cc-safety-net 2.4.6 → 2.4.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -1
- package/dist/amp/cc-safety-net/index.ts +37 -37
- package/dist/api.js +1 -1
- package/dist/bin/hook.js +35 -35
- package/dist/chunks/index-fvtsm6ez.js +45 -0
- package/dist/chunks/{index-q7q195qc.js → index-rr4ytenf.js} +1 -1
- package/dist/chunks/{index-4jcxaxr5.js → index-tfdjszbb.js} +2 -2
- package/dist/cli.js +4 -4
- package/dist/index.js +1 -1
- package/dist/openclaw/cc-safety-net/index.js +37 -37
- package/dist/openclaw/cc-safety-net/openclaw.plugin.json +1 -1
- package/dist/openclaw/cc-safety-net/package.json +1 -1
- package/dist/pi/index.js +1 -1
- package/package.json +2 -2
- package/dist/chunks/index-c989ehp9.js +0 -45
package/README.md
CHANGED
|
@@ -15,7 +15,7 @@
|
|
|
15
15
|
|
|
16
16
|
**English** · [简体中文](https://ccsafetynet.com/docs/zh-Hans) · [日本語](https://ccsafetynet.com/docs/ja)
|
|
17
17
|
|
|
18
|
-
|
|
18
|
+
https://github.com/user-attachments/assets/55887071-c722-4ed3-85c8-2ed00ba96b01
|
|
19
19
|
|
|
20
20
|
</div>
|
|
21
21
|
|
|
@@ -101,6 +101,8 @@ To set a preset, run `npx cc-safety-net gui` and open Policy.
|
|
|
101
101
|
|
|
102
102
|
Linked-worktree mode relaxes only local discard. Git discards inside a temp-root repository unrelated to the workspace are allowed like temp deletes (local discards only when that repository is a linked worktree), as is `git worktree remove --force` of an existing temp-root directory unrelated to the workspace. See [Modes](https://ccsafetynet.com/docs/configuration/modes).
|
|
103
103
|
|
|
104
|
+
To allow one file name you manage at any depth under a folder, add an entry such as `"~/code/**/.env.local"` to `secret_protection.allow_paths` in your user policy. Other env variants stay blocked. The folder before `**/` is required and cannot be your home directory or a folder above it, so home credentials such as `~/.ssh` and `~/.npmrc` stay protected. Only a folder, `**/`, and an exact file name are supported; configured deny paths and Coding CLI protections still win. Many frameworks keep local secrets in `.env.local`, so allow it only if that matches how you use it.
|
|
105
|
+
|
|
104
106
|
## Diagnostics
|
|
105
107
|
|
|
106
108
|
```bash
|