cc-safe-setup 29.6.14 → 29.6.15

package/examples/registry-publish-guard.sh

@@ -0,0 +1,65 @@
+#!/bin/bash
+# registry-publish-guard.sh — Block publishing to package registries
+#
+# Solves: Claude Code accidentally publishing packages to npm, PyPI,
+#         RubyGems, crates.io, or other registries. Publishing is
+#         irreversible for many registries (npm unpublish has a 72h limit).
+#
+# Note: npm-publish-guard.sh covers npm specifically.
+#       This hook covers ALL package registries.
+#
+# Detects:
+#   gem push              (RubyGems)
+#   twine upload          (PyPI)
+#   pip upload            (PyPI alternative)
+#   cargo publish         (crates.io)
+#   dotnet nuget push     (.NET NuGet)
+#   docker push           (Docker Hub)
+#   helm push             (Helm charts)
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
+
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+
+[ -z "$COMMAND" ] && exit 0
+
+# Block gem push (RubyGems)
+if echo "$COMMAND" | grep -qE '\bgem\s+push\b'; then
+    echo "BLOCKED: RubyGems publish detected." >&2
+    echo "  Publishing to RubyGems is irreversible. Verify version and credentials." >&2
+    exit 2
+fi
+
+# Block PyPI upload (twine/pip)
+if echo "$COMMAND" | grep -qE '\b(twine|pip)\s+upload\b'; then
+    echo "BLOCKED: PyPI upload detected." >&2
+    exit 2
+fi
+
+# Block cargo publish (crates.io)
+if echo "$COMMAND" | grep -qE '\bcargo\s+publish\b'; then
+    echo "BLOCKED: crates.io publish detected." >&2
+    exit 2
+fi
+
+# Block dotnet nuget push
+if echo "$COMMAND" | grep -qE '\bdotnet\s+nuget\s+push\b'; then
+    echo "BLOCKED: NuGet publish detected." >&2
+    exit 2
+fi
+
+# Block docker push
+if echo "$COMMAND" | grep -qE '\bdocker\s+push\b'; then
+    echo "BLOCKED: Docker image push detected." >&2
+    echo "  Verify the image tag and registry before pushing." >&2
+    exit 2
+fi
+
+# Block helm push
+if echo "$COMMAND" | grep -qE '\bhelm\s+(push|package.*push)\b'; then
+    echo "BLOCKED: Helm chart push detected." >&2
+    exit 2
+fi
+
+exit 0

package/examples/sensitive-file-read-guard.sh

@@ -0,0 +1,57 @@
+#!/bin/bash
+# sensitive-file-read-guard.sh — Block reading sensitive system/user files
+#
+# Solves: Claude Code reading private keys, credentials, password files
+#         via the Read tool. Even reading these files exposes secrets in
+#         the conversation context, which persists in transcripts.
+#
+# Detects (via Read tool):
+#   ~/.ssh/id_rsa, id_ed25519 (private keys)
+#   ~/.gnupg/                 (GPG keys)
+#   ~/.aws/credentials        (AWS credentials)
+#   /etc/shadow               (password hashes)
+#   *.pem, *.key              (certificate private keys)
+#   .env.production           (production secrets)
+#
+# Does NOT block:
+#   ~/.ssh/config             (SSH config, no secrets)
+#   ~/.ssh/id_rsa.pub         (public keys are fine)
+#   /etc/passwd               (no secrets, world-readable)
+#   Regular project files
+#
+# TRIGGER: PreToolUse  MATCHER: "Read"
+
+INPUT=$(cat)
+FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
+
+[ -z "$FILE" ] && exit 0
+
+# Block private key files
+if echo "$FILE" | grep -qiE '(id_rsa|id_ed25519|id_ecdsa|id_dsa)$'; then
+    # Allow .pub files
+    echo "$FILE" | grep -qiE '\.pub$' && exit 0
+    echo "BLOCKED: Reading private key file: $FILE" >&2
+    echo "  Private keys should never be read into conversation context." >&2
+    exit 2
+fi
+
+# Block certificate private keys
+if echo "$FILE" | grep -qiE '\.(pem|key)$' && echo "$FILE" | grep -qiE '(private|server|ssl|tls)'; then
+    echo "BLOCKED: Reading certificate private key: $FILE" >&2
+    exit 2
+fi
+
+# Block credential files
+if echo "$FILE" | grep -qiE '\.aws/credentials|\.gcloud/credentials|\.azure/|/etc/shadow|\.gnupg/'; then
+    echo "BLOCKED: Reading credential/secret file: $FILE" >&2
+    exit 2
+fi
+
+# Block production env files
+if echo "$FILE" | grep -qiE '\.env\.(production|prod|staging)$'; then
+    echo "BLOCKED: Reading production environment file: $FILE" >&2
+    echo "  Production secrets should not be in conversation context." >&2
+    exit 2
+fi
+
+exit 0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "cc-safe-setup",
-  "version": "29.6.14",
-  "description": "One command to make Claude Code safe. 432 example hooks + 8 built-in. 52 CLI commands. 5777 tests. Works with Auto Mode.",
+  "version": "29.6.15",
+  "description": "One command to make Claude Code safe. 434 example hooks + 8 built-in. 52 CLI commands. 5800 tests. Works with Auto Mode.",
   "main": "index.mjs",
   "bin": {
     "cc-safe-setup": "index.mjs"