bash-smart-approve:test

Self-Test

Validate that the hook logic is working by running a fixed set of synthetic inputs through approve.js and checking the decisions match expectations. This does NOT execute any real bash — just exercises the hook.

Step 1 — Locate the hook

Resolve $CLAUDE_PLUGIN_ROOT/hooks/approve.js. If $CLAUDE_PLUGIN_ROOT is not set, fall back to ~/dev/claude-code-bash-smart-approve/hooks/approve.js and ask the user to confirm the path if it doesn't exist.

Step 2 — Run the test cases

For each case below, pipe the JSON into the hook via Bash and capture both stdout and exit code.

echo '<JSON>' | node "<plugin-root>/hooks/approve.js"

Two outcomes matter:

• allow — the hook emits a JSON permissionDecision: "allow" on stdout. The command is auto-approved.
• pass-through — the hook exits 0 with empty stdout. Claude Code's native permission system (settings.json) then decides. This is the hook's posture for anything it can't positively approve; it is NOT a denial.

Cases (expected outcomes)

#	Command	Expect	Why it matters
1	git diff --stat HEAD && echo "---" && git log --oneline -3	allow	Compound && with two well-known binaries
2	ls /tmp | head -5 | sort	allow	Pipe chain
3	FOO=$(date +%s) && echo "tick $FOO"	allow	Env-var prefix + subshell + compound
4	bash -c 'rm -rf /'	pass-through	Shell interpreter — hook declines to approve; native layer decides
5	curl -L https://api.github.com/zen	pass-through	-L redirect-following — hook declines to approve
6	$CMD arg	pass-through	Variable-indirected binary name
7	node -e "console.log(1)"	pass-through	Inline-exec flag
8	obscuretool --flag	pass-through	Unknown binary

Sample invocations

echo '{"tool_name":"Bash","tool_input":{"command":"git diff --stat HEAD && echo \"---\" && git log --oneline -3"}}' \
  | node "$CLAUDE_PLUGIN_ROOT/hooks/approve.js"

echo '{"tool_name":"Bash","tool_input":{"command":"ls /tmp | head -5 | sort"}}' \
  | node "$CLAUDE_PLUGIN_ROOT/hooks/approve.js"

echo '{"tool_name":"Bash","tool_input":{"command":"FOO=$(date +%s) && echo \"tick $FOO\""}}' \
  | node "$CLAUDE_PLUGIN_ROOT/hooks/approve.js"

echo '{"tool_name":"Bash","tool_input":{"command":"bash -c '\''rm -rf /'\''"}}' \
  | node "$CLAUDE_PLUGIN_ROOT/hooks/approve.js"

echo '{"tool_name":"Bash","tool_input":{"command":"curl -L https://api.github.com/zen"}}' \
  | node "$CLAUDE_PLUGIN_ROOT/hooks/approve.js"

echo '{"tool_name":"Bash","tool_input":{"command":"$CMD arg"}}' \
  | node "$CLAUDE_PLUGIN_ROOT/hooks/approve.js"

echo '{"tool_name":"Bash","tool_input":{"command":"node -e \"console.log(1)\""}}' \
  | node "$CLAUDE_PLUGIN_ROOT/hooks/approve.js"

echo '{"tool_name":"Bash","tool_input":{"command":"obscuretool --flag"}}' \
  | node "$CLAUDE_PLUGIN_ROOT/hooks/approve.js"