claude-dev-env 7.0.0 → 7.1.0

package/hooks/blocking/test_claude_md_orphan_file_blocker.py

@@ -1,1277 +0,0 @@
-"""Tests for claude_md_orphan_file_blocker hook."""
-
-import json
-import importlib
-import os
-import subprocess
-import sys
-import time
-from pathlib import Path
-
-import pytest
-
-_test_file_path = Path(__file__).resolve()
-_blocking_directory = str(_test_file_path.parent)
-_hooks_directory = str(_test_file_path.parent.parent)
-_blocking_directory_key = os.path.normcase(os.path.abspath(_blocking_directory))
-_hooks_directory_key = os.path.normcase(os.path.abspath(_hooks_directory))
-_hooks_directory_origin_key = _hooks_directory_key
-sys.path[:] = [_blocking_directory, _hooks_directory] + [
-    each_path
-    for each_path in sys.path
-    if not isinstance(each_path, str)
-    or os.path.normcase(os.path.abspath(each_path))
-    not in (_blocking_directory_key, _hooks_directory_key)
-]
-importlib.invalidate_caches()
-
-_all_cached_module_prefixes = (
-    "claude_md_orphan_file_blocker",
-    "claude_md_orphan_file_blocker_parts",
-    "inventory_intent_records",
-    "hooks_constants",
-    "code_rules_annotations_length",
-    "code_rules_boolean_mustcheck",
-    "code_rules_naming_collection",
-    "code_rules_path_utils",
-    "code_rules_shared",
-)
-
-
-for each_module_name, each_module in tuple(sys.modules.items()):
-    if not any(
-        each_module_name == each_prefix or each_module_name.startswith(f"{each_prefix}.")
-        for each_prefix in _all_cached_module_prefixes
-    ):
-        continue
-    module_file = getattr(each_module, "__file__", None)
-    is_cached_module_in_this_checkout = False
-    if isinstance(module_file, str):
-        module_file_key = os.path.normcase(str(Path(module_file).resolve()))
-        try:
-            is_cached_module_in_this_checkout = (
-                os.path.commonpath((_hooks_directory_origin_key, module_file_key))
-                == _hooks_directory_origin_key
-            )
-        except ValueError:
-            pass
-    if is_cached_module_in_this_checkout:
-        continue
-    raise ImportError(
-        "test_claude_md_orphan_file_blocker: cached module outside this checkout: "
-        f"{each_module_name} ({module_file!r})"
-    )
-
-import claude_md_orphan_file_blocker as blocker_module
-from claude_md_orphan_file_blocker import (
-    find_missing_filenames,
-    find_referenced_filenames,
-    find_run_command_filenames,
-)
-from code_rules_annotations_length import check_unused_known_pytest_fixture_parameters
-from code_rules_naming_collection import check_collection_prefix
-
-from hooks_constants.claude_md_orphan_file_blocker_constants import (
-    ORPHAN_FILE_ADDITIONAL_CONTEXT,
-    ORPHAN_FILE_MESSAGE_TEMPLATE,
-)
-
-HOOK_SCRIPT_PATH = os.path.join(os.path.dirname(__file__), "claude_md_orphan_file_blocker.py")
-
-REPO_ROOT = Path(__file__).resolve().parents[4]
-
-ONE_SECOND = 1.0
-
-TABLE_WITH_PRESENT_FILE = (
-    "# example\n\n| File | What it does |\n|---|---|\n| `present_module.py` | Does a thing |\n"
-)
-
-TABLE_WITH_ABSENT_FILE = (
-    "# example\n\n| File | What it does |\n|---|---|\n| `reviewer_specs.py` | Does a thing |\n"
-)
-
-TABLE_WITH_ABSENT_README = (
-    "# example\n\n| Document | Purpose |\n|---|---|\n| `README.md` | Overview |\n"
-)
-
-TABLE_WITH_SLASH_COMMAND_AND_SUBDIR = (
-    "# example\n\n"
-    "| Entry | Description |\n"
-    "|---|---|\n"
-    "| `/sr-loop` | Slash command |\n"
-    "| `scripts/` | A subdirectory |\n"
-    "| Plain prose, no backticks | Not a file |\n"
-)
-
-
-class _RunHook:
-    """Helper to test the hook via subprocess, mirroring the sibling test style."""
-
-    def __call__(self, tool_name: str, tool_input: dict) -> subprocess.CompletedProcess:
-        payload = json.dumps({"tool_name": tool_name, "tool_input": tool_input})
-        return subprocess.run(
-            [sys.executable, HOOK_SCRIPT_PATH],
-            input=payload,
-            capture_output=True,
-            text=True,
-            check=False,
-        )
-
-
-_run_hook = _RunHook()
-
-
-def _isolated_claude_md_path(tmp_path: Path) -> Path:
-    """Return a CLAUDE.md path nested in a dedicated empty directory.
-
-    Nesting the CLAUDE.md inside a child of tmp_path keeps the hook's scan root
-    (the CLAUDE.md directory's parent) controlled, so a sibling test's temp
-    content never resolves a filename the case expects to be absent.
-    """
-    isolated_directory = tmp_path / "package_directory"
-    isolated_directory.mkdir()
-    return isolated_directory / "CLAUDE.md"
-
-
-def _run_isolated_test_module_import(
-    driver_setup: str, driver_assertions: str
-) -> subprocess.CompletedProcess:
-    """Import this test module in an isolated interpreter with caller-supplied state."""
-    test_module_path = _test_file_path
-    driver = (
-        "import importlib.util\n"
-        "import os\n"
-        "import site\n"
-        "import sys\n"
-        "from pathlib import Path\n"
-        f"test_module_path = Path({str(test_module_path)!r})\n"
-        "sys.path.append(site.getusersitepackages())\n"
-        f"{driver_setup}"
-        "spec = importlib.util.spec_from_file_location('bootstrap_target_test', test_module_path)\n"
-        "module = importlib.util.module_from_spec(spec)\n"
-        "spec.loader.exec_module(module)\n"
-        f"{driver_assertions}"
-    )
-    return subprocess.run(
-        [sys.executable, "-I", "-c", driver],
-        check=False,
-        capture_output=True,
-        text=True,
-    )
-
-
-def test_import_bootstrap_prioritizes_this_checkout(tmp_path: Path) -> None:
-    foreign_hooks_directory = tmp_path / "foreign_hooks"
-    foreign_blocking_directory = foreign_hooks_directory / "blocking"
-    foreign_constants_directory = foreign_hooks_directory / "hooks_constants"
-    foreign_blocking_directory.mkdir(parents=True)
-    foreign_constants_directory.mkdir()
-    (foreign_blocking_directory / "claude_md_orphan_file_blocker.py").write_text(
-        "raise RuntimeError('foreign blocker loaded')\n", encoding="utf-8"
-    )
-    (foreign_constants_directory / "__init__.py").write_text(
-        "raise RuntimeError('foreign constants loaded')\n", encoding="utf-8"
-    )
-    target_blocking_directory = Path(__file__).resolve().parent
-    target_hooks_directory = target_blocking_directory.parent
-    driver_setup = (
-        f"foreign_blocking_directory = Path({str(foreign_blocking_directory)!r})\n"
-        f"foreign_hooks_directory = Path({str(foreign_hooks_directory)!r})\n"
-        f"target_blocking_directory = Path({str(target_blocking_directory)!r})\n"
-        f"target_hooks_directory = Path({str(target_hooks_directory)!r})\n"
-        "sys.path[:0] = [\n"
-        "    str(foreign_blocking_directory), str(foreign_hooks_directory),\n"
-        "    str(target_blocking_directory), str(target_hooks_directory),\n"
-        "]\n"
-    )
-    driver_assertions = (
-        "import claude_md_orphan_file_blocker\n"
-        "import hooks_constants\n"
-        "assert Path(claude_md_orphan_file_blocker.__file__).resolve().parent "
-        "== target_blocking_directory\n"
-        "assert Path(hooks_constants.__file__).resolve().parent.parent "
-        "== target_hooks_directory\n"
-        "all_uncovered_module_names = [\n"
-        "    each_module_name\n"
-        "    for each_module_name, each_loaded_module in sys.modules.items()\n"
-        "    if each_loaded_module is not module\n"
-        "    and isinstance(getattr(each_loaded_module, '__file__', None), str)\n"
-        "    and Path(each_loaded_module.__file__).resolve().is_relative_to(\n"
-        "        target_hooks_directory\n"
-        "    )\n"
-        "    and not any(\n"
-        "        each_module_name == each_prefix\n"
-        "        or each_module_name.startswith(f'{each_prefix}.')\n"
-        "        for each_prefix in module._all_cached_module_prefixes\n"
-        "    )\n"
-        "]\n"
-        "assert not all_uncovered_module_names, all_uncovered_module_names\n"
-    )
-    completed = _run_isolated_test_module_import(driver_setup, driver_assertions)
-    assert completed.returncode == 0, completed.stderr
-
-
-def test_import_bootstrap_preserves_non_string_path_entries() -> None:
-    completed = _run_isolated_test_module_import(
-        "sys.path.insert(0, None)\n", "assert None in sys.path\n"
-    )
-    assert completed.returncode == 0, completed.stderr
-
-
-def test_import_bootstrap_invalidates_stale_importer_cache() -> None:
-    target_blocking_directory = Path(__file__).resolve().parent
-    driver_setup = (
-        f"target_blocking_directory = Path({str(target_blocking_directory)!r})\n"
-        "sys.path_importer_cache[str(target_blocking_directory)] = None\n"
-    )
-    completed = _run_isolated_test_module_import(driver_setup, "")
-    assert completed.returncode == 0, completed.stderr
-
-
-@pytest.mark.parametrize(
-    "cached_module_name",
-    (
-        "hooks_constants",
-        "claude_md_orphan_file_blocker",
-        "code_rules_path_utils",
-    ),
-)
-def test_import_bootstrap_rejects_foreign_cached_modules(
-    tmp_path: Path, cached_module_name: str
-) -> None:
-    foreign_module_path = tmp_path / "foreign_hooks" / f"{cached_module_name}.py"
-    driver_setup = (
-        "import types\n"
-        f"cached_module_name = {cached_module_name!r}\n"
-        "cached_module = types.ModuleType(cached_module_name)\n"
-        f"cached_module.__file__ = {str(foreign_module_path)!r}\n"
-        "sys.modules[cached_module_name] = cached_module\n"
-    )
-    completed = _run_isolated_test_module_import(driver_setup, "")
-    assert completed.returncode != 0
-    assert f"cached module outside this checkout: {cached_module_name}" in completed.stderr
-
-
-def test_blocks_write_naming_absent_python_file(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": TABLE_WITH_ABSENT_FILE,
-        },
-    )
-    assert result.returncode == 0
-    output = json.loads(result.stdout)
-    assert output["hookSpecificOutput"]["permissionDecision"] == "deny"
-    assert "reviewer_specs.py" in output["hookSpecificOutput"]["permissionDecisionReason"]
-
-
-def test_blocks_write_naming_absent_markdown_file(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": TABLE_WITH_ABSENT_README,
-        },
-    )
-    assert result.returncode == 0
-    output = json.loads(result.stdout)
-    assert output["hookSpecificOutput"]["permissionDecision"] == "deny"
-    assert "README.md" in output["hookSpecificOutput"]["permissionDecisionReason"]
-
-
-def test_allows_write_when_referenced_file_present(tmp_path: Path):
-    (tmp_path / "present_module.py").write_text("x = 1\n", encoding="utf-8")
-    claude_md_path = tmp_path / "CLAUDE.md"
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": TABLE_WITH_PRESENT_FILE,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_allows_non_claude_md_target(tmp_path: Path):
-    other_path = tmp_path / "README.md"
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(other_path),
-            "content": TABLE_WITH_ABSENT_FILE,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_allows_slash_commands_subdirs_and_prose(tmp_path: Path):
-    claude_md_path = tmp_path / "CLAUDE.md"
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": TABLE_WITH_SLASH_COMMAND_AND_SUBDIR,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_blocks_via_edit_new_string(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    result = _run_hook(
-        "Edit",
-        {
-            "file_path": str(claude_md_path),
-            "old_string": "| `old.py` | row |",
-            "new_string": TABLE_WITH_ABSENT_FILE,
-        },
-    )
-    assert result.returncode == 0
-    output = json.loads(result.stdout)
-    assert output["hookSpecificOutput"]["permissionDecision"] == "deny"
-    assert "reviewer_specs.py" in output["hookSpecificOutput"]["permissionDecisionReason"]
-
-
-def test_blocks_via_multiedit_new_string(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    (claude_md_path.parent / "present_module.py").write_text("x = 1\n", encoding="utf-8")
-    result = _run_hook(
-        "MultiEdit",
-        {
-            "file_path": str(claude_md_path),
-            "edits": [
-                {"old_string": "a", "new_string": TABLE_WITH_PRESENT_FILE},
-                {"old_string": "b", "new_string": TABLE_WITH_ABSENT_FILE},
-            ],
-        },
-    )
-    assert result.returncode == 0
-    output = json.loads(result.stdout)
-    assert output["hookSpecificOutput"]["permissionDecision"] == "deny"
-    assert "reviewer_specs.py" in output["hookSpecificOutput"]["permissionDecisionReason"]
-
-
-def test_block_payload_carries_directory_and_system_message(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": TABLE_WITH_ABSENT_FILE,
-        },
-    )
-    assert result.returncode == 0
-    output = json.loads(result.stdout)
-    assert output["suppressOutput"] is True
-    assert isinstance(output["systemMessage"], str)
-    assert len(output["systemMessage"]) > 0
-    assert str(claude_md_path.parent.resolve()) in output["hookSpecificOutput"]["permissionDecisionReason"]
-
-
-def test_allows_file_present_in_subdirectory(tmp_path: Path):
-    workflows_dir = tmp_path / "workflows"
-    workflows_dir.mkdir()
-    (workflows_dir / "pr-check.yml").write_text("name: ci\n", encoding="utf-8")
-    claude_md_path = tmp_path / "CLAUDE.md"
-    content = (
-        "# example\n\n"
-        "| File | Trigger |\n"
-        "|---|---|\n"
-        "| `pr-check.yml` | PR opened |\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_allows_table_declaring_relative_path_source(tmp_path: Path):
-    claude_md_path = tmp_path / "CLAUDE.md"
-    content = (
-        "# example\n\n"
-        "## Shared artifacts (referenced by path, not copied)\n\n"
-        "The skill references shared scripts from `../_shared/pr-loop/scripts/`:\n\n"
-        "| Script | Role |\n"
-        "|---|---|\n"
-        "| `preflight.py` | Pre-flight check |\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_separator_row_is_skipped(tmp_path: Path):
-    claude_md_path = tmp_path / "CLAUDE.md"
-    content = "| File | Note |\n|---|---|\n"
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_relative_path_table_does_not_exempt_sibling_local_table(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    content = (
-        "# example\n\n"
-        "## Local files\n\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `reviewer_specs.py` | Does a thing |\n\n"
-        "## Shared artifacts\n\n"
-        "Referenced from `../_shared/scripts/`:\n\n"
-        "| Script | Role |\n"
-        "|---|---|\n"
-        "| `preflight.py` | Pre-flight check |\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    output = json.loads(result.stdout)
-    assert output["hookSpecificOutput"]["permissionDecision"] == "deny"
-    assert "reviewer_specs.py" in output["hookSpecificOutput"]["permissionDecisionReason"]
-    assert "preflight.py" not in output["hookSpecificOutput"]["permissionDecisionReason"]
-
-
-def test_relative_path_prose_above_its_own_table_exempts_that_table(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    content = (
-        "# example\n\n"
-        "## Shared artifacts\n\n"
-        "Referenced from `../_shared/scripts/`:\n\n"
-        "| Script | Role |\n"
-        "|---|---|\n"
-        "| `preflight.py` | Pre-flight check |\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_edit_to_relative_path_sourced_table_is_allowed(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    claude_md_path.write_text(
-        "# example\n\n"
-        "## Shared artifacts\n\n"
-        "Referenced from `../_shared/scripts/`:\n\n"
-        "| Script | Role |\n"
-        "|---|---|\n"
-        "| `code_rules_gate.py` | Gate |\n",
-        encoding="utf-8",
-    )
-    result = _run_hook(
-        "Edit",
-        {
-            "file_path": str(claude_md_path),
-            "old_string": "| `code_rules_gate.py` | Gate |",
-            "new_string": (
-                "| `code_rules_gate.py` | Gate |\n"
-                "| `preflight.py` | Pre-flight gate that runs before the audit |"
-            ),
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_edit_adding_orphan_to_non_exempt_file_is_denied(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    claude_md_path.write_text(
-        "# example\n\n"
-        "## Local files\n\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `kept.py` | row |\n",
-        encoding="utf-8",
-    )
-    (claude_md_path.parent / "kept.py").write_text("x = 1\n", encoding="utf-8")
-    result = _run_hook(
-        "Edit",
-        {
-            "file_path": str(claude_md_path),
-            "old_string": "| `kept.py` | row |",
-            "new_string": (
-                "| `kept.py` | row |\n| `reviewer_specs.py` | Does a thing |"
-            ),
-        },
-    )
-    assert result.returncode == 0
-    output = json.loads(result.stdout)
-    assert output["hookSpecificOutput"]["permissionDecision"] == "deny"
-    assert "reviewer_specs.py" in output["hookSpecificOutput"]["permissionDecisionReason"]
-
-
-def test_block_lines_yield_their_filenames_when_region_is_not_exempt():
-    content = (
-        "# example\n\n"
-        "## Local files\n\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `alpha.py` | row |\n"
-        "| `beta.py` | row |\n"
-    )
-    assert find_referenced_filenames(content) == ["alpha.py", "beta.py"]
-
-
-def test_block_lines_yield_nothing_when_region_declares_relative_source():
-    content = (
-        "# example\n\n"
-        "Referenced from `../_shared/scripts/`:\n\n"
-        "| Script | Role |\n"
-        "|---|---|\n"
-        "| `preflight.py` | Pre-flight check |\n"
-    )
-    assert find_referenced_filenames(content) == []
-
-
-def test_distant_relative_prose_does_not_exempt_later_local_table():
-    content = (
-        "Intro: see ../shared/ for context.\n\n"
-        "## Local files\n\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `alpha.py` | row |\n"
-    )
-    assert find_referenced_filenames(content) == ["alpha.py"]
-
-
-def test_relative_prose_then_distant_local_table_is_denied(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    content = (
-        "# example\n\n"
-        "Intro: see `../_shared/scripts/` for context.\n\n"
-        "## Local files\n\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `reviewer_specs.py` | Does a thing |\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    output = json.loads(result.stdout)
-    assert output["hookSpecificOutput"]["permissionDecision"] == "deny"
-    assert "reviewer_specs.py" in output["hookSpecificOutput"]["permissionDecisionReason"]
-
-
-def test_corrective_message_names_siblings_under_parent():
-    assert "sibling" in ORPHAN_FILE_MESSAGE_TEMPLATE
-    assert "sibling" in ORPHAN_FILE_ADDITIONAL_CONTEXT
-
-
-def test_every_repo_claude_md_is_not_blocked():
-    all_claude_md_paths = sorted(REPO_ROOT.rglob("CLAUDE.md"))
-    assert all_claude_md_paths, "expected the repo to contain CLAUDE.md files"
-    all_offenders: list[str] = []
-    for each_path in all_claude_md_paths:
-        content = each_path.read_text(encoding="utf-8")
-        missing_filenames = find_missing_filenames(content, each_path.parent)
-        if missing_filenames:
-            all_offenders.append(f"{each_path}: {missing_filenames}")
-    assert not all_offenders, "\n".join(all_offenders)
-
-
-def test_unrelated_edit_over_preexisting_orphan_row_is_allowed(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    (claude_md_path.parent / "kept.py").write_text("x = 1\n", encoding="utf-8")
-    claude_md_path.write_text(
-        "# example\n\n"
-        "A prose paragraph with a typoo to fix.\n\n"
-        "## Local files\n\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `kept.py` | row |\n"
-        "| `already_orphan.py` | pre-existing orphan |\n",
-        encoding="utf-8",
-    )
-    result = _run_hook(
-        "Edit",
-        {
-            "file_path": str(claude_md_path),
-            "old_string": "A prose paragraph with a typoo to fix.",
-            "new_string": "A prose paragraph with a typo fixed.",
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_multiedit_unrelated_change_over_preexisting_orphan_is_allowed(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    (claude_md_path.parent / "kept.py").write_text("x = 1\n", encoding="utf-8")
-    claude_md_path.write_text(
-        "# example\n\n"
-        "First prose paragraph.\n\n"
-        "## Local files\n\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `kept.py` | row |\n"
-        "| `already_orphan.py` | pre-existing orphan |\n",
-        encoding="utf-8",
-    )
-    result = _run_hook(
-        "MultiEdit",
-        {
-            "file_path": str(claude_md_path),
-            "edits": [
-                {"old_string": "First prose paragraph.", "new_string": "Revised prose paragraph."},
-            ],
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_fenced_example_table_row_is_skipped(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    content = (
-        "# example\n\n"
-        "An example table you might write:\n\n"
-        "```\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `ghostfile.py` | example row |\n"
-        "```\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_fenced_table_row_does_not_exempt_a_later_real_row():
-    content = (
-        "# example\n\n"
-        "```\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `ghostfile.py` | fenced example |\n"
-        "```\n\n"
-        "## Local files\n\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `reviewer_specs.py` | real row |\n"
-    )
-    assert find_referenced_filenames(content) == ["reviewer_specs.py"]
-
-
-def test_tilde_fenced_example_table_row_is_skipped():
-    content = (
-        "# example\n\n"
-        "~~~\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `ghostfile.py` | example row |\n"
-        "~~~\n"
-    )
-    assert find_referenced_filenames(content) == []
-
-
-def test_file_present_only_past_the_scan_cap_is_not_missing(
-    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
-):
-    monkeypatch.setattr(blocker_module, "MAX_SUBTREE_FILES_SCANNED", 5)
-    package_directory = tmp_path / "package_directory"
-    package_directory.mkdir()
-    filler_directory = tmp_path / "filler"
-    filler_directory.mkdir()
-    for each_index in range(50):
-        (filler_directory / f"filler_{each_index}.py").write_text("x = 1\n", encoding="utf-8")
-    (package_directory / "real_target.py").write_text("x = 1\n", encoding="utf-8")
-    claude_md_path = package_directory / "CLAUDE.md"
-    content = (
-        "# example\n\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `real_target.py` | a file that genuinely exists |\n"
-    )
-    first_missing = find_missing_filenames(content, claude_md_path.parent)
-    second_missing = find_missing_filenames(content, claude_md_path.parent)
-    assert first_missing == []
-    assert second_missing == []
-
-
-def test_oserror_during_subtree_walk_fails_open(
-    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
-):
-    def _raise_oserror(self, pattern):
-        raise OSError("simulated unreadable directory")
-
-    monkeypatch.setattr(Path, "rglob", _raise_oserror)
-    claude_md_path = tmp_path / "CLAUDE.md"
-    content = (
-        "# example\n\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `reviewer_specs.py` | absent |\n"
-    )
-    missing_filenames = find_missing_filenames(content, claude_md_path.parent)
-    assert missing_filenames == []
-
-
-def test_no_referenced_filenames_performs_no_subtree_walk(
-    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
-):
-    def _fail_if_walked(self, pattern):
-        raise AssertionError("rglob walked the subtree with no filenames to verify")
-
-    monkeypatch.setattr(Path, "rglob", _fail_if_walked)
-    claude_md_path = tmp_path / "CLAUDE.md"
-    content = (
-        "# example\n\n"
-        "| Task | Command |\n"
-        "|---|---|\n"
-        "| Run the tests | npm test |\n"
-    )
-    missing_filenames = find_missing_filenames(content, claude_md_path.parent)
-    assert missing_filenames == []
-
-
-def test_noise_directories_are_excluded_from_the_walk(tmp_path: Path):
-    package_directory = tmp_path / "package_directory"
-    package_directory.mkdir()
-    for each_noise_name in (".git", "__pycache__", "node_modules", ".pytest_cache", ".ruff_cache"):
-        noise_directory = tmp_path / each_noise_name
-        noise_directory.mkdir()
-        (noise_directory / "buried_target.py").write_text("x = 1\n", encoding="utf-8")
-    claude_md_path = package_directory / "CLAUDE.md"
-    content = (
-        "# example\n\n"
-        "| File | Note |\n"
-        "|---|---|\n"
-        "| `buried_target.py` | only present inside noise directories |\n"
-    )
-    missing_filenames = find_missing_filenames(content, claude_md_path.parent)
-    assert missing_filenames == ["buried_target.py"]
-
-
-def test_blocks_write_when_run_command_invokes_absent_script(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    content = (
-        "# example\n\n"
-        "## Running / testing\n\n"
-        "Check environment readiness before a run:\n\n"
-        "```\n"
-        "C:\\Python313\\python.exe test_verification_ready.py\n"
-        "```\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    output = json.loads(result.stdout)
-    assert output["hookSpecificOutput"]["permissionDecision"] == "deny"
-    assert (
-        "test_verification_ready.py"
-        in output["hookSpecificOutput"]["permissionDecisionReason"]
-    )
-
-
-def test_allows_run_command_invoking_present_script(tmp_path: Path):
-    package_directory = tmp_path / "package_directory"
-    package_directory.mkdir()
-    (package_directory / "verify_ready.py").write_text("x = 1\n", encoding="utf-8")
-    claude_md_path = package_directory / "CLAUDE.md"
-    content = (
-        "# example\n\n"
-        "## Running / testing\n\n"
-        "```\n"
-        "C:\\Python313\\python.exe verify_ready.py\n"
-        "```\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_run_command_invoking_path_qualified_present_script_is_allowed(tmp_path: Path):
-    tools_directory = tmp_path / "tools"
-    tools_directory.mkdir()
-    (tools_directory / "verify_themes.py").write_text("x = 1\n", encoding="utf-8")
-    claude_md_path = tools_directory / "CLAUDE.md"
-    content = (
-        "# example\n\n"
-        "## Running / testing\n\n"
-        "```\n"
-        'C:\\Python313\\python.exe "tools/verify_themes.py" path/to/theme.apk\n'
-        "```\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_find_run_command_filenames_reads_only_fenced_interpreter_lines():
-    content = (
-        "# example\n\n"
-        "Run `python live_module.py` inline — this prose line is not a fence.\n\n"
-        "```\n"
-        "C:\\Python313\\python.exe absent_script.py --flag value\n"
-        "node tools/build_bundle.mjs\n"
-        "echo not-a-script\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == [
-        "absent_script.py",
-        "build_bundle.mjs",
-    ]
-
-
-def test_run_command_outside_a_fence_is_not_inspected(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    content = (
-        "# example\n\n"
-        "Run `python absent_script.py` to check readiness.\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_run_command_orphan_reported_via_edit(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    (claude_md_path.parent / "kept.py").write_text("x = 1\n", encoding="utf-8")
-    claude_md_path.write_text(
-        "# example\n\n"
-        "## Running / testing\n\n"
-        "```\n"
-        "C:\\Python313\\python.exe kept.py\n"
-        "```\n",
-        encoding="utf-8",
-    )
-    result = _run_hook(
-        "Edit",
-        {
-            "file_path": str(claude_md_path),
-            "old_string": "C:\\Python313\\python.exe kept.py",
-            "new_string": "C:\\Python313\\python.exe removed_script.py",
-        },
-    )
-    assert result.returncode == 0
-    output = json.loads(result.stdout)
-    assert output["hookSpecificOutput"]["permissionDecision"] == "deny"
-    assert (
-        "removed_script.py"
-        in output["hookSpecificOutput"]["permissionDecisionReason"]
-    )
-
-
-def test_run_command_interpreter_substring_in_word_is_not_matched():
-    content = (
-        "# example\n\n"
-        "```\n"
-        "git stash  # WIP on parse.py\n"
-        "rush build  # then run verify.py\n"
-        "dash run.py\n"
-        "ssh deploy@host ./remote_install.sh\n"
-        "git stash list build.sh\n"
-        "rebash deploy.sh\n"
-        "fish shell run.sh\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == []
-
-
-def test_run_command_standalone_interpreter_still_matches():
-    content = (
-        "# example\n\n"
-        "```\n"
-        "python deploy.py\n"
-        "node build.mjs\n"
-        "C:\\Python313\\python.exe verify_ready.py\n"
-        "bash setup.sh\n"
-        "sh install.sh\n"
-        "node tools/build_bundle.mjs\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == [
-        "deploy.py",
-        "build.mjs",
-        "verify_ready.py",
-        "setup.sh",
-        "install.sh",
-        "build_bundle.mjs",
-    ]
-
-
-def test_run_command_prose_mentioning_interpreter_and_script_yields_nothing():
-    content = (
-        "# example\n\n"
-        "```\n"
-        "python entrypoint crashed inside order_handler.py during startup\n"
-        "python: see config.py for details\n"
-        "node --version  # build.mjs is the entry\n"
-        "python is great; edit build.py later\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == []
-
-
-def test_run_command_invokes_absent_script_is_not_blocked_when_prose(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    content = (
-        "# example\n\n"
-        "## Running / testing\n\n"
-        "```\n"
-        "python entrypoint crashed inside order_handler.py during startup\n"
-        "```\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_run_command_with_module_flag_and_value_still_matches():
-    content = (
-        "# example\n\n"
-        "```\n"
-        "python -m pytest tests/test_foo.py\n"
-        "python script.py --flag value\n"
-        "C:\\Python313\\python.exe \"tools/verify_themes.py\" path/to/theme.apk\n"
-        "node tools/build_bundle.mjs\n"
-        "pwsh build.ps1\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == [
-        "test_foo.py",
-        "script.py",
-        "verify_themes.py",
-        "build_bundle.mjs",
-        "build.ps1",
-    ]
-
-
-def test_run_command_single_valueless_flag_before_path_captures_full_basename():
-    content = (
-        "# example\n\n"
-        "```\n"
-        "pwsh -File scripts/check.ps1\n"
-        "python3 -u app.py\n"
-        "python -u verify_ready.py\n"
-        "bash -c deploy.sh\n"
-        "node --experimental-vm-modules tools/build.mjs\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == [
-        "check.ps1",
-        "app.py",
-        "verify_ready.py",
-        "deploy.sh",
-        "build.mjs",
-    ]
-
-
-def test_allows_run_command_with_valueless_flag_invoking_present_script(tmp_path: Path):
-    scripts_directory = tmp_path / "scripts"
-    scripts_directory.mkdir()
-    (scripts_directory / "check.ps1").write_text("Write-Host ok\n", encoding="utf-8")
-    claude_md_path = scripts_directory / "CLAUDE.md"
-    content = (
-        "# example\n\n"
-        "## Running / testing\n\n"
-        "```\n"
-        "pwsh -File scripts/check.ps1\n"
-        "```\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_run_command_script_valued_flag_does_not_shadow_real_script():
-    content = (
-        "# example\n\n"
-        "```\n"
-        "node -r ./reg.js app.js\n"
-        "node --require setup.js main.js\n"
-        "node --import ./loader.mjs entry.mjs\n"
-        "node --loader ts-node/esm runner.ts\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == [
-        "app.js",
-        "main.js",
-        "entry.mjs",
-        "runner.ts",
-    ]
-
-
-def test_allows_run_command_with_script_valued_flag_invoking_present_script(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    (claude_md_path.parent / "app.js").write_text("console.log('ok');\n", encoding="utf-8")
-    content = (
-        "# example\n\n"
-        "## Running / testing\n\n"
-        "```\n"
-        "node -r ./reg.js app.js\n"
-        "```\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_run_command_chained_commands_each_contribute_their_basename():
-    content = (
-        "# example\n\n"
-        "```\n"
-        "python deploy.py && node build.mjs\n"
-        "python first.py; python second.py\n"
-        "python upstream.py | python downstream.py\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == [
-        "deploy.py",
-        "build.mjs",
-        "first.py",
-        "second.py",
-        "upstream.py",
-        "downstream.py",
-    ]
-
-
-def test_run_command_commented_line_inside_fence_is_skipped():
-    content = (
-        "# example\n\n"
-        "```\n"
-        "# python deploy.py   (commented out)\n"
-        "  # node build.mjs\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == []
-
-
-def test_run_command_with_relative_path_source_is_exempt():
-    content = (
-        "# example\n\n"
-        "```\n"
-        "python ../shared/preflight.py --check\n"
-        "python ../../tools/deploy.py\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == []
-
-
-def test_run_command_relative_prose_region_exempts_bare_basename_command():
-    content = (
-        "# example\n\n"
-        "## Shared scripts (referenced from `../_shared/scripts/`)\n\n"
-        "```\n"
-        "python preflight.py\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == []
-
-
-def test_run_command_relative_prose_region_exempts_run_command_via_write(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    content = (
-        "# example\n\n"
-        "## Shared scripts\n\n"
-        "Referenced from `../_shared/scripts/`:\n\n"
-        "```\n"
-        "python preflight.py\n"
-        "```\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_run_command_relative_prose_does_not_exempt_distant_later_fence():
-    content = (
-        "# example\n\n"
-        "## Shared scripts\n\n"
-        "Referenced from `../_shared/scripts/`:\n\n"
-        "```\n"
-        "python preflight.py\n"
-        "```\n\n"
-        "## Local scripts\n\n"
-        "```\n"
-        "python local_orphan.py\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == ["local_orphan.py"]
-
-
-def test_run_command_relative_prose_does_not_exempt_second_fence_under_same_heading():
-    content = (
-        "# example\n\n"
-        "## Shared scripts\n\n"
-        "Referenced from `../_shared/scripts/`:\n\n"
-        "```\n"
-        "python preflight.py\n"
-        "```\n\n"
-        "Run the local check below:\n\n"
-        "```\n"
-        "python local_orphan.py\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == ["local_orphan.py"]
-
-
-def test_run_command_long_multi_flag_no_script_line_returns_quickly():
-    fenced_flags = " ".join(f"-x{each_index}" for each_index in range(200))
-    content = "# example\n\n```\n" f"python {fenced_flags} endingword" "\n```\n"
-    started_at = time.perf_counter()
-    found_filenames = find_run_command_filenames(content)
-    elapsed_seconds = time.perf_counter() - started_at
-    assert found_filenames == []
-    assert elapsed_seconds < ONE_SECOND
-
-
-def test_run_command_inline_trailing_comment_is_not_scanned():
-    content = (
-        "# example\n\n"
-        "```\n"
-        "python real.py  # was: python old_build.py\n"
-        "```\n"
-    )
-    assert find_run_command_filenames(content) == ["real.py"]
-
-
-def test_run_command_relative_path_exempt_while_bare_orphan_still_blocks(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    content = (
-        "# example\n\n"
-        "## Running / testing\n\n"
-        "```\n"
-        "python ../shared/preflight.py --check\n"
-        "python absent_script.py\n"
-        "```\n"
-    )
-    result = _run_hook(
-        "Write",
-        {
-            "file_path": str(claude_md_path),
-            "content": content,
-        },
-    )
-    assert result.returncode == 0
-    output = json.loads(result.stdout)
-    assert output["hookSpecificOutput"]["permissionDecision"] == "deny"
-    assert "absent_script.py" in output["hookSpecificOutput"]["permissionDecisionReason"]
-    assert "preflight.py" not in output["hookSpecificOutput"]["permissionDecisionReason"]
-
-
-def test_run_command_orphan_preexisting_on_untouched_line_is_allowed(tmp_path: Path):
-    claude_md_path = _isolated_claude_md_path(tmp_path)
-    (claude_md_path.parent / "kept.py").write_text("x = 1\n", encoding="utf-8")
-    claude_md_path.write_text(
-        "# example\n\n"
-        "A prose paragraph with a typoo to fix.\n\n"
-        "## Running / testing\n\n"
-        "```\n"
-        "C:\\Python313\\python.exe kept.py\n"
-        "C:\\Python313\\python.exe already_orphan_script.py\n"
-        "```\n",
-        encoding="utf-8",
-    )
-    result = _run_hook(
-        "Edit",
-        {
-            "file_path": str(claude_md_path),
-            "old_string": "A prose paragraph with a typoo to fix.",
-            "new_string": "A prose paragraph with a typo fixed.",
-        },
-    )
-    assert result.returncode == 0
-    assert result.stdout == ""
-
-
-def test_blocker_module_has_no_collection_parameter_naming_violations():
-    blocker_source = Path(HOOK_SCRIPT_PATH).read_text(encoding="utf-8")
-    assert check_collection_prefix(blocker_source, HOOK_SCRIPT_PATH) == []
-
-
-def test_test_module_has_no_unused_pytest_fixture_parameters():
-    test_file_path = str(Path(__file__).resolve())
-    test_source = Path(test_file_path).read_text(encoding="utf-8")
-    assert check_unused_known_pytest_fixture_parameters(test_source, test_file_path) == []