cc-safe-setup 6.2.0 → 6.3.1

package/README.md

@@ -6,7 +6,7 @@
 
 **One command to make Claude Code safe for autonomous operation.** [日本語](docs/README.ja.md)
 
-8 built-in hooks + 32 installable examples. Audit, create, lint, diff, watch, and learn. [Cheat Sheet](https://yurukusa.github.io/cc-safe-setup/cheatsheet.html) · [Web Tool](https://yurukusa.github.io/cc-safe-setup/) · [Troubleshooting](TROUBLESHOOTING.md)
+8 built-in + 51 examples = **59 hooks**. 26 CLI commands. 284 tests. [Web Tool](https://yurukusa.github.io/cc-safe-setup/) · [Cheat Sheet](https://yurukusa.github.io/cc-safe-setup/cheatsheet.html) · [Troubleshooting](TROUBLESHOOTING.md)
 
 ```bash
 npx cc-safe-setup

package/index.mjs

@@ -87,6 +87,7 @@ const BENCHMARK = process.argv.includes('--benchmark');
 const DASHBOARD = process.argv.includes('--dashboard');
 const ISSUES = process.argv.includes('--issues');
 const MIGRATE = process.argv.includes('--migrate');
+const GENERATE_CI = process.argv.includes('--generate-ci');
 const COMPARE_IDX = process.argv.findIndex(a => a === '--compare');
 const COMPARE = COMPARE_IDX !== -1 ? { a: process.argv[COMPARE_IDX + 1], b: process.argv[COMPARE_IDX + 2] } : null;
 const CREATE_IDX = process.argv.findIndex(a => a === '--create');
@@ -110,6 +111,7 @@ if (HELP) {
     npx cc-safe-setup --audit --json  Machine-readable output for CI/CD
     npx cc-safe-setup --scan       Detect tech stack, recommend hooks
     npx cc-safe-setup --learn      Learn from your block history
+    npx cc-safe-setup --generate-ci   Generate GitHub Actions workflow for safety checks
     npx cc-safe-setup --migrate       Detect hooks from other projects, suggest replacements
     npx cc-safe-setup --compare <a> <b>  Compare two hooks side-by-side
     npx cc-safe-setup --issues        Show GitHub Issues each hook addresses
@@ -826,6 +828,71 @@ async function fullSetup() {
   console.log();
 }
 
+function generateCI() {
+  const workflowDir = join(process.cwd(), '.github', 'workflows');
+  const workflowPath = join(workflowDir, 'claude-code-safety.yml');
+
+  const workflow = `# Claude Code Safety Audit
+# Generated by: npx cc-safe-setup --generate-ci
+# Checks safety score on every PR and fails if below threshold
+
+name: Claude Code Safety
+on:
+  pull_request:
+  push:
+    branches: [main, master]
+
+jobs:
+  safety-audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run safety audit
+        uses: yurukusa/cc-safe-setup@main
+        with:
+          threshold: 70
+
+      - name: Comment PR with score
+        if: github.event_name == 'pull_request'
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const score = '\${{ steps.audit.outputs.score }}' || '?';
+            const grade = '\${{ steps.audit.outputs.grade }}' || '?';
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: \`## Claude Code Safety: \${score}/100 (Grade \${grade})\\n\\nRun \\\`npx cc-safe-setup --audit\\\` locally for details.\`
+            });
+`;
+
+  console.log();
+  console.log(c.bold + '  cc-safe-setup --generate-ci' + c.reset);
+  console.log();
+
+  if (existsSync(workflowPath)) {
+    console.log(c.yellow + '  Workflow already exists: ' + workflowPath + c.reset);
+    console.log(c.dim + '  Delete it first if you want to regenerate.' + c.reset);
+    process.exit(0);
+  }
+
+  mkdirSync(workflowDir, { recursive: true });
+  writeFileSync(workflowPath, workflow);
+
+  console.log(c.green + '  ✓ Created: ' + workflowPath + c.reset);
+  console.log();
+  console.log(c.dim + '  This workflow will:' + c.reset);
+  console.log(c.dim + '  1. Run safety audit on every PR and push to main' + c.reset);
+  console.log(c.dim + '  2. Fail CI if safety score < 70' + c.reset);
+  console.log(c.dim + '  3. Comment PR with safety score' + c.reset);
+  console.log();
+  console.log(c.dim + '  Commit and push to activate:' + c.reset);
+  console.log(c.bold + '  git add .github/workflows/claude-code-safety.yml && git commit -m "ci: add safety audit" && git push' + c.reset);
+  console.log();
+}
+
 async function migrate() {
   const { readdirSync } = await import('fs');
 
@@ -2508,6 +2575,7 @@ async function main() {
   if (FULL) return fullSetup();
   if (DOCTOR) return doctor();
   if (WATCH) return watch();
+  if (GENERATE_CI) return generateCI();
   if (MIGRATE) return migrate();
   if (COMPARE) return compare(COMPARE.a, COMPARE.b);
   if (ISSUES) return issues();

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "cc-safe-setup",
-  "version": "6.2.0",
-  "description": "One command to make Claude Code safe for autonomous operation. 8 built-in + 39 examples. 23 commands including dashboard, issues, create, audit, lint, diff. 260 tests. 2,500+ daily npm downloads.",
+  "version": "6.3.1",
+  "description": "One command to make Claude Code safe. 59 hooks (8 built-in + 51 examples). 26 CLI commands: dashboard, create, audit, lint, diff, migrate, compare, generate-ci. 284 tests.",
   "main": "index.mjs",
   "bin": {
     "cc-safe-setup": "index.mjs"