cc-safe-setup 29.7.0 → 30.0.4

package/tests/test-quota-reset-audit.sh

@@ -0,0 +1,81 @@
+#!/bin/bash
+# Tests for quota-reset-audit.sh
+HOOK="examples/quota-reset-audit.sh"
+PASS=0 FAIL=0
+
+assert_exit() { if [ "$2" -eq "$3" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (exit $2, expected $3)"; fi; }
+assert_file_contains() { if grep -q "$3" "$2" 2>/dev/null; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (expected '$3' in $2)"; fi; }
+
+LOG="${HOME}/.claude/logs/usage-audit.log"
+mkdir -p "${HOME}/.claude/logs"
+: > "$LOG"
+
+STUB_DIR=$(mktemp -d)
+
+# Test 1: claude CLI returns valid /usage JSON — log captures reset fields
+cat > "$STUB_DIR/claude" <<'EOF'
+#!/bin/bash
+echo '{"tier":"max","weekly":{"resets_at":"2026-04-28T00:00:00Z","percent_used":42}}'
+EOF
+chmod +x "$STUB_DIR/claude"
+export PATH="$STUB_DIR:$PATH"
+
+: > "$LOG"
+PAYLOAD='{"session_id":"q1"}'
+printf '%s' "$PAYLOAD" | bash "$HOOK"
+assert_exit "happy path exits 0" "$?" 0
+assert_file_contains "session id logged" "$LOG" "q1"
+assert_file_contains "tier logged" "$LOG" "max"
+assert_file_contains "resets_at logged" "$LOG" "2026-04-28T00:00:00Z"
+assert_file_contains "percent used logged" "$LOG" "42"
+
+# Test 2: claude CLI absent — log records unavailable placeholder
+rm "$STUB_DIR/claude"
+: > "$LOG"
+printf '%s' "$PAYLOAD" | bash "$HOOK"
+assert_exit "missing CLI exits 0" "$?" 0
+assert_file_contains "unavailable placeholder logged" "$LOG" "unavailable"
+
+# Test 3: claude CLI exists but emits non-JSON — unavailable placeholder
+cat > "$STUB_DIR/claude" <<'EOF'
+#!/bin/bash
+echo "not-json"
+EOF
+chmod +x "$STUB_DIR/claude"
+: > "$LOG"
+printf '%s' "$PAYLOAD" | bash "$HOOK"
+assert_exit "non-JSON exits 0" "$?" 0
+assert_file_contains "non-JSON treated as unavailable" "$LOG" "unavailable"
+
+# Test 4: fallback to `claude usage --json` when `claude /usage --json` fails
+cat > "$STUB_DIR/claude" <<'EOF'
+#!/bin/bash
+# First arg determines which style was invoked.
+if [ "$1" = "/usage" ]; then
+  exit 1
+fi
+if [ "$1" = "usage" ]; then
+  echo '{"tier":"pro","weekly":{"resets_at":"2026-04-27T00:00:00Z","percent_used":10}}'
+  exit 0
+fi
+exit 1
+EOF
+chmod +x "$STUB_DIR/claude"
+: > "$LOG"
+printf '%s' "$PAYLOAD" | bash "$HOOK"
+assert_exit "fallback path exits 0" "$?" 0
+assert_file_contains "fallback resets_at logged" "$LOG" "2026-04-27"
+assert_file_contains "fallback tier logged" "$LOG" "pro"
+
+# Test 5: empty input still produces a log line (SessionStart payload can be empty)
+: > "$LOG"
+printf '' | bash "$HOOK"
+assert_exit "empty input exits 0" "$?" 0
+# log should have exactly one line
+LINES=$(wc -l < "$LOG" | tr -d ' ')
+if [ "$LINES" = "1" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: expected 1 log line, got $LINES"; fi
+
+rm -rf "$STUB_DIR"
+
+echo "PASS: $PASS  FAIL: $FAIL"
+[ "$FAIL" -eq 0 ]

package/tests/test-read-loop-detector.sh

@@ -0,0 +1,137 @@
+#!/bin/bash
+# Tests for read-loop-detector.sh
+HOOK="examples/read-loop-detector.sh"
+PASS=0 FAIL=0
+
+assert_exit() {
+  if [ "$2" -eq "$3" ]; then
+    PASS=$((PASS+1))
+  else
+    FAIL=$((FAIL+1)); echo "FAIL: $1 (exit $2, expected $3)"
+  fi
+}
+assert_contains() {
+  if printf '%s' "$2" | grep -q "$3"; then
+    PASS=$((PASS+1))
+  else
+    FAIL=$((FAIL+1)); echo "FAIL: $1 (expected '$3' in: $2)"
+  fi
+}
+assert_not_contains() {
+  if printf '%s' "$2" | grep -q "$3"; then
+    FAIL=$((FAIL+1)); echo "FAIL: $1 (unexpected '$3' in: $2)"
+  else
+    PASS=$((PASS+1))
+  fi
+}
+
+TMPDIR=$(mktemp -d)
+trap 'rm -rf "$TMPDIR"' EXIT
+
+SESSION="test-session-$$"
+PAYLOAD='{"session_id":"'"$SESSION"'","tool_name":"Read","tool_input":{"file_path":"/repo/src/foo.ts"}}'
+
+# Test 1: Non-Read tool — pass through silently, no log
+OUT=$(printf '{"session_id":"s1","tool_name":"Bash","tool_input":{"command":"ls"}}' | \
+  CC_READ_LOOP_LOG_DIR="$TMPDIR" bash "$HOOK" 2>&1)
+assert_exit "non-Read tool exits 0" $? 0
+assert_not_contains "non-Read no warning" "$OUT" "fired"
+
+# Test 2: Missing file_path — exit silently
+OUT=$(printf '{"session_id":"s1","tool_name":"Read","tool_input":{}}' | \
+  CC_READ_LOOP_LOG_DIR="$TMPDIR" bash "$HOOK" 2>&1)
+assert_exit "missing file_path exits 0" $? 0
+assert_not_contains "missing file_path no warning" "$OUT" "fired"
+
+# Test 3: First Read of a path — no warning, log file exists with 1 entry
+OUT=$(printf '%s' "$PAYLOAD" | CC_READ_LOOP_LOG_DIR="$TMPDIR" bash "$HOOK" 2>&1)
+assert_exit "first read exits 0" $? 0
+assert_not_contains "first read no warning" "$OUT" "fired"
+LOG_FILE="$TMPDIR/cc-read-loop-${SESSION}.log"
+assert_contains "log file recorded path" "$(cat "$LOG_FILE")" "/repo/src/foo.ts"
+
+# Test 4: Second Read same path under default threshold (3) — still no warning
+OUT=$(printf '%s' "$PAYLOAD" | CC_READ_LOOP_LOG_DIR="$TMPDIR" bash "$HOOK" 2>&1)
+assert_exit "second read exits 0" $? 0
+assert_not_contains "second read no warning" "$OUT" "fired"
+
+# Test 5: Third Read same path — warning fires (count >= 3)
+OUT=$(printf '%s' "$PAYLOAD" | CC_READ_LOOP_LOG_DIR="$TMPDIR" bash "$HOOK" 2>&1)
+assert_exit "third read exits 0" $? 0
+assert_contains "third read warns" "$OUT" "fired 3 times"
+assert_contains "third read names file" "$OUT" "/repo/src/foo.ts"
+assert_contains "third read suggests escape" "$OUT" "Stop reading"
+
+# Test 6: Fourth Read — warning still fires with updated count
+OUT=$(printf '%s' "$PAYLOAD" | CC_READ_LOOP_LOG_DIR="$TMPDIR" bash "$HOOK" 2>&1)
+assert_exit "fourth read exits 0" $? 0
+assert_contains "fourth read shows count 4" "$OUT" "fired 4 times"
+
+# Test 7: Custom threshold via env var (threshold=2 → warn on 2nd read of new path)
+SESSION2="test-session2-$$"
+PAY2='{"session_id":"'"$SESSION2"'","tool_name":"Read","tool_input":{"file_path":"/repo/src/bar.ts"}}'
+OUT=$(printf '%s' "$PAY2" | CC_READ_LOOP_LOG_DIR="$TMPDIR" CC_READ_LOOP_THRESHOLD=2 bash "$HOOK" 2>&1)
+assert_exit "threshold=2 first read exits 0" $? 0
+assert_not_contains "threshold=2 first no warn" "$OUT" "fired"
+
+OUT=$(printf '%s' "$PAY2" | CC_READ_LOOP_LOG_DIR="$TMPDIR" CC_READ_LOOP_THRESHOLD=2 bash "$HOOK" 2>&1)
+assert_exit "threshold=2 second read exits 0" $? 0
+assert_contains "threshold=2 second read warns" "$OUT" "fired 2 times"
+
+# Test 8: Different files in same session — counted independently
+SESSION3="test-session3-$$"
+PAY_A='{"session_id":"'"$SESSION3"'","tool_name":"Read","tool_input":{"file_path":"/a.ts"}}'
+PAY_B='{"session_id":"'"$SESSION3"'","tool_name":"Read","tool_input":{"file_path":"/b.ts"}}'
+printf '%s' "$PAY_A" | CC_READ_LOOP_LOG_DIR="$TMPDIR" bash "$HOOK" >/dev/null 2>&1
+printf '%s' "$PAY_A" | CC_READ_LOOP_LOG_DIR="$TMPDIR" bash "$HOOK" >/dev/null 2>&1
+OUT=$(printf '%s' "$PAY_B" | CC_READ_LOOP_LOG_DIR="$TMPDIR" bash "$HOOK" 2>&1)
+assert_exit "different file in same session exits 0" $? 0
+assert_not_contains "different file does not inherit count" "$OUT" "fired"
+
+# Test 9: Different sessions — counted independently
+SESSION_X="x-$$"
+SESSION_Y="y-$$"
+PAY_X='{"session_id":"'"$SESSION_X"'","tool_name":"Read","tool_input":{"file_path":"/shared.ts"}}'
+PAY_Y='{"session_id":"'"$SESSION_Y"'","tool_name":"Read","tool_input":{"file_path":"/shared.ts"}}'
+for _ in 1 2 3; do
+    printf '%s' "$PAY_X" | CC_READ_LOOP_LOG_DIR="$TMPDIR" bash "$HOOK" >/dev/null 2>&1
+done
+# Y session has only 1 read of shared.ts, no warning expected
+OUT=$(printf '%s' "$PAY_Y" | CC_READ_LOOP_LOG_DIR="$TMPDIR" bash "$HOOK" 2>&1)
+assert_exit "session Y first read exits 0" $? 0
+assert_not_contains "session Y not affected by session X" "$OUT" "fired"
+
+# Test 10: CC_READ_LOOP_DISABLE=1 — short-circuit silently
+OUT=$(printf '%s' "$PAYLOAD" | CC_READ_LOOP_LOG_DIR="$TMPDIR" CC_READ_LOOP_DISABLE=1 bash "$HOOK" 2>&1)
+assert_exit "disabled exits 0" $? 0
+assert_not_contains "disabled no output" "$OUT" "fired"
+
+# Test 11: Invalid threshold (non-numeric) — falls back to default 3
+SESSION_INV="inv-$$"
+PAY_INV='{"session_id":"'"$SESSION_INV"'","tool_name":"Read","tool_input":{"file_path":"/x.ts"}}'
+for _ in 1 2; do
+    printf '%s' "$PAY_INV" | CC_READ_LOOP_LOG_DIR="$TMPDIR" CC_READ_LOOP_THRESHOLD=abc bash "$HOOK" >/dev/null 2>&1
+done
+# Two reads with invalid threshold → falls back to 3 → no warning yet
+OUT=$(printf '%s' "$PAY_INV" | CC_READ_LOOP_LOG_DIR="$TMPDIR" CC_READ_LOOP_THRESHOLD=abc bash "$HOOK" 2>&1)
+assert_exit "invalid threshold exits 0" $? 0
+# 3rd read should warn
+assert_contains "invalid threshold defaults to 3" "$OUT" "fired 3 times"
+
+# Test 12: File path with spaces — handled as literal string
+SESSION_SP="sp-$$"
+PAY_SP='{"session_id":"'"$SESSION_SP"'","tool_name":"Read","tool_input":{"file_path":"/path with spaces/foo.md"}}'
+for _ in 1 2 3; do
+    OUT=$(printf '%s' "$PAY_SP" | CC_READ_LOOP_LOG_DIR="$TMPDIR" bash "$HOOK" 2>&1)
+done
+assert_exit "spaces path exits 0" $? 0
+assert_contains "spaces path warns" "$OUT" "fired 3 times"
+assert_contains "spaces path preserved" "$OUT" "/path with spaces/foo.md"
+
+# Test 13: Always non-blocking even when warning fires
+OUT=$(printf '%s' "$PAYLOAD" | CC_READ_LOOP_LOG_DIR="$TMPDIR" bash "$HOOK" 2>&1)
+assert_exit "warning still exits 0" $? 0
+
+echo
+echo "PASS: $PASS  FAIL: $FAIL"
+[ "$FAIL" -eq 0 ] || exit 1

package/tests/test-read-once-guard.sh

@@ -0,0 +1,85 @@
+#!/bin/bash
+# Tests for read-once-guard.sh
+HOOK="$(dirname "$0")/../examples/read-once-guard.sh"
+PASS=0 FAIL=0
+TMPFILE="/tmp/test-read-once-$$"
+
+setup() {
+  rm -rf /tmp/cc-read-once
+  echo "test content" > "$TMPFILE"
+}
+
+run_test() {
+  local desc="$1" expected_exit="$2"
+  shift 2
+  local actual_exit
+  echo "{\"tool_input\":{\"file_path\":\"$TMPFILE\"}}" | env "$@" bash "$HOOK" >/dev/null 2>/dev/null
+  actual_exit=$?
+  if [ "$actual_exit" -eq "$expected_exit" ]; then
+    echo "  PASS: $desc"
+    ((PASS++))
+  else
+    echo "  FAIL: $desc (expected exit $expected_exit, got $actual_exit)"
+    ((FAIL++))
+  fi
+}
+
+echo "Testing read-once-guard.sh"
+echo "=========================="
+
+# 1. First read always passes
+setup
+run_test "first read passes" 0 CC_READ_ONCE_MAX=3
+
+# 2. Second read passes (under threshold)
+run_test "second read passes" 0 CC_READ_ONCE_MAX=3
+
+# 3. Third read passes (at threshold)
+run_test "third read passes" 0 CC_READ_ONCE_MAX=3
+
+# 4. Fourth read still passes in warn mode (exit 0)
+run_test "fourth read warns but passes (warn mode)" 0 CC_READ_ONCE_ACTION=warn CC_READ_ONCE_MAX=3
+
+# 5. Block mode blocks after threshold
+setup
+for i in 1 2 3; do
+  echo "{\"tool_input\":{\"file_path\":\"$TMPFILE\"}}" | env CC_SESSION_ID=test-block CC_READ_ONCE_MAX=2 CC_READ_ONCE_ACTION=block bash "$HOOK" >/dev/null 2>/dev/null
+done
+run_test "block mode blocks after threshold" 2 CC_SESSION_ID=test-block CC_READ_ONCE_ACTION=block CC_READ_ONCE_MAX=2
+
+# 6. File modification resets counter
+setup
+for i in 1 2 3; do
+  echo "{\"tool_input\":{\"file_path\":\"$TMPFILE\"}}" | env CC_READ_ONCE_MAX=2 CC_READ_ONCE_ACTION=block bash "$HOOK" >/dev/null 2>/dev/null
+done
+sleep 1
+echo "modified" > "$TMPFILE"  # Modify file
+run_test "file modification resets counter" 0 CC_READ_ONCE_ACTION=block CC_READ_ONCE_MAX=2
+
+# 7. Empty file_path passes
+echo '{"tool_input":{}}' | bash "$HOOK" >/dev/null 2>/dev/null
+if [ $? -eq 0 ]; then
+  echo "  PASS: empty file_path passes"
+  ((PASS++))
+else
+  echo "  FAIL: empty file_path should pass"
+  ((FAIL++))
+fi
+
+# 8. Non-existent file passes (first read)
+setup
+echo '{"tool_input":{"file_path":"/tmp/nonexistent-test-file-xyz"}}' | bash "$HOOK" >/dev/null 2>/dev/null
+if [ $? -eq 0 ]; then
+  echo "  PASS: non-existent file passes"
+  ((PASS++))
+else
+  echo "  FAIL: non-existent file should pass"
+  ((FAIL++))
+fi
+
+# Cleanup
+rm -f "$TMPFILE"
+
+echo ""
+echo "Results: $PASS passed, $FAIL failed out of $((PASS + FAIL))"
+[ "$FAIL" -eq 0 ] && exit 0 || exit 1

package/tests/test-receipts-aggregate.sh

@@ -0,0 +1,143 @@
+#!/bin/bash
+# Tests for receipts-aggregate.py
+#
+# Verifies the JSONL-to-denormalized-table aggregation:
+#   - Multiple receipt files → unified CSV/JSON output
+#   - --format csv / json work
+#   - --boundary filter restricts rows
+#   - Malformed JSON lines warned + skipped (not fatal)
+#   - Unknown fields land in additional_fields (forward-compat)
+#   - Nested objects/lists JSON-encoded for CSV-safety
+#   - Empty receipt dir → warning + exit 0 (not error)
+
+set -uo pipefail
+
+CLI="$(dirname "$0")/../scripts/receipts-aggregate.py"
+PASS=0
+FAIL=0
+
+assert_pass() { echo "  PASS: $1"; PASS=$((PASS + 1)); }
+assert_fail() { echo "  FAIL: $1"; FAIL=$((FAIL + 1)); }
+
+TMPDIR=$(mktemp -d)
+trap "rm -rf $TMPDIR" EXIT
+
+echo "=== receipts-aggregate.py tests ==="
+
+# --- Setup: 3 representative receipt files (one per boundary type) ---
+cat > "$TMPDIR/destructive-2026-05-21.jsonl" <<'EOF'
+{"ts":"2026-05-21T20:00:00Z","boundary_type":"destructive_bash","session_id":"s1","paths":["/tmp/cache"],"scope_match":"cache","decision":"execute"}
+{"ts":"2026-05-21T20:05:00Z","boundary_type":"destructive_bash","session_id":"s2","paths":["/home/u/node_modules"],"scope_match":"","decision":"refuse"}
+EOF
+
+cat > "$TMPDIR/dispatch-2026-05-21.jsonl" <<'EOF'
+{"ts":"2026-05-21T20:10:00Z","boundary_type":"dispatch_end","session_id":"s1","subagent_type":"CLINIC","prompt_hash":"deadbeef","prompt_length":42,"decision":"execute"}
+EOF
+
+cat > "$TMPDIR/articulated-scope-2026-05-21.jsonl" <<'EOF'
+{"ts":"2026-05-21T19:59:00Z","boundary_type":"user_prompt_submit","session_id":"s1","articulated_scope_hash":"abc123","articulated_scope_length":28}
+EOF
+
+# --- Test 1: CSV format, all receipts aggregated ---
+OUT=$(python3 "$CLI" "$TMPDIR"/*.jsonl --format csv)
+HEADER=$(echo "$OUT" | head -1)
+ROW_COUNT=$(echo "$OUT" | tail -n +2 | wc -l)
+if echo "$HEADER" | grep -q "boundary_type" && [ "$ROW_COUNT" -eq 4 ]; then
+    assert_pass "CSV: header present + 4 rows aggregated across 3 files"
+else
+    assert_fail "CSV check: header=$HEADER rows=$ROW_COUNT"
+fi
+
+# --- Test 2: JSON format, valid JSON array with 4 items ---
+OUT_JSON=$(python3 "$CLI" "$TMPDIR"/*.jsonl --format json)
+COUNT=$(echo "$OUT_JSON" | python3 -c "import json,sys; print(len(json.load(sys.stdin)))")
+if [ "$COUNT" = "4" ]; then
+    assert_pass "JSON: valid array with 4 items"
+else
+    assert_fail "JSON count expected 4, got $COUNT"
+fi
+
+# --- Test 3: --boundary filter restricts rows ---
+OUT=$(python3 "$CLI" "$TMPDIR"/*.jsonl --format csv --boundary user_prompt_submit)
+ROW_COUNT=$(echo "$OUT" | tail -n +2 | wc -l)
+if [ "$ROW_COUNT" -eq 1 ]; then
+    assert_pass "--boundary user_prompt_submit → 1 row"
+else
+    assert_fail "boundary filter row count expected 1, got $ROW_COUNT"
+fi
+
+OUT=$(python3 "$CLI" "$TMPDIR"/*.jsonl --format csv --boundary destructive_bash)
+ROW_COUNT=$(echo "$OUT" | tail -n +2 | wc -l)
+if [ "$ROW_COUNT" -eq 2 ]; then
+    assert_pass "--boundary destructive_bash → 2 rows"
+else
+    assert_fail "boundary filter row count expected 2, got $ROW_COUNT"
+fi
+
+# --- Test 4: malformed JSON line warned + skipped (not fatal) ---
+echo "this is not valid json" >> "$TMPDIR/destructive-2026-05-21.jsonl"
+OUT=$(python3 "$CLI" "$TMPDIR"/*.jsonl --format csv 2>/dev/null)
+ROW_COUNT=$(echo "$OUT" | tail -n +2 | wc -l)
+if [ "$ROW_COUNT" -eq 4 ]; then
+    assert_pass "malformed JSON line skipped; valid rows still emitted (4 total)"
+else
+    assert_fail "malformed handling failed: row count $ROW_COUNT (expected 4)"
+fi
+
+STDERR=$(python3 "$CLI" "$TMPDIR"/*.jsonl --format csv 2>&1 > /dev/null)
+if echo "$STDERR" | grep -q "invalid JSON skipped"; then
+    assert_pass "malformed JSON warned to stderr"
+else
+    assert_fail "expected stderr warning for malformed line, got: $STDERR"
+fi
+
+# --- Test 5: unknown fields preserved in additional_fields ---
+cat > "$TMPDIR/extras-2026-05-21.jsonl" <<'EOF'
+{"ts":"2026-05-21T21:00:00Z","boundary_type":"destructive_bash","custom_field":"value123","experimental_v3_field":42}
+EOF
+OUT=$(python3 "$CLI" "$TMPDIR/extras-2026-05-21.jsonl" --format json)
+if echo "$OUT" | python3 -c "
+import json, sys
+d = json.load(sys.stdin)
+extras = json.loads(d[0]['additional_fields'])
+assert 'custom_field' in extras, f'custom_field missing from extras'
+assert extras['custom_field'] == 'value123', f'wrong value: {extras}'
+assert extras['experimental_v3_field'] == 42, f'wrong int: {extras}'
+" 2>&1; then
+    assert_pass "unknown fields preserved in additional_fields (forward-compat)"
+else
+    assert_fail "extras preservation failed"
+fi
+
+# --- Test 6: nested objects in known fields JSON-encoded for CSV-safety ---
+cat > "$TMPDIR/nested-2026-05-21.jsonl" <<'EOF'
+{"ts":"2026-05-21T22:00:00Z","boundary_type":"destructive_bash","paths":["a","b","c"],"decision":"refuse"}
+EOF
+OUT=$(python3 "$CLI" "$TMPDIR/nested-2026-05-21.jsonl" --format csv)
+if echo "$OUT" | grep -q '"\[""a"", ""b"", ""c""\]"'; then
+    assert_pass "nested list JSON-encoded in CSV cell"
+else
+    # Alt: CSV quoting may differ; check that list-as-string appears
+    DATA_ROW=$(echo "$OUT" | tail -n +2 | head -1)
+    if echo "$DATA_ROW" | grep -qE '\["a", "b", "c"\]'; then
+        assert_pass "nested list JSON-encoded in CSV (alt quoting)"
+    else
+        assert_fail "nested list encoding check: $DATA_ROW"
+    fi
+fi
+
+# --- Test 7: empty paths arg + non-existent default → warning + exit 0 ---
+EMPTY_HOME=$(mktemp -d)
+OUT=$(HOME="$EMPTY_HOME" python3 "$CLI" --format csv 2>&1)
+rc=$?
+if [ "$rc" -eq 0 ] && echo "$OUT" | grep -q "no JSONL files"; then
+    assert_pass "empty default receipts dir → exit 0 + stderr warning"
+else
+    assert_fail "empty dir handling: rc=$rc out=$OUT"
+fi
+rm -rf "$EMPTY_HOME"
+
+# --- Summary ---
+echo ""
+echo "=== Results: $PASS passed, $FAIL failed ==="
+[ "$FAIL" -eq 0 ]

package/tests/test-redirect-fragment-warner.sh

@@ -0,0 +1,130 @@
+#!/bin/bash
+# Tests for redirect-fragment-warner.sh
+HOOK="examples/redirect-fragment-warner.sh"
+PASS=0 FAIL=0
+TMPDIR=$(mktemp -d)
+trap "rm -rf $TMPDIR" EXIT
+
+assert_contains() { if echo "$2" | grep -q "$3"; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (expected '$3', got: $2)"; fi; }
+assert_not_contains() { if ! echo "$2" | grep -q "$3"; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (unexpected '$3', got: $2)"; fi; }
+assert_exit() { if [ "$2" = "$3" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (expected exit $3, got $2)"; fi; }
+
+HOOK_ABS="$PWD/$HOOK"
+
+run_hook() {
+    local cmd="$1"
+    local extra_env="${2:-}"
+    local input='{"tool_input": {"command": '"$(printf '%s' "$cmd" | python3 -c 'import json,sys; print(json.dumps(sys.stdin.read()))')"'}}'
+    # shellcheck disable=SC2086
+    env $extra_env bash "$HOOK_ABS" 2>&1 <<< "$input"
+}
+
+# Test 1: Command without 2>&1 → silent, exit 0
+OUT=$(run_hook "ls -la"); RC=$?
+assert_not_contains "no 2>&1 no notice" "$OUT" "NOTICE"
+assert_not_contains "no 2>&1 no block" "$OUT" "BLOCKED"
+assert_exit "no 2>&1 exit 0" "$RC" "0"
+
+# Test 2: Command with 2>&1 → NOTICE, exit 0 (default warn)
+OUT=$(run_hook "git commit -m '...' 2>&1 | tail -3"); RC=$?
+assert_contains "2>&1 warns" "$OUT" "NOTICE"
+assert_contains "2>&1 mentions 25C" "$OUT" "25C"
+assert_exit "2>&1 warn exit 0" "$RC" "0"
+
+# Test 3: Suggested rewrite strips 2>&1
+OUT=$(run_hook "git push 2>&1 | tail -3"); RC=$?
+assert_contains "suggested rewrite shown" "$OUT" "git push"
+assert_contains "rewrite has tail" "$OUT" "tail"
+assert_not_contains "rewrite strips 2>&1" "$(echo "$OUT" | grep 'good:\|Suggested rewrite' -A1 | grep -v 'bad:\|NOTICE\|Suggested')" "2>&1"
+
+# Test 4: CC_BLOCK_2_REDIRECT=1 → BLOCKED, exit 2
+OUT=$(run_hook "git commit -m 'x' 2>&1 | tail -3" "CC_BLOCK_2_REDIRECT=1"); RC=$?
+assert_contains "BLOCK mode blocks" "$OUT" "BLOCKED"
+assert_contains "BLOCK shows bad" "$OUT" "bad:"
+assert_contains "BLOCK shows good" "$OUT" "good:"
+assert_exit "BLOCK mode exit 2" "$RC" "2"
+
+# Test 5: # ACCEPT 2>&1 marker overrides warning
+OUT=$(run_hook "git commit -m 'x' 2>&1 | tail -3 # ACCEPT 2>&1"); RC=$?
+assert_not_contains "ACCEPT marker no notice" "$OUT" "NOTICE"
+assert_not_contains "ACCEPT marker no block" "$OUT" "BLOCKED"
+assert_exit "ACCEPT marker exit 0" "$RC" "0"
+
+# Test 6: # ACCEPT 2>&1 marker overrides even in BLOCK mode
+OUT=$(run_hook "git commit -m 'x' 2>&1 # ACCEPT 2>&1" "CC_BLOCK_2_REDIRECT=1"); RC=$?
+assert_not_contains "ACCEPT in BLOCK no notice" "$OUT" "NOTICE"
+assert_not_contains "ACCEPT in BLOCK no block" "$OUT" "BLOCKED"
+assert_exit "ACCEPT in BLOCK exit 0" "$RC" "0"
+
+# Test 7: CC_REDIRECT_FRAGMENT_DISABLE=1 → silent, exit 0
+OUT=$(run_hook "git commit -m 'x' 2>&1" "CC_REDIRECT_FRAGMENT_DISABLE=1"); RC=$?
+assert_not_contains "DISABLE no notice" "$OUT" "NOTICE"
+assert_not_contains "DISABLE no block" "$OUT" "BLOCKED"
+assert_exit "DISABLE exit 0" "$RC" "0"
+
+# Test 8: CC_REDIRECT_FRAGMENT_DISABLE=1 overrides BLOCK mode
+OUT=$(run_hook "git commit -m 'x' 2>&1" "CC_REDIRECT_FRAGMENT_DISABLE=1 CC_BLOCK_2_REDIRECT=1"); RC=$?
+assert_not_contains "DISABLE wins over BLOCK" "$OUT" "BLOCKED"
+assert_exit "DISABLE+BLOCK exit 0" "$RC" "0"
+
+# Test 9: CC_REDIRECT_FRAGMENT_QUIET=1 → silent in warn mode, exit 0
+OUT=$(run_hook "git commit 2>&1" "CC_REDIRECT_FRAGMENT_QUIET=1"); RC=$?
+assert_not_contains "QUIET no notice" "$OUT" "NOTICE"
+assert_exit "QUIET warn exit 0" "$RC" "0"
+
+# Test 10: CC_REDIRECT_FRAGMENT_QUIET=1 + CC_BLOCK_2_REDIRECT=1 → silent but blocks
+OUT=$(run_hook "git commit 2>&1" "CC_REDIRECT_FRAGMENT_QUIET=1 CC_BLOCK_2_REDIRECT=1"); RC=$?
+assert_not_contains "QUIET+BLOCK no message" "$OUT" "BLOCKED"
+assert_exit "QUIET+BLOCK exit 2" "$RC" "2"
+
+# Test 11: 2>&1 anywhere in long pipeline detected
+OUT=$(run_hook "find . -type f | xargs grep -l 'foo' 2>&1 | sort"); RC=$?
+assert_contains "long pipeline detected" "$OUT" "NOTICE"
+assert_exit "long pipeline exit 0" "$RC" "0"
+
+# Test 12: 1>&2 NOT detected (only 2>&1 is the trigger)
+OUT=$(run_hook "echo error 1>&2"); RC=$?
+assert_not_contains "1>&2 not detected" "$OUT" "NOTICE"
+assert_exit "1>&2 exit 0" "$RC" "0"
+
+# Test 13: Empty input → exit 0
+OUT=$(env bash "$HOOK_ABS" 2>&1 < /dev/null); RC=$?
+assert_exit "empty input exit 0" "$RC" "0"
+
+# Test 14: Missing tool_input.command → exit 0
+OUT=$(env bash "$HOOK_ABS" 2>&1 <<< '{}'); RC=$?
+assert_exit "missing command exit 0" "$RC" "0"
+
+# Test 15: Block message references anchor issue + Gist
+OUT=$(run_hook "make 2>&1" "CC_BLOCK_2_REDIRECT=1"); RC=$?
+assert_contains "block mentions 64334" "$OUT" "64334"
+assert_contains "block mentions Gist" "$OUT" "5881286479969d5bac0323511dc33ab2"
+
+# Test 16: Notice message references 25C axis
+OUT=$(run_hook "make 2>&1"); RC=$?
+assert_contains "notice mentions axis" "$OUT" "25C"
+
+# Test 17: Suggested rewrite preserves rest of command
+OUT=$(run_hook "git log --oneline 2>&1 | head -10"); RC=$?
+assert_contains "rewrite keeps git log" "$OUT" "git log"
+assert_contains "rewrite keeps head" "$OUT" "head"
+
+# Test 18: Multiple 2>&1 occurrences → all stripped in rewrite
+OUT=$(run_hook "(cmd1 2>&1; cmd2 2>&1) | tee out"); RC=$?
+assert_contains "multi 2>&1 still warns" "$OUT" "NOTICE"
+# The stripping is best-effort; just ensure warning fires
+assert_exit "multi 2>&1 exit 0" "$RC" "0"
+
+# Test 19: 2>&1 inside quotes (still trigger - permission engine sees raw text)
+OUT=$(run_hook 'echo "redirect with 2>&1 here"'); RC=$?
+assert_contains "2>&1 in quotes detected" "$OUT" "NOTICE"
+assert_exit "2>&1 in quotes exit 0" "$RC" "0"
+
+# Test 20: bare ampersand without 2>&1 NOT detected (different trigger)
+OUT=$(run_hook "sleep 5 & wait"); RC=$?
+assert_not_contains "bare & not detected" "$OUT" "NOTICE"
+assert_exit "bare & exit 0" "$RC" "0"
+
+echo ""
+echo "redirect-fragment-warner tests: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]