claude-dev-env 1.59.0 → 1.60.0

package/hooks/blocking/test_verification_verdict_store.py

@@ -0,0 +1,278 @@
+"""Tests for the mechanical commit-gate exemption in verification_verdict_store.
+
+Each test builds a real git repository with a real origin remote and asserts
+the exemption decision against the live work tree, exercising the same code
+path the verified_commit_gate hook runs.
+"""
+
+import importlib.util
+import pathlib
+import subprocess
+import sys
+
+_HOOK_DIR = pathlib.Path(__file__).parent
+if str(_HOOK_DIR) not in sys.path:
+    sys.path.insert(0, str(_HOOK_DIR))
+
+store_spec = importlib.util.spec_from_file_location(
+    "verification_verdict_store",
+    _HOOK_DIR / "verification_verdict_store.py",
+)
+assert store_spec is not None
+assert store_spec.loader is not None
+store_module = importlib.util.module_from_spec(store_spec)
+store_spec.loader.exec_module(store_module)
+is_verification_exempt_diff = store_module.is_verification_exempt_diff
+resolve_merge_base = store_module.resolve_merge_base
+branch_surface_manifest = store_module.branch_surface_manifest
+
+constants_spec = importlib.util.spec_from_file_location(
+    "verified_commit_constants",
+    _HOOK_DIR / "config" / "verified_commit_constants.py",
+)
+assert constants_spec is not None
+assert constants_spec.loader is not None
+constants_module = importlib.util.module_from_spec(constants_spec)
+constants_spec.loader.exec_module(constants_module)
+CORRECTIVE_MESSAGE = constants_module.CORRECTIVE_MESSAGE
+
+PRODUCTION_SOURCE = "def add(left: int, right: int) -> int:\n    return left + right\n"
+TEST_SOURCE = "def test_add() -> None:\n    assert 1 + 1 == 2\n"
+
+
+def _run_git(repo_dir: pathlib.Path, *git_arguments: str) -> None:
+    subprocess.run(
+        ["git", "-C", str(repo_dir), *git_arguments],
+        check=True,
+        capture_output=True,
+        text=True,
+    )
+
+
+def _make_repo_on_branch(
+    tmp_path: pathlib.Path, branch_name: str
+) -> pathlib.Path:
+    origin_dir = tmp_path / "origin.git"
+    work_dir = tmp_path / "work"
+    work_dir.mkdir()
+    subprocess.run(
+        ["git", "init", "--bare", f"--initial-branch={branch_name}", str(origin_dir)],
+        check=True,
+        capture_output=True,
+        text=True,
+    )
+    empty_hooks_dir = tmp_path / "nohooks"
+    empty_hooks_dir.mkdir()
+    _run_git(work_dir, "init", f"--initial-branch={branch_name}")
+    _run_git(work_dir, "config", "user.email", "tests@example.com")
+    _run_git(work_dir, "config", "user.name", "Verdict Store Tests")
+    _run_git(work_dir, "config", "core.hooksPath", str(empty_hooks_dir))
+    (work_dir / "src").mkdir()
+    (work_dir / "tests").mkdir()
+    (work_dir / "src" / "app.py").write_text(PRODUCTION_SOURCE, encoding="utf-8")
+    (work_dir / "tests" / "test_app.py").write_text(TEST_SOURCE, encoding="utf-8")
+    (work_dir / "README.md").write_text("# Fixture repo\n", encoding="utf-8")
+    _run_git(work_dir, "add", "-A")
+    _run_git(work_dir, "commit", "-m", "base")
+    _run_git(work_dir, "remote", "add", "origin", str(origin_dir))
+    _run_git(work_dir, "push", "-u", "origin", branch_name)
+    return work_dir
+
+
+def _make_repo_with_origin(tmp_path: pathlib.Path) -> pathlib.Path:
+    return _make_repo_on_branch(tmp_path, "main")
+
+
+def _exemption_for(work_dir: pathlib.Path) -> bool:
+    merge_base_sha = resolve_merge_base(str(work_dir))
+    assert merge_base_sha is not None
+    return is_verification_exempt_diff(str(work_dir), merge_base_sha)
+
+
+def test_production_change_is_gated(tmp_path: pathlib.Path) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    (work_dir / "src" / "app.py").write_text(
+        "def add(left: int, right: int) -> int:\n    return left - right\n",
+        encoding="utf-8",
+    )
+    assert _exemption_for(work_dir) is False
+
+
+def test_docs_only_change_is_exempt(tmp_path: pathlib.Path) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    (work_dir / "README.md").write_text(
+        "# Fixture repo\n\nUpdated.\n", encoding="utf-8"
+    )
+    assert _exemption_for(work_dir) is True
+
+
+def test_docstring_only_python_change_is_exempt(tmp_path: pathlib.Path) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    (work_dir / "src" / "app.py").write_text(
+        'def add(left: int, right: int) -> int:\n    """Add two integers."""\n'
+        "    return left + right\n",
+        encoding="utf-8",
+    )
+    assert _exemption_for(work_dir) is True
+
+
+def test_modified_test_file_is_exempt(tmp_path: pathlib.Path) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    (work_dir / "tests" / "test_app.py").write_text(
+        TEST_SOURCE + "\n\ndef test_add_zero() -> None:\n    assert 0 + 0 == 0\n",
+        encoding="utf-8",
+    )
+    assert _exemption_for(work_dir) is True
+
+
+def test_untracked_test_prefix_file_is_exempt(tmp_path: pathlib.Path) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    (work_dir / "tests" / "test_extra.py").write_text(TEST_SOURCE, encoding="utf-8")
+    assert _exemption_for(work_dir) is True
+
+
+def test_untracked_test_suffix_file_is_exempt(tmp_path: pathlib.Path) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    (work_dir / "tests" / "app_test.py").write_text(TEST_SOURCE, encoding="utf-8")
+    assert _exemption_for(work_dir) is True
+
+
+def test_modified_conftest_is_exempt(tmp_path: pathlib.Path) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    (work_dir / "tests" / "conftest.py").write_text(
+        "import pytest\n\n\n@pytest.fixture\ndef sample() -> int:\n    return 3\n",
+        encoding="utf-8",
+    )
+    assert _exemption_for(work_dir) is True
+
+
+def test_deleted_test_file_is_exempt(tmp_path: pathlib.Path) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    (work_dir / "tests" / "test_app.py").unlink()
+    assert _exemption_for(work_dir) is True
+
+
+def test_mixed_test_and_production_change_is_gated(tmp_path: pathlib.Path) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    (work_dir / "tests" / "test_app.py").write_text(
+        TEST_SOURCE + "\n", encoding="utf-8"
+    )
+    (work_dir / "src" / "app.py").write_text(
+        "def add(left: int, right: int) -> int:\n    return left * right\n",
+        encoding="utf-8",
+    )
+    assert _exemption_for(work_dir) is False
+
+
+def test_untracked_production_file_is_gated(tmp_path: pathlib.Path) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    (work_dir / "src" / "extra.py").write_text(PRODUCTION_SOURCE, encoding="utf-8")
+    assert _exemption_for(work_dir) is False
+
+
+def test_production_file_named_like_test_outside_python_is_gated(
+    tmp_path: pathlib.Path,
+) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    (work_dir / "src" / "test_data.json").write_text("{}", encoding="utf-8")
+    assert _exemption_for(work_dir) is False
+
+
+def test_comment_only_change_in_non_python_file_is_gated(
+    tmp_path: pathlib.Path,
+) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    shell_script_path = work_dir / "src" / "deploy.sh"
+    shell_script_path.write_text("# build the project\nmake build\n", encoding="utf-8")
+    _run_git(work_dir, "add", "-A")
+    _run_git(work_dir, "commit", "-m", "add deploy script")
+    shell_script_path.write_text(
+        "# build the release artifact\nmake build\n", encoding="utf-8"
+    )
+    assert _exemption_for(work_dir) is False
+
+
+def test_corrective_message_scopes_comment_exemption_to_python() -> None:
+    lowered_message = CORRECTIVE_MESSAGE.lower()
+    assert "comment" in lowered_message
+    assert "python" in lowered_message
+    assert "comment-, and test-only surfaces are exempt" not in lowered_message
+
+
+def test_untracked_claude_production_hook_is_gated(tmp_path: pathlib.Path) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    new_hook_dir = work_dir / ".claude" / "hooks" / "blocking"
+    new_hook_dir.mkdir(parents=True)
+    (new_hook_dir / "evil_new_hook.py").write_text(PRODUCTION_SOURCE, encoding="utf-8")
+    assert _exemption_for(work_dir) is False
+
+
+def test_untracked_claude_production_hook_is_in_surface_manifest(
+    tmp_path: pathlib.Path,
+) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    new_hook_dir = work_dir / ".claude" / "hooks" / "blocking"
+    new_hook_dir.mkdir(parents=True)
+    (new_hook_dir / "evil_new_hook.py").write_text(PRODUCTION_SOURCE, encoding="utf-8")
+    merge_base_sha = resolve_merge_base(str(work_dir))
+    assert merge_base_sha is not None
+    surface_manifest_text = branch_surface_manifest(str(work_dir), merge_base_sha)
+    assert surface_manifest_text is not None
+    assert ".claude/hooks/blocking/evil_new_hook.py" in surface_manifest_text
+
+
+def test_untracked_claude_worktree_scratch_copy_stays_filtered(
+    tmp_path: pathlib.Path,
+) -> None:
+    work_dir = _make_repo_with_origin(tmp_path)
+    scratch_dir = work_dir / ".claude" / "worktrees" / "feature" / "src"
+    scratch_dir.mkdir(parents=True)
+    (scratch_dir / "app.py").write_text(PRODUCTION_SOURCE, encoding="utf-8")
+    assert _exemption_for(work_dir) is True
+    merge_base_sha = resolve_merge_base(str(work_dir))
+    assert merge_base_sha is not None
+    surface_manifest_text = branch_surface_manifest(str(work_dir), merge_base_sha)
+    assert surface_manifest_text == ""
+
+
+def _git_output(work_dir: pathlib.Path, *git_arguments: str) -> str:
+    completed_process = subprocess.run(
+        ["git", "-C", str(work_dir), *git_arguments],
+        check=True,
+        capture_output=True,
+        text=True,
+    )
+    return completed_process.stdout.strip()
+
+
+def test_resolve_merge_base_finds_nonstandard_default_branch(
+    tmp_path: pathlib.Path,
+) -> None:
+    work_dir = _make_repo_on_branch(tmp_path, "develop")
+    subprocess.run(
+        ["git", "-C", str(work_dir), "remote", "set-head", "origin", "--delete"],
+        check=True,
+        capture_output=True,
+        text=True,
+    )
+    expected_merge_base = _git_output(
+        work_dir, "merge-base", "HEAD", "origin/develop"
+    )
+    assert resolve_merge_base(str(work_dir)) == expected_merge_base
+
+
+def test_production_change_is_gated_on_nonstandard_default_branch(
+    tmp_path: pathlib.Path,
+) -> None:
+    work_dir = _make_repo_on_branch(tmp_path, "develop")
+    subprocess.run(
+        ["git", "-C", str(work_dir), "remote", "set-head", "origin", "--delete"],
+        check=True,
+        capture_output=True,
+        text=True,
+    )
+    (work_dir / "src" / "app.py").write_text(
+        "def add(left: int, right: int) -> int:\n    return left - right\n",
+        encoding="utf-8",
+    )
+    assert _exemption_for(work_dir) is False

package/hooks/blocking/test_verified_commit_gate.py

@@ -0,0 +1,368 @@
+"""Tests for the gated-invocation parser in verified_commit_gate.
+
+Each test asserts which directories a command string's git commit/push verbs
+target, exercising the same token-walk the verified_commit_gate hook runs to
+decide what to gate.
+"""
+
+import importlib.util
+import os
+import pathlib
+import sys
+
+import pytest
+
+_HOOK_DIR = pathlib.Path(__file__).parent
+if str(_HOOK_DIR) not in sys.path:
+    sys.path.insert(0, str(_HOOK_DIR))
+
+gate_spec = importlib.util.spec_from_file_location(
+    "verified_commit_gate",
+    _HOOK_DIR / "verified_commit_gate.py",
+)
+assert gate_spec is not None
+assert gate_spec.loader is not None
+gate_module = importlib.util.module_from_spec(gate_spec)
+gate_spec.loader.exec_module(gate_module)
+gated_repo_directories = gate_module.gated_repo_directories
+
+
+def test_plain_git_commit_is_gated() -> None:
+    assert gated_repo_directories("git commit -m x", "FALLBACK") == ["FALLBACK"]
+
+
+def test_git_exe_commit_is_gated() -> None:
+    assert gated_repo_directories("git.exe commit -m x", "FALLBACK") == ["FALLBACK"]
+
+
+def test_git_exe_push_is_gated() -> None:
+    assert gated_repo_directories("git.exe push origin main", "FALLBACK") == [
+        "FALLBACK"
+    ]
+
+
+def test_git_exe_commit_records_repo_directory_option() -> None:
+    assert gated_repo_directories('git.exe -C "/repo" commit -m x', "FALLBACK") == [
+        "/repo"
+    ]
+
+
+def test_git_log_grep_commit_is_not_gated() -> None:
+    assert gated_repo_directories("git log --grep commit", "FALLBACK") == []
+
+
+def test_git_stash_push_is_not_gated() -> None:
+    assert gated_repo_directories("git stash push", "FALLBACK") == []
+
+
+def test_git_dir_option_value_yields_single_entry() -> None:
+    assert gated_repo_directories(
+        "git --git-dir=/x/.git commit", "FALLBACK"
+    ) == ["FALLBACK"]
+
+
+def test_substring_git_in_branch_name_is_not_a_git_word() -> None:
+    assert gated_repo_directories("git push origin legit-branch", "FALLBACK") == [
+        "FALLBACK"
+    ]
+
+
+def test_two_real_git_commits_yield_two_entries() -> None:
+    assert gated_repo_directories(
+        "git commit -m x && git push origin main", "FALLBACK"
+    ) == ["FALLBACK", "FALLBACK"]
+
+
+def test_unix_path_prefixed_git_commit_is_gated() -> None:
+    assert gated_repo_directories("/usr/bin/git commit -m x", "FALLBACK") == [
+        "FALLBACK"
+    ]
+
+
+def test_windows_path_prefixed_git_exe_commit_is_gated() -> None:
+    assert gated_repo_directories(
+        "C:/Program Files/Git/bin/git.exe commit -m x", "FALLBACK"
+    ) == ["FALLBACK"]
+
+
+def test_backslash_path_prefixed_git_exe_commit_is_gated() -> None:
+    assert gated_repo_directories(
+        "C:\\Program Files\\Git\\cmd\\git.exe commit", "FALLBACK"
+    ) == ["FALLBACK"]
+
+
+def test_quoted_git_word_commit_is_gated() -> None:
+    assert gated_repo_directories('"git" commit -m x', "FALLBACK") == ["FALLBACK"]
+
+
+def test_call_operator_path_git_exe_commit_is_gated() -> None:
+    assert gated_repo_directories("& 'C:/x/git.exe' commit", "FALLBACK") == [
+        "FALLBACK"
+    ]
+
+
+def test_call_operator_program_files_git_exe_commit_is_gated() -> None:
+    assert gated_repo_directories(
+        '& "C:\\Program Files\\Git\\cmd\\git.exe" commit -m x', "C:/repo"
+    ) == ["C:/repo"]
+
+
+def test_quoted_program_files_git_exe_commit_is_gated() -> None:
+    assert gated_repo_directories(
+        '"C:/Program Files/Git/cmd/git.exe" commit', "C:/repo"
+    ) == ["C:/repo"]
+
+
+def test_quoted_program_files_path_without_git_segment_is_not_gated() -> None:
+    assert gated_repo_directories(
+        '"C:/Program Files/Other/tool.exe" commit', "C:/repo"
+    ) == []
+
+
+def test_path_prefixed_git_log_grep_commit_is_not_gated() -> None:
+    assert gated_repo_directories("/usr/bin/git log --grep commit", "FALLBACK") == []
+
+
+def test_mygit_commit_is_not_a_git_word() -> None:
+    assert gated_repo_directories("mygit commit", "FALLBACK") == []
+
+
+def test_legit_commit_is_not_a_git_word() -> None:
+    assert gated_repo_directories("legit commit", "FALLBACK") == []
+
+
+def test_cd_then_git_commit_gates_the_cd_directory() -> None:
+    assert gated_repo_directories(
+        "cd /other/repo && git commit -m x", "FALLBACK"
+    ) == ["/other/repo"]
+
+
+def test_pushd_then_git_commit_gates_the_pushd_directory() -> None:
+    assert gated_repo_directories(
+        "pushd /other/repo; git commit -m x", "FALLBACK"
+    ) == ["/other/repo"]
+
+
+def test_cd_with_quoted_directory_gates_the_quoted_directory() -> None:
+    assert gated_repo_directories(
+        'cd "/path with spaces" && git commit -m x', "FALLBACK"
+    ) == ["/path with spaces"]
+
+
+def test_explicit_repo_option_overrides_cd_directory() -> None:
+    assert gated_repo_directories(
+        'cd /other/repo && git -C "/repo" commit -m x', "FALLBACK"
+    ) == ["/repo"]
+
+
+def test_later_cd_applies_to_later_git_commit() -> None:
+    assert gated_repo_directories(
+        "git commit -m a && cd /second && git commit -m b", "FALLBACK"
+    ) == ["FALLBACK", "/second"]
+
+
+def test_cd_without_argument_keeps_the_fallback_directory() -> None:
+    assert gated_repo_directories("cd && git commit -m x", "FALLBACK") == [
+        "FALLBACK"
+    ]
+
+
+def test_set_location_then_git_commit_gates_the_set_location_directory() -> None:
+    assert gated_repo_directories(
+        "Set-Location /other/repo; git commit -m x", "FALLBACK"
+    ) == ["/other/repo"]
+
+
+def test_sl_alias_then_git_commit_gates_the_sl_directory() -> None:
+    assert gated_repo_directories(
+        "sl /other/repo; git commit -m x", "FALLBACK"
+    ) == ["/other/repo"]
+
+
+def test_set_location_is_matched_case_insensitively() -> None:
+    assert gated_repo_directories(
+        "set-location /other/repo; git commit -m x", "FALLBACK"
+    ) == ["/other/repo"]
+
+
+def test_relative_cd_target_resolves_against_the_fallback_directory() -> None:
+    expected_directory = os.path.join("/session/dir", "subdir")
+    assert gated_repo_directories(
+        "cd subdir && git commit -m x", "/session/dir"
+    ) == [expected_directory]
+
+
+def test_relative_set_location_target_resolves_against_the_fallback_directory() -> None:
+    expected_directory = os.path.join("/session/dir", "subdir")
+    assert gated_repo_directories(
+        "Set-Location subdir; git commit -m x", "/session/dir"
+    ) == [expected_directory]
+
+
+def test_absolute_cd_target_is_not_joined_to_the_fallback_directory() -> None:
+    assert gated_repo_directories(
+        "cd /other/repo && git commit -m x", "/session/dir"
+    ) == ["/other/repo"]
+
+
+def test_work_tree_option_gates_the_work_tree_directory() -> None:
+    assert gated_repo_directories(
+        "git --git-dir=/other/.git --work-tree=/other commit", "/session"
+    ) == ["/other"]
+
+
+def test_work_tree_space_separated_option_gates_the_work_tree_directory() -> None:
+    assert gated_repo_directories(
+        "git --work-tree /other commit -m x", "/session"
+    ) == ["/other"]
+
+
+def test_repo_option_overrides_work_tree_option() -> None:
+    assert gated_repo_directories(
+        'git -C "/repo" --work-tree=/other commit', "/session"
+    ) == ["/repo"]
+
+
+def test_relative_repo_option_resolves_against_the_active_directory() -> None:
+    expected_directory = os.path.join("/repo", "subdir")
+    assert gated_repo_directories(
+        "cd /repo && git -C subdir commit -m x", "FALLBACK"
+    ) == [expected_directory]
+
+
+def test_relative_work_tree_option_resolves_against_the_active_directory() -> None:
+    expected_directory = os.path.join("/repo", "subtree")
+    assert gated_repo_directories(
+        "cd /repo && git --work-tree subtree commit -m x", "FALLBACK"
+    ) == [expected_directory]
+
+
+def test_relative_repo_option_resolves_against_the_fallback_directory() -> None:
+    expected_directory = os.path.join("/session/dir", "subdir")
+    assert gated_repo_directories(
+        "git -C subdir commit -m x", "/session/dir"
+    ) == [expected_directory]
+
+
+def _set_fake_home(monkeypatch: pytest.MonkeyPatch, fake_home: pathlib.Path) -> str:
+    home_text = str(fake_home)
+    monkeypatch.setenv("HOME", home_text)
+    monkeypatch.setenv("USERPROFILE", home_text)
+    monkeypatch.delenv("HOMEDRIVE", raising=False)
+    monkeypatch.delenv("HOMEPATH", raising=False)
+    return home_text
+
+
+def test_cd_into_tilde_repo_gates_the_expanded_home_path(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: pathlib.Path
+) -> None:
+    home_text = _set_fake_home(monkeypatch, tmp_path)
+    expected_directory = os.path.expanduser("~/myrepo")
+    assert home_text in expected_directory
+    assert gated_repo_directories(
+        "cd ~/myrepo && git commit -m x", "FALLBACK"
+    ) == [expected_directory]
+
+
+def test_git_dash_c_tilde_repo_gates_the_expanded_home_path(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: pathlib.Path
+) -> None:
+    home_text = _set_fake_home(monkeypatch, tmp_path)
+    expected_directory = os.path.expanduser("~/myrepo")
+    assert home_text in expected_directory
+    assert gated_repo_directories(
+        "git -C ~/myrepo commit -m x", "FALLBACK"
+    ) == [expected_directory]
+
+
+def test_git_work_tree_tilde_repo_gates_the_expanded_home_path(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: pathlib.Path
+) -> None:
+    home_text = _set_fake_home(monkeypatch, tmp_path)
+    expected_directory = os.path.expanduser("~/myrepo")
+    assert home_text in expected_directory
+    assert gated_repo_directories(
+        "git --work-tree ~/myrepo commit -m x", "FALLBACK"
+    ) == [expected_directory]
+
+
+def test_set_location_path_option_gates_the_path_value() -> None:
+    assert gated_repo_directories(
+        "Set-Location -Path /repo; git commit -m x", "FALLBACK"
+    ) == ["/repo"]
+
+
+def test_pushd_literal_path_option_gates_the_path_value() -> None:
+    assert gated_repo_directories(
+        "pushd -LiteralPath /repo; git commit", "FALLBACK"
+    ) == ["/repo"]
+
+
+def test_cd_double_dash_terminator_gates_the_path_value() -> None:
+    assert gated_repo_directories(
+        "cd -- /repo && git commit", "FALLBACK"
+    ) == ["/repo"]
+
+
+def test_cd_inside_double_quoted_commit_message_does_not_divert_later_push() -> None:
+    assert gated_repo_directories(
+        'git commit -m "context: cd /var/empty/nonrepo first" && git push',
+        "/real/repo/worktree",
+    ) == ["/real/repo/worktree", "/real/repo/worktree"]
+
+
+def test_cd_inside_single_quoted_commit_message_does_not_divert_later_push() -> None:
+    assert gated_repo_directories(
+        "git commit -m 'context: cd /var/empty/nonrepo first' && git push",
+        "/real/repo/worktree",
+    ) == ["/real/repo/worktree", "/real/repo/worktree"]
+
+
+def test_pushd_inside_quoted_commit_message_does_not_divert_later_push() -> None:
+    assert gated_repo_directories(
+        'git commit -m "context: pushd /var/empty/nonrepo first" && git push',
+        "/real/repo/worktree",
+    ) == ["/real/repo/worktree", "/real/repo/worktree"]
+
+
+def test_real_cd_outside_quotes_still_diverts_after_a_quoted_message() -> None:
+    assert gated_repo_directories(
+        'git commit -m "msg" && cd /other/repo && git push',
+        "/real/repo/worktree",
+    ) == ["/real/repo/worktree", "/other/repo"]
+
+
+def test_git_word_inside_quoted_commit_message_yields_one_entry() -> None:
+    assert gated_repo_directories(
+        'git commit -m "remember to git commit later"', "FB"
+    ) == ["FB"]
+
+
+def test_git_word_inside_single_quoted_message_value_yields_one_entry() -> None:
+    assert gated_repo_directories(
+        "git commit -m 'remember to git commit later'", "FB"
+    ) == ["FB"]
+
+
+def test_backslash_newline_after_git_word_is_gated() -> None:
+    assert gated_repo_directories("git \\\n commit -m x", "FB") == ["FB"]
+
+
+def test_backslash_newline_abutting_subcommand_is_gated() -> None:
+    assert gated_repo_directories("git commit\\\n -m x", "FB") == ["FB"]
+
+
+def test_backslash_newline_splitting_git_word_is_gated() -> None:
+    assert gated_repo_directories("g\\\nit commit -m x", "FB") == ["FB"]
+
+
+def test_git_verb_inside_echo_prose_is_not_gated() -> None:
+    assert gated_repo_directories(
+        'echo "Next: git commit and git push"', "/d"
+    ) == []
+
+
+def test_git_verb_inside_gh_comment_body_is_not_gated() -> None:
+    assert gated_repo_directories(
+        'gh pr comment -b "please git commit your work"', "/d"
+    ) == []