cc-safe-setup 29.6.38 → 29.6.39

package/README.md

@@ -4,7 +4,7 @@
 [![npm downloads](https://img.shields.io/npm/dw/cc-safe-setup)](https://www.npmjs.com/package/cc-safe-setup)
 [![tests](https://github.com/yurukusa/cc-safe-setup/actions/workflows/test.yml/badge.svg)](https://github.com/yurukusa/cc-safe-setup/actions/workflows/test.yml)
 
-**One command to make Claude Code safe for autonomous operation.** 654 example hooks · 14,078 tests · 1,000+ installs/day · [日本語](docs/README.ja.md)
+**One command to make Claude Code safe for autonomous operation.** 650 example hooks · 14,078 tests · 1,000+ installs/day · [日本語](docs/README.ja.md)
 
 ```bash
 npx cc-safe-setup
@@ -146,7 +146,7 @@ Guards against issues that corrupt sessions or waste tokens silently.
 | `--scan [--apply]` | Tech stack detection |
 | `--export / --import` | Team config sharing |
 | `--verify` | Test each hook |
-| `--install-example <name>` | Install from 654 examples |
+| `--install-example <name>` | Install from 650 examples |
 | `--examples [filter]` | Browse examples by keyword |
 | `--full` | All-in-one setup |
 | `--status` | Check installed hooks |

package/examples/dotenv-watch.sh

@@ -10,9 +10,9 @@
 #         API keys, wrong database URLs, or missing config values.
 #
 # TRIGGER: FileChanged
-# MATCHER: ".env" (watches .env files — also catches .env.local, .env.production)
+# MATCHER: ".env" (watches the .env file in cwd — use ".env|.env.local" for multiple files)
 #
-# INPUT: {"file_path": "/path/to/.env", "event": "modified|created|deleted"}
+# INPUT: {"file_path": "/path/to/.env", "event": "change|add|unlink"}
 #
 # DECISION CONTROL: None (notification only — shows stderr to user)
 
@@ -24,17 +24,17 @@ EVENT=$(echo "$INPUT" | jq -r '.event // empty' 2>/dev/null)
 FILENAME=$(basename "$FILE_PATH")
 
 case "$EVENT" in
-    modified)
+    change)
         echo "⚠ Environment file changed: ${FILENAME}" >&2
         echo "  Path: ${FILE_PATH}" >&2
         echo "  Action: Verify environment variables are still correct" >&2
         ;;
-    created)
+    add)
         echo "📝 New environment file: ${FILENAME}" >&2
         echo "  Path: ${FILE_PATH}" >&2
         echo "  Action: Review contents before use" >&2
         ;;
-    deleted)
+    unlink)
         echo "🗑 Environment file deleted: ${FILENAME}" >&2
         echo "  Path: ${FILE_PATH}" >&2
         echo "  Action: Check if environment variables are still available" >&2

package/examples/file-change-undo-tracker.sh

@@ -27,13 +27,13 @@ UNDO_FILE="/tmp/claude-undo-session-${PPID:-0}.sh"
 TIMESTAMP=$(date +"%H:%M:%S")
 
 # Log the change
-echo "${TIMESTAMP} ${EVENT:-modified} ${FILE}" >> "$LOG_FILE"
+echo "${TIMESTAMP} ${EVENT:-change} ${FILE}" >> "$LOG_FILE"
 
 # Track for undo (git-tracked files only)
 if git ls-files --error-unmatch "$FILE" &>/dev/null 2>&1; then
     # File is git-tracked — can be reverted with git checkout
     if ! grep -qF "git checkout -- \"$FILE\"" "$UNDO_FILE" 2>/dev/null; then
-        echo "git checkout -- \"$FILE\"  # ${EVENT:-modified} at ${TIMESTAMP}" >> "$UNDO_FILE"
+        echo "git checkout -- \"$FILE\"  # ${EVENT:-change} at ${TIMESTAMP}" >> "$UNDO_FILE"
     fi
 fi
 

package/index.mjs

@@ -1112,10 +1112,10 @@ async function installExample(name) {
   let matcher = 'Bash';
 
   // Detect trigger from header comments (case-insensitive for "Trigger:" prefix)
-  const triggerMatch = content.match(/^#\s*[Tt]rigger:\s*(\S+)/m);
+  const triggerMatch = content.match(/^#\s*[Tt][Rr][Ii][Gg][Gg][Ee][Rr]:\s*(\S+)/m);
   if (triggerMatch) {
     const t = triggerMatch[1];
-    if (['PermissionRequest','PostToolUse','Notification','Stop','SessionStart','PreCompact','SessionEnd','UserPromptSubmit'].includes(t)) {
+    if (['PermissionRequest','PostToolUse','Notification','Stop','SessionStart','PreCompact','SessionEnd','UserPromptSubmit','CwdChanged','FileChanged'].includes(t)) {
       trigger = t;
     }
   } else if (content.match(/^#.*PermissionRequest hook/m)) {
@@ -1127,8 +1127,12 @@ async function installExample(name) {
   // Detect matcher from header (JSON format or comment format)
   const matcherMatch = content.match(/"matcher":\s*"([^"]*)"/);
   if (matcherMatch) matcher = matcherMatch[1];
-  const commentMatcher = content.match(/^#\s*Matcher:\s*(.+)$/m);
-  if (commentMatcher) matcher = commentMatcher[1].trim();
+  const commentMatcher = content.match(/^#\s*[Mm][Aa][Tt][Cc][Hh][Ee][Rr]:\s*(.+)$/m);
+  if (commentMatcher) {
+    // Extract quoted value if present (e.g., ".env" or ".env|.env.local"), otherwise use raw
+    const quoted = commentMatcher[1].match(/^"([^"]*)"/);
+    matcher = quoted ? quoted[1] : commentMatcher[1].trim();
+  }
 
   // Update settings.json
   let settings = {};
@@ -1138,10 +1142,10 @@ async function installExample(name) {
   if (!settings.hooks) settings.hooks = {};
   if (!settings.hooks[trigger]) settings.hooks[trigger] = [];
 
-  const hookEntry = {
-    matcher: matcher,
-    hooks: [{ type: 'command', command: toBashPath(destPath) }],
-  };
+  // CwdChanged does not support matchers; FileChanged uses matcher from header
+  const hookEntry = trigger === 'CwdChanged'
+    ? { hooks: [{ type: 'command', command: toBashPath(destPath) }] }
+    : { matcher: matcher, hooks: [{ type: 'command', command: toBashPath(destPath) }] };
 
   // Check if already installed
   const existing = settings.hooks[trigger].find(h =>

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "cc-safe-setup",
-  "version": "29.6.38",
-  "description": "One command to make Claude Code safe. 654 example hooks + 8 built-in. 56 CLI commands. Token consumption diagnosis. Works with Auto Mode.",
+  "version": "29.6.39",
+  "description": "One command to make Claude Code safe. 650 example hooks + 8 built-in. 56 CLI commands. Token consumption diagnosis. Works with Auto Mode.",
   "main": "index.mjs",
   "bin": {
     "cc-safe-setup": "index.mjs"