claude-dev-env 1.93.0 → 1.94.0

package/hooks/blocking/pii_scanner.py

@@ -17,6 +17,7 @@ _hooks_directory = str(Path(__file__).resolve().parent.parent)
 if _hooks_directory not in sys.path:
     sys.path.insert(0, _hooks_directory)
 
+from hooks_constants.local_identity import nas_host  # noqa: E402
 from hooks_constants.pii_prevention_constants import (  # noqa: E402
     ALL_ALLOWLISTED_PRIVATE_IP_ADDRESSES,
     ALL_EXACT_LEGAL_NOTICE_BASENAMES,
@@ -273,9 +274,33 @@ def _find_home_paths(text: str) -> list[PiiFinding]:
     return all_findings
 
 
+def _all_allowlisted_private_ip_addresses() -> frozenset[str]:
+    """Return every private IPv4 address the scanner must leave unflagged.
+
+    ::
+
+        CLAUDE_NAS_HOST=10.20.30.40  ->  static set + {"10.20.30.40"}
+        CLAUDE_NAS_HOST=nas.local    ->  static set only (a name, not an address)
+        (env unset, no file)         ->  static set only
+
+    The committed set carries no real address. The maintainer's own NAS host
+    resolves at scan time from ``CLAUDE_NAS_HOST`` or
+    ``~/.claude/local-identity.json``, so their ssh traffic and git-ignored
+    local config stay unflagged while the repository stays publishable.
+
+    Returns:
+        The static allowlist, joined with the locally configured NAS host when
+        that host is itself a private IPv4 address.
+    """
+    configured_nas_host = nas_host()
+    if not _is_private_ipv4_address(configured_nas_host):
+        return ALL_ALLOWLISTED_PRIVATE_IP_ADDRESSES
+    return ALL_ALLOWLISTED_PRIVATE_IP_ADDRESSES | {configured_nas_host}
+
+
 def _find_private_ips(text: str) -> list[PiiFinding]:
     all_findings: list[PiiFinding] = []
-    allowlisted_addresses = ALL_ALLOWLISTED_PRIVATE_IP_ADDRESSES
+    allowlisted_addresses = _all_allowlisted_private_ip_addresses()
     for each_match in IPV4_PATTERN.finditer(text):
         address_text = each_match.group(1)
         if address_text in allowlisted_addresses:

package/hooks/blocking/test_code_rules_enforcer_dead_config_field.py

@@ -124,8 +124,8 @@ def test_flags_field_read_only_by_test_module(neutral_root: Path) -> None:
         "from os_update_workflow.config import ThemeUpdateConfig\n"
         "\n"
         "def test_debug_port_default() -> None:\n"
-        "    cfg = ThemeUpdateConfig(portal_url='x', debug_port=9222, timeout_seconds=30)\n"
-        "    assert cfg.debug_port == 9222\n"
+        "    cfg = ThemeUpdateConfig(portal_url='x', debug_port=8471, timeout_seconds=30)\n"
+        "    assert cfg.debug_port == 8471\n"
         "    assert cfg.portal_url == 'x'\n"
         "    assert cfg.timeout_seconds == 30\n"
     )

package/hooks/blocking/test_pii_prevention_blocker.py

@@ -28,6 +28,7 @@ import pii_prevention_blocker as blocker_module  # noqa: E402
 from pii_prevention_blocker import (  # noqa: E402
     evaluate,
     evaluate_bash_command,
+    evaluate_post_body_texts,
     evaluate_staged_commit,
     evaluate_write_edit_payload,
     extract_git_commit_working_directory,
@@ -903,3 +904,301 @@ def test_git_exe_dash_c_commit_scans_named_repo_not_cwd(tmp_path: Path) -> None:
     assert dash_c_scan is not None
     assert "email" in dash_c_scan
     assert SYNTHETIC_REAL_EMAIL not in dash_c_scan
+
+
+def _add_repository_origin(repository_root: Path, origin_url: str) -> None:
+    subprocess.run(
+        ["git", "remote", "add", "origin", origin_url],
+        cwd=repository_root,
+        check=True,
+        capture_output=True,
+        text=True,
+    )
+
+
+def test_exempt_repository_commit_skips_staged_pii_scan(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root, "https://github.com/ExemptOwner/exempt-repo.git"
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is None
+
+
+def test_exempt_repository_matches_ssh_origin_url(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root, "git@github.com:ExemptOwner/exempt-repo.git"
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "exemptowner/EXEMPT-REPO")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is None
+
+
+def test_non_exempt_repository_commit_still_scans_staged_pii(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root, "https://github.com/OtherOwner/other-repo.git"
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason
+
+
+def test_repository_without_origin_is_not_exempt(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason
+
+
+def test_owner_repo_slug_from_https_origin_with_git_suffix() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://github.com/Owner/repo.git"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_from_https_origin_without_git_suffix() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://github.com/Owner/repo"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_from_scp_ssh_origin() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "git@github.com:Owner/repo.git"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_from_ssh_scheme_origin() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "ssh://git@github.com/Owner/repo.git"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_from_trailing_slash_git_suffix() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://github.com/Owner/repo.git/"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_rejects_spoofed_evil_host() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://evil.test/ExemptOwner/exempt-repo.git"
+        )
+        is None
+    )
+
+
+def test_owner_repo_slug_rejects_notgithub_com_host() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://notgithub.com/Owner/repo.git"
+        )
+        is None
+    )
+
+
+def test_owner_repo_slug_rejects_github_com_suffix_host() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://github.com.evil.test/Owner/repo.git"
+        )
+        is None
+    )
+
+
+def test_owner_repo_slug_rejects_invalid_https_port_authority() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://github.com:443.evil.test/Owner/repo.git"
+        )
+        is None
+    )
+
+
+def test_owner_repo_slug_rejects_invalid_ssh_port_authority() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "ssh://git@github.com:22.evil.test/Owner/repo.git"
+        )
+        is None
+    )
+
+
+def test_owner_repo_slug_from_https_origin_with_valid_port() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://github.com:443/Owner/repo.git"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_from_ssh_origin_with_valid_port() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "ssh://git@github.com:22/Owner/repo.git"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_rejects_path_shaped_origin() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "C:/repos/ExemptOwner/exempt-repo"
+        )
+        is None
+    )
+
+
+def test_spoofed_origin_host_still_denies_staged_email(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root, "https://evil.test/ExemptOwner/exempt-repo.git"
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason
+
+
+def test_invalid_port_authority_origin_still_denies_staged_email(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root,
+        "https://github.com:443.evil.test/ExemptOwner/exempt-repo.git",
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason
+
+
+def test_path_shaped_origin_still_denies_staged_email(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(repository_root, "C:/repos/ExemptOwner/exempt-repo")
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason
+
+
+def test_trailing_slash_git_suffix_origin_still_exempts(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root, "https://github.com/ExemptOwner/exempt-repo.git/"
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is None
+
+
+def test_ssh_scheme_origin_still_exempts(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root, "ssh://git@github.com/ExemptOwner/exempt-repo.git"
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is None
+
+
+def test_write_still_scans_when_repository_is_exempt(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_write_edit_payload(
+        "Write",
+        {
+            "file_path": "notes.md",
+            "content": f"Reach me at {SYNTHETIC_REAL_EMAIL}",
+        },
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason
+
+
+def test_post_body_still_scans_when_repository_is_exempt(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_post_body_texts(
+        [f"Reach me at {SYNTHETIC_REAL_EMAIL}"]
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason

package/hooks/blocking/test_pii_scanner.py

@@ -5,6 +5,8 @@ from __future__ import annotations
 import sys
 from pathlib import Path
 
+import pytest
+
 _HOOK_DIR = Path(__file__).parent
 _HOOKS_DIR = _HOOK_DIR.parent
 if str(_HOOK_DIR) not in sys.path:
@@ -26,6 +28,10 @@ SYNTHETIC_HOME_PATH = r"C:\Users\fixture_real_user\notes.txt"
 SYNTHETIC_PLACEHOLDER_HOME = r"C:\Users\<you>\notes.txt"
 SYNTHETIC_PRIVATE_IP = "192.168.42.17"
 SYNTHETIC_PUBLIC_IP = "8.8.8.8"
+NAS_HOST_ENVIRONMENT_VARIABLE = "CLAUDE_NAS_HOST"
+SYNTHETIC_NAS_PRIVATE_IP = "10.20.30.40"
+SYNTHETIC_NAS_HOSTNAME = "nas.example.local"
+SYNTHETIC_NAS_SSH_COMMAND = f"ssh -p 2200 operator@{SYNTHETIC_NAS_PRIVATE_IP} uptime"
 
 
 def test_flags_real_email_and_allows_example_domain() -> None:
@@ -69,8 +75,27 @@ def test_allows_loopback_unspecified_and_link_local_addresses() -> None:
     assert scan_text_for_pii("peer 169.254.10.20") == []
 
 
-def test_allows_product_nas_private_ip() -> None:
-    assert scan_text_for_pii("ssh -p 9222 jon@192.168.1.100 uptime") == []
+def test_allows_the_nas_host_resolved_from_local_configuration(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    monkeypatch.setenv(NAS_HOST_ENVIRONMENT_VARIABLE, SYNTHETIC_NAS_PRIVATE_IP)
+    assert scan_text_for_pii(SYNTHETIC_NAS_SSH_COMMAND) == []
+
+
+def test_flags_private_ip_that_is_not_the_configured_nas_host(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    monkeypatch.setenv(NAS_HOST_ENVIRONMENT_VARIABLE, SYNTHETIC_NAS_PRIVATE_IP)
+    all_lan_hits = scan_text_for_pii(f"peer {SYNTHETIC_PRIVATE_IP}")
+    assert [each.matched_text for each in all_lan_hits] == [SYNTHETIC_PRIVATE_IP]
+
+
+def test_flags_private_ip_when_the_configured_nas_host_is_a_hostname(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    monkeypatch.setenv(NAS_HOST_ENVIRONMENT_VARIABLE, SYNTHETIC_NAS_HOSTNAME)
+    all_lan_hits = scan_text_for_pii(f"host {SYNTHETIC_PRIVATE_IP}")
+    assert any(each.category == "private-ip" for each in all_lan_hits)
 
 
 def test_flags_github_token_aws_key_and_pem_header() -> None:

package/hooks/blocking/test_verdict_directory_write_blocker.py

@@ -16,8 +16,18 @@ import subprocess
 import sys
 
 _HOOK_DIR = pathlib.Path(__file__).parent
+_HOOKS_DIR = _HOOK_DIR.parent
 if str(_HOOK_DIR) not in sys.path:
     sys.path.insert(0, str(_HOOK_DIR))
+if str(_HOOKS_DIR) not in sys.path:
+    sys.path.insert(0, str(_HOOKS_DIR))
+
+from hooks_constants.bash_pre_tool_use_dispatcher_constants import (  # noqa: E402
+    ALL_BASH_AND_POWERSHELL_TOOL_NAMES,
+    ALL_BASH_HOSTED_HOOK_ENTRIES,
+    BASH_TOOL_NAME,
+    POWERSHELL_TOOL_NAME,
+)
 
 guard_spec = importlib.util.spec_from_file_location(
     "verdict_directory_write_blocker",
@@ -708,18 +718,43 @@ def _pretooluse_commands_for_matcher(matcher_substring: str) -> list[str]:
     return matching_commands
 
 
-def test_guard_is_registered_on_bash() -> None:
+_VERDICT_GUARD_SCRIPT_RELATIVE_PATH = "blocking/verdict_directory_write_blocker.py"
+_BASH_DISPATCHER_BASENAME = "bash_pre_tool_use_dispatcher.py"
+
+
+def _verdict_guard_hosted_entries() -> list:
+    return [
+        each_entry
+        for each_entry in ALL_BASH_HOSTED_HOOK_ENTRIES
+        if each_entry.script_relative_path == _VERDICT_GUARD_SCRIPT_RELATIVE_PATH
+    ]
+
+
+def _assert_bash_dispatcher_registered_for_matcher(matcher_substring: str) -> None:
+    matching_commands = _pretooluse_commands_for_matcher(matcher_substring)
     assert any(
-        "verdict_directory_write_blocker.py" in each_command
-        for each_command in _pretooluse_commands_for_matcher("Bash")
+        _BASH_DISPATCHER_BASENAME in each_command
+        for each_command in matching_commands
+    ), (
+        f"bash_pre_tool_use_dispatcher.py must be registered on matcher containing "
+        f"{matcher_substring!r}; commands={matching_commands!r}"
     )
 
 
+def test_guard_is_registered_on_bash() -> None:
+    _assert_bash_dispatcher_registered_for_matcher("Bash")
+    matching_entries = _verdict_guard_hosted_entries()
+    assert len(matching_entries) == 1
+    assert matching_entries[0].applicable_tool_names == ALL_BASH_AND_POWERSHELL_TOOL_NAMES
+    assert BASH_TOOL_NAME in matching_entries[0].applicable_tool_names
+
+
 def test_guard_is_registered_on_powershell() -> None:
-    assert any(
-        "verdict_directory_write_blocker.py" in each_command
-        for each_command in _pretooluse_commands_for_matcher("PowerShell")
-    )
+    _assert_bash_dispatcher_registered_for_matcher("PowerShell")
+    matching_entries = _verdict_guard_hosted_entries()
+    assert len(matching_entries) == 1
+    assert matching_entries[0].applicable_tool_names == ALL_BASH_AND_POWERSHELL_TOOL_NAMES
+    assert POWERSHELL_TOOL_NAME in matching_entries[0].applicable_tool_names
 
 
 def test_hook_subprocess_imports_real_config_when_parent_holds_shadowing_config(

package/hooks/hooks_constants/CLAUDE.md

@@ -38,7 +38,7 @@ Shared constant modules imported by hooks throughout the `hooks/` tree. Each fil
 | `hosted_hook_runner.py` | `run_hook_capturing_output()` — shared runner that runs one dispatcher-hosted hook in-process via runpy and returns its captured stdout and crash flag |
 | `inline_tuple_string_magic_constants.py` | Patterns for detecting magic strings in inline tuple literals |
 | `js_conventions_constants.py` | Banned identifier set, boolean-prefix pattern, and declaration/JSDoc patterns for the JavaScript convention checks |
-| `local_identity.py` | Loader for the NAS host, ssh user, and ssh port the ssh enforcer guards, resolved from the `CLAUDE_NAS_*` env vars or `~/.claude/local-identity.json` with placeholder defaults; also composes the enforcer's two deny messages that quote those values |
+| `local_identity.py` | Loader for local machine values: NAS host, ssh user, and ssh port the ssh enforcer guards (`CLAUDE_NAS_*` / `~/.claude/local-identity.json` with placeholder defaults), plus the PII commit-scan exempt-repo slug set (`CLAUDE_PII_EXEMPT_REPOS` / `pii_exempt_repositories`); also composes the ssh enforcer's two deny messages that quote the NAS values |
 | `messages.py` | Short user-facing notice strings shown when a Stop hook redirects agent behavior |
 | `multi_edit_reconstruction.py` | `apply_edits()` / `edits_for_tool()` — shared helpers that reconstruct the post-edit content of an Edit or MultiEdit, imported by the blockers that judge post-edit content |
 | `nas_ssh_binary_enforcer_constants.py` | Bash tool name, ssh-family basenames, OpenSSH binary path suffixes, launcher-wrapper set, shell control-operator tokens and split pattern, leading-assignment and duration patterns, and the batch-mode pattern for the NAS ssh binary enforcer |
@@ -85,5 +85,5 @@ Shared constant modules imported by hooks throughout the `hooks/` tree. Each fil
 - Hooks import from this package with `from hooks_constants.<module> import <CONSTANT>`.
 - Tests for these modules live beside them as `test_<module>.py`. Run with `python -m pytest hooks_constants/test_<name>.py`.
 - `dynamic_stderr_handler.py`, `pre_tool_use_stdin.py`, `multi_edit_reconstruction.py`, `hosted_hook_runner.py`, and `text_stripping.py` are utility modules (not pure constants) but live here because they are shared across many hooks.
-- `local_identity.py` is a loader: it reads the environment or `~/.claude/local-identity.json` to resolve the private NAS values, keeping a committed placeholder default.
+- `local_identity.py` is a loader: it reads the environment or `~/.claude/local-identity.json` to resolve private NAS values (with committed placeholder defaults) and the PII commit-scan exempt-repo slug set (`CLAUDE_PII_EXEMPT_REPOS` / `pii_exempt_repositories`).
 

package/hooks/hooks_constants/code_rules_path_utils_constants.py

@@ -22,8 +22,6 @@ ALL_CONFIG_DIRECTORY_NAMES = frozenset(
         "pr_converge_skill_constants",
         "pr_converge_scripts_constants",
         "bugteam_scripts_constants",
-        "implement_scripts_constants",
-        "log_audit_constants",
         "usage_pause_constants",
         "dev_env_scripts_constants",
     }

package/hooks/hooks_constants/local_identity.py

@@ -1,19 +1,23 @@
-"""Resolve the NAS host, ssh user, and ssh port for the NAS ssh enforcer hook.
+"""Resolve local identity values for NAS ssh and PII exempt-repo hooks.
 
-The enforcer ships into ``~/.claude/`` and cannot read a repository file, so it
-reads the real NAS values from the environment or a git-ignored file in the
-Claude home directory, and it composes the two deny messages that quote those
-values. The committed defaults are placeholders.
+The enforcer hooks ship into ``~/.claude/`` and cannot read a repository file,
+so they read real machine values from the environment or a git-ignored file in
+the Claude home directory. This module supplies NAS host/user/port, the two
+NAS deny messages that quote those values, and the owner/repo slug set used by
+``pii_exempt_repository_slugs`` (``CLAUDE_PII_EXEMPT_REPOS`` /
+``pii_exempt_repositories``). The committed NAS defaults are placeholders.
 
 ::
 
-    CLAUDE_NAS_HOST set to a host   ->  nas_host() returns that host
-    CLAUDE_NAS_SSH_PORT set to 2200 ->  nas_ssh_port() returns 2200
-    (env unset, no file)            ->  nas_host() == "nas.example.local"
-                                        nas_ssh_port() == 22
+    CLAUDE_NAS_HOST set to a host              ->  nas_host() returns that host
+    CLAUDE_NAS_SSH_PORT set to 2200            ->  nas_ssh_port() returns 2200
+    CLAUDE_PII_EXEMPT_REPOS="Owner/repo"       ->  {"owner/repo"}
+    (env unset, no file)                       ->  nas_host() == "nas.example.local"
+                                                   nas_ssh_port() == 22
+                                                   pii_exempt_repository_slugs() == frozenset()
 
-Each value comes from its ``CLAUDE_NAS_*`` environment variable, then
-``~/.claude/local-identity.json``, then the placeholder default.
+Each value comes from its environment variable, then
+``~/.claude/local-identity.json``, then the placeholder default (NAS only).
 """
 
 from __future__ import annotations
@@ -23,6 +27,9 @@ import os
 from pathlib import Path
 
 NAS_HOST_ENV_VAR = "CLAUDE_NAS_HOST"
+PII_EXEMPT_REPOS_ENV_VAR = "CLAUDE_PII_EXEMPT_REPOS"
+PII_EXEMPT_REPOS_JSON_KEY = "pii_exempt_repositories"
+PII_EXEMPT_REPOS_SEPARATOR = ","
 NAS_SSH_USER_ENV_VAR = "CLAUDE_NAS_SSH_USER"
 NAS_SSH_PORT_ENV_VAR = "CLAUDE_NAS_SSH_PORT"
 NAS_JSON_KEY = "nas"
@@ -42,7 +49,7 @@ def _local_identity_file_path() -> Path:
     return Path.home() / CLAUDE_HOME_DIRECTORY_NAME / LOCAL_IDENTITY_FILE_NAME
 
 
-def _nas_section_from_local_file() -> dict[str, object]:
+def _identity_dictionary_from_local_file() -> dict[str, object]:
     identity_path = _local_identity_file_path()
     if not identity_path.is_file():
         return {}
@@ -50,12 +57,55 @@ def _nas_section_from_local_file() -> dict[str, object]:
         parsed_identity = json.loads(identity_path.read_text(encoding="utf-8"))
     except (OSError, ValueError, UnicodeDecodeError):
         return {}
-    if not isinstance(parsed_identity, dict):
-        return {}
-    nas_section = parsed_identity.get(NAS_JSON_KEY, {})
+    return parsed_identity if isinstance(parsed_identity, dict) else {}
+
+
+def _nas_section_from_local_file() -> dict[str, object]:
+    nas_section = _identity_dictionary_from_local_file().get(NAS_JSON_KEY, {})
     return nas_section if isinstance(nas_section, dict) else {}
 
 
+def _normalized_slug_set(all_raw_slugs: list[object]) -> frozenset[str]:
+    return frozenset(
+        each_slug.strip().lower()
+        for each_slug in all_raw_slugs
+        if isinstance(each_slug, str) and each_slug.strip()
+    )
+
+
+def pii_exempt_repository_slugs() -> frozenset[str]:
+    """Return owner/repo slugs whose commits skip the staged PII scan.
+
+    ::
+
+        CLAUDE_PII_EXEMPT_REPOS="Owner/repo-a, Other/b"  ->  {"owner/repo-a", "other/b"}
+        CLAUDE_PII_EXEMPT_REPOS=" , , " + file lists A   ->  {"a"}  (whitespace falls through)
+        (env unset, file lists ["Owner/repo-a"])         ->  {"owner/repo-a"}
+        (env unset, no file)                             ->  frozenset()
+
+    A non-empty environment variable (comma-separated) wins. When the variable
+    is unset or normalizes to no slugs, the ``pii_exempt_repositories`` list in
+    the git-ignored ``~/.claude/local-identity.json`` is used. Slugs are
+    lowercased so matching is case-insensitive.
+
+    Returns:
+        Lowercased ``owner/repo`` slugs exempt from staged-commit PII scanning.
+    """
+    slugs_from_environment = os.environ.get(PII_EXEMPT_REPOS_ENV_VAR)
+    if slugs_from_environment is not None:
+        normalized_environment_slugs = _normalized_slug_set(
+            list(slugs_from_environment.split(PII_EXEMPT_REPOS_SEPARATOR))
+        )
+        if normalized_environment_slugs:
+            return normalized_environment_slugs
+    stored_slugs = _identity_dictionary_from_local_file().get(
+        PII_EXEMPT_REPOS_JSON_KEY
+    )
+    if not isinstance(stored_slugs, list):
+        return frozenset()
+    return _normalized_slug_set(stored_slugs)
+
+
 def nas_host() -> str:
     """Return the NAS host the ssh enforcer guards.
 

package/hooks/hooks_constants/pii_prevention_constants.py

@@ -169,11 +169,7 @@ ALL_PLACEHOLDER_HOME_USERNAMES: frozenset[str] = frozenset(
     }
 )
 
-ALL_ALLOWLISTED_PRIVATE_IP_ADDRESSES: frozenset[str] = frozenset(
-    {
-        "192.168.1.100",
-    }
-)
+ALL_ALLOWLISTED_PRIVATE_IP_ADDRESSES: frozenset[str] = frozenset()
 
 MAXIMUM_FINDINGS_PER_SCAN: int = 12
 MAXIMUM_STAGED_FILE_BYTES: int = 1_000_000
@@ -191,6 +187,22 @@ ALL_STAGED_FILES_COMMAND: tuple[str, ...] = (
 ALL_STAGED_BLOB_SHOW_COMMAND_PREFIX: tuple[str, ...] = ("git", "show")
 STAGED_BLOB_PREFIX: str = ":"
 
+ALL_GIT_ORIGIN_URL_COMMAND: tuple[str, ...] = (
+    "git",
+    "config",
+    "--get",
+    "remote.origin.url",
+)
+GIT_URL_SUFFIX: str = ".git"
+GITHUB_COM_HOST: str = "github.com"
+ALL_NETWORK_GIT_URL_SCHEMES: frozenset[str] = frozenset({"http", "https", "ssh"})
+SCP_STYLE_PATH_SEPARATOR: str = ":"
+USERINFO_HOST_SEPARATOR: str = "@"
+URL_SCHEME_SEPARATOR: str = "://"
+WINDOWS_PATH_SEPARATOR: str = "\\"
+POSIX_PATH_SEPARATOR: str = "/"
+MINIMUM_OWNER_REPO_SEGMENT_COUNT: int = 2
+
 BODY_FILE_ENCODING: str = "utf-8"
 NULL_BYTE_MARKER: bytes = b"\x00"
 MESSAGE_LINE_SEPARATOR: str = "\n"
@@ -269,9 +281,9 @@ CORRECTIVE_MESSAGE_HEADER: str = (
 CORRECTIVE_MESSAGE_FOOTER: str = (
     "Remediate: replace with placeholders (user@example.com, C:/Users/example/), "
     "move secrets to an env or secret store, and run the privacy-hygiene skill "
-    "for a full sweep. Add intentional LAN hosts to "
-    "ALL_ALLOWLISTED_PRIVATE_IP_ADDRESSES in hooks_constants when tooling must "
-    "keep a host such as a NAS."
+    "for a full sweep. Your own NAS host is allowlisted at scan time from "
+    "CLAUDE_NAS_HOST or ~/.claude/local-identity.json, so set it there rather "
+    "than committing the address."
 )
 
 FINDING_LINE_TEMPLATE: str = "  [{category}] {preview}"