cc-safe-setup 29.8.0 → 30.0.5

package/tests/test-subagent-tool-allowlist-enforcer.sh

@@ -0,0 +1,62 @@
+#!/bin/bash
+# Tests for subagent-tool-allowlist-enforcer.sh (Issue #55653 prevention)
+HOOK="examples/subagent-tool-allowlist-enforcer.sh"
+PASS=0 FAIL=0
+
+assert_contains() { if echo "$2" | grep -q "$3"; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (expected '$3')"; fi; }
+assert_not_contains() { if ! echo "$2" | grep -q "$3"; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (unexpected '$3')"; fi; }
+assert_exit() { if [ "$2" = "$3" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (expected exit $3, got $2)"; fi; }
+
+# Test 1: Empty prompt should silently pass
+OUT=$(echo '{"tool_input":{"prompt":""}}' | bash "$HOOK" 2>&1)
+RC=$?
+assert_not_contains "empty prompt no warning" "$OUT" "Subagent tool boundary"
+assert_exit "empty prompt exit 0" "$RC" "0"
+
+# Test 2: Vague prompt should warn on all 3 checks
+OUT=$(echo '{"tool_input":{"prompt":"please investigate the auth flow"}}' | bash "$HOOK" 2>&1)
+RC=$?
+assert_contains "vague warns allowed tools" "$OUT" "No allowed tool set"
+assert_contains "vague warns forbidden tools" "$OUT" "No forbidden tools"
+assert_contains "vague warns verification" "$OUT" "No parent verification"
+assert_contains "vague references issue" "$OUT" "#55653"
+assert_exit "vague exit 0 advisory" "$RC" "0"
+
+# Test 3: Allowed tools named, other 2 missing
+OUT=$(echo '{"tool_input":{"prompt":"You can use Read and Grep. Investigate src/auth/login.ts."}}' | bash "$HOOK" 2>&1)
+assert_not_contains "allowed only no allowed warning" "$OUT" "No allowed tool set"
+assert_contains "allowed only warns forbidden" "$OUT" "No forbidden tools"
+assert_contains "allowed only warns verification" "$OUT" "No parent verification"
+
+# Test 4: Read-only constraint named, other 2 missing
+OUT=$(echo '{"tool_input":{"prompt":"This is read-only. Run a task."}}' | bash "$HOOK" 2>&1)
+assert_contains "read-only only warns allowed" "$OUT" "No allowed tool set"
+assert_not_contains "read-only only no forbidden warning" "$OUT" "No forbidden tools"
+assert_contains "read-only only warns verification" "$OUT" "No parent verification"
+
+# Test 5: Verification step named, other 2 missing
+OUT=$(echo '{"tool_input":{"prompt":"Investigate something. I will verify with stat."}}' | bash "$HOOK" 2>&1)
+assert_contains "verify only warns allowed" "$OUT" "No allowed tool set"
+assert_contains "verify only warns forbidden" "$OUT" "No forbidden tools"
+assert_not_contains "verify only no verification warning" "$OUT" "No parent verification"
+
+# Test 6: All 3 boundary instructions present, no warning
+OUT=$(echo '{"tool_input":{"prompt":"You can use Read and Grep. Do not write or edit any file. I will verify the result with file stat. Investigate src/auth/login.ts."}}' | bash "$HOOK" 2>&1)
+RC=$?
+assert_not_contains "well-formed no warning" "$OUT" "Subagent tool boundary"
+assert_exit "well-formed exit 0" "$RC" "0"
+
+# Test 7: Strict mode blocks vague prompts
+OUT=$(echo '{"tool_input":{"prompt":"investigate something"}}' | CC_SUBAGENT_TOOL_REQUIRE_ALL=1 bash "$HOOK" 2>&1)
+RC=$?
+assert_contains "strict mode warns" "$OUT" "Subagent tool boundary"
+assert_exit "strict mode blocks (exit 2)" "$RC" "2"
+
+# Test 8: Missing prompt field should silently pass
+OUT=$(echo '{}' | bash "$HOOK" 2>&1)
+RC=$?
+assert_not_contains "missing prompt no warning" "$OUT" "Subagent tool boundary"
+assert_exit "missing prompt exit 0" "$RC" "0"
+
+echo "Results: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/tests/test-subagent-tool-call-limiter.sh

@@ -0,0 +1,97 @@
+#!/bin/bash
+# Tests for subagent-tool-call-limiter.sh
+#
+# 2026-08-09 新規。このhookには**テストが1本も無かった**。
+#
+# 旧実装は $PPID(親プロセスのID)をセッションの識別子として使っていた。
+# 遮断そのものは動く(親が安定していれば $PPID は持続する)。
+# 残る欠陥は「$PPID はセッションの識別子ではない」こと:
+#   同じ親から複数のセッションが走るとカウンターが混ざる。
+#   実測(修正前) = 同じ親から session_id が sX と sY の呼び出しを6回ずつ交互に流すと、
+#   カウンターファイルは1個だけで値は12(=6+6)。片方が上限を使い切ると、
+#   もう片方は何もしていなくても遮断される。
+# 修正後は session_id ごとに分ける。
+#
+# ★このテストを書く過程で自分の測定を1つ取り下げた。最初「200回叩いて遮断0回=
+#   この制限は一度も働いていない」と測ったが、それはこちらが $( ) の中で hook を
+#   呼んだせいで呼び出しごとに別のサブシェルが親になっていたためで、
+#   仕掛けが作った結果だった。親を固定して測り直すと5回ちゃんと遮断する。
+#   だからこのテストは「遮断が動くこと」と「セッションが独立すること」の両方を見る。
+
+HOOK="examples/subagent-tool-call-limiter.sh"
+PASS=0 FAIL=0
+ok() { PASS=$((PASS+1)); }
+ng() { FAIL=$((FAIL+1)); echo "FAIL: $1"; }
+assert_eq() { if [ "$2" = "$3" ]; then ok; else ng "$1 (expected '$3', got '$2')"; fi; }
+
+SID="test-limiter-$$-$RANDOM"
+J="{\"session_id\":\"$SID\",\"tool_name\":\"Task\",\"tool_input\":{}}"
+CF="/tmp/claude-tool-call-counter-$SID"
+rm -f "$CF"
+
+# 上限を10にして15回叩く
+blocked=0
+for i in $(seq 1 15); do
+  printf '%s' "$J" | CC_MAX_TOOL_CALLS=10 bash "$HOOK" >/dev/null 2>&1
+  [ $? -eq 2 ] && blocked=$((blocked+1))
+done
+
+# 回帰1: 上限を超えたら遮断する(修正前は0回だった)
+assert_eq "上限10で15回叩くと11..15回目の5回が遮断される" "$blocked" "5"
+
+# 回帰2: カウンターが呼び出しをまたいで貯まる(修正前は毎回1にリセットされていた)
+# ★2026-08-27に期待値を 15 → 10 へ変えた。挙動の変更が意図的なため。
+#   記録を遮断の判定より後ろへ移したので、遮断された呼び出しはカウンターを進めない。
+#   前は遮断されるたびに 11,12,…15 と増え、案内を読んで再試行するほど数字が悪化した。
+#   この試験が守りたい「呼び出しをまたいで貯まる」(修正前は毎回1)は 10 でも守られている。
+assert_eq "カウンターが上限で止まる(遮断された5回は加算されない)" "$(cat "$CF" 2>/dev/null)" "10"
+
+# 回帰2b: 遮断された状態で何度叩いてもカウンターが動かない(再試行で待ちが延びない)
+before2b=$(cat "$CF" 2>/dev/null)
+for i in 1 2 3; do printf '%s' "$J" | CC_MAX_TOOL_CALLS=10 bash "$HOOK" >/dev/null 2>&1; done
+assert_eq "遮断中の再試行はカウンターを動かさない" "$(cat "$CF" 2>/dev/null)" "$before2b"
+
+# 回帰3: カウンターのファイルはセッションにつき1個(修正前は呼び出しごとに1個increaseしていた)
+assert_eq "ファイルはセッションにつき1個" "$(ls /tmp/claude-tool-call-counter-$SID 2>/dev/null | wc -l)" "1"
+
+# 回帰4: 別セッションは独立して数える
+SID2="test-limiter2-$$-$RANDOM"
+J2="{\"session_id\":\"$SID2\",\"tool_name\":\"Task\",\"tool_input\":{}}"
+CF2="/tmp/claude-tool-call-counter-$SID2"
+rm -f "$CF2"
+printf '%s' "$J2" | CC_MAX_TOOL_CALLS=10 bash "$HOOK" >/dev/null 2>&1
+rc2=$?
+assert_eq "別セッションの1回目は遮断されない" "$rc2" "0"
+assert_eq "別セッションのカウンターは1" "$(cat "$CF2" 2>/dev/null)" "1"
+
+# 上限内は素通しする
+SID3="test-limiter3-$$-$RANDOM"
+J3="{\"session_id\":\"$SID3\",\"tool_name\":\"Task\",\"tool_input\":{}}"
+CF3="/tmp/claude-tool-call-counter-$SID3"
+rm -f "$CF3"
+printf '%s' "$J3" | CC_MAX_TOOL_CALLS=100 bash "$HOOK" >/dev/null 2>&1
+assert_eq "上限内は exit 0" "$?" "0"
+
+# 遮断のメッセージが理由を述べる
+echo "10" > "$CF3"
+MSG=$(printf '%s' "$J3" | CC_MAX_TOOL_CALLS=10 bash "$HOOK" 2>&1 >/dev/null)
+if echo "$MSG" | grep -q "limit"; then ok; else ng "遮断のメッセージが上限に触れる"; fi
+
+# 回帰5 (本命): 同じ親プロセスから2つのセッションを交互に流してもカウンターが混ざらない。
+# これが旧実装($PPID をセッション識別子にしていた)で壊れていた点。
+# 修正前の実測 = ファイル1個・値12(=6+6)。片方が上限を使い切るともう片方も遮断された。
+SX="test-mix-x-$$-$RANDOM"; SY="test-mix-y-$$-$RANDOM"
+JX="{\"session_id\":\"$SX\",\"tool_name\":\"Task\",\"tool_input\":{}}"
+JY="{\"session_id\":\"$SY\",\"tool_name\":\"Task\",\"tool_input\":{}}"
+rm -f "/tmp/claude-tool-call-counter-$SX" "/tmp/claude-tool-call-counter-$SY"
+for i in $(seq 1 6); do
+  printf '%s' "$JX" | CC_MAX_TOOL_CALLS=10 bash "$HOOK" >/dev/null 2>&1
+  printf '%s' "$JY" | CC_MAX_TOOL_CALLS=10 bash "$HOOK" >/dev/null 2>&1
+done
+assert_eq "同じ親でもセッションXは6" "$(cat "/tmp/claude-tool-call-counter-$SX" 2>/dev/null)" "6"
+assert_eq "同じ親でもセッションYは6" "$(cat "/tmp/claude-tool-call-counter-$SY" 2>/dev/null)" "6"
+rm -f "/tmp/claude-tool-call-counter-$SX" "/tmp/claude-tool-call-counter-$SY"
+
+rm -f "$CF" "$CF2" "$CF3"
+echo "Results: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/tests/test-subscription-api-billing-warner.sh

@@ -0,0 +1,138 @@
+#!/bin/bash
+# Tests for subscription-api-billing-warner.sh
+HOOK="examples/subscription-api-billing-warner.sh"
+PASS=0 FAIL=0
+
+assert_contains() { if echo "$2" | grep -q "$3"; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (expected '$3')"; fi; }
+assert_not_contains() { if ! echo "$2" | grep -q "$3"; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (unexpected '$3')"; fi; }
+assert_exit() { if [ "$2" = "$3" ]; then PASS=$((PASS+1)); else FAIL=$((FAIL+1)); echo "FAIL: $1 (expected exit $3, got $2)"; fi; }
+
+HOOK_ABS="$PWD/$HOOK"
+
+# Controlled temp settings files
+TMP=$(mktemp -d)
+trap 'rm -rf "$TMP"' EXIT
+EMPTY_SETTINGS="$TMP/empty-settings.json"
+printf '{"hooks":{}}' > "$EMPTY_SETTINGS"
+HELPER_SETTINGS="$TMP/helper-settings.json"
+printf '{"apiKeyHelper":"/usr/local/bin/get-key.sh","permissions":{}}' > "$HELPER_SETTINGS"
+NOFILE="$TMP/does-not-exist.json"
+
+# Base env wrapper: clears the three signals so "absent" is deterministic
+# even though this test may run inside a Claude Code session that sets them.
+run_clean() { env -u ANTHROPIC_API_KEY -u ANTHROPIC_AUTH_TOKEN -u ANTHROPIC_ACCOUNT_LABEL "$@"; }
+
+# Test 1: nothing set, empty settings → silent pass
+OUT=$(run_clean CC_SUB_BILLING_SETTINGS_OVERRIDE="$EMPTY_SETTINGS" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_not_contains "clean env no advisory" "$OUT" "API / purchased credits"
+assert_exit "clean env exit 0" "$RC" "0"
+
+# Test 2: ANTHROPIC_API_KEY set → advisory + exit 0
+# (placeholder value deliberately NOT in Anthropic key format to avoid
+#  secret-scanning false positives; the hook never reads the value anyway)
+OUT=$(run_clean ANTHROPIC_API_KEY="dummy-placeholder-LEAKCANARY42" \
+      CC_SUB_BILLING_SETTINGS_OVERRIDE="$NOFILE" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_contains "api key triggers advisory" "$OUT" "API / purchased credits"
+assert_contains "advisory names the env var" "$OUT" "ANTHROPIC_API_KEY is set"
+assert_contains "advisory cites #64613" "$OUT" "#64613"
+assert_exit "api key advisory exit 0" "$RC" "0"
+
+# Test 3: hook never prints the key value (the canary must not leak)
+assert_not_contains "key value never printed" "$OUT" "LEAKCANARY42"
+
+# Test 4: ANTHROPIC_AUTH_TOKEN set → advisory
+OUT=$(run_clean ANTHROPIC_AUTH_TOKEN="tok-abc" \
+      CC_SUB_BILLING_SETTINGS_OVERRIDE="$NOFILE" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_contains "auth token triggers advisory" "$OUT" "ANTHROPIC_AUTH_TOKEN is set"
+assert_exit "auth token exit 0" "$RC" "0"
+
+# Test 5: apiKeyHelper in settings → advisory naming the file
+OUT=$(run_clean CC_SUB_BILLING_SETTINGS_OVERRIDE="$HELPER_SETTINGS" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_contains "apiKeyHelper triggers advisory" "$OUT" "apiKeyHelper is configured"
+assert_contains "apiKeyHelper names the file" "$OUT" "helper-settings.json"
+assert_exit "apiKeyHelper exit 0" "$RC" "0"
+
+# Test 6: settings without apiKeyHelper → no advisory from that source
+OUT=$(run_clean CC_SUB_BILLING_SETTINGS_OVERRIDE="$EMPTY_SETTINGS" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_not_contains "empty settings no advisory" "$OUT" "apiKeyHelper is configured"
+
+# Test 7: CC_SUB_BILLING_DISABLE=1 silences even with key set
+OUT=$(run_clean ANTHROPIC_API_KEY="sk-x" CC_SUB_BILLING_DISABLE=1 \
+      CC_SUB_BILLING_SETTINGS_OVERRIDE="$HELPER_SETTINGS" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_not_contains "disable suppresses advisory" "$OUT" "API / purchased credits"
+assert_exit "disable exit 0" "$RC" "0"
+
+# Test 8: ANTHROPIC_ACCOUNT_LABEL set → silent (deliberate API use)
+OUT=$(env -u ANTHROPIC_API_KEY -u ANTHROPIC_AUTH_TOKEN \
+      ANTHROPIC_API_KEY="sk-x" ANTHROPIC_ACCOUNT_LABEL="work" \
+      CC_SUB_BILLING_SETTINGS_OVERRIDE="$HELPER_SETTINGS" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_not_contains "account label suppresses advisory" "$OUT" "API / purchased credits"
+assert_exit "account label exit 0" "$RC" "0"
+
+# Test 9: advisory points to /status and the refund path
+OUT=$(run_clean ANTHROPIC_API_KEY="sk-x" \
+      CC_SUB_BILLING_SETTINGS_OVERRIDE="$NOFILE" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_contains "advisory points to /status" "$OUT" "/status"
+assert_contains "advisory points to refund path" "$OUT" "support.claude.com"
+assert_contains "advisory names silence path" "$OUT" "CC_SUB_BILLING_DISABLE"
+
+# Test 10: stdin payload consumed without hanging
+PAYLOAD='{"hook_event_name":"SessionStart","session_id":"abc"}'
+OUT=$(echo "$PAYLOAD" | run_clean ANTHROPIC_API_KEY="sk-x" \
+      CC_SUB_BILLING_SETTINGS_OVERRIDE="$NOFILE" \
+      bash "$HOOK_ABS" 2>&1); RC=$?
+assert_contains "stdin consumed, advisory still fires" "$OUT" "API / purchased credits"
+assert_exit "stdin path exit 0" "$RC" "0"
+
+# Test 11: both env var and apiKeyHelper → advisory lists both reasons
+OUT=$(run_clean ANTHROPIC_API_KEY="sk-x" \
+      CC_SUB_BILLING_SETTINGS_OVERRIDE="$HELPER_SETTINGS" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_contains "both sources: env var listed" "$OUT" "ANTHROPIC_API_KEY is set"
+assert_contains "both sources: helper listed" "$OUT" "apiKeyHelper is configured"
+assert_exit "both sources exit 0" "$RC" "0"
+
+# Test 12: empty-string env var is treated as not set
+OUT=$(run_clean ANTHROPIC_API_KEY="" \
+      CC_SUB_BILLING_SETTINGS_OVERRIDE="$EMPTY_SETTINGS" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_not_contains "empty api key no advisory" "$OUT" "API / purchased credits"
+assert_exit "empty api key exit 0" "$RC" "0"
+
+# Test 13: multiple settings paths (colon-separated), one has helper
+OUT=$(run_clean CC_SUB_BILLING_SETTINGS_OVERRIDE="$EMPTY_SETTINGS:$HELPER_SETTINGS" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_contains "multi-path finds helper" "$OUT" "apiKeyHelper is configured"
+assert_exit "multi-path exit 0" "$RC" "0"
+
+# Test 14: disable wins even with stdin payload
+OUT=$(echo "$PAYLOAD" | run_clean ANTHROPIC_API_KEY="sk-x" CC_SUB_BILLING_DISABLE=1 \
+      CC_SUB_BILLING_SETTINGS_OVERRIDE="$HELPER_SETTINGS" \
+      bash "$HOOK_ABS" 2>&1); RC=$?
+assert_not_contains "disable with stdin silent" "$OUT" "API / purchased credits"
+assert_exit "disable with stdin exit 0" "$RC" "0"
+
+# Test 15: apiKeyHelper present but empty string value → not triggered
+EMPTYHELPER="$TMP/empty-helper.json"
+printf '{"apiKeyHelper":""}' > "$EMPTYHELPER"
+OUT=$(run_clean CC_SUB_BILLING_SETTINGS_OVERRIDE="$EMPTYHELPER" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_not_contains "empty apiKeyHelper value no advisory" "$OUT" "apiKeyHelper is configured"
+assert_exit "empty apiKeyHelper exit 0" "$RC" "0"
+
+# Test 16: unreadable/missing settings path is skipped silently (no error)
+OUT=$(run_clean CC_SUB_BILLING_SETTINGS_OVERRIDE="$NOFILE" \
+      bash "$HOOK_ABS" </dev/null 2>&1); RC=$?
+assert_not_contains "missing settings no advisory" "$OUT" "apiKeyHelper is configured"
+assert_exit "missing settings exit 0" "$RC" "0"
+
+echo "Results: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

package/tests/test-subscription-bypass-detector.sh

@@ -0,0 +1,255 @@
+#!/bin/bash
+# Tests for subscription-bypass-detector.sh
+# Run: bash tests/test-subscription-bypass-detector.sh
+set -uo pipefail
+
+PASS=0
+FAIL=0
+HOOK="$(cd "$(dirname "$0")/.." && pwd)/examples/subscription-bypass-detector.sh"
+WORK_DIR=$(mktemp -d)
+trap 'rm -rf "$WORK_DIR"' EXIT
+
+run_hook() {
+    local home_dir="$1"
+    local cwd_dir="$2"
+    local extra_env="${3:-}"
+    if [ -n "$extra_env" ]; then
+        echo '{}' | env -i HOME="$home_dir" PATH="$PATH" $extra_env bash -c "cd \"$cwd_dir\" && \"$HOOK\"" 2>&1
+    else
+        echo '{}' | env -i HOME="$home_dir" PATH="$PATH" bash -c "cd \"$cwd_dir\" && \"$HOOK\"" 2>&1
+    fi
+}
+
+assert_silent() {
+    local label="$1"
+    local output="$2"
+    if [ -z "$output" ]; then
+        PASS=$((PASS + 1))
+        echo "  ✓ $label"
+    else
+        FAIL=$((FAIL + 1))
+        echo "  ✗ $label"
+        echo "    expected silent, got: ${output:0:200}"
+    fi
+}
+
+assert_emits_warning() {
+    local label="$1"
+    local output="$2"
+    if echo "$output" | jq -e '.hookSpecificOutput.additionalContext' >/dev/null 2>&1; then
+        local ctx
+        ctx=$(echo "$output" | jq -r '.hookSpecificOutput.additionalContext')
+        if echo "$ctx" | grep -q "ANTHROPIC_API_KEY detected"; then
+            PASS=$((PASS + 1))
+            echo "  ✓ $label"
+        else
+            FAIL=$((FAIL + 1))
+            echo "  ✗ $label (warning text not as expected)"
+            echo "    got context start: ${ctx:0:200}"
+        fi
+    else
+        FAIL=$((FAIL + 1))
+        echo "  ✗ $label (no hookSpecificOutput)"
+        echo "    got: ${output:0:200}"
+    fi
+}
+
+assert_source_in_warning() {
+    local label="$1"
+    local output="$2"
+    local expected_substr="$3"
+    if echo "$output" | jq -e '.hookSpecificOutput.additionalContext' >/dev/null 2>&1; then
+        local ctx
+        ctx=$(echo "$output" | jq -r '.hookSpecificOutput.additionalContext')
+        if echo "$ctx" | grep -qF "$expected_substr"; then
+            PASS=$((PASS + 1))
+            echo "  ✓ $label"
+        else
+            FAIL=$((FAIL + 1))
+            echo "  ✗ $label (source not surfaced)"
+            echo "    expected substring: $expected_substr"
+            echo "    got: ${ctx:0:400}"
+        fi
+    else
+        FAIL=$((FAIL + 1))
+        echo "  ✗ $label (no output)"
+    fi
+}
+
+echo "=== Silent cases (no API key in env, no dotenv) ==="
+
+H1="$WORK_DIR/home1"
+mkdir -p "$H1" "$H1/.claude"
+OUT=$(run_hook "$H1" "$H1")
+assert_silent "no env, no dotenv files" "$OUT"
+
+# Empty dotenv files
+touch "$H1/.env"
+touch "$H1/.claude/.env"
+OUT=$(run_hook "$H1" "$H1")
+assert_silent "empty dotenv files" "$OUT"
+
+# Dotenv has other keys but not ANTHROPIC_API_KEY
+echo "OTHER_KEY=value" > "$H1/.env"
+echo "FOO=bar" > "$H1/.claude/.env"
+OUT=$(run_hook "$H1" "$H1")
+assert_silent "dotenv with unrelated keys only" "$OUT"
+
+echo ""
+echo "=== Detection cases ==="
+
+# Process env has ANTHROPIC_API_KEY
+H2="$WORK_DIR/home2"
+mkdir -p "$H2"
+OUT=$(run_hook "$H2" "$H2" "ANTHROPIC_API_KEY=sk-test-123")
+assert_emits_warning "ANTHROPIC_API_KEY in process env" "$OUT"
+assert_source_in_warning "process env source surfaced" "$OUT" "process environment"
+
+# ~/.claude/.env has ANTHROPIC_API_KEY
+H3="$WORK_DIR/home3"
+mkdir -p "$H3/.claude"
+echo "ANTHROPIC_API_KEY=sk-test-456" > "$H3/.claude/.env"
+OUT=$(run_hook "$H3" "$H3")
+assert_emits_warning "ANTHROPIC_API_KEY in ~/.claude/.env" "$OUT"
+assert_source_in_warning "Claude dotenv source surfaced" "$OUT" "Claude per-user dotenv"
+
+# $HOME/.env has ANTHROPIC_API_KEY
+H4="$WORK_DIR/home4"
+mkdir -p "$H4"
+echo "ANTHROPIC_API_KEY=sk-test-789" > "$H4/.env"
+OUT=$(run_hook "$H4" "$H4")
+assert_emits_warning "ANTHROPIC_API_KEY in ~/.env" "$OUT"
+assert_source_in_warning "home dotenv source surfaced" "$OUT" "user home dotenv"
+
+# project .env (PWD) has ANTHROPIC_API_KEY
+H5="$WORK_DIR/home5"
+P5="$WORK_DIR/proj5"
+mkdir -p "$H5" "$P5"
+echo "ANTHROPIC_API_KEY=sk-test-pwd" > "$P5/.env"
+OUT=$(run_hook "$H5" "$P5")
+assert_emits_warning "ANTHROPIC_API_KEY in project .env" "$OUT"
+assert_source_in_warning "project dotenv source surfaced" "$OUT" "project working-directory dotenv"
+
+echo ""
+echo "=== Whitespace handling ==="
+
+# With leading whitespace and quoted value
+H6="$WORK_DIR/home6"
+mkdir -p "$H6/.claude"
+cat > "$H6/.claude/.env" <<EOF
+  ANTHROPIC_API_KEY = "sk-quoted"
+OTHER=ignored
+EOF
+OUT=$(run_hook "$H6" "$H6")
+assert_emits_warning "ANTHROPIC_API_KEY with whitespace and quotes" "$OUT"
+
+# Commented out line should be silent
+H7="$WORK_DIR/home7"
+mkdir -p "$H7/.claude"
+cat > "$H7/.claude/.env" <<EOF
+# ANTHROPIC_API_KEY=sk-commented-out
+OTHER=value
+EOF
+OUT=$(run_hook "$H7" "$H7")
+assert_silent "commented-out ANTHROPIC_API_KEY (silent)" "$OUT"
+
+echo ""
+echo "=== Multiple source detection ==="
+
+H8="$WORK_DIR/home8"
+P8="$WORK_DIR/proj8"
+mkdir -p "$H8/.claude" "$P8"
+echo "ANTHROPIC_API_KEY=sk-from-claude-env" > "$H8/.claude/.env"
+echo "ANTHROPIC_API_KEY=sk-from-pwd-env" > "$P8/.env"
+OUT=$(run_hook "$H8" "$P8" "ANTHROPIC_API_KEY=sk-from-process")
+assert_emits_warning "multiple sources detected" "$OUT"
+# Should mention all three
+assert_source_in_warning "process env in multi" "$OUT" "process environment"
+assert_source_in_warning "Claude dotenv in multi" "$OUT" "Claude per-user dotenv"
+assert_source_in_warning "project dotenv in multi" "$OUT" "project working-directory dotenv"
+
+echo ""
+echo "=== Configuration: disable and acknowledge ==="
+
+H9="$WORK_DIR/home9"
+mkdir -p "$H9"
+OUT=$(run_hook "$H9" "$H9" "ANTHROPIC_API_KEY=sk-test CC_SUBSCRIPTION_BYPASS_DISABLE=1")
+assert_silent "CC_SUBSCRIPTION_BYPASS_DISABLE=1 silences output" "$OUT"
+
+OUT=$(run_hook "$H9" "$H9" "ANTHROPIC_API_KEY=sk-test CC_SUBSCRIPTION_BYPASS_ACK=1")
+assert_silent "CC_SUBSCRIPTION_BYPASS_ACK=1 suppresses warning (intended use)" "$OUT"
+
+# Logging
+LOG_FILE="$WORK_DIR/log.txt"
+OUT=$(run_hook "$H9" "$H9" "ANTHROPIC_API_KEY=sk-test CC_SUBSCRIPTION_BYPASS_LOG=$LOG_FILE")
+assert_emits_warning "logging enabled still emits warning" "$OUT"
+if grep -q "subscription-bypass-detected" "$LOG_FILE" 2>/dev/null; then
+    PASS=$((PASS + 1))
+    echo "  ✓ log file contains detection event"
+else
+    FAIL=$((FAIL + 1))
+    echo "  ✗ log file missing detection event"
+fi
+
+# ACK + LOG together: silent warning but log entry recorded
+LOG_FILE2="$WORK_DIR/log2.txt"
+OUT=$(run_hook "$H9" "$H9" "ANTHROPIC_API_KEY=sk-test CC_SUBSCRIPTION_BYPASS_ACK=1 CC_SUBSCRIPTION_BYPASS_LOG=$LOG_FILE2")
+assert_silent "ACK suppresses warning" "$OUT"
+if grep -q "subscription-bypass-detected" "$LOG_FILE2" 2>/dev/null; then
+    PASS=$((PASS + 1))
+    echo "  ✓ ACK still produces log entry (as documented)"
+else
+    FAIL=$((FAIL + 1))
+    echo "  ✗ ACK did not log entry"
+fi
+
+echo ""
+echo "=== JSON structure ==="
+
+H10="$WORK_DIR/home10"
+mkdir -p "$H10"
+OUT=$(run_hook "$H10" "$H10" "ANTHROPIC_API_KEY=sk-test")
+if echo "$OUT" | jq -e '.' >/dev/null 2>&1; then
+    PASS=$((PASS + 1))
+    echo "  ✓ output is valid JSON"
+else
+    FAIL=$((FAIL + 1))
+    echo "  ✗ output is not valid JSON: ${OUT:0:200}"
+fi
+
+HOOK_NAME=$(echo "$OUT" | jq -r '.hookSpecificOutput.hookEventName // empty' 2>/dev/null)
+if [ "$HOOK_NAME" = "SessionStart" ]; then
+    PASS=$((PASS + 1))
+    echo "  ✓ hookEventName is SessionStart"
+else
+    FAIL=$((FAIL + 1))
+    echo "  ✗ hookEventName missing or wrong: $HOOK_NAME"
+fi
+
+# Check Issue #60093 reference appears in context
+CTX=$(echo "$OUT" | jq -r '.hookSpecificOutput.additionalContext // empty')
+if echo "$CTX" | grep -q "60093"; then
+    PASS=$((PASS + 1))
+    echo "  ✓ context references Issue #60093"
+else
+    FAIL=$((FAIL + 1))
+    echo "  ✗ context missing Issue #60093 reference"
+fi
+
+if echo "$CTX" | grep -q "1,050"; then
+    PASS=$((PASS + 1))
+    echo "  ✓ context references the USD 1,050 case"
+else
+    FAIL=$((FAIL + 1))
+    echo "  ✗ context missing 1,050 reference"
+fi
+
+echo ""
+echo "==============================="
+echo "Total: $((PASS + FAIL))   PASS: $PASS   FAIL: $FAIL"
+echo "==============================="
+
+if [ "$FAIL" -gt 0 ]; then
+    exit 1
+fi
+exit 0