@schalkneethling/toolkit 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Schalk Neethling
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,103 @@
+# claude-toolkit
+
+CLI for managing [Claude Code](https://claude.com/claude-code) hooks and skills across projects. Hooks are copied into a project's `.claude/` directory; skills are copied into `.claude-toolkit/skills/` and symlinked into wherever Claude Code expects to find them.
+
+## Repo layout
+
+```plaintext
+.
+├── hooks/
+│   └── block-dangerous-commands/
+│       ├── hook.ts                 # the hook script itself
+│       └── settings-fragment.json  # deep-merged into .claude/settings.json on install
+├── skills/                         # (empty) drop skill directories here
+├── src/
+│   └── index.ts                    # the toolkit CLI
+├── package.json
+├── README.md
+├── tsconfig.json
+├── tsconfig.hooks.json
+└── vite.config.ts
+```
+
+## Requirements
+
+- Node.js 22+
+- `tsx` (installed as a devDependency)
+
+From inside a consuming project, run the CLI with `tsx /path/to/claude-toolkit/cli/index.ts <command>`, or link it as `toolkit` on your `PATH`.
+
+## Commands
+
+### `toolkit add hook <name>`
+
+Copies `hooks/<name>/hook.ts` into `<project>/.claude/hooks/<name>.ts` and deep-merges `hooks/<name>/settings-fragment.json` into `<project>/.claude/settings.json`. Records the source hash in `.claude/toolkit-manifest.json`.
+
+### `toolkit add skill <name> [--link <target>]...`
+
+Copies `skills/<name>/` into `<project>/.claude-toolkit/skills/<name>/` and creates a symlink to that directory inside each `--link` target. If no `--link` is given, the default is `.claude/skills`. Repeat `--link` to create symlinks in multiple locations.
+
+```
+toolkit add skill css-shared-first --link .claude/skills --link docs/skills
+```
+
+### `toolkit update [--force]`
+
+For every entry in `.claude/toolkit-manifest.json`, compares the current source hash to the installed hash:
+
+- If the source changed, shows a line-diff and prompts before overwriting.
+- If the installed file was modified locally (its hash differs from the one recorded in the manifest), warns and skips unless `--force` is passed.
+- Silent if everything is current.
+
+### `toolkit list hook` / `toolkit list skill`
+
+Lists available hooks or skills shipped by this repo, with the current source hash.
+
+## Versioning
+
+- Each hook is hashed over `hook.ts` only (not the README or `settings-fragment.json`).
+- Each skill is hashed over every file in the skill directory (sorted by path).
+- SHA-256, truncated to the first 7 hex characters.
+
+## Manifest format
+
+The CLI writes `<project>/.claude/toolkit-manifest.json`:
+
+```json
+{
+  "hooks": {
+    "block-dangerous-commands": {
+      "hash": "a3f9c2d",
+      "installedAt": "2026-04-18"
+    }
+  },
+  "skills": {
+    "css-shared-first": {
+      "hash": "f91b3e1",
+      "installedAt": "2026-04-18",
+      "linkedTo": [".claude/skills"]
+    }
+  }
+}
+```
+
+## Bundled hooks
+
+### `block-dangerous-commands`
+
+A `PreToolUse` hook for the `Bash` tool. Reads Claude Code's hook payload from stdin and denies commands that match any of:
+
+- `rm -rf` (and flag variants: `-rf`, `-fr`, `--recursive --force`, etc.)
+- `git push --force` / `-f` / `--force-with-lease`
+- Direct push to `main`, `master`, `production`, `prod`, `release`
+- `git reset --hard`
+- `chmod 777` / recursive chmod granting world-write
+- `dd if=…`
+- Redirects into `/etc/`, `/boot/`, `/usr/`, `/bin/`, `/sbin/`
+- The classic fork bomb
+- Piping remote content into a shell (`curl … | bash`, `wget … | sh`)
+- `pkill` and `kill -9` / `-SIGKILL`
+- `npm publish`, `npm deprecate`, `npm unpublish`
+- `history -c`
+
+On a match it exits `2` with a structured JSON payload on stdout (`permissionDecision: "deny"` plus `permissionDecisionReason` explaining why). On any other input — malformed JSON, empty stdin, a non-string command — it fails open (exit `0`) so a broken hook never blocks all work.

package/dist/index.d.mts

@@ -0,0 +1 @@
+export { };

package/dist/index.mjs

@@ -0,0 +1,292 @@
+#!/usr/bin/env node
+import { createHash } from "node:crypto";
+import { cpSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
+import { createInterface } from "node:readline/promises";
+import { dirname, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { parseArgs } from "node:util";
+//#region src/index.ts
+/**
+* toolkit — personal CLI for managing Claude Code hooks and skills.
+*
+* Commands:
+*   toolkit add hook <name>
+*   toolkit add skill <name> [--link <target>...]
+*   toolkit update [--force]
+*   toolkit list hook
+*   toolkit list skill
+*/
+const TOOLKIT_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const HOOKS_SRC = join(TOOLKIT_ROOT, "hooks");
+const SKILLS_SRC = join(TOOLKIT_ROOT, "skills");
+const PROJECT_ROOT = process.cwd();
+const CLAUDE_DIR = join(PROJECT_ROOT, ".claude");
+const TOOLKIT_DIR = join(PROJECT_ROOT, ".claude-toolkit");
+const MANIFEST_PATH = join(CLAUDE_DIR, "toolkit-manifest.json");
+function today() {
+	return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+}
+function shortHash(content) {
+	return createHash("sha256").update(content).digest("hex").slice(0, 7);
+}
+function readManifest() {
+	if (!existsSync(MANIFEST_PATH)) return {
+		hooks: {},
+		skills: {}
+	};
+	try {
+		const parsed = JSON.parse(readFileSync(MANIFEST_PATH, "utf8"));
+		return {
+			hooks: parsed.hooks ?? {},
+			skills: parsed.skills ?? {}
+		};
+	} catch {
+		return {
+			hooks: {},
+			skills: {}
+		};
+	}
+}
+function writeManifest(m) {
+	mkdirSync(CLAUDE_DIR, { recursive: true });
+	writeFileSync(MANIFEST_PATH, JSON.stringify(m, null, 2) + "\n");
+}
+function isPlainObject(v) {
+	return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function deepMerge(target, source) {
+	if (Array.isArray(target) && Array.isArray(source)) return [...target, ...source];
+	if (isPlainObject(target) && isPlainObject(source)) {
+		const out = { ...target };
+		for (const [k, v] of Object.entries(source)) out[k] = k in out ? deepMerge(out[k], v) : v;
+		return out;
+	}
+	return source;
+}
+function hashHookSource(name) {
+	return shortHash(readFileSync(join(HOOKS_SRC, name, "hook.ts")));
+}
+function hashSkillSource(name) {
+	const dir = join(SKILLS_SRC, name);
+	const files = collectFiles(dir).sort();
+	const h = createHash("sha256");
+	for (const f of files) {
+		h.update(relative(dir, f));
+		h.update("\0");
+		h.update(readFileSync(f));
+		h.update("\0");
+	}
+	return h.digest("hex").slice(0, 7);
+}
+function collectFiles(dir) {
+	const out = [];
+	if (!existsSync(dir)) return out;
+	for (const entry of readdirSync(dir, { withFileTypes: true })) {
+		if (entry.name === ".gitkeep") continue;
+		const full = join(dir, entry.name);
+		if (entry.isDirectory()) out.push(...collectFiles(full));
+		else if (entry.isFile()) out.push(full);
+	}
+	return out;
+}
+async function confirm(question) {
+	const rl = createInterface({
+		input: process.stdin,
+		output: process.stdout
+	});
+	const answer = (await rl.question(`${question} [y/N] `)).trim().toLowerCase();
+	rl.close();
+	return answer === "y" || answer === "yes";
+}
+function diffLines(oldStr, newStr) {
+	const a = oldStr.split("\n");
+	const b = newStr.split("\n");
+	const out = [];
+	const max = Math.max(a.length, b.length);
+	for (let i = 0; i < max; i++) {
+		if (a[i] === b[i]) continue;
+		if (a[i] !== void 0) out.push(`- ${a[i]}`);
+		if (b[i] !== void 0) out.push(`+ ${b[i]}`);
+	}
+	return out.join("\n");
+}
+function addHook(name) {
+	const srcDir = join(HOOKS_SRC, name);
+	if (!existsSync(srcDir)) {
+		console.error(`Hook not found: ${name}`);
+		process.exit(1);
+	}
+	const hookSrc = join(srcDir, "hook.ts");
+	const fragmentPath = join(srcDir, "settings-fragment.json");
+	const hooksDir = join(CLAUDE_DIR, "hooks");
+	mkdirSync(hooksDir, { recursive: true });
+	const destHook = join(hooksDir, `${name}.ts`);
+	writeFileSync(destHook, readFileSync(hookSrc));
+	if (existsSync(fragmentPath)) {
+		const fragment = JSON.parse(readFileSync(fragmentPath, "utf8"));
+		const settingsPath = join(CLAUDE_DIR, "settings.json");
+		const merged = deepMerge(existsSync(settingsPath) ? JSON.parse(readFileSync(settingsPath, "utf8")) : {}, fragment);
+		writeFileSync(settingsPath, JSON.stringify(merged, null, 2) + "\n");
+	}
+	const manifest = readManifest();
+	manifest.hooks[name] = {
+		hash: hashHookSource(name),
+		installedAt: today()
+	};
+	writeManifest(manifest);
+	console.log(`Installed hook: ${name} → ${relative(PROJECT_ROOT, destHook)}`);
+}
+function addSkill(name, links) {
+	const srcDir = join(SKILLS_SRC, name);
+	if (!existsSync(srcDir) || !statSync(srcDir).isDirectory()) {
+		console.error(`Skill not found: ${name}`);
+		process.exit(1);
+	}
+	const destDir = join(TOOLKIT_DIR, "skills", name);
+	mkdirSync(dirname(destDir), { recursive: true });
+	cpSync(srcDir, destDir, { recursive: true });
+	const resolvedLinks = links.length > 0 ? links : [join(".claude", "skills")];
+	for (const link of resolvedLinks) {
+		const linkDir = resolve(PROJECT_ROOT, link);
+		mkdirSync(linkDir, { recursive: true });
+		const linkPath = join(linkDir, name);
+		if (existsSync(linkPath) || lstatExists(linkPath)) unlinkSync(linkPath);
+		symlinkSync(relative(linkDir, destDir), linkPath, "dir");
+	}
+	const manifest = readManifest();
+	manifest.skills[name] = {
+		hash: hashSkillSource(name),
+		installedAt: today(),
+		linkedTo: resolvedLinks
+	};
+	writeManifest(manifest);
+	console.log(`Installed skill: ${name} → ${relative(PROJECT_ROOT, destDir)}`);
+	for (const l of resolvedLinks) console.log(`  linked: ${join(l, name)}`);
+}
+function lstatExists(p) {
+	try {
+		lstatSync(p);
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function update(force) {
+	const manifest = readManifest();
+	let changed = false;
+	for (const [name, entry] of Object.entries(manifest.hooks)) {
+		const srcDir = join(HOOKS_SRC, name);
+		if (!existsSync(srcDir)) continue;
+		const sourceHash = hashHookSource(name);
+		const installedPath = join(CLAUDE_DIR, "hooks", `${name}.ts`);
+		const installedHash = existsSync(installedPath) ? shortHash(readFileSync(installedPath)) : null;
+		const sourceChanged = sourceHash !== entry.hash;
+		const locallyModified = installedHash !== null && installedHash !== entry.hash;
+		if (!sourceChanged && !locallyModified) continue;
+		changed = true;
+		if (locallyModified && !force) {
+			console.warn(`! hook "${name}" was modified locally (installed=${installedHash}, manifest=${entry.hash}). Use --force to overwrite.`);
+			continue;
+		}
+		if (sourceChanged) {
+			const oldSrc = existsSync(installedPath) ? readFileSync(installedPath, "utf8") : "";
+			const newSrc = readFileSync(join(srcDir, "hook.ts"), "utf8");
+			console.log(`\n~ hook: ${name} (${entry.hash} → ${sourceHash})`);
+			console.log(diffLines(oldSrc, newSrc));
+			if (!(force || await confirm(`Update hook "${name}"?`))) continue;
+			writeFileSync(installedPath, newSrc);
+			manifest.hooks[name] = {
+				hash: sourceHash,
+				installedAt: today()
+			};
+		}
+	}
+	for (const [name, entry] of Object.entries(manifest.skills)) {
+		const srcDir = join(SKILLS_SRC, name);
+		if (!existsSync(srcDir)) continue;
+		const sourceHash = hashSkillSource(name);
+		if (sourceHash === entry.hash) continue;
+		changed = true;
+		console.log(`\n~ skill: ${name} (${entry.hash} → ${sourceHash})`);
+		if (!(force || await confirm(`Update skill "${name}"?`))) continue;
+		cpSync(srcDir, join(TOOLKIT_DIR, "skills", name), {
+			recursive: true,
+			force: true
+		});
+		manifest.skills[name] = {
+			hash: sourceHash,
+			installedAt: today(),
+			linkedTo: entry.linkedTo
+		};
+	}
+	if (changed) writeManifest(manifest);
+}
+function list(kind) {
+	const dir = kind === "hook" ? HOOKS_SRC : SKILLS_SRC;
+	if (!existsSync(dir)) {
+		console.log(`(no ${kind}s available)`);
+		return;
+	}
+	const entries = readdirSync(dir, { withFileTypes: true }).filter((e) => e.isDirectory() || kind === "skill" && e.isSymbolicLink()).map((e) => e.name);
+	if (entries.length === 0) {
+		console.log(`(no ${kind}s available)`);
+		return;
+	}
+	for (const name of entries) {
+		const hash = kind === "hook" ? hashHookSource(name) : hashSkillSource(name);
+		console.log(`${name}  ${hash}`);
+	}
+}
+function usage() {
+	console.error(`Usage:
+  toolkit add hook <name>
+  toolkit add skill <name> [--link <target>]...
+  toolkit update [--force]
+  toolkit list hook
+  toolkit list skill`);
+	process.exit(1);
+}
+async function main() {
+	const { values, positionals } = parseArgs({
+		options: {
+			force: {
+				default: false,
+				type: "boolean"
+			},
+			links: {
+				multiple: true,
+				type: "string"
+			}
+		},
+		allowPositionals: true
+	});
+	const { force, links } = values;
+	const [command, resource, name] = positionals;
+	if (command === "add" && resource === "hook") {
+		if (!name) usage();
+		addHook(name);
+		return;
+	}
+	if (command === "add" && resource === "skill") {
+		if (!name) usage();
+		addSkill(name, links ? links : []);
+		return;
+	}
+	if (command === "update") {
+		await update(force);
+		return;
+	}
+	if (command === "list" && (resource === "hook" || resource === "skill")) {
+		list(resource);
+		return;
+	}
+	usage();
+}
+main().catch((err) => {
+	console.error(err instanceof Error ? err.message : String(err));
+	process.exit(1);
+});
+//#endregion
+export {};
+
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/index.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/**\n * toolkit — personal CLI for managing Claude Code hooks and skills.\n *\n * Commands:\n *   toolkit add hook <name>\n *   toolkit add skill <name> [--link <target>...]\n *   toolkit update [--force]\n *   toolkit list hook\n *   toolkit list skill\n */\n\nimport { createHash } from \"node:crypto\";\nimport {\n  cpSync,\n  existsSync,\n  lstatSync,\n  mkdirSync,\n  readFileSync,\n  readdirSync,\n  statSync,\n  symlinkSync,\n  unlinkSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { createInterface } from \"node:readline/promises\";\nimport { dirname, join, relative, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { parseArgs } from \"node:util\";\n\nconst TOOLKIT_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), \"..\");\nconst HOOKS_SRC = join(TOOLKIT_ROOT, \"hooks\");\nconst SKILLS_SRC = join(TOOLKIT_ROOT, \"skills\");\n\nconst PROJECT_ROOT = process.cwd();\nconst CLAUDE_DIR = join(PROJECT_ROOT, \".claude\");\nconst TOOLKIT_DIR = join(PROJECT_ROOT, \".claude-toolkit\");\nconst MANIFEST_PATH = join(CLAUDE_DIR, \"toolkit-manifest.json\");\n\ntype HookEntry = { hash: string; installedAt: string };\ntype SkillEntry = { hash: string; installedAt: string; linkedTo: string[] };\ntype Manifest = {\n  hooks: Record<string, HookEntry>;\n  skills: Record<string, SkillEntry>;\n};\n\n// ---------- helpers ----------\n\nfunction today(): string {\n  return new Date().toISOString().slice(0, 10);\n}\n\nfunction shortHash(content: string | Buffer): string {\n  return createHash(\"sha256\").update(content).digest(\"hex\").slice(0, 7);\n}\n\nfunction readManifest(): Manifest {\n  if (!existsSync(MANIFEST_PATH)) {\n    return { hooks: {}, skills: {} };\n  }\n\n  try {\n    const parsed = JSON.parse(readFileSync(MANIFEST_PATH, \"utf8\")) as Partial<Manifest>;\n    return { hooks: parsed.hooks ?? {}, skills: parsed.skills ?? {} };\n  } catch {\n    return { hooks: {}, skills: {} };\n  }\n}\n\nfunction writeManifest(m: Manifest): void {\n  mkdirSync(CLAUDE_DIR, { recursive: true });\n  writeFileSync(MANIFEST_PATH, JSON.stringify(m, null, 2) + \"\\n\");\n}\n\nfunction isPlainObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\nfunction deepMerge<T>(target: T, source: T): T {\n  if (Array.isArray(target) && Array.isArray(source)) {\n    return [...target, ...source] as T;\n  }\n  if (isPlainObject(target) && isPlainObject(source)) {\n    const out: Record<string, unknown> = { ...target };\n    for (const [k, v] of Object.entries(source)) {\n      out[k] = k in out ? deepMerge(out[k], v) : v;\n    }\n    return out as T;\n  }\n  return source;\n}\n\nfunction hashHookSource(name: string): string {\n  const p = join(HOOKS_SRC, name, \"hook.ts\");\n  return shortHash(readFileSync(p));\n}\n\nfunction hashSkillSource(name: string): string {\n  const dir = join(SKILLS_SRC, name);\n  const files = collectFiles(dir).sort();\n  const h = createHash(\"sha256\");\n  for (const f of files) {\n    h.update(relative(dir, f));\n    h.update(\"\\0\");\n    h.update(readFileSync(f));\n    h.update(\"\\0\");\n  }\n  return h.digest(\"hex\").slice(0, 7);\n}\n\nfunction collectFiles(dir: string): string[] {\n  const out: string[] = [];\n  if (!existsSync(dir)) {\n    return out;\n  }\n\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    if (entry.name === \".gitkeep\") {\n      continue;\n    }\n\n    const full = join(dir, entry.name);\n    if (entry.isDirectory()) {\n      out.push(...collectFiles(full));\n    } else if (entry.isFile()) {\n      out.push(full);\n    }\n  }\n  return out;\n}\n\nasync function confirm(question: string): Promise<boolean> {\n  const rl = createInterface({ input: process.stdin, output: process.stdout });\n  const answer = (await rl.question(`${question} [y/N] `)).trim().toLowerCase();\n  rl.close();\n  return answer === \"y\" || answer === \"yes\";\n}\n\nfunction diffLines(oldStr: string, newStr: string): string {\n  const a = oldStr.split(\"\\n\");\n  const b = newStr.split(\"\\n\");\n  const out: string[] = [];\n  const max = Math.max(a.length, b.length);\n  for (let i = 0; i < max; i++) {\n    if (a[i] === b[i]) {\n      continue;\n    }\n\n    if (a[i] !== undefined) {\n      out.push(`- ${a[i]}`);\n    }\n\n    if (b[i] !== undefined) {\n      out.push(`+ ${b[i]}`);\n    }\n  }\n  return out.join(\"\\n\");\n}\n\n// ---------- commands ----------\n\nfunction addHook(name: string): void {\n  const srcDir = join(HOOKS_SRC, name);\n  if (!existsSync(srcDir)) {\n    console.error(`Hook not found: ${name}`);\n    process.exit(1);\n  }\n\n  const hookSrc = join(srcDir, \"hook.ts\");\n  const fragmentPath = join(srcDir, \"settings-fragment.json\");\n\n  const hooksDir = join(CLAUDE_DIR, \"hooks\");\n  mkdirSync(hooksDir, { recursive: true });\n  const destHook = join(hooksDir, `${name}.ts`);\n  writeFileSync(destHook, readFileSync(hookSrc));\n\n  if (existsSync(fragmentPath)) {\n    const fragment = JSON.parse(readFileSync(fragmentPath, \"utf8\"));\n    const settingsPath = join(CLAUDE_DIR, \"settings.json\");\n    const current = existsSync(settingsPath) ? JSON.parse(readFileSync(settingsPath, \"utf8\")) : {};\n    const merged = deepMerge(current, fragment);\n    writeFileSync(settingsPath, JSON.stringify(merged, null, 2) + \"\\n\");\n  }\n\n  const manifest = readManifest();\n  manifest.hooks[name] = { hash: hashHookSource(name), installedAt: today() };\n  writeManifest(manifest);\n\n  console.log(`Installed hook: ${name} → ${relative(PROJECT_ROOT, destHook)}`);\n}\n\nfunction addSkill(name: string, links: string[]): void {\n  const srcDir = join(SKILLS_SRC, name);\n  if (!existsSync(srcDir) || !statSync(srcDir).isDirectory()) {\n    console.error(`Skill not found: ${name}`);\n    process.exit(1);\n  }\n\n  const destDir = join(TOOLKIT_DIR, \"skills\", name);\n  mkdirSync(dirname(destDir), { recursive: true });\n  cpSync(srcDir, destDir, { recursive: true });\n\n  const resolvedLinks = links.length > 0 ? links : [join(\".claude\", \"skills\")];\n  for (const link of resolvedLinks) {\n    const linkDir = resolve(PROJECT_ROOT, link);\n    mkdirSync(linkDir, { recursive: true });\n\n    const linkPath = join(linkDir, name);\n    if (existsSync(linkPath) || lstatExists(linkPath)) {\n      unlinkSync(linkPath);\n    }\n\n    const relTarget = relative(linkDir, destDir);\n    symlinkSync(relTarget, linkPath, \"dir\");\n  }\n\n  const manifest = readManifest();\n  manifest.skills[name] = {\n    hash: hashSkillSource(name),\n    installedAt: today(),\n    linkedTo: resolvedLinks,\n  };\n  writeManifest(manifest);\n\n  console.log(`Installed skill: ${name} → ${relative(PROJECT_ROOT, destDir)}`);\n  for (const l of resolvedLinks) {\n    console.log(`  linked: ${join(l, name)}`);\n  }\n}\n\nfunction lstatExists(p: string): boolean {\n  try {\n    lstatSync(p);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nasync function update(force: boolean): Promise<void> {\n  const manifest = readManifest();\n  let changed = false;\n\n  for (const [name, entry] of Object.entries(manifest.hooks)) {\n    const srcDir = join(HOOKS_SRC, name);\n    if (!existsSync(srcDir)) {\n      continue;\n    }\n\n    const sourceHash = hashHookSource(name);\n    const installedPath = join(CLAUDE_DIR, \"hooks\", `${name}.ts`);\n    const installedHash = existsSync(installedPath) ? shortHash(readFileSync(installedPath)) : null;\n\n    const sourceChanged = sourceHash !== entry.hash;\n    const locallyModified = installedHash !== null && installedHash !== entry.hash;\n\n    if (!sourceChanged && !locallyModified) {\n      continue;\n    }\n\n    changed = true;\n\n    if (locallyModified && !force) {\n      console.warn(\n        `! hook \"${name}\" was modified locally (installed=${installedHash}, manifest=${entry.hash}). Use --force to overwrite.`,\n      );\n      continue;\n    }\n\n    if (sourceChanged) {\n      const oldSrc = existsSync(installedPath) ? readFileSync(installedPath, \"utf8\") : \"\";\n      const newSrc = readFileSync(join(srcDir, \"hook.ts\"), \"utf8\");\n      console.log(`\\n~ hook: ${name} (${entry.hash} → ${sourceHash})`);\n      console.log(diffLines(oldSrc, newSrc));\n      const ok = force || (await confirm(`Update hook \"${name}\"?`));\n\n      if (!ok) {\n        continue;\n      }\n\n      writeFileSync(installedPath, newSrc);\n      manifest.hooks[name] = { hash: sourceHash, installedAt: today() };\n    }\n  }\n\n  for (const [name, entry] of Object.entries(manifest.skills)) {\n    const srcDir = join(SKILLS_SRC, name);\n    if (!existsSync(srcDir)) {\n      continue;\n    }\n\n    const sourceHash = hashSkillSource(name);\n    if (sourceHash === entry.hash) {\n      continue;\n    }\n\n    changed = true;\n    console.log(`\\n~ skill: ${name} (${entry.hash} → ${sourceHash})`);\n    const ok = force || (await confirm(`Update skill \"${name}\"?`));\n    if (!ok) {\n      continue;\n    }\n\n    const destDir = join(TOOLKIT_DIR, \"skills\", name);\n    cpSync(srcDir, destDir, { recursive: true, force: true });\n    manifest.skills[name] = {\n      hash: sourceHash,\n      installedAt: today(),\n      linkedTo: entry.linkedTo,\n    };\n  }\n\n  if (changed) {\n    writeManifest(manifest);\n  }\n}\n\nfunction list(kind: \"hook\" | \"skill\"): void {\n  const dir = kind === \"hook\" ? HOOKS_SRC : SKILLS_SRC;\n  if (!existsSync(dir)) {\n    console.log(`(no ${kind}s available)`);\n    return;\n  }\n  const entries = readdirSync(dir, { withFileTypes: true })\n    .filter((e) => e.isDirectory() || (kind === \"skill\" && e.isSymbolicLink()))\n    .map((e) => e.name);\n\n  if (entries.length === 0) {\n    console.log(`(no ${kind}s available)`);\n    return;\n  }\n\n  for (const name of entries) {\n    const hash = kind === \"hook\" ? hashHookSource(name) : hashSkillSource(name);\n    console.log(`${name}  ${hash}`);\n  }\n}\n\n// ---------- argv ----------\n\nfunction usage(): never {\n  console.error(\n    `Usage:\n  toolkit add hook <name>\n  toolkit add skill <name> [--link <target>]...\n  toolkit update [--force]\n  toolkit list hook\n  toolkit list skill`,\n  );\n  process.exit(1);\n}\n\nasync function main(): Promise<void> {\n  const { values, positionals } = parseArgs({\n    options: {\n      force: {\n        default: false,\n        type: \"boolean\",\n      },\n      links: {\n        multiple: true,\n        type: \"string\",\n      },\n    },\n    allowPositionals: true,\n  });\n\n  const { force, links } = values;\n  const [command, resource, name] = positionals;\n\n  if (command === \"add\" && resource === \"hook\") {\n    if (!name) {\n      usage();\n    }\n\n    addHook(name);\n    return;\n  }\n\n  if (command === \"add\" && resource === \"skill\") {\n    if (!name) {\n      usage();\n    }\n\n    addSkill(name, links ? links : []);\n    return;\n  }\n\n  if (command === \"update\") {\n    await update(force);\n    return;\n  }\n\n  if (command === \"list\" && (resource === \"hook\" || resource === \"skill\")) {\n    list(resource);\n    return;\n  }\n\n  usage();\n}\n\nmain().catch((err) => {\n  console.error(err instanceof Error ? err.message : String(err));\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;AA+BA,MAAM,eAAe,QAAQ,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC,EAAE,KAAK;AAC3E,MAAM,YAAY,KAAK,cAAc,QAAQ;AAC7C,MAAM,aAAa,KAAK,cAAc,SAAS;AAE/C,MAAM,eAAe,QAAQ,KAAK;AAClC,MAAM,aAAa,KAAK,cAAc,UAAU;AAChD,MAAM,cAAc,KAAK,cAAc,kBAAkB;AACzD,MAAM,gBAAgB,KAAK,YAAY,wBAAwB;AAW/D,SAAS,QAAgB;AACvB,yBAAO,IAAI,MAAM,EAAC,aAAa,CAAC,MAAM,GAAG,GAAG;;AAG9C,SAAS,UAAU,SAAkC;AACnD,QAAO,WAAW,SAAS,CAAC,OAAO,QAAQ,CAAC,OAAO,MAAM,CAAC,MAAM,GAAG,EAAE;;AAGvE,SAAS,eAAyB;AAChC,KAAI,CAAC,WAAW,cAAc,CAC5B,QAAO;EAAE,OAAO,EAAE;EAAE,QAAQ,EAAE;EAAE;AAGlC,KAAI;EACF,MAAM,SAAS,KAAK,MAAM,aAAa,eAAe,OAAO,CAAC;AAC9D,SAAO;GAAE,OAAO,OAAO,SAAS,EAAE;GAAE,QAAQ,OAAO,UAAU,EAAE;GAAE;SAC3D;AACN,SAAO;GAAE,OAAO,EAAE;GAAE,QAAQ,EAAE;GAAE;;;AAIpC,SAAS,cAAc,GAAmB;AACxC,WAAU,YAAY,EAAE,WAAW,MAAM,CAAC;AAC1C,eAAc,eAAe,KAAK,UAAU,GAAG,MAAM,EAAE,GAAG,KAAK;;AAGjE,SAAS,cAAc,GAA0C;AAC/D,QAAO,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,EAAE;;AAGjE,SAAS,UAAa,QAAW,QAAc;AAC7C,KAAI,MAAM,QAAQ,OAAO,IAAI,MAAM,QAAQ,OAAO,CAChD,QAAO,CAAC,GAAG,QAAQ,GAAG,OAAO;AAE/B,KAAI,cAAc,OAAO,IAAI,cAAc,OAAO,EAAE;EAClD,MAAM,MAA+B,EAAE,GAAG,QAAQ;AAClD,OAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,OAAO,CACzC,KAAI,KAAK,KAAK,MAAM,UAAU,IAAI,IAAI,EAAE,GAAG;AAE7C,SAAO;;AAET,QAAO;;AAGT,SAAS,eAAe,MAAsB;AAE5C,QAAO,UAAU,aADP,KAAK,WAAW,MAAM,UAAU,CACV,CAAC;;AAGnC,SAAS,gBAAgB,MAAsB;CAC7C,MAAM,MAAM,KAAK,YAAY,KAAK;CAClC,MAAM,QAAQ,aAAa,IAAI,CAAC,MAAM;CACtC,MAAM,IAAI,WAAW,SAAS;AAC9B,MAAK,MAAM,KAAK,OAAO;AACrB,IAAE,OAAO,SAAS,KAAK,EAAE,CAAC;AAC1B,IAAE,OAAO,KAAK;AACd,IAAE,OAAO,aAAa,EAAE,CAAC;AACzB,IAAE,OAAO,KAAK;;AAEhB,QAAO,EAAE,OAAO,MAAM,CAAC,MAAM,GAAG,EAAE;;AAGpC,SAAS,aAAa,KAAuB;CAC3C,MAAM,MAAgB,EAAE;AACxB,KAAI,CAAC,WAAW,IAAI,CAClB,QAAO;AAGT,MAAK,MAAM,SAAS,YAAY,KAAK,EAAE,eAAe,MAAM,CAAC,EAAE;AAC7D,MAAI,MAAM,SAAS,WACjB;EAGF,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK;AAClC,MAAI,MAAM,aAAa,CACrB,KAAI,KAAK,GAAG,aAAa,KAAK,CAAC;WACtB,MAAM,QAAQ,CACvB,KAAI,KAAK,KAAK;;AAGlB,QAAO;;AAGT,eAAe,QAAQ,UAAoC;CACzD,MAAM,KAAK,gBAAgB;EAAE,OAAO,QAAQ;EAAO,QAAQ,QAAQ;EAAQ,CAAC;CAC5E,MAAM,UAAU,MAAM,GAAG,SAAS,GAAG,SAAS,SAAS,EAAE,MAAM,CAAC,aAAa;AAC7E,IAAG,OAAO;AACV,QAAO,WAAW,OAAO,WAAW;;AAGtC,SAAS,UAAU,QAAgB,QAAwB;CACzD,MAAM,IAAI,OAAO,MAAM,KAAK;CAC5B,MAAM,IAAI,OAAO,MAAM,KAAK;CAC5B,MAAM,MAAgB,EAAE;CACxB,MAAM,MAAM,KAAK,IAAI,EAAE,QAAQ,EAAE,OAAO;AACxC,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,KAAK;AAC5B,MAAI,EAAE,OAAO,EAAE,GACb;AAGF,MAAI,EAAE,OAAO,KAAA,EACX,KAAI,KAAK,KAAK,EAAE,KAAK;AAGvB,MAAI,EAAE,OAAO,KAAA,EACX,KAAI,KAAK,KAAK,EAAE,KAAK;;AAGzB,QAAO,IAAI,KAAK,KAAK;;AAKvB,SAAS,QAAQ,MAAoB;CACnC,MAAM,SAAS,KAAK,WAAW,KAAK;AACpC,KAAI,CAAC,WAAW,OAAO,EAAE;AACvB,UAAQ,MAAM,mBAAmB,OAAO;AACxC,UAAQ,KAAK,EAAE;;CAGjB,MAAM,UAAU,KAAK,QAAQ,UAAU;CACvC,MAAM,eAAe,KAAK,QAAQ,yBAAyB;CAE3D,MAAM,WAAW,KAAK,YAAY,QAAQ;AAC1C,WAAU,UAAU,EAAE,WAAW,MAAM,CAAC;CACxC,MAAM,WAAW,KAAK,UAAU,GAAG,KAAK,KAAK;AAC7C,eAAc,UAAU,aAAa,QAAQ,CAAC;AAE9C,KAAI,WAAW,aAAa,EAAE;EAC5B,MAAM,WAAW,KAAK,MAAM,aAAa,cAAc,OAAO,CAAC;EAC/D,MAAM,eAAe,KAAK,YAAY,gBAAgB;EAEtD,MAAM,SAAS,UADC,WAAW,aAAa,GAAG,KAAK,MAAM,aAAa,cAAc,OAAO,CAAC,GAAG,EAAE,EAC5D,SAAS;AAC3C,gBAAc,cAAc,KAAK,UAAU,QAAQ,MAAM,EAAE,GAAG,KAAK;;CAGrE,MAAM,WAAW,cAAc;AAC/B,UAAS,MAAM,QAAQ;EAAE,MAAM,eAAe,KAAK;EAAE,aAAa,OAAO;EAAE;AAC3E,eAAc,SAAS;AAEvB,SAAQ,IAAI,mBAAmB,KAAK,KAAK,SAAS,cAAc,SAAS,GAAG;;AAG9E,SAAS,SAAS,MAAc,OAAuB;CACrD,MAAM,SAAS,KAAK,YAAY,KAAK;AACrC,KAAI,CAAC,WAAW,OAAO,IAAI,CAAC,SAAS,OAAO,CAAC,aAAa,EAAE;AAC1D,UAAQ,MAAM,oBAAoB,OAAO;AACzC,UAAQ,KAAK,EAAE;;CAGjB,MAAM,UAAU,KAAK,aAAa,UAAU,KAAK;AACjD,WAAU,QAAQ,QAAQ,EAAE,EAAE,WAAW,MAAM,CAAC;AAChD,QAAO,QAAQ,SAAS,EAAE,WAAW,MAAM,CAAC;CAE5C,MAAM,gBAAgB,MAAM,SAAS,IAAI,QAAQ,CAAC,KAAK,WAAW,SAAS,CAAC;AAC5E,MAAK,MAAM,QAAQ,eAAe;EAChC,MAAM,UAAU,QAAQ,cAAc,KAAK;AAC3C,YAAU,SAAS,EAAE,WAAW,MAAM,CAAC;EAEvC,MAAM,WAAW,KAAK,SAAS,KAAK;AACpC,MAAI,WAAW,SAAS,IAAI,YAAY,SAAS,CAC/C,YAAW,SAAS;AAItB,cADkB,SAAS,SAAS,QAAQ,EACrB,UAAU,MAAM;;CAGzC,MAAM,WAAW,cAAc;AAC/B,UAAS,OAAO,QAAQ;EACtB,MAAM,gBAAgB,KAAK;EAC3B,aAAa,OAAO;EACpB,UAAU;EACX;AACD,eAAc,SAAS;AAEvB,SAAQ,IAAI,oBAAoB,KAAK,KAAK,SAAS,cAAc,QAAQ,GAAG;AAC5E,MAAK,MAAM,KAAK,cACd,SAAQ,IAAI,aAAa,KAAK,GAAG,KAAK,GAAG;;AAI7C,SAAS,YAAY,GAAoB;AACvC,KAAI;AACF,YAAU,EAAE;AACZ,SAAO;SACD;AACN,SAAO;;;AAIX,eAAe,OAAO,OAA+B;CACnD,MAAM,WAAW,cAAc;CAC/B,IAAI,UAAU;AAEd,MAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,SAAS,MAAM,EAAE;EAC1D,MAAM,SAAS,KAAK,WAAW,KAAK;AACpC,MAAI,CAAC,WAAW,OAAO,CACrB;EAGF,MAAM,aAAa,eAAe,KAAK;EACvC,MAAM,gBAAgB,KAAK,YAAY,SAAS,GAAG,KAAK,KAAK;EAC7D,MAAM,gBAAgB,WAAW,cAAc,GAAG,UAAU,aAAa,cAAc,CAAC,GAAG;EAE3F,MAAM,gBAAgB,eAAe,MAAM;EAC3C,MAAM,kBAAkB,kBAAkB,QAAQ,kBAAkB,MAAM;AAE1E,MAAI,CAAC,iBAAiB,CAAC,gBACrB;AAGF,YAAU;AAEV,MAAI,mBAAmB,CAAC,OAAO;AAC7B,WAAQ,KACN,WAAW,KAAK,oCAAoC,cAAc,aAAa,MAAM,KAAK,8BAC3F;AACD;;AAGF,MAAI,eAAe;GACjB,MAAM,SAAS,WAAW,cAAc,GAAG,aAAa,eAAe,OAAO,GAAG;GACjF,MAAM,SAAS,aAAa,KAAK,QAAQ,UAAU,EAAE,OAAO;AAC5D,WAAQ,IAAI,aAAa,KAAK,IAAI,MAAM,KAAK,KAAK,WAAW,GAAG;AAChE,WAAQ,IAAI,UAAU,QAAQ,OAAO,CAAC;AAGtC,OAAI,EAFO,SAAU,MAAM,QAAQ,gBAAgB,KAAK,IAAI,EAG1D;AAGF,iBAAc,eAAe,OAAO;AACpC,YAAS,MAAM,QAAQ;IAAE,MAAM;IAAY,aAAa,OAAO;IAAE;;;AAIrE,MAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,SAAS,OAAO,EAAE;EAC3D,MAAM,SAAS,KAAK,YAAY,KAAK;AACrC,MAAI,CAAC,WAAW,OAAO,CACrB;EAGF,MAAM,aAAa,gBAAgB,KAAK;AACxC,MAAI,eAAe,MAAM,KACvB;AAGF,YAAU;AACV,UAAQ,IAAI,cAAc,KAAK,IAAI,MAAM,KAAK,KAAK,WAAW,GAAG;AAEjE,MAAI,EADO,SAAU,MAAM,QAAQ,iBAAiB,KAAK,IAAI,EAE3D;AAIF,SAAO,QADS,KAAK,aAAa,UAAU,KAAK,EACzB;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;AACzD,WAAS,OAAO,QAAQ;GACtB,MAAM;GACN,aAAa,OAAO;GACpB,UAAU,MAAM;GACjB;;AAGH,KAAI,QACF,eAAc,SAAS;;AAI3B,SAAS,KAAK,MAA8B;CAC1C,MAAM,MAAM,SAAS,SAAS,YAAY;AAC1C,KAAI,CAAC,WAAW,IAAI,EAAE;AACpB,UAAQ,IAAI,OAAO,KAAK,cAAc;AACtC;;CAEF,MAAM,UAAU,YAAY,KAAK,EAAE,eAAe,MAAM,CAAC,CACtD,QAAQ,MAAM,EAAE,aAAa,IAAK,SAAS,WAAW,EAAE,gBAAgB,CAAE,CAC1E,KAAK,MAAM,EAAE,KAAK;AAErB,KAAI,QAAQ,WAAW,GAAG;AACxB,UAAQ,IAAI,OAAO,KAAK,cAAc;AACtC;;AAGF,MAAK,MAAM,QAAQ,SAAS;EAC1B,MAAM,OAAO,SAAS,SAAS,eAAe,KAAK,GAAG,gBAAgB,KAAK;AAC3E,UAAQ,IAAI,GAAG,KAAK,IAAI,OAAO;;;AAMnC,SAAS,QAAe;AACtB,SAAQ,MACN;;;;;sBAMD;AACD,SAAQ,KAAK,EAAE;;AAGjB,eAAe,OAAsB;CACnC,MAAM,EAAE,QAAQ,gBAAgB,UAAU;EACxC,SAAS;GACP,OAAO;IACL,SAAS;IACT,MAAM;IACP;GACD,OAAO;IACL,UAAU;IACV,MAAM;IACP;GACF;EACD,kBAAkB;EACnB,CAAC;CAEF,MAAM,EAAE,OAAO,UAAU;CACzB,MAAM,CAAC,SAAS,UAAU,QAAQ;AAElC,KAAI,YAAY,SAAS,aAAa,QAAQ;AAC5C,MAAI,CAAC,KACH,QAAO;AAGT,UAAQ,KAAK;AACb;;AAGF,KAAI,YAAY,SAAS,aAAa,SAAS;AAC7C,MAAI,CAAC,KACH,QAAO;AAGT,WAAS,MAAM,QAAQ,QAAQ,EAAE,CAAC;AAClC;;AAGF,KAAI,YAAY,UAAU;AACxB,QAAM,OAAO,MAAM;AACnB;;AAGF,KAAI,YAAY,WAAW,aAAa,UAAU,aAAa,UAAU;AACvE,OAAK,SAAS;AACd;;AAGF,QAAO;;AAGT,MAAM,CAAC,OAAO,QAAQ;AACpB,SAAQ,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CAAC;AAC/D,SAAQ,KAAK,EAAE;EACf"}

package/hooks/block-dangerous-commands/hook.js

@@ -0,0 +1,120 @@
+#!/usr/bin/env -S node
+/**
+ * block-dangerous-commands: PreToolUse hook for Bash.
+ *
+ * Reads a Claude Code hook payload from stdin, inspects tool_input.command,
+ * and blocks commands that match known-dangerous patterns.
+ *
+ * Exit 2  = block (with structured JSON on stdout)
+ * Exit 0  = allow (including on malformed input — fail open)
+ */
+const rules = [
+    {
+        id: "rm-rf",
+        test: (c) => /\brm\s+(?:-[a-zA-Z]*[rRf][a-zA-Z]*|--recursive|--force)(?:\s|$)/.test(c),
+        message: "`rm -rf` (and flag variants) is blocked. Delete specific paths with a non-recursive `rm`, or move them to a backup location.",
+    },
+    {
+        id: "git-push-force",
+        test: (c) => /\bgit\s+push\b.*\s(?:--force\b|--force-with-lease\b|-f\b)/.test(c),
+        message: "`git push --force` is blocked. Use `--force-with-lease` only after coordinating with collaborators, or create a new branch.",
+    },
+    {
+        id: "git-push-protected",
+        test: (c) => /\bgit\s+push\b(?:\s+\S+)*\s+(?:origin\s+)?(?:main|master|production|prod|release)(?:\s|$)/.test(c),
+        message: "Direct push to a protected branch (main/master/production/prod/release) is blocked. Open a pull request instead.",
+    },
+    {
+        id: "git-reset-hard",
+        test: (c) => /\bgit\s+reset\s+(?:\S+\s+)*--hard\b/.test(c),
+        message: "`git reset --hard` is blocked — it discards uncommitted work. Consider `git stash`, `git restore`, or a soft reset.",
+    },
+    {
+        id: "chmod-777",
+        test: (c) => /\bchmod\s+(?:-[a-zA-Z]*\s+)*(?:777|[ugoa]*[+=][rwx]*w[rwx]*(?:\s|$))/.test(c) &&
+            /-R|--recursive|777/.test(c),
+        message: "`chmod 777` or recursive world-writable chmod is blocked. Grant the minimum permissions required.",
+    },
+    {
+        id: "dd-if",
+        test: (c) => /\bdd\s+if=/.test(c),
+        message: "`dd if=` is blocked — it can overwrite disks irrecoverably.",
+    },
+    {
+        id: "system-redirect",
+        test: (c) => /(?:>|>>|tee(?:\s+-[a-zA-Z]*)?)\s+\/(?:etc|boot|usr|bin|sbin)\//.test(c),
+        message: "Writing into /etc, /boot, /usr, /bin, or /sbin is blocked. These are system directories; use a user-writable path.",
+    },
+    {
+        id: "fork-bomb",
+        test: (c) => /:\(\)\s*\{\s*:\s*\|\s*:\s*&\s*\}\s*;\s*:/.test(c) || /\.\s*\|\s*\.\s*&/.test(c),
+        message: "Fork bomb pattern detected and blocked.",
+    },
+    {
+        id: "curl-pipe-shell",
+        test: (c) => /\b(?:curl|wget|fetch)\b[^|;]*\|\s*(?:sudo\s+)?(?:bash|sh|zsh|fish|ksh|dash)\b/.test(c),
+        message: "Piping remote content directly into a shell is blocked. Download the script, inspect it, then run it.",
+    },
+    {
+        id: "pkill",
+        test: (c) => /\bpkill\b/.test(c),
+        message: "`pkill` is blocked — it can terminate unrelated processes by name. Kill a specific PID instead.",
+    },
+    {
+        id: "kill-9",
+        test: (c) => /\bkill\s+(?:-[a-zA-Z]*\s+)*-9\b|\bkill\s+-s\s+(?:9|SIGKILL)\b|\bkill\s+-SIGKILL\b/.test(c),
+        message: "`kill -9` is blocked — it prevents cleanup. Try SIGTERM (default) first.",
+    },
+    {
+        id: "npm-publish",
+        test: (c) => /\bnpm\s+(?:publish|deprecate|unpublish)\b/.test(c),
+        message: "`npm publish`/`deprecate`/`unpublish` is blocked. Publishing should be done deliberately, outside of an agent session.",
+    },
+    {
+        id: "history-clear",
+        test: (c) => /\bhistory\s+-c\b/.test(c),
+        message: "`history -c` is blocked — erasing shell history hides what happened.",
+    },
+];
+async function readStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin)
+        chunks.push(chunk);
+    return Buffer.concat(chunks).toString("utf8");
+}
+function deny(reason) {
+    const output = {
+        hookSpecificOutput: {
+            hookEventName: "PreToolUse",
+            permissionDecision: "deny",
+            permissionDecisionReason: reason,
+        },
+    };
+    process.stdout.write(JSON.stringify(output));
+    process.exit(2);
+}
+async function main() {
+    let payload;
+    try {
+        const raw = await readStdin();
+        if (!raw.trim()) {
+            process.exit(0);
+        }
+        payload = JSON.parse(raw);
+    }
+    catch {
+        process.exit(0);
+    }
+    const command = payload?.tool_input?.command;
+    if (typeof command !== "string" || command.length === 0) {
+        process.exit(0);
+    }
+    for (const rule of rules) {
+        if (rule.test(command)) {
+            deny(`[${rule.id}] ${rule.message}`);
+        }
+    }
+    process.exit(0);
+}
+main().catch(() => process.exit(0));
+export {};

package/hooks/block-dangerous-commands/settings-fragment.json

@@ -0,0 +1,15 @@
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node .claude/hooks/block-dangerous-commands.mjs"
+          }
+        ]
+      }
+    ]
+  }
+}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@schalkneethling/toolkit",
+  "version": "0.1.0",
+  "description": "CLI for managing Claude Code hooks and skills across projects.",
+  "license": "MIT",
+  "bin": {
+    "toolkit": "./dist/index.mjs"
+  },
+  "files": [
+    "dist",
+    "hooks",
+    "!**/*.ts",
+    "skills"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "toolkit": "tsx src/index.ts",
+    "prepare": "vp pack && vp run build:hooks",
+    "build:hooks": "tsc --project tsconfig.hooks.json"
+  },
+  "dependencies": {
+    "vite-plus": "^0.1.18"
+  },
+  "devDependencies": {
+    "@types/node": "^22.19.17",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3"
+  },
+  "packageManager": "pnpm@10.33.0"
+}