81 lines
2.5 KiB
Bash
Executable File
81 lines
2.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# PreToolUse Edit|Write guard: block edits outside project and to protected paths.
|
|
# Denies: paths outside project, .git/, .env*, lockfiles, node_modules/
|
|
set -euo pipefail
|
|
|
|
INPUT=$(cat)
|
|
FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty')
|
|
BASE="${CLAUDE_PROJECT_DIR:-}"
|
|
[[ -z "$BASE" ]] && BASE=$(echo "$INPUT" | jq -r '.cwd // empty')
|
|
[[ -z "$BASE" ]] && BASE="$(pwd)"
|
|
|
|
# Resolve to absolute path
|
|
if [[ -z "$FILE_PATH" ]]; then
|
|
exit 0
|
|
fi
|
|
ABS_BASE=$(cd "$BASE" 2>/dev/null && pwd) || true
|
|
[[ -z "$ABS_BASE" ]] && ABS_BASE=$(python3 -c "import os,sys; print(os.path.abspath(os.path.normpath(sys.argv[1])))" "$BASE" 2>/dev/null) || true
|
|
[[ -z "$ABS_BASE" ]] && ABS_BASE="$BASE"
|
|
# Ensure base has trailing slash for prefix check
|
|
[[ "$ABS_BASE" != */ ]] && ABS_BASE="${ABS_BASE}/"
|
|
if [[ "$FILE_PATH" != /* ]]; then
|
|
ABS_PATH="$ABS_BASE${FILE_PATH#./}"
|
|
else
|
|
ABS_PATH="$FILE_PATH"
|
|
fi
|
|
# Normalize path (collapse .. and ., no symlink resolution needed)
|
|
ABS_PATH=$(python3 -c "import os,sys; print(os.path.abspath(os.path.normpath(sys.argv[1])))" "$ABS_PATH" 2>/dev/null) || true
|
|
[[ -z "$ABS_PATH" ]] && ABS_PATH="$ABS_BASE${FILE_PATH#./}"
|
|
|
|
# Protected patterns (path contains or equals)
|
|
PROTECTED_PATTERNS=(
|
|
".git/"
|
|
".env"
|
|
".env.local"
|
|
"node_modules/"
|
|
"package-lock.json"
|
|
"pnpm-lock.yaml"
|
|
)
|
|
|
|
for pattern in "${PROTECTED_PATTERNS[@]}"; do
|
|
if [[ "$ABS_PATH" == *"$pattern"* ]] || [[ "$ABS_PATH" == *"/$pattern" ]]; then
|
|
echo "Blocked: $ABS_PATH matches protected pattern '$pattern'" >&2
|
|
jq -n --arg r "Edit blocked: path matches protected pattern ($pattern)" '{
|
|
hookSpecificOutput: {
|
|
hookEventName: "PreToolUse",
|
|
permissionDecision: "deny",
|
|
permissionDecisionReason: $r
|
|
}
|
|
}'
|
|
exit 0
|
|
fi
|
|
done
|
|
|
|
# .env.*.local
|
|
if [[ "$ABS_PATH" =~ \.env\..*\.local$ ]]; then
|
|
echo "Blocked: $ABS_PATH is an env secrets file" >&2
|
|
jq -n '{
|
|
hookSpecificOutput: {
|
|
hookEventName: "PreToolUse",
|
|
permissionDecision: "deny",
|
|
permissionDecisionReason: "Edit blocked: .env.*.local files contain secrets"
|
|
}
|
|
}'
|
|
exit 0
|
|
fi
|
|
|
|
# Ensure path is under project root (ABS_BASE has trailing /)
|
|
if [[ "$ABS_PATH" != "$ABS_BASE"* ]] && [[ "$ABS_PATH" != "$BASE"* ]]; then
|
|
echo "Blocked: $ABS_PATH is outside project ($ABS_BASE)" >&2
|
|
jq -n --arg r "Edit blocked: path is outside project directory" '{
|
|
hookSpecificOutput: {
|
|
hookEventName: "PreToolUse",
|
|
permissionDecision: "deny",
|
|
permissionDecisionReason: $r
|
|
}
|
|
}'
|
|
exit 0
|
|
fi
|
|
|
|
exit 0
|