@takuma-hirai/hirai-method 0.1.0

package/.claude/tests/autonomous-action-guard-relaxation-smoke.sh

@@ -0,0 +1,479 @@
+#!/usr/bin/env bash
+# .claude/tests/autonomous-action-guard-relaxation-smoke.sh
+#
+# 目的:
+#   autonomous-action-guard.sh の緩和効果 (task #39) を 12 ケースで検証する。
+#
+#   draft §4.1 採用案 C:
+#     - `git push` 一般 pattern を DEFAULT_PATTERNS から削除 (feature branch push は通過)
+#     - `gh pr create` を DEFAULT_PATTERNS から削除 (PR 作成は通過)
+#     - `gh pr merge` は引き続き block
+#
+# 設計起源:
+#   docs/draft/autonomous-action-guard-relaxation.md §4.4 新 smoke 5 cases
+#   docs/tasks/task-39-autonomous-action-guard-relaxation.md Step 1 サブ C
+#   task-39 Step 2 iter1 R4 pr-test-analyzer 指摘 HIGH H1+H2 反映 (Case 8-12)
+#
+# テストケース:
+#   Case 1:  Loop + `git push origin feat/foo`                → 通過 (緩和効果、feature branch)
+#   Case 2:  Loop + `git push origin main`                    → 通過 (autonomous-action-guard 単体検証、
+#              delegation-guard 別 layer の block は本 smoke 対象外)
+#   Case 3:  Loop + `git push origin stg-v1`                  → 通過 (autonomous-action-guard 単体検証、同上)
+#   Case 4:  Loop + `gh pr create --base main --head feat/foo` → 通過 (緩和効果、PR 作成許可)
+#   Case 5:  Loop + `gh pr merge --merge`                     → block (user 明示承認必須維持)
+#   Case 6:  Normal + `git push origin feat/foo`              → 通過 (Normal mode では元々 context inject のみ)
+#   Case 7:  Normal + `gh pr merge --merge`                   → 通過 (Normal mode は block しない、context inject のみ)
+#   Case 8:  Loop + `git push --force origin feat/foo`        → 通過 (autonomous-action-guard 単体; H1 反映)
+#   Case 9:  Loop + `git push --tags origin`                  → 通過 (autonomous-action-guard 単体; H1 反映)
+#   Case 10: Loop + `git push --all origin`                   → 通過 (autonomous-action-guard 単体; H1 反映)
+#   Case 11: Loop + `gh pr merge` (フラグなし)                 → block (H2 反映、flag なし variant)
+#   Case 12: Loop + `gh pr merge --squash`                    → block (H2 反映、--squash variant)
+#
+# 補足:
+#   Case 2/3 は本 smoke では autonomous-action-guard 単体の「通過」を assert する。
+#   main/stg への実際の push block は delegation-guard-deny-layers-smoke.sh が担保済み。
+#   Case 6/7 は mode 依存挙動の網羅性のため追加 (draft 5 cases → 7 cases)。
+#   Case 8:  意図的 — --force は autonomous-action-guard 射程外。
+#             delegation-guard.sh check_git_destructive が別 layer で block する責務。
+#   Case 9:  意図的 — tag push は autonomous-action-guard 緩和後の射程外。
+#             main/stg tag は delegation-guard.sh protected-branch-push-deny が dst_basename 解析で block。
+#   Case 10: 意図的、要 future smoke — --all は全 branch push。
+#             delegation-guard 側の専用解析は未実装 (副産物 entry 候補)。
+#
+# 実行:
+#   bash .claude/tests/autonomous-action-guard-relaxation-smoke.sh
+#
+# 終了コード:
+#   0 = 全 case PASS / 1 = 1 件以上 FAIL
+#
+# 重要制約:
+#   set -e は使わない (CB-verify 教訓 feedback_set_e_in_sourced_libs)
+
+set -uo pipefail
+
+# repo root に移動
+cd "$(cd "$(dirname "$0")/../.." && pwd)" || exit 1
+
+REPO_ROOT="$(pwd)"
+GUARD_HOOK="${REPO_ROOT}/.claude/hooks/autonomous-action-guard.sh"
+
+# tmp harness root (per-run)
+TMP_ROOT="$(mktemp -d "/tmp/autonomous-action-guard-relaxation-smoke.XXXXXX")"
+
+# .claude/mode.yml backup (always restore on exit)
+MODE_FILE="${REPO_ROOT}/.claude/mode.yml"
+MODE_BACKUP="${TMP_ROOT}/mode.yml.bak"
+if [ -f "$MODE_FILE" ]; then
+  cp "$MODE_FILE" "$MODE_BACKUP"
+fi
+
+# global cleanup
+# shellcheck disable=SC2329  # called via trap EXIT
+_cleanup() {
+  # restore mode.yml
+  if [ -f "$MODE_BACKUP" ]; then
+    cp "$MODE_BACKUP" "$MODE_FILE"
+  fi
+  rm -rf "$TMP_ROOT"
+}
+trap _cleanup EXIT
+
+# tmp harness の .claude/ 構築 (real hooks / lib / harness-config.yml を symlink)
+mkdir -p "${TMP_ROOT}/.claude"
+ln -s "${REPO_ROOT}/.claude/hooks" "${TMP_ROOT}/.claude/hooks"
+if [ -f "${REPO_ROOT}/.claude/harness-config.yml" ]; then
+  ln -s "${REPO_ROOT}/.claude/harness-config.yml" "${TMP_ROOT}/.claude/harness-config.yml"
+fi
+mkdir -p "${TMP_ROOT}/.claude/.workflow-state"
+
+PASS=0
+FAIL=0
+FAIL_CASES=""
+RESULTS=""
+
+# helpers ----------------------------------------------------------------------
+
+# .claude/mode.yml を一時的に書き換え (loop / normal)
+_set_mode() {
+  local m="$1"
+  cat > "$MODE_FILE" <<EOF
+mode: ${m}
+asana_enabled: false
+EOF
+}
+
+# tmp の .workflow-state を空に reset
+_reset_state_dir() {
+  rm -rf "${TMP_ROOT}/.claude/.workflow-state"
+  mkdir -p "${TMP_ROOT}/.claude/.workflow-state"
+}
+
+# run guard hook with stdin JSON (PreToolUse Bash format)
+# sets LAST_OUT / LAST_ERR / LAST_CODE
+# usage: _run_guard <stdin_json> [ENV=VAL]...
+_run_guard() {
+  local stdin_json="$1"
+  shift
+  local out_file err_file
+  out_file="$(mktemp "${TMP_ROOT}/out.XXXXXX")"
+  err_file="$(mktemp "${TMP_ROOT}/err.XXXXXX")"
+
+  env -i \
+    PATH="$PATH" \
+    HOME="$HOME" \
+    CLAUDE_PROJECT_DIR="$TMP_ROOT" \
+    "$@" \
+    bash "$GUARD_HOOK" \
+    <<< "$stdin_json" \
+    > "$out_file" \
+    2> "$err_file"
+  LAST_CODE=$?
+  LAST_OUT=$(cat "$out_file")
+  cat "$err_file" >/dev/null  # stderr captured but not asserted in this smoke
+  rm -f "$out_file" "$err_file"
+}
+
+_record() {
+  local label="$1" status="$2" expected="$3" actual="$4"
+  RESULTS="${RESULTS}${status}|${label}|${expected}|${actual}"$'\n'
+  if [ "$status" = "PASS" ]; then
+    PASS=$((PASS + 1))
+  else
+    FAIL=$((FAIL + 1))
+    FAIL_CASES="${FAIL_CASES} ${label}"
+  fi
+}
+
+# tests ------------------------------------------------------------------------
+
+# Case 1: Loop + `git push origin feat/foo` → 通過 (autonomous-action-guard 緩和効果)
+#
+# 緩和前: DEFAULT_PATTERNS に `^git[[:space:]]+push([[:space:]]|$)` が存在し block。
+# 緩和後: git push 一般 pattern を削除 → feature branch push は通過。
+# 検証: exit=0 かつ stdout が {} (block JSON でない、context inject もなし = silent pass)
+case1() {
+  _reset_state_dir
+  _set_mode "loop"
+  local stdin_json
+  stdin_json='{"tool_name":"Bash","tool_input":{"command":"git push origin feat/foo"}}'
+
+  _run_guard "$stdin_json"
+
+  local expected="exit=0, stdout='{}' (feature branch push passes after relaxation)"
+  local actual="exit=${LAST_CODE} stdout='${LAST_OUT}'"
+
+  if [ "$LAST_CODE" = "0" ] \
+     && [ "$LAST_OUT" = "{}" ] \
+     && ! printf '%s' "$LAST_OUT" | grep -q '"decision":[[:space:]]*"block"'; then
+    _record "Case 1: Loop+git push feat branch → pass (relaxation)" "PASS" "$expected" "$actual"
+  else
+    _record "Case 1: Loop+git push feat branch → pass (relaxation)" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 2: Loop + `git push origin main` → 通過 (autonomous-action-guard 単体検証)
+#
+# 本 smoke は autonomous-action-guard 単体の挙動を test する。
+# 緩和後: git push 一般 pattern 削除により、autonomous-action-guard は main push を block しない。
+# 別 layer (delegation-guard.sh の protected-branch-push-deny) が main push を block するが、
+# 本 smoke ではその layer を bypass env で除外し、autonomous-action-guard のみ検証する。
+# 検証: exit=0 かつ stdout が {} (autonomous-action-guard は block しない)
+case2() {
+  _reset_state_dir
+  _set_mode "loop"
+  local stdin_json
+  stdin_json='{"tool_name":"Bash","tool_input":{"command":"git push origin main"}}'
+
+  _run_guard "$stdin_json"
+
+  local expected="exit=0, stdout='{}' (autonomous-action-guard does not block main push after relaxation; delegation-guard handles separately)"
+  local actual="exit=${LAST_CODE} stdout='${LAST_OUT}'"
+
+  if [ "$LAST_CODE" = "0" ] \
+     && [ "$LAST_OUT" = "{}" ] \
+     && ! printf '%s' "$LAST_OUT" | grep -q '"decision":[[:space:]]*"block"'; then
+    _record "Case 2: Loop+git push main → autonomous-action-guard pass (relaxation)" "PASS" "$expected" "$actual"
+  else
+    _record "Case 2: Loop+git push main → autonomous-action-guard pass (relaxation)" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 3: Loop + `git push origin stg-v1` → 通過 (autonomous-action-guard 単体検証)
+#
+# Case 2 と同じ設計意図。stg 系 branch も autonomous-action-guard では通過。
+# 実際の block は delegation-guard.sh の protected-branch-push-deny が担当。
+case3() {
+  _reset_state_dir
+  _set_mode "loop"
+  local stdin_json
+  stdin_json='{"tool_name":"Bash","tool_input":{"command":"git push origin stg-v1"}}'
+
+  _run_guard "$stdin_json"
+
+  local expected="exit=0, stdout='{}' (autonomous-action-guard does not block stg push after relaxation)"
+  local actual="exit=${LAST_CODE} stdout='${LAST_OUT}'"
+
+  if [ "$LAST_CODE" = "0" ] \
+     && [ "$LAST_OUT" = "{}" ] \
+     && ! printf '%s' "$LAST_OUT" | grep -q '"decision":[[:space:]]*"block"'; then
+    _record "Case 3: Loop+git push stg branch → autonomous-action-guard pass (relaxation)" "PASS" "$expected" "$actual"
+  else
+    _record "Case 3: Loop+git push stg branch → autonomous-action-guard pass (relaxation)" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 4: Loop + `gh pr create --base main --head feat/foo` → 通過 (緩和効果)
+#
+# 緩和前: DEFAULT_PATTERNS に `^gh[[:space:]]+pr[[:space:]]+(create|merge)([[:space:]]|$)` で block。
+# 緩和後: create を pattern から削除 → PR 作成は通過。
+# 検証: exit=0 かつ stdout が {} (block でない)
+case4() {
+  _reset_state_dir
+  _set_mode "loop"
+  local stdin_json
+  stdin_json='{"tool_name":"Bash","tool_input":{"command":"gh pr create --base main --head feat/foo"}}'
+
+  _run_guard "$stdin_json"
+
+  local expected="exit=0, stdout='{}' (gh pr create passes after relaxation)"
+  local actual="exit=${LAST_CODE} stdout='${LAST_OUT}'"
+
+  if [ "$LAST_CODE" = "0" ] \
+     && [ "$LAST_OUT" = "{}" ] \
+     && ! printf '%s' "$LAST_OUT" | grep -q '"decision":[[:space:]]*"block"'; then
+    _record "Case 4: Loop+gh pr create → pass (relaxation)" "PASS" "$expected" "$actual"
+  else
+    _record "Case 4: Loop+gh pr create → pass (relaxation)" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 5: Loop + `gh pr merge --merge` → block (user 明示承認必須維持)
+#
+# 緩和後も `gh pr merge` は引き続き block する。
+# draft §4.1 After: `^gh[[:space:]]+pr[[:space:]]+merge([[:space:]]|$)` を維持。
+# 検証: exit=0 かつ stdout に "decision":"block" を含む
+case5() {
+  _reset_state_dir
+  _set_mode "loop"
+  local stdin_json
+  stdin_json='{"tool_name":"Bash","tool_input":{"command":"gh pr merge --merge"}}'
+
+  _run_guard "$stdin_json"
+
+  local expected='exit=0, stdout~"decision":"block" (gh pr merge still blocked after relaxation)'
+  local actual
+  actual="exit=${LAST_CODE} stdout_head='$(printf '%s' "$LAST_OUT" | head -c 80)'"
+
+  if [ "$LAST_CODE" = "0" ] \
+     && printf '%s' "$LAST_OUT" | grep -q '"decision":[[:space:]]*"block"'; then
+    _record "Case 5: Loop+gh pr merge → block (still restricted)" "PASS" "$expected" "$actual"
+  else
+    _record "Case 5: Loop+gh pr merge → block (still restricted)" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 6: Normal + `git push origin feat/foo` → 通過 (Normal mode は block しない)
+#
+# Normal mode では autonomous-action-guard は block せず context inject のみを返す。
+# 緩和後は git push pattern が削除されるため、Normal mode では完全 silent pass ({})。
+# 検証: exit=0 かつ stdout が {} (緩和後 pattern 不在で context inject も発火しない)
+case6() {
+  _reset_state_dir
+  _set_mode "normal"
+  local stdin_json
+  stdin_json='{"tool_name":"Bash","tool_input":{"command":"git push origin feat/foo"}}'
+
+  _run_guard "$stdin_json"
+
+  local expected="exit=0, stdout='{}' (Normal mode, git push pattern removed, silent pass)"
+  local actual="exit=${LAST_CODE} stdout='${LAST_OUT}'"
+
+  if [ "$LAST_CODE" = "0" ] \
+     && [ "$LAST_OUT" = "{}" ] \
+     && ! printf '%s' "$LAST_OUT" | grep -q '"decision":[[:space:]]*"block"'; then
+    _record "Case 6: Normal+git push feat branch → silent pass" "PASS" "$expected" "$actual"
+  else
+    _record "Case 6: Normal+git push feat branch → silent pass" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 7: Normal + `gh pr merge --merge` → 通過 (Normal mode は block しない、context inject のみ)
+#
+# Normal mode では gh pr merge も block せず、hookSpecificOutput (context inject) のみ返す。
+# (遵守事項 8 の対象として warn するが実行は止めない)
+# 検証: exit=0 かつ stdout に "decision":"block" を含まない
+case7() {
+  _reset_state_dir
+  _set_mode "normal"
+  local stdin_json
+  stdin_json='{"tool_name":"Bash","tool_input":{"command":"gh pr merge --merge"}}'
+
+  _run_guard "$stdin_json"
+
+  local expected="exit=0, no block (Normal mode, gh pr merge gets context inject not block)"
+  local actual
+  actual="exit=${LAST_CODE} stdout_head='$(printf '%s' "$LAST_OUT" | head -c 80)'"
+
+  if [ "$LAST_CODE" = "0" ] \
+     && ! printf '%s' "$LAST_OUT" | grep -q '"decision":[[:space:]]*"block"'; then
+    _record "Case 7: Normal+gh pr merge → no block (context inject only)" "PASS" "$expected" "$actual"
+  else
+    _record "Case 7: Normal+gh pr merge → no block (context inject only)" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 8: Loop + `git push --force origin feat/foo` → 通過 (autonomous-action-guard 単体)
+#
+# 意図的: --force は autonomous-action-guard の対象外。
+# `delegation-guard.sh check_git_destructive` (10 patterns 中の destructive group) が
+# 別 layer で block する責務。autonomous-action-guard 単体では通過することを実証。
+# 検証: exit=0 かつ stdout が {} (autonomous-action-guard は block しない)
+case8() {
+  _reset_state_dir
+  _set_mode "loop"
+  local stdin_json
+  stdin_json='{"tool_name":"Bash","tool_input":{"command":"git push --force origin feat/foo"}}'
+
+  _run_guard "$stdin_json"
+
+  local expected="exit=0, stdout='{}' (--force is out of autonomous-action-guard scope; delegation-guard handles it)"
+  local actual="exit=${LAST_CODE} stdout='${LAST_OUT}'"
+
+  if [ "$LAST_CODE" = "0" ] \
+     && [ "$LAST_OUT" = "{}" ] \
+     && ! printf '%s' "$LAST_OUT" | grep -q '"decision":[[:space:]]*"block"'; then
+    _record "Case 8: Loop+git push --force feat branch → autonomous-action-guard pass (H1)" "PASS" "$expected" "$actual"
+  else
+    _record "Case 8: Loop+git push --force feat branch → autonomous-action-guard pass (H1)" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 9: Loop + `git push --tags origin` → 通過 (autonomous-action-guard 単体)
+#
+# 意図的: tag push は autonomous-action-guard 緩和後の射程外。
+# main/stg tag は delegation-guard.sh protected-branch-push-deny が dst_basename 解析で block する。
+# 本 smoke では autonomous-action-guard 単体が通過することのみを検証。
+# 検証: exit=0 かつ stdout が {}
+case9() {
+  _reset_state_dir
+  _set_mode "loop"
+  local stdin_json
+  stdin_json='{"tool_name":"Bash","tool_input":{"command":"git push --tags origin"}}'
+
+  _run_guard "$stdin_json"
+
+  local expected="exit=0, stdout='{}' (--tags is out of autonomous-action-guard scope after relaxation)"
+  local actual="exit=${LAST_CODE} stdout='${LAST_OUT}'"
+
+  if [ "$LAST_CODE" = "0" ] \
+     && [ "$LAST_OUT" = "{}" ] \
+     && ! printf '%s' "$LAST_OUT" | grep -q '"decision":[[:space:]]*"block"'; then
+    _record "Case 9: Loop+git push --tags → autonomous-action-guard pass (H1)" "PASS" "$expected" "$actual"
+  else
+    _record "Case 9: Loop+git push --tags → autonomous-action-guard pass (H1)" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 10: Loop + `git push --all origin` → 通過 (autonomous-action-guard 単体)
+#
+# 意図的、要 future smoke: --all は全 branch push。
+# delegation-guard 側の専用解析は未実装 (副産物 entry 候補)。
+# 本 smoke では autonomous-action-guard 単体が通過することのみを検証。
+# 検証: exit=0 かつ stdout が {}
+case10() {
+  _reset_state_dir
+  _set_mode "loop"
+  local stdin_json
+  stdin_json='{"tool_name":"Bash","tool_input":{"command":"git push --all origin"}}'
+
+  _run_guard "$stdin_json"
+
+  local expected="exit=0, stdout='{}' (--all is out of autonomous-action-guard scope; delegation-guard analysis not yet implemented)"
+  local actual="exit=${LAST_CODE} stdout='${LAST_OUT}'"
+
+  if [ "$LAST_CODE" = "0" ] \
+     && [ "$LAST_OUT" = "{}" ] \
+     && ! printf '%s' "$LAST_OUT" | grep -q '"decision":[[:space:]]*"block"'; then
+    _record "Case 10: Loop+git push --all → autonomous-action-guard pass (H1)" "PASS" "$expected" "$actual"
+  else
+    _record "Case 10: Loop+git push --all → autonomous-action-guard pass (H1)" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 11: Loop + `gh pr merge` (フラグなし) → block
+#
+# Case 5 は `gh pr merge --merge` (flag 付き)。
+# Case 11 は flag なし variant が block されることを実証 (R4 H2 反映)。
+# regex `^gh[[:space:]]+pr[[:space:]]+merge` は subsequent flag に依存しないことを確認。
+# 検証: exit=0 かつ stdout に "decision":"block" を含む
+case11() {
+  _reset_state_dir
+  _set_mode "loop"
+  local stdin_json
+  stdin_json='{"tool_name":"Bash","tool_input":{"command":"gh pr merge"}}'
+
+  _run_guard "$stdin_json"
+
+  local expected='exit=0, stdout~"decision":"block" (gh pr merge no-flag variant still blocked; H2)'
+  local actual
+  actual="exit=${LAST_CODE} stdout_head='$(printf '%s' "$LAST_OUT" | head -c 80)'"
+
+  if [ "$LAST_CODE" = "0" ] \
+     && printf '%s' "$LAST_OUT" | grep -q '"decision":[[:space:]]*"block"'; then
+    _record "Case 11: Loop+gh pr merge (no flag) → block (H2)" "PASS" "$expected" "$actual"
+  else
+    _record "Case 11: Loop+gh pr merge (no flag) → block (H2)" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 12: Loop + `gh pr merge --squash` → block
+#
+# `gh pr merge` の --squash flag variant も block されることを実証 (R4 H2 反映)。
+# regex `^gh[[:space:]]+pr[[:space:]]+merge` は subsequent flag に依存しない。
+# 検証: exit=0 かつ stdout に "decision":"block" を含む
+case12() {
+  _reset_state_dir
+  _set_mode "loop"
+  local stdin_json
+  stdin_json='{"tool_name":"Bash","tool_input":{"command":"gh pr merge --squash"}}'
+
+  _run_guard "$stdin_json"
+
+  local expected='exit=0, stdout~"decision":"block" (gh pr merge --squash variant still blocked; H2)'
+  local actual
+  actual="exit=${LAST_CODE} stdout_head='$(printf '%s' "$LAST_OUT" | head -c 80)'"
+
+  if [ "$LAST_CODE" = "0" ] \
+     && printf '%s' "$LAST_OUT" | grep -q '"decision":[[:space:]]*"block"'; then
+    _record "Case 12: Loop+gh pr merge --squash → block (H2)" "PASS" "$expected" "$actual"
+  else
+    _record "Case 12: Loop+gh pr merge --squash → block (H2)" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# === run all ===
+case1
+case2
+case3
+case4
+case5
+case6
+case7
+case8
+case9
+case10
+case11
+case12
+
+# === report ===
+printf '\n=== autonomous-action-guard-relaxation smoke results ===\n'
+printf 'Status | Case | Expected | Actual\n'
+printf -- '-------+------+----------+-------\n'
+printf '%s' "$RESULTS"
+printf '\n=== summary: %d passed, %d failed ===\n' "$PASS" "$FAIL"
+
+if [ "$FAIL" -ne 0 ]; then
+  printf 'FAIL cases:%s\n' "$FAIL_CASES" >&2
+  exit 1
+fi
+exit 0

package/.claude/tests/autonomous-action-guard-smoke.sh

@@ -0,0 +1,187 @@
+#!/usr/bin/env bash
+# autonomous-action-guard-smoke.sh — task-22 W3 smoke for autonomous-action-guard.sh
+#
+# 設計起源:
+#   docs/draft/hook-reliability-uplift.md W3
+#   docs/draft/loop-auto-progress-enforcement.md §3 W3
+#
+# 対象 hook:
+#   .claude/hooks/autonomous-action-guard.sh (PreToolUse Bash)
+#
+# 検証範囲 (5 ケース):
+#   Case 1: Loop モード + git push origin main → BLOCK (decision=block)
+#   Case 2: Loop モード + gh pr create → BLOCK
+#   Case 3: Loop モード + vercel --prod → BLOCK
+#   Case 4: Normal モード + git push origin main → PASS + additionalContext warning
+#   Case 5: Loop モード + ECC_AUTONOMOUS_ACTION_OVERRIDE=1 + git push → PASS + bypass.log 記録
+#
+# 重要制約:
+#   - file-top に set -euo pipefail を書かない (feedback_set_e_in_sourced_libs)
+#   - HC_MODE env で mode 切替 (.claude/mode.yml に依存しない)
+#   - HC_AGENT_MARKER_DIR を空 tmp に向けて subagent 短絡を避ける
+#   - bypass.log は live .workflow-state/bypass.log を汚さない方法で検証する
+#     (Case 5 では line delta を測る — config-level ON のまま env bypass を発火)
+#
+# 実行:
+#   bash .claude/tests/autonomous-action-guard-smoke.sh
+#
+# 終了コード:
+#   0 = 5/5 PASS / 1 = 1 件以上 FAIL
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
+HOOK="$REPO_ROOT/.claude/hooks/autonomous-action-guard.sh"
+
+# clean env
+unset CLAUDE_HARNESS_ROLE
+unset ECC_AUTONOMOUS_ACTION_OVERRIDE
+unset HC_AUTONOMOUS_ACTION_ENABLED
+
+TMP_MARKER_DIR="$(mktemp -d /tmp/aag-smoke-marker.XXXXXX)"
+trap 'rm -rf "$TMP_MARKER_DIR"' EXIT
+
+COMMON_ENV=(
+  "HC_AGENT_MARKER_DIR=${TMP_MARKER_DIR}"
+)
+
+# bypass.log は REPO_ROOT/.claude/.workflow-state/bypass.log に集約される設計。
+# Case 5 では line delta を測ることで「新規 entry 追加」を検証する。
+BYPASS_LOG="$REPO_ROOT/.claude/.workflow-state/bypass.log"
+
+PASS=0
+FAIL=0
+SKIP=0
+FAILED_CASES=()
+
+# Bash JSON input
+json_bash_input() {
+  local cmd="$1"
+  CMD="$cmd" python3 -c '
+import json, os
+print(json.dumps({"tool_name": "Bash", "tool_input": {"command": os.environ["CMD"]}}))
+'
+}
+
+extract_decision() {
+  OUT="$1" python3 -c '
+import os, json
+try:
+    d = json.loads(os.environ["OUT"])
+    print(d.get("decision", "none"))
+except Exception:
+    print("parse_error")
+' 2>/dev/null
+}
+
+extract_additional_context() {
+  OUT="$1" python3 -c '
+import os, json
+try:
+    d = json.loads(os.environ["OUT"])
+    print(d.get("hookSpecificOutput", {}).get("additionalContext", ""))
+except Exception:
+    print("")
+' 2>/dev/null
+}
+
+# === Case 1: Loop + git push origin main → BLOCK ===
+# [OBSOLETE: task-39 2026-05-25] git push origin main は自律実行可となり BLOCK されなくなった
+# (modes.md 遵守事項 8 緩和)。旧 BLOCK 期待は stale につき skip。
+case1_loop_git_push_block() {
+  local label="Case 1: Loop + 'git push origin main' → BLOCK [OBSOLETE: task-39]"
+  SKIP=$((SKIP + 1))
+  printf "  SKIP (obsolete): %s\n" "$label"
+}
+
+# === Case 2: Loop + gh pr create → BLOCK ===
+# [OBSOLETE: task-39 2026-05-25] gh pr create は自律実行可となり BLOCK されなくなった
+# (modes.md 遵守事項 8 緩和)。旧 BLOCK 期待は stale につき skip。
+case2_loop_gh_pr_create_block() {
+  local label="Case 2: Loop + 'gh pr create' → BLOCK [OBSOLETE: task-39]"
+  SKIP=$((SKIP + 1))
+  printf "  SKIP (obsolete): %s\n" "$label"
+}
+
+# === Case 3: Loop + vercel --prod → BLOCK ===
+case3_loop_vercel_prod_block() {
+  local label="Case 3: Loop + 'vercel --prod' → BLOCK"
+  local cmd="vercel --prod"
+  local out decision
+  out=$(json_bash_input "$cmd" | HC_MODE=loop env "${COMMON_ENV[@]}" bash "$HOOK" 2>/dev/null)
+  decision=$(extract_decision "$out")
+
+  if [ "$decision" = "block" ]; then
+    PASS=$((PASS + 1))
+    printf "  PASS: %s\n" "$label"
+  else
+    FAIL=$((FAIL + 1))
+    FAILED_CASES+=("$label (decision=$decision)")
+    printf "  FAIL: %s\n    decision: %s\n    out: %s\n" "$label" "$decision" "$out"
+  fi
+}
+
+# === Case 4: Normal + git push origin main → PASS + additionalContext warning ===
+# [OBSOLETE: task-39 2026-05-25] git push origin main が緩和され、Normal モードでも
+# autonomous-action-guard が当該コマンドに warning context を出さなくなった。
+# 旧「Normal で warning context 付与」期待は stale につき skip。
+case4_normal_git_push_context_warning() {
+  local label="Case 4: Normal + 'git push origin main' → PASS w/ additionalContext [OBSOLETE: task-39]"
+  SKIP=$((SKIP + 1))
+  printf "  SKIP (obsolete): %s\n" "$label"
+}
+
+# === Case 5: Loop + ECC_AUTONOMOUS_ACTION_OVERRIDE=1 → PASS + bypass.log 記録 ===
+case5_loop_bypass_env_with_log() {
+  local label="Case 5: Loop + ECC_AUTONOMOUS_ACTION_OVERRIDE=1 → PASS + bypass.log entry"
+  local cmd="git push origin main"
+  local log_before=0
+  if [ -f "$BYPASS_LOG" ]; then
+    log_before=$(wc -l < "$BYPASS_LOG" | tr -d ' ')
+  fi
+  local out decision
+  out=$(json_bash_input "$cmd" | HC_MODE=loop ECC_AUTONOMOUS_ACTION_OVERRIDE=1 ECC_BYPASS_REASON="smoke test" env "${COMMON_ENV[@]}" bash "$HOOK" 2>/dev/null)
+  decision=$(extract_decision "$out")
+
+  local log_after=0
+  if [ -f "$BYPASS_LOG" ]; then
+    log_after=$(wc -l < "$BYPASS_LOG" | tr -d ' ')
+  fi
+  local delta=$((log_after - log_before))
+
+  if [ "$decision" != "block" ] && [ "$delta" -ge 1 ]; then
+    PASS=$((PASS + 1))
+    printf "  PASS: %s (bypass.log delta=%d)\n" "$label" "$delta"
+  else
+    FAIL=$((FAIL + 1))
+    FAILED_CASES+=("$label (decision=$decision log_delta=$delta)")
+    printf "  FAIL: %s\n    decision: %s\n    log_delta: %d\n    out: %s\n" "$label" "$decision" "$delta" "$out"
+  fi
+}
+
+printf "===== autonomous-action-guard-smoke (task-22 W3.4, 5 cases) =====\n\n"
+
+case1_loop_git_push_block
+case2_loop_gh_pr_create_block
+case3_loop_vercel_prod_block
+case4_normal_git_push_context_warning
+case5_loop_bypass_env_with_log
+
+TOTAL=$((PASS + FAIL + SKIP))
+printf "\n===== Result =====\n"
+printf "PASS: %d / %d\n" "$PASS" "$TOTAL"
+printf "FAIL: %d / %d\n" "$FAIL" "$TOTAL"
+printf "SKIP: %d / %d (obsolete: task-39)\n" "$SKIP" "$TOTAL"
+
+if [ "$FAIL" -gt 0 ]; then
+  printf "Failed cases:\n"
+  for c in "${FAILED_CASES[@]}"; do
+    printf "  - %s\n" "$c"
+  done
+  printf "\nsummary: %d/%d PASS\n" "$PASS" "$TOTAL"
+  exit 1
+fi
+
+printf "\nsummary: %d/%d PASS\n" "$PASS" "$TOTAL"
+exit 0