jettypod 4.4.7 → 4.4.9

package/claude-hooks/protect-claude-md.js

@@ -0,0 +1,182 @@
+#!/usr/bin/env node
+/**
+ * Claude Code PreToolUse Hook
+ *
+ * Intercepts Edit/Write operations on CLAUDE.md and blocks
+ * forbidden patterns like mode changes or current_work updates.
+ */
+
+const fs = require('fs');
+
+// Read hook input from stdin
+let input = '';
+process.stdin.on('data', chunk => input += chunk);
+process.stdin.on('end', () => {
+  try {
+    const hookInput = JSON.parse(input);
+    const { tool_name, tool_input, cwd } = hookInput;
+
+    // Only check CLAUDE.md edits
+    if (!tool_input.file_path || !tool_input.file_path.endsWith('CLAUDE.md')) {
+      allowEdit();
+      return;
+    }
+
+    let oldContent, newContent;
+
+    if (tool_name === 'Edit') {
+      oldContent = tool_input.old_string;
+      newContent = tool_input.new_string;
+    } else if (tool_name === 'Write') {
+      // For Write, read the current file content (if exists) to compare
+      try {
+        oldContent = fs.readFileSync(tool_input.file_path, 'utf8');
+        newContent = tool_input.content;
+      } catch (err) {
+        // File doesn't exist yet - allow new file creation
+        allowEdit();
+        return;
+      }
+    } else {
+      // Unknown tool
+      allowEdit();
+      return;
+    }
+
+    const result = checkEdit(oldContent, newContent);
+
+    if (result.blocked) {
+      denyEdit(result.message, result.suggestion);
+    } else {
+      allowEdit();
+    }
+
+  } catch (err) {
+    // If we can't parse input, allow the edit (fail open)
+    console.error('Hook error:', err.message);
+    allowEdit();
+  }
+});
+
+/**
+ * Allow the edit
+ */
+function allowEdit() {
+  console.log(JSON.stringify({
+    hookSpecificOutput: {
+      hookEventName: "PreToolUse",
+      permissionDecision: "allow"
+    }
+  }));
+  process.exit(0);
+}
+
+/**
+ * Deny the edit with explanation
+ */
+function denyEdit(message, suggestion) {
+  const reason = `❌ ${message}\n\n💡 Hint: ${suggestion}`;
+
+  console.log(JSON.stringify({
+    hookSpecificOutput: {
+      hookEventName: "PreToolUse",
+      permissionDecision: "deny",
+      permissionDecisionReason: reason
+    }
+  }));
+  process.exit(0);
+}
+
+/**
+ * Pattern definitions for forbidden edits
+ */
+const FORBIDDEN_PATTERNS = [
+  {
+    name: 'mode_change',
+    detect: (old, newStr) => {
+      const oldMode = old.match(/<mode>(\w+)<\/mode>/);
+      const newMode = newStr.match(/<mode>(\w+)<\/mode>/);
+      return oldMode && newMode && oldMode[1] !== newMode[1];
+    },
+    message: 'Cannot change <mode> tag directly',
+    suggestion: (old, newStr) => {
+      const newMode = newStr.match(/<mode>(\w+)<\/mode>/)?.[1];
+      return `Use: jettypod ${newMode}`;
+    }
+  },
+  {
+    name: 'current_work_change',
+    detect: (old, newStr) => {
+      const oldWork = old.match(/<current_work>[\s\S]*?<\/current_work>/);
+      const newWork = newStr.match(/<current_work>[\s\S]*?<\/current_work>/);
+
+      // Block if current_work section content changes
+      if (oldWork && newWork && oldWork[0] !== newWork[0]) {
+        return true;
+      }
+
+      // Block if adding/removing current_work section
+      if ((!oldWork && newWork) || (oldWork && !newWork)) {
+        return true;
+      }
+
+      return false;
+    },
+    message: 'Cannot modify <current_work> section directly',
+    suggestion: (old, newStr) => {
+      const workId = newStr.match(/Working on: \[#(\d+)\]/)?.[1];
+      if (workId) {
+        return `Use: jettypod work start ${workId}`;
+      }
+      return 'Use: jettypod work start <id> or jettypod work stop';
+    }
+  },
+  {
+    name: 'work_status_change',
+    detect: (old, newStr) => {
+      const oldStatus = old.match(/Status: (\w+)/);
+      const newStatus = newStr.match(/Status: (\w+)/);
+      return oldStatus && newStatus && oldStatus[1] !== newStatus[1];
+    },
+    message: 'Cannot change work status directly',
+    suggestion: (old, newStr) => {
+      const workId = newStr.match(/Working on: \[#(\d+)\]/)?.[1];
+      const newStatus = newStr.match(/Status: (\w+)/)?.[1];
+      if (workId && newStatus) {
+        return `Use: jettypod work status ${workId} ${newStatus}`;
+      }
+      return 'Use: jettypod work status <id> <status>';
+    }
+  },
+  {
+    name: 'stage_change',
+    detect: (old, newStr) => {
+      const oldStage = old.match(/<stage>(\w+)<\/stage>/);
+      const newStage = newStr.match(/<stage>(\w+)<\/stage>/);
+      return oldStage && newStage && oldStage[1] !== newStage[1];
+    },
+    message: 'Cannot change <stage> tag directly',
+    suggestion: (old, newStr) => {
+      const newStage = newStr.match(/<stage>(\w+)<\/stage>/)?.[1];
+      return `Use: jettypod stage ${newStage}`;
+    }
+  }
+];
+
+/**
+ * Check if an edit should be blocked
+ */
+function checkEdit(oldStr, newStr) {
+  for (const pattern of FORBIDDEN_PATTERNS) {
+    if (pattern.detect(oldStr, newStr)) {
+      return {
+        blocked: true,
+        pattern: pattern.name,
+        message: pattern.message,
+        suggestion: pattern.suggestion(oldStr, newStr)
+      };
+    }
+  }
+
+  return { blocked: false };
+}

package/jettypod.js

@@ -748,9 +748,9 @@ async function initializeProject() {
     fs.mkdirSync('.jettypod/hooks', { recursive: true });
   }
 
-  const hookSource = path.join(__dirname, '.jettypod', 'hooks', 'protect-claude-md.js');
+  const hookSource = path.join(__dirname, 'claude-hooks', 'protect-claude-md.js');
   const hookDest = path.join('.jettypod', 'hooks', 'protect-claude-md.js');
-  if (fs.existsSync(hookSource) && !fs.existsSync(hookDest)) {
+  if (fs.existsSync(hookSource)) {
     fs.copyFileSync(hookSource, hookDest);
     fs.chmodSync(hookDest, 0o755);
     console.log('🔒 Claude Code hook installed');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jettypod",
-  "version": "4.4.7",
+  "version": "4.4.9",
   "description": "AI-powered development workflow manager with TDD, BDD, and automatic test generation",
   "main": "jettypod.js",
   "bin": {