claude-dev-env 4.0.0 → 4.2.0

package/hooks/hooks_constants/bash_pre_tool_use_dispatcher_constants.py

@@ -35,7 +35,9 @@ BASH_TOOL_NAME = "Bash"
 POWERSHELL_TOOL_NAME = "PowerShell"
 
 ALL_BASH_ONLY_TOOL_NAMES: frozenset[str] = frozenset({BASH_TOOL_NAME})
-ALL_BASH_AND_POWERSHELL_TOOL_NAMES: frozenset[str] = frozenset({BASH_TOOL_NAME, POWERSHELL_TOOL_NAME})
+ALL_BASH_AND_POWERSHELL_TOOL_NAMES: frozenset[str] = frozenset(
+    {BASH_TOOL_NAME, POWERSHELL_TOOL_NAME}
+)
 
 
 @dataclass(frozen=True)
@@ -53,7 +55,6 @@ class BashHostedHookEntry:
 
 
 ALL_BASH_HOSTED_HOOK_ENTRIES: tuple[BashHostedHookEntry, ...] = (
-    BashHostedHookEntry("blocking/es_exe_path_rewriter.py", ALL_BASH_ONLY_TOOL_NAMES),
     BashHostedHookEntry("blocking/destructive_command_blocker.py", ALL_BASH_ONLY_TOOL_NAMES),
     BashHostedHookEntry("blocking/gh_body_arg_blocker.py", ALL_BASH_ONLY_TOOL_NAMES),
     BashHostedHookEntry("blocking/shell_substitution_blocker.py", ALL_BASH_ONLY_TOOL_NAMES),
@@ -62,14 +63,10 @@ ALL_BASH_HOSTED_HOOK_ENTRIES: tuple[BashHostedHookEntry, ...] = (
         "blocking/cursor_cli_python_misfire_blocker.py",
         ALL_BASH_AND_POWERSHELL_TOOL_NAMES,
     ),
-    BashHostedHookEntry(
-        "blocking/unscoped_search_blocker.py", ALL_BASH_AND_POWERSHELL_TOOL_NAMES
-    ),
+    BashHostedHookEntry("blocking/unscoped_search_blocker.py", ALL_BASH_AND_POWERSHELL_TOOL_NAMES),
     BashHostedHookEntry("blocking/nas_ssh_binary_enforcer.py", ALL_BASH_ONLY_TOOL_NAMES),
     BashHostedHookEntry("blocking/volatile_path_in_post_blocker.py", ALL_BASH_ONLY_TOOL_NAMES),
-    BashHostedHookEntry(
-        "blocking/pii_prevention_blocker.py", ALL_BASH_AND_POWERSHELL_TOOL_NAMES
-    ),
+    BashHostedHookEntry("blocking/pii_prevention_blocker.py", ALL_BASH_AND_POWERSHELL_TOOL_NAMES),
     BashHostedHookEntry("blocking/conventional_pr_title_gate.py", ALL_BASH_ONLY_TOOL_NAMES),
     BashHostedHookEntry("blocking/block_main_commit.py", ALL_BASH_ONLY_TOOL_NAMES),
     BashHostedHookEntry("blocking/session_edit_stage_gate.py", ALL_BASH_ONLY_TOOL_NAMES),

package/hooks/hooks_constants/test_bash_pre_tool_use_dispatcher_constants.py

@@ -7,22 +7,18 @@ registration order the standalone chain used.
 
 from __future__ import annotations
 
-import sys
 from pathlib import Path
+from runpy import run_path
 
-_HOOKS_DIR = str(Path(__file__).resolve().parent.parent)
-if _HOOKS_DIR not in sys.path:
-    sys.path.insert(0, _HOOKS_DIR)
-
-from hooks_constants.bash_pre_tool_use_dispatcher_constants import (  # noqa: E402
-    ALL_BASH_AND_POWERSHELL_TOOL_NAMES,
-    ALL_BASH_HOSTED_HOOK_ENTRIES,
-    BASH_TOOL_NAME,
-    POWERSHELL_TOOL_NAME,
+ALL_CONSTANT_BINDINGS = run_path(
+    str(Path(__file__).with_name("bash_pre_tool_use_dispatcher_constants.py"))
 )
+ALL_BASH_AND_POWERSHELL_TOOL_NAMES = ALL_CONSTANT_BINDINGS["ALL_BASH_AND_POWERSHELL_TOOL_NAMES"]
+ALL_BASH_HOSTED_HOOK_ENTRIES = ALL_CONSTANT_BINDINGS["ALL_BASH_HOSTED_HOOK_ENTRIES"]
+BASH_TOOL_NAME = ALL_CONSTANT_BINDINGS["BASH_TOOL_NAME"]
+POWERSHELL_TOOL_NAME = ALL_CONSTANT_BINDINGS["POWERSHELL_TOOL_NAME"]
 
 _EXPECTED_BASH_ORDER = (
-    "blocking/es_exe_path_rewriter.py",
     "blocking/destructive_command_blocker.py",
     "blocking/gh_body_arg_blocker.py",
     "blocking/shell_substitution_blocker.py",
@@ -80,8 +76,6 @@ def test_powershell_hooks_carry_the_shared_tool_set() -> None:
             assert each_entry.applicable_tool_names == ALL_BASH_AND_POWERSHELL_TOOL_NAMES
 
 
-
-
 def test_every_roster_path_points_at_an_existing_hook() -> None:
     """Each roster path names a hook script present on disk, catching a typo."""
     hooks_root = Path(__file__).resolve().parent.parent

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-dev-env",
-    "version": "4.0.0",
+    "version": "4.2.0",
     "description": "Claude Code development standards — rules, hooks, agents, commands, and skills",
     "type": "module",
     "bin": {

package/rules/filesystem-search.md

@@ -1,6 +1,6 @@
 # Filesystem Search
 
-**When this applies:** Any search for files by name, path, extension, size, or date — through `es.exe`, a shell `find`, a recursive `Get-ChildItem` / `gci` / `dir` / `ls -R`, or the harness Grep and Glob tools.
+**When this applies:** Any search for files by name, path, extension, size, or date. That includes `es.exe`, a shell `find`, a recursive `Get-ChildItem` / `gci` / `dir` / `ls -R`, or the harness Grep and Glob tools.
 
 ## The scope invariant
 
@@ -14,7 +14,7 @@ Three tools are equally sanctioned; pick by what you know:
 
 | You know | Use |
 |---|---|
-| The exact path | `Read` — no search at all |
+| The exact path | `Read`. Do not search. |
 | A name, extension, or date, on Windows | `es.exe` with a path scope |
 | A name or path pattern | The harness `Glob` tool |
 | Text inside files | The harness `Grep` tool |
@@ -39,13 +39,13 @@ When `es.exe` fails or returns nothing, fall back to `Glob` or `Grep` without pa
 | Git Bash drive root | `find /c -name '*.py'` |
 | Windows drive root | `find C:\ -name foo` / `Get-ChildItem C:\ -Recurse` |
 | Bare home | `find ~ -name README.md` / `find $HOME -type f` |
-| Network share root | `find //server/share -name x` — a path under the share (`//server/share/project/src`) is allowed |
+| Network share root | `find //server/share -name x`. A path under the share (`//server/share/project/src`) is allowed |
 
 ## Shell batching
 
 Issue one shell search at a time when the walk is large. Parallel full-tree searches contend for the shell and can lock the host. Harness `Grep` and `Glob` calls carry no such cost and run in parallel freely.
 
-## Enforcement
+## Search controls
 
 - `unscoped_search_blocker` (PreToolUse on Bash and PowerShell, hosted by `bash_pre_tool_use_dispatcher`) denies a walk from an unscoped root and returns the scoped alternative.
-- `es_exe_path_rewriter` (PreToolUse on Bash) substitutes `{project-name}` placeholders and bare registry keys in an `es.exe` command with their quoted absolute paths, read from `~/.claude/project-paths.json`. It allows and rewrites; it never blocks, and a machine with no registry file passes the command through unchanged. `scripts/setup_project_paths.py` writes the registry.
+- For Everything searches that use a project name, run `python "${CLAUDE_SKILL_DIR}/scripts/everything_search.py" <project-name> <search arguments>`. An exact project name becomes its path from `~/.claude/project-paths.json`. The command then starts `es.exe` without a shell. `scripts/setup_project_paths.py` writes the registry.

package/hooks/blocking/es_exe_path_rewriter.py

@@ -1,159 +0,0 @@
-#!/usr/bin/env python3
-"""PreToolUse hook: rewrite es.exe commands by substituting registry tokens with absolute paths.
-
-Reads tool_input.command from stdin JSON. When the command invokes the Everything
-command-line binary, substitutes {project-name} placeholder tokens and bare registry-key
-tokens with their quoted absolute paths from ~/.claude/project-paths.json before
-the Bash call runs. Never blocks or denies — on any error exits 0 with empty output.
-"""
-
-from __future__ import annotations
-
-import json
-import logging
-import re
-import sys
-from pathlib import Path, PurePosixPath, PureWindowsPath
-
-_hooks_dir = str(Path(__file__).resolve().parent.parent)
-if _hooks_dir not in sys.path:
-    sys.path.insert(0, _hooks_dir)
-
-from hooks_constants.dynamic_stderr_handler import DynamicStderrHandler  # noqa: E402
-from hooks_constants.pre_tool_use_stdin import read_hook_input_dictionary_from_stdin  # noqa: E402
-from hooks_constants.path_rewriter_constants import (  # noqa: E402
-    BASH_TOOL_NAME,
-    HOOK_EVENT_NAME,
-    PERMISSION_ALLOW,
-    PLACEHOLDER_TOKEN_PATTERN,
-)
-from hooks_constants.project_paths_reader import load_registry  # noqa: E402
-
-_ES_EXE_TRIGGER_PATTERN = re.compile(
-    r"(?i)(?<![\w.])(?:Everything[/\\])?es\.exe(?![\w.])",
-)
-
-
-_logger = logging.getLogger("es_exe_path_rewriter")
-if not _logger.handlers:
-    _stderr_handler = DynamicStderrHandler()
-    _stderr_handler.setFormatter(logging.Formatter("%(name)s: %(message)s"))
-    _logger.addHandler(_stderr_handler)
-    _logger.setLevel(logging.INFO)
-    _logger.propagate = False
-
-
-def command_invokes_es_exe(command: str) -> bool:
-    """Return True when the command string contains an es.exe invocation."""
-    return bool(_ES_EXE_TRIGGER_PATTERN.search(command))
-
-
-def _token_is_absolute_path(token: str) -> bool:
-    stripped = token.strip("\"'")
-    try:
-        return (
-            PureWindowsPath(stripped).is_absolute()
-            or PurePosixPath(stripped).is_absolute()
-        )
-    except (ValueError, TypeError):
-        return False
-
-
-def _quote_path(absolute_path: str) -> str:
-    return f'"{absolute_path}"'
-
-
-def _rewrite_placeholder_tokens(command_suffix: str, registry: dict[str, str]) -> str:
-    def replace_placeholder(match: re.Match) -> str:
-        inner_name = match.group(1)
-        if inner_name not in registry:
-            return match.group(0)
-        return _quote_path(registry[inner_name])
-
-    return PLACEHOLDER_TOKEN_PATTERN.sub(replace_placeholder, command_suffix)
-
-
-def _split_on_es_exe(command: str) -> tuple[str, str]:
-    match = _ES_EXE_TRIGGER_PATTERN.search(command)
-    if not match:
-        return command, ""
-    return command[: match.end()], command[match.end() :]
-
-
-def _strip_matching_outer_quotes(token: str) -> tuple[str, bool]:
-    """Return (inner_text, was_quoted) after removing matched outer quotes."""
-    if len(token) > 1 and token[0] in ('"', "'") and token[-1] == token[0]:
-        return token[1:-1], True
-    return token, False
-
-
-def _rewrite_bare_tokens(command_suffix: str, registry: dict[str, str]) -> str:
-    all_raw_parts = re.split(r"(\s+)", command_suffix)
-    all_rewritten_parts: list[str] = []
-    for each_raw_part in all_raw_parts:
-        if not each_raw_part or each_raw_part.isspace():
-            all_rewritten_parts.append(each_raw_part)
-            continue
-        unquoted_text, _was_quoted = _strip_matching_outer_quotes(each_raw_part)
-        if unquoted_text in registry and not _token_is_absolute_path(unquoted_text):
-            all_rewritten_parts.append(_quote_path(registry[unquoted_text]))
-        else:
-            all_rewritten_parts.append(each_raw_part)
-    return "".join(all_rewritten_parts)
-
-
-def rewrite_command(command: str, registry: dict[str, str]) -> str:
-    """Apply registry substitutions to any es.exe argument tokens.
-
-    Applies placeholder form {name} first, then bare-token form.
-    Absolute-path arguments and unknown tokens are left untouched.
-    Returns the original command when no substitution applies.
-    """
-    if not registry:
-        return command
-    prefix, suffix = _split_on_es_exe(command)
-    rewritten_suffix = _rewrite_placeholder_tokens(suffix, registry)
-    rewritten_suffix = _rewrite_bare_tokens(rewritten_suffix, registry)
-    return prefix + rewritten_suffix
-
-
-def _build_allow_response(rewritten_command: str, original_tool_input: dict) -> dict:
-    updated_input = {**original_tool_input, "command": rewritten_command}
-    return {
-        "hookSpecificOutput": {
-            "hookEventName": HOOK_EVENT_NAME,
-            "permissionDecision": PERMISSION_ALLOW,
-            "updatedInput": updated_input,
-        }
-    }
-
-
-def main() -> None:
-    try:
-        hook_input = read_hook_input_dictionary_from_stdin()
-        if hook_input is None:
-            sys.exit(0)
-        raw_tool_name = hook_input.get("tool_name", "")
-        raw_tool_input = hook_input.get("tool_input", {})
-        tool_name = raw_tool_name if isinstance(raw_tool_name, str) else ""
-        tool_input = raw_tool_input if isinstance(raw_tool_input, dict) else {}
-        if tool_name != BASH_TOOL_NAME:
-            sys.exit(0)
-        raw_command = tool_input.get("command", "")
-        command = raw_command if isinstance(raw_command, str) else ""
-        if not command_invokes_es_exe(command):
-            sys.exit(0)
-        known_registry = load_registry()
-        if not known_registry:
-            sys.exit(0)
-        rewritten_command = rewrite_command(command, known_registry)
-        if rewritten_command == command:
-            sys.exit(0)
-        print(json.dumps(_build_allow_response(rewritten_command, tool_input)))
-    except Exception as e:
-        _logger.error("%s", e)
-    sys.exit(0)
-
-
-if __name__ == "__main__":
-    main()