npm - cc-safe-setup - Versions diffs - 5.3.0 → 5.4.0 - Mend

cc-safe-setup 5.3.0 → 5.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/README.md +1 -0
package/audit-web/index.html +228 -642
package/docs/index-legacy.html +685 -0
package/docs/index.html +228 -642
package/examples/reinject-claudemd.sh +44 -0
package/index.mjs +9 -0
package/package.json +1 -1
package/docs/app.html +0 -271

package/examples/reinject-claudemd.sh ADDED Viewed

@@ -0,0 +1,44 @@
+#!/bin/bash
+# ================================================================
+# reinject-claudemd.sh — Re-inject CLAUDE.md content after compact
+# ================================================================
+# PURPOSE:
+#   After /compact, Claude Code often "forgets" CLAUDE.md rules.
+#   This SessionStart hook reads CLAUDE.md and outputs its content
+#   as a reminder, ensuring rules persist across sessions.
+#
+#   GitHub #6354 (27r) — "Claude forgets everything in CLAUDE.md
+#   after compaction"
+#
+# TRIGGER: SessionStart
+# MATCHER: ""
+#
+# HOW IT WORKS:
+#   On session start, reads CLAUDE.md from the current project
+#   and outputs key rules as a reminder message.
+# ================================================================
+# Look for CLAUDE.md in current directory and parents
+CLAUDE_MD=""
+DIR="$(pwd)"
+while [ "$DIR" != "/" ]; do
+    if [ -f "$DIR/CLAUDE.md" ]; then
+        CLAUDE_MD="$DIR/CLAUDE.md"
+        break
+    fi
+    DIR=$(dirname "$DIR")
+done
+if [ -z "$CLAUDE_MD" ]; then
+    exit 0
+fi
+# Read CLAUDE.md and extract key rules (lines starting with - or *)
+RULES=$(grep -E '^\s*[-*]' "$CLAUDE_MD" 2>/dev/null | head -20)
+if [ -n "$RULES" ]; then
+    echo "REMINDER: CLAUDE.md rules (from $CLAUDE_MD):" >&2
+    echo "$RULES" >&2
+fi
+exit 0

package/index.mjs CHANGED Viewed

@@ -135,6 +135,8 @@ if (HELP) {
     api-error-alert      Notifies when session stops due to API errors
   More: https://github.com/yurukusa/cc-safe-setup
+  Find hooks: npx cc-hook-registry search <keyword>
+  Test hooks: npx cc-hook-test <hook.sh>
 `);
   process.exit(0);
 }
@@ -363,6 +365,9 @@ function examples() {
       'commit-quality-gate.sh': 'Warn on vague or too-long commit messages',
       'diff-size-guard.sh': 'Warn/block on large diffs (10+ files warn, 50+ block)',
       'dependency-audit.sh': 'Warn on new package installs not in manifest',
+      'binary-file-guard.sh': 'Warn when Write targets binary file types',
+      'stale-branch-guard.sh': 'Warn when branch is far behind default',
+      'symlink-guard.sh': 'Detect symlink/junction traversal in rm targets',
       'cost-tracker.sh': 'Estimate session token cost ($1 warn, $5 alert)',
       'read-before-edit.sh': 'Warn when editing files not recently read',
     },
@@ -919,6 +924,10 @@ function issues() {
     { hook: 'diff-size-guard', issues: ['Unreviable mega-commits'] },
     { hook: 'dependency-audit', issues: ['Supply chain risk from unknown packages'] },
     { hook: 'read-before-edit', issues: ['old_string mismatch from editing unread files'] },
+    { hook: 'symlink-guard', issues: ['#36339 NTFS junction traversal (93r)', '#764 Symlink resolution failure (63r)'] },
+    { hook: 'binary-file-guard', issues: ['Binary file corruption from Write tool'] },
+    { hook: 'stale-branch-guard', issues: ['Merge conflicts from stale branches'] },
+    { hook: 'reinject-claudemd', issues: ['#6354 CLAUDE.md lost after compaction (27r)'] },
   ];
   console.log();

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "cc-safe-setup",
-  "version": "5.3.0",
+  "version": "5.4.0",
   "description": "One command to make Claude Code safe for autonomous operation. 8 built-in + 39 examples. 23 commands including dashboard, issues, create, audit, lint, diff. 260 tests. 2,500+ daily npm downloads.",
   "main": "index.mjs",
   "bin": {

package/docs/app.html DELETED Viewed

@@ -1,271 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>cc-safe-setup — Claude Code Safety Suite</title>
-<meta name="description" content="Audit, build, browse, and learn Claude Code hooks. All in one page, 100% client-side.">
-<style>
-*{box-sizing:border-box;margin:0;padding:0}
-body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;background:#0d1117;color:#c9d1d9;min-height:100vh}
-.nav{display:flex;background:#161b22;border-bottom:1px solid #30363d;overflow-x:auto}
-.nav a{padding:.75rem 1.2rem;color:#8b949e;text-decoration:none;font-size:.85rem;white-space:nowrap;border-bottom:2px solid transparent;cursor:pointer}
-.nav a.active{color:#f0f6fc;border-bottom-color:#f78166}
-.nav a:hover{color:#c9d1d9}
-.page{display:none;max-width:800px;margin:0 auto;padding:1.5rem}
-.page.active{display:block}
-h1{font-size:1.3rem;color:#f0f6fc;margin-bottom:.5rem}
-h2{font-size:1.1rem;color:#f0f6fc;margin:1.5rem 0 .5rem}
-h3{font-size:.95rem;color:#c9d1d9;margin:1rem 0 .3rem}
-p,.sub{color:#8b949e;font-size:.85rem;margin-bottom:.75rem}
-a{color:#58a6ff;text-decoration:none}
-textarea,input,select{width:100%;padding:.5rem;background:#161b22;border:1px solid #30363d;border-radius:4px;color:#c9d1d9;font-family:monospace;font-size:.8rem;margin:.25rem 0}
-textarea{height:150px;resize:vertical}
-button,.btn{background:#238636;color:#fff;border:none;padding:.5rem 1rem;border-radius:4px;cursor:pointer;font-size:.85rem;margin:.25rem .25rem .25rem 0}
-button:hover,.btn:hover{background:#2ea043}
-.btn-sm{padding:.25rem .5rem;font-size:.75rem}
-.btn-secondary{background:#30363d}
-pre{background:#161b22;border:1px solid #30363d;border-radius:4px;padding:.6rem;font-size:.75rem;overflow-x:auto;position:relative;margin:.3rem 0}
-.copy{position:absolute;top:.3rem;right:.3rem;background:#30363d;color:#c9d1d9;border:none;padding:.15rem .4rem;border-radius:3px;font-size:.65rem;cursor:pointer}
-.score{font-size:1.8rem;font-weight:bold;margin:.5rem 0}
-.score.good{color:#3fb950} .score.mid{color:#d29922} .score.bad{color:#f85149}
-.risk{background:#161b22;border:1px solid #30363d;border-radius:4px;padding:.75rem;margin:.3rem 0;font-size:.8rem}
-.good-item{color:#3fb950;margin:.2rem 0;font-size:.8rem}
-table{width:100%;border-collapse:collapse;font-size:.8rem;margin:.5rem 0}
-th,td{text-align:left;padding:.35rem .5rem;border-bottom:1px solid #21262d}
-th{font-weight:600;color:#f0f6fc}
-.recipe{background:#161b22;border:1px solid #30363d;border-radius:4px;margin:.3rem 0;overflow:hidden}
-.recipe summary{padding:.5rem .75rem;cursor:pointer;font-weight:600;color:#f0f6fc;font-size:.85rem}
-.recipe-body{padding:0 .75rem .5rem}
-.filter{padding:.2rem .5rem;border-radius:3px;border:1px solid #30363d;background:transparent;color:#8b949e;cursor:pointer;font-size:.7rem;margin:.15rem}
-.filter.active{background:#238636;border-color:#238636;color:#fff}
-.badge{display:inline-block;padding:.1rem .3rem;border-radius:3px;font-size:.65rem;font-weight:bold}
-.badge-bash{background:#1f6feb22;color:#58a6ff;border:1px solid #1f6feb44}
-.badge-js{background:#f0e68c22;color:#f0e68c;border:1px solid #f0e68c44}
-.badge-py{background:#3fb95022;color:#3fb950;border:1px solid #3fb95044}
-.badge-ts{background:#388bfd22;color:#388bfd;border:1px solid #388bfd44}
-.check{color:#3fb950} .cross{color:#484f58}
-.footer{text-align:center;color:#484f58;font-size:.7rem;padding:2rem 1rem}
-@media print{.nav{display:none} .page{display:block!important}}
-</style>
-</head>
-<body>
-<nav class="nav">
-  <a onclick="go('audit')" id="nav-audit" class="active">Audit</a>
-  <a onclick="go('builder')" id="nav-builder">Hook Builder</a>
-  <a onclick="go('cookbook')" id="nav-cookbook">Cookbook</a>
-  <a onclick="go('ecosystem')" id="nav-ecosystem">Ecosystem</a>
-  <a onclick="go('cheatsheet')" id="nav-cheatsheet">Cheat Sheet</a>
-</nav>
-<!-- PAGE: AUDIT -->
-<div class="page active" id="page-audit">
-<h1>Safety Audit</h1>
-<p>Paste your <code>~/.claude/settings.json</code>. Nothing leaves your browser.</p>
-<textarea id="settings" placeholder='{"permissions":{"allow":["Bash(git:*)"]},"hooks":{"PreToolUse":[...]}}'></textarea>
-<button onclick="runAudit()">Run Audit</button>
-<button class="btn-secondary" onclick="generateFresh()">Generate Fresh Setup</button>
-<div id="audit-results"></div>
-</div>
-<!-- PAGE: HOOK BUILDER -->
-<div class="page" id="page-builder">
-<h1>Hook Builder</h1>
-<p>Build a custom hook without writing code.</p>
-<div style="display:flex;gap:.75rem;flex-wrap:wrap">
-  <div style="flex:1;min-width:180px">
-    <label style="font-size:.75rem;color:#8b949e">Action</label>
-    <select id="hb-action"><option value="block">Block</option><option value="warn">Warn</option><option value="approve">Auto-approve</option></select>
-  </div>
-  <div style="flex:2;min-width:250px">
-    <label style="font-size:.75rem;color:#8b949e">Pattern (regex)</label>
-    <input id="hb-pattern" placeholder="e.g. rm\s+-rf, git push --force">
-  </div>
-</div>
-<label style="font-size:.75rem;color:#8b949e">Message</label>
-<input id="hb-message" placeholder="e.g. Run tests before pushing">
-<button onclick="buildHook()">Generate</button>
-<div id="hb-result"></div>
-</div>
-<!-- PAGE: COOKBOOK -->
-<div class="page" id="page-cookbook">
-<h1>Hooks Cookbook</h1>
-<p>Copy-paste recipes from real GitHub Issues.</p>
-<input id="cb-search" placeholder="Search... (database, git, deploy)" oninput="filterRecipes()">
-<div style="margin:.3rem 0" id="cb-filters"></div>
-<div id="cb-count" style="color:#8b949e;font-size:.8rem"></div>
-<div id="cb-list"></div>
-</div>
-<!-- PAGE: ECOSYSTEM -->
-<div class="page" id="page-ecosystem">
-<h1>Ecosystem Comparison</h1>
-<p>All major Claude Code hook projects compared.</p>
-<table>
-<tr><th>Project</th><th>Lang</th><th>Hooks</th><th>Install</th></tr>
-<tr><td><a href="https://github.com/kenryu42/claude-code-safety-net">safety-net</a></td><td><span class="badge badge-ts">TS</span></td><td>5</td><td>npx</td></tr>
-<tr><td><a href="https://github.com/yurukusa/cc-safe-setup">cc-safe-setup</a></td><td><span class="badge badge-bash">Bash</span></td><td>8+39</td><td>npx</td></tr>
-<tr><td><a href="https://github.com/karanb192/claude-code-hooks">karanb192</a></td><td><span class="badge badge-js">JS</span></td><td>5+</td><td>copy</td></tr>
-<tr><td><a href="https://github.com/disler/claude-code-hooks-mastery">mastery</a></td><td><span class="badge badge-py">Python</span></td><td>12</td><td>copy</td></tr>
-<tr><td><a href="https://github.com/lasso-security/claude-hooks">lasso</a></td><td><span class="badge badge-py">Python</span></td><td>1</td><td>install.sh</td></tr>
-</table>
-<h2>Feature Matrix</h2>
-<table>
-<tr><th>Feature</th><th>safety-net</th><th>cc-safe-setup</th><th>karanb192</th><th>mastery</th></tr>
-<tr><td>rm -rf blocker</td><td class="check">✓</td><td class="check">✓</td><td class="check">✓</td><td class="check">✓</td></tr>
-<tr><td>Branch guard</td><td class="check">✓</td><td class="check">✓</td><td class="cross">-</td><td class="cross">-</td></tr>
-<tr><td>Secret guard</td><td class="cross">-</td><td class="check">✓</td><td class="check">✓</td><td class="cross">-</td></tr>
-<tr><td>Syntax check</td><td class="cross">-</td><td class="check">✓</td><td class="cross">-</td><td class="cross">-</td></tr>
-<tr><td>Context monitor</td><td class="cross">-</td><td class="check">✓</td><td class="cross">-</td><td class="cross">-</td></tr>
-<tr><td>Hook generator</td><td class="cross">-</td><td class="check">✓</td><td class="cross">-</td><td class="cross">-</td></tr>
-<tr><td>Dashboard</td><td class="cross">-</td><td class="check">✓</td><td class="cross">-</td><td class="cross">-</td></tr>
-<tr><td>GitHub Action</td><td class="cross">-</td><td class="check">✓</td><td class="cross">-</td><td class="cross">-</td></tr>
-</table>
-</div>
-<!-- PAGE: CHEAT SHEET -->
-<div class="page" id="page-cheatsheet">
-<h1>Hooks Cheat Sheet</h1>
-<p>Print this page (Ctrl+P) for a quick reference.</p>
-<h3>Lifecycle</h3>
-<pre>Prompt → PreToolUse → Tool → PostToolUse → Stop</pre>
-<h3>Exit Codes</h3>
-<table><tr><th>Code</th><th>Meaning</th></tr>
-<tr><td><code>0</code></td><td>Allow</td></tr>
-<tr><td><code>2</code></td><td><strong>Block</strong></td></tr></table>
-<h3>Minimal Block Hook</h3>
-<pre>#!/bin/bash
-CMD=$(cat | jq -r '.tool_input.command // empty')
-[ -z "$CMD" ] && exit 0
-echo "$CMD" | grep -qE 'PATTERN' && echo "BLOCKED" >&2 && exit 2
-exit 0</pre>
-<h3>Auto-Approve Hook</h3>
-<pre>#!/bin/bash
-CMD=$(cat | jq -r '.tool_input.command // empty')
-[ -z "$CMD" ] && exit 0
-echo "$CMD" | grep -qE '^git\s+(status|log|diff)' && \
-  jq -n '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}'
-exit 0</pre>
-<h3>Quick Commands</h3>
-<table>
-<tr><td><code>npx cc-safe-setup</code></td><td>Install 8 hooks</td></tr>
-<tr><td><code>--create "desc"</code></td><td>Generate hook</td></tr>
-<tr><td><code>--audit</code></td><td>Score 0-100</td></tr>
-<tr><td><code>--dashboard</code></td><td>Live status</td></tr>
-<tr><td><code>--doctor</code></td><td>Diagnose</td></tr>
-<tr><td><code>--benchmark</code></td><td>Speed test</td></tr>
-</table>
-</div>
-<div class="footer">
-  cc-safe-setup · 100% client-side · <a href="https://github.com/yurukusa/cc-safe-setup">GitHub</a> · <a href="https://www.npmjs.com/package/cc-safe-setup">npm</a>
-</div>
-<script>
-// Navigation
-function go(page) {
-  document.querySelectorAll('.page').forEach(p => p.classList.remove('active'));
-  document.querySelectorAll('.nav a').forEach(a => a.classList.remove('active'));
-  document.getElementById('page-' + page).classList.add('active');
-  document.getElementById('nav-' + page).classList.add('active');
-}
-// AUDIT
-function runAudit() {
-  const raw = document.getElementById('settings').value.trim();
-  const el = document.getElementById('audit-results');
-  if (!raw) { generateFresh(); return; }
-  let s; try { s = JSON.parse(raw); } catch { el.innerHTML='<p style="color:#f85149">Invalid JSON</p>'; return; }
-  const {risks,good,score} = analyze(s);
-  renderAudit(risks, good, score, el);
-}
-function generateFresh() {
-  const {risks,good,score} = analyze({});
-  renderAudit(risks, good, score, document.getElementById('audit-results'));
-}
-function analyze(s) {
-  const risks=[], good=[];
-  const pre=s.hooks?.PreToolUse||[], post=s.hooks?.PostToolUse||[];
-  const all=JSON.stringify(pre).toLowerCase();
-  if(!pre.length) risks.push({s:'CRITICAL',i:'No PreToolUse hooks',f:'npx cc-safe-setup'});
-  else { good.push('PreToolUse ('+pre.length+')');
-    if(!all.match(/destructive|guard|rm.*rf/)) risks.push({s:'HIGH',i:'No destructive guard',f:'npx cc-safe-setup'});
-    else good.push('Destructive protection');
-    if(!all.match(/branch|push|main/)) risks.push({s:'HIGH',i:'No branch guard',f:'npx cc-safe-setup'});
-    else good.push('Branch protection');
-    if(!all.match(/secret|env|credential/)) risks.push({s:'HIGH',i:'No secret guard',f:'npx cc-safe-setup'});
-    else good.push('Secret protection');
-  }
-  if(!post.length) risks.push({s:'MEDIUM',i:'No PostToolUse hooks',f:'npx cc-safe-setup'});
-  else good.push('PostToolUse ('+post.length+')');
-  const score=Math.max(0,100-risks.reduce((n,r)=>n+(r.s==='CRITICAL'?30:r.s==='HIGH'?20:10),0));
-  return {risks,good,score};
-}
-function renderAudit(risks,good,score,el) {
-  const cls=score>=80?'good':score>=50?'mid':'bad';
-  let h='<div class="score '+cls+'">'+score+'/100</div>';
-  if(good.length) { h+='<h3 style="color:#3fb950">Working</h3>'; good.forEach(g=>h+='<div class="good-item">✓ '+g+'</div>'); }
-  if(risks.length) { h+='<h3>Risks ('+risks.length+')</h3>'; risks.forEach(r=>h+='<div class="risk"><strong>['+r.s+']</strong> '+r.i+'<br><code>'+r.f+'</code></div>'); }
-  if(!risks.length) h+='<p style="color:#3fb950">No risks detected.</p>';
-  el.innerHTML=h;
-}
-// HOOK BUILDER
-function buildHook() {
-  const action=document.getElementById('hb-action').value;
-  const pattern=document.getElementById('hb-pattern').value.trim();
-  const message=document.getElementById('hb-message').value.trim()||'Blocked';
-  const el=document.getElementById('hb-result');
-  if(!pattern){el.innerHTML='<p style="color:#f85149">Enter a pattern</p>';return;}
-  let s='#!/bin/bash\nCMD=$(cat | jq -r \'.tool_input.command // empty\' 2>/dev/null)\n[ -z "$CMD" ] && exit 0\n';
-  if(action==='block') s+='echo "$CMD" | grep -qE \''+pattern+'\' && echo "BLOCKED: '+message+'" >&2 && exit 2\n';
-  else if(action==='warn') s+='echo "$CMD" | grep -qE \''+pattern+'\' && echo "WARNING: '+message+'" >&2\n';
-  else s+='echo "$CMD" | grep -qE \''+pattern+'\' && jq -n \'{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}\'\n';
-  s+='exit 0';
-  el.innerHTML='<h3>Script</h3><pre>'+esc(s)+'</pre><p style="font-size:.75rem;color:#8b949e">Save as ~/.claude/hooks/custom.sh, chmod +x, add to settings.json</p>';
-}
-// COOKBOOK
-const RECIPES=[
-  {cat:'block',t:'Block rm -rf',d:'Destructive commands (#36339)',code:'CMD=$(cat|jq -r \'.tool_input.command // empty\')\n[ -z "$CMD" ] && exit 0\necho "$CMD"|grep -qE \'rm\\s+(-[rf]+\\s+)*/\' && echo "BLOCKED" >&2 && exit 2\nexit 0',trigger:'PreToolUse'},
-  {cat:'block',t:'Block force push',d:'Branch protection',code:'CMD=$(cat|jq -r \'.tool_input.command // empty\')\n[ -z "$CMD" ] && exit 0\necho "$CMD"|grep -qE \'git\\s+push.*--force\' && echo "BLOCKED" >&2 && exit 2\nexit 0',trigger:'PreToolUse'},
-  {cat:'block',t:'Block .env staging',d:'Secret leak prevention (#6527)',code:'CMD=$(cat|jq -r \'.tool_input.command // empty\')\n[ -z "$CMD" ] && exit 0\necho "$CMD"|grep -qiE \'git\\s+add.*\\.env\' && echo "BLOCKED" >&2 && exit 2\nexit 0',trigger:'PreToolUse'},
-  {cat:'block',t:'Block database wipe',d:'migrate:fresh, DROP DATABASE (#37405)',code:'CMD=$(cat|jq -r \'.tool_input.command // empty\')\n[ -z "$CMD" ] && exit 0\necho "$CMD"|grep -qiE \'migrate:fresh|DROP\\s+DATABASE|prisma\\s+migrate\\s+reset\' && echo "BLOCKED" >&2 && exit 2\nexit 0',trigger:'PreToolUse'},
-  {cat:'approve',t:'Auto-approve git read',d:'git status/log/diff with -C flag (#36900)',code:'CMD=$(cat|jq -r \'.tool_input.command // empty\')\n[ -z "$CMD" ] && exit 0\necho "$CMD"|grep -qE \'^\\s*git\\s+(-C\\s+\\S+\\s+)?(status|log|diff|branch|show)\' && jq -n \'{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}\'\nexit 0',trigger:'PreToolUse'},
-  {cat:'approve',t:'Compound commands',d:'cd && git log auto-approve (#30519)',code:'# Full: npx cc-safe-setup --install-example compound-command-approver',trigger:'PreToolUse'},
-  {cat:'detect',t:'Loop detector',d:'Break command repetition (5+ times)',code:'CMD=$(cat|jq -r \'.tool_input.command // empty\')\n[ -z "$CMD" ] && exit 0\nSTATE=/tmp/cc-loop\necho "$CMD">>$STATE\ntail -n 10 $STATE>${STATE}.tmp&&mv ${STATE}.tmp $STATE\nCOUNT=$(grep -cF "$CMD" $STATE||echo 0)\n[ "$COUNT" -ge 5 ]&&echo "BLOCKED: repeated $COUNT times" >&2&&exit 2\nexit 0',trigger:'PreToolUse'},
-  {cat:'utility',t:'Session handoff',d:'Save state for next session',code:'# npx cc-safe-setup --install-example session-handoff',trigger:'Stop'},
-  {cat:'utility',t:'Cost tracker',d:'Estimate session token cost',code:'# npx cc-safe-setup --install-example cost-tracker',trigger:'PostToolUse'},
-  {cat:'utility',t:'tmp cleanup',d:'/tmp/claude-*-cwd files (#8856)',code:'find /tmp -maxdepth 1 -name \'claude-*-cwd\' -type f -mmin +60 -delete 2>/dev/null\nexit 0',trigger:'Stop'},
-];
-function initCookbook() {
-  const cats=['all','block','approve','detect','utility'];
-  document.getElementById('cb-filters').innerHTML=cats.map(c=>'<button class="filter'+(c==='all'?' active':'')+'" onclick="setCbFilter(\''+c+'\')">'+c+'</button>').join('');
-  filterRecipes();
-}
-let cbFilter='all';
-function setCbFilter(f){cbFilter=f;document.querySelectorAll('#cb-filters .filter').forEach(b=>b.classList.toggle('active',b.textContent===f));filterRecipes();}
-function filterRecipes(){
-  const q=(document.getElementById('cb-search')?.value||'').toLowerCase();
-  const filtered=RECIPES.filter(r=>(cbFilter==='all'||r.cat===cbFilter)&&(!q||r.t.toLowerCase().includes(q)||r.d.toLowerCase().includes(q)||(r.code||'').toLowerCase().includes(q)));
-  document.getElementById('cb-count').textContent=filtered.length+' recipe(s)';
-  document.getElementById('cb-list').innerHTML=filtered.map(r=>'<details class="recipe"><summary>'+esc(r.t)+' <span style="color:#484f58;font-size:.7rem">['+r.trigger+']</span></summary><div class="recipe-body"><p style="color:#8b949e;font-size:.8rem">'+esc(r.d)+'</p>'+(r.code?'<pre>'+esc(r.code)+'</pre>':'')+'</div></details>').join('');
-}
-function esc(s){return(s||'').replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;');}
-// URL param
-(function(){const p=new URLSearchParams(location.search);const c=p.get('config');if(c){try{document.getElementById('settings').value=atob(c);runAudit();}catch{}}})();
-initCookbook();
-</script>
-</body>
-</html>