git-guardrailslisted

# Git Guardrails Sets up a PreToolUse hook that intercepts and blocks dangerous git commands before Claude executes them. ## What You Get - PreToolUse hook blocking destructive git operations - Project-scoped or global installation - Customizable blocked command patterns - Verification test command ## What Gets Blocked - `git push` (all variants including `--force`) - `git reset --hard` - `git clean -f` / `git clean -fd` - `git branch -D` - `git checkout .` / `git restore .` When blocked, Claude sees a message telling it that it does not have authority to run these commands. ## WRONG: no guardrails, Claude runs destructive commands silently ```bash # Claude decides to "clean up" and runs: git reset --hard HEAD~3 # 3 commits of work gone git clean -fd # untracked files deleted git push --force # rewrites shared history ``` ## CORRECT: hook blocks before execution ``` $ echo '{"tool_input":{"command":"git push --force"}}' | block-dangerous-git.sh BLOCKED: git push is not allowed. Ask the user to run it manually. ``` ## Setup Steps 1. **Ask scope** -- project (`.claude/settings.json`) or global (`~/.claude/settings.json`)? 2. **Copy hook script** -- bundled at [scripts/block-dangerous-git.sh](scripts/block-dangerous-git.sh). Copy to `.claude/hooks/` (project) or `~/.claude/hooks/` (global). Make executable. 3. **Add to settings** -- see [settings-config.md](settings-config.md) for the JSON 4. **Customize** -- ask if user wants to add/remove pat