cc-safe-setup 2.4.0 → 2.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +8 -1
- package/SAFETY_CHECKLIST.md +53 -0
- package/audit-web/index.html +494 -38
- package/docs/index.html +603 -0
- package/examples/case-sensitive-guard.sh +145 -0
- package/index.mjs +5 -1
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -130,7 +130,9 @@ Or start with the free hooks: [claude-code-hooks](https://github.com/yurukusa/cl
|
|
|
130
130
|
|
|
131
131
|
## Safety Audit
|
|
132
132
|
|
|
133
|
-
|
|
133
|
+
**[Try it in your browser](https://yurukusa.github.io/cc-safe-setup/)** — paste your settings.json, get a score instantly. Nothing leaves your browser.
|
|
134
|
+
|
|
135
|
+
Or from the CLI:
|
|
134
136
|
|
|
135
137
|
```bash
|
|
136
138
|
npx cc-safe-setup --audit
|
|
@@ -196,6 +198,11 @@ Or browse all available examples in [`examples/`](examples/):
|
|
|
196
198
|
- **branch-name-check.sh** — Warn on non-conventional branch names (feature/, fix/, etc.)
|
|
197
199
|
- **todo-check.sh** — Warn when committing files with TODO/FIXME/HACK markers
|
|
198
200
|
- **path-traversal-guard.sh** — Block Edit/Write with `../../` path traversal and system directories
|
|
201
|
+
- **case-sensitive-guard.sh** — Detect case-insensitive filesystems (exFAT, NTFS, HFS+) and block rm/mkdir that would collide due to case folding ([#37875](https://github.com/anthropics/claude-code/issues/37875))
|
|
202
|
+
|
|
203
|
+
## Safety Checklist
|
|
204
|
+
|
|
205
|
+
**[SAFETY_CHECKLIST.md](SAFETY_CHECKLIST.md)** — Copy-paste checklist for before/during/after autonomous sessions.
|
|
199
206
|
|
|
200
207
|
## Learn More
|
|
201
208
|
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
# Claude Code Safety Checklist
|
|
2
|
+
|
|
3
|
+
Use this checklist before running Claude Code autonomously. Copy to your project or CLAUDE.md.
|
|
4
|
+
|
|
5
|
+
## Before First Session
|
|
6
|
+
|
|
7
|
+
- [ ] Install safety hooks: `npx cc-safe-setup`
|
|
8
|
+
- [ ] Run safety audit: `npx cc-safe-setup --audit` (target: score ≥ 80)
|
|
9
|
+
- [ ] Create CLAUDE.md with project-specific rules
|
|
10
|
+
- [ ] Verify .env files are in .gitignore
|
|
11
|
+
- [ ] Ensure git remote is set (so work can be recovered)
|
|
12
|
+
|
|
13
|
+
## Before Autonomous Mode
|
|
14
|
+
|
|
15
|
+
- [ ] Create backup branch: `git checkout -b backup/before-autonomous-$(date +%Y%m%d)`
|
|
16
|
+
- [ ] Commit all current work
|
|
17
|
+
- [ ] Verify destructive-guard is blocking: `npx cc-safe-setup --verify`
|
|
18
|
+
- [ ] Check branch-guard protects main/master
|
|
19
|
+
- [ ] If using database: install `block-database-wipe`
|
|
20
|
+
- [ ] If sensitive configs: install `protect-dotfiles`
|
|
21
|
+
|
|
22
|
+
## During Session
|
|
23
|
+
|
|
24
|
+
- [ ] Monitor context usage (context-monitor hook warns at 40%)
|
|
25
|
+
- [ ] Check blocked-commands.log periodically
|
|
26
|
+
- [ ] Verify commits have meaningful messages
|
|
27
|
+
|
|
28
|
+
## After Session
|
|
29
|
+
|
|
30
|
+
- [ ] Review git log for unexpected changes
|
|
31
|
+
- [ ] Run test suite to catch regressions
|
|
32
|
+
- [ ] Check if any .env files were modified
|
|
33
|
+
- [ ] Review blocked-commands.log for patterns: `npx cc-safe-setup --learn`
|
|
34
|
+
|
|
35
|
+
## Team Setup
|
|
36
|
+
|
|
37
|
+
- [ ] Add GitHub Action to CI: `uses: yurukusa/cc-safe-setup@main`
|
|
38
|
+
- [ ] Set threshold ≥ 70 for CI safety gate
|
|
39
|
+
- [ ] Share `.safety-net.json` or hooks config across team
|
|
40
|
+
- [ ] Document which hooks are required vs optional
|
|
41
|
+
|
|
42
|
+
## Quick Reference
|
|
43
|
+
|
|
44
|
+
| Risk | Prevention | Install |
|
|
45
|
+
|------|-----------|---------|
|
|
46
|
+
| `rm -rf /` | destructive-guard | `npx cc-safe-setup` |
|
|
47
|
+
| Push to main | branch-guard | `npx cc-safe-setup` |
|
|
48
|
+
| .env committed | secret-guard | `npx cc-safe-setup` |
|
|
49
|
+
| Database wiped | block-database-wipe | `--install-example block-database-wipe` |
|
|
50
|
+
| Dotfiles modified | protect-dotfiles | `--install-example protect-dotfiles` |
|
|
51
|
+
| Deploy without commit | deploy-guard | `--install-example deploy-guard` |
|
|
52
|
+
| Commit without tests | verify-before-commit | `--install-example verify-before-commit` |
|
|
53
|
+
| Session crash data loss | session-checkpoint | `--install-example session-checkpoint` |
|