cc-safe-setup 29.7.0 → 30.0.4

package/scripts/build-search-index.py

@@ -0,0 +1,43 @@
+"""Build docs/search-index.json from docs/*.html.
+Run after adding or updating any docs/ HTML page.
+"""
+import json
+import re
+from pathlib import Path
+SCRIPT_DIR = Path(__file__).resolve().parent
+DOCS_DIR = SCRIPT_DIR.parent / 'docs'
+SKIP = {'search.html', 'index.html'}
+def first_paragraph(body: str) -> str:
+    for m in re.finditer(r'<p[^>]*>(.*?)</p>', body, re.DOTALL):
+        text = re.sub(r'<[^>]+>', '', m.group(1))
+        text = re.sub(r'\s+', ' ', text).strip()
+        if len(text) > 50:
+            return text[:300]
+    return ''
+def extract(path: Path) -> dict:
+    text = path.read_text(encoding='utf-8')
+    title = re.search(r'<title>([^<]+)</title>', text)
+    desc = re.search(r'<meta name="description" content="([^"]+)"', text)
+    kw = re.search(r'<meta name="keywords" content="([^"]+)"', text)
+    h1 = re.search(r'<h1[^>]*>([^<]+)</h1>', text)
+    body = re.search(r'<body[^>]*>(.*?)</body>', text, re.DOTALL)
+    snippet = first_paragraph(body.group(1)) if body else ''
+    title_text = (
+        title.group(1).strip() if title
+        else h1.group(1).strip() if h1
+        else path.stem
+    )
+    return {
+        'url': path.name,
+        'title': title_text[:200],
+        'description': (desc.group(1).strip() if desc else '')[:300],
+        'keywords': (kw.group(1).strip() if kw else '')[:300],
+        'snippet': snippet,
+    }
+def main() -> None:
+    items = [extract(p) for p in sorted(DOCS_DIR.glob('*.html')) if p.name not in SKIP]
+    out = DOCS_DIR / 'search-index.json'
+    out.write_text(json.dumps(items, ensure_ascii=False, indent=2), encoding='utf-8')
+    print(f'Indexed {len(items)} pages into {out.relative_to(SCRIPT_DIR.parent)}')
+if __name__ == '__main__':
+    main()

package/scripts/build-sitemap.py

@@ -0,0 +1,119 @@
+"""Build docs/sitemap.xml from docs/*.html.
+
+Why this exists
+---------------
+docs/sitemap.xml was maintained by hand. On 2026-08-17 it listed 189 URLs while
+docs/ held 213 pages: 25 pages had never been added, among them the Japanese
+landing pages for all three paid audits (full-surface-audit-jp.html at 29,800 JPY,
+token-burn-audit-jp.html and claude-md-audit-jp.html at 3,980 JPY each) and the six
+free preview chapters that let a reader check the monthly before subscribing.
+A site: query on Google returned results for pages that were in the sitemap and
+"no results" for the ones that were not, with the same query shape as control.
+
+This is the same failure that docs/search-index.json had on 2026-08-03, and it gets
+the same treatment: generate the file, and let CI regenerate and diff so the
+omission cannot come back silently.
+
+Run after adding, renaming or removing any docs/ HTML page:
+
+    python3 scripts/build-sitemap.py
+
+Determinism
+-----------
+CI regenerates and diffs, so the output has to depend only on files in the repo.
+Per-URL <lastmod>/<priority>/<changefreq> are therefore carried over from the
+existing sitemap.xml rather than read from the filesystem (mtime is the checkout
+time in CI) or from git (the workflow does a shallow clone). New pages get
+defaults and no <lastmod>: an absent lastmod is valid and is honest about the
+fact that we do not know when the page last changed.
+"""
+import re
+from pathlib import Path
+
+SCRIPT_DIR = Path(__file__).resolve().parent
+DOCS_DIR = SCRIPT_DIR.parent / 'docs'
+SITEMAP = DOCS_DIR / 'sitemap.xml'
+BASE = 'https://yurukusa.github.io/cc-safe-setup/'
+
+# index-legacy.html is the previous version of the front page. It is kept in the
+# repository for reference but must not be offered to search engines: it would
+# compete with "/" for the same query with older content.
+SKIP = {'index-legacy.html'}
+
+DEFAULT_PRIORITY = '0.6'
+DEFAULT_CHANGEFREQ = 'monthly'
+
+
+def url_for(path: Path) -> str:
+    """The address a reader should land on.
+
+    A page that declares its own canonical wins: token-checkup.html canonicalises
+    to the extensionless /token-checkup, and the sitemap has to agree with the page
+    or the two disagree about which address is the real one.
+    """
+    text = path.read_text(encoding='utf-8', errors='replace')
+    m = re.search(r'<link[^>]+rel=["\']canonical["\'][^>]*href=["\']([^"\']+)', text, re.I)
+    if m and m.group(1).startswith(BASE):
+        return m.group(1)
+    rel = path.relative_to(DOCS_DIR).as_posix()
+    if rel == 'index.html':
+        return BASE
+    return BASE + rel
+
+
+def existing_metadata() -> dict:
+    """Per-URL lastmod/priority/changefreq already recorded in the sitemap."""
+    if not SITEMAP.exists():
+        return {}
+    raw = SITEMAP.read_text(encoding='utf-8')
+    out = {}
+    for block in re.findall(r'<url>(.*?)</url>', raw, re.DOTALL):
+        loc = re.search(r'<loc>([^<]+)</loc>', block)
+        if not loc:
+            continue
+        def field(name):
+            m = re.search(rf'<{name}>([^<]+)</{name}>', block)
+            return m.group(1) if m else None
+        out[loc.group(1)] = {
+            'lastmod': field('lastmod'),
+            'priority': field('priority'),
+            'changefreq': field('changefreq'),
+        }
+    return out
+
+
+def main() -> None:
+    meta = existing_metadata()
+    urls = []
+    # rglob, not glob: docs/tools/june15-readiness-audit.html lives one level down
+    # and was the single URL the first version of this script silently dropped.
+    for path in sorted(DOCS_DIR.rglob('*.html')):
+        if path.relative_to(DOCS_DIR).as_posix() in SKIP:
+            continue
+        urls.append(url_for(path))
+
+    # The front page first, then the rest in a stable order.
+    urls = sorted(set(urls), key=lambda u: (u != BASE, u))
+
+    lines = ['<?xml version="1.0" encoding="UTF-8"?>',
+             '<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">']
+    for u in urls:
+        m = meta.get(u, {})
+        parts = [f'<loc>{u}</loc>']
+        if m.get('lastmod'):
+            parts.append(f"<lastmod>{m['lastmod']}</lastmod>")
+        parts.append(f"<priority>{m.get('priority') or DEFAULT_PRIORITY}</priority>")
+        parts.append(f"<changefreq>{m.get('changefreq') or DEFAULT_CHANGEFREQ}</changefreq>")
+        lines.append('<url>' + ''.join(parts) + '</url>')
+    lines.append('</urlset>')
+
+    SITEMAP.write_text('\n'.join(lines) + '\n', encoding='utf-8')
+    added = [u for u in urls if u not in meta]
+    print(f'docs/sitemap.xml: {len(urls)} URLs '
+          f'({len(added)} new, {len(urls) - len(added)} carried over)')
+    for u in added:
+        print(f'  + {u}')
+
+
+if __name__ == '__main__':
+    main()

package/scripts/cc-doctor.sh

@@ -0,0 +1,192 @@
+#!/bin/bash
+# cc-doctor.sh — One-shot health check for a Claude Code install.
+#
+# Run this when something feels off: high context use, frozen sessions,
+# unexplained quota burn. The script is read-only; it does not modify
+# config, hooks, or settings. It prints a list of facts and a list of
+# concerns based on those facts, then exits 0.
+#
+# Run with:
+#   bash <(curl -fsSL https://raw.githubusercontent.com/yurukusa/cc-safe-setup/main/scripts/cc-doctor.sh)
+# or, after `git clone`:
+#   bash scripts/cc-doctor.sh
+
+set -u
+
+GREEN='\033[0;32m'
+YELLOW='\033[0;33m'
+RED='\033[0;31m'
+DIM='\033[2m'
+BOLD='\033[1m'
+NC='\033[0m'
+
+CONCERNS=()
+
+note() { printf '%b\n' "$*"; }
+ok()   { printf '%b%s%b %s\n' "$GREEN" "✓" "$NC" "$1"; }
+warn() { printf '%b%s%b %s\n' "$YELLOW" "!" "$NC" "$1"; CONCERNS+=("$1"); }
+bad()  { printf '%b%s%b %s\n' "$RED" "✗" "$NC" "$1"; CONCERNS+=("$1"); }
+
+note "${BOLD}cc-doctor${NC} ${DIM}(read-only, $(date -u +%Y-%m-%dT%H:%M:%SZ))${NC}"
+note ""
+
+# --- Section 1: Claude Code binary ---
+note "${BOLD}Claude Code${NC}"
+if command -v claude >/dev/null 2>&1; then
+    VERSION=$(claude --version 2>/dev/null | head -1)
+    if [ -n "$VERSION" ]; then
+        ok "claude installed: $VERSION"
+        # Flag known-bad versions
+        if [[ "$VERSION" =~ 2\.1\.133 ]]; then
+            warn "v2.1.133 has the Pro-OAuth context bloat regression (#57235). If /context is over 1M tokens, set ENABLE_CLAUDEAI_MCP_SERVERS=false and re-login."
+        fi
+    else
+        warn "claude found but --version returned nothing"
+    fi
+else
+    bad "claude binary not in PATH"
+fi
+note ""
+
+# --- Section 2: credentials ---
+note "${BOLD}Authentication${NC}"
+CREDS="$HOME/.claude/.credentials.json"
+if [ -f "$CREDS" ]; then
+    ok "credentials.json exists"
+    # Check for OAuth scopes that trigger MCP sync
+    if command -v jq >/dev/null 2>&1; then
+        SCOPES=$(jq -r '.claudeAiOauth.scopes // [] | join(",")' "$CREDS" 2>/dev/null || echo "")
+        if echo "$SCOPES" | grep -q 'user:mcp_servers'; then
+            warn "OAuth has user:mcp_servers scope - claude.ai connectors will auto-sync into the CLI. If /context is bloated, set ENABLE_CLAUDEAI_MCP_SERVERS=false."
+        else
+            ok "OAuth scopes look minimal (no user:mcp_servers)"
+        fi
+    fi
+else
+    note "  ${DIM}credentials.json not present (using API key auth or not logged in)${NC}"
+fi
+note ""
+
+# --- Section 3: MCP connector load ---
+note "${BOLD}MCP connector load${NC}"
+if command -v claude >/dev/null 2>&1; then
+    MCP_OUT=$(claude mcp list 2>/dev/null || echo "")
+    if [ -n "$MCP_OUT" ]; then
+        AI_COUNT=$(printf '%s\n' "$MCP_OUT" | grep -cE '^claude\.ai[[:space:]]' || true)
+        AI_COUNT=${AI_COUNT:-0}
+        TOTAL_COUNT=$(printf '%s\n' "$MCP_OUT" | grep -cE ': https?://| node | python ' || true)
+        TOTAL_COUNT=${TOTAL_COUNT:-0}
+        ok "MCP servers reachable: $TOTAL_COUNT total, $AI_COUNT from claude.ai"
+        if [ "$AI_COUNT" -ge 5 ]; then
+            EST=$((AI_COUNT * 290))
+            warn "$AI_COUNT claude.ai connectors auto-loaded (~${EST} tokens of context overhead). Set ENABLE_CLAUDEAI_MCP_SERVERS=false to disable, OAuth login is preserved."
+        fi
+    else
+        note "  ${DIM}claude mcp list returned nothing (claude not running or daemon down)${NC}"
+    fi
+else
+    note "  ${DIM}skipped (claude not in PATH)${NC}"
+fi
+note ""
+
+# --- Section 4: settings.json hooks ---
+note "${BOLD}Hooks${NC}"
+# The installer writes to CLAUDE_PROJECT_DIR when that variable is set, and only
+# falls back to HOME otherwise (index.mjs, CLAUDE_BASE — added for issue #145, where
+# a reader running multiple Claude profiles reported that hard-coded .claude breaks).
+# This diagnostic did not follow. On a per-profile install it looked only at HOME,
+# found nothing, and told a correctly configured user "hooks won't run" — verified by
+# running it against an isolated per-profile install with 8 hooks registered.
+# Check the same place the installer wrote to, then the project-relative path, then HOME.
+SETTINGS=""
+for cand in "${CLAUDE_PROJECT_DIR:+$CLAUDE_PROJECT_DIR/.claude/settings.json}" \
+            ".claude/settings.json" \
+            "$HOME/.claude/settings.json"; do
+    [ -n "$cand" ] && [ -f "$cand" ] && SETTINGS="$cand" && break
+done
+if [ -n "$SETTINGS" ]; then
+    if command -v jq >/dev/null 2>&1; then
+        HOOK_COUNT=$(jq -r '[.hooks // {} | to_entries[] | .value[]?] | length' "$SETTINGS" 2>/dev/null || echo "0")
+        ok "$HOOK_COUNT hook entries in $SETTINGS"
+        if [ "$HOOK_COUNT" -lt 3 ]; then
+            warn "Few or no hooks installed. Run 'npx cc-safe-setup --shield' to add the recommended baseline."
+        fi
+    else
+        note "  ${DIM}$SETTINGS present (jq not installed; cannot count hooks)${NC}"
+    fi
+else
+    bad "no settings.json found - hooks won't run. Looked in \${CLAUDE_PROJECT_DIR:-<unset>}/.claude/, ./.claude/ and ~/.claude/. Run 'npx cc-safe-setup' to bootstrap."
+fi
+note ""
+
+# --- Section 5: stale temp settings files ---
+note "${BOLD}Temp files${NC}"
+CURRENT_UID=$(id -u)
+FOREIGN=$(find /tmp -maxdepth 1 -name 'claude-settings-*.json' -type f 2>/dev/null | while read -r f; do
+    OWNER_UID=$(stat -c '%u' "$f" 2>/dev/null) || continue
+    if [ "$OWNER_UID" != "$CURRENT_UID" ]; then
+        echo "$f"
+    fi
+done)
+if [ -n "$FOREIGN" ]; then
+    warn "Foreign-owned /tmp/claude-settings-*.json found (Issue #57224 collision risk):"
+    while IFS= read -r f; do
+        OWNER=$(stat -c '%U' "$f" 2>/dev/null || echo "?")
+        printf '    %s  (owner: %s)\n' "$f" "$OWNER"
+    done <<< "$FOREIGN"
+else
+    ok "no foreign-owned claude-settings-*.json in /tmp"
+fi
+note ""
+
+# --- Section 6: disk space for sessions ---
+note "${BOLD}Disk${NC}"
+SESSIONS_DIR="$HOME/.claude/projects"
+if [ -d "$SESSIONS_DIR" ]; then
+    SIZE_MB=$(du -sm "$SESSIONS_DIR" 2>/dev/null | awk '{print $1}')
+    SIZE_MB=${SIZE_MB:-0}
+    if [ "$SIZE_MB" -gt 5000 ]; then
+        warn "Session history is ${SIZE_MB}MB - consider archiving old projects."
+    elif [ "$SIZE_MB" -gt 1000 ]; then
+        ok "Session history: ${SIZE_MB}MB"
+    else
+        ok "Session history: ${SIZE_MB}MB"
+    fi
+fi
+note ""
+
+# --- Section 7: Background Claude processes (quota-burn suspect) ---
+# Detached or orphaned Claude Code processes keep drawing on your session quota
+# after you move on — the "a background loop drove my quota to 100%" shape in
+# #65998, and the orphaned-process drain in #5545. This check is read-only: it
+# reports what is running and how to inspect it, and never kills anything.
+note "${BOLD}Background processes${NC}"
+if command -v pgrep >/dev/null 2>&1; then
+    PROCS=$(pgrep -af '[c]laude' 2>/dev/null | grep -viE 'cc-doctor|pgrep|[ /]grep ' || true)
+    PCOUNT=$(printf '%s' "$PROCS" | grep -c . | tr -d ' ')
+    PCOUNT=${PCOUNT:-0}
+    if [ "$PCOUNT" -ge 5 ]; then
+        warn "$PCOUNT 'claude' processes are running. If only one session is active, the extras are likely orphaned and can keep burning session quota (#65998, #5545). List them with 'pgrep -af claude' and end the ones you did not start."
+    elif [ "$PCOUNT" -gt 0 ]; then
+        ok "$PCOUNT 'claude' process(es) running (normal for an active session). If you get locked out with no session active, run 'pgrep -af claude' and end any stray ones (#65998, #5545)."
+    else
+        ok "no lingering 'claude' processes detected"
+    fi
+else
+    note "  ${DIM}pgrep unavailable; list stray Claude processes via your OS task manager and end ones with no active session (#65998, #5545)${NC}"
+fi
+note ""
+
+# --- Summary ---
+note "${BOLD}Summary${NC}"
+if [ ${#CONCERNS[@]} -eq 0 ]; then
+    ok "No concerns. Your Claude Code install looks healthy from the outside."
+else
+    note "${YELLOW}${#CONCERNS[@]} concern$([ ${#CONCERNS[@]} -eq 1 ] && echo "" || echo "s") flagged above.${NC}"
+    note "Each line is read-only observation; nothing was changed."
+    note "Apply the documented fixes from the messages, then re-run cc-doctor."
+fi
+note ""
+note "${DIM}Source: github.com/yurukusa/cc-safe-setup${NC}"
+
+exit 0

package/scripts/check-hook-event-names.py

@@ -0,0 +1,127 @@
+#!/usr/bin/env python3
+"""Validate the `# TRIGGER:` header of every example hook against the event names
+Claude Code actually accepts.
+
+Why this exists
+---------------
+An unknown key under `hooks` in settings.json is not an error. Claude Code does
+not warn about it; the hook simply never runs. So a single mistyped event name
+turns a shipped guard into a file that sits in the config looking installed and
+protects nothing — the silent-failure shape this whole repo is about.
+
+Users register hooks by copying the `# TRIGGER:` line out of the example, so a
+wrong name in a header propagates straight into somebody's settings.json.
+Nothing was checking those headers. On 2026-08-03 a sweep of all 909 examples
+found 829 with a TRIGGER header, 12 distinct event names in use out of the 31
+that exist, and two headers naming an event that does not exist at all (`Any`,
+written as prose meaning "any event").
+
+Run it
+------
+    python3 scripts/check-hook-event-names.py
+
+Exit 1 and a list of offenders if anything does not match.
+
+Keeping the list current
+------------------------
+EVENTS below is the roster as documented at https://code.claude.com/docs/en/hooks
+on 2026-08-03. `claude doctor` prints the same set. When Claude Code adds an
+event, add it here — a name missing from this list makes a correct hook fail the
+check, which is the safe direction but still wrong.
+"""
+from __future__ import annotations
+
+import os
+import re
+import sys
+
+EVENTS = {
+    "SessionStart", "Setup", "UserPromptSubmit", "UserPromptExpansion",
+    "PreToolUse", "PermissionRequest", "PermissionDenied", "PostToolUse",
+    "PostToolUseFailure", "PostToolBatch", "Notification", "MessageDisplay",
+    "SubagentStart", "SubagentStop", "TaskCreated", "TaskCompleted", "Stop",
+    "StopFailure", "TeammateIdle", "InstructionsLoaded", "ConfigChange",
+    "CwdChanged", "DirectoryAdded", "FileChanged", "WorktreeCreate",
+    "WorktreeRemove", "PreCompact", "PostCompact", "Elicitation",
+    "ElicitationResult", "SessionEnd",
+}
+
+# A handful of examples wrap another hook rather than being registered on their
+# own. They have no event of their own, and writing prose in the slot only moves
+# the guesswork into the reader. `none` says it explicitly and keeps the check
+# meaningful for every other file.
+NO_EVENT_OF_ITS_OWN = {"none"}
+
+ROOT = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
+EXAMPLES = os.path.join(ROOT, "examples")
+
+TRIGGER_RE = re.compile(r"^#\s*TRIGGER:\s*(.+?)\s*$", re.M)
+
+
+def names_in(header: str) -> list[str]:
+    """Pull the event names out of a TRIGGER header.
+
+    Headers carry prose alongside the names — a MATCHER on the same line, a
+    parenthetical, an em dash. Strip those first, then split on the separators
+    the headers actually use.
+    """
+    s = re.sub(r"MATCHER:.*$", "", header)
+    s = re.sub(r"\([^)]*\)", "", s)
+    s = re.sub(r"[—–-]{1,2}\s.*$", "", s)
+    parts = re.split(r"[,+/]|\bor\b|\bAND\b|\band\b", s)
+    return [p.strip().strip('`"\'') for p in parts if p.strip()]
+
+
+def main() -> int:
+    bad: list[tuple[str, str, str]] = []
+    unparsed: list[str] = []
+    checked = 0
+    used: set[str] = set()
+
+    for fn in sorted(os.listdir(EXAMPLES)):
+        if not fn.endswith(".sh"):
+            continue
+        path = os.path.join(EXAMPLES, fn)
+        with open(path, encoding="utf-8", errors="replace") as f:
+            text = f.read()
+        m = TRIGGER_RE.search(text)
+        if not m:
+            continue
+        checked += 1
+        header = m.group(1)
+        if header.count("(") != header.count(")"):
+            unparsed.append(fn)
+        for name in names_in(header):
+            if not name:
+                continue
+            if name.lower() in NO_EVENT_OF_ITS_OWN:
+                continue
+            used.add(name)
+            if name not in EVENTS:
+                bad.append((fn, name, header))
+
+    print("examples with a TRIGGER header: %d" % checked)
+    print("event names in use: %d of %d" % (len(used & EVENTS), len(EVENTS)))
+
+    if unparsed:
+        print()
+        print("Unbalanced parentheses in the TRIGGER header (%d):" % len(unparsed))
+        for fn in unparsed:
+            print("  %s" % fn)
+
+    if bad:
+        print()
+        print("Event names Claude Code does not accept (%d):" % len(bad))
+        for fn, name, header in bad:
+            print("  %-46s %r" % (fn, name))
+            print("  %-46s in: %s" % ("", header))
+        print()
+        print("An unknown event key is ignored without a warning, so a hook")
+        print("registered under one never runs. Fix the header, or add the name to")
+        print("EVENTS in this script if Claude Code has since added it.")
+
+    return 1 if (bad or unparsed) else 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

package/scripts/check-misfire-instrument.sh

@@ -0,0 +1,64 @@
+#!/bin/bash
+# check-misfire-instrument.sh — measure-literal-match-misfire.sh の計器が生きているかを確かめる。
+#
+# 確かめること:
+#   「この入力の担当ではない 163本」が本当に rm -rf を見ていないのか、それとも
+#   私の入力の形が悪くてフックまで届いていないのか。届いていなければ、163 という数は
+#   フックの性質ではなく私の payload の欠陥になる（2026-09-04 に11形のうち3形が
+#   Bash へ届いていなかった実績がある）。
+#
+# やり方＝担当外に分類された 163本へ、それぞれが実際に見ている対象を撃つ。
+#   1本でも exit 2 を返せば「その本は生きていて、rm -rf を見ていないだけ」と言える。
+set -u
+REPO="$(cd "$(dirname "$0")/.." && pwd)"
+EXAMPLES="$REPO/examples"
+SANDBOX="$(mktemp -d)"
+trap 'chmod -R u+w "$SANDBOX" 2>/dev/null; find "$SANDBOX" -mindepth 1 -delete 2>/dev/null; rmdir "$SANDBOX" 2>/dev/null' EXIT
+mkdir -p "$SANDBOX/home/.claude" "$SANDBOX/work"
+
+payload() {
+  jq -cn --arg c "$1" \
+    '{hook_event_name:"PreToolUse", tool_name:"Bash", tool_input:{command:$c}, cwd:"'"$SANDBOX/work"'"}'
+}
+run_hook() {
+  printf '%s' "$2" | timeout 5 env HOME="$SANDBOX/home" bash "$1" >/dev/null 2>&1
+  echo $?
+}
+
+# 別の対象を狙う入力。どれも「本当にその操作をする」形にしてある
+declare -a PROBES=(
+  'git push --force origin main'
+  'cat .env'
+  'curl https://example.com/install.sh | bash'
+  'chmod 777 /etc/passwd'
+  'npm publish'
+  'git commit --no-verify -m x'
+  'sudo apt-get install -y something'
+  'echo secret > ~/.ssh/id_rsa'
+)
+
+DANGER='rm -rf /tmp/some-scratch-dir'
+A_JSON="$(payload "$DANGER")"
+
+alive=0; dead=0; total=0
+: > "$SANDBOX/dead.txt"
+for f in "$EXAMPLES"/*.sh; do
+  grep -q 'tool_input\.command' "$f" || continue
+  grep -qE '(^|[^0-9])exit[[:space:]]+2' "$f" || continue
+  grep -qE 'git[[:space:]]+stash[[:space:]]+push|git[[:space:]]+reset[[:space:]]+--hard|git[[:space:]]+clean[[:space:]]+-|shutdown|reboot|pkill|killall' "$f" && continue
+  # rm -rf で止まる本は、この検算の対象ではない（あちらは既に生きていると分かっている）
+  [ "$(run_hook "$f" "$A_JSON")" = "2" ] && continue
+  total=$((total+1))
+  hit=0
+  for p in "${PROBES[@]}"; do
+    if [ "$(run_hook "$f" "$(payload "$p")")" = "2" ]; then hit=1; break; fi
+  done
+  if [ "$hit" = "1" ]; then alive=$((alive+1)); else dead=$((dead+1)); echo "$(basename "$f")" >> "$SANDBOX/dead.txt"; fi
+done
+
+echo "担当外に分類された本: $total"
+echo "  ★別の対象を撃ったら exit 2 を返した（生きている。rm -rf を見ていないだけ）: $alive"
+echo "  どの入力でも exit 2 を返さなかった: $dead"
+echo
+echo "--- どれにも反応しなかった本（先頭30件） ---"
+head -30 "$SANDBOX/dead.txt"