Windsurf rules

1---
2name: guard-git
3model: haiku
4description: "Block dangerous git commands (push, force push, reset --hard, clean, branch -D, checkout/restore .) and enforce Conventional Commits & Branch Protection before an AI agent runs them. Installs hook scripts for Claude Code, Cursor, Cursor CLI, and Gemini CLI; documents Google Antigravity Terminal deny lists. Use when the user wants git safety hooks, to block git push or destructive git in agents, or to mirror the same policy across AI coding tools."
5---
6 
7# Guard Git
8> **HARD GATE** — **HARD GATE** — Before committing, verify: branch is not main/master, author is correct, git user is configured. Bad commits are hard to fix.
9 
10 
11Installs a shared hook that blocks destructive git operations and enforces workflow discipline. **Requires `jq` on the agent's PATH** when the hook runs.
12 
13## What gets blocked/enforced
14 
15- **Safety**: `git push --force`, `git reset --hard`, `git clean -f`, `git branch -D`, `git checkout .`, `git restore .`.
16- **Discipline**: Blocks direct commits or pushes to protected branches (`main`, `master`) unless `GIT_BIGPOWERS_LAND=1` (set only by `scripts/land-branch.sh`).
17- **Allows**: `git push origin <feature-branch>` for backup/CI; solo land push to `main` only inside `land-branch.sh`.
18- **Standardization**: Enforces [Conventional Commits](https://www.conventionalcommits.org/) for all `git commit` commands.
19- **Secrets**: Blocks commits containing common secret patterns (`sk-`, `ghp_`, `AKIA`, `xoxb-`, `-----BEGIN` private keys) — see [REFERENCE.md](REFERENCE.md).
20 
21## Quick start
22 
231. **Scope**: ask project-only vs global (paths differ per product).
242. **Write the hook bundle** from [REFERENCE.md](REFERENCE.md) into the client's hooks directory.
253. **Run `chmod +x`** on `pre-tool-use.sh`.
264. **Merge** the hook snippet from [REFERENCE.md](REFERENCE.md) into the right settings file — do not wipe unrelated keys.
275. **Verify** with the tests in [REFERENCE.md](REFERENCE.md).
28 
29| Client | Mechanism | Config |
30|--------|-----------|--------|
31| Claude Code | `PreToolUse` (Bash) | `.claude/settings.json` or `~/.claude/settings.json` |
32| Cursor / Cursor CLI | `beforeShellExecution` | `.cursor/hooks.json` or `~/.cursor/hooks.json` |
33| Gemini CLI | `BeforeTool` + `run_shell_command` | `.gemini/settings.json` or `~/.gemini/settings.json` |
34| Google Antigravity | Built-in Terminal **Deny list** | Settings UI (no shell hook) |
35 
36**Modes (env on the hook command):** `GIT_GUARDRAILS_MODE` is `claude` (default) or `cursor` → stderr + exit `2` on block. Set `gemini` for Gemini CLI → JSON `decision` on stdout.
37 
38## Customization
39 
40To add or remove patterns or protected branches, edit `pre-tool-use.sh`.
41 
42## Advanced
43 
44Full JSON examples, merge rules, Antigravity deny-list entries, and test commands: [REFERENCE.md](REFERENCE.md).
45 
46 
47 
48<!-- story: e01s03 -->
49 
50---
51 
52# Git guardrails — reference
53 
54## Navigation
55 
56| Lines | Section |
57|-------|---------|
58| 1 | Title |
59| 3–16 | Navigation |
60| 17–28 | Secret patterns (audit + pre-commit) |
61| 29–46 | Copy layout |
62| 47–72 | Claude Code |
63| 73–94 | Cursor and Cursor CLI |
64| 95–122 | Gemini CLI |
65| 123–137 | Google Antigravity |
66| 138–180 | Verify (local tests) |
67 
68## Secret patterns (audit + pre-commit)
69 
70Agents must not commit files containing:
71 
72- `sk-` (OpenAI API keys)
73- `ghp_` / `gho_` (GitHub tokens)
74- `AKIA` (AWS access key id)
75- `xoxb-` (Slack bot tokens)
76- `-----BEGIN` private keys
77 
78Use `audit-code` supply-chain checklist before commit. Consider `git-secrets` or custom pre-commit hook in target projects.
79 
80## Copy layout
81 
82The main script is `pre-tool-use.sh`.
83 
84```text
85<hooks-dir>/pre-tool-use.sh
86```
87 
88Example project locations:
89 
90- Claude: `.claude/hooks/`
91- Cursor: `.cursor/hooks/`
92- Gemini: `.gemini/hooks/`
93 
94Use the same layout for user-level hooks (`~/.claude/hooks`, `~/.cursor/hooks`, `~/.gemini/hooks`).
95 
96---
97 
98## Claude Code
99 
100Hook command does **not** need `GIT_GUARDRAILS_MODE` (defaults to `claude`).
101 
102**Project** (`.claude/settings.json`):
103 
104```json
105{
106  "hooks": {
107    "PreToolUse": [
108      {
109        "matcher": "Bash",
110        "hooks": [
111          {
112            "type": "command",
113            "command": "\"$CLAUDE_PROJECT_DIR\"/.claude/hooks/pre-tool-use.sh"
114          }
115        ]
116      }
117    ]
118  }
119}
120```
121 
122---
123 
124## Cursor and Cursor CLI
125 
126Use `beforeShellExecution`. Set `GIT_GUARDRAILS_MODE=cursor`.
127 
128**Project** (`.cursor/hooks.json`):
129 
130```json
131{
132  "version": 1,
133  "hooks": {
134    "beforeShellExecution": [
135      {
136        "command": "GIT_GUARDRAILS_MODE=cursor .cursor/hooks/pre-tool-use.sh",
137        "matcher": "git"
138      }
139    ]
140  }
141}
142```
143 
144---
145 
146## Gemini CLI
147 
148Use `BeforeTool` with matcher `run_shell_command`. Set **`GIT_GUARDRAILS_MODE=gemini`**.
149 
150**Project** (`.gemini/settings.json`):
151 
152```json
153{
154  "hooks": {
155    "BeforeTool": [
156      {
157        "matcher": "run_shell_command",
158        "hooks": [
159          {
160            "name": "git-guardrails",
161            "type": "command",
162            "command": "GIT_GUARDRAILS_MODE=gemini \"$GEMINI_PROJECT_DIR\"/.gemini/hooks/pre-tool-use.sh",
163            "timeout": 5000
164          }
165        ]
166      }
167    ]
168  }
169}
170```
171 
172---
173 
174## Google Antigravity
175 
176Add **Deny list** entries in **Antigravity → Settings → Terminal**:
177 
178- `git push --force`
179- `git push origin main`
180- `git push origin master`
181- `git reset --hard`
182- `git clean`
183- `git branch -D`
184- `git checkout .`
185- `git restore .`
186 
187---
188 
189## Verify (local tests)
190 
191**1. Block push to main without land mode (Claude mode):**
192```bash
193echo '{"tool_input":{"command":"git push origin main"}}' | ./pre-tool-use.sh
194# Expected: exit 2, protected branch message
195```
196 
197**2. Allow push to main with GIT_BIGPOWERS_LAND=1:**
198```bash
199GIT_BIGPOWERS_LAND=1 echo '{"tool_input":{"command":"git push origin main"}}' | ./pre-tool-use.sh
200# Expected: exit 0 (when on main)
201```
202 
203**3. Allow push to feature branch:**
204```bash
205echo '{"tool_input":{"command":"git push -u origin feat/my-task"}}' | ./pre-tool-use.sh
206# Expected: exit 0
207```
208 
209**4. Conventional Commits (Gemini mode):**
210```bash
211echo '{"tool_input":{"command":"git commit -m \"bad message\""}}' | GIT_GUARDRAILS_MODE=gemini ./pre-tool-use.sh
212# Expected: exit 0, {"decision":"deny", "reason":"..."}
213```
214 
215**5. Protected Branch commit (Cursor mode):**
216```bash
217# Run on 'main' branch
218echo '{"command":"git commit -m \"feat: valid message\""}' | GIT_GUARDRAILS_MODE=cursor ./pre-tool-use.sh
219# Expected: exit 2, "Direct commits to protected branch 'main' are forbidden"
220```
221 
222**6. Land script exists:**
223```bash
224test -x scripts/land-branch.sh && echo OK
225```
226 
227**7. Allow (Gemini mode):**
228```bash
229echo '{"tool_input":{"command":"git status"}}' | GIT_GUARDRAILS_MODE=gemini ./pre-tool-use.sh
230# Expected: exit 0, {"decision":"allow"}
231```
232