#!/bin/bash
# auto-mode-safety-enforcer.sh — Block dangerous operations in auto/acceptEdits mode
#
# Solves: Auto mode safety classifier hardcoded to opus-4-6, fails with Opus 4.7
#   - #49618: Safety classifier doesn't work with non-opus-4-6 models
#   - #49554: auto mode approved ~/.ssh deletion
#   - #18740: Auto-allow mode data loss without warning
#
# How it works: PreToolUse hook on Bash that blocks destructive commands
#   regardless of which model or permission mode is active. Acts as a
#   user-space safety net when the built-in classifier fails.
#
# What it blocks:
#   - rm -rf on non-safe paths (/, ~, .., /home, /etc, /usr, /var, .git)
#   - Credential file deletion (.ssh, .git-credentials, .env, .npmrc)
#   - dd/mkfs/fdisk (disk operations)
#   - kill -9 on system processes
#   - chmod 777 on sensitive paths
#
# TRIGGER: PreToolUse  MATCHER: "Bash"

set -euo pipefail

INPUT=$(cat)
COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
[ -z "$COMMAND" ] && exit 0

# --- Critical rm operations ---
if echo "$COMMAND" | grep -qE '(^|\s|;|&&|\|)(sudo\s+)?rm\s'; then
    # Always block rm on root-level and home-level critical paths
    if echo "$COMMAND" | grep -qE 'rm\s.*(/\s|/;|/$|~\/?\s|~\/?$|~\/\.|/home\b|/etc\b|/usr\b|/var\b|/opt\b|/root\b)'; then
        echo "BLOCKED: rm targeting critical system/home path" >&2
        echo "This operation would cause irreversible data loss." >&2
        echo "Command: $COMMAND" >&2
        exit 2
    fi
    # Block rm on dotfiles in home directory
    if echo "$COMMAND" | grep -qE "rm\s.*(${HOME}|\~)/\."; then
        echo "BLOCKED: rm targeting home dotfile" >&2
        echo "Command: $COMMAND" >&2
        exit 2
    fi
fi

# --- Disk-level operations ---
if echo "$COMMAND" | grep -qE '(^|\s)(sudo\s+)?(dd\s+.*of=/dev|mkfs\.|fdisk\s|parted\s)'; then
    echo "BLOCKED: Disk-level operation (dd/mkfs/fdisk/parted)" >&2
    exit 2
fi

# --- Kill system processes ---
if echo "$COMMAND" | grep -qE 'kill\s+(-9\s+)?1$|killall\s+(init|systemd)'; then
    echo "BLOCKED: Killing system process" >&2
    exit 2
fi

exit 0