cc-safe-setup 29.8.0 → 30.0.4

package/tests/test-marketplace-plugins.sh

@@ -0,0 +1,193 @@
+#!/bin/bash
+# Tests for the four plugins distributed through the Claude Code plugin marketplace
+# (plugins/*/.claude-plugin/plugin.json).
+#
+# Why this file exists: the 900+ example hooks have thousands of assertions, but the
+# hooks we ship *inside the marketplace plugins* had none. That gap let a real defect
+# ride in production - every hook parsed its stdin with `jq`, and when `jq` was absent
+# the extracted value was empty, the next line read that as "nothing to inspect", and
+# the hook exited 0. Install succeeded, no error was printed, and every block silently
+# disappeared. A safety net that fails open in silence is worse than no net, because
+# the user believes they are protected.
+#
+# What is asserted here:
+#   1. Every block still blocks when jq is available.
+#   2. Every block still blocks when jq is missing but python3 or node is available.
+#   3. When none of jq/python3/node exists, the hook does NOT block (that would brick
+#      every tool call) but it MUST say so on stderr instead of failing silently.
+#   4. The documented safe alternatives are not blocked (--force-with-lease, .env.example).
+
+PLUGIN_DIR="$(cd "$(dirname "$0")/../plugins" && pwd)"
+PASS=0
+FAIL=0
+TOTAL=0
+
+TMPDIR=$(mktemp -d)
+trap 'rm -f /tmp/cc-noparser-warned-* /tmp/cc-read-budget-*; rm -rf "$TMPDIR"' EXIT
+
+# Build PATHs that expose only a chosen subset of the three JSON readers.
+build_bin() {
+  local name="$1"; shift
+  local dir="$TMPDIR/bin-$name"
+  mkdir -p "$dir"
+  for tool in cat grep echo sed env bash sh stat wc basename tr; do
+    src=$(command -v "$tool" 2>/dev/null) && [ -n "$src" ] && ln -sf "$src" "$dir/$tool"
+  done
+  for tool in "$@"; do
+    src=$(command -v "$tool" 2>/dev/null) && [ -n "$src" ] && ln -sf "$src" "$dir/$tool"
+  done
+  echo "$dir"
+}
+
+BIN_PY=$(build_bin py python3)
+BIN_NODE=$(build_bin node node)
+BIN_NONE=$(build_bin none)
+
+# Pull one hook command out of a plugin manifest by event and 1-based index.
+hook_cmd() {
+  local plugin="$1" event="$2" idx="$3"
+  python3 - "$PLUGIN_DIR/$plugin/.claude-plugin/plugin.json" "$event" "$idx" <<'PY'
+import json, sys
+spec = json.load(open(sys.argv[1]))
+entry = spec["hooks"][sys.argv[2]][int(sys.argv[3]) - 1]
+print(entry["hooks"][0]["command"])
+PY
+}
+
+# run_case <plugin> <event> <index> <payload> <expected-exit> <description>
+run_case() {
+  local plugin="$1" event="$2" idx="$3" payload="$4" want="$5" desc="$6"
+  local cmd; cmd=$(hook_cmd "$plugin" "$event" "$idx")
+  local label out code RUNPATH
+
+  for label in normal py node none; do
+    rm -f /tmp/cc-noparser-warned-* /tmp/cc-read-budget-* 2>/dev/null
+    case "$label" in
+      normal) RUNPATH="$PATH" ;;
+      py)     RUNPATH="$BIN_PY" ;;
+      node)   RUNPATH="$BIN_NODE" ;;
+      none)   RUNPATH="$BIN_NONE" ;;
+    esac
+    out=$(printf '%s' "$payload" | env PATH="$RUNPATH" ${EXTRA_ENV:+$EXTRA_ENV} bash -c "$cmd" 2>&1)
+    code=$?
+    TOTAL=$((TOTAL + 1))
+
+    if [ "$label" = "none" ]; then
+      # No JSON reader at all: must not block, but must not be silent either
+      # when it was supposed to be guarding something.
+      if [ "$want" -eq 2 ]; then
+        if [ "$code" -eq 0 ] && [ -n "$out" ]; then
+          echo "  PASS: $desc [no reader: warns instead of silent]"; PASS=$((PASS + 1))
+        else
+          echo "  FAIL: $desc [no reader: exit=$code out='$out' - expected exit 0 with a warning]"; FAIL=$((FAIL + 1))
+        fi
+      else
+        if [ "$code" -eq 0 ]; then
+          echo "  PASS: $desc [no reader: allowed]"; PASS=$((PASS + 1))
+        else
+          echo "  FAIL: $desc [no reader: exit=$code]"; FAIL=$((FAIL + 1))
+        fi
+      fi
+      continue
+    fi
+
+    if [ "$code" -eq "$want" ]; then
+      echo "  PASS: $desc [$label]"; PASS=$((PASS + 1))
+    else
+      echo "  FAIL: $desc [$label: exit=$code want=$want out='$out']"; FAIL=$((FAIL + 1))
+    fi
+  done
+}
+
+echo "=== marketplace plugins: blocks hold in every environment ==="
+
+run_case safety-essentials PreToolUse 1 '{"tool_input":{"command":"rm -rf /tmp/x"}}' 2 "safety-essentials blocks recursive delete"
+run_case safety-essentials PreToolUse 1 '{"tool_input":{"command":"rm notes.txt"}}' 0 "safety-essentials allows single file delete"
+run_case safety-essentials PreToolUse 2 '{"tool_input":{"command":"git push -f origin topic"}}' 2 "safety-essentials blocks force push"
+run_case safety-essentials PreToolUse 3 '{"tool_input":{"command":"git reset --hard HEAD~1"}}' 2 "safety-essentials blocks hard reset"
+run_case safety-essentials PreToolUse 4 '{"tool_input":{"file_path":"/p/.env"}}' 2 "safety-essentials blocks .env write"
+run_case safety-essentials PreToolUse 5 '{"tool_input":{"command":"npm publish"}}' 2 "safety-essentials blocks package publish"
+run_case safety-essentials PreToolUse 5 '{"tool_input":{"command":"npm install"}}' 0 "safety-essentials allows npm install"
+
+run_case git-protection PreToolUse 1 '{"tool_input":{"command":"git push --force origin topic"}}' 2 "git-protection blocks force push"
+run_case git-protection PreToolUse 2 '{"tool_input":{"command":"git push origin main"}}' 2 "git-protection blocks push to main"
+run_case git-protection PreToolUse 3 '{"tool_input":{"command":"git reset --hard HEAD~1"}}' 2 "git-protection blocks hard reset"
+run_case git-protection PreToolUse 4 '{"tool_input":{"command":"git clean -fd"}}' 2 "git-protection blocks git clean -fd"
+run_case git-protection PreToolUse 5 '{"tool_input":{"command":"git branch -D topic"}}' 2 "git-protection blocks force branch delete"
+run_case git-protection PreToolUse 5 '{"tool_input":{"command":"git branch -d topic"}}' 0 "git-protection allows safe branch delete"
+
+run_case credential-guard PreToolUse 1 '{"tool_input":{"file_path":"/p/.env"}}' 2 "credential-guard blocks .env write"
+run_case credential-guard PreToolUse 2 '{"tool_input":{"file_path":"/p/credentials.yml"}}' 2 "credential-guard blocks credentials edit"
+run_case credential-guard PreToolUse 4 '{"tool_input":{"file_path":"/p/key.json"}}' 2 "credential-guard blocks service account key"
+run_case credential-guard PreToolUse 4 '{"tool_input":{"file_path":"/p/package.json"}}' 0 "credential-guard allows package.json"
+
+echo
+echo "=== the documented safe alternative must not be blocked ==="
+# The block message tells the user to use --force-with-lease. Blocking that too
+# would make the hook's own advice impossible to follow.
+run_case safety-essentials PreToolUse 2 '{"tool_input":{"command":"git push --force-with-lease origin topic"}}' 0 "safety-essentials allows --force-with-lease"
+run_case git-protection PreToolUse 1 '{"tool_input":{"command":"git push --force-with-lease origin topic"}}' 0 "git-protection allows --force-with-lease"
+run_case git-protection PreToolUse 1 '{"tool_input":{"command":"git push origin topic"}}' 0 "git-protection allows normal push"
+
+echo
+echo "=== env templates are meant to be committed, so writing them is allowed ==="
+run_case safety-essentials PreToolUse 4 '{"tool_input":{"file_path":"/p/.env.example"}}' 0 "safety-essentials allows .env.example"
+run_case credential-guard PreToolUse 1 '{"tool_input":{"file_path":"/p/.env.sample"}}' 0 "credential-guard allows .env.sample"
+run_case credential-guard PreToolUse 2 '{"tool_input":{"file_path":"/p/.env.template"}}' 0 "credential-guard allows .env.template"
+run_case safety-essentials PreToolUse 4 '{"tool_input":{"file_path":"/p/.env.local"}}' 2 "safety-essentials still blocks .env.local"
+
+echo
+echo "=== manifest integrity ==="
+# A version that disagrees with the marketplace entry makes readers install a
+# different build than the one documented.
+MISMATCH=$(python3 - "$PLUGIN_DIR" <<'PY'
+import json, pathlib, sys
+root = pathlib.Path(sys.argv[1])
+mkt = json.loads((root.parent / ".claude-plugin" / "marketplace.json").read_text())
+bad = []
+for p in mkt["plugins"]:
+    spec = json.loads((root / p["name"] / ".claude-plugin" / "plugin.json").read_text())
+    if spec["version"] != p["version"]:
+        bad.append(f"{p['name']}: marketplace={p['version']} plugin={spec['version']}")
+    if spec["name"] != p["name"]:
+        bad.append(f"{p['name']}: name mismatch {spec['name']}")
+print("\n".join(bad))
+PY
+)
+TOTAL=$((TOTAL + 1))
+if [ -z "$MISMATCH" ]; then
+  echo "  PASS: marketplace.json and each plugin.json agree on name and version"
+  PASS=$((PASS + 1))
+else
+  echo "  FAIL: $MISMATCH"
+  FAIL=$((FAIL + 1))
+fi
+
+# Every hook that reads stdin must have a fallback. Catching this structurally
+# stops a new hook from reintroducing the silent-failure shape.
+TOTAL=$((TOTAL + 1))
+UNGUARDED=$(python3 - "$PLUGIN_DIR" <<'PY'
+import json, pathlib, sys
+bad = []
+for pj in sorted(pathlib.Path(sys.argv[1]).glob("*/.claude-plugin/plugin.json")):
+    spec = json.loads(pj.read_text())
+    for ev, entries in spec.get("hooks", {}).items():
+        for i, e in enumerate(entries, 1):
+            for h in e.get("hooks", []):
+                c = h.get("command", "")
+                if "jq " in c and "command -v jq" not in c:
+                    bad.append(f"{spec['name']} {ev}#{i} uses jq with no availability check")
+print("\n".join(bad))
+PY
+)
+if [ -z "$UNGUARDED" ]; then
+  echo "  PASS: no hook calls jq without checking that it exists"
+  PASS=$((PASS + 1))
+else
+  echo "  FAIL: $UNGUARDED"
+  FAIL=$((FAIL + 1))
+fi
+
+echo
+echo "Total: $TOTAL  Passed: $PASS  Failed: $FAIL"
+[ "$FAIL" -eq 0 ]

package/tests/test-mcp-misdiagnosis-arrest.sh

@@ -0,0 +1,235 @@
+#!/bin/bash
+# tests/test-mcp-misdiagnosis-arrest.sh
+# Standalone test suite for examples/mcp-misdiagnosis-arrest.sh
+# (precedent: tests/test-commitment-carry-forward-arrest.sh)
+
+set -uo pipefail
+
+SCRIPT_DIR=$(cd "$(dirname "$0")" && pwd)
+HOOK="$SCRIPT_DIR/../examples/mcp-misdiagnosis-arrest.sh"
+
+if [ ! -x "$HOOK" ]; then
+    echo "FAIL: hook not executable: $HOOK"
+    exit 1
+fi
+
+PASS=0
+FAIL=0
+
+# Fixture dir for synthetic settings.json files used across tests.
+FIXTURE_DIR=$(mktemp -d)
+trap 'rm -rf "$FIXTURE_DIR"' EXIT
+
+# Create a fixture settings.json that has Slack and GitHub plugins enabled.
+INSTALLED_FIXTURE="$FIXTURE_DIR/settings-installed.json"
+cat > "$INSTALLED_FIXTURE" <<'JSON'
+{
+  "enabledPlugins": {
+    "slack@claude-plugins-official": true,
+    "github@claude-plugins-official": true,
+    "linear@claude-plugins-official": false
+  }
+}
+JSON
+
+# Fixture with no connectors installed.
+EMPTY_FIXTURE="$FIXTURE_DIR/settings-empty.json"
+cat > "$EMPTY_FIXTURE" <<'JSON'
+{
+  "enabledPlugins": {}
+}
+JSON
+
+# Fixture with mcpServers entries (alternate shape).
+MCPSERVERS_FIXTURE="$FIXTURE_DIR/settings-mcpservers.json"
+cat > "$MCPSERVERS_FIXTURE" <<'JSON'
+{
+  "mcpServers": {
+    "slack": { "command": "slack-mcp" },
+    "github": { "command": "github-mcp" }
+  }
+}
+JSON
+
+# Helper: feed a JSON Stop event with the given assistant text to the hook,
+# capture exit code + stderr. Args:
+#   $1 = test description
+#   $2 = expected exit code
+#   $3 = settings.json fixture path (or "missing" for no file)
+#   $4 = mode ("advisory" or "strict")
+#   $5 = expected stderr substring (optional; "" to skip stderr check)
+#   $6 = assistant text
+run_case() {
+    local desc="$1"
+    local expected_exit="$2"
+    local settings="$3"
+    local mode="$4"
+    local expected_stderr="$5"
+    local assistant_text="$6"
+
+    local payload
+    payload=$(jq -nc --arg t "$assistant_text" '{transcript:[{content:$t}]}')
+
+    local stderr_file actual_exit=0
+    stderr_file=$(mktemp)
+
+    local env_args=()
+    if [ "$settings" = "missing" ]; then
+        env_args+=("CC_MCP_SETTINGS_PATH=/nonexistent/path/settings.json")
+    else
+        env_args+=("CC_MCP_SETTINGS_PATH=$settings")
+    fi
+    if [ "$mode" = "strict" ]; then
+        env_args+=("CC_MCP_MISDIAGNOSIS_MODE=strict")
+    fi
+
+    printf '%s' "$payload" | env "${env_args[@]}" bash "$HOOK" >/dev/null 2>"$stderr_file" || actual_exit=$?
+
+    local ok=1
+    if [ "$actual_exit" -ne "$expected_exit" ]; then
+        ok=0
+    fi
+    if [ -n "$expected_stderr" ]; then
+        if ! grep -Fq "$expected_stderr" "$stderr_file"; then
+            ok=0
+        fi
+    fi
+
+    if [ "$ok" -eq 1 ]; then
+        echo "PASS: $desc"
+        PASS=$((PASS + 1))
+    else
+        echo "FAIL: $desc (expected exit $expected_exit, got $actual_exit)"
+        if [ -n "$expected_stderr" ]; then
+            echo "  expected stderr substring: $expected_stderr"
+        fi
+        echo "  stderr was:"
+        sed 's/^/    /' "$stderr_file"
+        FAIL=$((FAIL + 1))
+    fi
+
+    rm -f "$stderr_file"
+}
+
+echo "=== Group 1: input handling ==="
+
+run_case "1.1 empty stdin exits 0" \
+    0 "$INSTALLED_FIXTURE" advisory "" ""
+
+run_case "1.2 unparseable input exits 0" \
+    0 "$INSTALLED_FIXTURE" advisory "" "not json at all"
+
+# Empty assistant text → silent.
+run_case "1.3 empty assistant text exits 0" \
+    0 "$INSTALLED_FIXTURE" advisory "" ""
+
+# Test global disable.
+echo "=== Group 2: disable switch ==="
+DISABLE_PAYLOAD=$(jq -nc --arg t "the Slack Connector isn't installed" \
+    '{transcript:[{content:$t}]}')
+DISABLE_EXIT=0
+printf '%s' "$DISABLE_PAYLOAD" | \
+    CC_MCP_SETTINGS_PATH="$INSTALLED_FIXTURE" \
+    CC_MCP_MISDIAGNOSIS_DISABLE=1 \
+    CC_MCP_MISDIAGNOSIS_MODE=strict \
+    bash "$HOOK" >/dev/null 2>/dev/null || DISABLE_EXIT=$?
+if [ "$DISABLE_EXIT" -eq 0 ]; then
+    echo "PASS: 2.1 DISABLE=1 bypasses misdiagnosis check even in strict mode"
+    PASS=$((PASS + 1))
+else
+    echo "FAIL: 2.1 DISABLE=1 should exit 0 (got $DISABLE_EXIT)"
+    FAIL=$((FAIL + 1))
+fi
+
+echo "=== Group 3: silent / non-matching turns ==="
+
+run_case "3.1 turn with no MCP mention exits 0" \
+    0 "$INSTALLED_FIXTURE" advisory "" \
+    "Read the file and edit line 5."
+
+run_case "3.2 turn that successfully used Slack tools exits 0" \
+    0 "$INSTALLED_FIXTURE" advisory "" \
+    "I sent the Slack message to #ops. Anything else?"
+
+run_case "3.3 turn that talks about MCP without misdiagnosis exits 0" \
+    0 "$INSTALLED_FIXTURE" advisory "" \
+    "The MCP protocol uses JSON-RPC over stdio."
+
+echo "=== Group 4: misdiagnosis matches (advisory mode, exit 0) ==="
+
+run_case "4.1 'Slack Connector isn't installed' fires advisory" \
+    0 "$INSTALLED_FIXTURE" advisory "MCP MISDIAGNOSIS LIKELY" \
+    "It looks like the Slack Connector isn't installed. Please install it first."
+
+run_case "4.2 'Slack Plugin needs to be installed' fires advisory" \
+    0 "$INSTALLED_FIXTURE" advisory "MCP MISDIAGNOSIS LIKELY" \
+    "The Slack Plugin needs to be installed before I can post."
+
+run_case "4.3 'install the Slack Connector first' fires advisory" \
+    0 "$INSTALLED_FIXTURE" advisory "MCP MISDIAGNOSIS LIKELY" \
+    "You need to install the Slack Connector first."
+
+run_case "4.4 'MCP server is not configured' fires advisory" \
+    0 "$INSTALLED_FIXTURE" advisory "MCP MISDIAGNOSIS LIKELY" \
+    "The MCP server is not configured. Set it up in settings.json."
+
+run_case "4.5 'MCP tools aren't available' fires advisory" \
+    0 "$INSTALLED_FIXTURE" advisory "MCP MISDIAGNOSIS LIKELY" \
+    "The MCP tools aren't available in this session."
+
+run_case "4.6 advisory mentions the actual recovery path" \
+    0 "$INSTALLED_FIXTURE" advisory "Open a new chat in the same Claude Code window" \
+    "The Slack Connector isn't installed."
+
+run_case "4.7 advisory references #60428" \
+    0 "$INSTALLED_FIXTURE" advisory "#60428" \
+    "The Slack Connector isn't installed."
+
+run_case "4.8 advisory lists installed connectors" \
+    0 "$INSTALLED_FIXTURE" advisory "slack@claude-plugins-official" \
+    "The Slack Connector isn't installed."
+
+echo "=== Group 5: name-matching ==="
+
+run_case "5.1 specifically names matched installed connector" \
+    0 "$INSTALLED_FIXTURE" advisory "Specifically, 'slack@claude-plugins-official' is already installed" \
+    "The Slack Connector isn't installed."
+
+run_case "5.2 named connector not in installed set: cautions about name" \
+    0 "$INSTALLED_FIXTURE" advisory "double-check the name before" \
+    "The Notion Connector isn't installed."
+
+echo "=== Group 6: strict mode ==="
+
+run_case "6.1 strict mode: misdiagnosis + installed → exit 2" \
+    2 "$INSTALLED_FIXTURE" strict "MCP MISDIAGNOSIS LIKELY" \
+    "The Slack Connector isn't installed."
+
+run_case "6.2 strict mode: no misdiagnosis → exit 0" \
+    0 "$INSTALLED_FIXTURE" strict "" \
+    "Slack message sent."
+
+run_case "6.3 strict mode: misdiagnosis + nothing installed → exit 0" \
+    0 "$EMPTY_FIXTURE" strict "" \
+    "The Slack Connector isn't installed."
+
+echo "=== Group 7: settings shapes ==="
+
+run_case "7.1 mcpServers shape: misdiagnosis fires" \
+    0 "$MCPSERVERS_FIXTURE" advisory "MCP MISDIAGNOSIS LIKELY" \
+    "The Slack Connector isn't installed."
+
+run_case "7.2 missing settings.json: stay silent (no false-positive)" \
+    0 missing advisory "" \
+    "The Slack Connector isn't installed."
+
+run_case "7.3 empty settings.json: stay silent (nothing to contradict)" \
+    0 "$EMPTY_FIXTURE" advisory "" \
+    "The Slack Connector isn't installed."
+
+echo ""
+echo "============================================================"
+echo "RESULTS: $PASS passed, $FAIL failed, $((PASS + FAIL)) total"
+echo "============================================================"
+
+[ "$FAIL" -eq 0 ]

package/tests/test-mcp-orphan-leak-warner.sh

@@ -0,0 +1,71 @@
+#!/bin/bash
+# Tests for mcp-orphan-leak-warner.sh
+HOOK="$(cd "$(dirname "$0")/../examples" && pwd)/mcp-orphan-leak-warner.sh"
+PASS=0
+FAIL=0
+
+run_test() {
+  local desc="$1" result="$2"
+  if [ "$result" = "pass" ]; then echo "  PASS: $desc"; PASS=$((PASS + 1));
+  else echo "  FAIL: $desc"; FAIL=$((FAIL + 1)); fi
+}
+
+# Spawn N fake "orphan" MCP servers: setsid detaches them so they reparent to
+# PID 1, and exec -a gives them an MCP-signature argv. Track PIDs to clean up.
+# Truly orphan the fake server: a subshell backgrounds it and exits immediately,
+# so the sleep reparents to PID 1 (what the hook keys on). exec -a gives it an
+# MCP-signature argv. A plain `setsid ... &` would NOT work — the test shell
+# stays alive, so the child keeps PPID=test-shell, not 1.
+spawn() {
+  ( setsid bash -c "exec -a \"$1\" sleep 120" & ) 2>/dev/null
+}
+cleanup() {
+  for p in $(ps -eo pid,comm 2>/dev/null | awk '$2=="sleep"{print $1}'); do
+    # only kill sleeps whose argv we set (MCP signature)
+    args=$(ps -o args= -p "$p" 2>/dev/null)
+    case "$args" in *modelcontextprotocol*|*mcp-server*) kill -TERM "$p" 2>/dev/null ;; esac
+  done
+}
+
+# run hook; print "exit|stderr_line_count". MIN_AGE=0 so young fakes count.
+run() {
+  local err rc
+  err=$(printf '{}' | CC_MCP_ORPHAN_MIN_AGE=0 bash "$HOOK" 2>&1 1>/dev/null); rc=$?
+  echo "$rc|$(printf '%s' "$err" | grep -c .)"
+}
+
+echo "Testing mcp-orphan-leak-warner.sh"
+echo "================================="
+
+# 1. No orphans → silent (exit 0, no stderr).
+cleanup; sleep 1
+R=$(run)
+[ "${R%%|*}" = "0" ] && [ "${R##*|}" = "0" ] && run_test "no orphans → silent" pass || run_test "no orphans → silent ($R)" fail
+
+# 2. Below threshold (2 < default 3) → still silent.
+spawn "npx @modelcontextprotocol/server-a mcp"; spawn "uvx mcp-server-b"; sleep 1
+R=$(run)
+[ "${R%%|*}" = "0" ] && [ "${R##*|}" = "0" ] && run_test "2 orphans (< min 3) → silent" pass || run_test "below threshold → silent ($R)" fail
+
+# 3. At threshold (3) → warns (non-empty stderr, still exit 0 advisory).
+spawn "node mcp-server-c modelcontextprotocol"; sleep 1
+R=$(run)
+[ "${R%%|*}" = "0" ] && [ "${R##*|}" -gt 0 ] && run_test "3 orphans → warns (advisory, exit 0)" pass || run_test "at threshold → warns ($R)" fail
+
+# 4. Never kills: the orphans are still alive after the hook ran.
+ALIVE=$(ps -eo args= 2>/dev/null | grep -cE 'mcp-server-|@modelcontextprotocol')
+[ "$ALIVE" -ge 3 ] && run_test "advisory only — orphans not killed" pass || run_test "advisory only ($ALIVE alive)" fail
+
+# 5. A legitimate PID-1 daemon WITHOUT an MCP signature is not counted.
+setsid bash -c 'exec -a "node /opt/myapp/server.js --port 9999" sleep 120' & disown
+sleep 1
+BEFORE=$(printf '{}' | CC_MCP_ORPHAN_MIN_AGE=0 bash "$HOOK" 2>&1 1>/dev/null | grep -oE '^NOTE: [0-9]+' | grep -oE '[0-9]+')
+# killing the non-MCP daemon should not change the count
+NONMCP=$(ps -eo pid,args= 2>/dev/null | grep 'myapp/server.js' | grep -v grep | awk '{print $1}' | head -1)
+[ -n "${BEFORE:-}" ] && [ "${BEFORE}" = "3" ] && run_test "non-MCP PID-1 daemon excluded (count stays 3)" pass || run_test "non-MCP excluded (count=${BEFORE:-?})" fail
+[ -n "$NONMCP" ] && kill -TERM "$NONMCP" 2>/dev/null
+
+cleanup; sleep 1
+echo ""
+echo "Results: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]