slashdev 1.0.0 → 1.2.0

package/hooks/pre-install-guard.sh

@@ -0,0 +1,88 @@
+#!/usr/bin/env bash
+# pre-install-guard.sh — PreToolUse hook for Bash tool calls.
+#
+# Blocks bare dependency install commands and forces them to be re-run with
+# Socket Firewall (`sfw`) prefix to protect against supply-chain attacks.
+#
+# Reads tool-call JSON from stdin, returns:
+#   {} → allow
+#   {"permissionDecision":"deny","message":"..."} → block
+#
+# Patterns matched (anchored at the start of the actual command, after any
+# leading `cd ... &&` prefix):
+#   - npm/pnpm/yarn/bun (install|i|ci|add|update|upgrade)
+#   - composer (install|require|update)
+#   - pip/pip3/uv (install|sync)
+set -euo pipefail
+
+INPUT=$(cat)
+
+# Extract tool_input.command from the JSON. Try grep/sed first for speed,
+# fall back to python3 for properly-escaped JSON.
+COMMAND=$(printf '%s' "$INPUT" \
+  | grep -o '"command"[[:space:]]*:[[:space:]]*"[^"]*"' \
+  | head -1 \
+  | sed 's/.*:[[:space:]]*"//;s/"$//' \
+  || true)
+
+if [ -z "$COMMAND" ]; then
+  COMMAND=$(printf '%s' "$INPUT" \
+    | python3 -c 'import sys,json; print(json.loads(sys.stdin.read()).get("tool_input",{}).get("command",""))' \
+    2>/dev/null || true)
+fi
+
+# No command extracted → allow (don't block on parse failure).
+if [ -z "$COMMAND" ]; then
+  echo '{}'
+  exit 0
+fi
+
+# Strip leading whitespace.
+TRIMMED=$(printf '%s' "$COMMAND" | sed 's/^[[:space:]]*//')
+
+# Strip a leading `cd <dir> && ` prefix (or `cd <dir>; `) so we examine the
+# actual command being run, not the directory change.
+ACTUAL_CMD="$TRIMMED"
+while printf '%s' "$ACTUAL_CMD" | grep -qE '^cd[[:space:]]+[^&;]+[[:space:]]*(&&|;)[[:space:]]*'; do
+  ACTUAL_CMD=$(printf '%s' "$ACTUAL_CMD" \
+    | sed -E 's/^cd[[:space:]]+[^&;]+[[:space:]]*(&&|;)[[:space:]]*//')
+done
+
+# Strip leading env-var assignments (e.g. `NODE_ENV=production npm ci`).
+while printf '%s' "$ACTUAL_CMD" | grep -qE '^[A-Z_][A-Z0-9_]*=[^[:space:]]+[[:space:]]+'; do
+  ACTUAL_CMD=$(printf '%s' "$ACTUAL_CMD" \
+    | sed -E 's/^[A-Z_][A-Z0-9_]*=[^[:space:]]+[[:space:]]+//')
+done
+
+# Already wrapped with sfw → allow immediately.
+if printf '%s' "$ACTUAL_CMD" | grep -qE '^sfw([[:space:]]|$)'; then
+  echo '{}'
+  exit 0
+fi
+
+# Detect install commands. Patterns are conservative — must be the first token,
+# followed by an install-style subcommand.
+IS_INSTALL=0
+case "$ACTUAL_CMD" in
+  npm[[:space:]]install*|npm[[:space:]]i[[:space:]]*|"npm i"|npm[[:space:]]ci*|npm[[:space:]]add*|npm[[:space:]]update*|npm[[:space:]]upgrade*) IS_INSTALL=1 ;;
+  pnpm[[:space:]]install*|pnpm[[:space:]]i[[:space:]]*|"pnpm i"|pnpm[[:space:]]add*|pnpm[[:space:]]update*|pnpm[[:space:]]upgrade*) IS_INSTALL=1 ;;
+  yarn[[:space:]]install*|yarn[[:space:]]add*|yarn[[:space:]]upgrade*|"yarn") IS_INSTALL=1 ;;
+  bun[[:space:]]install*|bun[[:space:]]i[[:space:]]*|"bun i"|bun[[:space:]]add*|bun[[:space:]]update*) IS_INSTALL=1 ;;
+  composer[[:space:]]install*|composer[[:space:]]require*|composer[[:space:]]update*|composer[[:space:]]upgrade*) IS_INSTALL=1 ;;
+  pip[[:space:]]install*|pip3[[:space:]]install*|uv[[:space:]]install*|uv[[:space:]]sync*|uv[[:space:]]add*) IS_INSTALL=1 ;;
+esac
+
+if [ "$IS_INSTALL" -eq 0 ]; then
+  echo '{}'
+  exit 0
+fi
+
+# It's an install command without sfw — block it.
+# Escape the original command for safe inclusion in JSON.
+ESCAPED_CMD=$(printf '%s' "$ACTUAL_CMD" | python3 -c 'import sys,json; print(json.dumps(sys.stdin.read())[1:-1])' 2>/dev/null || printf '%s' "$ACTUAL_CMD" | sed 's/\\/\\\\/g; s/"/\\"/g')
+
+if command -v sfw >/dev/null 2>&1; then
+  printf '{"permissionDecision":"deny","message":"[slashdev] Bare install command blocked. Re-run with the sfw prefix:\\n\\n    sfw %s\\n\\nSocket Firewall scans every package against Socket'"'"'s vulnerability/malware database before installing it. This protects against supply-chain attacks."}\n' "$ESCAPED_CMD"
+else
+  printf '{"permissionDecision":"deny","message":"[slashdev] Socket Firewall (sfw) is required for dependency installs but is not installed on this machine. Install it once:\\n\\n    npm install -g @socketsecurity/cli\\n\\nThen retry the install with:\\n\\n    sfw %s"}\n' "$ESCAPED_CMD"
+fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "slashdev",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "description": "Skills & workflows for AI agents in the Slashdev ecosystem",
   "type": "module",
   "main": "src/index.js",

package/src/commands/setup-internals.js

@@ -20,6 +20,38 @@ const CLAUDE_DIR = join(homedir(), '.claude');
 const CLAUDE_HOOKS_DIR = join(CLAUDE_DIR, 'hooks');
 const CLAUDE_SKILLS_DIR = join(CLAUDE_DIR, 'skills');
 const CLAUDE_SETTINGS_FILE = join(CLAUDE_DIR, 'settings.json');
+const CLAUDE_MEMORY_FILE = join(CLAUDE_DIR, 'CLAUDE.md');
+
+const SLASHDEV_SECTION_START = '<!-- SLASHDEV:RULES:START -->';
+const SLASHDEV_SECTION_END = '<!-- SLASHDEV:RULES:END -->';
+
+const SLASHDEV_RULES_BLOCK = `${SLASHDEV_SECTION_START}
+# Slashdev workspace rules
+
+## Security: always use Socket Firewall for dependency installs
+
+Claude must use Socket Firewall (\`sfw\`) for **every** dependency install command.
+This applies to:
+
+- **Local development** — never run \`npm install\`, \`pnpm install\`, \`yarn add\`,
+  \`bun install\`, \`composer install\`, \`pip install\`, or any equivalent without
+  prefixing \`sfw \`. A PreToolUse hook will block bare install commands and tell
+  you to retry with \`sfw\`.
+- **Production deployment** — when generating or editing CI/CD config (GitHub Actions,
+  GitLab CI, CircleCI, Jenkins), Dockerfiles, deploy scripts (\`deploy.sh\`, \`Procfile\`),
+  or \`package.json\` scripts that install dependencies, **always** wrap the install
+  step with \`sfw\`. Examples:
+  - \`sfw npm ci\` instead of \`npm ci\`
+  - \`sfw composer install --no-dev\` instead of \`composer install --no-dev\`
+  - \`RUN npm install -g @socketsecurity/cli && sfw npm ci\` in a Dockerfile
+- If \`sfw\` is not yet installed in a CI environment, install it first:
+  \`npm install -g @socketsecurity/cli\`. Document the install step inline in the workflow.
+- Use the \`/secure-deploy\` skill to retrofit existing CI/CD configs.
+
+Reason: Socket Firewall scans every package against Socket's vulnerability/malware
+database before letting it install. This protects against supply-chain attacks
+(compromised packages, typosquats, dependency confusion).
+${SLASHDEV_SECTION_END}`;
 
 function ensureDir(dir) {
   if (!existsSync(dir)) {
@@ -87,12 +119,64 @@ export function installHooks() {
     settings.hooks.Stop = stopHooks;
   }
 
+  // Register PreToolUse hook for the install guard (Bash tool only).
+  const guardCommand = join(CLAUDE_HOOKS_DIR, 'pre-install-guard.sh');
+  if (existsSync(guardCommand)) {
+    const preToolUseHooks = settings.hooks.PreToolUse || [];
+    const guardRegistered = preToolUseHooks.some(
+      (entry) =>
+        entry.matcher === 'Bash' &&
+        Array.isArray(entry.hooks) &&
+        entry.hooks.some((h) => h.command && h.command.includes('pre-install-guard.sh'))
+    );
+
+    if (!guardRegistered) {
+      preToolUseHooks.push({
+        matcher: 'Bash',
+        hooks: [
+          {
+            type: 'command',
+            command: guardCommand,
+            statusMessage: 'Checking install safety…',
+          },
+        ],
+      });
+      settings.hooks.PreToolUse = preToolUseHooks;
+    }
+  }
+
   writeFileSync(CLAUDE_SETTINGS_FILE, JSON.stringify(settings, null, 2), 'utf-8');
 
   const hookFiles = readdirSync(hooksSource).filter((f) => f.endsWith('.sh'));
   return { installed: hookFiles.length };
 }
 
+export function writeGlobalClaudeMd() {
+  ensureDir(CLAUDE_DIR);
+
+  let existing = '';
+  if (existsSync(CLAUDE_MEMORY_FILE)) {
+    existing = readFileSync(CLAUDE_MEMORY_FILE, 'utf-8');
+  }
+
+  let next;
+  if (existing.includes(SLASHDEV_SECTION_START) && existing.includes(SLASHDEV_SECTION_END)) {
+    // Replace the existing managed section in place, preserving everything around it.
+    const before = existing.split(SLASHDEV_SECTION_START)[0];
+    const after = existing.split(SLASHDEV_SECTION_END)[1];
+    next = `${before}${SLASHDEV_RULES_BLOCK}${after}`;
+  } else if (existing.trim().length > 0) {
+    // Append after existing user content.
+    next = `${existing.trimEnd()}\n\n${SLASHDEV_RULES_BLOCK}\n`;
+  } else {
+    // Brand new file.
+    next = `${SLASHDEV_RULES_BLOCK}\n`;
+  }
+
+  writeFileSync(CLAUDE_MEMORY_FILE, next, 'utf-8');
+  return { written: true, path: CLAUDE_MEMORY_FILE };
+}
+
 export function installSkills() {
   const skillsSource = join(PACKAGE_ROOT, 'claude-skills');
   if (!existsSync(skillsSource)) {

package/src/commands/setup.js

@@ -6,7 +6,7 @@ import { fileURLToPath } from 'url';
 import { existsSync, readFileSync, mkdirSync } from 'fs';
 import { homedir } from 'os';
 import { getConfig, setConfig, getSlashdevDir } from '../core/config.js';
-import { installHooks, installSkills, installGstack } from './setup-internals.js';
+import { installHooks, installSkills, installGstack, writeGlobalClaudeMd } from './setup-internals.js';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
@@ -82,6 +82,10 @@ export async function setup() {
     spinner.text = 'Installing gstack skills...';
     const gstackResult = installGstack();
 
+    // Write global Claude rules (Socket Firewall + workspace policy)
+    spinner.text = 'Writing global Claude rules...';
+    const rulesResult = writeGlobalClaudeMd();
+
     spinner.succeed('Slashdev Claude tools installed');
 
     console.log('');
@@ -92,9 +96,11 @@ export async function setup() {
     if (gstackResult.warning) {
       console.log(`  ${chalk.yellow('!')} ${gstackResult.warning}`);
     }
+    console.log(`  ${chalk.green('✓')} Rules:     ${rulesResult.path}`);
     console.log(`  ${chalk.green('✓')} Config:    ${join(getSlashdevDir(), 'config.json')}`);
     console.log('');
-    console.log(chalk.dim('  Hooks and skills have been installed to ~/.claude/'));
+    console.log(chalk.dim('  Hooks, skills, and global rules have been installed to ~/.claude/'));
+    console.log(chalk.dim('  Socket Firewall enforcement is active for all Bash install commands.'));
     console.log(chalk.dim('  Prompt logs will be sent to the Slashdev API for quality review.\n'));
   } catch (err) {
     spinner.fail('Setup failed');

package/src/commands/update.js

@@ -27,7 +27,7 @@ export async function update() {
   try {
     // Re-import setup internals by calling setup's install functions
     // We import dynamically to avoid circular deps
-    const { installHooks, installSkills, installGstack } = await import('./setup-internals.js');
+    const { installHooks, installSkills, installGstack, writeGlobalClaudeMd } = await import('./setup-internals.js');
 
     const hookResult = installHooks();
 
@@ -37,6 +37,9 @@ export async function update() {
     spinner.text = 'Updating gstack skills...';
     const gstackResult = installGstack();
 
+    spinner.text = 'Updating global Claude rules...';
+    const rulesResult = writeGlobalClaudeMd();
+
     // Update version in config
     const pkg = JSON.parse(readFileSync(join(PACKAGE_ROOT, 'package.json'), 'utf-8'));
     setConfig('packageVersion', pkg.version);
@@ -50,6 +53,7 @@ export async function update() {
     if (gstackResult.warning) {
       console.log(`  ${chalk.yellow('!')} ${gstackResult.warning}`);
     }
+    console.log(`  ${chalk.green('✓')} Rules:   ${rulesResult.path}`);
     console.log(`  ${chalk.green('✓')} Config:  version set to ${pkg.version}`);
     console.log('');
   } catch (err) {