theagitist/claude-mods/tree/main/dot-guard
dot-guard
一个 Claude Code function-hook 插件,会阻止 `git add` 将整个 `$HOME` 工作树加入暂存区(`dot add -A`、`dot add .`、`dot add *`)。提供通过 `CLAUDE_CODE_PLUGIN_DIRS` 或 `--plugin-dir` 安装的说明,并支持用 `dot-guard.wrappers` 配置自定义 dotfiles 别名。
关于这个 mod
dot-guard 是 theagitist/claude-mods 仓库中的五个小型 Claude Code function-hook mod 之一。当 Bash 的 git add 命令会将整个 $HOME 工作树加入暂存区时,它会拒绝该调用(例如 dot add -A、dot add .、dot add *),向模型返回拒绝原因,而不是执行命令。
安装(每台机器一次):
- 将仓库克隆到每台机器上的相同相对路径,例如
git clone <remote> ~/apps/claude-mods。 - 将 Claude Code 指向 mod 文件夹。例如,在
~/.claude/settings.json的env块中将CLAUDE_CODE_PLUGIN_DIRS设为 mod 目录,或使用claude --plugin-dir ~/apps/claude-mods/dot-guard按工作阶段加载。
配置:
dot-guard.wrappers—— 用--work-tree=$HOME运行 git 的逗号分隔命令名(默认值为dot)。如果自己的 dotfiles 别名不同,请改成对应别名。
结构:
dot-guard/.claude-plugin/plugin.json—— 插件清单。dot-guard/hooks/hooks.json和dot-guard/hooks/register.ts—— hook 注册;拦截tool.call的Bash,并从环境中读取HOME。
使用 claude plugin validate <mod> 和 claude plugin test <mod> 验证并测试。
安装
请先查看作者 README 确认 marketplace 和插件名称;命令可能随仓库结构改变。
claude plugin marketplace add theagitist/claude-mods claude plugin install dot-guard
原文 / README
claude-mods
Five small Claude Code mods (function-hook plugins). They run in the terminal CLI (no GUI panes), and they are written to work the same on every machine: Linux or macOS, any username, any home directory. Nothing personal is baked into the source. Per-machine values (a Telegram chat id, an email address) come from the environment, so the same checkout is safe to push publicly and hand to other people.
The mods
| Mod | What it does | How it shows |
|---|---|---|
| dot-guard | Blocks a git add that would stage your whole $HOME work-tree (dot add -A, dot add ., dot add *). One fat-finger away from committing your entire home directory. | Denies the tool call with a reason. |
| emdash-watch | Flags em-dashes the model writes into public-facing prose (.md, .html, .css, .txt, .rst). Internal files (CLAUDE.md, anything under memory/ or .claude/) are exempt. | Non-blocking note appended to the write's result, visible to the model only. |
| home-path-guard | Flags a hardcoded user home (/home/<user>, /Users/<user>) written into a file, nudging $HOME / ~. Machine-local files (*.local.*) are exempt. | Non-blocking note to the model. |
| box-status | Status line showing which box you are on, which out-of-band channel it can reach you on (telegram / email / none), and whether passwordless sudo works. | One status-line entry under the prompt. |
| idle-ping | When a turn that did real work ends, pings you out of band so you can step away. Telegram when a bot token and chat id are present, otherwise email. | Sends a message; logs to the debug sink when no channel is configured. |
Install (per machine)
Clone this repo to the same relative path on each box, for example:
git clone <your-remote> ~/apps/claude-mods
Then point Claude Code at the five folders. The cleanest cross-machine way is
CLAUDE_CODE_PLUGIN_DIRS in the env block of ~/.claude/settings.json
(which uses ~, so the one line works on every machine):
{
"env": {
"CLAUDE_CODE_PLUGIN_DIRS": "~/apps/claude-mods/dot-guard:~/apps/claude-mods/emdash-watch:~/apps/claude-mods/box-status:~/apps/claude-mods/home-path-guard:~/apps/claude-mods/idle-ping"
}
}
(On Windows the list separator is ; instead of :.)
Or load them for a single session without touching settings:
claude --plugin-dir ~/apps/claude-mods/dot-guard --plugin-dir ~/apps/claude-mods/idle-ping
Per-machine configuration (idle-ping)
idle-ping reads its target from the environment, never from source:
- Telegram (preferred when set): it reads
TELEGRAM_BOT_TOKEN(and optionallyTELEGRAM_CHAT_ID) from~/.claude/channels/telegram/.env, andTELEGRAM_CHAT_IDfrom the process environment if not in that file. Keep that file out of version control (mode600). - Email (fallback): set
CLAUDE_PING_EMAILto the recipient. The mod sends through the first mailer it finds onPATH(msmtp,sendmail,mail,mailx). - If neither is configured, it writes what it would have sent to the debug log and does nothing else.
box-status reports the same channel resolution, so a glance at the status line
tells you whether a ping would actually go out on this box.
Settings knobs
dot-guard.wrappers(defaultdot): comma-separated command names that run git with--work-tree=$HOME. Set it to your own dotfiles alias if it is notdot.idle-ping.minTools(default2): how many tool calls a turn needs before it counts as real work worth a ping. Raise it to ping less often.
Developing
Each mod is a folder with .claude-plugin/plugin.json, hooks/hooks.json, and
hooks/register.ts. Check and test one with:
claude plugin validate <mod>
claude plugin test <mod>
