claude-dev-env 4.1.0 → 4.3.0

package/bin/install.prune.test.mjs

@@ -66,6 +66,41 @@ const NESTED_SKILL_DIRECTORY = 'foo';
 const NESTED_SKILL_FILE_SEGMENTS = [NESTED_SKILL_DIRECTORY, 'scripts', 'a.py'];
 const MYPY_INI_FILE_NAME = '.mypy.ini';
 const SKIPPED_RECORD_SUMMARY_MARKER = 'manifest record(s) skipped';
+const RETIRED_PULL_REQUEST_HOOK_RELATIVE_PATHS = [
+    '_gh_pr_author_swap_utils.py',
+    'test__gh_pr_author_swap_utils.py',
+    'blocking/conventional_pr_title_gate.py',
+    'blocking/gh_body_arg_blocker.py',
+    'blocking/gh_pr_author_enforcer.py',
+    'blocking/gh_pr_author_restore.py',
+    'blocking/pr_description_writer_gate.py',
+    'blocking/test_conventional_pr_title_gate.py',
+    'blocking/test_gh_body_arg_blocker.py',
+    'blocking/test_gh_pr_author_enforcer.py',
+    'blocking/test_gh_pr_author_restore.py',
+    'blocking/test_gh_pr_author_swap_utils.py',
+    'blocking/test_pr_description_writer_gate.py',
+    'blocking/test_volatile_path_in_post_blocker.py',
+    'blocking/volatile_path_in_post_blocker.py',
+    'hooks_constants/conventional_pr_title_gate_constants.py',
+    'hooks_constants/gh_pr_author_swap_constants.py',
+    'hooks_constants/pr_description_writer_gate_constants.py',
+    'hooks_constants/volatile_path_in_post_blocker_constants.py',
+    'observability/pr_description_writer_spawn_tracker.py',
+    'observability/test_pr_description_writer_spawn_tracker.py',
+    'session/gh_pr_author_session_cleanup.py',
+    'session/test_gh_pr_author_session_cleanup.py',
+];
+const RETIRED_PULL_REQUEST_REGISTRATION_PATHS = [
+    'blocking/conventional_pr_title_gate.py',
+    'blocking/gh_body_arg_blocker.py',
+    'blocking/gh_pr_author_enforcer.py',
+    'blocking/gh_pr_author_restore.py',
+    'blocking/pr_description_writer_gate.py',
+    'blocking/volatile_path_in_post_blocker.py',
+    'observability/pr_description_writer_spawn_tracker.py',
+    'session/gh_pr_author_session_cleanup.py',
+];
 
 /**
  * Report whether a path under one managed root landed in a run backup.
@@ -1054,6 +1089,120 @@ test('a full reinstall drops a retired hook script and its settings entry in one
     }
 });
 
+test('a full reinstall removes the retired Everything path rewriter and keeps a foreign hook neighbor', () => {
+    const sandbox = createSandbox();
+    try {
+        runInstaller(sandbox.homeDirectory, []);
+        const retiredHookPath = join(
+            sandbox.claudeDirectory,
+            HOOKS_DIRECTORY_NAME,
+            'blocking',
+            'es_exe_path_rewriter.py',
+        );
+        writeFileWithParents(retiredHookPath, 'a hook an earlier install wrote\n');
+        appendManifestFiles(sandbox.manifestPath, [retiredHookPath]);
+
+        const foreignHookPath = join(
+            sandbox.claudeDirectory,
+            HOOKS_DIRECTORY_NAME,
+            'blocking',
+            'foreign_search_hook.py',
+        );
+        const foreignHookBytes = Buffer.from('a user hook the installer never wrote\n');
+        writeFileWithParents(foreignHookPath, foreignHookBytes);
+
+        runInstaller(sandbox.homeDirectory, []);
+
+        const freshManifest = readManifest(sandbox.manifestPath);
+        const installedDispatcherConstantsPath = join(
+            sandbox.claudeDirectory,
+            HOOKS_DIRECTORY_NAME,
+            'hooks_constants',
+            'bash_pre_tool_use_dispatcher_constants.py',
+        );
+        assert.equal(existsSync(retiredHookPath), false, 'the retired search hook leaves the installed hooks');
+        assert.equal(
+            freshManifest.files.includes(retiredHookPath),
+            false,
+            'the fresh manifest drops the retired search hook',
+        );
+        assert.equal(
+            freshManifest.files.includes(foreignHookPath),
+            false,
+            'the fresh manifest does not claim the foreign hook',
+        );
+        assert.deepEqual(
+            readFileSync(foreignHookPath),
+            foreignHookBytes,
+            'the foreign hook keeps its original bytes',
+        );
+        assert.equal(
+            readFileSync(installedDispatcherConstantsPath, 'utf8').includes(
+                'es_exe_path_rewriter.py',
+            ),
+            false,
+            'the installed dispatcher constants omit the retired search hook',
+        );
+    } finally {
+        rmSync(sandbox.homeDirectory, { recursive: true, force: true });
+    }
+});
+
+test('a full reinstall removes retired pull request hooks and preserves foreign and recovery state', () => {
+    const sandbox = createSandbox();
+    try {
+        runInstaller(sandbox.homeDirectory, []);
+        const retiredPaths = RETIRED_PULL_REQUEST_HOOK_RELATIVE_PATHS.map(relativePath => (
+            join(sandbox.claudeDirectory, HOOKS_DIRECTORY_NAME, ...relativePath.split('/'))
+        ));
+        for (const retiredPath of retiredPaths) {
+            writeFileWithParents(retiredPath, 'an earlier install managed this file\n');
+        }
+        appendManifestFiles(sandbox.manifestPath, retiredPaths);
+        const foreignHookPath = join(
+            sandbox.claudeDirectory, HOOKS_DIRECTORY_NAME, 'blocking', 'foreign_pr_hook.py',
+        );
+        const foreignHookBytes = Buffer.from('a user hook the installer never wrote\n', 'utf8');
+        writeFileWithParents(foreignHookPath, foreignHookBytes);
+        const recoveryStatePath = join(
+            sandbox.homeDirectory, 'pending', 'gh_pr_author_swap_session-a.json',
+        );
+        const recoveryStateBytes = Buffer.from('{"original_account":"prior"}\n', 'utf8');
+        writeFileWithParents(recoveryStatePath, recoveryStateBytes);
+        const settings = readSettings(sandbox.claudeDirectory);
+        settings.hooks.PreToolUse.push({
+            matcher: 'Bash',
+            hooks: [
+                ...RETIRED_PULL_REQUEST_REGISTRATION_PATHS.map(relativePath => ({
+                    type: 'command',
+                    command: `python3 "${join(sandbox.claudeDirectory, HOOKS_DIRECTORY_NAME, ...relativePath.split('/')).replace(/\\/g, '/')}"`,
+                })),
+                { type: 'command', command: `python3 "${foreignHookPath.replace(/\\/g, '/')}"` },
+            ],
+        });
+        writeFileSync(
+            join(sandbox.claudeDirectory, SETTINGS_FILE_NAME),
+            JSON.stringify(settings, null, 4) + '\n',
+        );
+
+        runInstaller(sandbox.homeDirectory, []);
+
+        const freshManifest = readManifest(sandbox.manifestPath);
+        const allCommands = allHookCommands(readSettings(sandbox.claudeDirectory));
+        for (const retiredPath of retiredPaths) {
+            assert.equal(existsSync(retiredPath), false, `${retiredPath} leaves installed hooks`);
+            assert.equal(freshManifest.files.includes(retiredPath), false);
+        }
+        for (const relativePath of RETIRED_PULL_REQUEST_REGISTRATION_PATHS) {
+            assert.ok(allCommands.every(command => !command.includes(relativePath)));
+        }
+        assert.deepEqual(readFileSync(foreignHookPath), foreignHookBytes);
+        assert.deepEqual(readFileSync(recoveryStatePath), recoveryStateBytes);
+    } finally {
+        rmSync(sandbox.homeDirectory, { recursive: true, force: true });
+    }
+});
+
 test('a full reinstall removes a retired hook entry under an event type the current config leaves out', () => {
     const sandbox = createSandbox();
     try {

package/bin/install.test.mjs

@@ -228,6 +228,11 @@ test('CORE_SKILLS ships ELI5 as the leaf presentation skill', () => {
     assert.equal(INSTALL_GROUPS.core.skills.includes('eli5'), true);
 });
 
+test('CORE_SKILLS ships test-runner for explicit Django and Playwright readiness checks', () => {
+    assert.ok(CORE_SKILLS.includes('test-runner'));
+    assert.equal(INSTALL_GROUPS.core.skills.includes('test-runner'), true);
+});
+
 
 test('EVER_SHIPPED_SKILL_NAMES retains imagegen so reinstall prunes the retired skill', () => {
     assert.ok(
@@ -1246,7 +1251,7 @@ const OLD_FOLDED_HOOKS_SETTINGS = {
 
 
 test('FOLDED_HOOK_RELATIVE_PATHS contains folded hooks plus retired entries', () => {
-    assert.equal(FOLDED_HOOK_RELATIVE_PATHS.size, 16);
+    assert.equal(FOLDED_HOOK_RELATIVE_PATHS.size, 21);
     assert.ok(FOLDED_HOOK_RELATIVE_PATHS.has('blocking/write_existing_file_blocker.py'));
     assert.ok(FOLDED_HOOK_RELATIVE_PATHS.has('blocking/code_rules_enforcer.py'));
     assert.ok(FOLDED_HOOK_RELATIVE_PATHS.has('blocking/pytest_testpaths_orphan_blocker.py'));
@@ -1256,16 +1261,22 @@ test('FOLDED_HOOK_RELATIVE_PATHS contains folded hooks plus retired entries', ()
 
 
 test('retired hook registrations stay managed so reinstall removes them', () => {
-    const retiredPath = 'session/untracked_repo_detector.py';
+    const retiredPaths = new Set([
+        'session/untracked_repo_detector.py',
+        'session/gh_pr_author_session_cleanup.py',
+        'observability/pr_description_writer_spawn_tracker.py',
+    ]);
     const shippedHooks = JSON.parse(
         readFileSync(new URL('../hooks/hooks.json', import.meta.url), 'utf8')
     );
     const shippedCommands = Object.values(shippedHooks.hooks).flatMap(matcherGroups => (
         matcherGroups.flatMap(matcherGroup => matcherGroup.hooks.map(hook => hook.command))
     ));
-    assert.deepEqual(RETIRED_HOOK_REGISTRATION_RELATIVE_PATHS, new Set([retiredPath]));
-    assert.ok(managedHookScriptRelativePaths({ hooks: {} }).has(retiredPath));
-    assert.ok(shippedCommands.every(command => !command.includes(retiredPath)));
+    assert.deepEqual(RETIRED_HOOK_REGISTRATION_RELATIVE_PATHS, retiredPaths);
+    for (const retiredPath of retiredPaths) {
+        assert.ok(managedHookScriptRelativePaths({ hooks: {} }).has(retiredPath));
+        assert.ok(shippedCommands.every(command => !command.includes(retiredPath)));
+    }
 });
 
 
@@ -1288,6 +1299,11 @@ test('FOLDED_HOOK_RELATIVE_PATHS lists every hook the PreToolUse dispatcher host
     ];
     const retiredHooks = [
         'blocking/md_to_html_blocker.py',
+        'blocking/gh_body_arg_blocker.py',
+        'blocking/volatile_path_in_post_blocker.py',
+        'blocking/conventional_pr_title_gate.py',
+        'blocking/gh_pr_author_enforcer.py',
+        'blocking/pr_description_writer_gate.py',
         'session/untracked_repo_detector.py',
     ];
     for (const hostedPath of dispatcherHostedHooks) {
@@ -1480,12 +1496,13 @@ const OLD_POST_FOLDED_HOOKS_SETTINGS = {
 };
 
 
-test('POST_FOLDED_HOOK_RELATIVE_PATHS contains the after-write hooks and the retired md_to_html_companion', () => {
-    assert.equal(POST_FOLDED_HOOK_RELATIVE_PATHS.size, 4);
+test('POST_FOLDED_HOOK_RELATIVE_PATHS contains hosted and retired post-tool hooks', () => {
+    assert.equal(POST_FOLDED_HOOK_RELATIVE_PATHS.size, 5);
     assert.ok(POST_FOLDED_HOOK_RELATIVE_PATHS.has('validation/mypy_validator.py'));
     assert.ok(POST_FOLDED_HOOK_RELATIVE_PATHS.has('workflow/auto_formatter.py'));
     assert.ok(POST_FOLDED_HOOK_RELATIVE_PATHS.has('workflow/doc_gist_auto_publish.py'));
     assert.ok(POST_FOLDED_HOOK_RELATIVE_PATHS.has('workflow/md_to_html_companion.py'));
+    assert.ok(POST_FOLDED_HOOK_RELATIVE_PATHS.has('blocking/gh_pr_author_restore.py'));
 });
 
 

package/hooks/blocking/pii_prevention_blocker.py

@@ -1,23 +1,18 @@
 #!/usr/bin/env python3
 """PreToolUse hook: block writes, durable posts, and commits that carry PII.
 
-Surfaces guarded:
-
-- Write / Edit / MultiEdit — new content about to land on disk
-- Bash / PowerShell ``gh`` post subcommands and GitHub MCP post tools — durable
-  bodies
-- Bash / PowerShell ``git commit`` (including ``git.exe`` and flag forms) —
-  staged file contents about to become history. Commit message bodies are out
-  of scope; only staged blob text is scanned.
-
-Payload and post-body scanning live in ``pii_payload_scan``; git-commit command
-detection lives in ``pii_commit_command``; both re-export through this entry
-module so the hooks.json wiring and every importer resolve unchanged.
-
-A repository named in ``CLAUDE_PII_EXEMPT_REPOS`` or the ``pii_exempt_repositories``
-list in ``~/.claude/local-identity.json`` skips the staged-commit scan; a
-repository without a readable origin remote is never exempt. Exact values listed
-under ``pii_allowlisted_values`` for a repository's origin slug may pass the
+::
+
+    Write/Edit/MultiEdit  -> scan new disk content
+    gh post / GitHub MCP  -> scan durable bodies
+    git commit            -> scan staged blob text, not the commit message
+
+``pii_payload_scan`` and ``pii_commit_command`` re-export through this
+entry module so hooks.json wiring and importers stay unchanged.
+``CLAUDE_PII_EXEMPT_REPOS`` or ``pii_exempt_repositories`` in
+``~/.claude/local-identity.json`` skip the staged-commit scan. A repo
+without a readable origin remote is never exempt.
+``pii_allowlisted_values`` for a repository origin slug may pass
 Write/Edit and staged-commit scans in that repository only.
 """
 
@@ -56,7 +51,7 @@ try:
     )
     from pii_scanner import is_path_exempt_from_pii_scan, scan_text_for_pii
     from precommit_code_rules_gate import resolve_repository_root
-    from volatile_path_in_post_blocker import (
+    from gh_post_body_texts import (
         extract_gh_post_body_texts_for_privacy_gate,
         extract_mcp_body_texts,
     )
@@ -124,7 +119,8 @@ def list_staged_file_paths(
     try:
         completed_process = subprocess.run(
             list(ALL_STAGED_FILES_COMMAND),
-            check=False, capture_output=True,
+            check=False,
+            capture_output=True,
             text=True,
             timeout=GIT_COMMAND_TIMEOUT_SECONDS,
             cwd=str(repository_root),
@@ -148,7 +144,8 @@ def _git_show_staged_blob(
     try:
         completed_process = subprocess.run(
             list(ALL_STAGED_BLOB_SHOW_COMMAND_PREFIX) + [staged_blob_reference],
-            check=False, capture_output=True,
+            check=False,
+            capture_output=True,
             timeout=GIT_COMMAND_TIMEOUT_SECONDS,
             cwd=str(repository_root),
         )
@@ -197,9 +194,7 @@ def _scan_staged_path(
     repository_root: Path, relative_path: str, all_allowlisted_values: frozenset[str]
 ) -> str | None:
     """Return a deny reason for one staged path, or None when it is clean."""
-    staged_text, unscannable_reason = read_staged_file_text(
-        repository_root, relative_path
-    )
+    staged_text, unscannable_reason = read_staged_file_text(repository_root, relative_path)
     if unscannable_reason is not None:
         return unscannable_reason
     if staged_text is None:
@@ -217,9 +212,9 @@ def _scan_staged_path(
 def evaluate_staged_commit(repository_root: Path) -> str | None:
     """Return a deny reason when staged content carries PII or is unscannable.
 
-    Fail-closed: git list/show failures and unscannable blobs deny the commit
-    rather than treating unread content as clean. A value in the repository's
-    PII allowlist is dropped from the findings, so its commits may carry it.
+    Git list or show failures and unscannable blobs deny the commit. A value
+    in the repository's PII allowlist is dropped from the findings, so its
+    commits may carry it.
 
     Args:
         repository_root: Repository whose index is about to be committed.
@@ -234,22 +229,18 @@ def evaluate_staged_commit(repository_root: Path) -> str | None:
     for each_relative_path in all_relative_paths:
         if is_path_exempt_from_pii_scan(each_relative_path):
             continue
-        deny_reason = _scan_staged_path(
-            repository_root, each_relative_path, all_allowlisted_values
-        )
+        deny_reason = _scan_staged_path(repository_root, each_relative_path, all_allowlisted_values)
         if deny_reason is not None:
             return deny_reason
     return None
 
 
-def _evaluate_commit_staged_content(
-    bash_command: str, working_directory: str | None
-) -> str | None:
+def _evaluate_commit_staged_content(bash_command: str, working_directory: str | None) -> str | None:
     """Scan the staged content of the repository the commit command targets.
 
-    Resolves the repository from the command's ``-C``/``cd`` path, falling back
-    to the session working directory only when the command names none, so a
-    removed cwd never blocks a commit that targets a valid repo.
+    Resolves the repository from the command's ``-C`` or ``cd`` path. Falls
+    back to the session working directory only when the command names none. A
+    removed cwd does not block a commit that targets a valid repo.
 
     Args:
         bash_command: The Bash or PowerShell tool command string.
@@ -259,9 +250,7 @@ def _evaluate_commit_staged_content(
         Deny reason text, or None when the staged content is clean or exempt.
     """
     command_directory = compose_command_working_directory(bash_command)
-    attempted_directory = (
-        command_directory if command_directory is not None else working_directory
-    )
+    attempted_directory = command_directory if command_directory is not None else working_directory
     expanded_directory = expand_user_directory(attempted_directory)
     repository_root = resolve_repository_root(expanded_directory)
     if repository_root is None:
@@ -271,9 +260,7 @@ def _evaluate_commit_staged_content(
     return evaluate_staged_commit(repository_root)
 
 
-def evaluate_bash_command(
-    bash_command: str, working_directory: str | None
-) -> str | None:
+def evaluate_bash_command(bash_command: str, working_directory: str | None) -> str | None:
     """Return a deny reason for a shell gh post or git commit with PII.
 
     Args:
@@ -284,10 +271,8 @@ def evaluate_bash_command(
     Returns:
         Deny reason text, or None when the command is clean or out of scope.
     """
-    all_post_bodies, body_file_failure_reason = (
-        extract_gh_post_body_texts_for_privacy_gate(
-            bash_command, working_directory=working_directory
-        )
+    all_post_bodies, body_file_failure_reason = extract_gh_post_body_texts_for_privacy_gate(
+        bash_command, working_directory=working_directory
     )
     if body_file_failure_reason is not None:
         return body_file_failure_reason
@@ -308,9 +293,7 @@ def _evaluate_shell_tool(
         return None
     working_directory_value = all_tool_input.get("working_directory")
     working_directory = (
-        working_directory_value
-        if isinstance(working_directory_value, str)
-        else None
+        working_directory_value if isinstance(working_directory_value, str) else None
     )
     if working_directory is None:
         cwd_value = payload_by_key.get("cwd")
@@ -332,9 +315,7 @@ def evaluate(payload_by_key: dict[str, object]) -> str | None:
     raw_tool_input = payload_by_key.get("tool_input", {})
     all_tool_input = raw_tool_input if isinstance(raw_tool_input, dict) else {}
     if tool_name in ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES:
-        return evaluate_write_edit_payload(
-            tool_name, all_tool_input, hook_payload=payload_by_key
-        )
+        return evaluate_write_edit_payload(tool_name, all_tool_input, hook_payload=payload_by_key)
     if tool_name == APPLY_PATCH_TOOL_NAME:
         return evaluate_apply_patch_payload(all_tool_input, hook_payload=payload_by_key)
     if tool_name in ALL_SHELL_TOOL_NAMES:

package/hooks/blocking/test_bash_post_call_dispatcher.py

@@ -1,7 +1,7 @@
 """Behavior tests for the Bash PostToolUse dispatcher.
 
 One interpreter start runs every hosted PostToolUse hook a Bash call fires.
-The unit tests pin selection, call order, and crash isolation with a fake
+The unit tests pin selection and call order with a fake
 runner; the end-to-end test drives the real hosted hooks through a real
 payload and confirms the recorder's own real side effect lands.
 ``hooks/conftest.py`` already puts the hooks and blocking directories on
@@ -21,13 +21,10 @@ from hooks_constants.hosted_hook_runner import HostedHookRun
 from tdd_enforcer_parts import content_hash_store
 
 
-def test_select_applicable_entries_returns_both_hosted_hooks_for_bash() -> None:
+def test_select_applicable_entries_returns_the_hosted_hook_for_bash() -> None:
     all_entries = select_applicable_entries(BASH_TOOL_NAME)
     all_script_paths = [each_entry.script_relative_path for each_entry in all_entries]
-    assert all_script_paths == [
-        "blocking/gh_pr_author_restore.py",
-        "observability/test_failure_recorder.py",
-    ]
+    assert all_script_paths == ["observability/test_failure_recorder.py"]
 
 
 def test_select_applicable_entries_returns_none_for_a_write_tool() -> None:
@@ -48,27 +45,7 @@ def test_dispatch_runs_every_hosted_hook_in_roster_order(
 
     dispatch('{"tool_name": "Bash"}', BASH_TOOL_NAME)
 
-    assert all_call_paths == ["gh_pr_author_restore.py", "test_failure_recorder.py"]
-
-
-def test_dispatch_runs_the_later_hook_after_an_earlier_one_crashes(
-    monkeypatch: pytest.MonkeyPatch,
-) -> None:
-    all_call_paths: list[str] = []
-
-    def _fake_run_hook(script_path: str, payload_text: str) -> HostedHookRun:
-        del payload_text
-        script_name = Path(script_path).name
-        all_call_paths.append(script_name)
-        if script_name == "gh_pr_author_restore.py":
-            return HostedHookRun(captured_stdout="", did_crash=True)
-        return HostedHookRun(captured_stdout="", did_crash=False)
-
-    monkeypatch.setattr("bash_post_call_dispatcher.run_hook_capturing_output", _fake_run_hook)
-
-    dispatch('{"tool_name": "Bash"}', BASH_TOOL_NAME)
-
-    assert all_call_paths == ["gh_pr_author_restore.py", "test_failure_recorder.py"]
+    assert all_call_paths == ["test_failure_recorder.py"]
 
 
 def test_main_exits_zero_and_writes_nothing_to_stdout(
@@ -85,7 +62,7 @@ def test_main_exits_zero_and_writes_nothing_to_stdout(
 
 
 def test_end_to_end_real_hosted_hooks_record_a_real_pytest_failure(tmp_path: Path) -> None:
-    """Drives the real, unfaked roster: both scripts run in one process."""
+    """Drive the real recorder through the dispatcher."""
     test_file = tmp_path / "test_orders.py"
     test_file.write_text("def test_fulfill(): assert False\n")
     session_id = "post-dispatcher-session"

package/hooks/blocking/test_bash_pre_tool_use_dispatcher.py

@@ -222,7 +222,6 @@ def test_powershell_selects_the_shared_hooks_in_registration_order() -> None:
         "blocking/cursor_cli_python_misfire_blocker.py",
         "blocking/unscoped_search_blocker.py",
         "blocking/pii_prevention_blocker.py",
-        "blocking/pr_description_writer_gate.py",
     ]
 
 
@@ -270,9 +269,7 @@ def test_dispatcher_denies_subshell_disguised_as_arithmetic_expansion() -> None:
     the live Bash tool path.
     """
     payload_text = _bash_payload("echo $((cd /tmp) && pwd)")
-    decision, _reason = _decision_from_stdout(
-        _run_process(_DISPATCHER_SCRIPT, payload_text).stdout
-    )
+    decision, _reason = _decision_from_stdout(_run_process(_DISPATCHER_SCRIPT, payload_text).stdout)
     assert decision == "deny"
 
 

package/hooks/blocking/test_code_rules_command_dispatch.py

@@ -11,7 +11,7 @@ from code_rules_command_dispatch import (  # noqa: E402
     check_unanchored_command_dispatch,
 )
 
-GATE_PATH = "packages/claude-dev-env/hooks/blocking/conventional_pr_title_gate.py"
+GATE_PATH = "packages/claude-dev-env/hooks/blocking/block_main_commit.py"
 
 UNANCHORED_SOURCE = (
     "import re\n"
@@ -84,7 +84,7 @@ def test_ignores_file_outside_hooks_blocking() -> None:
 
 
 def test_ignores_test_file() -> None:
-    test_path = "packages/claude-dev-env/hooks/blocking/test_conventional_pr_title_gate.py"
+    test_path = "packages/claude-dev-env/hooks/blocking/test_block_main_commit.py"
     assert check_unanchored_command_dispatch(UNANCHORED_SOURCE, test_path) == []