Cover PowerShell tool and more branch-creation forms in git-ask hook

Adds a PreToolUse hook entry with matcher "PowerShell" pointing at the same check-dangerous-commands.py script, and mirrors every Bash(...) permissions.ask rule to PowerShell(...). On Windows the agent's primary shell is PowerShell, so without these the git/gh write protections did not apply to the most common code path.

Extends the branch-creation regex to also match git checkout -B, git switch --create / --force-create, and git branch -t / --track. New tests cover each variant plus a git switch --no-track negative case to confirm the regex does not falsely match non-creating switch invocations.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

Author: labkey-martyp

.claude/hooks/check-dangerous-commands.py

@@ -91,7 +91,7 @@ def command_touches_secret(command: str) -> bool:
         "git branch -D detected — confirm before proceeding",
     ),
     (
-        r'\bgit\s+[^\n;&|]*?(?:checkout\s+-b|switch\s+-[cC]|branch\s+(?!-)\S+)\b',
+        r'\bgit\s+[^\n;&|]*?(?:checkout\s+-[bB]|switch\s+(?:-[cC]|--(?:force-)?create)|branch\s+(?:(?!-)\S+|-t|--track))\b',
         "git branch creation detected — confirm name before proceeding",
     ),
     (

.claude/hooks/test-hooks.py

@@ -269,6 +269,14 @@ def tally(result):
         # ASK: git branch -D (force delete)
         ("git branch -D", "git branch -D feature/foo", "ASK"),
 
+        # ASK: branch creation/reset variants beyond the basic -b / -c
+        ("git checkout -B (force create/reset)", "git checkout -B foo", "ASK"),
+        ("git checkout -B with start point", "git checkout -B foo origin/foo", "ASK"),
+        ("git switch --create (long form)", "git switch --create foo", "ASK"),
+        ("git switch --force-create (long force)", "git switch --force-create foo origin/foo", "ASK"),
+        ("git branch -t (track + create)", "git branch -t newname origin/main", "ASK"),
+        ("git branch --track (long form)", "git branch --track newname origin/main", "ASK"),
+
         # ASK: gh pr write actions
         ("gh pr create", "gh pr create --title foo --body bar", "ASK"),
         ("gh pr edit", "gh pr edit 123 --body foo", "ASK"),
@@ -300,6 +308,8 @@ def tally(result):
         ("git reset HEAD~1 (no --hard)", "git reset HEAD~1", "ALLOW"),
         ("git stash", "git stash", "ALLOW"),
         ("git checkout main", "git checkout main", "ALLOW"),
+        ("git switch --no-track (no create flag)", "git switch --no-track foo", "ALLOW"),
+        ("git switch existing branch", "git switch main", "ALLOW"),
         ("gh pr view", "gh pr view 123", "ALLOW"),
         ("gh pr diff", "gh pr diff 123", "ALLOW"),
         ("gh pr list", "gh pr list", "ALLOW"),

.claude/settings.json

@@ -6,12 +6,29 @@
       "Bash(git reset --hard:*)",
       "Bash(git branch -D:*)",
       "Bash(git checkout -b:*)",
+      "Bash(git checkout -B:*)",
       "Bash(git switch -c:*)",
       "Bash(git switch -C:*)",
+      "Bash(git switch --create:*)",
+      "Bash(git switch --force-create:*)",
       "Bash(gh pr create:*)",
       "Bash(gh pr edit:*)",
       "Bash(gh pr merge:*)",
-      "Bash(gh pr close:*)"
+      "Bash(gh pr close:*)",
+      "PowerShell(git push:*)",
+      "PowerShell(git commit:*)",
+      "PowerShell(git reset --hard:*)",
+      "PowerShell(git branch -D:*)",
+      "PowerShell(git checkout -b:*)",
+      "PowerShell(git checkout -B:*)",
+      "PowerShell(git switch -c:*)",
+      "PowerShell(git switch -C:*)",
+      "PowerShell(git switch --create:*)",
+      "PowerShell(git switch --force-create:*)",
+      "PowerShell(gh pr create:*)",
+      "PowerShell(gh pr edit:*)",
+      "PowerShell(gh pr merge:*)",
+      "PowerShell(gh pr close:*)"
     ]
   },
   "hooks": {
@@ -25,6 +42,15 @@
           }
         ]
       },
+      {
+        "matcher": "PowerShell",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "cd \"$CLAUDE_PROJECT_DIR\" && if command -v python3 >/dev/null 2>&1; then python3 .claude/hooks/check-dangerous-commands.py; else python .claude/hooks/check-dangerous-commands.py; fi"
+          }
+        ]
+      },
       {
         "matcher": "Read|Edit|Write|MultiEdit|Grep|Glob",
         "hooks": [
@@ -37,4 +63,3 @@
     ]
   }
 }
-