claude-dev-env 2.12.0 → 2.13.0

package/hooks/blocking/test_code_review_pr_create_gate.py

@@ -1,199 +0,0 @@
-"""Behavioral tests for the PR-create code-review gate.
-
-Each test drives the gate against a real git work tree with a change surface
-and a real stamp store under an isolated home, so the deny/allow decision runs
-the same hash-and-coverage path the hook runs in production.
-"""
-
-from __future__ import annotations
-
-import importlib.util
-import subprocess
-import sys
-from pathlib import Path
-from types import ModuleType
-
-import pytest
-
-_HOOK_DIR = Path(__file__).resolve().parent
-if str(_HOOK_DIR) not in sys.path:
-    sys.path.insert(0, str(_HOOK_DIR))
-
-GIT_TIMEOUT_SECONDS = 30
-XHIGH_EFFORT = "xhigh"
-LOW_EFFORT = "low"
-SURFACE_SOURCE = "def add(a: int, b: int) -> int:\n    return a + b\n"
-SURFACE_CHANGE = "def add(a: int, b: int) -> int:\n    return a - b\n"
-MCP_CREATE_PR_TOOL = "mcp__plugin_github_github__create_pull_request"
-
-
-def _load_module(module_name: str) -> ModuleType:
-    module_spec = importlib.util.spec_from_file_location(
-        module_name, _HOOK_DIR / f"{module_name}.py"
-    )
-    assert module_spec is not None
-    assert module_spec.loader is not None
-    loaded_module = importlib.util.module_from_spec(module_spec)
-    module_spec.loader.exec_module(loaded_module)
-    return loaded_module
-
-
-gate_module = _load_module("code_review_pr_create_gate")
-store_module = _load_module("code_review_stamp_store")
-deny_module = _load_module("code_review_gate_deny")
-
-
-@pytest.fixture(autouse=True)
-def enable_code_review_enforcement(monkeypatch: pytest.MonkeyPatch) -> None:
-    """Behavior tests exercise the gates with enforcement on."""
-    monkeypatch.setattr(gate_module, "CODE_REVIEW_ENFORCEMENT_ENABLED", True)
-
-
-def _run_git(repository_directory: Path, *git_arguments: str) -> None:
-    subprocess.run(
-        ["git", "-C", str(repository_directory), *git_arguments],
-        check=True,
-        capture_output=True,
-        text=True,
-        timeout=GIT_TIMEOUT_SECONDS,
-    )
-
-
-def _make_repo_with_change_surface(tmp_path: Path) -> Path:
-    origin_directory = tmp_path / "origin.git"
-    work_directory = tmp_path / "work"
-    work_directory.mkdir()
-    subprocess.run(
-        ["git", "init", "--bare", "--initial-branch=main", str(origin_directory)],
-        check=True,
-        capture_output=True,
-        text=True,
-        timeout=GIT_TIMEOUT_SECONDS,
-    )
-    _run_git(work_directory, "init", "--initial-branch=main")
-    _run_git(work_directory, "config", "user.email", "tests@example.com")
-    _run_git(work_directory, "config", "user.name", "Reviewer")
-    (work_directory / "app.py").write_text(SURFACE_SOURCE, encoding="utf-8")
-    _run_git(work_directory, "add", "-A")
-    _run_git(work_directory, "commit", "-m", "base")
-    _run_git(work_directory, "remote", "add", "origin", str(origin_directory))
-    _run_git(work_directory, "push", "-u", "origin", "main")
-    (work_directory / "app.py").write_text(SURFACE_CHANGE, encoding="utf-8")
-    return work_directory
-
-
-def _isolate_home(monkeypatch: pytest.MonkeyPatch, fake_home: Path) -> None:
-    home_text = str(fake_home)
-    monkeypatch.setenv("HOME", home_text)
-    monkeypatch.setenv("USERPROFILE", home_text)
-    monkeypatch.delenv("HOMEDRIVE", raising=False)
-    monkeypatch.delenv("HOMEPATH", raising=False)
-
-
-def _prepared_repo(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> Path:
-    fake_home = tmp_path / "home"
-    fake_home.mkdir()
-    _isolate_home(monkeypatch, fake_home)
-    return _make_repo_with_change_surface(tmp_path)
-
-
-def _record_stamp(work_directory: Path, effort: str) -> None:
-    surface_hash = store_module.live_surface_hash(str(work_directory))
-    assert surface_hash is not None
-    store_module.record_clean_stamp(str(work_directory), surface_hash, effort)
-
-
-def test_command_invokes_gh_pr_create_detects_real_invocation() -> None:
-    assert gate_module.command_invokes_gh_pr_create("gh pr create --title T --body-file b.md")
-
-
-def test_gh_pr_edit_is_not_a_create() -> None:
-    assert not gate_module.command_invokes_gh_pr_create("gh pr edit 1 --title T")
-
-
-def test_echoed_prose_is_not_a_create() -> None:
-    assert not gate_module.command_invokes_gh_pr_create('echo "gh pr create"')
-
-
-def test_is_mcp_create_pull_request_tool_matches_configured_name() -> None:
-    assert gate_module.is_mcp_create_pull_request_tool(MCP_CREATE_PR_TOOL)
-    assert not gate_module.is_mcp_create_pull_request_tool("Bash")
-
-
-def test_uncovered_surface_denies_pr_create(
-    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
-) -> None:
-    work_directory = _prepared_repo(monkeypatch, tmp_path)
-    deny_reason = gate_module.deny_reason_for_directory(str(work_directory))
-    assert deny_reason is not None
-    assert "PR_CREATE_GATE" in deny_reason
-
-
-def test_covering_xhigh_stamp_allows_pr_create(
-    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
-) -> None:
-    work_directory = _prepared_repo(monkeypatch, tmp_path)
-    _record_stamp(work_directory, XHIGH_EFFORT)
-    assert gate_module.deny_reason_for_directory(str(work_directory)) is None
-
-
-def test_low_only_stamp_does_not_satisfy_xhigh(
-    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
-) -> None:
-    work_directory = _prepared_repo(monkeypatch, tmp_path)
-    _record_stamp(work_directory, LOW_EFFORT)
-    deny_reason = gate_module.deny_reason_for_directory(str(work_directory))
-    assert deny_reason is not None
-    assert "PR_CREATE_GATE" in deny_reason
-
-
-def test_shell_gh_pr_create_payload_denies_without_stamp(
-    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
-) -> None:
-    work_directory = _prepared_repo(monkeypatch, tmp_path)
-    payload = {
-        "tool_name": "Bash",
-        "tool_input": {"command": "gh pr create --title T --body-file b.md"},
-        "cwd": str(work_directory),
-    }
-    deny_decision = gate_module.decision_for_payload(payload)
-    assert deny_decision is not None
-    assert deny_decision["hookSpecificOutput"]["permissionDecision"] == "deny"
-
-
-def test_mcp_create_pull_request_payload_denies_without_stamp(
-    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
-) -> None:
-    work_directory = _prepared_repo(monkeypatch, tmp_path)
-    payload = {
-        "tool_name": MCP_CREATE_PR_TOOL,
-        "tool_input": {"owner": "o", "repo": "r"},
-        "cwd": str(work_directory),
-    }
-    deny_decision = gate_module.decision_for_payload(payload)
-    assert deny_decision is not None
-    assert deny_decision["hookSpecificOutput"]["permissionDecision"] == "deny"
-
-
-def test_gh_pr_edit_payload_is_not_denied(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
-    work_directory = _prepared_repo(monkeypatch, tmp_path)
-    payload = {
-        "tool_name": "Bash",
-        "tool_input": {"command": "gh pr edit 1 --title T"},
-        "cwd": str(work_directory),
-    }
-    assert gate_module.decision_for_payload(payload) is None
-
-
-def test_build_deny_payload_shape() -> None:
-    deny_payload = deny_module.build_code_review_deny_payload("blocked reason")
-    assert deny_payload["hookSpecificOutput"]["permissionDecision"] == "deny"
-    assert deny_payload["hookSpecificOutput"]["permissionDecisionReason"] == "blocked reason"
-
-
-def test_enforcement_off_allows_pr_create_without_stamp(
-    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
-) -> None:
-    monkeypatch.setattr(gate_module, "CODE_REVIEW_ENFORCEMENT_ENABLED", False)
-    work_directory = _prepared_repo(monkeypatch, tmp_path)
-    assert gate_module.deny_reason_for_directory(str(work_directory)) is None

package/hooks/blocking/test_code_review_push_gate.py

@@ -1,205 +0,0 @@
-"""Behavioral tests for the push code-review gate.
-
-Each test drives the gate against a real git work tree with a change surface
-and a real stamp store under an isolated home, so the deny/allow decision runs
-the same hash-and-coverage path the hook runs in production.
-"""
-
-from __future__ import annotations
-
-import importlib.util
-import io
-import json
-import subprocess
-import sys
-from pathlib import Path
-from types import ModuleType
-
-import pytest
-
-_HOOK_DIR = Path(__file__).resolve().parent
-if str(_HOOK_DIR) not in sys.path:
-    sys.path.insert(0, str(_HOOK_DIR))
-
-GIT_TIMEOUT_SECONDS = 30
-LOW_EFFORT = "low"
-XHIGH_EFFORT = "xhigh"
-CODE_SOURCE = "def add(a: int, b: int) -> int:\n    return a + b\n"
-CODE_CHANGE = "def add(a: int, b: int) -> int:\n    return a - b\n"
-DOCS_SOURCE = "# Notes\n\nfirst line\n"
-DOCS_CHANGE = "# Notes\n\nsecond line\n"
-BYPASS_MARKER = "# code-review-skip"
-
-
-def _load_module(module_name: str) -> ModuleType:
-    module_spec = importlib.util.spec_from_file_location(
-        module_name, _HOOK_DIR / f"{module_name}.py"
-    )
-    assert module_spec is not None
-    assert module_spec.loader is not None
-    loaded_module = importlib.util.module_from_spec(module_spec)
-    module_spec.loader.exec_module(loaded_module)
-    return loaded_module
-
-
-gate_module = _load_module("code_review_push_gate")
-store_module = _load_module("code_review_stamp_store")
-
-
-@pytest.fixture(autouse=True)
-def enable_code_review_enforcement(monkeypatch: pytest.MonkeyPatch) -> None:
-    """Behavior tests exercise the gates with enforcement on."""
-    monkeypatch.setattr(gate_module, "CODE_REVIEW_ENFORCEMENT_ENABLED", True)
-
-
-def _run_git(repository_directory: Path, *git_arguments: str) -> None:
-    subprocess.run(
-        ["git", "-C", str(repository_directory), *git_arguments],
-        check=True,
-        capture_output=True,
-        text=True,
-        timeout=GIT_TIMEOUT_SECONDS,
-    )
-
-
-def _init_pushed_repo(tmp_path: Path, tracked_name: str, base_text: str) -> Path:
-    origin_directory = tmp_path / "origin.git"
-    work_directory = tmp_path / "work"
-    work_directory.mkdir()
-    subprocess.run(
-        ["git", "init", "--bare", "--initial-branch=main", str(origin_directory)],
-        check=True,
-        capture_output=True,
-        text=True,
-        timeout=GIT_TIMEOUT_SECONDS,
-    )
-    _run_git(work_directory, "init", "--initial-branch=main")
-    _run_git(work_directory, "config", "user.email", "tests@example.com")
-    _run_git(work_directory, "config", "user.name", "Reviewer")
-    (work_directory / tracked_name).write_text(base_text, encoding="utf-8")
-    _run_git(work_directory, "add", "-A")
-    _run_git(work_directory, "commit", "-m", "base")
-    _run_git(work_directory, "remote", "add", "origin", str(origin_directory))
-    _run_git(work_directory, "push", "-u", "origin", "main")
-    return work_directory
-
-
-def _make_code_surface_repo(tmp_path: Path) -> Path:
-    work_directory = _init_pushed_repo(tmp_path, "app.py", CODE_SOURCE)
-    (work_directory / "app.py").write_text(CODE_CHANGE, encoding="utf-8")
-    return work_directory
-
-
-def _make_docs_surface_repo(tmp_path: Path) -> Path:
-    work_directory = _init_pushed_repo(tmp_path, "notes.md", DOCS_SOURCE)
-    (work_directory / "notes.md").write_text(DOCS_CHANGE, encoding="utf-8")
-    return work_directory
-
-
-def _isolate_home(monkeypatch: pytest.MonkeyPatch, fake_home: Path) -> None:
-    home_text = str(fake_home)
-    monkeypatch.setenv("HOME", home_text)
-    monkeypatch.setenv("USERPROFILE", home_text)
-    monkeypatch.delenv("HOMEDRIVE", raising=False)
-    monkeypatch.delenv("HOMEPATH", raising=False)
-
-
-def _prepared_code_repo(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> Path:
-    fake_home = tmp_path / "home"
-    fake_home.mkdir()
-    _isolate_home(monkeypatch, fake_home)
-    return _make_code_surface_repo(tmp_path)
-
-
-def _record_stamp(work_directory: Path, effort: str) -> None:
-    surface_hash = store_module.live_surface_hash(str(work_directory))
-    assert surface_hash is not None
-    store_module.record_clean_stamp(str(work_directory), surface_hash, effort)
-
-
-def _run_main(monkeypatch: pytest.MonkeyPatch, command_text: str, work_directory: Path) -> str:
-    payload_text = json.dumps(
-        {
-            "tool_name": "Bash",
-            "tool_input": {"command": command_text},
-            "cwd": str(work_directory),
-        }
-    )
-    monkeypatch.setattr(sys, "stdin", io.StringIO(payload_text))
-    captured_stdout = io.StringIO()
-    monkeypatch.setattr(sys, "stdout", captured_stdout)
-    gate_module.main()
-    return captured_stdout.getvalue()
-
-
-def test_push_without_low_stamp_denies(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
-    work_directory = _prepared_code_repo(monkeypatch, tmp_path)
-    deny_reason = gate_module.deny_reason_for_directory(str(work_directory))
-    assert deny_reason is not None
-    assert "PUSH_GATE" in deny_reason
-
-
-def test_covering_low_stamp_allows_push(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
-    work_directory = _prepared_code_repo(monkeypatch, tmp_path)
-    _record_stamp(work_directory, LOW_EFFORT)
-    assert gate_module.deny_reason_for_directory(str(work_directory)) is None
-
-
-def test_covering_xhigh_stamp_allows_push(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
-    work_directory = _prepared_code_repo(monkeypatch, tmp_path)
-    _record_stamp(work_directory, XHIGH_EFFORT)
-    assert gate_module.deny_reason_for_directory(str(work_directory)) is None
-
-
-def test_docs_only_surface_is_exempt(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
-    fake_home = tmp_path / "home"
-    fake_home.mkdir()
-    _isolate_home(monkeypatch, fake_home)
-    work_directory = _make_docs_surface_repo(tmp_path)
-    assert gate_module.deny_reason_for_directory(str(work_directory)) is None
-
-
-def test_git_push_payload_denies(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
-    work_directory = _prepared_code_repo(monkeypatch, tmp_path)
-    emitted = _run_main(monkeypatch, "git push origin main", work_directory)
-    assert "PUSH_GATE" in emitted
-
-
-def test_git_push_with_leading_flags_denies(
-    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
-) -> None:
-    work_directory = _prepared_code_repo(monkeypatch, tmp_path)
-    emitted = _run_main(monkeypatch, "git push --force-with-lease origin main", work_directory)
-    assert "PUSH_GATE" in emitted
-
-
-def test_git_commit_is_not_gated_by_push_hook(
-    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
-) -> None:
-    work_directory = _prepared_code_repo(monkeypatch, tmp_path)
-    emitted = _run_main(monkeypatch, "git commit -m change", work_directory)
-    assert emitted == ""
-
-
-def test_git_stash_push_is_not_gated(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
-    work_directory = _prepared_code_repo(monkeypatch, tmp_path)
-    emitted = _run_main(monkeypatch, "git stash push", work_directory)
-    assert emitted == ""
-
-
-def test_code_review_skip_marker_allows_push(
-    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
-) -> None:
-    work_directory = _prepared_code_repo(monkeypatch, tmp_path)
-    emitted = _run_main(monkeypatch, f"git push origin main {BYPASS_MARKER}", work_directory)
-    assert emitted == ""
-
-
-def test_enforcement_off_allows_push_without_stamp(
-    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
-) -> None:
-    monkeypatch.setattr(gate_module, "CODE_REVIEW_ENFORCEMENT_ENABLED", False)
-    work_directory = _prepared_code_repo(monkeypatch, tmp_path)
-    assert gate_module.deny_reason_for_directory(str(work_directory)) is None
-    emitted = _run_main(monkeypatch, "git push origin main", work_directory)
-    assert emitted == ""

package/hooks/blocking/test_code_review_stamp_directory_write_blocker.py

@@ -1,199 +0,0 @@
-"""Behavioral tests for the code-review stamp-directory write blocker.
-
-The blocker denies shell and file-tool access to
-``~/.claude/code-review-stamps/`` and shell references to the stamp store
-module or its mint call, while the sanctioned invoker command and unrelated
-paths pass.
-"""
-
-from __future__ import annotations
-
-import importlib.util
-import io
-import json
-import sys
-from pathlib import Path
-from types import ModuleType
-
-import pytest
-
-_HOOK_DIR = Path(__file__).resolve().parent
-if str(_HOOK_DIR) not in sys.path:
-    sys.path.insert(0, str(_HOOK_DIR))
-
-STAMP_STORE_IMPORT_FORGE = (
-    'python -c "from code_review_stamp_store import record_clean_stamp; '
-    "record_clean_stamp(root, live_hash, 'low')\""
-)
-MINT_CALL_FORGE = "python -c \"record_clean_stamp(root, live_hash, 'xhigh')\""
-PYTEST_RUN = "python -m pytest test_code_review_stamp_store.py"
-SANCTIONED_INVOKER = "python invoke_code_review.py --record-stamp --cwd . --session-model opus low"
-ABSOLUTE_STAMP_ACCESS = "cat ~/.claude/code-review-stamps/abc1234567890abc.json"
-DECOY_ECHO_THEN_FORGE = (
-    'echo "invoke_code_review.py --record-stamp" >/dev/null; '
-    "echo x > ~/.claude/code-review-stamps/abc1234567890123.json"
-)
-DECOY_INVOKER_THEN_FORGE = (
-    "python invoke_code_review.py --record-stamp --cwd . low ; "
-    "echo pwned > ~/.claude/code-review-stamps/evil.json"
-)
-
-
-def _load_module(module_name: str) -> ModuleType:
-    module_spec = importlib.util.spec_from_file_location(
-        module_name, _HOOK_DIR / f"{module_name}.py"
-    )
-    assert module_spec is not None
-    assert module_spec.loader is not None
-    loaded_module = importlib.util.module_from_spec(module_spec)
-    module_spec.loader.exec_module(loaded_module)
-    return loaded_module
-
-
-blocker_module = _load_module("code_review_stamp_directory_write_blocker")
-
-
-@pytest.fixture(autouse=True)
-def enable_code_review_enforcement(monkeypatch: pytest.MonkeyPatch) -> None:
-    """Behavior tests exercise the write-blocker with enforcement on."""
-    monkeypatch.setattr(blocker_module, "CODE_REVIEW_ENFORCEMENT_ENABLED", True)
-
-
-def _isolate_home(monkeypatch: pytest.MonkeyPatch, fake_home: Path) -> None:
-    home_text = str(fake_home)
-    monkeypatch.setenv("HOME", home_text)
-    monkeypatch.setenv("USERPROFILE", home_text)
-    monkeypatch.delenv("HOMEDRIVE", raising=False)
-    monkeypatch.delenv("HOMEPATH", raising=False)
-
-
-def test_absolute_stamp_path_is_blocked() -> None:
-    assert blocker_module.references_stamp_directory(ABSOLUTE_STAMP_ACCESS)
-
-
-def test_store_module_import_forge_is_blocked() -> None:
-    assert blocker_module.references_stamp_directory(STAMP_STORE_IMPORT_FORGE)
-
-
-def test_mint_call_forge_is_blocked() -> None:
-    assert blocker_module.references_stamp_directory(MINT_CALL_FORGE)
-
-
-def test_pytest_run_naming_store_test_is_not_blocked() -> None:
-    assert not blocker_module.references_stamp_directory(PYTEST_RUN)
-
-
-def test_sanctioned_invoker_command_is_not_blocked() -> None:
-    assert not blocker_module.references_stamp_directory(SANCTIONED_INVOKER)
-
-
-def test_decoy_echo_of_invoker_then_stamp_forge_is_blocked() -> None:
-    assert blocker_module.references_stamp_directory(DECOY_ECHO_THEN_FORGE)
-
-
-def test_decoy_invoker_run_then_stamp_forge_is_blocked() -> None:
-    assert blocker_module.references_stamp_directory(DECOY_INVOKER_THEN_FORGE)
-
-
-def test_write_tool_to_stamp_directory_is_blocked(
-    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
-) -> None:
-    fake_home = tmp_path / "home"
-    fake_home.mkdir()
-    _isolate_home(monkeypatch, fake_home)
-    stamp_path = fake_home / ".claude" / "code-review-stamps" / "abc.json"
-    assert blocker_module.path_targets_stamp_directory(str(stamp_path))
-
-
-def test_write_tool_elsewhere_is_allowed(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
-    fake_home = tmp_path / "home"
-    fake_home.mkdir()
-    _isolate_home(monkeypatch, fake_home)
-    other_path = tmp_path / "src" / "module.py"
-    assert not blocker_module.path_targets_stamp_directory(str(other_path))
-
-
-def test_write_payload_to_stamp_directory_denies(
-    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
-) -> None:
-    fake_home = tmp_path / "home"
-    fake_home.mkdir()
-    _isolate_home(monkeypatch, fake_home)
-    stamp_path = fake_home / ".claude" / "code-review-stamps" / "abc.json"
-    payload = {
-        "tool_name": "Write",
-        "tool_input": {"file_path": str(stamp_path), "content": "{}"},
-    }
-    deny_decision = blocker_module.decision_for_payload(payload)
-    assert deny_decision is not None
-    assert deny_decision["hookSpecificOutput"]["permissionDecision"] == "deny"
-
-
-def test_bash_forge_payload_denies() -> None:
-    payload = {
-        "tool_name": "Bash",
-        "tool_input": {"command": STAMP_STORE_IMPORT_FORGE},
-    }
-    deny_decision = blocker_module.decision_for_payload(payload)
-    assert deny_decision is not None
-    assert deny_decision["hookSpecificOutput"]["permissionDecision"] == "deny"
-
-
-def test_sanctioned_invoker_payload_is_not_denied() -> None:
-    payload = {
-        "tool_name": "Bash",
-        "tool_input": {"command": SANCTIONED_INVOKER},
-    }
-    assert blocker_module.decision_for_payload(payload) is None
-
-
-def test_main_emits_deny_for_bash_forge(monkeypatch: pytest.MonkeyPatch) -> None:
-    payload_text = json.dumps({"tool_name": "Bash", "tool_input": {"command": MINT_CALL_FORGE}})
-    monkeypatch.setattr(sys, "stdin", io.StringIO(payload_text))
-    captured_stdout = io.StringIO()
-    monkeypatch.setattr(sys, "stdout", captured_stdout)
-    blocker_module.main()
-    assert "STAMP_DIRECTORY_GUARD" in captured_stdout.getvalue()
-
-
-STAMP_OBFUSCATION_PATH = "/.claude/code-review-stamps/a.json"
-BENIGN_OBFUSCATION_PATH = "/tmp/x"
-SPLIT_CD_FORGE = "cd ~/.claude && cd code-review-stamps && echo x > f.json"
-
-
-def _hex_forge(path_text: str) -> str:
-    return f"python -c \"open(bytes.fromhex('{path_text.encode().hex()}'),'w').write('x')\""
-
-
-def _chr_chain_forge(path_text: str) -> str:
-    chr_chain = "+".join(f"chr({ord(each_character)})" for each_character in path_text)
-    return f"python -c \"open({chr_chain},'w').write('x')\""
-
-
-def test_split_directory_change_into_stamp_is_blocked() -> None:
-    assert blocker_module.references_stamp_directory(SPLIT_CD_FORGE)
-
-
-def test_hex_obfuscated_stamp_path_is_blocked() -> None:
-    assert blocker_module.references_stamp_directory(_hex_forge(STAMP_OBFUSCATION_PATH))
-
-
-def test_chr_chain_obfuscated_stamp_path_is_blocked() -> None:
-    assert blocker_module.references_stamp_directory(_chr_chain_forge(STAMP_OBFUSCATION_PATH))
-
-
-def test_benign_decode_to_other_path_is_not_blocked() -> None:
-    assert not blocker_module.references_stamp_directory(_hex_forge(BENIGN_OBFUSCATION_PATH))
-
-
-def test_enforcement_off_allows_stamp_directory_access(
-    monkeypatch: pytest.MonkeyPatch,
-) -> None:
-    monkeypatch.setattr(blocker_module, "CODE_REVIEW_ENFORCEMENT_ENABLED", False)
-    decision = blocker_module.decision_for_payload(
-        {
-            "tool_name": "Bash",
-            "tool_input": {"command": "rm -rf ~/.claude/code-review-stamps"},
-        }
-    )
-    assert decision is None