lixeira

1import type { Register } from 'claude-code'
2
3export type Shell = 'bash' | 'powershell'
4
5// ponytail: copy of guarda's tokenize/PREFIXES — plugins load isolated, an import across mods may not exist when installed.
6function tokenize(text: string): string[] {
7  const words: string[] = []
8  const re = /"((?:[^"\\]|\\.)*)"|'([^']*)'|(\S+)/g
9  for (let m = re.exec(text); m; m = re.exec(text)) words.push(m[1] ?? m[2] ?? m[3] ?? '')
10  return words
11}
12
13const PREFIXES = new Set(['sudo', 'command', 'exec', 'env', 'nohup', 'time', 'then', 'do', 'else', '!'])
14const PS_DELETE = /(?:^|[;|{(\n]|&&)\s*(?:remove-item|rm|del|erase|ri|rd|rmdir)(?=\s|$|[;|)}])/i
15
16/** Does the line run rm (Bash) or a Remove-Item alias (PowerShell) as a command? A false positive only adds a harmless prefix. */
17export function hasDelete(command: string, shell: Shell): boolean {
18  if (shell === 'powershell') return PS_DELETE.test(command)
19  return command.split(/&&|\|\||;|\||\n/).some(seg => {
20    const words = tokenize(seg.trim().replace(/^[({]+\s*/, ''))
21    while (words.length && (PREFIXES.has(words[0]!) || /^[A-Za-z_]\w*=/.test(words[0]!))) words.shift()
22    return words[0] === 'rm'
23  })
24}
25
26/** The command with the delete shadowed by the mod's scripts in `hooks` (a folder without single quotes). */
27export function rewrite(command: string, shell: Shell, hooks: string): string {
28  // A shadow that fails to load (moved, ExecutionPolicy) stops the line instead of letting the real Remove-Item run.
29  if (shell === 'powershell') return `try { . '${hooks}/remove-item.ps1' } catch { throw 'lixeira: a sombra nao carregou; nada foi apagado' }; ${command}`
30  return `rm() { powershell.exe -NoProfile -NonInteractive -File '${hooks}/lixeira.ps1' "$@"; }; ${command}`
31}
32
33export const register: Register = on => {
34  on('tool.call', { tool: ['Bash', 'PowerShell'] }, ($, e, next) => {
35    if (e.tool !== 'Bash' && e.tool !== 'PowerShell') return next(e)
36    const sh: Shell = e.tool === 'Bash' ? 'bash' : 'powershell'
37    const command = String(e.command ?? '')
38    const hooks = `${$.plugin.root.replace(/\\/g, '/')}/hooks`
39    if (hooks.includes("'") || !hasDelete(command, sh)) return next(e)
40    return next({ ...e, command: rewrite(command, sh, hooks) } as typeof e)
41  }).catch(($, e, next) =>
42    // Before next: let the original run (a lixeira bug must not block the shell; guarda still holds rm -rf).
43    // After next: the rewritten delete already ran — running the original now would delete for good.
44    next.called ? { deny: 'A lixeira falhou depois de rodar o comando. Confira o resultado antes de repetir.' } : next(e),
45  )
46}
47