flowchart TD
    A[会话开始] --> B[SessionStart 一次/会话]
    B --> C[你提交一条 prompt]
    C --> D[UserPromptSubmit 一次/轮]
    D --> E[智能体循环 每轮可能多次]
    E --> F{PreToolUse 工具执行前}
    F -->|deny| G[阻断 该工具不执行]
    F -->|放行| H[工具真正执行]
    H --> I[PostToolUse 执行后]
    I --> J[同一轮内继续调用工具?]
    J -->|是| F
    J -->|否| K[Stop 本轮结束]
    K --> L[你下一条 prompt]
    L --> D
    style G fill:#fdd,stroke:#c00
    style H fill:#dfd,stroke:#0a0

#!/usr/bin/env bash
# .claude/hooks/block-dangerous.sh
# 从 stdin 读取钩子输入 JSON，提取 Bash 命令，命中黑名单则 deny
set -euo pipefail
INPUT=$(cat)
COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // ""')

# 危险命令黑名单：递归删根、强制推送到主分支、管道执行远程脚本
deny_patterns=(
  'rm[[:space:]]+-rf[[:space:]]+/?($|[[:space:]])'   # rm -rf / 或 rm -rf / ...
  'git[[:space:]]+push.*--force'                       # 强制推送
  'curl[[:space:]].*\|[[:space:]]*sh'                 # curl ... | sh
  '>[[:space:]]*/dev/sda'                              # 直接写裸设备
)

for pat in "${deny_patterns[@]}"; do
  if echo "$COMMAND" | grep -Eq "$pat"; then
    cat <<EOF
{
  "hookSpecificOutput": {
    "hookEventName": "PreToolUse",
    "permissionDecision": "deny",
    "permissionDecisionReason": "命令命中安全门禁黑名单: $pat。请改用更安全的等价操作，例如限制作用域或分步确认。"
  }
}
EOF
    exit 0
  fi
done
exit 0   # 静默放行：exit 0 + 无输出 = 不干预，走正常权限流程

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "if": "Bash(rm *) || Bash(git push *) || Bash(curl *)",
            "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/block-dangerous.sh"
          }
        ]
      }
    ]
  }
}

echo '{"tool_name":"Bash","tool_input":{"command":"rm -rf /"}}' \
  | .claude/hooks/block-dangerous.sh

#!/usr/bin/env bash
# .claude/hooks/secret-scan.sh
# 扫描 Edit/Write 的待写内容，命中常见密钥形态则 deny
set -euo pipefail
INPUT=$(cat)

# Write 的内容在 tool_input.content；Edit 的新内容在 tool_input.new_string
CONTENT=$(echo "$INPUT" | jq -r '
  .tool_input.content // .tool_input.new_string // ""')
FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // "?"')

# 常见密钥指纹：AWS Access Key、GitHub PAT、Google API Key、私钥头
patterns=(
  'AKIA[0-9A-Z]{16}'                # AWS Access Key ID
  'gh[pousr]_[A-Za-z0-9]{36}'       # GitHub fine-grained / classic PAT
  'AIza[0-9A-Za-z_-]{35}'           # Google API Key
  '-----BEGIN (RSA |EC |)PRIVATE KEY-----'
)

for pat in "${patterns[@]}"; do
  if echo "$CONTENT" | grep -Eq "$pat"; then
    cat <<EOF
{
  "hookSpecificOutput": {
    "hookEventName": "PreToolUse",
    "permissionDecision": "deny",
    "permissionDecisionReason": "检测到疑似密钥 ($pat) 将写入 $FILE_PATH。请改用环境变量或密钥管理服务，不要把密钥硬编码进文件。"
  }
}
EOF
    exit 0
  fi
done
exit 0

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Edit|Write",
        "hooks": [
          {
            "type": "command",
            "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/secret-scan.sh"
          }
        ]
      }
    ]
  }
}

#!/usr/bin/env bash
# .claude/hooks/auto-format.sh
# 写入成功后，对目标文件跑 prettier（若项目里有）
set -euo pipefail
INPUT=$(cat)
FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty')

[ -z "$FILE_PATH" ] && exit 0
[ -f "$FILE_PATH" ] || exit 0

# 只处理 JS/TS，且项目装了 prettier 才跑
case "$FILE_PATH" in
  *.js|*.ts|*.jsx|*.tsx|*.json|*.css|*.md)
    if [ -x "node_modules/.bin/prettier" ]; then
      node_modules/.bin/prettier --write "$FILE_PATH" >/dev/null 2>&1 || true
    fi
    ;;
esac
exit 0

{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Edit|Write|MultiEdit",
        "hooks": [
          {
            "type": "command",
            "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/auto-format.sh"
          }
        ]
      }
    ]
  }
}

{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "*",
        "hooks": [
          {
            "type": "command",
            "async": true,
            "command": "jq -c '{ts: now|todateiso8601, tool: .tool_name, input: .tool_input}' >> ${CLAUDE_PROJECT_DIR}/.claude/audit.jsonl"
          }
        ]
      }
    ]
  }
}

#!/usr/bin/env bash
# .claude/hooks/preflight.sh
# 批量任务启动前的一次性体检
set -uo pipefail
fail=0

echo "[preflight] 检查依赖..." >&2
[ -d node_modules ] || { echo "✗ node_modules 缺失，先 npm ci" >&2; fail=1; }

echo "[preflight] 检查密钥是否误提交..." >&2
if git ls-files | grep -Eq '\.env$'; then
  echo "✗ .env 已被 git 跟踪，立即处理" >&2; fail=1
fi

echo "[preflight] 检查测试基线..." >&2
if ! npm test --silent >/dev/null 2>&1; then
  echo "✗ 测试基线未通过，先修红再开工" >&2; fail=1
fi

[ $fail -eq 0 ] && echo "[preflight] 通过" >&2
exit 0

{
  "hooks": {
    "Setup": [
      {
        "matcher": "maintenance",
        "hooks": [
          { "type": "command", "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/preflight.sh" }
        ]
      }
    ]
  }
}

claude -p --maintenance "检查环境" 2>&1 | grep preflight

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          { "type": "command", "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/block-dangerous.sh" }
        ]
      },
      {
        "matcher": "Edit|Write|MultiEdit",
        "hooks": [
          { "type": "command", "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/secret-scan.sh" }
        ]
      }
    ],
    "PostToolUse": [
      {
        "matcher": "Edit|Write|MultiEdit",
        "hooks": [
          { "type": "command", "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/auto-format.sh" }
        ]
      },
      {
        "matcher": "*",
        "hooks": [
          { "type": "command", "async": true,
            "command": "jq -c '{ts: now|todateiso8601, tool: .tool_name, input: .tool_input}' >> ${CLAUDE_PROJECT_DIR}/.claude/audit.jsonl" }
        ]
      }
    ],
    "Setup": [
      {
        "matcher": "maintenance",
        "hooks": [
          { "type": "command", "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/preflight.sh" }
        ]
      }
    ]
  }
}

#!/usr/bin/env bash
# .claude/run-batch.sh <prompt-file>
set -euo pipefail
PROMPT_FILE="${1:?用法: run-batch.sh <prompt-file>}"

echo "=== 1. 预检 ===" 
claude -p --maintenance "preflight" || { echo "预检失败，中止"; exit 1; }

echo "=== 2. 批量执行（护栏已激活）==="
claude -p "$(cat "$PROMPT_FILE")" \
      --output-format stream-json \
      --verbose \
  | tee .claude/run-stream.jsonl

echo "=== 3. 拦截统计 ==="
grep -c '"deny"' .claude/audit.jsonl 2>/dev/null \
  && echo "次危险操作被门禁拦截" \
  || echo "本次无拦截"

sequenceDiagram
    autonumber
    participant U as 你的脚本 run-batch.sh
    participant CC as Claude Code (-p)
    participant H as 钩子处理器
    participant FS as 文件系统

    U->>CC: claude -p --maintenance (预检)
    CC->>H: Setup 事件 → preflight.sh
    H-->>CC: 通过 / 失败
    alt 预检失败
        CC-->>U: 中止
    else 预检通过
        U->>CC: claude -p "批量重构" --output-format stream-json
        loop 每个工具调用
            CC->>H: PreToolUse (Bash?) → block-dangerous.sh
            alt 命中黑名单
                H-->>CC: deny + 中文理由
                CC->>CC: 模型据理由换写法
            else 放行
                H-->>CC: 静默 (exit 0)
                CC->>H: PreToolUse (Edit?) → secret-scan.sh
                alt 命中密钥
                    H-->>CC: deny
                else 放行
                    CC->>FS: 真正执行写入
                    CC->>H: PostToolUse → auto-format.sh
                    H->>FS: prettier --write
                    H-->>CC: (async) 审计日志追加
                end
            end
        end
        CC-->>U: stream-json 流（含每次拦截）
        U->>U: grep deny 统计拦截次数
    end