@qijenchen/design-system 0.1.0-beta.13 → 0.1.0-beta.130

package/ds-canonical/hooks/tests/fixtures/transcripts/claude-transcript-jsonl-v1.jsonl

@@ -0,0 +1,3 @@
+{"type":"user","message":{"role":"user","content":[{"type":"text","text":"Review the change."}]}}
+{"type":"assistant","message":{"role":"assistant","content":[{"type":"tool_use","name":"Bash","input":{"command":"npm test"}}]}}
+{"type":"assistant","message":{"role":"assistant","content":[{"type":"text","text":"The checks are complete."}]}}

package/ds-canonical/hooks/tests/fixtures/transcripts/claude-transcript-jsonl-v2.jsonl

@@ -0,0 +1,3 @@
+{"type":"user","message":{"role":"user","content":[{"type":"text","text":"Review the change."}]}}
+{"type":"assistant","message":{"role":"assistant","content":[{"type":"tool_use","name":"Bash","input":{"command":"npm test"}}]}}
+{"type":"assistant","message":{"role":"assistant","content":[{"type":"text","text":"The checks are complete."}]}}

package/ds-canonical/hooks/tests/registration-output-contracts.mjs

@@ -0,0 +1,151 @@
+#!/usr/bin/env node
+// Registration-derived static output-contract audit.
+
+import fs from 'node:fs'
+import path from 'node:path'
+
+const [registryPath, schemaPath, hookRoot] = process.argv.slice(2)
+const registry = JSON.parse(fs.readFileSync(registryPath, 'utf8'))
+const schema = JSON.parse(fs.readFileSync(schemaPath, 'utf8'))
+const descriptorSchema = schema.properties.hooks.additionalProperties.items
+  .properties.hooks.items.oneOf.find((entry) => entry.properties?.kind?.const === 'hook')
+const allowedModes = new Set(descriptorSchema.properties.outputMode.enum)
+const allowedRuntimes = new Set(descriptorSchema.properties.runtime.enum)
+const allowedEvents = new Set(schema.properties.hooks.propertyNames.enum)
+const failures = []
+const descriptors = []
+
+const shellSources = []
+const walkShellSources = (directory) => {
+  for (const entry of fs.readdirSync(directory, { withFileTypes: true })) {
+    const absolute = path.join(directory, entry.name)
+    if (entry.isDirectory()) walkShellSources(absolute)
+    else if (entry.isFile() && entry.name.endsWith('.sh')) shellSources.push(absolute)
+  }
+}
+walkShellSources(hookRoot)
+const dynamicNodeSource = /\bnode[ \t]+(?:-[ep](?=[ \t]|$)|--(?:eval|print)(?:=|(?=[ \t]|$))|-(?=[ \t]|$)|<<)/
+for (const shellPath of shellSources) {
+  const source = fs.readFileSync(shellPath, 'utf8').replace(/\\\r?\n/g, ' ')
+  for (const [index, line] of source.split('\n').entries()) {
+    if (/^\s*#/.test(line)) continue
+    if (dynamicNodeSource.test(line)) {
+      failures.push(
+        `${path.relative(hookRoot, shellPath)}:${index + 1}:dynamic Node source is prohibited`,
+      )
+    }
+  }
+}
+
+for (const [event, matcherGroups] of Object.entries(registry.hooks ?? {})) {
+  if (!allowedEvents.has(event)) failures.push(`unknown hook event:${event}`)
+  if (!Array.isArray(matcherGroups)) {
+    failures.push(`event is not an array:${event}`)
+    continue
+  }
+  for (const [groupIndex, group] of matcherGroups.entries()) {
+    if (!Array.isArray(group?.hooks)) {
+      failures.push(`matcher hooks is not an array:${event}[${groupIndex}]`)
+      continue
+    }
+    for (const [hookIndex, descriptor] of group.hooks.entries()) {
+      if (descriptor?.kind !== 'hook') continue
+      descriptors.push({ event, groupIndex, hookIndex, ...descriptor })
+    }
+  }
+}
+
+if (descriptors.length === 0) failures.push('registration contains no hook descriptors')
+
+const signatures = new Map()
+for (const descriptor of descriptors) {
+  const label = `${descriptor.event}[${descriptor.groupIndex}].hooks[${descriptor.hookIndex}]`
+  if (!allowedModes.has(descriptor.outputMode)) {
+    failures.push(`${label}:${descriptor.hook}:unsupported outputMode ${descriptor.outputMode}`)
+  }
+  if (!allowedRuntimes.has(descriptor.runtime)) {
+    failures.push(`${label}:${descriptor.hook}:unsupported runtime ${descriptor.runtime}`)
+  }
+  if (typeof descriptor.hook !== 'string' || !/^[A-Za-z0-9._-]+$/.test(descriptor.hook)) {
+    failures.push(`${label}:unsafe hook path ${JSON.stringify(descriptor.hook)}`)
+    continue
+  }
+
+  const hookPath = path.join(hookRoot, descriptor.hook)
+  let stat
+  try {
+    stat = fs.lstatSync(hookPath)
+  } catch {
+    failures.push(`${label}:${descriptor.hook}:canonical source is missing`)
+    continue
+  }
+  if (!stat.isFile() || stat.isSymbolicLink()) {
+    failures.push(`${label}:${descriptor.hook}:canonical source must be a regular non-symlink file`)
+    continue
+  }
+  const runtimeExtensionValid = {
+    bash: descriptor.hook.endsWith('.sh'),
+    python3: descriptor.hook.endsWith('.py'),
+    node: /\.(?:mjs|cjs|js)$/.test(descriptor.hook),
+  }[descriptor.runtime]
+  if (!runtimeExtensionValid) {
+    failures.push(`${label}:${descriptor.hook}:runtime/extension mismatch (${descriptor.runtime})`)
+  }
+
+  const signature = `${descriptor.runtime}\0${descriptor.outputMode}`
+  const prior = signatures.get(descriptor.hook)
+  if (prior && prior !== signature) {
+    failures.push(`${descriptor.hook}:duplicate registrations disagree on runtime/outputMode`)
+  } else {
+    signatures.set(descriptor.hook, signature)
+  }
+}
+
+// A diagnostic may return 70 only for an explicit integrity failure. It must never block policy
+// with exit 1/2 or a dynamic exit status, because the runner would misclassify that as integrity.
+for (const hook of new Set(
+  descriptors.filter((entry) => entry.outputMode === 'diagnostic').map((entry) => entry.hook),
+)) {
+  const source = fs.readFileSync(path.join(hookRoot, hook), 'utf8')
+  for (const [index, rawLine] of source.split('\n').entries()) {
+    if (/^\s*#/.test(rawLine)) continue
+    const shellExit = rawLine.match(/\bexit\s+(?:"?)(\$[A-Za-z_{]|\d+)/)
+    const pythonExit = rawLine.match(/\bsys\.exit\(\s*(\d+)/)
+    const token = shellExit?.[1] ?? pythonExit?.[1]
+    if (!token) continue
+    const numeric = /^\d+$/.test(token) ? Number(token) : null
+    if (numeric !== 0 && numeric !== 70) {
+      failures.push(`${hook}:${index + 1}:diagnostic has prohibited non-integrity exit ${token}`)
+    }
+  }
+}
+
+// Lock the high-risk modes that exercise both neutral transports and genuine policy blocking.
+const requiredModes = new Map([
+  ['check_spec_class_drift.sh', 'governance-context'],
+  ['check_audit_post_report_validator.sh', 'governance-context-or-block'],
+  ['auto_regen_ds_barrel.sh', 'governance-context'],
+  ['stop_self_audit.sh', 'governance-decision'],
+  ['check_orphan_ds_css.sh', 'governance-decision'],
+  ['inject_deploy_url_after_push.sh', 'governance-context'],
+  ['session_start_governance_check.sh', 'governance-context'],
+])
+for (const [hook, expectedMode] of requiredModes) {
+  const matches = descriptors.filter((entry) => entry.hook === hook)
+  if (matches.length === 0) {
+    failures.push(`${hook}:required descriptor is missing`)
+  } else if (matches.some((entry) => entry.outputMode !== expectedMode)) {
+    failures.push(`${hook}:expected every registration to use ${expectedMode}`)
+  }
+}
+
+if (failures.length > 0) {
+  console.error('registration output-contract failures:')
+  for (const failure of failures) console.error(`  - ${failure}`)
+  process.exit(1)
+}
+
+console.log(
+  `PASS registration output contracts: ${descriptors.length} descriptors, `
+  + `${new Set(descriptors.map((entry) => entry.hook)).size} canonical hooks`,
+)

package/ds-canonical/hooks/tests/run-all.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 # Runner: executes all test_*.sh in this directory, aggregates results.
 #
-# Usage: bash .claude/hooks/tests/run-all.sh
+# Usage: bash packages/design-system/ds-canonical/hooks/tests/run-all.sh
 #        npm run hooks:test(via package.json wrapper)
 #
 # Exit: 0 if all pass, 1 if any test suite fails.
@@ -9,11 +9,32 @@
 set -u
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-# Export CLAUDE_PROJECT_DIR so _log-fire.sh doesn't create stray .claude/ dirs
-# when hooks are invoked from the test runner(different cwd than real runtime)
-export CLAUDE_PROJECT_DIR="$(cd "$SCRIPT_DIR/../../.." && pwd)"
+# Hook tests are behavioral verification, never a telemetry-producing native session. Use the real
+# git root for path semantics and make the entire replay byte-for-byte read-only.
+export GOVERNANCE_PROJECT_DIR="$(git -C "$SCRIPT_DIR" rev-parse --show-toplevel)"
+export GOVERNANCE_READ_ONLY=1
+# A test suite owns its fixture Git runtime and transcript/replay mode. Never
+# let a caller session's bindings shadow the temporary repositories or the
+# explicit runtime mode selected by an individual behavioral test below.
+unset GOVERNANCE_RUNTIME_ROOT GOVERNANCE_STATE_DIR \
+  GOVERNANCE_STATIC_REPLAY GOVERNANCE_TRANSCRIPT_PATH \
+  GOVERNANCE_TRANSCRIPT_CONTRACT TRANSCRIPT_PATH \
+  GOVERNANCE_PROVIDER GOVERNANCE_SELF_PROVIDER \
+  GOVERNANCE_WRITE_STATE_TRUST GOVERNANCE_PROVIDER_ADAPTER_JSON
+export GOVERNANCE_TELEMETRY_OPT_IN=0
 cd "$SCRIPT_DIR" || exit 1
 
+# Every suite builds its fixtures with `mktemp -d`. When TMPDIR is unwritable mktemp
+# returns empty, and the classic `VAR="$(cd "$VAR" && pwd -P)"` normalization then
+# resolves to this directory — turning a cleanup trap into corpus deletion. Prove the
+# temporary directory works once, here, instead of discovering it 60 tests later.
+TMPDIR_PROBE="$(mktemp -d 2>/dev/null || true)"
+if [ -z "$TMPDIR_PROBE" ] || [ ! -d "$TMPDIR_PROBE" ]; then
+  echo "❌ mktemp -d is unusable(TMPDIR=${TMPDIR:-unset});hook tests cannot build fixtures" >&2
+  exit 1
+fi
+rm -rf "$TMPDIR_PROBE"
+
 TOTAL_SUITES=0
 PASSED_SUITES=0
 FAILED_SUITES=""
@@ -33,6 +54,14 @@ for test_file in test_*.sh; do
   else
     FAILED_SUITES="${FAILED_SUITES}\n  - $test_file"
   fi
+  # Name the destroyer immediately. Without this a suite that deletes shared sources
+  # stays silent and the failure surfaces much later as an unrelated ENOENT, blaming
+  # whichever consumer reads the corpus next.
+  if [ ! -f "$SCRIPT_DIR/run-all.sh" ]; then
+    echo "" >&2
+    echo "❌ FATAL: $test_file destroyed the canonical hook test corpus at $SCRIPT_DIR" >&2
+    exit 1
+  fi
 done
 
 echo ""
@@ -65,8 +94,9 @@ echo "  Total hooks:  ${TOTAL_COUNT}"
 echo "  With tests:   ${TESTED_COUNT}"
 echo "  Without:      ${UNTESTED_COUNT}"
 if [ "${UNTESTED_COUNT}" -gt 0 ] 2>/dev/null; then
-  echo "  (未覆蓋 list — 漸進式補齊,不 block)"
+  echo "  (active hook 無 behavioral test — fail closed)"
   printf '%s\n' "$UNTESTED" | sed 's/^/    - /' | head -20
+  FAILED_SUITES="${FAILED_SUITES}\n  - active-hook-test-closure(${UNTESTED_COUNT} untested)"
 fi
 
 if [ -n "$FAILED_SUITES" ]; then

package/ds-canonical/hooks/tests/test_auto_regen_ds_barrel.sh

@@ -0,0 +1,224 @@
+#!/bin/bash
+# Tests for auto_regen_ds_barrel.sh(2026-05-25 SSOT auto-sync invariant)
+#
+# Hook 規則(PostToolUse Write|Edit|MultiEdit,reads tool_input.file_path):
+#   - 這是 auto-fix-up hook,不是 policy BLOCKER；成功/no-op exit 0。
+#   - generator/config/tool fault 則以 GOVENANCE_INTEGRITY + exit 70 fail closed。
+#   - "Fire"(positive)= 在 stdout emit JSON additionalContext(hookSpecificOutput),
+#     發生條件:file_path 在 packages/design-system/src/(components|patterns|hooks|lib)/
+#     且非 stories/spec/test,且 gen-design-system-barrel.mjs 輸出含 'generated' / 'with N components'。
+#   - "Silent"(negative)= 無 stdout(exit 0),發生條件:
+#       (a) file_path 空
+#       (b) file_path 不在 scope(components|patterns|hooks|lib)
+#       (c) file_path 是 .stories/.spec/.test/.spec.md
+#       (d) barrel 腳本沒印 'generated' 關鍵字
+#
+# Determinism:GOVERNANCE_PROJECT_DIR 指向 TMP_DIR,內含 **stub** gen scripts,
+#   控制 barrel 是否印 'generated' + 不污染 real repo barrel 檔案。Hook 在 line 38-39
+#   會 cd 進 GOVERNANCE_PROJECT_DIR 再 `node scripts/...`。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../auto_regen_ds_barrel.sh"
+
+if [ ! -f "$HOOK" ]; then echo "FATAL: hook not found: $HOOK"; exit 1; fi
+if ! command -v node >/dev/null 2>&1; then echo "FATAL: node not on PATH (hook 需要 node)"; exit 1; fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+
+# --- Build isolated project dir with stub gen scripts ----------------------
+# index 腳本只需成功 run;barrel 腳本控制是否印 'generated'(emission gate)。
+mkdir -p "$TMP_DIR/scripts" "$TMP_DIR/.claude/logs"
+cat > "$TMP_DIR/scripts/gen-component-indexes.mjs" <<'EOF'
+console.log("component indexes regenerated");
+EOF
+
+# Default barrel stub = 印 'generated'(讓 in-scope case 會 emit)
+write_barrel_with_generated() {
+  cat > "$TMP_DIR/scripts/gen-design-system-barrel.mjs" <<'EOF'
+console.log("barrel src/index.ts generated with 12 components");
+EOF
+}
+# Alt barrel stub = 不印 'generated'(模擬 no-op,emission 應被抑制)
+write_barrel_without_generated() {
+  cat > "$TMP_DIR/scripts/gen-design-system-barrel.mjs" <<'EOF'
+console.log("nothing changed; up to date");
+EOF
+}
+write_index_failure() {
+  cat > "$TMP_DIR/scripts/gen-component-indexes.mjs" <<'EOF'
+console.error("fixture index failure");
+process.exit(9);
+EOF
+}
+write_index_success() {
+  cat > "$TMP_DIR/scripts/gen-component-indexes.mjs" <<'EOF'
+console.log("component indexes regenerated");
+EOF
+}
+write_barrel_failure() {
+  cat > "$TMP_DIR/scripts/gen-design-system-barrel.mjs" <<'EOF'
+console.error("fixture barrel failure");
+process.exit(11);
+EOF
+}
+write_barrel_with_generated
+
+export GOVERNANCE_PROJECT_DIR="$TMP_DIR"
+
+# --- run-hook helper:pipe JSON into hook via stdin -------------------------
+run_hook() {
+  local file_path="$1"
+  local payload
+  payload=$(jq -n --arg fp "$file_path" \
+    '{hook_event_name:"PostToolUse", tool_name:"Write", tool_input:{file_path:$fp, content:""}}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDOUT_TEXT=$(cat "$STDOUT" 2>/dev/null)
+  STDERR_TEXT=$(cat "$STDERR" 2>/dev/null)
+  rm -f "$STDOUT" "$STDERR"
+}
+
+# POSITIVE assertion:hook fires = exit 0 + stdout 含 additionalContext needle
+expect_fire() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && echo "$STDOUT_TEXT" | grep -qF "auto-regen DS barrel"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected FIRE: exit 0 + additionalContext, got exit=$EXIT, stdout=$([ -n "$STDOUT_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stdout ---"; echo "$STDOUT_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+# NEGATIVE assertion:hook silent = exit 0 + 無 stdout(且 never block / exit 2)
+expect_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDOUT_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected SILENT: exit 0 + no stdout, got exit=$EXIT, stdout=$([ -n "$STDOUT_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stdout ---"; echo "$STDOUT_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_integrity() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "70" ] && [ -z "$STDOUT_TEXT" ] \
+    && echo "$STDERR_TEXT" | grep -qF "GOVERNANCE_INTEGRITY:" \
+    && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected integrity exit 70 + '$needle', got exit=$EXIT)"
+    echo "  --- stdout ---"; echo "$STDOUT_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== auto_regen_ds_barrel tests ==="
+
+# ---------------------------------------------------------------------------
+# POSITIVE cases(SHOULD fire = emit additionalContext)
+# ---------------------------------------------------------------------------
+
+# 1. In-scope component primary tsx → fire(real violation, guards over-narrow regex)
+run_hook "packages/design-system/src/components/Badge/badge.tsx"
+expect_fire "1. components/Badge/badge.tsx → FIRE (regen)"
+
+# 2. In-scope pattern tsx → fire(scope 'patterns' alt)
+run_hook "packages/design-system/src/patterns/element-anatomy/item-anatomy.tsx"
+expect_fire "2. patterns/.../item-anatomy.tsx → FIRE"
+
+# 3. In-scope hooks/*.ts → fire(barrel includes hooks)
+run_hook "packages/design-system/src/hooks/use-disclosure.ts"
+expect_fire "3. hooks/use-disclosure.ts → FIRE"
+
+# 4. In-scope lib/*.ts → fire(barrel includes lib)
+run_hook "packages/design-system/src/lib/cn.ts"
+expect_fire "4. lib/cn.ts → FIRE"
+
+# 5. In-scope per-component index.ts → fire(barrel 也 include index 改動)
+run_hook "packages/design-system/src/components/Badge/index.ts"
+expect_fire "5. components/Badge/index.ts → FIRE"
+
+# 6. NEAR-MISS guard against OVER-BROAD exclusion regex:
+#    'specimen.tsx' 含 'spec' substring 但 **不是** .spec 檔 → 必須 FIRE,不可被誤排除。
+#    (exclusion regex 是 \.(...spec...)\.(tsx?|md)$ anchored,specimen 不該命中)
+run_hook "packages/design-system/src/components/Specimen/specimen.tsx"
+expect_fire "6. NEAR-MISS specimen.tsx (含 'spec' 子字串) → FIRE (regex 非過寬)"
+
+# ---------------------------------------------------------------------------
+# NEGATIVE cases(should NOT fire = silent, exit 0)
+# ---------------------------------------------------------------------------
+
+# 7. Empty file_path → silent(line 26 early exit)
+run_hook ""
+expect_silent "7. empty file_path → silent"
+
+# 8. Out-of-scope app consumer tsx → silent(不在 design-system scope)
+run_hook "apps/template/src/App.tsx"
+expect_silent "8. apps/template/src/App.tsx (out of scope) → silent"
+
+# 9. NEAR-MISS scope guard:design-system/src/tokens/ 不在 (components|patterns|hooks|lib) → silent
+#    (guards against over-broad scope regex matching all of design-system/src)
+run_hook "packages/design-system/src/tokens/colors.ts"
+expect_silent "9. NEAR-MISS tokens/colors.ts (DS src but 非 barrel scope) → silent"
+
+# 10. In-scope .stories.tsx → silent(line 34 exclusion)
+run_hook "packages/design-system/src/components/Badge/badge.stories.tsx"
+expect_silent "10. badge.stories.tsx → silent (excluded)"
+
+# 11. In-scope .anatomy.stories.tsx → silent
+run_hook "packages/design-system/src/components/Badge/badge.anatomy.stories.tsx"
+expect_silent "11. badge.anatomy.stories.tsx → silent (excluded)"
+
+# 12. In-scope .spec.md → silent
+run_hook "packages/design-system/src/components/Badge/badge.spec.md"
+expect_silent "12. badge.spec.md → silent (excluded)"
+
+# 13. In-scope .spec.ts → silent
+run_hook "packages/design-system/src/components/Badge/badge.spec.ts"
+expect_silent "13. badge.spec.ts → silent (excluded)"
+
+# 14. In-scope .test.tsx → silent
+run_hook "packages/design-system/src/components/Badge/badge.test.tsx"
+expect_silent "14. badge.test.tsx → silent (excluded)"
+
+# 15. Emission gate:in-scope tsx BUT barrel 沒印 'generated' → silent(no additionalContext)
+#     即使 scripts run 成功,grep 'generated|with N components' 沒命中 → 不 emit。
+write_barrel_without_generated
+run_hook "packages/design-system/src/components/Badge/badge.tsx"
+expect_silent "15. in-scope tsx, barrel no 'generated' output → silent (emission gate)"
+write_barrel_with_generated  # restore for any later cases
+
+# 16. Component-index generator failure is infrastructure failure,not fake success.
+write_index_failure
+run_hook "packages/design-system/src/components/Badge/badge.tsx"
+expect_integrity "16. component-index generator nonzero → integrity 70" "component-index generator failed"
+write_index_success
+
+# 17. Barrel generator failure is infrastructure failure,not fake success.
+write_barrel_failure
+run_hook "packages/design-system/src/components/Badge/badge.tsx"
+expect_integrity "17. barrel generator nonzero → integrity 70" "barrel generator failed"
+write_barrel_with_generated
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  printf "Failed:%b\n" "$FAILED_TESTS"
+  exit 1
+fi
+exit 0