@su-record/vibe 2.12.5 → 2.13.0

package/hooks/scripts/__tests__/pre-tool-guard.test.js

@@ -1,4 +1,4 @@
-import { describe, it, expect } from 'vitest';
+import { describe, it, expect, vi, beforeEach } from 'vitest';
 import { spawnSync } from 'child_process';
 import path from 'path';
 import { fileURLToPath } from 'url';
@@ -406,4 +406,118 @@ describe('pre-tool-guard', () => {
       expect(result.stdout).toContain('Editing sensitive file');
     });
   });
+
+  // ══════════════════════════════════════════════════
+  // REQ-012: 64KB 초과 대용량 페이로드 파싱
+  // hook-context.js readStdinSync가 EOF까지 읽는지 검증
+  // ══════════════════════════════════════════════════
+  describe('large stdin payload (REQ-012: >64KB)', () => {
+    it('should parse tool_name from payload larger than 64KB', () => {
+      // 80KB content field로 페이로드 크기를 64KB 이상으로 만든다
+      const largeContent = 'x'.repeat(80 * 1024);
+      const result = runGuardWithStdin({
+        tool_name: 'Write',
+        tool_input: {
+          file_path: 'src/output.ts',
+          content: largeContent,
+        },
+      });
+      // Write to safe path: no blocking, tool_name parsed correctly (exit 0)
+      expect(result.exitCode).toBe(0);
+    });
+
+    it('should correctly detect dangerous command in large Bash payload', () => {
+      const padding = 'a'.repeat(80 * 1024);
+      const result = runGuardWithStdin({
+        tool_name: 'Bash',
+        tool_input: { command: 'rm -rf /', _padding: padding },
+      });
+      expect(result.exitCode).toBe(2);
+      expect(result.stdout).toContain('BLOCKED');
+    });
+
+    it('should allow safe command in large Bash payload', () => {
+      const padding = 'b'.repeat(80 * 1024);
+      const result = runGuardWithStdin({
+        tool_name: 'Bash',
+        tool_input: { command: 'ls -la', _padding: padding },
+      });
+      expect(result.exitCode).toBe(0);
+      expect(result.stdout).toBe('');
+    });
+  });
+
+  // ══════════════════════════════════════════════════
+  // REQ-013: gh pr create Bash 경로 테스트 게이트
+  // pr-gate-runner 헬퍼를 mock하여 테스트러너 실행 없이 검증
+  // ══════════════════════════════════════════════════
+  describe('gh pr create gate (REQ-013)', () => {
+    it('should allow gh pr create when tests pass (argv mode)', () => {
+      // 테스트 환경에서는 package.json test 스크립트가 존재하지만
+      // 여기서는 실제 테스트를 실행하지 않도록 PROJECT_DIR을 빈 디렉토리로 설정
+      const tmpDir = path.join(path.dirname(fileURLToPath(import.meta.url)), '.vibe');
+      const result = spawnSync(
+        'node',
+        [SCRIPT, 'Bash', 'gh pr create --title "feat" --body "desc"'],
+        {
+          encoding: 'utf-8',
+          timeout: 10000,
+          // 빈 디렉토리 → detectTestCommand가 null 반환 → 통과
+          env: { ...process.env, CLAUDE_PROJECT_DIR: tmpDir },
+        }
+      );
+      const combined = `${result.stdout || ''}${result.stderr || ''}`.trim();
+      // 테스트 커맨드 없음 → PR 허용 (exit 0)
+      expect(result.status).toBe(0);
+      expect(combined).not.toContain('PR-GATE');
+    });
+
+    it('should detect gh pr create in stdin payload', () => {
+      const tmpDir = path.join(path.dirname(fileURLToPath(import.meta.url)), '.vibe');
+      const json = JSON.stringify({
+        tool_name: 'Bash',
+        tool_input: { command: 'gh pr create --title "feat" --body "body"' },
+      });
+      const result = spawnSync(
+        'node',
+        [SCRIPT],
+        {
+          input: json,
+          encoding: 'utf-8',
+          timeout: 10000,
+          env: { ...process.env, CLAUDE_PROJECT_DIR: tmpDir },
+        }
+      );
+      // 테스트 커맨드 없음 → exit 0
+      expect(result.status).toBe(0);
+    });
+
+    it('should NOT trigger gate for unrelated gh commands', () => {
+      const result = runGuard({ args: ['Bash', 'gh issue list'] });
+      expect(result.exitCode).toBe(0);
+      expect(result.stdout).toBe('');
+    });
+
+    it('should NOT trigger gate for gh pr view', () => {
+      const result = runGuard({ args: ['Bash', 'gh pr view 123'] });
+      expect(result.exitCode).toBe(0);
+      expect(result.stdout).toBe('');
+    });
+
+    it('should match gh pr create with flags before/after', () => {
+      // 플래그 포함 명령에도 정규식 매칭이 되어야 함
+      // (테스트 없는 PROJECT_DIR이므로 exit 0)
+      const tmpDir = path.join(path.dirname(fileURLToPath(import.meta.url)), '.vibe');
+      const result = spawnSync(
+        'node',
+        [SCRIPT, 'Bash', 'gh pr create -t "title" -b "body" --draft'],
+        {
+          encoding: 'utf-8',
+          timeout: 10000,
+          env: { ...process.env, CLAUDE_PROJECT_DIR: tmpDir },
+        }
+      );
+      expect(result.status).toBe(0);
+    });
+  });
 });

package/hooks/scripts/__tests__/run-ledger-verify-required.test.js

@@ -0,0 +1,146 @@
+/**
+ * run-ledger verifyRequired 확장 테스트
+ *
+ * 검증 대상:
+ *   - recordVerifyRequired: verifyRequired=true, reason 설정
+ *   - recordVerify(pass) → verifyRequired 클리어
+ *   - recordVerify(fail) → verifyRequired 유지
+ *   - auto-commit 게이트: verifyRequired=true 시 skip
+ */
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { fileURLToPath } from 'url';
+import path from 'path';
+import fs from 'fs';
+import os from 'os';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+let tmpDir;
+beforeEach(() => {
+  tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'vibe-verify-required-'));
+});
+afterEach(() => {
+  try { fs.rmSync(tmpDir, { recursive: true, force: true }); } catch { /* ignore */ }
+});
+
+async function importLedger() {
+  const ledgerPath = path.resolve(__dirname, '..', 'lib', 'run-ledger.js');
+  return import(ledgerPath);
+}
+
+describe('run-ledger: verifyRequired', () => {
+  it('초기 상태: verifyRequired 없음', async () => {
+    const { recordRunStart, readLedger } = await importLedger();
+    recordRunStart(tmpDir, 'feat');
+    const ledger = readLedger(tmpDir);
+    // verifyRequired는 undefined 또는 false여야 함
+    expect(ledger.verifyRequired).toBeFalsy();
+  });
+
+  it('recordVerifyRequired → verifyRequired=true, reason 설정', async () => {
+    const { recordRunStart, recordVerifyRequired, readLedger } = await importLedger();
+    recordRunStart(tmpDir, 'feat');
+    recordVerifyRequired(tmpDir, 'P1 any-type line 5');
+    const ledger = readLedger(tmpDir);
+    expect(ledger.verifyRequired).toBe(true);
+    expect(ledger.verifyRequiredReason).toBe('P1 any-type line 5');
+  });
+
+  it('recordVerify(pass) → verifyRequired 클리어', async () => {
+    const { recordRunStart, recordVerifyRequired, recordVerify, readLedger } = await importLedger();
+    recordRunStart(tmpDir, 'feat');
+    recordVerifyRequired(tmpDir, 'P1 console.log found');
+    recordVerify(tmpDir, true);
+    const ledger = readLedger(tmpDir);
+    expect(ledger.verifyRequired).toBe(false);
+    expect(ledger.verifyRequiredReason).toBeNull();
+    expect(ledger.verifyPassed).toBe(true);
+  });
+
+  it('recordVerify(fail) → verifyRequired 유지됨', async () => {
+    const { recordRunStart, recordVerifyRequired, recordVerify, readLedger } = await importLedger();
+    recordRunStart(tmpDir, 'feat');
+    recordVerifyRequired(tmpDir, 'P1 issue');
+    recordVerify(tmpDir, false);
+    const ledger = readLedger(tmpDir);
+    // fail 시 verifyRequired는 유지되어야 함
+    expect(ledger.verifyRequired).toBe(true);
+    expect(ledger.verifyPassed).toBe(false);
+  });
+
+  it('reason 없이 recordVerifyRequired → 기본 reason 설정', async () => {
+    const { recordRunStart, recordVerifyRequired, readLedger } = await importLedger();
+    recordRunStart(tmpDir, 'feat');
+    recordVerifyRequired(tmpDir, '');
+    const ledger = readLedger(tmpDir);
+    expect(ledger.verifyRequired).toBe(true);
+    expect(typeof ledger.verifyRequiredReason).toBe('string');
+  });
+
+  it('recordVerifyRequired fail-open (레저 없이도 작동)', async () => {
+    const { recordVerifyRequired, readLedger } = await importLedger();
+    // runStart 없이 호출
+    recordVerifyRequired(tmpDir, 'standalone P1');
+    const ledger = readLedger(tmpDir);
+    expect(ledger.verifyRequired).toBe(true);
+  });
+});
+
+describe('auto-commit: verifyRequired 게이트 로직', () => {
+  function autoCommitGatePass(ledger) {
+    if (!ledger) return true;
+
+    // verify 게이트 (기존)
+    if (ledger.runStarted) {
+      const verifyOk = ledger.verifyPassed === true
+        && ledger.verifyAt
+        && ledger.verifyAt > ledger.runStarted;
+      if (!verifyOk) return false;
+    }
+
+    // verifyRequired 게이트 (신규)
+    if (ledger.verifyRequired === true) return false;
+
+    return true;
+  }
+
+  it('verifyRequired=true → 차단', () => {
+    expect(autoCommitGatePass({
+      runStarted: null,
+      verifyRequired: true,
+      verifyRequiredReason: 'P1 any-type',
+    })).toBe(false);
+  });
+
+  it('verifyRequired=false → 통과 (verifyRequired만 확인 시)', () => {
+    expect(autoCommitGatePass({
+      runStarted: null,
+      verifyRequired: false,
+    })).toBe(true);
+  });
+
+  it('verifyRequired=undefined → 통과 (기존 레저 호환)', () => {
+    expect(autoCommitGatePass({
+      runStarted: null,
+      verifyRequired: undefined,
+    })).toBe(true);
+  });
+
+  it('runStarted + verifyPassed + verifyRequired=true → 차단 (verifyRequired 우선)', () => {
+    expect(autoCommitGatePass({
+      runStarted: '2026-01-01T10:00:00.000Z',
+      verifyPassed: true,
+      verifyAt: '2026-01-01T10:05:00.000Z',
+      verifyRequired: true,
+    })).toBe(false);
+  });
+
+  it('runStarted + verifyPassed + verifyRequired=false → 통과', () => {
+    expect(autoCommitGatePass({
+      runStarted: '2026-01-01T10:00:00.000Z',
+      verifyPassed: true,
+      verifyAt: '2026-01-01T10:05:00.000Z',
+      verifyRequired: false,
+    })).toBe(true);
+  });
+});

package/hooks/scripts/__tests__/run-ledger.test.js

@@ -0,0 +1,330 @@
+/**
+ * run-ledger 라이브러리 테스트
+ *
+ * REQ-harness-remediation-005, 006, 007, 008 커버리지:
+ *   - round-trip 읽기/쓰기
+ *   - verifyAt > runStarted 로직
+ *   - extractRunFeature / isVibeRunPrompt 헬퍼
+ *   - recordRunStart → verifyPassed 리셋
+ *   - recordVerify pass/fail
+ *   - prompt-dispatcher 에서의 vibe.run 감지 (CLI 실행)
+ */
+
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import { execFileSync, spawnSync } from 'child_process';
+import { fileURLToPath } from 'url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+// 테스트 격리용 임시 디렉토리
+let tmpDir;
+beforeEach(() => {
+  tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'vibe-ledger-test-'));
+});
+afterEach(() => {
+  try { fs.rmSync(tmpDir, { recursive: true, force: true }); } catch { /* ignore */ }
+});
+
+// 모듈 임포트 (ESM 동적)
+async function importLedger() {
+  const ledgerPath = path.resolve(__dirname, '..', 'lib', 'run-ledger.js');
+  // 캐시 버스팅 불필요 — 순수 함수, 상태 없음
+  return import(ledgerPath);
+}
+
+// ──────────────────────────────────────────────────────────────────
+// readLedger / recordRunStart / recordVerify round-trip
+// ──────────────────────────────────────────────────────────────────
+describe('run-ledger: round-trip', () => {
+  it('존재하지 않는 레저 → null 반환', async () => {
+    const { readLedger } = await importLedger();
+    const result = readLedger(tmpDir);
+    expect(result).toBeNull();
+  });
+
+  it('recordRunStart 후 읽으면 runStarted가 ISO 문자열', async () => {
+    const { recordRunStart, readLedger } = await importLedger();
+    const before = new Date().toISOString();
+    recordRunStart(tmpDir, 'my-feature');
+    const ledger = readLedger(tmpDir);
+    expect(ledger).not.toBeNull();
+    expect(ledger.runStarted).toBeDefined();
+    expect(ledger.runStarted >= before).toBe(true);
+    expect(ledger.runFeature).toBe('my-feature');
+  });
+
+  it('recordRunStart는 verifyPassed를 false로 리셋', async () => {
+    const { recordRunStart, recordVerify, readLedger } = await importLedger();
+    recordRunStart(tmpDir, 'f1');
+    recordVerify(tmpDir, true);
+    // 두 번째 run — 리셋
+    recordRunStart(tmpDir, 'f2');
+    const ledger = readLedger(tmpDir);
+    expect(ledger.verifyPassed).toBe(false);
+    expect(ledger.verifyAt).toBeNull();
+    expect(ledger.stopWarned).toBe(false);
+  });
+
+  it('recordVerify(pass) → verifyPassed=true, verifyAt 설정', async () => {
+    const { recordRunStart, recordVerify, readLedger } = await importLedger();
+    recordRunStart(tmpDir, 'feat');
+    const before = new Date().toISOString();
+    recordVerify(tmpDir, true);
+    const ledger = readLedger(tmpDir);
+    expect(ledger.verifyPassed).toBe(true);
+    expect(ledger.verifyAt).toBeDefined();
+    expect(ledger.verifyAt >= before).toBe(true);
+  });
+
+  it('recordVerify(fail) → verifyPassed=false', async () => {
+    const { recordRunStart, recordVerify, readLedger } = await importLedger();
+    recordRunStart(tmpDir, 'feat');
+    recordVerify(tmpDir, false);
+    const ledger = readLedger(tmpDir);
+    expect(ledger.verifyPassed).toBe(false);
+  });
+});
+
+// ──────────────────────────────────────────────────────────────────
+// verifyAt > runStarted 관계 검증
+// ──────────────────────────────────────────────────────────────────
+describe('run-ledger: verifyAt > runStarted', () => {
+  it('recordVerify 후 verifyAt > runStarted', async () => {
+    const { recordRunStart, recordVerify, readLedger } = await importLedger();
+    recordRunStart(tmpDir, 'f');
+    // 동일 밀리초 내 실행 가능성을 피하기 위해 runStarted를 과거로 조작
+    const ledger = readLedger(tmpDir);
+    const p = path.join(tmpDir, '.vibe', 'metrics', 'run-ledger.json');
+    const patched = { ...ledger, runStarted: new Date(Date.now() - 1000).toISOString() };
+    fs.writeFileSync(p, JSON.stringify(patched), 'utf-8');
+
+    recordVerify(tmpDir, true);
+    const after = readLedger(tmpDir);
+    expect(after.verifyAt > after.runStarted).toBe(true);
+    expect(after.verifyPassed).toBe(true);
+  });
+
+  it('verifyAt이 runStarted보다 이르면 gate 불충족 (simulate)', async () => {
+    const { readLedger } = await importLedger();
+    const p = path.join(tmpDir, '.vibe', 'metrics', 'run-ledger.json');
+    fs.mkdirSync(path.dirname(p), { recursive: true });
+    const now = new Date();
+    // runStarted가 verifyAt보다 나중
+    const data = {
+      runStarted: new Date(now.getTime() + 5000).toISOString(),
+      runFeature: 'f',
+      verifyPassed: true,
+      verifyAt: now.toISOString(),
+      stopWarned: false,
+    };
+    fs.writeFileSync(p, JSON.stringify(data), 'utf-8');
+    const ledger = readLedger(tmpDir);
+    // auto-commit 게이트 로직: verifyPassed=true 이지만 verifyAt < runStarted
+    const gatePass = ledger.verifyPassed === true
+      && ledger.verifyAt
+      && ledger.verifyAt > ledger.runStarted;
+    expect(gatePass).toBe(false);
+  });
+});
+
+// ──────────────────────────────────────────────────────────────────
+// isVibeRunPrompt / extractRunFeature
+// ──────────────────────────────────────────────────────────────────
+describe('run-ledger: vibe.run 감지 헬퍼', () => {
+  it('/vibe.run 감지', async () => {
+    const { isVibeRunPrompt } = await importLedger();
+    expect(isVibeRunPrompt('/vibe.run my-feature')).toBe(true);
+  });
+
+  it('$vibe.run 감지', async () => {
+    const { isVibeRunPrompt } = await importLedger();
+    expect(isVibeRunPrompt('$vibe.run my-feature')).toBe(true);
+  });
+
+  it('대소문자 무관', async () => {
+    const { isVibeRunPrompt } = await importLedger();
+    expect(isVibeRunPrompt('/VIBE.RUN feature')).toBe(true);
+  });
+
+  it('부분 매칭 방지 — vibe.runs 는 미감지', async () => {
+    const { isVibeRunPrompt } = await importLedger();
+    // "vibe.runs"는 \b로 경계 처리됨
+    expect(isVibeRunPrompt('vibe.runs everything')).toBe(false);
+  });
+
+  it('단어 내 포함은 미감지', async () => {
+    const { isVibeRunPrompt } = await importLedger();
+    expect(isVibeRunPrompt('I was talking about vibe.runner')).toBe(false);
+  });
+
+  it('extractRunFeature: 기능명 추출', async () => {
+    const { extractRunFeature } = await importLedger();
+    expect(extractRunFeature('/vibe.run my-feature')).toBe('my-feature');
+  });
+
+  it('extractRunFeature: $vibe.run에서 추출', async () => {
+    const { extractRunFeature } = await importLedger();
+    expect(extractRunFeature('$vibe.run auth-login ultrawork')).toBe('auth-login');
+  });
+
+  it('extractRunFeature: 기능명 없으면 null', async () => {
+    const { extractRunFeature } = await importLedger();
+    expect(extractRunFeature('/vibe.run --phase 1')).toBeNull();
+  });
+
+  it('extractRunFeature: /vibe.run만 있으면 null', async () => {
+    const { extractRunFeature } = await importLedger();
+    expect(extractRunFeature('/vibe.run')).toBeNull();
+  });
+});
+
+// ──────────────────────────────────────────────────────────────────
+// markStopWarned
+// ──────────────────────────────────────────────────────────────────
+describe('run-ledger: stopWarned', () => {
+  it('markStopWarned → stopWarned=true', async () => {
+    const { recordRunStart, markStopWarned, readLedger } = await importLedger();
+    recordRunStart(tmpDir, 'f');
+    markStopWarned(tmpDir);
+    const ledger = readLedger(tmpDir);
+    expect(ledger.stopWarned).toBe(true);
+  });
+});
+
+// ──────────────────────────────────────────────────────────────────
+// verify-ledger.js CLI
+// ──────────────────────────────────────────────────────────────────
+describe('verify-ledger CLI', () => {
+  const CLI = path.resolve(__dirname, '..', 'verify-ledger.js');
+
+  it('pass 인자 → verifyPassed=true, exit 0', async () => {
+    const { recordRunStart } = await importLedger();
+    recordRunStart(tmpDir, 'feat');
+
+    const result = spawnSync('node', [CLI, 'pass'], {
+      encoding: 'utf-8',
+      timeout: 5000,
+      env: { ...process.env, CLAUDE_PROJECT_DIR: tmpDir },
+    });
+    expect(result.status).toBe(0);
+    expect(result.stdout).toContain('verifyPassed=true');
+
+    const { readLedger } = await importLedger();
+    const ledger = readLedger(tmpDir);
+    expect(ledger.verifyPassed).toBe(true);
+  });
+
+  it('fail 인자 → verifyPassed=false, exit 0', async () => {
+    const { recordRunStart } = await importLedger();
+    recordRunStart(tmpDir, 'feat');
+
+    const result = spawnSync('node', [CLI, 'fail'], {
+      encoding: 'utf-8',
+      timeout: 5000,
+      env: { ...process.env, CLAUDE_PROJECT_DIR: tmpDir },
+    });
+    expect(result.status).toBe(0);
+    expect(result.stdout).toContain('verifyPassed=false');
+
+    const { readLedger } = await importLedger();
+    const ledger = readLedger(tmpDir);
+    expect(ledger.verifyPassed).toBe(false);
+  });
+
+  it('인자 없이도 exit 0 (fail-open)', () => {
+    const result = spawnSync('node', [CLI], {
+      encoding: 'utf-8',
+      timeout: 5000,
+      env: { ...process.env, CLAUDE_PROJECT_DIR: tmpDir },
+    });
+    expect(result.status).toBe(0);
+  });
+});
+
+// ──────────────────────────────────────────────────────────────────
+// prompt-dispatcher vibe.run 감지 (sanity — ledger 파일 생성 확인)
+// ──────────────────────────────────────────────────────────────────
+describe('prompt-dispatcher: vibe.run 감지 → ledger 파일 생성', () => {
+  const DISPATCHER = path.resolve(__dirname, '..', 'prompt-dispatcher.js');
+
+  it('/vibe.run 프롬프트 → run-ledger.json 생성', () => {
+    const payload = JSON.stringify({ prompt: '/vibe.run test-feature' });
+    const result = spawnSync('node', [DISPATCHER], {
+      input: payload,
+      encoding: 'utf-8',
+      timeout: 10000,
+      env: {
+        ...process.env,
+        CLAUDE_PROJECT_DIR: tmpDir,
+        VIBE_HOOK_DEPTH: undefined,
+        // keyword-detector 등 자식 프로세스 타임아웃 내 완료
+      },
+    });
+    expect(result.status).toBe(0);
+    const ledgerFile = path.join(tmpDir, '.vibe', 'metrics', 'run-ledger.json');
+    expect(fs.existsSync(ledgerFile)).toBe(true);
+    const ledger = JSON.parse(fs.readFileSync(ledgerFile, 'utf-8'));
+    expect(ledger.runStarted).toBeDefined();
+    expect(ledger.runFeature).toBe('test-feature');
+    expect(ledger.verifyPassed).toBe(false);
+  });
+
+  it('일반 프롬프트 → ledger 파일 미생성', () => {
+    const payload = JSON.stringify({ prompt: 'implement the login form' });
+    spawnSync('node', [DISPATCHER], {
+      input: payload,
+      encoding: 'utf-8',
+      timeout: 10000,
+      env: { ...process.env, CLAUDE_PROJECT_DIR: tmpDir },
+    });
+    const ledgerFile = path.join(tmpDir, '.vibe', 'metrics', 'run-ledger.json');
+    expect(fs.existsSync(ledgerFile)).toBe(false);
+  });
+});
+
+// ──────────────────────────────────────────────────────────────────
+// auto-commit 게이트 로직 (단위 수준 — 레저 상태별 gate 검증)
+// ──────────────────────────────────────────────────────────────────
+describe('auto-commit: verify gate 로직 (레저 상태 시뮬레이션)', () => {
+  function gatePass(ledger) {
+    if (!ledger || !ledger.runStarted) return true; // 레저 없으면 통과 (기존 동작)
+    return ledger.verifyPassed === true
+      && ledger.verifyAt
+      && ledger.verifyAt > ledger.runStarted;
+  }
+
+  it('레저 없음 → 통과 (기존 동작 유지)', () => {
+    expect(gatePass(null)).toBe(true);
+  });
+
+  it('runStarted 없음 → 통과', () => {
+    expect(gatePass({ verifyPassed: false, verifyAt: null })).toBe(true);
+  });
+
+  it('verifyPassed=false → 차단', () => {
+    expect(gatePass({
+      runStarted: '2026-01-01T10:00:00.000Z',
+      verifyPassed: false,
+      verifyAt: null,
+    })).toBe(false);
+  });
+
+  it('verifyPassed=true + verifyAt > runStarted → 통과', () => {
+    expect(gatePass({
+      runStarted: '2026-01-01T10:00:00.000Z',
+      verifyPassed: true,
+      verifyAt: '2026-01-01T10:05:00.000Z',
+    })).toBe(true);
+  });
+
+  it('verifyPassed=true 이지만 verifyAt < runStarted → 차단', () => {
+    expect(gatePass({
+      runStarted: '2026-01-01T10:05:00.000Z',
+      verifyPassed: true,
+      verifyAt: '2026-01-01T10:00:00.000Z',
+    })).toBe(false);
+  });
+});