claude-dev-env 1.92.1 → 1.93.0

package/hooks/diagnostic/migrations/README.md

@@ -1,11 +1,11 @@
 # Hook-Log Diagnostic Migrations
 
 One-time DDL migrations for the hook-log diagnostic store. Each file is named
-`YYYY-MM-DD-<short-description>.sql` and contains idempotent statements that
-can be re-run without error.
+`YYYY-MM-DD-<short-description>.sql` and has idempotent statements that can be
+re-run without error.
 
-These files are records of operations already executed (or to be executed)
-against a specific Neon project. They are not run automatically by any hook.
+These files are records of operations run (or to be run) against a specific
+Neon project. No hook runs them automatically.
 
 ## How to apply
 
@@ -19,35 +19,34 @@ psql "$DATABASE_URL" -f packages/claude-dev-env/hooks/diagnostic/migrations/<fil
 
 When the project is hosted on Neon, the `mcp__neon__run_sql_transaction` tool
 accepts the same statements as a list of strings. That is the path used for
-the 2026-04-25 isolation migration described below, since the operator
-already has Neon MCP authenticated.
+the 2026-04-25 isolation migration described below, since the operator already
+has Neon MCP authenticated.
 
 ## 2026-04-25-drop-themes-hook-events.sql
 
-**Target:** Neon project `still-dust-13937951` ("Themes"). This is the
-production themes-asset-database project, which up to PR #257 was also
-holding the hook-log diagnostic table because the
-`NEON_HOOK_LOGS_DATABASE_URL` Bitwarden secret was pointing at it.
+**Target:** Neon project `example-project-00000000`, a production application
+database. This project also held the hook-log diagnostic table up to PR #257,
+because the `NEON_HOOK_LOGS_DATABASE_URL` Bitwarden secret pointed at it.
 
 **Effect:** Drops the diagnostic view `blocked_commands` and the diagnostic
-table `hook_events` from the Themes project. The two objects were created
-by `schema.sql` during a misrouted live test in session 80; they share no
-foreign keys or other coupling with the themes-domain tables (`assets`,
-`themes`, `monthly_sales`, etc.) and removing them is a pure cleanup.
+table `hook_events` from the source project. The two objects came from
+`schema.sql` during a misrouted live test in session 80; they share no foreign
+keys or other coupling with the project's own domain tables, and removing them
+is a pure cleanup.
 
 **State before this migration:** `hook_events` holds 10,684 rows spanning
-2026-04-12 through 2026-04-24. None of these rows are migrated; the
-"start fresh" decision (recorded in PR #261) means the extractor's
-`--full-rebuild` mode rebuilds the table contents from local JSONL on
-its next run against the new project.
+2026-04-12 through 2026-04-24. None of these rows move; the "start fresh"
+decision (recorded in PR #261) means the extractor's `--full-rebuild` mode
+rebuilds the table contents from local JSONL on its next run against the
+hook-log project.
 
-**State after this migration:** Themes contains only its production
-domain tables. The hook-log diagnostic store lives entirely in the new
-Neon project `winter-haze-99075918` ("claude-hook-logs"), which the
-updated `NEON_HOOK_LOGS_DATABASE_URL` secret now points at.
+**State after this migration:** the source project has only its own domain
+tables. The hook-log diagnostic store lives entirely in a separate Neon project
+`example-project-11111111`, which the `NEON_HOOK_LOGS_DATABASE_URL` secret
+points at.
 
-**Verification:** Before applying, confirm there is no other consumer
-of `blocked_commands` or `hook_events` in the Themes project:
+**Verification:** Before applying, confirm there is no other consumer of
+`blocked_commands` or `hook_events` in the source project:
 
 ```sql
 SELECT table_name, view_definition
@@ -63,8 +62,8 @@ WHERE confrelid = 'hook_events'::regclass;
 
 The first query excludes `blocked_commands` itself, since that view (also dropped by this migration) references `hook_events` in its definition and would otherwise always match.
 
-Both queries should return zero rows; if either returns anything,
-investigate the dependency before running the drop.
+Both queries should return zero rows; if either returns anything, investigate
+the dependency before running the drop.
 
 After applying, confirm the objects are gone:
 

package/hooks/diagnostic/test_hook_log_extractor.py

@@ -46,7 +46,7 @@ def _make_success_line(
     hook_name: str = "PreToolUse:Bash",
     hook_event: str = "PreToolUse",
     tool_use_id: str = "toolu_001",
-    command: str = "python C:/Users/jon/.claude/hooks/blocking/destructive_command_blocker.py",
+    command: str = "python C:/Users/example/.claude/hooks/blocking/destructive_command_blocker.py",
     stdout: str = "ok\n",
     stderr: str = "",
     exit_code: int = 0,
@@ -82,7 +82,7 @@ def _make_blocking_line(
     hook_event: str = "PreToolUse",
     tool_use_id: str = "toolu_002",
     blocking_message: str = "blocked for reason",
-    command: str = "python C:/Users/jon/.claude/hooks/blocking/block_main_commit.py",
+    command: str = "python C:/Users/example/.claude/hooks/blocking/block_main_commit.py",
     timestamp: str = "2026-04-24T13:32:54.293Z",
     cwd: str = "Y:\\Projects\\repo",
     git_branch: str = "main",
@@ -166,12 +166,12 @@ def _make_additional_context_line(
     sorted(KNOWN_HOOK_CATEGORIES),
 )
 def test_derive_category_accepts_each_known_category(expected_category: str) -> None:
-    script_path = f"python C:/Users/jon/.claude/hooks/{expected_category}/some_hook.py"
+    script_path = f"python C:/Users/example/.claude/hooks/{expected_category}/some_hook.py"
     assert hook_log_extractor.derive_category(script_path) == expected_category
 
 
 def test_derive_category_returns_uncategorized_for_unknown_parent() -> None:
-    script_path = "python C:/Users/jon/.claude/hooks/unheard_of_bucket/some_hook.py"
+    script_path = "python C:/Users/example/.claude/hooks/unheard_of_bucket/some_hook.py"
     assert (
         hook_log_extractor.derive_category(script_path) == HOOK_CATEGORY_UNCATEGORIZED
     )
@@ -183,12 +183,12 @@ def test_derive_category_returns_uncategorized_for_empty_path() -> None:
 
 
 def test_derive_category_handles_windows_backslash_paths() -> None:
-    script_path = "python C:\\Users\\jon\\.claude\\hooks\\blocking\\destructive_command_blocker.py"
+    script_path = "python C:\\Users\\example\\.claude\\hooks\\blocking\\destructive_command_blocker.py"
     assert hook_log_extractor.derive_category(script_path) == "blocking"
 
 
 def test_derive_category_strips_python_launcher_prefix() -> None:
-    script_path = "python3 /home/jon/.claude/hooks/session/code_rules_reminder.py"
+    script_path = "python3 /home/example/.claude/hooks/session/code_rules_reminder.py"
     assert hook_log_extractor.derive_category(script_path) == "session"
 
 
@@ -259,23 +259,23 @@ def test_derive_outcome_raises_on_unknown_type() -> None:
 
 def test_extract_script_path_from_success_record() -> None:
     record_json = _make_success_line(
-        command="python C:/Users/jon/.claude/hooks/blocking/foo.py",
+        command="python C:/Users/example/.claude/hooks/blocking/foo.py",
     )
     parsed = json.loads(record_json)
     assert (
         hook_log_extractor.extract_script_path(parsed["attachment"])
-        == "C:/Users/jon/.claude/hooks/blocking/foo.py"
+        == "C:/Users/example/.claude/hooks/blocking/foo.py"
     )
 
 
 def test_extract_script_path_from_blocking_record() -> None:
     record_json = _make_blocking_line(
-        command="python3 /home/jon/.claude/hooks/blocking/bar.py",
+        command="python3 /home/example/.claude/hooks/blocking/bar.py",
     )
     parsed = json.loads(record_json)
     assert (
         hook_log_extractor.extract_script_path(parsed["attachment"])
-        == "/home/jon/.claude/hooks/blocking/bar.py"
+        == "/home/example/.claude/hooks/blocking/bar.py"
     )
 
 

package/hooks/hooks.json

@@ -38,107 +38,12 @@
         ]
       },
       {
-        "matcher": "Bash",
+        "matcher": "Bash|PowerShell",
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/es_exe_path_rewriter.py",
-            "timeout": 10
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/destructive_command_blocker.py",
-            "timeout": 10
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/gh_body_arg_blocker.py",
-            "timeout": 10
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/nas_ssh_binary_enforcer.py",
-            "timeout": 10
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/volatile_path_in_post_blocker.py",
-            "timeout": 10
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/conventional_pr_title_gate.py",
-            "timeout": 10
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/reviewer_spawn_gate.py",
-            "timeout": 20
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/block_main_commit.py",
-            "timeout": 15
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/precommit_code_rules_gate.py",
-            "timeout": 150
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/session_edit_stage_gate.py",
-            "timeout": 15
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/pr_description_enforcer.py",
-            "timeout": 30
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/test_preflight_check.py",
-            "timeout": 10
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/convergence_gate_blocker.py",
-            "timeout": 15
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/windows_rmtree_blocker.py",
-            "timeout": 10
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/gh_pr_author_enforcer.py",
-            "timeout": 30
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/verified_commit_gate.py",
-            "timeout": 15
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/verdict_directory_write_blocker.py",
-            "timeout": 10
-          }
-        ]
-      },
-      {
-        "matcher": "PowerShell",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/verified_commit_gate.py",
-            "timeout": 15
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/verdict_directory_write_blocker.py",
-            "timeout": 10
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/bash_pre_tool_use_dispatcher.py",
+            "timeout": 400
           }
         ]
       },
@@ -159,6 +64,11 @@
             "type": "command",
             "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/volatile_path_in_post_blocker.py",
             "timeout": 10
+          },
+          {
+            "type": "command",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/pii_prevention_blocker.py",
+            "timeout": 20
           }
         ]
       },
@@ -261,28 +171,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/hedging_language_blocker.py",
-            "timeout": 10
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/question_to_user_enforcer.py",
-            "timeout": 10
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/intent_only_ending_blocker.py",
-            "timeout": 10
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/session_handoff_blocker.py",
-            "timeout": 10
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/diagnostic/hook_log_stop_wrapper.py",
-            "timeout": 30
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/stop_dispatcher.py",
+            "timeout": 90
           }
         ]
       }

package/hooks/hooks_constants/CLAUDE.md

@@ -9,6 +9,7 @@ Shared constant modules imported by hooks throughout the `hooks/` tree. Each fil
 | `__init__.py` | Package marker (`# pragma: no-tdd-gate`) |
 | `any_type_config.py` | Config for the `Any`-type escape-hatch check |
 | `banned_identifiers_constants.py` | The set of banned short identifiers and banned function-name prefixes |
+| `bash_pre_tool_use_dispatcher_constants.py` | Permission outcomes, tool-name sets, and the ordered hosted-hook roster for the Bash PreToolUse dispatcher (also covers PowerShell-shared gates) |
 | `blocking_check_limits.py` | Max issue counts and preview lengths for blocking hooks |
 | `bot_mention_comment_blocker_constants.py` | Patterns for detecting bot @-mentions in PR comments |
 | `claude_md_orphan_file_blocker_constants.py` | Table patterns, file extensions, scan budget, and block-message text for the CLAUDE.md orphan-file blocker |
@@ -34,16 +35,19 @@ Shared constant modules imported by hooks throughout the `hooks/` tree. Each fil
 | `hook_block_logger.py` | `log_hook_block()` — shared fail-safe logger every blocking hook calls to append a JSON record of each block decision to `~/.claude/logs/hook-blocks.log` |
 | `hook_log_extractor_constants.py` | Neon table name, offset state file path, timeouts, and outcome-type mapping for the hook-log extractor |
 | `hook_prose_detector_consistency_constants.py` | Trigger patterns and corrective messages for the hook-prose consistency checker |
+| `hosted_hook_runner.py` | `run_hook_capturing_output()` — shared runner that runs one dispatcher-hosted hook in-process via runpy and returns its captured stdout and crash flag |
 | `inline_tuple_string_magic_constants.py` | Patterns for detecting magic strings in inline tuple literals |
 | `js_conventions_constants.py` | Banned identifier set, boolean-prefix pattern, and declaration/JSDoc patterns for the JavaScript convention checks |
+| `local_identity.py` | Loader for the NAS host, ssh user, and ssh port the ssh enforcer guards, resolved from the `CLAUDE_NAS_*` env vars or `~/.claude/local-identity.json` with placeholder defaults; also composes the enforcer's two deny messages that quote those values |
 | `messages.py` | Short user-facing notice strings shown when a Stop hook redirects agent behavior |
 | `multi_edit_reconstruction.py` | `apply_edits()` / `edits_for_tool()` — shared helpers that reconstruct the post-edit content of an Edit or MultiEdit, imported by the blockers that judge post-edit content |
-| `nas_ssh_binary_enforcer_constants.py` | Bash tool name, the NAS address pattern, ssh-family basenames, OpenSSH binary path suffixes, launcher-wrapper set, shell control-operator tokens and split pattern, leading-assignment and duration patterns, the batch-mode pattern, and the two deny messages for the NAS ssh binary enforcer |
+| `nas_ssh_binary_enforcer_constants.py` | Bash tool name, ssh-family basenames, OpenSSH binary path suffixes, launcher-wrapper set, shell control-operator tokens and split pattern, leading-assignment and duration patterns, and the batch-mode pattern for the NAS ssh binary enforcer |
 | `open_questions_in_plans_blocker_constants.py` | Patterns for detecting unresolved open questions in plan documents |
 | `orphan_css_class_constants.py` | Scan radius and selector patterns for the orphan-CSS-class check |
 | `package_inventory_stale_blocker_constants.py` | Inventory document names, production code extensions, backtick token pattern, smallest inventory size, exempt names, scan budget, and block-message text for the package-inventory stale-entry blocker |
 | `paired_test_coverage_constants.py` | Test-directory name, stem-test filename affixes, test-file globs, exempt public-function names, scan budget, coverage threshold, and guidance text for the public-function paired-test coverage check |
 | `path_rewriter_constants.py` | Path rewriting patterns for the Everything-search path rewriter |
+| `pii_prevention_constants.py` | Patterns, allowlists, path exemptions, and deny-message text for `pii_prevention_blocker` |
 | `plain_language_blocker_constants.py` | The list of heavy words and their everyday replacements |
 | `pr_converge_bugteam_enforcer_constants.py` | State keys and timing config for the bugteam-parallel enforcer |
 | `pr_converge_bugteam_enforcer_state.py` | State-file helpers for the bugteam enforcer |
@@ -53,6 +57,7 @@ Shared constant modules imported by hooks throughout the `hooks/` tree. Each fil
 | `precommit_code_rules_gate_constants.py` | Scope argument and exit-code constants for the precommit gate |
 | `project_paths_reader.py` | Loads `~/.claude/project-paths.json` — the per-user project-path registry |
 | `pytest_testpaths_orphan_blocker_constants.py` | Marker filename, section and key names, test-file pattern, search budget, and block-message text for the pytest unregistered-test-directory blocker |
+| `python_style_checks_constants.py` | Command-line argument count and blank-line count between top-level functions for the style validator |
 | `reviewer_spawn_gate_constants.py` | Bash tool name, the sentinel marker, the Copilot and Bugbot trigger markers, the availability-script relative path and override env-var name, and the deny-message template for the reviewer-spawn gate |
 | `send_user_file_open_locally_blocker_constants.py` | Tool name, proactive status, and the block message for the open-locally attach blocker |
 | `session_edit_stage_gate_constants.py` | Tracker filename prefix/suffix, JSON payload key, edit tool name set, session-id sanitize pattern, lock filename suffix and lock-acquire timing, git diff command, commit flag escapes, and deny-message template shared by the session edit stage gate trio |
@@ -61,11 +66,13 @@ Shared constant modules imported by hooks throughout the `hooks/` tree. Each fil
 | `setup_project_paths_constants.py` | Encoding policy, BOM marker, and registry meta-key used across multiple hooks |
 | `stale_comment_reference_blocker_constants.py` | Identifier pattern, comment stopwords, and denial text for the stale-comment-reference blocker |
 | `state_description_blocker_constants.py` | The set of historical/comparative phrases the state-description blocker rejects, plus the docstring-extraction and mention-span patterns for its Python docstring scan |
+| `stop_dispatcher_constants.py` | Ordered hosted-hook roster and Stop block payload field names for the Stop-chain dispatcher |
 | `stuttering_check_config.py` | Config for the stuttering (repeated-phrase) check |
 | `stuttering_import_binding_constants.py` | Import-binding patterns for the stuttering check |
 | `subprocess_budget_completeness_constants.py` | Required argument names for the subprocess-budget completeness check |
 | `sys_path_insert_constants.py` | Patterns for detecting unguarded `sys.path.insert` calls |
 | `task_list_loop_starter_constants.py` | The one-line task-list instruction and the full session-start directive text for the task-list loop starter hook |
+| `test_layout_constants.py` | The named constants for the test-layout write-time checks |
 | `text_stripping.py` | `strip_code_and_quotes()` — shared helper that removes fenced code blocks, inline code, and blockquotes from prose, imported by the Stop-hook prose blockers |
 | `unused_module_import_constants.py` | Patterns for detecting unused module-level imports |
 | `volatile_path_in_post_blocker_constants.py` | Volatile path markers, affected `gh` post subcommands, MCP body param names, and the corrective message for the volatile-path post blocker |
@@ -74,7 +81,9 @@ Shared constant modules imported by hooks throughout the `hooks/` tree. Each fil
 
 ## Conventions
 
-- Every file in this package is a pure constants module — no side effects, no I/O.
+- Most files in this package are pure constants modules — no side effects, no I/O.
 - Hooks import from this package with `from hooks_constants.<module> import <CONSTANT>`.
 - Tests for these modules live beside them as `test_<module>.py`. Run with `python -m pytest hooks_constants/test_<name>.py`.
-- `dynamic_stderr_handler.py`, `pre_tool_use_stdin.py`, `multi_edit_reconstruction.py`, and `text_stripping.py` are utility modules (not pure constants) but live here because they are shared across many hooks.
+- `dynamic_stderr_handler.py`, `pre_tool_use_stdin.py`, `multi_edit_reconstruction.py`, `hosted_hook_runner.py`, and `text_stripping.py` are utility modules (not pure constants) but live here because they are shared across many hooks.
+- `local_identity.py` is a loader: it reads the environment or `~/.claude/local-identity.json` to resolve the private NAS values, keeping a committed placeholder default.
+

package/hooks/hooks_constants/bash_pre_tool_use_dispatcher_constants.py

@@ -0,0 +1,78 @@
+"""Constants for the Bash and PowerShell PreToolUse dispatcher.
+
+Holds the permission outcomes, the two tool-name sets, and the ordered hosted-hook
+roster with each hook's applicable-tool set. The dispatcher imports these to
+select and run the hooks that a Bash or PowerShell tool call fires.
+"""
+
+from __future__ import annotations
+
+from dataclasses import dataclass
+
+__all__ = [
+    "DENY_DECISION",
+    "ASK_DECISION",
+    "ALLOW_DECISION",
+    "HOOK_EVENT_NAME",
+    "REASON_JOIN_SEPARATOR",
+    "CONTEXT_JOIN_SEPARATOR",
+    "BASH_TOOL_NAME",
+    "POWERSHELL_TOOL_NAME",
+    "ALL_BASH_ONLY_TOOL_NAMES",
+    "ALL_BASH_AND_POWERSHELL_TOOL_NAMES",
+    "BashHostedHookEntry",
+    "ALL_BASH_HOSTED_HOOK_ENTRIES",
+]
+
+DENY_DECISION = "deny"
+ASK_DECISION = "ask"
+ALLOW_DECISION = "allow"
+HOOK_EVENT_NAME = "PreToolUse"
+REASON_JOIN_SEPARATOR = " | "
+CONTEXT_JOIN_SEPARATOR = "\n"
+
+BASH_TOOL_NAME = "Bash"
+POWERSHELL_TOOL_NAME = "PowerShell"
+
+ALL_BASH_ONLY_TOOL_NAMES: frozenset[str] = frozenset({BASH_TOOL_NAME})
+ALL_BASH_AND_POWERSHELL_TOOL_NAMES: frozenset[str] = frozenset({BASH_TOOL_NAME, POWERSHELL_TOOL_NAME})
+
+
+@dataclass(frozen=True)
+class BashHostedHookEntry:
+    """A single hosted hook with the tool names it applies to.
+
+    Attributes:
+        script_relative_path: Hook path relative to the hooks/ directory.
+        applicable_tool_names: Tool names this hook runs for. The dispatcher
+            skips the hook when the payload's tool is not in this set.
+    """
+
+    script_relative_path: str
+    applicable_tool_names: frozenset[str]
+
+
+ALL_BASH_HOSTED_HOOK_ENTRIES: tuple[BashHostedHookEntry, ...] = (
+    BashHostedHookEntry("blocking/es_exe_path_rewriter.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/destructive_command_blocker.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/gh_body_arg_blocker.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/nas_ssh_binary_enforcer.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/volatile_path_in_post_blocker.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry(
+        "blocking/pii_prevention_blocker.py", ALL_BASH_AND_POWERSHELL_TOOL_NAMES
+    ),
+    BashHostedHookEntry("blocking/conventional_pr_title_gate.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/reviewer_spawn_gate.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/block_main_commit.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/precommit_code_rules_gate.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/session_edit_stage_gate.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/pr_description_enforcer.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/test_preflight_check.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/convergence_gate_blocker.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/windows_rmtree_blocker.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/gh_pr_author_enforcer.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry("blocking/verified_commit_gate.py", ALL_BASH_AND_POWERSHELL_TOOL_NAMES),
+    BashHostedHookEntry(
+        "blocking/verdict_directory_write_blocker.py", ALL_BASH_AND_POWERSHELL_TOOL_NAMES
+    ),
+)

package/hooks/hooks_constants/dead_module_constant_constants.py

@@ -14,6 +14,7 @@ GIT_DIRECTORY_NAME: str = ".git"
 MINIMUM_UPPER_SNAKE_LENGTH: int = 2
 MAX_DEAD_MODULE_CONSTANT_ISSUES: int = 25
 MAX_SCAN_ROOT_FILE_COUNT: int = 2000
+MAX_SCAN_ROOT_READ_COUNT: int = 20000
 DEAD_MODULE_CONSTANT_GUIDANCE: str = (
     "module-level constant is defined here but never imported or read by any"
     " module in the enclosing package tree - remove the constant, or reference it"

package/hooks/hooks_constants/hosted_hook_runner.py

@@ -0,0 +1,73 @@
+"""Shared in-process runner for dispatcher-hosted hooks.
+
+Runs one hook script via runpy under __main__ with stdin, stdout, and argv
+swapped to mimic a standalone invocation, captures what the hook writes to
+stdout, and reports whether the hook raised. The runner carries no allow or deny
+policy: the caller reads captured_stdout to learn the hook's decision and
+applies its own aggregation, so a hook that raises contributes no decision,
+matching a standalone hook whose uncaught exception exits nonzero without
+blocking the tool call.
+
+::
+
+    run = run_hook_capturing_output("/hooks/blocking/gate.py", '{"tool_name": "Bash"}')
+    ok:   run.captured_stdout carries the gate's deny JSON, run.did_crash is False
+    flag: run.did_crash is True when the gate raised, run.captured_stdout is ""
+"""
+
+from __future__ import annotations
+
+import io
+import runpy
+import sys
+import traceback
+from dataclasses import dataclass
+
+
+@dataclass
+class HostedHookRun:
+    """Outcome of running one hosted hook in-process.
+
+    Attributes:
+        captured_stdout: The text the hook wrote to stdout during its run.
+        did_crash: True when the hook raised a non-SystemExit exception.
+    """
+
+    captured_stdout: str
+    did_crash: bool
+
+
+def log_hosted_hook_crash(hook_script_path: str, error: Exception) -> None:
+    """Write a one-line crash summary for a hosted hook to stderr."""
+    formatted_traceback = traceback.format_exc().strip()
+    last_line = formatted_traceback.splitlines()[-1] if formatted_traceback else str(error)
+    error_type_name = type(error).__name__
+    sys.stderr.write(
+        f"[dispatcher] crash in {hook_script_path}: {error_type_name}: {error} | {last_line}\n"
+    )
+    sys.stderr.flush()
+
+
+def run_hook_capturing_output(hook_script_path: str, payload_text: str) -> HostedHookRun:
+    """Run a hook in-process, returning its captured stdout and crash flag.
+
+    Swaps stdin/stdout/argv to mimic a standalone run, executes via runpy under
+    __main__, catches SystemExit and any other exception (logged as a crash), and
+    always restores the swapped streams and argv.
+    """
+    original_stdin, original_stdout, original_argv = sys.stdin, sys.stdout, sys.argv
+    captured_output = io.StringIO()
+    did_crash = False
+    try:
+        sys.stdin = io.StringIO(payload_text)
+        sys.stdout = captured_output
+        sys.argv = [hook_script_path]
+        runpy.run_path(hook_script_path, run_name="__main__")
+    except SystemExit:
+        pass
+    except Exception as error:
+        log_hosted_hook_crash(hook_script_path, error)
+        did_crash = True
+    finally:
+        sys.stdin, sys.stdout, sys.argv = original_stdin, original_stdout, original_argv
+    return HostedHookRun(captured_stdout=captured_output.getvalue(), did_crash=did_crash)