Hooks 与 Plan 模式

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "echo \"$CLAUDE_TOOL_INPUT\" | grep -qE 'rm -rf|DROP TABLE' && exit 2 || exit 0"
          }
        ]
      }
    ],
    "PostToolUse": [
      {
        "matcher": "Write|Edit|MultiEdit",
        "hooks": [
          {
            "type": "command",
            "command": "npx prettier --write \"$CLAUDE_TOOL_INPUT_FILE_PATH\""
          }
        ]
      }
    ]
  }
}

{
  "hookSpecificOutput": {
    "hookEventName": "PreToolUse",
    "permissionDecision": "deny",
    "permissionDecisionReason": "此命令被项目策略阻止",
    "updatedInput": {
      "command": "modified-command"
    },
    "additionalContext": "额外上下文信息"
  }
}

{
  "type": "command",
  "command": "node backup-script.js",
  "async": true,
  "timeout": 30
}

{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Write|Edit|MultiEdit",
        "hooks": [
          {
            "type": "command",
            "command": "bash -c 'FILE=$(jq -r \".tool_input.file_path\" <<< \"$(cat)\"); if [[ \"$FILE\" == *.ts || \"$FILE\" == *.tsx || \"$FILE\" == *.js || \"$FILE\" == *.jsx ]]; then npx eslint --fix \"$FILE\" 2>/dev/null; npx prettier --write \"$FILE\" 2>/dev/null; fi; exit 0'"
          }
        ]
      }
    ]
  }
}

{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Write|Edit",
        "hooks": [
          {
            "type": "command",
            "command": "bash -c 'FILE=$(jq -r \".tool_input.file_path\" <<< \"$(cat)\"); if [[ \"$FILE\" == *.ts || \"$FILE\" == *.tsx ]]; then npx tsc --noEmit 2>&1 | head -20; fi; exit 0'",
            "timeout": 30
          }
        ]
      }
    ]
  }
}

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "bash -c 'CMD=$(jq -r \".tool_input.command\" <<< \"$(cat)\"); for p in \"rm -rf /\" \"rm -rf ~\" \"drop table\" \"DROP TABLE\" \"truncate\" \"TRUNCATE\" \"--force\" \"push.*--force\"; do if echo \"$CMD\" | grep -qiE \"$p\"; then echo \"Blocked: pattern \\\"$p\\\" detected\" >&2; exit 2; fi; done; exit 0'"
          }
        ]
      }
    ]
  }
}

#!/bin/bash
# .claude/hooks/protect-files.sh
INPUT=$(cat)
FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty')
PROTECTED=(".env" ".env.local" "secrets/" ".git/" "package-lock.json" "pnpm-lock.yaml")
for pattern in "${PROTECTED[@]}"; do
  if [[ "$FILE" == *"$pattern"* ]]; then
    echo "Protected file: $pattern" >&2
    exit 2
  fi
done
exit 0

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Write|Edit",
        "hooks": [
          {
            "type": "command",
            "command": "\"$CLAUDE_PROJECT_DIR\"/.claude/hooks/protect-files.sh"
          }
        ]
      }
    ]
  }
}

{
  "hooks": {
    "SessionStart": [
      {
        "matcher": "startup|resume",
        "hooks": [
          {
            "type": "command",
            "command": "bash -c 'BRANCH=$(git -C \"$CLAUDE_PROJECT_DIR\" branch --show-current 2>/dev/null); echo \"{\\\"additionalContext\\\": \\\"Current branch: $BRANCH. Recent commits: $(git -C \"$CLAUDE_PROJECT_DIR\" log --oneline -3 2>/dev/null)\\\"}\"'"
          }
        ]
      }
    ]
  }
}

#!/bin/bash
# .claude/hooks/verify-tests.sh
INPUT=$(cat)
# 防止无限循环
if [ "$(echo "$INPUT" | jq -r '.stop_hook_active')" = "true" ]; then
  exit 0
fi
# 运行测试
if ! npm test --silent 2>/dev/null; then
  echo "Tests are failing. Fix them before finishing." >&2
  exit 2
fi
exit 0

{
  "hooks": {
    "Stop": [
      {
        "hooks": [
          {
            "type": "command",
            "command": "\"$CLAUDE_PROJECT_DIR\"/.claude/hooks/verify-tests.sh",
            "timeout": 60
          }
        ]
      }
    ]
  }
}

{
  "hooks": {
    "Stop": [
      {
        "hooks": [
          {
            "type": "prompt",
            "prompt": "Review the conversation. Did the user's request get fully completed? Check: all files created, tests passing, no TODO comments left. Respond with {\"ok\": true} if done, or {\"ok\": false, \"reason\": \"what remains\"} if not.",
            "timeout": 30
          }
        ]
      }
    ]
  }
}

{
  "hooks": {
    "Stop": [
      {
        "hooks": [
          {
            "type": "agent",
            "prompt": "Verify the work is complete: 1) Run the test suite. 2) Check for any TypeScript errors. 3) Verify no console.log statements were left in production code. Report your findings.",
            "timeout": 120
          }
        ]
      }
    ]
  }
}

claude --permission-mode plan

{
  "permissions": {
    "defaultMode": "plan"
  }
}

Tier 1: 内置安全工具白名单 + 用户设置
  -> 只读工具（Read, Grep, Glob 等）直接允许
  -> 进入 auto 模式时，丢弃已知的任意代码执行权限规则

Tier 2: 项目内文件操作
  -> 工作目录内的文件写入/编辑直接允许（无需分类器调用）
  -> 可通过版本控制审查

Tier 3: 转录分类器
  -> Shell 命令、Web 请求、外部工具集成、子智能体、项目外文件操作
  -> Stage 1 快速过滤 -> Stage 2 推理审查

{
  "autoMode": {
    "environment": [
      "$defaults",
      "Organization: ACME Corp. Primary use: software development",
      "Source control: github.example.com/acme-corp",
      "Cloud providers: AWS, GCP",
      "Trusted cloud buckets: s3://acme-builds, gs://acme-datasets",
      "Trusted internal domains: *.internal.example.com, api.example.com",
      "Key internal services: Jenkins at ci.example.com, Artifactory at artifacts.example.com"
    ],
    "allow": [
      "$defaults",
      "Deploying to the staging namespace is allowed: staging is isolated from production"
    ],
    "soft_deny": [
      "$defaults",
      "Never run database migrations outside the migrations CLI",
      "Never modify files under infra/terraform/prod/"
    ]
  }
}

claude auto-mode defaults    # 查看内置规则
claude auto-mode config      # 查看实际生效配置
claude auto-mode critique    # AI 审查自定义规则

开始新功能 -> 创建 Git 分支 -> 请求 Claude 实现
  -> 审查结果
    -> OK -> Git commit -> 继续改进或创建 PR
    -> NG -> Checkpoint 恢复 -> 重新指导 Claude

          ┌─────────────┐
          │  Checkpoint │  <- 最后防线：时间旅行恢复
          │  (自动备份)  │
          ├─────────────┤
          │   Hooks     │  <- 自动化守卫：确定性规则执行
          │ (Pre/Post)  │
          ├─────────────┤
          │  Plan Mode  │  <- 思考与执行分离
          │  (只读规划)  │
          ├─────────────┤
          │  Auto Mode  │  <- ML 分类器：智能审批
          │  (分类器)   │
          ├─────────────┤
          │ Permission  │  <- 基础层：手动审批
          │   Modes     │
          └─────────────┘

{
  "permissions": {
    "defaultMode": "acceptEdits"
  },
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Write|Edit|MultiEdit",
        "hooks": [
          {
            "type": "command",
            "command": "npx prettier --write \"$CLAUDE_TOOL_INPUT_FILE_PATH\""
          }
        ]
      }
    ],
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "bash -c 'CMD=$(jq -r \".tool_input.command\" <<< \"$(cat)\"); if echo \"$CMD\" | grep -qE \"rm -rf /|rm -rf ~|DROP TABLE|force push\"; then echo \"Blocked by policy\" >&2; exit 2; fi; exit 0'"
          }
        ]
      }
    ]
  }
}

{
  "permissions": {
    "defaultMode": "default",
    "deny": [
      "Bash(*deploy*)",
      "Bash(*migration*)",
      "Bash(git push *)"
    ]
  },
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "prompt",
            "prompt": "Evaluate whether this Bash command could affect the production environment. Consider: database operations, deployments, infrastructure changes. Respond with {\"safe\": true} or {\"safe\": false, \"reason\": \"...\"}.",
            "timeout": 10
          }
        ]
      }
    ],
    "Stop": [
      {
        "hooks": [
          {
            "type": "agent",
            "prompt": "Before completing, verify: 1) No production credentials were logged. 2) No database connections were made to prod. 3) All changes are reversible. Report findings.",
            "timeout": 60
          }
        ]
      }
    ]
  }
}

{
  "permissions": {
    "defaultMode": "dontAsk",
    "allow": [
      "Bash(npm test)",
      "Bash(npm run build)",
      "Bash(npm run lint)",
      "Read(*)",
      "Edit(*)",
      "Write(*)"
    ],
    "deny": [
      "Bash(git push *)",
      "Bash(*deploy*)",
      "WebFetch(*)"
    ]
  }
}

{
  "permissions": {
    "disableBypassPermissionsMode": "disable",
    "disableAutoMode": "disable",
    "deny": [
      "Bash(*prod*)",
      "Bash(*deploy*)",
      "Read(//etc/**)",
      "Read(~/.ssh/**)"
    ]
  },
  "allowManagedPermissionRulesOnly": true,
  "allowManagedHooksOnly": true
}

{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Write|Edit",
        "hooks": [
          {
            "type": "command",
            "command": "npx prettier --write \"$CLAUDE_TOOL_INPUT_FILE_PATH\""
          }
        ]
      }
    ]
  }
}

{
  "permissions": {
    "allow": [
      "Bash(npm run dev)",
      "Bash(npm run test:watch)"
    ]
  }
}