cc-safe-setup 12.1.0 → 12.3.0

package/examples/kubernetes-guard.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+# kubernetes-guard.sh — Block destructive kubectl commands
+# TRIGGER: PreToolUse  MATCHER: "Bash"
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+if echo "$COMMAND" | grep -qE '\bkubectl\s+delete\s+(namespace|ns|node)\b'; then
+    echo "BLOCKED: kubectl delete namespace/node is highly destructive" >&2
+    exit 2
+fi
+if echo "$COMMAND" | grep -qE '\bkubectl\s+delete\s+.*--all\b'; then
+    echo "WARNING: kubectl delete --all affects all resources in scope" >&2
+fi
+exit 0

package/examples/post-compact-restore.sh

@@ -0,0 +1,36 @@
+#!/bin/bash
+# ================================================================
+# post-compact-restore.sh — Restore context after /compact
+# ================================================================
+# PURPOSE:
+#   After /compact, Claude loses track of the current branch,
+#   recent files, and task state. This Stop hook outputs key
+#   state info to stderr so Claude sees it in the next turn.
+#
+# TRIGGER: Stop  MATCHER: ""
+#
+# Reads .claude/session-snapshot.md if it exists (from context-snapshot).
+# Falls back to git state.
+# ================================================================
+
+# Check if we're in a post-compact state (tool count reset or snapshot exists)
+SNAPSHOT=".claude/session-snapshot.md"
+
+if [ -f "$SNAPSHOT" ]; then
+    echo "" >&2
+    echo "=== Session State (from snapshot) ===" >&2
+    cat "$SNAPSHOT" | head -20 >&2
+    echo "===================================" >&2
+    exit 0
+fi
+
+# Fallback: basic git state
+BRANCH=$(git branch --show-current 2>/dev/null)
+if [ -n "$BRANCH" ]; then
+    DIRTY=$(git status --porcelain 2>/dev/null | wc -l)
+    LAST=$(git log --oneline -1 2>/dev/null)
+    echo "" >&2
+    echo "Branch: $BRANCH | Uncommitted: $DIRTY | Last: $LAST" >&2
+fi
+
+exit 0

package/examples/ssh-key-protect.sh

@@ -0,0 +1,34 @@
+#!/bin/bash
+# ================================================================
+# ssh-key-protect.sh — Block reading/copying SSH private keys
+# ================================================================
+# PURPOSE:
+#   Prevents Claude from reading SSH private keys (id_rsa, id_ed25519)
+#   or copying them elsewhere. A prompt injection in a cloned repo
+#   could instruct Claude to exfiltrate keys.
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
+# ================================================================
+
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+
+# Detect reading SSH keys
+if echo "$COMMAND" | grep -qE '\b(cat|head|tail|less|more|base64|xxd)\s+.*\.(ssh|gnupg)/(id_|.*_key)'; then
+    echo "BLOCKED: Reading SSH/GPG private key" >&2
+    exit 2
+fi
+
+# Detect copying SSH keys
+if echo "$COMMAND" | grep -qE '\b(cp|mv|scp|rsync)\s+.*\.ssh/(id_|.*_key)'; then
+    echo "BLOCKED: Copying SSH private key" >&2
+    exit 2
+fi
+
+# Detect encoding keys for exfiltration
+if echo "$COMMAND" | grep -qE 'base64.*\.ssh|\.ssh.*base64|cat.*id_rsa|cat.*id_ed25519'; then
+    echo "BLOCKED: Potential SSH key exfiltration" >&2
+    exit 2
+fi
+
+exit 0

package/examples/terraform-guard.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+# terraform-guard.sh — Warn before terraform destroy/apply
+# TRIGGER: PreToolUse  MATCHER: "Bash"
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+if echo "$COMMAND" | grep -qE '\bterraform\s+destroy\b'; then
+    echo "BLOCKED: terraform destroy is irreversible" >&2
+    exit 2
+fi
+if echo "$COMMAND" | grep -qE '\bterraform\s+apply\b' && ! echo "$COMMAND" | grep -q '\-auto-approve'; then
+    echo "NOTE: terraform apply detected. Review the plan carefully." >&2
+fi
+exit 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safe-setup",
-  "version": "12.1.0",
+  "version": "12.3.0",
   "description": "One command to make Claude Code safe. 59 hooks (8 built-in + 51 examples). 26 CLI commands: dashboard, create, audit, lint, diff, migrate, compare, generate-ci. 284 tests.",
   "main": "index.mjs",
   "bin": {