Hooks

[どのタイミングで] [どの操作を] インターセプト/処理したいか？
       ↓                    ↓
   イベントを選ぶ        matcher を書く

exit 0   →  許可（実行を続行）
exit 2   →  ブロック（操作を停止、stderr が会話に注入される）
その他   →  エラー（実行を続行、stderr がユーザーに表示される）

#!/bin/bash

# 1. stdin から JSON 入力を読み取る
input=$(cat)

# 2. jq で必要なフィールドを抽出
tool_name=$(echo "$input" | jq -r '.tool_name')
tool_input=$(echo "$input" | jq -r '.tool_input')

# 3. ロジックを記述
if [ "$tool_name" = "Bash" ]; then
  command=$(echo "$input" | jq -r '.tool_input.command')

  if echo "$command" | grep -qE 'rm\s+-rf|DROP\s+TABLE'; then
    echo "操作が拒否されました: $command" >&2
    exit 2
  fi
fi

# 4. 許可
exit 0

{
  "hooks": {
    "イベント名": [
      {
        "matcher": "マッチ条件（任意）",
        "hooks": [
          {
            "type": "command",
            "command": "スクリプトパス"
          }
        ]
      }
    ]
  }
}

echo '{"tool_name":"Bash","tool_input":{"command":"rm -rf /"},"hook_event_name":"PreToolUse"}' \
  | ~/.qoderwork/hooks/block-rm.sh
echo "Exit code: $?"

echo '{"tool_name":"Bash","tool_input":{"command":"rm -rf /"}}' \
  | ~/.qoderwork/hooks/block-rm.sh 2>&1

{
  "hooks": {
    "イベント名": [
      {
        "matcher": "マッチ条件",
        "hooks": [
          {
            "type": "command",
            "command": "実行するコマンド"
          }
        ]
      }
    ]
  }
}

#!/bin/bash
input=$(cat)
tool_name=$(echo "$input" | jq -r '.tool_name')

{
  "session_id": "abc-123",
  "cwd": "/Users/you",
  "hook_event_name": "UserPromptSubmit",
  "prompt": "ダウンロードフォルダをファイルタイプ別に整理して"
}

{
  "session_id": "abc-123",
  "cwd": "/Users/you",
  "hook_event_name": "PreToolUse",
  "tool_name": "Bash",
  "tool_input": { "command": "rm -rf /tmp/build" }
}

{
  "session_id": "abc-123",
  "cwd": "/Users/you",
  "hook_event_name": "PostToolUse",
  "tool_name": "Write",
  "tool_input": { "file_path": "/path/to/file.ts", "content": "..." },
  "tool_response": "File written successfully"
}

{
  "session_id": "abc-123",
  "cwd": "/Users/you",
  "hook_event_name": "PostToolUseFailure",
  "tool_name": "Bash",
  "tool_input": { "command": "npm test" },
  "error": "Command exited with non-zero status code 1"
}

{
  "session_id": "abc-123",
  "cwd": "/Users/you",
  "hook_event_name": "Stop",
  "stop_hook_active": false
}

{
  "decision": "block",
  "reason": "Tests failing. Fix them before completing."
}

{
  "source": "startup",
  "agent_type": "coder",
  "model": ""
}

{
  "reason": "prompt_input_exit"
}

{
  "agent_id": "83f488ef",
  "agent_type": "general-purpose"
}

{
  "agent_id": "83f488ef",
  "agent_type": "general-purpose",
  "agent_transcript_path": "",
  "stop_hook_active": false
}

{
  "trigger": "manual",
  "custom_instructions": "すべてのツール呼び出し結果を保持"
}

{
  "message": "Agent is requesting permission to run: rm -rf node_modules",
  "title": "Permission Required",
  "notification_type": "permission"
}

{
  "tool_name": "Bash",
  "tool_input": {"command": "rm -rf node_modules"}
}

#!/bin/bash
input=$(cat)
command=$(echo "$input" | jq -r '.tool_input.command')

if echo "$command" | grep -qE 'rm\s+-rf|DROP\s+TABLE|mkfs|dd\s+if='; then
  echo "危険なコマンドをブロックしました: $command" >&2
  exit 2
fi

exit 0

#!/bin/bash
input=$(cat)
file_path=$(echo "$input" | jq -r '.tool_input.file_path')

# Only lint JS/TS files
case "$file_path" in
  *.js|*.ts|*.jsx|*.tsx)
    npx eslint "$file_path" --fix 2>/dev/null
    ;;
esac

exit 0

#!/bin/bash
input=$(cat)
message=$(echo "$input" | jq -r '.message // "タスク完了"' | head -c 100)
title=$(echo "$input" | jq -r '.title // "QoderWork"')

osascript -e "display notification \"$message\" with title \"$title\""

exit 0

#!/bin/bash
input=$(cat)
prompt=$(echo "$input" | jq -r '.prompt')

if echo "$prompt" | grep -qiE '(password|secret|api_key|token)\s*[:=]\s*\S+'; then
  echo "Prompt に機密情報が含まれている可能性があります。確認して再送信してください。" >&2
  exit 2
fi

exit 0

#!/bin/bash
input=$(cat)
tool_name=$(echo "$input" | jq -r '.tool_name')
error=$(echo "$input" | jq -r '.error')
timestamp=$(date '+%Y-%m-%d %H:%M:%S')

echo "[$timestamp] $tool_name 失敗: $error" >> ~/.qoderwork/hooks/failure.log

exit 0

#!/bin/bash
# 未コミットの git 変更をチェック
if [ -n "$(git status --porcelain 2>/dev/null)" ]; then
  echo "未コミットの変更を検出しました。git commit を完了してください" >&2
  exit 2
fi

exit 0

#!/bin/bash
branch=$(git rev-parse --abbrev-ref HEAD 2>/dev/null)
if [ -n "$branch" ]; then
  echo "現在の git ブランチ: $branch"
fi
exit 0

#!/bin/bash
input=$(cat)
prompt=$(echo "$input" | jq -r '.prompt')

if echo "$prompt" | grep -qi 'password\|secret\|credential'; then
  echo "Prompt に機密情報が含まれているため、ブロックされました" >&2
  exit 2
fi

exit 0

{
  "hooks": {
    "UserPromptSubmit": [
      {
        "hooks": [
          {
            "type": "command",
            "command": "~/.qoderwork/hooks/check-prompt.sh"
          }
        ]
      }
    ],
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "~/.qoderwork/hooks/block-dangerous.sh"
          }
        ]
      }
    ],
    "PostToolUseFailure": [
      {
        "hooks": [
          {
            "type": "command",
            "command": "~/.qoderwork/hooks/log-failure.sh"
          }
        ]
      }
    ],
    "Stop": [
      {
        "hooks": [
          {
            "type": "command",
            "command": "~/.qoderwork/hooks/notify-done.sh"
          }
        ]
      }
    ]
  }
}