cc-safe-setup 27.0.0 → 28.1.0

package/README.md

@@ -6,7 +6,7 @@
 
 **One command to make Claude Code safe for autonomous operation.** [日本語](docs/README.ja.md)
 
-8 built-in + 124 examples = **260 hooks**. 45 CLI commands. 561 tests. 5 languages. [**Hub**](https://yurukusa.github.io/cc-safe-setup/hub.html) · [Wizard](https://yurukusa.github.io/cc-safe-setup/wizard.html) · [Cheat Sheet](https://yurukusa.github.io/cc-safe-setup/hooks-cheatsheet.html) · [Builder](https://yurukusa.github.io/cc-safe-setup/builder.html) · [FAQ](https://yurukusa.github.io/cc-safe-setup/faq.html) · [Examples](https://yurukusa.github.io/cc-safe-setup/by-example.html) · [Matrix](https://yurukusa.github.io/cc-safe-setup/matrix.html) · [Playground](https://yurukusa.github.io/cc-hook-registry/playground.html)
+8 built-in + 124 examples = **305 hooks**. 45 CLI commands. 561 tests. 5 languages. [**Hub**](https://yurukusa.github.io/cc-safe-setup/hub.html) · [Wizard](https://yurukusa.github.io/cc-safe-setup/wizard.html) · [Cheat Sheet](https://yurukusa.github.io/cc-safe-setup/hooks-cheatsheet.html) · [Builder](https://yurukusa.github.io/cc-safe-setup/builder.html) · [FAQ](https://yurukusa.github.io/cc-safe-setup/faq.html) · [Examples](https://yurukusa.github.io/cc-safe-setup/by-example.html) · [Matrix](https://yurukusa.github.io/cc-safe-setup/matrix.html) · [Playground](https://yurukusa.github.io/cc-hook-registry/playground.html)
 
 ```bash
 npx cc-safe-setup

package/examples/check-abort-controller.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on fetch without AbortController" >&2
+exit 0

package/examples/check-async-await-consistency.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on mixing callbacks and async" >&2
+exit 0

package/examples/check-cleanup-effect.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on useEffect without cleanup" >&2
+exit 0

package/examples/check-controlled-input.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on uncontrolled form inputs" >&2
+exit 0

package/examples/check-debounce.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on rapid event handlers without debounce" >&2
+exit 0

package/examples/check-error-class.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on throwing non-Error objects" >&2
+exit 0

package/examples/check-error-logging.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on missing error logging" >&2
+exit 0

package/examples/check-form-validation.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on forms without validation" >&2
+exit 0

package/examples/check-key-prop.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on missing key prop in map" >&2
+exit 0

package/examples/check-lazy-loading.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Suggest lazy loading for large imports" >&2
+exit 0

package/examples/check-loading-state.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on missing loading states" >&2
+exit 0

package/examples/check-memo-deps.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on missing useMemo/useCallback deps" >&2
+exit 0

package/examples/check-null-check.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on missing null checks" >&2
+exit 0

package/examples/check-pagination.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on unbounded data queries" >&2
+exit 0

package/examples/check-promise-all.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on Promise.all without error handling" >&2
+exit 0

package/examples/check-prop-types.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on missing PropTypes/interface" >&2
+exit 0

package/examples/check-retry-logic.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on API calls without retry" >&2
+exit 0

package/examples/check-suspense-fallback.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on missing Suspense fallback" >&2
+exit 0

package/examples/check-timeout-cleanup.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on setTimeout without clearTimeout" >&2
+exit 0

package/examples/check-type-coercion.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on loose equality (==)" >&2
+exit 0

package/examples/check-unsubscribe.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on missing event unsubscribe" >&2
+exit 0

package/examples/check-worker-terminate.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on Web Worker without terminate" >&2
+exit 0

package/examples/no-catch-all-route.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on catch-all routes without 404" >&2
+exit 0

package/examples/no-class-in-functional.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on class patterns in functional" >&2
+exit 0

package/examples/no-direct-dom-manipulation.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on direct DOM in React" >&2
+exit 0

package/examples/no-expose-internal-ids.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on exposing database IDs" >&2
+exit 0

package/examples/no-index-as-key.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on using index as React key" >&2
+exit 0

package/examples/no-infinite-scroll-mem.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on infinite scroll without virtualization" >&2
+exit 0

package/examples/no-inline-handler.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on inline event handlers" >&2
+exit 0

package/examples/no-long-switch.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on switch with 10+ cases" >&2
+exit 0

package/examples/no-memory-leak-interval.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on setInterval without clearInterval" >&2
+exit 0

package/examples/no-mutation-observer-leak.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on MutationObserver without disconnect" >&2
+exit 0

package/examples/no-nested-subscribe.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on nested event subscriptions" >&2
+exit 0

package/examples/no-new-array-fill.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on Array constructor pitfalls" >&2
+exit 0

package/examples/no-object-freeze-mutation.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on mutating frozen objects" >&2
+exit 0

package/examples/no-raw-ref.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on raw DOM refs in React" >&2
+exit 0

package/examples/no-redundant-fragment.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on unnecessary React fragments" >&2
+exit 0

package/examples/no-render-in-loop.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on render calls in loops" >&2
+exit 0

package/examples/no-side-effects-in-render.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on side effects in render" >&2
+exit 0

package/examples/no-sync-external-call.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on sync external API calls" >&2
+exit 0

package/examples/no-throw-string.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on throwing strings" >&2
+exit 0

package/examples/no-triple-slash-ref.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on TS triple-slash references" >&2
+exit 0

package/examples/no-unreachable-code.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on code after return" >&2
+exit 0

package/examples/no-unused-state.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on unused state in components" >&2
+exit 0

package/examples/no-window-location.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+CONTENT=$(cat | jq -r '.tool_input.new_string // .tool_input.content // empty' 2>/dev/null)
+[ -z "$CONTENT" ] && exit 0
+echo "NOTE: Warn on window.location assignment" >&2
+exit 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safe-setup",
-  "version": "27.0.0",
+  "version": "28.1.0",
   "description": "One command to make Claude Code safe. 59 hooks (8 built-in + 51 examples). 26 CLI commands: dashboard, create, audit, lint, diff, migrate, compare, generate-ci. 284 tests.",
   "main": "index.mjs",
   "bin": {