claude-dev-env 8.47.2 → 8.47.3

package/hooks/blocking/bash_pre_tool_use_dispatcher.py

@@ -207,17 +207,21 @@ def aggregate_bash_hook_results(
 
 
 def _emit_decision(decision: BashDispatcherDecision) -> None:
-    """Write one PreToolUse permission payload to stdout when an outcome exists."""
+    """Write one PreToolUse permission payload to stdout when an outcome exists.
+
+    A rewrite carries updatedInput with no permissionDecision, so the harness
+    applies the rewritten command and then runs its normal permission prompt.
+    """
     if not decision.decision:
         return
-    hook_specific: dict[str, object] = {
-        "hookEventName": HOOK_EVENT_NAME,
-        _PERMISSION_DECISION_KEY: decision.decision,
-    }
+    hook_specific: dict[str, object] = {"hookEventName": HOOK_EVENT_NAME}
+    is_rewrite = decision.decision == ALLOW_DECISION and decision.updated_input is not None
+    if is_rewrite:
+        hook_specific[_UPDATED_INPUT_KEY] = decision.updated_input
+    else:
+        hook_specific[_PERMISSION_DECISION_KEY] = decision.decision
     if decision.reasons:
         hook_specific[_PERMISSION_REASON_KEY] = REASON_JOIN_SEPARATOR.join(decision.reasons)
-    if decision.decision == ALLOW_DECISION and decision.updated_input is not None:
-        hook_specific[_UPDATED_INPUT_KEY] = decision.updated_input
     if decision.all_additional_context:
         hook_specific[_ADDITIONAL_CONTEXT_KEY] = CONTEXT_JOIN_SEPARATOR.join(
             decision.all_additional_context

package/hooks/blocking/test_bash_pre_tool_use_dispatcher.py

@@ -235,3 +235,19 @@ def test_emit_decision_re_emits_silent_deny_fields(
     assert hook_specific["additionalContext"] == "see docs/runbook.md"
     assert emitted_payload["systemMessage"] == "[gh-gate] blocked redirected gh pr create"
     assert emitted_payload["suppressOutput"] is True
+
+
+def test_emit_decision_sends_a_rewrite_through_the_permission_prompt(
+    capsys: pytest.CaptureFixture[str],
+) -> None:
+    """A rewritten command reaches the harness with updatedInput and no permissionDecision."""
+    rewrite = BashDispatcherDecision(
+        decision="allow",
+        updated_input={"command": "MSYS2_ARG_CONV_EXCL='*' git show HEAD:a.py"},
+    )
+    _emit_decision(rewrite)
+    hook_specific = json.loads(capsys.readouterr().out.strip())["hookSpecificOutput"]
+    assert "permissionDecision" not in hook_specific
+    assert hook_specific["updatedInput"] == {
+        "command": "MSYS2_ARG_CONV_EXCL='*' git show HEAD:a.py"
+    }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-dev-env",
-    "version": "8.47.2",
+    "version": "8.47.3",
     "description": "Claude Code development standards — rules, hooks, agents, commands, and skills",
     "type": "module",
     "bin": {

package/scripts/ci/install-playtest.mjs

@@ -54,7 +54,6 @@ export const PRE_TOOL_USE_EVENT_NAME = 'PreToolUse';
 export const SESSION_START_HOOK_SCRIPT_NAME = 'working_style_prompt.py';
 export const BASH_HOOK_SCRIPT_NAME = 'bash_pre_tool_use_dispatcher.py';
 export const BASH_MATCHER = 'Bash';
-export const ALLOW_DECISION = 'allow';
 
 export const SESSION_START_PAYLOAD = {
     hook_event_name: SESSION_START_EVENT_NAME,
@@ -238,8 +237,8 @@ function runBlockingStage(settingsPath, scratchHome, evidenceDirectory) {
     );
     const hookResult = runInstalledHook(command, scratchHome, BASH_HOOK_PAYLOAD);
     const envelope = readEnvelope(hookResult.stdout, PRE_TOOL_USE_EVENT_NAME);
-    if (envelope.permissionDecision !== ALLOW_DECISION) {
-        throw new Error(`The PreToolUse envelope decided ${envelope.permissionDecision}`);
+    if (envelope.permissionDecision !== undefined) {
+        throw new Error(`The PreToolUse envelope skipped the permission prompt with ${envelope.permissionDecision}`);
     }
     const rewrittenCommand = envelope.updatedInput?.command ?? '';
     if (!rewrittenCommand.includes(REWRITE_MARKER)) {