npx claudepluginhub brite-nites/brite-claude-plugins --plugin workflowsDefined in hooks/hooks.json
BashINPUT=$(cat); printf '%s\n' "$INPUT" | grep -Eiq 'rm[[:space:]]+-[a-zA-Z]*r[a-zA-Z]*f|rm[[:space:]]+-[a-zA-Z]*f[a-zA-Z]*r|git[[:space:]]+push.*[[:space:]]-f|git[[:space:]]+push.*--force([[:space:]]|"|$)|drop[[:space:]]+(table|database)|chmod[[:space:]]+777|(curl|wget)[^"]*[|][[:space:]]*(bash|sh|zsh)' && echo '{"ok":false,"reason":"Blocked: destructive command detected (rm -rf, force push, DROP, chmod 777, or piped download)"}' || echo '{"ok":true}'5msINPUT=$(cat); CMD=$(printf '%s\n' "$INPUT" | grep -o '"command":"[^"]*"' | head -1 | sed 's/"command":"//;s/"//'); if ! printf '%s\n' "$CMD" | grep -Eq '(^|[;&|[:space:]])git[[:space:]]+commit([[:space:]]|$)'; then echo '{"ok":true}'; exit 0; fi; errors=0; OLD_IFS=$IFS; IFS=$'\n'; staged=$(git diff --cached --name-only --diff-filter=d 2>/dev/null || true); if [ -z "$staged" ]; then IFS=$OLD_IFS; echo '{"ok":true}'; exit 0; fi; if [ -f package.json ]; then js_files=''; for f in $staged; do case "$f" in *.js|*.jsx|*.ts|*.tsx) js_files="$js_files\0$f" ;; esac; done; if [ -n "$js_files" ]; then if command -v npx >/dev/null 2>&1 && npx --no-install eslint --version >/dev/null 2>&1; then printf '%b' "$js_files" | xargs -0 npx --no-install eslint --no-error-on-unmatched-pattern -- >/dev/null 2>&1 || errors=$((errors + 1)); fi; if [ -f tsconfig.json ] && command -v npx >/dev/null 2>&1 && npx --no-install tsc --version >/dev/null 2>&1; then npx --no-install tsc --noEmit >/dev/null 2>&1 || errors=$((errors + 1)); fi; fi; fi; if [ -f pyproject.toml ] || [ -f setup.py ]; then py_files=''; for f in $staged; do case "$f" in *.py) py_files="$py_files\0$f" ;; esac; done; if [ -n "$py_files" ] && command -v ruff >/dev/null 2>&1; then printf '%b' "$py_files" | xargs -0 ruff check -- >/dev/null 2>&1 || errors=$((errors + 1)); fi; fi; IFS=$OLD_IFS; if [ "$errors" -gt 0 ]; then echo '{"ok":false,"reason":"Pre-commit quality checks failed. Run linters locally to see details: ESLint (JS/TS), tsc --noEmit (TS), or ruff check (Python)."}'; else echo '{"ok":true}'; fi60msWrite|EditINPUT=$(cat); printf '%s\n' "$INPUT" | grep -Eq 'sk-[a-zA-Z0-9]{20,}|sk-proj-[a-zA-Z0-9]{10,}|AKIA[A-Z0-9]{12,}|gh[ps]_[a-zA-Z0-9]{20,}|sk_(live|test)_[a-zA-Z0-9]{10,}' && echo '{"ok":false,"reason":"Blocked: potential secret or API key detected in file content"}' || echo '{"ok":true}'5msWrite|EditINPUT=$(cat); file_path=$(printf '%s\n' "$INPUT" | grep -o '"file_path":"[^"]*"' | head -1 | sed 's/"file_path":"//;s/"//'); [ -z "$file_path" ] && exit 0; ext="${file_path##*.}"; case "$ext" in js|jsx|ts|tsx) command -v npx >/dev/null 2>&1 && npx --no-install eslint --no-error-on-unmatched-pattern -- "$file_path" 2>/dev/null || true ;; py) command -v ruff >/dev/null 2>&1 && ruff check --fix -- "$file_path" 2>/dev/null || true ;; esac; exit 030msstartupprintf '🔧 Brite Session Context\n\n'; git_ok='✗'; node_ok='✗'; gh_ok='✗'; npx_ok='✗'; git_ver=''; node_ver=''; gh_user=''; if command -v git >/dev/null 2>&1; then git_ok='✓'; git_ver=" ($(git --version 2>&1 | sed 's/git version //'))"; fi; if command -v node >/dev/null 2>&1; then node_ok='✓'; node_ver=" ($(node --version 2>&1))"; fi; if command -v gh >/dev/null 2>&1 && gh auth status >/dev/null 2>&1; then gh_ok='✓'; gh_user=" ($(gh api user --jq '.login' 2>/dev/null || echo 'authed'))"; elif command -v gh >/dev/null 2>&1; then gh_ok='⚠'; gh_user=' (not authenticated — run gh auth login)'; fi; if command -v npx >/dev/null 2>&1; then npx_ok='✓'; fi; printf 'Environment:\n git ........... %s%s\n node .......... %s%s\n gh ............ %s%s\n npx ........... %s\n\n' "$git_ok" "$git_ver" "$node_ok" "$node_ver" "$gh_ok" "$gh_user" "$npx_ok"; printf 'Key commands:\n /workflows:sprint-planning — Plan sprint & assign to cycle\n /workflows:session-start — Pick issue & create execution plan\n /workflows:review — Run review agents in parallel\n /workflows:ship — Create PR & compound learnings\n /workflows:code-review — Quick code review\n /workflows:smoke-test — Diagnose plugin environment\n\nConventions: Check /workflows:tech-stack for the project stack. Use react-best-practices for React/Next.js, python-best-practices for FastAPI/Python.\n'5msREPO_ROOT="$(cd "${CLAUDE_PLUGIN_ROOT}/../.." 2>/dev/null && pwd)"; if [ ! -f "$REPO_ROOT/plugins/workflows/.claude-plugin/plugin.json" ]; then exit 0; fi; (umask 077; mkdir -p "$HOME/.brite-plugins/telemetry"); printf '%s\n' "$REPO_ROOT" > "$HOME/.brite-plugins/.repo-root"; SCRIPT="$REPO_ROOT/scripts/telemetry-log.sh"; if [ -x "$SCRIPT" ]; then bash "$SCRIPT" finalize-stale 2>/dev/null; bash "$SCRIPT" session-start 2>/dev/null; fi; exit 03msGit safety hooks block force pushes, destructive rm, and env writes; validate pre-commits; check file staleness on edits/writes; post-edit review; session start protocol. Runs bash, touches files.