feat(claude): add 'git commit --no-verify' prompt to git guardrails

Author: denolfe

claude/hooks/git-guardrails.test.ts

@@ -185,6 +185,49 @@ describe('amend prompting', () => {
   })
 })
 
+describe('no-verify prompting', () => {
+  test('prompts for git commit --no-verify', () => {
+    const { output, exitCode } = runHook(createInput('git commit --no-verify -m "Skip hooks"'))
+
+    expect(exitCode).toBe(0)
+    expect(output?.hookSpecificOutput?.permissionDecision).toBe('ask')
+    expect(output?.hookSpecificOutput?.permissionDecisionReason).toContain('bypass')
+  })
+
+  test('prompts for git commit with --no-verify and other flags', () => {
+    const { output, exitCode } = runHook(createInput('git commit -a --no-verify -m "Message"'))
+
+    expect(exitCode).toBe(0)
+    expect(output?.hookSpecificOutput?.permissionDecision).toBe('ask')
+  })
+
+  test('prompts for git commit --no-verify without message', () => {
+    const { output, exitCode } = runHook(createInput('git commit --no-verify'))
+
+    expect(exitCode).toBe(0)
+    expect(output?.hookSpecificOutput?.permissionDecision).toBe('ask')
+  })
+
+  test('prompts for git commit --no-verify with heredoc', () => {
+    const command = `git commit --no-verify -m "$(cat <<'EOF'
+Test commit message
+EOF
+)"`
+
+    const { output, exitCode } = runHook(createInput(command))
+
+    expect(exitCode).toBe(0)
+    expect(output?.hookSpecificOutput?.permissionDecision).toBe('ask')
+  })
+
+  test('allows regular git commit without --no-verify', () => {
+    const { output, exitCode } = runHook(createInput('git commit -m "Regular commit"'))
+
+    expect(exitCode).toBe(0)
+    expect(output).toBeNull()
+  })
+})
+
 describe('attribution stripping', () => {
   test('strips "Generated with Claude Code" line', () => {
     const command = `git commit -m "Test commit

claude/hooks/git-guardrails.ts

@@ -14,7 +14,11 @@
  *      - Requires explicit confirmation before amending commits
  *      - Returns ask decision to prompt user
  *
- *   3. Strips Claude attribution from git commit messages
+ *   3. Prompts for approval on `git commit --no-verify`
+ *      - Requires explicit confirmation before bypassing repository git hooks
+ *      - Returns ask decision to prompt user
+ *
+ *   4. Strips Claude attribution from git commit messages
  *      - Removes lines containing "generated" (case-insensitive)
  *      - Removes lines containing "co-authored-by" (case-insensitive)
  *      - Allows commits to proceed with cleaned messages
@@ -69,6 +73,18 @@ const handler: PreToolUseHandler<BashToolInput> = data => {
     }
   }
 
+  // Prompt for approval on git commit --no-verify
+  if (/git\s+commit/.test(command) && /--no-verify/.test(command)) {
+    return {
+      hookSpecificOutput: {
+        hookEventName: 'PreToolUse',
+        permissionDecision: 'ask',
+        permissionDecisionReason:
+          'Using --no-verify to bypass repository git hooks. Confirm you want to skip pre-commit checks?',
+      },
+    }
+  }
+
   // Strip Claude attribution from commits
   if (/git\s+commit/.test(command)) {
     const lines = command.split('\n')