Files
Jyotisha/tools/agent-loop/hooks/claude/pre-push
T

26 lines
1.0 KiB
Bash
Executable File

#!/bin/sh
# Agent loop guard (Claude side). Installed per process through
# GIT_CONFIG_KEY_0=core.hooksPath, never into the shared .git/hooks.
# Refuses: any push to main, any branch deletion, and — when
# AGENT_LOOP_DOCS_ONLY=1 (nightly review) — a staging push that touches a gated path.
zero=0000000000000000000000000000000000000000
status=0
while read -r local_ref local_sha remote_ref remote_sha; do
case "$remote_ref" in
refs/heads/main|refs/heads/master)
echo "agent-loop pre-push: pushing to $remote_ref is reserved for the product owner" >&2
status=1 ;;
esac
if [ "$local_sha" = "$zero" ]; then
echo "agent-loop pre-push: deleting $remote_ref is not allowed" >&2
status=1
fi
if [ "${AGENT_LOOP_DOCS_ONLY:-0}" = "1" ] && [ "$remote_ref" = "refs/heads/staging" ]; then
if ! deploy/is-docs-only-range.sh --git "$remote_sha" "$local_sha" >/dev/null 2>&1; then
echo "agent-loop pre-push: nightly review may only push docs-only changes to staging" >&2
status=1
fi
fi
done
exit $status