cc-safety-net 2.3.4 → 2.4.1

package/dist/openclaw/cc-safety-net/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "cc-safety-net",
   "name": "CC Safety Net",
   "description": "Block destructive commands and secret-file access before OpenClaw runs a tool.",
-  "version": "2.3.4",
+  "version": "2.4.1",
   "activation": {
     "onStartup": true
   },

package/dist/openclaw/cc-safety-net/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safety-net",
-  "version": "2.3.4",
+  "version": "2.4.1",
   "description": "Block destructive commands and secret-file access before OpenClaw runs a tool.",
   "type": "module",
   "openclaw": {

package/dist/pi/index.js

@@ -1,5 +1,5 @@
-import{O,ie,r,se,P,c,d}from"../chunks/index-e7vaxtyk.js";import{ce}from"../chunks/index-68v9n663.js";import{ee,K,T,te,_e,j}from"../chunks/index-zqqsva7r.js";var f="cc-safety-net",C="Operate CC Safety Net: explain blocks, rules, integrations, diagnostics",g="Help me with CC Safety Net.";function s(o){o.registerCommand(f,{description:C,handler:async(n,e)=>{o.sendUserMessage(y(n),e.isIdle()?void 0:{deliverAs:"followUp"})}})}function y(o){return`${ce.slice(ce.indexOf("# CC Safety Net")).trimEnd()}
+import{Ce,j,Se,it,l,i,xe,_,ce,at,u,p}from"../chunks/index-chc1n91k.js";import{te}from"../chunks/index-n0tze7vr.js";import{we,F}from"../chunks/index-31w7hfwv.js";var g="cc-safety-net",P="Operate CC Safety Net: explain blocks, rules, integrations, diagnostics",y="Help me with CC Safety Net.";function c(e){e.registerCommand(g,{description:P,handler:async(n,r)=>{e.sendUserMessage(T(n),r.isIdle()?void 0:{deliverAs:"followUp"})}})}function T(e){return`${te.slice(te.indexOf("# CC Safety Net")).trimEnd()}
 
 ## User request
 
-${o.trim()||g}`}var w=new Map([["bash","posix"]]);function u(o){o.on("tool_call",v)}var v=N();function N(o={}){return(n,e)=>E(n,e,o)}function E(o,n,e){let t=A(o,n);if(!t)return;if("malformed"in t)return ee(t.denial,()=>n.sessionManager.getSessionId(),{agent:"pi",toolName:t.denial.toolName,cwd:t.cwd}),p(t.denial);try{let i=j(t,{guard:{auditAllowed:se(),policyOptions:e.policyOptions,dependencies:e.guardDependencies},audit:{agent:"pi",getSessionId:()=>n.sessionManager.getSessionId()}});return m(i,!0)}catch(i){if(!(i instanceof d))throw i;if(P(r.debug))console.error(`CC Safety Net debug: pi tool_call analysis failed: ${_e(i.cause)}`);return m(i.evaluation,t.route.kind==="command")}}function A(o,n){if(!o||typeof o!=="object")return;let e=o;if(e.type!==void 0&&e.type!=="tool_call")return;if(typeof e.toolName!=="string"||e.toolName.trim()==="")return l(n);let t=typeof n.cwd==="string"&&n.cwd.trim()!==""?O(".",[n.cwd]):void 0;if(!t)return l(n,e.toolName);let i=w.get(e.toolName);if(!e.input||typeof e.input!=="object")return i?l(n,e.toolName):void 0;if(!i)return c(e.toolName,e.input,{kind:ie(e.toolName)},{configCwd:t,executionCwd:t},null);let a=e.input.command;if(typeof a!=="string"||a.trim()==="")return l(n,e.toolName);return c(e.toolName,e.input,{kind:"command",shell:i},{configCwd:t,executionCwd:t},a)}function l(o,n){return{malformed:!0,denial:T({toolName:n}),cwd:typeof o.cwd==="string"&&o.cwd.trim()?o.cwd:null}}function m(o,n){let e=K(o,{includeEvidence:n});return e?p(e):void 0}function p(o){return{block:!0,reason:te(o)}}function D(o){u(o),s(o)}export{D as default};
+${e.trim()||y}`}var v=new Map([["bash","posix"]]);function C(e){e.on("tool_call",w)}var w=N();function N(e={}){return(n,r)=>{try{return E(n,r,e)}catch(o){return console.error("CC Safety Net error:",o),m(j())}}}function E(e,n,r){let o=l(),t=h(e,n,o.paths);if(!t)return;if("malformed"in t)return we(o,t.denial,()=>n.sessionManager.getSessionId(),{agent:"pi",toolName:t.denial.toolName,cwd:t.cwd}),m(t.denial);try{let a=F(o,t,{guard:{auditAllowed:xe(o.env),policyOptions:r.policyOptions,dependencies:r.guardDependencies},audit:{agent:"pi",getSessionId:()=>n.sessionManager.getSessionId()}});return f(a,!0)}catch(a){if(!(a instanceof p))throw a;if(_(i.debug,o.env))console.error(`CC Safety Net debug: pi tool_call analysis failed: ${it(a.cause)}`);return f(a.evaluation,t.route.kind==="command")}}function h(e,n,r){if(!e||typeof e!=="object")return;let o=e;if(o.type!==void 0&&o.type!=="tool_call")return;if(typeof o.toolName!=="string"||o.toolName.trim()==="")return d(n);let t=typeof n.cwd==="string"&&n.cwd.trim()!==""?at(".",[n.cwd],r):void 0;if(!t)return d(n,o.toolName);let a=v.get(o.toolName);if(!o.input||typeof o.input!=="object")return a?d(n,o.toolName):void 0;if(!a)return u(o.toolName,o.input,{kind:ce(o.toolName)},{configCwd:t,executionCwd:t},null);let s=o.input.command;if(typeof s!=="string"||s.trim()==="")return d(n,o.toolName);return u(o.toolName,o.input,{kind:"command",shell:a},{configCwd:t,executionCwd:t},s)}function d(e,n){return{malformed:!0,denial:j({toolName:n}),cwd:typeof e.cwd==="string"&&e.cwd.trim()?e.cwd:null}}function f(e,n){let r=Ce(e,{includeEvidence:n});return r?m(r):void 0}function m(e){return{block:!0,reason:Se(e)}}function A(e){C(e),c(e)}export{A as default};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-safety-net",
-  "version": "2.3.4",
+  "version": "2.4.1",
   "description": "A coding agent CLI hook - block destructive commands and secret file access",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -21,31 +21,31 @@
     "ccsn": "dist/bin/cc-safety-net.js"
   },
   "files": [
-    "dist",
-    "THIRD_PARTY_LICENSES.txt"
+    "dist"
   ],
   "scripts": {
     "audit:dependencies": "bun audit",
     "build": "bun run clean && bun scripts/project-bun.ts scripts/build.ts",
     "build:types": "tsc --project tsconfig.build.json --emitDeclarationOnly --declaration",
-    "build:schema": "bun run scripts/build-schema.ts",
     "verify:package": "bun run scripts/verify-package.ts",
     "verify:repository-plugin": "bun run scripts/verify-repository-plugin.ts",
     "verify:coverage": "bun run scripts/verify-coverage.ts",
     "clean": "rm -rf dist",
     "check": "bun run lint && bun run typecheck && bun run knip && bun run check-duplicates && bun run test:coverage && bun run verify:coverage",
     "check:ci": "bun run lint:ci && bun run typecheck && bun run knip && bun run check-duplicates && bun run test:coverage && bun run verify:coverage",
-    "lint": "biome check --write",
-    "lint:ci": "biome ci .",
+    "lint": "biome check --write --error-on-warnings",
+    "lint:ci": "biome ci --error-on-warnings .",
     "typecheck": "tsc --noEmit && tsc -p tsconfig.gui.json --noEmit",
     "knip": "knip-bun --production",
-    "check-duplicates": "bunx jscpd src tests --no-tips --exit-code 1 --reporters ai --ignore '**/*.svg'",
+    "check-duplicates": "bunx jscpd src tests --no-tips --exit-code 1 --reporters ai --ignore '**/*.svg' --ignore 'src/gui/frontend/**' --ignore-pattern 'import\\s[\\s\\S]*?from\\s[^;]*;'",
     "test": "bun test",
     "test:e2e": "bun test tests/e2e",
     "test:e2e:stability": "bun test tests/e2e --randomize --rerun-each 3",
     "test:e2e:live": "CC_SAFETY_NET_E2E_LIVE=1 bun test tests/e2e-live",
     "test:coverage": "AGENT=1 bun test tests --path-ignore-patterns 'tests/e2e-live/**' --coverage --coverage-reporter=text --coverage-reporter=lcov",
-    "cc-safety-net": "bun run src/cli/cc-safety-net.ts"
+    "cc-safety-net": "bun run src/entries/bin.ts",
+    "ccsn": "bun run src/entries/bin.ts",
+    "eval": "claude plugin eval . --ablation with-without --judge-model sonnet --allow-tools \"Bash(npx -y cc-safety-net:*)\" \"Bash(npx cc-safety-net:*)\""
   },
   "author": {
     "name": "J Liew",
@@ -83,9 +83,6 @@
       "./dist/pi/index.js"
     ]
   },
-  "dependencies": {
-    "zod": "4.3.5"
-  },
   "overrides": {
     "js-yaml": "^4.3.1",
     "picomatch@^2.3.1": "2.3.2",
@@ -96,7 +93,7 @@
   "engines": {
     "node": ">=18"
   },
-  "packageManager": "bun@1.4.1",
+  "packageManager": "bun@1.4.2",
   "keywords": [
     "claude-code",
     "opencode",
@@ -109,5 +106,5 @@
     "grok",
     "grok-build"
   ],
-  "gitHead": "e34ca61f448664c5fe056dd0c0cc15264a8712d6"
+  "gitHead": "879ed64316014198ccbe54b9a9152432f596f969"
 }

package/THIRD_PARTY_LICENSES.txt

@@ -1,23 +0,0 @@
-zod 4.3.5
-
-MIT License
-
-Copyright (c) 2025 Colin McDonnell
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.