javi-forge 1.17.0 → 1.19.0

package/assets/hooks/commit-msg

@@ -1,30 +1,188 @@
 #!/bin/bash
-# Commit-msg: block AI attribution in commit messages
 set -e
+# =============================================================================
+# COMMIT-MSG: Block accidental AI-attribution + enforce Conventional Commits
+# =============================================================================
+# Best-effort, NOT an adversarial-grade security control.
+#
+# Two INDEPENDENT guards run in order; both must pass:
+#   1. AI-attribution guard (always-on raw-literal matching; best-effort NFKC
+#      normalization layered on top when perl + Unicode::Normalize exist).
+#   2. Conventional-commit subject guard (raw first non-comment line).
+#
+# Scope of the attribution guard:
+#   Defends against: accidental copy-paste, whitespace tricks (double space,
+#   NBSP, ZWSP), markdown formatting, full-width latin, combining diacritics,
+#   dashes/underscores in model names, punctuation/emoji separators.
+#   Does NOT defend against: cross-script homoglyphs, tag characters, variation
+#   selectors, standalone provider names without verb/model, motivated
+#   adversaries with a Unicode table. If you need adversarial defense, use
+#   signed commits, not regex. The threat model is an HONEST committer.
+#
+# The test suite (commit-msg.test.sh) documents covered/accepted bypasses.
+# =============================================================================
+
 COMMIT_MSG_FILE="$1"
-COMMIT_MSG=$(cat "$COMMIT_MSG_FILE")
+RAW_MSG=$(cat "$COMMIT_MSG_FILE")
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+# ─── Normalization ──────────────────────────────────────────────────
+# If perl fails (not installed, Unicode::Normalize module absent), normalize
+# returns the raw message. The pattern loop still matches against RAW_MSG, so a
+# broken perl degrades gracefully but does not open everything up.
+normalize_msg() {
+    if ! command -v perl >/dev/null 2>&1; then
+        printf "%s" "$1"
+        return
+    fi
+    # 2>/dev/null suppresses perl warnings. If the script fails outright,
+    # || printf "%s" "$1" lets the raw through — the match against RAW_MSG
+    # below still covers the literal patterns.
+    printf "%s" "$1" | perl -CSAD -pe '
+        # 1. Replace Unicode formatting/invisible chars with a SPACE (not delete).
+        #    Deleting them joins "by" + "Claude" -> "byClaude" and the regex loses the match.
+        #    ZWSP/ZWNJ/ZWJ/LRM/RLM, NBSP, bidi controls, BOM, word-joiner.
+        s/[\x{00A0}\x{200B}-\x{200F}\x{2028}-\x{202F}\x{2060}-\x{206F}\x{FEFF}]/ /g;
+        # 2. Strip combining diacritics. This folds "Ćlaude" (C + U+0301) to "Claude".
+        s/[\x{0300}-\x{036F}]//g;
+        # 3. NFKC normalizes compatibility forms (full-width latin -> ascii)
+        use Unicode::Normalize qw(NFKC);
+        $_ = NFKC($_);
+        # 4. Markdown / punctuation / emoji -> space
+        #    Markdown:    * _ ` ~
+        #    Punctuation: . , : ; ! ? ( ) [ ] { } < > / \ | " '\''
+        #    Emoji:       Misc Symbols (2600-27BF), Pictographs (1F300-1FAFF)
+        s/[*_`~.,:;!?()\[\]{}<>\\\/|"'\''\x{2600}-\x{27BF}\x{1F300}-\x{1FAFF}]/ /g;
+        # 5. Collapse whitespace (includes \n, \t, multiple spaces)
+        s/\s+/ /g;
+    ' 2>/dev/null || printf "%s" "$1"
+}
+
+NORMALIZED_MSG=$(normalize_msg "$RAW_MSG")
+
+# ─── Patterns (case insensitive, grep -iE) ──────────────────────────
+#
+# Notes:
+#   \b           = word boundary (GNU grep ext.)
+#   [[:space:]]+ = one or more spaces (POSIX, portable)
+#   [-_ ]?       = optional separator between provider and model
+#
+# Known, accepted limitation: Unicode homoglyphs (Cyrillic С instead of
+# Latin C) require transliteration (Text::Unidecode), a non-core perl module.
+# Documented, not defended against.
+PROVIDER_PAT='(claude|gpt|chatgpt|openai|anthropic|gemini|copilot|llm|cursor|windsurf|codeium|cody|aider)'
 
 AI_PATTERNS=(
-  "co-authored-by:.*claude" "co-authored-by:.*anthropic"
-  "co-authored-by:.*gpt" "co-authored-by:.*openai"
-  "co-authored-by:.*copilot" "co-authored-by:.*gemini"
-  "co-authored-by:.*\\bai\\b"
-  "made by claude" "made by gpt" "made by ai"
-  "generated by claude" "generated by gpt" "generated by ai"
-  "written by claude" "written by ai"
-  "claude code" "claude opus" "claude sonnet" "claude haiku"
-  "gpt-4" "gpt-3" "chatgpt"
-  "@anthropic.com" "@openai.com"
+    # ── Co-authored-by trailer ────────────────────────────────────────
+    # Captures any provider in the same trailer.
+    "co-authored-by:.*\b${PROVIDER_PAT}\b"
+    # AI in trailer: AI alone OR AIAssistant / AIBot / AIAgent compounds
+    "co-authored-by:.*\bai(assistant|bot|agent|helper)?\b"
+    # Standalone Copilot/Codeium/Cursor in trailer (no vendor prefix)
+    "co-authored-by:.*\b(copilot|cursor|codeium|cody|aider|chatgpt)\b"
+
+    # ── Claude-Session trailer (Claude Code harness auto-appends this) ─
+    # The canonical harness trailer key + its session URL host. Anchored to
+    # the trailer key "claude-session:" and the "claude.ai" host, so it does
+    # NOT fire on a person named Claude or a bare "session" word (zero FP).
+    "claude-session:"
+    "claude\\.ai"
+
+    # ── Attribution verbs + by/with + provider ───────────────────────
+    # e.g.: "made by Claude", "generated with GPT", "built with OpenAI"
+    # Verbs expanded in audit-2 to cover "I used X", "X helped me",
+    # "wrote by AI", "prompted to write", "asked Claude to".
+    "(made|generated|written|created|assisted|built|developed|authored|produced|coded|crafted|helped|used|wrote|prompted|asked|fixed|refactored)[[:space:]]+(by|with|using|via)[[:space:]]+${PROVIDER_PAT}"
+    "(made|generated|written|created|assisted|built|developed|authored|produced|coded|crafted|helped|used|wrote|prompted|asked|fixed|refactored)[[:space:]]+(by|with|using|via)[[:space:]]+\bai(assistant|bot|agent|helper)?\b"
+
+    # ── "with help from / thanks to / powered by X" ──────────────────
+    "(with[[:space:]]+help[[:space:]]+from|thanks[[:space:]]+to|powered[[:space:]]+by|courtesy[[:space:]]+of)[[:space:]]+${PROVIDER_PAT}"
+    "(with[[:space:]]+help[[:space:]]+from|thanks[[:space:]]+to|powered[[:space:]]+by|courtesy[[:space:]]+of)[[:space:]]+\bai(assistant|bot|agent|helper)?\b"
+
+    # ── "X-assisted" / "X assisted" ──────────────────────────────────
+    # Covers: anthropic-assisted, openai assisted, ai_assisted, etc.
+    "${PROVIDER_PAT}[-_ ]?assisted"
+    "\bai[-_ ]?assisted"
+
+    # ── Standalone branding / tooling ────────────────────────────────
+    # ACCEPTED TRADEOFF (JDA-002): "cursor" is homonymous with the DB/UI term.
+    # Because "-" is a grep word boundary, ANY bare-cursor match also fires on
+    # "cursor-based" / "DB cursor"; blocking "built with Cursor" (an AI-tool
+    # attribution we must catch) necessarily catches those. No tightening
+    # separates them without overfitting a blocklist, so the FP is documented,
+    # not chased. Domain/IDE/AI forms are the reliable signal.
+    "claude[-_ ]?code"
+    "(github|microsoft)[-_ ]?copilot"
+    "\bchatgpt\b"
+    "\bcursor[-_ ]?(ai|ide)?\b"
+    "\bwindsurf\b"
+    "\bcodeium\b"
+    "\bcody\b"
+    "\baider\b"
+
+    # ── Claude + model variant ───────────────────────────────────────
+    # Covers: "claude opus", "claude-sonnet", "Claude3", "claude4.5", "Claude 4.7"
+    "claude[-_ ]?(opus|sonnet|haiku|[0-9])"
+
+    # ── GPT + version ────────────────────────────────────────────────
+    # Covers: gpt-4, gpt 3, gpt_5, gpt4.5
+    "gpt[-_ ]?[0-9]"
+
+    # ── Provider email domains ───────────────────────────────────────
+    "@(anthropic|openai|cursor|codeium)\\.(com|sh|ai)"
+    "noreply@(anthropic|openai)"
 )
 
+# Run pattern matching against the NORMALIZED message.
+# Use both raw and normalized — raw catches anything normalization might over-strip.
 for pattern in "${AI_PATTERNS[@]}"; do
-  if echo "$COMMIT_MSG" | grep -iqE "$pattern"; then
-    echo ""
-    echo "COMMIT BLOCKED: AI Attribution Detected"
-    echo "  Pattern: $pattern"
-    echo "  Remove AI attribution. You are the sole author."
-    echo ""
-    exit 1
-  fi
+    if printf "%s" "$NORMALIZED_MSG" | grep -iqE "$pattern" \
+       || printf "%s" "$RAW_MSG" | grep -iqE "$pattern"; then
+        echo -e ""
+        echo -e "${RED}COMMIT BLOCKED: AI Attribution Detected${NC}"
+        echo -e ""
+        echo -e "${RED}Pattern matched:${NC} ${YELLOW}$pattern${NC}"
+        echo -e ""
+        echo -e "${RED}Your commit message:${NC}"
+        echo -e "${YELLOW}$RAW_MSG${NC}"
+        echo -e ""
+        echo -e "${GREEN}Remove AI attribution. You are the sole author.${NC}"
+        echo -e ""
+        exit 1
+    fi
 done
+
+# ─── Conventional-commit subject guard ──────────────────────────────
+# Independent from the attribution guard above. Validates the RAW subject
+# (first non-blank, non-comment line — git has not stripped comments yet at
+# commit-msg time). Exempt prefixes skip the regex; everything else must
+# match the Conventional Commit grammar.
+CONV_COMMIT_RE='^(build|chore|ci|docs|feat|fix|perf|refactor|revert|style|test)(\([a-z0-9._-]+\))?!?: .+'
+
+SUBJECT=$(printf '%s\n' "$RAW_MSG" | grep -vE '^[[:space:]]*(#|$)' | head -n1 || true)
+
+case "$SUBJECT" in
+    "Merge "*|"fixup! "*|"squash! "*|"amend! "*|"reword! "*|"Revert "*)
+        # Exempt: merge/autosquash/revert generated subjects skip the check.
+        exit 0
+        ;;
+esac
+
+if ! [[ "$SUBJECT" =~ $CONV_COMMIT_RE ]]; then
+    echo -e ""
+    echo -e "${RED}COMMIT BLOCKED: subject must be Conventional Commit${NC}"
+    echo -e ""
+    echo -e "${RED}Your subject:${NC} ${YELLOW}${SUBJECT}${NC}"
+    echo -e ""
+    echo -e "${GREEN}Expected:${NC} <type>[optional scope][!]: <description>"
+    echo -e "  types: build chore ci docs feat fix perf refactor revert style test"
+    echo -e "  e.g.   feat(hooks): add native gate"
+    echo -e ""
+    exit 1
+fi
+
 exit 0

package/assets/hooks/manifest.json

@@ -1,32 +1,36 @@
 {
-  "pre-commit": {
-    "version": 1,
-    "sha256": "811f34ce57517e129554bc9c09801a66c0207332cd3e7f2950db43a40580e914",
-    "historical": [
-      {
-        "sha256": "811f34ce57517e129554bc9c09801a66c0207332cd3e7f2950db43a40580e914",
-        "firstCommit": "5587b3b9b9ed3c86809c0a3d89a850dd2bce7e1a"
-      }
-    ]
-  },
-  "pre-push": {
-    "version": 1,
-    "sha256": "7de58640aeef33085a49f31f1d9d0c8bacde0069d6d3265ae41aa8d3cd14d7a5",
-    "historical": [
-      {
-        "sha256": "7de58640aeef33085a49f31f1d9d0c8bacde0069d6d3265ae41aa8d3cd14d7a5",
-        "firstCommit": "5587b3b9b9ed3c86809c0a3d89a850dd2bce7e1a"
-      }
-    ]
-  },
-  "commit-msg": {
-    "version": 1,
-    "sha256": "1c23a60cd4ba7f6bc666da400b5d2971c4294782c8d9ce41543e7815de11a1d6",
-    "historical": [
-      {
-        "sha256": "1c23a60cd4ba7f6bc666da400b5d2971c4294782c8d9ce41543e7815de11a1d6",
-        "firstCommit": "5587b3b9b9ed3c86809c0a3d89a850dd2bce7e1a"
-      }
-    ]
-  }
+	"pre-commit": {
+		"version": 1,
+		"sha256": "811f34ce57517e129554bc9c09801a66c0207332cd3e7f2950db43a40580e914",
+		"historical": [
+			{
+				"sha256": "811f34ce57517e129554bc9c09801a66c0207332cd3e7f2950db43a40580e914",
+				"firstCommit": "5587b3b9b9ed3c86809c0a3d89a850dd2bce7e1a"
+			}
+		]
+	},
+	"pre-push": {
+		"version": 1,
+		"sha256": "7de58640aeef33085a49f31f1d9d0c8bacde0069d6d3265ae41aa8d3cd14d7a5",
+		"historical": [
+			{
+				"sha256": "7de58640aeef33085a49f31f1d9d0c8bacde0069d6d3265ae41aa8d3cd14d7a5",
+				"firstCommit": "5587b3b9b9ed3c86809c0a3d89a850dd2bce7e1a"
+			}
+		]
+	},
+	"commit-msg": {
+		"version": 2,
+		"sha256": "127fb8bfebd81d6b06e6f04bdf1be0036a3a224268ac54f11784043f55796a18",
+		"historical": [
+			{
+				"sha256": "1c23a60cd4ba7f6bc666da400b5d2971c4294782c8d9ce41543e7815de11a1d6",
+				"firstCommit": "5587b3b9b9ed3c86809c0a3d89a850dd2bce7e1a"
+			},
+			{
+				"sha256": "127fb8bfebd81d6b06e6f04bdf1be0036a3a224268ac54f11784043f55796a18",
+				"firstCommit": "65cb02e7efc5581303e2b20727acf07e3d88de65"
+			}
+		]
+	}
 }

package/dist/commands/ci.js

@@ -316,6 +316,18 @@ function describeRunners(resolved) {
 }
 export async function runCI(options, onStep, onGateOutcome) {
     const { projectDir = process.cwd(), mode = "full", noDocker = false, noGhagga = false, noSecurity = false, timeout = 600, } = options;
+    // ── Run-scoped Docker availability (lazy-memoized) ─────────────────────────
+    // Computed at most ONCE per run and only when an image gate needs it. The
+    // full/quick prologue below assigns its own `isDockerAvailable()` result back
+    // into this cache so `runGates` never re-probes; the gates-only path leaves it
+    // undefined until an image gate lazily triggers the probe (a native-only
+    // gates-only repo never touches Docker — behaves exactly as before slice 3).
+    let dockerAvailableCache;
+    const dockerAvailable = async () => (dockerAvailableCache ??= await isDockerAvailable());
+    const dockerGate = {
+        noDocker,
+        isAvailable: dockerAvailable,
+    };
     // ── Resolve runners (once — nothing downstream re-detects) ─────────────────
     const stepDetect = "detect";
     report(onStep, stepDetect, "Detecting stack", "running");
@@ -343,7 +355,7 @@ export async function runCI(options, onStep, onGateOutcome) {
             report(onStep, mode, `${mode} mode`, "error", detail);
             throw new Error(`no runners resolved — ${mode} mode requires at least one runner`);
         }
-        await runGates(resolved.gates, projectDir, onStep, onGateOutcome);
+        await runGates(resolved.gates, projectDir, onStep, dockerGate, onGateOutcome);
         return;
     }
     // Legacy single-runner view for the zero-config auto path. Keeping this
@@ -409,6 +421,9 @@ export async function runCI(options, onStep, onGateOutcome) {
         const stepDocker = "docker-check";
         report(onStep, stepDocker, "Checking Docker", "running");
         const dockerOk = await isDockerAvailable();
+        // Reuse this result for the gate fail-closed check — `runGates` must not
+        // run a second `docker info` (memoization seam).
+        dockerAvailableCache = dockerOk;
         if (!dockerOk) {
             report(onStep, stepDocker, "Docker not available", "error", "Start Docker or use --no-docker");
             throw new Error("Docker is not available");
@@ -515,7 +530,7 @@ export async function runCI(options, onStep, onGateOutcome) {
     // already `full` or `quick` here; the guard makes the contract explicit.
     // `runGates` no-ops on an empty gate list (a v1 repo carries none).
     if (mode === "full" || mode === "quick") {
-        await runGates(resolved.gates, projectDir, onStep, onGateOutcome);
+        await runGates(resolved.gates, projectDir, onStep, dockerGate, onGateOutcome);
     }
 }
 // =============================================================================
@@ -938,7 +953,10 @@ async function runGateCommand(gate, cmd, projectDir, nativeEnv, containerEnv) {
         timedOut: result.timedOut,
     };
 }
-async function runGates(gates, projectDir, onStep, onOutcome) {
+async function runGates(gates, projectDir, onStep, 
+// REQUIRED, so it MUST precede the optional `onOutcome` (TS1016: a required
+// parameter cannot follow an optional one). Both call sites pass it positionally.
+docker, onOutcome) {
     if (gates.length === 0)
         return;
     const blockingFailures = [];
@@ -989,6 +1007,33 @@ async function runGates(gates, projectDir, onStep, onOutcome) {
             ...extra,
         });
         report(onStep, stepId, label, "running");
+        // Fail-closed matrix (slice 3): an image gate that cannot reach Docker is
+        // REFUSED — it MUST NOT fall through to native/unpinned execution and MUST
+        // NOT be silently skipped/passed. Blocking → build failure (feeds the
+        // aggregate throw); informative → `warning` (never a false-green). A gate
+        // WITHOUT `image` is unaffected and runs native regardless of --no-docker.
+        //
+        // `isAvailable()` is touched ONLY for an image gate under Docker: the
+        // `noDocker` short-circuit means an image-less set (or a --no-docker run)
+        // never shells out to `docker info`, keeping the native path zero-cost.
+        if (gate.image !== undefined) {
+            if (docker.noDocker || !(await docker.isAvailable())) {
+                const why = docker.noDocker
+                    ? "--no-docker set"
+                    : "Docker not available";
+                const reason = `gate "${gate.id}" requires image "${gate.image}" but ${why} — refusing (never runs native/unpinned)`;
+                if (blocking) {
+                    blockingFailures.push(gate.id);
+                    report(onStep, stepId, `${label} failed`, "error", reason);
+                    emit("error", { reason });
+                }
+                else {
+                    report(onStep, stepId, `${label} failed (informative)`, "warning", reason);
+                    emit("warning", { reason });
+                }
+                continue; // NEVER falls through to native execution.
+            }
+        }
         // Per-gate env: build the INJECTED allowlist (engine keys + baseline) once,
         // then split into two maps (JDB-001):
         //   - nativeEnv: full host env + injected + gate.env — a spawn env MAP (never

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "javi-forge",
-	"version": "1.17.0",
+	"version": "1.19.0",
 	"description": "Project scaffolding and AI-ready CI bootstrap",
 	"type": "module",
 	"bin": {
@@ -16,7 +16,7 @@
 		"test:watch": "vitest",
 		"test:coverage": "vitest run --coverage",
 		"test:mutation": "stryker run",
-		"test:hooks": "bash ci-local/hooks/commit-msg.test.sh",
+		"test:hooks": "bash assets/hooks/commit-msg.test.sh",
 		"lint": "biome check src/",
 		"lint:fix": "biome check --write src/",
 		"format": "biome format --write src/",
@@ -29,6 +29,7 @@
 		"!dist/__integration__/**",
 		"!dist/e2e/**",
 		"assets/",
+		"!assets/**/*.test.sh",
 		"ci-local/",
 		"modules/",
 		"templates/",

package/ci-local/hooks/commit-msg.test.sh

@@ -1,286 +0,0 @@
-#!/bin/bash
-# =============================================================================
-# COMMIT-MSG TEST SUITE
-# =============================================================================
-# Valida que el hook commit-msg bloquea AI attribution en TODAS las variantes
-# conocidas, incluyendo bypasses identificados en auditoría 2026-05-17.
-#
-# Uso:
-#   ./commit-msg.test.sh
-#
-# Exit code 0 = todos los tests pasan
-# Exit code 1 = al menos un test falla
-# =============================================================================
-
-set -u
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-HOOK="$SCRIPT_DIR/commit-msg"
-
-if [ ! -x "$HOOK" ]; then
-    echo "ERROR: commit-msg hook not found or not executable: $HOOK"
-    exit 1
-fi
-
-PASS=0
-FAIL=0
-FAILED_TESTS=()
-
-# Garantiza limpieza de tmpfiles aún si el hook revienta con set -u, etc.
-TMP_FILES=()
-cleanup() {
-    if [ ${#TMP_FILES[@]} -gt 0 ]; then
-        rm -f "${TMP_FILES[@]}"
-    fi
-}
-trap cleanup EXIT INT TERM
-
-make_tmp() {
-    local f
-    f=$(mktemp)
-    TMP_FILES+=("$f")
-    printf "%s" "$1" > "$f"
-    printf "%s" "$f"
-}
-
-# expect_block <description> <message>
-# El hook debe BLOQUEAR este mensaje (exit != 0)
-expect_block() {
-    local desc="$1"
-    local msg="$2"
-    local tmpfile
-    tmpfile=$(make_tmp "$msg")
-    if "$HOOK" "$tmpfile" >/dev/null 2>&1; then
-        FAIL=$((FAIL + 1))
-        FAILED_TESTS+=("[NOT BLOCKED] $desc | msg: '$msg'")
-        echo "  FAIL: $desc (should block but passed): '$msg'"
-    else
-        PASS=$((PASS + 1))
-    fi
-}
-
-# expect_pass <description> <message>
-# El hook debe PERMITIR este mensaje (exit 0)
-expect_pass() {
-    local desc="$1"
-    local msg="$2"
-    local tmpfile
-    tmpfile=$(make_tmp "$msg")
-    if "$HOOK" "$tmpfile" >/dev/null 2>&1; then
-        PASS=$((PASS + 1))
-    else
-        FAIL=$((FAIL + 1))
-        FAILED_TESTS+=("[FALSE POSITIVE] $desc | msg: '$msg'")
-        echo "  FAIL: $desc (should pass but blocked): '$msg'"
-    fi
-}
-
-echo "=== Running commit-msg hook test suite ==="
-echo ""
-
-# ─── Cases que DEBEN bloquear ────────────────────────────────────────
-
-# Co-authored-by con cada proveedor
-expect_block "Co-authored-by Claude" "feat: add foo
-
-Co-authored-by: Claude <claude@anthropic.com>"
-
-expect_block "Co-authored-by claude lowercase" "feat: bar
-
-co-authored-by: claude <c@a.com>"
-
-expect_block "Co-authored-by double space" "feat: baz
-
-Co-authored-by:  Claude <c@a.com>"
-
-expect_block "Co-authored-by GPT" "feat: x
-
-Co-authored-by: GPT-4 <g@o.com>"
-
-expect_block "Co-authored-by Copilot" "feat: y
-
-Co-authored-by: GitHub Copilot <c@gh.com>"
-
-expect_block "Co-authored-by ai standalone" "feat: z
-
-Co-authored-by: AI Assistant <a@b.com>"
-
-# Made/Generated/Written/Created by/with X — single space
-expect_block "Made by Claude" "feat: add Made by Claude"
-expect_block "Made with Claude" "feat: Made with Claude"
-expect_block "Generated by GPT" "feat: Generated by GPT"
-expect_block "Written with OpenAI" "fix: Written with OpenAI"
-expect_block "Created by Anthropic" "feat: Created by Anthropic"
-expect_block "Assisted by AI" "feat: Assisted by AI"
-expect_block "Built with Gemini" "feat: Built with Gemini"
-expect_block "Developed with Copilot" "feat: Developed with Copilot"
-expect_block "Authored by LLM" "feat: Authored by LLM"
-
-# Made/Generated/etc — DOUBLE space (bypass identificado en audit)
-expect_block "Made by  Claude (double space)" "feat: Made by  Claude"
-expect_block "Generated with  GPT (double space)" "fix: Generated with  GPT"
-expect_block "Made by\tClaude (tab)" "$(printf 'feat: Made by\tClaude')"
-
-# With help from X
-expect_block "With help from Claude" "feat: x
-
-With help from Claude"
-expect_block "with help from GPT-4" "feat: with help from GPT-4"
-
-# X-assisted variants (bypass identificado)
-expect_block "anthropic-assisted" "feat: anthropic-assisted refactor"
-expect_block "openai-assisted" "feat: openai-assisted change"
-expect_block "ai-assisted" "feat: ai-assisted commit"
-expect_block "Claude assisted (space)" "feat: Claude assisted work"
-expect_block "LLM_assisted (underscore)" "feat: llm_assisted feature"
-
-# Tool branding
-expect_block "claude code" "feat: built with claude code"
-expect_block "claude-code" "feat: via claude-code"
-expect_block "claude_code" "feat: claude_code generated"
-expect_block "GitHub Copilot" "feat: GitHub Copilot helped"
-expect_block "Microsoft Copilot" "feat: Microsoft Copilot did this"
-
-# Claude model variants (bypass identificado)
-expect_block "claude opus (space)" "feat: claude opus tested"
-expect_block "claude-sonnet (dash)" "feat: claude-sonnet used"
-expect_block "claude_haiku (underscore)" "feat: claude_haiku approach"
-expect_block "Claude3.5" "feat: Claude3.5 wrote this"
-expect_block "claude4.7" "feat: claude4.7 contributed"
-expect_block "Claude 4" "feat: Claude 4 logic"
-
-# GPT model variants
-expect_block "gpt-4" "feat: gpt-4 reviewed"
-expect_block "gpt 5" "feat: gpt 5 wrote"
-expect_block "gpt_3" "feat: gpt_3 helped"
-expect_block "GPT4" "feat: GPT4 was used"
-
-# ChatGPT
-expect_block "ChatGPT" "feat: ChatGPT generated"
-expect_block "chatgpt" "feat: powered by chatgpt"
-
-# Emails
-expect_block "@anthropic.com" "feat: x
-
-Author: foo@anthropic.com"
-expect_block "@openai.com" "feat: y
-
-Co-authored-by: bot@openai.com"
-expect_block "noreply@anthropic" "feat: noreply@anthropic.example"
-
-# ─── Bypasses identificados en review 2026-05-17 (post-hardening) ─────
-
-# Markdown formatting alrededor del proveedor
-expect_block "Made by **Claude** (markdown bold)" "feat: Made by **Claude**"
-expect_block "Made by __GPT__ (markdown italic)" "feat: Made by __GPT__"
-expect_block "Made by \`OpenAI\` (markdown code)" "feat: Made by \`OpenAI\`"
-expect_block "Made by ~~Gemini~~ (strikethrough)" "feat: Made by ~~Gemini~~"
-
-# Puntuación entre verbo y proveedor (no whitespace)
-expect_block "Made by.Claude" "feat: Made by.Claude"
-expect_block "Made by,Claude" "feat: Made by,Claude"
-expect_block "Made by:Claude" "feat: Made by:Claude"
-expect_block "Made by;Claude" "feat: Made by;Claude"
-
-# Newline entre verbo y proveedor
-expect_block "Made by newline Claude" "$(printf 'feat: Made by\nClaude')"
-
-# Emoji separator
-expect_block "Made by emoji Claude" "feat: Made by 🤖 Claude"
-expect_block "Generated by emoji GPT" "feat: Generated by ✨ GPT"
-
-# Unicode invisible chars (ZWSP, RLM, NBSP)
-expect_block "Made by ZWSP Claude" "$(printf 'feat: Made by​Claude')"
-expect_block "Made by NBSP Claude" "$(printf 'feat: Made by Claude')"
-expect_block "Made by RLM Claude" "$(printf 'feat: Made by‏Claude')"
-
-# "thanks/powered by/courtesy of" alternativas
-expect_block "thanks to Claude" "feat: thanks to Claude for help"
-expect_block "powered by GPT" "feat: powered by GPT"
-expect_block "courtesy of OpenAI" "feat: courtesy of OpenAI"
-
-# AI IDEs / herramientas
-expect_block "Cursor IDE" "feat: built with Cursor"
-expect_block "Windsurf" "feat: written with Windsurf"
-expect_block "Codeium" "feat: codeium suggested this"
-expect_block "Cody" "feat: with Cody help"
-expect_block "Aider" "feat: aider generated"
-
-# Co-authored-by sin espacio antes de AI (bypass del review Sonnet)
-expect_block "Co-authored-by AIAssistant" "feat: x
-
-Co-authored-by: AIAssistant <a@b.com>"
-
-# Co-authored-by Copilot standalone (sin GitHub/Microsoft prefix)
-expect_block "Co-authored-by bare Copilot" "feat: x
-
-Co-authored-by: Copilot <c@gh.com>"
-
-# Verbos alternativos
-expect_block "produced by Claude" "feat: produced by Claude"
-expect_block "coded by GPT" "feat: coded by GPT"
-expect_block "crafted with AI" "feat: crafted with AI"
-
-# Using/via como alternativas a by/with
-expect_block "made using Claude" "feat: made using Claude"
-expect_block "generated via GPT" "feat: generated via GPT"
-
-# Full-width characters (NFKC normalization)
-expect_block "Ｍａｄｅ ｂｙ Claude (fullwidth)" "feat: Ｍａｄｅ ｂｙ Claude"
-
-# ─── Bypasses adicionales identificados en audit-2 (2026-05-17 review B) ──
-
-# Combining diacritics (U+0300-U+036F) — Ćlaude = C + U+0301
-expect_block "Ćlaude (combining acute)" "$(printf 'feat: Made by Ćlaude')"
-expect_block "Cláude (combining grave)" "$(printf 'feat: Made by Clàude')"
-
-# Verbos expandidos — sólo aplican si hay (by|with|using|via) después del verbo.
-# "asked Claude to ..." NO bloquea por diseño: el riesgo de false positive en
-# nombres personales o conversaciones legítimas es alto. Si necesitás defensa
-# adversarial usá signed commits.
-expect_block "helped by Claude" "feat: helped by Claude"
-expect_block "wrote with GPT" "feat: wrote with GPT-4"
-expect_block "prompted via AI" "feat: prompted via AI"
-expect_block "fixed by Copilot" "feat: fixed by Copilot"
-expect_block "refactored with Cursor" "feat: refactored with Cursor"
-
-# Cases que DOCUMENTADAMENTE NO bloqueamos (bare provider sin verb-prepositional):
-# - "asked Claude to refactor"  (FP risk: pidió a una persona llamada Claude)
-# - "I used Claude to write"    (FP risk: usé al usuario Claude para escribir)
-# - "claude helped me debug"    (FP risk: Claude la persona ayudó a debuggear)
-# Estos son límites aceptados; ver header del hook.
-expect_pass "asked Claude (person, not attribution)" "feat: asked Claude to review the PR"
-expect_pass "user Claude in seed" "feat: configure user Claude in fixtures"
-
-# ─── Cases que DEBEN PASAR (false positive checks) ────────────────────
-
-expect_pass "Simple feat" "feat: add user profile endpoint"
-expect_pass "Simple fix" "fix: handle empty array in parser"
-expect_pass "Refactor" "refactor: extract auth into middleware"
-expect_pass "Docs" "docs: clarify install instructions"
-expect_pass "Multi-line valid commit" "feat: add search
-
-Implements full-text search using PostgreSQL FTS.
-Includes integration tests."
-expect_pass "Author named Claude (not attribution)" "feat: add user named Claude in seed data"
-expect_pass "AI as acronym in product name" "feat: integrate with PaiAi API gateway"
-expect_pass "Word 'made' without AI context" "feat: changes I made last week to the parser"
-
-# ─── Summary ──────────────────────────────────────────────────────────
-
-echo ""
-echo "=== Results ==="
-echo "  Passed: $PASS"
-echo "  Failed: $FAIL"
-echo ""
-
-if [ $FAIL -gt 0 ]; then
-    echo "Failed tests:"
-    for t in "${FAILED_TESTS[@]}"; do
-        echo "  - $t"
-    done
-    exit 1
-fi
-
-echo "All tests passed."
-exit 0