oklahomer / go-risa / 23402412516

71%

Build Type

push

github

Committed by oklahomer

Commit Message

feat: Add file-write guard hook to restrict writes to cwd and protect control files

Add a PreToolUse hook (pre-tool-use-file-write.sh) that restricts Edit,
Write, and NotebookEdit tools to only write within the working directory.
The hook derives the allowed directory from the "cwd" field in Claude
Code's hook input JSON, eliminating the need for a RISA_TMPDIR environment
variable. Writes to .claude/ are blocked to prevent self-modification
attacks that could disable security guards.

Also replace fmt.Sprintf-based settings.local.json generation with typed
structs to prevent JSON escaping bugs.

Run Details

17 of 24 new or added lines in 1 file covered. (70.83%)

14 existing lines in 1 file now uncovered.

159 of 225 relevant lines covered (70.67%)

2.97 hits per line