Help stop your AI coding agent leaking secrets or touching production

Hooks, permission presets, and git guards for Next.js + Supabase + Stripe apps built with Claude Code or Cursor. $24 (UK buyers pay $28.80 incl. VAT).

Get the Guardrails Pack ($24; UK buyers pay $28.80 incl. VAT)

Prices exclude VAT; UK and EU VAT is added at Gumroad checkout.

Stack & Ship Guardrails Pack v1.0.1, hooks for Claude Code and Cursor. "Help stop your AI coding agent leaking secrets or touching production." Terminal output from the pack's real PreToolUse hooks: curl uploading .env is denied (secret egress blocked), cat .env.local is denied, supabase db push is denied, git push --force is denied, and npm test is allowed.
  • A secret-egress hook that blocks commands containing a live Stripe key, webhook secret, Supabase secret or service-role key, GitHub token, or AWS access key id.
  • The same guard hook as AI Rules v2: blocks supabase db push, production deploys, Stripe live mode, force pushes, and .env reads.
  • Three Claude Code permission presets (solo, team, and CI), plus Cursor hooks for shell commands, file reads, and MCP calls.
  • git pre-commit and pre-push guards that work with any editor, and 6 one-page fix guides.
  • 337 test cases, 0 failures, run 15 Oct 2026. Needs Node 18+ and Claude Code 2.1.295+ (Cursor: failClosed hooks).

Limits: Pattern-based: rephrased, split-string or base64-encoded commands can get past it. A proxy line in ~/.curlrc or ~/.wgetrc, or a ~/.netrc entry written earlier, can reroute or re-credential a call. --no-verify skips the git hooks. No guarantee.

Get the Guardrails Pack ($24; UK buyers pay $28.80 incl. VAT)