rippy-cli 0.1.1

A shell command safety hook for AI coding tools (Claude Code, Cursor, Gemini CLI) — Rust rewrite of Dippy
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128

#![allow(clippy::unwrap_used)]

mod common;
use common::run_rippy_in_dir;

// ---- Python script file reading ----

#[test]
fn python_script_safe_file_allows() {
    let dir = tempfile::tempdir().unwrap();
    std::fs::write(
        dir.path().join("safe.py"),
        "import json\nprint(json.dumps({}))",
    )
    .unwrap();
    let json = r#"{"tool_name":"Bash","tool_input":{"command":"python safe.py"}}"#;
    let (stdout, code) = run_rippy_in_dir(json, "claude", dir.path());
    assert_eq!(code, 0);
    let v: serde_json::Value = serde_json::from_str(&stdout).unwrap();
    assert_eq!(v["hookSpecificOutput"]["permissionDecision"], "allow");
}

#[test]
fn python_script_dangerous_file_asks() {
    let dir = tempfile::tempdir().unwrap();
    std::fs::write(dir.path().join("evil.py"), "import os\nos.system('ls')").unwrap();
    let json = r#"{"tool_name":"Bash","tool_input":{"command":"python evil.py"}}"#;
    let (_stdout, code) = run_rippy_in_dir(json, "claude", dir.path());
    assert_eq!(code, 2);
}

// ---- SQL file reading ----

#[test]
fn psql_f_readonly_file_allows() {
    let dir = tempfile::tempdir().unwrap();
    std::fs::write(dir.path().join("query.sql"), "SELECT * FROM users;").unwrap();
    let json = r#"{"tool_name":"Bash","tool_input":{"command":"psql -f query.sql"}}"#;
    let (stdout, code) = run_rippy_in_dir(json, "claude", dir.path());
    assert_eq!(code, 0);
    let v: serde_json::Value = serde_json::from_str(&stdout).unwrap();
    assert_eq!(v["hookSpecificOutput"]["permissionDecision"], "allow");
}

#[test]
fn psql_f_write_file_asks() {
    let dir = tempfile::tempdir().unwrap();
    std::fs::write(dir.path().join("migrate.sql"), "DROP TABLE users;").unwrap();
    let json = r#"{"tool_name":"Bash","tool_input":{"command":"psql -f migrate.sql"}}"#;
    let (_stdout, code) = run_rippy_in_dir(json, "claude", dir.path());
    assert_eq!(code, 2);
}

// ---- Shell script file reading ----

#[test]
fn bash_script_safe_file_allows() {
    let dir = tempfile::tempdir().unwrap();
    std::fs::write(dir.path().join("test.sh"), "ls -la").unwrap();
    let json = r#"{"tool_name":"Bash","tool_input":{"command":"bash test.sh"}}"#;
    let (stdout, code) = run_rippy_in_dir(json, "claude", dir.path());
    assert_eq!(code, 0);
    let v: serde_json::Value = serde_json::from_str(&stdout).unwrap();
    assert_eq!(v["hookSpecificOutput"]["permissionDecision"], "allow");
}

#[test]
fn bash_script_dangerous_file_asks() {
    let dir = tempfile::tempdir().unwrap();
    std::fs::write(dir.path().join("danger.sh"), "rm -rf /").unwrap();
    let json = r#"{"tool_name":"Bash","tool_input":{"command":"bash danger.sh"}}"#;
    let (_stdout, code) = run_rippy_in_dir(json, "claude", dir.path());
    assert_eq!(code, 2);
}

// ---- GH API --input file reading ----

#[test]
fn gh_api_input_query_file_allows() {
    let dir = tempfile::tempdir().unwrap();
    std::fs::write(
        dir.path().join("query.graphql"),
        "{ repository(owner: \"o\", name: \"r\") { name } }",
    )
    .unwrap();
    let json =
        r#"{"tool_name":"Bash","tool_input":{"command":"gh api graphql --input query.graphql"}}"#;
    let (stdout, code) = run_rippy_in_dir(json, "claude", dir.path());
    assert_eq!(code, 0);
    let v: serde_json::Value = serde_json::from_str(&stdout).unwrap();
    assert_eq!(v["hookSpecificOutput"]["permissionDecision"], "allow");
}

#[test]
fn gh_api_input_mutation_file_asks() {
    let dir = tempfile::tempdir().unwrap();
    std::fs::write(
        dir.path().join("mutate.graphql"),
        "mutation { addStar(input: {}) { clientMutationId } }",
    )
    .unwrap();
    let json =
        r#"{"tool_name":"Bash","tool_input":{"command":"gh api graphql --input mutate.graphql"}}"#;
    let (_stdout, code) = run_rippy_in_dir(json, "claude", dir.path());
    assert_eq!(code, 2);
}

// ---- AWK -f file reading ----

#[test]
fn awk_f_safe_file_allows() {
    let dir = tempfile::tempdir().unwrap();
    std::fs::write(dir.path().join("safe.awk"), "{print $1}").unwrap();
    let json = r#"{"tool_name":"Bash","tool_input":{"command":"awk -f safe.awk data.txt"}}"#;
    let (stdout, code) = run_rippy_in_dir(json, "claude", dir.path());
    assert_eq!(code, 0);
    let v: serde_json::Value = serde_json::from_str(&stdout).unwrap();
    assert_eq!(v["hookSpecificOutput"]["permissionDecision"], "allow");
}

#[test]
fn awk_f_system_file_asks() {
    let dir = tempfile::tempdir().unwrap();
    std::fs::write(dir.path().join("evil.awk"), r#"{system("rm -rf /")}"#).unwrap();
    let json = r#"{"tool_name":"Bash","tool_input":{"command":"awk -f evil.awk"}}"#;
    let (_stdout, code) = run_rippy_in_dir(json, "claude", dir.path());
    assert_eq!(code, 2);
}