cc-safe-setup 28.3.3 → 28.3.5

package/README.md

@@ -64,7 +64,7 @@ Claude Code ships with no safety hooks by default. This tool fixes that.
 
 Each hook exists because a real incident happened without it.
 
-## All 26 Commands
+## All 45 Commands
 
 | Command | What It Does |
 |---------|-------------|
@@ -87,7 +87,7 @@ Each hook exists because a real incident happened without it.
 | `--scan [--apply]` | Tech stack detection |
 | `--export / --import` | Team config sharing |
 | `--verify` | Test each hook |
-| `--install-example <name>` | Install from 118 examples |
+| `--install-example <name>` | Install from 316 examples |
 | `--examples [filter]` | Browse examples by keyword |
 | `--full` | All-in-one setup |
 | `--status` | Check installed hooks |
@@ -107,6 +107,11 @@ Each hook exists because a real incident happened without it.
 | `--why <hook>` | Show real incident behind hook |
 | `--migrate-from <tool>` | Migrate from other hook tools |
 | `--diff-hooks [path]` | Compare hook configurations |
+| `--init-project` | Full project setup (hooks + CLAUDE.md + CI) |
+| `--score` | CI-friendly safety score (exit 1 if below threshold) |
+| `--test-hook <name>` | Test a specific hook with sample input |
+| `--changelog` | Show what changed in each version |
+| `--report` | Generate safety report |
 | `--help` | Show help |
 
 ## Quick Start by Scenario

package/examples/check-git-hooks-compat.sh

@@ -0,0 +1,18 @@
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+echo "$COMMAND" | grep -qE '(git\s+commit|git\s+push|husky|lint-staged|pre-commit)' || exit 0
+if [ -d ".git/hooks" ]; then
+    ACTIVE=$(find .git/hooks -maxdepth 1 -type f -executable ! -name "*.sample" 2>/dev/null | wc -l)
+    if [ "$ACTIVE" -gt 0 ]; then
+        echo "NOTE: $ACTIVE active git hooks found in .git/hooks/" >&2
+        echo "Ensure CC hooks and git hooks don't duplicate checks." >&2
+    fi
+fi
+if [ -d ".husky" ]; then
+    HUSKY=$(find .husky -maxdepth 1 -type f -executable 2>/dev/null | wc -l)
+    if [ "$HUSKY" -gt 0 ]; then
+        echo "NOTE: Husky detected with $HUSKY hooks. CC hooks run separately." >&2
+    fi
+fi
+exit 0

package/examples/no-large-commit.sh

@@ -0,0 +1,14 @@
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+echo "$COMMAND" | grep -qE '^\s*git\s+commit\b' || exit 0
+STAGED=$(git diff --cached --name-only 2>/dev/null | wc -l)
+MAX=${CC_MAX_COMMIT_FILES:-20}
+if [ "$STAGED" -gt "$MAX" ]; then
+    echo "WARNING: Committing $STAGED files (threshold: $MAX)." >&2
+    echo "Consider splitting into smaller, focused commits." >&2
+    echo "Staged files:" >&2
+    git diff --cached --name-only 2>/dev/null | head -10 >&2
+    [ "$STAGED" -gt 10 ] && echo "... and $((STAGED - 10)) more" >&2
+fi
+exit 0

package/examples/no-sleep-in-hooks.sh

@@ -0,0 +1,14 @@
+INPUT=$(cat)
+FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
+[ -z "$FILE" ] && exit 0
+case "$FILE" in
+    */.claude/hooks/*.sh|*/hooks/*.sh) ;;
+    *) exit 0 ;;
+esac
+[ ! -f "$FILE" ] && exit 0
+if grep -qE '^\s*sleep\s+[0-9]' "$FILE" 2>/dev/null; then
+    echo "WARNING: Hook contains sleep command: $FILE" >&2
+    echo "Sleep in hooks causes Claude Code to hang or timeout." >&2
+    echo "Remove sleep calls or use non-blocking alternatives." >&2
+fi
+exit 0

package/index.mjs

@@ -2391,7 +2391,7 @@ async function shield() {
   if (existsSync(join(cwd, '.env'))) extras.push('env-source-guard');
 
   // Always include these for maximum safety
-  extras.push('scope-guard', 'no-sudo-guard', 'protect-claudemd');
+  extras.push('scope-guard', 'no-sudo-guard', 'protect-claudemd', 'memory-write-guard', 'skill-gate', 'auto-approve-test', 'auto-approve-readonly');
 
   for (const ex of extras) {
     const exPath = join(__dirname, 'examples', `${ex}.sh`);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "cc-safe-setup",
-  "version": "28.3.3",
-  "description": "One command to make Claude Code safe. 324 hooks (8 built-in + 316 examples). 45 CLI commands. 941 tests. 5 languages.",
+  "version": "28.3.5",
+  "description": "One command to make Claude Code safe. 327 hooks (8 built-in + 319 examples). 45 CLI commands. 941 tests. 5 languages.",
   "main": "index.mjs",
   "bin": {
     "cc-safe-setup": "index.mjs"