cc-safe-setup 28.4.2 → 28.4.4

package/README.md

@@ -64,7 +64,7 @@ Claude Code ships with no safety hooks by default. This tool fixes that.
 
 Each hook exists because a real incident happened without it.
 
-## All 45 Commands
+## All 49 Commands
 
 | Command | What It Does |
 |---------|-------------|
@@ -112,6 +112,9 @@ Each hook exists because a real incident happened without it.
 | `--test-hook <name>` | Test a specific hook with sample input |
 | `--simulate "cmd"` | Preview how all hooks react to a command |
 | `--protect <path>` | Block edits to a file or directory |
+| `--rules [file]` | Compile YAML rules into hooks |
+| `--validate` | Validate all hook scripts (syntax + structure) |
+| `--safe-mode` | Maximum protection: all safety hooks + strict config |
 | `--changelog` | Show what changed in each version |
 | `--report` | Generate safety report |
 | `--help` | Show help |
@@ -134,6 +137,9 @@ Each hook exists because a real incident happened without it.
 | Diagnose why hooks aren't working | `npx cc-safe-setup --doctor` |
 | Preview how hooks react to a command | `npx cc-safe-setup --simulate "git push origin main"` |
 | Protect a specific file from edits | `npx cc-safe-setup --protect .env` |
+| Define rules in YAML, compile to hooks | `npx cc-safe-setup --rules rules.yaml` |
+| Validate all hook scripts are correct | `npx cc-safe-setup --validate` |
+| Maximum protection mode | `npx cc-safe-setup --safe-mode` |
 | Migrate from Cursor/Windsurf | [Migration Guide](https://yurukusa.github.io/cc-safe-setup/migration-guide.html) |
 
 ## How It Works

package/index.mjs

@@ -1573,7 +1573,7 @@ async function guard(description) {
   if (!settings.hooks) settings.hooks = {};
   if (!settings.hooks[trigger]) settings.hooks[trigger] = [];
 
-  const cmd = `bash ${hookPath}`;
+  const cmd = `bash ${toBashPath(hookPath)}`;
   const alreadyExists = JSON.stringify(settings.hooks).includes(hookName);
   if (!alreadyExists) {
     const existing = settings.hooks[trigger].find(e => e.matcher === matcher);
@@ -2435,7 +2435,7 @@ async function shield() {
 
   for (const f of hookFiles) {
     const content = readFileSync(join(HOOKS_DIR, f), 'utf-8');
-    const cmd = `bash ${join(HOOKS_DIR, f)}`;
+    const cmd = `bash ${toBashPath(join(HOOKS_DIR, f))}`;
 
     // Check if already in settings
     const alreadyConfigured = JSON.stringify(settings.hooks).includes(f);
@@ -4557,7 +4557,7 @@ FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
   if (!settings.hooks) settings.hooks = {};
   if (!settings.hooks.PreToolUse) settings.hooks.PreToolUse = [];
 
-  const hookCmd = `bash ${hookPath}`;
+  const hookCmd = `bash ${toBashPath(hookPath)}`;
 
   // Check all matchers for existing compiled-rules entry
   let found = false;
@@ -4679,7 +4679,7 @@ exit 0
   if (!settings.hooks.PreToolUse) settings.hooks.PreToolUse = [];
 
   // Register under specific matchers based on rule types (NEVER use "" matcher)
-  const hookCmd = `bash ${hookPath}`;
+  const hookCmd = `bash ${toBashPath(hookPath)}`;
   const hasBlocks = rules.some(r => r.type === 'block');
   const hasApproves = rules.some(r => r.type === 'approve');
   const hasProtects = rules.some(r => r.type === 'protect');

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "cc-safe-setup",
-  "version": "28.4.2",
-  "description": "One command to make Claude Code safe. 336 hooks (8 built-in + 328 examples). 49 CLI commands. 978 tests. 5 languages.",
+  "version": "28.4.4",
+  "description": "One command to make Claude Code safe. 336 hooks (8 built-in + 328 examples). 49 CLI commands. 980 tests. 5 languages.",
   "main": "index.mjs",
   "bin": {
     "cc-safe-setup": "index.mjs"