@takuma-hirai/hirai-method 0.1.0

package/.claude/tests/tool-call-slip-detector-smoke.sh

@@ -0,0 +1,101 @@
+#!/usr/bin/env bash
+# tool-call-slip-detector-smoke.sh
+#
+# tool-call-slip-detector.sh (Stop hook) の動作検証。
+# 6 ケース: positive 2 (standalone call / parameter 漏れ) + negative 2
+# (clean prose / fence 内引用) + bypass 1 (env) + feature toggle off 1。
+#
+# 各ケースは fake transcript JSONL を生成し、stdin JSON で transcript_path を
+# 渡して hook を実行、stdout の decision:block 有無を assert する。
+
+set -uo pipefail
+
+REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+HOOK="$REPO_ROOT/hooks/tool-call-slip-detector.sh"
+TMPDIR_SMOKE="$(mktemp -d)"
+trap 'rm -rf "$TMPDIR_SMOKE"' EXIT
+
+pass=0
+fail=0
+
+# assistant text を 1 行 transcript JSONL として書き出す
+# $1: 出力 path, $2: assistant text (改行は \n リテラルで渡す)
+write_transcript() {
+  local path="$1" text="$2"
+  jq -nc --arg t "$text" '{type:"assistant", message:{role:"assistant", content:[{type:"text", text:$t}]}}' > "$path"
+}
+
+# hook を実行し stdout を返す
+run_hook() {
+  local tpath="$1"
+  jq -nc --arg p "$tpath" '{transcript_path:$p}' | bash "$HOOK" 2>/dev/null
+}
+
+assert_detected() {
+  local name="$1" out="$2"
+  if printf '%s' "$out" | grep -q '"decision"[[:space:]]*:[[:space:]]*"block"'; then
+    echo "PASS: $name (detected)"; pass=$((pass+1))
+  else
+    echo "FAIL: $name (expected detection, got: ${out:-<empty>})"; fail=$((fail+1))
+  fi
+}
+
+assert_clean() {
+  local name="$1" out="$2"
+  if [ -z "$out" ]; then
+    echo "PASS: $name (silent)"; pass=$((pass+1))
+  else
+    echo "FAIL: $name (expected silent, got: $out)"; fail=$((fail+1))
+  fi
+}
+
+# --- Case 1: standalone `call` 行 (positive) ---
+t1="$TMPDIR_SMOKE/t1.jsonl"
+write_transcript "$t1" "B/C 両方完了。両者の実 file 反映を grep/git で統合検証する。
+call
+git commit -m \"feat: x\"
+統合検証 commit"
+out1="$(run_hook "$t1")"
+assert_detected "Case1 standalone-call" "$out1"
+
+# --- Case 2: parameter タグ漏れ (positive、fence 外) ---
+t2="$TMPDIR_SMOKE/t2.jsonl"
+write_transcript "$t2" "検証を実行する。
+<parameter name=\"description\">B/C成果の統合grep検証</parameter>"
+out2="$(run_hook "$t2")"
+assert_detected "Case2 parameter-leak" "$out2"
+
+# --- Case 3: clean prose (negative) ---
+t3="$TMPDIR_SMOKE/t3.jsonl"
+write_transcript "$t3" "commit 成功 (2283f41)。残りは Step 4 を subagent で続行します。次に進めます。"
+out3="$(run_hook "$t3")"
+assert_clean "Case3 clean-prose" "$out3"
+
+# --- Case 4: markup を fence 内で引用 (negative、meta 議論) ---
+t4="$TMPDIR_SMOKE/t4.jsonl"
+write_transcript "$t4" "slip の例を示します:
+\`\`\`
+call
+<parameter name=\"description\">例</parameter>
+\`\`\`
+この通り fence 内なので誤検出しないはずです。"
+out4="$(run_hook "$t4")"
+assert_clean "Case4 fenced-quote" "$out4"
+
+# --- Case 5: bypass env (negative) ---
+t5="$TMPDIR_SMOKE/t5.jsonl"
+write_transcript "$t5" "call
+git status"
+out5="$(ECC_TOOL_CALL_SLIP_OFF=1 run_hook "$t5")"
+assert_clean "Case5 bypass-env" "$out5"
+
+# --- Case 6: feature toggle off (negative、no-op) ---
+t6="$TMPDIR_SMOKE/t6.jsonl"
+write_transcript "$t6" "call
+git status"
+out6="$(HC_FEATURE_TOOL_CALL_SLIP_DETECT_ENABLED=false run_hook "$t6")"
+assert_clean "Case6 feature-toggle-off" "$out6"
+
+echo "----"
+echo "PASS=$pass FAIL=$fail"
+[ "$fail" -eq 0 ]

package/.claude/tests/wave-precheck-template-smoke.sh

@@ -0,0 +1,159 @@
+#!/usr/bin/env bash
+# .claude/tests/wave-precheck-template-smoke.sh — smoke for Wave Pre-check template/rule/command wiring (W4)
+#
+# 目的:
+#   docs/draft/wave-precheck-git-log-grep.md W1-W3 で導入された artifact が
+#   実体として存在し、所定の keyword が含まれていることを静的に検証する。
+#   さらに既存 smoke file の存在 (回帰安全) を確認する。
+#
+# 検証ケース:
+#   Case 1: _TASK_TEMPLATE.md に「事前確認」 keyword が含まれる (W1)
+#   Case 2: workflow.md Stage 8 / 7 周辺に "git log --grep" が最低 2 hit (W2)
+#   Case 3: new-feature.md / modify-feature.md 両方に "Wave Pre-check" 存在 (W3)
+#   Case 4: 既存 smoke (workflow-guard / next-actions-hooks / loop-auto-progress) が存在 (regression safety)
+#
+# 実行:
+#   bash .claude/tests/wave-precheck-template-smoke.sh
+#
+# 終了コード:
+#   0 = 4/4 PASS / 1 = 1 件以上 FAIL
+#
+# 重要制約:
+#   - file-top に set -euo pipefail は書かない
+#     (.claude/rules/development-process.md Critical Operational Lessons HIGH 参照 /
+#      mode-loader.sh の CB-verify 教訓 commit 5846925)
+#   - 厳格 mode は subshell 関数で局所化する
+
+set -uo pipefail
+
+# repo root に移動
+cd "$(cd "$(dirname "$0")/../.." && pwd)" || exit 1
+REPO_ROOT="$(pwd)"
+
+TEMPLATE_FILE="${REPO_ROOT}/.claude/templates/docs/tasks/_TASK_TEMPLATE.md"
+WORKFLOW_RULE="${REPO_ROOT}/.claude/rules/workflow.md"
+# task-74: task-51 Layer A/B 再構造で "git log --grep" 記述が workflow.md (Layer A) から
+# rules-details/workflow/14-stage.md (Stage 8) + 10-stage.md (Stage 7) (Layer B) へ移動。
+WORKFLOW_LAYERB_NEW="${REPO_ROOT}/.claude/rules-details/workflow/14-stage.md"
+WORKFLOW_LAYERB_MODIFY="${REPO_ROOT}/.claude/rules-details/workflow/10-stage.md"
+NEW_FEATURE_CMD="${REPO_ROOT}/.claude/commands/new-feature.md"
+MODIFY_FEATURE_CMD="${REPO_ROOT}/.claude/commands/modify-feature.md"
+
+EXISTING_SMOKES=(
+  "${REPO_ROOT}/.claude/tests/workflow-guard-smoke.sh"
+  "${REPO_ROOT}/.claude/tests/next-actions-hooks-smoke.sh"
+  "${REPO_ROOT}/.claude/tests/loop-auto-progress-smoke.sh"
+)
+
+PASS=0
+FAIL=0
+FAIL_CASES=""
+RESULTS=""
+
+_record() {
+  local label="$1" status="$2" detail="$3"
+  RESULTS="${RESULTS}${status}|${label}|${detail}"$'\n'
+  if [ "$status" = "PASS" ]; then
+    PASS=$((PASS + 1))
+  else
+    FAIL=$((FAIL + 1))
+    FAIL_CASES="${FAIL_CASES} ${label}"
+  fi
+}
+
+# Case 1: _TASK_TEMPLATE.md に「事前確認」 keyword 存在 (W1)
+case1() {
+  local label="Case 1: _TASK_TEMPLATE.md 'Wave 計画前の事前確認' subsection"
+  if [ ! -f "$TEMPLATE_FILE" ]; then
+    _record "$label" "FAIL" "file missing: $TEMPLATE_FILE"
+    return
+  fi
+  if grep -q "事前確認" "$TEMPLATE_FILE"; then
+    local detail
+    detail="hit count: $(grep -c "事前確認" "$TEMPLATE_FILE")"
+    _record "$label" "PASS" "$detail"
+  else
+    _record "$label" "FAIL" "keyword '事前確認' not found"
+  fi
+}
+
+# Case 2: Layer B (14-stage Stage 8 / 10-stage Stage 7) に "git log --grep" が各 1 hit 以上、
+#         かつ Layer A workflow.md が両 Layer B file への pointer を保持 (W2、task-74 spec-drift 修正)
+case2() {
+  local label="Case 2: Layer B 14-stage(Stage 8)/10-stage(Stage 7) reference 'git log --grep' + Layer A pointer"
+  if [ ! -f "$WORKFLOW_LAYERB_NEW" ] || [ ! -f "$WORKFLOW_LAYERB_MODIFY" ]; then
+    _record "$label" "FAIL" "Layer B file missing (14-stage or 10-stage)"
+    return
+  fi
+  if [ ! -f "$WORKFLOW_RULE" ]; then
+    _record "$label" "FAIL" "Layer A file missing: $WORKFLOW_RULE"
+    return
+  fi
+  local new_hit modify_hit
+  new_hit=$(grep -E "git log.*--grep" "$WORKFLOW_LAYERB_NEW" | wc -l | tr -d ' ')
+  modify_hit=$(grep -E "git log.*--grep" "$WORKFLOW_LAYERB_MODIFY" | wc -l | tr -d ' ')
+  # Layer A pointer: workflow.md が両 Layer B file への参照を保持
+  local ptr_new ptr_modify
+  if grep -q "workflow/14-stage.md" "$WORKFLOW_RULE"; then ptr_new=1; else ptr_new=0; fi
+  if grep -q "workflow/10-stage.md" "$WORKFLOW_RULE"; then ptr_modify=1; else ptr_modify=0; fi
+  if [ "$new_hit" -ge 1 ] && [ "$modify_hit" -ge 1 ] && [ "$ptr_new" = "1" ] && [ "$ptr_modify" = "1" ]; then
+    _record "$label" "PASS" "14-stage=$new_hit 10-stage=$modify_hit ptr(new=$ptr_new,modify=$ptr_modify)"
+  else
+    _record "$label" "FAIL" "14-stage=$new_hit 10-stage=$modify_hit ptr(new=$ptr_new,modify=$ptr_modify)"
+  fi
+}
+
+# Case 3: new-feature.md / modify-feature.md 両方に "Wave Pre-check" 存在 (W3)
+case3() {
+  local label="Case 3: new-feature.md AND modify-feature.md contain 'Wave Pre-check'"
+  if [ ! -f "$NEW_FEATURE_CMD" ] || [ ! -f "$MODIFY_FEATURE_CMD" ]; then
+    _record "$label" "FAIL" "command file missing"
+    return
+  fi
+  local n_hit m_hit
+  if grep -q "Wave Pre-check" "$NEW_FEATURE_CMD"; then n_hit=1; else n_hit=0; fi
+  if grep -q "Wave Pre-check" "$MODIFY_FEATURE_CMD"; then m_hit=1; else m_hit=0; fi
+  if [ "$n_hit" = "1" ] && [ "$m_hit" = "1" ]; then
+    _record "$label" "PASS" "new-feature=$n_hit modify-feature=$m_hit"
+  else
+    _record "$label" "FAIL" "new-feature=$n_hit modify-feature=$m_hit"
+  fi
+}
+
+# Case 4: 既存 smoke (workflow-guard / next-actions-hooks / loop-auto-progress) が存在
+case4() {
+  local label="Case 4: pre-existing smoke files exist (regression safety)"
+  local missing=""
+  local f
+  for f in "${EXISTING_SMOKES[@]}"; do
+    if [ ! -f "$f" ]; then
+      missing="${missing} $(basename "$f")"
+    fi
+  done
+  if [ -z "$missing" ]; then
+    _record "$label" "PASS" "all ${#EXISTING_SMOKES[@]} smoke files present"
+  else
+    _record "$label" "FAIL" "missing:${missing}"
+  fi
+}
+
+# run all
+case1
+case2
+case3
+case4
+
+# report
+printf '\n=== wave-precheck-template smoke results ===\n'
+printf 'Status | Case | Detail\n'
+printf -- '------+------+-------\n'
+printf '%s' "$RESULTS"
+printf '\n=== summary: %d/%d PASS ===\n' "$PASS" "$((PASS + FAIL))"
+
+if [ "$FAIL" -ne 0 ]; then
+  printf 'FAIL cases:%s\n' "$FAIL_CASES" >&2
+  exit 1
+fi
+
+printf 'wave-precheck-template-smoke: %d/%d PASS\n' "$PASS" "$((PASS + FAIL))"
+exit 0

package/.claude/tests/why-x5-violation-detect-smoke.sh

@@ -0,0 +1,157 @@
+#!/usr/bin/env bash
+# why-x5-violation-detect-smoke.sh — smoke tests for task-21 W0.3 new hook
+#
+# 目的: why-x5-violation-detect.sh (PostToolUse) の挙動を 4 ケースで検証する。
+#
+# テストケース:
+#   1. v9 残骸「【システムの存在意義】」を含む直前 assistant
+#      → exit 0, stdout に <system-reminder> + matched pattern
+#   2. v9 残骸「【whyN】」を含む直前 assistant
+#      → exit 0, stdout に <system-reminder>
+#   3. v10 1 行 format のみの直前 assistant (違反なし)
+#      → exit 0, stdout empty (silent)
+#   4. HC_WHY_X5_VIOLATION_ENABLED=false + 違反あり
+#      → exit 0, stdout empty (bypass)
+#
+# 実行: bash .claude/tests/why-x5-violation-detect-smoke.sh
+# 終了コード: 0 = 全 case PASS / 1 = 1 件以上 FAIL
+
+set -uo pipefail
+
+cd "$(cd "$(dirname "$0")/../.." && pwd)" || exit 1
+REPO_ROOT="$(pwd)"
+HOOK="${REPO_ROOT}/.claude/hooks/why-x5-violation-detect.sh"
+
+TMP_ROOT="$(mktemp -d "/tmp/why-x5-violation-smoke.XXXXXX")"
+trap 'rm -rf "$TMP_ROOT"' EXIT
+
+PASS=0
+FAIL=0
+FAIL_CASES=""
+RESULTS=""
+
+_make_transcript() {
+  local out="$1"
+  local txt="$2"
+  : > "$out"
+  printf '%s\n' '{"type":"user","message":{"role":"user","content":"hello"},"uuid":"u1"}' >> "$out"
+  local line
+  line=$(jq -nc --arg t "$txt" '{
+    type: "assistant",
+    message: {role: "assistant", content: [{type: "text", text: $t}]},
+    uuid: "a1"
+  }')
+  printf '%s\n' "$line" >> "$out"
+}
+
+_run() {
+  local stdin_json="$1"
+  shift
+  local out_file err_file
+  out_file="$(mktemp "${TMP_ROOT}/out.XXXXXX")"
+  err_file="$(mktemp "${TMP_ROOT}/err.XXXXXX")"
+  env -i PATH="$PATH" HOME="$HOME" "$@" \
+    bash "$HOOK" <<< "$stdin_json" > "$out_file" 2> "$err_file"
+  LAST_CODE=$?
+  LAST_OUT=$(cat "$out_file")
+  LAST_ERR=$(cat "$err_file")
+  rm -f "$out_file" "$err_file"
+}
+
+_record() {
+  local label="$1" status="$2" expected="$3" actual="$4"
+  RESULTS="${RESULTS}${status}|${label}|${expected}|${actual}"$'\n'
+  if [ "$status" = "PASS" ]; then
+    PASS=$((PASS + 1))
+  else
+    FAIL=$((FAIL + 1))
+    FAIL_CASES="${FAIL_CASES} ${label}"
+  fi
+}
+
+# Case 1: v9 残骸「【システムの存在意義】」を含む → reminder fires
+case1() {
+  local tr="${TMP_ROOT}/tr-c1.jsonl"
+  _make_transcript "$tr" "【システムの存在意義】hirai-method を強化するため【whyN】規範統一が必要"
+  local stdin_json
+  stdin_json=$(jq -nc --arg p "$tr" '{transcript_path: $p}')
+  _run "$stdin_json"
+
+  local expected="exit=0, stdout~'<system-reminder>'+'matched pattern'"
+  local actual="exit=${LAST_CODE} stdout_head='$(printf '%s' "$LAST_OUT" | head -c 80)'"
+  if [ "$LAST_CODE" = "0" ] \
+     && printf '%s' "$LAST_OUT" | grep -q "<system-reminder>" \
+     && printf '%s' "$LAST_OUT" | grep -q "matched pattern"; then
+    _record "Case 1: v9 [システムの存在意義] → reminder fires" "PASS" "$expected" "$actual"
+  else
+    _record "Case 1: v9 [システムの存在意義] → reminder fires" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 2: v9 残骸「【whyN】」のみを含む → reminder fires
+case2() {
+  local tr="${TMP_ROOT}/tr-c2.jsonl"
+  _make_transcript "$tr" "通常作業中【whyN】規範統一が必要"
+  local stdin_json
+  stdin_json=$(jq -nc --arg p "$tr" '{transcript_path: $p}')
+  _run "$stdin_json"
+
+  local expected="exit=0, stdout~'<system-reminder>'"
+  local actual="exit=${LAST_CODE} stdout_head='$(printf '%s' "$LAST_OUT" | head -c 80)'"
+  if [ "$LAST_CODE" = "0" ] && printf '%s' "$LAST_OUT" | grep -q "<system-reminder>"; then
+    _record "Case 2: v9 [whyN] → reminder fires" "PASS" "$expected" "$actual"
+  else
+    _record "Case 2: v9 [whyN] → reminder fires" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 3: v10 1 行 format のみ → silent
+case3() {
+  local tr="${TMP_ROOT}/tr-c3.jsonl"
+  _make_transcript "$tr" "smoke test を実行するため、bash .claude/tests/loop-auto-progress-smoke.sh を行う"
+  local stdin_json
+  stdin_json=$(jq -nc --arg p "$tr" '{transcript_path: $p}')
+  _run "$stdin_json"
+
+  local expected="exit=0, stdout empty (no violation)"
+  local actual="exit=${LAST_CODE} stdout_len=${#LAST_OUT}"
+  if [ "$LAST_CODE" = "0" ] && [ -z "$LAST_OUT" ]; then
+    _record "Case 3: v10 1 行 format → silent" "PASS" "$expected" "$actual"
+  else
+    _record "Case 3: v10 1 行 format → silent" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 4: HC_WHY_X5_VIOLATION_ENABLED=false + 違反あり → silent (bypass)
+case4() {
+  local tr="${TMP_ROOT}/tr-c4.jsonl"
+  _make_transcript "$tr" "【システムの存在意義】テスト中"
+  local stdin_json
+  stdin_json=$(jq -nc --arg p "$tr" '{transcript_path: $p}')
+  _run "$stdin_json" HC_WHY_X5_VIOLATION_ENABLED=false
+
+  local expected="exit=0, stdout empty (bypass)"
+  local actual="exit=${LAST_CODE} stdout_len=${#LAST_OUT}"
+  if [ "$LAST_CODE" = "0" ] && [ -z "$LAST_OUT" ]; then
+    _record "Case 4: HC_WHY_X5_VIOLATION_ENABLED=false → silent" "PASS" "$expected" "$actual"
+  else
+    _record "Case 4: HC_WHY_X5_VIOLATION_ENABLED=false → silent" "FAIL" "$expected" "$actual"
+  fi
+}
+
+case1
+case2
+case3
+case4
+
+printf '\n=== why-x5-violation-detect smoke results ===\n'
+printf 'Status | Case | Expected | Actual\n'
+printf -- '-------+------+----------+-------\n'
+printf '%s' "$RESULTS"
+printf '\n=== summary: %d passed, %d failed ===\n' "$PASS" "$FAIL"
+
+if [ "$FAIL" -ne 0 ]; then
+  printf 'FAIL cases:%s\n' "$FAIL_CASES" >&2
+  exit 1
+fi
+exit 0

package/.claude/tests/workflow-guard-smoke.sh

@@ -0,0 +1,266 @@
+#!/usr/bin/env bash
+# .claude/tests/workflow-guard-smoke.sh — smoke tests for workflow-guard.sh
+#
+# 目的:
+#   workflow-guard.sh + bypass-logger.sh + .workflow-state JSON の end-to-end
+#   挙動を 8 ケースで検証する。
+#
+#   - state JSON 不在の旧 task 互換: silent pass
+#   - workflow_type=new / current_stage 未達 + findings 空 → BLOCK
+#   - workflow_type=new / current_stage=finish + CRITICAL finding → BLOCK
+#   - workflow_type=new / current_stage=finish + findings 空 → PASS
+#   - bypass (ECC_WORKFLOW_GUARD_OFF=1) → PASS + bypass.log に 1 行 append
+#   - tool_name != Bash → silent pass
+#   - Bash だが /finish-task 以外 → silent pass
+#   - workflow_type=modify / current_stage=system-review + findings 空 → PASS
+#
+# 設計:
+#   - per-test tmp harness root に config-loader / bypass-logger を symlink
+#   - .workflow-state は per-test tmpdir で隔離 → 本物の bypass.log を汚さない
+#   - harness-config.yml も symlink で本物の stage 定義を再利用
+#
+# 実行:
+#   bash .claude/tests/workflow-guard-smoke.sh
+#
+# 終了コード:
+#   0 = 全 case PASS / 1 = 1 件以上 FAIL
+#
+# 重要制約:
+#   set -e は使わない (mode-loader.sh の CB-verify 教訓 - 5846925)
+
+set -uo pipefail
+
+# repo root に移動
+cd "$(cd "$(dirname "$0")/../.." && pwd)" || exit 1
+
+REPO_ROOT="$(pwd)"
+HOOK_REAL="${REPO_ROOT}/.claude/hooks/workflow-guard.sh"
+FIXTURES="${REPO_ROOT}/.claude/tests/fixtures/workflow-guard"
+INPUTS="${FIXTURES}/inputs"
+
+# tmp harness root (per-run) — bypass.log を本物の場所に書かせない
+TMP_ROOT="$(mktemp -d "/tmp/workflow-guard-smoke.XXXXXX")"
+trap 'rm -rf "$TMP_ROOT"' EXIT
+
+# tmp harness root に .claude/ を組み立てる
+# - hooks / harness-config.yml は real を symlink (再利用)
+# - .workflow-state は per-test 隔離 (real .workflow-state/bypass.log を汚さない)
+mkdir -p "${TMP_ROOT}/.claude"
+ln -s "${REPO_ROOT}/.claude/hooks" "${TMP_ROOT}/.claude/hooks"
+ln -s "${REPO_ROOT}/.claude/harness-config.yml" "${TMP_ROOT}/.claude/harness-config.yml"
+
+PASS=0
+FAIL=0
+FAIL_CASES=""
+
+# === 結果テーブル (実装末尾で表示) ===
+RESULTS=""
+
+# helpers ----------------------------------------------------------------------
+
+# reset per-test state dir (空 bypass.log + 0 state json)
+_reset_state_dir() {
+  rm -rf "${TMP_ROOT}/.claude/.workflow-state"
+  mkdir -p "${TMP_ROOT}/.claude/.workflow-state"
+}
+
+# place a fixture state JSON in tmp state dir
+# $1 = fixture filename (e.g. case-2-mid.json)
+# $2 = target slug (filename without .json)
+_place_state() {
+  local fixture="$1"
+  local slug="$2"
+  cp "${FIXTURES}/${fixture}" "${TMP_ROOT}/.claude/.workflow-state/${slug}.json"
+}
+
+# run hook against an input fixture; returns nothing — sets globals
+#   LAST_OUT (stdout)
+#   LAST_ERR (stderr)
+#   LAST_CODE (exit code)
+# $1 = input fixture filename
+# remaining = env KEY=VAL pairs
+_run_hook() {
+  local input="$1"
+  shift
+  local out_file err_file
+  out_file="$(mktemp "${TMP_ROOT}/out.XXXXXX")"
+  err_file="$(mktemp "${TMP_ROOT}/err.XXXXXX")"
+
+  env -i \
+    PATH="$PATH" \
+    HOME="$HOME" \
+    CLAUDE_PROJECT_DIR="$TMP_ROOT" \
+    "$@" \
+    bash "$HOOK_REAL" \
+    < "${INPUTS}/${input}" \
+    > "$out_file" \
+    2> "$err_file"
+  LAST_CODE=$?
+  LAST_OUT=$(cat "$out_file")
+  LAST_ERR=$(cat "$err_file")
+  rm -f "$out_file" "$err_file"
+}
+
+# record case result
+# $1 = label, $2 = pass|fail, $3 = expected, $4 = actual
+_record() {
+  local label="$1" status="$2" expected="$3" actual="$4"
+  RESULTS="${RESULTS}${status}|${label}|${expected}|${actual}"$'\n'
+  if [ "$status" = "PASS" ]; then
+    PASS=$((PASS + 1))
+  else
+    FAIL=$((FAIL + 1))
+    FAIL_CASES="${FAIL_CASES} ${label}"
+  fi
+}
+
+# tests ------------------------------------------------------------------------
+
+# Case 1: state JSON 不在 + /finish-task → silent pass (exit 0)
+case1() {
+  _reset_state_dir
+  _run_hook "case-1.json"
+  local expected="exit=0 silent" actual="exit=${LAST_CODE} stderr=$(printf '%s' "$LAST_ERR" | head -c 40)"
+  if [ "$LAST_CODE" = "0" ] && [ -z "$LAST_ERR" ]; then
+    _record "Case 1: missing state JSON → silent pass" "PASS" "$expected" "$actual"
+  else
+    _record "Case 1: missing state JSON → silent pass" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 2: workflow_type=new, current_stage=tdd (not final), findings 空 → BLOCK exit 2
+case2() {
+  _reset_state_dir
+  _place_state "case-2-mid.json" "smoke-mid"
+  _run_hook "case-2.json"
+  local expected="exit=2 stderr~'not at final'"
+  local actual="exit=${LAST_CODE}"
+  # stderr should mention current_stage 未達 (we check the Japanese stem "最終 stage")
+  if [ "$LAST_CODE" = "2" ] && printf '%s' "$LAST_ERR" | grep -q "current_stage" \
+     && printf '%s' "$LAST_ERR" | grep -q "最終 stage"; then
+    _record "Case 2: stage not final → BLOCK" "PASS" "$expected" "$actual"
+  else
+    _record "Case 2: stage not final → BLOCK" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 3: workflow_type=new, current_stage=finish, CRITICAL finding → BLOCK exit 2
+case3() {
+  _reset_state_dir
+  _place_state "case-3-blocked.json" "smoke-blocked"
+  _run_hook "case-3.json"
+  local expected="exit=2 stderr~'pending_findings'"
+  local actual="exit=${LAST_CODE}"
+  if [ "$LAST_CODE" = "2" ] && printf '%s' "$LAST_ERR" | grep -q "pending_findings"; then
+    _record "Case 3: pending finding → BLOCK" "PASS" "$expected" "$actual"
+  else
+    _record "Case 3: pending finding → BLOCK" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 4: workflow_type=new, current_stage=finish, findings 空 → PASS exit 0
+case4() {
+  _reset_state_dir
+  _place_state "case-4-clean.json" "smoke-clean"
+  _run_hook "case-4.json"
+  local expected="exit=0 stdout='{}'"
+  local actual="exit=${LAST_CODE} stdout=${LAST_OUT}"
+  if [ "$LAST_CODE" = "0" ] && [ "$LAST_OUT" = "{}" ]; then
+    _record "Case 4: clean finish → PASS" "PASS" "$expected" "$actual"
+  else
+    _record "Case 4: clean finish → PASS" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 5: bypass via ECC_WORKFLOW_GUARD_OFF=1 on Case-3 input → PASS + bypass.log append
+case5() {
+  _reset_state_dir
+  _place_state "case-3-blocked.json" "smoke-blocked"
+  local log_file="${TMP_ROOT}/.claude/.workflow-state/bypass.log"
+  # ensure empty
+  : > "$log_file"
+
+  _run_hook "case-5.json" \
+    ECC_WORKFLOW_GUARD_OFF=1 \
+    ECC_BYPASS_REASON="smoke test bypass" \
+    CLAUDE_SESSION_ID="smoke-session-c5"
+
+  local expected="exit=0, log line with 'workflow-guard' + 'ECC_WORKFLOW_GUARD_OFF'"
+  local actual="exit=${LAST_CODE}"
+  local log_last
+  log_last=$(tail -n1 "$log_file" 2>/dev/null)
+  actual="${actual} log_last='${log_last}'"
+
+  if [ "$LAST_CODE" = "0" ] \
+     && printf '%s' "$log_last" | grep -q "workflow-guard" \
+     && printf '%s' "$log_last" | grep -q "ECC_WORKFLOW_GUARD_OFF" \
+     && printf '%s' "$log_last" | grep -q "smoke test bypass" \
+     && printf '%s' "$log_last" | grep -q "smoke-session-c5"; then
+    _record "Case 5: ECC_WORKFLOW_GUARD_OFF bypass → PASS + log append" "PASS" "$expected" "$actual"
+  else
+    _record "Case 5: ECC_WORKFLOW_GUARD_OFF bypass → PASS + log append" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 6: tool_name=Edit (非 Bash) → silent pass
+case6() {
+  _reset_state_dir
+  _run_hook "case-6.json"
+  local expected="exit=0 silent"
+  local actual="exit=${LAST_CODE} stderr_len=${#LAST_ERR}"
+  if [ "$LAST_CODE" = "0" ] && [ -z "$LAST_ERR" ]; then
+    _record "Case 6: tool_name=Edit → silent pass" "PASS" "$expected" "$actual"
+  else
+    _record "Case 6: tool_name=Edit → silent pass" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 7: Bash command but not /finish-task → silent pass
+case7() {
+  _reset_state_dir
+  _run_hook "case-7.json"
+  local expected="exit=0 silent"
+  local actual="exit=${LAST_CODE} stderr_len=${#LAST_ERR}"
+  if [ "$LAST_CODE" = "0" ] && [ -z "$LAST_ERR" ]; then
+    _record "Case 7: Bash non-finish-task → silent pass" "PASS" "$expected" "$actual"
+  else
+    _record "Case 7: Bash non-finish-task → silent pass" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# Case 8: workflow_type=modify, current_stage=system-review (final), findings 空 → PASS
+case8() {
+  _reset_state_dir
+  _place_state "case-8-modify.json" "smoke-modify"
+  _run_hook "case-8.json"
+  local expected="exit=0 stdout='{}'"
+  local actual="exit=${LAST_CODE} stdout=${LAST_OUT}"
+  if [ "$LAST_CODE" = "0" ] && [ "$LAST_OUT" = "{}" ]; then
+    _record "Case 8: modify clean final → PASS" "PASS" "$expected" "$actual"
+  else
+    _record "Case 8: modify clean final → PASS" "FAIL" "$expected" "$actual"
+  fi
+}
+
+# === run all ===
+case1
+case2
+case3
+case4
+case5
+case6
+case7
+case8
+
+# === report ===
+printf '\n=== workflow-guard smoke results ===\n'
+printf 'Status | Case | Expected | Actual\n'
+printf -- '------+------+----------+-------\n'
+printf '%s' "$RESULTS"
+printf '\n=== summary: %d passed, %d failed ===\n' "$PASS" "$FAIL"
+
+if [ "$FAIL" -ne 0 ]; then
+  printf 'FAIL cases:%s\n' "$FAIL_CASES" >&2
+  exit 1
+fi
+exit 0