@qijenchen/design-system 0.1.0-beta.13 → 0.1.0-beta.131

package/ds-canonical/hooks/tests/test_check_field_family_invariants.sh

@@ -1,11 +1,13 @@
 #!/bin/bash
-# Tests for check_field_family_invariants.sh — merged 4 sub-rules(A.1-A.4)
+# Tests for check_field_family_invariants.sh — merged sub-rules(A.1-A.4 + A.6)
 #
-# Coverage(每 sub-rule pass + block 各 1 case,共 12 case):
+# Coverage(每 sub-rule pass + block 各 1 case):
 #   A.1 naked row-mode propagation:pass / block / allowlist
 #   A.2 FieldControlGroup wrapper child:pass / block / allowlist
 #   A.3 Field state ring SSOT:pass / 3 block(shadow inset / outline / per-control open)
 #   A.4 disabled placeholder color:pass / 1 stderr-warn(exit 0)/ allowlist
+#   A.6 空值顯示 SSOT(2026-07-08 半形 hyphen):非 owner import EMPTY_DISPLAY block /
+#       owner skip / 全形 em dash block / 半形 pass / allowlist
 #   non-target:non-tsx skip / SSOT host skip(field-wrapper.tsx)
 
 set -u
@@ -20,7 +22,7 @@ run_hook() {
   local file_path="$1" content="$2" tool="${3:-Write}"
   local payload
   payload=$(jq -n --arg tool "$tool" --arg fp "$file_path" --arg c "$content" \
-    '{tool_name: $tool, tool_input: {file_path: $fp, content: $c}}')
+    '{hook_event_name:"PreToolUse", tool_name: $tool, tool_input: {file_path: $fp, content: $c}}')
   STDOUT=$(mktemp); STDERR=$(mktemp)
   set +e
   printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
@@ -30,12 +32,51 @@ run_hook() {
   rm -f "$STDOUT" "$STDERR"
 }
 
+run_raw() {
+  local payload="$1"
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDOUT_TEXT=$(cat "$STDOUT"); STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+is_exact_context() {
+  local needle="$1" compact
+  compact=$(printf '%s' "$STDOUT_TEXT" | jq -c . 2>/dev/null) || return 1
+  [ "$STDOUT_TEXT" = "$compact" ] || return 1
+  printf '%s' "$STDOUT_TEXT" | jq -se --arg needle "$needle" '
+    length == 1
+    and (.[0] | type == "object" and (keys | sort) == ["governanceContext"])
+    and (.[0].governanceContext |
+      type == "object"
+      and (keys | sort) == ["hookEventName", "message"]
+      and .hookEventName == "PreToolUse"
+      and (.message | type == "string" and length > 0 and contains($needle)))
+  ' >/dev/null
+}
+
 expect_exit() {
   local name="$1" expect="$2" needle="${3:-}"
-  if [ "$EXIT" = "$expect" ] && { [ -z "$needle" ] || echo "$STDERR_TEXT" | grep -qF "$needle"; }; then
+  local ok=1
+  if [ "$expect" = "0" ] && [ -n "$needle" ]; then
+    [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ] && is_exact_context "$needle" && ok=0
+  elif [ "$expect" = "0" ]; then
+    [ "$EXIT" = "0" ] && [ -z "$STDOUT_TEXT" ] && [ -z "$STDERR_TEXT" ] && ok=0
+  elif [ "$expect" = "2" ]; then
+    [ "$EXIT" = "2" ] && [ -z "$STDOUT_TEXT" ] \
+      && { [ -z "$needle" ] || echo "$STDERR_TEXT" | grep -qF "$needle"; } && ok=0
+  elif [ "$expect" = "70" ]; then
+    [ "$EXIT" = "70" ] && [ -z "$STDOUT_TEXT" ] \
+      && { [ -z "$needle" ] || echo "$STDERR_TEXT" | grep -qF "$needle"; } && ok=0
+  fi
+  if [ "$ok" = "0" ]; then
     echo "  PASS  $name"; PASS=$((PASS+1))
   else
     echo "  FAIL  $name (expected exit $expect${needle:+ + needle '$needle'}, got exit $EXIT)"
+    echo "  --- stdout ---"; echo "$STDOUT_TEXT" | sed 's/^/    /'; echo "  --- end ---"
     echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
     FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
   fi
@@ -56,6 +97,15 @@ function F() { return <span variant="naked" className="inline-flex items-center"
 '
 expect_exit "A.1.2 naked + no SSOT → BLOCK" 2 "naked row-mode propagation"
 
+# 2b. 2026-06-03 回歸防護(同 R8 bug class):naked + items-center 跨多行 className(真實 JSX 格式)
+#     + no SSOT → BLOCK。修前 grep 逐行 → 多行 className 靜默漏 = P0 false-negative(對抗稽核抓到)。
+run_hook "/r/packages/design-system/src/components/BadMulti/bad-multi.tsx" '
+function F() { return <span variant="naked" className="inline-flex
+  bg-white
+  items-center" /> }
+'
+expect_exit "A.1.2b naked + 多行 className → BLOCK(回歸防護)" 2 "naked row-mode propagation"
+
 # 3. allowlist → pass
 run_hook "/r/packages/design-system/src/components/Edge/edge.tsx" '
 // @naked-row-mode-allow: popover content
@@ -72,7 +122,7 @@ expect_exit "A.1.4 SSOT host skip → pass" 0
 echo ""
 echo "=== A.2 FieldControlGroup wrapper direct child ==="
 
-# 5. <FieldControlGroup> 內 <div wrapper> → WARN(exit 1)
+# 5. <FieldControlGroup> 內 <div wrapper> → governance context(exit 0)
 run_hook "/r/packages/design-system/src/components/Filter/filter.tsx" '
 function F() { return (
   <FieldControlGroup>
@@ -82,7 +132,7 @@ function F() { return (
   </FieldControlGroup>
 )}
 '
-expect_exit "A.2.1 FCG with div wrapper → WARN" 1 "FieldControlGroup wrapper"
+expect_exit "A.2.1 FCG with div wrapper → governance context" 0 "FieldControlGroup wrapper"
 
 # 6. <FieldControlGroup> 直接 child 沒 wrapper → pass
 run_hook "/r/packages/design-system/src/components/Filter/filter.tsx" '
@@ -135,25 +185,17 @@ expect_exit "A.3.4 textarea SSOT skip → pass" 0
 echo ""
 echo "=== A.4 disabled placeholder color ==="
 
-# 12. placeholder:text-fg-muted no override → exit 0 with stderr warn
+# 12. placeholder:text-fg-muted no override → exit 0 governance context
 run_hook "/r/packages/design-system/src/components/Custom/custom.tsx" '
 const cls = "placeholder:text-fg-muted"
 '
-# A.4 是 P1 stderr,exit 0 — verify stderr 有 warn 訊息但不 fail
-if [ "$EXIT" = "0" ] && echo "$STDERR_TEXT" | grep -q "disabled placeholder color"; then
-  echo "  PASS  A.4.1 placeholder:text-fg-muted no override → stderr warn, exit 0"
-  PASS=$((PASS+1))
-else
-  echo "  FAIL  A.4.1 (expected exit 0 + stderr 'disabled placeholder color', got exit $EXIT)"
-  echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
-  FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - A.4.1"
-fi
+expect_exit "A.4.1 placeholder:text-fg-muted no override → governance context" 0 "disabled placeholder color"
 
 # 13. placeholder + disabled override → pass(stderr 不該 fire)
 run_hook "/r/packages/design-system/src/components/Custom/custom.tsx" '
 const cls = "placeholder:text-fg-muted disabled:placeholder:text-fg-disabled"
 '
-if [ "$EXIT" = "0" ] && ! echo "$STDERR_TEXT" | grep -q "disabled placeholder color"; then
+if [ "$EXIT" = "0" ] && [ -z "$STDOUT_TEXT" ] && [ -z "$STDERR_TEXT" ]; then
   echo "  PASS  A.4.2 placeholder + disabled override → silent pass"
   PASS=$((PASS+1))
 else
@@ -166,7 +208,7 @@ run_hook "/r/packages/design-system/src/components/Custom/custom.tsx" '
 // @disabled-color-allow: caption text intentionally muted across modes
 const cls = "placeholder:text-fg-muted"
 '
-if [ "$EXIT" = "0" ] && ! echo "$STDERR_TEXT" | grep -q "disabled placeholder color"; then
+if [ "$EXIT" = "0" ] && [ -z "$STDOUT_TEXT" ] && [ -z "$STDERR_TEXT" ]; then
   echo "  PASS  A.4.3 allowlist → silent pass"
   PASS=$((PASS+1))
 else
@@ -174,6 +216,29 @@ else
   FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - A.4.3"
 fi
 
+echo ""
+echo "=== A.6 空值顯示 SSOT(2026-07-08 半形 hyphen)==="
+
+# 17. 非 owner import EMPTY_DISPLAY → BLOCK(應消費 useFieldEmptyDisplay hook 分流)
+run_hook "/r/packages/design-system/src/components/Bad/bad.tsx" "import { EMPTY_DISPLAY } from '@/design-system/components/Field/field-wrapper'"
+expect_exit "A.6.1 非 owner import EMPTY_DISPLAY → BLOCK" 2 "EMPTY_DISPLAY 直引"
+
+# 18. owner field-context.ts import EMPTY_DISPLAY → pass(SSOT owner skip)
+run_hook "/r/packages/design-system/src/components/Field/field-context.ts" "import { EMPTY_DISPLAY } from './field-wrapper'"
+expect_exit "A.6.1 owner field-context.ts import → pass" 0
+
+# 19. components tsx hardcode 全形 em dash '—' → BLOCK
+run_hook "/r/packages/design-system/src/components/Bad/bad.tsx" "const cls = value ?? '—'"
+expect_exit "A.6.2 hardcode 全形 em dash → BLOCK" 2 "全形 em dash"
+
+# 20. 半形 hyphen '-' → pass(非全形,不觸發)
+run_hook "/r/packages/design-system/src/components/Bad/bad.tsx" "const sep = '-'"
+expect_exit "A.6.2 半形 hyphen → pass" 0
+
+# 21. allowlist → pass
+run_hook "/r/packages/design-system/src/components/Bad/bad.tsx" "const cls = value ?? '—' // @empty-display-allow: legacy N/A marker"
+expect_exit "A.6 allowlist → pass" 0
+
 echo ""
 echo "=== Skip cases ==="
 
@@ -185,6 +250,31 @@ expect_exit "S.1 non-tsx → skip" 0
 run_hook "/r/packages/design-system/src/components/Foo.tsx" 'irrelevant' Read
 expect_exit "S.2 non-edit tool → skip" 0
 
+echo ""
+echo "=== Output contract ==="
+
+run_hook "/r/packages/design-system/src/components/Filter/filter.tsx" '
+const cls = "placeholder:text-fg-muted"
+function F() { return (
+  <FieldControlGroup>
+    <div><FilterValuePicker /></div>
+  </FieldControlGroup>
+)}
+'
+if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ] \
+  && is_exact_context "FieldControlGroup wrapper" \
+  && printf '%s' "$STDOUT_TEXT" | jq -e \
+    '.governanceContext.message | contains("disabled placeholder color")' >/dev/null; then
+  echo "  PASS  O.1 A.2+A.4 warnings → one exact PreToolUse context"
+  PASS=$((PASS+1))
+else
+  echo "  FAIL  O.1 warning aggregation contract"
+  FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - O.1 warning aggregation"
+fi
+
+run_raw '{'
+expect_exit "O.2 malformed input → stderr-only integrity failure" 70 "GOVERNANCE_INTEGRITY:"
+
 echo ""
 echo "═══ Results: $PASS PASS, $FAIL FAIL ═══"
 if [ "$FAIL" -gt 0 ]; then

package/ds-canonical/hooks/tests/test_check_file_size_budget.sh

@@ -7,6 +7,9 @@ HOOK="$SCRIPT_DIR/../check_file_size_budget.sh"
 [ -x "$HOOK" ] || { echo "FATAL: hook not executable"; exit 1; }
 
 PASS=0; FAIL=0
+PROJECT_ROOT=$(git -C "$SCRIPT_DIR" rev-parse --show-toplevel)
+TMP_PROJECT=$(mktemp -d)
+trap 'rm -rf "$TMP_PROJECT"' EXIT
 
 run_hook() {
   local content="$1"
@@ -14,19 +17,78 @@ run_hook() {
   local payload
   payload=$(jq -n --arg fp "$file_path" --arg ct "$content" \
     '{tool_name:"Write", tool_input:{file_path:$fp, content:$ct}}')
-  STDOUT=$(echo "$payload" | bash "$HOOK" 2>&1)
+  STDOUT=$(echo "$payload" | GOVERNANCE_PROJECT_DIR="$TMP_PROJECT" \
+    GOVERNANCE_CORPUS_ROOT="${TEST_CORPUS:-$PROJECT_ROOT}" \
+    GOVERNANCE_PROVIDER_REGISTRY="${TEST_REGISTRY:-packages/governance/canonical/providers.json}" \
+    GOVERNANCE_PROVIDER="${TEST_PROVIDER:-codex}" GOVERNANCE_READ_ONLY=1 bash "$HOOK" 2>&1)
   EXIT=$?
 }
 
 # Test 1: small file → silent
-echo "Test 1: small CLAUDE.md → silent pass"
-run_hook "$(yes 'x' | head -100)" "/tmp/test-CLAUDE.md"
-if [ "$EXIT" = "0" ]; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL ($EXIT, $STDOUT)"; FAIL=$((FAIL+1)); fi
+echo "Test 1: small registry-declared instruction entry → silent pass"
+yes 'x' | head -100 > "$TMP_PROJECT/AGENTS.md"
+run_hook "" "$TMP_PROJECT/AGENTS.md"
+if [ "$EXIT" = "0" ] && [ -z "$STDOUT" ]; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL ($EXIT, $STDOUT)"; FAIL=$((FAIL+1)); fi
 
 # Test 2: irrelevant file → silent
 echo "Test 2: non-governance file → silent skip"
-run_hook "$(yes 'x' | head -2000)" "/tmp/test.tsx"
+yes 'x' | head -2000 > "$TMP_PROJECT/test.tsx"
+run_hook "" "$TMP_PROJECT/test.tsx"
+if [ "$EXIT" = "0" ] && [ -z "$STDOUT" ]; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL ($EXIT, $STDOUT)"; FAIL=$((FAIL+1)); fi
+
+# Test 3:Codex provider skill entry is matched from registry.
+echo "Test 3: registry-declared Codex skill path → warning"
+mkdir -p "$TMP_PROJECT/.agents/skills/demo"
+yes 'x' | head -300 > "$TMP_PROJECT/.agents/skills/demo/SKILL.md"
+run_hook "" "$TMP_PROJECT/.agents/skills/demo/SKILL.md"
+if [ "$EXIT" = "0" ] && echo "$STDOUT" | grep -q 'provider skill entry'; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL ($EXIT, $STDOUT)"; FAIL=$((FAIL+1)); fi
+
+# Test 4:poisoned Claude generated home must not affect Codex matcher.
+echo "Test 4: poisoned .claude skill path is irrelevant to Codex"
+mkdir -p "$TMP_PROJECT/.claude/skills/poison"
+yes 'x' | head -500 > "$TMP_PROJECT/.claude/skills/poison/SKILL.md"
+run_hook "" "$TMP_PROJECT/.claude/skills/poison/SKILL.md"
 if [ "$EXIT" = "0" ] && [ -z "$STDOUT" ]; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL ($EXIT, $STDOUT)"; FAIL=$((FAIL+1)); fi
 
+# Test 5:a future provider with WORKFLOW.md is accepted by fixture data only.
+echo "Test 5: future-provider skill entry filename comes from materializer registry"
+FIXTURE_CORPUS="$TMP_PROJECT/corpus"
+mkdir -p "$FIXTURE_CORPUS" "$TMP_PROJECT/.orion/workflows/demo"
+cat > "$FIXTURE_CORPUS/providers.json" <<'EOF'
+{
+  "canonical": {
+    "roots":{"skills":"canonical/skills"},
+    "materializers":{"skillViews":{"markdown-workflows-directory-v1":{"entryFile":"WORKFLOW.md"}}}
+  },
+  "providers":[{
+    "id":"orion","instructionEntry":"ORION.md","sharedInstructionEntry":"AGENTS.md",
+    "skillDirectory":".orion/workflows",
+    "adapter":{"skillView":{"materializerId":"markdown-workflows-directory-v1"}}
+  }]
+}
+EOF
+yes 'x' | head -300 > "$TMP_PROJECT/.orion/workflows/demo/WORKFLOW.md"
+TEST_CORPUS="$FIXTURE_CORPUS" TEST_REGISTRY=providers.json TEST_PROVIDER=orion \
+  run_hook "" "$TMP_PROJECT/.orion/workflows/demo/WORKFLOW.md"
+if [ "$EXIT" = "0" ] && echo "$STDOUT" | grep -q 'WORKFLOW.md'; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL ($EXIT, $STDOUT)"; FAIL=$((FAIL+1)); fi
+
+# Test 6:a provider without a skill materializer still receives instruction budgets.
+echo "Test 6: optional provider capability does not disable shared instruction enforcement"
+NOSKILL_CORPUS="$TMP_PROJECT/no-skill-corpus"
+mkdir -p "$NOSKILL_CORPUS"
+cat > "$NOSKILL_CORPUS/providers.json" <<'EOF'
+{
+  "canonical":{"roots":{"skills":"canonical/skills"}},
+  "providers":[{
+    "id":"orion","instructionEntry":"ORION.md","sharedInstructionEntry":"AGENTS.md",
+    "skillDirectory":".orion/workflows","adapter":{}
+  }]
+}
+EOF
+yes 'x' | head -500 > "$TMP_PROJECT/ORION.md"
+TEST_CORPUS="$NOSKILL_CORPUS" TEST_REGISTRY=providers.json TEST_PROVIDER=orion \
+  run_hook "" "$TMP_PROJECT/ORION.md"
+if [ "$EXIT" = "0" ] && echo "$STDOUT" | grep -q 'instruction entry'; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL ($EXIT, $STDOUT)"; FAIL=$((FAIL+1)); fi
+
 echo "Results: $PASS PASS, $FAIL FAIL"
 [ "$FAIL" -eq 0 ] || exit 1

package/ds-canonical/hooks/tests/test_check_fork_user_plugin_install.sh

@@ -0,0 +1,151 @@
+#!/bin/bash
+# 2026-06-11 repoint:check_fork_user_plugin_install.sh 已合併進 check_plugin_fork_health.sh(prune merge;測試 payload 不變 = 行為等價驗證)
+# Tests for check_plugin_fork_health.sh — SessionStart enforce fork-user repo install plugin.
+
+set -u
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_plugin_fork_health.sh"
+[ ! -f "$HOOK" ] && { echo "FATAL: hook not found"; exit 1; }
+PASS=0; FAIL=0; FAILED=""
+
+# Test 1:DS repo(有 packages/design-system/src)→ silent
+echo "Test 1: DS repo skip"
+TMP=$(mktemp -d); mkdir -p "$TMP/packages/design-system/src"
+echo '{"@qijenchen/design-system":"^1"}' > "$TMP/package.json"
+STDOUT=$(cd "$TMP" && echo '{"hook_event_name":"SessionStart"}' | GOVERNANCE_PROJECT_DIR="$TMP" GOVERNANCE_PROVIDER=claude bash "$HOOK")
+if [ -z "$STDOUT" ]; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL: unexpected output"; FAIL=$((FAIL+1)); fi
+rm -rf "$TMP"
+
+# Test 2:non-DS repo + 無 DS dep → silent
+echo "Test 2: non-DS repo without DS dep"
+TMP=$(mktemp -d); echo '{"react":"^18"}' > "$TMP/package.json"
+STDOUT=$(cd "$TMP" && echo '{"hook_event_name":"SessionStart"}' | GOVERNANCE_PROJECT_DIR="$TMP" GOVERNANCE_PROVIDER=claude bash "$HOOK")
+if [ -z "$STDOUT" ]; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL: unexpected output"; FAIL=$((FAIL+1)); fi
+rm -rf "$TMP"
+
+# Test 3:non-DS + 含 DS dep + plugin 未裝 → context inject
+echo "Test 3: fork-user without plugin → inject"
+TMP=$(mktemp -d); echo '{"dependencies":{"@qijenchen/design-system":"^1"}}' > "$TMP/package.json"
+# Override HOME/CWD so plugin install detect 一定 fail
+STDOUT=$(cd "$TMP" && echo '{"hook_event_name":"SessionStart"}' | HOME="$TMP/empty-home" GOVERNANCE_PROJECT_DIR="$TMP" GOVERNANCE_PROVIDER=claude bash "$HOOK")
+# 2026-07-07 修 stale needle:hook 訊息 2026-06 演進為「Fork-user DS 治理鏈未就位」,
+# 舊 needle「Fork-user plugin not installed」永 FAIL(main 既存紅;hook 行為本身正確)。
+if echo "$STDOUT" | grep -q "Fork-user DS 治理鏈未就位"; then
+  echo "  PASS"; PASS=$((PASS+1))
+else
+  echo "  FAIL: no inject (output: ${STDOUT:0:200})"; FAIL=$((FAIL+1))
+fi
+rm -rf "$TMP"
+
+# Test 4:non-SessionStart event → silent
+echo "Test 4: non-SessionStart event skip"
+STDOUT=$(echo '{"hook_event_name":"PreToolUse"}' | GOVERNANCE_PROVIDER=claude bash "$HOOK")
+if [ -z "$STDOUT" ]; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL"; FAIL=$((FAIL+1)); fi
+
+# Test 5:Codex 不讀 Claude HOME;poisoned ~/.claude 不得讓缺 runtime 的 consumer 誤判健康。
+echo "Test 5: Codex outcome is invariant to poisoned Claude HOME"
+TMP=$(mktemp -d)
+mkdir -p "$TMP/home"
+echo '{"dependencies":{"@qijenchen/design-system":"^1"}}' > "$TMP/package.json"
+BASELINE=$(cd "$TMP" && echo '{"hook_event_name":"SessionStart"}' | \
+  HOME="$TMP/home" GOVERNANCE_PROJECT_DIR="$TMP" GOVERNANCE_PROVIDER=codex bash "$HOOK")
+mkdir -p \
+  "$TMP/home/.claude/plugins/marketplaces/qijenchen-ds" \
+  "$TMP/home/.claude/plugins/design-system" \
+  "$TMP/home/.claude/plugins/design-system@qijenchen-ds" \
+  "$TMP/home/.claude/plugins/cache/design-system" \
+  "$TMP/.claude/plugins/design-system" \
+  "$TMP/bin"
+printf '{"qijenchen-ds":{}}\n' > "$TMP/home/.claude/plugins/known_marketplaces.json"
+printf '{"version":"0.0.0-poison"}\n' > "$TMP/home/.claude/plugins/design-system@qijenchen-ds/plugin.json"
+printf '{"version":"0.0.0-poison"}\n' > "$TMP/home/.claude/plugins/cache/design-system/plugin.json"
+printf '#!/bin/sh\n: > "$CURL_MARKER"\n' > "$TMP/bin/curl"
+chmod +x "$TMP/bin/curl"
+CURL_MARKER="$TMP/curl-called"
+POISONED=$(cd "$TMP" && echo '{"hook_event_name":"SessionStart"}' | \
+  HOME="$TMP/home" PATH="$TMP/bin:$PATH" CURL_MARKER="$CURL_MARKER" \
+  GOVERNANCE_PROJECT_DIR="$TMP" GOVERNANCE_PROVIDER=codex bash "$HOOK")
+CODEX_CALLED_CLAUDE_PROBE=0
+[ -e "$CURL_MARKER" ] && CODEX_CALLED_CLAUDE_PROBE=1
+CLAUDE_COMPAT=$(cd "$TMP" && echo '{"hook_event_name":"SessionStart"}' | \
+  HOME="$TMP/home" PATH="$TMP/bin:$PATH" CURL_MARKER="$CURL_MARKER" \
+  GOVERNANCE_PROJECT_DIR="$TMP" GOVERNANCE_PROVIDER=claude bash "$HOOK")
+if [ "$BASELINE" = "$POISONED" ] && echo "$POISONED" | grep -q "Fork-user DS 治理鏈未就位" \
+  && [ "$CODEX_CALLED_CLAUDE_PROBE" = "0" ] \
+  && echo "$CLAUDE_COMPAT" | grep -q "Fork-user DS 治理鏈未就位" \
+  && [ -e "$CURL_MARKER" ]; then
+  echo "  PASS"; PASS=$((PASS+1))
+else
+  echo "  FAIL: Codex read Claude-only compatibility state"; FAIL=$((FAIL+1))
+fi
+rm -rf "$TMP"
+
+# Test 6:A future provider is admitted by registry data and follows the neutral npm path.
+echo "Test 6: future provider is registry-driven and ignores Claude plugin state"
+TMP=$(mktemp -d)
+mkdir -p "$TMP/home/.claude/plugins/design-system" "$TMP/corpus"
+echo '{"dependencies":{"@qijenchen/design-system":"^1"}}' > "$TMP/package.json"
+cat > "$TMP/corpus/providers.json" <<'EOF'
+{"providers":[{"id":"orion","instructionEntry":"ORION.md"}]}
+EOF
+STDOUT=$(cd "$TMP" && echo '{"hook_event_name":"SessionStart"}' | HOME="$TMP/home" \
+  GOVERNANCE_PROJECT_DIR="$TMP" GOVERNANCE_CORPUS_ROOT="$TMP/corpus" GOVERNANCE_PROVIDER_REGISTRY=providers.json \
+  GOVERNANCE_PROVIDER=orion bash "$HOOK")
+if echo "$STDOUT" | grep -q "Fork-user DS 治理鏈未就位"; then
+  echo "  PASS"; PASS=$((PASS+1))
+else
+  echo "  FAIL: future provider was coupled to Claude plugin state"; FAIL=$((FAIL+1))
+fi
+rm -rf "$TMP"
+
+# Test 7:The normalized project root, not the shell's incidental cwd, owns consumer detection.
+echo "Test 7: project-root semantics are invariant to cwd"
+TMP=$(mktemp -d)
+mkdir -p "$TMP/project" "$TMP/incidental-cwd" "$TMP/home"
+echo '{"dependencies":{"@qijenchen/design-system":"^1"}}' > "$TMP/project/package.json"
+PROJECT_REAL=$(cd "$TMP/project" && pwd -P)
+STDOUT=$(cd "$TMP/incidental-cwd" && echo '{"hook_event_name":"SessionStart"}' | \
+  HOME="$TMP/home" GOVERNANCE_PROJECT_DIR="$TMP/project" GOVERNANCE_PROVIDER=codex bash "$HOOK")
+if echo "$STDOUT" | grep -q "Fork-user DS 治理鏈未就位" \
+  && echo "$STDOUT" | grep -Fq "cwd = $PROJECT_REAL"; then
+  echo "  PASS"; PASS=$((PASS+1))
+else
+  echo "  FAIL: hook mixed cwd with canonical project root"; FAIL=$((FAIL+1))
+fi
+rm -rf "$TMP"
+
+echo "Test 8: exact-version setup guidance never falls back to a mutable tag"
+TMP=$(mktemp -d)
+mkdir -p "$TMP/governance/bin" "$TMP/home"
+printf '%s\n' '{"dependencies":{"@qijenchen/design-system":"1.2.3"},"scripts":{"setup:all":"node scripts/setup-workspace.mjs","setup:governance":"node scripts/setup-governance.mjs"}}' > "$TMP/package.json"
+: > "$TMP/governance/bin/fork-governance-dispatcher.sh"
+STDOUT=$(cd "$TMP" && echo '{"hook_event_name":"SessionStart"}' | \
+  HOME="$TMP/home" GOVERNANCE_PROJECT_DIR="$TMP" GOVERNANCE_PROVIDER=claude bash "$HOOK")
+if echo "$STDOUT" | grep -q "npm run setup:all" \
+  && ! echo "$STDOUT" | grep -Eq '@beta|npm install @qijenchen/.+@' \
+  && ! grep -Eq '@beta|npm install @qijenchen/.+@' "$HOOK"; then
+  echo "  PASS"; PASS=$((PASS+1))
+else
+  echo "  FAIL: guidance was not exact-version setup only"; FAIL=$((FAIL+1))
+fi
+rm -rf "$TMP"
+
+echo "Test 9: pre-setup:all consumers retain an exact legacy fallback"
+TMP=$(mktemp -d)
+mkdir -p "$TMP/governance/bin" "$TMP/home"
+printf '%s\n' '{"dependencies":{"@qijenchen/design-system":"1.2.3"},"scripts":{"setup:governance":"node scripts/setup-governance.mjs"}}' > "$TMP/package.json"
+: > "$TMP/governance/bin/fork-governance-dispatcher.sh"
+STDOUT=$(cd "$TMP" && echo '{"hook_event_name":"SessionStart"}' | \
+  HOME="$TMP/home" GOVERNANCE_PROJECT_DIR="$TMP" GOVERNANCE_PROVIDER=claude bash "$HOOK")
+if echo "$STDOUT" | grep -q "npm run setup:governance" \
+  && echo "$STDOUT" | grep -q "legacy consumer fallback"; then
+  echo "  PASS"; PASS=$((PASS+1))
+else
+  echo "  FAIL: legacy exact-version setup fallback disappeared"; FAIL=$((FAIL+1))
+fi
+rm -rf "$TMP"
+
+echo ""
+echo "════ Results: $PASS PASS, $FAIL FAIL ════"
+[ "$FAIL" -gt 0 ] && exit 1
+exit 0

package/ds-canonical/hooks/tests/test_check_full_story_visual_interaction_sweep.sh

@@ -0,0 +1,200 @@
+#!/bin/bash
+# Tests for check_full_story_visual_interaction_sweep.sh(P0 BLOCKER,codex M31 2026-05-27)
+#
+# Hook 規則(PreToolUse,Write|Edit|MultiEdit):
+#   - File gate:tool_input.file_path 必 match `(sweep|audit-report)\.json$`,否則 silent。
+#   - Content 必為 schema-valid report JSON；空/壞 JSON → integrity 70。
+#   - Escape:valid report 的 `_sampling_allowed` 非空 rationale → silent。
+#   - Story count:`.storyResults // .results | length`,fallback `.storySummary.total // .summary.total // .total`。
+#   - Manifest:$GOVERNANCE_PROJECT_DIR/packages/design-system/ds-story-manifest.json .totalStories。
+#       manifest 不存在 / malformed / total=0 → integrity 70。STORY_COUNT=0 → policy block 2。
+#   - BLOCKER:STORY_COUNT < MANIFEST_TOTAL → exit 2 + stderr「FULL-STORY-SWEEP BLOCKER」。
+#   - STORY_COUNT >= MANIFEST_TOTAL → silent(全跑通過)。
+#
+# Non-Write/Edit tool / 非 sweep|audit-report 檔名 → silent。
+#
+# Determinism:TMP_DIR + GOVERNANCE_PROJECT_DIR override(manifest fixture totalStories=916),
+# 不碰 repo 真 manifest / 不寫 repo logs。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_full_story_visual_interaction_sweep.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+
+# Override GOVERNANCE_PROJECT_DIR so manifest lookup + _log-fire land in TMP_DIR
+# (不污染 repo packages/ 與 .claude/logs/)
+export GOVERNANCE_PROJECT_DIR="$TMP_DIR"
+mkdir -p "$TMP_DIR/.claude/logs"
+mkdir -p "$TMP_DIR/packages/design-system"
+
+MANIFEST="$TMP_DIR/packages/design-system/ds-story-manifest.json"
+MANIFEST_TOTAL=916
+# Deterministic manifest fixture(mirrors real SSOT totalStories at write time)
+jq -n --argjson t "$MANIFEST_TOTAL" '{totalStories:$t}' > "$MANIFEST"
+
+# run_hook: feed Write/Edit JSON payload via stdin.
+#   $1 = file_path
+#   $2 = content (goes into tool_input.content)
+#   $3 = tool_name (default Write)
+#   $4 = use_new_string ("1" → put $2 into tool_input.new_string instead of content)
+run_hook() {
+  local file_path="$1"; local content="$2"
+  local tool="${3:-Write}"; local use_new_string="${4:-0}"
+  local payload
+  if [ "$use_new_string" = "1" ]; then
+    payload=$(jq -n --arg fp "$file_path" --arg c "$content" --arg tn "$tool" \
+      '{hook_event_name:"PreToolUse", tool_name:$tn, tool_input:{file_path:$fp, new_string:$c}}')
+  else
+    payload=$(jq -n --arg fp "$file_path" --arg c "$content" --arg tn "$tool" \
+      '{hook_event_name:"PreToolUse", tool_name:$tn, tool_input:{file_path:$fp, content:$c}}')
+  fi
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent, exit=$EXIT, stderr=$([ -n "$STDERR_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_block() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected BLOCK exit=2 + '$needle', got exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_integrity() {
+  local name="$1"; local needle="${2:-GOVERNANCE_INTEGRITY:}"
+  if [ "$EXIT" = "70" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected integrity exit=70 + '$needle', got exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+# Build a sampled audit-report content (storyResults array of N entries)
+sampled_results() {
+  local n="$1"
+  jq -n --argjson n "$n" '{storyResults:[range(0;$n)|{id:("s"+(.|tostring)), pass:true}]}'
+}
+
+echo "=== check_full_story_visual_interaction_sweep tests ==="
+
+# ── POSITIVE cases(SHOULD BLOCK)──────────────────────────────────
+
+# 1. POSITIVE: audit-report.json with 900 < 916 stories → BLOCK
+run_hook "/tmp/codex-2026-sweep/audit-report.json" "$(sampled_results 900)"
+expect_block "1. [POS] audit-report.json sampled 900<916 → BLOCK" "FULL-STORY-SWEEP BLOCKER"
+
+# 2. POSITIVE: filename ending *-sweep.json (the OTHER regex branch) → BLOCK
+#    Guards the file-gate regex breadth: both `sweep` and `audit-report` must fire.
+run_hook "/tmp/claude-visual-sweep.json" "$(sampled_results 1)"
+expect_block "2. [POS] *-sweep.json sampled 1<916 → BLOCK (file-gate breadth)" "FULL-STORY-SWEEP BLOCKER"
+
+# 3. POSITIVE (near-complete, M34 over-narrow guard): 915 < 916 by one story → BLOCK
+#    Guards against a hook that only fires on grossly-undersampled reports.
+run_hook "/tmp/codex-sweep/audit-report.json" "$(sampled_results 915)"
+expect_block "3. [POS] off-by-one 915<916 → BLOCK (no slack)" "FULL-STORY-SWEEP BLOCKER"
+
+# 4. POSITIVE via fallback field: summary.total=500 (no storyResults) → BLOCK
+run_hook "/tmp/x-sweep.json" '{"summary":{"total":500}}'
+expect_block "4. [POS] fallback summary.total=500<916 → BLOCK" "FULL-STORY-SWEEP BLOCKER"
+
+# 5. POSITIVE via Edit tool + new_string field → BLOCK
+run_hook ".claude/snapshots/visual-audit-report.json" "$(sampled_results 100)" "Edit" "1"
+expect_block "5. [POS] Edit new_string sampled 100<916 → BLOCK" "FULL-STORY-SWEEP BLOCKER"
+
+# ── NEGATIVE cases(should NOT block)──────────────────────────────
+
+# 6. NEGATIVE: full sweep storyResults == 916 → silent
+run_hook "/tmp/codex-2026-sweep/audit-report.json" "$(sampled_results 916)"
+expect_pass_silent "6. [NEG] full 916==916 → silent (complete sweep passes)"
+
+# 7. NEGATIVE: over-count 920 >= 916 → silent (hook uses < not !=)
+run_hook "/tmp/codex-2026-sweep/audit-report.json" "$(sampled_results 920)"
+expect_pass_silent "7. [NEG] 920>=916 → silent"
+
+# 8. NEGATIVE escape: sampled but `_sampling_allowed` rationale present → silent
+run_hook "/tmp/codex-sweep/audit-report.json" \
+  '{"_sampling_allowed":"smoke test only","storyResults":[{"id":"s0"}]}'
+expect_pass_silent "8. [NEG] _sampling_allowed escape → silent"
+
+# 9. NEGATIVE near-miss filename (M34 over-broad guard):
+#    "sweeper-config.json" / "audit-reporter.json" do NOT end in (sweep|audit-report).json
+run_hook "/tmp/sweeper-config.json" "$(sampled_results 1)"
+expect_pass_silent "9. [NEG] sweeper-config.json (not *sweep.json) → silent (regex not over-broad)"
+
+# 10. NEGATIVE near-miss filename: audit-reporter.json (suffix, not audit-report.json)
+run_hook "/tmp/audit-reporter.json" "$(sampled_results 1)"
+expect_pass_silent "10. [NEG] audit-reporter.json → silent (regex anchored, not over-broad)"
+
+# 11. NEGATIVE: unrelated .json file (regular config) → silent
+run_hook "/tmp/some-component-data.json" "$(sampled_results 1)"
+expect_pass_silent "11. [NEG] unrelated *.json → silent (file gate)"
+
+# 12. NEGATIVE: non-Write/Edit tool (Read) on a sweep file → silent
+run_hook "/tmp/codex-sweep/audit-report.json" "$(sampled_results 1)" "Read"
+expect_pass_silent "12. [NEG] tool=Read → silent (event gate)"
+
+# 13. A schema-valid audit report with no coverage is a real policy violation.
+run_hook "/tmp/codex-sweep/audit-report.json" '{"meta":{"note":"warmup"}}'
+expect_block "13. [POS] valid report with count=0 → BLOCK" "FULL-STORY-SWEEP BLOCKER"
+
+# 14. Empty report content is invalid enforcement evidence.
+run_hook "/tmp/codex-sweep/audit-report.json" ""
+expect_integrity "14. empty report → integrity failure" "report is malformed or invalid"
+
+# 15. Missing manifest means the hook cannot evaluate completeness.
+#     Temporarily point at a project dir without a manifest.
+NOMANIFEST_DIR=$(mktemp -d)
+mkdir -p "$NOMANIFEST_DIR/.claude/logs"
+payload=$(jq -n --arg fp "/tmp/codex-sweep/audit-report.json" --arg c "$(sampled_results 10)" \
+  '{hook_event_name:"PreToolUse", tool_name:"Write", tool_input:{file_path:$fp, content:$c}}')
+STDOUT=$(mktemp); STDERR=$(mktemp)
+set +e
+printf '%s' "$payload" | GOVERNANCE_PROJECT_DIR="$NOMANIFEST_DIR" bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+EXIT=$?
+set -e
+STDERR_TEXT=$(cat "$STDERR")
+rm -f "$STDOUT" "$STDERR"
+expect_integrity "15. manifest missing → integrity failure" "manifest is unavailable or unsafe"
+rm -rf "$NOMANIFEST_DIR"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  printf "Failed:%b\n" "$FAILED_TESTS"
+  exit 1
+fi
+exit 0