claude-dev-env 4.2.0 → 7.0.0

package/scripts/tests/test_adapter_configuration.py

@@ -0,0 +1,54 @@
+"""Incremental migration tests for the hook-configuration lint rule."""
+
+from __future__ import annotations
+
+import json
+from dataclasses import replace
+from pathlib import Path
+
+from policy_lint import adapters
+from policy_lint.model import Document
+
+
+def _hook_document(all_commands: list[str], prior_text: str) -> Document:
+    current_text = json.dumps(
+        {
+            "hooks": {
+                "PreToolUse": [
+                    {
+                        "hooks": [
+                            {"command": each_command} for each_command in all_commands
+                        ]
+                    }
+                ]
+            }
+        }
+    )
+    return replace(
+        Document.from_text("hooks/hooks.json", current_text),
+        prior_text=prior_text,
+    )
+
+
+def test_incremental_blocker_removal_is_clean(tmp_path: Path) -> None:
+    prior_text = _hook_document(
+        ["hooks/blocking/first.py", "hooks/blocking/second.py"],
+        '{"hooks": {}}',
+    ).text
+    current_document = _hook_document(
+        ["hooks/blocking/second.py"],
+        prior_text,
+    )
+    assert adapters.hook_configuration_diagnostics(current_document, tmp_path) == ()
+
+
+def test_new_blocker_in_staged_change_is_rejected(tmp_path: Path) -> None:
+    current_document = _hook_document(
+        ["hooks/blocking/new.py"],
+        '{"hooks": {}}',
+    )
+    all_diagnostics = adapters.hook_configuration_diagnostics(
+        current_document, tmp_path
+    )
+    assert len(all_diagnostics) == 1
+    assert all_diagnostics[0].rule_id == "hook-configuration"

package/scripts/tests/test_policy_lint_rules_archive.py

@@ -0,0 +1,120 @@
+"""Archive boundaries for automatic and explicitly requested policy checks."""
+
+from __future__ import annotations
+
+import os
+import subprocess
+from pathlib import Path, PurePosixPath
+
+import pytest
+from policy_lint.engine import _runtime_document_set, lint
+from policy_lint.model import (
+    Diagnostic,
+    Document,
+    DocumentRule,
+    DocumentSet,
+    LintRequest,
+    Location,
+    SelectionKind,
+    Severity,
+    TextDocument,
+)
+
+
+def _git(repository_root: Path, *arguments: str) -> None:
+    environment = {
+        variable_name: variable_text
+        for variable_name, variable_text in os.environ.items()
+        if not variable_name.upper().startswith("GIT_")
+    }
+    subprocess.run(
+        ["git", *arguments], cwd=repository_root, env=environment,
+        check=True, capture_output=True, text=True,
+    )
+
+
+@pytest.fixture
+def archive_repository(tmp_path: Path) -> Path:
+    _git(tmp_path, "init", "--quiet", "-b", "main")
+    _git(tmp_path, "config", "user.name", "Archive Tests")
+    _git(tmp_path, "config", "user.email", "archive@example.invalid")
+    _git(tmp_path, "config", "commit.gpgsign", "false")
+    for relative_path in ("active.py", "skill-archive/old.py", "src/skill-archive/live.py"):
+        file_path = tmp_path / relative_path
+        file_path.parent.mkdir(parents=True, exist_ok=True)
+        file_path.write_text("first\n", encoding="utf-8")
+    _git(tmp_path, "add", ".")
+    _git(tmp_path, "commit", "--quiet", "-m", "archive fixture")
+    for file_path in tmp_path.rglob("*.py"):
+        file_path.write_text("second\n", encoding="utf-8")
+    _git(tmp_path, "add", ".")
+    return tmp_path
+
+
+def _marker_diagnostics(document: Document, repository_root: Path) -> tuple[Diagnostic, ...]:
+    assert (repository_root / document.path).is_file()
+    return (Diagnostic("marker", Severity.ERROR, "Checked document", Location(document.path, 1)),)
+
+
+def _accept_document(document: Document) -> bool:
+    return bool(document.path.parts)
+
+
+def _marker_rule() -> DocumentRule:
+    return DocumentRule(
+        "marker", frozenset({"changed", "repository"}),
+        _accept_document, _marker_diagnostics,
+    )
+
+
+@pytest.mark.parametrize("selection", (SelectionKind.STAGED, SelectionKind.BASE, SelectionKind.REPOSITORY))
+def test_automatic_checks_keep_live_code_and_exclude_only_root_archive(
+    archive_repository: Path, selection: SelectionKind,
+) -> None:
+    requests = {
+        SelectionKind.STAGED: LintRequest.staged(archive_repository),
+        SelectionKind.BASE: LintRequest.base(archive_repository, "HEAD"),
+        SelectionKind.REPOSITORY: LintRequest.repository(archive_repository),
+    }
+    report = lint(requests[selection], all_registry=(_marker_rule(),))
+    assert report.checked_documents == (
+        PurePosixPath("active.py"), PurePosixPath("src/skill-archive/live.py"),
+    )
+    assert len(report.diagnostics) == 2
+    assert report.executed_rules == ("marker",)
+    assert report.exit_code == 1
+
+
+@pytest.mark.parametrize("selection", (SelectionKind.FILES, SelectionKind.TEXT))
+def test_explicit_archive_checks_still_execute_rules(
+    archive_repository: Path, selection: SelectionKind,
+) -> None:
+    archive_path = Path("skill-archive/old.py")
+    request = (
+        LintRequest.files(archive_repository, [archive_path])
+        if selection is SelectionKind.FILES
+        else LintRequest(archive_repository, TextDocument(archive_path, "editor text\n"))
+    )
+    report = lint(request, all_registry=(_marker_rule(),))
+    assert report.checked_documents == (PurePosixPath("skill-archive/old.py"),)
+    assert len(report.diagnostics) == 1
+    assert report.exit_code == 1
+
+
+def test_retirement_and_restoration_preserve_live_change_metadata(tmp_path: Path) -> None:
+    retired_path = PurePosixPath("active/retired.py")
+    archive_path = PurePosixPath("skill-archive/retired.py")
+    restored_source = PurePosixPath("skill-archive/restored.py")
+    restored_path = PurePosixPath("active/restored.py")
+    deleted_path = PurePosixPath("active/deleted.py")
+    document_set = DocumentSet(
+        (Document.from_text(archive_path, "archived"), Document.from_text(restored_path, "restored")),
+        SelectionKind.BASE,
+        tmp_path,
+        (deleted_path, PurePosixPath("skill-archive/deleted.py")),
+        ((retired_path, archive_path), (restored_source, restored_path)),
+    )
+    runtime_set = _runtime_document_set(document_set)
+    assert tuple(document.path for document in runtime_set.documents) == (restored_path,)
+    assert runtime_set.deleted_paths == (deleted_path, retired_path)
+    assert runtime_set.renamed_paths == ((restored_source, restored_path),)

package/scripts/tests/test_policy_lint_rules_engine.py

@@ -10,7 +10,7 @@ from pathlib import Path, PurePosixPath
 import pytest
 from policy_lint import adapters
 from policy_lint.config.constants import INCOMPLETE_EXIT_CODE
-from policy_lint.engine import lint
+from policy_lint.engine import _runtime_document_set, lint
 from policy_lint.model import (
     ContentOrigin,
     Diagnostic,
@@ -309,7 +309,11 @@ def test_state_description_diagnostics_maps_and_scopes_phrases(
     lint_report = _lint_documents(
         tmp_path,
         (source_document,),
-        (_changed_document_rule("state-description", adapters.state_description_diagnostics),),
+        (
+            _changed_document_rule(
+                "state-description", adapters.state_description_diagnostics
+            ),
+        ),
     )
     assert len(lint_report.diagnostics) == 1
     assert lint_report.diagnostics[0].location is not None
@@ -351,8 +355,12 @@ def test_failed_adapter_rolls_back_continues_and_exits_incomplete(
         _source_document("pkg/second.py"),
     )
     all_rules = (
-        _changed_document_rule("flaky", lambda document, _root: _flaky_diagnostics(document)),
-        _changed_document_rule("stable", lambda document, _root: _stable_diagnostics(document)),
+        _changed_document_rule(
+            "flaky", lambda document, _root: _flaky_diagnostics(document)
+        ),
+        _changed_document_rule(
+            "stable", lambda document, _root: _stable_diagnostics(document)
+        ),
     )
     lint_report = _lint_documents(repository_root, all_documents, all_rules)
     assert lint_report.failed_rules == ("flaky",)
@@ -379,3 +387,16 @@ def test_process_interrupt_is_not_swallowed(tmp_path: Path) -> None:
             (_source_document("pkg/mod.py"),),
             (_changed_document_rule("interrupt", interrupt_diagnostics),),
         )
+
+
+def test_runtime_document_set_keeps_base_revision_for_base_selection(
+    tmp_path: Path,
+) -> None:
+    document_set = DocumentSet(
+        (_source_document("pkg/mod.py"),),
+        SelectionKind.BASE,
+        tmp_path,
+        base_revision="abc123def",
+    )
+    runtime_document_set = _runtime_document_set(document_set)
+    assert runtime_document_set.base_revision == "abc123def"

package/scripts/tests/test_policy_lint_rules_installed_loader.py

@@ -0,0 +1,29 @@
+"""Load terminology through the verified installed shared-tree resolver."""
+
+from __future__ import annotations
+
+import sys
+from pathlib import Path
+
+import pytest
+from policy_lint import adapters
+
+
+def test_pr_loop_loader_uses_the_shared_tree_resolver(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    module_name = "policy_fixture_terminology"
+    (tmp_path / f"{module_name}.py").write_text("IS_FIXTURE = True\n", encoding="utf-8")
+    all_calls: list[tuple[object, ...]] = []
+
+    def resolve_directory(*all_arguments: object) -> Path:
+        all_calls.append(all_arguments)
+        return tmp_path
+
+    monkeypatch.setattr(adapters, "resolve_shared_scripts_directory", resolve_directory)
+    monkeypatch.setattr(sys, "path", list(sys.path))
+    loaded = adapters._pr_loop_script_module(module_name)
+    assert loaded.IS_FIXTURE is True
+    assert Path(loaded.__file__).parent == tmp_path
+    assert all_calls[0][2:] == ("pr-loop", f"{module_name}.py", 2)
+    monkeypatch.delitem(sys.modules, module_name)

package/scripts/tests/test_policy_lint_rules_registry.py

@@ -15,6 +15,7 @@ from policy_lint.model import (
     Document,
     DocumentRule,
     DocumentSet,
+    LintReport,
     LintRequest,
     SelectionKind,
 )
@@ -96,6 +97,164 @@ def _terminology_rule() -> ChangeSetRule:
     return terminology_rule
 
 
+def _head_revision(repository_root: Path) -> str:
+    completed = subprocess.run(
+        ("git", "rev-parse", "HEAD"),
+        cwd=repository_root,
+        check=True,
+        capture_output=True,
+        text=True,
+    )
+    return completed.stdout.strip()
+
+
+def _git_add(repository_root: Path, *all_paths: str) -> None:
+    subprocess.run(
+        ("git", "add", *all_paths),
+        cwd=repository_root,
+        check=True,
+        capture_output=True,
+    )
+
+
+def _quota_document_paths(
+    repository_root: Path,
+    source_name: str = "quota.py",
+    documentation_name: str = "README.md",
+) -> tuple[Path, Path]:
+    source_path = repository_root / "src" / source_name
+    documentation_path = repository_root / "docs" / documentation_name
+    source_path.parent.mkdir(parents=True, exist_ok=True)
+    documentation_path.parent.mkdir(parents=True, exist_ok=True)
+    return source_path, documentation_path
+
+
+def _write_text(file_path: Path, text: str) -> None:
+    file_path.write_text(text, encoding="utf-8")
+
+
+def _commit_quota_base(
+    repository_root: Path,
+    source_text: str,
+    documentation_text: str,
+    source_name: str = "quota.py",
+    documentation_name: str = "README.md",
+) -> tuple[Path, Path, str]:
+    _ensure_git_repository(repository_root)
+    source_path, documentation_path = _quota_document_paths(
+        repository_root, source_name, documentation_name
+    )
+    _write_text(source_path, source_text)
+    _write_text(documentation_path, documentation_text)
+    _commit_repository(repository_root, "base")
+    return source_path, documentation_path, _head_revision(repository_root)
+
+
+def _commit_identifier_then_documentation(
+    repository_root: Path,
+    source_path: Path,
+    documentation_path: Path,
+) -> None:
+    _write_text(source_path, "baseline = 1\npremium_request_interactions = 5\n")
+    _commit_repository(repository_root, "identifier")
+    _write_text(
+        documentation_path,
+        "The premium-request-budget field gates the run.\n",
+    )
+    _commit_repository(repository_root, "documentation")
+
+
+def _committed_near_miss_from_base(
+    repository_root: Path,
+) -> tuple[Path, Path, str]:
+    source_path, documentation_path, comparison_revision = _commit_quota_base(
+        repository_root,
+        "baseline = 1\n",
+        "Baseline quota text.\n",
+    )
+    _commit_identifier_then_documentation(
+        repository_root, source_path, documentation_path
+    )
+    return source_path, documentation_path, comparison_revision
+
+
+def _stage_unrelated_index_file(repository_root: Path) -> None:
+    _write_text(repository_root / "staged.txt", "unrelated index content\n")
+    _git_add(repository_root, "--", "staged.txt")
+
+
+def _worktree_and_index_near_miss_repository(repository_root: Path) -> str:
+    source_path, documentation_path, comparison_revision = (
+        _committed_near_miss_from_base(repository_root)
+    )
+    _write_text(
+        source_path,
+        "baseline = 1\npremium_request_interactions = 5\nanother_request_total = 2\n",
+    )
+    _write_text(
+        documentation_path,
+        "The another-request-budget field gates the run.\n",
+    )
+    _git_add(repository_root, "-A")
+    _write_text(
+        documentation_path,
+        "The another-request-total field gates the run.\n",
+    )
+    return comparison_revision
+
+
+def _existing_identifier_from_base(repository_root: Path) -> str:
+    source_path, documentation_path, comparison_revision = _commit_quota_base(
+        repository_root,
+        "premium_request_interactions = 5\n",
+        "Baseline quota text.\n",
+    )
+    _write_text(
+        source_path,
+        "premium_request_interactions = 5\npremium_request_interactions = 6\n",
+    )
+    _write_text(
+        documentation_path,
+        "The premium-request-budget field gates the run.\n",
+    )
+    _commit_repository(repository_root, "existing identifier")
+    return comparison_revision
+
+
+def _renamed_and_deleted_near_miss_from_base(repository_root: Path) -> str:
+    old_source_path, deleted_documentation_path, comparison_revision = (
+        _commit_quota_base(
+            repository_root,
+            "baseline = 1\n",
+            "Obsolete quota text.\n",
+            "old_quota.py",
+            "obsolete.md",
+        )
+    )
+    new_source_path = repository_root / "src" / "new_quota.py"
+    subprocess.run(
+        ("git", "mv", "--", str(old_source_path), str(new_source_path)),
+        cwd=repository_root,
+        check=True,
+        capture_output=True,
+    )
+    _write_text(new_source_path, "baseline = 1\npremium_request_interactions = 5\n")
+    deleted_documentation_path.unlink()
+    _write_text(
+        repository_root / "docs" / "README.md",
+        "The premium-request-budget field gates the run.\n",
+    )
+    _commit_repository(repository_root, "rename and delete")
+    return comparison_revision
+
+
+def _lint_base(repository_root: Path, comparison_revision: str) -> LintReport:
+    return lint(
+        LintRequest.base(repository_root, comparison_revision),
+        all_registry=(_terminology_rule(),),
+    )
+
+
 def test_hook_format_accepts_claude_settings() -> None:
     settings_document = Document.from_text(".claude/settings.json", "{}")
     hooks_document = Document.from_text("hooks/hooks.json", "{}")
@@ -161,7 +320,7 @@ def test_test_pairing_diagnostics_exempts_constants_only_python_modules(
         (
             Document.from_text(
                 "hooks_constants/tool_names.py",
-                "TOOL_NAME: str = \"tool\"\n",
+                'TOOL_NAME: str = "tool"\n',
             ),
         ),
         SelectionKind.STAGED,
@@ -244,9 +403,7 @@ def test_hook_configuration_diagnostics_rejects_registered_action_boundary_path(
         json.dumps(
             {
                 "hooks": {
-                    "PreToolUse": [
-                        {"hooks": [{"command": "hooks/blocking/deny.py"}]}
-                    ]
+                    "PreToolUse": [{"hooks": [{"command": "hooks/blocking/deny.py"}]}]
                 }
             }
         ),
@@ -263,7 +420,9 @@ def test_hook_configuration_diagnostics_ignore_description_text(tmp_path: Path)
         "hooks/hooks.json",
         json.dumps({"description": "blocking safety controls", "hooks": {}}),
     )
-    assert adapters.hook_configuration_diagnostics(configuration_document, tmp_path) == ()
+    assert (
+        adapters.hook_configuration_diagnostics(configuration_document, tmp_path) == ()
+    )
 
 
 def test_hook_configuration_diagnostics_ignore_task_path(tmp_path: Path) -> None:
@@ -271,7 +430,9 @@ def test_hook_configuration_diagnostics_ignore_task_path(tmp_path: Path) -> None
         "hooks/hooks.json",
         json.dumps({"hooks": {"PostToolUse": [{"command": "task_runner.py"}]}}),
     )
-    assert adapters.hook_configuration_diagnostics(configuration_document, tmp_path) == ()
+    assert (
+        adapters.hook_configuration_diagnostics(configuration_document, tmp_path) == ()
+    )
 
 
 def test_registry_omits_native_ruff_mypy_javascript_adapters() -> None:
@@ -291,7 +452,9 @@ def test_registry_registers_unique_python_validator_rule() -> None:
 def test_registry_registers_terminology_change_set_rule() -> None:
     terminology_rule = _terminology_rule()
     assert terminology_rule.rule_sets == _CHANGED_RULE_SETS
-    assert terminology_rule.selections == frozenset({SelectionKind.STAGED})
+    assert terminology_rule.selections == frozenset(
+        {SelectionKind.STAGED, SelectionKind.BASE}
+    )
 
 
 def test_registry_runs_test_pairing_for_staged_and_base_changes() -> None:
@@ -313,10 +476,11 @@ def test_terminology_rule_reports_cross_surface_path_and_line(
         tmp_path,
         "baseline = 1\n",
         "premium_request_interactions = 5\n",
-        "Quota fields use one name.\n"
-        "The premium-request-budget field gates the run.\n",
+        "Quota fields use one name.\nThe premium-request-budget field gates the run.\n",
+    )
+    lint_report = lint(
+        LintRequest.staged(tmp_path), all_registry=(_terminology_rule(),)
     )
-    lint_report = lint(LintRequest.staged(tmp_path), all_registry=(_terminology_rule(),))
 
     assert len(lint_report.diagnostics) == 1
     diagnostic = lint_report.diagnostics[0]
@@ -332,15 +496,65 @@ def test_terminology_rule_suppresses_identifier_present_in_prior_tree(
     _stage_terminology_change(
         tmp_path,
         "premium_request_interactions = 5\n",
-        "premium_request_interactions = 5\n"
-        "premium_request_interactions = 6\n",
+        "premium_request_interactions = 5\npremium_request_interactions = 6\n",
         "The premium-request-budget field gates the run.\n",
     )
-    lint_report = lint(LintRequest.staged(tmp_path), all_registry=(_terminology_rule(),))
+    lint_report = lint(
+        LintRequest.staged(tmp_path), all_registry=(_terminology_rule(),)
+    )
+
+    assert lint_report.diagnostics == ()
+
+
+def test_terminology_rule_reports_committed_changes_from_base(
+    tmp_path: Path,
+) -> None:
+    _, _, comparison_revision = _committed_near_miss_from_base(tmp_path)
+    _stage_unrelated_index_file(tmp_path)
+    lint_report = _lint_base(tmp_path, comparison_revision)
+    assert lint_report.failed_rules == ()
+    assert len(lint_report.diagnostics) == 1
+    assert lint_report.diagnostics[0].location is not None
+    assert lint_report.diagnostics[0].location.path == PurePosixPath("docs/README.md")
+
+
+def test_terminology_base_uses_worktree_while_staged_uses_index(
+    tmp_path: Path,
+) -> None:
+    comparison_revision = _worktree_and_index_near_miss_repository(tmp_path)
+    base_report = _lint_base(tmp_path, comparison_revision)
+    staged_report = lint(
+        LintRequest.staged(tmp_path),
+        all_registry=(_terminology_rule(),),
+    )
+    assert base_report.failed_rules == ()
+    assert staged_report.failed_rules == ()
+    assert base_report.diagnostics == ()
+    assert len(staged_report.diagnostics) == 1
+    assert staged_report.diagnostics[0].location is not None
+    assert staged_report.diagnostics[0].location.path == PurePosixPath("docs/README.md")
 
+
+def test_terminology_base_suppresses_identifier_present_in_comparison_base(
+    tmp_path: Path,
+) -> None:
+    comparison_revision = _existing_identifier_from_base(tmp_path)
+    lint_report = _lint_base(tmp_path, comparison_revision)
+    assert lint_report.failed_rules == ()
     assert lint_report.diagnostics == ()
 
 
+def test_terminology_base_handles_renames_and_deletions(
+    tmp_path: Path,
+) -> None:
+    comparison_revision = _renamed_and_deleted_near_miss_from_base(tmp_path)
+    lint_report = _lint_base(tmp_path, comparison_revision)
+    assert lint_report.failed_rules == ()
+    assert len(lint_report.diagnostics) == 1
+    assert lint_report.diagnostics[0].location is not None
+    assert lint_report.diagnostics[0].location.path == PurePosixPath("docs/README.md")
+
+
 def test_terminology_rule_skips_file_selection(tmp_path: Path) -> None:
     document_set = DocumentSet(
         (Document.from_text("docs/README.md", "text\n"),),

package/scripts/tests/test_policy_lint_selection.py

@@ -28,7 +28,7 @@ def _git_environment() -> dict[str, str]:
     }
 
 
-def _run_git(repository_root: Path, *all_arguments: str) -> None:
+def _git_stdout(repository_root: Path, *all_arguments: str) -> str:
     completed = subprocess.run(
         [constants.GIT_EXECUTABLE, *all_arguments],
         cwd=repository_root,
@@ -38,6 +38,11 @@ def _run_git(repository_root: Path, *all_arguments: str) -> None:
         env=_git_environment(),
     )
     assert completed.returncode == 0, completed.stderr
+    return completed.stdout.strip()
+
+
+def _run_git(repository_root: Path, *all_arguments: str) -> None:
+    _git_stdout(repository_root, *all_arguments)
 
 
 def _initialize_repository(repository_root: Path) -> Path:
@@ -200,7 +205,9 @@ def test_staged_missing_non_delete_blob_should_raise(
 def test_git_blob_unexpected_failure_should_raise(
     tmp_path: Path, monkeypatch: pytest.MonkeyPatch
 ) -> None:
-    def failed_git(*_all_arguments: object, **_all_keywords: object) -> subprocess.CompletedProcess[bytes]:
+    def failed_git(
+        *_all_arguments: object, **_all_keywords: object
+    ) -> subprocess.CompletedProcess[bytes]:
         return subprocess.CompletedProcess(
             args=[constants.GIT_EXECUTABLE],
             returncode=1,
@@ -254,6 +261,22 @@ def test_base_source_should_compare_merge_base_and_read_worktree_bytes(
     assert selected_document.origin == ContentOrigin.REVISION_DIFF
 
 
+def test_base_selection_records_merge_base_revision_and_staged_does_not(
+    tmp_path: Path,
+) -> None:
+    repository_root = _initialize_repository(tmp_path)
+    _commit_text(repository_root, "file.py", "base-text\n")
+    _run_git(repository_root, "checkout", "--quiet", "-b", "feature")
+    _commit_text(repository_root, "file.py", "feature-committed\n")
+
+    merge_base = _git_stdout(repository_root, "merge-base", "main", "HEAD")
+    base_document_set = select_documents(LintRequest.base(repository_root, "main"))
+    staged_document_set = select_documents(LintRequest.staged(repository_root))
+
+    assert base_document_set.base_revision == merge_base
+    assert staged_document_set.base_revision is None
+
+
 def test_repository_source_should_read_tracked_worktree_files_only(
     tmp_path: Path,
 ) -> None:

package/scripts/tests/test_policy_lint_selection_native_index.py

@@ -0,0 +1,30 @@
+"""Preserve Git's active index without accepting repository-directory overrides."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+import pytest
+from policy_lint import selection_git
+
+
+def test_active_git_index_survives_environment_sanitization(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    index_path = tmp_path / "index"
+    monkeypatch.setenv("GIT_INDEX_FILE", str(index_path))
+    monkeypatch.setenv("GIT_DIR", "foreign-repository")
+    monkeypatch.setenv("GIT_WORK_TREE", "foreign-worktree")
+    monkeypatch.setenv("PRESERVED_SETTING", "fixture")
+    active_environment = selection_git._git_subprocess_environment()
+    assert active_environment["GIT_INDEX_FILE"] == str(index_path)
+    assert "GIT_DIR" not in active_environment
+    assert "GIT_WORK_TREE" not in active_environment
+    assert active_environment["PRESERVED_SETTING"] == "fixture"
+
+
+def test_default_index_is_not_replaced_by_an_invented_path(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    monkeypatch.delenv("GIT_INDEX_FILE", raising=False)
+    assert "GIT_INDEX_FILE" not in selection_git._git_subprocess_environment()