olivier/claude-failover
1
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions

feat(safety): PreToolUse hook gating destructive tool calls (FNDG-04b) #3

Open
olivier wants to merge 2 commits from security/fndg-04b-dangerously-skip-permissions into main
pull from: security/fndg-04b-dangerously-skip-permissions
merge into: olivier:main
Conversation 0 Commits 2 Files changed 8 +8
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 2e465adee1 - Show all commits

8
VERSION.md
View file

@ -15,6 +15,14 @@
tout lancement `claude --dangerously-skip-permissions`. Fail-closed si le hook ne se déploie pas.
- `internal/switcher/account_switcher.go` (`relaunchDedicatedSessions`) : redéploiement du hook avant
chaque `--resume` post-failover. Fail-open (log + continue) — le hook initial reste en place.
- `internal/safety/hook.sh` : fix compatibilité bash 5.2 — regex `[^|&]*` remplacée par
variable (`re_curlpipe=...`) pour éviter l'erreur de parsing `[[ =~ ]]` sur Ubuntu 24.04.
- `internal/dispatcher/dispatcher_test.go` : ajout `TestDispatchProjectDeploysSafetyHook` —
vérifie que le hook et `.claude/settings.json` existent dans le projet après dispatch.
- `agent-orchestrator/launch-agent.sh` (dev-management) : `deploy_safety_hook "$project_dir"` avant
`get_claude_cmd` — couvre le dispatcher bash legacy.
- `agent-orchestrator/lib-common.sh` (dev-management) : ajout fonction `deploy_safety_hook()` +
appel dans `handle_interactive_quota_block` avant relance post-quota (CWD via `tmux display-message`).
### Sécurité (FNDG-04)
Audit MCP STDIO 2026-04-18 (`audit/mcp-stdio-2026-04-18` dans secuaas-mcp). FNDG-04b est la deuxième