#!/bin/bash
# PreToolUse hook - blokuje dostęp do chronionych katalogów
# Edytuj PROTECTED aby dopasować do swojego systemu
# Rejestracja w settings.json:
#   "hooks": { "PreToolUse": [{ "matcher": "Bash", "hooks": [{ "type": "command", "command": ".claude/hooks/block-dirs.sh" }] }] }

[ "$1" != "Bash" ] && exit 0

PROTECTED="/home/user/.ssh /home/user/.aws /home/user/.kube /home/user/Private"
for dir in $PROTECTED; do
  echo "$2" | grep -qF "$dir" && echo "BLOCK: $dir" >&2 && exit 2
done
exit 0