@qijenchen/design-system 0.1.0-beta.13 → 0.1.0-beta.131

package/ds-canonical/hooks/tests/test_hook_integrity_classification.sh

@@ -0,0 +1,217 @@
+#!/usr/bin/env bash
+# Targeted regression coverage for the reserved infrastructure result:
+# policy violations stay exit 2; malformed transport, unreadable authority, and parser faults use
+# stderr marker GOVERNANCE_INTEGRITY plus exit 70.
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK_DIR="$SCRIPT_DIR/.."
+REPO_ROOT=$(git -C "$SCRIPT_DIR" rev-parse --show-toplevel)
+TMP_ROOT=$(mktemp -d)
+trap 'rm -rf "$TMP_ROOT"' EXIT
+
+PASS=0
+FAIL=0
+
+expect_integrity() {
+  local name="$1" payload="$2"
+  shift 2
+  local stdout_file stderr_file rc stderr_text
+  stdout_file=$(mktemp)
+  stderr_file=$(mktemp)
+  set +e
+  printf '%s' "$payload" | "$@" >"$stdout_file" 2>"$stderr_file"
+  rc=$?
+  set -e
+  stderr_text=$(cat "$stderr_file")
+  if [ "$rc" -eq 70 ] && [ ! -s "$stdout_file" ] \
+    && printf '%s' "$stderr_text" | grep -qF 'GOVERNANCE_INTEGRITY:'; then
+    printf '  PASS  %s\n' "$name"
+    PASS=$((PASS + 1))
+  else
+    printf '  FAIL  %s (rc=%s)\n' "$name" "$rc"
+    printf '%s\n' "$stderr_text" | sed 's/^/    /'
+    FAIL=$((FAIL + 1))
+  fi
+  rm -f "$stdout_file" "$stderr_file"
+}
+
+expect_silent() {
+  local name="$1" payload="$2"
+  shift 2
+  local stdout_file stderr_file rc
+  stdout_file=$(mktemp)
+  stderr_file=$(mktemp)
+  set +e
+  printf '%s' "$payload" | "$@" >"$stdout_file" 2>"$stderr_file"
+  rc=$?
+  set -e
+  if [ "$rc" -eq 0 ] && [ ! -s "$stdout_file" ] && [ ! -s "$stderr_file" ]; then
+    printf '  PASS  %s\n' "$name"
+    PASS=$((PASS + 1))
+  else
+    printf '  FAIL  %s (rc=%s)\n' "$name" "$rc"
+    sed 's/^/    stdout: /' "$stdout_file"
+    sed 's/^/    stderr: /' "$stderr_file"
+    FAIL=$((FAIL + 1))
+  fi
+  rm -f "$stdout_file" "$stderr_file"
+}
+
+echo '=== malformed canonical input envelopes ==='
+for hook_name in \
+  check_dynamic_tailwind_class.sh \
+  check_substantive_edit_approval_preflight.sh \
+  check_chrome_header_avatar_canonical.sh \
+  check_sidebar_menu_button_implicit_wrap.sh \
+  check_ds_anchor_preflight.sh \
+  check_field_family_invariants.sh \
+  check_story_invariants.sh \
+  check_opacity_token_usage.sh \
+  check_full_story_visual_interaction_sweep.sh \
+  check_overlay_open_focus_escape_probe.sh \
+  check_escape_marker_abuse.sh \
+  check_tailwind_wildcard_in_docs.sh \
+  check_consumer_code_quality.sh \
+  check_layout_space_magic_numbers.sh \
+  check_tabs_content_chrome_body_double_gap.sh
+do
+  expect_integrity "$hook_name malformed JSON → 70" '{' \
+    env GOVERNANCE_PROJECT_DIR="$REPO_ROOT" bash "$HOOK_DIR/$hook_name"
+done
+expect_integrity 'block_prototype_imports malformed JSON → 70' '{' \
+  env GOVERNANCE_PROJECT_DIR="$REPO_ROOT" python3 "$HOOK_DIR/block_prototype_imports.py"
+expect_integrity 'multiple JSON documents are not one envelope → 70' $'{}\n{}' \
+  env GOVERNANCE_PROJECT_DIR="$REPO_ROOT" bash "$HOOK_DIR/check_dynamic_tailwind_class.sh"
+expect_integrity 'NUL-bearing strings are rejected before shell extraction → 70' \
+  '{"tool_name":"Write","tool_input":{"file_path":"apps/demo/src/App.tsx\u0000escape"}}' \
+  env GOVERNANCE_PROJECT_DIR="$REPO_ROOT" bash "$HOOK_DIR/check_dynamic_tailwind_class.sh"
+
+POISON_BIN="$TMP_ROOT/poison-bin"
+mkdir -p "$POISON_BIN"
+printf '#!/bin/sh\nexit 2\n' > "$POISON_BIN/grep"
+chmod +x "$POISON_BIN/grep"
+LAYOUT_POISON_PAYLOAD=$(jq -nc \
+  '{hook_event_name:"PostToolUse",tool_name:"Write",tool_input:{file_path:"apps/demo/src/App.tsx",content:"<div className=\"p-4\" />"}}')
+expect_integrity 'layout matcher command failure → 70' "$LAYOUT_POISON_PAYLOAD" \
+  env PATH="$POISON_BIN:$PATH" GOVERNANCE_PROJECT_DIR="$REPO_ROOT" \
+  bash "$HOOK_DIR/check_layout_space_magic_numbers.sh"
+TABS_POISON_PAYLOAD=$(jq -nc \
+  '{hook_event_name:"PostToolUse",tool_name:"Edit",tool_input:{file_path:"apps/demo/src/App.tsx"}}')
+expect_integrity 'tabs matcher command failure → 70' "$TABS_POISON_PAYLOAD" \
+  env PATH="$POISON_BIN:$PATH" GOVERNANCE_PROJECT_DIR="$REPO_ROOT" \
+  bash "$HOOK_DIR/check_tabs_content_chrome_body_double_gap.sh"
+
+echo '=== authority, transcript, report, and read failures ==='
+FIELD_REAL="$TMP_ROOT/field-real.tsx"
+FIELD_LINK="$TMP_ROOT/field-link.tsx"
+printf 'export const x = 1\n' > "$FIELD_REAL"
+ln -s "$FIELD_REAL" "$FIELD_LINK"
+FIELD_PAYLOAD=$(jq -nc --arg p "$FIELD_LINK" \
+  '{hook_event_name:"PreToolUse",tool_name:"Write",tool_input:{file_path:$p,content:"export const x = 2"}}')
+expect_integrity 'field-family symlink target → 70' "$FIELD_PAYLOAD" \
+  bash "$HOOK_DIR/check_field_family_invariants.sh"
+
+MALFORMED_TRANSCRIPT="$TMP_ROOT/malformed.jsonl"
+printf '{broken\n' > "$MALFORMED_TRANSCRIPT"
+ANCHOR_PAYLOAD=$(jq -nc --arg t "$MALFORMED_TRANSCRIPT" \
+  '{hook_event_name:"PreToolUse",tool_name:"Write",transcript_path:$t,tool_input:{file_path:"/repo/apps/demo/src/App.tsx",content:"export const App = () => <Sidebar />"}}')
+expect_integrity 'DS-anchor malformed transcript → 70' "$ANCHOR_PAYLOAD" \
+  env GOVERNANCE_PROJECT_DIR="$REPO_ROOT" bash "$HOOK_DIR/check_ds_anchor_preflight.sh"
+
+APPROVAL_PAYLOAD=$(jq -nc --arg t "$MALFORMED_TRANSCRIPT" \
+  '{hook_event_name:"PreToolUse",tool_name:"Edit",transcript_path:$t,tool_input:{file_path:"packages/design-system/src/components/Button/button.tsx",new_string:"export const x = 1"}}')
+expect_integrity 'approval malformed transcript → 70' "$APPROVAL_PAYLOAD" \
+  env GOVERNANCE_PROJECT_DIR="$REPO_ROOT" bash "$HOOK_DIR/check_substantive_edit_approval_preflight.sh"
+
+MISSING_TABS="$TMP_ROOT/apps/demo/src/Missing.tsx"
+TABS_PAYLOAD=$(jq -nc --arg p "$MISSING_TABS" \
+  '{hook_event_name:"PostToolUse",tool_name:"Edit",tool_input:{file_path:$p}}')
+expect_integrity 'tabs PostToolUse missing target → 70' "$TABS_PAYLOAD" \
+  bash "$HOOK_DIR/check_tabs_content_chrome_body_double_gap.sh"
+
+CORPUS_BAD_TOKEN="$TMP_ROOT/corpus-token"
+mkdir -p "$CORPUS_BAD_TOKEN/packages/design-system/src/tokens"
+printf '{broken\n' > "$CORPUS_BAD_TOKEN/packages/design-system/src/tokens/utility-registry.json"
+TOKEN_PAYLOAD=$(jq -nc \
+  '{hook_event_name:"PreToolUse",tool_name:"Write",tool_input:{file_path:"packages/design-system/src/components/Foo/foo.tsx",content:"className=\"opacity-30\""}}')
+expect_integrity 'malformed canonical utility registry → 70' "$TOKEN_PAYLOAD" \
+  env GOVERNANCE_CORPUS_ROOT="$CORPUS_BAD_TOKEN" GOVERNANCE_PROJECT_DIR="$REPO_ROOT" \
+  bash "$HOOK_DIR/check_opacity_token_usage.sh"
+
+CORPUS_BAD_STORY="$TMP_ROOT/corpus-story"
+mkdir -p "$CORPUS_BAD_STORY/packages/governance/canonical"
+mkdir -p "$CORPUS_BAD_STORY/packages/design-system/ds-canonical/references"
+cp "$REPO_ROOT/packages/governance/canonical/providers.json" \
+  "$CORPUS_BAD_STORY/packages/governance/canonical/providers.json"
+jq '
+  .components.Sidebar.antiPatterns[0].regex = "("
+' "$REPO_ROOT/packages/design-system/ds-canonical/references/story-baseline-registry.json" \
+  > "$CORPUS_BAD_STORY/packages/design-system/ds-canonical/references/story-baseline-registry.json"
+STORY_PAYLOAD=$(jq -nc \
+  '{hook_event_name:"PreToolUse",tool_name:"Write",tool_input:{file_path:"packages/design-system/src/components/AppShell/bad.stories.tsx",content:"// @story-baseline: Sidebar#IconCollapse\nexport const X = () => <Sidebar><SidebarHeader><span>x</span></SidebarHeader></Sidebar>"}}')
+expect_integrity 'R8 invalid registry regex → 70' "$STORY_PAYLOAD" \
+  env GOVERNANCE_CORPUS_ROOT="$CORPUS_BAD_STORY" GOVERNANCE_PROJECT_DIR="$REPO_ROOT" \
+  GOVERNANCE_PROVIDER=codex bash "$HOOK_DIR/check_story_invariants.sh"
+
+CONSUMER_PROJECT="$TMP_ROOT/consumer-project"
+CONSUMER_FILE="$CONSUMER_PROJECT/apps/demo/src/App.tsx"
+mkdir -p "$(dirname "$CONSUMER_FILE")"
+mkdir -p "$CONSUMER_PROJECT/node_modules/@qijenchen/design-system/src/tokens"
+printf 'export const App = () => <div />\n' > "$CONSUMER_FILE"
+printf '{broken\n' \
+  > "$CONSUMER_PROJECT/node_modules/@qijenchen/design-system/src/tokens/utility-registry.json"
+CONSUMER_PAYLOAD=$(jq -nc --arg p "$CONSUMER_FILE" \
+  '{hook_event_name:"PostToolUse",tool_name:"Write",tool_input:{file_path:$p}}')
+expect_silent 'consumer-quality ignores malformed mutable installed registry' "$CONSUMER_PAYLOAD" \
+  env GOVERNANCE_CORPUS_ROOT="$REPO_ROOT" GOVERNANCE_PROJECT_DIR="$CONSUMER_PROJECT" \
+  bash "$HOOK_DIR/check_consumer_code_quality.sh"
+expect_integrity 'consumer-quality malformed authenticated registry → 70' "$CONSUMER_PAYLOAD" \
+  env GOVERNANCE_CORPUS_ROOT="$CORPUS_BAD_TOKEN" GOVERNANCE_PROJECT_DIR="$CONSUMER_PROJECT" \
+  bash "$HOOK_DIR/check_consumer_code_quality.sh"
+
+OUTSIDE_PROJECT="$TMP_ROOT/outside-project"
+BOUNDARY_PROJECT="$TMP_ROOT/boundary-project"
+OUTSIDE_FILE="$OUTSIDE_PROJECT/apps/demo/src/App.tsx"
+mkdir -p "$(dirname "$OUTSIDE_FILE")" "$BOUNDARY_PROJECT"
+printf 'export const bad: any = 1\n' > "$OUTSIDE_FILE"
+OUTSIDE_PAYLOAD=$(jq -nc --arg p "$OUTSIDE_FILE" \
+  '{hook_event_name:"PostToolUse",tool_name:"Write",tool_input:{file_path:$p}}')
+expect_integrity 'consumer-quality outside-project target → 70' "$OUTSIDE_PAYLOAD" \
+  env GOVERNANCE_PROJECT_DIR="$BOUNDARY_PROJECT" bash "$HOOK_DIR/check_consumer_code_quality.sh"
+
+SYMLINK_PROJECT="$TMP_ROOT/symlink-project"
+SYMLINK_OUTSIDE="$TMP_ROOT/symlink-outside"
+mkdir -p "$SYMLINK_PROJECT" "$SYMLINK_OUTSIDE/demo/src"
+printf 'export const x = 1\n' > "$SYMLINK_OUTSIDE/demo/src/App.tsx"
+ln -s "$SYMLINK_OUTSIDE" "$SYMLINK_PROJECT/apps"
+SYMLINK_FILE="$SYMLINK_PROJECT/apps/demo/src/App.tsx"
+FIELD_SYMLINK_PAYLOAD=$(jq -nc --arg p "$SYMLINK_FILE" \
+  '{hook_event_name:"PreToolUse",tool_name:"Write",tool_input:{file_path:$p,content:"export const x = 2"}}')
+expect_integrity 'field-family ancestor symlink target → 70' "$FIELD_SYMLINK_PAYLOAD" \
+  env GOVERNANCE_PROJECT_DIR="$SYMLINK_PROJECT" bash "$HOOK_DIR/check_field_family_invariants.sh"
+TABS_SYMLINK_PAYLOAD=$(jq -nc --arg p "$SYMLINK_FILE" \
+  '{hook_event_name:"PostToolUse",tool_name:"Edit",tool_input:{file_path:$p}}')
+expect_integrity 'tabs-body ancestor symlink target → 70' "$TABS_SYMLINK_PAYLOAD" \
+  env GOVERNANCE_PROJECT_DIR="$SYMLINK_PROJECT" bash "$HOOK_DIR/check_tabs_content_chrome_body_double_gap.sh"
+
+MANIFEST_PROJECT="$TMP_ROOT/manifest-project"
+mkdir -p "$MANIFEST_PROJECT/packages/design-system"
+printf '{}\n' > "$MANIFEST_PROJECT/packages/design-system/ds-story-manifest.json"
+REPORT_PAYLOAD=$(jq -nc \
+  '{hook_event_name:"PreToolUse",tool_name:"Write",tool_input:{file_path:"/tmp/audit-report.json",content:"{\"storyResults\":[]}"}}')
+expect_integrity 'invalid full-story manifest → 70' "$REPORT_PAYLOAD" \
+  env GOVERNANCE_PROJECT_DIR="$MANIFEST_PROJECT" \
+  bash "$HOOK_DIR/check_full_story_visual_interaction_sweep.sh"
+
+NO_APPS_PROJECT="$TMP_ROOT/no-apps-project"
+mkdir -p "$NO_APPS_PROJECT"
+ESCAPE_PAYLOAD=$(jq -nc \
+  '{hook_event_name:"PreToolUse",tool_name:"Write",tool_input:{file_path:"/repo/apps/demo/src/App.tsx",content:"// @ds-misuse-allow: documented exception"}}')
+expect_integrity 'escape-marker unavailable repository scan root → 70' "$ESCAPE_PAYLOAD" \
+  env GOVERNANCE_PROJECT_DIR="$NO_APPS_PROJECT" bash "$HOOK_DIR/check_escape_marker_abuse.sh"
+
+echo
+printf 'Results: %s PASS, %s FAIL\n' "$PASS" "$FAIL"
+[ "$FAIL" -eq 0 ]

package/ds-canonical/hooks/tests/test_inject_deploy_url_after_push.sh

@@ -0,0 +1,276 @@
+#!/bin/bash
+# Tests for inject_deploy_url_after_push.sh
+#
+# 鎖住 2026-06-06 收斂的「只在真推送 + 真 branch 時 relay deploy URL」root invariant,
+# 防 refspec / symbolic-ref / tag / 解析噪音 / 字串提及 等再吐 404 URL 進 context。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../inject_deploy_url_after_push.sh"
+[ -f "$HOOK" ] || { echo "FATAL: hook not found"; exit 1; }
+PROJECT_ROOT=$(git -C "$SCRIPT_DIR" rev-parse --show-toplevel)
+
+PASS=0; FAIL=0; FAILED=""
+
+# 建一個臨時 git repo(branch=feature-test)+ netlify.toml,讓 Detection 2 可達;
+# HOME 指向空 temp 確保無 USER_OVERRIDE(hermetic,不碰真實機 deploy-targets.json)。
+setup() {
+  TMP=$(mktemp -d)
+  mkdir -p "$TMP/home"
+  (
+    cd "$TMP" || exit 1
+    git init -q -b feature-test 2>/dev/null || { git init -q; git checkout -q -b feature-test; }
+    : > netlify.toml
+    git add -A 2>/dev/null
+    GIT_AUTHOR_NAME=t GIT_AUTHOR_EMAIL=t@t GIT_COMMITTER_NAME=t GIT_COMMITTER_EMAIL=t@t \
+      git commit -q -m init 2>/dev/null
+  )
+}
+teardown() { rm -rf "$TMP"; }
+
+# run_hook <command> [event] [tool]
+run_hook() {
+  local cmd="$1" ev="${2:-PostToolUse}" tool="${3:-Bash}" json
+  json=$(printf '{"hook_event_name":"%s","tool_name":"%s","tool_input":{"command":"%s"}}' "$ev" "$tool" "$cmd")
+  STDOUT=$( cd "$TMP" && HOME="$TMP/home" XDG_CONFIG_HOME="$TMP/home/.config" \
+    GOVERNANCE_PROJECT_DIR="$TMP" GOVERNANCE_PROVIDER="${TEST_PROVIDER:-codex}" \
+    GOVERNANCE_CORPUS_ROOT="${TEST_CORPUS:-$PROJECT_ROOT}" \
+    GOVERNANCE_PROVIDER_REGISTRY="${TEST_REGISTRY:-packages/governance/canonical/providers.json}" \
+    GOVERNANCE_READ_ONLY=1 bash "$HOOK" <<<"$json" 2>&1 )
+  EXIT=$?
+}
+
+injected()      { echo "$STDOUT" | grep -q "Deploy URLs auto-detected"; }
+head_leaked()   { echo "$STDOUT" | grep -qE 'HEAD(--|:|\))'; }
+fn7() { echo "$STDOUT" | grep -q "feature-test" && ! head_leaked; }
+fn8() { ! head_leaked; }
+fn9() { echo "$STDOUT" | grep -q "feature-test"; }
+has_feature()  { echo "$STDOUT" | grep -q "feature-test"; }
+no_quiet()     { ! echo "$STDOUT" | grep -q -- "--quiet"; }
+no_refsheads() { ! echo "$STDOUT" | grep -q "refs/heads"; }
+# minimal git repo on branch $2 (+ optional netlify.toml if $3=netlify), at dir $1
+mkrepo() {
+  ( cd "$1" || exit 1
+    git init -q -b "$2" 2>/dev/null || { git init -q; git checkout -q -b "$2"; }
+    : > f; [ "${3:-}" = netlify ] && : > netlify.toml
+    git add -A 2>/dev/null
+    GIT_AUTHOR_NAME=t GIT_AUTHOR_EMAIL=t@t GIT_COMMITTER_NAME=t GIT_COMMITTER_EMAIL=t@t git commit -q -m i 2>/dev/null )
+}
+fn10() { has_feature && no_quiet; }   # compound:fetch 段的 --quiet 不可被誤抓為 branch
+fn11() { has_feature; }                # compound:pull 段的 main 不可被誤抓(否則 grep feature-test 失敗)
+fn12() { has_feature; }                # bare push origin → fallback current branch
+fn13() { has_feature; }                # flag-after-origin → 清空 → fallback current branch
+
+check() {  # <name> <expect: skip|fire> [extra-assert-fn]
+  local name="$1" expect="$2" extra="${3:-}"
+  local ok=1
+  if [ "$expect" = "skip" ]; then
+    { [ "$EXIT" = "0" ] && ! injected; } || ok=0
+  else # fire
+    { [ "$EXIT" = "0" ] && injected; } || ok=0
+  fi
+  if [ -n "$extra" ] && ! "$extra"; then ok=0; fi
+  if [ "$ok" = "1" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (exit=$EXIT, expect=$expect)"
+    echo "         output=${STDOUT:0:240}"
+    FAIL=$((FAIL+1)); FAILED="${FAILED}\n  - $name"
+  fi
+}
+
+setup
+
+# 1. 非 PostToolUse event → skip
+run_hook "git push origin feature-test" "UserPromptSubmit" "Bash"
+check "1 non-PostToolUse event → skip" skip
+
+# 2. 非 Bash tool → skip
+run_hook "git push origin feature-test" "PostToolUse" "Edit"
+check "2 non-Bash tool → skip" skip
+
+# 3. tag push(v*)→ skip(原把 tag 名當 branch 推 404)
+run_hook "git push origin v0.1.0-beta.56"
+check "3 tag push → skip" skip
+
+# 4. branch --delete(cleanup,非 deploy)→ skip
+run_hook "git push origin --delete old-branch"
+check "4 push --delete → skip" skip
+
+# 5. 字串提及(賦值,非命令邊界)→ skip(command-boundary guard)
+run_hook "P='git push origin'"
+check "5 string-mention (assignment) → skip" skip
+
+# 6. 解析噪音 / 非法 git ref 字元(~)→ skip(charset guard)
+run_hook "git push origin foo~bar"
+check "6 invalid-ref-charset branch → skip" skip
+
+# 7. symbolic ref HEAD → fires + 解析成真 branch feature-test(非字面 HEAD)
+run_hook "git push origin HEAD"
+check "7 HEAD → fire + resolve to feature-test (no literal HEAD)" fire 'fn7'
+
+# 8. refspec HEAD:main → 取 dst,不可洩漏字面 HEAD
+run_hook "git push origin HEAD:main"
+check "8 refspec HEAD:main → no HEAD leak" fire 'fn8'
+
+# 9. positive control:真 branch push → fires(確保 skip 測試非因 hook 全壞而假過)
+run_hook "git add -A && git push origin feature-test"
+check "9 real branch push (positive control) → fire" fire 'fn9'
+
+# 10. ROOT regression:compound 命令前段 `git fetch origin --quiet` 的 flag 不可被誤抓為 branch
+#     (2026-06-07 anchor:merge 時 `git fetch origin --quiet && ... && git push origin main` 吐 `--quiet--site` 404)
+run_hook "git fetch origin --quiet && git push origin feature-test"
+check "10 compound w/ fetch flag → branch from push seg only (no --quiet leak)" fire 'fn10'
+
+# 11. compound 前段 `git pull origin main` 的 main 不可被誤抓(branch 必來自 push 段)
+run_hook "git pull origin main && git push origin feature-test"
+check "11 compound w/ pull → branch from push seg (not pull's main)" fire 'fn11'
+
+# 12. bare `git push origin`(無顯式 branch)→ fallback 當前 branch
+run_hook "git push origin"
+check "12 bare push origin → fallback current branch" fire 'fn12'
+
+# 13. flag-after-origin `git push origin --force`(無顯式 branch)→ fallback 當前 branch
+run_hook "git push origin --force"
+check "13 flag-after-origin → fallback current branch (no flag-as-branch)" fire 'fn13'
+
+# 14. cross-repo cd-parse:command `cd <other-repo> && git push` → hook 用 cd'd repo 作偵測根
+#     (2026-06-07 anchor:syncing ds-product-template 時 hook 吐成 DS 站台 URL)。
+#     TMP2 無 netlify.toml → 該 SKIP;若沒 cd-parse、誤用 $TMP〔有 netlify.toml〕→ 會 inject(=回歸)。
+TMP2=$(mktemp -d)
+(
+  cd "$TMP2" || exit 1
+  git init -q -b other-branch 2>/dev/null || { git init -q; git checkout -q -b other-branch; }
+  : > somefile
+  git add -A 2>/dev/null
+  GIT_AUTHOR_NAME=t GIT_AUTHOR_EMAIL=t@t GIT_COMMITTER_NAME=t GIT_COMMITTER_EMAIL=t@t git commit -q -m init 2>/dev/null
+)
+run_hook "cd $TMP2 && git push origin other-branch"
+check "14 cross-repo cd-parse → uses cd'd repo (no deploy target there → skip, not \$TMP's URL)" skip
+rm -rf "$TMP2"
+
+# 15. flag-before-origin `--force-with-lease`(原 trigger 只認 -u → 漏 fire 真實 push)→ fire
+run_hook "git push --force-with-lease origin feature-test"
+check "15 flag-before-origin (--force-with-lease) → fire" fire 'has_feature'
+
+# 16. env-prefix `GIT_SSH_COMMAND=… git push`(原被命令邊界擋掉)→ fire
+run_hook "GIT_SSH_COMMAND=ssh git push origin feature-test"
+check "16 env-prefixed git push → fire" fire 'has_feature'
+
+# 17. --set-upstream(-u 的長形,原 trigger 漏)→ fire
+run_hook "git push --set-upstream origin feature-test"
+check "17 --set-upstream → fire" fire 'has_feature'
+
+# 18. `git -C <other-repo> push` → 用 -C 的 repo 作偵測根(無 netlify → skip,不吐 \$TMP 的 URL)
+TMP3=$(mktemp -d); mkrepo "$TMP3" ob
+run_hook "git -C $TMP3 push origin ob"
+check "18 git -C <repo> → uses that repo (no deploy target → skip)" skip
+rm -rf "$TMP3"
+
+# 19. detached HEAD `git push origin HEAD` → branch 解析空 → skip(不吐 https://--site malformed)
+TMP4=$(mktemp -d); mkrepo "$TMP4" m netlify; ( cd "$TMP4" && git checkout -q --detach 2>/dev/null )
+STDOUT=$( cd "$TMP4" && HOME="$TMP4/home" XDG_CONFIG_HOME="$TMP4/home/.config" GOVERNANCE_PROJECT_DIR="$TMP4" GOVERNANCE_PROVIDER=codex GOVERNANCE_READ_ONLY=1 bash "$HOOK" <<<'{"hook_event_name":"PostToolUse","tool_name":"Bash","tool_input":{"command":"git push origin HEAD"}}' 2>&1 ); EXIT=$?
+if [ "$EXIT" = 0 ] && ! injected && ! echo "$STDOUT" | grep -qE -- '--site|\(\)'; then echo "  PASS  19 detached HEAD → skip (no malformed URL)"; PASS=$((PASS+1)); else echo "  FAIL  19 (exit=$EXIT out=${STDOUT:0:140})"; FAIL=$((FAIL+1)); FAILED="${FAILED}\n  - 19"; fi
+rm -rf "$TMP4"
+
+# 20. cd-after-command `echo x && cd <other> && git push` → 用該 cd 的 repo(非 session/first)
+TMP5=$(mktemp -d); mkrepo "$TMP5" ob
+run_hook "echo hi && cd $TMP5 && git push origin ob"
+check "20 cd-after-command → uses that cd's repo (no deploy → skip)" skip
+rm -rf "$TMP5"
+
+# 21. refspec full-ref `HEAD:refs/heads/main` → 取 main,不洩漏 refs/heads
+run_hook "git push origin HEAD:refs/heads/main"
+check "21 refspec refs/heads → no refs/heads leak" fire 'no_refsheads'
+
+# 22. Poisoned Claude HOME must not affect Codex. Add a remote only for preference-key tests.
+(cd "$TMP" && git remote add origin git@github.com:owner/repo.git)
+mkdir -p "$TMP/home/.claude/local"
+printf '{"owner/repo":"https://poison-claude-home.netlify.app"}\n' > "$TMP/home/.claude/local/deploy-targets.json"
+TEST_PROVIDER=codex run_hook "git push origin feature-test"
+if [ "$EXIT" = 0 ] && injected && ! echo "$STDOUT" | grep -q 'poison-claude-home' && echo "$STDOUT" | grep -q 'sitename 未知'; then
+  echo "  PASS  22 Codex ignores poisoned ~/.claude deploy preference"; PASS=$((PASS+1))
+else
+  echo "  FAIL  22 Codex consumed Claude HOME (out=${STDOUT:0:180})"; FAIL=$((FAIL+1)); FAILED="${FAILED}\n  - 22"
+fi
+
+# 23. Neutral XDG preference outranks provider-specific legacy compatibility input.
+mkdir -p "$TMP/home/.config/qijenchen-governance"
+printf '{"owner/repo":"https://neutral-site.netlify.app"}\n' > "$TMP/home/.config/qijenchen-governance/deploy-targets.json"
+TEST_PROVIDER=codex run_hook "git push origin feature-test"
+if [ "$EXIT" = 0 ] && injected && echo "$STDOUT" | grep -q 'neutral-site' && ! echo "$STDOUT" | grep -q 'poison-claude-home'; then
+  echo "  PASS  23 neutral XDG deploy preference is provider-independent and preferred"; PASS=$((PASS+1))
+else
+  echo "  FAIL  23 neutral preference not used (out=${STDOUT:0:180})"; FAIL=$((FAIL+1)); FAILED="${FAILED}\n  - 23"
+fi
+
+# 24. A future provider is registry data only and uses the same neutral preference layer.
+mkdir -p "$TMP/future-corpus"
+cat > "$TMP/future-corpus/providers.json" <<'EOF'
+{"providers":[{"id":"orion","instructionEntry":"ORION.md"}]}
+EOF
+TEST_PROVIDER=orion TEST_CORPUS="$TMP/future-corpus" TEST_REGISTRY=providers.json \
+  run_hook "git push origin feature-test"
+if [ "$EXIT" = 0 ] && injected && echo "$STDOUT" | grep -q 'neutral-site' && ! echo "$STDOUT" | grep -q 'poison-claude-home'; then
+  echo "  PASS  24 future provider uses registry + neutral deploy preference only"; PASS=$((PASS+1))
+else
+  echo "  FAIL  24 future provider deploy preferences (out=${STDOUT:0:180})"; FAIL=$((FAIL+1)); FAILED="${FAILED}\n  - 24"
+fi
+
+# 25. A real push with an unregistered provider is an adapter/config integrity fault,not policy.
+TEST_PROVIDER=absent TEST_CORPUS="$TMP/future-corpus" TEST_REGISTRY=providers.json \
+  run_hook "git push origin feature-test"
+if [ "$EXIT" = 70 ] && echo "$STDOUT" | grep -qF "GOVERNANCE_INTEGRITY:" && ! injected; then
+  echo "  PASS  25 unregistered provider → integrity 70"; PASS=$((PASS+1))
+else
+  echo "  FAIL  25 expected provider integrity 70 (exit=$EXIT out=${STDOUT:0:180})"
+  FAIL=$((FAIL+1)); FAILED="${FAILED}\n  - 25"
+fi
+
+# 26. Content sniff must read a hallmark-first response larger than a pipe buffer without
+# curl→grep -q early-close inversion. The fake HEAD request returns 200; the body starts with
+# Storybook evidence and then exceeds 256 KiB.
+(cd "$TMP" && git branch -m main)
+mkdir -p "$TMP/fake-bin"
+cat >"$TMP/fake-bin/curl" <<'EOF'
+#!/bin/bash
+case " $* " in
+  *" -I "*) printf '200' ;;
+  *)
+    printf 'sb-manager\n'
+    awk 'BEGIN { for (i = 0; i < 300000; i++) printf "x" }'
+    ;;
+esac
+EOF
+chmod +x "$TMP/fake-bin/curl"
+OLD_PATH="$PATH"
+PATH="$TMP/fake-bin:$PATH"
+TEST_PROVIDER=codex
+TEST_CORPUS="$PROJECT_ROOT"
+TEST_REGISTRY=packages/governance/canonical/providers.json
+run_hook "git push origin main"
+PATH="$OLD_PATH"
+if [ "$EXIT" = 0 ] \
+  && injected \
+  && echo "$STDOUT" | grep -qF 'verified 200 + Storybook content' \
+  && ! echo "$STDOUT" | grep -qF '內容非 Storybook' \
+  && ! echo "$STDOUT" | grep -qiE 'broken pipe|GOVERNANCE_INTEGRITY:'; then
+  echo "  PASS  26 >256KiB hallmark-first deploy body remains Storybook-positive"; PASS=$((PASS+1))
+else
+  echo "  FAIL  26 large deploy body classification (exit=$EXIT out=${STDOUT:0:180})"
+  FAIL=$((FAIL+1)); FAILED="${FAILED}\n  - 26"
+fi
+
+teardown
+
+echo ""
+echo "── Summary ──"
+echo "PASS: $PASS / $((PASS+FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  echo "FAIL: $FAIL"
+  printf "$FAILED\n"
+  exit 1
+fi
+echo "✅ All passed"
+exit 0