commit-guard

1// commit-guard: Irfan's git rules, enforced before the command runs.
2// 1. docs/superpowers never gets committed: it is unstaged right before a commit.
3// 2. No git push unless his last prompt said push (or PR).
4// 3. A commit on main/master/staging/prod asks him first, unless his prompt named that branch.
5
6import type { EngineInterface, Register } from 'claude-code'
7
8const DANGER = /^(main|master|staging|prod|production)$/
9const NEVER = 'docs/superpowers'
10
11let lastPrompt = ''
12
13// ponytail: reads a leading `cd <dir>` off the command, else the session cwd
14async function repoRoot($: EngineInterface, command: string): Promise<string> {
15  const cd = /^\s*cd\s+("([^"]+)"|'([^']+)'|(\S+))/.exec(command)
16  const dir = cd?.[2] ?? cd?.[3] ?? cd?.[4]?.replace(/;$/, '')
17  return dir?.replace(/^~/, (await $.env.get('HOME')) ?? '~') ?? (await $.session.cwd())
18}
19
20async function git($: EngineInterface, root: string, ...args: string[]): Promise<string> {
21  const r = await $.process.run(['git', '-C', root, ...args], { timeoutMs: 5000 })
22  return r.exitCode === 0 ? r.stdout.trim() : ''
23}
24
25export const register: Register = on => {
26  on('prompt.submit', async ($, e, next) => {
27    if (e.origin.kind === 'composer') lastPrompt = e.text
28    return next(e)
29  })
30
31  on('tool.call', { tool: 'Bash' }, async ($, e, next) => {
32    const cmd = e.command
33
34    if (/\bgit\s+push\b/.test(cmd) && !/\b(push|pr|pull request)\b/i.test(lastPrompt)) {
35      $.ui.toast('commit-guard: blocked git push, you did not ask for it')
36      return { deny: 'commit-guard: Irfan did not ask to push. Commit only, then ask him before pushing.' }
37    }
38
39    if (!/\bgit\s+commit\b/.test(cmd)) return next(e)
40    const root = await repoRoot($, cmd)
41
42    const staged = await git($, root, 'diff', '--cached', '--name-only', '--', NEVER)
43    if (staged !== '') {
44      await git($, root, 'reset', '-q', '--', NEVER)
45      $.ui.toast(`commit-guard: unstaged ${staged.split('\n').length} file(s) under ${NEVER}`)
46    }
47
48    const branch = await git($, root, 'rev-parse', '--abbrev-ref', 'HEAD')
49    if (DANGER.test(branch) && !new RegExp(`\\b${branch}\\b`, 'i').test(lastPrompt)) {
50      const answer = await $.ui.ask(`commit-guard: Claude wants to commit on ${branch}. Allow?`, [
51        'Allow this commit',
52        'Block it',
53      ])
54      if (answer !== 'Allow this commit') {
55        return { deny: `commit-guard: Irfan blocked a commit on ${branch}. Ask which branch to use.` }
56      }
57    }
58
59    return next(e)
60  })
61}
62