cc-safety-net 1.0.4 → 1.0.6

package/README.md

@@ -226,6 +226,8 @@ Install CC Safety Net into your Kimi Code config:
 npx -y cc-safety-net hook install --kimi-code
 ```
 
+Optional: run `npx skill add kenryu42/cc-safety-net` to add the `/cc-safety-net` skill for configuring custom rules.
+
 ---
 
 

package/dist/bin/cc-safety-net.js

@@ -5126,7 +5126,7 @@ function writeJsonAtomic(path, value) {
 }
 
 // src/core/rules/policy/scope-policy.ts
-import { existsSync as existsSync7, readFileSync as readFileSync6 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync6, realpathSync as realpathSync7 } from "node:fs";
 import { dirname as dirname6, isAbsolute as isAbsolute6, join as join6, relative, resolve as resolve5, sep as sep4 } from "node:path";
 
 // src/core/rules/rulebook.ts
@@ -5552,8 +5552,9 @@ function sha256Digest(content) {
 // src/core/rules/policy/scope-policy.ts
 function loadRulesPolicy(options2 = {}) {
   const paths = getPolicyPaths(options2);
+  const sameConfigPath = isSameConfigPath(paths.userConfigPath, paths.projectConfigPath);
   const user = readRulesConfig(paths.userConfigPath);
-  const project = readRulesConfig(paths.projectConfigPath);
+  const project = sameConfigPath ? { config: null, errors: [] } : readRulesConfig(paths.projectConfigPath);
   const errors = [
     ...getLegacyRulesConfigErrors(paths, options2),
     ...user.errors.map((error) => `${paths.userConfigPath}: ${error}`),
@@ -5724,6 +5725,19 @@ function rulesPolicyToConfig(policy) {
   }
   return { version: 1, rules: policy.rules };
 }
+function isSameConfigPath(userConfigPath, projectConfigPath) {
+  if (resolve5(userConfigPath) === resolve5(projectConfigPath)) {
+    return true;
+  }
+  if (!existsSync7(userConfigPath) || !existsSync7(projectConfigPath)) {
+    return false;
+  }
+  try {
+    return realpathSync7(userConfigPath) === realpathSync7(projectConfigPath);
+  } catch {
+    return false;
+  }
+}
 function getLegacyRulesConfigErrors(paths, options2) {
   return Array.from(new Set([
     ...getLegacyRulesConfigError(getLegacyUserRulesConfigPath(options2), paths.userConfigPath, "~/.cc-safety-net/config.json"),
@@ -6429,7 +6443,7 @@ var CLAUDE_CODE_TOOL_NAME = "Bash";
 var GEMINI_CLI_HOOK_EVENT = "BeforeTool";
 var GEMINI_CLI_TOOL_NAME = "run_shell_command";
 var KIMI_CODE_HOOK_EVENT = "PreToolUse";
-var KIMI_CODE_TOOL_NAME = "Shell";
+var KIMI_CODE_TOOL_NAME = "Bash";
 
 // src/bin/hook/claude-code.ts
 async function runClaudeCodeHook() {
@@ -7531,7 +7545,7 @@ function detectGeminiCLI(extensionsListOutput) {
   };
 }
 function _getKimiConfigPath(homeDir) {
-  return join10(process.env.KIMI_SHARE_DIR || join10(homeDir, ".kimi"), "config.toml");
+  return join10(process.env.KIMI_CODE_HOME || join10(homeDir, ".kimi-code"), "config.toml");
 }
 function detectKimiCode(homeDir) {
   const configPath = _getKimiConfigPath(homeDir);
@@ -7927,7 +7941,7 @@ import { existsSync as existsSync14 } from "node:fs";
 import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
 import { tmpdir as tmpdir4 } from "node:os";
 import { delimiter, extname, join as join11 } from "node:path";
-var CURRENT_VERSION = "1.0.4";
+var CURRENT_VERSION = "1.0.6";
 var VERSION_FETCH_TIMEOUT_MS = 2000;
 var PI_PROBE_TIMEOUT_MS = 5000;
 var PI_SENTINEL_COMMAND = "cc-safety-net";
@@ -9436,7 +9450,7 @@ function formatTraceJson(result) {
   return JSON.stringify(result, null, 2);
 }
 // src/bin/help.ts
-var version = "1.0.4";
+var version = "1.0.6";
 var INDENT = "  ";
 var PROGRAM_NAME = "cc-safety-net";
 function formatOptionFlags(option) {
@@ -9635,11 +9649,11 @@ function removeArrayRangeItem(content, item) {
 var KIMI_HOOK_COMMAND = "npx -y cc-safety-net hook --kimi-code";
 var KIMI_HOOK_BLOCK = `[[hooks]]
 event = "PreToolUse"
-matcher = "Shell"
+matcher = "Bash"
 command = "${KIMI_HOOK_COMMAND}"`;
-var KIMI_INLINE_HOOK = `{ event = "PreToolUse", matcher = "Shell", command = "${KIMI_HOOK_COMMAND}" }`;
+var KIMI_INLINE_HOOK = `{ event = "PreToolUse", matcher = "Bash", command = "${KIMI_HOOK_COMMAND}" }`;
 function getKimiConfigPath(homeDir) {
-  return join12(process.env.KIMI_SHARE_DIR ?? join12(homeDir, ".kimi"), "config.toml");
+  return join12(process.env.KIMI_CODE_HOME ?? join12(homeDir, ".kimi-code"), "config.toml");
 }
 function removeTopLevelEmptyHooksArray(content) {
   const result = content.split(`

package/dist/bin/hook/constants.d.ts

@@ -3,4 +3,4 @@ export declare const CLAUDE_CODE_TOOL_NAME = "Bash";
 export declare const GEMINI_CLI_HOOK_EVENT = "BeforeTool";
 export declare const GEMINI_CLI_TOOL_NAME = "run_shell_command";
 export declare const KIMI_CODE_HOOK_EVENT = "PreToolUse";
-export declare const KIMI_CODE_TOOL_NAME = "Shell";
+export declare const KIMI_CODE_TOOL_NAME = "Bash";

package/dist/index.js

@@ -5070,7 +5070,7 @@ function writeJsonAtomic(path, value) {
 }
 
 // src/core/rules/policy/scope-policy.ts
-import { existsSync as existsSync7, readFileSync as readFileSync6 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync6, realpathSync as realpathSync7 } from "node:fs";
 import { dirname as dirname6, isAbsolute as isAbsolute6, join as join6, relative, resolve as resolve5, sep as sep4 } from "node:path";
 
 // src/core/rules/rulebook.ts
@@ -5496,8 +5496,9 @@ function sha256Digest(content) {
 // src/core/rules/policy/scope-policy.ts
 function loadRulesPolicy(options2 = {}) {
   const paths = getPolicyPaths(options2);
+  const sameConfigPath = isSameConfigPath(paths.userConfigPath, paths.projectConfigPath);
   const user = readRulesConfig(paths.userConfigPath);
-  const project = readRulesConfig(paths.projectConfigPath);
+  const project = sameConfigPath ? { config: null, errors: [] } : readRulesConfig(paths.projectConfigPath);
   const errors = [
     ...getLegacyRulesConfigErrors(paths, options2),
     ...user.errors.map((error) => `${paths.userConfigPath}: ${error}`),
@@ -5668,6 +5669,19 @@ function rulesPolicyToConfig(policy) {
   }
   return { version: 1, rules: policy.rules };
 }
+function isSameConfigPath(userConfigPath, projectConfigPath) {
+  if (resolve5(userConfigPath) === resolve5(projectConfigPath)) {
+    return true;
+  }
+  if (!existsSync7(userConfigPath) || !existsSync7(projectConfigPath)) {
+    return false;
+  }
+  try {
+    return realpathSync7(userConfigPath) === realpathSync7(projectConfigPath);
+  } catch {
+    return false;
+  }
+}
 function getLegacyRulesConfigErrors(paths, options2) {
   return Array.from(new Set([
     ...getLegacyRulesConfigError(getLegacyUserRulesConfigPath(options2), paths.userConfigPath, "~/.cc-safety-net/config.json"),

package/dist/pi/index.js

@@ -5134,7 +5134,7 @@ function writeJsonAtomic(path, value) {
 }
 
 // src/core/rules/policy/scope-policy.ts
-import { existsSync as existsSync7, readFileSync as readFileSync6 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync6, realpathSync as realpathSync7 } from "node:fs";
 import { dirname as dirname6, isAbsolute as isAbsolute6, join as join6, relative, resolve as resolve5, sep as sep4 } from "node:path";
 
 // src/core/rules/rulebook.ts
@@ -5560,8 +5560,9 @@ function sha256Digest(content) {
 // src/core/rules/policy/scope-policy.ts
 function loadRulesPolicy(options2 = {}) {
   const paths = getPolicyPaths(options2);
+  const sameConfigPath = isSameConfigPath(paths.userConfigPath, paths.projectConfigPath);
   const user = readRulesConfig(paths.userConfigPath);
-  const project = readRulesConfig(paths.projectConfigPath);
+  const project = sameConfigPath ? { config: null, errors: [] } : readRulesConfig(paths.projectConfigPath);
   const errors = [
     ...getLegacyRulesConfigErrors(paths, options2),
     ...user.errors.map((error) => `${paths.userConfigPath}: ${error}`),
@@ -5732,6 +5733,19 @@ function rulesPolicyToConfig(policy) {
   }
   return { version: 1, rules: policy.rules };
 }
+function isSameConfigPath(userConfigPath, projectConfigPath) {
+  if (resolve5(userConfigPath) === resolve5(projectConfigPath)) {
+    return true;
+  }
+  if (!existsSync7(userConfigPath) || !existsSync7(projectConfigPath)) {
+    return false;
+  }
+  try {
+    return realpathSync7(userConfigPath) === realpathSync7(projectConfigPath);
+  } catch {
+    return false;
+  }
+}
 function getLegacyRulesConfigErrors(paths, options2) {
   return Array.from(new Set([
     ...getLegacyRulesConfigError(getLegacyUserRulesConfigPath(options2), paths.userConfigPath, "~/.cc-safety-net/config.json"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safety-net",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "description": "A coding agent CLI hook - block destructive git and filesystem commands before execution",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",