cc-safe-setup 29.7.0 → 30.0.4

package/tests/test-redundant-read-blocker.sh

@@ -0,0 +1,155 @@
+#!/bin/bash
+# Tests for redundant-read-blocker.sh
+set -uo pipefail
+
+HOOK="$(dirname "$0")/../examples/redundant-read-blocker.sh"
+PASS=0
+FAIL=0
+STATE_DIR="/tmp/cc-redundant-read-test-$$"
+SESSION_ID="test-$$"
+TMP_FILE="$STATE_DIR/sample.txt"
+
+setup() {
+    rm -rf "$STATE_DIR" 2>/dev/null || true
+    mkdir -p "$STATE_DIR"
+    echo "sample content" > "$TMP_FILE"
+}
+
+run_hook() {
+    local file="$1"
+    local input
+    input=$(jq -nc \
+        --arg sid "$SESSION_ID" \
+        --arg fp "$file" \
+        '{tool_name: "Read", session_id: $sid, tool_input: {file_path: $fp}}')
+    printf '%s' "$input" \
+        | CC_REDUNDANT_READ_STATE_DIR="$STATE_DIR" \
+          CC_REDUNDANT_READ_THRESHOLD="${THRESHOLD:-1}" \
+          CC_REDUNDANT_READ_STRICT="${STRICT:-0}" \
+          bash "$HOOK" 2>&1
+    return $?
+}
+
+assert_pass() { echo "  PASS: $1"; PASS=$((PASS + 1)); }
+assert_fail() { echo "  FAIL: $1"; FAIL=$((FAIL + 1)); }
+
+echo "=== redundant-read-blocker.sh tests ==="
+
+# --- Test 1: First read is silent ---
+setup
+output=$(run_hook "$TMP_FILE")
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "first read is a silent no-op"
+else
+    assert_fail "expected silent first read (rc=$rc output=$output)"
+fi
+
+# --- Test 2: Second read of same file (unchanged) hits threshold and warns ---
+setup
+run_hook "$TMP_FILE" >/dev/null
+output=$(run_hook "$TMP_FILE")
+rc=$?
+if [ "$rc" -eq 0 ] && echo "$output" | grep -q "REDUNDANT READ"; then
+    assert_pass "second read of unchanged file emits warning (rc=0 by default)"
+else
+    assert_fail "expected warning on 2nd read (rc=$rc output=$output)"
+fi
+
+# --- Test 3: Strict mode exits 2 on second read ---
+setup
+STRICT=1 run_hook "$TMP_FILE" >/dev/null
+output=$(STRICT=1 run_hook "$TMP_FILE")
+rc=$?
+if [ "$rc" -eq 2 ] && echo "$output" | grep -q "REDUNDANT READ"; then
+    assert_pass "strict mode exits 2 with warning"
+else
+    assert_fail "expected exit 2 in strict mode (rc=$rc)"
+fi
+
+# --- Test 4: Modified file is not redundant (mtime changed) ---
+setup
+run_hook "$TMP_FILE" >/dev/null
+sleep 1
+echo "modified" > "$TMP_FILE"   # changes mtime
+output=$(run_hook "$TMP_FILE")
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "modified file is not flagged as redundant"
+else
+    assert_fail "modified file should pass (rc=$rc output=$output)"
+fi
+
+# --- Test 5: Different paths do not interfere ---
+setup
+OTHER="$STATE_DIR/other.txt"
+echo "other content" > "$OTHER"
+run_hook "$TMP_FILE" >/dev/null
+output=$(run_hook "$OTHER")
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "different paths don't trigger each other"
+else
+    assert_fail "different file should pass (rc=$rc output=$output)"
+fi
+
+# --- Test 6: Threshold raised to 3 lets two reads pass silently ---
+setup
+THRESHOLD=3 run_hook "$TMP_FILE" >/dev/null
+output=$(THRESHOLD=3 run_hook "$TMP_FILE")
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "raising THRESHOLD lets extra reads through"
+else
+    assert_fail "with THRESHOLD=3, 2 reads should be silent (rc=$rc output=$output)"
+fi
+
+# --- Test 7: Non-Read tool calls are ignored ---
+setup
+input=$(jq -nc --arg sid "$SESSION_ID" '{tool_name: "Edit", session_id: $sid, tool_input: {file_path: "x"}}')
+output=$(printf '%s' "$input" | CC_REDUNDANT_READ_STATE_DIR="$STATE_DIR" bash "$HOOK" 2>&1)
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "non-Read tool calls are ignored"
+else
+    assert_fail "expected silent for Edit (rc=$rc output=$output)"
+fi
+
+# --- Test 8: Missing file_path is a silent no-op ---
+setup
+input=$(jq -nc --arg sid "$SESSION_ID" '{tool_name: "Read", session_id: $sid, tool_input: {}}')
+output=$(printf '%s' "$input" | CC_REDUNDANT_READ_STATE_DIR="$STATE_DIR" bash "$HOOK" 2>&1)
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "missing file_path is silent no-op"
+else
+    assert_fail "expected silent (rc=$rc output=$output)"
+fi
+
+# --- Test 9: Warning references #60283 ---
+setup
+run_hook "$TMP_FILE" >/dev/null
+output=$(run_hook "$TMP_FILE")
+if echo "$output" | grep -q "#60283"; then
+    assert_pass "warning references #60283 for grounding"
+else
+    assert_fail "expected reference to #60283 in warning"
+fi
+
+# --- Test 10: Reads log respects WINDOW size ---
+setup
+THRESHOLD=99 run_hook "$STATE_DIR/a.txt" >/dev/null 2>&1
+THRESHOLD=99 run_hook "$STATE_DIR/b.txt" >/dev/null 2>&1
+THRESHOLD=99 run_hook "$STATE_DIR/c.txt" >/dev/null 2>&1
+THRESHOLD=99 run_hook "$STATE_DIR/d.txt" >/dev/null 2>&1
+log_lines=$(wc -l < "$STATE_DIR/$SESSION_ID/reads.log" 2>/dev/null || echo 0)
+if [ "$log_lines" -le 20 ]; then
+    assert_pass "reads log respects window size (lines: $log_lines <= 20)"
+else
+    assert_fail "log grew unbounded (lines: $log_lines)"
+fi
+
+rm -rf "$STATE_DIR" 2>/dev/null || true
+echo
+echo "=== Results: $PASS passed, $FAIL failed ==="
+[ "$FAIL" -eq 0 ]

package/tests/test-refusal-arrest-gate.sh

@@ -0,0 +1,303 @@
+#!/bin/bash
+# Tests for refusal-arrest-gate.sh
+#
+# Verifies the PreToolUse-hook behavior for the refusal-side dual of
+# closure-word-verify-gate (#60506, #60475):
+#   - Refusal in same-turn prose + matching tool target  → exit 2, feedback
+#   - Refusal in same-turn prose + non-matching target   → exit 0 silent
+#   - No refusal in prose                                → exit 0 silent
+#   - Refusal inside quoted user prompt                  → exit 0 silent
+#   - Disable flag respected
+#   - Multiple refusal pattern variants
+#   - Bash command target matching
+#   - File path basename matching
+#   - Length threshold (very short targets ignored)
+#   - Non-instrumented tools pass through
+
+set -uo pipefail
+
+HOOK="$(dirname "$0")/../examples/refusal-arrest-gate.sh"
+PASS=0
+FAIL=0
+
+assert_pass() { echo "  PASS: $1"; PASS=$((PASS + 1)); }
+assert_fail() { echo "  FAIL: $1"; FAIL=$((FAIL + 1)); }
+
+# Helper: build PreToolUse input JSON from three params, then run hook.
+# Args: tool_name, tool_input_json, assistant_text
+make_input() {
+    local tn="$1" ti="$2" at="$3"
+    jq -nc \
+        --arg tn "$tn" \
+        --argjson ti "$ti" \
+        --arg at "$at" \
+        '{tool_name: $tn, tool_input: $ti, last_assistant_message: $at}'
+}
+
+run_hook() {
+    local input="$1"
+    local extra_env="${2:-}"
+    if [ -n "$extra_env" ]; then
+        env $extra_env bash "$HOOK" <<< "$input" 2>&1
+    else
+        printf '%s' "$input" | bash "$HOOK" 2>&1
+    fi
+}
+
+echo "=== refusal-arrest-gate.sh tests ==="
+
+# --- Test 1: refusal + matching Edit target → blocks ---
+INPUT=$(make_input "Edit" '{"file_path":"/repo/src/config.json"}' \
+    "I will not modify config.json — the operator already finalized it.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 2 ] && echo "$output" | grep -q "REFUSAL-SIDE ARREST"; then
+    assert_pass "refusal + matching Edit target → exit 2 with feedback"
+else
+    assert_fail "expected exit 2 + feedback, got rc=$rc output=$output"
+fi
+
+# --- Test 2: refusal + non-matching Edit target → silent pass ---
+INPUT=$(make_input "Edit" '{"file_path":"/repo/src/other.json"}' \
+    "I will not modify config.json — the operator already finalized it.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "refusal + non-matching target → silent pass"
+else
+    assert_fail "expected silent exit 0, got rc=$rc output=$output"
+fi
+
+# --- Test 3: no refusal → silent pass ---
+INPUT=$(make_input "Edit" '{"file_path":"/repo/src/config.json"}' \
+    "Updating config.json with the new endpoint.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "no refusal in prose → silent pass"
+else
+    assert_fail "expected silent exit 0, got rc=$rc output=$output"
+fi
+
+# --- Test 4: "I won't" variant + matching target → blocks ---
+INPUT=$(make_input "Write" '{"file_path":"/repo/migrations/0042.sql"}' \
+    "I won't modify migrations until the lock is released.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 2 ]; then
+    assert_pass "I won't variant triggers refusal arrest"
+else
+    assert_fail "expected exit 2, got rc=$rc output=$output"
+fi
+
+# --- Test 5: "I'll skip" variant + matching target → blocks ---
+INPUT=$(make_input "Bash" '{"command":"pytest tests/integration/"}' \
+    "I'll skip integration since unit tests cover this path.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 2 ]; then
+    assert_pass "I'll skip variant triggers on Bash command"
+else
+    assert_fail "expected exit 2, got rc=$rc output=$output"
+fi
+
+# --- Test 6: "I'll preserve" variant + matching target → blocks ---
+INPUT=$(make_input "Write" '{"file_path":"/repo/data/customers.csv"}' \
+    "I'll preserve customers.csv as-is and write to a new file.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 2 ]; then
+    assert_pass "I'll preserve variant triggers when contradicted"
+else
+    assert_fail "expected exit 2, got rc=$rc output=$output"
+fi
+
+# --- Test 7: "let me not" variant ---
+INPUT=$(make_input "Edit" '{"file_path":"/etc/hosts"}' \
+    "Let me not touch hosts file — the operator owns DNS.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 2 ]; then
+    assert_pass "let me not variant triggers"
+else
+    assert_fail "expected exit 2, got rc=$rc output=$output"
+fi
+
+# --- Test 8: refusal inside <user_prompt> tag → silent pass ---
+INPUT=$(make_input "Edit" '{"file_path":"/repo/src/config.json"}' \
+    "The user wrote: <user_prompt>I will not modify config.json</user_prompt> — I am now updating per the new request.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "refusal inside user_prompt tag → silent pass"
+else
+    assert_fail "expected silent exit 0 (user-quote ignored), got rc=$rc output=$output"
+fi
+
+# --- Test 9: refusal in markdown blockquote → silent pass ---
+INPUT=$(make_input "Edit" '{"file_path":"/repo/src/config.json"}' \
+    "User said:
+> I will not modify config.json without review
+Proceeding with the requested change.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "refusal in markdown blockquote → silent pass"
+else
+    assert_fail "expected silent exit 0 (blockquote ignored), got rc=$rc output=$output"
+fi
+
+# --- Test 10: disable flag respected ---
+INPUT=$(make_input "Edit" '{"file_path":"/repo/src/config.json"}' \
+    "I will not modify config.json.")
+output=$(CC_REFUSAL_GATE_DISABLE=1 bash "$HOOK" <<< "$INPUT" 2>&1)
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "CC_REFUSAL_GATE_DISABLE=1 silences the gate"
+else
+    assert_fail "expected silent disable, got rc=$rc output=$output"
+fi
+
+# --- Test 11: empty input → silent ---
+output=$(printf '' | bash "$HOOK" 2>&1)
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "empty input → silent no-op"
+else
+    assert_fail "expected silent exit 0, got rc=$rc output=$output"
+fi
+
+# --- Test 12: missing tool_name → silent ---
+INPUT=$(jq -nc '{tool_input: {file_path: "/repo/src/config.json"}, last_assistant_message: "I will not modify config.json."}')
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "missing tool_name → silent pass"
+else
+    assert_fail "expected silent exit 0, got rc=$rc output=$output"
+fi
+
+# --- Test 13: unknown tool type (WebFetch) → silent ---
+INPUT=$(make_input "WebFetch" '{"url":"https://example.com"}' \
+    "I will not fetch example.com.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "non-instrumented tool (WebFetch) → silent pass"
+else
+    assert_fail "expected silent exit 0, got rc=$rc output=$output"
+fi
+
+# --- Test 14: refusal with basename match (no path in refusal) → blocks ---
+INPUT=$(make_input "Edit" '{"file_path":"/very/deep/nested/path/secrets.env"}' \
+    "I will not modify secrets.env — credentials are operator-managed.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 2 ]; then
+    assert_pass "basename match on deep path → blocks"
+else
+    assert_fail "expected exit 2 (basename match), got rc=$rc output=$output"
+fi
+
+# --- Test 15: short target word filter (≤2 chars) → no match ---
+INPUT=$(make_input "Edit" '{"file_path":"/repo/x.txt"}' \
+    "I will not modify x — it is a test fixture.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "short target (≤2 chars) does not trigger (false-positive guard)"
+else
+    assert_fail "expected silent exit 0 (length threshold), got rc=$rc output=$output"
+fi
+
+# --- Test 16: refusal target appears in Bash command → blocks ---
+INPUT=$(make_input "Bash" '{"command":"rm -rf node_modules/"}' \
+    "I will not delete node_modules — the operator just ran npm install.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 2 ]; then
+    assert_pass "Bash command containing refusal target → blocks"
+else
+    assert_fail "expected exit 2 (Bash target match), got rc=$rc output=$output"
+fi
+
+# --- Test 17: Bash command not matching refusal target → silent pass ---
+INPUT=$(make_input "Bash" '{"command":"ls -la"}' \
+    "I will not delete node_modules.")
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "Bash command not matching refusal target → silent pass"
+else
+    assert_fail "expected silent exit 0, got rc=$rc output=$output"
+fi
+
+# --- Test 18: missing assistant text → silent pass ---
+INPUT=$(jq -nc '{tool_name: "Edit", tool_input: {file_path: "/repo/src/config.json"}}')
+output=$(run_hook "$INPUT")
+rc=$?
+if [ "$rc" -eq 0 ] && [ -z "$output" ]; then
+    assert_pass "missing assistant text → silent pass (no false positive)"
+else
+    assert_fail "expected silent exit 0, got rc=$rc output=$output"
+fi
+
+# --- Test 19: custom CC_REFUSAL_PATTERNS does not crash ---
+INPUT=$(make_input "Edit" '{"file_path":"/repo/src/config.json"}' \
+    "yapmayacağım config.json üzerinde değişiklik.")
+output=$(CC_REFUSAL_PATTERNS='yapmayacağım [a-zA-Z0-9_./@\-]+' bash "$HOOK" <<< "$INPUT" 2>&1)
+rc=$?
+if [ "$rc" -eq 0 ] || [ "$rc" -eq 2 ]; then
+    assert_pass "custom CC_REFUSAL_PATTERNS does not crash hook"
+else
+    assert_fail "custom pattern caused crash rc=$rc output=$output"
+fi
+
+# --- Test 20: feedback message cites #60506 / #60475 ---
+INPUT=$(make_input "Edit" '{"file_path":"/repo/src/config.json"}' \
+    "I will not modify config.json under any circumstance.")
+output=$(run_hook "$INPUT")
+if echo "$output" | grep -q "60506" && echo "$output" | grep -q "60475"; then
+    assert_pass "feedback message cites both #60506 and #60475"
+else
+    assert_fail "expected references to #60506 and #60475 in feedback"
+fi
+
+# --- Test 21: feedback message names the disable escape ---
+INPUT=$(make_input "Edit" '{"file_path":"/repo/src/config.json"}' \
+    "I will not modify config.json.")
+output=$(run_hook "$INPUT")
+if echo "$output" | grep -q "CC_REFUSAL_GATE_DISABLE=1"; then
+    assert_pass "feedback message names the disable escape"
+else
+    assert_fail "expected CC_REFUSAL_GATE_DISABLE=1 mention in feedback"
+fi
+
+# --- Test 22: transcript with a raw control-char line still detects the refusal ---
+# Regression for the jq-slurp failure (anthropics/claude-code#68665): a single
+# transcript line carrying a raw U+0001 (e.g. a large tool-output block) used to
+# make `jq -rs` fail over the whole window, emptying ASSISTANT_TEXT and failing
+# the gate open. Per-line `fromjson?` parsing must skip the bad line and still
+# surface the most-recent assistant refusal from the transcript_path branch.
+TRANSCRIPT=$(mktemp)
+{
+    printf '%s\n' '{"message":{"role":"user","content":"please finalize config.json"}}'
+    # bad line: raw control char inside a JSON string (strictly invalid JSON)
+    printf '{"message":{"role":"assistant","content":[{"type":"text","text":"big tool dump \x01 raw"}]}}\n'
+    # most-recent assistant message: an explicit refusal
+    printf '%s\n' '{"message":{"role":"assistant","content":[{"type":"text","text":"I will not modify config.json — operator finalized it."}]}}'
+} > "$TRANSCRIPT"
+INPUT=$(jq -nc --arg tp "$TRANSCRIPT" \
+    '{tool_name:"Edit", tool_input:{file_path:"/repo/src/config.json"}, transcript_path:$tp}')
+output=$(printf '%s' "$INPUT" | bash "$HOOK" 2>&1)
+rc=$?
+if [ "$rc" -eq 2 ] && echo "$output" | grep -q "REFUSAL-SIDE ARREST"; then
+    assert_pass "control-char transcript line → gate still fires (no fail-open)"
+else
+    assert_fail "expected exit 2 despite control-char line, got rc=$rc output=$output"
+fi
+rm -f "$TRANSCRIPT"
+
+echo ""
+echo "=== Results: $PASS passed, $FAIL failed ==="
+[ "$FAIL" -eq 0 ] || exit 1

package/tests/test-remote-control-billing-classifier.sh

@@ -0,0 +1,125 @@
+#!/bin/bash
+# Tests for remote-control-billing-classifier.sh
+HOOK="examples/remote-control-billing-classifier.sh"
+PASS=0 FAIL=0
+
+assert_contains() { if echo "$2" | grep -q "$3"; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (expected '$3')"; fi; }
+assert_not_contains() { if ! echo "$2" | grep -q "$3"; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (unexpected '$3')"; fi; }
+assert_exit() { if [ "$2" = "$3" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (expected exit $3, got $2)"; fi; }
+
+HOOK_ABS="$PWD/$HOOK"
+
+# Test 1: No remote-control ancestor (override empty) → silent pass
+OUT=$(CC_REMOTE_CONTROL_PROCESS_OVERRIDE="bash,login -p,init" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_not_contains "no remote-control no warning" "$OUT" "remote-control"
+assert_exit "no remote-control exit 0" "$RC" "0"
+
+# Test 2: remote-control in ancestor cmdline → advisory + exit 0
+OUT=$(CC_REMOTE_CONTROL_PROCESS_OVERRIDE="bash,/home/user/.local/bin/claude remote-control,init" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_contains "remote-control triggers advisory" "$OUT" "remote-control"
+assert_contains "advisory names Pool 2" "$OUT" "Pool 2"
+assert_contains "advisory cites issue" "$OUT" "#59823"
+assert_contains "advisory cites June 15" "$OUT" "2026-06-15"
+assert_exit "advisory does not block (exit 0)" "$RC" "0"
+
+# Test 3: Disable env var skips even when remote-control is present
+OUT=$(CC_REMOTE_CONTROL_DISABLE=1 \
+      CC_REMOTE_CONTROL_PROCESS_OVERRIDE="claude remote-control" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_not_contains "disable suppresses advisory" "$OUT" "remote-control"
+assert_exit "disable exit 0" "$RC" "0"
+
+# Test 4: Pattern override matches custom string
+OUT=$(CC_REMOTE_CONTROL_PROCESS_OVERRIDE="my-automation-runner --headless" \
+      CC_REMOTE_CONTROL_PATTERN="my-automation-runner" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_contains "custom pattern triggers advisory" "$OUT" "remote-control"
+assert_exit "custom pattern exit 0" "$RC" "0"
+
+# Test 5: Pattern does not match arbitrary "remote" string
+OUT=$(CC_REMOTE_CONTROL_PROCESS_OVERRIDE="git remote update,bash" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_not_contains "git remote does not trigger" "$OUT" "remote-control"
+assert_exit "git remote exit 0" "$RC" "0"
+
+# Test 6: Advisory includes the two pre-June-15 audits
+OUT=$(CC_REMOTE_CONTROL_PROCESS_OVERRIDE="claude remote-control" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_contains "advisory names ps audit" "$OUT" "pgrep"
+assert_contains "advisory names opt-in audit" "$OUT" "opt-in"
+
+# Test 7: Hook reads and ignores stdin payload (does not hang)
+PAYLOAD='{"hook_event_name":"SessionStart","session_id":"abc"}'
+OUT=$(echo "$PAYLOAD" | \
+      CC_REMOTE_CONTROL_PROCESS_OVERRIDE="claude remote-control" \
+      bash "$HOOK_ABS" 2>&1); RC=$?
+assert_contains "stdin consumed without breakage" "$OUT" "Pool 2"
+assert_exit "stdin path exit 0" "$RC" "0"
+
+# Test 8: Empty override and no live remote-control → silent pass
+# (live ps may or may not find remote-control on the test host; we
+# only assert that an explicitly-empty override yields no advisory.)
+OUT=$(CC_REMOTE_CONTROL_PROCESS_OVERRIDE="bash" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_not_contains "empty override no advisory" "$OUT" "remote-control"
+assert_exit "empty override exit 0" "$RC" "0"
+
+# Test 9: Multiple ancestors, only one matches → advisory
+OUT=$(CC_REMOTE_CONTROL_PROCESS_OVERRIDE="bash,sshd,claude remote-control --port 9999,init" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_contains "matching ancestor triggers advisory" "$OUT" "Pool 2"
+assert_exit "multi-ancestor exit 0" "$RC" "0"
+
+# Test 10: Disable still consumes stdin (no broken pipe)
+PAYLOAD='{"hook_event_name":"SessionStart"}'
+OUT=$(echo "$PAYLOAD" | \
+      CC_REMOTE_CONTROL_DISABLE=1 \
+      CC_REMOTE_CONTROL_PROCESS_OVERRIDE="claude remote-control" \
+      bash "$HOOK_ABS" 2>&1); RC=$?
+assert_not_contains "disable with stdin no output" "$OUT" "Pool 2"
+assert_exit "disable with stdin exit 0" "$RC" "0"
+
+# Test 11: Pattern is anchored substring (not full regex by default)
+OUT=$(CC_REMOTE_CONTROL_PROCESS_OVERRIDE="something-claude remote-control-something,bash" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_contains "substring match triggers" "$OUT" "Pool 2"
+assert_exit "substring match exit 0" "$RC" "0"
+
+# Test 12: Advisory mentions cc-safe-setup setup hint indirectly
+OUT=$(CC_REMOTE_CONTROL_PROCESS_OVERRIDE="claude remote-control" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_contains "advisory points at silence path" "$OUT" "CC_REMOTE_CONTROL_DISABLE"
+
+# Test 13: Live ps path runs without error when override is unset
+unset CC_REMOTE_CONTROL_PROCESS_OVERRIDE
+OUT=$(bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+# Cannot assert advisory content (host-dependent); only that exit is 0.
+assert_exit "live ps path exit 0" "$RC" "0"
+
+# Test 14: Forest-style ancestor (real-shape) triggers advisory
+ANCESTOR="bash,/home/user/.local/bin/claude remote-control,/home/user/.local/share/claude/versions/2.1.143 --print --sdk-url https://api.anthropic.com/v1/code/sessions/abc --session-id xyz"
+OUT=$(CC_REMOTE_CONTROL_PROCESS_OVERRIDE="$ANCESTOR" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_contains "real-shape ancestor triggers" "$OUT" "Pool 2"
+assert_contains "real-shape advisory cites #59823" "$OUT" "#59823"
+assert_exit "real-shape exit 0" "$RC" "0"
+
+# Test 15: Disable env wins over presence
+OUT=$(CC_REMOTE_CONTROL_DISABLE=1 \
+      CC_REMOTE_CONTROL_PROCESS_OVERRIDE="$ANCESTOR" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_not_contains "disable over presence" "$OUT" "Pool 2"
+assert_exit "disable over presence exit 0" "$RC" "0"
+
+# Test 16: Pattern override + disable still silent
+OUT=$(CC_REMOTE_CONTROL_DISABLE=1 \
+      CC_REMOTE_CONTROL_PATTERN="x-runner" \
+      CC_REMOTE_CONTROL_PROCESS_OVERRIDE="x-runner" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_not_contains "disable beats custom pattern" "$OUT" "Pool 2"
+assert_exit "disable beats custom pattern exit 0" "$RC" "0"
+
+echo "Results: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/tests/test-resume-drift-watcher.sh

@@ -0,0 +1,65 @@
+#!/bin/bash
+# Tests for resume-drift-watcher.sh
+HOOK="examples/resume-drift-watcher.sh"
+PASS=0 FAIL=0
+
+assert_contains() { if echo "$2" | grep -q "$3"; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (expected '$3' in: $2)"; fi; }
+assert_not_contains() { if ! echo "$2" | grep -q "$3"; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (unexpected '$3' in: $2)"; fi; }
+assert_exit() { if [ "$2" -eq "$3" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (exit $2, expected $3)"; fi; }
+
+LOG="${HOME}/.claude/logs/resume-drift.log"
+mkdir -p "${HOME}/.claude/logs"
+: > "$LOG"
+
+# Test 1: No transcript — exit 0, no log line
+OUT=$(printf '{"session_id":"s1","tool_name":"X"}' | bash "$HOOK" 2>&1)
+RC=$?
+assert_exit "no transcript exits 0" "$RC" 0
+
+# Test 2: Healthy fresh session — first message large, no warning
+TRANS=$(mktemp)
+{
+  printf '{"role":"user","content":"This is a reasonably sized first message with enough bytes to be well above 500. Adding filler: %s"}\n' "$(printf 'x%.0s' {1..600})"
+  printf '{"role":"assistant","content":"reply"}\n'
+  printf '{"role":"user","content":"follow up"}\n'
+  printf '{"role":"assistant","content":"reply 2"}\n'
+  printf '{"role":"user","content":"turn 3"}\n'
+  printf '{"role":"assistant","content":"reply 3"}\n'
+} >> "$TRANS"
+: > "$LOG"
+OUT=$(printf '{"session_id":"healthy","transcript_path":"%s"}' "$TRANS" | bash "$HOOK" 2>&1)
+assert_not_contains "healthy session no warning" "$OUT" "resume-drift signal"
+if grep -q "healthy" "$LOG"; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: healthy session should log"; fi
+rm -f "$TRANS"
+
+# Test 3: Drift signal — tiny first message + large total + >4 turns
+TRANS=$(mktemp)
+printf '{"role":"user","content":"tiny"}\n' >> "$TRANS"           # <500 bytes
+# Pad total size above 50KB using large assistant messages
+for i in 1 2 3 4 5; do
+  printf '{"role":"assistant","content":"%s"}\n' "$(printf 'A%.0s' {1..12000})" >> "$TRANS"
+  printf '{"role":"user","content":"t%d"}\n' "$i" >> "$TRANS"
+done
+: > "$LOG"
+OUT=$(printf '{"session_id":"drifted","transcript_path":"%s"}' "$TRANS" | bash "$HOOK" 2>&1)
+assert_contains "drift emits warning" "$OUT" "resume-drift signal"
+assert_contains "warning references issue" "$OUT" "#43278"
+rm -f "$TRANS"
+
+# Test 4: Under turn-count threshold — no warning even if first small
+TRANS=$(mktemp)
+printf '{"role":"user","content":"tiny"}\n' >> "$TRANS"
+printf '{"role":"assistant","content":"%s"}\n' "$(printf 'A%.0s' {1..60000})" >> "$TRANS"
+: > "$LOG"
+OUT=$(printf '{"session_id":"early","transcript_path":"%s"}' "$TRANS" | bash "$HOOK" 2>&1)
+assert_not_contains "early turns no warning" "$OUT" "resume-drift signal"
+rm -f "$TRANS"
+
+# Test 5: TSV format — 5 fields
+if [ -s "$LOG" ]; then
+  FIELDS=$(awk -F'\t' '{print NF}' "$LOG" | head -1)
+  if [ "$FIELDS" = "5" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: expected 5 TSV fields, got $FIELDS"; fi
+fi
+
+echo "PASS: $PASS  FAIL: $FAIL"
+[ "$FAIL" -eq 0 ]