136 lines
4.6 KiB
Markdown
136 lines
4.6 KiB
Markdown
---
|
||
name: guardian
|
||
version: 1.0.0
|
||
description: |
|
||
统一安全守护技能。整合 freeze (目录编辑限制)、careful (破坏性命令警告)、
|
||
unfreeze (解除限制) 和 guard (全量安全模式) 四项能力为单一入口。
|
||
支持子命令: /guardian freeze [dir], /guardian unfreeze, /guardian careful,
|
||
/guardian status。
|
||
触发词: "guardian", "安全守护", "guard mode", "freeze", "careful",
|
||
"restrict edits", "safety mode", "lock down"。
|
||
maturity: stable
|
||
allowed-tools:
|
||
- Bash
|
||
- Read
|
||
- AskUserQuestion
|
||
hooks:
|
||
PreToolUse:
|
||
- matcher: "Bash"
|
||
hooks:
|
||
- type: command
|
||
command: "bash ${CLAUDE_SKILL_DIR}/../careful/bin/check-careful.sh"
|
||
statusMessage: "Checking for destructive commands..."
|
||
- matcher: "Edit"
|
||
hooks:
|
||
- type: command
|
||
command: "bash ${CLAUDE_SKILL_DIR}/../freeze/bin/check-freeze.sh"
|
||
statusMessage: "Checking freeze boundary..."
|
||
- matcher: "Write"
|
||
hooks:
|
||
- type: command
|
||
command: "bash ${CLAUDE_SKILL_DIR}/../freeze/bin/check-freeze.sh"
|
||
statusMessage: "Checking freeze boundary..."
|
||
---
|
||
|
||
# /guardian — 统一安全守护
|
||
|
||
整合编辑限制、破坏性命令警告、解除限制三大能力为单一入口。
|
||
|
||
## 子命令解析
|
||
|
||
根据用户输入的参数或关键词匹配子命令：
|
||
|
||
| 子命令 | 触发词 | 功能 |
|
||
|--------|--------|------|
|
||
| `freeze [dir]` | "freeze", "冻结", "限制编辑", "restrict" | 限制编辑到指定目录 |
|
||
| `unfreeze` | "unfreeze", "解冻", "解除限制", "unlock" | 解除编辑限制 |
|
||
| `careful` | "careful", "小心模式", "safety", "谨慎" | 启用破坏性命令警告 |
|
||
| `status` | "status", "状态", 无参数 | 显示当前守护状态 |
|
||
|
||
**无参数时**: 显示当前状态，然后询问用户要启用哪个模式。
|
||
|
||
## freeze — 限制编辑范围
|
||
|
||
询问用户要限制编辑到哪个目录：
|
||
|
||
- 使用 AskUserQuestion: "哪个目录应该限制编辑？此路径外的文件将被阻止编辑。"
|
||
- 文本输入模式 — 用户输入路径
|
||
|
||
用户提供路径后：
|
||
|
||
1. 解析为绝对路径：
|
||
```bash
|
||
FREEZE_DIR=$(cd "<user-provided-path>" 2>/dev/null && pwd)
|
||
echo "$FREEZE_DIR"
|
||
```
|
||
|
||
2. 确保尾部斜杠并保存到状态文件：
|
||
```bash
|
||
FREEZE_DIR="${FREEZE_DIR%/}/"
|
||
STATE_DIR="${CLAUDE_PLUGIN_DATA:-$HOME/.gstack}"
|
||
mkdir -p "$STATE_DIR"
|
||
echo "$FREEZE_DIR" > "$STATE_DIR/freeze-dir.txt"
|
||
echo "Freeze boundary set: $FREEZE_DIR"
|
||
```
|
||
|
||
告知用户: "**Guardian freeze 已激活** — 编辑限制为 `<path>/`。使用 `/guardian unfreeze` 解除。"
|
||
|
||
## unfreeze — 解除编辑限制
|
||
|
||
```bash
|
||
STATE_DIR="${CLAUDE_PLUGIN_DATA:-$HOME/.gstack}"
|
||
if [ -f "$STATE_DIR/freeze-dir.txt" ]; then
|
||
PREV=$(cat "$STATE_DIR/freeze-dir.txt")
|
||
rm -f "$STATE_DIR/freeze-dir.txt"
|
||
echo "Freeze boundary cleared (was: $PREV). Edits are now allowed everywhere."
|
||
else
|
||
echo "No freeze boundary was set."
|
||
fi
|
||
```
|
||
|
||
告知用户解除结果。
|
||
|
||
## careful — 破坏性命令警告
|
||
|
||
告知用户: "**Guardian careful 已激活** — 以下命令执行前会发出警告："
|
||
|
||
| 模式 | 示例 | 风险 |
|
||
|------|------|------|
|
||
| `rm -rf` | `rm -rf /var/data` | 递归删除 |
|
||
| `DROP TABLE/DATABASE` | `DROP TABLE users;` | 数据丢失 |
|
||
| `TRUNCATE` | `TRUNCATE orders;` | 数据丢失 |
|
||
| `git push --force` | `git push -f origin main` | 历史重写 |
|
||
| `git reset --hard` | `git reset --hard HEAD~3` | 未提交工作丢失 |
|
||
| `kubectl delete` | `kubectl delete pod` | 生产影响 |
|
||
| `docker rm -f` / `docker system prune` | `docker system prune -a` | 容器/镜像丢失 |
|
||
|
||
安全例外 (不警告): `rm -rf node_modules/.next/dist/__pycache__/.cache/build/.turbo/coverage`
|
||
|
||
## status — 显示当前状态
|
||
|
||
```bash
|
||
STATE_DIR="${CLAUDE_PLUGIN_DATA:-$HOME/.gstack}"
|
||
echo "=== Guardian Status ==="
|
||
if [ -f "$STATE_DIR/freeze-dir.txt" ]; then
|
||
echo "Freeze: ACTIVE — $(cat "$STATE_DIR/freeze-dir.txt")"
|
||
else
|
||
echo "Freeze: INACTIVE"
|
||
fi
|
||
echo "Careful: ACTIVE (session-scoped, always on when /guardian is loaded)"
|
||
echo "========================"
|
||
```
|
||
|
||
## 工作原理
|
||
|
||
- **freeze** 通过状态文件 (`freeze-dir.txt`) 持久化，hook 在每次 Edit/Write 时检查
|
||
- **careful** 通过 session-scoped hook 在每次 Bash 命令时检查
|
||
- 两者独立运作，互不依赖
|
||
- hook 脚本复用 `careful/bin/check-careful.sh` 和 `freeze/bin/check-freeze.sh`
|
||
|
||
## 注意事项
|
||
|
||
- freeze 仅限制 Edit/Write 工具 — Read、Bash、Glob、Grep 不受影响
|
||
- careful 防止意外操作，不是安全边界 — 用户可以 override 每个警告
|
||
- 会话结束时所有守护自动解除
|
||
- 依赖 `careful/` 和 `freeze/` 目录下的 hook 脚本
|