claude-warden 1.3.1 → 1.5.1

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-warden",
-  "version": "1.3.1",
+  "version": "1.5.1",
   "description": "Smart command safety filter for Claude Code — parses shell pipelines and evaluates per-command safety rules to auto-approve safe commands and block dangerous ones",
   "author": {
     "name": "banyudu"

package/config/warden.default.yaml

@@ -13,6 +13,12 @@ defaultDecision: ask
 # If true, commands containing $() or backticks trigger "ask"
 askOnSubshell: true
 
+# Send OS notifications when warden prompts for permission or blocks a command.
+# On macOS, uses terminal-notifier (click to activate terminal) or osascript fallback.
+# On Linux, uses notify-send.
+notifyOnAsk: true
+notifyOnDeny: true
+
 # Additional commands to always allow (checked after alwaysDeny within this scope)
 # alwaysAllow:
 #   - terraform

package/dist/index.cjs

@@ -18988,6 +18988,8 @@ function pkgRunnerRule(command) {
 var DEFAULT_CONFIG = {
   defaultDecision: "ask",
   askOnSubshell: true,
+  notifyOnAsk: true,
+  notifyOnDeny: true,
   trustedSSHHosts: [],
   trustedDockerContainers: [],
   trustedKubectlContexts: [],
@@ -19092,6 +19094,7 @@ var DEFAULT_CONFIG = {
       "ifconfig",
       "ip",
       "nmap",
+      "arp",
       // Pagers and formatters
       "bat",
       "pygmentize",
@@ -19106,6 +19109,74 @@ var DEFAULT_CONFIG = {
       "tput",
       "reset",
       "clear",
+      // System/hardware info
+      "lscpu",
+      "lsblk",
+      "lsusb",
+      "lspci",
+      "lsmod",
+      "dmesg",
+      "sysctl",
+      "sw_vers",
+      "system_profiler",
+      "hostinfo",
+      "lsb_release",
+      "hostnamectl",
+      "arch",
+      "getconf",
+      // User/group info
+      "groups",
+      "getent",
+      "w",
+      "last",
+      "lastlog",
+      "finger",
+      "users",
+      // Process info
+      "pgrep",
+      "pidof",
+      "jobs",
+      // Compression/archive
+      "tar",
+      "gzip",
+      "gunzip",
+      "bzip2",
+      "bunzip2",
+      "xz",
+      "unxz",
+      "zip",
+      "unzip",
+      "7z",
+      "zcat",
+      "bzcat",
+      "xzcat",
+      "zless",
+      "zmore",
+      "zgrep",
+      // Clipboard
+      "pbcopy",
+      "pbpaste",
+      "xclip",
+      "xsel",
+      "wl-copy",
+      "wl-paste",
+      // Binary analysis
+      "strings",
+      "nm",
+      "objdump",
+      "readelf",
+      "ldd",
+      "otool",
+      "size",
+      // macOS utilities (read-only)
+      "mdfind",
+      "mdls",
+      "mdutil",
+      "plutil",
+      "sips",
+      "xcode-select",
+      "xcrun",
+      "xcodebuild",
       // Misc safe
       "cd",
       "pushd",
@@ -19123,7 +19194,18 @@ var DEFAULT_CONFIG = {
       "shasum",
       "cksum",
       "base64",
-      "openssl"
+      "openssl",
+      "watch",
+      "timeout",
+      "nohup",
+      "nice",
+      "iconv",
+      "locale",
+      "localedef",
+      "numfmt",
+      "factor",
+      "bc",
+      "dc"
     ],
     alwaysDeny: [
       "sudo",
@@ -19147,7 +19229,9 @@ var DEFAULT_CONFIG = {
       "crontab",
       "systemctl",
       "service",
-      "launchctl"
+      "launchctl",
+      "wipefs",
+      "shred"
     ],
     rules: [
       // --- CLI tools ---
@@ -19262,7 +19346,15 @@ var DEFAULT_CONFIG = {
         ]
       },
       { command: "docker-compose", default: "ask" },
-      { command: "kubectl", default: "ask" },
+      {
+        command: "kubectl",
+        default: "ask",
+        argPatterns: [
+          { match: { anyArgMatches: ["^(get|describe|logs|top|explain|api-resources|api-versions|version|config|cluster-info)$"] }, decision: "allow", description: "Read-only kubectl commands" },
+          { match: { anyArgMatches: ["^(delete|drain|cordon|taint)$"] }, decision: "ask", reason: "Destructive kubectl operation" },
+          VERSION_HELP_FLAGS
+        ]
+      },
       // --- File operations ---
       {
         command: "rm",
@@ -19302,7 +19394,92 @@ var DEFAULT_CONFIG = {
       // --- Terraform / IaC ---
       { command: "terraform", default: "ask", argPatterns: [
         { match: { anyArgMatches: ["^(plan|validate|fmt|show|state|output|providers|version|graph|console)$"] }, decision: "allow", description: "Read-only terraform commands" }
-      ] }
+      ] },
+      // --- macOS open ---
+      { command: "open", default: "ask" },
+      // --- Text editors ---
+      ...["vi", "vim", "nvim", "nano", "emacs"].map((cmd) => ({
+        command: cmd,
+        default: "ask",
+        argPatterns: [VERSION_HELP_FLAGS]
+      })),
+      // --- Scripting languages ---
+      ...["ruby", "perl", "php"].map((cmd) => ({
+        command: cmd,
+        default: "ask",
+        argPatterns: [
+          { match: { anyArgMatches: ["^-e$", "^--eval"] }, decision: "ask", reason: "Inline code execution" },
+          VERSION_HELP_FLAGS
+        ]
+      })),
+      // --- Java ecosystem ---
+      { command: "java", default: "ask", argPatterns: [VERSION_HELP_FLAGS] },
+      { command: "javac", default: "allow" },
+      // --- Swift / Zig / Dotnet ---
+      { command: "swift", default: "allow", argPatterns: [
+        { match: { anyArgMatches: ["^(build|test|run|package)$"] }, decision: "allow" }
+      ] },
+      { command: "swiftc", default: "allow" },
+      { command: "zig", default: "allow" },
+      { command: "dotnet", default: "allow", argPatterns: [
+        { match: { anyArgMatches: ["^(publish|nuget)$"] }, decision: "ask", reason: "Publishing" }
+      ] },
+      // --- Database CLIs ---
+      ...["psql", "mysql", "mariadb", "sqlite3", "redis-cli", "mongosh"].map((cmd) => ({
+        command: cmd,
+        default: "ask",
+        argPatterns: [VERSION_HELP_FLAGS]
+      })),
+      // --- Cloud CLIs ---
+      { command: "gcloud", default: "ask", argPatterns: [
+        { match: { anyArgMatches: ["^(info|version|help|config|components)$"] }, decision: "allow", description: "Config/info" },
+        { match: { anyArgMatches: ["^(list|describe|get-iam-policy|get)$"] }, decision: "allow", description: "Read-only ops" },
+        VERSION_HELP_FLAGS
+      ] },
+      { command: "az", default: "ask", argPatterns: [
+        { match: { anyArgMatches: ["^(list|show|get)$"] }, decision: "allow", description: "Read-only ops" },
+        VERSION_HELP_FLAGS
+      ] },
+      { command: "aws", default: "ask", argPatterns: [
+        { match: { anyArgMatches: ["^(describe|list|get|sts)$"] }, decision: "allow", description: "Read-only ops" },
+        VERSION_HELP_FLAGS
+      ] },
+      // --- Helm ---
+      { command: "helm", default: "ask", argPatterns: [
+        { match: { anyArgMatches: ["^(list|search|show|status|get|template|version|env|history)$"] }, decision: "allow", description: "Read-only helm commands" },
+        VERSION_HELP_FLAGS
+      ] },
+      // --- Screen/tmux ---
+      ...["screen", "tmux"].map((cmd) => ({
+        command: cmd,
+        default: "ask",
+        argPatterns: [
+          { match: { anyArgMatches: ["^(list-sessions|ls|list)$"] }, decision: "allow", description: "List sessions" },
+          VERSION_HELP_FLAGS
+        ]
+      })),
+      // --- GPG ---
+      { command: "gpg", default: "ask", argPatterns: [
+        { match: { anyArgMatches: ["^(--verify|--list-keys|--list-secret-keys|--fingerprint)$"] }, decision: "allow", description: "Read-only gpg" },
+        VERSION_HELP_FLAGS
+      ] },
+      // --- macOS-specific ---
+      { command: "defaults", default: "ask", argPatterns: [
+        { match: { anyArgMatches: ["^(read|read-type|find|domains)$"] }, decision: "allow", description: "Read-only defaults operations" }
+      ] },
+      { command: "diskutil", default: "ask", argPatterns: [
+        { match: { anyArgMatches: ["^(list|info|apfs|cs|appleRAID)$"] }, decision: "allow", description: "Read-only diskutil" }
+      ] },
+      { command: "codesign", default: "ask", argPatterns: [
+        { match: { anyArgMatches: ["^(-vv|--verify|--display|-d)$"] }, decision: "allow", description: "Verify codesign" }
+      ] },
+      { command: "osascript", default: "ask" },
+      { command: "say", default: "ask" },
+      // --- Process management ---
+      { command: "kill", default: "ask" },
+      { command: "killall", default: "ask" },
+      { command: "pkill", default: "ask" },
+      { command: "renice", default: "ask" }
     ]
   }]
 };
@@ -19403,6 +19580,12 @@ function mergeNonLayerFields(config, raw) {
   if (typeof raw.askOnSubshell === "boolean") {
     config.askOnSubshell = raw.askOnSubshell;
   }
+  if (typeof raw.notifyOnAsk === "boolean") {
+    config.notifyOnAsk = raw.notifyOnAsk;
+  }
+  if (typeof raw.notifyOnDeny === "boolean") {
+    config.notifyOnDeny = raw.notifyOnDeny;
+  }
   if (raw.trustedContextOverrides && typeof raw.trustedContextOverrides === "object") {
     const overrides = raw.trustedContextOverrides;
     const layer = extractLayer(overrides);
@@ -19491,6 +19674,62 @@ See /claude-warden:warden-allow`;
   return lines.join("\n");
 }
 
+// src/notify.ts
+var import_child_process = require("child_process");
+var TERMINAL_BUNDLE_IDS = {
+  "iTerm.app": "com.googlecode.iterm2",
+  "Apple_Terminal": "com.apple.Terminal",
+  "Alacritty": "com.github.alacritty.Alacritty",
+  "WezTerm": "io.wezfurlong.wezterm"
+};
+var terminalNotifierAvailable = null;
+function hasTerminalNotifier() {
+  if (terminalNotifierAvailable !== null) return terminalNotifierAvailable;
+  try {
+    (0, import_child_process.execFileSync)("which", ["terminal-notifier"], { stdio: "ignore" });
+    terminalNotifierAvailable = true;
+  } catch {
+    terminalNotifierAvailable = false;
+  }
+  return terminalNotifierAvailable;
+}
+function getBundleId() {
+  const termProgram = process.env.TERM_PROGRAM;
+  if (!termProgram) return void 0;
+  return TERMINAL_BUNDLE_IDS[termProgram];
+}
+function buildNotifyCommand(title, message) {
+  const platform = process.platform;
+  if (platform === "darwin") {
+    if (hasTerminalNotifier()) {
+      const args2 = ["-title", title, "-message", message];
+      const bundleId = getBundleId();
+      if (bundleId) {
+        args2.push("-activate", bundleId);
+      }
+      return { cmd: "terminal-notifier", args: args2 };
+    }
+    const script = `display notification ${JSON.stringify(message)} with title ${JSON.stringify(title)}`;
+    return { cmd: "osascript", args: ["-e", script] };
+  }
+  if (platform === "linux") {
+    return { cmd: "notify-send", args: [title, message] };
+  }
+  return null;
+}
+function sendNotification(title, message, config) {
+  try {
+    const notifyCmd = buildNotifyCommand(title, message);
+    if (!notifyCmd) return;
+    const child = (0, import_child_process.spawn)(notifyCmd.cmd, notifyCmd.args, {
+      detached: true,
+      stdio: "ignore"
+    });
+    child.unref();
+  } catch {
+  }
+}
+
 // src/index.ts
 async function main() {
   let raw = "";
@@ -19506,6 +19745,9 @@ async function main() {
   if (input.tool_name !== "Bash") {
     process.exit(0);
   }
+  if (input.permission_mode === "dangerously-skip-permissions") {
+    process.exit(0);
+  }
   const command = input.tool_input?.command;
   if (!command || typeof command !== "string") {
     process.exit(0);
@@ -19525,6 +19767,10 @@ async function main() {
     process.exit(0);
   }
   if (result.decision === "deny") {
+    if (config.notifyOnDeny) {
+      const truncated = command.length > 80 ? command.slice(0, 77) + "..." : command;
+      sendNotification("Claude Warden", `Blocked: ${truncated}`, config);
+    }
     const msg2 = formatSystemMessage("deny", command, result.details);
     const output2 = {
       hookSpecificOutput: {
@@ -19538,6 +19784,10 @@ async function main() {
 `);
     process.exit(2);
   }
+  if (config.notifyOnAsk) {
+    const truncated = command.length > 80 ? command.slice(0, 77) + "..." : command;
+    sendNotification("Claude Warden", `Permission needed: ${truncated}`, config);
+  }
   const msg = formatSystemMessage("ask", command, result.details);
   const output = {
     hookSpecificOutput: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-warden",
-  "version": "1.3.1",
+  "version": "1.5.1",
   "description": "Smart command safety filter for Claude Code — auto-approves safe commands, blocks dangerous ones",
   "type": "module",
   "main": "dist/index.cjs",