cc-toolgate 0.6.3

PreToolUse hook for Claude Code that gates Bash commands with compound-command-aware validation
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89

//! Data-driven command spec for flat allow/ask/deny command lists.

use crate::commands::CommandSpec;
use crate::eval::{CommandContext, Decision, RuleMatch};

/// A data-driven command spec for flat allow/ask commands.
///
/// For allow commands: returns Allow unless output redirection is detected (→ Ask).
/// `--version` on any allowed command is also allowed.
/// For ask commands: always returns Ask.
pub struct SimpleCommandSpec {
    /// The baseline decision for this command (Allow, Ask, or Deny).
    decision: Decision,
}

impl SimpleCommandSpec {
    /// Create a new spec with the given baseline decision.
    pub fn new(decision: Decision) -> Self {
        Self { decision }
    }
}

impl CommandSpec for SimpleCommandSpec {
    fn evaluate(&self, ctx: &CommandContext) -> RuleMatch {
        match self.decision {
            Decision::Allow => {
                // Check for --version on any allowed command
                if ctx.words.len() <= 3 && ctx.has_flag("--version") {
                    return RuleMatch {
                        decision: Decision::Allow,
                        reason: format!("{} --version", ctx.base_command),
                    };
                }
                // Redirection escalates ALLOW → ASK
                if let Some(ref r) = ctx.redirection {
                    return RuleMatch {
                        decision: Decision::Ask,
                        reason: format!("{} with {}", ctx.base_command, r),
                    };
                }
                RuleMatch {
                    decision: Decision::Allow,
                    reason: format!("allowed: {}", ctx.base_command),
                }
            }
            Decision::Ask => RuleMatch {
                decision: Decision::Ask,
                reason: format!("{} requires confirmation", ctx.base_command),
            },
            Decision::Deny => RuleMatch {
                decision: Decision::Deny,
                reason: format!("blocked command: {}", ctx.base_command),
            },
        }
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn allow_simple() {
        let spec = SimpleCommandSpec::new(Decision::Allow);
        let ctx = CommandContext::from_command("ls -la");
        assert_eq!(spec.evaluate(&ctx).decision, Decision::Allow);
    }

    #[test]
    fn allow_with_redir() {
        let spec = SimpleCommandSpec::new(Decision::Allow);
        let ctx = CommandContext::from_command("ls > file.txt");
        assert_eq!(spec.evaluate(&ctx).decision, Decision::Ask);
    }

    #[test]
    fn ask_simple() {
        let spec = SimpleCommandSpec::new(Decision::Ask);
        let ctx = CommandContext::from_command("rm -rf /tmp");
        assert_eq!(spec.evaluate(&ctx).decision, Decision::Ask);
    }

    #[test]
    fn deny_simple() {
        let spec = SimpleCommandSpec::new(Decision::Deny);
        let ctx = CommandContext::from_command("shred /dev/sda");
        assert_eq!(spec.evaluate(&ctx).decision, Decision::Deny);
    }
}