destructive_command_guard 0.4.3

A Claude Code hook that blocks destructive commands before they execute
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

$schema: "https://json-schema.org/draft/2020-12/schema"
title: "dcg external pack schema"
type: object
additionalProperties: false
required:
  - schema_version
  - id
  - name
  - version
properties:
  schema_version:
    type: integer
    minimum: 1
    description: Schema version for forward compatibility.
    default: 1
  id:
    type: string
    pattern: "^[a-z][a-z0-9_]*\\.[a-z][a-z0-9_]*$"
    description: Unique pack identifier (e.g., mycompany.policies).
  name:
    type: string
    description: Human-readable pack name.
  version:
    type: string
    pattern: "^\\d+\\.\\d+\\.\\d+$"
    description: Semantic version of the pack definition.
  description:
    type: string
    description: What this pack protects against.
  keywords:
    type: array
    description: Keywords that trigger evaluation for this pack.
    items:
      type: string
    default: []
  destructive_patterns:
    type: array
    description: Patterns that block or warn based on severity.
    items:
      type: object
      additionalProperties: false
      required:
        - name
        - pattern
      properties:
        name:
          type: string
          description: Stable pattern identifier within the pack.
        pattern:
          type: string
          description: fancy-regex pattern to match.
        severity:
          type: string
          enum: [low, medium, high, critical]
          default: high
          description: Default decision mode based on severity.
        description:
          type: string
          description: Short human-readable reason shown on denial.
        explanation:
          type: string
          description: Longer explanation shown in verbose output.
    default: []
  safe_patterns:
    type: array
    description: Patterns that explicitly allow commands.
    items:
      type: object
      additionalProperties: false
      required:
        - name
        - pattern
      properties:
        name:
          type: string
          description: Stable pattern identifier within the pack.
        pattern:
          type: string
          description: fancy-regex pattern to match.
        description:
          type: string
          description: Short reason for allowlisting.
    default: []