cc-safe-setup 11.1.0 → 11.3.0

package/examples/api-endpoint-guard.sh

@@ -0,0 +1,31 @@
+#!/bin/bash
+# ================================================================
+# api-endpoint-guard.sh — Warn on requests to internal/sensitive APIs
+# ================================================================
+# PURPOSE:
+#   Claude sometimes sends requests to localhost, internal APIs,
+#   or metadata endpoints that could leak credentials or cause
+#   unintended side effects.
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
+# ================================================================
+
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+
+# Only check curl/wget/http commands
+echo "$COMMAND" | grep -qE '^\s*(curl|wget|http|fetch)' || exit 0
+
+# Check for internal/sensitive URLs
+if echo "$COMMAND" | grep -qiE '(169\.254\.169\.254|metadata\.google|metadata\.aws)'; then
+    echo "BLOCKED: Request to cloud metadata endpoint detected." >&2
+    echo "This could leak IAM credentials." >&2
+    exit 2
+fi
+
+if echo "$COMMAND" | grep -qiE 'localhost:[0-9]+/(admin|api/internal|_debug|actuator)'; then
+    echo "WARNING: Request to internal API endpoint." >&2
+    echo "Verify this is intentional." >&2
+fi
+
+exit 0

package/examples/auto-approve-readonly.sh

@@ -0,0 +1,53 @@
+#!/bin/bash
+# ================================================================
+# auto-approve-readonly.sh — Auto-approve all read-only commands
+# ================================================================
+# PURPOSE:
+#   The #1 complaint: permission prompts for cat, ls, grep, find.
+#   This hook auto-approves any command that only reads data,
+#   while letting destructive commands go through normal approval.
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
+# ================================================================
+
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+
+# Extract the base command (first word, ignoring env vars and cd prefixes)
+BASE=$(echo "$COMMAND" | sed 's/^[A-Z_]*=[^ ]* //g; s/^cd [^;]*[;&|]* //' | awk '{print $1}' | sed 's|.*/||')
+
+# Read-only commands that never modify anything
+case "$BASE" in
+    cat|head|tail|less|more|wc|grep|rg|ag|ack|find|locate|\
+    ls|ll|dir|tree|stat|file|which|whereis|type|realpath|\
+    date|uptime|uname|hostname|whoami|id|groups|env|printenv|\
+    pwd|df|du|free|top|ps|pgrep|lsof|netstat|ss|\
+    git-log|git-diff|git-show|git-status|git-branch|git-remote|git-tag|\
+    jq|yq|python3-c|node-e|ruby-e|\
+    npm-ls|npm-list|npm-info|npm-view|npm-outdated|\
+    pip-list|pip-show|pip-freeze|\
+    cargo-tree|go-list|go-doc)
+        echo '{"decision":"approve","reason":"Read-only command"}'
+        exit 0
+        ;;
+esac
+
+# git subcommands that are read-only
+if echo "$COMMAND" | grep -qE '^\s*git\s+(status|log|diff|show|branch|remote|tag\s+-l|blame|shortlog|describe|rev-parse|ls-files|ls-tree)\b'; then
+    echo '{"decision":"approve","reason":"Read-only git command"}'
+    exit 0
+fi
+
+# Commands piped to read-only output (anything | head, | grep, etc.)
+if echo "$COMMAND" | grep -qE '\|\s*(head|tail|grep|wc|sort|uniq|tr|cut|awk|sed|less|more)\s'; then
+    # Only approve if the source command is also read-only
+    FIRST=$(echo "$COMMAND" | cut -d'|' -f1 | awk '{print $1}')
+    case "$FIRST" in
+        cat|head|tail|grep|find|ls|git|npm|pip|cargo|go)
+            echo '{"decision":"approve","reason":"Read-only pipeline"}'
+            exit 0
+            ;;
+    esac
+fi
+
+exit 0

package/examples/crontab-guard.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+# crontab-guard.sh — Warn before modifying crontab
+# TRIGGER: PreToolUse  MATCHER: "Bash"
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+if echo "$COMMAND" | grep -qE '\bcrontab\s+(-r|-e|-)'; then
+  echo "WARNING: Modifying crontab. Current entries:" >&2
+  crontab -l 2>/dev/null | wc -l | xargs -I{} echo "  {} existing cron jobs" >&2
+  echo "  Use 'crontab -l' to review before editing." >&2
+fi
+exit 0

package/examples/dependency-version-pin.sh

@@ -0,0 +1,36 @@
+#!/bin/bash
+# ================================================================
+# dependency-version-pin.sh — Warn on unpinned dependency versions
+# ================================================================
+# PURPOSE:
+#   Claude adds dependencies with ^ or ~ ranges. Without a lockfile,
+#   this means different installs get different versions. This hook
+#   warns when package.json is edited to add range-based versions.
+#
+# TRIGGER: PostToolUse  MATCHER: "Edit"
+# ================================================================
+
+INPUT=$(cat)
+FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
+[ -z "$FILE" ] && exit 0
+case "$FILE" in */package.json|package.json) ;; *) exit 0 ;; esac
+
+NEW=$(echo "$INPUT" | jq -r '.tool_input.new_string // empty' 2>/dev/null)
+[ -z "$NEW" ] && exit 0
+
+# Check for range specifiers in new content
+RANGES=$(echo "$NEW" | grep -oE '"\^[0-9]|"~[0-9]' | wc -l)
+if [ "$RANGES" -gt 0 ]; then
+    # Check if lockfile exists
+    HAS_LOCK=0
+    [ -f "package-lock.json" ] && HAS_LOCK=1
+    [ -f "yarn.lock" ] && HAS_LOCK=1
+    [ -f "pnpm-lock.yaml" ] && HAS_LOCK=1
+
+    if [ "$HAS_LOCK" -eq 0 ]; then
+        echo "WARNING: $RANGES dependency(ies) with version ranges (^ or ~) but no lockfile." >&2
+        echo "Pin exact versions or add a lockfile for reproducible builds." >&2
+    fi
+fi
+
+exit 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safe-setup",
-  "version": "11.1.0",
+  "version": "11.3.0",
   "description": "One command to make Claude Code safe. 59 hooks (8 built-in + 51 examples). 26 CLI commands: dashboard, create, audit, lint, diff, migrate, compare, generate-ci. 284 tests.",
   "main": "index.mjs",
   "bin": {