claude-dev-env 1.93.1 → 1.94.0

package/hooks/blocking/test_pii_prevention_blocker.py

@@ -28,6 +28,7 @@ import pii_prevention_blocker as blocker_module  # noqa: E402
 from pii_prevention_blocker import (  # noqa: E402
     evaluate,
     evaluate_bash_command,
+    evaluate_post_body_texts,
     evaluate_staged_commit,
     evaluate_write_edit_payload,
     extract_git_commit_working_directory,
@@ -903,3 +904,301 @@ def test_git_exe_dash_c_commit_scans_named_repo_not_cwd(tmp_path: Path) -> None:
     assert dash_c_scan is not None
     assert "email" in dash_c_scan
     assert SYNTHETIC_REAL_EMAIL not in dash_c_scan
+
+
+def _add_repository_origin(repository_root: Path, origin_url: str) -> None:
+    subprocess.run(
+        ["git", "remote", "add", "origin", origin_url],
+        cwd=repository_root,
+        check=True,
+        capture_output=True,
+        text=True,
+    )
+
+
+def test_exempt_repository_commit_skips_staged_pii_scan(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root, "https://github.com/ExemptOwner/exempt-repo.git"
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is None
+
+
+def test_exempt_repository_matches_ssh_origin_url(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root, "git@github.com:ExemptOwner/exempt-repo.git"
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "exemptowner/EXEMPT-REPO")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is None
+
+
+def test_non_exempt_repository_commit_still_scans_staged_pii(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root, "https://github.com/OtherOwner/other-repo.git"
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason
+
+
+def test_repository_without_origin_is_not_exempt(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason
+
+
+def test_owner_repo_slug_from_https_origin_with_git_suffix() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://github.com/Owner/repo.git"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_from_https_origin_without_git_suffix() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://github.com/Owner/repo"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_from_scp_ssh_origin() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "git@github.com:Owner/repo.git"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_from_ssh_scheme_origin() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "ssh://git@github.com/Owner/repo.git"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_from_trailing_slash_git_suffix() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://github.com/Owner/repo.git/"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_rejects_spoofed_evil_host() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://evil.test/ExemptOwner/exempt-repo.git"
+        )
+        is None
+    )
+
+
+def test_owner_repo_slug_rejects_notgithub_com_host() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://notgithub.com/Owner/repo.git"
+        )
+        is None
+    )
+
+
+def test_owner_repo_slug_rejects_github_com_suffix_host() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://github.com.evil.test/Owner/repo.git"
+        )
+        is None
+    )
+
+
+def test_owner_repo_slug_rejects_invalid_https_port_authority() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://github.com:443.evil.test/Owner/repo.git"
+        )
+        is None
+    )
+
+
+def test_owner_repo_slug_rejects_invalid_ssh_port_authority() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "ssh://git@github.com:22.evil.test/Owner/repo.git"
+        )
+        is None
+    )
+
+
+def test_owner_repo_slug_from_https_origin_with_valid_port() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "https://github.com:443/Owner/repo.git"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_from_ssh_origin_with_valid_port() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "ssh://git@github.com:22/Owner/repo.git"
+        )
+        == "owner/repo"
+    )
+
+
+def test_owner_repo_slug_rejects_path_shaped_origin() -> None:
+    assert (
+        blocker_module._owner_repo_slug_from_origin_url(
+            "C:/repos/ExemptOwner/exempt-repo"
+        )
+        is None
+    )
+
+
+def test_spoofed_origin_host_still_denies_staged_email(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root, "https://evil.test/ExemptOwner/exempt-repo.git"
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason
+
+
+def test_invalid_port_authority_origin_still_denies_staged_email(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root,
+        "https://github.com:443.evil.test/ExemptOwner/exempt-repo.git",
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason
+
+
+def test_path_shaped_origin_still_denies_staged_email(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(repository_root, "C:/repos/ExemptOwner/exempt-repo")
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason
+
+
+def test_trailing_slash_git_suffix_origin_still_exempts(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root, "https://github.com/ExemptOwner/exempt-repo.git/"
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is None
+
+
+def test_ssh_scheme_origin_still_exempts(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    repository_root = tmp_path / "repo"
+    _init_repo_with_staged_email(repository_root)
+    _add_repository_origin(
+        repository_root, "ssh://git@github.com/ExemptOwner/exempt-repo.git"
+    )
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_bash_command(
+        "git commit -m test",
+        working_directory=str(repository_root),
+    )
+    assert deny_reason is None
+
+
+def test_write_still_scans_when_repository_is_exempt(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_write_edit_payload(
+        "Write",
+        {
+            "file_path": "notes.md",
+            "content": f"Reach me at {SYNTHETIC_REAL_EMAIL}",
+        },
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason
+
+
+def test_post_body_still_scans_when_repository_is_exempt(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
+    deny_reason = evaluate_post_body_texts(
+        [f"Reach me at {SYNTHETIC_REAL_EMAIL}"]
+    )
+    assert deny_reason is not None
+    assert "email" in deny_reason

package/hooks/blocking/test_verdict_directory_write_blocker.py

@@ -16,8 +16,18 @@ import subprocess
 import sys
 
 _HOOK_DIR = pathlib.Path(__file__).parent
+_HOOKS_DIR = _HOOK_DIR.parent
 if str(_HOOK_DIR) not in sys.path:
     sys.path.insert(0, str(_HOOK_DIR))
+if str(_HOOKS_DIR) not in sys.path:
+    sys.path.insert(0, str(_HOOKS_DIR))
+
+from hooks_constants.bash_pre_tool_use_dispatcher_constants import (  # noqa: E402
+    ALL_BASH_AND_POWERSHELL_TOOL_NAMES,
+    ALL_BASH_HOSTED_HOOK_ENTRIES,
+    BASH_TOOL_NAME,
+    POWERSHELL_TOOL_NAME,
+)
 
 guard_spec = importlib.util.spec_from_file_location(
     "verdict_directory_write_blocker",
@@ -708,18 +718,43 @@ def _pretooluse_commands_for_matcher(matcher_substring: str) -> list[str]:
     return matching_commands
 
 
-def test_guard_is_registered_on_bash() -> None:
+_VERDICT_GUARD_SCRIPT_RELATIVE_PATH = "blocking/verdict_directory_write_blocker.py"
+_BASH_DISPATCHER_BASENAME = "bash_pre_tool_use_dispatcher.py"
+
+
+def _verdict_guard_hosted_entries() -> list:
+    return [
+        each_entry
+        for each_entry in ALL_BASH_HOSTED_HOOK_ENTRIES
+        if each_entry.script_relative_path == _VERDICT_GUARD_SCRIPT_RELATIVE_PATH
+    ]
+
+
+def _assert_bash_dispatcher_registered_for_matcher(matcher_substring: str) -> None:
+    matching_commands = _pretooluse_commands_for_matcher(matcher_substring)
     assert any(
-        "verdict_directory_write_blocker.py" in each_command
-        for each_command in _pretooluse_commands_for_matcher("Bash")
+        _BASH_DISPATCHER_BASENAME in each_command
+        for each_command in matching_commands
+    ), (
+        f"bash_pre_tool_use_dispatcher.py must be registered on matcher containing "
+        f"{matcher_substring!r}; commands={matching_commands!r}"
     )
 
 
+def test_guard_is_registered_on_bash() -> None:
+    _assert_bash_dispatcher_registered_for_matcher("Bash")
+    matching_entries = _verdict_guard_hosted_entries()
+    assert len(matching_entries) == 1
+    assert matching_entries[0].applicable_tool_names == ALL_BASH_AND_POWERSHELL_TOOL_NAMES
+    assert BASH_TOOL_NAME in matching_entries[0].applicable_tool_names
+
+
 def test_guard_is_registered_on_powershell() -> None:
-    assert any(
-        "verdict_directory_write_blocker.py" in each_command
-        for each_command in _pretooluse_commands_for_matcher("PowerShell")
-    )
+    _assert_bash_dispatcher_registered_for_matcher("PowerShell")
+    matching_entries = _verdict_guard_hosted_entries()
+    assert len(matching_entries) == 1
+    assert matching_entries[0].applicable_tool_names == ALL_BASH_AND_POWERSHELL_TOOL_NAMES
+    assert POWERSHELL_TOOL_NAME in matching_entries[0].applicable_tool_names
 
 
 def test_hook_subprocess_imports_real_config_when_parent_holds_shadowing_config(

package/hooks/hooks_constants/CLAUDE.md

@@ -38,7 +38,7 @@ Shared constant modules imported by hooks throughout the `hooks/` tree. Each fil
 | `hosted_hook_runner.py` | `run_hook_capturing_output()` — shared runner that runs one dispatcher-hosted hook in-process via runpy and returns its captured stdout and crash flag |
 | `inline_tuple_string_magic_constants.py` | Patterns for detecting magic strings in inline tuple literals |
 | `js_conventions_constants.py` | Banned identifier set, boolean-prefix pattern, and declaration/JSDoc patterns for the JavaScript convention checks |
-| `local_identity.py` | Loader for the NAS host, ssh user, and ssh port the ssh enforcer guards, resolved from the `CLAUDE_NAS_*` env vars or `~/.claude/local-identity.json` with placeholder defaults; also composes the enforcer's two deny messages that quote those values |
+| `local_identity.py` | Loader for local machine values: NAS host, ssh user, and ssh port the ssh enforcer guards (`CLAUDE_NAS_*` / `~/.claude/local-identity.json` with placeholder defaults), plus the PII commit-scan exempt-repo slug set (`CLAUDE_PII_EXEMPT_REPOS` / `pii_exempt_repositories`); also composes the ssh enforcer's two deny messages that quote the NAS values |
 | `messages.py` | Short user-facing notice strings shown when a Stop hook redirects agent behavior |
 | `multi_edit_reconstruction.py` | `apply_edits()` / `edits_for_tool()` — shared helpers that reconstruct the post-edit content of an Edit or MultiEdit, imported by the blockers that judge post-edit content |
 | `nas_ssh_binary_enforcer_constants.py` | Bash tool name, ssh-family basenames, OpenSSH binary path suffixes, launcher-wrapper set, shell control-operator tokens and split pattern, leading-assignment and duration patterns, and the batch-mode pattern for the NAS ssh binary enforcer |
@@ -85,5 +85,5 @@ Shared constant modules imported by hooks throughout the `hooks/` tree. Each fil
 - Hooks import from this package with `from hooks_constants.<module> import <CONSTANT>`.
 - Tests for these modules live beside them as `test_<module>.py`. Run with `python -m pytest hooks_constants/test_<name>.py`.
 - `dynamic_stderr_handler.py`, `pre_tool_use_stdin.py`, `multi_edit_reconstruction.py`, `hosted_hook_runner.py`, and `text_stripping.py` are utility modules (not pure constants) but live here because they are shared across many hooks.
-- `local_identity.py` is a loader: it reads the environment or `~/.claude/local-identity.json` to resolve the private NAS values, keeping a committed placeholder default.
+- `local_identity.py` is a loader: it reads the environment or `~/.claude/local-identity.json` to resolve private NAS values (with committed placeholder defaults) and the PII commit-scan exempt-repo slug set (`CLAUDE_PII_EXEMPT_REPOS` / `pii_exempt_repositories`).
 

package/hooks/hooks_constants/code_rules_path_utils_constants.py

@@ -22,8 +22,6 @@ ALL_CONFIG_DIRECTORY_NAMES = frozenset(
         "pr_converge_skill_constants",
         "pr_converge_scripts_constants",
         "bugteam_scripts_constants",
-        "implement_scripts_constants",
-        "log_audit_constants",
         "usage_pause_constants",
         "dev_env_scripts_constants",
     }

package/hooks/hooks_constants/local_identity.py

@@ -1,19 +1,23 @@
-"""Resolve the NAS host, ssh user, and ssh port for the NAS ssh enforcer hook.
+"""Resolve local identity values for NAS ssh and PII exempt-repo hooks.
 
-The enforcer ships into ``~/.claude/`` and cannot read a repository file, so it
-reads the real NAS values from the environment or a git-ignored file in the
-Claude home directory, and it composes the two deny messages that quote those
-values. The committed defaults are placeholders.
+The enforcer hooks ship into ``~/.claude/`` and cannot read a repository file,
+so they read real machine values from the environment or a git-ignored file in
+the Claude home directory. This module supplies NAS host/user/port, the two
+NAS deny messages that quote those values, and the owner/repo slug set used by
+``pii_exempt_repository_slugs`` (``CLAUDE_PII_EXEMPT_REPOS`` /
+``pii_exempt_repositories``). The committed NAS defaults are placeholders.
 
 ::
 
-    CLAUDE_NAS_HOST set to a host   ->  nas_host() returns that host
-    CLAUDE_NAS_SSH_PORT set to 2200 ->  nas_ssh_port() returns 2200
-    (env unset, no file)            ->  nas_host() == "nas.example.local"
-                                        nas_ssh_port() == 22
+    CLAUDE_NAS_HOST set to a host              ->  nas_host() returns that host
+    CLAUDE_NAS_SSH_PORT set to 2200            ->  nas_ssh_port() returns 2200
+    CLAUDE_PII_EXEMPT_REPOS="Owner/repo"       ->  {"owner/repo"}
+    (env unset, no file)                       ->  nas_host() == "nas.example.local"
+                                                   nas_ssh_port() == 22
+                                                   pii_exempt_repository_slugs() == frozenset()
 
-Each value comes from its ``CLAUDE_NAS_*`` environment variable, then
-``~/.claude/local-identity.json``, then the placeholder default.
+Each value comes from its environment variable, then
+``~/.claude/local-identity.json``, then the placeholder default (NAS only).
 """
 
 from __future__ import annotations
@@ -23,6 +27,9 @@ import os
 from pathlib import Path
 
 NAS_HOST_ENV_VAR = "CLAUDE_NAS_HOST"
+PII_EXEMPT_REPOS_ENV_VAR = "CLAUDE_PII_EXEMPT_REPOS"
+PII_EXEMPT_REPOS_JSON_KEY = "pii_exempt_repositories"
+PII_EXEMPT_REPOS_SEPARATOR = ","
 NAS_SSH_USER_ENV_VAR = "CLAUDE_NAS_SSH_USER"
 NAS_SSH_PORT_ENV_VAR = "CLAUDE_NAS_SSH_PORT"
 NAS_JSON_KEY = "nas"
@@ -42,7 +49,7 @@ def _local_identity_file_path() -> Path:
     return Path.home() / CLAUDE_HOME_DIRECTORY_NAME / LOCAL_IDENTITY_FILE_NAME
 
 
-def _nas_section_from_local_file() -> dict[str, object]:
+def _identity_dictionary_from_local_file() -> dict[str, object]:
     identity_path = _local_identity_file_path()
     if not identity_path.is_file():
         return {}
@@ -50,12 +57,55 @@ def _nas_section_from_local_file() -> dict[str, object]:
         parsed_identity = json.loads(identity_path.read_text(encoding="utf-8"))
     except (OSError, ValueError, UnicodeDecodeError):
         return {}
-    if not isinstance(parsed_identity, dict):
-        return {}
-    nas_section = parsed_identity.get(NAS_JSON_KEY, {})
+    return parsed_identity if isinstance(parsed_identity, dict) else {}
+
+
+def _nas_section_from_local_file() -> dict[str, object]:
+    nas_section = _identity_dictionary_from_local_file().get(NAS_JSON_KEY, {})
     return nas_section if isinstance(nas_section, dict) else {}
 
 
+def _normalized_slug_set(all_raw_slugs: list[object]) -> frozenset[str]:
+    return frozenset(
+        each_slug.strip().lower()
+        for each_slug in all_raw_slugs
+        if isinstance(each_slug, str) and each_slug.strip()
+    )
+
+
+def pii_exempt_repository_slugs() -> frozenset[str]:
+    """Return owner/repo slugs whose commits skip the staged PII scan.
+
+    ::
+
+        CLAUDE_PII_EXEMPT_REPOS="Owner/repo-a, Other/b"  ->  {"owner/repo-a", "other/b"}
+        CLAUDE_PII_EXEMPT_REPOS=" , , " + file lists A   ->  {"a"}  (whitespace falls through)
+        (env unset, file lists ["Owner/repo-a"])         ->  {"owner/repo-a"}
+        (env unset, no file)                             ->  frozenset()
+
+    A non-empty environment variable (comma-separated) wins. When the variable
+    is unset or normalizes to no slugs, the ``pii_exempt_repositories`` list in
+    the git-ignored ``~/.claude/local-identity.json`` is used. Slugs are
+    lowercased so matching is case-insensitive.
+
+    Returns:
+        Lowercased ``owner/repo`` slugs exempt from staged-commit PII scanning.
+    """
+    slugs_from_environment = os.environ.get(PII_EXEMPT_REPOS_ENV_VAR)
+    if slugs_from_environment is not None:
+        normalized_environment_slugs = _normalized_slug_set(
+            list(slugs_from_environment.split(PII_EXEMPT_REPOS_SEPARATOR))
+        )
+        if normalized_environment_slugs:
+            return normalized_environment_slugs
+    stored_slugs = _identity_dictionary_from_local_file().get(
+        PII_EXEMPT_REPOS_JSON_KEY
+    )
+    if not isinstance(stored_slugs, list):
+        return frozenset()
+    return _normalized_slug_set(stored_slugs)
+
+
 def nas_host() -> str:
     """Return the NAS host the ssh enforcer guards.
 

package/hooks/hooks_constants/pii_prevention_constants.py

@@ -187,6 +187,22 @@ ALL_STAGED_FILES_COMMAND: tuple[str, ...] = (
 ALL_STAGED_BLOB_SHOW_COMMAND_PREFIX: tuple[str, ...] = ("git", "show")
 STAGED_BLOB_PREFIX: str = ":"
 
+ALL_GIT_ORIGIN_URL_COMMAND: tuple[str, ...] = (
+    "git",
+    "config",
+    "--get",
+    "remote.origin.url",
+)
+GIT_URL_SUFFIX: str = ".git"
+GITHUB_COM_HOST: str = "github.com"
+ALL_NETWORK_GIT_URL_SCHEMES: frozenset[str] = frozenset({"http", "https", "ssh"})
+SCP_STYLE_PATH_SEPARATOR: str = ":"
+USERINFO_HOST_SEPARATOR: str = "@"
+URL_SCHEME_SEPARATOR: str = "://"
+WINDOWS_PATH_SEPARATOR: str = "\\"
+POSIX_PATH_SEPARATOR: str = "/"
+MINIMUM_OWNER_REPO_SEGMENT_COUNT: int = 2
+
 BODY_FILE_ENCODING: str = "utf-8"
 NULL_BYTE_MARKER: bytes = b"\x00"
 MESSAGE_LINE_SEPARATOR: str = "\n"

package/hooks/hooks_constants/pr_description_enforcer_constants.py

@@ -121,6 +121,7 @@ DEFAULT_READABILITY_THRESHOLDS: ReadabilityThresholds = ReadabilityThresholds(
 __all__ = [
     "ALL_HEAVY_OPENING_HEADERS",
     "ALL_HEAVY_TESTING_HEADERS",
+    "ALL_PR_NUMBER_BEARING_GH_PR_SUBCOMMANDS",
     "ALL_READABILITY_CLI_FLAG_TOKENS",
     "ATOMIC_WRITE_TEMP_SUFFIX",
     "BLOCKQUOTE_LINE_PATTERN",
@@ -135,7 +136,6 @@ __all__ = [
     "FLESCH_SYLLABLES_PER_WORD_COEFFICIENT",
     "FLESCH_WORDS_PER_SENTENCE_COEFFICIENT",
     "GH_PR_COMMAND_MIN_TOKEN_COUNT",
-    "ALL_PR_NUMBER_BEARING_GH_PR_SUBCOMMANDS",
     "HEADING_LINE_PATTERN",
     "HEAVY_MIN_BODY_CHARS_FOR_CLASSIFICATION",
     "HEAVY_SHAPE",

package/hooks/hooks_constants/test_local_identity.py

@@ -66,6 +66,74 @@ class TestNasValuesPlaceholderDefault:
                 assert local_identity.nas_ssh_port() == 22
 
 
+class TestPiiExemptRepositorySlugs:
+    def should_read_slugs_from_the_environment_lowercased(self) -> None:
+        with patch.dict(
+            os.environ,
+            {"CLAUDE_PII_EXEMPT_REPOS": "ExemptOwner/exempt-repo, Other/Repo"},
+            clear=False,
+        ):
+            slugs = local_identity.pii_exempt_repository_slugs()
+            assert slugs == frozenset({"exemptowner/exempt-repo", "other/repo"})
+
+    def should_read_slugs_from_the_local_identity_file(self, tmp_path: Path) -> None:
+        claude_home = tmp_path / ".claude"
+        claude_home.mkdir()
+        (claude_home / "local-identity.json").write_text(
+            json.dumps({"pii_exempt_repositories": ["FileOwner/file-repo"]}),
+            encoding="utf-8",
+        )
+        with patch.dict(os.environ, {}, clear=False):
+            os.environ.pop("CLAUDE_PII_EXEMPT_REPOS", None)
+            with patch.object(Path, "home", return_value=tmp_path):
+                slugs = local_identity.pii_exempt_repository_slugs()
+                assert slugs == frozenset({"fileowner/file-repo"})
+
+    def should_return_an_empty_set_when_no_env_and_no_file(
+        self, tmp_path: Path
+    ) -> None:
+        with patch.dict(os.environ, {}, clear=False):
+            os.environ.pop("CLAUDE_PII_EXEMPT_REPOS", None)
+            with patch.object(Path, "home", return_value=tmp_path):
+                assert local_identity.pii_exempt_repository_slugs() == frozenset()
+
+    def should_prefer_environment_slugs_over_local_identity_file(
+        self, tmp_path: Path
+    ) -> None:
+        claude_home = tmp_path / ".claude"
+        claude_home.mkdir()
+        (claude_home / "local-identity.json").write_text(
+            json.dumps({"pii_exempt_repositories": ["FileOwner/file-repo"]}),
+            encoding="utf-8",
+        )
+        with patch.dict(
+            os.environ,
+            {"CLAUDE_PII_EXEMPT_REPOS": "EnvOwner/env-repo"},
+            clear=False,
+        ):
+            with patch.object(Path, "home", return_value=tmp_path):
+                slugs = local_identity.pii_exempt_repository_slugs()
+                assert slugs == frozenset({"envowner/env-repo"})
+
+    def should_fall_through_to_json_when_environment_is_whitespace_only(
+        self, tmp_path: Path
+    ) -> None:
+        claude_home = tmp_path / ".claude"
+        claude_home.mkdir()
+        (claude_home / "local-identity.json").write_text(
+            json.dumps({"pii_exempt_repositories": ["FileOwner/file-repo"]}),
+            encoding="utf-8",
+        )
+        with patch.dict(
+            os.environ,
+            {"CLAUDE_PII_EXEMPT_REPOS": " , , "},
+            clear=False,
+        ):
+            with patch.object(Path, "home", return_value=tmp_path):
+                slugs = local_identity.pii_exempt_repository_slugs()
+                assert slugs == frozenset({"fileowner/file-repo"})
+
+
 class TestDenyMessagesQuoteTheResolvedHost:
     def should_include_the_resolved_host_and_port_in_the_bare_binary_message(
         self,

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-dev-env",
-    "version": "1.93.1",
+    "version": "1.94.0",
     "description": "Claude Code development standards — rules, hooks, agents, commands, and skills",
     "type": "module",
     "bin": {

package/scripts/CLAUDE.md

@@ -21,6 +21,7 @@ Utility scripts installed into `~/.claude/scripts/` by `bin/install.mjs`. Each s
 | `Install-SweepEmptyDirs.ps1` | Registers `sweep_empty_dirs.py` as a scheduled task on Windows |
 | `check.ps1` | Runs the full code-quality check suite |
 | `Show-Asset.ps1` | Opens files on screen, sizing each image window to the image's pixel dimensions (scaled to fit the screen); non-image files open in their default application |
+| `Get-SessionAccount.ps1` | Reports which Claude account the current session is actually logged into by comparing `~/.claude.json`'s CLI login against a `CLAUDE_USER_DATA_DIR` desktop profile's `lastKnownAccountUuid`, recovering the desktop account's email from profile storage when the two accounts differ |
 
 ## Subdirectories
 
@@ -28,10 +29,18 @@ Utility scripts installed into `~/.claude/scripts/` by `bin/install.mjs`. Each s
 |---|---|
 | `dev_env_scripts_constants/` | Named constants (`timing.py`) for scripts in this directory |
 | `sync_to_cursor/` | Package that builds Cursor `.mdc` files from Claude rules and docs |
-| `tests/` | pytest suite for the Python scripts in this directory |
+| `tests/` | pytest suite for the Python scripts and Pester (`*.Tests.ps1`) suite for the PowerShell scripts in this directory |
 
 ## Running tests
 
+Python scripts (pytest):
+
 ```bash
 python -m pytest packages/claude-dev-env/scripts/tests/
 ```
+
+PowerShell scripts (Pester 5+, `*.Tests.ps1`):
+
+```powershell
+Invoke-Pester -Path packages/claude-dev-env/scripts/tests/
+```