session → BLOCK
+# (TRACK_FILE has sess-A → claude/foo from test 3)
+run_hook_bash "git checkout -b claude/bar" "sess-A"
+expect_block "4. R1 second branch same session → BLOCK" "R1 BLOCKER"
+
+# 5. R1: Same branch name reuse in same session → silent (EXISTING == NEW_BRANCH)
+# Hook 邏輯:已存在 + 同 branch 名 → 不 block (跳 if 條件)。
+run_hook_bash "git checkout -b claude/foo" "sess-A"
+expect_pass_silent "5. R1 same branch reuse same session → silent"
+
+# 6. R2: gh pr create → BLOCK
+run_hook_bash "gh pr create --title 'x' --body 'y'"
+expect_block "6. R2 gh pr create → BLOCK" "R2 BLOCKER"
+
+# 7. R2: read-only gh api pulls/N/comments → silent (allow read collab)
+run_hook_bash "gh api repos/foo/bar/pulls/123/comments"
+expect_pass_silent "7. R2 read-only gh api .../comments → silent"
+
+# 8. R2: gh api -X POST pulls → BLOCK (write method)
+run_hook_bash "gh api -X POST repos/foo/bar/pulls -f title=x"
+expect_block "8. R2 gh api -X POST pulls → BLOCK" "R2 BLOCKER"
+
+# 9. R3: git push origin main + no trigger transcript → BLOCK
+run_hook_bash "git push origin main" "sess-B" "$TX_NO_TRIGGER"
+expect_block "9. R3 push main no trigger → BLOCK" "R3 BLOCKER"
+
+# 10. R3: git push origin main + trigger transcript → silent
+run_hook_bash "git push origin main" "sess-C" "$TX_PUSH_TRIGGER"
+expect_pass_silent "10. R3 push main + push trigger → silent"
+
+# 11. MCP create_pull_request → BLOCK
+run_hook_mcp "mcp__github__create_pull_request"
+expect_block "11. MCP create_pull_request → BLOCK" "R2 BLOCKER"
+
+# 12. MCP merge_pull_request + no trigger → BLOCK
+run_hook_mcp "mcp__github__merge_pull_request" "$TX_NO_TRIGGER"
+expect_block "12. MCP merge no trigger → BLOCK" "R3 BLOCKER"
+
+# 13. CLAUDE_BYPASS_SOLO_WORKFLOW=1 override → silent
+payload_bypass=$(jq -n '{tool_name:"Bash", session_id:"sess-X", tool_input:{command:"gh pr create"}}')
+STDOUT=$(mktemp); STDERR=$(mktemp)
+set +e
+printf '%s' "$payload_bypass" | CLAUDE_BYPASS_SOLO_WORKFLOW=1 bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+EXIT=$?
+set -e
+STDERR_TEXT=$(cat "$STDERR")
+rm -f "$STDOUT" "$STDERR"
+expect_pass_silent "13. CLAUDE_BYPASS_SOLO_WORKFLOW=1 override → silent"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  echo "Failed:$FAILED_TESTS"
+  exit 1
+fi

package/ds-canonical/hooks/tests/test_check_spec_class_drift.sh

@@ -0,0 +1,135 @@
+#!/bin/bash
+# Tests for check_spec_class_drift.sh(Audit Dim 53,2026-05-17 ship)
+#
+# Hook 規則:Edit/Write/MultiEdit 對 packages/design-system/src/components/*/[a-z-]*.spec.md
+# 偵測 spec.md 寫「固定/寫死/硬寫 h-NN」但對應 tsx 已 migrate to var(--chrome-header-height)
+# token → stderr P1 warn(不 block;exit 0)。
+#
+# Allow escape:NEW_CONTENT 含 `@spec-class-drift-allow:` → silent。
+# 非 spec.md / tsx 不存在 → silent。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_spec_class_drift.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+
+# Build a fake DS component dir with spec.md + tsx pair in TMP_DIR
+# so hook's `TSX_PATH="${FILE_PATH%.spec.md}.tsx"` resolves correctly。
+build_pair() {
+  local comp_name="$1"
+  local tsx_content="$2"
+  mkdir -p "$TMP_DIR/packages/design-system/src/components/$comp_name"
+  printf '%s' "$tsx_content" > "$TMP_DIR/packages/design-system/src/components/$comp_name/${comp_name}.tsx"
+  echo "$TMP_DIR/packages/design-system/src/components/$comp_name/${comp_name}.spec.md"
+}
+
+run_hook() {
+  local tool="$1"
+  local file_path="$2"
+  local content="$3"
+  local payload
+  if [ "$tool" = "Edit" ]; then
+    payload=$(jq -n --arg tn "$tool" --arg fp "$file_path" --arg c "$content" \
+      '{tool_name: $tn, tool_input: {file_path: $fp, new_string: $c}}')
+  else
+    payload=$(jq -n --arg tn "$tool" --arg fp "$file_path" --arg c "$content" \
+      '{tool_name: $tn, tool_input: {file_path: $fp, content: $c}}')
+  fi
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent, exit=$EXIT, stderr=$([ -n "$STDERR_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_warn() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "0" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected warn '$needle', exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_spec_class_drift tests ==="
+
+# 1. Non-spec file (tsx) → skip silent
+run_hook "Edit" "$TMP_DIR/some.tsx" "any content"
+expect_pass_silent "1. non-spec.md file → skip"
+
+# 2. Non-DS path spec.md → skip silent
+run_hook "Edit" "/some/random/path/foo.spec.md" "固定 h-14"
+expect_pass_silent "2. spec.md outside DS components/ → skip"
+
+# 3. DS spec.md but no sibling tsx → skip silent
+SPEC_PATH="$TMP_DIR/packages/design-system/src/components/orphan/orphan.spec.md"
+mkdir -p "$(dirname "$SPEC_PATH")"
+run_hook "Edit" "$SPEC_PATH" "固定 h-14 寫死"
+expect_pass_silent "3. spec.md without sibling tsx → skip"
+
+# 4. spec 寫「固定 h-14」+ tsx 已消費 chrome-header-height token → P1 warn
+SPEC_PATH=$(build_pair "drifty" "
+export const Drifty = () => (
+  <div className=\"h-[var(--chrome-header-height)]\">...</div>
+);
+")
+run_hook "Edit" "$SPEC_PATH" "header 高度固定 h-14,不可改"
+expect_warn "4. spec '固定 h-14' + tsx token → warn" "SPEC-CODE REVERSE DRIFT"
+
+# 5. spec 寫「寫死 h-12」+ tsx 不含 h-12 → P1 warn (phrase mismatch pattern 1)
+SPEC_PATH=$(build_pair "noclass" "
+export const NoClass = () => (
+  <div className=\"h-[var(--chrome-header-height)]\">...</div>
+);
+")
+run_hook "Edit" "$SPEC_PATH" "container 寫死 h-12 處理"
+expect_warn "5. spec '寫死 h-12' + tsx 不含 h-12 → warn" "SPEC-CODE REVERSE DRIFT"
+
+# 6. spec 寫「固定 h-14」+ allow marker → silent
+SPEC_PATH=$(build_pair "allowed" "
+export const Allowed = () => (
+  <div className=\"h-[var(--chrome-header-height)]\">...</div>
+);
+")
+run_hook "Edit" "$SPEC_PATH" "// @spec-class-drift-allow: known legacy doc
+header 高度固定 h-14"
+expect_pass_silent "6. spec with @spec-class-drift-allow: marker → silent"
+
+# 7. Wrong tool (Read) → skip
+run_hook "Read" "$SPEC_PATH" "固定 h-14"
+expect_pass_silent "7. tool=Read → skip"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  echo "Failed:$FAILED_TESTS"
+  exit 1
+fi

package/ds-canonical/hooks/tests/test_check_story_anatomy.sh.broken

@@ -0,0 +1,197 @@
+#!/bin/bash
+# Tests for check_story_anatomy.sh
+#
+# Runs 5 scenarios by crafting PreToolUse JSON payloads on stdin and checking
+# the hook's exit code (0 = pass / 2 = block) + stderr output.
+#
+# Usage: bash test_check_story_anatomy.sh
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# Cluster A merge(2026-05-10):check_story_anatomy.sh 已 fold 進
+# check_story_invariants.sh dispatcher R1。本 test 改 call dispatcher,
+# dispatcher 會跑 5 rule(R1 anatomy + R2-R5),anatomy 違反時 R1 fire 攔截。
+HOOK="$SCRIPT_DIR/../check_story_invariants.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+# ── Helpers ──────────────────────────────────────────────────────────────────
+
+# run_hook <file_path> <content> → emits JSON payload and runs hook
+# Captures exit code in $EXIT, stderr in $STDERR, stdout in $STDOUT
+run_hook() {
+  local file_path="$1"
+  local content="$2"
+  local tool="${3:-Write}"
+
+  local payload
+  payload=$(jq -n \
+    --arg tool "$tool" \
+    --arg fp "$file_path" \
+    --arg c  "$content" \
+    '{tool_name: $tool, tool_input: {file_path: $fp, content: $c}}')
+
+  STDOUT=$(mktemp)
+  STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDOUT_TEXT=$(cat "$STDOUT")
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass() {
+  local name="$1"
+  if [ "$EXIT" = "0" ]; then
+    echo "  PASS  $name"
+    PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected exit 0, got $EXIT)"
+    echo "  --- stderr ---"
+    echo "$STDERR_TEXT" | sed 's/^/    /'
+    echo "  --- end stderr ---"
+    FAIL=$((FAIL+1))
+    FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_block() {
+  local name="$1"
+  local needle="$2"
+  if [ "$EXIT" = "2" ]; then
+    if echo "$STDERR_TEXT" | grep -qF "$needle"; then
+      echo "  PASS  $name"
+      PASS=$((PASS+1))
+    else
+      echo "  FAIL  $name (exit 2 OK but stderr missing '$needle')"
+      echo "  --- stderr ---"
+      echo "$STDERR_TEXT" | sed 's/^/    /'
+      echo "  --- end stderr ---"
+      FAIL=$((FAIL+1))
+      FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+    fi
+  else
+    echo "  FAIL  $name (expected exit 2, got $EXIT)"
+    echo "  --- stderr ---"
+    echo "$STDERR_TEXT" | sed 's/^/    /'
+    echo "  --- end stderr ---"
+    FAIL=$((FAIL+1))
+    FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+# ── Test 1: Normal story using <MenuItem> → pass ─────────────────────────────
+echo "Test 1: normal <MenuItem> usage → pass"
+read -r -d '' T1_CONTENT <<'EOF' || true
+import { MenuItem, ItemIcon, ItemLabel } from '@/design-system/patterns/element-anatomy/item-anatomy'
+import { Folder } from 'lucide-react'
+
+export const Default = {
+  render: () => (
+    <MenuItem>
+      <ItemIcon icon={Folder} />
+      <ItemLabel>專案檔案</ItemLabel>
+    </MenuItem>
+  ),
+}
+EOF
+run_hook "/fake/src/design-system/components/Menu/menu.stories.tsx" "$T1_CONTENT"
+expect_pass "Test 1 normal MenuItem usage passes"
+
+# ── Test 2: hand-craft raw row → block ───────────────────────────────────────
+echo ""
+echo "Test 2: raw <div flex items-center><Icon/> → block"
+read -r -d '' T2_CONTENT <<'EOF' || true
+import { Folder } from 'lucide-react'
+
+export const Default = {
+  render: () => (
+    <div className="flex items-center gap-2 px-3 py-2"><Folder className="size-4" />
+      <span>專案檔案</span>
+    </div>
+  ),
+}
+EOF
+run_hook "/fake/src/design-system/components/Menu/menu.stories.tsx" "$T2_CONTENT"
+expect_block "Test 2 raw item-anatomy row is blocked" "A.1"
+
+# ── Test 3: dismiss via label Button → block ─────────────────────────────────
+echo ""
+echo "Test 3: <Button>關閉</Button> under onClose context → block"
+read -r -d '' T3_CONTENT <<'EOF' || true
+import { Dialog, DialogHeader } from '@/design-system/components/Dialog/dialog'
+import { Button } from '@/design-system/components/Button/button'
+
+export const Default = {
+  render: ({ onClose }: { onClose: () => void }) => (
+    <Dialog>
+      <DialogHeader>
+        <h2>確認送出</h2>
+        <Button onClick={onClose}>關閉</Button>
+      </DialogHeader>
+    </Dialog>
+  ),
+}
+EOF
+run_hook "/fake/src/design-system/components/Dialog/dialog.stories.tsx" "$T3_CONTENT"
+expect_block "Test 3 dismiss via label Button is blocked" "B dismiss via label Button"
+
+# ── Test 4: file-level allowlist → bypass ────────────────────────────────────
+echo ""
+echo "Test 4: file-level // @anatomy-exempt marker → pass even with violation"
+read -r -d '' T4_CONTENT <<'EOF' || true
+// @anatomy-exempt: teaching raw primitive — anatomy docs show internals
+import { Folder } from 'lucide-react'
+
+export const Anatomy = {
+  render: () => (
+    <div className="flex items-center gap-2"><Folder className="size-4" />
+      <span>anatomy demo</span>
+    </div>
+  ),
+}
+EOF
+run_hook "/fake/src/design-system/components/Menu/menu.stories.tsx" "$T4_CONTENT"
+expect_pass "Test 4 file-level exempt bypasses hook"
+
+# ── Test 5: per-line allowlist → only that line skipped, next violation blocks ──
+echo ""
+echo "Test 5: // @anatomy-exempt-next skips only the following line"
+# First sub-test: the exempted line is clean, hook should still block on a
+# NEW violation later in the file.
+read -r -d '' T5_CONTENT <<'EOF' || true
+import { Folder } from 'lucide-react'
+
+export const Demo = {
+  render: () => (
+    <>
+      {/* @anatomy-exempt-next */}
+      <div className="flex items-center gap-2"><Folder className="size-4" /><span>exempt</span></div>
+      <div className="flex items-center gap-2"><Folder className="size-4" /><span>NOT exempt</span></div>
+    </>
+  ),
+}
+EOF
+run_hook "/fake/src/design-system/components/Menu/menu.stories.tsx" "$T5_CONTENT"
+expect_block "Test 5 per-line exempt skips one line but next violation still blocks" "A.1"
+
+# ── Summary ──────────────────────────────────────────────────────────────────
+echo ""
+echo "════════════════════════════════════════"
+echo "  Results: $PASS PASS, $FAIL FAIL"
+echo "════════════════════════════════════════"
+if [ "$FAIL" -gt 0 ]; then
+  printf "Failed tests:%b\n" "$FAILED_TESTS"
+  exit 1
+fi
+exit 0