claude-dev-env 8.46.11 → 8.46.13

package/hooks/blocking/code_rules_shared.py

@@ -435,7 +435,9 @@ def is_under_session_scratchpad(file_path: str, hook_payload: dict) -> bool:
     """Return True when file_path resolves under the harness session scratchpad.
 
     One-off scripts written to the session scratchpad are throwaway tooling
-    outside every repo, so the TDD and CODE_RULES gates skip them.
+    outside every repo, so the TDD and CODE_RULES gates skip them. A path at
+    or under the payload's working directory (``cwd``) is never scratch, so a
+    repository worktree checked out inside the scratchpad stays fully gated.
 
     The match keys on the session id — from the payload, or the
     ``CLAUDE_CODE_SESSION_ID`` environment variable — and on the temp-directory
@@ -446,10 +448,12 @@ def is_under_session_scratchpad(file_path: str, hook_payload: dict) -> bool:
 
     Args:
         file_path: The path the write targets.
-        hook_payload: The PreToolUse payload carrying the session id.
+        hook_payload: The PreToolUse payload carrying the session id and the
+            working directory (``cwd``).
 
     Returns:
-        True when file_path's real path sits at or under the session scratchpad.
+        True when file_path's real path sits at or under the session scratchpad
+        and outside the payload's working directory.
     """
     if not file_path:
         return False
@@ -457,6 +461,12 @@ def is_under_session_scratchpad(file_path: str, hook_payload: dict) -> bool:
     if not session_id:
         return False
     real_target = os.path.realpath(file_path)
+    working_directory = str(hook_payload.get("cwd") or "")
+    if working_directory and _is_at_or_under_root(
+        _normalized_absolute_comparison_path(real_target),
+        _normalized_absolute_comparison_path(os.path.realpath(working_directory)),
+    ):
+        return False
     real_temp_root = os.path.realpath(tempfile.gettempdir())
     all_relative_parts = _relative_parts_under_temp_root(real_target, real_temp_root)
     return (

package/hooks/blocking/test_code_rules_shared.py

@@ -262,10 +262,12 @@ def test_is_ephemeral_path_false_for_repository_file(
 ) -> None:
     _simulate_windows_platform(monkeypatch, tmp_path)
     monkeypatch.delenv("CLAUDE_CODE_RULES_DISABLE_EPHEMERAL_EXEMPT", raising=False)
-    repository_file = tmp_path / "repository" / "orders.py"
-    repository_file.parent.mkdir(parents=True)
+    repository_file_outside_temp_root = Path(WORKING_DIRECTORY).parent / "repository" / "orders.py"
 
-    assert _SHARED_MODULE.is_ephemeral_path(str(repository_file), _session_payload()) is False
+    assert (
+        _SHARED_MODULE.is_ephemeral_path(str(repository_file_outside_temp_root), _session_payload())
+        is False
+    )
 
 
 def test_is_ephemeral_path_reads_session_id_from_environment(
@@ -309,3 +311,49 @@ def test_normalized_path_marker_table_carries_no_backslash_entry(
     not the marker, so a backslash entry can never match."""
     marker_table = getattr(_SHARED_MODULE, normalized_marker_table_name)
     assert all("\\" not in each_marker for each_marker in marker_table)
+
+
+def test_ephemeral_path_is_false_for_file_under_payload_cwd_inside_scratchpad(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    _point_temporary_directory_at(monkeypatch, tmp_path)
+    scratchpad_directory = _build_scratchpad_directory(tmp_path)
+    repository_module = scratchpad_directory / "orders.py"
+    payload_with_scratchpad_cwd = {"cwd": str(scratchpad_directory), "session_id": SESSION_ID}
+
+    assert (
+        _SHARED_MODULE.is_ephemeral_path(str(repository_module), payload_with_scratchpad_cwd)
+        is False
+    )
+
+
+def test_scratchpad_is_false_for_worktree_under_payload_cwd(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    _point_temporary_directory_at(monkeypatch, tmp_path)
+    scratchpad_directory = _build_scratchpad_directory(tmp_path)
+    worktree_directory = scratchpad_directory / "worktree"
+    repository_module = worktree_directory / "src" / "orders.py"
+    payload_with_worktree_cwd = {"cwd": str(worktree_directory), "session_id": SESSION_ID}
+
+    assert (
+        _SHARED_MODULE.is_under_session_scratchpad(str(repository_module), payload_with_worktree_cwd)
+        is False
+    )
+
+
+def test_ephemeral_path_stays_true_for_scratchpad_file_outside_payload_cwd(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    _point_temporary_directory_at(monkeypatch, tmp_path)
+    scratchpad_directory = _build_scratchpad_directory(tmp_path)
+    throwaway_script = scratchpad_directory / "one_off_tool.py"
+    payload_with_worktree_cwd = {
+        "cwd": str(scratchpad_directory / "worktree"),
+        "session_id": SESSION_ID,
+    }
+
+    assert _SHARED_MODULE.is_ephemeral_path(str(throwaway_script), _session_payload()) is True
+    assert (
+        _SHARED_MODULE.is_ephemeral_path(str(throwaway_script), payload_with_worktree_cwd) is True
+    )

package/hooks/hooks_constants/thread_spawn_pace_hook_constants.py

@@ -11,7 +11,7 @@ USAGE_PACE_SCRIPT_FILE_NAME = "usage_pace.py"
 USAGE_PACE_TIMEOUT_SECONDS = 15
 
 TOOL_INPUT_KEY = "tool_input"
-THREAD_MODEL_WHEN_OVER_PACE = "opus"
+THREAD_MODEL_WHEN_OVER_PACE = "claude-opus-5-5"
 THREAD_EFFORT_WHEN_OVER_PACE = "low"
 MODEL_INPUT_KEY = "model"
 EFFORT_INPUT_KEY = "effort"
@@ -22,7 +22,7 @@ ADDITIONAL_CONTEXT_KEY = "additionalContext"
 NOT_AN_OBJECT_REASON = "start_thread_session input is not a JSON object"
 RESHAPE_CONTEXT_PREFIX = (
     "Usage over pace or unreadable: this thread spawn now runs on "
-    "opus at low effort. Pace verdict: "
+    "claude-opus-5-5 at low effort. Pace verdict: "
 )
 PACE_VERDICT_CONTEXT_MAXIMUM_CHARACTERS = 600
 LAUNCH_FAILURE_ERROR_TEMPLATE = "usage pace did not finish: {failure_type}"

package/hooks/routing/test_thread_spawn_pace_hook.py

@@ -54,7 +54,7 @@ def _assert_reshaped(stdout: str) -> None:
     assert "permissionDecision" not in decision
     assert decision["updatedInput"] == {
         **SPAWN_INPUT,
-        "model": "opus",
+        "model": "claude-opus-5-5",
         "effort": "low",
     }
 

package/hooks/routing/thread_spawn_pace_hook.py

@@ -8,7 +8,7 @@ beside it, or the script ``COORDINATOR_USAGE_PACE_SCRIPT`` names.
 
     usage under pace (exit 1)          -> no output; the call runs unchanged
     over pace (exit 0) or unreadable   -> updatedInput:
-        model "opus", effort "low"
+        model "claude-opus-5-5", effort "low"
     input that cannot be reshaped      -> deny with a one-line reason
 
 ``updatedInput`` is the whole tool input the call runs with, so it carries
@@ -65,13 +65,13 @@ class SpawnNotReshapable(Exception):
 
 
 def reshape_thread_spawn(tool_input: object) -> dict[str, object]:
-    """Move a thread spawn to the latest Opus at low effort.
+    """Move a thread spawn to Opus 5.5 at low effort.
 
     ::
 
         {"title": "t", "instructions": "Do X."}
         -> {"title": "t", "instructions": "Do X.",
-            "model": "opus", "effort": "low"}
+            "model": "claude-opus-5-5", "effort": "low"}
 
     Args:
         tool_input: The ``tool_input`` object of the start_thread_session call.

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-dev-env",
-    "version": "8.46.11",
+    "version": "8.46.13",
     "description": "Claude Code development standards — rules, hooks, agents, commands, and skills",
     "type": "module",
     "bin": {