npm - @rubytech/create-maxy-code - Versions diffs - 0.1.219 → 0.1.222 - Mend

@rubytech/create-maxy-code 0.1.219 → 0.1.222

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (124) hide show

package/payload/server/public/data.html CHANGED Viewed

@@ -5,12 +5,12 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Data — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/data-D6IQdm0R.js"></script>
+  <script type="module" crossorigin src="/assets/data-CHdaTjgn.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-DD-I1_y5.js">
-  <link rel="modulepreload" crossorigin href="/assets/brand-SzZmKKjz.js">
-  <link rel="modulepreload" crossorigin href="/assets/graph-labels-CWJy0O4w.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BcxEZnpu.js">
-  <link rel="stylesheet" crossorigin href="/assets/brand-SZW-27T7.css">
+  <link rel="modulepreload" crossorigin href="/assets/brand-DfykKss4.js">
+  <link rel="modulepreload" crossorigin href="/assets/graph-labels-CavkO4DG.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BiEwDSRL.js">
+  <link rel="stylesheet" crossorigin href="/assets/brand-CAMMU5lz.css">
 </head>
 <body>
   <div id="root"></div>

package/payload/server/public/graph.html CHANGED Viewed

@@ -5,13 +5,13 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Graph — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/graph-PkZKVkWD.js"></script>
+  <script type="module" crossorigin src="/assets/graph-tqCqSngu.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-DD-I1_y5.js">
-  <link rel="modulepreload" crossorigin href="/assets/brand-SzZmKKjz.js">
-  <link rel="modulepreload" crossorigin href="/assets/graph-labels-CWJy0O4w.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BcxEZnpu.js">
-  <link rel="modulepreload" crossorigin href="/assets/Checkbox-DL-HdT29.js">
-  <link rel="stylesheet" crossorigin href="/assets/brand-SZW-27T7.css">
+  <link rel="modulepreload" crossorigin href="/assets/brand-DfykKss4.js">
+  <link rel="modulepreload" crossorigin href="/assets/graph-labels-CavkO4DG.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BiEwDSRL.js">
+  <link rel="modulepreload" crossorigin href="/assets/Checkbox-COiFXiXL.js">
+  <link rel="stylesheet" crossorigin href="/assets/brand-CAMMU5lz.css">
 </head>
 <body>
   <div id="root"></div>

package/payload/server/public/index.html CHANGED Viewed

@@ -5,13 +5,13 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/admin-DMo5DWKH.js"></script>
+  <script type="module" crossorigin src="/assets/admin-Ca9ckLZx.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-DD-I1_y5.js">
-  <link rel="modulepreload" crossorigin href="/assets/brand-SzZmKKjz.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BcxEZnpu.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSelectionMode-JDGvwvIk.js">
-  <link rel="modulepreload" crossorigin href="/assets/Checkbox-DL-HdT29.js">
-  <link rel="stylesheet" crossorigin href="/assets/brand-SZW-27T7.css">
+  <link rel="modulepreload" crossorigin href="/assets/brand-DfykKss4.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BiEwDSRL.js">
+  <link rel="modulepreload" crossorigin href="/assets/useSelectionMode-iqIyL24g.js">
+  <link rel="modulepreload" crossorigin href="/assets/Checkbox-COiFXiXL.js">
+  <link rel="stylesheet" crossorigin href="/assets/brand-CAMMU5lz.css">
   <link rel="stylesheet" crossorigin href="/assets/admin-CWMpccrR.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>

package/payload/server/public/public.html CHANGED Viewed

@@ -5,12 +5,12 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/public-UKgkJxKv.js"></script>
+  <script type="module" crossorigin src="/assets/public-BADBLzOZ.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-DD-I1_y5.js">
-  <link rel="modulepreload" crossorigin href="/assets/brand-SzZmKKjz.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSelectionMode-JDGvwvIk.js">
-  <link rel="modulepreload" crossorigin href="/assets/Checkbox-DL-HdT29.js">
-  <link rel="stylesheet" crossorigin href="/assets/brand-SZW-27T7.css">
+  <link rel="modulepreload" crossorigin href="/assets/brand-DfykKss4.js">
+  <link rel="modulepreload" crossorigin href="/assets/useSelectionMode-iqIyL24g.js">
+  <link rel="modulepreload" crossorigin href="/assets/Checkbox-COiFXiXL.js">
+  <link rel="stylesheet" crossorigin href="/assets/brand-CAMMU5lz.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>
 <body>

package/payload/server/server.js CHANGED Viewed

@@ -824,13 +824,10 @@ import { monitorEventLoopDelay } from "perf_hooks";
 // app/lib/agent-slug-pattern.ts
 var AGENT_SLUG_PATTERN = /^\/([a-z][a-z0-9-]{2,49})$/;
-// server/routes/health.ts
-import { existsSync as existsSync2, readFileSync as readFileSync4 } from "fs";
-import { createConnection as createConnection2 } from "net";
 // app/lib/claude-auth.ts
 import { readFileSync, writeFileSync } from "fs";
 import { sep } from "path";
+import { lock } from "proper-lockfile";
 if (!CLAUDE_CREDENTIALS_FILE.startsWith(MAXY_DIR + sep)) {
   console.error(
     `[claude-auth] WARN cross-brand-path-detected resolved=${CLAUDE_CREDENTIALS_FILE} brand=${BRAND_NAME} maxyDir=${MAXY_DIR}`
@@ -929,11 +926,39 @@ function logRefreshOutcome(outcome) {
   );
 }
 async function doRefresh() {
+  const pre = readCredentials();
+  if (!pre) return { status: "missing" };
+  if (!pre.refreshToken) return { status: "dead", expiresAt: pre.expiresAt };
+  let release = null;
+  try {
+    release = await lock(CLAUDE_CREDENTIALS_FILE, {
+      retries: { retries: 8, minTimeout: 100, maxTimeout: 1e3, factor: 1.5 },
+      stale: 3e4
+    });
+  } catch (err) {
+    console.error(
+      `[auth-refresh] op=lock-acquire-failed err=${err instanceof Error ? err.message : String(err)}`
+    );
+    logRefreshOutcome("fail-network");
+    return { status: "expired", expiresAt: pre.expiresAt };
+  }
+  console.log(`[auth-refresh] op=lock-acquired pid=${process.pid} path=${CLAUDE_CREDENTIALS_FILE}`);
+  try {
+    return await doRefreshLocked();
+  } finally {
+    await release().catch(() => {
+    });
+  }
+}
+async function doRefreshLocked() {
   const creds = readCredentials();
   if (!creds) return { status: "missing" };
   if (!creds.refreshToken) return { status: "dead", expiresAt: creds.expiresAt };
   const now = Date.now();
   if (creds.expiresAt - now > EXPIRING_THRESHOLD_MS) {
+    console.log(
+      `[auth-refresh] op=skipped-fresh expiresAt=${new Date(creds.expiresAt).toISOString()}`
+    );
     return { status: "ok", expiresAt: creds.expiresAt };
   }
   let res;
@@ -989,13 +1014,26 @@ async function doRefresh() {
     expiresIn: typeof expiresIn === "number" && expiresIn > 0 ? expiresIn : void 0
   });
   if (newExpiresAt) {
-    console.log(`[auth-refresh] success, expires ${new Date(newExpiresAt).toISOString()}`);
+    console.log(`[auth-refresh] op=renewed expiresAt=${new Date(newExpiresAt).toISOString()}`);
   } else {
-    console.warn("[auth-refresh] write-back failed");
+    console.warn("[auth-refresh] op=renewed-write-back-failed");
   }
   logRefreshOutcome("ok");
   return { status: "ok", expiresAt: newExpiresAt ?? Date.now() + 3600 * 1e3 };
 }
+function startAuthHealthHeartbeat(intervalMs = 5 * 60 * 1e3) {
+  const tick = () => {
+    const h = computeAuthHealth();
+    const expiresIn = h.expiresAt != null ? Math.round((h.expiresAt - Date.now()) / 1e3) : null;
+    console.log(
+      `[auth-health] brand=${BRAND_NAME} status=${h.status} expiresIn=${expiresIn != null ? expiresIn + "s" : "n/a"}`
+    );
+  };
+  tick();
+  const handle = setInterval(tick, intervalMs);
+  if (typeof handle.unref === "function") handle.unref();
+  return () => clearInterval(handle);
+}
 async function ensureAuth() {
   const health = assessAuthHealth();
   if (health.status === "ok" || health.status === "missing" || health.status === "dead") {
@@ -1004,6 +1042,10 @@ async function ensureAuth() {
   return refreshAccessToken();
 }
+// server/routes/health.ts
+import { existsSync as existsSync2, readFileSync as readFileSync4 } from "fs";
+import { createConnection as createConnection2 } from "net";
 // app/lib/network.ts
 import { networkInterfaces } from "os";
 function getLanIp() {
@@ -15161,6 +15203,7 @@ var port = requirePortEnv("MAXY_UI_INTERNAL_PORT", { tag: "ui-server" });
 var hostname = process.env.HOSTNAME ?? "127.0.0.1";
 var httpServer = serve({ fetch: app41.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
+startAuthHealthHeartbeat();
 {
   const loopHist = monitorEventLoopDelay({ resolution: 50 });
   loopHist.enable();

package/payload/platform/plugins/admin/hooks/__tests__/pre-tool-use-admin-tool-gate.test.sh DELETED Viewed

@@ -1,109 +0,0 @@
-#!/usr/bin/env bash
-# Task 571 — the orchestration-only block has been removed. Admin's standard
-# tool surface (Write/Edit/MultiEdit/Bash/WebFetch/WebSearch) is callable
-# directly from the admin seat; delegation is a doctrine bias enforced in
-# IDENTITY.md, not a platform refusal. This test pins the post-571 contract:
-#
-#   - Admin-direct Bash/Edit/Write/WebFetch all return exit 0 with no
-#     `reason=orchestration-only` or `reason=specialist-owned` line.
-#   - The resource-specific hook blocks (code-dir, entitlement, account.json,
-#     pending-actions, base64-guard, approval-queue) are unaffected and live
-#     in their own dedicated tests.
-#
-# Reintroducing the orchestration-only block requires a doctrine flip — this
-# test fails first and surfaces the change loudly.
-set -u
-HOOK="$(cd "$(dirname "$0")/.." && pwd)/pre-tool-use.sh"
-if [[ ! -x "$HOOK" ]]; then
-  echo "FAIL: $HOOK not executable" >&2
-  exit 1
-fi
-TMPFILES=()
-cleanup() {
-  for f in "${TMPFILES[@]:-}"; do
-    [[ -n "$f" ]] && rm -f "$f" 2>/dev/null || true
-  done
-}
-trap cleanup EXIT
-PASS=0; FAIL=0
-pass() { PASS=$((PASS+1)); echo "PASS: $1"; }
-fail() { FAIL=$((FAIL+1)); echo "FAIL: $1" >&2; }
-SESSION_TRANSCRIPT="/tmp/sess/44283ae1-2b82-4bd7-b8af-99a11141ed4b.jsonl"
-# run_admin_direct <tool> <expected_rc> <label>
-#   Pipes a minimal PreToolUse payload to the hook with MAXY_SESSION_ROLE=admin
-#   (the realistic admin spawn shape) and asserts the rc and that no
-#   orchestration-only / specialist-owned refusal line appears on stderr.
-run_admin_direct() {
-  local tool="$1" expected_rc="$2" label="$3"
-  local input_json
-  input_json=$(python3 -c '
-import json, sys
-print(json.dumps({
-    "hook_event_name": "PreToolUse",
-    "tool_name": sys.argv[1],
-    "tool_input": {"file_path": "/tmp/x", "content": "x", "command": "echo hi", "url": "https://example.com"},
-    "transcript_path": sys.argv[2],
-}, separators=(",", ":")))
-' "$tool" "$SESSION_TRANSCRIPT")
-  local stdout_file; stdout_file=$(mktemp); TMPFILES+=("$stdout_file")
-  local stderr_file; stderr_file=$(mktemp); TMPFILES+=("$stderr_file")
-  printf '%s' "$input_json" | \
-    env -u MAXY_SPECIALIST MAXY_SESSION_ROLE=admin \
-      bash "$HOOK" admin >"$stdout_file" 2>"$stderr_file"
-  local rc=$?
-  if [[ "$rc" -ne "$expected_rc" ]]; then
-    fail "$label: expected exit $expected_rc, got $rc. Stderr: $(cat "$stderr_file")"
-    return
-  fi
-  if grep -qE 'reason=orchestration-only|reason=specialist-owned|reason=missing-marker' "$stderr_file"; then
-    fail "$label: stderr carries a removed-gate reason line. Got: $(cat "$stderr_file")"
-    return
-  fi
-  pass "$label"
-}
-# ── Admin-direct passthrough (the Task 571 regression boundary) ──────────
-run_admin_direct Bash      0 "Test 1: admin-direct Bash passes through"
-run_admin_direct Edit      0 "Test 2: admin-direct Edit passes through (path /tmp/x is outside protected dirs)"
-run_admin_direct Write     0 "Test 3: admin-direct Write passes through"
-run_admin_direct MultiEdit 0 "Test 4: admin-direct MultiEdit passes through"
-run_admin_direct WebFetch  0 "Test 5: admin-direct WebFetch passes through"
-run_admin_direct WebSearch 0 "Test 6: admin-direct WebSearch passes through"
-run_admin_direct Read      0 "Test 7: admin-direct Read passes through"
-# ── Resource-specific blocks unaffected: protected code-dir Write still refuses ──
-# Verifies the deletion was surgical — code-dir-protection-ui still fires.
-PROTECTED_INPUT=$(python3 -c '
-import json, sys
-print(json.dumps({
-    "hook_event_name": "PreToolUse",
-    "tool_name": "Write",
-    "tool_input": {"file_path": "/srv/maxy/platform/ui/app/page.tsx", "content": "x"},
-    "transcript_path": sys.argv[1],
-}, separators=(",", ":")))
-' "$SESSION_TRANSCRIPT")
-PROT_STDOUT=$(mktemp); TMPFILES+=("$PROT_STDOUT")
-PROT_STDERR=$(mktemp); TMPFILES+=("$PROT_STDERR")
-printf '%s' "$PROTECTED_INPUT" | \
-  env -u MAXY_SPECIALIST MAXY_SESSION_ROLE=admin \
-    bash "$HOOK" admin >"$PROT_STDOUT" 2>"$PROT_STDERR"
-PROT_RC=$?
-if [[ "$PROT_RC" -eq 2 ]] && grep -q 'cannot modify platform UI source' "$PROT_STDERR"; then
-  pass "Test 8: admin-direct Write to platform/ui/ still blocked (resource-specific block intact)"
-else
-  fail "Test 8: expected platform/ui code-dir block, got rc=$PROT_RC stdout=$(cat "$PROT_STDOUT") stderr=$(cat "$PROT_STDERR")"
-fi
-echo
-echo "──────── pre-tool-use admin-tool-gate test summary (post-Task 571) ────────"
-echo "PASS: $PASS"
-echo "FAIL: $FAIL"
-[[ "$FAIL" -gt 0 ]] && exit 1
-exit 0

package/payload/platform/plugins/admin/hooks/__tests__/pre-tool-use-base64-guard.test.sh DELETED Viewed

@@ -1,204 +0,0 @@
-#!/usr/bin/env bash
-# Regression test for the base64 context-overflow guard.
-#
-# Covers two PreToolUse rejection paths in pre-tool-use.sh:
-#
-#   1. Bash producer guard — `tool_input.command` invoking `base64` (encode
-#      direction) or `xxd -p` is rejected; `base64 -d|-D|--decode` is allowed.
-#   2. Write/Edit consumer guard — `tool_input.content` (Write) or
-#      `tool_input.new_string` (Edit) carrying `data:<mime>;base64,<≥4096 chars>`
-#      is rejected; small inline data URIs and plain content are allowed.
-#
-# Plus a fail-open case (malformed stdin → exit 0 silent) to pin the contract
-# established by the playwright-file-guard test (terminal-stdin guard + parse-
-# error fail-open).
-set -u
-HOOK="$(cd "$(dirname "$0")/.." && pwd)/pre-tool-use.sh"
-if [[ ! -x "$HOOK" ]]; then
-  echo "FAIL: $HOOK not executable" >&2
-  exit 1
-fi
-TMPFILES=()
-cleanup_test_state() {
-  for f in "${TMPFILES[@]:-}"; do
-    [[ -n "$f" ]] && rm -f "$f" 2>/dev/null || true
-  done
-}
-trap cleanup_test_state EXIT
-PASS=0
-FAIL=0
-pass() { echo "PASS: $1"; PASS=$((PASS + 1)); }
-fail() { echo "FAIL: $1" >&2; FAIL=$((FAIL + 1)); }
-# Helper: run hook with Bash tool_input.command and assert exit code + stderr.
-run_bash() {
-  local command_text="$1"; local expected_rc="$2"; local stderr_pattern="$3"; local label="$4"
-  local input_json
-  # Build the input JSON via python3 so command_text with quotes / specials is safe.
-  input_json=$(python3 -c '
-import json, sys
-print(json.dumps({"hook_event_name": "PreToolUse", "tool_name": "Bash", "tool_input": {"command": sys.argv[1]}, "transcript_path": "/tmp/sess/parent.jsonl", "parent_tool_use_id": "toolu_test_subagent"}, separators=(",", ":")))
-' "$command_text")
-  local stdout_file; stdout_file=$(mktemp); TMPFILES+=("$stdout_file")
-  local stderr_file; stderr_file=$(mktemp); TMPFILES+=("$stderr_file")
-  printf '%s' "$input_json" | bash "$HOOK" admin >"$stdout_file" 2>"$stderr_file"
-  local rc=$?
-  if [[ "$rc" -ne "$expected_rc" ]]; then
-    fail "$label: expected exit $expected_rc, got $rc. Stderr: $(cat "$stderr_file")"
-    return
-  fi
-  if [[ -n "$stderr_pattern" ]] && ! grep -qE "$stderr_pattern" "$stderr_file"; then
-    fail "$label: stderr missing pattern '$stderr_pattern'. Got: $(cat "$stderr_file")"
-    return
-  fi
-  pass "$label"
-}
-# Helper: run hook with Write tool_input.content and assert exit code + stderr.
-run_write() {
-  local content="$1"; local expected_rc="$2"; local stderr_pattern="$3"; local label="$4"
-  local input_json
-  input_json=$(python3 -c '
-import json, sys
-print(json.dumps({"hook_event_name": "PreToolUse", "tool_name": "Write", "tool_input": {"file_path": "/tmp/test.html", "content": sys.argv[1]}, "transcript_path": "/tmp/sess/parent.jsonl", "parent_tool_use_id": "toolu_test_subagent"}, separators=(",", ":")))
-' "$content")
-  local stdout_file; stdout_file=$(mktemp); TMPFILES+=("$stdout_file")
-  local stderr_file; stderr_file=$(mktemp); TMPFILES+=("$stderr_file")
-  printf '%s' "$input_json" | bash "$HOOK" admin >"$stdout_file" 2>"$stderr_file"
-  local rc=$?
-  if [[ "$rc" -ne "$expected_rc" ]]; then
-    fail "$label: expected exit $expected_rc, got $rc. Stderr: $(cat "$stderr_file")"
-    return
-  fi
-  if [[ -n "$stderr_pattern" ]] && ! grep -qE "$stderr_pattern" "$stderr_file"; then
-    fail "$label: stderr missing pattern '$stderr_pattern'. Got: $(cat "$stderr_file")"
-    return
-  fi
-  pass "$label"
-}
-# Helper: run hook with Edit tool_input.new_string and assert exit code.
-run_edit() {
-  local new_string="$1"; local expected_rc="$2"; local stderr_pattern="$3"; local label="$4"
-  local input_json
-  input_json=$(python3 -c '
-import json, sys
-print(json.dumps({"hook_event_name": "PreToolUse", "tool_name": "Edit", "tool_input": {"file_path": "/tmp/test.html", "old_string": "OLD", "new_string": sys.argv[1]}, "transcript_path": "/tmp/sess/parent.jsonl", "parent_tool_use_id": "toolu_test_subagent"}, separators=(",", ":")))
-' "$new_string")
-  local stdout_file; stdout_file=$(mktemp); TMPFILES+=("$stdout_file")
-  local stderr_file; stderr_file=$(mktemp); TMPFILES+=("$stderr_file")
-  printf '%s' "$input_json" | bash "$HOOK" admin >"$stdout_file" 2>"$stderr_file"
-  local rc=$?
-  if [[ "$rc" -ne "$expected_rc" ]]; then
-    fail "$label: expected exit $expected_rc, got $rc. Stderr: $(cat "$stderr_file")"
-    return
-  fi
-  if [[ -n "$stderr_pattern" ]] && ! grep -qE "$stderr_pattern" "$stderr_file"; then
-    fail "$label: stderr missing pattern '$stderr_pattern'. Got: $(cat "$stderr_file")"
-    return
-  fi
-  pass "$label"
-}
-# Generate a base64-character blob >= 4096 chars (data-URI body trigger).
-LARGE_B64=$(python3 -c "print('A' * 5000)")
-# ───────── Bash producer guard ──────────────────────────────────────────────
-run_bash "echo hello world" 0 "" \
-  "Test 1: bare Bash command (no base64) allowed"
-run_bash "ls -la" 0 "" \
-  "Test 2: ls -la (no base64 token) allowed"
-run_bash "base64 /tmp/foo.png" 2 '\[pre-tool-use\] guard=base64-tool-result.*tool=Bash.*reason=base64-encoder.*action=reject' \
-  "Test 3: 'base64 file' (encode) rejected"
-run_bash "cat foo.png | base64" 2 '\[pre-tool-use\] guard=base64-tool-result.*action=reject' \
-  "Test 4: 'cat | base64' (encode pipeline) rejected"
-run_bash "cat foo.png|base64 -w0" 2 '\[pre-tool-use\] guard=base64-tool-result.*action=reject' \
-  "Test 5: 'base64 -w0' (encode with line-wrap flag) rejected"
-run_bash "xxd -p file.bin" 2 '\[pre-tool-use\] guard=base64-tool-result.*reason=xxd-plain-hex.*action=reject' \
-  "Test 6: 'xxd -p' (plain hex encode) rejected"
-run_bash "base64 -d input.b64 > output.bin" 0 "" \
-  "Test 7: 'base64 -d' (decode direction) allowed"
-run_bash "base64 --decode < x.b64 > y.bin" 0 "" \
-  "Test 8: 'base64 --decode' (decode long-form) allowed"
-run_bash "echo Zm9v | base64 -d" 0 "" \
-  "Test 9: 'base64 -d' decode pipeline allowed"
-run_bash "echo '--debug-base64-foo'" 0 "" \
-  "Test 10: 'base64' substring inside flag name does NOT false-match"
-run_bash "ls mybase64tool" 0 "" \
-  "Test 11: 'base64' substring inside identifier does NOT false-match"
-run_bash "cat in.b64 | base64 -d > /tmp/foo.bin; cat /tmp/bar.png | base64" 2 '\[pre-tool-use\] guard=base64-tool-result.*reason=base64-encoder.*action=reject' \
-  "Test 11b: compound (decode ; encode) rejects encoder segment (per-segment scan)"
-run_bash "echo data | base64 -d > x.bin && cat y.png | base64 > y.b64" 2 '\[pre-tool-use\] guard=base64-tool-result.*action=reject' \
-  "Test 11c: compound (decode && encode) rejects encoder segment"
-run_bash "base64 -d in.b64 > out.bin; base64 -d in2.b64 > out2.bin" 0 "" \
-  "Test 11d: compound (decode ; decode) allowed"
-# ───────── Write/Edit consumer guard ────────────────────────────────────────
-run_write "<html><body>hello world</body></html>" 0 "" \
-  "Test 12: Write small HTML content (no data URI) allowed"
-run_write "<img src='data:image/png;base64,AAAA'>" 0 "" \
-  "Test 13: Write content with small inline data URI (<4096 chars) allowed"
-run_write "<img src='data:image/png;base64,${LARGE_B64}'>" 2 '\[pre-tool-use\] guard=base64-write-content.*action=reject' \
-  "Test 14: Write content with large inline data URI (>4096 chars) rejected"
-run_edit "<img src='data:image/png;base64,${LARGE_B64}'>" 2 '\[pre-tool-use\] guard=base64-write-content.*action=reject' \
-  "Test 15: Edit new_string with large inline data URI rejected"
-run_edit "<p>just text replacement</p>" 0 "" \
-  "Test 16: Edit new_string with plain text allowed"
-# ───────── Fail-open / structural ───────────────────────────────────────────
-STDOUT_FILE=$(mktemp); STDERR_FILE=$(mktemp); TMPFILES+=("$STDOUT_FILE" "$STDERR_FILE")
-printf '%s' 'not json at all { ' | bash "$HOOK" admin >"$STDOUT_FILE" 2>"$STDERR_FILE"
-RC=$?
-if [[ "$RC" -ne 0 ]]; then
-  fail "Test 17: malformed stdin should fail open (exit 0), got $RC. Stderr: $(cat "$STDERR_FILE")"
-else
-  pass "Test 17: malformed stdin → silent passthrough (fail-open)"
-fi
-# Terminal-stdin guard preserved (no -t 0 test runs in test harness; assert
-# the guard line exists in source).
-if ! grep -q '\[ -t 0 \]' "$HOOK"; then
-  fail "Test 18: terminal stdin guard missing from hook source"
-else
-  pass "Test 18: terminal stdin guard present in source"
-fi
-# Pre-existing guards still active — entitlement file edit still rejected.
-ENT_JSON=$(python3 -c 'import json; print(json.dumps({"hook_event_name":"PreToolUse","tool_name":"Write","tool_input":{"file_path":"/srv/entitlement.json","content":"{\"tier\":\"max\"}"},"transcript_path":"/tmp/sess/parent.jsonl","parent_tool_use_id":"toolu_test_subagent"}, separators=(",", ":")))')
-STDOUT_FILE=$(mktemp); STDERR_FILE=$(mktemp); TMPFILES+=("$STDOUT_FILE" "$STDERR_FILE")
-printf '%s' "$ENT_JSON" | bash "$HOOK" admin >"$STDOUT_FILE" 2>"$STDERR_FILE"
-RC=$?
-if [[ "$RC" -ne 2 ]]; then
-  fail "Test 19: pre-existing entitlement guard regressed (expected exit 2, got $RC)"
-else
-  pass "Test 19: pre-existing entitlement guard still rejects entitlement.json"
-fi
-echo
-echo "──────── pre-tool-use base64 guard test summary ────────"
-echo "PASS: $PASS"
-echo "FAIL: $FAIL"
-[[ "$FAIL" -gt 0 ]] && exit 1
-exit 0

package/payload/platform/plugins/admin/hooks/__tests__/pre-tool-use-memory-write-passthrough.test.sh DELETED Viewed

@@ -1,118 +0,0 @@
-#!/usr/bin/env bash
-# Task 225 — passthrough regression test for memory-write / memory-update
-# under the admin agent's pre-tool-use.sh.
-#
-# The Task 213→222 chain previously gated both writers at the top of the
-# admin branch with an exit-2 block (admin direct) and an exit-0 allow
-# (Task-subagent). Task 225 reversed the doctrine: admin holds the
-# writers in its own surface and the case-block was deleted. This test
-# pins the new behaviour so a future re-introduction of the block
-# cannot land silently.
-#
-# Five cases:
-#   1. mcp__plugin_memory_memory__memory-write     admin-direct → exit 0, no rejection stderr
-#   2. mcp__plugin_memory_memory__memory-update    admin-direct → exit 0, no rejection stderr
-#   3. mcp__plugin_memory_memory__memory-search    admin-direct → exit 0, no rejection stderr (read tool control)
-#   4. mcp__memory__memory-write                   admin-direct → exit 0 (pre-209 namespace, falls through harmlessly)
-#   5. malformed JSON stdin                                   → exit 0 (no crash; case-block removal does not break fall-through)
-set -u
-HOOK="$(cd "$(dirname "$0")/.." && pwd)/pre-tool-use.sh"
-if [[ ! -x "$HOOK" ]]; then
-  echo "FAIL: $HOOK not executable" >&2
-  exit 1
-fi
-TMPFILES=()
-cleanup() {
-  for f in "${TMPFILES[@]:-}"; do
-    [[ -n "$f" ]] && rm -f "$f" 2>/dev/null || true
-  done
-}
-trap cleanup EXIT
-PASS=0
-FAIL=0
-pass() { echo "PASS: $1"; PASS=$((PASS + 1)); }
-fail() { echo "FAIL: $1" >&2; FAIL=$((FAIL + 1)); }
-# Admin-direct calls land with a non-subagent transcript path. A synthetic
-# empty file in a temp dir is enough — the hook no longer reads the path
-# for the deleted writers' case-block, but other gates may still touch it.
-ADMIN_TRANSCRIPT=$(mktemp); TMPFILES+=("$ADMIN_TRANSCRIPT")
-: > "$ADMIN_TRANSCRIPT"
-run_with_tool() {
-  local tool="$1"
-  local sid="$2"
-  local transcript_path="${3:-}"
-  local stdout_file; stdout_file=$(mktemp); TMPFILES+=("$stdout_file")
-  local stderr_file; stderr_file=$(mktemp); TMPFILES+=("$stderr_file")
-  python3 -c '
-import json, sys
-payload = {
-  "hook_event_name": "PreToolUse",
-  "session_id": sys.argv[1],
-  "tool_name": sys.argv[2],
-  "tool_input": {"name":"Smalleys","accountId":"acct-x","scope":"shared"},
-}
-if sys.argv[3]:
-  payload["transcript_path"] = sys.argv[3]
-print(json.dumps(payload, separators=(",", ":")))
-' "$sid" "$tool" "$transcript_path" | bash "$HOOK" admin >"$stdout_file" 2>"$stderr_file"
-  HOOK_RC=$?
-  HOOK_STDERR=$(cat "$stderr_file")
-}
-assert_passthrough() {
-  local label="$1"
-  if [[ "$HOOK_RC" -ne 0 ]]; then
-    fail "${label}: expected exit 0, got $HOOK_RC stderr: $HOOK_STDERR"
-    return
-  fi
-  if echo "$HOOK_STDERR" | grep -qF "does not write to the graph directly"; then
-    fail "${label}: stderr carries deleted-block rejection message: $HOOK_STDERR"
-    return
-  fi
-  pass "${label}: exit 0, no rejection stderr"
-}
-# --- 1. memory-write admin-direct passthrough ---------------------------
-run_with_tool "mcp__plugin_memory_memory__memory-write" "sess-write-1" "$ADMIN_TRANSCRIPT"
-assert_passthrough "admin-direct memory-write"
-# --- 2. memory-update admin-direct passthrough --------------------------
-run_with_tool "mcp__plugin_memory_memory__memory-update" "sess-update-1" "$ADMIN_TRANSCRIPT"
-assert_passthrough "admin-direct memory-update"
-# --- 3. memory-search admin-direct passthrough (read tool control) -----
-run_with_tool "mcp__plugin_memory_memory__memory-search" "sess-search-1" "$ADMIN_TRANSCRIPT"
-assert_passthrough "admin-direct memory-search (read tool control)"
-# --- 4. pre-209 namespace mcp__memory__memory-write ---------------------
-# The bare mcp__memory__ namespace was never in the admin runtime surface
-# after Task 203's plugin_ prefix rename; this case pins that it still
-# falls through harmlessly after the case-block removal.
-run_with_tool "mcp__memory__memory-write" "sess-old-ns-1" "$ADMIN_TRANSCRIPT"
-assert_passthrough "pre-209 namespace mcp__memory__memory-write"
-# --- 5. malformed JSON stdin — hook must not crash ----------------------
-stderr_file=$(mktemp); TMPFILES+=("$stderr_file")
-stdout_file=$(mktemp); TMPFILES+=("$stdout_file")
-echo "not-valid-json{{{" | bash "$HOOK" admin >"$stdout_file" 2>"$stderr_file"
-HOOK_RC=$?
-HOOK_STDERR=$(cat "$stderr_file")
-if [[ "$HOOK_RC" -ne 0 ]]; then
-  fail "malformed payload: expected exit 0, got $HOOK_RC stderr: $HOOK_STDERR"
-elif echo "$HOOK_STDERR" | grep -qF "does not write to the graph directly"; then
-  fail "malformed payload: stderr carries deleted-block rejection message: $HOOK_STDERR"
-else
-  pass "malformed payload: exit 0, hook does not crash"
-fi
-# --- Summary -----------------------------------------------------------
-echo "---"
-echo "PASSED: $PASS  FAILED: $FAIL"
-[[ "$FAIL" -eq 0 ]] || exit 1
-exit 0