@devrik-tools/claude-gates 0.1.1 → 0.1.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devrik-tools/claude-gates",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Installable, deterministic gates (hooks) for Claude Code: block destructive commands, protected paths, and enforce delegation/spec/quality rules. Configurable per project.",
   "keywords": [
     "claude-code",

package/plugins/gates/hooks/gates/autonomous-mode/index.mjs

@@ -0,0 +1,45 @@
+// autonomous-mode — when the project turns on autonomous mode, the assistant must stop
+// asking and decide. This gate denies the AskUserQuestion tool while the mode is on, so a
+// question popup cannot interrupt an unattended run. The assistant is expected to take the
+// best, aligned decision and state the reversible assumption instead of asking.
+//
+// justification: no existing tool covers this. It is the deterministic half of "run without
+// asking": a gate can block the question tool; the prose reminder (via the session-start
+// hook and this gate's message) covers the rest, which a hook cannot force.
+//
+// ── When it acts ────────────────────────────────────────────────────────────────────
+// Only when autonomousMode is enabled in .ai/config.json (project) or the global config.
+// Off by default. The user is also reminded at session start that the mode is on (see the
+// session hook), in case they forgot to turn it off.
+//
+// ── What it does NOT do ─────────────────────────────────────────────────────────────
+// It blocks the AskUserQuestion TOOL. It cannot stop the assistant from asking in plain
+// prose (no hook sees chat text) — the injected reminder pushes against that, but the only
+// deterministic lever is the question tool, and this gate pulls it.
+
+import { runGate, deny, TOOL_GROUPS } from '../../lib/hook-io.mjs';
+
+const GATE_ID = 'autonomous-mode';
+const CONFIG_KEY = 'autonomousMode';
+
+const QUESTION_TOOLS = new Set(TOOL_GROUPS.question);
+
+const DENY_MESSAGE =
+  'Autonomous mode is ON for this project: do not ask the user. Take the best decision ' +
+  'that is aligned with the goal and the project rules, state the reversible assumption you ' +
+  'made, and proceed. Only a genuinely irreversible or dangerous choice (deleting data, ' +
+  'money, production) would justify stopping — and then say so in prose, do not use the ' +
+  'question popup. To let questions through again, set "autonomousMode": false in ' +
+  '.ai/config.json.';
+
+runGate(
+  {
+    id: GATE_ID,
+    configKey: CONFIG_KEY,
+    enabledByDefault: false,
+  },
+  ({ toolName }) => {
+    if (!QUESTION_TOOLS.has(toolName)) return;
+    deny(GATE_ID, DENY_MESSAGE);
+  },
+);

package/plugins/gates/hooks/gates/autonomous-mode/test.mjs

@@ -0,0 +1,58 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, mkdirSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { test } from 'node:test';
+import { fileURLToPath } from 'node:url';
+
+const GATE = join(dirname(fileURLToPath(import.meta.url)), 'index.mjs');
+
+// Runs the gate in a temp project with HOME isolated (so the real global config is not
+// read). `autonomous` writes the flag on. Returns the parsed deny output, or null.
+function runGate(payload, { autonomous } = {}) {
+  const project = mkdtempSync(join(tmpdir(), 'autonomous-mode-'));
+  mkdirSync(join(project, '.git'));
+  mkdirSync(join(project, '.ai'));
+  writeFileSync(
+    join(project, '.ai', 'config.json'),
+    JSON.stringify({
+      gates: { autonomousMode: { enabled: Boolean(autonomous) } },
+    }),
+  );
+  const out = execFileSync(process.execPath, [GATE], {
+    input: JSON.stringify(payload),
+    encoding: 'utf8',
+    cwd: project,
+    env: { ...process.env, HOME: project, USERPROFILE: project },
+  });
+  return out.trim() ? JSON.parse(out.trim()) : null;
+}
+
+function ask() {
+  return {
+    tool_name: 'AskUserQuestion',
+    tool_input: { questions: [{ question: 'A or B?' }] },
+  };
+}
+function isDeny(result) {
+  return result?.hookSpecificOutput?.permissionDecision === 'deny';
+}
+
+test('autonomous mode ON: AskUserQuestion is denied', () => {
+  assert.ok(isDeny(runGate(ask(), { autonomous: true })));
+});
+
+test('autonomous mode OFF (default): questions pass', () => {
+  assert.equal(runGate(ask(), { autonomous: false }), null);
+});
+
+test('even ON, a non-question tool is never blocked', () => {
+  assert.equal(
+    runGate(
+      { tool_name: 'Write', tool_input: { file_path: 'x.js', content: '' } },
+      { autonomous: true },
+    ),
+    null,
+  );
+});

package/plugins/gates/hooks/hooks.json

@@ -260,6 +260,26 @@
             "timeout": 10
           }
         ]
+      },
+      {
+        "matcher": "Write|Edit|NotebookEdit|write_to_file|replace_file_content|Bash|run_command",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/gates/forge-flow/index.mjs\"",
+            "timeout": 10
+          }
+        ]
+      },
+      {
+        "matcher": "AskUserQuestion",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/gates/autonomous-mode/index.mjs\"",
+            "timeout": 10
+          }
+        ]
       }
     ]
   }

package/registry.json

@@ -630,6 +630,24 @@
         }
       ]
     },
+    {
+      "id": "autonomy",
+      "name": "Autonomy",
+      "description": "Autonomous mode: block the question popup so an unattended run decides instead of asking.",
+      "gates": [
+        {
+          "id": "autonomous-mode",
+          "configKey": "autonomousMode",
+          "default": false,
+          "event": "PreToolUse",
+          "tools": [
+            "question"
+          ],
+          "description": "When autonomous mode is on, denies AskUserQuestion so the assistant decides instead of asking.",
+          "script": "gates/autonomous-mode/index.mjs"
+        }
+      ]
+    },
     {
       "id": "session",
       "name": "Session start",