cc-safe-setup 15.0.0 → 16.0.0

package/README.md

@@ -6,7 +6,7 @@
 
 **One command to make Claude Code safe for autonomous operation.** [日本語](docs/README.ja.md)
 
-8 built-in + 124 examples = **144 hooks**. 44 CLI commands. 561 tests. 5 languages. [**Hub**](https://yurukusa.github.io/cc-safe-setup/hub.html) · [Wizard](https://yurukusa.github.io/cc-safe-setup/wizard.html) · [Cheat Sheet](https://yurukusa.github.io/cc-safe-setup/hooks-cheatsheet.html) · [Builder](https://yurukusa.github.io/cc-safe-setup/builder.html) · [FAQ](https://yurukusa.github.io/cc-safe-setup/faq.html) · [Examples](https://yurukusa.github.io/cc-safe-setup/by-example.html) · [Matrix](https://yurukusa.github.io/cc-safe-setup/matrix.html) · [Playground](https://yurukusa.github.io/cc-hook-registry/playground.html)
+8 built-in + 124 examples = **150 hooks**. 44 CLI commands. 561 tests. 5 languages. [**Hub**](https://yurukusa.github.io/cc-safe-setup/hub.html) · [Wizard](https://yurukusa.github.io/cc-safe-setup/wizard.html) · [Cheat Sheet](https://yurukusa.github.io/cc-safe-setup/hooks-cheatsheet.html) · [Builder](https://yurukusa.github.io/cc-safe-setup/builder.html) · [FAQ](https://yurukusa.github.io/cc-safe-setup/faq.html) · [Examples](https://yurukusa.github.io/cc-safe-setup/by-example.html) · [Matrix](https://yurukusa.github.io/cc-safe-setup/matrix.html) · [Playground](https://yurukusa.github.io/cc-hook-registry/playground.html)
 
 ```bash
 npx cc-safe-setup

package/examples/auto-push-worktree.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+# auto-push-worktree.sh — Auto-push worktree branches before session end
+# TRIGGER: Stop  MATCHER: ""
+# Born from: https://github.com/anthropics/claude-code/issues/38287
+BRANCH=$(git branch --show-current 2>/dev/null)
+[[ "$BRANCH" == worktree-* ]] || exit 0
+UNMERGED=$(git log --oneline origin/main..$BRANCH 2>/dev/null | wc -l)
+if [ "$UNMERGED" -gt 0 ]; then
+    git push origin $BRANCH 2>/dev/null && \
+        echo "Auto-pushed $UNMERGED commit(s) from $BRANCH" >&2
+fi
+exit 0

package/examples/gitignore-check.sh

@@ -0,0 +1,8 @@
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+echo "$COMMAND" | grep -qE '^\s*git\s+add' || exit 0
+if [ ! -f ".gitignore" ] || [ ! -s ".gitignore" ]; then
+    echo "WARNING: .gitignore is missing or empty." >&2
+    echo "Create one before staging files." >&2
+fi
+exit 0

package/examples/no-root-write.sh

@@ -0,0 +1,5 @@
+FILE=$(cat | jq -r '.tool_input.file_path // empty' 2>/dev/null)
+[ -z "$FILE" ] && exit 0
+case "$FILE" in /etc/*|/usr/*|/bin/*|/sbin/*|/boot/*|/sys/*|/proc/*)
+    echo "BLOCKED: Write to system directory" >&2; exit 2 ;; esac
+exit 0

package/examples/package-json-guard.sh

@@ -0,0 +1,6 @@
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+if echo "$COMMAND" | grep -qE '\brm\b.*package\.json'; then
+    echo "BLOCKED: Deleting package.json" >&2; exit 2
+fi
+exit 0

package/examples/protect-commands-dir.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+# protect-commands-dir.sh — Backup .claude/commands/ on session start
+# TRIGGER: SessionStart  MATCHER: ""
+# Born from: https://github.com/anthropics/claude-code/issues/38326
+CMDS=".claude/commands"
+BACKUP=".claude/commands-backup"
+[ -d "$CMDS" ] || exit 0
+mkdir -p "$BACKUP" 2>/dev/null
+cp "$CMDS"/*.md "$BACKUP/" 2>/dev/null
+COUNT=$(ls "$CMDS"/*.md 2>/dev/null | wc -l)
+echo "Backed up $COUNT command files" >&2
+exit 0

package/examples/worktree-cleanup-guard.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+# worktree-cleanup-guard.sh — Warn on worktree removal with unmerged commits
+# TRIGGER: PreToolUse  MATCHER: "Bash"
+# Born from: https://github.com/anthropics/claude-code/issues/38287
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+echo "$COMMAND" | grep -qE 'git\s+worktree\s+(remove|prune)' || exit 0
+for branch in $(git branch --list 'worktree-*' 2>/dev/null); do
+    UNMERGED=$(git log --oneline main..$branch 2>/dev/null | wc -l)
+    if [ "$UNMERGED" -gt 0 ]; then
+        echo "WARNING: $branch has $UNMERGED unmerged commit(s)." >&2
+        echo "Push first: git push origin $branch" >&2
+    fi
+done
+exit 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safe-setup",
-  "version": "15.0.0",
+  "version": "16.0.0",
   "description": "One command to make Claude Code safe. 59 hooks (8 built-in + 51 examples). 26 CLI commands: dashboard, create, audit, lint, diff, migrate, compare, generate-ci. 284 tests.",
   "main": "index.mjs",
   "bin": {