@qijenchen/design-system 0.1.0-beta.8 → 0.1.0-beta.80

package/ds-canonical/hooks/tests/test_check_consumer_app_invariants.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+# test_check_consumer_app_invariants.sh — 聚合測試(2026-06-11 prune merge 同名 coverage)
+# check_consumer_app_invariants.sh 為 multi-rule 合併檔;各規則的完整 positive/negative 案例在下列既有
+# per-rule 測試(已 repoint 至合併檔)。本檔 = name-matched coverage gate 入口,零重複。
+set -uo pipefail
+DIR="$(dirname "$0")"
+fail=0
+bash "$DIR/test_check_consumer_no_ds_catalog.sh" < /dev/null || { echo "SUB-FAIL: test_check_consumer_no_ds_catalog.sh"; fail=1; }
+bash "$DIR/test_check_consumer_story_baseline.sh" < /dev/null || { echo "SUB-FAIL: test_check_consumer_story_baseline.sh"; fail=1; }
+bash "$DIR/test_check_consumer_ds_primitive_misuse.sh" < /dev/null || { echo "SUB-FAIL: test_check_consumer_ds_primitive_misuse.sh"; fail=1; }
+bash "$DIR/test_check_consumer_app_story_title.sh" < /dev/null || { echo "SUB-FAIL: test_check_consumer_app_story_title.sh"; fail=1; }
+exit $fail

package/ds-canonical/hooks/tests/test_check_consumer_app_story_title.sh

@@ -0,0 +1,164 @@
+#!/bin/bash
+# 2026-06-11 repoint:check_consumer_app_story_title.sh 已合併進 check_consumer_app_invariants.sh(prune merge;測試 payload 不變 = 行為等價驗證)
+# Tests for check_consumer_app_invariants.sh(P0 BLOCKER,2026-05-28 codified)
+#
+# Hook 規則(PreToolUse,Edit|Write|MultiEdit):
+#   Scope: file_path matches `/apps/<name>/**.stories.(tsx|ts|mdx)` (consumer apps only)
+#   Content: tool_input.new_string // tool_input.content
+#   APP_NAME derived from path `.../apps/<name>/...`
+#   Extract `title:` field(single/double/backtick quote)。
+#   BLOCK exit 2 if title prefix ≠ `Apps/<APP_NAME>/`。
+#   Skip(exit 0): non-edit tool / out-of-scope path / empty content /
+#     `@app-story-title-skip:` escape / no `title:` field。
+# SSOT: .claude/rules/story-rules.md「Title 命名 2-namespace canonical」
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_consumer_app_invariants.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+# Isolate any state-file writes (hook sources _log-fire.sh which may log)
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+export CLAUDE_PROJECT_DIR="$TMP_DIR"
+mkdir -p "$TMP_DIR/.claude/logs"
+
+# run_hook <tool_name> <file_path> <content> [content_field]
+#   content_field defaults to "content"; pass "new_string" to test Edit shape.
+run_hook() {
+  local tool="$1"; local fp="$2"; local content="$3"; local field="${4:-content}"
+  local payload
+  payload=$(jq -n \
+    --arg t "$tool" --arg fp "$fp" --arg c "$content" --arg f "$field" \
+    '{hook_event_name:"PreToolUse", tool_name:$t, tool_input:({file_path:$fp} + {($f):$c})}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent, exit=$EXIT, stderr=$([ -n "$STDERR_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_block() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected BLOCK exit=2 + '$needle', got exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_consumer_app_story_title tests ==="
+
+APP_STORY="/repo/apps/order-dashboard/src/App.stories.tsx"
+BLOCK_NEEDLE="CONSUMER APP STORY TITLE BLOCKER"
+
+# ─────────────────────────────────────────────────────────────
+# POSITIVE cases — SHOULD trigger BLOCKER (exit 2)
+# ─────────────────────────────────────────────────────────────
+
+# P1. Wrong namespace ('Design System/...') in consumer app story → BLOCK
+#     (guards over-narrow: real violation must fire)
+run_hook "Write" "$APP_STORY" "export default { title: 'Design System/Button' };"
+expect_block "P1 DS-namespace title in app story → BLOCK" "$BLOCK_NEEDLE"
+
+# P2. Title for a DIFFERENT app name → BLOCK
+#     (app=order-dashboard but title says Apps/other-app/ → collision risk)
+run_hook "Write" "$APP_STORY" "export default { title: 'Apps/other-app/Dashboard' };"
+expect_block "P2 wrong app name in title → BLOCK" "$BLOCK_NEEDLE"
+
+# P3. Lowercase 'apps/' prefix near-miss → BLOCK (must be capitalized 'Apps/')
+run_hook "Write" "$APP_STORY" "export default { title: 'apps/order-dashboard/Dashboard' };"
+expect_block "P3 lowercase apps/ prefix → BLOCK" "$BLOCK_NEEDLE"
+
+# P4. No namespace at all (bare title) → BLOCK
+run_hook "Edit" "$APP_STORY" "export default { title: 'Dashboard' };" "new_string"
+expect_block "P4 bare title, no Apps/ prefix → BLOCK (Edit new_string)" "$BLOCK_NEEDLE"
+
+# P5. MultiEdit tool with wrong title → BLOCK (tool coverage)
+run_hook "MultiEdit" "$APP_STORY" "export default { title: 'Pages/Dashboard' };"
+expect_block "P5 MultiEdit wrong title → BLOCK" "$BLOCK_NEEDLE"
+
+# ─────────────────────────────────────────────────────────────
+# NEGATIVE cases — should NOT trigger (silent exit 0)
+# ─────────────────────────────────────────────────────────────
+
+# N1. Correct prefix 'Apps/order-dashboard/...' → silent
+run_hook "Write" "$APP_STORY" "export default { title: 'Apps/order-dashboard/Dashboard' };"
+expect_pass_silent "N1 correct Apps/<app>/ prefix → silent"
+
+# N2. Correct prefix with backtick quote → silent
+#     (guards over-narrow on quote style)
+run_hook "Write" "$APP_STORY" 'export default { title: `Apps/order-dashboard/Settings` };'
+expect_pass_silent "N2 correct prefix backtick quote → silent"
+
+# N3. Correct prefix with double quote → silent
+run_hook "Write" "$APP_STORY" 'export default { title: "Apps/order-dashboard/Reports" };'
+expect_pass_silent "N3 correct prefix double quote → silent"
+
+# N4. Story file with NO title: field → silent (no-op stories OK)
+run_hook "Write" "$APP_STORY" "export const Default = { render: () => null };"
+expect_pass_silent "N4 no title field → silent"
+
+# N5. Wrong title but @app-story-title-skip escape present → silent
+run_hook "Write" "$APP_STORY" \
+  "// @app-story-title-skip: shared cross-app fixture
+export default { title: 'Shared/Fixtures' };"
+expect_pass_silent "N5 escape comment present → silent"
+
+# N6. Out-of-scope path: DS-internal story (packages/) → silent
+#     (DS internal uses 'Design System/...' namespace, not this hook's concern)
+run_hook "Write" "/repo/packages/design-system/src/components/Button/button.stories.tsx" \
+  "export default { title: 'Design System/Button' };"
+expect_pass_silent "N6 DS-internal stories.tsx out of scope → silent"
+
+# N7. Out-of-scope path: non-story file in apps/ → silent
+#     (near-miss: same dir, plain .tsx not .stories.tsx)
+run_hook "Write" "/repo/apps/order-dashboard/src/App.tsx" \
+  "export default { title: 'Whatever' };"
+expect_pass_silent "N7 apps/ non-story .tsx out of scope → silent"
+
+# N8. Non-edit tool (Read) → silent
+run_hook "Read" "$APP_STORY" "export default { title: 'Design System/Button' };"
+expect_pass_silent "N8 tool=Read → silent"
+
+# N9. Empty content → silent
+run_hook "Write" "$APP_STORY" ""
+expect_pass_silent "N9 empty content → silent"
+
+# N10. .stories.ts (not tsx) in scope, correct prefix → silent (extension coverage)
+run_hook "Write" "/repo/apps/order-dashboard/src/App.stories.ts" \
+  "export default { title: 'Apps/order-dashboard/Overview' };"
+expect_pass_silent "N10 .stories.ts correct prefix → silent"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  printf "Failed:%b\n" "$FAILED_TESTS"
+  exit 1
+fi
+exit 0

package/ds-canonical/hooks/tests/test_check_consumer_ds_primitive_misuse.sh

@@ -0,0 +1,240 @@
+#!/bin/bash
+# 2026-06-11 payload 正交化:合併檔跑全規則,payload 須對非受測規則 clean(合併前真系統行為相同 — 另一 hook 同樣會攔)
+# 2026-06-11 repoint:check_consumer_ds_primitive_misuse.sh 已合併進 check_consumer_app_invariants.sh(prune merge;測試 payload 不變 = 行為等價驗證)
+# Tests for check_consumer_app_invariants.sh(P0 BLOCKER,2026-05-27 user verbatim
+# 「做產品真的要能使用跟 ds repo 一模一樣的元件」)
+#
+# Hook 契約(PreToolUse,tool=Edit|Write|MultiEdit):
+#   - Scope:tool_input.file_path 必匹配 `/(apps|consumer)/.*\.(tsx|ts)$`
+#            (Claude Code 永遠傳 absolute path → leading slash 前綴 apps/consumer)
+#            排除 `packages/design-system/src/` + `node_modules/`
+#   - Content:tool_input.new_string // tool_input.content
+#   - Global escape:content 含 `@ds-misuse-allow:` → silent exit 0
+#   - 7 anti-patterns(P1-P5 + P8 任何 .tsx/.ts;P6 僅 .stories.tsx):
+#       P1 <DS.CircularProgress size={N}> literal number override default 24
+#       P2 <DS.RadioGroupItem> 沒 wrap SelectionItem 且無 label=
+#       P3 <DS.DataTable columns={[single-col]}> minimal one-column
+#       P4 <DS.LinkInput placeholder=...> 沒 value/defaultValue
+#       P5 <DS.Empty title=...> 無 icon 且無 description
+#       P6 (.stories.tsx only) overlay trigger 無 defaultOpen
+#   - BLOCKER:exit 2 + stderr 含 "CONSUMER-DS-PRIMITIVE-MISUSE BLOCKER"
+#   - 非觸發 tool / out-of-scope path / 空 content → silent exit 0
+#
+# Broad-vs-narrow symmetry(M34):每 pattern 同時測 fire(over-narrow guard)
+# + near-miss(over-broad guard,canonical 用法不可誤攔)。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_consumer_app_invariants.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+# Override CLAUDE_PROJECT_DIR so _log-fire.sh 寫進 TMP_DIR,不污染 repo .claude/logs/
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+export CLAUDE_PROJECT_DIR="$TMP_DIR"
+mkdir -p "$TMP_DIR/.claude/logs"
+
+# 真實契約:Claude Code 傳 absolute path。Consumer app prod tsx / story tsx 各一條 base。
+PROD_TSX="/Users/x/proj/apps/web/src/App.tsx"
+STORY_TSX="/Users/x/proj/apps/web/src/Demo.stories.tsx"
+
+run_hook() {
+  local file_path="$1"; local content="$2"; local tool="${3:-Write}"
+  local payload
+  if [ "$tool" = "Edit" ]; then
+    # Edit 走 new_string field
+    payload=$(jq -n --arg fp "$file_path" --arg c "$content" --arg t "$tool" \
+      '{tool_name:$t, tool_input:{file_path:$fp, new_string:$c}}')
+  else
+    payload=$(jq -n --arg fp "$file_path" --arg c "$content" --arg t "$tool" \
+      '{tool_name:$t, tool_input:{file_path:$fp, content:$c}}')
+  fi
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR" 2>/dev/null)
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_block() {
+  local name="$1"; local needle="${2:-CONSUMER-DS-PRIMITIVE-MISUSE BLOCKER}"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected BLOCK exit=2 + '$needle', got exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent exit=0, got exit=$EXIT, stderr=$([ -n "$STDERR_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_consumer_ds_primitive_misuse tests ==="
+
+# ── Scope / event gating(NEGATIVE: should NOT fire)──────────────────────────
+
+# 1. 非觸發 tool(Read)→ silent
+payload_read=$(jq -n --arg fp "$PROD_TSX" '{tool_name:"Read", tool_input:{file_path:$fp}}')
+STDOUT=$(mktemp); STDERR=$(mktemp)
+set +e
+printf '%s' "$payload_read" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+EXIT=$?
+set -e
+STDERR_TEXT=$(cat "$STDERR" 2>/dev/null); rm -f "$STDOUT" "$STDERR"
+expect_silent "1. tool=Read → skip"
+
+# 2. Out-of-scope path(DS internal src)→ silent,即使含 anti-pattern
+run_hook "/Users/x/proj/packages/design-system/src/Foo.tsx" '<DS.Empty title="無資料" />'
+expect_silent "2. packages/design-system/src/ → skip (DS internal)"
+
+# 3. Out-of-scope path(node_modules)→ silent
+run_hook "/Users/x/proj/node_modules/@qijenchen/design-system/apps/Foo.tsx" '<DS.Empty title="x" />'
+expect_silent "3. node_modules/ → skip"
+
+# 4. Non-consumer path(repo src/ 無 apps|consumer 前綴)→ silent
+run_hook "/Users/x/proj/src/lib/util.tsx" '<DS.Empty title="x" />'
+expect_silent "4. 非 apps/consumer path → skip"
+
+# 5. 空 content → silent
+run_hook "$PROD_TSX" ""
+expect_silent "5. empty content → skip"
+
+# 6. Clean innocuous consumer tsx → silent
+run_hook "$PROD_TSX" 'export const Card = () => <div className="p-4"><h2>Hello</h2></div>'
+expect_silent "6. clean innocuous consumer tsx → silent"
+
+# ── Global escape(NEGATIVE)───────────────────────────────────────────────────
+
+# 7. @ds-misuse-allow escape 即使含 anti-pattern → silent
+run_hook "$PROD_TSX" '// @ds-misuse-allow: legacy migration WIP
+<DS.Empty title="無資料" />'
+expect_silent "7. @ds-misuse-allow escape → silent"
+
+# ── P1 CircularProgress(broad-vs-narrow symmetry)─────────────────────────────
+
+# 8. POSITIVE over-narrow guard:literal size={24} → BLOCK
+run_hook "$PROD_TSX" 'export const L = () => <DS.CircularProgress size={24} />'
+expect_block "8. P1 <CircularProgress size={24}> → BLOCK"
+
+# 9. NEGATIVE over-broad guard:string variant size="lg" 非 literal number → silent
+run_hook "$PROD_TSX" 'export const L = () => <DS.CircularProgress size="lg" />'
+expect_silent "9. P1 nearmiss <CircularProgress size=\"lg\"> → silent"
+
+# 9b. 2026-06-03 回歸防護(同 R8 bug class):屬性跨多行的真實 JSX → BLOCK。修前 grep 逐行 +
+#     [^>]+ 跨屬性匹配 → 多行 component 靜默繞過全部 anti-pattern(= BLOCKER false-negative,對抗稽核抓到)。
+run_hook "$PROD_TSX" 'export const L = () => (
+  <DS.CircularProgress
+    variant="blue"
+    size={48}
+  />
+)'
+expect_block "9b. P1 多行屬性 <CircularProgress size={48}> → BLOCK(回歸防護)"
+
+# ── P2 RadioGroupItem(broad-vs-narrow symmetry)───────────────────────────────
+
+# 10. POSITIVE:RadioGroupItem 裸用,無 SelectionItem 無 label → BLOCK
+run_hook "$PROD_TSX" 'export const R = () => <DS.RadioGroupItem value="a" />'
+expect_block "10. P2 bare <RadioGroupItem> → BLOCK"
+
+# 11. NEGATIVE:RadioGroupItem wrap 進 SelectionItem(canonical)→ silent
+run_hook "$PROD_TSX" 'export const R = () => <DS.SelectionItem control={<DS.RadioGroupItem value="a" />} label="選項 A" />'
+expect_silent "11. P2 nearmiss <SelectionItem control={<RadioGroupItem>}> → silent"
+
+# ── P4 LinkInput(broad-vs-narrow symmetry)────────────────────────────────────
+
+# 12. POSITIVE:LinkInput placeholder-only(無 value)→ BLOCK
+run_hook "$PROD_TSX" 'export const L = () => <DS.LinkInput placeholder="https://example.com" />'
+expect_block "12. P4 <LinkInput placeholder-only> → BLOCK"
+
+# 13. NEGATIVE:LinkInput 有 value prop(canonical link/edit pattern)→ silent
+run_hook "$PROD_TSX" 'export const L = () => <DS.LinkInput placeholder="https://example.com" value={url} onChange={setUrl} />'
+expect_silent "13. P4 nearmiss <LinkInput value={url}> → silent"
+
+# ── P5 Empty(broad-vs-narrow symmetry)────────────────────────────────────────
+
+# 14. POSITIVE:Empty title 無 icon 無 description → BLOCK
+run_hook "$PROD_TSX" 'export const E = () => <DS.Empty title="尚無檔案" />'
+expect_block "14. P5 <Empty title-only> → BLOCK"
+
+# 15. NEGATIVE:Empty title + description(canonical「預設只需 description」)→ silent
+run_hook "$PROD_TSX" 'export const E = () => <DS.Empty title="尚無檔案" description="點右上角上傳第一份文件" />'
+expect_silent "15. P5 nearmiss <Empty title+description> → silent"
+
+# 16. NEGATIVE:Empty title + icon(也滿足 canonical)→ silent
+run_hook "$PROD_TSX" 'export const E = () => <DS.Empty title="尚無檔案" icon={<DS.FileIcon />} />'
+expect_silent "16. P5 nearmiss <Empty title+icon> → silent"
+
+# ── P6 overlay(.stories.tsx scope-gated;prod tsx 不攔)────────────────────────
+
+# 17. POSITIVE:story 用 Dialog overlay 無 defaultOpen → BLOCK
+run_hook "$STORY_TSX" '// @story-baseline: x.stories.tsx#Default\nexport const S = () => <DS.Dialog><DS.DialogContent>內容</DS.DialogContent></DS.Dialog>'
+expect_block "17. P6 story <Dialog> 無 defaultOpen → BLOCK"
+
+# 18. NEGATIVE over-broad guard:同 overlay 在 prod .tsx(非 story)→ silent
+run_hook "$PROD_TSX" 'export const S = () => <DS.Dialog><DS.DialogContent>內容</DS.DialogContent></DS.Dialog>'
+expect_silent "18. P6 prod .tsx <Dialog>(非 story scope)→ silent"
+
+# 19. NEGATIVE:story Dialog 有 defaultOpen(canonical visual-snapshot 用法)→ silent
+run_hook "$STORY_TSX" '// @story-baseline: x.stories.tsx#Default\nexport const S = () => <DS.Dialog defaultOpen><DS.DialogContent>內容</DS.DialogContent></DS.Dialog>'
+expect_silent "19. P6 nearmiss story <Dialog defaultOpen> → silent"
+
+# ── Edit field-path 契約(new_string 而非 content)────────────────────────────
+
+# 20. POSITIVE:Edit tool 走 tool_input.new_string,anti-pattern → BLOCK
+run_hook "$PROD_TSX" 'export const L = () => <DS.CircularProgress size={48} />' "Edit"
+expect_block "20. Edit(new_string)<CircularProgress size={48}> → BLOCK"
+
+# ── P8 硬寫色值/字級/shadow 繞 token(broad-vs-narrow symmetry,2026-06-02 CF conformance 主防線)──
+
+# 21. POSITIVE:硬寫 hex 色 bg-[#hex] → BLOCK
+run_hook "$PROD_TSX" 'export const C = () => <div className="bg-[#3b82f6] text-white">x</div>'
+expect_block "21. P8 硬寫 hex 色 bg-[#hex] → BLOCK"
+
+# 22. NEGATIVE over-broad guard:用 token bg-[var(--color-blue-6)] → silent
+run_hook "$PROD_TSX" 'export const C = () => <div className="bg-[var(--color-blue-6)] text-body">x</div>'
+expect_silent "22. P8 nearmiss bg-[var(--color-blue-6)] + text-body → silent"
+
+# 23. POSITIVE:硬寫字級 text-[14px] → BLOCK
+run_hook "$PROD_TSX" 'export const C = () => <p className="text-[14px]">x</p>'
+expect_block "23. P8 硬寫字級 text-[14px] → BLOCK"
+
+# 24. POSITIVE:raw shadow-md → BLOCK
+run_hook "$PROD_TSX" 'export const C = () => <div className="shadow-md rounded">x</div>'
+expect_block "24. P8 raw shadow-md → BLOCK"
+
+# 25. NEGATIVE:用 elevation token shadow-[var(--elevation-100)] → silent
+run_hook "$PROD_TSX" 'export const C = () => <div className="shadow-[var(--elevation-100)] rounded">x</div>'
+expect_silent "25. P8 nearmiss shadow-[var(--elevation-100)] → silent"
+
+# 26. NEGATIVE over-broad guard:arbitrary 非色/字級值(max-w-[600px] / grid layout)不該誤攔 → silent
+run_hook "$PROD_TSX" 'export const C = () => <div className="max-w-[600px] grid-cols-[1fr_2fr]">x</div>'
+expect_silent "26. P8 nearmiss max-w-[600px]/grid-cols-[...](非色字 shadow)→ silent"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  printf "Failed:%b\n" "$FAILED_TESTS"
+  exit 1
+fi
+exit 0

package/ds-canonical/hooks/tests/test_check_consumer_no_ds_catalog.sh

@@ -0,0 +1,214 @@
+#!/bin/bash
+# 2026-06-11 payload 正交化:合併檔跑全規則,payload 須對非受測規則 clean(合併前真系統行為相同 — 另一 hook 同樣會攔)
+# 2026-06-11 repoint:check_consumer_no_ds_catalog.sh 已合併進 check_consumer_app_invariants.sh(prune merge;測試 payload 不變 = 行為等價驗證)
+# Tests for check_consumer_app_invariants.sh(P0 BLOCKER,2026-05-27 user directive「確保跟 ds repo 一模一樣」)
+#
+# Hook 規則(PreToolUse,Edit|Write|MultiEdit):
+#   Scope: tool_input.file_path 必 match /(apps|consumer)/.*\.stories\.tsx$
+#          且 NOT packages/design-system/src/(DS source 排除)。
+#   Content: tool_input.new_string // tool_input.content。空 → exit 0。
+#   Escape: content 含 `@consumer-catalog-allow:` → exit 0。
+#   4 violation patterns → exit 2 + stderr 含 "CONSUMER-NO-DS-CATALOG BLOCKER":
+#     P1. basename ∈ {EveryDsComponent,AllDsComponents,AllComponents,DsCatalog,EveryComponent}
+#         (AllDsComponents + DsCanonicalPortal/iframe.*design-system → portal proxy 例外放行)
+#     P2. title 含「所有 DS 元件」/「Every DS Component」/「All DS Components ... render」/「每元件 default」
+#     P3. Object.keys/entries(DS).map|forEach iterate-render
+#     P4. ≥5 distinct <DS.X> tags in single file(mass hand-mock)
+#   Non-Edit/Write/MultiEdit tool / out-of-scope file → silent exit 0。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_consumer_app_invariants.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+
+# Override CLAUDE_PROJECT_DIR so _log-fire.sh state lands in TMP_DIR(不污染 repo .claude/logs/)
+export CLAUDE_PROJECT_DIR="$TMP_DIR"
+mkdir -p "$TMP_DIR/.claude/logs"
+
+# run_hook <tool> <file_path> <content>
+# content 走 tool_input.new_string(Edit)— 與 .content(Write)同 fallback chain。
+run_hook() {
+  local tool="$1"; local file_path="$2"; local content="$3"
+  local payload
+  payload=$(jq -n \
+    --arg t "$tool" --arg fp "$file_path" --arg c "$content" \
+    '{hook_event_name:"PreToolUse", tool_name:$t, tool_input:{file_path:$fp, new_string:$c}}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR" 2>/dev/null)
+  rm -f "$STDOUT" "$STDERR"
+}
+
+# run_hook_content_field — 驗 .content fallback(Write 的 field 名)
+run_hook_content_field() {
+  local tool="$1"; local file_path="$2"; local content="$3"
+  local payload
+  payload=$(jq -n \
+    --arg t "$tool" --arg fp "$file_path" --arg c "$content" \
+    '{hook_event_name:"PreToolUse", tool_name:$t, tool_input:{file_path:$fp, content:$c}}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR" 2>/dev/null)
+  rm -f "$STDOUT" "$STDERR"
+}
+
+NEEDLE="CONSUMER-NO-DS-CATALOG BLOCKER"
+
+expect_block() {
+  local name="$1"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "$NEEDLE"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected BLOCK exit=2 + '$NEEDLE', got exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent exit=0, got exit=$EXIT, stderr=$([ -n "$STDERR_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+CONSUMER_FILE="/repo/apps/template/src/stories/Foo.stories.tsx"
+
+echo "=== check_consumer_no_ds_catalog tests ==="
+
+# ─────────────────────── POSITIVE cases(SHOULD BLOCK)───────────────────────
+
+# P1: basename = catalog pattern(EveryDsComponent)
+run_hook "Write" "/repo/apps/template/src/EveryDsComponent.stories.tsx" \
+  "import { Button } from '@qijenchen/design-system'; export const Smoke = () => <Button>x</Button>;"
+expect_block "1. P1 basename EveryDsComponent → BLOCK"
+
+# P1: basename DsCatalog
+run_hook "Write" "/repo/consumer/x/DsCatalog.stories.tsx" \
+  "export const Demo = () => <div>catalog</div>;"
+expect_block "2. P1 basename DsCatalog → BLOCK"
+
+# P2: title claims per-component default render
+run_hook "Edit" "$CONSUMER_FILE" \
+  "const meta = { title: '所有 DS 元件 Catalog', component: Foo }; export default meta;"
+expect_block "3. P2 title '所有 DS 元件' → BLOCK"
+
+# P2: English title variant「Every DS Component」
+run_hook "Edit" "$CONSUMER_FILE" \
+  "const meta = { title: 'Every DS Component Default', component: Foo }; export default meta;"
+expect_block "4. P2 title 'Every DS Component' → BLOCK"
+
+# P3: Object.keys(DS).map iterate-render
+run_hook "Edit" "$CONSUMER_FILE" \
+  "import * as DS from '@qijenchen/design-system'; export const All = () => Object.keys(DS).map((k) => <div key={k}/>);"
+expect_block "5. P3 Object.keys(DS).map → BLOCK"
+
+# P3: Object.entries(DS).forEach variant
+run_hook "Edit" "$CONSUMER_FILE" \
+  "import * as DS from '@qijenchen/design-system'; export const All = () => { Object.entries(DS).forEach(([k,V]) => render(V)); };"
+expect_block "6. P3 Object.entries(DS).forEach → BLOCK"
+
+# P4: ≥5 distinct <DS.X> mass hand-mock(REAL violation — guard against over-narrow regex)
+run_hook "Edit" "$CONSUMER_FILE" \
+  "export const Catalog = () => (<><DS.Button/><DS.Card/><DS.Input/><DS.Select/><DS.Avatar/></>);"
+expect_block "7. P4 5 distinct <DS.X> mass mock → BLOCK"
+
+# .content field fallback(Write contract)still triggers
+run_hook_content_field "Write" "/repo/apps/template/src/AllComponents.stories.tsx" \
+  "export const X = () => <div/>;"
+expect_block "8. P1 via .content field fallback → BLOCK"
+
+# ─────────────────────── NEGATIVE cases(SHOULD NOT fire)───────────────────────
+
+# Non-Edit/Write tool → silent(scope gate on tool_name)
+run_hook "Read" "$CONSUMER_FILE" "Object.keys(DS).map((k) => <div/>)"
+expect_pass_silent "9. tool=Read → silent (even with violating content)"
+
+# Out-of-scope: DS source story(packages/design-system/src/)→ silent
+run_hook "Write" "/repo/packages/design-system/src/components/Button/button.stories.tsx" \
+  "export const All = () => (<><DS.Button/><DS.Card/><DS.Input/><DS.Select/><DS.Avatar/></>);"
+expect_pass_silent "10. DS source story (out-of-scope path) → silent"
+
+# Out-of-scope: consumer file but NOT *.stories.tsx → silent
+run_hook "Write" "/repo/apps/template/src/EveryDsComponent.tsx" \
+  "import * as DS from '@qijenchen/design-system'; Object.keys(DS).map((k) => null);"
+expect_pass_silent "11. consumer non-stories .tsx → silent"
+
+# Escape marker → silent even with real P4 violation
+run_hook "Edit" "$CONSUMER_FILE" \
+  "// @consumer-catalog-allow: portal proxy 過渡期 — see RFC
+export const Catalog = () => (<><DS.Button/><DS.Card/><DS.Input/><DS.Select/><DS.Avatar/></>);"
+expect_pass_silent "12. @consumer-catalog-allow escape → silent"
+
+# AllDsComponents basename BUT portal proxy(DsCanonicalPortal)→ silent(documented exception)
+run_hook "Write" "/repo/apps/template/src/AllDsComponents.stories.tsx" \
+  "export const DsCanonicalPortal = () => <iframe src='/design-system/index.html' title='DS canonical' />;"
+expect_pass_silent "13. AllDsComponents + DsCanonicalPortal portal proxy → silent"
+
+# Near-miss P4: exactly 4 distinct <DS.X>(below ≥5 threshold)→ silent
+# (guard against over-broad regex firing on legit small composition)
+run_hook "Edit" "$CONSUMER_FILE" \
+  "export const Dashboard = () => (<><DS.Button/><DS.Card/><DS.Input/><DS.Select/></>);"
+expect_pass_silent "14. near-miss 4 distinct <DS.X> (< 5 threshold) → silent"
+
+# Near-miss P2: legit business title(not a catalog claim)→ silent
+run_hook "Edit" "$CONSUMER_FILE" \
+  "const meta = { title: 'Apps/template/Overview', component: Dashboard }; export default meta;"
+expect_pass_silent "15. near-miss legit business title → silent"
+
+# Near-miss P3: Object.keys on NON-DS object → silent(over-broad guard)
+run_hook "Edit" "$CONSUMER_FILE" \
+  "const cfg = {a:1,b:2}; export const X = () => Object.keys(cfg).map((k) => <div key={k}/>);"
+expect_pass_silent "16. near-miss Object.keys(cfg).map (not DS) → silent"
+
+# Legit composition demo: realistic AppShell scenario, < 5 DS tags, normal title → silent
+run_hook "Write" "/repo/apps/template/src/Dashboard.stories.tsx" \
+  "// @story-baseline: @qijenchen/design-system/components/AppShell/app-shell.stories.tsx#Default
+const meta = { title: 'Apps/template/Billing Dashboard' };
+export const Default = () => (<DS.AppShell><DS.DataTable rows={invoices} /></DS.AppShell>);"
+expect_pass_silent "17. legit business composition demo → silent"
+
+# Empty content → silent(content gate)
+run_hook "Edit" "$CONSUMER_FILE" ""
+expect_pass_silent "18. empty content → silent"
+
+# 19. 2026-06-03 回歸防護(fragment-vs-file bug class):Edit 只送 new_string 片段,
+#     但 @consumer-catalog-allow marker 在檔頭(不在每次 edit 片段)→ 修前編輯有 marker 的 portal
+#     檔任一非 marker 行就被誤擋(AllDsComponents basename = catalog pattern)。本 hook 是 PostToolUse
+#     (檔已落 disk)→ 補查整檔 marker。建真實 disk 檔(含 marker)+ Edit 無 marker 片段 → 必 silent。
+DISK_PORTAL="$TMP_DIR/apps/template/src/AllDsComponents.stories.tsx"
+mkdir -p "$(dirname "$DISK_PORTAL")"
+printf '%s\n' "// @consumer-catalog-allow: documented proxy portal" "export const ImportSmoke = () => <div/>;" > "$DISK_PORTAL"
+run_hook "Edit" "$DISK_PORTAL" "  <p>some unrelated edited line without the marker</p>"
+expect_pass_silent "19. Edit 片段無 marker + 檔頭 disk marker → silent(回歸防護)"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  printf "Failed:%b\n" "$FAILED_TESTS"
+  exit 1
+fi
+exit 0