mirror of
https://github.com/affaan-m/everything-claude-code.git
synced 2026-06-10 10:13:49 +08:00
d8a84b5f7b
Cursor hooks still called `npx block-no-verify@1.1.2`, the broken external package whose matcher over-matches: it blocks legitimate `git commit` whenever `--no-verify` (or `no-verify`) appears anywhere in the command string, including inside the commit message body. The Claude Code surface already routes through the in-repo `scripts/hooks/block-no-verify.js`, which performs flag-position-aware tokenisation and passes 25 regression tests covering every false-positive case from #2107. Add a thin Cursor wrapper (`before-shell-execution-block-no-verify.js`) that reads Cursor stdin, transforms to the Claude Code `tool_input.command` shape, delegates to the local hook's exported `run()`, and forwards exit code and stderr. Update `.cursor/hooks.json` to call the wrapper instead of the npx package. New 14-case test file pins the false-positive cases from the issue plus the still-blocked real bypass attempts. Fixes #2107
116 lines
3.4 KiB
JSON
116 lines
3.4 KiB
JSON
{
|
|
"version": 1,
|
|
"hooks": {
|
|
"sessionStart": [
|
|
{
|
|
"command": "node .cursor/hooks/session-start.js",
|
|
"event": "sessionStart",
|
|
"description": "Load previous context and detect environment"
|
|
}
|
|
],
|
|
"sessionEnd": [
|
|
{
|
|
"command": "node .cursor/hooks/session-end.js",
|
|
"event": "sessionEnd",
|
|
"description": "Persist session state and evaluate patterns"
|
|
}
|
|
],
|
|
"beforeShellExecution": [
|
|
{
|
|
"command": "node .cursor/hooks/before-shell-execution-block-no-verify.js",
|
|
"event": "beforeShellExecution",
|
|
"description": "Block git hook-bypass flag to protect pre-commit, commit-msg, and pre-push hooks from being skipped"
|
|
},
|
|
{
|
|
"command": "node .cursor/hooks/before-shell-execution.js",
|
|
"event": "beforeShellExecution",
|
|
"description": "Tmux dev server blocker, tmux reminder, git push review"
|
|
}
|
|
],
|
|
"afterShellExecution": [
|
|
{
|
|
"command": "node .cursor/hooks/after-shell-execution.js",
|
|
"event": "afterShellExecution",
|
|
"description": "PR URL logging, build analysis"
|
|
}
|
|
],
|
|
"afterFileEdit": [
|
|
{
|
|
"command": "node .cursor/hooks/after-file-edit.js",
|
|
"event": "afterFileEdit",
|
|
"description": "Auto-format, TypeScript check, console.log warning, and frontend design-quality reminder"
|
|
}
|
|
],
|
|
"beforeMCPExecution": [
|
|
{
|
|
"command": "node .cursor/hooks/before-mcp-execution.js",
|
|
"event": "beforeMCPExecution",
|
|
"description": "MCP audit logging and untrusted server warning"
|
|
}
|
|
],
|
|
"afterMCPExecution": [
|
|
{
|
|
"command": "node .cursor/hooks/after-mcp-execution.js",
|
|
"event": "afterMCPExecution",
|
|
"description": "MCP result logging"
|
|
}
|
|
],
|
|
"beforeReadFile": [
|
|
{
|
|
"command": "node .cursor/hooks/before-read-file.js",
|
|
"event": "beforeReadFile",
|
|
"description": "Warn when reading sensitive files (.env, .key, .pem)"
|
|
}
|
|
],
|
|
"beforeSubmitPrompt": [
|
|
{
|
|
"command": "node .cursor/hooks/before-submit-prompt.js",
|
|
"event": "beforeSubmitPrompt",
|
|
"description": "Detect secrets in prompts (sk-, ghp_, AKIA patterns)"
|
|
}
|
|
],
|
|
"subagentStart": [
|
|
{
|
|
"command": "node .cursor/hooks/subagent-start.js",
|
|
"event": "subagentStart",
|
|
"description": "Log agent spawning for observability"
|
|
}
|
|
],
|
|
"subagentStop": [
|
|
{
|
|
"command": "node .cursor/hooks/subagent-stop.js",
|
|
"event": "subagentStop",
|
|
"description": "Log agent completion"
|
|
}
|
|
],
|
|
"beforeTabFileRead": [
|
|
{
|
|
"command": "node .cursor/hooks/before-tab-file-read.js",
|
|
"event": "beforeTabFileRead",
|
|
"description": "Block Tab from reading secrets (.env, .key, .pem, credentials)"
|
|
}
|
|
],
|
|
"afterTabFileEdit": [
|
|
{
|
|
"command": "node .cursor/hooks/after-tab-file-edit.js",
|
|
"event": "afterTabFileEdit",
|
|
"description": "Auto-format Tab edits"
|
|
}
|
|
],
|
|
"preCompact": [
|
|
{
|
|
"command": "node .cursor/hooks/pre-compact.js",
|
|
"event": "preCompact",
|
|
"description": "Save state before context compaction"
|
|
}
|
|
],
|
|
"stop": [
|
|
{
|
|
"command": "node .cursor/hooks/stop.js",
|
|
"event": "stop",
|
|
"description": "Console.log audit on all modified files"
|
|
}
|
|
]
|
|
}
|
|
}
|