claude-dev-env 2.3.0 → 2.5.0

package/_shared/pr-loop/scripts/pr_loop_shared_constants/claude_permissions_constants.py

@@ -7,15 +7,22 @@ from pr_loop_shared_constants.preflight_constants import GIT_DIRECTORY_NAME
 __all__ = (
     "ALL_AGENT_CONFIG_DENY_TOOLS",
     "ALL_AGENT_CONFIG_PATH_PATTERNS",
+    "ALL_INERT_FILE_PERMISSION_TOOLS",
+    "ALL_LEGACY_PERMISSION_REAP_TOOLS",
     "ALL_PERMISSION_ALLOW_TOOLS",
     "ALL_TRUST_ENTRY_PROJECT_PATH_BOUNDARY_QUOTE_CHARACTERS",
     "AUTO_MODE_ENVIRONMENT_ENTRY_PREFIX",
     "AUTO_MODE_ENVIRONMENT_ENTRY_TEMPLATE",
     "CLAUDE_SETTINGS_DIRECTORY_NAME",
     "CLAUDE_SETTINGS_FILENAME",
+    "CLAUDE_SETTINGS_LOCAL_FILENAME",
     "GIT_DIRECTORY_NAME",
+    "HOME_PROJECT_PATH_ALIAS",
+    "INERT_RULES_REMOVED_LOG_PREFIX",
+    "PROJECT_LOCAL_INERT_RULES_REMOVED_LOG_PREFIX",
     "TEXT_FILE_ENCODING",
     "UNIQUE_TEMPORARY_SUFFIX_BYTE_LENGTH",
+    "get_claude_project_local_settings_path",
     "get_claude_user_settings_path",
 )
 
@@ -24,6 +31,20 @@ ALL_PERMISSION_ALLOW_TOOLS: tuple[str, ...] = ("Edit", "Read")
 
 ALL_AGENT_CONFIG_DENY_TOOLS: tuple[str, ...] = ("Edit", "Read")
 
+ALL_LEGACY_PERMISSION_REAP_TOOLS: tuple[str, ...] = ("Write", "Glob")
+
+ALL_INERT_FILE_PERMISSION_TOOLS: tuple[str, ...] = ("Write", "Glob", "NotebookEdit")
+
+HOME_PROJECT_PATH_ALIAS: str = "$HOME"
+
+INERT_RULES_REMOVED_LOG_PREFIX: str = (
+    "Inert Write/Glob/NotebookEdit rules removed: "
+)
+
+PROJECT_LOCAL_INERT_RULES_REMOVED_LOG_PREFIX: str = (
+    "Project-local inert Write/Glob/NotebookEdit rules removed: "
+)
+
 ALL_AGENT_CONFIG_PATH_PATTERNS: tuple[str, ...] = (
     "settings*.json",
     "hooks/**",
@@ -81,6 +102,8 @@ CLAUDE_SETTINGS_DIRECTORY_NAME: str = ".claude"
 
 CLAUDE_SETTINGS_FILENAME: str = "settings.json"
 
+CLAUDE_SETTINGS_LOCAL_FILENAME: str = "settings.local.json"
+
 TEXT_FILE_ENCODING: str = "utf-8"
 
 UNIQUE_TEMPORARY_SUFFIX_BYTE_LENGTH: int = 8
@@ -88,3 +111,24 @@ UNIQUE_TEMPORARY_SUFFIX_BYTE_LENGTH: int = 8
 
 def get_claude_user_settings_path() -> Path:
     return Path.home() / CLAUDE_SETTINGS_DIRECTORY_NAME / CLAUDE_SETTINGS_FILENAME
+
+
+def get_claude_project_local_settings_path(
+    project_root_path: Path | None = None,
+) -> Path:
+    """Return ``<project>/.claude/settings.local.json`` for the project root.
+
+    Args:
+        project_root_path: Project root; defaults to the process cwd.
+
+    Returns:
+        Path to the project-local Claude settings file (may not exist yet).
+    """
+    resolved_project_root_path = (
+        project_root_path if project_root_path is not None else Path.cwd()
+    )
+    return (
+        resolved_project_root_path
+        / CLAUDE_SETTINGS_DIRECTORY_NAME
+        / CLAUDE_SETTINGS_LOCAL_FILENAME
+    )

package/_shared/pr-loop/scripts/pr_loop_shared_constants/copilot_quota_constants.py

@@ -1,24 +1,24 @@
-"""Configuration constants for the Copilot premium-interaction quota pre-check."""
-
-from __future__ import annotations
-
-from pathlib import Path
-
-COPILOT_QUOTA_ACCOUNT_ENV_VAR_NAME: str = "COPILOT_QUOTA_ACCOUNT"
-GH_TOKEN_ENV_VAR_NAME: str = "GH_TOKEN"
-COPILOT_INTERNAL_USER_API_PATH: str = "copilot_internal/user"
-
-QUOTA_SNAPSHOTS_FIELD_NAME: str = "quota_snapshots"
-PREMIUM_INTERACTIONS_FIELD_NAME: str = "premium_interactions"
-PREMIUM_UNLIMITED_FIELD_NAME: str = "unlimited"
-PREMIUM_REMAINING_FIELD_NAME: str = "remaining"
-PREMIUM_OVERAGE_PERMITTED_FIELD_NAME: str = "overage_permitted"
-PREMIUM_ENTITLEMENT_FIELD_NAME: str = "entitlement"
-PREMIUM_PERCENT_REMAINING_FIELD_NAME: str = "percent_remaining"
-
-EXIT_CODE_QUOTA_AVAILABLE: int = 0
-EXIT_CODE_OUT_OF_QUOTA: int = 1
-EXIT_CODE_QUOTA_API_DOWN: int = 2
-EXIT_CODE_NO_ACCOUNT_CONFIGURED: int = 3
-
-COPILOT_QUOTA_DEFAULT_ENV_FILE_PATH: Path = Path(__file__).resolve().parents[4] / ".env"
+"""Configuration constants for the Copilot premium-interaction quota pre-check."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+COPILOT_QUOTA_ACCOUNT_ENV_VAR_NAME: str = "COPILOT_QUOTA_ACCOUNT"
+GH_TOKEN_ENV_VAR_NAME: str = "GH_TOKEN"
+COPILOT_INTERNAL_USER_API_PATH: str = "copilot_internal/user"
+
+QUOTA_SNAPSHOTS_FIELD_NAME: str = "quota_snapshots"
+PREMIUM_INTERACTIONS_FIELD_NAME: str = "premium_interactions"
+PREMIUM_UNLIMITED_FIELD_NAME: str = "unlimited"
+PREMIUM_REMAINING_FIELD_NAME: str = "remaining"
+PREMIUM_OVERAGE_PERMITTED_FIELD_NAME: str = "overage_permitted"
+PREMIUM_ENTITLEMENT_FIELD_NAME: str = "entitlement"
+PREMIUM_PERCENT_REMAINING_FIELD_NAME: str = "percent_remaining"
+
+EXIT_CODE_QUOTA_AVAILABLE: int = 0
+EXIT_CODE_OUT_OF_QUOTA: int = 1
+EXIT_CODE_QUOTA_API_DOWN: int = 2
+EXIT_CODE_NO_ACCOUNT_CONFIGURED: int = 3
+
+COPILOT_QUOTA_DEFAULT_ENV_FILE_PATH: Path = Path(__file__).resolve().parents[4] / ".env"

package/_shared/pr-loop/scripts/pr_loop_shared_constants/stale_worktree_rule_sweep_constants.py

@@ -1,107 +1,107 @@
-"""Constants and rule-format readers for stale_worktree_rule_sweep.
-
-The worktrees root is derived from the same ~/.claude home the permission
-grant script mints its rules under, so the location is named in exactly one
-place. A worktree rule points at a directory one or more segments below that
-root (flat or nested layouts)::
-
-    Edit(<claude home>/worktrees/<worktree name>/.claude/**)
-                                 ^^^^^^^^^^^^^^^
-                                 segment 1 (flat)
-
-    Edit(<claude home>/worktrees/<repository>/<worktree name>/.claude/**)
-                                 ^^^^^^^^^^^^  ^^^^^^^^^^^^^^^
-                                 nested layout
-
-    worktree_directory_for_rule(rule, root)  ->  project directory under root
-
-A rule whose target path lies outside the worktrees root reads back as None,
-so the sweep leaves it untouched.
-"""
-
-from pathlib import Path
-
-from pr_loop_shared_constants.claude_permissions_constants import (
-    get_claude_user_settings_path,
-)
-
-WORKTREES_SUBDIRECTORY_NAME: str = "worktrees"
-
-MINIMUM_WORKTREE_PATH_SEGMENT_COUNT: int = 1
-
-RULE_PATH_OPEN_DELIMITER: str = "("
-
-RULE_PATH_CLOSE_DELIMITER: str = ")"
-
-CLAUDE_HOME_PATH_MARKER: str = "/.claude"
-
-
-def get_claude_worktrees_root() -> Path:
-    """Return the ~/.claude/worktrees directory the grant rules point under.
-
-    Reuses get_claude_user_settings_path so the ~/.claude home is resolved
-    in one place: the settings file's parent directory is the home, and the
-    worktrees live directly beneath it.
-
-    Returns:
-        The absolute path to the user's worktrees root directory.
-    """
-    claude_home_directory = get_claude_user_settings_path().parent
-    return claude_home_directory / WORKTREES_SUBDIRECTORY_NAME
-
-
-def extract_rule_target_path(rule: str) -> str | None:
-    """Return the path a permission rule targets, or None when unparsable.
-
-    A rule reads `Tool(<path>)`; the target is the text between the first
-    open delimiter and the last close delimiter::
-
-        Edit(/repo/wt/.claude/**)  ->  /repo/wt/.claude/**
-        not a rule                 ->  None
-
-    Args:
-        rule: The permission rule string to read.
-
-    Returns:
-        The target path string, or None when the delimiters are absent.
-    """
-    open_index = rule.find(RULE_PATH_OPEN_DELIMITER)
-    close_index = rule.rfind(RULE_PATH_CLOSE_DELIMITER)
-    if open_index == -1 or close_index <= open_index:
-        return None
-    return rule[open_index + 1 : close_index]
-
-
-def worktree_directory_for_rule(rule: str, worktrees_root: Path) -> Path | None:
-    """Return the worktree directory a rule targets, or None when it is not one.
-
-    Keeps every path segment below the worktrees root so flat
-    (`worktrees/<name>`) and nested (`worktrees/<repo>/<name>`) layouts
-    both resolve to the on-disk project directory::
-
-        Edit(<root>/flat-wt/.claude/**)  ->  <root>/flat-wt
-        Edit(<root>/repo/wt/.claude/**)  ->  <root>/repo/wt
-        Edit(/elsewhere/project/.claude/**)  ->  None
-
-    Args:
-        rule: The permission rule string to read.
-        worktrees_root: The ~/.claude/worktrees directory rules live under.
-
-    Returns:
-        The worktree directory, or None when the target lies outside the
-        worktrees root or has no path segments under it.
-    """
-    target_path = extract_rule_target_path(rule)
-    if target_path is None:
-        return None
-    project_portion = target_path.rsplit(CLAUDE_HOME_PATH_MARKER, 1)[0]
-    if not project_portion:
-        return None
-    try:
-        relative_path = Path(project_portion).relative_to(worktrees_root)
-    except ValueError:
-        return None
-    all_segments = relative_path.parts
-    if len(all_segments) < MINIMUM_WORKTREE_PATH_SEGMENT_COUNT:
-        return None
-    return worktrees_root.joinpath(*all_segments)
+"""Constants and rule-format readers for stale_worktree_rule_sweep.
+
+The worktrees root is derived from the same ~/.claude home the permission
+grant script mints its rules under, so the location is named in exactly one
+place. A worktree rule points at a directory one or more segments below that
+root (flat or nested layouts)::
+
+    Edit(<claude home>/worktrees/<worktree name>/.claude/**)
+                                 ^^^^^^^^^^^^^^^
+                                 segment 1 (flat)
+
+    Edit(<claude home>/worktrees/<repository>/<worktree name>/.claude/**)
+                                 ^^^^^^^^^^^^  ^^^^^^^^^^^^^^^
+                                 nested layout
+
+    worktree_directory_for_rule(rule, root)  ->  project directory under root
+
+A rule whose target path lies outside the worktrees root reads back as None,
+so the sweep leaves it untouched.
+"""
+
+from pathlib import Path
+
+from pr_loop_shared_constants.claude_permissions_constants import (
+    get_claude_user_settings_path,
+)
+
+WORKTREES_SUBDIRECTORY_NAME: str = "worktrees"
+
+MINIMUM_WORKTREE_PATH_SEGMENT_COUNT: int = 1
+
+RULE_PATH_OPEN_DELIMITER: str = "("
+
+RULE_PATH_CLOSE_DELIMITER: str = ")"
+
+CLAUDE_HOME_PATH_MARKER: str = "/.claude"
+
+
+def get_claude_worktrees_root() -> Path:
+    """Return the ~/.claude/worktrees directory the grant rules point under.
+
+    Reuses get_claude_user_settings_path so the ~/.claude home is resolved
+    in one place: the settings file's parent directory is the home, and the
+    worktrees live directly beneath it.
+
+    Returns:
+        The absolute path to the user's worktrees root directory.
+    """
+    claude_home_directory = get_claude_user_settings_path().parent
+    return claude_home_directory / WORKTREES_SUBDIRECTORY_NAME
+
+
+def extract_rule_target_path(rule: str) -> str | None:
+    """Return the path a permission rule targets, or None when unparsable.
+
+    A rule reads `Tool(<path>)`; the target is the text between the first
+    open delimiter and the last close delimiter::
+
+        Edit(/repo/wt/.claude/**)  ->  /repo/wt/.claude/**
+        not a rule                 ->  None
+
+    Args:
+        rule: The permission rule string to read.
+
+    Returns:
+        The target path string, or None when the delimiters are absent.
+    """
+    open_index = rule.find(RULE_PATH_OPEN_DELIMITER)
+    close_index = rule.rfind(RULE_PATH_CLOSE_DELIMITER)
+    if open_index == -1 or close_index <= open_index:
+        return None
+    return rule[open_index + 1 : close_index]
+
+
+def worktree_directory_for_rule(rule: str, worktrees_root: Path) -> Path | None:
+    """Return the worktree directory a rule targets, or None when it is not one.
+
+    Keeps every path segment below the worktrees root so flat
+    (`worktrees/<name>`) and nested (`worktrees/<repo>/<name>`) layouts
+    both resolve to the on-disk project directory::
+
+        Edit(<root>/flat-wt/.claude/**)  ->  <root>/flat-wt
+        Edit(<root>/repo/wt/.claude/**)  ->  <root>/repo/wt
+        Edit(/elsewhere/project/.claude/**)  ->  None
+
+    Args:
+        rule: The permission rule string to read.
+        worktrees_root: The ~/.claude/worktrees directory rules live under.
+
+    Returns:
+        The worktree directory, or None when the target lies outside the
+        worktrees root or has no path segments under it.
+    """
+    target_path = extract_rule_target_path(rule)
+    if target_path is None:
+        return None
+    project_portion = target_path.rsplit(CLAUDE_HOME_PATH_MARKER, 1)[0]
+    if not project_portion:
+        return None
+    try:
+        relative_path = Path(project_portion).relative_to(worktrees_root)
+    except ValueError:
+        return None
+    all_segments = relative_path.parts
+    if len(all_segments) < MINIMUM_WORKTREE_PATH_SEGMENT_COUNT:
+        return None
+    return worktrees_root.joinpath(*all_segments)