@qijenchen/design-system 0.1.0-beta.8 → 0.1.0-beta.81

package/ds-canonical/hooks/tests/test_check_escape_marker_abuse.sh

@@ -0,0 +1,192 @@
+#!/bin/bash
+# Tests for check_escape_marker_abuse.sh(P0 BLOCKER,user 2026-05-27 verbatim
+# 「不亂加 escape markers — 加就跳 enforcement」)
+#
+# Hook 規則(PreToolUse,Edit / Write / MultiEdit):
+#   Scope gate:
+#     - tool_name ∈ {Edit, Write, MultiEdit} 才檢查(其他 tool → exit 0)
+#     - file_path 必 match /(apps|consumer)/...(tsx|ts)$(consumer fork-user code)
+#     - file_path 含 packages/design-system/src/ → 排除(DS 有 legit exception)
+#     - content 取自 tool_input.new_string // tool_input.content;空 → exit 0
+#   BLOCK(exit 2)condition:
+#     - DISTINCT escape-marker types ≥ 3  OR
+#     - TOTAL escape-marker occurrences ≥ 5
+#   Override:CLAUDE_BYPASS_ESCAPE_MARKER_AUDIT=1 → exit 0(audit-logged)。
+#
+# Negative-case 斷言用「EXIT != 2(未 block)」為契約,不假設 stderr 全 silent:
+#   hook clean-input path 有 cosmetic `0\n0: integer expression expected` stderr
+#   noise(latent bug,見 hookBugFound),但 block 決策正確(exit 0)。測試斷言
+#   正確 block 行為,不遷就 noise。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_escape_marker_abuse.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+# TMP_DIR for any hook state(_log-fire.sh writes under CLAUDE_PROJECT_DIR)
+TMP_DIR=$(mktemp -d)
+trap 'rm -rf "$TMP_DIR"' EXIT
+export CLAUDE_PROJECT_DIR="$TMP_DIR"
+mkdir -p "$TMP_DIR/.claude/logs"
+
+# run_hook: feed JSON payload to hook via stdin
+#   $1 tool_name  $2 file_path  $3 content-field-name(content|new_string)  $4 content
+run_hook() {
+  local tool="$1"; local fp="$2"; local field="$3"; local content="$4"
+  local payload
+  payload=$(jq -n --arg t "$tool" --arg fp "$fp" --arg c "$content" --arg f "$field" \
+    '{hook_event_name:"PreToolUse", tool_name:$t, tool_input:({file_path:$fp} + {($f):$c})}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR" 2>/dev/null)
+  rm -f "$STDOUT" "$STDERR"
+}
+
+# run_hook_bypass: same but with CLAUDE_BYPASS_ESCAPE_MARKER_AUDIT=1
+run_hook_bypass() {
+  local tool="$1"; local fp="$2"; local field="$3"; local content="$4"
+  local payload
+  payload=$(jq -n --arg t "$tool" --arg fp "$fp" --arg c "$content" --arg f "$field" \
+    '{hook_event_name:"PreToolUse", tool_name:$t, tool_input:({file_path:$fp} + {($f):$c})}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | CLAUDE_BYPASS_ESCAPE_MARKER_AUDIT=1 bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDERR_TEXT=$(cat "$STDERR" 2>/dev/null)
+  rm -f "$STDOUT" "$STDERR"
+}
+
+# expect_block: exit 2 + needle in stderr
+expect_block() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "2" ] && echo "$STDERR_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected BLOCK exit=2 + '$needle', got exit=$EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+# expect_not_block: NOT blocked(exit != 2)。contract = 不擋;允許 cosmetic stderr。
+expect_not_block() {
+  local name="$1"
+  if [ "$EXIT" != "2" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected NOT blocked, got exit=2 BLOCKER)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+CONSUMER="/repo/apps/template/src/App.tsx"
+BLOCK_NEEDLE="ESCAPE-MARKER-ABUSE BLOCKER"
+
+echo "=== check_escape_marker_abuse tests ==="
+
+# ---------- POSITIVE cases(SHOULD block)----------
+
+# P1. 3 distinct markers(DISTINCT>=3 path)→ BLOCK
+C_3DISTINCT='// @ds-misuse-allow legacy grid
+import { Button } from "@qijenchen/design-system";
+// @story-baseline-allow snapshot drift
+export const App = () => <Button />;
+// @consumer-catalog-allow custom icon
+export const Foo = 1;'
+run_hook "Write" "$CONSUMER" "content" "$C_3DISTINCT"
+expect_block "P1. 3 distinct markers → BLOCK (DISTINCT>=3)" "$BLOCK_NEEDLE"
+
+# P2. 5 occurrences of SAME marker(TOTAL>=5 path, DISTINCT=1)→ BLOCK
+#     guards against over-narrow regex that only triggers on distinct-count
+C_5TOTAL='// @ds-misuse-allow case 1
+// @ds-misuse-allow case 2
+// @ds-misuse-allow case 3
+// @ds-misuse-allow case 4
+// @ds-misuse-allow case 5
+export const X = 1;'
+run_hook "Write" "$CONSUMER" "content" "$C_5TOTAL"
+expect_block "P2. 5 same-marker occurrences → BLOCK (TOTAL>=5)" "$BLOCK_NEEDLE"
+
+# P3. Edit tool reads new_string field(not content)→ BLOCK
+#     guards the new_string // content field-resolution fallback
+run_hook "Edit" "$CONSUMER" "new_string" "$C_3DISTINCT"
+expect_block "P3. Edit tool new_string field → BLOCK" "$BLOCK_NEEDLE"
+
+# P4. consumer/ path variant(not apps/)also in scope → BLOCK
+run_hook "Write" "/repo/consumer/widgets/Card.tsx" "content" "$C_3DISTINCT"
+expect_block "P4. /consumer/ path in scope → BLOCK" "$BLOCK_NEEDLE"
+
+# ---------- NEGATIVE cases(should NOT block)----------
+
+# N1. Clean consumer tsx, zero markers → NOT blocked
+C_CLEAN='import { Button } from "@qijenchen/design-system";
+export const App = () => <Button>Save</Button>;'
+run_hook "Write" "$CONSUMER" "content" "$C_CLEAN"
+expect_not_block "N1. clean consumer tsx, no markers → not blocked"
+
+# N2. NEAR-MISS over-narrow guard: 2 distinct markers (< 3) and 2 total (< 5)
+#     real near-miss to the DISTINCT threshold — must NOT block
+C_2DISTINCT='// @ds-misuse-allow legacy grid only
+// @benchmark-unverified pending source check
+export const App = 1;'
+run_hook "Write" "$CONSUMER" "content" "$C_2DISTINCT"
+expect_not_block "N2. near-miss 2 distinct / 2 total (< threshold) → not blocked"
+
+# N3. NEAR-MISS over-broad guard: marker-lookalikes that are NOT in the list.
+#     5 non-listed @-annotations (would block if regex were over-broad) → not blocked
+C_LOOKALIKE='// @eslint-disable-next-line
+// @ts-ignore
+// @deprecated use Bar instead
+// @internal helper
+// @todo refactor later
+export const App = 1;'
+run_hook "Write" "$CONSUMER" "content" "$C_LOOKALIKE"
+expect_not_block "N3. over-broad guard: 5 non-listed @-annotations → not blocked"
+
+# N4. Scope exclusion: DS source path(packages/design-system/src/)→ not blocked
+#     even with 3 distinct markers(DS has legit per-spec exceptions)
+run_hook "Write" "/repo/packages/design-system/src/components/Foo.tsx" "content" "$C_3DISTINCT"
+expect_not_block "N4. DS source path excluded → not blocked (even 3 markers)"
+
+# N5. Scope exclusion: non-consumer path(src/ root, not apps|consumer)→ skip
+run_hook "Write" "/repo/src/utils/helper.tsx" "content" "$C_3DISTINCT"
+expect_not_block "N5. non-consumer path (src/) → not blocked"
+
+# N6. Scope exclusion: .css file(only .tsx/.ts in scope)→ skip
+run_hook "Write" "/repo/apps/template/src/styles.css" "content" "$C_3DISTINCT"
+expect_not_block "N6. .css file out of scope → not blocked"
+
+# N7. Tool gate: Read tool → skip(only Edit/Write/MultiEdit)
+run_hook "Read" "$CONSUMER" "content" "$C_3DISTINCT"
+expect_not_block "N7. tool=Read → not blocked"
+
+# N8. Empty content → exit 0(early return)
+run_hook "Write" "$CONSUMER" "content" ""
+expect_not_block "N8. empty content → not blocked"
+
+# N9. Override env CLAUDE_BYPASS_ESCAPE_MARKER_AUDIT=1 → not blocked
+run_hook_bypass "Write" "$CONSUMER" "content" "$C_3DISTINCT"
+expect_not_block "N9. CLAUDE_BYPASS_ESCAPE_MARKER_AUDIT=1 override → not blocked"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  printf "Failed:%b\n" "$FAILED_TESTS"
+  exit 1
+fi
+exit 0

package/ds-canonical/hooks/tests/test_check_field_controls_contracts.sh

@@ -0,0 +1,126 @@
+#!/bin/bash
+# Tests for check_field_controls_contracts.sh(Stream C 3-contract consolidated guardrail)
+#
+# Hook 規則:PostToolUse Edit/Write/MultiEdit + file 存在 disk → 檢 3 contracts:
+#   (a) Selected value renderer symmetry — Combobox/Select/PeoplePicker
+#   (b) Placeholder vocabulary — 所有 components/*.tsx
+#   (c) Cell metric escape hatches — Combobox/Select/PeoplePicker
+# 違反 → 印 JSON `{hookSpecificOutput: {hookEventName: "PostToolUse", additionalContext: "..."}}` to stdout (exit 0)。
+# Allow:檔首 3 行內加 `// @placeholder-vocabulary-allow:` / `@renderer-symmetry-allow:` / `@cell-metric-escape-allow:`。
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_field_controls_contracts.sh"
+
+if [ ! -x "$HOOK" ]; then
+  echo "FATAL: hook not executable: $HOOK"
+  exit 1
+fi
+
+TMP_ROOT=$(mktemp -d)
+trap 'rm -rf "$TMP_ROOT"' EXIT
+
+PASS=0
+FAIL=0
+FAILED_TESTS=""
+
+# Build a real fixture file under fake DS root
+make_fixture() {
+  local rel_path="$1"; local content="$2"
+  local full="$TMP_ROOT/$rel_path"
+  mkdir -p "$(dirname "$full")"
+  printf '%s' "$content" >"$full"
+  echo "$full"
+}
+
+run_hook() {
+  local file_path="$1"
+  local payload
+  payload=$(jq -n --arg fp "$file_path" \
+    '{tool_name: "Edit", hook_event_name: "PostToolUse", tool_input: {file_path: $fp, new_string: "n/a"}}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDOUT_TEXT=$(cat "$STDOUT")
+  STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_pass_silent() {
+  local name="$1"
+  if [ "$EXIT" = "0" ] && [ -z "$STDOUT_TEXT" ]; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected silent, exit=$EXIT)"
+    echo "  --- stdout ---"; echo "$STDOUT_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+expect_violation() {
+  local name="$1"; local needle="$2"
+  if [ "$EXIT" = "0" ] && echo "$STDOUT_TEXT" | grep -qF "$needle"; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected JSON ctx containing '$needle', got exit $EXIT)"
+    echo "  --- stdout ---"; echo "$STDOUT_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== check_field_controls_contracts tests ==="
+
+# 1. PreToolUse event (not PostToolUse) → skip
+F1=$(make_fixture "packages/design-system/src/components/Foo/foo.tsx" 'emptyPlaceholder={emptyText}')
+payload=$(jq -n --arg fp "$F1" '{tool_name: "Edit", hook_event_name: "PreToolUse", tool_input: {file_path: $fp, new_string: ""}}')
+STDOUT=$(mktemp); STDERR=$(mktemp)
+set +e
+printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+EXIT=$?
+set -e
+STDOUT_TEXT=$(cat "$STDOUT"); STDERR_TEXT=$(cat "$STDERR")
+rm -f "$STDOUT" "$STDERR"
+expect_pass_silent "1. PreToolUse event → skip"
+
+# 2. File doesn't exist → skip
+run_hook "/nonexistent/path/foo.tsx"
+expect_pass_silent "2. nonexistent file → skip"
+
+# 3. Out-of-scope tsx (no contract trigger) → silent
+F3=$(make_fixture "packages/design-system/src/components/Button/button.tsx" '
+const Button = () => <button>OK</button>;
+')
+run_hook "$F3"
+expect_pass_silent "3. components/Button button.tsx no violations → silent"
+
+# 4. Contract (b) violation:emptyPlaceholder={emptyText} → violation
+F4=$(make_fixture "packages/design-system/src/components/Bar/bar.tsx" 'export const Bar = () => <X emptyPlaceholder={emptyText} />;')
+run_hook "$F4"
+expect_violation "4. contract (b) emptyPlaceholder={emptyText} → violation" "contract (b) placeholder vocabulary"
+
+# 5. Contract (b) with allow escape → silent
+F5=$(make_fixture "packages/design-system/src/components/Baz/baz.tsx" '// @placeholder-vocabulary-allow: legacy migration
+export const Baz = () => <X emptyPlaceholder={searchEmpty} />;')
+run_hook "$F5"
+expect_pass_silent "5. contract (b) with @placeholder-vocabulary-allow → silent"
+
+# 6. Contract (c) hardcoded tagAreaPaddingLeftPx={8} in Combobox → violation
+F6=$(make_fixture "packages/design-system/src/components/Combobox/combobox.tsx" 'export const Combobox = () => <Tags tagAreaPaddingLeftPx={8} />;')
+run_hook "$F6"
+expect_violation "6. contract (c) Combobox hardcoded tagAreaPaddingLeftPx → violation" "contract (c) cell metric escape hatch"
+
+# 7. Contract (b) noResults variant → violation
+F7=$(make_fixture "packages/design-system/src/components/Qux/qux.tsx" 'export const Qux = () => <X emptyPlaceholder={noResults} />;')
+run_hook "$F7"
+expect_violation "7. contract (b) emptyPlaceholder={noResults} → violation" "contract (b) placeholder vocabulary"
+
+echo ""
+echo "=== Summary ==="
+echo "Passed: $PASS / $((PASS + FAIL))"
+if [ "$FAIL" -gt 0 ]; then
+  echo "Failed:$FAILED_TESTS"
+  exit 1
+fi

package/ds-canonical/hooks/tests/test_check_field_family_invariants.sh

@@ -0,0 +1,203 @@
+#!/bin/bash
+# Tests for check_field_family_invariants.sh — merged 4 sub-rules(A.1-A.4)
+#
+# Coverage(每 sub-rule pass + block 各 1 case,共 12 case):
+#   A.1 naked row-mode propagation:pass / block / allowlist
+#   A.2 FieldControlGroup wrapper child:pass / block / allowlist
+#   A.3 Field state ring SSOT:pass / 3 block(shadow inset / outline / per-control open)
+#   A.4 disabled placeholder color:pass / 1 stderr-warn(exit 0)/ allowlist
+#   non-target:non-tsx skip / SSOT host skip(field-wrapper.tsx)
+
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_field_family_invariants.sh"
+[ -x "$HOOK" ] || { echo "FATAL: hook not executable: $HOOK"; exit 1; }
+
+PASS=0; FAIL=0; FAILED_TESTS=""
+
+run_hook() {
+  local file_path="$1" content="$2" tool="${3:-Write}"
+  local payload
+  payload=$(jq -n --arg tool "$tool" --arg fp "$file_path" --arg c "$content" \
+    '{tool_name: $tool, tool_input: {file_path: $fp, content: $c}}')
+  STDOUT=$(mktemp); STDERR=$(mktemp)
+  set +e
+  printf '%s' "$payload" | bash "$HOOK" >"$STDOUT" 2>"$STDERR"
+  EXIT=$?
+  set -e
+  STDOUT_TEXT=$(cat "$STDOUT"); STDERR_TEXT=$(cat "$STDERR")
+  rm -f "$STDOUT" "$STDERR"
+}
+
+expect_exit() {
+  local name="$1" expect="$2" needle="${3:-}"
+  if [ "$EXIT" = "$expect" ] && { [ -z "$needle" ] || echo "$STDERR_TEXT" | grep -qF "$needle"; }; then
+    echo "  PASS  $name"; PASS=$((PASS+1))
+  else
+    echo "  FAIL  $name (expected exit $expect${needle:+ + needle '$needle'}, got exit $EXIT)"
+    echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+    FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - $name"
+  fi
+}
+
+echo "=== A.1 naked row-mode propagation ==="
+
+# 1. naked + items-center + nakedCellRowModeAlign import → pass
+run_hook "/r/packages/design-system/src/components/PeoplePicker/people-picker.tsx" '
+import { nakedCellRowModeAlign } from "@/design-system/components/Field/field-wrapper"
+function F() { return <div variant="naked" className="inline-flex items-center" /> }
+'
+expect_exit "A.1.1 naked + import → pass" 0
+
+# 2. naked + items-center + no SSOT → BLOCK
+run_hook "/r/packages/design-system/src/components/Bad/bad.tsx" '
+function F() { return <span variant="naked" className="inline-flex items-center" /> }
+'
+expect_exit "A.1.2 naked + no SSOT → BLOCK" 2 "naked row-mode propagation"
+
+# 2b. 2026-06-03 回歸防護(同 R8 bug class):naked + items-center 跨多行 className(真實 JSX 格式)
+#     + no SSOT → BLOCK。修前 grep 逐行 → 多行 className 靜默漏 = P0 false-negative(對抗稽核抓到)。
+run_hook "/r/packages/design-system/src/components/BadMulti/bad-multi.tsx" '
+function F() { return <span variant="naked" className="inline-flex
+  bg-white
+  items-center" /> }
+'
+expect_exit "A.1.2b naked + 多行 className → BLOCK(回歸防護)" 2 "naked row-mode propagation"
+
+# 3. allowlist → pass
+run_hook "/r/packages/design-system/src/components/Edge/edge.tsx" '
+// @naked-row-mode-allow: popover content
+function F() { return <span variant="naked" className="inline-flex items-center" /> }
+'
+expect_exit "A.1.3 allowlist → pass" 0
+
+# 4. SSOT host skip(field-wrapper.tsx)→ pass(自身 SSOT,不檢)
+run_hook "/r/packages/design-system/src/components/Field/field-wrapper.tsx" '
+function F() { return <span variant="naked" className="inline-flex items-center" /> }
+'
+expect_exit "A.1.4 SSOT host skip → pass" 0
+
+echo ""
+echo "=== A.2 FieldControlGroup wrapper direct child ==="
+
+# 5. <FieldControlGroup> 內 <div wrapper> → WARN(exit 1)
+run_hook "/r/packages/design-system/src/components/Filter/filter.tsx" '
+function F() { return (
+  <FieldControlGroup>
+    <div className="flex-1 min-w-0">
+      <FilterValuePicker />
+    </div>
+  </FieldControlGroup>
+)}
+'
+expect_exit "A.2.1 FCG with div wrapper → WARN" 1 "FieldControlGroup wrapper"
+
+# 6. <FieldControlGroup> 直接 child 沒 wrapper → pass
+run_hook "/r/packages/design-system/src/components/Filter/filter.tsx" '
+function F() { return (
+  <FieldControlGroup>
+    <FilterValuePicker className="flex-1 min-w-0" />
+  </FieldControlGroup>
+)}
+'
+expect_exit "A.2.2 FCG direct child → pass" 0
+
+# 7. allowlist → pass
+run_hook "/r/packages/design-system/src/components/Filter/filter.tsx" '
+// @fcg-wrapper-allow: legacy migration
+function F() { return (
+  <FieldControlGroup>
+    <div><FilterValuePicker /></div>
+  </FieldControlGroup>
+)}
+'
+expect_exit "A.2.3 FCG allowlist → pass" 0
+
+echo ""
+echo "=== A.3 Field state ring SSOT ==="
+
+# 8. shadow-[inset → BLOCK
+run_hook "/r/packages/design-system/src/components/Combobox/combobox.tsx" '
+const cls = "hover:shadow-[inset_0_0_0_1px_var(--border)]"
+'
+expect_exit "A.3.1 shadow-[inset → BLOCK" 2 "shadow inset"
+
+# 9. focus-within:outline-primary → BLOCK
+run_hook "/r/packages/design-system/src/components/Select/select.tsx" '
+const cls = "focus-within:outline-primary"
+'
+expect_exit "A.3.2 outline state ring → BLOCK" 2 "outline"
+
+# 10. open && border-primary → BLOCK
+run_hook "/r/packages/design-system/src/components/Select/select.tsx" "
+const cls = open && 'border-primary'
+"
+expect_exit "A.3.3 per-control open=blue → BLOCK" 2 "open=blue"
+
+# 11. SSOT host skip(textarea.tsx)→ pass
+run_hook "/r/packages/design-system/src/components/Textarea/textarea.tsx" '
+const cls = "hover:shadow-[inset_0_0_0_1px_red]"
+'
+expect_exit "A.3.4 textarea SSOT skip → pass" 0
+
+echo ""
+echo "=== A.4 disabled placeholder color ==="
+
+# 12. placeholder:text-fg-muted no override → exit 0 with stderr warn
+run_hook "/r/packages/design-system/src/components/Custom/custom.tsx" '
+const cls = "placeholder:text-fg-muted"
+'
+# A.4 是 P1 stderr,exit 0 — verify stderr 有 warn 訊息但不 fail
+if [ "$EXIT" = "0" ] && echo "$STDERR_TEXT" | grep -q "disabled placeholder color"; then
+  echo "  PASS  A.4.1 placeholder:text-fg-muted no override → stderr warn, exit 0"
+  PASS=$((PASS+1))
+else
+  echo "  FAIL  A.4.1 (expected exit 0 + stderr 'disabled placeholder color', got exit $EXIT)"
+  echo "  --- stderr ---"; echo "$STDERR_TEXT" | sed 's/^/    /'; echo "  --- end ---"
+  FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - A.4.1"
+fi
+
+# 13. placeholder + disabled override → pass(stderr 不該 fire)
+run_hook "/r/packages/design-system/src/components/Custom/custom.tsx" '
+const cls = "placeholder:text-fg-muted disabled:placeholder:text-fg-disabled"
+'
+if [ "$EXIT" = "0" ] && ! echo "$STDERR_TEXT" | grep -q "disabled placeholder color"; then
+  echo "  PASS  A.4.2 placeholder + disabled override → silent pass"
+  PASS=$((PASS+1))
+else
+  echo "  FAIL  A.4.2 (expected silent exit 0, got stderr fire)"
+  FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - A.4.2"
+fi
+
+# 14. allowlist → silent pass
+run_hook "/r/packages/design-system/src/components/Custom/custom.tsx" '
+// @disabled-color-allow: caption text intentionally muted across modes
+const cls = "placeholder:text-fg-muted"
+'
+if [ "$EXIT" = "0" ] && ! echo "$STDERR_TEXT" | grep -q "disabled placeholder color"; then
+  echo "  PASS  A.4.3 allowlist → silent pass"
+  PASS=$((PASS+1))
+else
+  echo "  FAIL  A.4.3"
+  FAIL=$((FAIL+1)); FAILED_TESTS="${FAILED_TESTS}\n  - A.4.3"
+fi
+
+echo ""
+echo "=== Skip cases ==="
+
+# 15. non-tsx → skip
+run_hook "/r/packages/design-system/src/components/Foo.md" 'placeholder:text-fg-muted'
+expect_exit "S.1 non-tsx → skip" 0
+
+# 16. read tool → skip
+run_hook "/r/packages/design-system/src/components/Foo.tsx" 'irrelevant' Read
+expect_exit "S.2 non-edit tool → skip" 0
+
+echo ""
+echo "═══ Results: $PASS PASS, $FAIL FAIL ═══"
+if [ "$FAIL" -gt 0 ]; then
+  printf "Failed:%b\n" "$FAILED_TESTS"
+  exit 1
+fi
+exit 0

package/ds-canonical/hooks/tests/test_check_file_size_budget.sh

@@ -0,0 +1,32 @@
+#!/bin/bash
+# Smoke test for check_file_size_budget.sh
+
+set -u
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_file_size_budget.sh"
+[ -x "$HOOK" ] || { echo "FATAL: hook not executable"; exit 1; }
+
+PASS=0; FAIL=0
+
+run_hook() {
+  local content="$1"
+  local file_path="$2"
+  local payload
+  payload=$(jq -n --arg fp "$file_path" --arg ct "$content" \
+    '{tool_name:"Write", tool_input:{file_path:$fp, content:$ct}}')
+  STDOUT=$(echo "$payload" | bash "$HOOK" 2>&1)
+  EXIT=$?
+}
+
+# Test 1: small file → silent
+echo "Test 1: small CLAUDE.md → silent pass"
+run_hook "$(yes 'x' | head -100)" "/tmp/test-CLAUDE.md"
+if [ "$EXIT" = "0" ]; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL ($EXIT, $STDOUT)"; FAIL=$((FAIL+1)); fi
+
+# Test 2: irrelevant file → silent
+echo "Test 2: non-governance file → silent skip"
+run_hook "$(yes 'x' | head -2000)" "/tmp/test.tsx"
+if [ "$EXIT" = "0" ] && [ -z "$STDOUT" ]; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL ($EXIT, $STDOUT)"; FAIL=$((FAIL+1)); fi
+
+echo "Results: $PASS PASS, $FAIL FAIL"
+[ "$FAIL" -eq 0 ] || exit 1

package/ds-canonical/hooks/tests/test_check_fork_user_plugin_install.sh

@@ -0,0 +1,46 @@
+#!/bin/bash
+# 2026-06-11 repoint:check_fork_user_plugin_install.sh 已合併進 check_plugin_fork_health.sh(prune merge;測試 payload 不變 = 行為等價驗證)
+# Tests for check_plugin_fork_health.sh — SessionStart enforce fork-user repo install plugin.
+
+set -u
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOOK="$SCRIPT_DIR/../check_plugin_fork_health.sh"
+[ ! -f "$HOOK" ] && { echo "FATAL: hook not found"; exit 1; }
+PASS=0; FAIL=0; FAILED=""
+
+# Test 1:DS repo(有 packages/design-system/src)→ silent
+echo "Test 1: DS repo skip"
+TMP=$(mktemp -d); mkdir -p "$TMP/packages/design-system/src"
+echo '{"@qijenchen/design-system":"^1"}' > "$TMP/package.json"
+STDOUT=$(cd "$TMP" && echo '{"hook_event_name":"SessionStart"}' | bash "$HOOK")
+if [ -z "$STDOUT" ]; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL: unexpected output"; FAIL=$((FAIL+1)); fi
+rm -rf "$TMP"
+
+# Test 2:non-DS repo + 無 DS dep → silent
+echo "Test 2: non-DS repo without DS dep"
+TMP=$(mktemp -d); echo '{"react":"^18"}' > "$TMP/package.json"
+STDOUT=$(cd "$TMP" && echo '{"hook_event_name":"SessionStart"}' | bash "$HOOK")
+if [ -z "$STDOUT" ]; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL: unexpected output"; FAIL=$((FAIL+1)); fi
+rm -rf "$TMP"
+
+# Test 3:non-DS + 含 DS dep + plugin 未裝 → context inject
+echo "Test 3: fork-user without plugin → inject"
+TMP=$(mktemp -d); echo '{"dependencies":{"@qijenchen/design-system":"^1"}}' > "$TMP/package.json"
+# Override HOME/CWD so plugin install detect 一定 fail
+STDOUT=$(cd "$TMP" && HOME=/tmp/no-plugin echo '{"hook_event_name":"SessionStart"}' | bash "$HOOK")
+if echo "$STDOUT" | grep -q "Fork-user plugin not installed"; then
+  echo "  PASS"; PASS=$((PASS+1))
+else
+  echo "  FAIL: no inject (output: ${STDOUT:0:200})"; FAIL=$((FAIL+1))
+fi
+rm -rf "$TMP"
+
+# Test 4:non-SessionStart event → silent
+echo "Test 4: non-SessionStart event skip"
+STDOUT=$(echo '{"hook_event_name":"PreToolUse"}' | bash "$HOOK")
+if [ -z "$STDOUT" ]; then echo "  PASS"; PASS=$((PASS+1)); else echo "  FAIL"; FAIL=$((FAIL+1)); fi
+
+echo ""
+echo "════ Results: $PASS PASS, $FAIL FAIL ════"
+[ "$FAIL" -gt 0 ] && exit 1
+exit 0