claude-dev-env 8.46.5 → 8.46.6

package/hooks/blocking/pr_lifecycle_skill_gate.py

@@ -13,6 +13,8 @@ if hooks_directory not in sys.path:
     sys.path.insert(0, hooks_directory)
 
 from hooks_constants.pr_lifecycle_skill_gate_constants import (
+    AGENT_ID_FIELD,
+    AGENT_ID_PATTERN,
     ALL_API_ACTION_NAMES,
     ALL_COMMAND_PREFIX_WORDS,
     ALL_GITHUB_MCP_TOOL_SUFFIXES,
@@ -40,8 +42,11 @@ from hooks_constants.pr_lifecycle_skill_gate_constants import (
     PERMISSION_DECISION_REASON_KEY,
     PULL_REQUEST_SCRIPT_NAME,
     PYTHON_OPTIONS_WITH_VALUE,
+    SESSION_TRANSCRIPT_PATH_FIELD,
     SHELL_TOOL_NAMES,
     SKILL_NAME,
+    SUBAGENT_TRANSCRIPT_DIRECTORY_NAME,
+    SUBAGENT_TRANSCRIPT_FILE_TEMPLATE,
 )
 from hooks_constants.pre_tool_use_stdin import read_hook_input_dictionary_from_stdin
 from hooks_constants.setup_project_paths_constants import DECODE_ERRORS_POLICY, UTF8_ENCODING
@@ -174,6 +179,21 @@ def _transcript_load_status(path: str) -> bool | None:
         return None
 
 
+def _subagent_transcript_path(all_payload_fields: dict[str, object]) -> str | None:
+    session_path = all_payload_fields.get(SESSION_TRANSCRIPT_PATH_FIELD)
+    agent_id = all_payload_fields.get(AGENT_ID_FIELD)
+    if not isinstance(session_path, str) or not session_path:
+        return None
+    if not isinstance(agent_id, str) or not re.fullmatch(AGENT_ID_PATTERN, agent_id):
+        return None
+    subagent_path = (
+        Path(session_path).with_suffix("")
+        / SUBAGENT_TRANSCRIPT_DIRECTORY_NAME
+        / SUBAGENT_TRANSCRIPT_FILE_TEMPLATE.format(agent_id=agent_id)
+    )
+    return str(subagent_path) if subagent_path.is_file() else None
+
+
 def decision_for(all_payload_fields: dict[str, object]) -> dict[str, object] | None:
     """Return a deny for a governed action with readable, unloaded transcripts.
 
@@ -183,7 +203,8 @@ def decision_for(all_payload_fields: dict[str, object]) -> dict[str, object] | N
     if not _is_governed_action(all_payload_fields):
         return None
     paths = [all_payload_fields.get(field) for field in ALL_TRANSCRIPT_PATH_FIELDS]
-    readable_paths = [path for path in paths if isinstance(path, str) and path]
+    paths.append(_subagent_transcript_path(all_payload_fields))
+    readable_paths = list(dict.fromkeys(path for path in paths if isinstance(path, str) and path))
     if not readable_paths:
         return None
     statuses = [_transcript_load_status(path) for path in readable_paths]

package/hooks/blocking/test_pr_lifecycle_skill_gate.py

@@ -82,6 +82,49 @@ def test_agent_transcript_can_supply_invocation(tmp_path: Path) -> None:
     assert gate.decision_for(payload) is None
 
 
+def _subagent_transcript(tmp_path: Path, agent_id: str, skill_name: str | None) -> Path:
+    subagent_directory = tmp_path / "session" / "subagents"
+    subagent_directory.mkdir(parents=True)
+    subagent_path = subagent_directory / f"agent-{agent_id}.jsonl"
+    lines = [json.dumps({"type": "user", "message": {"content": "Task."}})]
+    if skill_name:
+        lines.append(json.dumps({"type": "assistant", "message": {"content": [{"type": "tool_use", "name": "Skill", "input": {"skill": skill_name}}]}}))
+    subagent_path.write_text("\n".join(lines) + "\n", encoding="utf-8")
+    return subagent_path
+
+
+def test_subagent_transcript_located_by_agent_id_can_supply_invocation(tmp_path: Path) -> None:
+    session_path = _transcript(tmp_path)
+    _subagent_transcript(tmp_path, "a8865a3f3c71595ce", "pr-lifecycle")
+    payload = _payload("git commit", session_path)
+    payload["agent_id"] = "a8865a3f3c71595ce"
+    assert _run_main(payload) == (0, "")
+
+
+def test_subagent_without_invocation_is_denied(tmp_path: Path) -> None:
+    session_path = _transcript(tmp_path)
+    _subagent_transcript(tmp_path, "a8865a3f3c71595ce", None)
+    payload = _payload("git push", session_path)
+    payload["agent_id"] = "a8865a3f3c71595ce"
+    _assert_denied(payload)
+
+
+def test_missing_subagent_transcript_keeps_session_deny(tmp_path: Path) -> None:
+    payload = _payload("git push", _transcript(tmp_path))
+    payload["agent_id"] = "a8865a3f3c71595ce"
+    _assert_denied(payload)
+
+
+def test_agent_id_with_path_separator_is_not_followed(tmp_path: Path) -> None:
+    session_path = _transcript(tmp_path)
+    escaped_path = tmp_path / "session" / "agent-x.jsonl"
+    escaped_path.parent.mkdir(parents=True)
+    escaped_path.write_text(json.dumps({"type": "assistant", "message": {"content": [{"type": "tool_use", "name": "Skill", "input": {"skill": "pr-lifecycle"}}]}}) + "\n", encoding="utf-8")
+    payload = _payload("git push", session_path)
+    payload["agent_id"] = "../agent-x"
+    _assert_denied(payload)
+
+
 def test_unreadable_or_missing_transcript_allows_silently(tmp_path: Path) -> None:
     payload = _payload("gh pr create", tmp_path / "missing.jsonl")
     assert _run_main(payload) == (0, "")

package/hooks/hooks_constants/pr_lifecycle_skill_gate_constants.py

@@ -18,6 +18,11 @@ ALL_GITHUB_MCP_TOOL_SUFFIXES = (
     "__update_pull_request",
 )
 ALL_TRANSCRIPT_PATH_FIELDS = ("transcript_path", "agent_transcript_path")
+SESSION_TRANSCRIPT_PATH_FIELD = "transcript_path"
+AGENT_ID_FIELD = "agent_id"
+AGENT_ID_PATTERN = r"[A-Za-z0-9_-]+"
+SUBAGENT_TRANSCRIPT_DIRECTORY_NAME = "subagents"
+SUBAGENT_TRANSCRIPT_FILE_TEMPLATE = "agent-{agent_id}.jsonl"
 COMMAND_SEPARATORS = ";|&\n()`"
 COMMAND_WHITESPACE = " \t\r"
 OPTION_AND_VALUE_WORD_COUNT = 2

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-dev-env",
-    "version": "8.46.5",
+    "version": "8.46.6",
     "description": "Claude Code development standards — rules, hooks, agents, commands, and skills",
     "type": "module",
     "bin": {