mirror of
https://github.com/gnekt/My-Brain-Is-Full-Crew.git
synced 2026-09-09 07:16:28 +00:00
0e66ce3efa
build: add platform_dir and dispatcher_name to all hook wrapper/plugin templates feat(hooks): platform-aware path checks using platform_dir and dispatcher_name from JSON input test: update regression snapshot for platform-aware hook wrappers and scripts
66 lines
2.8 KiB
Bash
Executable File
66 lines
2.8 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# =============================================================================
|
|
# Hook: Protect System Files (PreToolUse on Write/Edit)
|
|
# =============================================================================
|
|
# Prevents agents from accidentally overwriting core crew files at runtime.
|
|
# Custom agents in the platform agents directory are allowed (the Architect
|
|
# creates them). User-mutable references (agents-registry.md, agents.md) are
|
|
# also allowed.
|
|
#
|
|
# Reads platform_dir and dispatcher_name from the neutral JSON input to
|
|
# determine which paths to protect. Falls back to .claude / CLAUDE.md if
|
|
# the fields are missing (backward compatibility).
|
|
#
|
|
# Exit codes:
|
|
# 0 = allow the operation
|
|
# 2 = block the operation (hard reject)
|
|
# =============================================================================
|
|
|
|
INPUT=$(cat)
|
|
FILE=$(echo "$INPUT" | jq -r '.args.file_path // .args.command // ""' 2>/dev/null)
|
|
|
|
# If we can't extract a file path, allow the operation
|
|
[[ -z "$FILE" ]] && exit 0
|
|
|
|
BASENAME=$(basename "$FILE")
|
|
PLATFORM_DIR=$(echo "$INPUT" | jq -r '.platform_dir // ".claude"' 2>/dev/null)
|
|
DISPATCHER_NAME=$(echo "$INPUT" | jq -r '.dispatcher_name // "CLAUDE.md"' 2>/dev/null)
|
|
|
|
# ── Dispatcher file: never modify at runtime ──────────────────────────────
|
|
if [[ "$BASENAME" == "$DISPATCHER_NAME" && "$FILE" != *"$PLATFORM_DIR/"* ]]; then
|
|
echo "BLOCKED: $DISPATCHER_NAME is a system file. Update it in the repo and run updateme.sh."
|
|
exit 2
|
|
fi
|
|
|
|
# ── Core agent definitions: never modify at runtime ─────────────────────────
|
|
CORE_AGENTS="architect.md scribe.md sorter.md seeker.md connector.md librarian.md transcriber.md postman.md"
|
|
if [[ "$FILE" == *"$PLATFORM_DIR/agents/"* ]]; then
|
|
for core in $CORE_AGENTS; do
|
|
if [[ "$BASENAME" == "$core" ]]; then
|
|
echo "BLOCKED: $BASENAME is a core agent definition. Update it in the repo and run updateme.sh."
|
|
exit 2
|
|
fi
|
|
done
|
|
# Custom agents are allowed through
|
|
exit 0
|
|
fi
|
|
|
|
# ── Skills: never modify at runtime ─────────────────────────────────────────
|
|
if [[ "$FILE" == *"$PLATFORM_DIR/skills/"* ]]; then
|
|
echo "BLOCKED: Skill files are managed by the repo. Update them in the repo and run updateme.sh."
|
|
exit 2
|
|
fi
|
|
|
|
# ── Core references: block all except user-mutable ones ─────────────────────
|
|
if [[ "$FILE" == *"$PLATFORM_DIR/references/"* ]]; then
|
|
USER_MUTABLE="agents-registry.md agents.md"
|
|
for allowed in $USER_MUTABLE; do
|
|
[[ "$BASENAME" == "$allowed" ]] && exit 0
|
|
done
|
|
echo "BLOCKED: $BASENAME is a core reference file. Update it in the repo and run updateme.sh."
|
|
exit 2
|
|
fi
|
|
|
|
# Everything else is allowed
|
|
exit 0
|