@wrongstack/plugins 0.300.0 → 0.302.0

package/dist/path-guard/index.d.ts

@@ -3,13 +3,21 @@
  * destructive shell commands that touch protected paths.
  *
  * `branch-guard` protects git *branches*; this plugin protects
- * *files and directories*. A `PreToolUse` hook on `write|edit|bash`
- * matches the target path against a configurable glob list:
+ * *files and directories*. A `PreToolUse` hook matches the target path
+ * against a configurable glob list:
  *
- *  - `write` / `edit` → the `path` / `file_path` input field
- *  - `bash`           → destructive commands only (`rm`, `rmdir`,
- *    `mv`, `del`, output redirection `>` / `>>`, `truncate`) whose
- *    arguments mention a protected path
+ *  - any tool that declares `fs.write` (or, absent a capability list,
+ *    `mutating: true`) → the `path` / `file_path` / `output_path` / …
+ *    input field
+ *  - shell commands → destructive ones only (`rm`, `rmdir`, `mv`, `cp`,
+ *    `install`, `tee`, `dd of=`, output redirection `>` / `>>`, `truncate`)
+ *    whose arguments mention a protected path
+ *
+ * The hook is registered for `*` and decides from the tool's own
+ * declaration. It used to be registered for `write|edit|bash|exec` and to
+ * branch on those four names, which meant `patch`, `scaffold`, every
+ * plugin-registered writer and every MCP filesystem server wrote past it
+ * untouched.
  *
  * Default protected set: lockfiles, `.env*` secrets, `.git/`
  * internals, and production migration folders — files an agent
@@ -40,12 +48,6 @@ import type { Plugin } from '@wrongstack/core/types';
  * (`.env` matches `sub/dir/.env`).
  */
 export declare function compilePathGlob(pattern: string): RegExp;
-/**
- * Extract candidate target paths from a shell command, but only when
- * the command looks destructive. Non-destructive commands (cat, ls,
- * grep …) never trigger the guard, even if they mention a protected
- * path.
- */
 export declare function destructiveTargets(command: string): string[];
 declare const plugin: Plugin;
 export default plugin;