cc-safe-setup 1.8.3 → 1.8.5

package/README.md

@@ -142,6 +142,7 @@ Need custom hooks beyond the 8 built-in ones? See [`examples/`](examples/) for r
 - **auto-snapshot.sh** — Auto-save file snapshots before edits for rollback protection ([#37386](https://github.com/anthropics/claude-code/issues/37386) [#37457](https://github.com/anthropics/claude-code/issues/37457))
 - **allowlist.sh** — Block everything not explicitly approved — inverse permission model ([#37471](https://github.com/anthropics/claude-code/issues/37471))
 - **protect-dotfiles.sh** — Block modifications to `~/.bashrc`, `~/.aws/`, `~/.ssh/` and chezmoi without diff ([#37478](https://github.com/anthropics/claude-code/issues/37478))
+- **scope-guard.sh** — Block file operations outside project directory — absolute paths, home, parent escapes ([#36233](https://github.com/anthropics/claude-code/issues/36233))
 
 ## Learn More
 

package/examples/README.md

@@ -16,6 +16,7 @@ Custom hooks beyond the 8 built-in ones. Copy any file to `~/.claude/hooks/` and
 | **enforce-tests.sh** | Warn when source changes without test changes | |
 | **notify-waiting.sh** | Desktop notification when Claude waits for input | |
 | **protect-dotfiles.sh** | Block modifications to ~/.bashrc, ~/.aws/, ~/.ssh/ | [#37478](https://github.com/anthropics/claude-code/issues/37478) |
+| **scope-guard.sh** | Block file operations outside project directory | [#36233](https://github.com/anthropics/claude-code/issues/36233) |
 
 ## Quick Start
 

package/examples/block-database-wipe.sh

@@ -6,10 +6,10 @@
 #   - Django: flush, sqlflush
 #   - Rails: db:drop, db:reset
 #   - Raw SQL: DROP DATABASE, TRUNCATE
+#   - Prisma: migrate reset, db push --force-reset
 #   - PostgreSQL: dropdb
 #
-# Born from GitHub Issue #37405 (SQLite database wiped)
-# and #37439 (Laravel migrate:fresh on production DB)
+# Born from GitHub Issues #37405, #37439, #34729
 #
 # Usage: Add to settings.json as a PreToolUse hook
 #
@@ -61,6 +61,12 @@ if echo "$COMMAND" | grep -qiE 'DROP\s+(DATABASE|TABLE|SCHEMA)|TRUNCATE\s+TABLE|
     exit 2
 fi
 
+# Prisma destructive commands
+if echo "$COMMAND" | grep -qiE 'prisma\s+migrate\s+reset|prisma\s+db\s+push\s+--force-reset'; then
+    echo "BLOCKED: Destructive Prisma database command" >&2
+    exit 2
+fi
+
 # PostgreSQL CLI
 if echo "$COMMAND" | grep -qE '^\s*dropdb\s'; then
     echo "BLOCKED: dropdb command" >&2

package/examples/scope-guard.sh

@@ -0,0 +1,56 @@
+#!/bin/bash
+# scope-guard.sh — Block file operations outside the project directory
+#
+# Solves: Claude Code deleting files on Desktop, in ~/Applications,
+# or anywhere outside the working directory (#36233, #36339)
+#
+# Usage: Add to settings.json as a PreToolUse hook
+#
+# {
+#   "hooks": {
+#     "PreToolUse": [{
+#       "matcher": "Bash",
+#       "hooks": [{ "type": "command", "command": "~/.claude/hooks/scope-guard.sh" }]
+#     }]
+#   }
+# }
+
+INPUT=$(cat)
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null)
+CMD=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+
+[[ "$TOOL" != "Bash" ]] && exit 0
+[[ -z "$CMD" ]] && exit 0
+
+# Skip string output commands
+if echo "$CMD" | grep -qE '^\s*(echo|printf|cat\s*<<)'; then
+    exit 0
+fi
+
+# Check for destructive commands with paths outside project
+if echo "$CMD" | grep -qE '\brm\b.*(-[a-zA-Z]*[rf]|--(recursive|force))'; then
+    # Block absolute paths
+    if echo "$CMD" | grep -qE '\brm\b[^|;]*\s+/[a-zA-Z]'; then
+        echo "BLOCKED: rm with absolute path" >&2
+        echo "Command: $CMD" >&2
+        exit 2
+    fi
+    # Block home directory paths
+    if echo "$CMD" | grep -qE '\brm\b[^|;]*\s+~/'; then
+        echo "BLOCKED: rm targeting home directory" >&2
+        exit 2
+    fi
+    # Block parent directory escapes
+    if echo "$CMD" | grep -qE '\brm\b[^|;]*\s+\.\./'; then
+        echo "BLOCKED: rm escaping project directory" >&2
+        exit 2
+    fi
+fi
+
+# Block targeting well-known user/system directories
+if echo "$CMD" | grep -qiE '\b(rm|del|Remove-Item)\b.*(Desktop|Applications|Documents|Downloads|Library|Keychain|\.aws|\.ssh)'; then
+    echo "BLOCKED: targeting system/user directory" >&2
+    exit 2
+fi
+
+exit 0

package/index.mjs

@@ -265,6 +265,7 @@ function examples() {
     'auto-snapshot.sh': 'Auto-save file snapshots before edits (rollback protection)',
     'allowlist.sh': 'Block everything not in allowlist (inverse permission model)',
     'protect-dotfiles.sh': 'Block modifications to ~/.bashrc, ~/.aws/, ~/.ssh/',
+    'scope-guard.sh': 'Block file operations outside project directory',
   };
 
   console.log();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safe-setup",
-  "version": "1.8.3",
+  "version": "1.8.5",
   "description": "One command to make Claude Code safe for autonomous operation. 8 hooks: destructive blocker, branch guard, force-push protection, secret leak prevention, syntax checks, and more.",
   "main": "index.mjs",
   "bin": {