cc-safe-setup 10.7.0 → 10.8.0

package/index.mjs

@@ -365,6 +365,21 @@ function examples() {
       'git-config-guard.sh': 'Block git config --global modifications',
       'case-sensitive-guard.sh': 'Detect case-insensitive FS collisions (exFAT/NTFS/HFS+)',
       'compound-command-approver.sh': 'Auto-approve safe compound commands (cd && git log)',
+      'uncommitted-work-guard.sh': 'Block destructive git with uncommitted changes',
+      'no-deploy-friday.sh': 'Block deploys on Fridays',
+      'work-hours-guard.sh': 'Restrict risky operations outside business hours',
+      'symlink-guard.sh': 'Detect symlink/junction traversal in rm targets',
+      'env-source-guard.sh': 'Block sourcing .env files into shell',
+      'strict-allowlist.sh': 'Only allow explicitly permitted commands',
+      'overwrite-guard.sh': 'Warn before overwriting existing files',
+      'memory-write-guard.sh': 'Log writes to ~/.claude/ directory',
+      'worktree-guard.sh': 'Warn on destructive git in worktrees',
+      'no-curl-upload.sh': 'Warn on curl POST/upload commands',
+      'no-port-bind.sh': 'Warn on network port binding',
+      'docker-prune-guard.sh': 'Warn before docker system prune',
+      'pip-venv-guard.sh': 'Warn on pip install outside venv',
+      'no-git-amend-push.sh': 'Warn on amending pushed commits',
+      'typosquat-guard.sh': 'Detect npm/pip typosquatting attacks',
     },
     'Auto-Approve': {
       'auto-approve-build.sh': 'Auto-approve npm/yarn/cargo/go build, test, lint',
@@ -372,6 +387,12 @@ function examples() {
       'auto-approve-git-read.sh': 'Auto-approve git status/log/diff even with -C flags',
       'auto-approve-python.sh': 'Auto-approve pytest, mypy, ruff, black, isort',
       'auto-approve-ssh.sh': 'Auto-approve safe SSH commands (uptime, whoami)',
+      'auto-approve-go.sh': 'Auto-approve go build/test/vet/fmt',
+      'auto-approve-cargo.sh': 'Auto-approve cargo build/test/clippy',
+      'auto-approve-make.sh': 'Auto-approve make build/test/lint',
+      'auto-approve-gradle.sh': 'Auto-approve gradle/gradlew build/test',
+      'auto-approve-maven.sh': 'Auto-approve mvn compile/test/verify',
+      'permission-cache.sh': 'Auto-approve previously approved commands in session',
     },
     'Quality': {
       'branch-name-check.sh': 'Warn on non-conventional branch names',
@@ -381,6 +402,28 @@ function examples() {
       'large-file-guard.sh': 'Warn when Write creates files over 500KB',
       'todo-check.sh': 'Warn when committing files with TODO/FIXME markers',
       'verify-before-commit.sh': 'Block commit unless tests passed recently',
+      'test-deletion-guard.sh': 'Warn when removing test assertions',
+      'fact-check-gate.sh': 'Warn when docs reference unread source files',
+      'conflict-marker-guard.sh': 'Block commits with merge conflict markers',
+      'commit-quality-gate.sh': 'Warn on vague commit messages',
+      'commit-scope-guard.sh': 'Warn when committing 15+ files at once',
+      'require-issue-ref.sh': 'Warn when commit lacks issue reference',
+      'no-console-log.sh': 'Warn on console.log in production code',
+      'no-eval.sh': 'Warn on eval() usage (security risk)',
+      'no-wildcard-import.sh': 'Warn on import * patterns',
+      'no-todo-ship.sh': 'Warn on TODO/FIXME in commits',
+      'test-coverage-guard.sh': 'Warn when code grows without tests',
+      'ci-skip-guard.sh': 'Warn on [skip ci] and --no-verify',
+      'debug-leftover-guard.sh': 'Detect debugger/pdb/binding.pry in staged code',
+      'typescript-strict-guard.sh': 'Warn when tsconfig strict mode disabled',
+      'sensitive-regex-guard.sh': 'Detect ReDoS-vulnerable regex patterns',
+      'git-author-guard.sh': 'Verify git author is configured',
+      'git-blame-context.sh': 'Show file ownership before major edits',
+      'import-cycle-warn.sh': 'Detect circular import patterns',
+      'env-drift-guard.sh': 'Detect .env vs .env.example mismatch',
+      'package-script-guard.sh': 'Warn when package.json scripts change',
+      'lockfile-guard.sh': 'Warn when lockfiles modified in commits',
+      'git-lfs-guard.sh': 'Suggest Git LFS for large files',
     },
     'Recovery': {
       'auto-checkpoint.sh': 'Auto-commit after edits for rollback protection',
@@ -410,6 +453,28 @@ function examples() {
       'max-file-count-guard.sh': 'Warn when 20+ files created per session',
       'protect-claudemd.sh': 'Block edits to CLAUDE.md and settings files',
       'reinject-claudemd.sh': 'Re-inject CLAUDE.md rules after compaction',
+      'token-budget-guard.sh': 'Block when estimated cost exceeds budget',
+      'output-length-guard.sh': 'Warn when tool output exceeds 50KB',
+      'error-memory-guard.sh': 'Block retries of already-failed commands',
+      'parallel-edit-guard.sh': 'Detect concurrent edits to same file',
+      'large-read-guard.sh': 'Warn before catting large files',
+      'context-snapshot.sh': 'Auto-save session state before context loss',
+      'compact-reminder.sh': 'Suggest /compact after N tool calls',
+      'revert-helper.sh': 'Show undo command when session ends',
+      'hardcoded-secret-detector.sh': 'Detect AWS keys, passwords, JWT in code',
+      'prompt-injection-guard.sh': 'Detect injection patterns in tool output',
+      'verify-before-done.sh': 'Warn when committing without running tests',
+      'disk-space-guard.sh': 'Warn when disk space is low',
+      'changelog-reminder.sh': 'Remind to update CHANGELOG on version bump',
+      'rate-limit-guard.sh': 'Detect rapid-fire tool calls',
+      'stale-env-guard.sh': 'Warn when .env is 90+ days old',
+      'node-version-guard.sh': 'Detect .nvmrc version mismatch',
+      'auto-stash-before-pull.sh': 'Warn before pull/merge with dirty tree',
+      'license-check.sh': 'Note missing license headers in source files',
+      'backup-before-refactor.sh': 'Auto-stash before large refactors',
+      'file-size-limit.sh': 'Block creating files over 1MB',
+      'branch-naming-convention.sh': 'Enforce feat/fix/chore branch prefixes',
+      'pr-description-check.sh': 'Ensure PRs have description body',
     },
   };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safe-setup",
-  "version": "10.7.0",
+  "version": "10.8.0",
   "description": "One command to make Claude Code safe. 59 hooks (8 built-in + 51 examples). 26 CLI commands: dashboard, create, audit, lint, diff, migrate, compare, generate-ci. 284 tests.",
   "main": "index.mjs",
   "bin": {