claude-dev-env 2.30.1 → 2.31.1

package/hooks/conftest.py

@@ -0,0 +1,47 @@
+"""Shared pytest fixtures for the hooks/ suite, visible under blocking/ and validators/."""
+
+from __future__ import annotations
+
+import importlib
+import sys
+from pathlib import Path
+
+import pytest
+
+_HOOKS_DIRECTORY = Path(__file__).resolve().parent
+_BLOCKING_DIRECTORY = _HOOKS_DIRECTORY / "blocking"
+for each_directory in (_HOOKS_DIRECTORY, _BLOCKING_DIRECTORY):
+    if str(each_directory) not in sys.path:
+        sys.path.insert(0, str(each_directory))
+
+_is_ephemeral_script_path = importlib.import_module("code_rules_shared").is_ephemeral_script_path
+_EPHEMERAL_EXEMPT_DISABLE_ENVIRONMENT_VARIABLE_NAME = importlib.import_module(
+    "hooks_constants.code_rules_enforcer_constants"
+).EPHEMERAL_EXEMPT_DISABLE_ENVIRONMENT_VARIABLE_NAME
+
+_ROOT_ANCHORED_PROBE_PATH = "/tmp/scratch.py"
+
+
+@pytest.fixture
+def ephemeral_exempt_off(monkeypatch: pytest.MonkeyPatch) -> None:
+    """Turn off the ephemeral scratch-path exemption for the current test.
+
+    Sets ``CLAUDE_CODE_RULES_DISABLE_EPHEMERAL_EXEMPT`` so a gate under test
+    judges the test's own scratch targets for real, rather than stepping aside
+    because they sit under a temp root.
+
+    The probe path is root-anchored ``/tmp``, which the classifier treats as
+    ephemeral on every platform, so the assert fails on any change that stops
+    reading the disable flag. A probe on the shared OS temp root would pass on
+    Windows whether the flag is read or not, since the classifier already
+    excludes that root by design.
+
+    Args:
+        monkeypatch: Pytest's environment-variable patcher, torn down after the test.
+    """
+    monkeypatch.setenv(_EPHEMERAL_EXEMPT_DISABLE_ENVIRONMENT_VARIABLE_NAME, "1")
+    assert _is_ephemeral_script_path(_ROOT_ANCHORED_PROBE_PATH) is False, (
+        "ephemeral_exempt_off must turn off the scratch-path exemption; a change "
+        "that stops reading the disable flag must fail here, not silently return "
+        "every test in the file to deciding nothing"
+    )

package/hooks/hooks.json

@@ -13,7 +13,7 @@
         ]
       },
       {
-        "matcher": "Write|Edit|MultiEdit",
+        "matcher": "Write|Edit|MultiEdit|apply_patch",
         "hooks": [
           {
             "type": "command",
@@ -22,16 +22,6 @@
           }
         ]
       },
-      {
-        "matcher": "apply_patch",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/code_rules_enforcer.py",
-            "timeout": 60
-          }
-        ]
-      },
       {
         "matcher": "Bash|PowerShell",
         "hooks": [
@@ -245,7 +235,7 @@
         ]
       },
       {
-        "matcher": "Write|Edit|MultiEdit",
+        "matcher": "Write|Edit|MultiEdit|apply_patch",
         "hooks": [
           {
             "type": "command",
@@ -261,6 +251,11 @@
             "type": "command",
             "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/workflow/investigation_tracker_reset.py",
             "timeout": 30
+          },
+          {
+            "type": "command",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/observability/pr_description_writer_spawn_tracker.py",
+            "timeout": 30
           }
         ]
       },

package/hooks/hooks_constants/bash_pre_tool_use_dispatcher_constants.py

@@ -76,4 +76,7 @@ ALL_BASH_HOSTED_HOOK_ENTRIES: tuple[BashHostedHookEntry, ...] = (
     BashHostedHookEntry("blocking/test_preflight_check.py", ALL_BASH_ONLY_TOOL_NAMES),
     BashHostedHookEntry("blocking/windows_rmtree_blocker.py", ALL_BASH_ONLY_TOOL_NAMES),
     BashHostedHookEntry("blocking/gh_pr_author_enforcer.py", ALL_BASH_ONLY_TOOL_NAMES),
+    BashHostedHookEntry(
+        "blocking/pr_description_writer_gate.py", ALL_BASH_AND_POWERSHELL_TOOL_NAMES
+    ),
 )

package/hooks/hooks_constants/code_rules_enforcer_constants.py

@@ -6,6 +6,10 @@ Extracted from code_rules_enforcer.py to satisfy the constants-location rule.
 import re
 import tokenize
 
+from hooks_constants.multi_edit_reconstruction import (  # noqa: F401  re-exported for code_rules_enforcer.py
+    apply_edits,
+    edits_for_tool,
+)
 from hooks_constants.validation_phase_constants import (  # noqa: F401  re-exported for code_rules_enforcer.py
     ALL_VALIDATION_PHASES,
     EDIT_LANE_PHASE,

package/hooks/hooks_constants/duplicate_rmtree_helper_blocker_constants.py

@@ -24,3 +24,6 @@ ALL_EXEMPT_PATH_FRAGMENTS: tuple[str, ...] = (
 
 ALL_EXEMPT_TEST_FILE_PREFIXES: tuple[str, ...] = ("test_",)
 ALL_EXEMPT_TEST_FILE_SUFFIXES: tuple[str, ...] = ("_test.py",)
+
+
+ALL_APPLICABLE_TOOL_NAMES: frozenset[str] = frozenset({"Write", "Edit", "MultiEdit"})

package/hooks/hooks_constants/hook_prose_detector_consistency_constants.py

@@ -1,7 +1,12 @@
 """Configuration constants for the hook_prose_detector_consistency PreToolUse hook."""
 
-WRITE_TOOL_NAME: str = "Write"
-EDIT_TOOL_NAME: str = "Edit"
+# The dispatcher constants module is the single source for tool names.
+from hooks_constants.pre_tool_use_dispatcher_constants import (  # noqa: F401
+    EDIT_TOOL_NAME,
+    MULTI_EDIT_TOOL_NAME,
+    WRITE_TOOL_NAME,
+)
+
 
 HOOK_MODULE_PATH_SEGMENT: str = "/hooks/"
 PYTHON_FILE_SUFFIX: str = ".py"

package/hooks/hooks_constants/migration_safety_advisor_constants.py

@@ -0,0 +1,7 @@
+"""Configuration constants for the migration_safety_advisor PreToolUse hook."""
+
+# The dispatcher constants module is the single source for tool names.
+from hooks_constants.pre_tool_use_dispatcher_constants import (  # noqa: F401
+    MULTI_EDIT_TOOL_NAME,
+)
+

package/hooks/hooks_constants/multi_edit_reconstruction.py

@@ -12,6 +12,7 @@ from __future__ import annotations
 __all__ = [
     "apply_edits",
     "edits_for_tool",
+    "joined_new_strings",
 ]
 
 
@@ -24,9 +25,19 @@ def apply_edits(existing_content: str, all_edits: list[dict]) -> str:
             ``edits`` list, each a mapping with an ``old_string`` and a
             ``new_string``.
 
+    An edit carrying ``replace_all`` rewrites every occurrence, matching what
+    MultiEdit itself does; every other edit rewrites the first one::
+
+        {"old_string": "old", "new_string": "new", "replace_all": True}
+            "old old old"  ->  "new new new"
+        {"old_string": "old", "new_string": "new"}
+            "old old old"  ->  "new old old"
+
+    Each edit reads its own flag, so one replace_all edit in a list leaves the
+    edits beside it alone.
+
     Returns:
-        The content after replacing the first occurrence of each edit's
-        ``old_string`` with its ``new_string``, in list order.
+        The content after applying each edit in list order.
     """
     edited_content = existing_content
     for each_edit in all_edits:
@@ -35,7 +46,10 @@ def apply_edits(existing_content: str, all_edits: list[dict]) -> str:
         old_string = each_edit.get("old_string", "")
         new_string = each_edit.get("new_string", "")
         if isinstance(old_string, str) and isinstance(new_string, str) and old_string:
-            edited_content = edited_content.replace(old_string, new_string, 1)
+            is_replace_all = bool(each_edit.get("replace_all"))
+            edited_content = edited_content.replace(
+                old_string, new_string, -1 if is_replace_all else 1
+            )
     return edited_content
 
 
@@ -54,3 +68,30 @@ def edits_for_tool(tool_name: str, tool_input: dict) -> list[dict]:
         return [tool_input]
     all_edits = tool_input.get("edits", [])
     return all_edits if isinstance(all_edits, list) else []
+
+
+def joined_new_strings(tool_input: dict) -> str:
+    """Return one scannable text holding every string a MultiEdit introduces.
+
+    ::
+
+        edits = [{"new_string": "import os"}, {"new_string": "shutil.rmtree(p)"}]
+        joined_new_strings(...)  ->  "import os\\nshutil.rmtree(p)"
+
+    A blocker scans that single text in one pass. The joining newline keeps one
+    edit's last line apart from the next edit's first line, so a phrase neither
+    edit wrote never appears across the seam.
+
+    Args:
+        tool_input: The MultiEdit tool input payload.
+
+    Returns:
+        Every string-valued new_string in the payload, joined on a newline.
+    """
+    multi_edit_new_string_join_separator = "\n"
+    all_new_strings = [
+        each_edit.get("new_string", "")
+        for each_edit in edits_for_tool("MultiEdit", tool_input)
+        if isinstance(each_edit, dict) and isinstance(each_edit.get("new_string"), str)
+    ]
+    return multi_edit_new_string_join_separator.join(all_new_strings)

package/hooks/hooks_constants/pii_prevention_constants.py

@@ -6,15 +6,17 @@ import re
 
 from hooks_constants.hardcoded_user_path_constants import HARDCODED_USER_PATH_PATTERN
 
+# The dispatcher constants module is the single source for tool names.
+from hooks_constants.pre_tool_use_dispatcher_constants import (  # noqa: F401
+    ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES,
+    APPLY_PATCH_TOOL_NAME,
+    EDIT_TOOL_NAME,
+    MULTI_EDIT_TOOL_NAME,
+    WRITE_TOOL_NAME,
+)
+
 BASH_TOOL_NAME: str = "Bash"
 POWERSHELL_TOOL_NAME: str = "PowerShell"
-WRITE_TOOL_NAME: str = "Write"
-EDIT_TOOL_NAME: str = "Edit"
-MULTI_EDIT_TOOL_NAME: str = "MultiEdit"
-
-ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES: frozenset[str] = frozenset(
-    {WRITE_TOOL_NAME, EDIT_TOOL_NAME, MULTI_EDIT_TOOL_NAME}
-)
 
 ALL_SHELL_TOOL_NAMES: frozenset[str] = frozenset(
     {BASH_TOOL_NAME, POWERSHELL_TOOL_NAME}

package/hooks/hooks_constants/pr_description_writer_gate_constants.py

@@ -0,0 +1,73 @@
+"""Constants for the pr-description-writer spawn tracker and its gh pr create gate.
+
+The tracker records one fact per session: the session spawned the
+``pr-description-writer`` agent. The gate reads that fact when the session runs
+``gh pr create`` and denies the command when the fact is absent.
+"""
+
+from __future__ import annotations
+
+import tempfile
+from pathlib import Path
+
+from hooks_constants.session_edit_stage_gate_constants import (
+    SESSION_ID_UNSAFE_CHARACTERS_PATTERN,
+)
+
+PR_DESCRIPTION_WRITER_SUBAGENT_TYPE: str = "pr-description-writer"
+
+ALL_AGENT_SPAWN_TOOL_NAMES: frozenset[str] = frozenset({"Agent", "Task"})
+
+SPAWN_MARKER_FILE_PREFIX: str = "claude-session-pr-description-writer-"
+SPAWN_MARKER_FILE_SUFFIX: str = ".marker"
+
+SUBAGENT_TYPE_FIELD_NAME: str = "subagent_type"
+TOOL_INPUT_FIELD_NAME: str = "tool_input"
+TOOL_NAME_FIELD_NAME: str = "tool_name"
+COMMAND_FIELD_NAME: str = "command"
+
+ALL_GH_EXECUTABLE_BASENAMES: frozenset[str] = frozenset({"gh", "gh.exe", "gh.cmd"})
+PR_SUBCOMMAND_TOKEN: str = "pr"
+CREATE_SUBCOMMAND_TOKEN: str = "create"
+GH_PR_CREATE_MINIMUM_TOKEN_COUNT: int = 3
+
+SPAWN_BYPASS_MARKER: str = "# pr-description-skip"
+
+CORRECTIVE_MESSAGE: str = (
+    "BLOCKED: [PR_DESCRIPTION_WRITER] This session runs `gh pr create` with no "
+    "`pr-description-writer` agent spawn recorded.\n\n"
+    "The agent writes the title and body from the current diff, then returns the "
+    "markdown and a body-file path for you to publish.\n\n"
+    "Two ways forward:\n"
+    "  1. Spawn the agent (Agent tool, subagent_type `pr-description-writer`), "
+    "then run `gh pr create --body-file <path>` with what it returns.\n"
+    "  2. Append the trailing comment `# pr-description-skip` to the command when "
+    "you are writing the body yourself on purpose."
+)
+
+
+def spawn_marker_path(session_id: str, temp_directory: Path | None = None) -> Path | None:
+    """Return this session's marker file path, or None when it names no session.
+
+    The tracker writes this path and the gate reads it, so the file name lives
+    in one place. A session id that sanitizes to nothing yields no path, so
+    every marker on disk belongs to one real session and a marker a crashed
+    session leaves behind is inert.
+
+    Args:
+        session_id: Raw ``session_id`` from the hook payload.
+        temp_directory: The directory holding the marker. Defaults to the
+            system temp directory.
+
+    Returns:
+        Absolute path to this session's marker file, or None when the payload
+        names no session this hook can key on.
+    """
+    sanitized_session_id = SESSION_ID_UNSAFE_CHARACTERS_PATTERN.sub("", session_id)
+    if not sanitized_session_id:
+        return None
+    file_name = (
+        f"{SPAWN_MARKER_FILE_PREFIX}{sanitized_session_id}{SPAWN_MARKER_FILE_SUFFIX}"
+    )
+    resolved_temp_directory = temp_directory or Path(tempfile.gettempdir())
+    return resolved_temp_directory / file_name

package/hooks/hooks_constants/pre_tool_use_dispatcher_constants.py

@@ -21,8 +21,11 @@ __all__ = [
     "WRITE_TOOL_NAME",
     "EDIT_TOOL_NAME",
     "MULTI_EDIT_TOOL_NAME",
+    "APPLY_PATCH_TOOL_NAME",
     "ALL_WRITE_AND_EDIT_TOOL_NAMES",
     "ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES",
+    "ALL_WRITE_EDIT_MULTI_EDIT_APPLY_PATCH_TOOL_NAMES",
+    "ALL_IMMEDIATE_HARM_SCRIPT_PATHS",
     "STATE_DESCRIPTION_BLOCKER_MODULE_NAME",
     "SYSTEM_MESSAGE_JOIN_SEPARATOR",
     "HostedHookEntry",
@@ -42,11 +45,25 @@ CONTEXT_JOIN_SEPARATOR = "\n"
 WRITE_TOOL_NAME = "Write"
 EDIT_TOOL_NAME = "Edit"
 MULTI_EDIT_TOOL_NAME = "MultiEdit"
+APPLY_PATCH_TOOL_NAME = "apply_patch"
 
 ALL_WRITE_AND_EDIT_TOOL_NAMES: frozenset[str] = frozenset({WRITE_TOOL_NAME, EDIT_TOOL_NAME})
 ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES: frozenset[str] = frozenset(
     {WRITE_TOOL_NAME, EDIT_TOOL_NAME, MULTI_EDIT_TOOL_NAME}
 )
+ALL_WRITE_EDIT_MULTI_EDIT_APPLY_PATCH_TOOL_NAMES: frozenset[str] = frozenset(
+    ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES | {APPLY_PATCH_TOOL_NAME}
+)
+
+# apply_patch reaches this narrower roster: the gates whose miss causes immediate
+# harm, plus the TDD gate and the edit tracker. It stays off the full lint surface.
+ALL_IMMEDIATE_HARM_SCRIPT_PATHS: tuple[str, ...] = (
+    "blocking/pii_prevention_blocker.py",
+    "blocking/sensitive_file_protector.py",
+    "blocking/write_existing_file_blocker.py",
+    "blocking/code_rules_enforcer.py",
+    "blocking/tdd_enforcer.py",
+)
 
 
 STATE_DESCRIPTION_BLOCKER_MODULE_NAME = "state_description_blocker"
@@ -78,52 +95,52 @@ class HostedHookEntry:
 ALL_HOSTED_HOOK_ENTRIES: tuple[HostedHookEntry, ...] = (
     HostedHookEntry(
         script_relative_path="blocking/write_existing_file_blocker.py",
-        applicable_tool_names=ALL_WRITE_AND_EDIT_TOOL_NAMES,
+        applicable_tool_names=ALL_WRITE_EDIT_MULTI_EDIT_APPLY_PATCH_TOOL_NAMES,
     ),
     HostedHookEntry(
         script_relative_path="blocking/sensitive_file_protector.py",
-        applicable_tool_names=ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES,
+        applicable_tool_names=ALL_WRITE_EDIT_MULTI_EDIT_APPLY_PATCH_TOOL_NAMES,
     ),
     HostedHookEntry(
         script_relative_path="blocking/pii_prevention_blocker.py",
-        applicable_tool_names=ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES,
+        applicable_tool_names=ALL_WRITE_EDIT_MULTI_EDIT_APPLY_PATCH_TOOL_NAMES,
     ),
     HostedHookEntry(
         script_relative_path="validation/hook_format_validator.py",
-        applicable_tool_names=ALL_WRITE_AND_EDIT_TOOL_NAMES,
+        applicable_tool_names=ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES,
     ),
     HostedHookEntry(
         script_relative_path="blocking/code_rules_enforcer.py",
-        applicable_tool_names=ALL_WRITE_AND_EDIT_TOOL_NAMES,
+        applicable_tool_names=ALL_WRITE_EDIT_MULTI_EDIT_APPLY_PATCH_TOOL_NAMES,
     ),
     HostedHookEntry(
         script_relative_path="blocking/tdd_enforcer.py",
-        applicable_tool_names=ALL_WRITE_AND_EDIT_TOOL_NAMES,
+        applicable_tool_names=ALL_WRITE_EDIT_MULTI_EDIT_APPLY_PATCH_TOOL_NAMES,
     ),
     HostedHookEntry(
         script_relative_path="blocking/windows_rmtree_blocker.py",
-        applicable_tool_names=ALL_WRITE_AND_EDIT_TOOL_NAMES,
+        applicable_tool_names=ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES,
     ),
     HostedHookEntry(
         script_relative_path="blocking/duplicate_rmtree_helper_blocker.py",
-        applicable_tool_names=ALL_WRITE_AND_EDIT_TOOL_NAMES,
+        applicable_tool_names=ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES,
     ),
     HostedHookEntry(
         script_relative_path="blocking/state_description_blocker.py",
-        applicable_tool_names=ALL_WRITE_AND_EDIT_TOOL_NAMES,
+        applicable_tool_names=ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES,
         native_module_name=STATE_DESCRIPTION_BLOCKER_MODULE_NAME,
     ),
     HostedHookEntry(
         script_relative_path="blocking/stale_comment_reference_blocker.py",
-        applicable_tool_names=frozenset({EDIT_TOOL_NAME}),
+        applicable_tool_names=frozenset({EDIT_TOOL_NAME, MULTI_EDIT_TOOL_NAME}),
     ),
     HostedHookEntry(
         script_relative_path="blocking/subprocess_budget_completeness.py",
-        applicable_tool_names=ALL_WRITE_AND_EDIT_TOOL_NAMES,
+        applicable_tool_names=ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES,
     ),
     HostedHookEntry(
         script_relative_path="blocking/hook_prose_detector_consistency.py",
-        applicable_tool_names=ALL_WRITE_AND_EDIT_TOOL_NAMES,
+        applicable_tool_names=ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES,
     ),
     HostedHookEntry(
         script_relative_path="blocking/workflow_substitution_slot_blocker.py",
@@ -155,12 +172,12 @@ ALL_HOSTED_HOOK_ENTRIES: tuple[HostedHookEntry, ...] = (
     ),
     HostedHookEntry(
         script_relative_path="advisory/refactor_guard.py",
-        applicable_tool_names=frozenset({EDIT_TOOL_NAME}),
+        applicable_tool_names=frozenset({EDIT_TOOL_NAME, MULTI_EDIT_TOOL_NAME}),
         is_blocking=False,
     ),
     HostedHookEntry(
         script_relative_path="advisory/migration_safety_advisor.py",
-        applicable_tool_names=frozenset({EDIT_TOOL_NAME}),
+        applicable_tool_names=frozenset({EDIT_TOOL_NAME, MULTI_EDIT_TOOL_NAME}),
         is_blocking=False,
     ),
 )

package/hooks/hooks_constants/session_edit_stage_gate_constants.py

@@ -18,6 +18,15 @@ from __future__ import annotations
 
 import re
 
+# The dispatcher constants module is the single source for tool names.
+from hooks_constants.pre_tool_use_dispatcher_constants import (  # noqa: F401
+    APPLY_PATCH_TOOL_NAME,
+    EDIT_TOOL_NAME,
+    MULTI_EDIT_TOOL_NAME,
+    WRITE_TOOL_NAME,
+)
+
+
 SESSION_EDIT_FILE_PREFIX: str = "claude-session-edits-"
 SESSION_EDIT_FILE_SUFFIX: str = ".json"
 ALL_EDITED_FILE_PATHS_KEY: str = "all_edited_file_paths"
@@ -27,7 +36,12 @@ SESSION_ID_UNSAFE_CHARACTERS_PATTERN: re.Pattern[str] = re.compile(r"[^A-Za-z0-9
 SESSION_START_SOURCE_PAYLOAD_KEY: str = "source"
 SESSION_START_SOURCE_FRESH_STARTUP: str = "startup"
 
-ALL_TRACKED_EDIT_TOOL_NAMES: tuple[str, ...] = ("Write", "Edit", "MultiEdit")
+ALL_TRACKED_EDIT_TOOL_NAMES: tuple[str, ...] = (
+    WRITE_TOOL_NAME,
+    EDIT_TOOL_NAME,
+    MULTI_EDIT_TOOL_NAME,
+    APPLY_PATCH_TOOL_NAME,
+)
 
 STATE_FILE_ATOMIC_WRITE_SUFFIX: str = ".tmp"
 STATE_FILE_JSON_INDENT_SPACES: int = 2

package/hooks/hooks_constants/state_description_blocker_constants.py

@@ -2,6 +2,7 @@
 
 from re import IGNORECASE, Pattern, compile
 
+
 ALL_COMMENT_TRANSITION_PATTERNS: list[Pattern[str]] = [
     compile(r"\binstead of\b", IGNORECASE),
     compile(r"\bpreviously\b", IGNORECASE),

package/hooks/hooks_constants/subprocess_budget_completeness_content.py

@@ -0,0 +1,71 @@
+"""Resolve the post-edit content a Write, Edit, or MultiEdit payload leaves on disk.
+
+Shared by subprocess_budget_completeness.py, which parses this content's AST to
+find a named budget helper that omits a reachable subprocess timeout.
+"""
+
+from __future__ import annotations
+
+from hooks_constants.multi_edit_reconstruction import apply_edits, edits_for_tool
+
+__all__ = [
+    "existing_file_content",
+    "reconstructed_edit_content",
+    "reconstructed_multi_edit_content",
+    "resolved_content",
+]
+
+
+def existing_file_content(file_path: str) -> str | None:
+    try:
+        with open(file_path, "r", encoding="utf-8") as existing_file:
+            return existing_file.read()
+    except (FileNotFoundError, OSError, UnicodeDecodeError):
+        return None
+
+
+def reconstructed_edit_content(all_tool_input_fields: dict[str, object]) -> str:
+    file_path = all_tool_input_fields.get("file_path")
+    old_string = all_tool_input_fields.get("old_string")
+    new_string = all_tool_input_fields.get("new_string")
+    if not isinstance(file_path, str) or not isinstance(old_string, str):
+        return ""
+    if not isinstance(new_string, str) or not old_string:
+        return ""
+    existing_content = existing_file_content(file_path)
+    if existing_content is None or old_string not in existing_content:
+        return ""
+    return apply_edits(existing_content, edits_for_tool("Edit", all_tool_input_fields))
+
+
+def reconstructed_multi_edit_content(
+    all_tool_input_fields: dict[str, object], all_edits: list[object]
+) -> str:
+    """Return the whole file MultiEdit's edit list would leave on disk.
+
+    Args:
+        all_tool_input_fields: The MultiEdit payload's tool_input mapping.
+        all_edits: The payload's ``edits`` list.
+
+    Returns:
+        The reconstructed content, or an empty string when the target file
+        cannot be read.
+    """
+    file_path = all_tool_input_fields.get("file_path")
+    if not isinstance(file_path, str):
+        return ""
+    existing_content = existing_file_content(file_path)
+    if existing_content is None:
+        return ""
+    all_edit_dicts = [each_edit for each_edit in all_edits if isinstance(each_edit, dict)]
+    return apply_edits(existing_content, all_edit_dicts)
+
+
+def resolved_content(all_tool_input_fields: dict[str, object]) -> str:
+    written_content = all_tool_input_fields.get("content")
+    if isinstance(written_content, str):
+        return written_content
+    all_edits = all_tool_input_fields.get("edits")
+    if isinstance(all_edits, list):
+        return reconstructed_multi_edit_content(all_tool_input_fields, all_edits)
+    return reconstructed_edit_content(all_tool_input_fields)

package/hooks/hooks_constants/test_bash_pre_tool_use_dispatcher_constants.py

@@ -38,12 +38,14 @@ _EXPECTED_BASH_ORDER = (
     "blocking/test_preflight_check.py",
     "blocking/windows_rmtree_blocker.py",
     "blocking/gh_pr_author_enforcer.py",
+    "blocking/pr_description_writer_gate.py",
 )
 
 _POWERSHELL_APPLICABLE = (
     "blocking/cursor_cli_python_misfire_blocker.py",
     "blocking/unscoped_search_blocker.py",
     "blocking/pii_prevention_blocker.py",
+    "blocking/pr_description_writer_gate.py",
 )
 
 

package/hooks/hooks_constants/test_code_rules_enforcer_constants.py

@@ -27,6 +27,8 @@ from hooks_constants.code_rules_enforcer_constants import (
     RETURN_CALL_OPENING_PARENTHESIS_PATTERN,
     SCHEMA_OPTIONS_PROPERTY_KEY_PATTERN,
     UNKNOWN_VALIDATION_PHASE_MESSAGE_TEMPLATE,
+    apply_edits,
+    edits_for_tool,
 )