claude-dev-env 8.54.9 → 8.56.0

package/bin/install.agents-home.test.mjs

@@ -50,6 +50,8 @@ const REVIEW_PROCEDURE_FILE_NAME = 'high.md';
 function runInstaller(homeDirectory, extraArguments, environmentOverrides = {}) {
     const installerEnvironment = {
         ...process.env,
+        CLAUDE_CONFIG_DIR: undefined,
+        LLM_SETTINGS_PROFILES_ROOT: undefined,
         CDE_INSTALL_PSTACK: '0',
         CDE_INSTALL_USAGE_WRAPUP: '0',
         CDE_INSTALL_SUBAGENT_MODELS: '0',

package/bin/install.codex-rules.test.mjs

@@ -56,6 +56,8 @@ function runInstaller(homeDirectory, extraArguments) {
         encoding: 'utf8',
         env: {
             ...process.env,
+            CLAUDE_CONFIG_DIR: undefined,
+            LLM_SETTINGS_PROFILES_ROOT: undefined,
             CDE_INSTALL_PSTACK: '0',
             CDE_INSTALL_USAGE_WRAPUP: '0',
             CDE_INSTALL_SUBAGENT_MODELS: '0',
@@ -86,6 +88,8 @@ function scanTextWithProductionPiiScanner(scannedText) {
                 encoding: 'utf8',
                 env: {
                     ...process.env,
+                    CLAUDE_CONFIG_DIR: undefined,
+                    LLM_SETTINGS_PROFILES_ROOT: undefined,
                     CDE_INSTALL_PSTACK: '0',
                     CDE_INSTALL_USAGE_WRAPUP: '0',
                     CDE_INSTALL_SUBAGENT_MODELS: '0',

package/bin/install.cursor-rules.test.mjs

@@ -31,6 +31,7 @@ function runInstaller(homeDirectory, extraArguments, environmentOverrides = {})
         encoding: 'utf8',
         env: {
             ...process.env,
+            LLM_SETTINGS_PROFILES_ROOT: undefined,
             CDE_INSTALL_PSTACK: '0',
             CDE_INSTALL_USAGE_WRAPUP: '0',
             CDE_INSTALL_SUBAGENT_MODELS: '0',

package/bin/install.mjs

@@ -29,6 +29,11 @@ import {
     mergeMissingSettingsDefaults,
     settingsDefaultsFromPackageSettings,
 } from './merge_settings_defaults.mjs';
+import {
+    describeProfileSettingsOutcome,
+    hostConfigurationIndent,
+    mergeProfileSettings,
+} from './merge_profile_settings.mjs';
 import {
     SKIPPED_SOURCE_ENTRY_NAMES,
     SKIPPED_SOURCE_FILE_EXTENSIONS,
@@ -1548,15 +1553,19 @@ function startEventFromHookGroupList(settings, eventType) {
  * @param {object} settings The parsed settings.json object (mutated in place).
  * @param {{hooks: object}} hooksConfig Parsed hooks.json.
  * @param {string} pluginRootDir Directory ${CLAUDE_PLUGIN_ROOT} resolves to
- *   (the installer's `~/.claude` root; home is its parent directory).
+ *   (the installer's managed root, `~/.claude` or a profile root).
  * @param {string} pythonCommand Interpreter command that replaces python3.
  * @param {string|null} [sharedSettingsRealPath] Resolved path of the settings
  *   file being merged. Hooks of every root whose settings.json resolves to it
  *   count as managed, so roots sharing one file keep one entry per script.
+ * @param {string} [homeDirectory] The home directory `~/`, `$HOME`, and
+ *   `${HOME}` expand to. It is the user's home whatever root installs, so a
+ *   profile root under `~/.claude-profiles` expands `~/` the same way the
+ *   profile settings merge does.
  * @returns {number} Count of matcher groups merged.
  */
 export function mergeHooksIntoSettings(
-    settings, hooksConfig, pluginRootDir, pythonCommand, sharedSettingsRealPath = null,
+    settings, hooksConfig, pluginRootDir, pythonCommand, sharedSettingsRealPath = null, homeDirectory = homedir(),
 ) {
     const managedHookRelativePaths = managedHookScriptRelativePaths(hooksConfig);
     const pluginRootForward = pluginRootDir.replace(/\\/g, '/');
@@ -1604,7 +1613,7 @@ export function mergeHooksIntoSettings(
             groupCount++;
         }
     }
-    expandHomeDirectoryTokensInSettings(settings, dirname(pluginRootDir));
+    expandHomeDirectoryTokensInSettings(settings, homeDirectory);
     return groupCount;
 }
 
@@ -1883,23 +1892,6 @@ function stripRetiredHookEntries(settings, retiredHookRelativePaths, ownership)
     return removedCount;
 }
 
-const DEFAULT_HOST_CONFIGURATION_INDENT = '  ';
-
-/**
- * Read the indent the host configuration file already uses.
- *
- * ~/.claude/settings.json uses four spaces and ~/.codex/hooks.json uses two.
- * Forcing four spaces would rewrite every line of one of those files. The first
- * indented line supplies the indent, tabs included.
- *
- * @param {string} settingsText The host configuration file as it stands on disk.
- * @returns {string} The indent one nesting level uses.
- */
-function hostConfigurationIndent(settingsText) {
-    const firstIndentedLine = /\n([ \t]+)\S/.exec(settingsText);
-    return firstIndentedLine ? firstIndentedLine[1] : DEFAULT_HOST_CONFIGURATION_INDENT;
-}
-
 /**
  * Remove every entry of one host hook configuration file that runs a retired
  * managed hook script, writing the file only when an entry left it.
@@ -3027,6 +3019,13 @@ function executeInstallPlanMutations(plan, transactionHelpers) {
     if (settingsDefaultsMerge.addedKeys.length > 0) {
         console.log(`  Settings: added ${settingsDefaultsMerge.addedKeys.join(', ')}`);
     }
+    const mergeOutcome = mergeProfileSettings(
+        [join(CLAUDE_HOME, SETTINGS_FILE_NAME)],
+        { dryRun: false, homeDirectory: homedir() },
+    );
+    for (const eachLine of describeProfileSettingsOutcome(mergeOutcome, false)) {
+        console.log(`  Profile settings: ${eachLine}`);
+    }
 
     const agentsHubSource = join(PACKAGE_ROOT, 'AGENTS.md');
     if (existsSync(agentsHubSource)) {

package/bin/install.profile-settings.test.mjs

@@ -0,0 +1,77 @@
+/**
+ * Installing twice into a profile root under ~/.claude-profiles leaves exactly
+ * one session-title gate Stop hook, that hook runs the gate under ~/.claude, and
+ * the second install leaves settings.json byte for byte.
+ */
+
+import { test } from 'node:test';
+import { strict as assert } from 'node:assert';
+import { join } from 'node:path';
+import { existsSync, mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+import { spawnSync } from 'node:child_process';
+
+import { ALL_SESSION_TITLE_GATE_RELATIVE_PATHS, SESSION_TITLE_GATE_FILE_NAME } from './merge_profile_settings.mjs';
+
+const INSTALLER_PATH = fileURLToPath(new URL('./install.mjs', import.meta.url));
+
+function installEnvironment(homeDirectory) {
+    return {
+        ...process.env,
+        CLAUDE_CONFIG_DIR: undefined,
+        LLM_SETTINGS_PROFILES_ROOT: undefined,
+        HOME: homeDirectory,
+        USERPROFILE: homeDirectory,
+        GIT_CONFIG_GLOBAL: join(homeDirectory, '.gitconfig'),
+        CODEX_HOME: join(homeDirectory, '.codex'),
+        CDE_INSTALL_PSTACK: '0',
+        CDE_INSTALL_USAGE_WRAPUP: '0',
+    };
+}
+
+function runCoreInstall(homeDirectory, profileRoot) {
+    const installRun = spawnSync(
+        process.execPath,
+        [INSTALLER_PATH, '--only', 'core', '--target', profileRoot],
+        { encoding: 'utf8', env: installEnvironment(homeDirectory) },
+    );
+    assert.equal(installRun.status, 0, installRun.stdout + installRun.stderr);
+}
+
+function stopHookCommands(settingsPath) {
+    const settings = JSON.parse(readFileSync(settingsPath, 'utf8'));
+    return (settings.hooks?.Stop ?? []).flatMap(
+        (eachGroup) => (eachGroup.hooks ?? []).map((eachHook) => eachHook.command.replace(/\\/g, '/')),
+    );
+}
+
+test('two installs into a profile root keep one gate Stop hook that runs the gate under ~/.claude', () => {
+    const homeDirectory = mkdtempSync(join(tmpdir(), 'cdev-profile-settings-'));
+    try {
+        writeFileSync(join(homeDirectory, '.gitconfig'), '');
+        const profileRoot = join(homeDirectory, '.claude-profiles', 'work');
+        mkdirSync(profileRoot, { recursive: true });
+        const settingsPath = join(profileRoot, 'settings.json');
+        const forwardSlashedHome = homeDirectory.replace(/\\/g, '/');
+        const expectedGateCommand = `python3 ${forwardSlashedHome}/.claude/${SESSION_TITLE_GATE_FILE_NAME}`;
+
+        runCoreInstall(homeDirectory, profileRoot);
+        const settingsBytesAfterFirstInstall = readFileSync(settingsPath);
+        runCoreInstall(homeDirectory, profileRoot);
+
+        assert.deepEqual(readFileSync(settingsPath), settingsBytesAfterFirstInstall, 'second install leaves settings.json byte for byte');
+
+        const allGateCommands = stopHookCommands(settingsPath)
+            .filter((eachCommand) => eachCommand.includes(SESSION_TITLE_GATE_FILE_NAME));
+        assert.deepEqual(allGateCommands, [expectedGateCommand]);
+        for (const eachRelativePath of ALL_SESSION_TITLE_GATE_RELATIVE_PATHS) {
+            assert.ok(
+                existsSync(join(homeDirectory, '.claude', eachRelativePath)),
+                `${eachRelativePath} is installed under ~/.claude`,
+            );
+        }
+    } finally {
+        rmSync(homeDirectory, { recursive: true, force: true });
+    }
+});

package/bin/install.profiles.test.mjs

@@ -235,7 +235,7 @@ test('repeated and selected multi-profile dry runs write one ownership manifest
 test('install.mjs --help documents profile target selection', () => {
     const result = spawnSync(process.execPath, [INSTALL_MODULE_PATH, '--help'], {
         encoding: 'utf8',
-        env: process.env,
+        env: { ...process.env, CLAUDE_CONFIG_DIR: undefined, LLM_SETTINGS_PROFILES_ROOT: undefined },
     });
     assert.equal(result.status, 0, result.stderr);
     assert.match(result.stdout, /--profile/);
@@ -247,7 +247,7 @@ test('install.mjs --help documents profile target selection', () => {
 test('install.mjs --help states that a positional path argument carries no meaning', () => {
     const result = spawnSync(process.execPath, [INSTALL_MODULE_PATH, '--help'], {
         encoding: 'utf8',
-        env: process.env,
+        env: { ...process.env, CLAUDE_CONFIG_DIR: undefined, LLM_SETTINGS_PROFILES_ROOT: undefined },
     });
     assert.equal(result.status, 0, result.stderr);
     assert.match(result.stdout, /reads only flags/i);

package/bin/install.prune.test.mjs

@@ -259,6 +259,8 @@ function runInstaller(homeDirectory, extraArguments) {
 function resolveInstallerInvocation(homeDirectory) {
     const childEnvironment = {
         ...process.env,
+        CLAUDE_CONFIG_DIR: undefined,
+        LLM_SETTINGS_PROFILES_ROOT: undefined,
         CDE_INSTALL_PSTACK: '0',
         CDE_INSTALL_USAGE_WRAPUP: '0',
         CDE_INSTALL_SUBAGENT_MODELS: '0',

package/bin/install.question-presentation.test.mjs

@@ -22,6 +22,8 @@ function installInScratchHome(homeDirectory, argumentsList = [], extraEnvironmen
         encoding: 'utf8',
         env: {
             ...process.env,
+            CLAUDE_CONFIG_DIR: undefined,
+            LLM_SETTINGS_PROFILES_ROOT: undefined,
             CDE_INSTALL_PSTACK: '0',
             CDE_INSTALL_USAGE_WRAPUP: '0',
             CDE_INSTALL_SUBAGENT_MODELS: '0',

package/bin/install.settings-defaults.test.mjs

@@ -25,6 +25,7 @@ import {
     mergeMissingSettingsDefaults,
     settingsDefaultsFromPackageSettings,
 } from './merge_settings_defaults.mjs';
+import { DECLARED_PROFILE_SETTINGS } from './merge_profile_settings.mjs';
 
 const PACKAGE_ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
 const PACKAGE_SETTINGS_PATH = join(PACKAGE_ROOT, 'settings.json');
@@ -32,6 +33,8 @@ const INSTALL_ENTRY = join(PACKAGE_ROOT, 'bin', 'install.mjs');
 
 const EXPECTED_DENY_ENTRIES = [];
 const EXPECTED_ALLOW_ENTRIES = ['WebFetch(domain:docs.github.com)'];
+const PROFILE_ALLOW_ENTRIES = DECLARED_PROFILE_SETTINGS
+    .find((eachEntry) => eachEntry.keyPath.join('.') === 'permissions.allow').items;
 const SAMPLE_MANAGED_DENY_ENTRIES = ['Edit($HOME/.claude/managed-test/**)'];
 const SAMPLE_MANAGED_PERMISSIONS = { allow: [], deny: SAMPLE_MANAGED_DENY_ENTRIES };
 const SAMPLE_MANAGED_ALLOW_PERMISSIONS = { allow: ['WebFetch(domain:example.com)'], deny: [] };
@@ -56,6 +59,8 @@ function runInstallerInSandbox(sandboxHome, installerArguments = []) {
         encoding: 'utf8',
         env: {
             ...process.env,
+            CLAUDE_CONFIG_DIR: undefined,
+            LLM_SETTINGS_PROFILES_ROOT: undefined,
             CDE_INSTALL_PSTACK: '0',
             CDE_INSTALL_USAGE_WRAPUP: '0',
             CDE_INSTALL_SUBAGENT_MODELS: '0',
@@ -171,7 +176,7 @@ test('sandbox install keeps default managed denies empty on repeat', () => {
         const firstSettings = JSON.parse(readFileSync(settingsPath, 'utf8'));
         const firstDeny = firstSettings.permissions?.deny ?? [];
         assert.deepEqual(firstDeny, EXPECTED_DENY_ENTRIES);
-        assert.deepEqual(firstSettings.permissions?.allow, EXPECTED_ALLOW_ENTRIES);
+        assert.deepEqual(firstSettings.permissions?.allow, [...EXPECTED_ALLOW_ENTRIES, ...PROFILE_ALLOW_ENTRIES]);
 
         const manifestPath = join(sandboxHome, '.claude', '.claude-dev-env-manifest.json');
         const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
@@ -183,7 +188,7 @@ test('sandbox install keeps default managed denies empty on repeat', () => {
         const secondSettings = JSON.parse(readFileSync(settingsPath, 'utf8'));
         const secondDeny = secondSettings.permissions?.deny ?? [];
         assert.deepEqual(secondDeny, EXPECTED_DENY_ENTRIES);
-        assert.deepEqual(secondSettings.permissions?.allow, EXPECTED_ALLOW_ENTRIES);
+        assert.deepEqual(secondSettings.permissions?.allow, [...EXPECTED_ALLOW_ENTRIES, ...PROFILE_ALLOW_ENTRIES]);
     } finally {
         rmSync(sandboxHome, { recursive: true, force: true });
     }
@@ -214,7 +219,7 @@ test('a normal upgrade retires manifest-owned denies and preserves user entries'
 
         const upgradedSettings = JSON.parse(readFileSync(settingsPath, 'utf8'));
         assert.deepEqual(upgradedSettings.permissions?.deny, [USER_OWNED_DENY_ENTRY]);
-        assert.deepEqual(upgradedSettings.permissions?.allow, ['Bash(git status)', ...EXPECTED_ALLOW_ENTRIES]);
+        assert.deepEqual(upgradedSettings.permissions?.allow, ['Bash(git status)', ...EXPECTED_ALLOW_ENTRIES, ...PROFILE_ALLOW_ENTRIES]);
         assert.deepEqual(upgradedSettings.permissions?.ask, ['Edit(./**)']);
 
         const upgradedManifest = JSON.parse(readFileSync(manifestPath, 'utf8'));

package/bin/install.shared-settings.test.mjs

@@ -25,6 +25,7 @@ const PACKAGE_HOOKS_JSON_PATH = fileURLToPath(new URL('../hooks/hooks.json', imp
 function installEnvironment(homeDirectory) {
     return {
         ...process.env,
+        LLM_SETTINGS_PROFILES_ROOT: undefined,
         HOME: homeDirectory,
         USERPROFILE: homeDirectory,
         CLAUDE_CONFIG_DIR: '',

package/bin/install.test.mjs

@@ -406,7 +406,9 @@ test('mergeHooksIntoSettings expands residual $HOME in preserved user hooks', ()
             ],
         },
     };
-    mergeHooksIntoSettings(settings, hooksConfig, 'C:/Users/x/.claude', 'C:/Python313/python.exe');
+    mergeHooksIntoSettings(
+        settings, hooksConfig, 'C:/Users/x/.claude', 'C:/Python313/python.exe', null, 'C:/Users/x',
+    );
     const allCommands = settings.hooks.SessionStart[0].hooks.map(eachHook => eachHook.command);
     assert.ok(
         allCommands.includes(
@@ -2980,7 +2982,7 @@ test('the help output states that the installer reads only flags', () => {
     const helpRun = spawnSync(
         process.execPath,
         [fileURLToPath(new URL('./install.mjs', import.meta.url)), '--help'],
-        { encoding: 'utf8', env: process.env },
+        { encoding: 'utf8', env: { ...process.env, CLAUDE_CONFIG_DIR: undefined, LLM_SETTINGS_PROFILES_ROOT: undefined } },
     );
 
     assert.equal(helpRun.status, 0, helpRun.stderr);
@@ -3024,6 +3026,7 @@ test('a failed update preserves an existing skills lookup pointer', () => {
         writeFileSync(join(homeDirectory, '.gitconfig'), '');
         const environment = {
             ...process.env,
+            LLM_SETTINGS_PROFILES_ROOT: undefined,
             HOME: homeDirectory,
             USERPROFILE: homeDirectory,
             CLAUDE_CONFIG_DIR: '',
@@ -3075,6 +3078,7 @@ function runPstackInstaller(homeDirectory, extraArguments, environmentOverrides
         encoding: 'utf8',
         env: {
             ...process.env,
+            LLM_SETTINGS_PROFILES_ROOT: undefined,
             HOME: homeDirectory,
             USERPROFILE: homeDirectory,
             CODEX_HOME: join(homeDirectory, '.codex'),
@@ -3390,7 +3394,7 @@ test('a failing usage-wrapup command is reported and the install still succeeds'
 test('the help output names the usage-wrapup opt-out beside the pstack one', () => {
     const helpRun = spawnSync(process.execPath, [PSTACK_TEST_INSTALLER_PATH, '--help'], {
         encoding: 'utf8',
-        env: process.env,
+        env: { ...process.env, CLAUDE_CONFIG_DIR: undefined, LLM_SETTINGS_PROFILES_ROOT: undefined },
     });
 
     assert.equal(helpRun.status, 0, helpRun.stderr);

package/bin/install.transaction.test.mjs

@@ -85,6 +85,8 @@ test('capture and restore recover settings, manifest, files, and hooksPath', ()
     mkdirSync(priorHooksDirectory, { recursive: true });
     const env = {
         ...process.env,
+        CLAUDE_CONFIG_DIR: undefined,
+        LLM_SETTINGS_PROFILES_ROOT: undefined,
         CDE_INSTALL_PSTACK: '0',
         CDE_INSTALL_USAGE_WRAPUP: '0',
         CDE_INSTALL_SUBAGENT_MODELS: '0',
@@ -148,6 +150,8 @@ test('capture and restore recover an additional host settings file', () => {
     const io = {
         env: {
             ...process.env,
+            CLAUDE_CONFIG_DIR: undefined,
+            LLM_SETTINGS_PROFILES_ROOT: undefined,
             CDE_INSTALL_PSTACK: '0',
             CDE_INSTALL_USAGE_WRAPUP: '0',
             CDE_INSTALL_SUBAGENT_MODELS: '0',
@@ -184,6 +188,8 @@ test('runWithInstallTransaction restores prior state on injected fault', () => {
     writeFileSync(gitConfigPath, '');
     const env = {
         ...process.env,
+        CLAUDE_CONFIG_DIR: undefined,
+        LLM_SETTINGS_PROFILES_ROOT: undefined,
         CDE_INSTALL_PSTACK: '0',
         CDE_INSTALL_USAGE_WRAPUP: '0',
         CDE_INSTALL_SUBAGENT_MODELS: '0',
@@ -239,6 +245,8 @@ test('runWithInstallTransaction commits and discards journal on success', () =>
     const io = {
         env: {
             ...process.env,
+            CLAUDE_CONFIG_DIR: undefined,
+            LLM_SETTINGS_PROFILES_ROOT: undefined,
             CDE_INSTALL_PSTACK: '0',
             CDE_INSTALL_USAGE_WRAPUP: '0',
             CDE_INSTALL_SUBAGENT_MODELS: '0',
@@ -283,6 +291,8 @@ test('runWithInstallTransaction commits and discards journal on success', () =>
 function runInstaller(homeDirectory, extraArguments, options = {}) {
     const childEnvironment = {
         ...process.env,
+        CLAUDE_CONFIG_DIR: undefined,
+        LLM_SETTINGS_PROFILES_ROOT: undefined,
         CDE_INSTALL_PSTACK: '0',
         CDE_INSTALL_USAGE_WRAPUP: '0',
         CDE_INSTALL_SUBAGENT_MODELS: '0',
@@ -463,6 +473,8 @@ test('installer fault after_git_config restores prior core.hooksPath', () => {
         writeGlobalCoreHooksPath(priorHooksPath, {
             env: {
                 ...process.env,
+                CLAUDE_CONFIG_DIR: undefined,
+                LLM_SETTINGS_PROFILES_ROOT: undefined,
                 CDE_INSTALL_PSTACK: '0',
                 CDE_INSTALL_USAGE_WRAPUP: '0',
                 CDE_INSTALL_SUBAGENT_MODELS: '0',
@@ -481,6 +493,8 @@ test('installer fault after_git_config restores prior core.hooksPath', () => {
         const restored = readGlobalCoreHooksPath({
             env: {
                 ...process.env,
+                CLAUDE_CONFIG_DIR: undefined,
+                LLM_SETTINGS_PROFILES_ROOT: undefined,
                 CDE_INSTALL_PSTACK: '0',
                 CDE_INSTALL_USAGE_WRAPUP: '0',
                 CDE_INSTALL_SUBAGENT_MODELS: '0',

package/bin/install.uninstall-transaction.test.mjs

@@ -71,6 +71,8 @@ function writeFileWithParents(filePath, contents) {
 function runInstaller(homeDirectory, extraArguments, options = {}) {
     const childEnvironment = {
         ...process.env,
+        CLAUDE_CONFIG_DIR: undefined,
+        LLM_SETTINGS_PROFILES_ROOT: undefined,
         CDE_INSTALL_PSTACK: '0',
         CDE_INSTALL_USAGE_WRAPUP: '0',
         CDE_INSTALL_SUBAGENT_MODELS: '0',
@@ -306,6 +308,8 @@ test('uninstall fault after_git_config restores prior core.hooksPath', () => {
         const io = {
             env: {
                 ...process.env,
+                CLAUDE_CONFIG_DIR: undefined,
+                LLM_SETTINGS_PROFILES_ROOT: undefined,
                 CDE_INSTALL_PSTACK: '0',
                 CDE_INSTALL_USAGE_WRAPUP: '0',
                 CDE_INSTALL_SUBAGENT_MODELS: '0',

package/bin/install.update-keeps-hooks.test.mjs

@@ -22,6 +22,8 @@ const REGISTERED_HOOK_RELATIVE_PATHS = [
 function installerEnvironment(homeDirectory) {
     const childEnvironment = {
         ...process.env,
+        CLAUDE_CONFIG_DIR: undefined,
+        LLM_SETTINGS_PROFILES_ROOT: undefined,
         CDE_INSTALL_PSTACK: '0',
         CDE_INSTALL_USAGE_WRAPUP: '0',
         CDE_INSTALL_SUBAGENT_MODELS: '0',