cc-safe-setup 29.2.0 → 29.3.1

package/README.md

@@ -87,7 +87,7 @@ Each hook exists because a real incident happened without it.
 | `--scan [--apply]` | Tech stack detection |
 | `--export / --import` | Team config sharing |
 | `--verify` | Test each hook |
-| `--install-example <name>` | Install from 336 examples |
+| `--install-example <name>` | Install from 338 examples |
 | `--examples [filter]` | Browse examples by keyword |
 | `--full` | All-in-one setup |
 | `--status` | Check installed hooks |
@@ -137,6 +137,9 @@ Each hook exists because a real incident happened without it.
 | Diagnose why hooks aren't working | `npx cc-safe-setup --doctor` |
 | Preview how hooks react to a command | `npx cc-safe-setup --simulate "git push origin main"` |
 | Protect a specific file from edits | `npx cc-safe-setup --protect .env` |
+| Stop .git/ write prompts | `npx cc-safe-setup --install-example allow-git-hooks-dir` |
+| Auto-approve compound git commands | `npx cc-safe-setup --install-example auto-approve-compound-git` |
+| Detect prompt injection patterns | `npx cc-safe-setup --install-example prompt-injection-detector` |
 | Define rules in YAML, compile to hooks | `npx cc-safe-setup --rules rules.yaml` |
 | Validate all hook scripts are correct | `npx cc-safe-setup --validate` |
 | Maximum protection mode | `npx cc-safe-setup --safe-mode` |

package/index.mjs

@@ -606,15 +606,18 @@ async function installExample(name) {
   let trigger = 'PreToolUse';
   let matcher = 'Bash';
 
-  // Detect trigger from header comments
-  if (content.includes('TRIGGER: PermissionRequest') || content.match(/^#.*PermissionRequest hook/m)) trigger = 'PermissionRequest';
-  else if (content.includes('TRIGGER: PostToolUse') || content.includes('PostToolUse')) trigger = 'PostToolUse';
-  else if (content.includes('TRIGGER: Notification') || content.includes('Notification')) trigger = 'Notification';
-  else if (content.includes('TRIGGER: Stop') || content.includes('Stop')) trigger = 'Stop';
-  else if (content.includes('TRIGGER: SessionStart') || content.includes('SessionStart')) trigger = 'SessionStart';
-  else if (content.includes('TRIGGER: PreCompact') || content.includes('PreCompact')) trigger = 'PreCompact';
-  else if (content.includes('TRIGGER: SessionEnd') || content.includes('SessionEnd')) trigger = 'SessionEnd';
-  else if (content.includes('TRIGGER: UserPromptSubmit') || content.match(/^#.*UserPromptSubmit hook/m)) trigger = 'UserPromptSubmit';
+  // Detect trigger from header comments (case-insensitive for "Trigger:" prefix)
+  const triggerMatch = content.match(/^#\s*[Tt]rigger:\s*(\S+)/m);
+  if (triggerMatch) {
+    const t = triggerMatch[1];
+    if (['PermissionRequest','PostToolUse','Notification','Stop','SessionStart','PreCompact','SessionEnd','UserPromptSubmit'].includes(t)) {
+      trigger = t;
+    }
+  } else if (content.match(/^#.*PermissionRequest hook/m)) {
+    trigger = 'PermissionRequest';
+  } else if (content.match(/^#.*UserPromptSubmit hook/m)) {
+    trigger = 'UserPromptSubmit';
+  }
 
   // Detect matcher from header (JSON format or comment format)
   const matcherMatch = content.match(/"matcher":\s*"([^"]*)"/);
@@ -4949,7 +4952,7 @@ async function doctor() {
         pass('"hooks" section exists in settings.json');
 
         // 5. Check each hook trigger type
-        for (const trigger of ['PreToolUse', 'PostToolUse', 'Stop']) {
+        for (const trigger of ['PreToolUse', 'PostToolUse', 'Stop', 'Notification', 'SessionStart', 'SessionEnd', 'PreCompact', 'PermissionRequest', 'UserPromptSubmit']) {
           const entries = hooks[trigger] || [];
           if (entries.length > 0) {
             pass(trigger + ': ' + entries.length + ' hook(s) registered');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safe-setup",
-  "version": "29.2.0",
+  "version": "29.3.1",
   "description": "One command to make Claude Code safe. 346 hooks (8 built-in + 338 examples). 49 CLI commands. 1030 tests. 5 languages.",
   "main": "index.mjs",
   "bin": {