cc-safe-setup 11.4.0 → 11.6.0

package/README.md

@@ -6,7 +6,7 @@
 
 **One command to make Claude Code safe for autonomous operation.** [日本語](docs/README.ja.md)
 
-8 built-in + 104 examples = **118 hooks**. 40 CLI commands. 561 tests. 5 languages. [**Hub**](https://yurukusa.github.io/cc-safe-setup/hub.html) · [Cheat Sheet](https://yurukusa.github.io/cc-safe-setup/hooks-cheatsheet.html) · [Builder](https://yurukusa.github.io/cc-safe-setup/builder.html) · [FAQ](https://yurukusa.github.io/cc-safe-setup/faq.html) · [Examples](https://yurukusa.github.io/cc-safe-setup/by-example.html) · [Matrix](https://yurukusa.github.io/cc-safe-setup/matrix.html) · [Playground](https://yurukusa.github.io/cc-hook-registry/playground.html)
+8 built-in + 104 examples = **118 hooks**. 41 CLI commands. 561 tests. 5 languages. [**Hub**](https://yurukusa.github.io/cc-safe-setup/hub.html) · [Cheat Sheet](https://yurukusa.github.io/cc-safe-setup/hooks-cheatsheet.html) · [Builder](https://yurukusa.github.io/cc-safe-setup/builder.html) · [FAQ](https://yurukusa.github.io/cc-safe-setup/faq.html) · [Examples](https://yurukusa.github.io/cc-safe-setup/by-example.html) · [Matrix](https://yurukusa.github.io/cc-safe-setup/matrix.html) · [Playground](https://yurukusa.github.io/cc-hook-registry/playground.html)
 
 ```bash
 npx cc-safe-setup

package/examples/aws-region-guard.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+# aws-region-guard.sh — Warn when AWS commands target unexpected regions
+# TRIGGER: PreToolUse  MATCHER: "Bash"
+COMMAND=$(cat | jq -r '.tool_input.command // empty' 2>/dev/null)
+[ -z "$COMMAND" ] && exit 0
+echo "$COMMAND" | grep -qE '^\s*aws\s' || exit 0
+EXPECTED="${CC_AWS_REGION:-us-east-1}"
+if echo "$COMMAND" | grep -qE '\-\-region\s+(\S+)'; then
+  REGION=$(echo "$COMMAND" | grep -oE '\-\-region\s+(\S+)' | awk '{print $2}')
+  if [ "$REGION" != "$EXPECTED" ]; then
+    echo "WARNING: AWS command targeting $REGION (expected: $EXPECTED)." >&2
+    echo "Verify this is the correct region." >&2
+  fi
+fi
+exit 0

package/index.mjs

@@ -106,6 +106,8 @@ const PROFILE = PROFILE_IDX !== -1 ? process.argv[PROFILE_IDX + 1] : null;
 const COMPARE_IDX = process.argv.findIndex(a => a === '--compare');
 const COMPARE = COMPARE_IDX !== -1 ? { a: process.argv[COMPARE_IDX + 1], b: process.argv[COMPARE_IDX + 2] } : null;
 const REPLAY = process.argv.includes('--replay');
+const SAVE_PROFILE_IDX = process.argv.findIndex(a => a === '--save-profile');
+const SAVE_PROFILE = SAVE_PROFILE_IDX !== -1 ? process.argv[SAVE_PROFILE_IDX + 1] : null;
 const CREATE_IDX = process.argv.findIndex(a => a === '--create');
 const CREATE_DESC = CREATE_IDX !== -1 ? process.argv.slice(CREATE_IDX + 1).join(' ') : null;
 const SUGGEST = process.argv.includes('--suggest');
@@ -142,6 +144,7 @@ if (HELP) {
     npx cc-safe-setup --doctor     Diagnose why hooks aren't working
     npx cc-safe-setup --watch      Live dashboard of blocked commands
     npx cc-safe-setup --create "<desc>"  Generate a custom hook from description
+    npx cc-safe-setup --save-profile <name>  Save current hooks as a named profile
     npx cc-safe-setup --suggest        Analyze project and predict risks → suggest hooks
     npx cc-safe-setup --why <hook>     Why this hook exists (real incident + issue link)
     npx cc-safe-setup --replay         Replay blocked commands timeline (demo/review)
@@ -928,6 +931,53 @@ async function fullSetup() {
   console.log();
 }
 
+async function saveProfile(name) {
+  const { readdirSync } = await import('fs');
+  const profilesDir = join(HOME, '.claude', 'profiles');
+  mkdirSync(profilesDir, { recursive: true });
+
+  if (!name) {
+    // List saved profiles
+    console.log();
+    console.log(c.bold + '  Saved Profiles' + c.reset);
+    console.log();
+    const files = existsSync(profilesDir) ? readdirSync(profilesDir).filter(f => f.endsWith('.json')) : [];
+    if (files.length === 0) {
+      console.log(c.dim + '  No saved profiles yet.' + c.reset);
+      console.log(c.dim + '  Save: npx cc-safe-setup --save-profile my-setup' + c.reset);
+    } else {
+      for (const f of files) {
+        const pName = f.replace('.json', '');
+        const data = JSON.parse(readFileSync(join(profilesDir, f), 'utf-8'));
+        console.log(`  ${c.bold}${pName}${c.reset} (${data.hooks?.length || 0} hooks, saved ${data.savedAt?.split('T')[0] || '?'})`);
+        console.log(c.dim + `    Load: npx cc-safe-setup --profile ${pName}` + c.reset);
+      }
+    }
+    console.log();
+    return;
+  }
+
+  // Save current hook state
+  const hookDir = join(HOME, '.claude', 'hooks');
+  const hooks = existsSync(hookDir) ? readdirSync(hookDir).filter(f => f.endsWith('.sh') || f.endsWith('.py')) : [];
+
+  const profile = {
+    name,
+    savedAt: new Date().toISOString(),
+    hooks: hooks.map(h => h.replace(/\.(sh|py)$/, '')),
+    settings: existsSync(SETTINGS_PATH) ? JSON.parse(readFileSync(SETTINGS_PATH, 'utf-8')) : {},
+  };
+
+  const profilePath = join(profilesDir, `${name}.json`);
+  writeFileSync(profilePath, JSON.stringify(profile, null, 2));
+
+  console.log();
+  console.log(c.green + `  ✓ Profile "${name}" saved (${hooks.length} hooks)` + c.reset);
+  console.log(c.dim + `  File: ${profilePath}` + c.reset);
+  console.log(c.dim + `  Load: npx cc-safe-setup --profile ${name}` + c.reset);
+  console.log();
+}
+
 async function suggest() {
   const { execSync } = await import('child_process');
   const { readdirSync } = await import('fs');
@@ -4261,6 +4311,7 @@ async function main() {
   if (FULL) return fullSetup();
   if (DOCTOR) return doctor();
   if (WATCH) return watch();
+  if (SAVE_PROFILE_IDX !== -1) return saveProfile(SAVE_PROFILE);
   if (SUGGEST) return suggest();
   if (WHY_IDX !== -1) return why(WHY_HOOK);
   if (REPLAY) return replay();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safe-setup",
-  "version": "11.4.0",
+  "version": "11.6.0",
   "description": "One command to make Claude Code safe. 59 hooks (8 built-in + 51 examples). 26 CLI commands: dashboard, create, audit, lint, diff, migrate, compare, generate-ci. 284 tests.",
   "main": "index.mjs",
   "bin": {