claude-dev-env 1.25.1 → 1.26.0

package/hooks/blocking/test_code_rules_enforcer_magic_string_masking.py

@@ -0,0 +1,104 @@
+"""Tests that check_magic_values does not flag digits inside string literals.
+
+The regex-based magic-value scan operates on stripped source lines. Before
+this fix it matched digits appearing inside string literals (for example the
+``8`` inside ``"utf-8"``), producing false positives on any line that passes
+an encoding, mode, or similar string kwarg containing a digit. The scanner
+must mask string literals before searching for numeric magic values so only
+genuine literal numbers in code are reported.
+"""
+
+from __future__ import annotations
+
+import importlib.util
+from pathlib import Path
+from types import ModuleType
+
+
+def _load_enforcer_module() -> ModuleType:
+    module_path = Path(__file__).parent / "code_rules_enforcer.py"
+    specification = importlib.util.spec_from_file_location(
+        "code_rules_enforcer_for_string_masking_tests",
+        module_path,
+    )
+    assert specification is not None
+    assert specification.loader is not None
+    module = importlib.util.module_from_spec(specification)
+    specification.loader.exec_module(module)
+    return module
+
+
+code_rules_enforcer = _load_enforcer_module()
+
+
+PRODUCTION_FILE_PATH = "packages/claude-dev-env/hooks/blocking/example_production.py"
+
+
+def test_check_magic_values_should_not_flag_digits_inside_double_quoted_string() -> (
+    None
+):
+    source = (
+        "def read_configuration(path):\n"
+        '    text = path.read_text(encoding="utf-8")\n'
+        "    return text\n"
+    )
+    issues = code_rules_enforcer.check_magic_values(source, PRODUCTION_FILE_PATH)
+    assert issues == [], f"Expected no issues for utf-8 string, got: {issues}"
+
+
+def test_check_magic_values_should_not_flag_digits_inside_single_quoted_string() -> (
+    None
+):
+    source = (
+        "def read_configuration(path):\n"
+        "    text = path.read_text(encoding='utf-8')\n"
+        "    return text\n"
+    )
+    issues = code_rules_enforcer.check_magic_values(source, PRODUCTION_FILE_PATH)
+    assert issues == [], (
+        f"Expected no issues for single-quoted utf-8 string, got: {issues}"
+    )
+
+
+def test_check_magic_values_should_not_flag_digits_inside_multiple_string_kwargs() -> (
+    None
+):
+    source = (
+        "def open_log(path):\n"
+        '    handle = open(path, mode="rb", encoding="utf-8", errors="replace")\n'
+        "    return handle\n"
+    )
+    issues = code_rules_enforcer.check_magic_values(source, PRODUCTION_FILE_PATH)
+    assert issues == [], f"Expected no issues for string-only kwargs, got: {issues}"
+
+
+def test_check_magic_values_should_still_flag_real_magic_value_outside_string() -> None:
+    source = (
+        "def classify_exit(code: int) -> int:\n"
+        "    if code == 5:\n"
+        "        return 0\n"
+        "    return code\n"
+    )
+    issues = code_rules_enforcer.check_magic_values(source, PRODUCTION_FILE_PATH)
+    assert any(
+        issue.endswith("Magic value 5 - extract to named constant") for issue in issues
+    ), f"Expected magic value 5 to be flagged, got: {issues}"
+
+
+def test_check_magic_values_should_flag_real_number_even_when_line_contains_string() -> (
+    None
+):
+    source = (
+        "def classify_exit(code: int) -> int:\n"
+        '    marker = "utf-8"\n'
+        "    if code == 5:\n"
+        "        return 0\n"
+        "    return code\n"
+    )
+    issues = code_rules_enforcer.check_magic_values(source, PRODUCTION_FILE_PATH)
+    assert any(
+        issue.endswith("Magic value 5 - extract to named constant") for issue in issues
+    ), f"Expected magic value 5 to be flagged alongside string literal, got: {issues}"
+    assert not any("Magic value 8" in issue for issue in issues), (
+        f"utf-8 should not produce a magic value 8 issue, got: {issues}"
+    )

package/hooks/blocking/test_code_rules_enforcer_naming_pattern.py

@@ -1,4 +1,4 @@
-"""Unit tests for code-rules-enforcer boolean naming-pattern check."""
+"""Unit tests for code_rules_enforcer boolean naming-pattern check."""
 
 import importlib.util
 import pathlib
@@ -11,7 +11,7 @@ if str(_HOOK_DIRECTORY) not in sys.path:
 
 _hook_spec = importlib.util.spec_from_file_location(
     "code_rules_enforcer",
-    _HOOK_DIRECTORY / "code-rules-enforcer.py",
+    _HOOK_DIRECTORY / "code_rules_enforcer.py",
 )
 assert _hook_spec is not None
 assert _hook_spec.loader is not None

package/hooks/blocking/test_code_rules_enforcer_type_checking_scope.py

@@ -1,4 +1,4 @@
-"""Unit tests for TYPE_CHECKING-scoped import exemption in code-rules-enforcer."""
+"""Unit tests for TYPE_CHECKING-scoped import exemption in code_rules_enforcer."""
 
 import importlib.util
 import pathlib
@@ -10,7 +10,7 @@ if str(_HOOK_DIR) not in sys.path:
 
 hook_spec = importlib.util.spec_from_file_location(
     "code_rules_enforcer",
-    _HOOK_DIR / "code-rules-enforcer.py",
+    _HOOK_DIR / "code_rules_enforcer.py",
 )
 assert hook_spec is not None
 assert hook_spec.loader is not None

package/hooks/blocking/test_content_search_to_zoekt_redirector_integration.py

@@ -18,7 +18,7 @@ class ContentSearchHookIntegrationTests(unittest.TestCase):
             get_zoekt_redirect_reason_brief,
         )
 
-        hook_path = hook_directory / "content-search-to-zoekt-redirector.py"
+        hook_path = hook_directory / "content_search_to_zoekt_redirector.py"
         destructive_gate_label_prefix = "[destructive-gate]"
         destructive_gate_label_prefix_value = f"{destructive_gate_label_prefix} "
         expected_decision = "deny"

package/hooks/blocking/test_destructive_command_blocker.py

@@ -1,22 +1,34 @@
 """Tests for destructive-command-blocker hook."""
 
 import json
+import os
 import subprocess
 import sys
 from pathlib import Path
 
 
-SCRIPT_PATH = Path(__file__).parent / "destructive-command-blocker.py"
+SCRIPT_PATH = Path(__file__).parent / "destructive_command_blocker.py"
 GH_GATE_USER_FACING_PREFIX = "[gh-gate]"
-
-
-def _run_hook(payload: dict) -> subprocess.CompletedProcess[str]:
+GH_REDIRECT_ACTIVE_ENV_VAR = "CLAUDE_GH_REDIRECT_ACTIVE"
+GH_REDIRECT_ACTIVE_VALUE = "1"
+
+
+def _run_hook(
+    payload: dict,
+    gh_redirect_active: bool = True,
+) -> subprocess.CompletedProcess[str]:
+    child_environment = os.environ.copy()
+    if gh_redirect_active:
+        child_environment[GH_REDIRECT_ACTIVE_ENV_VAR] = GH_REDIRECT_ACTIVE_VALUE
+    else:
+        child_environment.pop(GH_REDIRECT_ACTIVE_ENV_VAR, None)
     return subprocess.run(
         [sys.executable, str(SCRIPT_PATH)],
         input=json.dumps(payload),
         text=True,
         capture_output=True,
         check=False,
+        env=child_environment,
     )
 
 
@@ -106,3 +118,50 @@ def test_ignores_non_bash_tool() -> None:
     result = _run_hook(payload)
     assert result.stdout.strip() == ""
     assert result.returncode == 0
+
+
+def test_gh_issue_comment_is_allowed_when_redirect_env_var_is_unset() -> None:
+    payload = _make_bash_payload('gh issue comment 83 --body "hello"')
+
+    result = _run_hook(payload, gh_redirect_active=False)
+
+    assert result.stdout.strip() == ""
+    assert result.returncode == 0
+
+
+def test_gh_pr_comment_is_allowed_when_redirect_env_var_is_unset() -> None:
+    payload = _make_bash_payload('gh pr comment 42 --body "ok"')
+
+    result = _run_hook(payload, gh_redirect_active=False)
+
+    assert result.stdout.strip() == ""
+    assert result.returncode == 0
+
+
+def test_gh_pr_review_is_allowed_when_redirect_env_var_is_unset() -> None:
+    payload = _make_bash_payload("gh pr review 42 --approve")
+
+    result = _run_hook(payload, gh_redirect_active=False)
+
+    assert result.stdout.strip() == ""
+    assert result.returncode == 0
+
+
+def test_gh_api_post_comment_is_allowed_when_redirect_env_var_is_unset() -> None:
+    payload = _make_bash_payload(
+        "gh api /repos/owner/name/issues/1/comments -X POST -f body=hello"
+    )
+
+    result = _run_hook(payload, gh_redirect_active=False)
+
+    assert result.stdout.strip() == ""
+    assert result.returncode == 0
+
+
+def test_rm_rf_still_asks_when_redirect_env_var_is_unset() -> None:
+    payload = _make_bash_payload("rm -rf /tmp/somewhere")
+
+    result = _run_hook(payload, gh_redirect_active=False)
+
+    response = json.loads(result.stdout)
+    assert response["hookSpecificOutput"]["permissionDecision"] == "ask"

package/hooks/blocking/test_gh_body_arg_blocker.py

@@ -10,7 +10,7 @@ if str(_HOOK_DIR) not in sys.path:
 
 hook_spec = importlib.util.spec_from_file_location(
     "gh_body_arg_blocker",
-    _HOOK_DIR / "gh-body-arg-blocker.py",
+    _HOOK_DIR / "gh_body_arg_blocker.py",
 )
 assert hook_spec is not None
 assert hook_spec.loader is not None

package/hooks/blocking/test_pr_description_enforcer.py

@@ -15,7 +15,7 @@ from _gh_body_arg_utils import get_logical_first_line
 
 hook_spec = importlib.util.spec_from_file_location(
     "pr_description_enforcer",
-    _HOOK_DIR / "pr-description-enforcer.py",
+    _HOOK_DIR / "pr_description_enforcer.py",
 )
 assert hook_spec is not None
 assert hook_spec.loader is not None
@@ -213,7 +213,7 @@ def test_read_body_file_rejects_relative_path_traversal(tmp_path) -> None:
     _HOOK_DIR = pathlib.Path(__file__).parent
     if str(_HOOK_DIR) not in sys.path:
         sys.path.insert(0, str(_HOOK_DIR))
-    spec = importlib.util.spec_from_file_location('pde', _HOOK_DIR / 'pr-description-enforcer.py')
+    spec = importlib.util.spec_from_file_location('pde', _HOOK_DIR / 'pr_description_enforcer.py')
     m = importlib.util.module_from_spec(spec)
     spec.loader.exec_module(m)
     import os, pytest
@@ -229,7 +229,7 @@ def test_read_body_file_rejects_relative_path_traversal(tmp_path) -> None:
 def test_read_body_file_allows_absolute_path_outside_cwd(tmp_path) -> None:
     import importlib.util, pathlib, sys
     _HOOK_DIR = pathlib.Path(__file__).parent
-    spec = importlib.util.spec_from_file_location('pde2', _HOOK_DIR / 'pr-description-enforcer.py')
+    spec = importlib.util.spec_from_file_location('pde2', _HOOK_DIR / 'pr_description_enforcer.py')
     m = importlib.util.module_from_spec(spec)
     spec.loader.exec_module(m)
     body_file = tmp_path / 'body.md'
@@ -241,7 +241,7 @@ def test_read_body_file_allows_absolute_path_outside_cwd(tmp_path) -> None:
 def test_reassemble_split_quoted_value_returns_none_for_unclosed_quote() -> None:
     import importlib.util, pathlib, sys
     _HOOK_DIR = pathlib.Path(__file__).parent
-    spec = importlib.util.spec_from_file_location('pde3', _HOOK_DIR / 'pr-description-enforcer.py')
+    spec = importlib.util.spec_from_file_location('pde3', _HOOK_DIR / 'pr_description_enforcer.py')
     m = importlib.util.module_from_spec(spec)
     spec.loader.exec_module(m)
     result = m._reassemble_split_quoted_value("'unclosed", [])
@@ -272,7 +272,7 @@ def test_body_file_path_traversal_returns_none() -> None:
     import importlib.util
     import pathlib
     _HOOK_DIR = pathlib.Path(__file__).parent
-    spec = importlib.util.spec_from_file_location('pde_t', _HOOK_DIR / 'pr-description-enforcer.py')
+    spec = importlib.util.spec_from_file_location('pde_t', _HOOK_DIR / 'pr_description_enforcer.py')
     m = importlib.util.module_from_spec(spec)
     spec.loader.exec_module(m)
     result = m._resolve_body_file_value("../../../etc/passwd")
@@ -303,7 +303,7 @@ def test_read_body_file_rejects_absolute_symlink_outside_cwd(tmp_path: pathlib.P
     import importlib.util
     import pytest
     _HOOK_DIR = pathlib.Path(__file__).parent
-    spec = importlib.util.spec_from_file_location('pde_sym', _HOOK_DIR / 'pr-description-enforcer.py')
+    spec = importlib.util.spec_from_file_location('pde_sym', _HOOK_DIR / 'pr_description_enforcer.py')
     m = importlib.util.module_from_spec(spec)
     spec.loader.exec_module(m)
     target_file = tmp_path / "secret.txt"
@@ -321,7 +321,7 @@ def test_read_body_file_allows_real_absolute_file_inside_cwd(tmp_path: pathlib.P
     """Real absolute file path that exists must be read successfully."""
     import importlib.util
     _HOOK_DIR = pathlib.Path(__file__).parent
-    spec = importlib.util.spec_from_file_location('pde_abs', _HOOK_DIR / 'pr-description-enforcer.py')
+    spec = importlib.util.spec_from_file_location('pde_abs', _HOOK_DIR / 'pr_description_enforcer.py')
     m = importlib.util.module_from_spec(spec)
     spec.loader.exec_module(m)
     body_file = tmp_path / "body.md"
@@ -334,7 +334,7 @@ def test_read_body_file_allows_in_cwd_symlink_pointing_into_cwd(tmp_path: pathli
     """Symlink inside cwd pointing to another file inside cwd must be readable."""
     import importlib.util
     _HOOK_DIR = pathlib.Path(__file__).parent
-    spec = importlib.util.spec_from_file_location('pde_inlink', _HOOK_DIR / 'pr-description-enforcer.py')
+    spec = importlib.util.spec_from_file_location('pde_inlink', _HOOK_DIR / 'pr_description_enforcer.py')
     m = importlib.util.module_from_spec(spec)
     spec.loader.exec_module(m)
     real_file = tmp_path / "real.md"

package/hooks/blocking/test_tdd_enforcer.py

@@ -9,7 +9,7 @@ import time
 from pathlib import Path
 
 
-SCRIPT_PATH = Path(__file__).parent / "tdd-enforcer.py"
+SCRIPT_PATH = Path(__file__).parent / "tdd_enforcer.py"
 
 
 def _load_production_module():
@@ -247,3 +247,55 @@ def test_directory_skip_components_excludes_pluralized_conftest() -> None:
     actual_directory_skip_components = _PRODUCTION_MODULE._directory_skip_components()
 
     assert "conftests" not in actual_directory_skip_components
+
+
+def test_should_skip_silently_when_posix_path_has_dotclaude_segment(tmp_path: Path) -> None:
+    dotclaude_production_file = tmp_path / ".claude" / "agents" / "reviewer.py"
+
+    completed = _run_hook_with_payload(
+        _make_write_payload(dotclaude_production_file, "def review(): pass\n")
+    )
+
+    assert completed.returncode == 0
+    assert completed.stdout.strip() == ""
+
+
+def test_should_skip_silently_when_windows_backslash_path_has_dotclaude_segment() -> None:
+    windows_style_path = "C:\\Users\\dev\\.claude\\agents\\reviewer.py"
+
+    completed = _run_hook_with_payload({
+        "tool_name": "Write",
+        "tool_input": {"file_path": windows_style_path, "content": "def review(): pass\n"},
+    })
+
+    assert completed.returncode == 0
+    assert completed.stdout.strip() == ""
+
+
+def test_should_skip_silently_when_mixed_separator_path_has_dotclaude_segment() -> None:
+    mixed_separator_path = "C:/Users/dev\\.claude/agents\\reviewer.py"
+
+    completed = _run_hook_with_payload({
+        "tool_name": "Write",
+        "tool_input": {"file_path": mixed_separator_path, "content": "def review(): pass\n"},
+    })
+
+    assert completed.returncode == 0
+    assert completed.stdout.strip() == ""
+
+
+def test_should_not_skip_when_dotclaude_is_only_a_filename_substring(tmp_path: Path) -> None:
+    sandbox = _sandbox(tmp_path)
+    substring_production_file = sandbox / "my.claude.helpers.py"
+    substring_production_file.write_text("def help(): pass\n")
+
+    completed = _run_hook_with_payload(_make_write_payload(substring_production_file))
+
+    assert _decision_from(completed) == "deny"
+
+
+def test_is_inside_dotclaude_segment_helper_matches_only_exact_segments() -> None:
+    assert _PRODUCTION_MODULE._is_inside_dotclaude_segment("/home/user/.claude/agent.py") is True
+    assert _PRODUCTION_MODULE._is_inside_dotclaude_segment("C:\\Users\\dev\\.claude\\agent.py") is True
+    assert _PRODUCTION_MODULE._is_inside_dotclaude_segment("/src/my.claude.helpers.py") is False
+    assert _PRODUCTION_MODULE._is_inside_dotclaude_segment("/src/app/service.py") is False

package/hooks/github-action/pre-push-review.yml

@@ -0,0 +1,27 @@
+name: Pre-Push Review
+
+on:
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install pyyaml pytest
+
+      - name: Run validators
+        working-directory: packages/claude-dev-env/hooks/validators
+        run: python run_all_validators.py --json

package/hooks/hooks.json

@@ -7,7 +7,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/content-search-to-zoekt-redirector.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/content_search_to_zoekt_redirector.py",
             "timeout": 10
           }
         ]
@@ -17,42 +17,42 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/write-existing-file-blocker.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/write_existing_file_blocker.py",
             "timeout": 10
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/sensitive-file-protector.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/sensitive_file_protector.py",
             "timeout": 10
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/pyautogui-scroll-blocker.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/pyautogui_scroll_blocker.py",
             "timeout": 10
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/validation/hook-format-validator.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/validation/hook_format_validator.py",
             "timeout": 15
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/validators/run_all_validators.py",
+            "command": "python3 -c \"import sys; sys.path.insert(0, r'${CLAUDE_PLUGIN_ROOT}/hooks'); from validators.run_all_validators import main; sys.exit(main())\"",
             "timeout": 15
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/code-rules-enforcer.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/code_rules_enforcer.py",
             "timeout": 15
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/tdd-enforcer.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/tdd_enforcer.py",
             "timeout": 10
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/validation/code-style-validator.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/validation/code_style_validator.py",
             "timeout": 15
           }
         ]
@@ -62,12 +62,12 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/advisory/refactor-guard.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/advisory/refactor_guard.py",
             "timeout": 15
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/advisory/migration-safety-advisor.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/advisory/migration_safety_advisor.py",
             "timeout": 15
           }
         ]
@@ -77,27 +77,27 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/destructive-command-blocker.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/destructive_command_blocker.py",
             "timeout": 10
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/block-main-commit.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/block_main_commit.py",
             "timeout": 15
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/pr-description-enforcer.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/pr_description_enforcer.py",
             "timeout": 10
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/test-preflight-check.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/test_preflight_check.py",
             "timeout": 10
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/content-search-to-zoekt-redirector.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/content_search_to_zoekt_redirector.py",
             "timeout": 10
           }
         ]
@@ -107,7 +107,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/parallel-task-blocker.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/parallel_task_blocker.py",
             "timeout": 10
           }
         ]
@@ -117,7 +117,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/notification/attention-needed-notify.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/notification/attention_needed_notify.py",
             "timeout": 15
           }
         ]
@@ -129,12 +129,12 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/session/bulk-edit-reminder.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/session/bulk_edit_reminder.py",
             "timeout": 15
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/session/code-rules-reminder.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/session/code_rules_reminder.py",
             "timeout": 15
           }
         ]
@@ -146,7 +146,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/session/plugin-data-dir-cleanup.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/session/plugin_data_dir_cleanup.py",
             "timeout": 10
           }
         ]
@@ -158,12 +158,12 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/notification/attention-needed-notify.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/notification/attention_needed_notify.py",
             "timeout": 15
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/hedging-language-blocker.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/hedging_language_blocker.py",
             "timeout": 10
           }
         ]
@@ -175,7 +175,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/lifecycle/session-end-cleanup.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/lifecycle/session_end_cleanup.py",
             "timeout": 15
           }
         ]
@@ -187,7 +187,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/lifecycle/config-change-guard.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/lifecycle/config_change_guard.py",
             "timeout": 10
           }
         ]
@@ -209,7 +209,7 @@
           },
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/workflow/auto-formatter.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/workflow/auto_formatter.py",
             "timeout": 30
           }
         ]
@@ -219,7 +219,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/workflow/investigation-tracker-reset.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/workflow/investigation_tracker_reset.py",
             "timeout": 10
           }
         ]
@@ -231,7 +231,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/notification/claude-notification-handler.py",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/notification/claude_notification_handler.py",
             "timeout": 15
           }
         ]