bot-backend
b73161a133
- scripts/claude-hooks/check-secret-read.py — PreToolUse(Bash) guard: блокирует чтение/передачу .env*/.pgpass/ssh-key (cat/Get-Content/curl @file/<redirect), закрывает Bash(*) обход Read(.env) deny. Allow: .env.example/templates, ls/stat. Tested 12/12. - scripts/claude-hooks/check-sql-pitfalls.py — PostToolUse(Edit|Write|MultiEdit): блокирует import psycopg2 в backend + tradein-mvp/backend .py (psycopg v3). Cast-trap НЕ чекаем (FP на comment/test-mentions). Tested 7/7. - scripts/claude-hooks/session-preflight.py — SessionStart: статус FORGEJO/OBSIDIAN token + db-tunnel. - .claude/rules/tradein.md — НОВОЕ: tradein-mvp gotchas (2 БД, :8000=gendesign, scheduler в tradein-scraper, strict SQL auto-apply + NN-collisions, rapid-merge trap). - backend.md/sql.md/frontend.md: paths globs расширены на tradein-mvp/**. Wiring (settings.json) — local/gitignored, отдельно. Audit 2026-06-27 P0+P1.
43 lines
1.4 KiB
Python
43 lines
1.4 KiB
Python
#!/usr/bin/env python3
|
|
"""
|
|
Claude Code SessionStart hook — one-line preflight status printed into session context.
|
|
|
|
Surfaces the session-setup facts that have caused real lost time:
|
|
- FORGEJO_ACCESS_TOKEN present? (goern forgejo-MCP needs it BEFORE launch; missing -> idle bot)
|
|
- OBSIDIAN_API_KEY present? (vault MCP)
|
|
- DB tunnel localhost:15432 reachable? ("tunnel :8000 is gendesign not tradein" / tunnel-down traps)
|
|
|
|
Wired in `.claude/settings.json` hooks.SessionStart. ALWAYS exits 0 — informational only,
|
|
never blocks. Fast (<~0.6s): single non-blocking TCP probe with a short timeout.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
import os
|
|
import socket
|
|
import sys
|
|
|
|
|
|
def _tcp_ok(host: str, port: int, timeout: float = 0.5) -> bool:
|
|
try:
|
|
with socket.create_connection((host, port), timeout=timeout):
|
|
return True
|
|
except OSError:
|
|
return False
|
|
|
|
|
|
def main() -> int:
|
|
try:
|
|
forgejo = "set" if os.environ.get("FORGEJO_ACCESS_TOKEN") else "MISSING"
|
|
obsidian = "set" if os.environ.get("OBSIDIAN_API_KEY") else "MISSING"
|
|
tunnel = "up" if _tcp_ok("localhost", 15432) else "DOWN"
|
|
print(
|
|
f"[preflight] FORGEJO_ACCESS_TOKEN={forgejo} · OBSIDIAN_API_KEY={obsidian} "
|
|
f"· db-tunnel(:15432)={tunnel}"
|
|
)
|
|
except Exception:
|
|
pass
|
|
return 0
|
|
|
|
|
|
if __name__ == "__main__":
|
|
sys.exit(main())
|