cc-safe-setup 29.6.32 → 29.6.36

package/examples/k8s-production-guard.sh

@@ -0,0 +1,77 @@
+#!/bin/bash
+# k8s-production-guard.sh — Block destructive Kubernetes operations on production
+#
+# Solves: Claude running kubectl delete, scale-to-zero, or rollback on
+#         production namespaces/clusters without explicit confirmation.
+#
+# How it works: PreToolUse hook on Bash that detects kubectl/helm commands
+#   targeting production contexts/namespaces and blocks destructive operations.
+#
+# CONFIG:
+#   CC_K8S_PROD_CONTEXTS="prod:production:live" (colon-separated)
+#   CC_K8S_PROD_NAMESPACES="production:prod:default" (colon-separated)
+#
+# TRIGGER: PreToolUse
+# MATCHER: "Bash"
+
+set -euo pipefail
+
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+
+# Only check kubectl/helm commands
+echo "$COMMAND" | grep -qE '(kubectl|helm)\s' || exit 0
+
+# Production indicators
+PROD_CTX="${CC_K8S_PROD_CONTEXTS:-prod:production:live}"
+PROD_NS="${CC_K8S_PROD_NAMESPACES:-production:prod}"
+
+# Destructive kubectl operations
+DESTRUCT_KUBECTL='delete\s+(deploy|pod|svc|namespace|pv|statefulset|daemonset|job|cronjob|ingress|secret|configmap)|scale\s+.*--replicas=0|drain\s|cordon\s|taint\s.*NoSchedule|rollout\s+undo'
+
+# Destructive helm operations
+DESTRUCT_HELM='helm\s+(uninstall|delete|rollback|reset)'
+
+# Check if command is destructive
+IS_DESTRUCTIVE=false
+if echo "$COMMAND" | grep -qE "$DESTRUCT_KUBECTL"; then
+    IS_DESTRUCTIVE=true
+fi
+if echo "$COMMAND" | grep -qE "$DESTRUCT_HELM"; then
+    IS_DESTRUCTIVE=true
+fi
+
+$IS_DESTRUCTIVE || exit 0
+
+# Check if targeting production
+IS_PROD=false
+
+# Check --context flag
+IFS=':' read -ra CTXS <<< "$PROD_CTX"
+for ctx in "${CTXS[@]}"; do
+    if echo "$COMMAND" | grep -qE -- "--context[= ]$ctx"; then
+        IS_PROD=true
+        break
+    fi
+done
+
+# Check -n/--namespace flag
+IFS=':' read -ra NSS <<< "$PROD_NS"
+for ns in "${NSS[@]}"; do
+    if echo "$COMMAND" | grep -qE -- "(-n|--namespace)[= ]$ns"; then
+        IS_PROD=true
+        break
+    fi
+done
+
+if $IS_PROD; then
+    echo "BLOCKED: Destructive Kubernetes operation on production." >&2
+    echo "  Command: $COMMAND" >&2
+    echo "  Run this manually if you're sure." >&2
+    exit 2
+fi
+
+# Not targeting production explicitly — warn but allow
+echo "NOTE: Destructive k8s operation (not targeting a known prod namespace)." >&2
+exit 0

package/examples/laravel-artisan-guard.sh

@@ -1,3 +1,5 @@
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 INPUT=$(cat)
 COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
 [[ -z "$COMMAND" ]] && exit 0

package/examples/large-file-guard.sh

@@ -17,6 +17,8 @@
 #     }]
 #   }
 # }
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 
 INPUT=$(cat)
 TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null)

package/examples/line-ending-guard.sh

@@ -0,0 +1,30 @@
+#!/bin/bash
+# ================================================================
+# line-ending-guard.sh — Warn on CRLF/LF mismatch
+# ================================================================
+# PURPOSE:
+#   Claude Code outputs LF line endings. On Windows/WSL, files may
+#   use CRLF. Editing a CRLF file with LF content creates mixed
+#   line endings, causing test failures, script errors, and git
+#   noise. Especially common in .bat, .cmd, .ps1 files.
+#
+# TRIGGER: PreToolUse
+# MATCHER: "Write|Edit"
+# ================================================================
+
+INPUT=$(cat)
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null)
+FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
+
+[[ "$TOOL" != "Write" && "$TOOL" != "Edit" ]] && exit 0
+[ -z "$FILE" ] || [ ! -f "$FILE" ] && exit 0
+
+# Check if existing file uses CRLF
+if head -c 1000 "$FILE" 2>/dev/null | od -c | grep -q '\\r\\n'; then
+    echo "WARNING: $FILE uses CRLF line endings. Claude outputs LF." >&2
+    echo "  This may create mixed line endings. Consider:" >&2
+    echo "  - Setting .gitattributes: *.bat text eol=crlf" >&2
+    echo "  - Running: unix2dos $FILE (after edit)" >&2
+fi
+
+exit 0

package/examples/log-level-guard.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 INPUT=$(cat)
 CONTENT=$(echo "$INPUT" | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0

package/examples/magic-number-warn.sh

@@ -1,3 +1,5 @@
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
 [[ -z "$FILE" ]] && exit 0

package/examples/max-edit-size-guard.sh

@@ -1,3 +1,5 @@
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 INPUT=$(cat)
 TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null)
 [ "$TOOL" != "Edit" ] && exit 0

package/examples/max-file-count-guard.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
 [ -z "$FILE" ] && exit 0

package/examples/max-file-delete-count.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
 [ -z "$COMMAND" ] && exit 0
 if echo "$COMMAND" | grep -qE "^\s*rm\b"; then COUNT=$(echo "$COMMAND" | tr " " "\n" | grep -cvE "^-" | head -1); [ "$COUNT" -gt 5 ] && echo "WARNING: Deleting $COUNT files at once" >&2; fi

package/examples/max-function-length.sh

@@ -1,3 +1,5 @@
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
 [[ -z "$FILE" ]] && exit 0

package/examples/max-import-count.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 IMPORTS=$(echo "$CONTENT" | grep -cE "^(import|from|require)" || echo 0); [ "$IMPORTS" -gt 20 ] && echo "NOTE: $IMPORTS imports — consider splitting module" >&2

package/examples/max-subagent-count.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
 [ -z "$COMMAND" ] && exit 0
 STATE="/tmp/cc-subagent-count"; C=$(cat "$STATE" 2>/dev/null || echo 0); echo $((C+1)) > "$STATE"; [ "$C" -gt 5 ] && echo "WARNING: $C subagents spawned this session" >&2

package/examples/mcp-orphan-process-guard.sh

@@ -0,0 +1,39 @@
+#!/bin/bash
+# mcp-orphan-process-guard.sh — Detect orphaned MCP server processes
+#
+# Solves: MCP server containers not stopped when Claude Code exits (#29058).
+#         Docker containers and background processes accumulate over sessions.
+#
+# How it works: Stop hook that checks for running MCP-related processes
+#   and warns about potential orphans.
+#
+# TRIGGER: Stop
+# MATCHER: ""
+
+set -euo pipefail
+
+# Check for running MCP-related processes
+ORPHANS=""
+
+# Docker containers with MCP-like names
+if command -v docker &>/dev/null; then
+  MCP_CONTAINERS=$(docker ps --format '{{.Names}}' 2>/dev/null | grep -iE 'mcp|claude|anthropic' || true)
+  if [ -n "$MCP_CONTAINERS" ]; then
+    ORPHANS="${ORPHANS}Docker containers: ${MCP_CONTAINERS}\n"
+  fi
+fi
+
+# Node/Python processes that might be MCP servers
+MCP_PROCS=$(ps aux 2>/dev/null | grep -iE 'mcp.*server|@modelcontextprotocol' | grep -v grep || true)
+if [ -n "$MCP_PROCS" ]; then
+  COUNT=$(echo "$MCP_PROCS" | wc -l)
+  ORPHANS="${ORPHANS}MCP processes: ${COUNT} running\n"
+fi
+
+if [ -n "$ORPHANS" ]; then
+  echo "WARNING: Potential orphaned MCP processes detected:" >&2
+  echo -e "$ORPHANS" >&2
+  echo "Consider stopping them: docker stop <name> or kill <pid>" >&2
+fi
+
+exit 0

package/examples/mcp-server-allowlist.sh

@@ -0,0 +1,45 @@
+#!/bin/bash
+# mcp-server-allowlist.sh — Restrict MCP tool calls to allowed servers
+#
+# Solves: Unwanted MCP servers (synced from claude.ai) injecting tools
+#         that consume memory and cause OOM crashes (#20412).
+#         Also prevents untrusted MCP tools from being called.
+#
+# How it works: PreToolUse hook that checks if a tool call is from an
+#   MCP server, and blocks it if the server isn't in the allowlist.
+#
+# CONFIG:
+#   CC_MCP_ALLOWED="filesystem:github:memory" (colon-separated server names)
+#
+# TRIGGER: PreToolUse
+# MATCHER: ""
+
+set -euo pipefail
+
+INPUT=$(cat)
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null)
+[ -z "$TOOL" ] && exit 0
+
+ALLOWED="${CC_MCP_ALLOWED:-}"
+[ -n "$ALLOWED" ] || exit 0  # No allowlist = allow all
+
+# MCP tools are prefixed with mcp__servername__
+case "$TOOL" in
+    mcp__*__*)
+        # Extract server name
+        SERVER=$(echo "$TOOL" | sed 's/^mcp__\([^_]*\)__.*/\1/')
+
+        IFS=':' read -ra SERVERS <<< "$ALLOWED"
+        for s in "${SERVERS[@]}"; do
+            [ "$s" = "$SERVER" ] && exit 0
+        done
+
+        echo "BLOCKED: MCP tool from non-allowed server '$SERVER'." >&2
+        echo "  Tool: $TOOL" >&2
+        echo "  Allowed servers: $ALLOWED" >&2
+        echo "  Add to CC_MCP_ALLOWED to permit." >&2
+        exit 2
+        ;;
+esac
+
+exit 0

package/examples/mcp-tool-audit-log.sh

@@ -0,0 +1,41 @@
+#!/bin/bash
+# mcp-tool-audit-log.sh — Log all MCP tool calls for security auditing
+#
+# Solves: No visibility into which MCP tools are being called, by whom,
+#         and with what parameters. Essential for OWASP MCP Top 10
+#         compliance (MCP09: Insufficient Logging).
+#
+# How it works: PostToolUse hook that logs MCP tool calls to a file
+#   with timestamp, tool name, server, and input summary.
+#
+# CONFIG:
+#   CC_MCP_AUDIT_LOG="~/.claude/mcp-audit.log"
+#
+# TRIGGER: PostToolUse
+# MATCHER: ""
+
+set -euo pipefail
+
+INPUT=$(cat)
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null)
+[ -z "$TOOL" ] && exit 0
+
+# Only log MCP tool calls
+case "$TOOL" in
+    mcp__*) ;;
+    *) exit 0 ;;
+esac
+
+LOG_FILE="${CC_MCP_AUDIT_LOG:-${HOME}/.claude/mcp-audit.log}"
+mkdir -p "$(dirname "$LOG_FILE")"
+
+# Extract details
+SERVER=$(echo "$TOOL" | sed 's/^mcp__\([^_]*\)__.*/\1/')
+OPERATION=$(echo "$TOOL" | sed 's/^mcp__[^_]*__//')
+EXIT_CODE=$(echo "$INPUT" | jq -r '.tool_result.exitCode // "0"' 2>/dev/null)
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+
+# Log entry
+echo "${TIMESTAMP} | server=${SERVER} | op=${OPERATION} | exit=${EXIT_CODE} | tool=${TOOL}" >> "$LOG_FILE"
+
+exit 0

package/examples/mcp-tool-guard.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 INPUT=$(cat)
 TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null)
 echo "$TOOL" | grep -q '^mcp__' || exit 0

package/examples/migration-verify-guard.sh

@@ -0,0 +1,44 @@
+#!/bin/bash
+# migration-verify-guard.sh — Require verification before destructive migrations
+#
+# Solves: Claude executing destructive database/code migrations without
+#         verifying the plan first (#35435). A Rust migration went wrong
+#         across 2 sessions with 20 compounding errors.
+#
+# How it works: PreToolUse hook on Bash that detects migration commands
+#   and blocks them unless a verification marker file exists.
+#   Create the marker: touch .claude/migration-approved
+#
+# TRIGGER: PreToolUse
+# MATCHER: "Bash"
+
+set -euo pipefail
+
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+
+# Detect migration commands across frameworks
+MIGRATION_PATTERN='(migrate|migration|db:migrate|typeorm.*migration|prisma.*migrate|alembic|flyway|liquibase|knex.*migrate|sequelize.*db:migrate|rails.*db:migrate|django.*migrate|drizzle.*push)'
+
+if echo "$COMMAND" | grep -qiE "$MIGRATION_PATTERN"; then
+  # Check for approval marker
+  if [ -f ".claude/migration-approved" ]; then
+    # Consume the marker (one-time use)
+    rm -f ".claude/migration-approved"
+    exit 0
+  fi
+
+  echo "BLOCKED: Migration command detected without verification." >&2
+  echo "" >&2
+  echo "Command: $COMMAND" >&2
+  echo "" >&2
+  echo "Before running migrations:" >&2
+  echo "  1. Review the migration plan carefully" >&2
+  echo "  2. Ensure you have a backup or can rollback" >&2
+  echo "  3. Create approval: touch .claude/migration-approved" >&2
+  echo "  4. Then retry the command" >&2
+  exit 2
+fi
+
+exit 0

package/examples/monorepo-scope-guard.sh

@@ -21,6 +21,8 @@
 #   }
 # }
 # ================================================================
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)

package/examples/network-exfil-guard.sh

@@ -0,0 +1,61 @@
+#!/bin/bash
+# network-exfil-guard.sh — Block data exfiltration via network commands
+#
+# Solves: Claude using curl/wget/nc to send local data to external servers.
+#         OWASP MCP Top 10: MCP01 (Secret Exposure via network).
+#
+# How it works: PreToolUse hook on Bash that detects outbound data transfer
+#   commands (POST/PUT with file data, netcat connections, base64-encoded
+#   data in URLs) and blocks them.
+#
+# TRIGGER: PreToolUse
+# MATCHER: "Bash"
+
+set -euo pipefail
+
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+
+# Patterns for outbound data exfiltration
+BLOCKED=false
+REASON=""
+
+# curl/wget sending file contents
+if echo "$COMMAND" | grep -qE 'curl\s+.*(-d\s+@|-F\s+.*=@|--data-binary\s+@|--upload-file)'; then
+    BLOCKED=true
+    REASON="curl uploading local file"
+fi
+
+# wget POST with file
+if echo "$COMMAND" | grep -qE 'wget\s+.*--post-file'; then
+    BLOCKED=true
+    REASON="wget posting local file"
+fi
+
+# netcat sending data
+if echo "$COMMAND" | grep -qE '(nc|ncat|netcat)\s+.*<\s|>\s*(nc|ncat|netcat)'; then
+    BLOCKED=true
+    REASON="netcat data transfer"
+fi
+
+# Pipe sensitive files to network commands
+if echo "$COMMAND" | grep -qE 'cat\s+(~/\.|/etc/|/home/).*\|\s*(curl|wget|nc)'; then
+    BLOCKED=true
+    REASON="piping sensitive file to network command"
+fi
+
+# Base64-encoded data in URL (common exfil technique)
+if echo "$COMMAND" | grep -qE 'base64.*\|\s*curl|curl.*\$\(.*base64'; then
+    BLOCKED=true
+    REASON="base64-encoded data in network request"
+fi
+
+if $BLOCKED; then
+    echo "BLOCKED: Potential data exfiltration detected." >&2
+    echo "  Reason: $REASON" >&2
+    echo "  Command: $COMMAND" >&2
+    exit 2
+fi
+
+exit 0

package/examples/network-guard.sh

@@ -15,6 +15,8 @@
 #     }]
 #   }
 # }
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 
 INPUT=$(cat)
 COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)

package/examples/nextjs-env-guard.sh

@@ -20,6 +20,8 @@
 #   }
 # }
 # ================================================================
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)

package/examples/no-absolute-import.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 if echo "$CONTENT" | grep -qE "from ['\"]/|require\(['\"]/"; then echo "NOTE: Absolute import path detected" >&2; fi

package/examples/no-alert-confirm-prompt.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "$CONTENT" | grep -qE "\balert\(|\bconfirm\(|\bprompt\(" && echo "WARNING: alert/confirm/prompt in code" >&2

package/examples/no-any-type.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "$CONTENT" | grep -qE ": any\b|<any>" && echo "NOTE: TypeScript any detected — add proper types" >&2

package/examples/no-any-typescript.sh

@@ -1,3 +1,5 @@
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
 [[ -z "$FILE" ]] && exit 0

package/examples/no-assignment-in-condition.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "$CONTENT" | grep -qE "if\s*\([^=]*=[^=]" && echo "NOTE: Assignment in condition (use ===)" >&2

package/examples/no-callback-hell.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 DEPTH=$(echo "$CONTENT" | grep -c "function\s*("); [ "$DEPTH" -gt 3 ] && echo "NOTE: Possible callback hell ($DEPTH levels)" >&2

package/examples/no-catch-all-route.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "NOTE: Warn on catch-all routes without 404" >&2

package/examples/no-circular-dependency.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 FILE=$(cat | jq -r '.tool_input.file_path // empty' 2>/dev/null)
 case "$FILE" in *package.json) ;; *) exit 0;; esac
 CONTENT=$(cat | jq -r '.tool_input.new_string // empty' 2>/dev/null)

package/examples/no-class-in-functional.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "NOTE: Warn on class patterns in functional" >&2

package/examples/no-cleartext-storage.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "$CONTENT" | grep -qE "localStorage\.setItem.*password|sessionStorage.*token" && echo "WARNING: Storing secrets in browser storage" >&2

package/examples/no-commented-code.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 COMMENTED=$(echo "$CONTENT" | grep -cE "^\s*(//|#)\s*(if|for|while|function|const|let|var|import|class)" || echo 0); [ "$COMMENTED" -gt 5 ] && echo "NOTE: Large block of commented code — delete or uncomment" >&2

package/examples/no-commit-fixup.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 INPUT=$(cat)
 COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
 [ -z "$COMMAND" ] && exit 0

package/examples/no-console-assert.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "$CONTENT" | grep -q "console.assert" && echo "NOTE: console.assert in code" >&2

package/examples/no-console-error-swallow.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PermissionRequest  MATCHER: ""
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 if echo "$CONTENT" | grep -qE "catch\s*\([^)]*\)\s*\{[\s\n]*\}|except:[\s\n]*pass"; then echo "WARNING: Empty catch/except block swallows errors" >&2; fi

package/examples/no-console-in-prod.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 FILE=$(cat | jq -r ".tool_input.file_path // empty" 2>/dev/null); case "$FILE" in *test*|*spec*) exit 0;; esac; echo "$CONTENT" | grep -qE "console\.(log|warn)" && echo "NOTE: console statement in non-test file" >&2

package/examples/no-console-log.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 INPUT=$(cat)
 COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
 CONTENT=$(echo "$INPUT" | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)

package/examples/no-console-time.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "$CONTENT" | grep -qE "console\.(time|timeEnd|timeLog)" && echo "NOTE: console.time left in code" >&2

package/examples/no-cors-wildcard.sh

@@ -1,3 +1,5 @@
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
 [[ -z "$FILE" ]] && exit 0

package/examples/no-curl-upload.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
 [ -z "$COMMAND" ] && exit 0
 if echo "$COMMAND" | grep -qE 'curl\s+.*(-X\s+POST|-d\s+@|--data-binary|--upload-file)'; then

package/examples/no-dangerouslySetInnerHTML.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 echo "$CONTENT" | grep -q "dangerouslySetInnerHTML" && echo "WARNING: XSS risk via dangerouslySetInnerHTML" >&2

package/examples/no-dangling-await.sh

@@ -1,3 +1,5 @@
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 INPUT=$(cat)
 FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
 [[ -z "$FILE" ]] && exit 0

package/examples/no-debug-in-commit.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Bash"
 COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
 echo "$COMMAND" | grep -qE 'git\s+commit' || exit 0
 git diff --cached 2>/dev/null | grep -qE '^\+.*(debugger|pdb\.set_trace)' && echo "WARNING: Debug in staged" >&2

package/examples/no-deep-nesting.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+#
+# TRIGGER: PreToolUse  MATCHER: "Edit|Write"
 CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
 [ -z "$CONTENT" ] && exit 0
 DEPTH=$(echo "$CONTENT" | awk "{n=0; for(i=1;i<=length;i++) if(substr(\$0,i,1)==\"{\") n++; if(n>m) m=n} END{print m}"); [ "$DEPTH" -gt 4 ] && echo "NOTE: Deep nesting ($DEPTH levels)" >&2