claude-dev-env 8.46.12 → 8.46.14

package/hooks/blocking/code_rules_shared.py

@@ -435,7 +435,9 @@ def is_under_session_scratchpad(file_path: str, hook_payload: dict) -> bool:
     """Return True when file_path resolves under the harness session scratchpad.
 
     One-off scripts written to the session scratchpad are throwaway tooling
-    outside every repo, so the TDD and CODE_RULES gates skip them.
+    outside every repo, so the TDD and CODE_RULES gates skip them. A path at
+    or under the payload's working directory (``cwd``) is never scratch, so a
+    repository worktree checked out inside the scratchpad stays fully gated.
 
     The match keys on the session id — from the payload, or the
     ``CLAUDE_CODE_SESSION_ID`` environment variable — and on the temp-directory
@@ -446,10 +448,12 @@ def is_under_session_scratchpad(file_path: str, hook_payload: dict) -> bool:
 
     Args:
         file_path: The path the write targets.
-        hook_payload: The PreToolUse payload carrying the session id.
+        hook_payload: The PreToolUse payload carrying the session id and the
+            working directory (``cwd``).
 
     Returns:
-        True when file_path's real path sits at or under the session scratchpad.
+        True when file_path's real path sits at or under the session scratchpad
+        and outside the payload's working directory.
     """
     if not file_path:
         return False
@@ -457,6 +461,12 @@ def is_under_session_scratchpad(file_path: str, hook_payload: dict) -> bool:
     if not session_id:
         return False
     real_target = os.path.realpath(file_path)
+    working_directory = str(hook_payload.get("cwd") or "")
+    if working_directory and _is_at_or_under_root(
+        _normalized_absolute_comparison_path(real_target),
+        _normalized_absolute_comparison_path(os.path.realpath(working_directory)),
+    ):
+        return False
     real_temp_root = os.path.realpath(tempfile.gettempdir())
     all_relative_parts = _relative_parts_under_temp_root(real_target, real_temp_root)
     return (

package/hooks/blocking/test_code_rules_enforcer_comment_string_awareness.py

@@ -5,9 +5,9 @@ hex color codes (``"#FFFFFF"``), URL fragments
 (``"https://x#section"``), and f-string interpolation patterns. None of
 those ``#`` characters belong to a comment token. ``check_comments_python``
 and the Python branch of ``extract_comment_texts`` route their ``#``
-detection through ``tokenize.generate_tokens`` so only true ``COMMENT``
+detection through ``tokenize.generate_tokens`` so only ``COMMENT``
 tokens are considered. These tests pin both halves of that contract:
-``#``-in-strings is exempt; real inline comments that land AFTER such
+``#``-in-strings is exempt; inline comments that land AFTER such
 a string still flag.
 """
 

package/hooks/blocking/test_code_rules_shared.py

@@ -262,10 +262,12 @@ def test_is_ephemeral_path_false_for_repository_file(
 ) -> None:
     _simulate_windows_platform(monkeypatch, tmp_path)
     monkeypatch.delenv("CLAUDE_CODE_RULES_DISABLE_EPHEMERAL_EXEMPT", raising=False)
-    repository_file = tmp_path / "repository" / "orders.py"
-    repository_file.parent.mkdir(parents=True)
+    repository_file_outside_temp_root = Path(WORKING_DIRECTORY).parent / "repository" / "orders.py"
 
-    assert _SHARED_MODULE.is_ephemeral_path(str(repository_file), _session_payload()) is False
+    assert (
+        _SHARED_MODULE.is_ephemeral_path(str(repository_file_outside_temp_root), _session_payload())
+        is False
+    )
 
 
 def test_is_ephemeral_path_reads_session_id_from_environment(
@@ -309,3 +311,49 @@ def test_normalized_path_marker_table_carries_no_backslash_entry(
     not the marker, so a backslash entry can never match."""
     marker_table = getattr(_SHARED_MODULE, normalized_marker_table_name)
     assert all("\\" not in each_marker for each_marker in marker_table)
+
+
+def test_ephemeral_path_is_false_for_file_under_payload_cwd_inside_scratchpad(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    _point_temporary_directory_at(monkeypatch, tmp_path)
+    scratchpad_directory = _build_scratchpad_directory(tmp_path)
+    repository_module = scratchpad_directory / "orders.py"
+    payload_with_scratchpad_cwd = {"cwd": str(scratchpad_directory), "session_id": SESSION_ID}
+
+    assert (
+        _SHARED_MODULE.is_ephemeral_path(str(repository_module), payload_with_scratchpad_cwd)
+        is False
+    )
+
+
+def test_scratchpad_is_false_for_worktree_under_payload_cwd(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    _point_temporary_directory_at(monkeypatch, tmp_path)
+    scratchpad_directory = _build_scratchpad_directory(tmp_path)
+    worktree_directory = scratchpad_directory / "worktree"
+    repository_module = worktree_directory / "src" / "orders.py"
+    payload_with_worktree_cwd = {"cwd": str(worktree_directory), "session_id": SESSION_ID}
+
+    assert (
+        _SHARED_MODULE.is_under_session_scratchpad(str(repository_module), payload_with_worktree_cwd)
+        is False
+    )
+
+
+def test_ephemeral_path_stays_true_for_scratchpad_file_outside_payload_cwd(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    _point_temporary_directory_at(monkeypatch, tmp_path)
+    scratchpad_directory = _build_scratchpad_directory(tmp_path)
+    throwaway_script = scratchpad_directory / "one_off_tool.py"
+    payload_with_worktree_cwd = {
+        "cwd": str(scratchpad_directory / "worktree"),
+        "session_id": SESSION_ID,
+    }
+
+    assert _SHARED_MODULE.is_ephemeral_path(str(throwaway_script), _session_payload()) is True
+    assert (
+        _SHARED_MODULE.is_ephemeral_path(str(throwaway_script), payload_with_worktree_cwd) is True
+    )

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-dev-env",
-    "version": "8.46.12",
+    "version": "8.46.14",
     "description": "Claude Code development standards — rules, hooks, agents, commands, and skills",
     "type": "module",
     "bin": {