claude-dev-env 4.2.0 → 4.3.0

package/hooks/blocking/pii_prevention_blocker.py

@@ -1,23 +1,18 @@
 #!/usr/bin/env python3
 """PreToolUse hook: block writes, durable posts, and commits that carry PII.
 
-Surfaces guarded:
-
-- Write / Edit / MultiEdit — new content about to land on disk
-- Bash / PowerShell ``gh`` post subcommands and GitHub MCP post tools — durable
-  bodies
-- Bash / PowerShell ``git commit`` (including ``git.exe`` and flag forms) —
-  staged file contents about to become history. Commit message bodies are out
-  of scope; only staged blob text is scanned.
-
-Payload and post-body scanning live in ``pii_payload_scan``; git-commit command
-detection lives in ``pii_commit_command``; both re-export through this entry
-module so the hooks.json wiring and every importer resolve unchanged.
-
-A repository named in ``CLAUDE_PII_EXEMPT_REPOS`` or the ``pii_exempt_repositories``
-list in ``~/.claude/local-identity.json`` skips the staged-commit scan; a
-repository without a readable origin remote is never exempt. Exact values listed
-under ``pii_allowlisted_values`` for a repository's origin slug may pass the
+::
+
+    Write/Edit/MultiEdit  -> scan new disk content
+    gh post / GitHub MCP  -> scan durable bodies
+    git commit            -> scan staged blob text, not the commit message
+
+``pii_payload_scan`` and ``pii_commit_command`` re-export through this
+entry module so hooks.json wiring and importers stay unchanged.
+``CLAUDE_PII_EXEMPT_REPOS`` or ``pii_exempt_repositories`` in
+``~/.claude/local-identity.json`` skip the staged-commit scan. A repo
+without a readable origin remote is never exempt.
+``pii_allowlisted_values`` for a repository origin slug may pass
 Write/Edit and staged-commit scans in that repository only.
 """
 
@@ -56,7 +51,7 @@ try:
     )
     from pii_scanner import is_path_exempt_from_pii_scan, scan_text_for_pii
     from precommit_code_rules_gate import resolve_repository_root
-    from volatile_path_in_post_blocker import (
+    from gh_post_body_texts import (
         extract_gh_post_body_texts_for_privacy_gate,
         extract_mcp_body_texts,
     )
@@ -124,7 +119,8 @@ def list_staged_file_paths(
     try:
         completed_process = subprocess.run(
             list(ALL_STAGED_FILES_COMMAND),
-            check=False, capture_output=True,
+            check=False,
+            capture_output=True,
             text=True,
             timeout=GIT_COMMAND_TIMEOUT_SECONDS,
             cwd=str(repository_root),
@@ -148,7 +144,8 @@ def _git_show_staged_blob(
     try:
         completed_process = subprocess.run(
             list(ALL_STAGED_BLOB_SHOW_COMMAND_PREFIX) + [staged_blob_reference],
-            check=False, capture_output=True,
+            check=False,
+            capture_output=True,
             timeout=GIT_COMMAND_TIMEOUT_SECONDS,
             cwd=str(repository_root),
         )
@@ -197,9 +194,7 @@ def _scan_staged_path(
     repository_root: Path, relative_path: str, all_allowlisted_values: frozenset[str]
 ) -> str | None:
     """Return a deny reason for one staged path, or None when it is clean."""
-    staged_text, unscannable_reason = read_staged_file_text(
-        repository_root, relative_path
-    )
+    staged_text, unscannable_reason = read_staged_file_text(repository_root, relative_path)
     if unscannable_reason is not None:
         return unscannable_reason
     if staged_text is None:
@@ -217,9 +212,9 @@ def _scan_staged_path(
 def evaluate_staged_commit(repository_root: Path) -> str | None:
     """Return a deny reason when staged content carries PII or is unscannable.
 
-    Fail-closed: git list/show failures and unscannable blobs deny the commit
-    rather than treating unread content as clean. A value in the repository's
-    PII allowlist is dropped from the findings, so its commits may carry it.
+    Git list or show failures and unscannable blobs deny the commit. A value
+    in the repository's PII allowlist is dropped from the findings, so its
+    commits may carry it.
 
     Args:
         repository_root: Repository whose index is about to be committed.
@@ -234,22 +229,18 @@ def evaluate_staged_commit(repository_root: Path) -> str | None:
     for each_relative_path in all_relative_paths:
         if is_path_exempt_from_pii_scan(each_relative_path):
             continue
-        deny_reason = _scan_staged_path(
-            repository_root, each_relative_path, all_allowlisted_values
-        )
+        deny_reason = _scan_staged_path(repository_root, each_relative_path, all_allowlisted_values)
         if deny_reason is not None:
             return deny_reason
     return None
 
 
-def _evaluate_commit_staged_content(
-    bash_command: str, working_directory: str | None
-) -> str | None:
+def _evaluate_commit_staged_content(bash_command: str, working_directory: str | None) -> str | None:
     """Scan the staged content of the repository the commit command targets.
 
-    Resolves the repository from the command's ``-C``/``cd`` path, falling back
-    to the session working directory only when the command names none, so a
-    removed cwd never blocks a commit that targets a valid repo.
+    Resolves the repository from the command's ``-C`` or ``cd`` path. Falls
+    back to the session working directory only when the command names none. A
+    removed cwd does not block a commit that targets a valid repo.
 
     Args:
         bash_command: The Bash or PowerShell tool command string.
@@ -259,9 +250,7 @@ def _evaluate_commit_staged_content(
         Deny reason text, or None when the staged content is clean or exempt.
     """
     command_directory = compose_command_working_directory(bash_command)
-    attempted_directory = (
-        command_directory if command_directory is not None else working_directory
-    )
+    attempted_directory = command_directory if command_directory is not None else working_directory
     expanded_directory = expand_user_directory(attempted_directory)
     repository_root = resolve_repository_root(expanded_directory)
     if repository_root is None:
@@ -271,9 +260,7 @@ def _evaluate_commit_staged_content(
     return evaluate_staged_commit(repository_root)
 
 
-def evaluate_bash_command(
-    bash_command: str, working_directory: str | None
-) -> str | None:
+def evaluate_bash_command(bash_command: str, working_directory: str | None) -> str | None:
     """Return a deny reason for a shell gh post or git commit with PII.
 
     Args:
@@ -284,10 +271,8 @@ def evaluate_bash_command(
     Returns:
         Deny reason text, or None when the command is clean or out of scope.
     """
-    all_post_bodies, body_file_failure_reason = (
-        extract_gh_post_body_texts_for_privacy_gate(
-            bash_command, working_directory=working_directory
-        )
+    all_post_bodies, body_file_failure_reason = extract_gh_post_body_texts_for_privacy_gate(
+        bash_command, working_directory=working_directory
     )
     if body_file_failure_reason is not None:
         return body_file_failure_reason
@@ -308,9 +293,7 @@ def _evaluate_shell_tool(
         return None
     working_directory_value = all_tool_input.get("working_directory")
     working_directory = (
-        working_directory_value
-        if isinstance(working_directory_value, str)
-        else None
+        working_directory_value if isinstance(working_directory_value, str) else None
     )
     if working_directory is None:
         cwd_value = payload_by_key.get("cwd")
@@ -332,9 +315,7 @@ def evaluate(payload_by_key: dict[str, object]) -> str | None:
     raw_tool_input = payload_by_key.get("tool_input", {})
     all_tool_input = raw_tool_input if isinstance(raw_tool_input, dict) else {}
     if tool_name in ALL_WRITE_EDIT_MULTI_EDIT_TOOL_NAMES:
-        return evaluate_write_edit_payload(
-            tool_name, all_tool_input, hook_payload=payload_by_key
-        )
+        return evaluate_write_edit_payload(tool_name, all_tool_input, hook_payload=payload_by_key)
     if tool_name == APPLY_PATCH_TOOL_NAME:
         return evaluate_apply_patch_payload(all_tool_input, hook_payload=payload_by_key)
     if tool_name in ALL_SHELL_TOOL_NAMES:

package/hooks/blocking/test_bash_post_call_dispatcher.py

@@ -1,7 +1,7 @@
 """Behavior tests for the Bash PostToolUse dispatcher.
 
 One interpreter start runs every hosted PostToolUse hook a Bash call fires.
-The unit tests pin selection, call order, and crash isolation with a fake
+The unit tests pin selection and call order with a fake
 runner; the end-to-end test drives the real hosted hooks through a real
 payload and confirms the recorder's own real side effect lands.
 ``hooks/conftest.py`` already puts the hooks and blocking directories on
@@ -21,13 +21,10 @@ from hooks_constants.hosted_hook_runner import HostedHookRun
 from tdd_enforcer_parts import content_hash_store
 
 
-def test_select_applicable_entries_returns_both_hosted_hooks_for_bash() -> None:
+def test_select_applicable_entries_returns_the_hosted_hook_for_bash() -> None:
     all_entries = select_applicable_entries(BASH_TOOL_NAME)
     all_script_paths = [each_entry.script_relative_path for each_entry in all_entries]
-    assert all_script_paths == [
-        "blocking/gh_pr_author_restore.py",
-        "observability/test_failure_recorder.py",
-    ]
+    assert all_script_paths == ["observability/test_failure_recorder.py"]
 
 
 def test_select_applicable_entries_returns_none_for_a_write_tool() -> None:
@@ -48,27 +45,7 @@ def test_dispatch_runs_every_hosted_hook_in_roster_order(
 
     dispatch('{"tool_name": "Bash"}', BASH_TOOL_NAME)
 
-    assert all_call_paths == ["gh_pr_author_restore.py", "test_failure_recorder.py"]
-
-
-def test_dispatch_runs_the_later_hook_after_an_earlier_one_crashes(
-    monkeypatch: pytest.MonkeyPatch,
-) -> None:
-    all_call_paths: list[str] = []
-
-    def _fake_run_hook(script_path: str, payload_text: str) -> HostedHookRun:
-        del payload_text
-        script_name = Path(script_path).name
-        all_call_paths.append(script_name)
-        if script_name == "gh_pr_author_restore.py":
-            return HostedHookRun(captured_stdout="", did_crash=True)
-        return HostedHookRun(captured_stdout="", did_crash=False)
-
-    monkeypatch.setattr("bash_post_call_dispatcher.run_hook_capturing_output", _fake_run_hook)
-
-    dispatch('{"tool_name": "Bash"}', BASH_TOOL_NAME)
-
-    assert all_call_paths == ["gh_pr_author_restore.py", "test_failure_recorder.py"]
+    assert all_call_paths == ["test_failure_recorder.py"]
 
 
 def test_main_exits_zero_and_writes_nothing_to_stdout(
@@ -85,7 +62,7 @@ def test_main_exits_zero_and_writes_nothing_to_stdout(
 
 
 def test_end_to_end_real_hosted_hooks_record_a_real_pytest_failure(tmp_path: Path) -> None:
-    """Drives the real, unfaked roster: both scripts run in one process."""
+    """Drive the real recorder through the dispatcher."""
     test_file = tmp_path / "test_orders.py"
     test_file.write_text("def test_fulfill(): assert False\n")
     session_id = "post-dispatcher-session"

package/hooks/blocking/test_bash_pre_tool_use_dispatcher.py

@@ -222,7 +222,6 @@ def test_powershell_selects_the_shared_hooks_in_registration_order() -> None:
         "blocking/cursor_cli_python_misfire_blocker.py",
         "blocking/unscoped_search_blocker.py",
         "blocking/pii_prevention_blocker.py",
-        "blocking/pr_description_writer_gate.py",
     ]
 
 
@@ -270,9 +269,7 @@ def test_dispatcher_denies_subshell_disguised_as_arithmetic_expansion() -> None:
     the live Bash tool path.
     """
     payload_text = _bash_payload("echo $((cd /tmp) && pwd)")
-    decision, _reason = _decision_from_stdout(
-        _run_process(_DISPATCHER_SCRIPT, payload_text).stdout
-    )
+    decision, _reason = _decision_from_stdout(_run_process(_DISPATCHER_SCRIPT, payload_text).stdout)
     assert decision == "deny"
 
 

package/hooks/blocking/test_code_rules_command_dispatch.py

@@ -11,7 +11,7 @@ from code_rules_command_dispatch import (  # noqa: E402
     check_unanchored_command_dispatch,
 )
 
-GATE_PATH = "packages/claude-dev-env/hooks/blocking/conventional_pr_title_gate.py"
+GATE_PATH = "packages/claude-dev-env/hooks/blocking/block_main_commit.py"
 
 UNANCHORED_SOURCE = (
     "import re\n"
@@ -84,7 +84,7 @@ def test_ignores_file_outside_hooks_blocking() -> None:
 
 
 def test_ignores_test_file() -> None:
-    test_path = "packages/claude-dev-env/hooks/blocking/test_conventional_pr_title_gate.py"
+    test_path = "packages/claude-dev-env/hooks/blocking/test_block_main_commit.py"
     assert check_unanchored_command_dispatch(UNANCHORED_SOURCE, test_path) == []
 
 

package/hooks/blocking/test_pii_prevention_blocker.py

@@ -42,6 +42,14 @@ SYNTHETIC_REAL_EMAIL = "owner.fixture@acme-corp.example.io"
 SYNTHETIC_HOME_PATH = r"C:\Users\fixture_commit_user\secret.txt"
 SYNTHETIC_PRIVATE_IP = "10.44.12.9"
 SYNTHETIC_SAFE_BODY = "All checks pass. Contact user@example.com for docs."
+HASH_MARKER = "#"
+
+
+def test_post_body_extraction_has_a_neutral_module_owner() -> None:
+    assert (
+        blocker_module.extract_gh_post_body_texts_for_privacy_gate.__module__
+        == "gh_post_body_texts"
+    )
 
 
 def _run_hook(payload: dict[str, object]) -> tuple[int, str]:
@@ -370,10 +378,7 @@ def test_dispatcher_roster_hosts_pii_blocker() -> None:
         if each_entry.script_relative_path == "blocking/pii_prevention_blocker.py"
     ]
     assert len(matching_bash_entries) == 1
-    assert (
-        matching_bash_entries[0].applicable_tool_names
-        == ALL_BASH_AND_POWERSHELL_TOOL_NAMES
-    )
+    assert matching_bash_entries[0].applicable_tool_names == ALL_BASH_AND_POWERSHELL_TOOL_NAMES
 
 
 def test_is_git_commit_shell_command_covers_windows_and_flag_forms() -> None:
@@ -531,9 +536,7 @@ def test_is_git_commit_shell_command_detects_glued_and_newline_separators() -> N
     assert is_git_commit_shell_command("cd repo&&git commit -m x")
     assert is_git_commit_shell_command("git add notes.md\ngit commit -m update")
     assert is_git_commit_shell_command("git status\ngit commit -m x")
-    assert not is_git_commit_shell_command(
-        "gh pr comment 1 --body 'notes\ngit commit -m x'"
-    )
+    assert not is_git_commit_shell_command("gh pr comment 1 --body 'notes\ngit commit -m x'")
 
 
 def test_is_git_commit_shell_command_detects_backgrounded_commit() -> None:
@@ -681,11 +684,9 @@ def test_argument_bearing_wrapper_commit_scans_staged_pii(tmp_path: Path) -> Non
 
 
 def test_is_git_commit_shell_command_detects_commit_after_hash_bearing_token() -> None:
-    assert is_git_commit_shell_command(
-        "curl https://example.com/page#section && git commit -am x"
-    )
+    command = f"curl https://example.com/page{HASH_MARKER}section && git commit -am x"
+    assert is_git_commit_shell_command(command)
     assert is_git_commit_shell_command("echo done#note && git commit -m x")
-    assert is_git_commit_shell_command('git commit -m "fix #123"')
 
 
 def test_hash_bearing_token_before_commit_scans_staged_pii(tmp_path: Path) -> None:
@@ -721,21 +722,13 @@ def test_is_git_commit_shell_command_detects_unquoted_powershell_command() -> No
 
 
 def test_is_git_commit_shell_command_detects_powershell_preflags_before_command() -> None:
-    assert is_git_commit_shell_command(
-        'pwsh -ExecutionPolicy Bypass -Command "git commit -m x"'
-    )
-    assert is_git_commit_shell_command(
-        'pwsh -NonInteractive -Command "git commit -m x"'
-    )
+    assert is_git_commit_shell_command('pwsh -ExecutionPolicy Bypass -Command "git commit -m x"')
+    assert is_git_commit_shell_command('pwsh -NonInteractive -Command "git commit -m x"')
     assert is_git_commit_shell_command(
         'powershell -ExecutionPolicy Bypass -Command "git commit -m x"'
     )
-    assert is_git_commit_shell_command(
-        'pwsh -NoProfile -NonInteractive -Command "git commit -m x"'
-    )
-    assert not is_git_commit_shell_command(
-        'pwsh -NonInteractive -Command "git status"'
-    )
+    assert is_git_commit_shell_command('pwsh -NoProfile -NonInteractive -Command "git commit -m x"')
+    assert not is_git_commit_shell_command('pwsh -NonInteractive -Command "git status"')
 
 
 def test_is_git_commit_shell_command_detects_subshell_grouped_commit() -> None:
@@ -835,9 +828,7 @@ def test_is_git_commit_shell_command_detects_commit_after_apostrophe_line() -> N
 
 
 def test_is_git_commit_shell_command_ignores_commit_inside_quoted_body() -> None:
-    assert not is_git_commit_shell_command(
-        "gh pr comment 1 --body 'notes\ngit commit -m x'"
-    )
+    assert not is_git_commit_shell_command("gh pr comment 1 --body 'notes\ngit commit -m x'")
 
 
 def test_apostrophe_line_before_commit_scans_staged_pii(tmp_path: Path) -> None:
@@ -873,17 +864,9 @@ def test_powershell_backtick_continuation_commit_scans_staged_pii(
 
 
 def test_extract_git_commit_working_directory_resolves_dash_c_forms() -> None:
-    assert (
-        extract_git_commit_working_directory(r"git.exe -C /repoA commit -m x")
-        == "/repoA"
-    )
-    assert (
-        extract_git_commit_working_directory(r"git -C /repoA commit -m x") == "/repoA"
-    )
-    assert (
-        extract_git_commit_working_directory(r'git -C "C:/repo" commit -m x')
-        == "C:/repo"
-    )
+    assert extract_git_commit_working_directory(r"git.exe -C /repoA commit -m x") == "/repoA"
+    assert extract_git_commit_working_directory(r"git -C /repoA commit -m x") == "/repoA"
+    assert extract_git_commit_working_directory(r'git -C "C:/repo" commit -m x') == "C:/repo"
     assert extract_git_commit_working_directory("git commit -m x") is None
 
 
@@ -921,9 +904,7 @@ def test_exempt_repository_commit_skips_staged_pii_scan(
 ) -> None:
     repository_root = tmp_path / "repo"
     _init_repo_with_staged_email(repository_root)
-    _add_repository_origin(
-        repository_root, "https://github.com/ExemptOwner/exempt-repo.git"
-    )
+    _add_repository_origin(repository_root, "https://github.com/ExemptOwner/exempt-repo.git")
     monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
     deny_reason = evaluate_bash_command(
         "git commit -m test",
@@ -937,9 +918,7 @@ def test_exempt_repository_matches_ssh_origin_url(
 ) -> None:
     repository_root = tmp_path / "repo"
     _init_repo_with_staged_email(repository_root)
-    _add_repository_origin(
-        repository_root, "git@github.com:ExemptOwner/exempt-repo.git"
-    )
+    _add_repository_origin(repository_root, "git@github.com:ExemptOwner/exempt-repo.git")
     monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "exemptowner/EXEMPT-REPO")
     deny_reason = evaluate_bash_command(
         "git commit -m test",
@@ -953,9 +932,7 @@ def test_non_exempt_repository_commit_still_scans_staged_pii(
 ) -> None:
     repository_root = tmp_path / "repo"
     _init_repo_with_staged_email(repository_root)
-    _add_repository_origin(
-        repository_root, "https://github.com/OtherOwner/other-repo.git"
-    )
+    _add_repository_origin(repository_root, "https://github.com/OtherOwner/other-repo.git")
     monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
     deny_reason = evaluate_bash_command(
         "git commit -m test",
@@ -981,45 +958,35 @@ def test_repository_without_origin_is_not_exempt(
 
 def test_owner_repo_slug_from_https_origin_with_git_suffix() -> None:
     assert (
-        blocker_module._owner_repo_slug_from_origin_url(
-            "https://github.com/Owner/repo.git"
-        )
+        blocker_module._owner_repo_slug_from_origin_url("https://github.com/Owner/repo.git")
         == "owner/repo"
     )
 
 
 def test_owner_repo_slug_from_https_origin_without_git_suffix() -> None:
     assert (
-        blocker_module._owner_repo_slug_from_origin_url(
-            "https://github.com/Owner/repo"
-        )
+        blocker_module._owner_repo_slug_from_origin_url("https://github.com/Owner/repo")
         == "owner/repo"
     )
 
 
 def test_owner_repo_slug_from_scp_ssh_origin() -> None:
     assert (
-        blocker_module._owner_repo_slug_from_origin_url(
-            "git@github.com:Owner/repo.git"
-        )
+        blocker_module._owner_repo_slug_from_origin_url("git@github.com:Owner/repo.git")
         == "owner/repo"
     )
 
 
 def test_owner_repo_slug_from_ssh_scheme_origin() -> None:
     assert (
-        blocker_module._owner_repo_slug_from_origin_url(
-            "ssh://git@github.com/Owner/repo.git"
-        )
+        blocker_module._owner_repo_slug_from_origin_url("ssh://git@github.com/Owner/repo.git")
         == "owner/repo"
     )
 
 
 def test_owner_repo_slug_from_trailing_slash_git_suffix() -> None:
     assert (
-        blocker_module._owner_repo_slug_from_origin_url(
-            "https://github.com/Owner/repo.git/"
-        )
+        blocker_module._owner_repo_slug_from_origin_url("https://github.com/Owner/repo.git/")
         == "owner/repo"
     )
 
@@ -1035,9 +1002,7 @@ def test_owner_repo_slug_rejects_spoofed_evil_host() -> None:
 
 def test_owner_repo_slug_rejects_notgithub_com_host() -> None:
     assert (
-        blocker_module._owner_repo_slug_from_origin_url(
-            "https://notgithub.com/Owner/repo.git"
-        )
+        blocker_module._owner_repo_slug_from_origin_url("https://notgithub.com/Owner/repo.git")
         is None
     )
 
@@ -1071,28 +1036,21 @@ def test_owner_repo_slug_rejects_invalid_ssh_port_authority() -> None:
 
 def test_owner_repo_slug_from_https_origin_with_valid_port() -> None:
     assert (
-        blocker_module._owner_repo_slug_from_origin_url(
-            "https://github.com:443/Owner/repo.git"
-        )
+        blocker_module._owner_repo_slug_from_origin_url("https://github.com:443/Owner/repo.git")
         == "owner/repo"
     )
 
 
 def test_owner_repo_slug_from_ssh_origin_with_valid_port() -> None:
     assert (
-        blocker_module._owner_repo_slug_from_origin_url(
-            "ssh://git@github.com:22/Owner/repo.git"
-        )
+        blocker_module._owner_repo_slug_from_origin_url("ssh://git@github.com:22/Owner/repo.git")
         == "owner/repo"
     )
 
 
 def test_owner_repo_slug_rejects_path_shaped_origin() -> None:
     assert (
-        blocker_module._owner_repo_slug_from_origin_url(
-            "C:/repos/ExemptOwner/exempt-repo"
-        )
-        is None
+        blocker_module._owner_repo_slug_from_origin_url("C:/repos/ExemptOwner/exempt-repo") is None
     )
 
 
@@ -1101,9 +1059,7 @@ def test_spoofed_origin_host_still_denies_staged_email(
 ) -> None:
     repository_root = tmp_path / "repo"
     _init_repo_with_staged_email(repository_root)
-    _add_repository_origin(
-        repository_root, "https://evil.test/ExemptOwner/exempt-repo.git"
-    )
+    _add_repository_origin(repository_root, "https://evil.test/ExemptOwner/exempt-repo.git")
     monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
     deny_reason = evaluate_bash_command(
         "git commit -m test",
@@ -1151,9 +1107,7 @@ def test_trailing_slash_git_suffix_origin_still_exempts(
 ) -> None:
     repository_root = tmp_path / "repo"
     _init_repo_with_staged_email(repository_root)
-    _add_repository_origin(
-        repository_root, "https://github.com/ExemptOwner/exempt-repo.git/"
-    )
+    _add_repository_origin(repository_root, "https://github.com/ExemptOwner/exempt-repo.git/")
     monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
     deny_reason = evaluate_bash_command(
         "git commit -m test",
@@ -1162,14 +1116,10 @@ def test_trailing_slash_git_suffix_origin_still_exempts(
     assert deny_reason is None
 
 
-def test_ssh_scheme_origin_still_exempts(
-    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
-) -> None:
+def test_ssh_scheme_origin_still_exempts(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
     repository_root = tmp_path / "repo"
     _init_repo_with_staged_email(repository_root)
-    _add_repository_origin(
-        repository_root, "ssh://git@github.com/ExemptOwner/exempt-repo.git"
-    )
+    _add_repository_origin(repository_root, "ssh://git@github.com/ExemptOwner/exempt-repo.git")
     monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
     deny_reason = evaluate_bash_command(
         "git commit -m test",
@@ -1197,9 +1147,7 @@ def test_post_body_still_scans_when_repository_is_exempt(
     monkeypatch: pytest.MonkeyPatch,
 ) -> None:
     monkeypatch.setenv("CLAUDE_PII_EXEMPT_REPOS", "ExemptOwner/exempt-repo")
-    deny_reason = evaluate_post_body_texts(
-        [f"Reach me at {SYNTHETIC_REAL_EMAIL}"]
-    )
+    deny_reason = evaluate_post_body_texts([f"Reach me at {SYNTHETIC_REAL_EMAIL}"])
     assert deny_reason is not None
     assert "email" in deny_reason