{
  "hooks": {
    "PreToolUse": [{
      "matcher": "Bash",
      "hooks": [{
        "type": "command",
        "command": "pwsh.exe -NoProfile -ExecutionPolicy Bypass -File \"C:\\Users\\14437\\.claude\\hooks\\block-dangerous.ps1\""
      }]
    }],
    "Stop": [{
      "matcher": "",
      "hooks": [{
        "type": "command",
        "command": "cmd /c chcp 65001 >nul && powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File \"C:\\Users\\14437\\.claude\\hooks\\toast-notify.ps1\"",
        "async": true
      }]
    }],
    "Notification": [{
      "matcher": "",
      "hooks": [{
        "type": "command",
        "command": "cmd /c chcp 65001 >nul && powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File \"C:\\Users\\14437\\.claude\\hooks\\toast-notify.ps1\"",
        "async": true
      }]
    }]
  }
}

# Claude Code PreToolUse Hook — 危險(xiǎn)命令攔截
# 致命級：exit 2 硬掐，永不放過
# 高風(fēng)險(xiǎn)：exit 2 硬掐，手動執(zhí)行不受影響
# 警告級：exit 0 打印提醒，Claude 自行判斷
$input = [Console]::In.ReadToEnd() | ConvertFrom-Json
$cmd = $input.tool_input.command
# ============================================================
# 致命級 — 不可恢復(fù)，誤操作 = 災(zāi)難，永不放過
# ============================================================
$fatal = @(
    'rm\s+-rf\s+/',              # rm -rf / 根目錄
    'rm\s+-rf\s+~',              # rm -rf ~ 用戶目錄
    'rm\s+-rf\s+\$HOME',         # rm -rf $HOME
    'DROP\s+DATABASE',           # 刪庫
    'migrate:fresh',             # Laravel 重置數(shù)據(jù)庫
    'prisma\s+migrate\s+reset',  # Prisma 重置
    'chmod\s+777\s+/',           # 根目錄全開放權(quán)限
    'curl.*\|.*bash',            # 遠(yuǎn)程腳本直執(zhí)行
    'curl.*\|.*sh',              # 同上
    'wget.*\|.*bash',            # 同上
    '>\s+/dev/sda',              # 覆寫磁盤
    'mkfs\.'                     # 格式化
)
foreach ($pattern in $fatal) {
    if ($cmd -match $pattern) {
        $stderr = @"
========================================
?? 致命操作，已永久攔截
命令：$cmd
原因：不可恢復(fù)，誤操作等于災(zāi)難
處理：請勿通過 Claude Code 執(zhí)行此命令。
      如確需執(zhí)行，請手動在終端運(yùn)行。
========================================
"@
        Write-Error $stderr
        exit 2
    }
}
# ============================================================
# 高風(fēng)險(xiǎn) — 可恢復(fù)但代價(jià)大，硬攔，手動執(zhí)行不受影響
# ============================================================
$highRisk = @(
    'git\s+push\s+.*--force',        # git push --force
    'git\s+push\s+.*-f\b',           # git push -f
    'git\s+reset\s+--hard',          # git reset --hard
    'git\s+clean\s+-f',              # git clean -f/d/fd
    'git\s+branch\s+-D',             # 強(qiáng)制刪分支
    'git\s+checkout\s+\.',           # 丟棄所有本地修改
    'git\s+restore\s+\.',            # 同上
    'npm\s+publish',                 # 發(fā)布 npm 包
    'npm\s+unpublish',               # 撤回 npm 包
    'pip\s+uninstall\s+-y',          # 批量卸載 Python 包
    'docker\s+rm\s+-f',              # 強(qiáng)制刪容器
    'docker\s+rmi\s+-f',             # 強(qiáng)制刪鏡像
    'docker\s+system\s+prune',       # 清理所有未用鏡像
    'kubectl\s+delete\s+deployment'  # 刪 K8s 部署
)
foreach ($pattern in $highRisk) {
    if ($cmd -match $pattern) {
        $stderr = @"
========================================
??  高風(fēng)險(xiǎn)操作，已攔截
命令：$cmd
原因：可恢復(fù)但代價(jià)大（丟提交/刪環(huán)境/影響線上）
處理：Claude Code 不允許自動執(zhí)行此操作。
      請確認(rèn)無誤后，復(fù)制以下命令到終端手動執(zhí)行：
      $cmd
========================================
"@
        Write-Error $stderr
        exit 2
    }
}
# ============================================================
# 警告級 — 正常操作，僅提醒
# ============================================================
$warnings = @(
    'rm\s+-rf\s+\./',           # rm -rf ./ (當(dāng)前目錄)
    'rm\s+-rf\s+\w',            # rm -rf 某個(gè)目錄
    'git\s+branch\s+-d',        # 刪已合并分支（安全，但提醒）
    'del\s+/f\s+/s',            # Windows 強(qiáng)制遞歸刪
    'rmdir\s+/s\s+/q'           # Windows rmdir
)
foreach ($pattern in $warnings) {
    if ($cmd -match $pattern) {
        Write-Warning "??  提醒：即將執(zhí)行 `$cmd`，請確認(rèn)是否期望此操作。"
        exit 0
    }
}
# 一切正常，放行
exit 0

# Claude Code 桌面通知（零依賴，純 Windows 自帶）
# 事件：Stop / Notification
# 策略：WinRT Toast 優(yōu)先，失敗時(shí)回退 NotifyIcon 托盤氣泡
# ── 從 stdin 讀取 Claude Code 傳來的 hook JSON ──
$json = ($input | Out-String) | ConvertFrom-Json -ErrorAction SilentlyContinue
$hookEvent = $json.hook_event_name
if (-not $hookEvent) { exit 0 }   # 沒讀到有效事件，靜默退出
# ── 根據(jù)事件類型選擇消息 ──
switch ($hookEvent) {
    "Stop"          { $title = "Claude Code"; $message = "任務(wù)完成，回來看看吧" }
    "Notification"  { $title = "Claude Code —— 需要你的關(guān)注"; $message = "權(quán)限確認(rèn) / 等待輸入" }
    default         { exit 0 }
}
# ═══════════════════════════════════════════════════════════════
# 主方案：WinRT Toast
# ═══════════════════════════════════════════════════════════════
$ok = $false
try {
    $template = [Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime]::GetTemplateContent(
        [Windows.UI.Notifications.ToastTemplateType, Windows.UI.Notifications, ContentType = WindowsRuntime]::ToastText02
    )
    $template.SelectSingleNode("http://text[@id='1']").InnerText = $title
    $template.SelectSingleNode("http://text[@id='2']").InnerText = $message
    $appId = "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exe"
    [Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier($appId).Show($template)
    $ok = $true
} catch { }
# ═══════════════════════════════════════════════════════════════
# 回退方案：WinRT 失敗時(shí)用托盤氣泡兜底
# ═══════════════════════════════════════════════════════════════
if (-not $ok) {
    Add-Type -AssemblyName System.Windows.Forms
    Add-Type -AssemblyName System.Drawing
    Add-Type -Name _CC -Namespace _ -MemberDefinition '
[DllImport("kernel32.dll")] public static extern IntPtr GetConsoleWindow();
[DllImport("user32.dll")] public static extern bool ShowWindow(IntPtr hWnd, int nCmdShow);
'
    $ptr = [_._CC]::GetConsoleWindow()
    [_._CC]::ShowWindow($ptr, 0)
    $balloon = New-Object System.Windows.Forms.NotifyIcon
    $balloon.Icon = if ($hookEvent -eq "Notification") {
        [System.Drawing.SystemIcons]::Warning
    } else {
        [System.Drawing.SystemIcons]::Information
    }
    $balloon.BalloonTipTitle = $title
    $balloon.BalloonTipText = $message
    $balloon.Visible = $true
    $balloon.ShowBalloonTip(5000)
    Start-Sleep -Seconds 6
    $balloon.Dispose()
}

npx cc-hook-registry search <關(guān)鍵詞>   # 61 個(gè)社區(qū) Hook 可搜索安裝