devlog-tracker 0.22.0

package/hooks/scripts/tests/test-lessons-on-off.sh

@@ -0,0 +1,75 @@
+#!/usr/bin/env bash
+# Self-check for lessons-on.sh / lessons-off.sh (docs/design/lessons-mode.md
+# "Enable / disable"). No framework, plain assert-and-exit, matching this
+# repo's existing style.
+set -uo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+TMP_ROOT="$(mktemp -d)"
+trap 'rm -rf "$TMP_ROOT"' EXIT
+export CLAUDE_PROJECT_DIR="$TMP_ROOT"
+FAIL=0
+assert_exit() {
+  local desc="$1" expected="$2" actual="$3"
+  if [ "$actual" -eq "$expected" ]; then echo "PASS: $desc"
+  else echo "FAIL: $desc (expected $expected got $actual)"; FAIL=1; fi
+}
+assert_file() {
+  local desc="$1" path="$2"
+  if [ -f "$path" ]; then echo "PASS: $desc"
+  else echo "FAIL: $desc"; FAIL=1; fi
+}
+assert_not_file() {
+  local desc="$1" path="$2"
+  if [ ! -f "$path" ]; then echo "PASS: $desc"
+  else echo "FAIL: $desc"; FAIL=1; fi
+}
+
+mkdir -p "$TMP_ROOT/.devlog"
+
+# --- lessons-on without the main .enabled switch -> refuses ---------------
+OUT="$(bash "$SCRIPT_DIR/lessons-on.sh")"
+assert_exit "lessons-on without main switch -> exit 0 (advisory refusal, not a hard error)" 0 $?
+case "$OUT" in
+  *"NOT_ENABLED"*) echo "PASS: reports NOT_ENABLED when main switch is off" ;;
+  *) echo "FAIL: expected NOT_ENABLED, got $OUT"; FAIL=1 ;;
+esac
+assert_not_file "no .lessons-enabled created without main switch" "$TMP_ROOT/.devlog/.lessons-enabled"
+
+# --- lessons-on with the main switch present -> enables --------------------
+touch "$TMP_ROOT/.devlog/.enabled"
+OUT="$(bash "$SCRIPT_DIR/lessons-on.sh")"
+assert_exit "lessons-on with main switch -> 0" 0 $?
+assert_file ".lessons-enabled created" "$TMP_ROOT/.devlog/.lessons-enabled"
+case "$OUT" in
+  *"LESSONS_ENABLED="*) echo "PASS: reports LESSONS_ENABLED" ;;
+  *) echo "FAIL: expected LESSONS_ENABLED=..., got $OUT"; FAIL=1 ;;
+esac
+assert_file ".lessons-drift-state created alongside .lessons-enabled" "$TMP_ROOT/.devlog/.lessons-drift-state"
+grep -q '"mismatch_count": 0' "$TMP_ROOT/.devlog/.lessons-drift-state" \
+  && echo "PASS: drift count starts at 0" || { echo "FAIL: drift count not 0"; FAIL=1; }
+grep -q '"threshold": 3' "$TMP_ROOT/.devlog/.lessons-drift-state" \
+  && echo "PASS: drift threshold defaults to 3" || { echo "FAIL: drift threshold not 3"; FAIL=1; }
+
+# --- lessons-off disables, leaves main switch and any lessons files alone --
+echo 'keep me' > "$TMP_ROOT/.devlog/devlog.lessons.foo.md"
+OUT="$(bash "$SCRIPT_DIR/lessons-off.sh")"
+assert_exit "lessons-off -> 0" 0 $?
+case "$OUT" in
+  *"LESSONS_DISABLED"*) echo "PASS: reports LESSONS_DISABLED" ;;
+  *) echo "FAIL: expected LESSONS_DISABLED, got $OUT"; FAIL=1 ;;
+esac
+assert_not_file ".lessons-enabled removed" "$TMP_ROOT/.devlog/.lessons-enabled"
+assert_file "main .enabled untouched" "$TMP_ROOT/.devlog/.enabled"
+assert_file "lessons file untouched" "$TMP_ROOT/.devlog/devlog.lessons.foo.md"
+assert_file ".lessons-drift-state untouched by lessons-off" "$TMP_ROOT/.devlog/.lessons-drift-state"
+
+# --- lessons-off when already off -> reports NOT_ENABLED, no error --------
+OUT="$(bash "$SCRIPT_DIR/lessons-off.sh")"
+assert_exit "lessons-off when already off -> 0" 0 $?
+case "$OUT" in
+  *"NOT_ENABLED"*) echo "PASS: lessons-off reports NOT_ENABLED when already off" ;;
+  *) echo "FAIL: expected NOT_ENABLED, got $OUT"; FAIL=1 ;;
+esac
+
+if [ "$FAIL" -eq 0 ]; then echo "All checks passed."; exit 0
+else echo "Some checks FAILED."; exit 1; fi

package/hooks/scripts/tests/test-lessons-read.sh

@@ -0,0 +1,97 @@
+#!/usr/bin/env bash
+# Self-check for lessons-read.sh (docs/design/lessons-mode.md "Reading
+# lessons on demand"). No framework, plain assert-and-exit.
+set -uo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+TMP_ROOT="$(mktemp -d)"
+trap 'rm -rf "$TMP_ROOT"' EXIT
+export CLAUDE_PROJECT_DIR="$TMP_ROOT"
+DEVLOG_DIR="$TMP_ROOT/.devlog"
+mkdir -p "$DEVLOG_DIR"
+FAIL=0
+assert_exit() {
+  local desc="$1" expected="$2" actual="$3"
+  if [ "$actual" -eq "$expected" ]; then echo "PASS: $desc"
+  else echo "FAIL: $desc (expected $expected got $actual)"; FAIL=1; fi
+}
+
+# --- No devlog.md at all, no topic -> NO_INDEX ------------------------------
+OUT="$(bash "$SCRIPT_DIR/lessons-read.sh" 2>&1)"
+assert_exit "no devlog.md, no topic -> 0" 0 $?
+case "$OUT" in
+  *"NO_INDEX"*) echo "PASS: reports NO_INDEX when devlog.md is absent" ;;
+  *) echo "FAIL: expected NO_INDEX, got $OUT"; FAIL=1 ;;
+esac
+
+# --- devlog.md exists but no Lessons 索引 -> NO_INDEX -----------------------
+echo '## Round 1 — 2026-09-12T00:00:00+08:00
+
+### Summary
+fixture
+
+### Reply
+fixture reply.
+
+### Handoff
+#### 現況
+fixture
+
+### Status
+DONE' > "$DEVLOG_DIR/devlog.md"
+OUT="$(bash "$SCRIPT_DIR/lessons-read.sh" 2>&1)"
+assert_exit "devlog.md with no index, no topic -> 0" 0 $?
+case "$OUT" in
+  *"NO_INDEX"*) echo "PASS: reports NO_INDEX when no Lessons 索引 block exists" ;;
+  *) echo "FAIL: expected NO_INDEX, got $OUT"; FAIL=1 ;;
+esac
+
+# --- Index present -> printed verbatim, no topic ----------------------------
+touch "$DEVLOG_DIR/.enabled" "$DEVLOG_DIR/.lessons-enabled"
+bash "$SCRIPT_DIR/lessons-append.sh" --topic "foo-bar" --text "教訓內容一。" >/dev/null
+OUT="$(bash "$SCRIPT_DIR/lessons-read.sh" 2>&1)"
+assert_exit "index present, no topic -> 0" 0 $?
+case "$OUT" in
+  *"devlog.lessons.foo-bar.md"*) echo "PASS: index line for foo-bar printed" ;;
+  *) echo "FAIL: expected index line, got $OUT"; FAIL=1 ;;
+esac
+
+# --- Read a specific existing topic, full content ---------------------------
+OUT="$(bash "$SCRIPT_DIR/lessons-read.sh" "foo-bar" 2>&1)"
+assert_exit "read existing topic -> 0" 0 $?
+case "$OUT" in
+  *"PATH=.devlog/devlog.lessons.foo-bar.md"*) echo "PASS: reports PATH" ;;
+  *) echo "FAIL: expected PATH=..., got $OUT"; FAIL=1 ;;
+esac
+case "$OUT" in
+  *"教訓內容一。"*) echo "PASS: full entry text returned" ;;
+  *) echo "FAIL: expected entry text, got $OUT"; FAIL=1 ;;
+esac
+
+# --- devlog.lessons.<x>.md / .md input normalizes the same as --topic -------
+OUT="$(bash "$SCRIPT_DIR/lessons-read.sh" "devlog.lessons.foo-bar.md" 2>&1)"
+assert_exit "read with devlog.lessons.<x>.md input -> 0" 0 $?
+case "$OUT" in
+  *"PATH=.devlog/devlog.lessons.foo-bar.md"*) echo "PASS: normalized input reads the same file" ;;
+  *) echo "FAIL: expected same PATH, got $OUT"; FAIL=1 ;;
+esac
+
+# --- Missing topic -> MISSING + candidates ----------------------------------
+bash "$SCRIPT_DIR/lessons-append.sh" --topic "another-topic" --text "教訓內容二。" >/dev/null
+OUT="$(bash "$SCRIPT_DIR/lessons-read.sh" "does-not-exist" 2>&1)"
+assert_exit "missing topic -> exit 1" 1 $?
+case "$OUT" in
+  *"MISSING"*) echo "PASS: reports MISSING" ;;
+  *) echo "FAIL: expected MISSING, got $OUT"; FAIL=1 ;;
+esac
+case "$OUT" in
+  *"CANDIDATES="*"foo-bar"*"another-topic"*|*"CANDIDATES="*"another-topic"*"foo-bar"*)
+    echo "PASS: candidates list both existing topics" ;;
+  *) echo "FAIL: expected candidates listing both topics, got $OUT"; FAIL=1 ;;
+esac
+
+# --- Path traversal in topic -> rejected -------------------------------------
+bash "$SCRIPT_DIR/lessons-read.sh" "../etc" >/dev/null 2>&1
+assert_exit "path-traversal topic -> exit 1" 1 $?
+
+if [ "$FAIL" -eq 0 ]; then echo "All checks passed."; exit 0
+else echo "Some checks FAILED."; exit 1; fi

package/hooks/scripts/tests/test-on-interrupt.sh

@@ -0,0 +1,186 @@
+#!/usr/bin/env bash
+# Self-check for on-stop-failure.sh / on-session-end.sh / on-tool-failure.sh.
+# Run: bash hooks/scripts/test-on-interrupt.sh
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+TMP_ROOT="$(mktemp -d)"
+trap 'rm -rf "$TMP_ROOT"' EXIT
+
+export CLAUDE_PROJECT_DIR="$TMP_ROOT"
+DEVLOG_DIR="$TMP_ROOT/.devlog"
+mkdir -p "$DEVLOG_DIR"
+touch "$DEVLOG_DIR/.enabled"
+
+FAIL=0
+assert_exit() {
+  local desc="$1" expected="$2" actual="$3"
+  if [ "$actual" -eq "$expected" ]; then
+    echo "PASS: $desc"
+  else
+    echo "FAIL: $desc (expected exit $expected, got $actual)"
+    FAIL=1
+  fi
+}
+assert_contains() {
+  local desc="$1" needle="$2" haystack="$3"
+  case "$haystack" in
+    *"$needle"*) echo "PASS: $desc" ;;
+    *) echo "FAIL: $desc (missing: $needle)"; FAIL=1 ;;
+  esac
+}
+
+write_open() {
+  rm -f "$DEVLOG_DIR/devlog.md" "$DEVLOG_DIR/.round-current.md"
+  cat > "$DEVLOG_DIR/.round-current.md" <<'EOF'
+## Round 1 — 2026-09-09T12:00:00+08:00
+
+### Status
+IN_PROGRESS
+EOF
+  printf '%s\n' '{"round": 1, "opened_at": "2026-09-09T12:00:00+08:00"}' > "$DEVLOG_DIR/.round-open"
+}
+
+# usage skips
+for err in rate_limit billing_error account_on_hold; do
+  write_open
+  echo "{\"error\":\"$err\"}" | bash "$SCRIPT_DIR/on-stop-failure.sh"
+  assert_exit "StopFailure $err -> exit 0" 0 $?
+  BODY="$(cat "$DEVLOG_DIR/devlog.md" 2>/dev/null || echo '')"
+  case "$BODY" in
+    *INTERRUPTED*) echo "FAIL: $err must not stamp INTERRUPTED"; FAIL=1 ;;
+    *) echo "PASS: $err left Status IN_PROGRESS" ;;
+  esac
+  if [ -f "$DEVLOG_DIR/.round-open" ]; then
+    echo "PASS: $err left .round-open"
+  else
+    echo "FAIL: $err should not close .round-open"
+    FAIL=1
+  fi
+done
+
+# server_error stamps
+write_open
+echo '{"error":"server_error"}' | bash "$SCRIPT_DIR/on-stop-failure.sh"
+assert_exit "StopFailure server_error -> exit 0" 0 $?
+BODY="$(cat "$DEVLOG_DIR/devlog.md")"
+assert_contains "server_error status" "INTERRUPTED" "$BODY"
+assert_contains "server_error reason" "StopFailure:server_error" "$BODY"
+
+# missing error -> unknown
+write_open
+echo '{}' | bash "$SCRIPT_DIR/on-stop-failure.sh"
+BODY="$(cat "$DEVLOG_DIR/devlog.md")"
+assert_contains "missing error -> unknown" "StopFailure:unknown" "$BODY"
+
+# SessionEnd with marker
+write_open
+echo '{"reason":"clear"}' | bash "$SCRIPT_DIR/on-session-end.sh"
+BODY="$(cat "$DEVLOG_DIR/devlog.md")"
+assert_contains "session end reason" "SessionEnd:clear" "$BODY"
+
+# SessionEnd without marker
+write_open
+rm -f "$DEVLOG_DIR/.round-open"
+BEFORE="$(cat "$DEVLOG_DIR/devlog.md" 2>/dev/null || echo '')"
+echo '{"reason":"other"}' | bash "$SCRIPT_DIR/on-session-end.sh"
+AFTER="$(cat "$DEVLOG_DIR/devlog.md" 2>/dev/null || echo '')"
+if [ "$BEFORE" = "$AFTER" ]; then
+  echo "PASS: SessionEnd without .round-open is a no-op"
+else
+  echo "FAIL: SessionEnd edited a closed Round"
+  FAIL=1
+fi
+
+# PostToolUseFailure interrupt
+rm -f "$DEVLOG_DIR/.interrupted"
+echo '{"is_interrupt":true}' | bash "$SCRIPT_DIR/on-tool-failure.sh"
+assert_exit "tool failure interrupt -> exit 0" 0 $?
+if [ -f "$DEVLOG_DIR/.interrupted" ]; then
+  echo "PASS: is_interrupt created .interrupted"
+else
+  echo "FAIL: .interrupted missing"
+  FAIL=1
+fi
+BODY="$(cat "$DEVLOG_DIR/devlog.md" 2>/dev/null || echo '')"
+case "$BODY" in
+  *INTERRUPTED*) echo "FAIL: on-tool-failure must not patch devlog.md"; FAIL=1 ;;
+  *) echo "PASS: on-tool-failure did not patch devlog.md" ;;
+esac
+
+# is_interrupt false
+rm -f "$DEVLOG_DIR/.interrupted"
+echo '{"is_interrupt":false}' | bash "$SCRIPT_DIR/on-tool-failure.sh"
+if [ -f "$DEVLOG_DIR/.interrupted" ]; then
+  echo "FAIL: is_interrupt false should not create the marker"
+  FAIL=1
+else
+  echo "PASS: is_interrupt false created no marker"
+fi
+
+# no .enabled -> no marker
+rm -f "$DEVLOG_DIR/.enabled" "$DEVLOG_DIR/.interrupted"
+echo '{"is_interrupt":true}' | bash "$SCRIPT_DIR/on-tool-failure.sh"
+if [ -f "$DEVLOG_DIR/.interrupted" ]; then
+  echo "FAIL: disabled project must not create .interrupted"
+  FAIL=1
+else
+  echo "PASS: disabled -> no .interrupted"
+fi
+
+# SessionEnd on a completed open Round must not stamp, but is still merged
+# into devlog.md (close-open-round.sh always merges; only the INTERRUPTED
+# stamp is skipped when recovered).
+touch "$DEVLOG_DIR/.enabled"
+rm -f "$DEVLOG_DIR/devlog.md" "$DEVLOG_DIR/.round-current.md"
+cat > "$DEVLOG_DIR/.round-current.md" <<'EOF'
+## Round 1 — 2026-09-09T12:00:00+08:00
+
+### User Input
+```text
+done
+```
+
+### Summary
+finished
+
+### Reply
+fixture reply.
+
+### Handoff
+#### 現況
+finished
+
+### Status
+DONE
+EOF
+printf '%s\n' '{"round": 1, "opened_at": "2026-09-09T12:00:00+08:00"}' > "$DEVLOG_DIR/.round-open"
+cksum < "$DEVLOG_DIR/.round-current.md" > "$DEVLOG_DIR/.turn-start"
+printf '\n' >> "$DEVLOG_DIR/.round-current.md"
+echo '{"reason":"clear"}' | bash "$SCRIPT_DIR/on-session-end.sh"
+BODY="$(cat "$DEVLOG_DIR/devlog.md")"
+case "$BODY" in
+  *INTERRUPTED*) echo "FAIL: SessionEnd must not stamp a completed Round"; FAIL=1 ;;
+  *) echo "PASS: SessionEnd left completed Status DONE" ;;
+esac
+assert_contains "recovered-complete merged into devlog.md" $'### Status\nDONE' "$BODY"
+if [ -f "$DEVLOG_DIR/.round-open" ]; then
+  echo "FAIL: SessionEnd recovered-complete should delete .round-open"
+  FAIL=1
+else
+  echo "PASS: SessionEnd recovered-complete deleted .round-open"
+fi
+if [ -f "$DEVLOG_DIR/.round-current.md" ]; then
+  echo "FAIL: SessionEnd recovered-complete should delete .round-current.md"
+  FAIL=1
+else
+  echo "PASS: SessionEnd recovered-complete deleted .round-current.md"
+fi
+
+if [ "$FAIL" -eq 0 ]; then
+  echo "All checks passed."
+  exit 0
+else
+  echo "Some checks FAILED."
+  exit 1
+fi

package/hooks/scripts/tests/test-redact-prompt.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+set -uo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+. "$SCRIPT_DIR/redact-prompt.sh"
+FAIL=0
+check() {
+  local d="$1" in="$2" needle="$3" forbidden="$4"
+  out="$(printf '%s' "$in" | redact_prompt)"
+  case "$out" in *"$needle"*) echo "PASS: $d masked" ;; *) echo "FAIL: $d no mask [$out]"; FAIL=1 ;; esac
+  if [ -n "$forbidden" ]; then
+    case "$out" in *"$forbidden"*) echo "FAIL: $d leaked"; FAIL=1 ;; *) echo "PASS: $d no leak" ;; esac
+  fi
+}
+check ant "token sk-ant-api03-ABCDEFG123456 end" "（已遮罩）" "sk-ant-api03-ABCDEFG123456"
+check ghp "ghp_abcdefghijklmnopqrstuvwxyz0123456789" "（已遮罩）" "ghp_abcdefghijklmnopqrstuvwxyz0123456789"
+check akia "AKIAIOSFODNN7EXAMPLE" "（已遮罩）" "AKIAIOSFODNN7EXAMPLE"
+check openai "key sk-abcdefghijklmnopqrstuvwxyz123456 end" "（已遮罩）" "sk-abcdefghijklmnopqrstuvwxyz123456"
+check bearer "Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.aaaaabbbbbcccccdddddeeeee.fffffggggghhhhhiiiiijjjjj" "（已遮罩）" "Bearer eyJ"
+check jwt "token eyJhbGciOiJIUzI1NiJ9.aaaaabbbbbcccccdddddeeeee.fffffggggghhhhhiiiiijjjjj end" "（已遮罩）" "eyJhbGciOiJIUzI1NiJ9"
+keep="$(printf '%s' 'see https://example.com/user/alpha' | redact_prompt)"
+[ "$keep" = "see https://example.com/user/alpha" ] && echo "PASS: url kept" || { echo "FAIL: url $keep"; FAIL=1; }
+keep_uuid="$(printf '%s' 'id 550e8400-e29b-41d4-a716-446655440000' | redact_prompt)"
+[ "$keep_uuid" = "id 550e8400-e29b-41d4-a716-446655440000" ] && echo "PASS: uuid kept" || { echo "FAIL: uuid $keep_uuid"; FAIL=1; }
+pem="$(printf '%s\n' '-----BEGIN PRIVATE KEY-----' 'MIIB' '-----END PRIVATE KEY-----' | redact_prompt)"
+case "$pem" in *PRIVATE\ KEY*) echo "FAIL: pem leaked"; FAIL=1 ;; *"（已遮罩）"*) echo "PASS: pem masked" ;; *) echo "FAIL: pem [$pem]"; FAIL=1 ;; esac
+if [ "$FAIL" -eq 0 ]; then echo "All checks passed."; exit 0
+else echo "Some checks FAILED."; exit 1; fi

package/hooks/scripts/tests/test-resume-devlog.sh

@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+set -uo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+TMP="$(mktemp -d)"
+trap 'rm -rf "$TMP"' EXIT
+export CLAUDE_PROJECT_DIR="$TMP"
+mkdir -p "$TMP/.devlog"
+FAIL=0
+check_exit_1() {
+  bash "$SCRIPT_DIR/resume-devlog.sh" "$@" >/dev/null 2>&1
+  [ "$?" -eq 1 ] && echo "PASS: $1 rejected" || { echo "FAIL: $1"; FAIL=1; }
+}
+check_exit_1 --name
+check_exit_1 --name archive
+check_exit_1 --name ../x
+INVALID="$(bash "$SCRIPT_DIR/resume-devlog.sh" --name devlog.md 2>&1)"
+[ "$?" -eq 1 ] && [ "$INVALID" = "INVALID_NAME" ] \
+  && echo "PASS: devlog.md rejected" || { echo "FAIL: devlog.md [$INVALID]"; FAIL=1; }
+cat > "$TMP/.devlog/devlog.foo.md" <<'EOF'
+# Kept log
+
+## Round 4 — now
+
+### Status
+DONE
+EOF
+OUT="$(bash "$SCRIPT_DIR/resume-devlog.sh" --name devlog.foo.md)"
+case "$OUT" in *"PATH=.devlog/devlog.foo.md"*) echo "PASS: path" ;; *) echo "FAIL: path [$OUT]"; FAIL=1 ;; esac
+case "$OUT" in *"## Round 4"*) echo "PASS: content" ;; *) echo "FAIL: content"; FAIL=1 ;; esac
+OUT="$(bash "$SCRIPT_DIR/resume-devlog.sh" --name missing 2>&1)"
+[ "$?" -eq 1 ] || { echo "FAIL: missing exit"; FAIL=1; }
+case "$OUT" in *"MISSING"*"CANDIDATES=foo"*) echo "PASS: candidates" ;; *) echo "FAIL: candidates [$OUT]"; FAIL=1 ;; esac
+
+if [ "$FAIL" -eq 0 ]; then echo "All checks passed."; exit 0
+else echo "Some checks FAILED."; exit 1; fi