Pi/>dZddlmZddlZddlZddlZddlZddlmZddl m Z m Z m Z m Z mZmZmZddlmZd*d Zd+d Zd,dZeZepdad-dZdZd.d/dZd0d/dZd1d/dZd2d Zd3d"Zd*d#Zd4d%Z d5d&Z!e"hd'Z#d(Z$e%d)kr e$dSdS)6a Dippy - Approval autopilot for Claude Code, Gemini CLI, and Cursor. A PreToolUse/BeforeTool/beforeShellExecution hook that auto-approves safe commands while prompting for anything destructive. Stay in the flow. Usage: Claude Code: Add to ~/.claude/settings.json hooks configuration. Gemini CLI: Add to ~/.gemini/settings.json with --gemini flag. Cursor: Add to .cursor/hooks.json with --cursor flag. See README.md for details. ) annotationsN)Path)Config ConfigErrorconfigure_logging load_config log_decisionmatch_after_mcp match_mcp)analyzenamestrreturnboolcjtj|ddvS)z+Check if an environment variable is truthy.)1trueyes)osenvirongetlowerr s ,/root/projects/gits/Dippy/src/dippy/dippy.py _env_flagr&s* :>>$ # # ) ) + +/C CC str | NonecdtjvstdrdSdtjvstdrdSdtjvstdrd Sd S) zIDetect mode from command-line flags or env vars. Returns None if not set.z--claude DIPPY_CLAUDEclaudez--gemini DIPPY_GEMINIgeminiz--cursor DIPPY_CURSORcursorN)sysargvrrr_detect_mode_from_flagsr)+sdSX>!:!:xSX>!:!:xSX>!:!:x 4r input_datadictcd|vrd|vrdS|dd}|dvrdS|r3|dkr-|dstjd |d d S) z+Auto-detect mode from input JSON structure.command tool_namer%r)shell run_shellrun_shell_command execute_shellr#Bashmcp__zUnknown tool_name 'z', defaulting to Claude moder!)r startswithloggingwarning)r*r.s r_detect_mode_from_inputr86sJ;j#@#@x{B//IPPPxWY&((1E1Eg1N1N(UiUUUVVV 8rr!rctdkrtjdz dz Stdkrtjdz dz Stjdz dz S)z Get log file path based on mode.r#z.geminizhook-approvals.logr%z.cursorz.claude)MODErhomer(rr _get_log_filer<Ps] xy{{Y&)=== xy{{Y&)=== 9;; "%9 99rc t}|jddtjt |tjdddS#ttf$rYdSwxYw)z=Configure logging to file. Fails silently if unable to write.T)parentsexist_okz'%(asctime)s [%(levelname)s] %(message)sz%Y-%m-%d %H:%M:%S)filenamelevelformatdatefmtN) r<parentmkdirr6 basicConfigrINFOOSErrorPermissionError)log_files r setup_loggingrKYs   ??dT:::]],<'       _ %     sAAA21A2all commands safereasonctjd|tdkrdd|dStdkr d|}d||||dSdd dd|d iS) zReturn approval response.z APPROVED: r#allow🐤 decisionrMr% permission user_message agent_message userMessage agentMessagehookSpecificOutput PreToolUse hookEventNamepermissionDecisionpermissionDecisionReasonr6infor:rMmsgs rapprovercks L&f&&''' x#/?v/?/?@@@ xf!      )")(8(8(8   rneeds approvalctjd|tdkrdd|dStdkr d|}d||||dSdd dd|d iS) z4Return ask response to prompt user for confirmation.zASK: r#askrPrQr%rSrYrZr[r_ras rrfrfs L!!!""" x!-=V-=-=>>> xf      )"'(8(8(8   rdenied by configctjd|tdkrdd|dStdkr d|}d||||dSdd dd|d iS) z*Return deny response to block the command.zDENY: r#denyrPrQr%rSrYrZr[r_ras rriris L"&""### x".>f.>.>??? xf       )"((8(8(8   rr-configrcwdct|||}t|jdkrdn|j|j||jdkrt |jS|jdkrt |jSt |jS)z Main entry point: check if a command should be approved. Uses a single recursive walk of the bash AST to analyze all constructs. Returns a hook response dict. rOr-ri)r r actionrMrcrirf)r-rjrkresults r check_commandrpsWfc * *F=G++  }v}%%% & FM"""6=!!!rNoneczddlm}ddlm}||}||||}|rt d|dSdS)zBHandle PostToolUse hook - output feedback message if rule matches.r) match_after)tokenizerPN)dippy.core.configrsdippy.core.parserrtprint)r-rjrkrsrtwordsmessages rhandle_post_tool_userzsw------****** HW  Ek%--G! g     !!rc,|dS)z$Check if a tool name is an MCP tool.r4)r5rs r is_mcp_toolr|s ??7 # ##rr.ct||}|iS|jr|jn d|jd}t|j||j|jdkrt |S|jdkrt |St|S)aCheck if an MCP tool should be approved based on config rules. Args: tool_name: MCP tool name (e.g., "mcp__github__get_issue"). config: Loaded configuration. Returns: Hook response dict, or empty dict if no rules match (defer to default). N[])rulerOri)r rypatternr rRrcrirf)r.rjmatchrMs rcheck_mcp_toolrs i ( (E } #m EU]]1EU]1E1E1EFem<<<< ~  v 6 ! !F||6{{rcRt||}|rtd|dSdS)zHHandle PostToolUse hook for MCP tools - output feedback if rule matches.rPN)r rw)r.rjrys rhandle_mcp_post_tool_users@i00G! g     !!r>r3r/r0r2r1c  t tjtj}t +t |atj dt| d}|s+| di}| d}|r"t| }ntj } t|}t|n`#t $rS}tjd|t%tjt)d|Yd}~dSd}~wwxYw| dd}td kr| d d }d}no| d d }| di}t+|r|d krt| dd} | dvrZtj d| d|t-d| t%tjt/| dS|d kr(tj d|t1||nHtj d|t3||} t%tj| dS|t4vr#t%tjidS| d d }|d krv| dd} | dvr\tj d| d|t-d| |t%tjt/| dS|d kr*tj d|t7|||dStj d|t9|||} t%tj| dS#tj$r9tjdt%tjiYdSt<$rC}tjd|t%tjiYd}~dSd}~wwxYw)zMain entry point for the hook.NzAuto-detected mode: rk tool_inputzConfig error: zconfig error: hook_event_namerZr%r-rr. PostToolUsepermission_modedefault)bypassPermissionsdontAskz Bypass mode (z): rOzPostToolUse MCP: zChecking MCP: rmz PostToolUse: z Checking: zInvalid JSON inputzError: )rKjsonloadr&stdin_EXPLICIT_MODEr8r:r6r`rrresolverkrrrerrorrwdumpsrfr|r rcrrSHELL_TOOL_NAMESrzrpJSONDecodeError Exception) r*cwd_strrrkrje hook_eventr-r.rros rmainrsOOO_Ysy))   !*:66D L666 7 7 7 ..'' ,# b99J nnU++G  w--''))CC(**C  %%F f % % % %    M.1.. / / / $*S!5!!5!56677 8 8 8 FFFFF   ^^$5|DD 8   nnY33GII#{B77I# b99J9%% ..&0nn5F &R&RO&*JJJ %T_%T%T%T%TUUU$Wo>>>dj)A)ABBCCC..L!@Y!@!@AAA,Y????L!=)!=!=>>>+Iv>>F$*V,,--- 000djnn%%% nnY33G  & &(nn-> JJO"BBB J_JJJJKKKWowGGGGdj!9!9::;;;  & & L222 3 3 3 &# 6 6 6 6 6 L/g// 0 0 0"7FC88F $*V$$ % % % % %   *+++ djnn  mmm$$$ djnnslC O:C98O:9 EAE O:EC1O: A6O:*O:-BO:?.O:/A O::AR  R  8RR __main__)r rrr)rr)r*r+rr)rr)rL)rMrrr+)rd)rg)r-rrjrrkrrr+)r-rrjrrkrrrq)r.rrjrrr+)r.rrjrrrq)&__doc__ __future__rrr6rr&pathlibrrurrrrr r r dippy.core.analyzerr rr)r8rr:r<rKrcrfrirprzr|rr frozensetrr__name__r(rrrsM  #"""""  (''''' DDDD ()(**! ::::    $006"""".!!!!$$$$ .!!!!9eeeP zDFFFFFr