cc-safe-setup 9.0.0 → 9.1.0

package/index.mjs

@@ -1866,7 +1866,7 @@ function generateCI() {
 
   const workflow = `# Claude Code Safety Audit
 # Generated by: npx cc-safe-setup --generate-ci
-# Checks safety score on every PR and fails if below threshold
+# Runs safety checks on every PR and push to main
 
 name: Claude Code Safety
 on:
@@ -1880,24 +1880,55 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - name: Run safety audit
-        uses: yurukusa/cc-safe-setup@main
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
         with:
-          threshold: 70
+          node-version: 20
 
-      - name: Comment PR with score
-        if: github.event_name == 'pull_request'
-        uses: actions/github-script@v7
-        with:
-          script: |
-            const score = '\${{ steps.audit.outputs.score }}' || '?';
-            const grade = '\${{ steps.audit.outputs.grade }}' || '?';
-            github.rest.issues.createComment({
-              issue_number: context.issue.number,
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              body: \`## Claude Code Safety: \${score}/100 (Grade \${grade})\\n\\nRun \\\`npx cc-safe-setup --audit\\\` locally for details.\`
-            });
+      - name: Install jq
+        run: sudo apt-get install -y jq
+
+      - name: Run safety audit
+        id: audit
+        run: |
+          npx cc-safe-setup --audit --json > /tmp/audit.json 2>&1 || true
+          SCORE=\$(cat /tmp/audit.json | jq -r '.score // 0' 2>/dev/null || echo 0)
+          echo "score=\$SCORE" >> \$GITHUB_OUTPUT
+          echo "Safety score: \$SCORE/100"
+          if [ "\$SCORE" -lt 70 ]; then
+            echo "::error::Safety score \$SCORE is below threshold (70)"
+            exit 1
+          fi
+
+      - name: Verify hooks syntax
+        run: |
+          ERRORS=0
+          for f in .claude/hooks/*.sh 2>/dev/null; do
+            [ -f "\$f" ] || continue
+            if ! bash -n "\$f" 2>/dev/null; then
+              echo "::error file=\$f::Syntax error in hook"
+              ERRORS=\$((ERRORS+1))
+            fi
+          done
+          echo "Checked hooks: \$ERRORS error(s)"
+          [ "\$ERRORS" -gt 0 ] && exit 1 || true
+
+      - name: Check settings.json validity
+        run: |
+          if [ -f ".claude/settings.json" ]; then
+            python3 -c "import json; json.load(open('.claude/settings.json'))" || {
+              echo "::error::.claude/settings.json has invalid JSON"
+              exit 1
+            }
+            echo "settings.json: valid"
+          fi
+          if [ -f ".claude/settings.local.json" ]; then
+            python3 -c "import json; json.load(open('.claude/settings.local.json'))" || {
+              echo "::error::.claude/settings.local.json has invalid JSON"
+              exit 1
+            }
+            echo "settings.local.json: valid"
+          fi
 `;
 
   console.log();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safe-setup",
-  "version": "9.0.0",
+  "version": "9.1.0",
   "description": "One command to make Claude Code safe. 59 hooks (8 built-in + 51 examples). 26 CLI commands: dashboard, create, audit, lint, diff, migrate, compare, generate-ci. 284 tests.",
   "main": "index.mjs",
   "bin": {