2e8e071d75
- Allow go mod tidy, go work sync, go get, go run (no core wrapper) - Only block sed -i on local files (allow via ssh/docker) - grep -l only blocked when piped to destructive commands - Remove sed > and awk > blocks (too aggressive) - check-debug: only flag fmt.Print* not log.Println (go-log is valid) Co-Authored-By: Virgil <virgil@lethean.io>
108 lines
4.5 KiB
Bash
Executable file
108 lines
4.5 KiB
Bash
Executable file
#!/bin/bash
|
|
# PreToolUse hook: Block dangerous commands, enforce core CLI
|
|
#
|
|
# BLOCKS:
|
|
# - Raw go commands (use core go *)
|
|
# - Destructive patterns (sed -i, xargs rm, etc.)
|
|
# - Mass file operations (rm -rf, mv/cp with wildcards)
|
|
#
|
|
# This prevents "efficient shortcuts" that nuke codebases
|
|
|
|
read -r input
|
|
full_command=$(echo "$input" | jq -r '.tool_input.command // empty')
|
|
|
|
# Strip heredoc content — only check the actual command, not embedded text
|
|
# This prevents false positives from code/docs inside heredocs
|
|
command=$(echo "$full_command" | sed -n '1p')
|
|
if echo "$command" | grep -qE "<<\s*['\"]?[A-Z_]+"; then
|
|
# First line has heredoc marker — only check the command portion before <<
|
|
command=$(echo "$command" | sed -E 's/\s*<<.*$//')
|
|
fi
|
|
|
|
# For multi-line commands joined with && or ;, check each segment
|
|
# But still only the first line (not heredoc body)
|
|
|
|
# === HARD BLOCKS - Never allow these ===
|
|
|
|
# Block rm -rf, rm -r (except for known safe paths like node_modules, vendor, .cache)
|
|
# Allow git rm -r (safe — git tracks everything, easily reversible)
|
|
if echo "$command" | grep -qE 'rm\s+(-[a-zA-Z]*r[a-zA-Z]*|-[a-zA-Z]*f[a-zA-Z]*r|--recursive)'; then
|
|
# git rm -r is safe — everything is tracked and recoverable
|
|
if echo "$command" | grep -qE 'git\s+rm\s'; then
|
|
: # allow git rm through
|
|
# Allow only specific safe directories for raw rm
|
|
elif ! echo "$command" | grep -qE 'rm\s+(-rf|-r)\s+(node_modules|vendor|\.cache|dist|build|__pycache__|\.pytest_cache|/tmp/)'; then
|
|
echo '{"decision": "block", "message": "BLOCKED: Recursive delete is not allowed. Delete files individually or ask the user to run this command."}'
|
|
exit 0
|
|
fi
|
|
fi
|
|
|
|
# Block mv/cp with dangerous wildcards (e.g. `cp * /tmp`, `mv ./* /dest`)
|
|
# Allow specific file copies that happen to use glob in a for loop or path
|
|
if echo "$command" | grep -qE '(mv|cp)\s+(\.\/)?\*\s'; then
|
|
echo '{"decision": "block", "message": "BLOCKED: Mass file move/copy with bare wildcards is not allowed. Copy files individually."}'
|
|
exit 0
|
|
fi
|
|
|
|
# Block xargs with rm, mv, cp (mass operations)
|
|
if echo "$command" | grep -qE 'xargs\s+.*(rm|mv|cp)'; then
|
|
echo '{"decision": "block", "message": "BLOCKED: xargs with file operations is not allowed. Too risky for mass changes."}'
|
|
exit 0
|
|
fi
|
|
|
|
# Block find -exec with rm, mv, cp
|
|
if echo "$command" | grep -qE 'find\s+.*-exec\s+.*(rm|mv|cp)'; then
|
|
echo '{"decision": "block", "message": "BLOCKED: find -exec with file operations is not allowed. Too risky for mass changes."}'
|
|
exit 0
|
|
fi
|
|
|
|
# Block sed -i on LOCAL files only (allow on remote via ssh/docker exec)
|
|
if echo "$command" | grep -qE '^sed\s+(-[a-zA-Z]*i|--in-place)'; then
|
|
echo '{"decision": "block", "message": "BLOCKED: sed -i (in-place edit) on local files. Use the Edit tool."}'
|
|
exit 0
|
|
fi
|
|
|
|
# Block grep -l piped to destructive commands only (not head, wc, etc.)
|
|
if echo "$command" | grep -qE 'grep\s+.*-l.*\|\s*(xargs|sed|rm|mv)'; then
|
|
echo '{"decision": "block", "message": "BLOCKED: grep -l piped to destructive commands. Too risky."}'
|
|
exit 0
|
|
fi
|
|
|
|
# Block perl -i on local files
|
|
if echo "$command" | grep -qE '^perl\s+-[a-zA-Z]*i'; then
|
|
echo '{"decision": "block", "message": "BLOCKED: In-place file editing with perl. Use the Edit tool."}'
|
|
exit 0
|
|
fi
|
|
|
|
# === REQUIRE CORE CLI ===
|
|
|
|
# Suggest core CLI for common go commands, but don't block
|
|
# go work sync, go mod edit, go get, go install, go list etc. have no core wrapper
|
|
case "$command" in
|
|
"go test"*|"go build"*|"go fmt"*|"go vet"*)
|
|
echo '{"decision": "block", "message": "Use `core go test`, `core build`, `core go fmt --fix`, `core go vet`. Raw go commands bypass quality checks."}'
|
|
exit 0
|
|
;;
|
|
esac
|
|
# Allow all other go commands (go mod tidy, go work sync, go get, go run, etc.)
|
|
|
|
# Block raw php commands
|
|
case "$command" in
|
|
"php artisan serve"*|"./vendor/bin/pest"*|"./vendor/bin/pint"*|"./vendor/bin/phpstan"*)
|
|
echo '{"decision": "block", "message": "Use `core php dev`, `core php test`, `core php fmt`, `core php analyse`. Raw php commands are not allowed."}'
|
|
exit 0
|
|
;;
|
|
"composer test"*|"composer lint"*)
|
|
echo '{"decision": "block", "message": "Use `core php test` or `core php fmt`. Raw composer commands are not allowed."}'
|
|
exit 0
|
|
;;
|
|
esac
|
|
|
|
# Block golangci-lint directly
|
|
if echo "$command" | grep -qE '^golangci-lint'; then
|
|
echo '{"decision": "block", "message": "Use `core go lint` instead of golangci-lint directly."}'
|
|
exit 0
|
|
fi
|
|
|
|
# === APPROVED ===
|
|
echo '{"decision": "approve"}'
|