UserPromptSubmit

{
  "UserPromptSubmit": [
    {
      "matcher": "",
      "hooks": [
        {
          "type": "command",
          "command": "sh -c 'r=${CLAUDE_PLUGIN_ROOT:-}; b=${r%/*}; x=; semver() { case ${1:-} in \"\"|*[!0-9.]*) return 1 ;; esac; o=$IFS; IFS=.; set -- $1; IFS=$o; [ \"$#\" -eq 3 ] && [ -n \"$1\" ] && [ -n \"$2\" ] && [ -n \"$3\" ]; }; root_ok() { q=$1; e=${2:-}; z=\"$q/bin/agent-guard\"; [ -x \"$z\" ] && [ -r \"$q/config/gitleaks.toml\" ] && [ -r \"$q/config/deny-read-paths.txt\" ] && [ -r \"$q/config/deny-bash-patterns.txt\" ] || return 1; u=; while IFS= read -r l; do case \"$l\" in VERSION=*) u=${l#VERSION=}; break ;; esac; done <\"$z\"; [ -n \"$u\" ] && { [ -z \"$e\" ] || [ \"$u\" = \"$e\" ]; }; }; if [ -n \"$r\" ]; then v=${r##*/}; semver \"$v\" || v=; if root_ok \"$r\" \"$v\"; then x=\"$r/bin/agent-guard\"; elif [ ! -e \"$r\" ]; then c=\"$b/current\"; t=; [ -L \"$c\" ] && t=$(readlink \"$c\" 2>/dev/null) || :; if semver \"$t\" && root_ok \"$c\" \"$t\"; then x=\"$c/bin/agent-guard\"; else x=$(for z in \"$b\"/*/bin/agent-guard; do [ -x \"$z\" ] || continue; q=${z%/bin/agent-guard}; v=${q##*/}; semver \"$v\" || continue; root_ok \"$q\" \"$v\" || continue; printf \"%s\\\\t%s\\\\n\" \"$v\" \"$z\"; done | sort -t. -k1,1n -k2,2n -k3,3n | tail -n 1 | cut -f 2-); fi; fi; fi; if [ ! -x \"$x\" ]; then mode=${AGENT_GUARD_INFRA_FAILURE_MODE:-open}; case \"$mode\" in closed) action=blocking ;; *) mode=open; action=continuing ;; esac; d=${AGENT_GUARD_WARNING_DIR:-${TMPDIR:-/tmp}/agent-guard-warnings-${UID:-user}}; p=; while IFS= read -r line || [ -n \"$line\" ]; do p=$p$line; done; i=${AGENT_GUARD_SESSION_ID:-}; if [ -z \"$i\" ] && command -v jq >/dev/null 2>&1; then i=$(printf %s \"$p\" | jq -r \".session_id // empty\" 2>/dev/null); fi; if [ -z \"$i\" ]; then case \"$p\" in *\\\"session_id\\\":\\\"*) i=${p#*\\\"session_id\\\":\\\"}; i=${i%%\\\"*}; case \"$i\" in \"\"|*[!A-Za-z0-9._:-]*) i= ;; esac ;; esac; fi; if [ -n \"$i\" ]; then i=$(printf %s \"$i\" | cksum); el