@yu_robotics/remote-cli 1.0.5 → 1.0.7

package/dist/commands/start.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../src/commands/start.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,oBAAoB;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAmI7B"}
+{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../src/commands/start.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,oBAAoB;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CA+I7B"}

package/dist/commands/start.js

@@ -9,6 +9,7 @@ const WebSocketClient_1 = require("../client/WebSocketClient");
 const executor_1 = require("../executor");
 const MessageHandler_1 = require("../client/MessageHandler");
 const DirectoryGuard_1 = require("../security/DirectoryGuard");
+const HooksConfigurator_1 = require("../security/HooksConfigurator");
 const ora_1 = __importDefault(require("ora"));
 /**
  * Start the remote CLI service
@@ -53,6 +54,18 @@ async function startCommand(options) {
         // Initialize components
         spinner.text = 'Initializing components...';
         const directoryGuard = new DirectoryGuard_1.DirectoryGuard(security.allowedDirectories);
+        // Configure Claude Code security hooks
+        spinner.text = 'Configuring security hooks...';
+        const hooksConfigurator = new HooksConfigurator_1.HooksConfigurator();
+        try {
+            await hooksConfigurator.configure();
+            console.log('🔒 Security hooks configured');
+        }
+        catch (hookError) {
+            // Non-fatal: warn but continue
+            console.warn('⚠️  Failed to configure security hooks:', hookError instanceof Error ? hookError.message : 'Unknown error');
+            console.warn('   File operations may not be restricted to working directory.');
+        }
         // Get last working directory from config (if set) to initialize executor with correct path
         // This ensures .claude-session file is stored in the working directory, not startup directory
         const lastWorkingDirectory = config.get('lastWorkingDirectory');

package/dist/commands/start.js.map

@@ -1 +1 @@
-{"version":3,"file":"start.js","sourceRoot":"","sources":["../../src/commands/start.ts"],"names":[],"mappings":";;;;;AA2BA,oCAqIC;AAhKD,2DAAwD;AACxD,+DAA4D;AAC5D,0CAAmD;AACnD,6DAA0D;AAC1D,+DAA4D;AAC5D,8CAAsB;AAmBtB;;GAEG;AACI,KAAK,UAAU,YAAY,CAChC,OAA4B;IAE5B,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,gCAAgC,CAAC,CAAC,KAAK,EAAE,CAAC;IAE9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,6BAAa,CAAC,UAAU,EAAE,CAAC;QAEhD,uBAAuB;QACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,6DAA6D;aACrE,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;QAE7D,yBAAyB;QACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,0CAA0C;aAClD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,2CAA2C;aACnD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,kBAAkB,IAAI,QAAQ,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9E,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC3C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,oDAAoD;aAC5D,CAAC;QACJ,CAAC;QAED,wBAAwB;QACxB,OAAO,CAAC,IAAI,GAAG,4BAA4B,CAAC;QAE5C,MAAM,cAAc,GAAG,IAAI,+BAAc,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAEvE,2FAA2F;QAC3F,8FAA8F;QAC9F,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAuB,CAAC;QACtF,MAAM,QAAQ,GAAG,IAAA,+BAAoB,EAAC,cAAc,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAEpF,kEAAkE;QAClE,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,sEAAsE;YACtE,MAAM,UAAU,GAAG,QAAQ,CAAC,0BAA0B,EAAE,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,yBAAyB,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,uBAAuB;QACvB,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,iCAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEtD,MAAM,cAAc,GAAG,IAAI,+BAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QAEtF,uBAAuB;QACvB,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;YAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;YAC/B,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC7B,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACvC,MAAM,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,oBAAoB;QACpB,OAAO,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB;aACpE,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,CAAC,OAAO,CACb,OAAO,CAAC,MAAM;YACZ,CAAC,CAAC,2CAA2C;YAC7C,CAAC,CAAC,4BAA4B,CACjC,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,OAAO,CAAC,MAAM;SAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAChE,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../src/commands/start.ts"],"names":[],"mappings":";;;;;AA4BA,oCAiJC;AA7KD,2DAAwD;AACxD,+DAA4D;AAC5D,0CAAmD;AACnD,6DAA0D;AAC1D,+DAA4D;AAC5D,qEAAkE;AAClE,8CAAsB;AAmBtB;;GAEG;AACI,KAAK,UAAU,YAAY,CAChC,OAA4B;IAE5B,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,gCAAgC,CAAC,CAAC,KAAK,EAAE,CAAC;IAE9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,6BAAa,CAAC,UAAU,EAAE,CAAC;QAEhD,uBAAuB;QACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,6DAA6D;aACrE,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;QAE7D,yBAAyB;QACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,0CAA0C;aAClD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,2CAA2C;aACnD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,kBAAkB,IAAI,QAAQ,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9E,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC3C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,oDAAoD;aAC5D,CAAC;QACJ,CAAC;QAED,wBAAwB;QACxB,OAAO,CAAC,IAAI,GAAG,4BAA4B,CAAC;QAE5C,MAAM,cAAc,GAAG,IAAI,+BAAc,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAEvE,uCAAuC;QACvC,OAAO,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC/C,MAAM,iBAAiB,GAAG,IAAI,qCAAiB,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,+BAA+B;YAC/B,OAAO,CAAC,IAAI,CAAC,yCAAyC,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YAC1H,OAAO,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QACjF,CAAC;QAED,2FAA2F;QAC3F,8FAA8F;QAC9F,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAuB,CAAC;QACtF,MAAM,QAAQ,GAAG,IAAA,+BAAoB,EAAC,cAAc,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAEpF,kEAAkE;QAClE,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,sEAAsE;YACtE,MAAM,UAAU,GAAG,QAAQ,CAAC,0BAA0B,EAAE,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,yBAAyB,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,uBAAuB;QACvB,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,iCAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEtD,MAAM,cAAc,GAAG,IAAI,+BAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QAEtF,uBAAuB;QACvB,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;YAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;YAC/B,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC7B,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACvC,MAAM,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,oBAAoB;QACpB,OAAO,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB;aACpE,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,CAAC,OAAO,CACb,OAAO,CAAC,MAAM;YACZ,CAAC,CAAC,2CAA2C;YAC7C,CAAC,CAAC,4BAA4B,CACjC,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,OAAO,CAAC,MAAM;SAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAChE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/security/HooksConfigurator.d.ts

@@ -0,0 +1,32 @@
+/**
+ * HooksConfigurator - Manages Claude Code hooks configuration
+ *
+ * This module handles the configuration of Claude Code's PreToolUse hooks
+ * to enforce directory-based security restrictions.
+ */
+/**
+ * HooksConfigurator manages Claude Code hooks configuration
+ * for security enforcement
+ */
+export declare class HooksConfigurator {
+    private claudeSettingsPath;
+    constructor();
+    /**
+     * Configure Claude Code hooks for security
+     * Adds the security guard hook to PreToolUse
+     */
+    configure(): Promise<void>;
+    /**
+     * Remove security guard hooks from Claude settings
+     */
+    unconfigure(): Promise<void>;
+    /**
+     * Check if security guard hooks are configured
+     */
+    isConfigured(): Promise<boolean>;
+    /**
+     * Get the path to the security guard script
+     */
+    getSecurityGuardPath(): string;
+}
+//# sourceMappingURL=HooksConfigurator.d.ts.map

package/dist/security/HooksConfigurator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HooksConfigurator.d.ts","sourceRoot":"","sources":["../../src/security/HooksConfigurator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA+BH;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,kBAAkB,CAAS;;IAUnC;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAsDhC;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAiClC;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC;IA0BtC;;OAEG;IACH,oBAAoB,IAAI,MAAM;CAO/B"}

package/dist/security/HooksConfigurator.js

@@ -0,0 +1,171 @@
+"use strict";
+/**
+ * HooksConfigurator - Manages Claude Code hooks configuration
+ *
+ * This module handles the configuration of Claude Code's PreToolUse hooks
+ * to enforce directory-based security restrictions.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HooksConfigurator = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+/**
+ * File operation tools that need security validation
+ */
+const FILE_TOOLS = ['Read', 'Write', 'Edit', 'Glob', 'Grep', 'NotebookEdit'];
+/**
+ * HooksConfigurator manages Claude Code hooks configuration
+ * for security enforcement
+ */
+class HooksConfigurator {
+    claudeSettingsPath;
+    constructor() {
+        this.claudeSettingsPath = path.join(os.homedir(), '.claude', 'settings.json');
+    }
+    /**
+     * Configure Claude Code hooks for security
+     * Adds the security guard hook to PreToolUse
+     */
+    async configure() {
+        const securityGuardPath = this.getSecurityGuardPath();
+        // Verify security guard script exists
+        if (!fs.existsSync(securityGuardPath)) {
+            throw new Error(`Security guard script not found at: ${securityGuardPath}`);
+        }
+        // Read existing settings or create empty object
+        let settings = {};
+        try {
+            if (fs.existsSync(this.claudeSettingsPath)) {
+                const content = fs.readFileSync(this.claudeSettingsPath, 'utf8');
+                settings = JSON.parse(content);
+            }
+        }
+        catch {
+            // If file doesn't exist or can't be parsed, start fresh
+            settings = {};
+        }
+        // Initialize hooks structure
+        settings.hooks = settings.hooks || {};
+        settings.hooks.PreToolUse = settings.hooks.PreToolUse || [];
+        // Check if security guard hook is already configured
+        const hookCommand = `node "${securityGuardPath}"`;
+        const existingHook = settings.hooks.PreToolUse.find((hook) => {
+            const command = typeof hook === 'string' ? hook : hook.command;
+            return command.includes('security-guard');
+        });
+        // Add hook if not already present
+        if (!existingHook) {
+            const newHook = {
+                command: hookCommand,
+                tools: FILE_TOOLS
+            };
+            settings.hooks.PreToolUse.push(newHook);
+        }
+        // Ensure .claude directory exists
+        const claudeDir = path.dirname(this.claudeSettingsPath);
+        fs.mkdirSync(claudeDir, { recursive: true });
+        // Write settings
+        fs.writeFileSync(this.claudeSettingsPath, JSON.stringify(settings, null, 2), 'utf8');
+        console.log('[HooksConfigurator] Claude Code hooks configured successfully');
+    }
+    /**
+     * Remove security guard hooks from Claude settings
+     */
+    async unconfigure() {
+        // Check if settings file exists
+        if (!fs.existsSync(this.claudeSettingsPath)) {
+            return;
+        }
+        // Read settings
+        let settings;
+        try {
+            const content = fs.readFileSync(this.claudeSettingsPath, 'utf8');
+            settings = JSON.parse(content);
+        }
+        catch {
+            return;
+        }
+        // Remove security guard hooks from PreToolUse
+        if (settings.hooks?.PreToolUse) {
+            settings.hooks.PreToolUse = settings.hooks.PreToolUse.filter((hook) => {
+                const command = typeof hook === 'string' ? hook : hook.command;
+                return !command.includes('security-guard');
+            });
+        }
+        // Write settings back
+        fs.writeFileSync(this.claudeSettingsPath, JSON.stringify(settings, null, 2), 'utf8');
+        console.log('[HooksConfigurator] Claude Code hooks removed');
+    }
+    /**
+     * Check if security guard hooks are configured
+     */
+    async isConfigured() {
+        // Check if settings file exists
+        if (!fs.existsSync(this.claudeSettingsPath)) {
+            return false;
+        }
+        // Read settings
+        let settings;
+        try {
+            const content = fs.readFileSync(this.claudeSettingsPath, 'utf8');
+            settings = JSON.parse(content);
+        }
+        catch {
+            return false;
+        }
+        // Check for security guard in PreToolUse
+        if (!settings.hooks?.PreToolUse) {
+            return false;
+        }
+        return settings.hooks.PreToolUse.some((hook) => {
+            const command = typeof hook === 'string' ? hook : hook.command;
+            return command.includes('security-guard');
+        });
+    }
+    /**
+     * Get the path to the security guard script
+     */
+    getSecurityGuardPath() {
+        // The security guard script is in the same directory as this module
+        // Try .ts first (for development), then .js (for production)
+        const tsPath = path.join(__dirname, 'security-guard.ts');
+        const jsPath = path.join(__dirname, 'security-guard.js');
+        return fs.existsSync(tsPath) ? tsPath : jsPath;
+    }
+}
+exports.HooksConfigurator = HooksConfigurator;
+//# sourceMappingURL=HooksConfigurator.js.map

package/dist/security/HooksConfigurator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HooksConfigurator.js","sourceRoot":"","sources":["../../src/security/HooksConfigurator.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAsBzB;;GAEG;AACH,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AAE7E;;;GAGG;AACH,MAAa,iBAAiB;IACpB,kBAAkB,CAAS;IAEnC;QACE,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,IAAI,CACjC,EAAE,CAAC,OAAO,EAAE,EACZ,SAAS,EACT,eAAe,CAChB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAEtD,sCAAsC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,uCAAuC,iBAAiB,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,gDAAgD;QAChD,IAAI,QAAQ,GAAmB,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;gBACjE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;YACxD,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,6BAA6B;QAC7B,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;QACtC,QAAQ,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;QAE5D,qDAAqD;QACrD,MAAM,WAAW,GAAG,SAAS,iBAAiB,GAAG,CAAC;QAClD,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3D,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;YAC/D,OAAO,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,kCAAkC;QAClC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,OAAO,GAAe;gBAC1B,OAAO,EAAE,WAAW;gBACpB,KAAK,EAAE,UAAU;aAClB,CAAC;YACF,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,kCAAkC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACxD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7C,iBAAiB;QACjB,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EACjC,MAAM,CACP,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,gCAAgC;QAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,gBAAgB;QAChB,IAAI,QAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;YACjE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,8CAA8C;QAC9C,IAAI,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;YAC/B,QAAQ,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;gBACpE,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC/D,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QACL,CAAC;QAED,sBAAsB;QACtB,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EACjC,MAAM,CACP,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY;QAChB,gCAAgC;QAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,gBAAgB;QAChB,IAAI,QAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;YACjE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QAED,yCAAyC;QACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC7C,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;YAC/D,OAAO,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,oBAAoB;QAClB,oEAAoE;QACpE,6DAA6D;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACzD,OAAO,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACjD,CAAC;CACF;AAhJD,8CAgJC"}

package/dist/security/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Security module exports
+ */
+export { DirectoryGuard } from './DirectoryGuard';
+export { HooksConfigurator } from './HooksConfigurator';
+export { validateToolUse, loadAllowedDirs } from './security-guard';
+export type { ValidationResult, HookData } from './security-guard';
+//# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACpE,YAAY,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/security/index.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Security module exports
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadAllowedDirs = exports.validateToolUse = exports.HooksConfigurator = exports.DirectoryGuard = void 0;
+var DirectoryGuard_1 = require("./DirectoryGuard");
+Object.defineProperty(exports, "DirectoryGuard", { enumerable: true, get: function () { return DirectoryGuard_1.DirectoryGuard; } });
+var HooksConfigurator_1 = require("./HooksConfigurator");
+Object.defineProperty(exports, "HooksConfigurator", { enumerable: true, get: function () { return HooksConfigurator_1.HooksConfigurator; } });
+var security_guard_1 = require("./security-guard");
+Object.defineProperty(exports, "validateToolUse", { enumerable: true, get: function () { return security_guard_1.validateToolUse; } });
+Object.defineProperty(exports, "loadAllowedDirs", { enumerable: true, get: function () { return security_guard_1.loadAllowedDirs; } });
+//# sourceMappingURL=index.js.map

package/dist/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,mDAAkD;AAAzC,gHAAA,cAAc,OAAA;AACvB,yDAAwD;AAA/C,sHAAA,iBAAiB,OAAA;AAC1B,mDAAoE;AAA3D,iHAAA,eAAe,OAAA;AAAE,iHAAA,eAAe,OAAA"}

package/dist/security/security-guard.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Security Guard for Claude Code PreToolUse Hooks
+ *
+ * This module validates tool usage against allowed directory restrictions.
+ * It can be used as:
+ * 1. A library function (validateToolUse) for testing and programmatic use
+ * 2. A standalone script called by Claude Code hooks
+ *
+ * Exit codes (when run as script):
+ *   0 = Allow execution
+ *   2 = Block execution (permission denied)
+ */
+/**
+ * Result of tool use validation
+ */
+export interface ValidationResult {
+    allowed: boolean;
+    reason: string;
+}
+/**
+ * Hook data passed from Claude Code
+ */
+export interface HookData {
+    tool_name: string;
+    tool_input: Record<string, any> | undefined;
+    cwd?: string;
+}
+/**
+ * Validate tool use against allowed directories
+ *
+ * @param hookData - Data from Claude Code hook (tool_name, tool_input, etc.)
+ * @param allowedDirs - List of allowed directory paths
+ * @returns ValidationResult indicating if the operation is allowed
+ */
+export declare function validateToolUse(hookData: HookData, allowedDirs: string[]): ValidationResult;
+/**
+ * Load allowed directories from config file
+ * If lastWorkingDirectory is set, use it as the primary allowed directory
+ */
+export declare function loadAllowedDirs(configPath?: string): string[];
+/**
+ * Main function when run as a script
+ * Reads hook data from stdin and exits with appropriate code
+ */
+export declare function main(): Promise<void>;
+//# sourceMappingURL=security-guard.d.ts.map

package/dist/security/security-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-guard.d.ts","sourceRoot":"","sources":["../../src/security/security-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAsLD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,gBAAgB,CA+D3F;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAmB7D;AAED;;;GAGG;AACH,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAiC1C"}

package/dist/security/security-guard.js

@@ -0,0 +1,323 @@
+"use strict";
+/**
+ * Security Guard for Claude Code PreToolUse Hooks
+ *
+ * This module validates tool usage against allowed directory restrictions.
+ * It can be used as:
+ * 1. A library function (validateToolUse) for testing and programmatic use
+ * 2. A standalone script called by Claude Code hooks
+ *
+ * Exit codes (when run as script):
+ *   0 = Allow execution
+ *   2 = Block execution (permission denied)
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateToolUse = validateToolUse;
+exports.loadAllowedDirs = loadAllowedDirs;
+exports.main = main;
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs"));
+/**
+ * File operation tools that need path validation
+ */
+const FILE_TOOLS = ['Read', 'Write', 'Edit', 'Glob', 'Grep', 'NotebookEdit'];
+/**
+ * Dangerous commands that should always be blocked
+ */
+const DANGEROUS_COMMANDS = ['sudo'];
+/**
+ * Patterns that indicate piping to a shell (dangerous)
+ */
+const PIPE_TO_SHELL_PATTERNS = [
+    /\|\s*bash\b/,
+    /\|\s*sh\b/,
+    /\|\s*zsh\b/,
+    /\|\s*source\b/,
+    /\$\(/, // Command substitution
+];
+/**
+ * Resolve a path that may contain ~ to an absolute path
+ */
+function resolvePath(filePath, cwd) {
+    // Handle tilde expansion
+    if (filePath.startsWith('~')) {
+        const home = process.env.HOME || '';
+        filePath = path.join(home, filePath.slice(1));
+    }
+    // Handle relative paths
+    if (!path.isAbsolute(filePath)) {
+        const basePath = cwd || process.cwd();
+        filePath = path.resolve(basePath, filePath);
+    }
+    // Normalize to resolve .. and .
+    return path.normalize(filePath);
+}
+/**
+ * Resolve an allowed directory path (may contain ~)
+ */
+function resolveAllowedDir(dirPath) {
+    if (dirPath.startsWith('~')) {
+        const home = process.env.HOME || '';
+        return path.normalize(path.join(home, dirPath.slice(1)));
+    }
+    return path.normalize(path.resolve(dirPath));
+}
+/**
+ * Check if a file path is within any of the allowed directories
+ */
+function isPathWithinAllowed(filePath, allowedDirs) {
+    const normalizedFilePath = path.normalize(filePath);
+    for (const allowedDir of allowedDirs) {
+        const normalizedAllowedDir = resolveAllowedDir(allowedDir);
+        // Check if file path starts with allowed directory
+        // Must either be exact match or have path separator after allowed dir
+        if (normalizedFilePath === normalizedAllowedDir) {
+            return true;
+        }
+        // Ensure we check with trailing separator to prevent prefix attacks
+        // e.g., /home/user/app should not match /home/user/app-malicious
+        const allowedWithSep = normalizedAllowedDir.endsWith(path.sep)
+            ? normalizedAllowedDir
+            : normalizedAllowedDir + path.sep;
+        if (normalizedFilePath.startsWith(allowedWithSep)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Extract file path from tool input based on tool type
+ */
+function extractFilePath(toolName, toolInput) {
+    // Different tools use different parameter names for file paths
+    if (toolName === 'NotebookEdit') {
+        return toolInput.notebook_path || null;
+    }
+    if (toolName === 'Glob' || toolName === 'Grep') {
+        // Glob and Grep use 'path' parameter
+        return toolInput.path || toolInput.file_path || null;
+    }
+    // Read, Write, Edit use 'file_path'
+    return toolInput.file_path || null;
+}
+/**
+ * Extract paths from a bash command
+ * Returns an array of paths found in the command
+ */
+function extractPathsFromCommand(command, cwd) {
+    const paths = [];
+    // Regex patterns to match paths
+    // Match absolute paths, tilde paths, and relative paths with common extensions
+    const pathPatterns = [
+        // Absolute paths starting with /
+        /(?:^|\s|=|"'`)(\/[^\s;|&><"'`]+)/g,
+        // Tilde paths
+        /(?:^|\s|=|"'`)(~\/[^\s;|&><"'`]*)/g,
+        // Relative paths starting with ./ or ../
+        /(?:^|\s|=|"'`)(\.\.[^\s;|&><"'`]*)/g,
+        /(?:^|\s|=|"'`)(\.[^\s;|&><"'`]+)/g,
+    ];
+    for (const pattern of pathPatterns) {
+        let match;
+        while ((match = pattern.exec(command)) !== null) {
+            const potentialPath = match[1].trim();
+            // Filter out common non-path strings
+            if (potentialPath && !potentialPath.match(/^\.(js|ts|json|md|sh)$/)) {
+                paths.push(potentialPath);
+            }
+        }
+    }
+    return paths;
+}
+/**
+ * Validate a Bash command against security restrictions
+ */
+function validateBashCommand(command, cwd, allowedDirs) {
+    // Check for dangerous commands
+    for (const dangerous of DANGEROUS_COMMANDS) {
+        if (new RegExp(`\\b${dangerous}\\b`).test(command)) {
+            return {
+                allowed: false,
+                reason: `Command contains blocked keyword: ${dangerous}`
+            };
+        }
+    }
+    // Check for pipe to shell patterns
+    for (const pattern of PIPE_TO_SHELL_PATTERNS) {
+        if (pattern.test(command)) {
+            return {
+                allowed: false,
+                reason: 'Command contains dangerous pattern: pipe to shell'
+            };
+        }
+    }
+    // Extract and validate all paths in the command
+    const extractedPaths = extractPathsFromCommand(command, cwd);
+    for (const extractedPath of extractedPaths) {
+        const resolvedPath = resolvePath(extractedPath, cwd);
+        if (!isPathWithinAllowed(resolvedPath, allowedDirs)) {
+            return {
+                allowed: false,
+                reason: `Path "${extractedPath}" is outside allowed directories: ${allowedDirs.join(', ')}`
+            };
+        }
+    }
+    return {
+        allowed: true,
+        reason: 'Command validated successfully'
+    };
+}
+/**
+ * Validate tool use against allowed directories
+ *
+ * @param hookData - Data from Claude Code hook (tool_name, tool_input, etc.)
+ * @param allowedDirs - List of allowed directory paths
+ * @returns ValidationResult indicating if the operation is allowed
+ */
+function validateToolUse(hookData, allowedDirs) {
+    const { tool_name, tool_input, cwd } = hookData;
+    // If no restrictions configured, allow everything
+    if (!allowedDirs || allowedDirs.length === 0) {
+        return {
+            allowed: true,
+            reason: 'No directory restrictions configured'
+        };
+    }
+    // Handle Bash tool specially
+    if (tool_name === 'Bash') {
+        if (!tool_input?.command) {
+            return {
+                allowed: true,
+                reason: 'No command in Bash tool input'
+            };
+        }
+        return validateBashCommand(tool_input.command, cwd, allowedDirs);
+    }
+    // Non-file tools (other than Bash) are allowed by default
+    if (!FILE_TOOLS.includes(tool_name)) {
+        return {
+            allowed: true,
+            reason: 'Non-file tool'
+        };
+    }
+    // Handle missing or undefined tool_input
+    if (!tool_input) {
+        return {
+            allowed: true,
+            reason: 'No file path in tool input (undefined input)'
+        };
+    }
+    // Extract file path from tool input
+    const filePath = extractFilePath(tool_name, tool_input);
+    if (!filePath) {
+        return {
+            allowed: true,
+            reason: 'No file path in tool input'
+        };
+    }
+    // Resolve the file path to absolute
+    const absolutePath = resolvePath(filePath, cwd);
+    // Check if path is within allowed directories
+    if (isPathWithinAllowed(absolutePath, allowedDirs)) {
+        return {
+            allowed: true,
+            reason: `Path within allowed directory`
+        };
+    }
+    return {
+        allowed: false,
+        reason: `Path "${filePath}" is outside allowed directories: ${allowedDirs.join(', ')}`
+    };
+}
+/**
+ * Load allowed directories from config file
+ * If lastWorkingDirectory is set, use it as the primary allowed directory
+ */
+function loadAllowedDirs(configPath) {
+    const effectivePath = configPath ||
+        process.env.REMOTE_CLI_CONFIG ||
+        path.join(process.env.HOME || '', '.remote-cli', 'config.json');
+    try {
+        const config = JSON.parse(fs.readFileSync(effectivePath, 'utf8'));
+        // If lastWorkingDirectory is set, use it as the primary (and only) allowed directory
+        // This ensures security is tied to the current working directory
+        if (config.lastWorkingDirectory) {
+            return [config.lastWorkingDirectory];
+        }
+        // Fallback to allowedDirectories if no working directory is set
+        return config.security?.allowedDirectories || [];
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Main function when run as a script
+ * Reads hook data from stdin and exits with appropriate code
+ */
+async function main() {
+    let input = '';
+    // Read from stdin
+    process.stdin.setEncoding('utf8');
+    for await (const chunk of process.stdin) {
+        input += chunk;
+    }
+    try {
+        const hookData = JSON.parse(input);
+        const allowedDirs = loadAllowedDirs();
+        // If no allowed directories are configured, allow everything (fallback)
+        if (allowedDirs.length === 0) {
+            console.error('[SecurityGuard] Warning: No working directory configured, allowing all operations');
+            process.exit(0);
+        }
+        const result = validateToolUse(hookData, allowedDirs);
+        if (!result.allowed) {
+            console.error(`[SecurityGuard] Blocked: ${result.reason}`);
+            process.exit(2);
+        }
+        process.exit(0);
+    }
+    catch (error) {
+        console.error(`[SecurityGuard] Error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        // Allow on error to avoid blocking legitimate operations
+        process.exit(0);
+    }
+}
+// Run main if executed directly
+if (require.main === module) {
+    main();
+}
+//# sourceMappingURL=security-guard.js.map

package/dist/security/security-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-guard.js","sourceRoot":"","sources":["../../src/security/security-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiNH,0CA+DC;AAMD,0CAmBC;AAMD,oBAiCC;AA9UD,2CAA6B;AAC7B,uCAAyB;AAmBzB;;GAEG;AACH,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AAE7E;;GAEG;AACH,MAAM,kBAAkB,GAAG,CAAC,MAAM,CAAC,CAAC;AAEpC;;GAEG;AACH,MAAM,sBAAsB,GAAG;IAC7B,aAAa;IACb,WAAW;IACX,YAAY;IACZ,eAAe;IACf,MAAM,EAAG,uBAAuB;CACjC,CAAC;AAEF;;GAEG;AACH,SAAS,WAAW,CAAC,QAAgB,EAAE,GAAY;IACjD,yBAAyB;IACzB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACpC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,wBAAwB;IACxB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACtC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,gCAAgC;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,QAAgB,EAAE,WAAqB;IAClE,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAEpD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAE3D,mDAAmD;QACnD,sEAAsE;QACtE,IAAI,kBAAkB,KAAK,oBAAoB,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,oEAAoE;QACpE,iEAAiE;QACjE,MAAM,cAAc,GAAG,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5D,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC;QAEpC,IAAI,kBAAkB,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,SAA8B;IACvE,+DAA+D;IAC/D,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC,aAAa,IAAI,IAAI,CAAC;IACzC,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC/C,qCAAqC;QACrC,OAAO,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,SAAS,IAAI,IAAI,CAAC;IACvD,CAAC;IAED,oCAAoC;IACpC,OAAO,SAAS,CAAC,SAAS,IAAI,IAAI,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,OAAe,EAAE,GAAY;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,gCAAgC;IAChC,+EAA+E;IAC/E,MAAM,YAAY,GAAG;QACnB,iCAAiC;QACjC,mCAAmC;QACnC,cAAc;QACd,oCAAoC;QACpC,yCAAyC;QACzC,qCAAqC;QACrC,mCAAmC;KACpC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,qCAAqC;YACrC,IAAI,aAAa,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBACpE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,OAAe,EACf,GAAuB,EACvB,WAAqB;IAErB,+BAA+B;IAC/B,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;QAC3C,IAAI,IAAI,MAAM,CAAC,MAAM,SAAS,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,qCAAqC,SAAS,EAAE;aACzD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,mDAAmD;aAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,MAAM,cAAc,GAAG,uBAAuB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE7D,KAAK,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,WAAW,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAErD,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC;YACpD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,SAAS,aAAa,qCAAqC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,gCAAgC;KACzC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,QAAkB,EAAE,WAAqB;IACvE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC;IAEhD,kDAAkD;IAClD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,sCAAsC;SAC/C,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;YACzB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,+BAA+B;aACxC,CAAC;QACJ,CAAC;QACD,OAAO,mBAAmB,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IACnE,CAAC;IAED,0DAA0D;IAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,eAAe;SACxB,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,8CAA8C;SACvD,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAExD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,4BAA4B;SACrC,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAEhD,8CAA8C;IAC9C,IAAI,mBAAmB,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,+BAA+B;SACxC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,SAAS,QAAQ,qCAAqC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACvF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,UAAmB;IACjD,MAAM,aAAa,GAAG,UAAU;QAC9B,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;IAElE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QAElE,qFAAqF;QACrF,iEAAiE;QACjE,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAChC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACvC,CAAC;QAED,gEAAgE;QAChE,OAAO,MAAM,CAAC,QAAQ,EAAE,kBAAkB,IAAI,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,IAAI;IACxB,IAAI,KAAK,GAAG,EAAE,CAAC;IAEf,kBAAkB;IAClB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAElC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,KAAK,IAAI,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAa,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;QAEtC,wEAAwE;QACxE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,mFAAmF,CAAC,CAAC;YACnG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAEtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,4BAA4B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACpG,yDAAyD;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,gCAAgC;AAChC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,EAAE,CAAC;AACT,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yu_robotics/remote-cli",
-  "version": "1.0.5",
+  "version": "1.0.7",
   "description": "Remote control Claude Code CLI via mobile",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",