@qijenchen/design-system 0.1.0-beta.8 → 0.1.0-beta.80

package/ds-canonical/hooks/tests/test_check_select_all_canonical.sh

@@ -0,0 +1,125 @@
+#!/bin/bash
+# Tests for check_select_all_canonical.sh(2026-05-16)
+#
+# Hook 規則:PreToolUse Edit/Write on packages/design-system/src/**。
+# 若 NEW_CONTENT 含「Select All」 handler keyword(handleSelectAll / onSelectAll /
+# onCheckAll / handleCheckAll / 全選 / checkAll= / selectAll=)但無 import
+# `applySelectAll` 或 `multi-select-ordering` SSOT primitive → stderr 警告
+# 「Select All ordering SSOT drift warning」(non-blocking, exit 0)。
+# Allowlist:NEW_CONTENT 含 `@select-all-canonical-allow` → 跳過。
+# 本 SSOT 檔自身(multi-select-ordering.ts)不查。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_select_all_canonical.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+run_hook() {
+  local file_path="$1"
+  local new_string="$2"
+  local payload
+  payload=$(jq -n --arg fp "$file_path" --arg ns "$new_string" \
+    '{tool_name: "Edit", tool_input: {file_path: $fp, new_string: $ns}}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDOUT_TEXT=$(cat "$STDOUT")
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (exit=$EXIT, stderr non-empty=$([ -n "$STDERR_TEXT" ] && echo yes))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_warn() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "0" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected stderr warn '$needle', got exit $EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_select_all_canonical tests ==="
+
+# 1. handleSelectAll handler without applySelectAll import → warn
+run_hook "/repo/packages/design-system/src/components/DataTable/data-table.tsx" '
+const handleSelectAll = () => {
+  setSelected([...selected, ...options.map(o => o.value)]);
+};
+'
+expect_warn "1. handleSelectAll without SSOT import → warn" "Select All ordering SSOT drift"
+
+# 2. handleSelectAll WITH applySelectAll import → silent
+run_hook "/repo/packages/design-system/src/components/DataTable/data-table.tsx" '
+import { applySelectAll } from "@/design-system/lib/multi-select-ordering";
+const handleSelectAll = () => {
+  setSelected(applySelectAll(selected, allValues));
+};
+'
+expect_pass_silent "2. handleSelectAll with applySelectAll → silent"
+
+# 3. @select-all-canonical-allow comment → silent skip
+run_hook "/repo/packages/design-system/src/components/DataTable/data-table.tsx" '
+// @select-all-canonical-allow: cascading multi-tree case, custom ordering needed
+const handleSelectAll = () => {
+  setSelected([...selected, ...options.map(o => o.value)]);
+};
+'
+expect_pass_silent "3. @select-all-canonical-allow → silent"
+
+# 4. Edit outside design-system → silent skip
+run_hook "/repo/src/explorations/foo.tsx" '
+const handleSelectAll = () => setSelected(allValues);
+'
+expect_pass_silent "4. non-design-system path → silent skip"
+
+# 5. The SSOT primitive file itself → silent skip
+run_hook "/repo/packages/design-system/src/lib/multi-select-ordering.ts" '
+export const applySelectAll = (selected, all) => {
+  // canonical impl
+};
+const handleSelectAll = () => 1;
+'
+expect_pass_silent "5. multi-select-ordering.ts itself → silent skip"
+
+# 6. 全選 chinese keyword without SSOT → warn
+run_hook "/repo/packages/design-system/src/components/Sidebar/sidebar.tsx" '
+<button onClick={() => setSelected(all)}>全選</button>
+'
+expect_warn "6. 全選 keyword without SSOT → warn" "Select All ordering SSOT drift"
+
+# 7. onCheckAll prop without SSOT → warn
+run_hook "/repo/packages/design-system/src/components/Filter/filter.tsx" '
+<Checkbox onCheckAll={handler} />
+'
+expect_warn "7. onCheckAll without SSOT → warn" "Select All ordering SSOT drift"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  echo "Failed:$FAILED_TESTS"
+  exit 1
+fi

package/ds-canonical/hooks/tests/test_check_sidebar_menu_button_implicit_wrap.sh

@@ -0,0 +1,224 @@
+#!/bin/bash
+# Tests for check_sidebar_menu_button_implicit_wrap.sh
+# (per user 2026-05-27 UserFooter Avatar 垂直 stack drift)
+#
+# Hook 規則(PreToolUse,Edit/Write/MultiEdit on *.tsx,非 *.test.tsx):
+#   讀 tool_input.content // tool_input.new_string。
+#   DRIFT(emit stderr 訊息 + exit 2 BLOCK,2026-05-31 folded-hook-audit 升 0→2):
+#     `<SidebarMenuButton ...>...</SidebarMenuButton>` block 開標籤無 `asChild`
+#     且 body 含 `<ItemAvatar` 或 `<Avatar`(word-boundary)。
+#   ALLOW(silent,exit 0,stderr empty):
+#     - asChild 在開標籤 → consumer 自管 layout
+#     - startIcon prop + 無 Avatar children → prop layout 不 wrap
+#     - <AvatarGroup>(word-boundary 排除,非 <Avatar)
+#     - Avatar 在 block 外 / 無 SidebarMenuButton
+#   Gate skip(silent):非 PreToolUse / 非 Edit|Write|MultiEdit / 非 *.tsx / *.test.tsx
+#   Override:CLAUDE_BYPASS_SIDEBAR_MENU_BUTTON_WRAP=1 → silent(audit-logged)
+#
+# NOTE:此 hook 2026-05-31 升 P0 BLOCKER(stderr 訊息 + exit 2)— SSOT canonical per
+#       feedback_ssot_mechanical_p0_not_p1;verified clean on canonical sidebar + env escape 兜 false-positive。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_sidebar_menu_button_implicit_wrap.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+export CLAUDE_PROJECT_DIR="$TMP_DIR"
+
+# Needle present in the hook's DRIFT stderr block
+NEEDLE="SidebarMenuButton implicit-wrap canonical violation"
+
+# run_hook <file_path> <content> [field=content|new_string] [tool] [event] [bypass=0|1]
+run_hook() {
+  local file_path="$1"; local content="$2"
+  local field="${3:-content}"; local tool="${4:-Write}"
+  local event="${5:-PreToolUse}"; local bypass="${6:-0}"
+  local payload
+  if [ "$field" = "new_string" ]; then
+    payload=$(jq -n --arg fp "$file_path" --arg c "$content" --arg t "$tool" --arg e "$event" \
+      '{hook_event_name:$e, tool_name:$t, tool_input:{file_path:$fp, new_string:$c}}')
+  else
+    payload=$(jq -n --arg fp "$file_path" --arg c "$content" --arg t "$tool" --arg e "$event" \
+      '{hook_event_name:$e, tool_name:$t, tool_input:{file_path:$fp, content:$c}}')
+  fi
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  if [ "$bypass" = "1" ]; then
+    printf '%s' "$payload" | CLAUDE_BYPASS_SIDEBAR_MENU_BUTTON_WRAP=1 bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  else
+    printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  fi
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR" 2>/dev/null)
+  rm -f "$STDOUT" "$STDERR"
+}
+
+# POSITIVE: DRIFT detected → stderr 訊息 + exit 2 BLOCK(2026-05-31 folded-hook-audit 升 0→2)
+expect_block() {
+  local name="$1"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "$NEEDLE"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected BLOCK: exit=2 + needle, got exit=$EXIT, needle=$(echo "$STDERR_TEXT" | grep -qF "$NEEDLE" && echo found || echo MISSING))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+# NEGATIVE: clean / out-of-scope → silent + exit 0
+expect_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent, exit=$EXIT, stderr=$([ -n "$STDERR_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_sidebar_menu_button_implicit_wrap tests ==="
+
+# ── Realistic fixtures(UserFooter scenario)───────────────────────────────────
+
+# DRIFT: SidebarMenuButton 無 asChild,body 含 <Avatar(user 抓的垂直 stack bug)
+DRIFT_AVATAR='import { SidebarMenuButton, Avatar } from "@qijenchen/design-system";
+export function UserFooter() {
+  return (
+    <SidebarMenuButton tooltip="Jane Cooper">
+      <Avatar src="/jane.png" alt="Jane Cooper" size="sm" />
+      <span className="truncate">Jane Cooper</span>
+    </SidebarMenuButton>
+  );
+}'
+
+# DRIFT: 同樣無 asChild,body 含 <ItemAvatar(另一 avatar prefix)
+DRIFT_ITEMAVATAR='export function UserFooter() {
+  return (
+    <SidebarMenuButton id="user-footer">
+      <ItemAvatar name="Jane Cooper" />
+      <span>Jane Cooper</span>
+    </SidebarMenuButton>
+  );
+}'
+
+# CLEAN: asChild + consumer 自管 div role="group" layout(canonical 修法)
+CLEAN_ASCHILD='export function UserFooter() {
+  return (
+    <SidebarMenuButton asChild>
+      <div role="group" className="flex items-center gap-2">
+        <Avatar src="/jane.png" alt="Jane Cooper" size="sm" />
+        <span data-sidebar="menu-label" className="min-w-0 flex-1 truncate">Jane Cooper</span>
+      </div>
+    </SidebarMenuButton>
+  );
+}'
+
+# CLEAN: startIcon prop + 純文字 children(prop layout,不 wrap Avatar)
+CLEAN_STARTICON='import { Settings } from "lucide-react";
+export function NavItem() {
+  return <SidebarMenuButton startIcon={Settings}>Settings</SidebarMenuButton>;
+}'
+
+# CLEAN (near-miss over-broad guard): <AvatarGroup 非 <Avatar(word-boundary 必須排除)
+CLEAN_AVATARGROUP='export function TeamFooter() {
+  return (
+    <SidebarMenuButton id="team">
+      <AvatarGroup users={members} max={3} />
+    </SidebarMenuButton>
+  );
+}'
+
+# CLEAN (near-miss over-broad guard): Avatar 在 block 外,SidebarMenuButton 用 startIcon
+CLEAN_AVATAR_OUTSIDE='export function Footer() {
+  return (
+    <>
+      <SidebarMenuButton startIcon={Home}>Home</SidebarMenuButton>
+      <Avatar src="/x.png" alt="x" />
+    </>
+  );
+}'
+
+# CLEAN: 完全無 SidebarMenuButton(但有 Avatar)
+CLEAN_NO_SMB='export function Card() {
+  return <div className="card"><Avatar src="/x.png" alt="x" /></div>;
+}'
+
+# ── POSITIVE cases(should block)────────────────────────────────────────────────
+
+# 1. 真 violation:<Avatar inside non-asChild SidebarMenuButton(guards over-narrow regex)
+run_hook "/repo/apps/template/src/UserFooter.tsx" "$DRIFT_AVATAR"
+expect_block "1. SidebarMenuButton no-asChild + <Avatar → block"
+
+# 2. 真 violation 變體:<ItemAvatar prefix(同 detection branch)
+run_hook "/repo/apps/template/src/UserFooter.tsx" "$DRIFT_ITEMAVATAR"
+expect_block "2. SidebarMenuButton no-asChild + <ItemAvatar → block"
+
+# 3. 同 violation 但走 Edit new_string field(覆蓋 content // new_string 雙路徑)
+run_hook "/repo/apps/template/src/UserFooter.tsx" "$DRIFT_AVATAR" "new_string" "Edit"
+expect_block "3. Edit new_string path + drift → block"
+
+# ── NEGATIVE cases — clean input(should be SILENT)─────────────────────────────
+
+# 4. asChild canonical 修法 → silent
+run_hook "/repo/apps/template/src/UserFooter.tsx" "$CLEAN_ASCHILD"
+expect_silent "4. asChild + div role=group → silent"
+
+# 5. startIcon prop + 純文字 → silent(guards over-broad: 不該 fire 在合法 SidebarMenuButton)
+run_hook "/repo/apps/template/src/NavItem.tsx" "$CLEAN_STARTICON"
+expect_silent "5. startIcon prop, no Avatar → silent"
+
+# 6. NEAR-MISS over-broad guard: <AvatarGroup 非 <Avatar(word-boundary)→ silent
+run_hook "/repo/apps/template/src/TeamFooter.tsx" "$CLEAN_AVATARGROUP"
+expect_silent "6. <AvatarGroup (word-boundary) → silent"
+
+# 7. NEAR-MISS over-broad guard: Avatar 在 block 外 → silent
+run_hook "/repo/apps/template/src/Footer.tsx" "$CLEAN_AVATAR_OUTSIDE"
+expect_silent "7. Avatar outside SidebarMenuButton block → silent"
+
+# 8. 無 SidebarMenuButton(只 Avatar)→ silent
+run_hook "/repo/apps/template/src/Card.tsx" "$CLEAN_NO_SMB"
+expect_silent "8. no SidebarMenuButton → silent"
+
+# ── NEGATIVE cases — out-of-scope gating(should be SILENT)─────────────────────
+
+# 9. 非 PreToolUse(PostToolUse)→ silent(即使 content 有 drift)
+run_hook "/repo/apps/template/src/UserFooter.tsx" "$DRIFT_AVATAR" "content" "Write" "PostToolUse"
+expect_silent "9. event=PostToolUse → skip (silent)"
+
+# 10. 非 *.tsx(.ts)→ silent
+run_hook "/repo/apps/template/src/UserFooter.ts" "$DRIFT_AVATAR"
+expect_silent "10. non-.tsx file → skip (silent)"
+
+# 11. *.test.tsx 排除 → silent
+run_hook "/repo/apps/template/src/UserFooter.test.tsx" "$DRIFT_AVATAR"
+expect_silent "11. *.test.tsx excluded → silent"
+
+# 12. 非 Edit/Write/MultiEdit tool(Read)→ silent
+run_hook "/repo/apps/template/src/UserFooter.tsx" "$DRIFT_AVATAR" "content" "Read"
+expect_silent "12. tool=Read → skip (silent)"
+
+# 13. CLAUDE_BYPASS_SIDEBAR_MENU_BUTTON_WRAP=1 override → silent(即使 drift)
+run_hook "/repo/apps/template/src/UserFooter.tsx" "$DRIFT_AVATAR" "content" "Write" "PreToolUse" "1"
+expect_silent "13. CLAUDE_BYPASS_SIDEBAR_MENU_BUTTON_WRAP=1 → silent"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  printf "Failed:%b\n" "$FAILED_TESTS"
+  exit 1
+fi
+exit 0

package/ds-canonical/hooks/tests/test_check_solo_workflow.sh

@@ -0,0 +1,201 @@
+#!/bin/bash
+# Tests for check_solo_workflow.sh(M28,2026-05-08 codified)
+#
+# Hook 規則(PreToolUse,Bash + mcp__github__create_pull_request + mcp__github__merge_pull_request):
+#   R1. `git checkout -b claude/X` 第 2 次 in same session → BLOCK exit 2
+#       (1st creation OK,record to TRACK_FILE)
+#   R2. `gh pr create` / `gh api -X POST .../pulls` / mcp__github__create_pull_request → BLOCK exit 2
+#       (read-only `gh api .../pulls/N/comments` 不 block)
+#   R3. `git push ... main` / mcp__github__merge_pull_request 無 user "push" trigger → BLOCK exit 2
+#       (transcript 含 push/OK/合 main keyword → silent pass)
+# Override:CLAUDE_BYPASS_SOLO_WORKFLOW=1 → silent (audit-logged)。
+# Non-Bash non-MCP / 非觸發 command → silent。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_solo_workflow.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+
+# Override CLAUDE_PROJECT_DIR so TRACK_FILE / BYPASS_LOG land in TMP_DIR
+# (避免污染 repo .claude/logs/)
+export CLAUDE_PROJECT_DIR="$TMP_DIR"
+mkdir -p "$TMP_DIR/.claude/logs"
+TRACK_FILE="$TMP_DIR/.claude/logs/session-branch-track.jsonl"
+
+build_transcript() {
+  local path="$1"; shift
+  : > "$path"
+  for msg in "$@"; do
+    jq -n --arg t "$msg" \
+      '{type:"user", message:{role:"user", content:$t}}' >> "$path"
+  done
+}
+
+run_hook_bash() {
+  local cmd="$1"; local session="${2:-sess-1}"; local transcript="${3:-}"
+  local payload
+  if [ -n "$transcript" ]; then
+    payload=$(jq -n \
+      --arg c "$cmd" --arg s "$session" --arg tp "$transcript" \
+      '{tool_name:"Bash", session_id:$s, transcript_path:$tp, tool_input:{command:$c}}')
+  else
+    payload=$(jq -n \
+      --arg c "$cmd" --arg s "$session" \
+      '{tool_name:"Bash", session_id:$s, tool_input:{command:$c}}')
+  fi
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+run_hook_mcp() {
+  local tool="$1"; local transcript="${2:-}"
+  local payload
+  if [ -n "$transcript" ]; then
+    payload=$(jq -n --arg t "$tool" --arg tp "$transcript" \
+      '{tool_name:$t, transcript_path:$tp, tool_input:{}}')
+  else
+    payload=$(jq -n --arg t "$tool" \
+      '{tool_name:$t, tool_input:{}}')
+  fi
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent, exit=$EXIT, stderr=$([ -n "$STDERR_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_block() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected BLOCK exit=2 + '$needle', got exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_solo_workflow tests ==="
+
+TX_NO_TRIGGER="$TMP_DIR/tx_no_trigger.jsonl"
+build_transcript "$TX_NO_TRIGGER" \
+  "請幫我看一下" \
+  "改個 padding" \
+  "audit 一下" \
+  "謝謝" \
+  "再 review"
+
+TX_PUSH_TRIGGER="$TMP_DIR/tx_push_trigger.jsonl"
+build_transcript "$TX_PUSH_TRIGGER" \
+  "請改" \
+  "OK 看起來不錯" \
+  "可以 push 了" \
+  "合進去" \
+  "謝謝"
+
+# 1. Non-Bash / Non-MCP tool → silent
+payload_other=$(jq -n '{tool_name:"Read", tool_input:{file_path:"/a"}}')
+STDOUT=$(mktemp); STDERR=$(mktemp)
+set +e
+printf '%s' "$payload_other" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+EXIT=$?
+set -e
+STDERR_TEXT=$(cat "$STDERR")
+rm -f "$STDOUT" "$STDERR"
+expect_pass_silent "1. tool=Read → skip"
+
+# 2. Non-trigger Bash command → silent
+run_hook_bash "ls -la"
+expect_pass_silent "2. innocuous bash → silent"
+
+# 3. R1: First `git checkout -b claude/foo` for session → silent + record
+rm -f "$TRACK_FILE"
+run_hook_bash "git checkout -b claude/foo" "sess-A"
+expect_pass_silent "3. R1 first claude/foo branch → silent (recorded)"
+
+# 4. R1: Second different branch in SAME session → BLOCK
+# (TRACK_FILE has sess-A → claude/foo from test 3)
+run_hook_bash "git checkout -b claude/bar" "sess-A"
+expect_block "4. R1 second branch same session → BLOCK" "R1 BLOCKER"
+
+# 5. R1: Same branch name reuse in same session → silent (EXISTING == NEW_BRANCH)
+# Hook 邏輯:已存在 + 同 branch 名 → 不 block (跳 if 條件)。
+run_hook_bash "git checkout -b claude/foo" "sess-A"
+expect_pass_silent "5. R1 same branch reuse same session → silent"
+
+# 6. R2: gh pr create → BLOCK
+run_hook_bash "gh pr create --title 'x' --body 'y'"
+expect_block "6. R2 gh pr create → BLOCK" "R2 BLOCKER"
+
+# 7. R2: read-only gh api pulls/N/comments → silent (allow read collab)
+run_hook_bash "gh api repos/foo/bar/pulls/123/comments"
+expect_pass_silent "7. R2 read-only gh api .../comments → silent"
+
+# 8. R2: gh api -X POST pulls → BLOCK (write method)
+run_hook_bash "gh api -X POST repos/foo/bar/pulls -f title=x"
+expect_block "8. R2 gh api -X POST pulls → BLOCK" "R2 BLOCKER"
+
+# 9. R3: git push origin main + no trigger transcript → BLOCK
+run_hook_bash "git push origin main" "sess-B" "$TX_NO_TRIGGER"
+expect_block "9. R3 push main no trigger → BLOCK" "R3 BLOCKER"
+
+# 10. R3: git push origin main + trigger transcript → silent
+run_hook_bash "git push origin main" "sess-C" "$TX_PUSH_TRIGGER"
+expect_pass_silent "10. R3 push main + push trigger → silent"
+
+# 11. MCP create_pull_request → BLOCK
+run_hook_mcp "mcp__github__create_pull_request"
+expect_block "11. MCP create_pull_request → BLOCK" "R2 BLOCKER"
+
+# 12. MCP merge_pull_request + no trigger → BLOCK
+run_hook_mcp "mcp__github__merge_pull_request" "$TX_NO_TRIGGER"
+expect_block "12. MCP merge no trigger → BLOCK" "R3 BLOCKER"
+
+# 13. CLAUDE_BYPASS_SOLO_WORKFLOW=1 override → silent
+payload_bypass=$(jq -n '{tool_name:"Bash", session_id:"sess-X", tool_input:{command:"gh pr create"}}')
+STDOUT=$(mktemp); STDERR=$(mktemp)
+set +e
+printf '%s' "$payload_bypass" | CLAUDE_BYPASS_SOLO_WORKFLOW=1 bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+EXIT=$?
+set -e
+STDERR_TEXT=$(cat "$STDERR")
+rm -f "$STDOUT" "$STDERR"
+expect_pass_silent "13. CLAUDE_BYPASS_SOLO_WORKFLOW=1 override → silent"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  echo "Failed:$FAILED_TESTS"
+  exit 1
+fi

package/ds-canonical/hooks/tests/test_check_spec_class_drift.sh

@@ -0,0 +1,135 @@
+#!/bin/bash
+# Tests for check_spec_class_drift.sh(Audit Dim 53,2026-05-17 ship)
+#
+# Hook 規則:Edit/Write/MultiEdit 對 packages/design-system/src/components/*/[a-z-]*.spec.md
+# 偵測 spec.md 寫「固定/寫死/硬寫 h-NN」但對應 tsx 已 migrate to var(--chrome-header-height)
+# token → stderr P1 warn(不 block;exit 0)。
+#
+# Allow escape:NEW_CONTENT 含 `@spec-class-drift-allow:` → silent。
+# 非 spec.md / tsx 不存在 → silent。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_spec_class_drift.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+
+# Build a fake DS component dir with spec.md + tsx pair in TMP_DIR
+# so hook's `TSX_PATH="${FILE_PATH%.spec.md}.tsx"` resolves correctly。
+build_pair() {
+  local comp_name="$1"
+  local tsx_content="$2"
+  mkdir -p "$TMP_DIR/packages/design-system/src/components/$comp_name"
+  printf '%s' "$tsx_content" > "$TMP_DIR/packages/design-system/src/components/$comp_name/${comp_name}.tsx"
+  echo "$TMP_DIR/packages/design-system/src/components/$comp_name/${comp_name}.spec.md"
+}
+
+run_hook() {
+  local tool="$1"
+  local file_path="$2"
+  local content="$3"
+  local payload
+  if [ "$tool" = "Edit" ]; then
+    payload=$(jq -n --arg tn "$tool" --arg fp "$file_path" --arg c "$content" \
+      '{tool_name: $tn, tool_input: {file_path: $fp, new_string: $c}}')
+  else
+    payload=$(jq -n --arg tn "$tool" --arg fp "$file_path" --arg c "$content" \
+      '{tool_name: $tn, tool_input: {file_path: $fp, content: $c}}')
+  fi
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent, exit=$EXIT, stderr=$([ -n "$STDERR_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_warn() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "0" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected warn '$needle', exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_spec_class_drift tests ==="
+
+# 1. Non-spec file (tsx) → skip silent
+run_hook "Edit" "$TMP_DIR/some.tsx" "any content"
+expect_pass_silent "1. non-spec.md file → skip"
+
+# 2. Non-DS path spec.md → skip silent
+run_hook "Edit" "/some/random/path/foo.spec.md" "固定 h-14"
+expect_pass_silent "2. spec.md outside DS components/ → skip"
+
+# 3. DS spec.md but no sibling tsx → skip silent
+SPEC_PATH="$TMP_DIR/packages/design-system/src/components/orphan/orphan.spec.md"
+mkdir -p "$(dirname "$SPEC_PATH")"
+run_hook "Edit" "$SPEC_PATH" "固定 h-14 寫死"
+expect_pass_silent "3. spec.md without sibling tsx → skip"
+
+# 4. spec 寫「固定 h-14」+ tsx 已消費 chrome-header-height token → P1 warn
+SPEC_PATH=$(build_pair "drifty" "
+export const Drifty = () => (
+  <div className=\"h-[var(--chrome-header-height)]\">...</div>
+);
+")
+run_hook "Edit" "$SPEC_PATH" "header 高度固定 h-14,不可改"
+expect_warn "4. spec '固定 h-14' + tsx token → warn" "SPEC-CODE REVERSE DRIFT"
+
+# 5. spec 寫「寫死 h-12」+ tsx 不含 h-12 → P1 warn (phrase mismatch pattern 1)
+SPEC_PATH=$(build_pair "noclass" "
+export const NoClass = () => (
+  <div className=\"h-[var(--chrome-header-height)]\">...</div>
+);
+")
+run_hook "Edit" "$SPEC_PATH" "container 寫死 h-12 處理"
+expect_warn "5. spec '寫死 h-12' + tsx 不含 h-12 → warn" "SPEC-CODE REVERSE DRIFT"
+
+# 6. spec 寫「固定 h-14」+ allow marker → silent
+SPEC_PATH=$(build_pair "allowed" "
+export const Allowed = () => (
+  <div className=\"h-[var(--chrome-header-height)]\">...</div>
+);
+")
+run_hook "Edit" "$SPEC_PATH" "// @spec-class-drift-allow: known legacy doc
+header 高度固定 h-14"
+expect_pass_silent "6. spec with @spec-class-drift-allow: marker → silent"
+
+# 7. Wrong tool (Read) → skip
+run_hook "Read" "$SPEC_PATH" "固定 h-14"
+expect_pass_silent "7. tool=Read → skip"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  echo "Failed:$FAILED_TESTS"
+  exit 1
+fi