Claude Code Hooks 选装实战指南

{
  "hooks": {
    "PreToolUse": [{
      "matcher": "Bash",
      "hooks": [{
        "type": "command",
        "command": "pwsh.exe -NoProfile -ExecutionPolicy Bypass -File \"C:\\Users\\14437\\.claude\\hooks\\block-dangerous.ps1\""
      }]
    }],
    "Stop": [{
      "matcher": "",
      "hooks": [{
        "type": "command",
        "command": "cmd /c chcp 65001 >nul && powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File \"C:\\Users\\14437\\.claude\\hooks\\toast-notify.ps1\"",
        "async": true
      }]
    }],
    "Notification": [{
      "matcher": "",
      "hooks": [{
        "type": "command",
        "command": "cmd /c chcp 65001 >nul && powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File \"C:\\Users\\14437\\.claude\\hooks\\toast-notify.ps1\"",
        "async": true
      }]
    }]
  }
}

# Claude Code PreToolUse Hook — 危险命令拦截
# 致命级：exit 2 硬掐，永不放过
# 高风险：exit 2 硬掐，手动执行不受影响
# 警告级：exit 0 打印提醒，Claude 自行判断
$input = [Console]::In.ReadToEnd() | ConvertFrom-Json
$cmd = $input.tool_input.command
# ============================================================
# 致命级 — 不可恢复，误操作 = 灾难，永不放过
# ============================================================
$fatal = @(
    'rm\s+-rf\s+/',              # rm -rf / 根目录
    'rm\s+-rf\s+~',              # rm -rf ~ 用户目录
    'rm\s+-rf\s+\$HOME',         # rm -rf $HOME
    'DROP\s+DATABASE',           # 删库
    'migrate:fresh',             # Laravel 重置数据库
    'prisma\s+migrate\s+reset',  # Prisma 重置
    'chmod\s+777\s+/',           # 根目录全开放权限
    'curl.*\|.*bash',            # 远程脚本直执行
    'curl.*\|.*sh',              # 同上
    'wget.*\|.*bash',            # 同上
    '>\s+/dev/sda',              # 覆写磁盘
    'mkfs\.'                     # 格式化
)
foreach ($pattern in $fatal) {
    if ($cmd -match $pattern) {
        $stderr = @"
========================================
🛑 致命操作，已永久拦截
命令：$cmd
原因：不可恢复，误操作等于灾难
处理：请勿通过 Claude Code 执行此命令。
      如确需执行，请手动在终端运行。
========================================
"@
        Write-Error $stderr
        exit 2
    }
}
# ============================================================
# 高风险 — 可恢复但代价大，硬拦，手动执行不受影响
# ============================================================
$highRisk = @(
    'git\s+push\s+.*--force',        # git push --force
    'git\s+push\s+.*-f\b',           # git push -f
    'git\s+reset\s+--hard',          # git reset --hard
    'git\s+clean\s+-f',              # git clean -f/d/fd
    'git\s+branch\s+-D',             # 强制删分支
    'git\s+checkout\s+\.',           # 丢弃所有本地修改
    'git\s+restore\s+\.',            # 同上
    'npm\s+publish',                 # 发布 npm 包
    'npm\s+unpublish',               # 撤回 npm 包
    'pip\s+uninstall\s+-y',          # 批量卸载 Python 包
    'docker\s+rm\s+-f',              # 强制删容器
    'docker\s+rmi\s+-f',             # 强制删镜像
    'docker\s+system\s+prune',       # 清理所有未用镜像
    'kubectl\s+delete\s+deployment'  # 删 K8s 部署
)
foreach ($pattern in $highRisk) {
    if ($cmd -match $pattern) {
        $stderr = @"
========================================
⚠️  高风险操作，已拦截
命令：$cmd
原因：可恢复但代价大（丢提交/删环境/影响线上）
处理：Claude Code 不允许自动执行此操作。
      请确认无误后，复制以下命令到终端手动执行：
      $cmd
========================================
"@
        Write-Error $stderr
        exit 2
    }
}
# ============================================================
# 警告级 — 正常操作，仅提醒
# ============================================================
$warnings = @(
    'rm\s+-rf\s+\./',           # rm -rf ./ (当前目录)
    'rm\s+-rf\s+\w',            # rm -rf 某个目录
    'git\s+branch\s+-d',        # 删已合并分支（安全，但提醒）
    'del\s+/f\s+/s',            # Windows 强制递归删
    'rmdir\s+/s\s+/q'           # Windows rmdir
)
foreach ($pattern in $warnings) {
    if ($cmd -match $pattern) {
        Write-Warning "⚠️  提醒：即将执行 `$cmd`，请确认是否期望此操作。"
        exit 0
    }
}
# 一切正常，放行
exit 0

# Claude Code 桌面通知（零依赖，纯 Windows 自带）
# 事件：Stop / Notification
# 策略：WinRT Toast 优先，失败时回退 NotifyIcon 托盘气泡
# ── 从 stdin 读取 Claude Code 传来的 hook JSON ──
$json = ($input | Out-String) | ConvertFrom-Json -ErrorAction SilentlyContinue
$hookEvent = $json.hook_event_name
if (-not $hookEvent) { exit 0 }   # 没读到有效事件，静默退出
# ── 根据事件类型选择消息 ──
switch ($hookEvent) {
    "Stop"          { $title = "Claude Code"; $message = "任务完成，回来看看吧" }
    "Notification"  { $title = "Claude Code —— 需要你的关注"; $message = "权限确认 / 等待输入" }
    default         { exit 0 }
}
# ═══════════════════════════════════════════════════════════════
# 主方案：WinRT Toast
# ═══════════════════════════════════════════════════════════════
$ok = $false
try {
    $template = [Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime]::GetTemplateContent(
        [Windows.UI.Notifications.ToastTemplateType, Windows.UI.Notifications, ContentType = WindowsRuntime]::ToastText02
    )
    $template.SelectSingleNode("//text[@id='1']").InnerText = $title
    $template.SelectSingleNode("//text[@id='2']").InnerText = $message
    $appId = "{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exe"
    [Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier($appId).Show($template)
    $ok = $true
} catch { }
# ═══════════════════════════════════════════════════════════════
# 回退方案：WinRT 失败时用托盘气泡兜底
# ═══════════════════════════════════════════════════════════════
if (-not $ok) {
    Add-Type -AssemblyName System.Windows.Forms
    Add-Type -AssemblyName System.Drawing
    Add-Type -Name _CC -Namespace _ -MemberDefinition '
[DllImport("kernel32.dll")] public static extern IntPtr GetConsoleWindow();
[DllImport("user32.dll")] public static extern bool ShowWindow(IntPtr hWnd, int nCmdShow);
'
    $ptr = [_._CC]::GetConsoleWindow()
    [_._CC]::ShowWindow($ptr, 0)
    $balloon = New-Object System.Windows.Forms.NotifyIcon
    $balloon.Icon = if ($hookEvent -eq "Notification") {
        [System.Drawing.SystemIcons]::Warning
    } else {
        [System.Drawing.SystemIcons]::Information
    }
    $balloon.BalloonTipTitle = $title
    $balloon.BalloonTipText = $message
    $balloon.Visible = $true
    $balloon.ShowBalloonTip(5000)
    Start-Sleep -Seconds 6
    $balloon.Dispose()
}

npx cc-hook-registry search <关键词>   # 61 个社区 Hook 可搜索安装