Skip to content

fix(hooks): wire core-guards beforeShellExecution guard - #9

Merged
brunoazoulay merged 2 commits into
mainfrom
fix/core-guards-shell-hook
Sep 28, 2026
Merged

brunoazoulay merged 2 commits into
mainfrom
fix/core-guards-shell-hook

Conversation

@brunoazoulay

Copy link
Copy Markdown
Collaborator

Summary

  • core-guards wires beforeShellExecution -> ./scripts/hook.sh, so shell commands pass the git/install/security guards before execution.
  • Loader proof: git checkout -b -> deny + CONFIRM, git status -> allow, git push --force -> deny G4 destructive without CONFIRM.
  • .gitignore: .cursor/apex/ and .cartographer/ added to the agent scratch state section (local agent state, never distributed).
  • Release bump: core-guards 1.1.37 -> 1.1.38 (mirrored in .cursor-plugin/marketplace.json), suite 0.1.4 -> 0.1.5, CHANGELOG + README badge.

Changes

  • .cursor-plugin/plugins/core-guards/hooks/hooks.json
  • .gitignore
  • .cursor-plugin/plugins/core-guards/.cursor-plugin/plugin.json, .cursor-plugin/marketplace.json, CHANGELOG.md, README.md

Test plan

  • hooks.json parses (node -e JSON.parse)
  • Loader verification of the three shell cases above
  • marketplace.json core-guards version == plugin.json version (1.1.38)
  • CI green

Breaking changes

None

core-guards now registers `beforeShellExecution` -> `./scripts/hook.sh`,
so shell commands go through the git/install/security guards before
execution (loader-verified: `git checkout -b` -> deny + CONFIRM,
`git status` -> allow, `git push --force` -> deny G4 destructive).

.gitignore: add `.cursor/apex/` and `.cartographer/` to the agent
scratch state section (local agent state, never distributed).
@brunoazoulay
brunoazoulay merged commit 3cfbd8a into main Sep 28, 2026
3 checks passed
@brunoazoulay
brunoazoulay deleted the fix/core-guards-shell-hook branch September 28, 2026 12:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant