@qijenchen/design-system 0.1.0-beta.8 → 0.1.0-beta.80

package/ds-canonical/hooks/tests/test_check_storybook_addon_preset_cjs.sh

@@ -0,0 +1,200 @@
+#!/bin/bash
+# 2026-06-11 repoint:check_storybook_addon_preset_cjs.sh 已合併進 check_storybook_addon_packaging.sh(prune merge;測試 payload 不變 = 行為等價驗證)
+# Tests for check_storybook_addon_packaging.sh(P0,2026-05-28 beta.27-.31 5 連敗 anchor)
+#
+# Hook 規則(PreToolUse,Edit|Write|MultiEdit):
+#   Scope:  tool_input.file_path 匹配 `/addons/<name>/preset.ts$`(storybook-config OR .storybook)
+#           其他 file / 其他 tool → exit 0 silent
+#   Content:tool_input.new_string // tool_input.content;empty → exit 0
+#   Strip:  grep 前先剝 line-level + inline /* */ + trailing // 註解(M7/M34 broad-vs-narrow
+#           fix — 正確 preset.ts 會在 comment 內「文件化」anti-pattern,raw grep 會假 BLOCK)
+#   BLOCK(exit 2):code-stripped content 含 `createRequire` / `require.resolve`
+#                 OR `fileURLToPath\s*\(\s*import\.meta\.url`
+#   Escape: content 含 `@preset-cjs-skip:` → exit 0
+#   Needle: stderr 含 "STORYBOOK ADDON PRESET CJS BLOCKER"
+#
+# M34 broad-vs-narrow symmetry probes:
+#   - over-broad guard:keyword 只在 comment 內 → 必 NOT block(test 6,7,8)
+#   - over-narrow guard:keyword 在真 code → 必 block,且 fileURLToPath 需配 import.meta.url(test 9,10)
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_storybook_addon_packaging.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+# Override CLAUDE_PROJECT_DIR so _log-fire.sh state lands in TMP_DIR(不污染 repo .claude/logs/)
+export CLAUDE_PROJECT_DIR="$TMP_DIR"
+mkdir -p "$TMP_DIR/.claude/logs"
+
+# run_hook tool file_path content_field content_value
+#   content_field = "content" | "new_string"
+run_hook() {
+  local tool="$1"; local file_path="$2"; local field="$3"; local content="$4"
+  local payload
+  payload=$(jq -n \
+    --arg tn "$tool" --arg fp "$file_path" --arg cf "$field" --arg c "$content" \
+    '{tool_name:$tn, tool_input:({file_path:$fp} + {($cf):$c})}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR" 2>/dev/null)
+  rm -f "$STDOUT" "$STDERR"
+}
+
+# run_hook_read — non-Edit/Write tool(no content)
+run_hook_read() {
+  local file_path="$1"
+  local payload
+  payload=$(jq -n --arg fp "$file_path" \
+    '{tool_name:"Read", tool_input:{file_path:$fp}}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR" 2>/dev/null)
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent exit=0, got exit=$EXIT, stderr=$([ -n "$STDERR_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_block() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected BLOCK exit=2 + '$needle', got exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+NEEDLE="STORYBOOK ADDON PRESET CJS BLOCKER"
+PRESET="/repo/packages/storybook-config/addons/theme-toolbar/preset.ts"
+
+echo "=== check_storybook_addon_preset_cjs tests ==="
+
+# ───────────────────────── POSITIVE(should BLOCK)─────────────────────────
+
+# 1. createRequire in real preset.ts code → BLOCK
+run_hook "Write" "$PRESET" "content" \
+'import { createRequire } from "module"
+const require = createRequire(import.meta.url)
+export const managerEntries = (e = []) => [...e, require.resolve("./manager")]'
+expect_block "1. createRequire in real code → BLOCK" "$NEEDLE"
+
+# 2. require.resolve in real code(no createRequire)→ BLOCK
+run_hook "Write" "$PRESET" "content" \
+'export const previewAnnotations = (e = []) => [...e, require.resolve("./preview")]'
+expect_block "2. require.resolve in real code → BLOCK" "$NEEDLE"
+
+# 3. fileURLToPath(import.meta.url) in real code → BLOCK(over-narrow guard: real violation must fire)
+run_hook "Write" "$PRESET" "content" \
+'import { fileURLToPath } from "url"
+const __dirname = path.dirname(fileURLToPath(import.meta.url))'
+expect_block "3. fileURLToPath(import.meta.url) real code → BLOCK" "$NEEDLE"
+
+# 4. Edit tool via new_string field → BLOCK(contract: new_string takes precedence over content)
+run_hook "Edit" "/x/.storybook/addons/density/preset.ts" "new_string" \
+'const r = createRequire(import.meta.url)'
+expect_block "4. Edit new_string createRequire → BLOCK" "$NEEDLE"
+
+# 5. require.resolve with trailing inline // comment, code still present → BLOCK
+#    (guard: strip 只剝 comment portion,不可吃掉同行真 code)
+run_hook "Write" "$PRESET" "content" \
+'const m = require.resolve("./manager") // resolve the manager entry
+export const x = 1'
+expect_block "5. real require.resolve + trailing comment → BLOCK" "$NEEDLE"
+
+# ───────────────────────── NEGATIVE(should NOT block)─────────────────────
+
+# 6. createRequire ONLY in a // full-line comment(M34 over-broad guard)→ silent
+run_hook "Write" "$PRESET" "content" \
+'// WHY .cjs: createRequire / require.resolve 被 Node ESM scope 攔,故不用此檔
+const path = require("path")
+module.exports = {}'
+expect_pass_silent "6. createRequire only in // comment → silent"
+
+# 7. require.resolve ONLY in a trailing // comment(M34 over-broad guard)→ silent
+run_hook "Write" "$PRESET" "content" \
+'export const e = (x = []) => [...x, path.join(__dirname, "manager.tsx")] // avoid require.resolve'
+expect_pass_silent "7. require.resolve only in trailing comment → silent"
+
+# 8. createRequire ONLY in inline /* ... */ block comment → silent
+run_hook "Write" "$PRESET" "content" \
+'const path = require("path") /* not createRequire — pure CJS */
+export const x = 1'
+expect_pass_silent "8. createRequire only in inline block comment → silent"
+
+# 9. fileURLToPath called on a NON-import.meta.url arg → silent(over-narrow boundary: regex requires import.meta.url)
+run_hook "Write" "$PRESET" "content" \
+'const p = fileURLToPath(someConfiguredUrl)
+export const x = 1'
+expect_pass_silent "9. fileURLToPath(otherVar) ≠ import.meta.url → silent"
+
+# 10. Clean canonical preset.ts(path.join(__dirname))→ silent
+run_hook "Write" "$PRESET" "content" \
+'import path from "path"
+export const managerEntries = (e = []) => [...e, path.join(__dirname, "manager.tsx")]
+export const previewAnnotations = (e = []) => [...e, path.join(__dirname, "preview.ts")]'
+expect_pass_silent "10. clean path.join(__dirname) preset.ts → silent"
+
+# 11. Escape clause @preset-cjs-skip: present despite createRequire → silent
+run_hook "Write" "$PRESET" "content" \
+'// @preset-cjs-skip: legacy bundler migration, owner-approved
+const r = createRequire(import.meta.url)'
+expect_pass_silent "11. @preset-cjs-skip: escape → silent"
+
+# 12. Out of scope — preset.cjs(not preset.ts)→ silent
+run_hook "Write" "/x/addons/foo/preset.cjs" "content" \
+'const r = createRequire(import.meta.url)'
+expect_pass_silent "12. preset.cjs (not .ts) out of scope → silent"
+
+# 13. Out of scope — manager.tsx in addons/ dir → silent
+run_hook "Write" "/x/addons/foo/manager.tsx" "content" \
+'const r = createRequire(import.meta.url)'
+expect_pass_silent "13. addons/manager.tsx out of scope → silent"
+
+# 14. Out of scope — preset.ts NOT under an addons/<name>/ dir → silent
+run_hook "Write" "/x/src/preset.ts" "content" \
+'const r = createRequire(import.meta.url)'
+expect_pass_silent "14. preset.ts outside addons/<name>/ → silent"
+
+# 15. Wrong tool(Read)on a preset.ts → silent
+run_hook_read "$PRESET"
+expect_pass_silent "15. tool=Read → skip"
+
+# 16. Empty content → silent(early exit)
+run_hook "Write" "$PRESET" "content" ""
+expect_pass_silent "16. empty content → silent"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  printf "Failed:%b\n" "$FAILED_TESTS"
+  exit 1
+fi
+exit 0

package/ds-canonical/hooks/tests/test_check_substantive_edit_approval_preflight.sh

@@ -0,0 +1,176 @@
+#!/bin/bash
+# Tests for check_substantive_edit_approval_preflight.sh(2026-05-15 P0 升級)
+#
+# Hook 規則:PreToolUse + Edit|Write|MultiEdit + file in packages/design-system/src/**.{tsx,ts,css}
+# 掃 transcript_path 最後 5 條 user msg → 無 approval keyword → BLOCK exit 2 stderr。
+# 有 approval keyword → silent pass。
+# Allowlist:.stories.tsx / .test.ts / .spec.ts → skip。
+# Override:CLAUDE_BYPASS_DESIGN_APPROVAL=1 → silent (audit-logged)。
+# 非 PreToolUse event / non-DS path / 無 transcript file → silent。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_substantive_edit_approval_preflight.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+
+# Build a transcript JSONL with N user messages (assistant lines in between).
+# Schema: 每 line 一 JSON record。Hook 用 jq `.message.role=="user"` filter + text extract。
+build_transcript() {
+  local path="$1"; shift
+  : > "$path"
+  for msg in "$@"; do
+    jq -n --arg t "$msg" \
+      '{message: {role: "user", content: [{type: "text", text: $t}]}}' >> "$path"
+  done
+}
+
+run_hook() {
+  local tool="$1"
+  local file_path="$2"
+  local transcript="$3"
+  local payload
+  payload=$(jq -n \
+    --arg tn "$tool" --arg fp "$file_path" --arg tp "$transcript" \
+    '{
+       hook_event_name: "PreToolUse",
+       tool_name: $tn,
+       tool_input: {file_path: $fp, content: "// fake edit"},
+       transcript_path: $tp
+     }')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+# Same as run_hook but with custom event (for non-PreToolUse test)
+run_hook_event() {
+  local event="$1"; local tool="$2"; local file_path="$3"; local transcript="$4"
+  local payload
+  payload=$(jq -n \
+    --arg ev "$event" --arg tn "$tool" --arg fp "$file_path" --arg tp "$transcript" \
+    '{
+       hook_event_name: $ev,
+       tool_name: $tn,
+       tool_input: {file_path: $fp, content: "// fake edit"},
+       transcript_path: $tp
+     }')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent, exit=$EXIT, stderr=$([ -n "$STDERR_TEXT" ] && echo non-empty || echo empty))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_block() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected BLOCK exit=2 + '$needle', got exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_substantive_edit_approval_preflight tests ==="
+
+# Common transcripts
+TX_NEUTRAL="$TMP_DIR/tx_neutral.jsonl"
+build_transcript "$TX_NEUTRAL" \
+  "請幫我看一下這個 component" \
+  "再 review 一次" \
+  "我覺得需要 refactor" \
+  "幫我跑 audit" \
+  "謝謝"
+
+TX_APPROVAL="$TMP_DIR/tx_approval.jsonl"
+build_transcript "$TX_APPROVAL" \
+  "請幫我看一下" \
+  "OK 同意這個方向" \
+  "可以 implement 了" \
+  "拍板,做吧" \
+  "go ahead"
+
+PROD_TSX="/foo/my-project/packages/design-system/src/components/Button/button.tsx"
+
+# 1. Non-PreToolUse event → silent
+run_hook_event "PostToolUse" "Edit" "$PROD_TSX" "$TX_NEUTRAL"
+expect_pass_silent "1. event=PostToolUse → skip"
+
+# 2. Non-Edit tool → silent
+run_hook "Read" "$PROD_TSX" "$TX_NEUTRAL"
+expect_pass_silent "2. tool=Read → skip"
+
+# 3. Non-DS production path → silent
+run_hook "Edit" "/foo/my-project/src/app.tsx" "$TX_NEUTRAL"
+expect_pass_silent "3. non-DS production path → skip"
+
+# 4. Stories file in DS → silent (allowlist)
+run_hook "Edit" "/foo/my-project/packages/design-system/src/components/Button/button.stories.tsx" "$TX_NEUTRAL"
+expect_pass_silent "4. .stories.tsx in DS → skip (allowlist)"
+
+# 5. DS production tsx + no transcript file → silent
+run_hook "Edit" "$PROD_TSX" "/nonexistent/path.jsonl"
+expect_pass_silent "5. transcript file missing → skip"
+
+# 6. DS production tsx + neutral transcript (no approval) → BLOCK
+run_hook "Edit" "$PROD_TSX" "$TX_NEUTRAL"
+expect_block "6. DS tsx + no approval → BLOCK exit 2" "BLOCKER"
+
+# 7. DS production tsx + approval keyword in recent user msg → silent pass
+run_hook "Edit" "$PROD_TSX" "$TX_APPROVAL"
+expect_pass_silent "7. DS tsx + approval keyword → silent"
+
+# 8. CLAUDE_BYPASS_DESIGN_APPROVAL=1 override → silent
+STDOUT=$(mktemp); STDERR=$(mktemp)
+set +e
+CLAUDE_BYPASS_DESIGN_APPROVAL=1 printf '%s' "$(jq -n \
+  --arg fp "$PROD_TSX" --arg tp "$TX_NEUTRAL" \
+  '{
+     hook_event_name: "PreToolUse",
+     tool_name: "Edit",
+     tool_input: {file_path: $fp, content: "// fake"},
+     transcript_path: $tp
+   }')" | CLAUDE_BYPASS_DESIGN_APPROVAL=1 bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+EXIT=$?
+set -e
+STDERR_TEXT=$(cat "$STDERR")
+rm -f "$STDOUT" "$STDERR"
+expect_pass_silent "8. CLAUDE_BYPASS_DESIGN_APPROVAL=1 override → silent"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  echo "Failed:$FAILED_TESTS"
+  exit 1
+fi

package/ds-canonical/hooks/tests/test_check_tab_lg_chrome_header_equal.sh

@@ -0,0 +1,141 @@
+#!/bin/bash
+# Tests for check_tab_lg_chrome_header_equal.sh
+#
+# Hook (PreToolUse Edit/Write/MultiEdit):編輯
+#   packages/design-system/src/tokens/uiSize/uiSize.css OR src/globals.css
+# 時 assert `--tab-height-lg`(uiSize)與 `--chrome-header-height`(globals)兩 token
+# md/lg 兩 context 都像素相等(rem 值字串等)。
+# 不等 → exit 2 + stderr「🚨 TAB_LG vs CHROME_HEADER_HEIGHT EQUAL BLOCKER」。
+# Out-of-scope file / 非 Edit|Write|MultiEdit tool → silent exit 0。
+#
+# Hook 從自身路徑 cd ../.. 算 PROJECT_ROOT 再 grep 兩 CSS 檔。
+# 測試策略:sandbox temp dir 復刻 .claude/hooks + token css 結構,把 hook 複製進去
+# 跑 — 控制 md/lg 兩值即可造 PASS / FAIL case。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+SRC_HOOK="$SCRIPT_DIR/../lib/_tab_lg_chrome_header_equal.sh"
+LOG_FIRE_SH="$SCRIPT_DIR/../_log-fire.sh"
+
+if [ ! -f "$SRC_HOOK" ]; then echo "FATAL: hook not found: $SRC_HOOK"; exit 1; fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+TMPROOT=$(mktemp -d)
+trap 'rm -rf "$TMPROOT"' EXIT
+
+# Setup sandbox: hook 放 .claude/hooks/lib/(對齊 production)。2026-06-01 #18 把 hook 改成
+# `cd $0/../../..` 算 PROJECT_ROOT(因它在 lib/、被 dispatcher 以 $0=lib 路徑呼叫,需 3 層上溯)。
+# test sandbox 必同放 lib/ 深度,否則 `../../..` 多上溯一層 → grep 找不到 CSS → 假 fail(2026-06-02 修)。
+mkdir -p "$TMPROOT/.claude/hooks/lib"
+mkdir -p "$TMPROOT/packages/design-system/src/tokens/uiSize"
+mkdir -p "$TMPROOT/src"
+cp "$SRC_HOOK" "$TMPROOT/.claude/hooks/lib/_tab_lg_chrome_header_equal.sh"
+chmod +x "$TMPROOT/.claude/hooks/lib/_tab_lg_chrome_header_equal.sh"
+# _log-fire.sh shim(hook source `$(dirname $0)/../_log-fire.sh` = .claude/hooks/_log-fire.sh)
+cp "$LOG_FIRE_SH" "$TMPROOT/.claude/hooks/_log-fire.sh" 2>/dev/null || true
+
+SANDBOX_HOOK="$TMPROOT/.claude/hooks/lib/_tab_lg_chrome_header_equal.sh"
+UISIZE_CSS="$TMPROOT/packages/design-system/src/tokens/uiSize/uiSize.css"
+GLOBALS_CSS="$TMPROOT/src/globals.css"
+
+write_tokens() {
+  # args: tab_lg_md tab_lg_lg ch_md ch_lg
+  # 2026-06-02 修:both token 寫進 uiSize.css —— #18 後 hook 從 uiSize.css 讀 chrome-header
+  # (globals.css 是 22 行 aggregator,token 已搬走,deep-audit Decision 1)。原 test 把
+  # chrome-header 寫 globals.css → hook grep uiSize.css 空值 → set -e 下 exit 1 假 fail。
+  cat > "$UISIZE_CSS" <<EOF
+:root {
+  --tab-height-lg: ${1}rem;
+  --chrome-header-height: ${3}rem;
+}
+[data-density="lg"] {
+  --tab-height-lg: ${2}rem;
+  --chrome-header-height: ${4}rem;
+}
+EOF
+  cat > "$GLOBALS_CSS" <<EOF
+/* aggregator — chrome-header-height 已搬至 uiSize.css(deep-audit Decision 1);此檔僅為 hook trigger-path 測試用 */
+:root {}
+EOF
+}
+
+run_hook() {
+  local file_path="$1"
+  local tool="${2:-Edit}"
+  local payload
+  payload=$(jq -n --arg fp "$file_path" --arg tn "$tool" \
+    '{tool_name: $tn, tool_input: {file_path: $fp, new_string: ""}}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$SANDBOX_HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDERR_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent, exit=$EXIT, stderr non-empty=$([ -n "$STDERR_TEXT" ] && echo yes))"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_block() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected exit 2 with '$needle', got exit $EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_tab_lg_chrome_header_equal tests ==="
+
+# 1. md + lg both equal → silent pass
+write_tokens "3" "3.5" "3" "3.5"
+run_hook "$UISIZE_CSS" "Edit"
+expect_pass_silent "1. md=3rem lg=3.5rem both equal → silent"
+
+# 2. md mismatch (uiSize 3rem vs globals 2.75rem) → BLOCK
+write_tokens "3" "3.5" "2.75" "3.5"
+run_hook "$UISIZE_CSS" "Edit"
+expect_block "2. md mismatch (3 vs 2.75) → BLOCK" "TAB_LG vs CHROME_HEADER_HEIGHT EQUAL BLOCKER"
+
+# 3. lg mismatch (uiSize 3.5rem vs globals 4rem) → BLOCK
+write_tokens "3" "3.5" "3" "4"
+run_hook "$GLOBALS_CSS" "Write"
+expect_block "3. lg mismatch (3.5 vs 4) → BLOCK" "lg: --tab-height-lg=3.5 rem ≠ --chrome-header-height=4 rem"
+
+# 4. out-of-scope file → silent pass (even if tokens drift)
+write_tokens "3" "3.5" "9" "9"
+run_hook "$TMPROOT/some/random/file.tsx" "Edit"
+expect_pass_silent "4. out-of-scope file → silent"
+
+# 5. non-Edit tool (Read) → silent pass
+write_tokens "3" "3.5" "9" "9"
+run_hook "$UISIZE_CSS" "Read"
+expect_pass_silent "5. non-Edit tool → silent"
+
+# 6. MultiEdit on globals.css with matched values → silent pass
+write_tokens "3" "3.5" "3" "3.5"
+run_hook "$GLOBALS_CSS" "MultiEdit"
+expect_pass_silent "6. MultiEdit on globals.css matched → silent"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  echo "Failed:$FAILED_TESTS"
+  exit 1
+fi