← sdd-engineeringHook

bash-guard

in plugin sdd-engineering · v1.1.0

Scope guards for SDD agents: spec-creator writes only Markdown under specs/, implementation-planner only under plans/, and plan-verifier's Bash is limited to read-only git.

Compatibility

  • Claude Code ≥ 2.1.318
  • Windows
  • macOS

Install with sdd-engineering

/plugin install sdd-engineering --marketplace lindigo-design/devdigest-marketplace

Also installs: engineering-paved-path ^1.0, research-tools ^1.0, architecture-review ^1.0

Other scopes and the terminal →

Hook

PreToolUse hook on Bash: runs hooks/bash-guard.mjs.

Event
PreToolUse
Matcher
Bash
Type
command
Command
node "${CLAUDE_PLUGIN_ROOT}/hooks/bash-guard.mjs" sdd-engineering:plan-verifier=review
Script
hooks/bash-guard.mjs
Timeout
10 s
Declared in
plugins/sdd-engineering/hooks/hooks.json

Runs commandsPreToolUse on Bash