claude-dev-env 8.54.5 → 8.54.7

package/bin/install.test.mjs

@@ -2986,6 +2986,10 @@ test('the help output states that the installer reads only flags', () => {
     assert.equal(helpRun.status, 0, helpRun.stderr);
     assert.match(helpRun.stdout, /reads only flags/i);
     assert.match(helpRun.stdout, /bare path argument carries no meaning/i);
+    assert.match(
+        helpRun.stdout,
+        /--update\s+Full install: copy the package over the prior install, then prune files it no longer ships/,
+    );
 });
 
 

package/hooks/blocking/session_title_stop_gate.py

@@ -11,7 +11,8 @@ The hook stays silent when:
 - the stop is already a retry after a block (stop_hook_active is true);
 - the session shows no title tool: no title tool named anywhere in the
   transcript, and either no remote session id in the environment or a
-  deferred tool listing that leaves the title tool out;
+  deferred tool listing that leaves the title tool out, or an earlier
+  Stop block the session never met;
 - the transcript cannot be read.
 """
 
@@ -32,6 +33,7 @@ from hooks_constants.session_title_constants import (
     ALLOW_EXIT_CODE,
     BLOCK_DECISION,
     DEFERRED_TOOL_ATTACHMENT_TYPES,
+    HOOK_BLOCKING_ERROR_ATTACHMENT_TYPE,
     REMOTE_SESSION_ENVIRONMENT_VARIABLE,
     REMOTE_TITLE_TOOL_NAME,
     STOP_BLOCK_REASON,
@@ -85,6 +87,15 @@ def _lists_deferred_tools(all_entry_fields: dict[str, object]) -> bool:
     return isinstance(attachment, dict) and attachment.get("type") in DEFERRED_TOOL_ATTACHMENT_TYPES
 
 
+def _is_stop_block(all_entry_fields: dict[str, object]) -> bool:
+    attachment = all_entry_fields.get("attachment")
+    return (
+        isinstance(attachment, dict)
+        and attachment.get("type") == HOOK_BLOCKING_ERROR_ATTACHMENT_TYPE
+        and attachment.get("hookEvent") == STOP_GATE_EVENT_NAME
+    )
+
+
 def _is_title_call(entry_type: object, all_block_fields: dict[str, object]) -> bool:
     return (
         entry_type == "assistant"
@@ -132,6 +143,7 @@ def stop_block_reason(all_entries: list[dict[str, object]], is_remote_session: b
         prompt -> work, no title call              => block reason
         no title tool anywhere, not remote         => None
         remote, tool list lacks the title tool     => None
+        remote, earlier Stop block never met       => None
 
     Args:
         all_entries: The transcript entries, oldest first.
@@ -144,7 +156,8 @@ def stop_block_reason(all_entries: list[dict[str, object]], is_remote_session: b
         each_name for each_entry in all_entries for each_name in _title_tool_names_in(each_entry)
     ]
     if not all_seen_tool_names and (
-        not is_remote_session or any(_lists_deferred_tools(each) for each in all_entries)
+        not is_remote_session
+        or any(_lists_deferred_tools(each) or _is_stop_block(each) for each in all_entries)
     ):
         return None
     if _title_set_since(all_entries[_turn_start_index(all_entries) :]):

package/hooks/blocking/test_session_title_stop_gate.py

@@ -199,6 +199,43 @@ def test_should_block_a_remote_session_whose_tool_list_names_the_title_tool(
     assert json.loads(stdout_text)["decision"] == "block"
 
 
+def earlier_stop_block() -> dict[str, object]:
+    return {
+        "type": "attachment",
+        "attachment": {"type": "hook_blocking_error", "hookEvent": "Stop"},
+    }
+
+
+def test_should_stay_silent_in_a_remote_session_after_an_unmet_earlier_block(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
+) -> None:
+    monkeypatch.setenv(REMOTE_SESSION_VARIABLE, "cse_1")
+    all_entries = [
+        prompt("Fix the runner"),
+        earlier_stop_block(),
+        prompt("Next task"),
+        tool_call("t1", "Bash"),
+        tool_result("t1"),
+    ]
+    assert run_gate(monkeypatch, capsys, tmp_path, all_entries) == (0, "")
+
+
+def test_should_block_after_an_earlier_block_once_the_title_tool_is_listed(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
+) -> None:
+    monkeypatch.setenv(REMOTE_SESSION_VARIABLE, "cse_1")
+    all_entries = [
+        deferred_tools(REMOTE_TITLE_TOOL),
+        prompt("Fix the runner"),
+        earlier_stop_block(),
+        prompt("Next task"),
+        tool_call("t1", "Bash"),
+        tool_result("t1"),
+    ]
+    _, stdout_text = run_gate(monkeypatch, capsys, tmp_path, all_entries)
+    assert json.loads(stdout_text)["decision"] == "block"
+
+
 def test_should_stay_silent_on_the_retry_after_a_block(
     monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
 ) -> None:

package/hooks/hooks_constants/session_title_constants.py

@@ -15,6 +15,7 @@ ALLOW_EXIT_CODE = 0
 BLOCK_EXIT_CODE = 2
 BLOCK_DECISION = "block"
 DEFERRED_TOOL_ATTACHMENT_TYPES = frozenset({"deferred_tools_delta", "deferred_tools_record"})
+HOOK_BLOCKING_ERROR_ATTACHMENT_TYPE = "hook_blocking_error"
 
 STATUS_PREFIX_PATTERN = re.compile("^(\U0001f6a9|\u2705|\u23f3)\ufe0f? (?=\\S)")
 MAXIMUM_NAME_LENGTH = 25

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-dev-env",
-    "version": "8.54.5",
+    "version": "8.54.7",
     "description": "Claude Code development standards — rules, hooks, agents, commands, and skills",
     "type": "module",
     "bin": {

package/scripts/ci/install-playtest.test.mjs

@@ -30,6 +30,8 @@ test('the driver reads an envelope from every stage of a fresh install, and repo
         assert.match(greenRun.stdout, /\[PASS\] playtest install .* sha256=[0-9a-f]{64}/);
         assert.match(greenRun.stdout, /\[PASS\] playtest session_start_hook .* sha256=[0-9a-f]{64}/);
         assert.match(greenRun.stdout, /\[PASS\] playtest blocking_hook .* sha256=[0-9a-f]{64}/);
+        const blockingEnvelope = JSON.parse(readFileSync(join(evidenceDirectory, 'blocking_hook.json'), 'utf8'));
+        assert.equal(Object.hasOwn(blockingEnvelope, 'permissionDecision'), false);
         assert.ok(
             readFileSync(join(scratchHome, SANDBOX_GIT_CONFIG_NAME), 'utf8').startsWith(SANDBOX_GIT_CONFIG_BODY),
         );

package/scripts/dev_env_scripts_constants/test_account_broker_constants.py

@@ -16,9 +16,11 @@ import pytest
 
 from dev_env_scripts_constants import account_broker_constants as broker_constants
 from dev_env_scripts_constants.account_broker_constants import (
+    ALL_BATCH_FILE_EXTENSIONS,
     ALL_CLAUDE_FLOORS,
-    ALL_PARENT_CLAUDE_SESSION_VARIABLES,
     ALL_CODEX_FLOORS,
+    ALL_PARENT_CLAUDE_SESSION_VARIABLES,
+    CMD_SHELL_METACHARACTERS,
     JobOutcome,
 )
 from dev_env_scripts_constants.claude_account_constants import (
@@ -53,6 +55,11 @@ def test_should_keep_codex_floors_tied_to_the_tier_limits() -> None:
     }
 
 
+def test_batch_command_boundaries_include_shell_metacharacters() -> None:
+    assert ALL_BATCH_FILE_EXTENSIONS == frozenset({".bat", ".cmd"})
+    assert set(CMD_SHELL_METACHARACTERS) == set('&|<>^%!"\r\n')
+
+
 def test_should_freeze_job_outcome() -> None:
     outcome = JobOutcome(0, "", "", None, (), "served", None, None)
     with pytest.raises(dataclasses.FrozenInstanceError):