cc-safe-setup 30.0.6 → 30.0.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -0
- package/index.mjs +15 -5
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -71,6 +71,8 @@ These are the exit codes, not the intent. Read them before trusting the row abov
|
|
|
71
71
|
Hooks stop a tool call before it runs. They are not a permission boundary — pair them with
|
|
72
72
|
`permissions.deny` and keep secrets outside the repository.
|
|
73
73
|
|
|
74
|
+
<a id="the-npm-release-is-behind-this-repository"></a>
|
|
75
|
+
|
|
74
76
|
## The npm release was behind this repository
|
|
75
77
|
|
|
76
78
|
This is kept as a record, because the gap lasted five months and anyone who installed from npm in that window still has the old guards.
|
package/index.mjs
CHANGED
|
@@ -219,8 +219,8 @@ if (HELP) {
|
|
|
219
219
|
npx github:yurukusa/cc-safe-setup Install 8 safety hooks (30 sec)
|
|
220
220
|
npx github:yurukusa/cc-safe-setup --shield Maximum safety — one command
|
|
221
221
|
npx github:yurukusa/cc-safe-setup --doctor Diagnose hook problems
|
|
222
|
-
(
|
|
223
|
-
months, so run --outdated if you installed before 2026-09-24)
|
|
222
|
+
(npx cc-safe-setup now installs the same code; npm sat at 29.8.0 / 2026-04-20
|
|
223
|
+
for five months, so run --outdated if you installed before 2026-09-24)
|
|
224
224
|
|
|
225
225
|
Protect:
|
|
226
226
|
--protect .env Block edits to a specific file
|
|
@@ -277,9 +277,10 @@ if (HELP) {
|
|
|
277
277
|
Find hooks: npx cc-hook-registry search <keyword>
|
|
278
278
|
Test hooks: npx cc-hook-test <hook.sh>
|
|
279
279
|
|
|
280
|
+
Field Manual: https://leanpub.com/claude-code-safety-field-manual (this repo as a book, free)
|
|
280
281
|
Token Checkup: https://yurukusa.github.io/cc-safe-setup/token-checkup.html
|
|
281
282
|
Token Book: https://yurukusa.github.io/cc-safe-setup/token-book.html
|
|
282
|
-
Safety Guide: https://zenn.dev/yurukusa/books/6076c23b1cb18b
|
|
283
|
+
Safety Guide: https://zenn.dev/yurukusa/books/6076c23b1cb18b (Japanese)
|
|
283
284
|
|
|
284
285
|
Hitting nested sub-agent dispatch (Task tool absent from sub-agent contexts)?
|
|
285
286
|
See: https://gist.github.com/yurukusa/cf477f03f03d9f93c184f1fb7d894f96
|
|
@@ -1930,9 +1931,17 @@ async function audit() {
|
|
|
1930
1931
|
// not a book link: the 100 real incidents validate the abstract risks just
|
|
1931
1932
|
// shown and cost nothing, so the deeper path stays free-education-first.
|
|
1932
1933
|
console.log(c.dim + ' • 100 real incidents these guards prevent: https://yurukusa.github.io/cc-safe-setup/incidents.html' + c.reset);
|
|
1933
|
-
console.log(c.dim + ' • Incident-prevention guide (Ch.3 free): https://zenn.dev/yurukusa/books/6076c23b1cb18b' + c.reset);
|
|
1934
1934
|
}
|
|
1935
|
+
// 2026-09-25: this list had no English destination at all — an English-speaking
|
|
1936
|
+
// user was sent to a Japanese book as the only "go deeper" option. The field
|
|
1937
|
+
// manual is this repository's own documentation, in English, minimum price zero.
|
|
1938
|
+
// The Japanese guide moves to the end and says so, so a reader can tell before
|
|
1939
|
+
// clicking which language they are about to land in.
|
|
1940
|
+
console.log(c.dim + ' • Everything here as a book (English, free): https://leanpub.com/claude-code-safety-field-manual' + c.reset);
|
|
1935
1941
|
console.log(c.dim + ' • Cut token cost (Ch.1 free): https://yurukusa.github.io/cc-safe-setup/token-book.html' + c.reset);
|
|
1942
|
+
if (score < 80) {
|
|
1943
|
+
console.log(c.dim + ' • Incident-prevention guide (Japanese, Ch.3 free): https://zenn.dev/yurukusa/books/6076c23b1cb18b' + c.reset);
|
|
1944
|
+
}
|
|
1936
1945
|
}
|
|
1937
1946
|
|
|
1938
1947
|
console.log();
|
|
@@ -3220,8 +3229,9 @@ async function team() {
|
|
|
3220
3229
|
// steps first (value-first, not a sales pitch). The deeper paid guides have free
|
|
3221
3230
|
// chapters, so they read as "go deeper if this helped" rather than an upsell.
|
|
3222
3231
|
console.log(c.bold + ' Go deeper (all free to start):' + c.reset);
|
|
3232
|
+
console.log(c.dim + ' • Everything here as a book (English, free): https://leanpub.com/claude-code-safety-field-manual' + c.reset);
|
|
3223
3233
|
console.log(c.dim + ' • Cut token cost (Ch.1 free): https://yurukusa.github.io/cc-safe-setup/token-book.html' + c.reset);
|
|
3224
|
-
console.log(c.dim + ' • Incident-prevention guide (Ch.3 free): https://zenn.dev/yurukusa/books/6076c23b1cb18b' + c.reset);
|
|
3234
|
+
console.log(c.dim + ' • Incident-prevention guide (Japanese, Ch.3 free): https://zenn.dev/yurukusa/books/6076c23b1cb18b' + c.reset);
|
|
3225
3235
|
console.log();
|
|
3226
3236
|
}
|
|
3227
3237
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "cc-safe-setup",
|
|
3
|
-
"version": "30.0.
|
|
3
|
+
"version": "30.0.7",
|
|
4
4
|
"description": "Safety hooks for Claude Code: PreToolUse/PostToolUse/Stop guards that block destructive or irreversible operations at the tool boundary and surface silent failures. Interactive installer, plain shell scripts, no npm dependencies (the hooks read their JSON input with jq, python3 or node).",
|
|
5
5
|
"main": "index.mjs",
|
|
6
6
|
"bin": {
|