584ce646e1
- Chat mode: AIUI loads in sandboxed iframe at /dashboard/chat with transparent bg - Mode switcher: Easy + Pro tabs only, Chat is a launcher button - Keyboard shortcuts: Cmd+1 (Easy), Cmd+2 (Pro), Cmd+3 (Chat), Cmd+M (cycle) - Directional transitions: chat slides from/to left, dashboard from/to right - Context broker: postMessage protocol for quarantined AIUI communication - AI permissions store: user-controlled toggles for data access categories - Settings UI: AI Data Access section with per-category toggles - AIUI container manifest and nginx proxy config for /aiui/ - Deploy script builds AIUI with /aiui/ base path - Overnight loop infrastructure (loop.sh, prepare.sh, plan.md, prompt.md) - Security hooks for autonomous overnight runs Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
83 lines
2.2 KiB
Bash
Executable File
83 lines
2.2 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# PreToolUse Edit|Write guard: block edits outside project and to protected paths.
|
|
# Denies: paths outside project, .git/, .env*, lockfiles, node_modules/, deploy-config.sh
|
|
set -euo pipefail
|
|
|
|
INPUT=$(cat)
|
|
FILE_PATH=$(python3 -c "
|
|
import json, sys
|
|
try:
|
|
data = json.loads(sys.stdin.read())
|
|
print(data.get('tool_input', {}).get('file_path', ''))
|
|
except: pass
|
|
" <<< "$INPUT")
|
|
BASE="${CLAUDE_PROJECT_DIR:-}"
|
|
[[ -z "$BASE" ]] && BASE=$(python3 -c "
|
|
import json, sys
|
|
try:
|
|
data = json.loads(sys.stdin.read())
|
|
print(data.get('cwd', ''))
|
|
except: pass
|
|
" <<< "$INPUT")
|
|
[[ -z "$BASE" ]] && BASE="$(pwd)"
|
|
|
|
# Resolve to absolute path
|
|
if [[ -z "$FILE_PATH" ]]; then
|
|
exit 0
|
|
fi
|
|
ABS_BASE=$(cd "$BASE" 2>/dev/null && pwd) || true
|
|
[[ -z "$ABS_BASE" ]] && ABS_BASE=$(python3 -c "import os,sys; print(os.path.abspath(os.path.normpath(sys.argv[1])))" "$BASE" 2>/dev/null) || true
|
|
[[ -z "$ABS_BASE" ]] && ABS_BASE="$BASE"
|
|
[[ "$ABS_BASE" != */ ]] && ABS_BASE="${ABS_BASE}/"
|
|
if [[ "$FILE_PATH" != /* ]]; then
|
|
ABS_PATH="$ABS_BASE${FILE_PATH#./}"
|
|
else
|
|
ABS_PATH="$FILE_PATH"
|
|
fi
|
|
ABS_PATH=$(python3 -c "import os,sys; print(os.path.abspath(os.path.normpath(sys.argv[1])))" "$ABS_PATH" 2>/dev/null) || true
|
|
[[ -z "$ABS_PATH" ]] && ABS_PATH="$ABS_BASE${FILE_PATH#./}"
|
|
|
|
deny() {
|
|
local reason="$1"
|
|
echo "Blocked: $ABS_PATH — $reason" >&2
|
|
python3 -c "
|
|
import json
|
|
print(json.dumps({
|
|
'hookSpecificOutput': {
|
|
'hookEventName': 'PreToolUse',
|
|
'permissionDecision': 'deny',
|
|
'permissionDecisionReason': '$reason'
|
|
}
|
|
}))
|
|
"
|
|
exit 0
|
|
}
|
|
|
|
# Protected patterns
|
|
PROTECTED_PATTERNS=(
|
|
".git/"
|
|
".env"
|
|
".env.local"
|
|
"node_modules/"
|
|
"package-lock.json"
|
|
"scripts/deploy-config.sh"
|
|
)
|
|
|
|
for pattern in "${PROTECTED_PATTERNS[@]}"; do
|
|
if [[ "$ABS_PATH" == *"$pattern"* ]] || [[ "$ABS_PATH" == *"/$pattern" ]]; then
|
|
deny "Edit blocked: path matches protected pattern ($pattern)"
|
|
fi
|
|
done
|
|
|
|
# .env.*.local
|
|
if [[ "$ABS_PATH" =~ \.env\..*\.local$ ]]; then
|
|
deny "Edit blocked: .env.*.local files contain secrets"
|
|
fi
|
|
|
|
# Ensure path is under project root
|
|
if [[ "$ABS_PATH" != "$ABS_BASE"* ]] && [[ "$ABS_PATH" != "$BASE"* ]]; then
|
|
deny "Edit blocked: path is outside project directory"
|
|
fi
|
|
|
|
exit 0
|