feat: add Claude Code PostToolUse hooks (dart formatter + newline enforcer) (#995)

Author: SERDUN

.claude/hooks/dart_formatter.sh

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+# PostToolUse hook: auto-format .dart files after Write/Edit/MultiEdit.
+# Generated files (*.g.dart, *.freezed.dart, *.gr.dart) are skipped.
+INPUT=$(cat)
+FILE=$(jq -r '(.tool_input.file_path // .tool_input.path // "")' <<< "$INPUT")
+
+[[ -z "$FILE" || ! -f "$FILE" ]] && exit 0
+[[ "$FILE" != *.dart ]] && exit 0
+[[ "$FILE" == *.g.dart || "$FILE" == *.freezed.dart || "$FILE" == *.gr.dart ]] && exit 0
+
+ROOT=$(git rev-parse --show-toplevel 2>/dev/null) && cd "$ROOT"
+dart format "$FILE"

.claude/hooks/env_file_guard.py

@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+# PreToolUse hook: block any access to .env files.
+INPUT=$(cat)
+TOOL=$(jq -r '.tool // ""' <<< "$INPUT")
+COMMAND=$(jq -r '.tool_input.command // ""' <<< "$INPUT")
+FILE=$(jq -r '(.tool_input.file_path // .tool_input.path // "")' <<< "$INPUT")
+
+if [[ "$TOOL" == "Bash" || "$TOOL" == "Run" ]]; then
+  if echo "$COMMAND" | grep -qE '\b(cat|less|more|head|tail|bat|view|nano|vi|vim|code|open|type|strings|xxd|hexdump|od|base64)\b' \
+  && echo "$COMMAND" | grep -qE '\.env($|\.)'; then
+    echo "🚫 BLOCKED: reads a .env file — secrets must not be read by the agent." >&2
+    exit 2
+  fi
+  if echo "$COMMAND" | grep -qE '\b(cp|mv|scp|rsync|tar|zip)\b' \
+  && echo "$COMMAND" | grep -qE '\.env($|\.)'; then
+    echo "🚫 BLOCKED: copies/moves a .env file — secrets must not be transferred." >&2
+    exit 2
+  fi
+  if echo "$COMMAND" | grep -qE '\b(find|grep|rg|ag|fd)\b' \
+  && echo "$COMMAND" | grep -qE '\.env($|\.)'; then
+    echo "🚫 BLOCKED: searches for .env files — secret files must not be scanned." >&2
+    exit 2
+  fi
+fi
+
+if [[ "$TOOL" =~ ^(Read|View|Edit|Write|MultiEdit)$ ]]; then
+  if echo "$FILE" | grep -qE '\.env($|\.)'; then
+    echo "🚫 BLOCKED: Cannot access '$FILE' — .env files contain secrets." >&2
+    exit 2
+  fi
+fi
+
+exit 0

.claude/hooks/env_file_guard.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# PostToolUse hook: runs markdownlint-cli2 --fix on .md files after Write/Edit/MultiEdit.
+INPUT=$(cat)
+FILE=$(jq -r '(.tool_input.file_path // .tool_input.path // "")' <<< "$INPUT")
+
+[[ -z "$FILE" || "$FILE" != *.md ]] && exit 0
+
+ROOT=$(git rev-parse --show-toplevel 2>/dev/null) && cd "$ROOT"
+npx --yes markdownlint-cli2 --fix "$FILE" >/dev/null 2>&1
+exit 0

.claude/hooks/md_formatter.py

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+# PostToolUse hook: ensure text files end with a newline after Write/Edit/MultiEdit.
+INPUT=$(cat)
+FILE=$(jq -r '(.tool_input.file_path // .tool_input.path // "")' <<< "$INPUT")
+
+[[ -z "$FILE" || ! -f "$FILE" ]] && exit 0
+[[ "$FILE" == *.g.dart || "$FILE" == *.freezed.dart || "$FILE" == *.gr.dart ]] && exit 0
+
+case "$FILE" in
+  *.dart|*.yaml|*.yml|*.json|*.md|*.py|*.sh|*.kt|*.kts|*.swift|*.gradle|*.xml|*.html|*.txt) ;;
+  *) exit 0 ;;
+esac
+
+[[ -n "$(tail -c 1 "$FILE")" ]] && printf '\n' >> "$FILE"
+exit 0

.claude/hooks/md_formatter.sh

@@ -47,7 +47,26 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 .claude/hooks/md_formatter.py"
+            "command": "ROOT=$(git rev-parse --show-toplevel 2>/dev/null) || exit 0; bash \"$ROOT/.claude/hooks/md_formatter.sh\""
+          }
+        ]
+      },
+      {
+        "matcher": "Write|Edit|MultiEdit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "ROOT=$(git rev-parse --show-toplevel 2>/dev/null) || exit 0; bash \"$ROOT/.claude/hooks/dart_formatter.sh\"",
+            "timeout": 30
+          }
+        ]
+      },
+      {
+        "matcher": "Write|Edit|MultiEdit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "ROOT=$(git rev-parse --show-toplevel 2>/dev/null) || exit 0; bash \"$ROOT/.claude/hooks/newline_enforcer.sh\""
           }
         ]
       }
@@ -58,7 +77,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 .claude/hooks/env_file_guard.py"
+            "command": "ROOT=$(git rev-parse --show-toplevel 2>/dev/null) || exit 0; bash \"$ROOT/.claude/hooks/env_file_guard.sh\""
           }
         ]
       },
@@ -67,7 +86,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 .claude/hooks/env_file_guard.py"
+            "command": "ROOT=$(git rev-parse --show-toplevel 2>/dev/null) || exit 0; bash \"$ROOT/.claude/hooks/env_file_guard.sh\""
           }
         ]
       }