About
claude-bulkhead is a set of pre-tool hooks for Claude Code, Codex, Gemini CLI, Cursor, Cline, Droid and about a dozen other coding agents. It reads the shell command an agent is about to run and blocks a short list of commands that cannot be undone, then tells the agent why and what the safe form is. The agent usually rewrites the command and keeps going.
Each rule comes from a real report this autumn: rm -rf or rsync --delete on a variable that can be empty, find | xargs rm -rf where a space splits a path, deleting app-data folders or the home directory, rm -rf .git on a repo with unpushed history, git worktree remove --force over a junction to outside data, and pkill -f node hitting other sessions' dev servers.
Try it without installing (nothing is executed): npx -y claude-bulkhead explain -- 'rm -rf "$BUILD_DIR"/*'
Limit: it reads command text, so a delete inside a script the agent wrote and then runs is not seen. MIT, zero dependencies, Node 18+, Windows, macOS and Linux. I maintain this.