cc-safe-setup 29.6.32 → 29.6.33

package/examples/headless-stop-guard.sh

@@ -0,0 +1,43 @@
+#!/bin/bash
+# headless-stop-guard.sh — Skip Stop hooks in headless (-p) mode
+#
+# Solves: Stop hook causes empty result in print mode (#38651).
+#         Any Stop hook (even no-op) causes `claude -p` to return
+#         empty string instead of the model's response.
+#
+# How it works: Detects headless mode via parent process inspection
+#   and exits immediately, preventing the Stop hook from interfering
+#   with result collection.
+#
+# TRIGGER: Stop
+# MATCHER: ""
+#
+# Usage: Use as a wrapper around your actual Stop hook:
+# {
+#   "hooks": {
+#     "Stop": [{
+#       "hooks": [{ "type": "command", "command": "bash ~/.claude/hooks/headless-stop-guard.sh ~/.claude/hooks/my-stop-hook.sh" }]
+#     }]
+#   }
+# }
+#
+# Or set CC_HEADLESS=1 in your wrapper script before `claude -p`.
+
+# Method 1: Environment variable (most reliable)
+[ "$CC_HEADLESS" = "1" ] && exit 0
+
+# Method 2: Parent process detection
+PARENT_CMD=$(ps -o args= -p $PPID 2>/dev/null || true)
+if echo "$PARENT_CMD" | grep -qE '\bclaude\b.*\s-p\b'; then
+    exit 0
+fi
+
+# Not headless — run the wrapped hook if provided
+TARGET="$1"
+if [ -n "$TARGET" ] && [ -f "$TARGET" ]; then
+    shift
+    cat | bash "$TARGET" "$@"
+    exit $?
+fi
+
+exit 0

package/examples/helm-install-guard.sh

@@ -1,3 +1,5 @@
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 INPUT=$(cat)
 COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
 [[ -z "$COMMAND" ]] && exit 0

package/examples/issue-draft-redact-guard.sh

@@ -0,0 +1,45 @@
+#!/bin/bash
+# issue-draft-redact-guard.sh — Redact sensitive info from public issue drafts
+#
+# Solves: Claude drafting public bug reports with sensitive project info (#29121).
+#         Internal org names, private URLs, IP addresses, and file paths
+#         get included in gh issue create commands.
+#
+# How it works: PreToolUse hook on Bash that intercepts gh issue/pr create
+#   commands and scans the body for sensitive patterns.
+#
+# TRIGGER: PreToolUse
+# MATCHER: "Bash"
+
+set -euo pipefail
+
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+
+# Only check issue/PR creation commands
+if ! echo "$COMMAND" | grep -qE 'gh\s+(issue|pr)\s+create'; then
+  exit 0
+fi
+
+# Scan for sensitive patterns in the command body
+SENSITIVE_PATTERNS=(
+  '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}'  # IP addresses
+  '(internal|private|corp|staging)\.[a-z]+\.[a-z]+'    # Internal domains
+  '/home/[a-zA-Z]+/'                                    # Home directory paths
+  '/Users/[a-zA-Z]+/'                                   # macOS home paths
+  'password|passwd|secret_key|private_key'               # Secret keywords
+)
+
+for pattern in "${SENSITIVE_PATTERNS[@]}"; do
+  if echo "$COMMAND" | grep -qEi "$pattern"; then
+    MATCH=$(echo "$COMMAND" | grep -oEi "$pattern" | head -1)
+    echo "WARNING: Sensitive pattern detected in issue draft." >&2
+    echo "Pattern match: $MATCH" >&2
+    echo "Review and redact before posting publicly." >&2
+    # Warn but don't block — user may intentionally include their own info
+    break
+  fi
+done
+
+exit 0

package/examples/java-compile-on-edit.sh

@@ -17,6 +17,8 @@
 #   }
 # }
 # ================================================================
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)

package/examples/k8s-production-guard.sh

@@ -0,0 +1,77 @@
+#!/bin/bash
+# k8s-production-guard.sh — Block destructive Kubernetes operations on production
+#
+# Solves: Claude running kubectl delete, scale-to-zero, or rollback on
+#         production namespaces/clusters without explicit confirmation.
+#
+# How it works: PreToolUse hook on Bash that detects kubectl/helm commands
+#   targeting production contexts/namespaces and blocks destructive operations.
+#
+# CONFIG:
+#   CC_K8S_PROD_CONTEXTS="prod:production:live" (colon-separated)
+#   CC_K8S_PROD_NAMESPACES="production:prod:default" (colon-separated)
+#
+# TRIGGER: PreToolUse
+# MATCHER: "Bash"
+
+set -euo pipefail
+
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+
+# Only check kubectl/helm commands
+echo "$COMMAND" | grep -qE '(kubectl|helm)\s' || exit 0
+
+# Production indicators
+PROD_CTX="${CC_K8S_PROD_CONTEXTS:-prod:production:live}"
+PROD_NS="${CC_K8S_PROD_NAMESPACES:-production:prod}"
+
+# Destructive kubectl operations
+DESTRUCT_KUBECTL='delete\s+(deploy|pod|svc|namespace|pv|statefulset|daemonset|job|cronjob|ingress|secret|configmap)|scale\s+.*--replicas=0|drain\s|cordon\s|taint\s.*NoSchedule|rollout\s+undo'
+
+# Destructive helm operations
+DESTRUCT_HELM='helm\s+(uninstall|delete|rollback|reset)'
+
+# Check if command is destructive
+IS_DESTRUCTIVE=false
+if echo "$COMMAND" | grep -qE "$DESTRUCT_KUBECTL"; then
+    IS_DESTRUCTIVE=true
+fi
+if echo "$COMMAND" | grep -qE "$DESTRUCT_HELM"; then
+    IS_DESTRUCTIVE=true
+fi
+
+$IS_DESTRUCTIVE || exit 0
+
+# Check if targeting production
+IS_PROD=false
+
+# Check --context flag
+IFS=':' read -ra CTXS <<< "$PROD_CTX"
+for ctx in "${CTXS[@]}"; do
+    if echo "$COMMAND" | grep -qE -- "--context[= ]$ctx"; then
+        IS_PROD=true
+        break
+    fi
+done
+
+# Check -n/--namespace flag
+IFS=':' read -ra NSS <<< "$PROD_NS"
+for ns in "${NSS[@]}"; do
+    if echo "$COMMAND" | grep -qE -- "(-n|--namespace)[= ]$ns"; then
+        IS_PROD=true
+        break
+    fi
+done
+
+if $IS_PROD; then
+    echo "BLOCKED: Destructive Kubernetes operation on production." >&2
+    echo "  Command: $COMMAND" >&2
+    echo "  Run this manually if you're sure." >&2
+    exit 2
+fi
+
+# Not targeting production explicitly — warn but allow
+echo "NOTE: Destructive k8s operation (not targeting a known prod namespace)." >&2
+exit 0

package/examples/laravel-artisan-guard.sh

@@ -1,3 +1,5 @@
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 INPUT=$(cat)
 COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
 [[ -z "$COMMAND" ]] && exit 0

package/examples/large-file-guard.sh

@@ -17,6 +17,8 @@
 #     }]
 #   }
 # }
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 
 INPUT=$(cat)
 TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null)

package/examples/log-level-guard.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 INPUT=$(cat)
 CONTENT=$(echo "$INPUT" | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0

package/examples/magic-number-warn.sh

@@ -1,3 +1,5 @@
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
 [[ -z "$FILE" ]] && exit 0

package/examples/max-edit-size-guard.sh

@@ -1,3 +1,5 @@
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 INPUT=$(cat)
 TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null)
 [ "$TOOL" != "Edit" ] && exit 0

package/examples/max-file-count-guard.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
 [ -z "$FILE" ] && exit 0

package/examples/max-file-delete-count.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
 [ -z "$COMMAND" ] && exit 0
 if echo "$COMMAND" | grep -qE "^\s*rm\b"; then COUNT=$(echo "$COMMAND" | tr " " "\n" | grep -cvE "^-" | head -1); [ "$COUNT" -gt 5 ] && echo "WARNING: Deleting $COUNT files at once" >&2; fi

package/examples/max-function-length.sh

@@ -1,3 +1,5 @@
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
 [[ -z "$FILE" ]] && exit 0

package/examples/max-import-count.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 IMPORTS=$(echo "$CONTENT" | grep -cE "^(import|from|require)" || echo 0); [ "$IMPORTS" -gt 20 ] && echo "NOTE: $IMPORTS imports — consider splitting module" >&2

package/examples/max-subagent-count.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
 [ -z "$COMMAND" ] && exit 0
 STATE="/tmp/cc-subagent-count"; C=$(cat "$STATE" 2>/dev/null || echo 0); echo $((C+1)) > "$STATE"; [ "$C" -gt 5 ] && echo "WARNING: $C subagents spawned this session" >&2

package/examples/mcp-orphan-process-guard.sh

@@ -0,0 +1,39 @@
+#!/bin/bash
+# mcp-orphan-process-guard.sh — Detect orphaned MCP server processes
+#
+# Solves: MCP server containers not stopped when Claude Code exits (#29058).
+#         Docker containers and background processes accumulate over sessions.
+#
+# How it works: Stop hook that checks for running MCP-related processes
+#   and warns about potential orphans.
+#
+# TRIGGER: Stop
+# MATCHER: ""
+
+set -euo pipefail
+
+# Check for running MCP-related processes
+ORPHANS=""
+
+# Docker containers with MCP-like names
+if command -v docker &>/dev/null; then
+  MCP_CONTAINERS=$(docker ps --format '{{.Names}}' 2>/dev/null | grep -iE 'mcp|claude|anthropic' || true)
+  if [ -n "$MCP_CONTAINERS" ]; then
+    ORPHANS="${ORPHANS}Docker containers: ${MCP_CONTAINERS}\n"
+  fi
+fi
+
+# Node/Python processes that might be MCP servers
+MCP_PROCS=$(ps aux 2>/dev/null | grep -iE 'mcp.*server|@modelcontextprotocol' | grep -v grep || true)
+if [ -n "$MCP_PROCS" ]; then
+  COUNT=$(echo "$MCP_PROCS" | wc -l)
+  ORPHANS="${ORPHANS}MCP processes: ${COUNT} running\n"
+fi
+
+if [ -n "$ORPHANS" ]; then
+  echo "WARNING: Potential orphaned MCP processes detected:" >&2
+  echo -e "$ORPHANS" >&2
+  echo "Consider stopping them: docker stop <name> or kill <pid>" >&2
+fi
+
+exit 0

package/examples/mcp-server-allowlist.sh

@@ -0,0 +1,45 @@
+#!/bin/bash
+# mcp-server-allowlist.sh — Restrict MCP tool calls to allowed servers
+#
+# Solves: Unwanted MCP servers (synced from claude.ai) injecting tools
+#         that consume memory and cause OOM crashes (#20412).
+#         Also prevents untrusted MCP tools from being called.
+#
+# How it works: PreToolUse hook that checks if a tool call is from an
+#   MCP server, and blocks it if the server isn't in the allowlist.
+#
+# CONFIG:
+#   CC_MCP_ALLOWED="filesystem:github:memory" (colon-separated server names)
+#
+# TRIGGER: PreToolUse
+# MATCHER: ""
+
+set -euo pipefail
+
+INPUT=$(cat)
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null)
+[ -z "$TOOL" ] && exit 0
+
+ALLOWED="${CC_MCP_ALLOWED:-}"
+[ -n "$ALLOWED" ] || exit 0  # No allowlist = allow all
+
+# MCP tools are prefixed with mcp__servername__
+case "$TOOL" in
+    mcp__*__*)
+        # Extract server name
+        SERVER=$(echo "$TOOL" | sed 's/^mcp__\([^_]*\)__.*/\1/')
+
+        IFS=':' read -ra SERVERS <<< "$ALLOWED"
+        for s in "${SERVERS[@]}"; do
+            [ "$s" = "$SERVER" ] && exit 0
+        done
+
+        echo "BLOCKED: MCP tool from non-allowed server '$SERVER'." >&2
+        echo "  Tool: $TOOL" >&2
+        echo "  Allowed servers: $ALLOWED" >&2
+        echo "  Add to CC_MCP_ALLOWED to permit." >&2
+        exit 2
+        ;;
+esac
+
+exit 0

package/examples/mcp-tool-audit-log.sh

@@ -0,0 +1,41 @@
+#!/bin/bash
+# mcp-tool-audit-log.sh — Log all MCP tool calls for security auditing
+#
+# Solves: No visibility into which MCP tools are being called, by whom,
+#         and with what parameters. Essential for OWASP MCP Top 10
+#         compliance (MCP09: Insufficient Logging).
+#
+# How it works: PostToolUse hook that logs MCP tool calls to a file
+#   with timestamp, tool name, server, and input summary.
+#
+# CONFIG:
+#   CC_MCP_AUDIT_LOG="~/.claude/mcp-audit.log"
+#
+# TRIGGER: PostToolUse
+# MATCHER: ""
+
+set -euo pipefail
+
+INPUT=$(cat)
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null)
+[ -z "$TOOL" ] && exit 0
+
+# Only log MCP tool calls
+case "$TOOL" in
+    mcp__*) ;;
+    *) exit 0 ;;
+esac
+
+LOG_FILE="${CC_MCP_AUDIT_LOG:-${HOME}/.claude/mcp-audit.log}"
+mkdir -p "$(dirname "$LOG_FILE")"
+
+# Extract details
+SERVER=$(echo "$TOOL" | sed 's/^mcp__\([^_]*\)__.*/\1/')
+OPERATION=$(echo "$TOOL" | sed 's/^mcp__[^_]*__//')
+EXIT_CODE=$(echo "$INPUT" | jq -r '.tool_result.exitCode // "0"' 2>/dev/null)
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+
+# Log entry
+echo "${TIMESTAMP} | server=${SERVER} | op=${OPERATION} | exit=${EXIT_CODE} | tool=${TOOL}" >> "$LOG_FILE"
+
+exit 0

package/examples/mcp-tool-guard.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 INPUT=$(cat)
 TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null)
 echo "$TOOL" | grep -q '^mcp__' || exit 0

package/examples/migration-verify-guard.sh

@@ -0,0 +1,44 @@
+#!/bin/bash
+# migration-verify-guard.sh — Require verification before destructive migrations
+#
+# Solves: Claude executing destructive database/code migrations without
+#         verifying the plan first (#35435). A Rust migration went wrong
+#         across 2 sessions with 20 compounding errors.
+#
+# How it works: PreToolUse hook on Bash that detects migration commands
+#   and blocks them unless a verification marker file exists.
+#   Create the marker: touch .claude/migration-approved
+#
+# TRIGGER: PreToolUse
+# MATCHER: "Bash"
+
+set -euo pipefail
+
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+
+# Detect migration commands across frameworks
+MIGRATION_PATTERN='(migrate|migration|db:migrate|typeorm.*migration|prisma.*migrate|alembic|flyway|liquibase|knex.*migrate|sequelize.*db:migrate|rails.*db:migrate|django.*migrate|drizzle.*push)'
+
+if echo "$COMMAND" | grep -qiE "$MIGRATION_PATTERN"; then
+  # Check for approval marker
+  if [ -f ".claude/migration-approved" ]; then
+    # Consume the marker (one-time use)
+    rm -f ".claude/migration-approved"
+    exit 0
+  fi
+
+  echo "BLOCKED: Migration command detected without verification." >&2
+  echo "" >&2
+  echo "Command: $COMMAND" >&2
+  echo "" >&2
+  echo "Before running migrations:" >&2
+  echo "  1. Review the migration plan carefully" >&2
+  echo "  2. Ensure you have a backup or can rollback" >&2
+  echo "  3. Create approval: touch .claude/migration-approved" >&2
+  echo "  4. Then retry the command" >&2
+  exit 2
+fi
+
+exit 0

package/examples/monorepo-scope-guard.sh

@@ -21,6 +21,8 @@
 #   }
 # }
 # ================================================================
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)

package/examples/network-exfil-guard.sh

@@ -0,0 +1,61 @@
+#!/bin/bash
+# network-exfil-guard.sh — Block data exfiltration via network commands
+#
+# Solves: Claude using curl/wget/nc to send local data to external servers.
+#         OWASP MCP Top 10: MCP01 (Secret Exposure via network).
+#
+# How it works: PreToolUse hook on Bash that detects outbound data transfer
+#   commands (POST/PUT with file data, netcat connections, base64-encoded
+#   data in URLs) and blocks them.
+#
+# TRIGGER: PreToolUse
+# MATCHER: "Bash"
+
+set -euo pipefail
+
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+
+# Patterns for outbound data exfiltration
+BLOCKED=false
+REASON=""
+
+# curl/wget sending file contents
+if echo "$COMMAND" | grep -qE 'curl\s+.*(-d\s+@|-F\s+.*=@|--data-binary\s+@|--upload-file)'; then
+    BLOCKED=true
+    REASON="curl uploading local file"
+fi
+
+# wget POST with file
+if echo "$COMMAND" | grep -qE 'wget\s+.*--post-file'; then
+    BLOCKED=true
+    REASON="wget posting local file"
+fi
+
+# netcat sending data
+if echo "$COMMAND" | grep -qE '(nc|ncat|netcat)\s+.*<\s|>\s*(nc|ncat|netcat)'; then
+    BLOCKED=true
+    REASON="netcat data transfer"
+fi
+
+# Pipe sensitive files to network commands
+if echo "$COMMAND" | grep -qE 'cat\s+(~/\.|/etc/|/home/).*\|\s*(curl|wget|nc)'; then
+    BLOCKED=true
+    REASON="piping sensitive file to network command"
+fi
+
+# Base64-encoded data in URL (common exfil technique)
+if echo "$COMMAND" | grep -qE 'base64.*\|\s*curl|curl.*\$\(.*base64'; then
+    BLOCKED=true
+    REASON="base64-encoded data in network request"
+fi
+
+if $BLOCKED; then
+    echo "BLOCKED: Potential data exfiltration detected." >&2
+    echo "  Reason: $REASON" >&2
+    echo "  Command: $COMMAND" >&2
+    exit 2
+fi
+
+exit 0

package/examples/network-guard.sh

@@ -15,6 +15,8 @@
 #     }]
 #   }
 # }
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 
 INPUT=$(cat)
 COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)

package/examples/nextjs-env-guard.sh

@@ -20,6 +20,8 @@
 #   }
 # }
 # ================================================================
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)

package/examples/no-absolute-import.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 if echo "$CONTENT" | grep -qE "from ['\"]/|require\(['\"]/"; then echo "NOTE: Absolute import path detected" >&2; fi

package/examples/no-alert-confirm-prompt.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "$CONTENT" | grep -qE "\balert\(|\bconfirm\(|\bprompt\(" && echo "WARNING: alert/confirm/prompt in code" >&2

package/examples/no-any-type.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "$CONTENT" | grep -qE ": any\b|<any>" && echo "NOTE: TypeScript any detected — add proper types" >&2

package/examples/no-any-typescript.sh

@@ -1,3 +1,5 @@
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
 [[ -z "$FILE" ]] && exit 0

package/examples/no-assignment-in-condition.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "$CONTENT" | grep -qE "if\s*\([^=]*=[^=]" && echo "NOTE: Assignment in condition (use ===)" >&2

package/examples/no-callback-hell.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 DEPTH=$(echo "$CONTENT" | grep -c "function\s*("); [ "$DEPTH" -gt 3 ] && echo "NOTE: Possible callback hell ($DEPTH levels)" >&2

package/examples/no-catch-all-route.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "NOTE: Warn on catch-all routes without 404" >&2

package/examples/no-circular-dependency.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 FILE=$(cat | jq -r '.tool_input.file_path // empty' 2>/dev/null)
 case "$FILE" in *package.json) ;; *) exit 0;; esac
 CONTENT=$(cat | jq -r '.tool_input.new_string // empty' 2>/dev/null)

package/examples/no-class-in-functional.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "NOTE: Warn on class patterns in functional" >&2

package/examples/no-cleartext-storage.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "$CONTENT" | grep -qE "localStorage\.setItem.*password|sessionStorage.*token" && echo "WARNING: Storing secrets in browser storage" >&2

package/examples/no-commented-code.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 COMMENTED=$(echo "$CONTENT" | grep -cE "^\s*(//|#)\s*(if|for|while|function|const|let|var|import|class)" || echo 0); [ "$COMMENTED" -gt 5 ] && echo "NOTE: Large block of commented code — delete or uncomment" >&2

package/examples/no-commit-fixup.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 INPUT=$(cat)
 COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
 [ -z "$COMMAND" ] && exit 0

package/examples/no-console-assert.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "$CONTENT" | grep -q "console.assert" && echo "NOTE: console.assert in code" >&2

package/examples/no-console-error-swallow.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PermissionRequest  MATCHER: ""
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 if echo "$CONTENT" | grep -qE "catch\s*\([^)]*\)\s*\{[\s\n]*\}|except:[\s\n]*pass"; then echo "WARNING: Empty catch/except block swallows errors" >&2; fi