claude-dev-env 7.0.0 → 7.1.0

package/hooks/blocking/test_destructive_command_blocker_deny_mode.py

@@ -1,105 +0,0 @@
-"""Tests for the destructive-command-blocker deny mode.
-
-The sandbox runs under ``--dangerously-skip-permissions``, which auto-resolves
-an ``ask`` decision, so only a hard ``deny`` contains a destructive command.
-Setting ``CLAUDE_DESTRUCTIVE_DENY_MODE`` turns the hook's terminal ``ask`` into
-a ``deny`` so the sandbox can be contained.
-"""
-
-from __future__ import annotations
-
-import json
-import subprocess
-import sys
-from pathlib import Path
-
-_BLOCKING_DIRECTORY = Path(__file__).resolve().parent
-if str(_BLOCKING_DIRECTORY) not in sys.path:
-    sys.path.insert(0, str(_BLOCKING_DIRECTORY))
-
-SCRIPT_PATH = _BLOCKING_DIRECTORY / "destructive_command_blocker.py"
-DISPATCHER_PATH = _BLOCKING_DIRECTORY / "bash_pre_tool_use_dispatcher.py"
-
-import _path_setup  # noqa: E402, F401
-
-from test_hook_subprocess_support import (  # noqa: E402
-    build_bash_payload,
-    run_hook_as_subprocess,
-)
-
-
-def _run_hook_with_environment(
-    hook_script_path: Path,
-    command: str,
-    environment_update_by_name: dict[str, str],
-    temporary_home_directory: Path,
-) -> subprocess.CompletedProcess[str]:
-    return run_hook_as_subprocess(
-        hook_script_path=hook_script_path,
-        payload_text=build_bash_payload(command),
-        working_directory=temporary_home_directory,
-        home_directory=temporary_home_directory,
-        all_environment_names_to_remove=("CLAUDE_DESTRUCTIVE_DENY_MODE",),
-        environment_updates_by_name=environment_update_by_name,
-    )
-
-
-def _assert_terminal_response(
-    completed_hook: subprocess.CompletedProcess[str],
-    expected_permission_decision: str,
-    expected_permission_reason: str,
-) -> None:
-    assert completed_hook.returncode == 0
-    assert completed_hook.stderr == ""
-    assert json.loads(completed_hook.stdout) == {
-        "hookSpecificOutput": {
-            "hookEventName": "PreToolUse",
-            "permissionDecision": expected_permission_decision,
-            "permissionDecisionReason": expected_permission_reason,
-        }
-    }
-
-
-def test_rm_rf_denies_when_deny_mode_env_is_set(tmp_path: Path) -> None:
-    completed_hook = _run_hook_with_environment(
-        SCRIPT_PATH,
-        "rm -rf /var/log/myapp",
-        {"CLAUDE_DESTRUCTIVE_DENY_MODE": "1"},
-        tmp_path,
-    )
-    _assert_terminal_response(
-        completed_hook,
-        "deny",
-        "DESTRUCTIVE: rm -rf (destructive recursive forced delete). "
-        "Blocked in deny mode.",
-    )
-
-
-def test_rm_rf_asks_when_deny_mode_env_is_absent(tmp_path: Path) -> None:
-    completed_hook = _run_hook_with_environment(
-        SCRIPT_PATH,
-        "rm -rf /var/log/myapp",
-        {},
-        tmp_path,
-    )
-    _assert_terminal_response(
-        completed_hook,
-        "ask",
-        "DESTRUCTIVE: rm -rf (destructive recursive forced delete). "
-        "Requires explicit user approval.",
-    )
-
-
-def test_dispatcher_short_circuits_on_destructive_deny(tmp_path: Path) -> None:
-    completed_dispatcher = _run_hook_with_environment(
-        DISPATCHER_PATH,
-        "rm -rf /var/log/myapp",
-        {"CLAUDE_DESTRUCTIVE_DENY_MODE": "1"},
-        tmp_path,
-    )
-    _assert_terminal_response(
-        completed_dispatcher,
-        "deny",
-        "DESTRUCTIVE: rm -rf (destructive recursive forced delete). "
-        "Blocked in deny mode.",
-    )

package/hooks/blocking/test_destructive_command_blocker_no_verify.py

@@ -1,122 +0,0 @@
-"""Tests for --no-verify / --no-gpg-sign blocking in destructive_command_blocker.
-
-git-workflow.md:30-33 marks these as NON-NEGOTIABLE to skip — they bypass
-hook signing and verification. The blocker must ASK before allowing them.
-"""
-
-import json
-import sys
-from pathlib import Path
-
-_BLOCKING_DIRECTORY = Path(__file__).resolve().parent
-if str(_BLOCKING_DIRECTORY) not in sys.path:
-    sys.path.insert(0, str(_BLOCKING_DIRECTORY))
-
-import _path_setup  # noqa: E402, F401
-
-from test_hook_subprocess_support import (  # noqa: E402
-    build_bash_payload,
-    run_hook_as_subprocess,
-)
-
-SCRIPT_PATH = _BLOCKING_DIRECTORY / "destructive_command_blocker.py"
-
-
-def test_asks_on_git_commit_no_verify(tmp_path: Path) -> None:
-    result = run_hook_as_subprocess(
-        hook_script_path=SCRIPT_PATH,
-        payload_text=build_bash_payload('git commit -m "wip" --no-verify'),
-        working_directory=tmp_path,
-        home_directory=tmp_path,
-    )
-    response = json.loads(result.stdout)
-    assert response["hookSpecificOutput"]["permissionDecision"] == "ask", (
-        f"Expected ask for git commit --no-verify, got: {response!r}"
-    )
-    assert "no-verify" in response["hookSpecificOutput"]["permissionDecisionReason"], (
-        f"Reason must mention --no-verify, got: {response!r}"
-    )
-
-
-def test_asks_on_git_push_no_verify(tmp_path: Path) -> None:
-    result = run_hook_as_subprocess(
-        hook_script_path=SCRIPT_PATH,
-        payload_text=build_bash_payload("git push --no-verify origin main"),
-        working_directory=tmp_path,
-        home_directory=tmp_path,
-    )
-    response = json.loads(result.stdout)
-    assert response["hookSpecificOutput"]["permissionDecision"] == "ask", (
-        f"Expected ask for git push --no-verify, got: {response!r}"
-    )
-
-
-def test_asks_on_git_no_gpg_sign(tmp_path: Path) -> None:
-    result = run_hook_as_subprocess(
-        hook_script_path=SCRIPT_PATH,
-        payload_text=build_bash_payload("git commit --no-gpg-sign -m wip"),
-        working_directory=tmp_path,
-        home_directory=tmp_path,
-    )
-    response = json.loads(result.stdout)
-    assert response["hookSpecificOutput"]["permissionDecision"] == "ask", (
-        f"Expected ask for git --no-gpg-sign, got: {response!r}"
-    )
-    assert (
-        "no-gpg-sign" in response["hookSpecificOutput"]["permissionDecisionReason"]
-    ), f"Reason must mention --no-gpg-sign, got: {response!r}"
-
-
-def test_asks_on_git_commit_with_no_gpg_sign_config(tmp_path: Path) -> None:
-    result = run_hook_as_subprocess(
-        hook_script_path=SCRIPT_PATH,
-        payload_text=build_bash_payload("git -c commit.gpgsign=false commit -m wip"),
-        working_directory=tmp_path,
-        home_directory=tmp_path,
-    )
-    response = json.loads(result.stdout)
-    assert response["hookSpecificOutput"]["permissionDecision"] == "ask", (
-        f"Expected ask for -c commit.gpgsign=false, got: {response!r}"
-    )
-
-
-def test_asks_on_quoted_gpgsign_config(tmp_path: Path) -> None:
-    result = run_hook_as_subprocess(
-        hook_script_path=SCRIPT_PATH,
-        payload_text=build_bash_payload("git -c 'commit.gpgsign=false' commit -m wip"),
-        working_directory=tmp_path,
-        home_directory=tmp_path,
-    )
-    response = json.loads(result.stdout)
-    assert response["hookSpecificOutput"]["permissionDecision"] == "ask", (
-        f"Expected ask for quoted -c commit.gpgsign=false, got: {response!r}"
-    )
-
-
-def test_asks_on_value_quoted_gpgsign_config(tmp_path: Path) -> None:
-    result = run_hook_as_subprocess(
-        hook_script_path=SCRIPT_PATH,
-        payload_text=build_bash_payload("git -c commit.gpgsign='false' commit -m wip"),
-        working_directory=tmp_path,
-        home_directory=tmp_path,
-    )
-    response = json.loads(result.stdout)
-    assert response["hookSpecificOutput"]["permissionDecision"] == "ask", (
-        f"Expected ask for value-quoted -c commit.gpgsign='false', got: {response!r}"
-    )
-
-
-def test_normal_git_commit_passes(tmp_path: Path) -> None:
-    result = run_hook_as_subprocess(
-        hook_script_path=SCRIPT_PATH,
-        payload_text=build_bash_payload('git commit -m "real commit"'),
-        working_directory=tmp_path,
-        home_directory=tmp_path,
-    )
-    if not result.stdout.strip():
-        return
-    response = json.loads(result.stdout)
-    decision = response.get("hookSpecificOutput", {}).get("permissionDecision", "allow")
-    assert decision != "ask", (
-        f"Normal git commit must not be flagged as destructive, got: {response!r}"
-    )

package/hooks/blocking/test_destructive_command_blocker_patterns.py

@@ -1,133 +0,0 @@
-"""Production-subprocess coverage for destructive command patterns."""
-
-from __future__ import annotations
-
-import json
-import subprocess
-import sys
-import tempfile
-from pathlib import Path
-
-import pytest
-
-_BLOCKING_DIRECTORY = Path(__file__).resolve().parent
-if str(_BLOCKING_DIRECTORY) not in sys.path:
-    sys.path.insert(0, str(_BLOCKING_DIRECTORY))
-
-import _path_setup  # noqa: E402, F401
-
-from hooks_constants.destructive_command_environment_constants import (  # noqa: E402
-    DESTRUCTIVE_DENY_MODE_ENV_VAR,
-    EPHEMERAL_AUTO_ALLOW_DISABLE_ENV_VAR,
-)
-from test_hook_subprocess_support import (  # noqa: E402
-    build_bash_payload,
-    run_hook_as_subprocess,
-)
-
-SCRIPT_PATH = _BLOCKING_DIRECTORY / "destructive_command_blocker.py"
-ALL_DESTRUCTIVE_ENVIRONMENT_NAMES = (
-    DESTRUCTIVE_DENY_MODE_ENV_VAR,
-    EPHEMERAL_AUTO_ALLOW_DISABLE_ENV_VAR,
-)
-
-
-def _run_hook(
-    command: str,
-    working_directory: Path,
-    home_directory: Path,
-) -> subprocess.CompletedProcess[str]:
-    return run_hook_as_subprocess(
-        hook_script_path=SCRIPT_PATH,
-        payload_text=build_bash_payload(command),
-        working_directory=working_directory,
-        home_directory=home_directory,
-        all_environment_names_to_remove=ALL_DESTRUCTIVE_ENVIRONMENT_NAMES,
-    )
-
-
-@pytest.mark.parametrize(
-    ("command", "reason_fragment"),
-    [
-        ("rm -rf /var/log/myapp", "rm -rf"),
-        ("rm --recursive --force /var/log/myapp", "rm --recursive --force"),
-        ("rm -r /", "rm -r on broad path"),
-        ("mkfs.ext4 /dev/sda1", "mkfs"),
-        ("dd if=/tmp/disk.img of=/dev/sda", "dd raw disk write"),
-        ("git reset --hard HEAD~1", "git reset --hard"),
-        ("git push --force origin main", "git push --force"),
-        ("git push -f origin main", "git push -f"),
-        ("git clean -fd", "git clean -fd"),
-        ("git clean -f", "git clean -f"),
-        ("psql -c 'DROP TABLE users'", "DROP TABLE"),
-        ("psql -c 'DROP DATABASE app'", "DROP DATABASE"),
-        ("psql -c 'TRUNCATE TABLE users'", "TRUNCATE TABLE"),
-        ("git commit --no-verify", "git --no-verify"),
-        ("git commit --no-gpg-sign", "git --no-gpg-sign"),
-        ("git -c commit.gpgsign=false commit", "commit.gpgsign=false"),
-    ],
-)
-def test_protected_command_asks_for_approval(
-    command: str,
-    reason_fragment: str,
-    tmp_path: Path,
-) -> None:
-    filesystem_root = Path(Path.cwd().anchor)
-    completed_hook = _run_hook(command, filesystem_root, tmp_path)
-
-    hook_decision_payload = json.loads(completed_hook.stdout)
-    assert completed_hook.returncode == 0
-    assert completed_hook.stderr == ""
-    assert hook_decision_payload["hookSpecificOutput"]["hookEventName"] == "PreToolUse"
-    assert hook_decision_payload["hookSpecificOutput"]["permissionDecision"] == "ask"
-    assert reason_fragment in hook_decision_payload["hookSpecificOutput"][
-        "permissionDecisionReason"
-    ]
-
-
-@pytest.mark.parametrize(
-    "command",
-    [
-        "git status --short",
-        "rm -rf /tmp/destructive-command-blocker/build",
-        "rm -rf /project/worktrees/feature/build",
-        "git push --force origin claude/fix-hook-test",
-    ],
-)
-def test_permitted_command_exits_silently(command: str, tmp_path: Path) -> None:
-    completed_hook = _run_hook(command, tmp_path, tmp_path)
-
-    assert completed_hook.returncode == 0
-    assert completed_hook.stdout == ""
-    assert completed_hook.stderr == ""
-
-
-def test_ephemeral_rm_exits_silently_when_parent_disables_auto_allow(
-    monkeypatch: pytest.MonkeyPatch,
-    tmp_path: Path,
-) -> None:
-    monkeypatch.setenv(EPHEMERAL_AUTO_ALLOW_DISABLE_ENV_VAR, "1")
-
-    with tempfile.TemporaryDirectory(
-        dir=tmp_path,
-        prefix="destructive command blocker ",
-    ) as ephemeral_directory_path:
-        completed_hook = _run_hook(
-            f'rm -rf "{ephemeral_directory_path}"',
-            tmp_path,
-            tmp_path,
-        )
-
-        assert completed_hook.returncode == 0
-        assert completed_hook.stdout == ""
-        assert completed_hook.stderr == ""
-
-
-def test_git_reset_hard_in_ephemeral_project_exits_silently(
-    tmp_path: Path,
-) -> None:
-    completed_hook = _run_hook("git reset --hard HEAD~1", tmp_path, tmp_path)
-
-    assert completed_hook.returncode == 0
-    assert completed_hook.stdout == ""
-    assert completed_hook.stderr == ""