cc-safe-setup 29.8.0 → 30.0.4

package/tests/test-verify-after-publish-reminder.sh

@@ -0,0 +1,184 @@
+#!/bin/bash
+# Tests for verify-after-publish-reminder.sh
+# Run: bash tests/test-verify-after-publish-reminder.sh
+set -euo pipefail
+
+PASS=0
+FAIL=0
+HOOK="$(dirname "$0")/../examples/verify-after-publish-reminder.sh"
+
+# Test exit code (this hook is always non-blocking: exit 0)
+test_hook() {
+    local input="$1" expected_exit="$2" desc="$3"
+    local actual_exit=0
+    echo "$input" | bash "$HOOK" > /dev/null 2>/dev/null || actual_exit=$?
+    if [ "$actual_exit" -eq "$expected_exit" ]; then
+        echo "  PASS: $desc"
+        PASS=$((PASS + 1))
+    else
+        echo "  FAIL: $desc (expected exit $expected_exit, got $actual_exit)"
+        FAIL=$((FAIL + 1))
+    fi
+}
+
+# Test that stderr contains expected reminder text
+test_hook_stderr() {
+    local input="$1" pattern="$2" desc="$3"
+    local stderr
+    stderr=$(echo "$input" | bash "$HOOK" 2>&1 >/dev/null) || true
+    if echo "$stderr" | grep -qE "$pattern"; then
+        echo "  PASS: $desc"
+        PASS=$((PASS + 1))
+    else
+        echo "  FAIL: $desc (pattern not found: $pattern)"
+        echo "         got stderr: $(echo "$stderr" | head -2)"
+        FAIL=$((FAIL + 1))
+    fi
+}
+
+# Test that stderr does NOT contain reminder (silent pass)
+test_hook_silent() {
+    local input="$1" desc="$2"
+    local stderr
+    stderr=$(echo "$input" | bash "$HOOK" 2>&1 >/dev/null) || true
+    if [ -z "$stderr" ]; then
+        echo "  PASS: $desc"
+        PASS=$((PASS + 1))
+    else
+        echo "  FAIL: $desc (expected silent, got: $(echo "$stderr" | head -1))"
+        FAIL=$((FAIL + 1))
+    fi
+}
+
+echo "=== verify-after-publish-reminder.sh tests ==="
+
+# --- Exit code: always 0 (non-blocking) ---
+test_hook '{"tool_input": {"command": "git push origin main"}}' 0 "git push: exit 0 (non-blocking)"
+test_hook '{"tool_input": {"command": "ls -la"}}' 0 "non-publish command: exit 0"
+test_hook '{}' 0 "empty input: exit 0"
+test_hook '{"tool_input": {"command": ""}}' 0 "empty command: exit 0"
+
+# --- Detection: publish commands trigger reminder ---
+test_hook_stderr \
+    '{"tool_input": {"command": "git push origin main"}}' \
+    "verify-after-publish-reminder" \
+    "git push triggers reminder"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "git push origin main"}}' \
+    "git remote" \
+    "git push identifies platform as git remote"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "hashnode-publish article.md"}}' \
+    "Hashnode" \
+    "hashnode-publish identifies Hashnode"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "qiita-post --title foo --body bar"}}' \
+    "Qiita" \
+    "qiita-post identifies Qiita"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "zenn-update --slug abc123"}}' \
+    "Zenn" \
+    "zenn-update identifies Zenn"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "cd ~/projects/zenn-cc-book && git push"}}' \
+    "verify-after-publish-reminder" \
+    "git push from zenn-cc-book repo triggers reminder"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "hatena-post --entry foo.md"}}' \
+    "hatena" \
+    "hatena-post identifies hatena"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "tweet-post --text \"hello\""}}' \
+    "X" \
+    "tweet-post identifies X (Twitter)"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "npm publish"}}' \
+    "npm" \
+    "npm publish identifies npm"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "cargo publish"}}' \
+    "crates.io" \
+    "cargo publish identifies crates.io"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "twine upload dist/*"}}' \
+    "PyPI" \
+    "twine upload identifies PyPI"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "gh release create v1.0.0 --notes \"first\""}}' \
+    "GitHub Release" \
+    "gh release create identifies GitHub Release"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "cdp-bridge eval \"document.querySelector(button).click()\" # Save changes"}}' \
+    "dashboard" \
+    "cdp-bridge Save changes identifies dashboard"
+
+# --- Reminder content: includes verification guidance ---
+test_hook_stderr \
+    '{"tool_input": {"command": "git push origin main"}}' \
+    "verify the persisted state" \
+    "reminder mentions verifying persisted state"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "git push origin main"}}' \
+    "Re-fetch the public URL" \
+    "reminder mentions URL re-fetch"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "git push origin main"}}' \
+    "Rate-limit" \
+    "reminder mentions rate-limit failure mode"
+
+test_hook_stderr \
+    '{"tool_input": {"command": "git push origin main"}}' \
+    "React-controlled input" \
+    "reminder mentions React-controlled input failure mode"
+
+# --- Negative cases: non-publish commands do NOT trigger reminder ---
+test_hook_silent \
+    '{"tool_input": {"command": "ls -la /tmp"}}' \
+    "ls command: silent"
+
+test_hook_silent \
+    '{"tool_input": {"command": "git status"}}' \
+    "git status: silent (no push)"
+
+test_hook_silent \
+    '{"tool_input": {"command": "git pull origin main"}}' \
+    "git pull: silent (no push)"
+
+test_hook_silent \
+    '{"tool_input": {"command": "cat README.md"}}' \
+    "cat command: silent"
+
+test_hook_silent \
+    '{"tool_input": {"command": "echo hello"}}' \
+    "echo command: silent"
+
+# --- Disable env: CC_PUBLISH_VERIFY_DISABLE=1 ---
+ACTUAL_STDERR=$(echo '{"tool_input": {"command": "git push origin main"}}' | CC_PUBLISH_VERIFY_DISABLE=1 bash "$HOOK" 2>&1 >/dev/null || true)
+if [ -z "$ACTUAL_STDERR" ]; then
+    echo "  PASS: CC_PUBLISH_VERIFY_DISABLE=1 suppresses reminder"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: CC_PUBLISH_VERIFY_DISABLE=1 did not suppress reminder"
+    FAIL=$((FAIL + 1))
+fi
+
+echo ""
+echo "Total: $((PASS + FAIL)) | Passed: $PASS | Failed: $FAIL"
+
+if [ "$FAIL" -gt 0 ]; then
+    exit 1
+fi

package/tests/test-version-bump-detector.sh

@@ -0,0 +1,212 @@
+#!/bin/bash
+# Tests for version-bump-detector.sh
+HOOK="$(dirname "$0")/../examples/version-bump-detector.sh"
+PASS=0
+FAIL=0
+
+mktempd() {
+  mktemp -d "${TMPDIR:-/tmp}/cc-vbump-test.XXXXXX"
+}
+
+run_test() {
+  local desc="$1"
+  local result="$2"
+  if [ "$result" = "pass" ]; then
+    echo "  PASS: $desc"
+    PASS=$((PASS + 1))
+  else
+    echo "  FAIL: $desc"
+    FAIL=$((FAIL + 1))
+  fi
+}
+
+echo "Testing version-bump-detector.sh"
+echo "================================="
+
+# Test 1: DISABLE=1 → exit 0, no state file written
+TEST_DIR=$(mktempd)
+STATE="$TEST_DIR/state"
+LOG="$TEST_DIR/log.jsonl"
+echo '{}' | CC_VERSION_BUMP_DISABLE=1 \
+  CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="2.1.143" \
+  bash "$HOOK" 2>/dev/null
+EXIT=$?
+if [ "$EXIT" = "0" ] && [ ! -f "$STATE" ]; then
+  run_test "DISABLE=1 → exit 0, no state written" pass
+else
+  run_test "DISABLE=1 → exit 0, no state written (exit=$EXIT)" fail
+fi
+rm -rf "$TEST_DIR"
+
+# Test 2: First run → records version, no warning, event=first_run logged
+TEST_DIR=$(mktempd)
+STATE="$TEST_DIR/state"
+LOG="$TEST_DIR/log.jsonl"
+OUT=$(echo '{}' | CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="2.1.143" bash "$HOOK" 2>/dev/null)
+STATE_VAL=$(cat "$STATE" 2>/dev/null)
+if [ "$STATE_VAL" = "2.1.143" ] && [ -z "$OUT" ] && grep -q '"event":"first_run"' "$LOG"; then
+  run_test "first run → records version, no warning, event=first_run logged" pass
+else
+  run_test "first run → records version, no warning (state=$STATE_VAL, out=$OUT)" fail
+fi
+rm -rf "$TEST_DIR"
+
+# Test 3: Same version as previous → silent, no log append
+TEST_DIR=$(mktempd)
+STATE="$TEST_DIR/state"
+LOG="$TEST_DIR/log.jsonl"
+echo "2.1.143" > "$STATE"
+echo '{"ts":"2026-05-25T00:00:00Z","version":"2.1.143","event":"first_run"}' > "$LOG"
+BEFORE_LINES=$(wc -l < "$LOG")
+OUT=$(echo '{}' | CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="2.1.143" bash "$HOOK" 2>/dev/null)
+AFTER_LINES=$(wc -l < "$LOG")
+if [ -z "$OUT" ] && [ "$BEFORE_LINES" = "$AFTER_LINES" ]; then
+  run_test "same version → silent, no log append" pass
+else
+  run_test "same version → silent (out=$OUT, before=$BEFORE_LINES after=$AFTER_LINES)" fail
+fi
+rm -rf "$TEST_DIR"
+
+# Test 4: Version bump → warn with previous and current versions, log appended
+TEST_DIR=$(mktempd)
+STATE="$TEST_DIR/state"
+LOG="$TEST_DIR/log.jsonl"
+echo "2.1.143" > "$STATE"
+echo '{"ts":"2026-05-25T00:00:00Z","version":"2.1.143","event":"first_run"}' > "$LOG"
+OUT=$(echo '{}' | CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="2.1.144" bash "$HOOK" 2>/dev/null)
+if echo "$OUT" | grep -q "Previous session: 2.1.143" && \
+   echo "$OUT" | grep -q "Current session:  2.1.144" && \
+   grep -q '"event":"version_bump"' "$LOG" && \
+   grep -q '"previous":"2.1.143"' "$LOG" && \
+   grep -q '"version":"2.1.144"' "$LOG"; then
+  run_test "version bump → warn with both versions, log appended" pass
+else
+  run_test "version bump → warn with both versions (out=$OUT)" fail
+fi
+rm -rf "$TEST_DIR"
+
+# Test 5: Version bump output is valid JSON with hookSpecificOutput
+TEST_DIR=$(mktempd)
+STATE="$TEST_DIR/state"
+LOG="$TEST_DIR/log.jsonl"
+echo "2.1.143" > "$STATE"
+OUT=$(echo '{}' | CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="2.1.144" bash "$HOOK" 2>/dev/null)
+if echo "$OUT" | jq -e '.hookSpecificOutput.hookEventName == "SessionStart"' >/dev/null 2>&1 && \
+   echo "$OUT" | jq -e '.hookSpecificOutput.additionalContext | contains("VERSION BUMP")' >/dev/null 2>&1; then
+  run_test "version bump output is valid JSON with hookSpecificOutput" pass
+else
+  run_test "version bump output is valid JSON (out=$OUT)" fail
+fi
+rm -rf "$TEST_DIR"
+
+# Test 6: Invalid (non-semver) override → silent skip
+TEST_DIR=$(mktempd)
+STATE="$TEST_DIR/state"
+LOG="$TEST_DIR/log.jsonl"
+OUT=$(echo '{}' | CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="not-a-version" bash "$HOOK" 2>/dev/null)
+EXIT=$?
+if [ "$EXIT" = "0" ] && [ ! -f "$STATE" ]; then
+  run_test "non-semver override → silent skip" pass
+else
+  run_test "non-semver override → silent skip (exit=$EXIT)" fail
+fi
+rm -rf "$TEST_DIR"
+
+# Test 7: Empty override → silent skip
+TEST_DIR=$(mktempd)
+STATE="$TEST_DIR/state"
+LOG="$TEST_DIR/log.jsonl"
+OUT=$(echo '{}' | CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="" bash "$HOOK" 2>/dev/null)
+EXIT=$?
+if [ "$EXIT" = "0" ]; then
+  run_test "empty override → silent skip" pass
+else
+  run_test "empty override → silent skip (exit=$EXIT)" fail
+fi
+rm -rf "$TEST_DIR"
+
+# Test 8: Multiple bumps in sequence → log records all transitions
+TEST_DIR=$(mktempd)
+STATE="$TEST_DIR/state"
+LOG="$TEST_DIR/log.jsonl"
+echo '{}' | CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="2.1.143" bash "$HOOK" 2>/dev/null
+echo '{}' | CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="2.1.144" bash "$HOOK" 2>/dev/null
+echo '{}' | CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="2.1.145" bash "$HOOK" 2>/dev/null
+LINE_COUNT=$(wc -l < "$LOG")
+BUMP_COUNT=$(grep -c '"event":"version_bump"' "$LOG")
+FIRST_RUN=$(grep -c '"event":"first_run"' "$LOG")
+if [ "$LINE_COUNT" = "3" ] && [ "$BUMP_COUNT" = "2" ] && [ "$FIRST_RUN" = "1" ]; then
+  run_test "3 sessions with 2 bumps → 1 first_run + 2 version_bump in log" pass
+else
+  run_test "3 sessions with 2 bumps (lines=$LINE_COUNT bumps=$BUMP_COUNT first=$FIRST_RUN)" fail
+fi
+rm -rf "$TEST_DIR"
+
+# Test 9: State file path with nested dir is auto-created
+TEST_DIR=$(mktempd)
+STATE="$TEST_DIR/nested/dir/state"
+LOG="$TEST_DIR/nested/dir/log.jsonl"
+echo '{}' | CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="2.1.143" bash "$HOOK" 2>/dev/null
+if [ -f "$STATE" ] && [ -f "$LOG" ]; then
+  run_test "nested dir paths auto-created" pass
+else
+  run_test "nested dir paths auto-created (state_exists=$([ -f "$STATE" ] && echo yes || echo no))" fail
+fi
+rm -rf "$TEST_DIR"
+
+# Test 10: Warning references upstream cluster issues
+TEST_DIR=$(mktempd)
+STATE="$TEST_DIR/state"
+LOG="$TEST_DIR/log.jsonl"
+echo "2.1.143" > "$STATE"
+OUT=$(echo '{}' | CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="2.1.144" bash "$HOOK" 2>/dev/null)
+if echo "$OUT" | grep -q '158436e88d169406593d55bd84f0d7e9'; then
+  run_test "warning references Pro Max field guide Gist" pass
+else
+  run_test "warning references Pro Max field guide Gist (out=$OUT)" fail
+fi
+rm -rf "$TEST_DIR"
+
+# Test 11: Warning mentions cache-creation-drift-detector as companion
+TEST_DIR=$(mktempd)
+STATE="$TEST_DIR/state"
+LOG="$TEST_DIR/log.jsonl"
+echo "2.1.143" > "$STATE"
+OUT=$(echo '{}' | CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="2.1.144" bash "$HOOK" 2>/dev/null)
+if echo "$OUT" | grep -q 'cache-creation-drift-detector'; then
+  run_test "warning mentions companion cache-creation-drift-detector" pass
+else
+  run_test "warning mentions companion cache-creation-drift-detector (out=$OUT)" fail
+fi
+rm -rf "$TEST_DIR"
+
+# Test 12: Whitespace in state file is tolerated
+TEST_DIR=$(mktempd)
+STATE="$TEST_DIR/state"
+LOG="$TEST_DIR/log.jsonl"
+printf "  2.1.143  \n" > "$STATE"
+OUT=$(echo '{}' | CC_VERSION_BUMP_STATE="$STATE" CC_VERSION_BUMP_LOG="$LOG" \
+  CC_VERSION_BUMP_OVERRIDE="2.1.143" bash "$HOOK" 2>/dev/null)
+if [ -z "$OUT" ]; then
+  run_test "whitespace in state file is tolerated (no false bump)" pass
+else
+  run_test "whitespace in state file (out=$OUT)" fail
+fi
+rm -rf "$TEST_DIR"
+
+echo ""
+echo "Results: $PASS passed, $FAIL failed"
+exit $((FAIL > 0 ? 1 : 0))

package/tests/test-version-regression-warner.sh

@@ -0,0 +1,165 @@
+#!/bin/bash
+# Tests for version-regression-warner.sh
+# Hook addresses issues #59918, #59921, #59942, #59042, #59047.
+set -euo pipefail
+
+HOOK="$(dirname "$0")/../examples/version-regression-warner.sh"
+PASS=0
+FAIL=0
+
+# --- Test 1: disabled flag suppresses output ---
+output=$(echo '{}' | CC_VERSION_WARNER_DISABLE=1 CC_VERSION_WARNER_VERSION=2.1.143 bash "$HOOK")
+if [ -z "$output" ]; then
+    echo "  PASS: disabled flag suppresses output"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: disabled flag should suppress output"
+    FAIL=$((FAIL + 1))
+fi
+
+# --- Test 2: unknown version produces no warning ---
+output=$(echo '{}' | CC_VERSION_WARNER_VERSION=99.99.99 bash "$HOOK")
+if [ -z "$output" ]; then
+    echo "  PASS: unknown version produces no warning"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: unknown version should produce no warning: $output"
+    FAIL=$((FAIL + 1))
+fi
+
+# --- Test 3: v2.1.143 produces warning with all 3 issues ---
+output=$(echo '{}' | CC_VERSION_WARNER_VERSION=2.1.143 bash "$HOOK")
+if echo "$output" | grep -q "v2.1.143"; then
+    echo "  PASS: v2.1.143 produces warning"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: v2.1.143 should produce warning"
+    FAIL=$((FAIL + 1))
+fi
+
+ctx=$(echo "$output" | jq -r '.hookSpecificOutput.additionalContext')
+if echo "$ctx" | grep -q "Issue #59918"; then
+    echo "  PASS: #59918 is mentioned"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: #59918 not mentioned"
+    FAIL=$((FAIL + 1))
+fi
+
+if echo "$ctx" | grep -q "Issue #59921"; then
+    echo "  PASS: #59921 is mentioned"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: #59921 not mentioned"
+    FAIL=$((FAIL + 1))
+fi
+
+if echo "$ctx" | grep -q "Issue #59942"; then
+    echo "  PASS: #59942 is mentioned"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: #59942 not mentioned"
+    FAIL=$((FAIL + 1))
+fi
+
+# --- Test 4: mitigation is included for each issue ---
+if echo "$ctx" | grep -q "Mitigation:"; then
+    echo "  PASS: mitigation guidance is included"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: mitigation guidance not included"
+    FAIL=$((FAIL + 1))
+fi
+
+# --- Test 5: JSON output is valid ---
+if echo "$output" | jq -e '.hookSpecificOutput.additionalContext' > /dev/null 2>&1; then
+    echo "  PASS: JSON output is valid"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: JSON output not valid"
+    FAIL=$((FAIL + 1))
+fi
+
+# --- Test 6: hookEventName is SessionStart ---
+event=$(echo "$output" | jq -r '.hookSpecificOutput.hookEventName // "MISSING"')
+if [ "$event" = "SessionStart" ]; then
+    echo "  PASS: hookEventName is SessionStart"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: hookEventName should be SessionStart, got: $event"
+    FAIL=$((FAIL + 1))
+fi
+
+# --- Test 7: v2.1.141 produces separate warning ---
+output_141=$(echo '{}' | CC_VERSION_WARNER_VERSION=2.1.141 bash "$HOOK")
+if echo "$output_141" | grep -q "v2.1.141"; then
+    echo "  PASS: v2.1.141 produces warning"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: v2.1.141 should produce warning"
+    FAIL=$((FAIL + 1))
+fi
+
+ctx_141=$(echo "$output_141" | jq -r '.hookSpecificOutput.additionalContext')
+if echo "$ctx_141" | grep -q "Issue #59042"; then
+    echo "  PASS: v2.1.141 mentions #59042"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: v2.1.141 should mention #59042"
+    FAIL=$((FAIL + 1))
+fi
+
+# --- Test 8: v2.1.138 (safe version) produces no warning ---
+output=$(echo '{}' | CC_VERSION_WARNER_VERSION=2.1.138 bash "$HOOK")
+if [ -z "$output" ]; then
+    echo "  PASS: safe v2.1.138 produces no warning"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: safe version should produce no warning"
+    FAIL=$((FAIL + 1))
+fi
+
+# --- Test 9: v2.1.143 and v2.1.141 produce DIFFERENT warnings ---
+out_143=$(echo '{}' | CC_VERSION_WARNER_VERSION=2.1.143 bash "$HOOK")
+out_141=$(echo '{}' | CC_VERSION_WARNER_VERSION=2.1.141 bash "$HOOK")
+if [ "$out_143" != "$out_141" ]; then
+    echo "  PASS: v2.1.143 and v2.1.141 produce different warnings"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: v2.1.143 and v2.1.141 should differ"
+    FAIL=$((FAIL + 1))
+fi
+
+# --- Test 10: idempotent ---
+out1=$(echo '{}' | CC_VERSION_WARNER_VERSION=2.1.143 bash "$HOOK")
+out2=$(echo '{}' | CC_VERSION_WARNER_VERSION=2.1.143 bash "$HOOK")
+if [ "$out1" = "$out2" ]; then
+    echo "  PASS: hook is idempotent"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: hook not idempotent"
+    FAIL=$((FAIL + 1))
+fi
+
+# --- Test 11: empty CC_VERSION_WARNER_VERSION falls through to claude detection ---
+# We can't easily mock `claude --version` without altering PATH. We test that
+# the hook does not produce output when CC_VERSION_WARNER_VERSION is set to an
+# obviously-non-bad version. (Empty would cause the env to be unset by bash, so
+# we set a benign version string instead.)
+output=$(echo '{}' | CC_VERSION_WARNER_VERSION=0.0.0 bash "$HOOK")
+if [ -z "$output" ]; then
+    echo "  PASS: benign version produces no warning"
+    PASS=$((PASS + 1))
+else
+    echo "  FAIL: benign version should produce no warning"
+    FAIL=$((FAIL + 1))
+fi
+
+# --- Summary ---
+echo ""
+echo "=================================="
+echo "Tests passed: $PASS"
+echo "Tests failed: $FAIL"
+echo "=================================="
+
+[ "$FAIL" -eq 0 ]

package/tests/test-warn-cron-cost-trap.sh

@@ -0,0 +1,82 @@
+#!/bin/bash
+# Tests for warn-cron-cost-trap.sh
+HOOK="examples/warn-cron-cost-trap.sh"
+PASS=0 FAIL=0
+
+assert_contains() { if echo "$2" | grep -q "$3"; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (expected '$3')"; fi; }
+assert_not_contains() { if echo "$2" | grep -q "$3"; then FAIL=$((FAIL+1)); echo "FAIL: $1 (did not expect '$3')"; else PASS=$((PASS+1)); fi; }
+assert_exit() { if [ "$2" = "$3" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (expected exit $3, got $2)"; fi; }
+
+HOOK_ABS="$PWD/$HOOK"
+WARN="COST TRAP"
+
+# Test 1: */5 recurring -> warns
+OUT=$(echo '{"tool_input":{"cron":"*/5 * * * *","recurring":true}}' | bash "$HOOK_ABS" 2>&1); RC=$?
+assert_exit "step5 exit 0 (advisory)" "$RC" "0"
+assert_contains "step5 warns" "$OUT" "$WARN"
+assert_contains "step5 reports interval 5" "$OUT" "every 5 min"
+
+# Test 2: the #74547 example 7,18,29,40,51 (min gap 11) recurring -> warns
+OUT=$(echo '{"tool_input":{"cron":"7,18,29,40,51 * * * *","recurring":true}}' | bash "$HOOK_ABS" 2>&1); RC=$?
+assert_exit "list11 exit 0" "$RC" "0"
+assert_contains "list11 warns" "$OUT" "$WARN"
+assert_contains "list11 min gap 11" "$OUT" "every 11 min"
+
+# Test 3: every minute -> warns with interval 1
+OUT=$(echo '{"tool_input":{"cron":"* * * * *","recurring":true}}' | bash "$HOOK_ABS" 2>&1)
+assert_contains "everymin warns" "$OUT" "$WARN"
+assert_contains "everymin interval 1" "$OUT" "every 1 min"
+
+# Test 4: hourly 0 * * * * recurring -> safe, no warn
+OUT=$(echo '{"tool_input":{"cron":"0 * * * *","recurring":true}}' | bash "$HOOK_ABS" 2>&1); RC=$?
+assert_exit "hourly exit 0" "$RC" "0"
+assert_not_contains "hourly no warn" "$OUT" "$WARN"
+
+# Test 5: */20 (above default threshold 15) recurring -> no warn
+OUT=$(echo '{"tool_input":{"cron":"*/20 * * * *","recurring":true}}' | bash "$HOOK_ABS" 2>&1)
+assert_not_contains "step20 no warn" "$OUT" "$WARN"
+
+# Test 6: short interval but recurring=false (one-shot) -> no warn
+OUT=$(echo '{"tool_input":{"cron":"*/5 * * * *","recurring":false}}' | bash "$HOOK_ABS" 2>&1)
+assert_not_contains "oneshot no warn" "$OUT" "$WARN"
+
+# Test 6b: short interval with recurring OMITTED -> CronCreate defaults to
+# recurring, so this most-dangerous form must still warn (regression guard
+# for the `recurring // false` default-direction bug).
+OUT=$(echo '{"tool_input":{"cron":"*/5 * * * *"}}' | bash "$HOOK_ABS" 2>&1)
+assert_contains "omitted recurring warns" "$OUT" "$WARN"
+assert_contains "omitted interval 5" "$OUT" "every 5 min"
+
+# Test 7: comma list with a small gap anywhere (0,1,30) -> min gap 1 -> warns
+OUT=$(echo '{"tool_input":{"cron":"0,1,30 * * * *","recurring":true}}' | bash "$HOOK_ABS" 2>&1)
+assert_contains "list gap1 warns" "$OUT" "$WARN"
+
+# Test 8: wraparound gap (55,5 -> gap 10 via wrap) recurring -> warns
+OUT=$(echo '{"tool_input":{"cron":"5,55 * * * *","recurring":true}}' | bash "$HOOK_ABS" 2>&1)
+assert_contains "wrap gap10 warns" "$OUT" "$WARN"
+
+# Test 9: single minute value (30 * * * *) recurring -> hourly -> no warn
+OUT=$(echo '{"tool_input":{"cron":"30 * * * *","recurring":true}}' | bash "$HOOK_ABS" 2>&1)
+assert_not_contains "single no warn" "$OUT" "$WARN"
+
+# Test 9b: minute-field range without step (0-30) fires every minute -> warns interval 1
+OUT=$(echo '{"tool_input":{"cron":"0-30 * * * *","recurring":true}}' | bash "$HOOK_ABS" 2>&1)
+assert_contains "range warns" "$OUT" "$WARN"
+assert_contains "range interval 1" "$OUT" "every 1 min"
+
+# Test 10: no cron field -> exit 0, no warn
+OUT=$(echo '{"tool_input":{}}' | bash "$HOOK_ABS" 2>&1); RC=$?
+assert_exit "nocron exit 0" "$RC" "0"
+assert_not_contains "nocron no warn" "$OUT" "$WARN"
+
+# Test 11: disable env var suppresses warning
+OUT=$(echo '{"tool_input":{"cron":"*/5 * * * *","recurring":true}}' | CC_CRON_COST_TRAP_DISABLE=1 bash "$HOOK_ABS" 2>&1)
+assert_not_contains "disabled no warn" "$OUT" "$WARN"
+
+# Test 12: custom threshold — */20 with threshold 30 warns
+OUT=$(echo '{"tool_input":{"cron":"*/20 * * * *","recurring":true}}' | CC_CRON_COST_TRAP_THRESHOLD_MIN=30 bash "$HOOK_ABS" 2>&1)
+assert_contains "custom threshold warns" "$OUT" "$WARN"
+
+echo ""
+echo "warn-cron-cost-trap: PASS=$PASS FAIL=$FAIL"
+[ "$FAIL" -eq 0 ]