open/config-audit
1
0
Fork 0
Code Issues Releases 1 Activity

fix(hkv,rul): add 3 verified hook events; correct globs-rule wording

Browse source 
HKV: add Setup, UserPromptExpansion, PostToolBatch to VALID_EVENTS,
verified live against code.claude.com/docs/en/hooks.md (2026-06-19). A
valid hook using one of these was wrongly flagged "will never fire" — a
user could delete a working hook. Made the "(N total)" hint dynamic so
it can't drift again. Flagged the unverified kebab 'post-session' in a
comment (an existing test depends on it; follow-up check needed).

RUL: reword the globs finding. Only `paths:` is documented; whether CC
ever read `globs` is unverified, so the old "deprecated/legacy" framing
overclaimed (Verifiseringsplikt). New wording steers to the documented
`paths:` field. Updated the coupled fix-engine title match and the
humanizer entry (which also carried the "field was renamed" overclaim).

Suite 950 -> 954 (badge bumped). self-audit A/A, scanner count 13. No
version bump — these land in the pending v5.4.1 patch.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ter3E2JSi1Khgmuf2kady8
This commit is contained in:
Kjell Tore Guttormsen 2026-06-20 09:56:00 +02:00
commit b6a62d7699
7 changed files with 84 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

18
tests/scanners/rules-validator.test.mjs
View file

@ -45,9 +45,21 @@ describe('RUL scanner — broken project', () => {
result = await scan(resolve(FIXTURES, 'broken-project'), discovery);
});
it('detects deprecated globs field', () => {
const found = result.findings.some(f => f.title.includes('deprecated'));
assert.ok(found, 'Should detect globs: instead of paths:');
it('flags a "globs" rule and steers to the documented "paths" field', () => {
const f = result.findings.find(x => /globs/i.test(x.title));
assert.ok(f, 'Should flag globs: usage');
// Verifiseringsplikt: only `paths` is documented; whether CC ever read
// `globs` is unverified, so the wording must NOT claim it is
// deprecated/legacy Claude Code syntax.
assert.ok(
!/deprecated|legacy/i.test(`${f.title} ${f.description} ${f.recommendation}`),
'wording must not assert globs is deprecated/legacy CC syntax (unverified)',
);
assert.match(
`${f.description} ${f.recommendation}`,
/paths/,
'should steer to the documented paths: field',
);
});
it('detects dead rule (matches no files)', () => {