claude-dev-env 1.92.1 → 1.93.1

package/audit-rubrics/prompts/category-d-scoping-and-ordering.md

@@ -87,9 +87,9 @@ Lead: `Total: N (P0=N, P1=N, P2=N)`. For each sub-bucket D1–D8, produce Shape
 
 ---
 
-# Worked example: jl-cmd/claude-code-config PR #394
+# Worked example: jl-cmd/claude-dev-env PR #394
 
-Audit jl-cmd/claude-code-config PR #394 for **Category D only** (variable scoping, ordering, and unbound references). Skip A–C, E–N. Sub-bucket forced-exhaustion mode: Category D is decomposed into 8 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
+Audit jl-cmd/claude-dev-env PR #394 for **Category D only** (variable scoping, ordering, and unbound references). Skip A–C, E–N. Sub-bucket forced-exhaustion mode: Category D is decomposed into 8 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
 
 PR: feat(scripts): add sweep-empty-dirs utility and scheduled-task installer
 Head SHA: 62c9c169ee7a44824e5da25c4cf8b74fdca08a53

package/audit-rubrics/prompts/category-e-dead-code.md

@@ -92,9 +92,9 @@ Note: most Category E findings are P2 (style / cleanup) unless the dead code mas
 
 ---
 
-# Worked example: jl-cmd/claude-code-config PR #394
+# Worked example: jl-cmd/claude-dev-env PR #394
 
-Audit jl-cmd/claude-code-config PR #394 for **Category E only** (dead code and unused imports). Skip A–D, F–N. Sub-bucket forced-exhaustion mode: Category E is decomposed into 9 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
+Audit jl-cmd/claude-dev-env PR #394 for **Category E only** (dead code and unused imports). Skip A–D, F–N. Sub-bucket forced-exhaustion mode: Category E is decomposed into 9 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
 
 PR: feat(scripts): add sweep-empty-dirs utility and scheduled-task installer
 Head SHA: 62c9c169ee7a44824e5da25c4cf8b74fdca08a53

package/audit-rubrics/prompts/category-f-silent-failures.md

@@ -108,9 +108,9 @@ Lead: `Total: N (P0=N, P1=N, P2=N)`. For each sub-bucket F1-F10, produce Shape A
 
 ---
 
-# Worked example: jl-cmd/claude-code-config PR #394
+# Worked example: jl-cmd/claude-dev-env PR #394
 
-Audit jl-cmd/claude-code-config PR #394 for **Category F only** (silent failures). Skip A–E, G–N. Sub-bucket forced-exhaustion mode: Category F is decomposed into 8 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
+Audit jl-cmd/claude-dev-env PR #394 for **Category F only** (silent failures). Skip A–E, G–N. Sub-bucket forced-exhaustion mode: Category F is decomposed into 8 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
 
 PR: feat(scripts): add sweep-empty-dirs utility and scheduled-task installer
 Head SHA: 62c9c169ee7a44824e5da25c4cf8b74fdca08a53

package/audit-rubrics/prompts/category-g-bounds-and-overflow.md

@@ -59,9 +59,9 @@ Lead: `Total: N (P0=N, P1=N, P2=N)`. For each sub-bucket G1-G8, produce Shape A
 
 ---
 
-# Worked example: jl-cmd/claude-code-config PR #394
+# Worked example: jl-cmd/claude-dev-env PR #394
 
-Audit jl-cmd/claude-code-config PR #394 for **Category G only** (off-by-one, bounds, integer overflow). Skip A–F, H–N. Sub-bucket forced-exhaustion mode: Category G is decomposed into 8 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
+Audit jl-cmd/claude-dev-env PR #394 for **Category G only** (off-by-one, bounds, integer overflow). Skip A–F, H–N. Sub-bucket forced-exhaustion mode: Category G is decomposed into 8 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
 
 PR: feat(scripts): add sweep-empty-dirs utility and scheduled-task installer
 Head SHA: 62c9c169ee7a44824e5da25c4cf8b74fdca08a53

package/audit-rubrics/prompts/category-h-security-boundaries.md

@@ -81,9 +81,9 @@ Note: Category H findings tend toward P0/P1 since they're security-relevant —
 
 ---
 
-# Worked example: jl-cmd/claude-code-config PR #394
+# Worked example: jl-cmd/claude-dev-env PR #394
 
-Audit jl-cmd/claude-code-config PR #394 for **Category H only** (security boundaries). Skip A–G, I–N. Sub-bucket forced-exhaustion mode: Category H is decomposed into 10 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
+Audit jl-cmd/claude-dev-env PR #394 for **Category H only** (security boundaries). Skip A–G, I–N. Sub-bucket forced-exhaustion mode: Category H is decomposed into 10 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
 
 PR: feat(scripts): add sweep-empty-dirs utility and scheduled-task installer
 Head SHA: 62c9c169ee7a44824e5da25c4cf8b74fdca08a53

package/audit-rubrics/prompts/category-i-concurrency.md

@@ -86,9 +86,9 @@ Lead: `Total: N (P0=N, P1=N, P2=N)`. For each sub-bucket I1–I8, produce Shape
 
 ---
 
-# Worked example: jl-cmd/claude-code-config PR #394
+# Worked example: jl-cmd/claude-dev-env PR #394
 
-Audit jl-cmd/claude-code-config PR #394 for **Category I only** (concurrency hazards). Skip A–H, J–N. Sub-bucket forced-exhaustion mode: Category I is decomposed into 8 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
+Audit jl-cmd/claude-dev-env PR #394 for **Category I only** (concurrency hazards). Skip A–H, J–N. Sub-bucket forced-exhaustion mode: Category I is decomposed into 8 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
 
 PR: feat(scripts): add sweep-empty-dirs utility and scheduled-task installer
 Head SHA: 62c9c169ee7a44824e5da25c4cf8b74fdca08a53

package/audit-rubrics/prompts/category-j-code-rules-compliance.md

@@ -110,9 +110,9 @@ Note: most Category J findings are P2 (style / cleanup) since they don't affect
 
 ---
 
-# Worked example: jl-cmd/claude-code-config PR #394
+# Worked example: jl-cmd/claude-dev-env PR #394
 
-Audit jl-cmd/claude-code-config PR #394 for **Category J only** (CODE_RULES.md compliance). Skip A–I, K–N. Sub-bucket forced-exhaustion mode: Category J is decomposed into 12 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
+Audit jl-cmd/claude-dev-env PR #394 for **Category J only** (CODE_RULES.md compliance). Skip A–I, K–N. Sub-bucket forced-exhaustion mode: Category J is decomposed into 12 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
 
 PR: feat(scripts): add sweep-empty-dirs utility and scheduled-task installer
 Head SHA: 62c9c169ee7a44824e5da25c4cf8b74fdca08a53

package/audit-rubrics/prompts/category-k-codebase-conflicts.md

@@ -85,11 +85,11 @@ Lead: `Total: N (P0=N, P1=N, P2=N)`. For each sub-bucket K1-K11, produce Shape A
 
 ---
 
-# Worked example: jl-cmd/claude-code-config PR #397 r3210166636
+# Worked example: jl-cmd/claude-dev-env PR #397 r3210166636
 
 Note: PR #397 is the K canonical case, NOT #394.
 
-Audit jl-cmd/claude-code-config PR #397 for **Category K only** (codebase conflicts — incomplete propagation). Skip A–J, L–N. Sub-bucket forced-exhaustion mode: Category K is decomposed into 9 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
+Audit jl-cmd/claude-dev-env PR #397 for **Category K only** (codebase conflicts — incomplete propagation). Skip A–J, L–N. Sub-bucket forced-exhaustion mode: Category K is decomposed into 9 sub-buckets below. Each sub-bucket REQUIRES at least one Shape A finding OR exactly one Shape B proof-of-absence with **at least 3 adversarial probes** specific to that sub-bucket. A sub-bucket returning neither is a protocol gap.
 
 PR: fix(hooks): improve hedging-language guardrail to surface user questions
 Base SHA: 76f9c1a0048729b87c44626a3380dc840065c2fa (origin/main at PR open time)

package/audit-rubrics/prompts/category-l-behavior-equivalence.md

@@ -71,9 +71,9 @@ Lead: `Total: N (P0=N, P1=N, P2=N)`. For each sub-bucket L1-L8, produce Shape A
 
 ---
 
-# Worked example: jl-cmd/claude-code-config PR #479
+# Worked example: jl-cmd/claude-dev-env PR #479
 
-Audit jl-cmd/claude-code-config PR #479 for **Category L only** (behavior-equivalence for refactors). Skip A–K, M, N. Sub-bucket forced-exhaustion mode: Category L is decomposed into 8 sub-buckets below.
+Audit jl-cmd/claude-dev-env PR #479 for **Category L only** (behavior-equivalence for refactors). Skip A–K, M, N. Sub-bucket forced-exhaustion mode: Category L is decomposed into 8 sub-buckets below.
 
 PR: refactor(hooks): tokenize-based exempt-marker recognition for the no-new-comments gate
 Base SHA: (the commit before the tokenize-based rewrite landed)

package/audit-rubrics/prompts/category-m-producer-consumer-cardinality.md

@@ -72,9 +72,9 @@ Lead: `Total: N (P0=N, P1=N, P2=N)`. For each sub-bucket M1-M8, produce Shape A
 
 ---
 
-# Worked example: jl-cmd/python-automation PR #143
+# Worked example: example-org/example-repo PR #101
 
-Audit jl-cmd/python-automation PR #143 for **Category M only** (producer/consumer cardinality vs collection-type contract). Skip A–L, N. Sub-bucket forced-exhaustion mode: Category M is decomposed into 8 sub-buckets below.
+Audit example-org/example-repo PR #101 for **Category M only** (producer/consumer cardinality vs collection-type contract). Skip A–L, N. Sub-bucket forced-exhaustion mode: Category M is decomposed into 8 sub-buckets below.
 
 PR: feat(watchdog): use Everything CLI to enumerate watched paths
 Head SHA: (the commit that landed `_extract_paths_from_everything_cli_stdout`)

package/audit-rubrics/prompts/category-n-test-name-scenario-verifier.md

@@ -79,9 +79,9 @@ Lead: `Total: N (P0=N, P1=N, P2=N)`. For each sub-bucket N1-N10, produce Shape A
 
 ---
 
-# Worked example: jl-cmd/claude-code-config PR #476
+# Worked example: jl-cmd/claude-dev-env PR #476
 
-Audit jl-cmd/claude-code-config PR #476 for **Category N only** (test-name scenario verifier). Skip A–M. Sub-bucket forced-exhaustion mode: Category N is decomposed into 9 sub-buckets below.
+Audit jl-cmd/claude-dev-env PR #476 for **Category N only** (test-name scenario verifier). Skip A–M. Sub-bucket forced-exhaustion mode: Category N is decomposed into 9 sub-buckets below.
 
 PR: refactor(hooks): cross-platform path resolution for windows-rmtree-blocker
 Head SHA: (the commit that landed the platform-conditional logic)

package/audit-rubrics/prompts/category-o-docstring-vs-impl-drift.md

@@ -69,9 +69,9 @@ Lead: `Total: N (P0=N, P1=N, P2=N)`. For each sub-bucket O1-O9, produce Shape A
 
 ---
 
-# Worked example: jl-cmd/claude-code-config PR #522
+# Worked example: jl-cmd/claude-dev-env PR #522
 
-Audit jl-cmd/claude-code-config PR #522 for **Category O only** (docstring / fixture-prose vs implementation drift). Skip A-N, P. Sub-bucket forced-exhaustion mode: Category O is decomposed into 9 sub-buckets below.
+Audit jl-cmd/claude-dev-env PR #522 for **Category O only** (docstring / fixture-prose vs implementation drift). Skip A-N, P. Sub-bucket forced-exhaustion mode: Category O is decomposed into 9 sub-buckets below.
 
 PR #522 split `pr_description_command_parser.py` into two modules — the original parser and a new `pr_description_pr_number.py` — but the originating module's docstring still claims the PR-number recovery responsibility. A sibling change to `pr_description_body_audit.py` introduced a module docstring whose verb (`detects vague language`) overstates the module's actual responsibility (it only exposes `_extract_vague_scan_text()`; detection runs elsewhere).
 

package/audit-rubrics/prompts/category-p-name-vs-behavior-contract.md

@@ -77,9 +77,9 @@ Lead: `Total: N (P0=N, P1=N, P2=N)`. For each sub-bucket P1-P7, produce Shape A
 
 ---
 
-# Worked example: jl-cmd/claude-code-config PR #508
+# Worked example: jl-cmd/claude-dev-env PR #508
 
-Audit jl-cmd/claude-code-config PR #508 for **Category P only** (name / regex / word-list vs behavior-contract precision). Skip A-O.
+Audit jl-cmd/claude-dev-env PR #508 for **Category P only** (name / regex / word-list vs behavior-contract precision). Skip A-O.
 
 PR #508 ships the plain-language blocker hook. Two fresh identifiers in `plain_language_blocker_constants.py` show the canonical P shapes:
 

package/bin/CLAUDE.md

@@ -7,6 +7,7 @@ The installer and its companion modules. Running `npx claude-dev-env` (or `node
 | File | Purpose |
 |---|---|
 | `install.mjs` | Main installer: discovers install groups, copies content directories (`rules`, `docs`, `commands`, `agents`, `system-prompts`, `scripts`, `_shared`, `audit-rubrics`), merges hooks into `settings.json`, installs skills, runs `git_hooks_installer.mjs` and `install_mypy_ini.mjs` |
+| `expand_home_directory_tokens.mjs` | Expands residual `$HOME` / `${HOME}` / `~/` tokens in settings.json hook and statusLine commands to absolute home paths at install time (literal-safe for homes that contain `$`) |
 | `git_hooks_installer.mjs` | Installs or updates the `pre-commit`, `pre-push`, and `post-commit` Git hooks in the user's git config; writes hook scripts that delegate to the installed Python hooks |
 | `install_mypy_ini.mjs` | Writes `~/.mypy.ini` with settings that make mypy find the hooks package and enforce strict type checking |
 | `install.test.mjs` | Tests for `install.mjs` — covers conflict detection, interpreter detection, settings merging |

package/bin/expand_home_directory_tokens.mjs

@@ -0,0 +1,75 @@
+/**
+ * Install-time expansion of $HOME / ${HOME} / ~/ in settings.json commands.
+ *
+ * Hosts that require referenced env vars at hook load time (for example Grok)
+ * skip the hook when HOME is unset — common on Windows — so the installer
+ * rewrites residual tokens to absolute home paths.
+ */
+
+/**
+ * Expands $HOME, ${HOME}, and ~/ in a command string to an absolute home directory
+ * using forward slashes.
+ *
+ * Replacement uses split/join and function replacers so a home path that contains
+ * `$` (for example `$&` or `$1`) is inserted literally and is never treated as a
+ * String.prototype.replace special pattern.
+ *
+ * ::
+ *
+ *     expandHomeDirectoryTokens('python $HOME/a.py', 'C:\\Users\\x')
+ *     # -> 'python C:/Users/x/a.py'
+ *
+ *     expandHomeDirectoryTokens('python $HOME/a.py', 'C:/Users/$&evil')
+ *     # -> 'python C:/Users/$&evil/a.py'  (literal dollars, not regex rewrite)
+ *
+ * @param {string} commandString Hook or statusLine command text.
+ * @param {string} homeDirectory Absolute home directory (any path separators).
+ * @returns {string} Command with home tokens expanded.
+ */
+export function expandHomeDirectoryTokens(commandString, homeDirectory) {
+    const normalizedHome = homeDirectory.replace(/\\/g, '/').replace(/\/+$/, '');
+    let expandedCommand = commandString.split('${HOME}').join(normalizedHome);
+    expandedCommand = expandedCommand.replace(
+        /(?<![A-Za-z0-9_])\$HOME\b/g,
+        () => normalizedHome,
+    );
+    expandedCommand = expandedCommand.replace(
+        /(^|[\s"'=])~\//g,
+        (_fullMatch, boundary) => `${boundary}${normalizedHome}/`,
+    );
+    return expandedCommand;
+}
+
+/**
+ * Expands home-directory tokens in every settings.json hook command and in the
+ * optional statusLine command so residual $HOME entries from older installs
+ * become absolute paths and no longer require HOME at hook load time.
+ *
+ * @param {object} settings The parsed settings.json object (mutated in place).
+ * @param {string} homeDirectory Absolute home directory (any path separators).
+ * @returns {void}
+ */
+export function expandHomeDirectoryTokensInSettings(settings, homeDirectory) {
+    if (settings.hooks) {
+        for (const matcherGroups of Object.values(settings.hooks)) {
+            if (!Array.isArray(matcherGroups)) continue;
+            for (const eachGroup of matcherGroups) {
+                if (!eachGroup || !Array.isArray(eachGroup.hooks)) continue;
+                for (const eachHook of eachGroup.hooks) {
+                    if (typeof eachHook.command === 'string') {
+                        eachHook.command = expandHomeDirectoryTokens(
+                            eachHook.command,
+                            homeDirectory,
+                        );
+                    }
+                }
+            }
+        }
+    }
+    if (settings.statusLine && typeof settings.statusLine.command === 'string') {
+        settings.statusLine.command = expandHomeDirectoryTokens(
+            settings.statusLine.command,
+            homeDirectory,
+        );
+    }
+}

package/bin/install.mjs

@@ -8,6 +8,7 @@ import { fileURLToPath } from 'node:url';
 import { createRequire } from 'node:module';
 import { installAllGitHooks } from './git_hooks_installer.mjs';
 import { installMypyIniForClaudeHooks } from './install_mypy_ini.mjs';
+import { expandHomeDirectoryTokensInSettings } from './expand_home_directory_tokens.mjs';
 
 const CLAUDE_HOME = join(homedir(), '.claude');
 const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
@@ -18,6 +19,10 @@ const packageRequire = createRequire(import.meta.url);
 
 export const CONTENT_DIRECTORIES = ['rules', 'docs', 'commands', 'agents', 'system-prompts', 'scripts', '_shared', 'audit-rubrics'];
 
+export const CORE_INCLUDE_DIRECTORIES = [
+    'rules', 'docs', 'commands', 'agents', 'audit-rubrics', '_shared', 'scripts',
+];
+
 export function collectPackageSourceConflicts(packageDirectory) {
     const gitConflictStatusCodes = new Set(['DD', 'AU', 'UD', 'UA', 'DU', 'AA', 'UU']);
     const porcelainStatusLineMinLength = 4;
@@ -147,12 +152,13 @@ const INSTALL_GROUPS = {
     core: {
         description: 'Development standards, hooks, agents, commands',
         skills: [
-            'orchestrator', 'orchestrator-refresh',
+            'orchestrator', 'orchestrator-refresh', 'team-advisor',
             'anthropic-plan', 'everything-search',
             'pr-review-responder',
+            'privacy-hygiene',
             'recall', 'remember', 'task-build', 'verified-build'
         ],
-        includeDirectories: ['rules', 'docs', 'commands', 'agents', 'audit-rubrics'],
+        includeDirectories: CORE_INCLUDE_DIRECTORIES,
         includeAllHooks: true,
     },
     journal: {
@@ -507,17 +513,21 @@ function pruneManagedHooksFromEvent(settings, eventType, managedHookRelativePath
  * pruning every prior managed hook (standalone script or inline validators
  * runner) from each event's existing matcher groups before appending the freshly
  * rewritten copies so repeated merges stay idempotent and a managed hook moved to
- * a new matcher group does not double-run. User-authored hooks are preserved
- * untouched.
+ * a new matcher group does not double-run. User-authored hooks are preserved as
+ * entries, but residual $HOME / ${HOME} / ~/ tokens in every hook and statusLine
+ * command are expanded to absolute home paths so hosts that require referenced
+ * env vars at load time (Grok on Windows) can execute them.
  *
  * @param {object} settings The parsed settings.json object (mutated in place).
  * @param {{hooks: object}} hooksConfig Parsed hooks.json.
- * @param {string} pluginRootDir Directory ${CLAUDE_PLUGIN_ROOT} resolves to.
+ * @param {string} pluginRootDir Directory ${CLAUDE_PLUGIN_ROOT} resolves to
+ *   (the installer's `~/.claude` root; home is its parent directory).
  * @param {string} pythonCommand Interpreter command that replaces python3.
  * @returns {number} Count of matcher groups merged.
  */
 export function mergeHooksIntoSettings(settings, hooksConfig, pluginRootDir, pythonCommand) {
     const managedHookRelativePaths = managedHookScriptRelativePaths(hooksConfig);
+    const pluginRootForward = pluginRootDir.replace(/\\/g, '/');
     if (!settings.hooks) settings.hooks = {};
     let groupCount = 0;
     for (const [eventType, matcherGroups] of Object.entries(hooksConfig.hooks)) {
@@ -526,8 +536,11 @@ export function mergeHooksIntoSettings(settings, hooksConfig, pluginRootDir, pyt
         for (const sourceGroup of matcherGroups) {
             const rewrittenHooks = sourceGroup.hooks.map(hook => {
                 let command = hook.command;
-                command = command.replace(/\$\{CLAUDE_PLUGIN_ROOT\}/g, pluginRootDir.replace(/\\/g, '/'));
-                command = command.replace(/^python3\b/, pythonCommand);
+                command = command.replace(
+                    /\$\{CLAUDE_PLUGIN_ROOT\}/g,
+                    () => pluginRootForward,
+                );
+                command = command.replace(/^python3\b/, () => pythonCommand);
                 return { ...hook, command };
             });
             const existingIndex = settings.hooks[eventType].findIndex(
@@ -548,6 +561,7 @@ export function mergeHooksIntoSettings(settings, hooksConfig, pluginRootDir, pyt
             groupCount++;
         }
     }
+    expandHomeDirectoryTokensInSettings(settings, dirname(pluginRootDir));
     return groupCount;
 }