cc-safe-setup 7.0.0 → 7.2.0

package/examples/auto-approve-gradle.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+# auto-approve-gradle.sh — Auto-approve Gradle build/test commands
+# TRIGGER: PreToolUse  MATCHER: "Bash"
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+if echo "$COMMAND" | grep -qE '^\s*(gradle|gradlew|./gradlew)\s+(build|test|check|assemble|clean|compileJava|compileKotlin|lint)(\s|$)'; then
+    jq -n '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow","permissionDecisionReason":"gradle command auto-approved"}}'
+fi
+exit 0

package/examples/auto-approve-maven.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+# auto-approve-maven.sh — Auto-approve Maven build/test commands
+# TRIGGER: PreToolUse  MATCHER: "Bash"
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+if echo "$COMMAND" | grep -qE '^\s*(mvn|mvnw|./mvnw)\s+(compile|test|verify|package|clean|install)(\s|$)'; then
+    jq -n '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow","permissionDecisionReason":"maven command auto-approved"}}'
+fi
+exit 0

package/examples/max-line-length-check.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+# max-line-length-check.sh — Warn on lines exceeding max length after edit
+# TRIGGER: PostToolUse  MATCHER: "Edit|Write"
+FILE=$(cat | jq -r '.tool_input.file_path // empty' 2>/dev/null)
+[ -z "$FILE" ] || [ ! -f "$FILE" ] && exit 0
+MAX="${CC_MAX_LINE_LENGTH:-120}"
+LONG=$(awk -v max="$MAX" 'length > max {count++} END {print count+0}' "$FILE" 2>/dev/null)
+[ "$LONG" -gt 0 ] && echo "NOTE: $FILE has $LONG lines exceeding $MAX characters." >&2
+exit 0

package/examples/no-deploy-friday.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+# no-deploy-friday.sh — Block deploys on Fridays
+# TRIGGER: PreToolUse  MATCHER: "Bash"
+# "Don't deploy on Friday" — every ops team ever
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+DOW=$(date +%u)  # 5 = Friday
+if [ "$DOW" = "5" ]; then
+    if echo "$COMMAND" | grep -qiE '(deploy|firebase|vercel|netlify|fly\s+deploy|heroku|aws\s+s3\s+sync|kubectl\s+apply|docker\s+push)'; then
+        echo "BLOCKED: No deploys on Friday." >&2
+        echo "Come back Monday." >&2
+        exit 2
+    fi
+fi
+exit 0

package/examples/require-issue-ref.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+# require-issue-ref.sh — Warn when commit message lacks issue reference
+# TRIGGER: PreToolUse  MATCHER: "Bash"
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+if echo "$COMMAND" | grep -qE '^\s*git\s+commit'; then
+    MSG=$(echo "$COMMAND" | grep -oP "\-m\s+['\"]?\K[^'\"]+")
+    if [ -n "$MSG" ]; then
+        if ! echo "$MSG" | grep -qE '#[0-9]+|[A-Z]+-[0-9]+'; then
+            echo "WARNING: Commit message has no issue reference (#123 or PROJ-123)." >&2
+            echo "Consider linking to an issue for traceability." >&2
+        fi
+    fi
+fi
+exit 0

package/examples/work-hours-guard.sh

@@ -0,0 +1,48 @@
+#!/bin/bash
+# ================================================================
+# work-hours-guard.sh — Restrict risky operations outside work hours
+# ================================================================
+# PURPOSE:
+#   During off-hours (nights/weekends), block high-risk operations
+#   that a human should review. Safe read-only ops still pass.
+#
+# TRIGGER: PreToolUse
+# MATCHER: "Bash"
+#
+# CONFIGURATION:
+#   CC_WORK_START=9   (default: 9am)
+#   CC_WORK_END=18    (default: 6pm)
+#   CC_WORK_DAYS=12345 (default: Mon-Fri, 1=Mon 7=Sun)
+# ================================================================
+
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+
+HOUR=$(date +%H)
+DOW=$(date +%u)  # 1=Monday, 7=Sunday
+
+START="${CC_WORK_START:-9}"
+END="${CC_WORK_END:-18}"
+DAYS="${CC_WORK_DAYS:-12345}"
+
+# Check if within work hours
+IN_HOURS=0
+if echo "$DAYS" | grep -q "$DOW"; then
+    if [ "$HOUR" -ge "$START" ] && [ "$HOUR" -lt "$END" ]; then
+        IN_HOURS=1
+    fi
+fi
+
+# During work hours, allow everything
+[ "$IN_HOURS" = "1" ] && exit 0
+
+# Outside work hours, block high-risk operations
+if echo "$COMMAND" | grep -qE 'git\s+push|deploy|npm\s+publish|docker\s+push'; then
+    echo "BLOCKED: High-risk operation outside work hours ($HOUR:00)." >&2
+    echo "Command: $COMMAND" >&2
+    echo "Work hours: ${START}:00-${END}:00 (days: $DAYS)" >&2
+    exit 2
+fi
+
+exit 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safe-setup",
-  "version": "7.0.0",
+  "version": "7.2.0",
   "description": "One command to make Claude Code safe. 59 hooks (8 built-in + 51 examples). 26 CLI commands: dashboard, create, audit, lint, diff, migrate, compare, generate-ci. 284 tests.",
   "main": "index.mjs",
   "bin": {