claude-code-conductor 2.55.0__tar.gz → 2.55.1__tar.gz

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/.claude/hooks/check_agent_invocation.py

@@ -41,6 +41,7 @@ sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 from _hook_utils import write_debug_log  # noqa: E402
 
 try:
+    sys.stdin.reconfigure(encoding="utf-8")
     sys.stdout.reconfigure(encoding="utf-8")
     sys.stderr.reconfigure(encoding="utf-8")
 except AttributeError:
@@ -53,8 +54,8 @@ REVIEWER_TYPES = frozenset({"code-reviewer", "security-reviewer"})
 PROJECT_ROOT = Path(__file__).resolve().parents[2]
 DEBUG_LOG_PATH = PROJECT_ROOT / ".claude" / "tmp" / "agent_hook_debug.log"
 
-# DoS 防御の読み取り上限（hook はローカル前提だが多層防御として明示する）。
-_STDIN_READ_LIMIT_BYTES = 1 * 1024 * 1024  # 1 MiB
+# DoS 防御の読み取り上限（文字数ベース）。hook はローカル前提だが多層防御として明示する。
+_STDIN_READ_LIMIT_CHARS = 1 * 1024 * 1024  # 1M chars
 
 
 def _escape_for_log(value: str) -> str:
@@ -64,7 +65,7 @@ def _escape_for_log(value: str) -> str:
 
 def main() -> None:
     try:
-        payload = json.loads(sys.stdin.read(_STDIN_READ_LIMIT_BYTES))
+        payload = json.loads(sys.stdin.read(_STDIN_READ_LIMIT_CHARS))
     except (json.JSONDecodeError, ValueError):
         sys.exit(0)
 

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/.claude/hooks/patterns_guard.py

@@ -30,6 +30,7 @@ sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 from _hook_utils import sanitize_for_terminal  # noqa: E402
 
 try:
+    sys.stdin.reconfigure(encoding='utf-8')
     sys.stdout.reconfigure(encoding='utf-8')
     sys.stderr.reconfigure(encoding='utf-8')
 except AttributeError:

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/.claude/hooks/planner_check.py

@@ -41,6 +41,7 @@ sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 from _hook_utils import write_debug_log  # noqa: E402
 
 try:
+    sys.stdin.reconfigure(encoding="utf-8")
     sys.stdout.reconfigure(encoding="utf-8")
     sys.stderr.reconfigure(encoding="utf-8")
 except AttributeError:
@@ -58,8 +59,8 @@ except ImportError:
 PROJECT_ROOT = Path(__file__).resolve().parents[2]
 DEBUG_LOG_PATH = PROJECT_ROOT / ".claude" / "tmp" / "planner_check_debug.log"
 
-# DoS 防御の読み取り上限（hook はローカル前提だが多層防御として明示する）。
-_STDIN_READ_LIMIT_BYTES = 1 * 1024 * 1024  # 1 MiB
+# DoS 防御の読み取り上限（stdin は文字数ベース）。hook はローカル前提だが多層防御として明示する。
+_STDIN_READ_LIMIT_CHARS = 1 * 1024 * 1024  # 1M chars
 _FILE_READ_LIMIT_BYTES = 512 * 1024        # 512 KiB
 
 
@@ -230,7 +231,7 @@ def _check_r6_reviewer_absence(tasks: list) -> list[str]:
 
 def main() -> None:
     try:
-        payload = json.loads(sys.stdin.read(_STDIN_READ_LIMIT_BYTES))
+        payload = json.loads(sys.stdin.read(_STDIN_READ_LIMIT_CHARS))
     except (json.JSONDecodeError, ValueError):
         sys.exit(0)
 

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/.claude/hooks/post_tool.py

@@ -21,6 +21,7 @@ import re
 import sys
 
 try:
+    sys.stdin.reconfigure(encoding='utf-8')
     sys.stdout.reconfigure(encoding='utf-8')
     sys.stderr.reconfigure(encoding='utf-8')
 except AttributeError:

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/.claude/hooks/pre_compact.py

@@ -12,10 +12,23 @@ import re
 import sys
 from datetime import datetime, timedelta, timezone
 
-sys.stdout.reconfigure(encoding='utf-8')
-sys.stderr.reconfigure(encoding='utf-8')
-
-from session_utils import SESSION_JSON_MARKER, append_checkpoint, is_worktree, SESSIONS_DIR
+try:
+    sys.stdin.reconfigure(encoding='utf-8')
+    sys.stdout.reconfigure(encoding='utf-8')
+    sys.stderr.reconfigure(encoding='utf-8')
+except AttributeError:
+    pass
+
+from session_utils import append_checkpoint, is_worktree, SESSIONS_DIR
+# SESSION_JSON_MARKER は本ファイルのロジックでは未参照だが、過去レビュー（Code Medium-3a）の
+# 契約として module-level 定数の存在を tests/test_stop_precompact_fixes.py が要求する再エクスポート。
+# 未使用に見えても削除しないこと。
+# `# noqa: F401` は flake8/ruff 固有の規約で生の pyflakes は解釈しないため、
+# 代わりに __all__ へ列挙して re-export であることを明示する（pyflakes は
+# __all__ 掲載名を使用済みとみなすため、警告が実際に抑制される）。
+from session_utils import SESSION_JSON_MARKER
+
+__all__ = ["SESSION_JSON_MARKER"]
 
 
 # デバウンス窓幅（秒）。直近の PreCompact checkpoint からこの秒数以内の再実行は

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/.claude/hooks/pre_tool.py

@@ -7,8 +7,12 @@ import re
 import shlex
 import sys
 
-sys.stdout.reconfigure(encoding='utf-8')
-sys.stderr.reconfigure(encoding='utf-8')
+try:
+    sys.stdin.reconfigure(encoding='utf-8')
+    sys.stdout.reconfigure(encoding='utf-8')
+    sys.stderr.reconfigure(encoding='utf-8')
+except AttributeError:
+    pass
 
 
 def _is_rm_rf(tokens: list[str], rm_idx: int) -> bool:

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/.claude/hooks/recall_autorebuild.py

@@ -23,8 +23,10 @@ import sys
 import time
 from pathlib import Path
 
-# CLAUDE.md §9-3: reconfigure stdout/stderr to UTF-8 on Windows.
+# CLAUDE.md §9-3: reconfigure stdin/stdout/stderr to UTF-8 on Windows.
 try:
+    if sys.stdin and hasattr(sys.stdin, "reconfigure"):
+        sys.stdin.reconfigure(encoding="utf-8")
     if sys.stdout and hasattr(sys.stdout, "reconfigure"):
         sys.stdout.reconfigure(encoding="utf-8")
     if sys.stderr and hasattr(sys.stderr, "reconfigure"):

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/.claude/hooks/report_contract_check.py

@@ -38,6 +38,7 @@ sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 from _hook_utils import norm_component, sanitize_for_terminal  # noqa: E402
 
 try:
+    sys.stdin.reconfigure(encoding='utf-8')
     sys.stdout.reconfigure(encoding='utf-8')
     sys.stderr.reconfigure(encoding='utf-8')
 except AttributeError:

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/.claude/hooks/session_mode_watch.py

@@ -52,6 +52,7 @@ sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 from _hook_utils import norm_component, sanitize_for_terminal  # noqa: E402
 
 try:
+    sys.stdin.reconfigure(encoding='utf-8')
     sys.stdout.reconfigure(encoding='utf-8')
     sys.stderr.reconfigure(encoding='utf-8')
 except AttributeError:

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/.claude/hooks/tier_autoapply.py

@@ -106,8 +106,10 @@ _VALID_TIERS = ("haiku", "sonnet", "opus")
 
 KILL_SWITCH_ENV = "C3_TIER_AUTOAPPLY_DISABLE"
 
-# DoS 防御の stdin 読み取り上限（check_agent_invocation.py と同一）。
-_STDIN_READ_LIMIT_BYTES = 1 * 1024 * 1024  # 1 MiB
+# DoS 防御の stdin 読み取り上限（文字数ベース・check_agent_invocation.py と同一）。
+# sys.stdin はテキストストリームのため read(n) の n は文字数であってバイト数ではない
+# （UTF-8 マルチバイト文字では実バイト量が最大 4 倍になり得る）。
+_STDIN_READ_LIMIT_CHARS = 1 * 1024 * 1024  # 1M chars
 
 # applied-state のローテーション閾値（§3-4）。
 _MAX_JSONL_BYTES = 1 * 1024 * 1024  # 1 MB
@@ -371,7 +373,7 @@ def main() -> None:
         sys.exit(0)
 
     try:
-        payload = json.loads(sys.stdin.read(_STDIN_READ_LIMIT_BYTES))
+        payload = json.loads(sys.stdin.read(_STDIN_READ_LIMIT_CHARS))
     except (json.JSONDecodeError, ValueError):
         sys.exit(0)
     if not isinstance(payload, dict):

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/.claude/hooks/worktree_guard.py

@@ -16,8 +16,12 @@ import os
 import re
 import sys
 
-sys.stdout.reconfigure(encoding='utf-8')
-sys.stderr.reconfigure(encoding='utf-8')
+try:
+    sys.stdin.reconfigure(encoding='utf-8')
+    sys.stdout.reconfigure(encoding='utf-8')
+    sys.stderr.reconfigure(encoding='utf-8')
+except AttributeError:
+    pass
 
 # worktree パスの識別に使うコンポーネント名。
 # `.claude/worktrees/agent-<id>/` という構造を前提とし、

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## [2.55.1] - 2026-07-26
+
+### 修正
+
+- **hook stdin cp932 defect の修正（stdin UTF-8 reconfigure 横断適用）**: v2.55.0 の `session_mode_watch.py` が実機の Edit 発火で沈黙する defect を修正。Windows ネイティブ Python では hook の stdin が cp932 既定でデコードされるため、ハーネスが送る UTF-8 JSON payload 中の日本語（`モード:` 行）が mojibake となり `^モード: 自律` 正規表現が不一致→モード行変更を一切検知できていなかった（実機発火スモークで確定・同一 payload の素パイプ再現と `PYTHONIOENCODING=utf-8` 対照実験で原因を実測特定）。stdin reconfigure が欠落していた 10 hook（新規 3 本 + 既存 7 本: session_mode_watch / patterns_guard / report_contract_check / check_agent_invocation / planner_check / post_tool / pre_tool / pre_compact / worktree_guard / recall_autorebuild）へ `sys.stdin.reconfigure(encoding='utf-8')` を追加し、既存 12 hook のイディオムへ統一（canonical 順序 stdin → stdout → stderr・素の呼び出し 3 ファイルは try/except AttributeError ラップ化＝crash-to-fail-open リスクの軽減方向）
+
+### 追加
+
+- **cp932 実バイトリグレッションテスト**: `PYTHONIOENCODING=cp932` を強制した subprocess に `ensure_ascii=False` の生 UTF-8 payload をパイプし、Windows ネイティブ既定の欠陥環境を CI の Linux 上でも決定論的に再現するテストを `tests/test_session_mode_watch.py` に追加（ASCII エスケープ payload では defect を再現できないことが既存テスト素通しの真因だった）
+- **静的イディオム検査 `tests/test_hooks_stdin_idiom.py` 新設**: `.claude/hooks/*.py` を走査し「`sys.stdin` を読む hook は stdin reconfigure 必須」を機械強制する。検出は純粋 AST 判定（reconfigure receiver 除外の 2 周走査）でコメント/docstring 内の文字列による偽陽性・誤検出なし。アンダースコア始まりファイルも検査対象
+
+### 変更
+
+- **`_STDIN_READ_LIMIT_BYTES` → `_STDIN_READ_LIMIT_CHARS` 改名**（check_agent_invocation / planner_check / tier_autoapply）: `sys.stdin.read(n)` の n は文字数であり命名のバイト数示唆と実際の意味論の乖離を解消（読み取り方式は不変・挙動変更なし）
+- **`pre_compact.py` の `SESSION_JSON_MARKER` 再エクスポートを `__all__` 明示化**: 過去レビュー（Code Medium-3a）の契約再エクスポートである旨のコメントを付し、生 pyflakes でも未使用 import 警告が出ない形へ整理
+
+### 後方互換
+
+- **破壊的変更なし**。修正は「stdin を UTF-8 として読む」の 1 点で、fail-open 挙動・payload 処理ロジック・ブロック/警告の判定条件は不変。修正前に誤って沈黙していた検知（session_mode_watch のモード行監視）が正しく発火するようになる方向のみの変更
+
 ## [2.55.0] - 2026-07-26
 
 ### 追加

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: claude-code-conductor
-Version: 2.55.0
+Version: 2.55.1
 Summary: Multi-agent orchestration framework for Claude Code with Codex/Cursor adapters (C3)
 Project-URL: Homepage, https://github.com/satoh-y-0323/claude-code-conductor
 Project-URL: Repository, https://github.com/satoh-y-0323/claude-code-conductor

{claude_code_conductor-2.55.0 → claude_code_conductor-2.55.1}/src/c3/__init__.py

@@ -1,3 +1,3 @@
 """Claude Code Conductor (C3) - multi-agent orchestration framework for Claude Code."""
 
-__version__ = "2.55.0"
+__version__ = "2.55.1"

claude_code_conductor-2.55.1/tests/test_hooks_stdin_idiom.py

@@ -0,0 +1,357 @@
+#!/usr/bin/env python3
+"""
+test_hooks_stdin_idiom.py: Static analysis test for stdin reconfigure idiom in hooks.
+
+Tests that all .claude/hooks/*.py files that use sys.stdin also contain a
+sys.stdin.reconfigure(encoding='utf-8') call (or equivalent reconfigure with
+encoding parameter), following the idiom established in CLAUDE.md §9-3.
+
+## Detection Strategy (AST-based)
+
+1. **sys.stdin Usage Detection (AST)**:
+   - Walks the AST for ast.Attribute nodes matching sys -> stdin
+     (Name "sys" / Attribute "stdin").
+   - Detects patterns: sys.stdin.read(), sys.stdin.readline(), json.load(sys.stdin), etc.
+   - Excludes the single sys.stdin node that is the receiver of a
+     sys.stdin.reconfigure(...) call (i.e. the func chain of an ast.Call):
+     configuring the stream is setup, not "usage". Every other sys.stdin node
+     counts as usage.
+   - No raw-source regex is involved at any stage, so comments and docstrings
+     cannot influence the result (see section 3).
+
+2. **Reconfigure Detection (AST)**:
+   - Walks the AST for an ast.Call whose func is the attribute chain
+     sys -> stdin -> reconfigure (Name "sys" / Attribute "stdin" /
+     Attribute "reconfigure") and which carries an `encoding=` keyword argument.
+   - Does NOT require try/except context (though production idiom uses it):
+     the visitor walks the whole tree regardless of control flow, so both the
+     `try/except AttributeError` idiom and the `if sys.stdin and hasattr(...)`
+     idiom are detected.
+   - Quote style of the encoding value is irrelevant, since the check inspects
+     the parsed keyword argument rather than raw source text.
+
+3. **Comments and Docstrings**:
+   - Both detections are AST-based, so comments and docstrings are excluded from
+     the detection surface automatically: comments never enter the AST at all,
+     and a docstring is a plain string constant, not an ast.Call. A file that
+     merely *mentions* sys.stdin.reconfigure(encoding='utf-8') in a comment or
+     docstring is therefore correctly reported as "reconfigure missing".
+
+## Known Limitations
+
+- Does not validate that reconfigure is actually reached at runtime
+  (e.g., if it's in an if-block that never runs). Static detection is
+  best-effort; behavioral verification is in ADR-3 subprocess tests.
+- A guard expression such as `if sys.stdin and hasattr(sys.stdin, 'reconfigure')`
+  counts as usage, because only the reconfigure call's own receiver node is
+  excluded. This is conservative-safe: a file carrying that guard also calls
+  reconfigure, so the idiom check still passes.
+- Does not check if stdin.buffer or other alternatives are used
+  (acceptable per ADR-2: stdin.reconfigure is the standard idiom).
+"""
+
+import ast
+from pathlib import Path
+
+import pytest
+
+
+def get_hooks_dir() -> Path:
+    """Return the .claude/hooks directory path."""
+    project_root = Path(__file__).parent.parent
+    return project_root / ".claude" / "hooks"
+
+
+def _is_sys_stdin(node: ast.AST) -> bool:
+    """Return True if node is the attribute expression ``sys.stdin``."""
+    return (
+        isinstance(node, ast.Attribute)
+        and node.attr == "stdin"
+        and isinstance(node.value, ast.Name)
+        and node.value.id == "sys"
+    )
+
+
+def extract_stdin_refs(source: str, filename: str) -> bool:
+    """
+    Check if source code uses sys.stdin.
+
+    Returns True if sys.stdin is referenced in a way that requires reading
+    (not just in reconfigure calls).
+
+    Detection is purely AST-based: comments and docstrings never contribute to
+    the result, because comments do not enter the AST at all and a docstring is
+    a plain string constant rather than an attribute expression.
+
+    Args:
+        source: Python source code as string
+        filename: Name of file (for error reporting)
+
+    Returns:
+        bool: True if sys.stdin usage is detected
+    """
+    try:
+        tree = ast.parse(source)
+    except SyntaxError as e:
+        print(f"  [SYNTAX ERROR] {filename}: {e}")
+        return False
+
+    # sys.stdin nodes acting as the receiver of a sys.stdin.reconfigure(...)
+    # call. Configuring the stream is setup, not usage, so they are excluded.
+    # `tree` stays alive for the whole function, so node identities are stable.
+    reconfigure_receivers = set()
+    for node in ast.walk(tree):
+        if (
+            isinstance(node, ast.Call)
+            and isinstance(node.func, ast.Attribute)
+            and node.func.attr == "reconfigure"
+            and _is_sys_stdin(node.func.value)
+        ):
+            reconfigure_receivers.add(id(node.func.value))
+
+    for node in ast.walk(tree):
+        if _is_sys_stdin(node) and id(node) not in reconfigure_receivers:
+            return True
+
+    return False
+
+
+def has_stdin_reconfigure(source: str) -> bool:
+    """
+    Check if source code contains sys.stdin.reconfigure(encoding=...).
+
+    Uses AST-based detection to avoid false positives from comments/docstrings.
+
+    Args:
+        source: Python source code as string
+
+    Returns:
+        bool: True if reconfigure call with encoding parameter found
+    """
+    try:
+        tree = ast.parse(source)
+    except SyntaxError:
+        return False
+
+    class ReconfigureVisitor(ast.NodeVisitor):
+        def __init__(self):
+            self.found_reconfigure = False
+
+        def visit_Call(self, node: ast.Call) -> None:
+            # Check for sys.stdin.reconfigure(...) pattern
+            if (
+                isinstance(node.func, ast.Attribute)
+                and node.func.attr == "reconfigure"
+                and isinstance(node.func.value, ast.Attribute)
+                and node.func.value.attr == "stdin"
+                and isinstance(node.func.value.value, ast.Name)
+                and node.func.value.value.id == "sys"
+            ):
+                # Found sys.stdin.reconfigure call. Check for encoding keyword argument.
+                for keyword in node.keywords:
+                    if keyword.arg == "encoding":
+                        self.found_reconfigure = True
+                        return
+            self.generic_visit(node)
+
+    visitor = ReconfigureVisitor()
+    visitor.visit(tree)
+    return visitor.found_reconfigure
+
+
+def check_hook_file(hook_path: Path) -> tuple[bool, str]:
+    """
+    Check a single hook file for stdin reconfigure idiom.
+
+    Args:
+        hook_path: Path to hook .py file
+
+    Returns:
+        (passed, message): bool indicating pass/fail and explanatory message
+    """
+    try:
+        source = hook_path.read_text(encoding="utf-8")
+    except Exception as e:
+        return False, f"Failed to read: {e}"
+
+    uses_stdin = extract_stdin_refs(source, hook_path.name)
+    has_reconfigure = has_stdin_reconfigure(source)
+
+    if uses_stdin and not has_reconfigure:
+        return False, "Uses sys.stdin but missing reconfigure(encoding=...)"
+    elif uses_stdin and has_reconfigure:
+        return True, "OK: uses sys.stdin and has reconfigure"
+    else:
+        return True, "OK: does not use sys.stdin"
+
+
+def test_hooks_stdin_idiom():
+    """
+    Test that all hooks using sys.stdin have stdin.reconfigure(encoding='utf-8').
+    """
+    hooks_dir = get_hooks_dir()
+
+    if not hooks_dir.exists():
+        raise RuntimeError(f"Hooks directory not found: {hooks_dir}")
+
+    hook_files = sorted(hooks_dir.glob("*.py"))
+
+    if not hook_files:
+        raise RuntimeError(f"No .py files found in {hooks_dir}")
+
+    print(f"\n=== Scanning {len(hook_files)} hook files ===")
+    print(f"Directory: {hooks_dir}\n")
+
+    failures = []
+    passes = []
+
+    for hook_path in hook_files:
+        # Check all hook files including private modules (_hook_utils.py, etc.)
+        # using the same reconfigure detection logic.
+        passed, message = check_hook_file(hook_path)
+
+        status = "PASS" if passed else "FAIL"
+        print(f"[{status}] {hook_path.name}: {message}")
+
+        if not passed:
+            failures.append((hook_path.name, message))
+        else:
+            passes.append(hook_path.name)
+
+    print("\n=== Summary ===")
+    print(f"Passed: {len(passes)}")
+    print(f"Failed: {len(failures)}")
+
+    if failures:
+        print("\n=== Failed hooks ===")
+        for name, msg in failures:
+            print(f"  {name}: {msg}")
+
+        # Construct assertion message with failing file names
+        failing_files = ", ".join(name for name, _ in failures)
+        raise AssertionError(
+            f"stdin idiom check failed for {len(failures)} hook(s): {failing_files}"
+        )
+
+
+# 以下は has_stdin_reconfigure() / extract_stdin_refs() の AST ベース判定そのものを
+# 対象にした単体テスト。上の test_hooks_stdin_idiom() は実 hook ファイルを走査するため、
+# 「コメント/docstring 内の文字列を検出しない」という偽陽性排除の効果は（そのような hook が
+# 存在しないため）検証されない。正規表現ベースへの回帰を検知する回帰防止テストとして分離する。
+
+# コメント内にのみ reconfigure が現れる負例（実コードでは stdin を読むだけ）
+_SRC_RECONFIGURE_IN_COMMENT_ONLY = """\
+import sys
+
+# sys.stdin.reconfigure(encoding='utf-8')
+data = sys.stdin.read()
+"""
+
+# docstring 内にのみ reconfigure が現れる負例
+_SRC_RECONFIGURE_IN_DOCSTRING_ONLY = '''\
+"""Hook that should call sys.stdin.reconfigure(encoding='utf-8') but does not."""
+
+import sys
+
+data = sys.stdin.read()
+'''
+
+# 本番 idiom その 1: try/except AttributeError
+_SRC_RECONFIGURE_TRY_EXCEPT = """\
+import sys
+
+try:
+    sys.stdin.reconfigure(encoding='utf-8')
+except AttributeError:
+    pass
+
+data = sys.stdin.read()
+"""
+
+# 本番 idiom その 2: if hasattr（recall_autorebuild.py 系）
+_SRC_RECONFIGURE_IF_HASATTR = """\
+import sys
+
+if sys.stdin and hasattr(sys.stdin, 'reconfigure'):
+    sys.stdin.reconfigure(encoding='utf-8')
+
+data = sys.stdin.read()
+"""
+
+# stdin を一切使わないソース
+_SRC_NO_STDIN = """\
+import sys
+
+print(sys.argv)
+"""
+
+# extract_stdin_refs の「実使用検出」用の正例。実コードで sys.stdin.read() を呼ぶ。
+_SRC_REAL_STDIN_READ = """\
+import sys
+
+data = sys.stdin.read()
+print(data)
+"""
+
+# CR-r3 finding #1 の反証シナリオ: 実コードは reconfigure 呼び出しのみで stdin を読まず、
+# コメントに「.reconfigure で終わらない」sys.stdin 言及がある負例。
+# 旧実装（AST ゲート後に生ソース全体へ regex フォールバック）では usage あり(True)と
+# 誤検出していた。純粋 AST 判定への回帰防止テスト。
+_SRC_RECONFIGURE_ONLY_WITH_STDIN_COMMENT = """\
+import sys
+
+try:
+    sys.stdin.reconfigure(encoding='utf-8')
+except AttributeError:
+    pass
+
+# NOTE: some tools call sys.stdin.read() directly instead
+print("done")
+"""
+
+
+@pytest.mark.parametrize(
+    "source, expected",
+    [
+        pytest.param(
+            _SRC_RECONFIGURE_IN_COMMENT_ONLY, False, id="comment-only-is-not-detected"
+        ),
+        pytest.param(
+            _SRC_RECONFIGURE_IN_DOCSTRING_ONLY,
+            False,
+            id="docstring-only-is-not-detected",
+        ),
+        pytest.param(_SRC_RECONFIGURE_TRY_EXCEPT, True, id="try-except-idiom"),
+        pytest.param(_SRC_RECONFIGURE_IF_HASATTR, True, id="if-hasattr-idiom"),
+    ],
+)
+def test_has_stdin_reconfigure_ignores_comments_and_docstrings(source, expected):
+    """AST ベース判定がコメント/docstring 内の文字列を検出しないことを検証する。"""
+    assert has_stdin_reconfigure(source) is expected
+
+
+@pytest.mark.parametrize(
+    "source, expected",
+    [
+        pytest.param(_SRC_NO_STDIN, False, id="no-stdin-usage"),
+        pytest.param(_SRC_REAL_STDIN_READ, True, id="real-stdin-read-usage"),
+        pytest.param(
+            _SRC_RECONFIGURE_ONLY_WITH_STDIN_COMMENT,
+            False,
+            id="reconfigure-only-with-stdin-comment-is-not-usage",
+        ),
+    ],
+)
+def test_extract_stdin_refs_detects_only_real_usage(source, expected):
+    """extract_stdin_refs() が実コード上の stdin 使用のみを検出することを検証する。
+
+    - stdin を使わないソースでは False
+    - 実際に sys.stdin.read() を呼ぶソースでは True
+    - reconfigure 呼び出しのみ＋コメント内の sys.stdin 言及では False
+      （純粋 AST 判定であり、コメントは検出面に入らない）
+    """
+    assert extract_stdin_refs(source, "synthetic.py") is expected
+
+
+if __name__ == "__main__":
+    test_hooks_stdin_idiom()