Function run

hooks_src/protect-files.js:92–214

(input)

}

function run(input) {
  let event;
  try {
    event = JSON.parse(input);
  } catch {
    health.logBlock('protect-files', 'parse-fail', 'Could not parse stdin JSON');
    // Fail closed on parse failure — cannot determine if action is safe
    blockOutput('protect-files', 'error', '[protect-files] Could not parse hook input — blocking as safety measure.');
    process.exit(2);
  }

  const toolName = event.tool_name || '';
  if (toolName !== 'Edit' && toolName !== 'Write' && toolName !== 'Read') {
    process.exit(0);
  }

  const filePath = event.tool_input?.file_path || event.tool_input?.path || '';
  if (!filePath) {
    process.exit(0);
  }

  // Security: validate path for traversal and shell injection
  const validation = health.validatePath(filePath);
  if (!validation.safe) {
    health.logBlock('protect-files', 'blocked', `${toolName} ${filePath} (${validation.violation})`);
    blockOutput('protect-files', 'blocked',
      `[protect-files] Blocked: ${validation.violation}`,
      { file: filePath, tool: toolName, violation: validation.violation }
    );
    process.exit(2);
  }

  // Security: block writes to absolute paths outside project root. Reads may
  // inspect neighboring docs, vaults, and reference repos; .env reads are still
  // blocked by basename below.
  const normalizedPath = path.normalize(health.canonicalizePath(filePath));
  const normalizedRoot = path.normalize(health.canonicalizePath(PROJECT_ROOT));
  const rootRelativePath = path.relative(normalizedRoot, normalizedPath);
  const insideProject = rootRelativePath === '' || (
    rootRelativePath !== '..'
    && !rootRelativePath.startsWith(`..${path.sep}`)
    && !path.isAbsolute(rootRelativePath)
  );

  // Claude Code native auto-memory lives outside the project root by design.
  // Allow those writes before the outside-project-root block below.
  if (toolName !== 'Read' && !insideProject && isNativeMemoryPath(normalizedPath)) {
    process.exit(0);
  }

  if (toolName !== 'Read' && !insideProject) {
    health.logBlock('protect-files', 'blocked', `${toolName} ${filePath} (outside project root)`);
    blockOutput('protect-files', 'blocked',
      `[protect-files] Blocked: ${filePath} is outside project root (${PROJECT_ROOT})`,
      { file: filePath, tool: toolName, projectRoot: PROJECT_ROOT }
    );
    process.exit(2);
  }