claude-dev-env 8.96.7 → 8.97.0

package/hooks/test_plugin_session_baseline.py

@@ -0,0 +1,98 @@
+"""Behavior tests for the plugin session baseline record."""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+
+import pytest
+
+import plugin_session_baseline
+
+PLUGIN_ID = "pstack@pstack-claude"
+
+
+@pytest.fixture(autouse=True)
+def isolated_temp_folder(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
+    monkeypatch.setattr(
+        plugin_session_baseline.tempfile, "gettempdir", lambda: str(tmp_path)
+    )
+
+
+def test_installed_plugins_path_should_follow_the_config_directory(
+    monkeypatch: pytest.MonkeyPatch, tmp_path: Path
+) -> None:
+    monkeypatch.setenv("CLAUDE_CONFIG_DIR", str(tmp_path))
+    assert plugin_session_baseline.installed_plugins_path() == (
+        tmp_path / "plugins" / "installed_plugins.json"
+    )
+
+
+def test_baseline_record_path_should_name_the_session_in_the_temp_folder(
+    tmp_path: Path,
+) -> None:
+    assert plugin_session_baseline.baseline_record_path("a/b c") == (
+        tmp_path / "plugin-session-baseline-abc.json"
+    )
+
+
+def test_current_plugin_snapshot_should_keep_only_version_and_install_path(
+    tmp_path: Path,
+) -> None:
+    record_path = tmp_path / "installed_plugins.json"
+    record_path.write_text(
+        json.dumps(
+            {
+                "plugins": {
+                    PLUGIN_ID: [
+                        {
+                            "scope": "user",
+                            "installPath": "/cache/pstack/1.0.0",
+                            "version": "1.0.0",
+                            "lastUpdated": "2026-10-21T21:26:12.000Z",
+                        }
+                    ]
+                }
+            }
+        ),
+        encoding="utf-8",
+    )
+    assert plugin_session_baseline.current_plugin_snapshot(record_path) == {
+        PLUGIN_ID: [{"version": "1.0.0", "installPath": "/cache/pstack/1.0.0"}]
+    }
+
+
+def test_current_plugin_snapshot_should_read_a_malformed_record_as_empty(
+    tmp_path: Path,
+) -> None:
+    record_path = tmp_path / "installed_plugins.json"
+    record_path.write_text("{not json", encoding="utf-8")
+    assert plugin_session_baseline.current_plugin_snapshot(record_path) == {}
+
+
+def test_read_baseline_record_should_return_what_the_writer_stored() -> None:
+    snapshot = {PLUGIN_ID: [{"version": "1.0.0", "installPath": "/cache/pstack/1.0.0"}]}
+    plugin_session_baseline.write_baseline_record("session", snapshot, [PLUGIN_ID])
+    assert plugin_session_baseline.read_baseline_record("session") == {
+        "plugins": snapshot,
+        "warned": [PLUGIN_ID],
+    }
+
+
+def test_all_changed_plugin_ids_should_name_changed_and_new_plugins_only() -> None:
+    unchanged_entries = [{"version": "1.0.0", "installPath": "/cache/a/1.0.0"}]
+    baseline_snapshot = {
+        "a@m": unchanged_entries,
+        "b@m": [{"version": "1.0.0", "installPath": "/cache/b/1.0.0"}],
+    }
+    current_snapshot = {
+        "a@m": unchanged_entries,
+        "b@m": [{"version": "2.0.0", "installPath": "/cache/b/2.0.0"}],
+        "c@m": [{"version": "1.0.0", "installPath": "/cache/c/1.0.0"}],
+    }
+    assert plugin_session_baseline.all_changed_plugin_ids(
+        baseline_snapshot, current_snapshot
+    ) == [
+        "b@m",
+        "c@m",
+    ]

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-dev-env",
-    "version": "8.96.7",
+    "version": "8.97.0",
     "description": "Claude Code development standards — rules, hooks, agents, commands, and skills",
     "type": "module",
     "bin": {

package/scripts/policy_lint/adapter_configuration.py

@@ -136,6 +136,7 @@ def _names_exempt_registration_path(registered_string: str) -> bool:
         hooks/blocking/verify_before_acting.py           -> exempt
         hooks/blocking/session_title_format_gate.py      -> exempt
         hooks/blocking/artifact_dark_mode_gate.py        -> exempt
+        hooks/blocking/send_user_file_worktree_root_gate.py -> exempt
         hooks/blocking/build_eval_before_eval_write_gate.py -> exempt
         hooks/blocking/merge_over_review_offer_gate.py   -> exempt
         hooks/blocking/final_reply_gate.py               -> exempt
@@ -174,6 +175,10 @@ def _names_exempt_registration_path(registered_string: str) -> bool:
     The artifact page gate denies a page publish whose text is unreadable in
     dark mode. It decides how a page renders and no code or safety policy.
 
+    The send user file gate denies a SendUserFile path outside the session's
+    working directory, which the desktop file pane cannot open. It decides
+    where a sent file sits and no code or safety policy.
+
     The eval write gate denies a write to an eval file until the session
     invokes ``/claude-api build-eval``. It holds eval writes until a skill
     loads, and it judges no code or safety content.

package/scripts/policy_lint/config/constants.py

@@ -74,6 +74,7 @@ ALL_ACTION_BOUNDARY_EXEMPT_REGISTRATION_PATHS = (
     "blocking/session_title_format_gate.py",
     "blocking/image_read_size_gate.py",
     "blocking/artifact_dark_mode_gate.py",
+    "blocking/send_user_file_worktree_root_gate.py",
     "blocking/haiku_spawn_slim_gate.py",
     "blocking/build_eval_before_eval_write_gate.py",
     "blocking/merge_over_review_offer_gate.py",

package/scripts/tests/test_adapter_configuration.py

@@ -154,6 +154,14 @@ def test_new_artifact_page_gate_registration_is_clean(tmp_path: Path) -> None:
     assert adapters.hook_configuration_diagnostics(current_document, tmp_path) == ()
 
 
+def test_new_send_user_file_gate_registration_is_clean(tmp_path: Path) -> None:
+    current_document = _hook_document(
+        ["hooks/blocking/send_user_file_worktree_root_gate.py"],
+        '{"hooks": {}}',
+    )
+    assert adapters.hook_configuration_diagnostics(current_document, tmp_path) == ()
+
+
 def test_new_eval_write_gate_registration_is_clean(tmp_path: Path) -> None:
     current_document = _hook_document(
         ["hooks/blocking/build_eval_before_eval_write_gate.py"],