@qijenchen/design-system 0.1.0-beta.8 → 0.1.0-beta.80

package/ds-canonical/hooks/tests/test_check_main_branch_workbench.sh

@@ -0,0 +1,147 @@
+#!/bin/bash
+# Tests for check_main_branch_workbench.sh(M28 main-as-workbench BLOCKER)
+#
+# Hook 規則:PreToolUse Edit/Write/MultiEdit + 目標 file 為 production code
+# (`packages/design-system/src/**/*.{tsx,ts,css}` OR `src/app/**` OR `src/explorations/**`)
+# + current git branch == main/master + transcript 近 5 user msg 無 branch trigger keyword
+# → exit 2 BLOCKER。
+# Allow:`CLAUDE_BYPASS_MAIN_WORKBENCH=1` / branch != main / out-of-scope path /
+#        trigger keyword(開 branch / 開 分支 / 新 branch / working branch / 在 branch 上做 / on branch)。
+#
+# 測試手法:`CLAUDE_PROJECT_DIR` 指向 fixture git repo(可控 current branch)。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_main_branch_workbench.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+TMP_ROOT=$(mktemp -d)
+trap 'rm -rf "$TMP_ROOT"' EXIT
+
+# Build fake git repos:one on main, one on feature branch
+REPO_MAIN="$TMP_ROOT/repo-main"
+REPO_FEAT="$TMP_ROOT/repo-feat"
+
+setup_repo() {
+  local dir="$1"; local branch="$2"
+  mkdir -p "$dir"
+  (
+    cd "$dir"
+    git init -q -b main 2>/dev/null || { git init -q && git checkout -q -b main; }
+    git config user.email test@example.com
+    git config user.name test
+    echo seed > seed.txt
+    git add seed.txt
+    git commit -q -m "seed"
+    if [ "$branch" != "main" ]; then
+      git checkout -q -b "$branch"
+    fi
+  )
+}
+
+setup_repo "$REPO_MAIN" "main"
+setup_repo "$REPO_FEAT" "feature-x"
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+run_hook() {
+  local file_path="$1"; local project_dir="$2"; local transcript="${3:-}"
+  local payload
+  payload=$(jq -n --arg fp "$file_path" \
+    '{tool_name: "Edit", tool_input: {file_path: $fp, new_string: "x"}}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  CLAUDE_PROJECT_DIR="$project_dir" CLAUDE_TRANSCRIPT_PATH="$transcript" \
+    printf '%s' "$payload" | CLAUDE_PROJECT_DIR="$project_dir" CLAUDE_TRANSCRIPT_PATH="$transcript" \
+    bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent, exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_blocker() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected exit 2 + '$needle', got exit $EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_main_branch_workbench tests ==="
+
+# 1. Non Edit/Write tool → skip (use payload with different tool)
+payload=$(jq -n '{tool_name: "Read", tool_input: {file_path: "/repo/packages/design-system/src/foo.tsx"}}')
+STDOUT=$(mktemp); STDERR=$(mktemp)
+set +e
+CLAUDE_PROJECT_DIR="$REPO_MAIN" printf '%s' "$payload" | CLAUDE_PROJECT_DIR="$REPO_MAIN" bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+EXIT=$?
+set -e
+STDERR_TEXT=$(cat "$STDERR")
+rm -f "$STDOUT" "$STDERR"
+expect_pass_silent "1. non Edit/Write tool → skip"
+
+# 2. Out-of-scope path (random file) → skip
+run_hook "/repo/.claude/foo.md" "$REPO_MAIN"
+expect_pass_silent "2. out-of-scope path (.claude/) → skip"
+
+# 3. Production code path + branch=feature-x → skip
+run_hook "/repo/packages/design-system/src/components/Foo/foo.tsx" "$REPO_FEAT"
+expect_pass_silent "3. on feature branch → skip"
+
+# 4. Production code path + branch=main + no trigger transcript → BLOCKER
+run_hook "/repo/packages/design-system/src/components/Foo/foo.tsx" "$REPO_MAIN"
+expect_blocker "4. main + production code + no trigger → BLOCKER" "MAIN-AS-WORKBENCH BLOCKER"
+
+# 5. CLAUDE_BYPASS_MAIN_WORKBENCH=1 escape → skip
+payload=$(jq -n '{tool_name: "Edit", tool_input: {file_path: "/repo/packages/design-system/src/components/Foo/foo.tsx", new_string: "x"}}')
+STDOUT=$(mktemp); STDERR=$(mktemp)
+set +e
+printf '%s' "$payload" | CLAUDE_PROJECT_DIR="$REPO_MAIN" CLAUDE_BYPASS_MAIN_WORKBENCH=1 bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+EXIT=$?
+set -e
+STDERR_TEXT=$(cat "$STDERR")
+rm -f "$STDOUT" "$STDERR"
+expect_pass_silent "5. CLAUDE_BYPASS_MAIN_WORKBENCH=1 → skip"
+
+# 6. Transcript with branch trigger keyword → skip
+TRANSCRIPT="$TMP_ROOT/transcript.jsonl"
+cat >"$TRANSCRIPT" <<'EOF'
+{"role":"user","content":"我們開 working branch 來做這個 batch"}
+{"role":"assistant","content":"OK"}
+EOF
+run_hook "/repo/packages/design-system/src/components/Foo/foo.tsx" "$REPO_MAIN" "$TRANSCRIPT"
+expect_pass_silent "6. transcript has 'working branch' trigger → skip"
+
+# 7. src/app/** also intercepted on main → BLOCKER
+run_hook "/repo/src/app/page.tsx" "$REPO_MAIN"
+expect_blocker "7. src/app/ on main → BLOCKER" "MAIN-AS-WORKBENCH BLOCKER"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  echo "Failed:$FAILED_TESTS"
+  exit 1
+fi

package/ds-canonical/hooks/tests/test_check_naming_and_abstraction.sh

@@ -0,0 +1,136 @@
+#!/bin/bash
+# Tests for check_naming_and_abstraction.sh — merged 3 sub-rules
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_naming_and_abstraction.sh"
+[ -x "$HOOK" ] || { echo "FATAL: hook not executable"; exit 1; }
+
+PASS=0; FAIL=0; FAILED_TESTS=""
+
+run_hook() {
+  local file_path="$1" content="$2" tool="${3:-Write}"
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  jq -n --arg tool "$tool" --arg fp "$file_path" --arg c "$content" \
+    '{tool_name:$tool, tool_input:{file_path:$fp, content:$c}}' \
+    | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR"); rm -f "$STDOUT" "$STDERR"
+}
+
+expect_exit() {
+  local name="$1" expect="$2" needle="${3:-}"
+  if [ "$EXIT" = "$expect" ] && { [ -z "$needle" ] || echo "$STDERR_TEXT" | grep -qF "$needle"; }; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected exit $expect${needle:+ + needle '$needle'}, got exit $EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== D.1 premature abstraction ==="
+
+# Setup: temp components/ — create Button base so suffix matching can find it
+TMP_DS=$(mktemp -d)
+mkdir -p "$TMP_DS/packages/design-system/src/components/Button"
+echo "// existing base" > "$TMP_DS/packages/design-system/src/components/Button/button.tsx"
+
+# 1. New ButtonOutline without rationale → BLOCK (suffix=Outline, base=Button exists)
+run_hook "$TMP_DS/packages/design-system/src/components/ButtonOutline/button-outline.tsx" '
+import * as React from "react"
+export const ButtonOutline = () => <div />
+' Write
+expect_exit "D.1.1 new ButtonOutline w/o rationale → BLOCK" 2 "premature abstraction"
+
+# 2. New ButtonOutline with rationale comment → silent
+run_hook "$TMP_DS/packages/design-system/src/components/ButtonOutline/button-outline.tsx" '// @separate-component-rationale: 3-test passed; cite Linear / Notion / Stripe — separate components
+import * as React from "react"
+' Write
+expect_exit "D.1.2 with rationale → silent" 0 ""
+
+# 3. New component name not matching any suffix → silent
+run_hook "$TMP_DS/packages/design-system/src/components/Sparkline/sparkline.tsx" '
+export const Sparkline = () => null
+' Write
+expect_exit "D.1.3 no suffix match → silent" 0 ""
+
+# 4. Edit existing file (not Write) → silent
+run_hook "$TMP_DS/packages/design-system/src/components/Button/button.tsx" 'edit' Edit
+expect_exit "D.1.4 edit tool → silent" 0 ""
+
+rm -rf "$TMP_DS"
+
+echo ""
+echo "=== D.2 internal namespace consistency ==="
+
+# Setup: temp dir with conflicting sibling stories
+TMP_NS=$(mktemp -d)
+mkdir -p "$TMP_NS/SelectionControl"
+cat >"$TMP_NS/SelectionControl/sibling.stories.tsx" <<'EOF'
+const meta = { title: 'Design System/Internal/SelectionControl' }
+export default meta
+EOF
+
+# 5. New stories file with Components ns + sibling has Internal → BLOCK
+run_hook "$TMP_NS/SelectionControl/new.stories.tsx" "
+const meta = { title: 'Design System/Components/SelectionControl/設計原則' }
+export default meta
+" Write
+expect_exit "D.2.1 sibling ns mismatch → BLOCK" 2 "namespace BLOCKER"
+
+# 6. New stories with consistent Internal ns → silent
+run_hook "$TMP_NS/SelectionControl/aligned.stories.tsx" "
+const meta = { title: 'Design System/Internal/SelectionControl/Foo' }
+export default meta
+" Write
+expect_exit "D.2.2 consistent ns → silent" 0 ""
+
+rm -rf "$TMP_NS"
+
+# 7. Story without title → skip
+run_hook "/r/packages/design-system/src/components/Foo/foo.stories.tsx" '
+const meta = { title: "Other/Foo" }
+' Write
+expect_exit "D.2.3 no DS title → silent" 0 ""
+
+echo ""
+echo "=== D.3 primitive color var in tsx ==="
+
+# 8. tsx with var(--color-neutral-5) → WARN stderr
+run_hook "/r/packages/design-system/src/components/Foo/foo.tsx" '
+const cls = "border-[var(--color-neutral-5)]"
+' Write
+expect_exit "D.3.1 primitive var color → WARN stderr" 0 "primitive color var"
+
+# 9. tsx with semantic alias → silent
+run_hook "/r/packages/design-system/src/components/Foo/foo.tsx" '
+const cls = "border-border"
+' Write
+expect_exit "D.3.2 semantic alias → silent" 0 ""
+
+# 10. Tag scope skip → silent
+run_hook "/r/packages/design-system/src/components/Tag/tag.tsx" '
+const cls = "var(--color-blue-3)"
+' Write
+expect_exit "D.3.3 Tag scope skip → silent" 0 ""
+
+# 11. allowlist (line-level) → silent
+run_hook "/r/packages/design-system/src/components/Foo/foo.tsx" '
+const cls = "border-[var(--color-neutral-5)] // @primitive-color-allow: legacy migration"
+' Write
+expect_exit "D.3.4 allowlist line → silent" 0 ""
+
+# 12. blanket allowlist → silent
+run_hook "/r/packages/design-system/src/components/Foo/foo.tsx" '// primitive-color-allow-blanket
+const cls = "var(--color-neutral-5)"
+' Write
+expect_exit "D.3.5 blanket allowlist → silent" 0 ""
+
+echo ""
+echo "═══ Results: $PASS PASS, $FAIL FAIL ═══"
+[ "$FAIL" -gt 0 ] && { printf "Failed:%b\n" "$FAILED_TESTS"; exit 1; }
+exit 0

package/ds-canonical/hooks/tests/test_check_opacity_token_usage.sh

@@ -0,0 +1,110 @@
+#!/bin/bash
+# Tests for check_opacity_token_usage.sh(2026-05-06 v14.5.2)
+#
+# Hook 規則:*.tsx 寫 raw `opacity-{N}`(N 是數字非 0/100)→ soft warn 用 DS opacity token。
+# 允許白名單:opacity-0 / opacity-100 / opacity-disabled。
+# 排除:.stories.tsx / .test.* / .spec.tsx / tokens/opacity/*。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_opacity_token_usage.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+run_hook() {
+  local file_path="$1"
+  local content="$2"
+  local payload
+  payload=$(jq -n --arg fp "$file_path" --arg c "$content" \
+    '{tool_name: "Write", tool_input: {file_path: $fp, content: $c}}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent, exit=$EXIT, stderr non-empty=$([ -n "$STDERR_TEXT" ] && echo yes))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_warn() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "0" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected warn '$needle', got exit $EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_opacity_token_usage tests ==="
+
+# 1. raw opacity-30 → warn
+run_hook "/repo/packages/design-system/src/components/Foo/foo.tsx" '
+className="bg-surface opacity-30"
+'
+expect_warn "1. opacity-30 raw → warn" "M23 / Dim 47 violation"
+
+# 2. raw opacity-50 → warn
+run_hook "/repo/packages/design-system/src/components/Foo/foo.tsx" '
+className="opacity-50"
+'
+expect_warn "2. opacity-50 raw → warn" "M23 / Dim 47 violation"
+
+# 3. opacity-disabled token utility → silent
+run_hook "/repo/packages/design-system/src/components/Foo/foo.tsx" '
+className="opacity-disabled pointer-events-none"
+'
+expect_pass_silent "3. opacity-disabled token → silent"
+
+# 4. opacity-0(visibility toggle)→ silent
+run_hook "/repo/packages/design-system/src/components/Foo/foo.tsx" '
+className="opacity-0 group-hover:opacity-100"
+'
+expect_pass_silent "4. opacity-0 / opacity-100 visibility → silent"
+
+# 5. story file → skip
+run_hook "/repo/packages/design-system/src/components/Foo/foo.stories.tsx" '
+className="opacity-30 opacity-50"
+'
+expect_pass_silent "5. .stories.tsx → skip"
+
+# 6. token spec internal → skip
+run_hook "/repo/packages/design-system/src/tokens/opacity/opacity.css" '
+opacity: 0.30;
+'
+expect_pass_silent "6. tokens/opacity/* → skip"
+
+# 7. multiple raw opacity values → warn(catch all)
+run_hook "/repo/packages/design-system/src/components/Foo/foo.tsx" '
+const a = "opacity-25"
+const b = "opacity-75"
+'
+expect_warn "7. multi opacity-N values → warn" "opacity-25"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  echo "Failed:$FAILED_TESTS"
+  exit 1
+fi

package/ds-canonical/hooks/tests/test_check_orphan_ds_css.sh

@@ -0,0 +1,212 @@
+#!/bin/bash
+# Tests for check_orphan_ds_css.sh(P0 BLOCKER,2026-05-27 codify)
+#
+# Hook 規則(Stop / SubagentStop event):
+#   Scan $CLAUDE_PROJECT_DIR/packages/design-system/src/**/*.css。
+#   Orphan condition(BLOCK exit 2):
+#     file NOT in styles/tokens.css aggregator(grep -qF rel path)
+#     AND basename NOT imported by any tsx/ts/css in DS(grep -rln 'import.*base|@import.*base')
+#   任一 orphan → exit 2 + stderr 'ORPHAN-DS-CSS BLOCKER'。
+#   非 Stop/SubagentStop event → exit 0 silent。
+#   無 DS_SRC dir / 無 tokens.css aggregator → exit 0 silent。
+#   styles/tokens.css aggregator 自身永遠 skip(不算 orphan)。
+#
+# 全部 fixture 走 TMP_DIR + CLAUDE_PROJECT_DIR override,deterministic,無 network。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_orphan_ds_css.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+
+# CLAUDE_PROJECT_DIR override → hook 完全在 TMP_DIR sandbox 內掃,不碰 repo 真 DS。
+export CLAUDE_PROJECT_DIR="$TMP_DIR"
+DS_SRC="$TMP_DIR/packages/design-system/src"
+
+# ── Fixture helpers ────────────────────────────────────────────────────────
+
+# 重建乾淨 DS_SRC:tokens.css aggregator + styles dir。
+reset_ds() {
+  rm -rf "$TMP_DIR/packages"
+  mkdir -p "$DS_SRC/styles" "$DS_SRC/tokens" "$DS_SRC/components" "$DS_SRC/patterns"
+  cat > "$DS_SRC/styles/tokens.css" <<'EOF'
+/* AUTO-GENERATED aggregator */
+@import "../tokens/primitives.css";
+@import "../tokens/semantic.css";
+EOF
+}
+
+run_hook() {
+  local event="${1:-Stop}"
+  local payload
+  payload=$(jq -n --arg e "$event" '{hook_event_name:$e}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR" 2>/dev/null)
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_block() {
+  local name="$1"; local needle="${2:-ORPHAN-DS-CSS BLOCKER}"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected BLOCK exit=2 + '$needle', got exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+# orphan stderr 必含此 file 的 rel path(guard against 漏報具體檔)
+expect_block_lists() {
+  local name="$1"; local rel="$2"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "ORPHAN-DS-CSS BLOCKER" \
+     && echo "$STDERR_TEXT" | grep -qF "$rel"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected BLOCK listing '$rel', exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent exit=0, got exit=$EXIT, stderr=$([ -n "$STDERR_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_orphan_ds_css tests ==="
+
+# ── NEGATIVE: event gating + missing infra ─────────────────────────────────
+
+# 1. Non-Stop event(PreToolUse)→ silent，即使有 orphan 也不掃
+reset_ds
+cat > "$DS_SRC/components/orphan.css" <<'EOF'
+:root { --foo: 1px; }
+EOF
+run_hook "PreToolUse"
+expect_pass_silent "1. event=PreToolUse → skip(不掃,即使有 orphan)"
+
+# 2. 無 DS_SRC dir → silent
+rm -rf "$TMP_DIR/packages"
+run_hook "Stop"
+expect_pass_silent "2. 無 packages/design-system/src dir → silent"
+
+# 3. 有 DS_SRC 但無 tokens.css aggregator → silent
+mkdir -p "$DS_SRC/components"
+cat > "$DS_SRC/components/x.css" <<'EOF'
+:root { --x: 1px; }
+EOF
+run_hook "Stop"
+expect_pass_silent "3. 無 tokens.css aggregator → silent"
+
+# ── POSITIVE: real orphan(guards against over-narrow regex)────────────────
+
+# 4. CSS 既不在 aggregator 也沒被 import → BLOCK，列出該檔
+#    (這是 2026-05-26 header-canonical.css / data-table.css 真 root case)
+reset_ds
+cat > "$DS_SRC/patterns/data-table.css" <<'EOF'
+.ds-data-table { display: grid; }
+EOF
+run_hook "Stop"
+expect_block_lists "4. orphan CSS(不在 aggregator 不被 import)→ BLOCK 列出檔" "patterns/data-table.css"
+
+# 5. 多個 orphan → BLOCK，兩個 rel path 都列出(M10 exhaustive,不只報第一個)
+reset_ds
+cat > "$DS_SRC/patterns/data-table.css" <<'EOF'
+.ds-data-table { display: grid; }
+EOF
+cat > "$DS_SRC/components/header-canonical.css" <<'EOF'
+.ds-chrome-header { height: var(--chrome-header-h); }
+EOF
+run_hook "Stop"
+if [ "$EXIT" = "2" ] \
+   && echo "$STDERR_TEXT" | grep -qF "patterns/data-table.css" \
+   && echo "$STDERR_TEXT" | grep -qF "components/header-canonical.css"; then
+  echo "  PASS  5. 多 orphan → 兩檔都列出"; PASS=$((PASS+1))
+else
+  echo "  FAIL  5. 多 orphan(expected 兩檔都列出, exit=$EXIT)"
+  echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+  FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - 5. 多 orphan"
+fi
+
+# ── NEGATIVE: legit CSS not orphan(guards against over-broad regex)─────────
+
+# 6. CSS 在 aggregator(rel path @import)→ silent
+reset_ds
+cat > "$DS_SRC/tokens/primitives.css" <<'EOF'
+:root { --primitive-blue: #06f; }
+EOF
+# tokens.css 已 @import "../tokens/primitives.css" → rel "tokens/primitives.css" 命中 grep -F
+run_hook "Stop"
+expect_pass_silent "6. CSS 在 tokens.css aggregator(rel path 命中)→ silent"
+
+# 7. CSS 被 tsx import(component-internal scoped)→ silent
+reset_ds
+cat > "$DS_SRC/components/Tooltip.css" <<'EOF'
+.ds-tooltip { z-index: 50; }
+EOF
+cat > "$DS_SRC/components/Tooltip.tsx" <<'EOF'
+import "./Tooltip.css";
+export const Tooltip = () => null;
+EOF
+run_hook "Stop"
+expect_pass_silent "7. CSS 被 tsx import → silent(component-internal scoped)"
+
+# 8. CSS 被另一個 .css @import(chain via css)→ silent
+reset_ds
+cat > "$DS_SRC/patterns/sub.css" <<'EOF'
+.ds-sub { color: red; }
+EOF
+cat > "$DS_SRC/patterns/index.css" <<'EOF'
+@import "./sub.css";
+EOF
+# index.css 自己也得被消費,否則它變 orphan → 讓 tokens.css 收 index.css
+sed -i.bak '$a\
+@import "../patterns/index.css";' "$DS_SRC/styles/tokens.css"
+rm -f "$DS_SRC/styles/tokens.css.bak"
+run_hook "Stop"
+expect_pass_silent "8. CSS 被另一 .css @import + chain head 在 aggregator → silent"
+
+# 9. styles/tokens.css aggregator 自身永遠 skip(空 DS,只有 aggregator)→ silent
+#    (near-miss:aggregator rel path 不在自己內容裡，但 hook 顯式 skip)
+reset_ds
+run_hook "Stop"
+expect_pass_silent "9. 只有 tokens.css aggregator 自身 → silent(顯式 skip)"
+
+# 10. SubagentStop event 同樣觸發掃描(orphan → BLOCK)
+reset_ds
+cat > "$DS_SRC/components/lone.css" <<'EOF'
+.ds-lone { display: none; }
+EOF
+run_hook "SubagentStop"
+expect_block "10. event=SubagentStop + orphan → BLOCK" "ORPHAN-DS-CSS BLOCKER"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  printf "Failed:%b\n" "$FAILED_TESTS"
+  exit 1
+fi
+exit 0