remote-gate

1import type { Register } from 'claude-code'
2
3import { classify, repoDir } from './gate'
4
5/**
6 * Remote Gate: asks before `git push` and `wrangler ... --remote`, showing the remote, the branch
7 * and the commits that will go out. The repository shown is the one the command works in
8 * (`git -C dir push`, `cd dir && git push`), not only the session's own.
9 * Fail closed: a dismissed or unavailable dialog refuses the command.
10 */
11export const register: Register = on => {
12  let home = ''
13
14  on('session.start', async ($, e, next) => {
15    home = String((await $.env.get('HOME')) ?? '')
16
17    return next(e)
18  })
19
20  on('tool.call', { tool: 'Bash' }, async ($, e, next) => {
21    const command = String(e.command ?? '')
22    const kind = classify(command)
23
24    if (kind === undefined) return next(e)
25
26    let approved = false
27
28    try {
29      let info = ''
30
31      if (kind !== 'remote-db') {
32        const dir = repoDir(command, home)
33        const where = dir ? ['-C', dir] : []
34        const remote = await $.process.run(['git', ...where, 'remote', '-v'])
35        const branch = await $.process.run(['git', ...where, 'rev-parse', '--abbrev-ref', 'HEAD'])
36        const out = await $.process.run(['git', ...where, 'log', '--oneline', '@{u}..HEAD'])
37        const urls = remote.stdout.split('\n').filter(l => l.includes('(push)')).join('; ')
38        const commits = out.exitCode === 0 ? out.stdout.trim() || 'немає нових комітів' : 'upstream не задано'
39
40        // the dialog collapses line breaks, so the parts are labelled sentences
41        info = ` Тека: ${dir ?? 'тека сесії'}. Гілка: ${branch.stdout.trim() || '?'}. Remote: ${urls || '?'}. Піде: ${commits.split('\n').slice(0, 12).join(' | ')}.`
42      }
43
44      const label = kind === 'force-push' ? 'FORCE-PUSH' : kind === 'push' ? 'git push' : 'wrangler --remote (бойові дані)'
45      const answer = await $.ui.ask(`Remote Gate: ${label}. Команда: ${command.slice(0, 200)}.${info} Виконати?`, {
46        options: ['Виконати', 'Скасувати'],
47        header: 'Remote Gate',
48      })
49
50      approved = answer === 'Виконати'
51    } catch {
52      // dismissed or headless: fail closed
53    }
54
55    if (!approved) return { deny: 'remote-gate: не підтверджено. Не повторюй команду без нової згоди користувача.' }
56
57    return next(e)
58  })
59}
60

1export type Kind = 'push' | 'force-push' | 'remote-db'
2
3/** Drop heredoc bodies (documents/code fed to another program) unless a shell reads them. */
4function stripHeredocs(cmd: string): string {
5  const out: string[] = []
6  let end: string | null = null
7  let keep = false
8
9  for (const line of cmd.split('\n')) {
10    if (end !== null) {
11      if (line.trim() === end) end = null
12      else if (keep) out.push(line)
13
14      continue
15    }
16
17    out.push(line)
18
19    const m = /<<-?\s*(['"]?)([A-Za-z_]\w*)\1/.exec(line)
20
21    if (m) {
22      end = m[2]!
23      keep = /\b(ba|z|da|)sh\s*(-\w+\s*)*(-\s*)?<</.test(line)
24    }
25  }
26
27  return out.join('\n')
28}
29
30/** Quoted strings emptied: `echo "git push"` and a commit message that mentions it are not a push. */
31const maskQuotes = (s: string) => s.replace(/'[^']*'|"(?:[^"\\]|\\.)*"/g, '""')
32
33export function classify(command: string): Kind | undefined {
34  const cmd = maskQuotes(stripHeredocs(command))
35
36  if (/\bgit\b[^|;&]*\bpush\b/.test(cmd)) {
37    return /--force\b|--force-with-lease|--force-if-includes|(^|\s)-f(\s|$)|\+\S+:|\s\+\S+/.test(cmd) ? 'force-push' : 'push'
38  }
39
40  if (/\bwrangler\b/.test(cmd) && /--remote\b/.test(cmd)) return 'remote-db'
41
42  return undefined
43}
44
45const unquote = (s: string) => s.replace(/^["']|["']$/g, '')
46
47/**
48 * The folder the command works in: `git -C <dir> push` or a leading `cd <dir> &&`.
49 * Without it the gate would describe the session's own repository, not the one being pushed.
50 */
51export function repoDir(command: string, home: string): string | undefined {
52  const cmd = stripHeredocs(command)
53  const c = /\bgit\s+(?:--?[\w-]+(?:=\S+)?\s+)*-C\s+("[^"]+"|'[^']+'|[^\s"']+)/.exec(cmd)
54  const cd = /^\s*cd\s+("[^"]+"|'[^']+'|[^\s;&"']+)\s*(?:&&|;)/.exec(cmd)
55  const raw = c?.[1] ?? cd?.[1]
56
57  if (!raw) return undefined
58
59  const dir = unquote(raw)
60
61  return dir.startsWith('~/') && home ? `${home}${dir.slice(1)}` : dir
62}
63