cc-safe-setup 1.9.5 → 1.9.6

package/README.md

@@ -152,6 +152,7 @@ Or browse all available examples in [`examples/`](examples/):
 - **auto-checkpoint.sh** — Auto-commit after every edit for rollback protection ([#34674](https://github.com/anthropics/claude-code/issues/34674))
 - **git-config-guard.sh** — Block `git config --global` modifications without consent ([#37201](https://github.com/anthropics/claude-code/issues/37201))
 - **deploy-guard.sh** — Block deploy commands when uncommitted changes exist ([#37314](https://github.com/anthropics/claude-code/issues/37314))
+- **network-guard.sh** — Warn on suspicious network commands sending file contents ([#37420](https://github.com/anthropics/claude-code/issues/37420))
 
 ## Learn More
 

package/examples/README.md

@@ -21,6 +21,7 @@ Custom hooks beyond the 8 built-in ones. Copy any file to `~/.claude/hooks/` and
 | **notify-waiting.sh** | Desktop notification when Claude waits for input | |
 | **protect-dotfiles.sh** | Block modifications to ~/.bashrc, ~/.aws/, ~/.ssh/ | [#37478](https://github.com/anthropics/claude-code/issues/37478) |
 | **scope-guard.sh** | Block file operations outside project directory | [#36233](https://github.com/anthropics/claude-code/issues/36233) |
+| **test-before-push.sh** | Block git push when tests haven't passed | [#36970](https://github.com/anthropics/claude-code/issues/36970) |
 
 ## Quick Start
 

package/examples/test-before-push.sh

@@ -0,0 +1,55 @@
+#!/bin/bash
+# test-before-push.sh — Block git push when tests haven't passed
+#
+# Solves: Claude pushing code that hasn't been tested (#36970)
+#
+# Checks for a test result marker file. If tests haven't been run
+# (or failed), blocks the push.
+#
+# Usage: Add to settings.json as a PreToolUse hook
+#
+# {
+#   "hooks": {
+#     "PreToolUse": [{
+#       "matcher": "Bash",
+#       "hooks": [{ "type": "command", "command": "~/.claude/hooks/test-before-push.sh" }]
+#     }]
+#   }
+# }
+
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+
+[[ -z "$COMMAND" ]] && exit 0
+
+# Only check git push commands
+if ! echo "$COMMAND" | grep -qE '^\s*git\s+push\b'; then
+    exit 0
+fi
+
+# Skip if no test framework is detected
+HAS_TESTS=0
+[ -f "package.json" ] && grep -q '"test"' package.json 2>/dev/null && HAS_TESTS=1
+[ -f "pytest.ini" ] || [ -f "pyproject.toml" ] && HAS_TESTS=1
+[ -f "Makefile" ] && grep -q "^test:" Makefile 2>/dev/null && HAS_TESTS=1
+
+if (( HAS_TESTS == 0 )); then
+    exit 0  # No test framework detected, allow push
+fi
+
+# Check for test result marker
+MARKER="/tmp/cc-tests-passed-$(pwd | md5sum | cut -c1-8)"
+if [ -f "$MARKER" ]; then
+    # Tests passed within the last hour
+    MARKER_AGE=$(( $(date +%s) - $(stat -c %Y "$MARKER" 2>/dev/null || echo 0) ))
+    if (( MARKER_AGE < 3600 )); then
+        exit 0  # Tests passed recently
+    fi
+fi
+
+echo "BLOCKED: Run tests before pushing." >&2
+echo "Tests haven't been run (or results are stale)." >&2
+echo "" >&2
+echo "Run your test suite, then try pushing again." >&2
+echo "The test runner should create: $MARKER" >&2
+exit 2

package/index.mjs

@@ -293,6 +293,7 @@ function examples() {
     'git-config-guard.sh': 'Block git config --global modifications',
     'deploy-guard.sh': 'Block deploy when uncommitted changes exist',
     'network-guard.sh': 'Warn on suspicious network commands (data exfiltration)',
+    'test-before-push.sh': 'Block git push when tests have not passed',
   };
 
   console.log();

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "cc-safe-setup",
-  "version": "1.9.5",
-  "description": "One command to make Claude Code safe for autonomous operation. 8 built-in hooks + 17 installable examples. Destructive blocker, branch guard, database wipe protection, dotfile guard, and more.",
+  "version": "1.9.6",
+  "description": "One command to make Claude Code safe for autonomous operation. 8 built-in hooks + 18 installable examples. Destructive blocker, branch guard, database wipe protection, dotfile guard, and more.",
   "main": "index.mjs",
   "bin": {
     "cc-safe-setup": "index.mjs"