claude-dev-env 7.5.0 → 7.6.0

package/_shared/pr-loop/scripts/preflight.py

@@ -48,6 +48,8 @@ from reviews_disabled import (
     is_bugteam_disabled_via_env,
 )
 
+from subprocess_window_access import hidden_window_creation_flags, inherited_stream_startup_info
+
 
 def verify_git_hooks_path(repository_root: Path | None = None) -> int:
     """Check that core.hooksPath resolves to the claude-dev-env git-hooks directory.
@@ -95,6 +97,7 @@ def verify_git_hooks_path(repository_root: Path | None = None) -> int:
             encoding="utf-8",
             errors="replace",
             check=False,
+            creationflags=hidden_window_creation_flags(),
         )
     except FileNotFoundError:
         print(
@@ -201,6 +204,7 @@ def has_discoverable_tests(root: Path) -> bool | None:
             encoding="utf-8",
             errors="replace",
             check=True,
+            creationflags=hidden_window_creation_flags(),
         )
     except FileNotFoundError:
         print(
@@ -260,6 +264,7 @@ def run_pytest(
         command,
         cwd=str(repository_root),
         check=False,
+        startupinfo=inherited_stream_startup_info(),
     )
     if completed.returncode == _pytest_exit_code_no_tests_collected():
         return 0
@@ -302,6 +307,7 @@ def get_changed_files(repository_root: Path, base_ref: str) -> list[Path] | None
             encoding="utf-8",
             errors="replace",
             check=False,
+            creationflags=hidden_window_creation_flags(),
         )
     except FileNotFoundError:
         print(
@@ -398,6 +404,7 @@ def run_pre_commit(repository_root: Path) -> int:
         list(ALL_PRE_COMMIT_RUN_ALL_FILES_COMMAND),
         cwd=str(repository_root),
         check=False,
+        startupinfo=inherited_stream_startup_info(),
     )
     return completed.returncode
 

package/_shared/pr-loop/scripts/preflight_self_heal.py

@@ -24,6 +24,8 @@ from pr_loop_shared_constants.preflight_self_heal_constants import (  # noqa: E4
     ALL_GIT_CONFIG_LOCAL_UNSET_ALL_HOOKS_PATH_ARGUMENTS,
 )
 
+from subprocess_window_access import hidden_window_creation_flags
+
 
 def _is_canonical_hooks_path_entry(
     raw_hooks_path_entry: str,
@@ -71,6 +73,7 @@ def _canonical_global_hooks_path_is_set(expected_hooks_path_suffix: str) -> bool
             encoding="utf-8",
             errors="replace",
             check=False,
+            creationflags=hidden_window_creation_flags(),
         )
     except (FileNotFoundError, OSError):
         return False
@@ -127,6 +130,7 @@ def silently_clear_stale_local_hooks_path_override(
             encoding="utf-8",
             errors="replace",
             check=False,
+            creationflags=hidden_window_creation_flags(),
         )
     except (FileNotFoundError, OSError):
         return
@@ -159,6 +163,7 @@ def silently_clear_stale_local_hooks_path_override(
             encoding="utf-8",
             errors="replace",
             check=False,
+            creationflags=hidden_window_creation_flags(),
         )
     except (FileNotFoundError, OSError):
         return

package/_shared/pr-loop/scripts/run_codex_review.py

@@ -90,6 +90,8 @@ from codex_review_scripts_constants.run_constants import (  # noqa: E402
     VERSION_PROBE_PATTERN,
 )
 
+from subprocess_window_access import hidden_window_creation_flags
+
 
 def _open_codex_popen(
     all_arguments: list[str],
@@ -110,6 +112,7 @@ def _open_codex_popen(
         encoding=stream_encoding if isinstance(stream_encoding, str) else None,
         env=process_environment if isinstance(process_environment, dict) else None,
         start_new_session=should_start_new_session(),
+        creationflags=hidden_window_creation_flags(),
     )
 
 

package/_shared/pr-loop/scripts/subprocess_window_access.py

@@ -0,0 +1,41 @@
+"""Reach the hidden-window helpers from the scripts this directory deploys.
+
+The installer copies this directory into a profile that holds no installed
+Python distribution, and this repository's own tests run the deployed scripts
+under ``python -S -E``, which hides every installed package from the child
+process. On both routes ``hooks_constants`` is reachable only through the
+deployed ``hooks`` directory, so this module puts that directory on
+``sys.path`` and re-exports the helpers a caller asks for::
+
+    from subprocess_window_access import hidden_window_creation_flags
+
+The directory goes on the end of ``sys.path``. ``PathFinder`` runs ahead of
+every editable-install finder, so a trailing entry still selects the deployed
+copy, and the head of ``sys.path`` stays exactly as the caller left it. A
+caller that prepended its own roots keeps them first.
+"""
+
+from __future__ import annotations
+
+import sys
+from pathlib import Path
+
+_subprocess_window_hooks_directory = str(
+    Path(__file__).resolve().parents[3] / "hooks"
+)
+if _subprocess_window_hooks_directory not in sys.path:
+    sys.path.append(_subprocess_window_hooks_directory)
+
+from hooks_constants.subprocess_window import (
+    HiddenWindowStartupInfo,
+    detached_hidden_window_creation_flags,
+    hidden_window_creation_flags,
+    inherited_stream_startup_info,
+)
+
+__all__ = [
+    "HiddenWindowStartupInfo",
+    "detached_hidden_window_creation_flags",
+    "hidden_window_creation_flags",
+    "inherited_stream_startup_info",
+]

package/_shared/pr-loop/scripts/terminology_sweep.py

@@ -75,6 +75,8 @@ from pr_loop_shared_constants.terminology_sweep_constants import (
     TEST_FILE_SUFFIX,
 )
 
+from subprocess_window_access import hidden_window_creation_flags
+
 IdentifierTuple = tuple[str, ...]
 
 
@@ -656,6 +658,7 @@ def _base_tree_names(
                 timeout=GIT_DIFF_SUBPROCESS_TIMEOUT_SECONDS,
                 check=False,
                 env=repository_environment(),
+                creationflags=hidden_window_creation_flags(),
             )
         except (subprocess.TimeoutExpired, FileNotFoundError, OSError):
             continue
@@ -678,6 +681,7 @@ def _run_strict_git(
             timeout=GIT_DIFF_SUBPROCESS_TIMEOUT_SECONDS,
             check=False,
             env=repository_environment(),
+            creationflags=hidden_window_creation_flags(),
         )
     except (subprocess.TimeoutExpired, OSError) as e:
         raise RuntimeError(str(e)) from e
@@ -807,6 +811,7 @@ def staged_terminology_findings(repository_root: Path) -> list[str]:
         timeout=GIT_DIFF_SUBPROCESS_TIMEOUT_SECONDS,
         check=False,
         env=repository_environment(),
+        creationflags=hidden_window_creation_flags(),
     )
     if diff_process.returncode != 0:
         return []

package/_shared/process-tree/scripts/process_tree_kill.py

@@ -39,6 +39,8 @@ from process_tree_scripts_constants.process_tree_kill_constants import (  # noqa
     WINDOWS_TASKKILL_TREE_FLAG,
 )
 
+from subprocess_window_access import hidden_window_creation_flags
+
 process_tree_subprocess_run = subprocess.run
 
 
@@ -73,6 +75,7 @@ def _kill_windows_process_tree(process_identifier: int) -> None:
             stderr=subprocess.DEVNULL,
             check=False,
             timeout=PROCESS_TREE_KILL_TIMEOUT_SECONDS,
+            creationflags=hidden_window_creation_flags(),
         )
     except (subprocess.TimeoutExpired, OSError):
         return

package/_shared/process-tree/scripts/subprocess_window_access.py

@@ -0,0 +1,41 @@
+"""Reach the hidden-window helpers from the scripts this directory deploys.
+
+The installer copies this directory into a profile that holds no installed
+Python distribution, and this repository's own tests run the deployed scripts
+under ``python -S -E``, which hides every installed package from the child
+process. On both routes ``hooks_constants`` is reachable only through the
+deployed ``hooks`` directory, so this module puts that directory on
+``sys.path`` and re-exports the helpers a caller asks for::
+
+    from subprocess_window_access import hidden_window_creation_flags
+
+The directory goes on the end of ``sys.path``. ``PathFinder`` runs ahead of
+every editable-install finder, so a trailing entry still selects the deployed
+copy, and the head of ``sys.path`` stays exactly as the caller left it. A
+caller that prepended its own roots keeps them first.
+"""
+
+from __future__ import annotations
+
+import sys
+from pathlib import Path
+
+_subprocess_window_hooks_directory = str(
+    Path(__file__).resolve().parents[3] / "hooks"
+)
+if _subprocess_window_hooks_directory not in sys.path:
+    sys.path.append(_subprocess_window_hooks_directory)
+
+from hooks_constants.subprocess_window import (
+    HiddenWindowStartupInfo,
+    detached_hidden_window_creation_flags,
+    hidden_window_creation_flags,
+    inherited_stream_startup_info,
+)
+
+__all__ = [
+    "HiddenWindowStartupInfo",
+    "detached_hidden_window_creation_flags",
+    "hidden_window_creation_flags",
+    "inherited_stream_startup_info",
+]

package/bin/install-constants.mjs

@@ -56,8 +56,10 @@ export const RUN_BACKUP_DIRECTORY_NAME_PATTERN =
 export const PACKAGE_AGENTS_HOME_DIRECTORY_NAME = '.agents';
 
 export const PSTACK_MODEL_RULE_FILE_NAME = 'pstack-models.mdc';
-export const PSTACK_CODEX_MODEL_PREFERENCES_FILE_NAME =
-    'pstack-model-preferences.codex.json';
+export const PSTACK_SEEDED_MODEL_PREFERENCES_FILE_NAMES = Object.freeze([
+    'pstack-model-preferences.claude.json',
+    'pstack-model-preferences.codex.json',
+]);
 
 /**
  * The directory name skill directories carry in a package source and under

package/bin/install.cursor-rules.test.mjs

@@ -220,18 +220,60 @@ for (const targetName of [null, 'profile']) {
                 model: 'gpt-5.6-sol',
             });
 
-            const foreignPreferencesPath = join(
+            const claudePreferencesPath = join(
                 resolution.agentsHome,
                 'rules',
                 'pstack-model-preferences.claude.json',
             );
-            writeFileSync(foreignPreferencesPath, JSON.stringify({
+            const seededClaudePreferences = JSON.parse(
+                readFileSync(claudePreferencesPath, 'utf8'),
+            );
+            assert.deepEqual(seededClaudePreferences, {
+                host: 'claude',
+                modelsByRole: {
+                    'feature, refactoring': ['opus'],
+                    'bug-fix': ['opus'],
+                    'perf-issue': ['fable'],
+                    hillclimb: ['fable'],
+                    'judgment and prose': ['fable'],
+                    'hardest tasks': ['fable'],
+                    'how explorer': ['sonnet'],
+                    'how explainer': ['opus'],
+                    'how critics': ['sonnet', 'opus', 'fable'],
+                    'why investigators': ['sonnet'],
+                    'why synthesizer': ['fable'],
+                    'reflect tooling': ['opus'],
+                    'reflect judgment, divergent, synthesizer': ['fable'],
+                    'arena runners': ['sonnet', 'opus', 'fable'],
+                    'arena cross-judge pool': ['opus', 'fable'],
+                    'swarm workers': ['sonnet'],
+                    'architect runners': ['opus', 'fable'],
+                    'interrogate reviewers': ['sonnet', 'opus', 'fable'],
+                },
+            });
+            const claudeSelection = runSelector(selectorPath, {
+                host: 'claude',
+                inventoryHost: 'claude',
+                role: 'swarm workers',
+                delegationIndex: 0,
+                availableModelIds: ['sonnet', 'opus', 'fable'],
+                confirmedSuitableModelIds: [],
+                parentFallback: {
+                    isAllowed: false,
+                    hasMaterialCapabilityLoss: false,
+                },
+            });
+            assert.deepEqual(claudeSelection.nativeSpawnArguments, {
+                model: 'sonnet',
+            });
+
+            writeFileSync(claudePreferencesPath, JSON.stringify({
                 host: 'claude',
                 modelsByRole: {
                     'feature, refactoring': ['confirmed-claude-model'],
                 },
             }));
-            const foreignSelection = runSelector(selectorPath, {
+            const editedClaudeSelection = runSelector(selectorPath, {
                 host: 'claude',
                 inventoryHost: 'claude',
                 role: 'feature, refactoring',
@@ -243,7 +285,7 @@ for (const targetName of [null, 'profile']) {
                     hasMaterialCapabilityLoss: false,
                 },
             });
-            assert.deepEqual(foreignSelection.nativeSpawnArguments, {
+            assert.deepEqual(editedClaudeSelection.nativeSpawnArguments, {
                 model: 'confirmed-claude-model',
             });
 
@@ -251,7 +293,7 @@ for (const targetName of [null, 'profile']) {
             assert.equal(manifest.files.includes(sharedPath), true);
             assert.equal(manifest.files.includes(managedSelectorPath), true);
             assert.equal(manifest.files.includes(preferencesPath), false);
-            assert.equal(manifest.files.includes(foreignPreferencesPath), false);
+            assert.equal(manifest.files.includes(claudePreferencesPath), false);
 
             writeFileSync(sharedPath, 'stale');
             writeFileSync(preferencesPath, JSON.stringify({
@@ -268,7 +310,7 @@ for (const targetName of [null, 'profile']) {
                 ['user-edited-codex-model'],
             );
             assert.deepEqual(
-                JSON.parse(readFileSync(foreignPreferencesPath, 'utf8'))
+                JSON.parse(readFileSync(claudePreferencesPath, 'utf8'))
                     .modelsByRole['feature, refactoring'],
                 ['confirmed-claude-model'],
             );
@@ -295,7 +337,7 @@ for (const targetName of [null, 'profile']) {
             assert.equal(existsSync(cursorPath), false);
             assert.equal(existsSync(selectorPath), false);
             assert.equal(existsSync(preferencesPath), true);
-            assert.equal(existsSync(foreignPreferencesPath), true);
+            assert.equal(existsSync(claudePreferencesPath), true);
         } finally {
             rmSync(homeDirectory, { recursive: true, force: true });
         }
@@ -317,21 +359,21 @@ test('a blocked shared rule destination rolls back generated Cursor files', () =
     }
 });
 
-test('a failed install rolls back a newly seeded Codex preference file', () => {
+test('a failed install rolls back newly seeded host preference files', () => {
     const homeDirectory = mkdtempSync(join(tmpdir(), 'cdev-pstack-seed-rollback-'));
     try {
-        const preferencesPath = join(
-            homeDirectory,
-            '.agents',
-            'rules',
-            'pstack-model-preferences.codex.json',
-        );
+        const preferencesDirectory = join(homeDirectory, '.agents', 'rules');
         assert.throws(() => runInstaller(
             homeDirectory,
             ['--only', 'core'],
             { CLAUDE_DEV_ENV_INSTALL_FAULT: 'after_file_staging' },
         ));
-        assert.equal(existsSync(preferencesPath), false);
+        for (const hostName of ['claude', 'codex']) {
+            assert.equal(
+                existsSync(join(preferencesDirectory, 'pstack-model-preferences.' + hostName + '.json')),
+                false,
+            );
+        }
     } finally {
         rmSync(homeDirectory, { recursive: true, force: true });
     }

package/bin/install.mjs

@@ -34,7 +34,7 @@ import {
     CURSOR_SYNC_SCRIPT_FILE_NAME,
     CURSOR_RULES_DIRECTORY_NAME,
     PSTACK_MODEL_RULE_FILE_NAME,
-    PSTACK_CODEX_MODEL_PREFERENCES_FILE_NAME,
+    PSTACK_SEEDED_MODEL_PREFERENCES_FILE_NAMES,
     WINDOWS_PYTHON_LAUNCHER_COMMAND,
     PYTHON_PROBE_TIMEOUT_MILLISECONDS,
 } from './install-constants.mjs';
@@ -491,17 +491,10 @@ export function refreshInstalledPstackPluginManifest(
     return join(pluginRoot, PSTACK_PLUGIN_MANIFEST_RELATIVE_PATH);
 }
 
-function seedCodexPstackPreferences() {
+function seedPstackPreferences(preferenceFileName) {
     const preferenceDirectory = join(AGENTS_HOME, CURSOR_RULES_DIRECTORY_NAME);
-    const preferencePath = join(
-        preferenceDirectory,
-        PSTACK_CODEX_MODEL_PREFERENCES_FILE_NAME,
-    );
-    const preferenceSource = join(
-        PACKAGE_ROOT,
-        'bin',
-        PSTACK_CODEX_MODEL_PREFERENCES_FILE_NAME,
-    );
+    const preferencePath = join(preferenceDirectory, preferenceFileName);
+    const preferenceSource = join(PACKAGE_ROOT, 'bin', preferenceFileName);
     mkdirSync(preferenceDirectory, { recursive: true });
     try {
         copyFileSync(
@@ -2756,10 +2749,12 @@ function executeInstallPlanMutations(plan, transactionHelpers) {
         copyFileSync(pstackRuleSource, sharedRulePath);
         allInstalledFiles.push(sharedRulePath);
         syncWrittenPaths(allInstalledFiles);
-        const seededPreferencePath = seedCodexPstackPreferences();
-        if (seededPreferencePath) {
-            allInstalledFiles.push(seededPreferencePath);
-            allUserOwnedPreferencePaths.add(seededPreferencePath);
+        for (const eachPreferenceFileName of PSTACK_SEEDED_MODEL_PREFERENCES_FILE_NAMES) {
+            const seededPreferencePath = seedPstackPreferences(eachPreferenceFileName);
+            if (seededPreferencePath) {
+                allInstalledFiles.push(seededPreferencePath);
+                allUserOwnedPreferencePaths.add(seededPreferencePath);
+            }
         }
         syncWrittenPaths(allInstalledFiles);
     }

package/bin/pstack-model-preferences.claude.json

@@ -0,0 +1,23 @@
+{
+    "host": "claude",
+    "modelsByRole": {
+        "feature, refactoring": ["opus"],
+        "bug-fix": ["opus"],
+        "perf-issue": ["fable"],
+        "hillclimb": ["fable"],
+        "judgment and prose": ["fable"],
+        "hardest tasks": ["fable"],
+        "how explorer": ["sonnet"],
+        "how explainer": ["opus"],
+        "how critics": ["sonnet", "opus", "fable"],
+        "why investigators": ["sonnet"],
+        "why synthesizer": ["fable"],
+        "reflect tooling": ["opus"],
+        "reflect judgment, divergent, synthesizer": ["fable"],
+        "arena runners": ["sonnet", "opus", "fable"],
+        "arena cross-judge pool": ["opus", "fable"],
+        "swarm workers": ["sonnet"],
+        "architect runners": ["opus", "fable"],
+        "interrogate reviewers": ["sonnet", "opus", "fable"]
+    }
+}

package/hooks/advisory/pr_done_reminder.py

@@ -36,6 +36,12 @@ import subprocess
 import sys
 from pathlib import Path
 
+_subprocess_window_hooks_directory = str(Path(__file__).resolve().parents[2] / "hooks")
+if _subprocess_window_hooks_directory not in sys.path:
+    sys.path.append(_subprocess_window_hooks_directory)
+
+from hooks_constants.subprocess_window import hidden_window_creation_flags
+
 try:
     _hooks_root_directory = str(Path(__file__).resolve().parent.parent)
     if _hooks_root_directory not in sys.path:
@@ -294,6 +300,7 @@ def _probe_pull_request(cwd: str) -> str | None:
             errors="replace",
             timeout=GH_PR_VIEW_TIMEOUT_SECONDS,
             check=False,
+            creationflags=hidden_window_creation_flags(),
         )
     except (OSError, subprocess.TimeoutExpired):
         return None

package/hooks/advisory/refactor_guard.py

@@ -11,6 +11,12 @@ import sys
 from collections import Counter
 from pathlib import Path
 
+_subprocess_window_hooks_directory = str(Path(__file__).resolve().parents[2] / "hooks")
+if _subprocess_window_hooks_directory not in sys.path:
+    sys.path.append(_subprocess_window_hooks_directory)
+
+from hooks_constants.subprocess_window import hidden_window_creation_flags
+
 try:
     hooks_root_directory = str(Path(__file__).resolve().parent.parent)
     if hooks_root_directory not in sys.path:
@@ -62,6 +68,7 @@ def _read_added_lines_from_git(all_git_arguments: tuple[str, ...], file_path: st
             timeout=GIT_COMMAND_TIMEOUT_SECONDS,
             cwd=working_directory,
             env=_git_environment(),
+            creationflags=hidden_window_creation_flags(),
         )
     except (subprocess.TimeoutExpired, FileNotFoundError, OSError):
         return []
@@ -106,6 +113,7 @@ def is_new_file(file_path: str) -> bool:
             timeout=GIT_COMMAND_TIMEOUT_SECONDS,
             cwd=working_directory,
             env=_git_environment(),
+            creationflags=hidden_window_creation_flags(),
         )
     except (subprocess.TimeoutExpired, FileNotFoundError, OSError):
         return False

package/hooks/advisory/test_pr_done_reminder.py

@@ -28,6 +28,10 @@ except ImportError as import_error:
     ) from import_error
 
 
+WINDOWS_NO_WINDOW_FLAG = 0x08000000
+EXPECTED_HIDDEN_WINDOW_FLAGS = WINDOWS_NO_WINDOW_FLAG if sys.platform == "win32" else 0
+
+
 _CLEAN_PR_OBJECT: dict[str, object] = {
     "number": 42,
     "url": "https://github.com/acme/widgets/pull/42",
@@ -248,3 +252,20 @@ def test_main_should_stay_quiet_on_any_other_gh_failure(
 
     assert _run_main(monkeypatch, capsys, _payload("git push"), gh_down) == ""
 
+
+
+def test_gh_probe_should_start_without_a_console_window(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str]
+) -> None:
+    all_recorded_keyword_arguments: dict[str, object] = {}
+
+    def _record(*args: object, **kwargs: object) -> subprocess.CompletedProcess[str]:
+        del args
+        all_recorded_keyword_arguments.update(kwargs)
+        return subprocess.CompletedProcess(
+            [], 0, stdout=json.dumps(_CLEAN_PR_OBJECT), stderr=""
+        )
+
+    _run_main(monkeypatch, capsys, _payload("git push"), _record)
+
+    assert all_recorded_keyword_arguments["creationflags"] == EXPECTED_HIDDEN_WINDOW_FLAGS

package/hooks/advisory/test_refactor_guard.py

@@ -9,9 +9,12 @@ return no added lines, so a qualifying rename is eligible without fixture setup.
 
 from __future__ import annotations
 
+import subprocess
 import sys
 from pathlib import Path
 
+import pytest
+
 try:
     _ADVISORY_DIRECTORY = Path(__file__).resolve().parent
     if str(_ADVISORY_DIRECTORY) not in sys.path:
@@ -25,6 +28,10 @@ except ImportError as import_error:
     ) from import_error
 
 
+WINDOWS_NO_WINDOW_FLAG = 0x08000000
+EXPECTED_HIDDEN_WINDOW_FLAGS = WINDOWS_NO_WINDOW_FLAG if sys.platform == "win32" else 0
+
+
 def _multi_edit_payload(file_path: str, all_edits: list[dict[str, str]]) -> dict[str, object]:
     return {
         "tool_name": "MultiEdit",
@@ -85,3 +92,36 @@ def test_multi_edit_returns_none_when_no_edit_qualifies(tmp_path: Path) -> None:
     )
 
     assert refactor_guard._multi_edit_refactor_advisory_description(payload) is None
+
+
+def _record_creation_flags(
+    monkeypatch: pytest.MonkeyPatch, standard_output: str
+) -> dict[str, object]:
+    all_recorded_keyword_arguments: dict[str, object] = {}
+
+    def _record(*args: object, **kwargs: object) -> subprocess.CompletedProcess[str]:
+        del args
+        all_recorded_keyword_arguments.update(kwargs)
+        return subprocess.CompletedProcess([], 0, stdout=standard_output, stderr="")
+
+    monkeypatch.setattr(refactor_guard.subprocess, "run", _record)
+    return all_recorded_keyword_arguments
+
+
+def test_git_diff_should_start_without_a_console_window(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    all_recorded_keyword_arguments = _record_creation_flags(monkeypatch, "+added line\n")
+
+    refactor_guard.get_git_diff_added_lines(str(tmp_path / "module.py"))
+
+    assert all_recorded_keyword_arguments["creationflags"] == EXPECTED_HIDDEN_WINDOW_FLAGS
+
+
+def test_untracked_probe_should_start_without_a_console_window(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    all_recorded_keyword_arguments = _record_creation_flags(monkeypatch, "module.py\n")
+
+    assert refactor_guard.is_new_file(str(tmp_path / "module.py")) is True
+    assert all_recorded_keyword_arguments["creationflags"] == EXPECTED_HIDDEN_WINDOW_FLAGS

package/hooks/blocking/block_main_commit.py

@@ -23,6 +23,8 @@ if _hooks_dir not in sys.path:
 
 from hooks_constants.hook_block_logger import log_hook_block  # noqa: E402
 
+from hooks_constants.subprocess_window import hidden_window_creation_flags
+
 GIT_COMMAND_TIMEOUT_SECONDS = 5
 PROTECTED_BRANCHES = ("main", "master")
 PROTECTED_REMOTE_PATTERNS: list[str] = []
@@ -111,6 +113,7 @@ def get_branch_at_directory(working_dir: str | None = None) -> str | None:
             text=True,
             timeout=GIT_COMMAND_TIMEOUT_SECONDS,
             cwd=working_dir,
+            creationflags=hidden_window_creation_flags(),
         )
         if completed_process.returncode == 0:
             return completed_process.stdout.strip()
@@ -130,6 +133,7 @@ def is_protected_repo(working_dir: str | None = None) -> bool:
             text=True,
             timeout=GIT_COMMAND_TIMEOUT_SECONDS,
             cwd=working_dir,
+            creationflags=hidden_window_creation_flags(),
         )
         if completed_process.returncode == 0:
             remote_url = completed_process.stdout.strip()