agent-guardrails 0.3.5 → 0.3.7

package/lib/commands/daemon.js

@@ -55,6 +55,69 @@ function removeDaemonRule(repoRoot) {
   fs.writeFileSync(agentsFile, content, "utf8");
 }
 
+/**
+ * 注入/移除 Claude Code PostToolUse hook（daemon-check）
+ */
+
+const DAEMON_HOOK_ID = "agent-guardrails:daemon-check";
+const DAEMON_HOOK_SCRIPT = ".claude/hooks/daemon-check.js";
+
+function injectClaudeHook(repoRoot) {
+  const settingsPath = path.join(repoRoot, ".claude", "settings.json");
+  const hookScriptPath = path.join(repoRoot, DAEMON_HOOK_SCRIPT);
+  const scriptSource = path.resolve(__dirname, "..", "daemon", "hooks", "daemon-check.js");
+
+  // 复制 hook 脚本到项目
+  const hookDir = path.dirname(hookScriptPath);
+  if (!fs.existsSync(hookDir)) fs.mkdirSync(hookDir, { recursive: true });
+  fs.copyFileSync(scriptSource, hookScriptPath);
+
+  // 合并到 settings.json
+  let settings = {};
+  if (fs.existsSync(settingsPath)) {
+    settings = JSON.parse(fs.readFileSync(settingsPath, "utf8"));
+  }
+
+  if (!settings.hooks) settings.hooks = {};
+  if (!settings.hooks.PostToolUse) settings.hooks.PostToolUse = [];
+
+  // 幂等检查
+  if (settings.hooks.PostToolUse.some(h => h.id === DAEMON_HOOK_ID)) return;
+
+  settings.hooks.PostToolUse.push({
+    id: DAEMON_HOOK_ID,
+    matcher: "Edit|Write|MultiEdit",
+    hooks: [{
+      type: "command",
+      command: `node "${hookScriptPath}"`,
+      timeout: 10
+    }]
+  });
+
+  const settingsDir = path.dirname(settingsPath);
+  if (!fs.existsSync(settingsDir)) fs.mkdirSync(settingsDir, { recursive: true });
+  fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n", "utf8");
+}
+
+function removeClaudeHook(repoRoot) {
+  const settingsPath = path.join(repoRoot, ".claude", "settings.json");
+  const hookScriptPath = path.join(repoRoot, DAEMON_HOOK_SCRIPT);
+
+  // 删除 hook 脚本
+  if (fs.existsSync(hookScriptPath)) fs.unlinkSync(hookScriptPath);
+
+  // 从 settings.json 移除
+  if (!fs.existsSync(settingsPath)) return;
+  const settings = JSON.parse(fs.readFileSync(settingsPath, "utf8"));
+  if (!settings.hooks?.PostToolUse) return;
+
+  settings.hooks.PostToolUse = settings.hooks.PostToolUse.filter(h => h.id !== DAEMON_HOOK_ID);
+  if (settings.hooks.PostToolUse.length === 0) delete settings.hooks.PostToolUse;
+  if (Object.keys(settings.hooks).length === 0) delete settings.hooks;
+
+  fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n", "utf8");
+}
+
 /**
  * 默认守护配置
  */
@@ -252,6 +315,7 @@ export async function startDaemon(repoRoot, options = {}) {
 
   if (pid) {
     injectDaemonRule(repoRoot);
+    injectClaudeHook(repoRoot);
     console.log(`${t("daemon.started")}`);
     console.log(`  PID: ${pid}`);
     console.log(`\n${t("daemon.logFile")}: ${DAEMON_LOG_FILE}`);
@@ -310,6 +374,7 @@ export async function stopDaemon(repoRoot, options = {}) {
     }
 
     removeDaemonRule(repoRoot);
+    removeClaudeHook(repoRoot);
 
     console.log(`\n${t("daemon.stopped")}`);
     return { success: true };

package/lib/daemon/hooks/daemon-check.js

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+/**
+ * Claude Code PostToolUse Hook — daemon-check
+ *
+ * Reads the latest daemon check result. If error-level findings exist,
+ * outputs them to stderr with exit code 2 so Claude Code sees them.
+ * Otherwise exits silently with code 0.
+ *
+ * Triggered by: Edit, Write, MultiEdit tool usage
+ */
+
+import fs from "node:fs";
+import path from "node:path";
+
+const projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd();
+const resultFile = path.join(projectDir, ".agent-guardrails", "daemon-result.json");
+
+if (!fs.existsSync(resultFile)) process.exit(0);
+
+try {
+  const data = JSON.parse(fs.readFileSync(resultFile, "utf8"));
+
+  if (!data.ok && data.result?.findings?.length > 0) {
+    const errors = data.result.findings
+      .filter(f => f.severity === "error")
+      .map(f => `[${f.code}] ${f.message}`)
+      .join("\n");
+
+    if (errors) {
+      process.stderr.write(`Guardrails daemon detected issues:\n${errors}\n`);
+      process.exit(2);
+    }
+  }
+} catch { /* ignore parse errors */ }
+
+process.exit(0);

package/lib/daemon/worker.js

@@ -276,3 +276,16 @@ export async function run({ repoRoot, config, foreground = false, locale = null
   // Keep process alive
   return new Promise(() => { /* never resolve */ });
 }
+
+// ---------------------------------------------------------------------------
+// Self-executing entry (when spawned as background process)
+// ---------------------------------------------------------------------------
+
+const args = parseArgs();
+if (args.repoRoot && !args.foreground) {
+  const config = args.config || {};
+  run({ repoRoot: args.repoRoot, config, foreground: false }).catch((err) => {
+    process.stderr.write(`Worker error: ${err.message}\n`);
+    process.exit(1);
+  });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-guardrails",
-  "version": "0.3.5",
+  "version": "0.3.7",
   "mcpName": "io.github.logi-cmd/agent-guardrails",
   "description": "Production guardrails for AI coding agents",
   "type": "module",