claude-dev-env 8.9.0 → 8.11.0

package/hooks/blocking/tdd_enforcer_parts/content_hash_store.py

@@ -1,298 +0,0 @@
-"""Persist each candidate test file's last-observed content hash per session.
-
-The freshness check alone cannot tell a real test edit from a bare touch:
-both refresh the file's mtime, so a touch reopens the TDD gate for every
-production write it looks at afterward. This module remembers what a
-candidate test file contained the last time the gate looked at it, keyed by
-session and repository root, so a touch that leaves the content unchanged no
-longer satisfies the gate.
-
-::
-
-    first sight, dirty + fresh + real test -> allow, record hash + time
-    first sight, otherwise                 -> deny, record nothing
-    seen before, hash now differs          -> allow, record new hash + time
-    seen before, hash matches, in window   -> allow (green/refactor continues)
-    seen before, hash matches, expired     -> deny
-
-The state lives in one JSON file per (session, repository root) pair under the
-OS temp directory, shaped like the per-session tracker in
-hooks/observability/session_file_edit_tracker.py, so two worktrees open in one
-session never share a file.
-"""
-
-from __future__ import annotations
-
-import hashlib
-import json
-import tempfile
-import time
-from pathlib import Path
-
-from atomic_file_writer import write_text_atomically
-from hooks_constants.state_file_lock import hold_state_file_lock
-from hooks_constants.session_edit_stage_gate_constants import (
-    SESSION_ID_UNSAFE_CHARACTERS_PATTERN,
-    STATE_FILE_ATOMIC_WRITE_SUFFIX,
-    STATE_FILE_DEFAULT_SESSION_ID,
-    STATE_FILE_JSON_INDENT_SPACES,
-)
-from hooks_constants.setup_project_paths_constants import UTF8_ENCODING
-from json_file_reader import read_json_object
-from tdd_enforcer_parts import freshness, git_tracking
-from tdd_enforcer_parts.config.tdd_enforcer_constants import (
-    HASH_STATE_FILE_PREFIX,
-    HASH_STATE_FILE_SUFFIX,
-    REPOSITORY_ROOT_DIGEST_LENGTH,
-    STORED_CHANGED_AT_KEY,
-    STORED_CONTENT_HASH_KEY,
-    STORED_FAILED_AT_KEY,
-    STORED_FAILURE_COMMAND_KEY,
-    STORED_FAILURE_EXIT_STATUS_KEY,
-    STORED_FAILURE_HASH_KEY,
-)
-
-
-def _sanitized_session_id(session_id: str) -> str:
-    sanitized_session_id = SESSION_ID_UNSAFE_CHARACTERS_PATTERN.sub("", session_id)
-    return sanitized_session_id or STATE_FILE_DEFAULT_SESSION_ID
-
-
-def _repository_root_digest(repository_root: str) -> str:
-    full_digest = hashlib.sha256(repository_root.encode("utf-8")).hexdigest()
-    return full_digest[:REPOSITORY_ROOT_DIGEST_LENGTH]
-
-
-def _state_file_path(session_id: str, repository_root: str) -> Path:
-    file_name = (
-        f"{HASH_STATE_FILE_PREFIX}{_sanitized_session_id(session_id)}-"
-        f"{_repository_root_digest(repository_root)}{HASH_STATE_FILE_SUFFIX}"
-    )
-    return Path(tempfile.gettempdir()) / file_name
-
-
-def _state_key_for(candidate_path: Path) -> str:
-    try:
-        return str(candidate_path.resolve())
-    except OSError:
-        return str(candidate_path)
-
-
-def _load_state(state_file: Path) -> dict[str, object]:
-    return read_json_object(state_file, encoding=UTF8_ENCODING) or {}
-
-
-def _atomic_write_state(state_file: Path, all_stored_hashes: dict[str, object]) -> None:
-    write_text_atomically(
-        state_file,
-        json.dumps(all_stored_hashes, indent=STATE_FILE_JSON_INDENT_SPACES),
-        encoding=UTF8_ENCODING,
-        temporary_prefix=HASH_STATE_FILE_PREFIX,
-        temporary_suffix=STATE_FILE_ATOMIC_WRITE_SUFFIX,
-        should_reap_orphans=False,
-    )
-
-
-def _content_hash(candidate_text: str) -> str:
-    return hashlib.sha256(candidate_text.encode(UTF8_ENCODING)).hexdigest()
-
-
-def _recorded_entry(current_hash: str, current_time: float) -> dict[str, object]:
-    return {STORED_CONTENT_HASH_KEY: current_hash, STORED_CHANGED_AT_KEY: current_time}
-
-
-def _has_matching_recorded_failure(
-    stored_entry: object, current_hash: str, current_time: float, freshness_seconds: int
-) -> bool:
-    """Return whether a recorded test failure still evidences the candidate's content.
-
-    A failure counts as evidence only while the candidate's content is
-    exactly what failed and the record has not aged past the freshness
-    window -- editing the test again, or letting the record go stale, drops
-    it as evidence and falls back to the ordinary content-hash tracking.
-    """
-    if not isinstance(stored_entry, dict):
-        return False
-    if stored_entry.get(STORED_FAILURE_HASH_KEY) != current_hash:
-        return False
-    failed_at = stored_entry.get(STORED_FAILED_AT_KEY)
-    if not isinstance(failed_at, (int, float)):
-        return False
-    return current_time - failed_at <= freshness_seconds
-
-
-def _is_qualifying_first_sight(
-    candidate_path: Path, candidate_text: str, current_time: float, freshness_seconds: int
-) -> bool:
-    candidate_mtime = freshness._safe_mtime(candidate_path)
-    if candidate_mtime is None or current_time - candidate_mtime > freshness_seconds:
-        return False
-    if not freshness.has_test_evidence_in(candidate_text):
-        return False
-    return git_tracking.has_uncommitted_change_from_head(candidate_path)
-
-
-def _first_sight_decision(
-    candidate_path: Path,
-    candidate_text: str,
-    current_time: float,
-    freshness_seconds: int,
-    current_hash: str,
-) -> tuple[bool, dict[str, object] | None]:
-    if not _is_qualifying_first_sight(
-        candidate_path, candidate_text, current_time, freshness_seconds
-    ):
-        return False, None
-    return True, _recorded_entry(current_hash, current_time)
-
-
-def _content_hash_decision(
-    all_stored_entry_fields: dict[str, object],
-    current_hash: str,
-    current_time: float,
-    freshness_seconds: int,
-) -> tuple[bool, dict[str, object] | None]:
-    if current_hash != all_stored_entry_fields.get(STORED_CONTENT_HASH_KEY):
-        return True, _recorded_entry(current_hash, current_time)
-    stored_changed_at = all_stored_entry_fields.get(STORED_CHANGED_AT_KEY)
-    if not isinstance(stored_changed_at, (int, float)):
-        return False, None
-    return current_time - stored_changed_at <= freshness_seconds, None
-
-
-def _evaluate_candidate(
-    candidate_path: Path,
-    stored_entry: object,
-    current_time: float,
-    freshness_seconds: int,
-) -> tuple[bool, dict[str, object] | None]:
-    candidate_text = freshness._read_candidate_text(candidate_path)
-    if candidate_text is None:
-        return False, None
-    current_hash = _content_hash(candidate_text)
-    if _has_matching_recorded_failure(
-        stored_entry, current_hash, current_time, freshness_seconds
-    ):
-        return True, None
-    if not isinstance(stored_entry, dict) or STORED_CONTENT_HASH_KEY not in stored_entry:
-        return _first_sight_decision(
-            candidate_path, candidate_text, current_time, freshness_seconds, current_hash
-        )
-    return _content_hash_decision(stored_entry, current_hash, current_time, freshness_seconds)
-
-
-def _apply_candidate_decisions(
-    all_candidates: list[Path],
-    all_stored_hashes: dict[str, object],
-    current_time: float,
-    freshness_seconds: int,
-) -> tuple[bool, bool]:
-    is_allowed = False
-    state_changed = False
-    for each_candidate in all_candidates:
-        candidate_key = _state_key_for(each_candidate)
-        candidate_allowed, updated_entry = _evaluate_candidate(
-            each_candidate,
-            all_stored_hashes.get(candidate_key),
-            current_time,
-            freshness_seconds,
-        )
-        if candidate_allowed:
-            is_allowed = True
-        if updated_entry is not None:
-            all_stored_hashes[candidate_key] = updated_entry
-            state_changed = True
-    return is_allowed, state_changed
-
-
-def has_recorded_or_fresh_test(
-    all_candidates: list[Path],
-    session_id: str,
-    repository_root: str,
-    freshness_seconds: int,
-) -> bool:
-    """Return whether any candidate's tracked content hash satisfies the gate.
-
-    Args:
-        all_candidates: Candidate test paths for the production file.
-        session_id: Raw session_id from the hook payload.
-        repository_root: Raw cwd from the hook payload.
-        freshness_seconds: Maximum age, in seconds, a stored hash may have.
-
-    Returns:
-        True when at least one candidate carries a matching recorded test
-        failure, is a fresh dirty first sighting, has a recorded hash that
-        now differs, or has a recorded hash still in window.
-    """
-    state_file = _state_file_path(session_id, repository_root)
-    with hold_state_file_lock(state_file):
-        all_stored_hashes = _load_state(state_file)
-        is_allowed, state_changed = _apply_candidate_decisions(
-            all_candidates, all_stored_hashes, time.time(), freshness_seconds
-        )
-        if state_changed:
-            _atomic_write_state(state_file, all_stored_hashes)
-    return is_allowed
-
-
-def _merged_failure_entry(
-    existing_entry: object,
-    candidate_text: str,
-    command: str,
-    exit_status: int,
-    current_time: float,
-) -> dict[str, object]:
-    merged_entry = dict(existing_entry) if isinstance(existing_entry, dict) else {}
-    merged_entry[STORED_FAILURE_HASH_KEY] = _content_hash(candidate_text)
-    merged_entry[STORED_FAILED_AT_KEY] = current_time
-    merged_entry[STORED_FAILURE_COMMAND_KEY] = command
-    merged_entry[STORED_FAILURE_EXIT_STATUS_KEY] = exit_status
-    return merged_entry
-
-
-def _record_one_test_file_failure(
-    test_file_path: Path,
-    all_stored_hashes: dict[str, object],
-    command: str,
-    exit_status: int,
-    current_time: float,
-) -> bool:
-    candidate_text = freshness._read_candidate_text(test_file_path)
-    if candidate_text is None:
-        return False
-    candidate_key = _state_key_for(test_file_path)
-    all_stored_hashes[candidate_key] = _merged_failure_entry(
-        all_stored_hashes.get(candidate_key),
-        candidate_text,
-        command,
-        exit_status,
-        current_time,
-    )
-    return True
-
-
-def record_test_command_failure(
-    all_test_file_paths: list[Path],
-    command: str,
-    exit_status: int,
-    session_id: str,
-    repository_root: str,
-) -> None:
-    """Record a failing test command as gate evidence, one entry per test file.
-
-    Keyed exactly as the gate looks candidates up, so a failure satisfies the
-    gate only for the file it names, never a sibling the command also ran.
-    Existing content-hash fields on that entry are preserved, not overwritten.
-    """
-    state_file = _state_file_path(session_id, repository_root)
-    current_time = time.time()
-    with hold_state_file_lock(state_file):
-        all_stored_hashes = _load_state(state_file)
-        all_recorded = [
-            _record_one_test_file_failure(
-                each_path, all_stored_hashes, command, exit_status, current_time
-            )
-            for each_path in all_test_file_paths
-        ]
-        if any(all_recorded):
-            _atomic_write_state(state_file, all_stored_hashes)

package/hooks/blocking/tdd_enforcer_parts/decisions.py

@@ -1,96 +0,0 @@
-"""Build and emit the gate's allow and deny decisions.
-
-Writes the PreToolUse decision JSON to stdout and, on a deny, records the block
-and attaches the short user-facing notice.
-"""
-
-import json
-import sys
-from pathlib import Path
-
-from tdd_enforcer_parts.config.tdd_enforcer_constants import (
-    ENTRY_HOOK_FILE_NAME,
-    FRESHNESS_WINDOW_SECONDS,
-    NEWLINE_JOIN_SEPARATOR,
-)
-
-from hooks_constants.hook_block_logger import log_hook_block
-from hooks_constants.messages import USER_FACING_TDD_NOTICE
-
-
-def _entry_hook_path() -> Path:
-    """Return the entry hook file that wires the gate's exemption rules together.
-
-    The exemption logic the deny message points at lives in the entry hook
-    beside this parts package, not in this emit-only module::
-
-        tdd_enforcer_parts/decisions.py  ->  parent  ->  blocking/
-        blocking/tdd_enforcer.py         <-  the named exemption home
-
-    So the guidance names the entry hook, letting a reader land on the module
-    that actually decides exemptions.
-    """
-    return Path(__file__).resolve().parent.parent / ENTRY_HOOK_FILE_NAME
-
-
-def build_deny_reason(production_path: Path, all_candidates: list[Path]) -> str:
-    """Return the verbose deny message naming the candidate test files.
-
-    Args:
-        production_path: The production file the write targets.
-        all_candidates: Candidate test paths the gate looked for.
-
-    Returns:
-        The multi-line reason shown when no fresh test satisfies the gate.
-    """
-    candidate_lines = NEWLINE_JOIN_SEPARATOR.join(f"  - {each_path}" for each_path in all_candidates)
-    hook_source_path = _entry_hook_path()
-    return (
-        f"[TDD] Blocking write to production file: {production_path}\n"
-        f"No matching test file exists. Or none of them is fresh, carries real test "
-        f"evidence, and holds content HEAD does not have yet. Or a previously "
-        f"recorded test's content has not changed within the last "
-        f"{FRESHNESS_WINDOW_SECONDS} seconds. Write a new test or change an "
-        f"existing one; touching a file without changing its content does not "
-        f"satisfy this gate.\n"
-        f"Expected one of:\n{candidate_lines}\n"
-        f"Write a failing test first (RED), then the minimum code to pass it (GREEN).\n\n"
-        f"If this file legitimately does not need a test (for example, a module containing only "
-        f"module-level constants with no behavior), that is a hook enhancement, not a bypass. "
-        f"Propose an exemption rule in {hook_source_path} so every similar file benefits "
-        f"automatically. Do not add escape-hatch markers to production files."
-    )
-
-
-def emit_allow() -> None:
-    """Write the allow decision to stdout."""
-    allow_payload = {
-        "hookSpecificOutput": {
-            "hookEventName": "PreToolUse",
-            "permissionDecision": "allow",
-        }
-    }
-    sys.stdout.write(json.dumps(allow_payload))
-
-
-def emit_deny(reason: str) -> None:
-    """Write the deny decision to stdout and record the block.
-
-    Args:
-        reason: The verbose deny reason shown to the agent.
-    """
-    deny_payload = {
-        "hookSpecificOutput": {
-            "hookEventName": "PreToolUse",
-            "permissionDecision": "deny",
-            "permissionDecisionReason": reason,
-        },
-        "suppressOutput": True,
-        "systemMessage": USER_FACING_TDD_NOTICE,
-    }
-    log_hook_block(
-        calling_hook_name="tdd_enforcer.py",
-        hook_event="PreToolUse",
-        block_reason=reason,
-    )
-    sys.stdout.write(json.dumps(deny_payload))

package/hooks/blocking/tdd_enforcer_parts/freshness.py

@@ -1,95 +0,0 @@
-"""Freshness check for the candidate test files the gate resolves.
-
-A candidate satisfies the gate when it was modified inside the freshness window
-and holds a real test function, so a stale test or a same-named file with no
-test evidence does not open the gate.
-"""
-
-import re
-import time
-from pathlib import Path
-
-from tdd_enforcer_parts.config.tdd_enforcer_constants import FRESHNESS_WINDOW_SECONDS
-
-
-def _freshness_seconds() -> int:
-    return FRESHNESS_WINDOW_SECONDS
-
-
-def _test_file_encoding() -> str:
-    return "utf-8"
-
-
-def _test_function_patterns() -> tuple[re.Pattern[str], ...]:
-    return (
-        re.compile(r"\bdef\s+test_"),
-        re.compile(r"\b(?:it|test|describe)\s*\("),
-    )
-
-
-def _safe_mtime(candidate_path: Path) -> float | None:
-    try:
-        return candidate_path.stat().st_mtime
-    except (FileNotFoundError, OSError):
-        return None
-
-
-def _read_candidate_text(candidate_path: Path) -> str | None:
-    try:
-        with candidate_path.open("r", encoding=_test_file_encoding(), errors="ignore") as each_file:
-            return each_file.read()
-    except (FileNotFoundError, OSError):
-        return None
-
-
-def has_test_evidence_in(candidate_text: str) -> bool:
-    """Return whether the given text holds a real test function.
-
-    Takes the text rather than the path, so a caller that has already read the
-    file does not read it a second time.
-
-    Args:
-        candidate_text: The candidate test file's full text.
-
-    Returns:
-        True when the text matches any test-function pattern.
-    """
-    return any(
-        each_pattern.search(candidate_text) for each_pattern in _test_function_patterns()
-    )
-
-
-def _contains_test_evidence(candidate_path: Path) -> bool:
-    test_file_content = _read_candidate_text(candidate_path)
-    if test_file_content is None:
-        return False
-    return has_test_evidence_in(test_file_content)
-
-
-def _candidate_is_fresh_test(
-    candidate_path: Path, current_time: float, freshness_seconds: int
-) -> bool:
-    candidate_mtime = _safe_mtime(candidate_path)
-    if candidate_mtime is None:
-        return False
-    if current_time - candidate_mtime > freshness_seconds:
-        return False
-    return _contains_test_evidence(candidate_path)
-
-
-def has_fresh_test(all_candidates: list[Path], freshness_seconds: int) -> bool:
-    """Return whether any candidate is a recently modified real test file.
-
-    Args:
-        all_candidates: Candidate test paths for the production file.
-        freshness_seconds: Maximum age, in seconds, a test may have.
-
-    Returns:
-        True when at least one candidate was modified within the window and
-        holds a test function.
-    """
-    current_time = time.time()
-    return any(
-        _candidate_is_fresh_test(each_candidate, current_time, freshness_seconds)
-        for each_candidate in all_candidates
-    )

package/hooks/blocking/tdd_enforcer_parts/git_tracking.py

@@ -1,132 +0,0 @@
-"""Ask git about a candidate path: is it a restore, and does it carry a real edit.
-
-::
-
-    remove orders.py (git-tracked) -> Write orders.py  -> restore (allow)
-    Write brand_new.py (untracked, absent)             -> new code (gate)
-
-A full rewrite happens as remove-then-Write, so the file is absent on disk
-between the two steps. Restoring committed code is not new production code, so
-the gate exempts a Write whose target is absent yet tracked in git.
-
-``has_uncommitted_change_from_head`` answers a second, related question the
-content-hash store's first-sight check needs: whether a candidate test file
-already carries content HEAD does not have, so a `touch` on an already-clean,
-committed test cannot pass as a first sighting.
-"""
-
-import subprocess
-from pathlib import Path
-
-from tdd_enforcer_parts.config.tdd_enforcer_constants import (
-    GIT_DIFF_QUIET_FLAG,
-    GIT_DIFF_SUBCOMMAND,
-    GIT_DIFF_TIMEOUT_SECONDS,
-    GIT_EXECUTABLE_NAME,
-    GIT_HEAD_REVISION,
-    GIT_LS_FILES_SUBCOMMAND,
-    GIT_LS_FILES_TIMEOUT_SECONDS,
-    GIT_PATHSPEC_SEPARATOR,
-)
-
-from hooks_constants.subprocess_window import hidden_window_creation_flags
-
-
-def _git_ls_files_command(file_name: str) -> list[str]:
-    return [GIT_EXECUTABLE_NAME, GIT_LS_FILES_SUBCOMMAND, GIT_PATHSPEC_SEPARATOR, file_name]
-
-
-def _git_diff_quiet_against_head_command(file_name: str) -> list[str]:
-    return [
-        GIT_EXECUTABLE_NAME,
-        GIT_DIFF_SUBCOMMAND,
-        GIT_DIFF_QUIET_FLAG,
-        GIT_HEAD_REVISION,
-        GIT_PATHSPEC_SEPARATOR,
-        file_name,
-    ]
-
-
-def _git_tracks_path(path: Path) -> bool:
-    parent_directory = path.parent
-    if not parent_directory.is_dir():
-        return False
-    try:
-        completed = subprocess.run(
-            _git_ls_files_command(path.name),
-            cwd=str(parent_directory),
-            capture_output=True,
-            text=True,
-            check=False,
-            timeout=GIT_LS_FILES_TIMEOUT_SECONDS,
-            creationflags=hidden_window_creation_flags(),
-        )
-    except (OSError, subprocess.SubprocessError):
-        return False
-    return completed.returncode == 0 and bool(completed.stdout.strip())
-
-
-def _working_tree_differs_from_head(path: Path) -> bool:
-    """Compare the working tree to HEAD, not to the index.
-
-    A plain ``git diff`` (no revision argument) compares the working tree to
-    the index, so a file that was just ``git add``-ed reads as unchanged even
-    when it holds content HEAD never had. Naming ``HEAD`` folds the index and
-    the working tree into one comparison against the last commit, catching a
-    staged-but-uncommitted new file and a staged edit alike.
-    """
-    try:
-        completed = subprocess.run(
-            _git_diff_quiet_against_head_command(path.name),
-            cwd=str(path.parent),
-            capture_output=True,
-            text=True,
-            check=False,
-            timeout=GIT_DIFF_TIMEOUT_SECONDS,
-            creationflags=hidden_window_creation_flags(),
-        )
-    except (OSError, subprocess.SubprocessError):
-        return True
-    return completed.returncode != 0
-
-
-def is_absent_but_tracked(path: Path) -> bool:
-    """Return whether a write target is absent on disk yet tracked in git.
-
-    ::
-
-        path missing on disk + git ls-files finds it -> True  (restore)
-        path present, or git does not track it       -> False
-
-    Args:
-        path: The write target.
-
-    Returns:
-        True only when the path does not exist but git tracks it, marking the
-        write a restore of committed code rather than new production code.
-    """
-    if path.exists():
-        return False
-    return _git_tracks_path(path)
-
-
-def has_uncommitted_change_from_head(path: Path) -> bool:
-    """Return whether *path* carries content its git HEAD does not have.
-
-    ::
-
-        untracked file                -> True  (no HEAD entry to match)
-        tracked, working tree != HEAD -> True  (a real edit this session)
-        tracked, working tree == HEAD -> False (clean; a touch cannot pass)
-        git unavailable or errors     -> True  (cannot prove it is clean)
-
-    Args:
-        path: The candidate test file to check.
-
-    Returns:
-        True unless git can positively confirm the file is tracked and its
-        working-tree content matches HEAD exactly.
-    """
-    if not _git_tracks_path(path):
-        return True
-    return _working_tree_differs_from_head(path)