cc-safe-setup 1.5.0 → 1.5.2

package/README.md

@@ -36,9 +36,9 @@ Installs 8 production-tested safety hooks in ~10 seconds. Zero dependencies. No
   ● cd+git Auto-Approver
   ● Secret Leak Prevention
 
-  Install all 7 safety hooks? [Y/n] Y
+  Install all 8 safety hooks? [Y/n] Y
 
-  ✓ Done. 7 safety hooks installed.
+  ✓ Done. 8 safety hooks installed.
 ```
 
 ## Why This Exists
@@ -116,7 +116,7 @@ npx cc-health-check
 
 ## Full Kit
 
-cc-safe-setup gives you 7 essential hooks. For the complete autonomous operation toolkit:
+cc-safe-setup gives you 8 essential hooks. For the complete autonomous operation toolkit:
 
 **[Claude Code Ops Kit](https://yurukusa.github.io/cc-ops-kit-landing/?utm_source=github&utm_medium=readme&utm_campaign=safe-setup)** — 16 hooks + 5 templates + 3 exclusive tools + install.sh. Production-ready in 15 minutes.
 
@@ -124,7 +124,7 @@ Or start with the free hooks: [claude-code-hooks](https://github.com/yurukusa/cl
 
 ## Examples
 
-Need custom hooks beyond the 7 built-in ones? See [`examples/`](examples/) for ready-to-use recipes:
+Need custom hooks beyond the 8 built-in ones? See [`examples/`](examples/) for ready-to-use recipes:
 
 - **auto-approve-git-read.sh** — Auto-approve `git status`, `git log`, even with `-C` flags
 - **auto-approve-ssh.sh** — Auto-approve safe SSH commands (`uptime`, `whoami`, etc.)

package/index.mjs

@@ -202,6 +202,11 @@ async function verify() {
     { hook: 'destructive-guard', input: '{"tool_input":{"command":"git checkout --force main"}}', expect: 2, desc: 'blocks git checkout --force' },
     { hook: 'secret-guard', input: '{"tool_input":{"command":"git add .env"}}', expect: 2, desc: 'blocks git add .env' },
     { hook: 'secret-guard', input: '{"tool_input":{"command":"git add src/app.js"}}', expect: 0, desc: 'allows git add safe files' },
+    { hook: 'api-error-alert', input: '{"stop_reason":"user"}', expect: 0, desc: 'ignores normal stops' },
+    { hook: 'destructive-guard', input: '{"tool_input":{"command":"cd /tmp && rm -rf /"}}', expect: 2, desc: 'blocks compound rm -rf' },
+    { hook: 'branch-guard', input: '{"tool_input":{"command":"git push --force origin feature"}}', expect: 2, desc: 'blocks force-push' },
+    { hook: 'destructive-guard', input: '{"tool_input":{"command":"git reset --hard HEAD~5"}}', expect: 2, desc: 'blocks git reset --hard' },
+    { hook: 'destructive-guard', input: '{"tool_input":{"command":"sudo rm -rf /var"}}', expect: 2, desc: 'blocks sudo + destructive' },
   ];
 
   let pass = 0, fail = 0;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "cc-safe-setup",
-  "version": "1.5.0",
-  "description": "One command to make Claude Code safe for autonomous operation. 7 hooks: destructive blocker, branch guard, force-push protection, secret leak prevention, syntax checks, and more.",
+  "version": "1.5.2",
+  "description": "One command to make Claude Code safe for autonomous operation. 8 hooks: destructive blocker, branch guard, force-push protection, secret leak prevention, syntax checks, and more.",
   "main": "index.mjs",
   "bin": {
     "cc-safe-setup": "index.mjs"