cc-safety-net 2.6.16 → 2.6.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +26 -23
- package/dist/amp/cc-safety-net/index.ts +44 -44
- package/dist/api.js +1 -1
- package/dist/bin/hook.js +42 -42
- package/dist/chunks/index-03hfs9tb.js +2 -0
- package/dist/chunks/index-1p1q38x4.js +49 -0
- package/dist/chunks/index-7nndhfn3.js +2 -0
- package/dist/chunks/index-8c31a7e4.js +2 -0
- package/dist/chunks/{index-gkf3ty4y.js → index-8m4sxbp8.js} +4 -4
- package/dist/chunks/{index-wkjncmhg.js → index-fpxp8rvc.js} +2 -2
- package/dist/chunks/index-tz7650sh.js +2 -0
- package/dist/cli.js +120 -120
- package/dist/deepseek-harness/index.js +1 -1
- package/dist/index.js +4 -4
- package/dist/openclaw/cc-safety-net/index.js +41 -41
- package/dist/openclaw/cc-safety-net/openclaw.plugin.json +1 -1
- package/dist/openclaw/cc-safety-net/package.json +1 -1
- package/dist/pi/index.js +2 -2
- package/package.json +4 -2
- package/dist/chunks/index-2r2nzahr.js +0 -2
- package/dist/chunks/index-3s2q5wht.js +0 -2
- package/dist/chunks/index-90bkfxht.js +0 -2
- package/dist/chunks/index-pzctbrv3.js +0 -49
- package/dist/chunks/index-wshq0mgp.js +0 -2
package/README.md
CHANGED
|
@@ -9,17 +9,20 @@
|
|
|
9
9
|
[](https://github.com/kenryu42/cc-safety-net/actions/workflows/ci.yml)
|
|
10
10
|
[](https://codecov.io/github/kenryu42/cc-safety-net)
|
|
11
11
|
[](https://github.com/kenryu42/cc-safety-net)
|
|
12
|
+
|
|
13
|
+
|
|
14
|
+
|
|
12
15
|
[](https://opensource.org/licenses/MIT)
|
|
13
16
|
|
|
14
17
|
<div align="center">
|
|
15
18
|
|
|
16
19
|
**English** · [简体中文](https://ccsafetynet.com/docs/zh-Hans) · [日本語](https://ccsafetynet.com/docs/ja)
|
|
17
20
|
|
|
18
|
-
https://github.com/user-attachments/assets/
|
|
21
|
+
https://github.com/user-attachments/assets/353c1441-9156-483c-b8e5-32fce7905a83
|
|
19
22
|
|
|
20
23
|
</div>
|
|
21
24
|
|
|
22
|
-
CC Safety Net (Coding CLI Safety Net) blocks destructive commands and access to secrets such as SSH keys and `.env` files before the tool call runs. It parses what the command does. Wrapping the command or reordering flags does not hide it. A broken config file
|
|
25
|
+
CC Safety Net (Coding CLI Safety Net) blocks destructive commands and access to secrets such as SSH keys and `.env` files before the tool call runs. It parses what the command does. Wrapping the command or reordering flags does not hide it. A broken config file falls back to safe defaults instead of stopping your agent. It is not a sandbox: it does not contain processes, set filesystem permissions, or watch network egress.
|
|
23
26
|
|
|
24
27
|
> [!NOTE]
|
|
25
28
|
> **[Full documentation →](https://ccsafetynet.com/docs)** covers installation, configuration, reference material, guides, and the security model. This README is the short version.
|
|
@@ -40,39 +43,39 @@ CC Safety Net supports these coding agent CLIs on Windows, macOS, and Linux.
|
|
|
40
43
|
|
|
41
44
|
<table align="center">
|
|
42
45
|
<tr>
|
|
43
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
44
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
45
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
46
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
46
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/amp-code"><picture><source media="(prefers-color-scheme: dark)" srcset="./.github/assets/amp-dark.svg"><img alt="Amp Code" src="./.github/assets/amp-light.svg" height="32"></picture><br>Amp Code</a></td>
|
|
47
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/antigravity-cli"><img alt="Antigravity CLI" src="./.github/assets/antigravity-cli.png" height="32"><br>Antigravity CLI</a></td>
|
|
48
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/claude-code"><img alt="Claude Code" src="./.github/assets/claude-code.svg" height="32"><br>Claude Code</a></td>
|
|
49
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/codex"><img alt="Codex" src="./.github/assets/codex.svg" height="32"><br>Codex</a></td>
|
|
47
50
|
</tr>
|
|
48
51
|
<tr>
|
|
49
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
50
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
51
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
52
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
52
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/cursor"><picture><source media="(prefers-color-scheme: dark)" srcset="./.github/assets/cursor-dark.svg"><img alt="Cursor" src="./.github/assets/cursor-light.svg" height="32"></picture><br>Cursor</a></td>
|
|
53
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/deepseek-harness"><img alt="DeepSeek Harness" src="./.github/assets/deepseek.svg" height="32"><br>DeepSeek Harness</a></td>
|
|
54
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/devin-cli"><picture><source media="(prefers-color-scheme: dark)" srcset="./.github/assets/devin-dark.svg"><img alt="Devin CLI" src="./.github/assets/devin-light.svg" height="32"></picture><br>Devin CLI</a></td>
|
|
55
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/factory-droid"><picture><source media="(prefers-color-scheme: dark)" srcset="./.github/assets/droid-dark.svg"><img alt="Factory Droid" src="./.github/assets/droid-light.svg" height="32"></picture><br>Factory Droid</a></td>
|
|
53
56
|
</tr>
|
|
54
57
|
<tr>
|
|
55
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
56
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
57
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
58
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
58
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/gemini-cli"><img alt="Gemini CLI" src="./.github/assets/gemini-cli.svg" height="32"><br>Gemini CLI</a></td>
|
|
59
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/github-copilot-cli"><picture><source media="(prefers-color-scheme: dark)" srcset="./.github/assets/copilot-cli-dark.svg"><img alt="GitHub Copilot CLI" src="./.github/assets/copilot-cli-light.svg" height="32"></picture><br>GitHub Copilot CLI</a></td>
|
|
60
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/grok-build"><picture><source media="(prefers-color-scheme: dark)" srcset="./.github/assets/grok-build-dark.svg"><img alt="Grok Build" src="./.github/assets/grok-build-light.svg" height="32"></picture><br>Grok Build</a></td>
|
|
61
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/hermes-agent"><img alt="Hermes Agent" src="./.github/assets/hermes.png" height="32"><br>Hermes Agent</a></td>
|
|
59
62
|
</tr>
|
|
60
63
|
<tr>
|
|
61
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
62
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
63
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
64
|
-
<td align="center"><a href="https://ccsafetynet.com/docs/installation
|
|
64
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/kimi-code"><img alt="Kimi Code" src="./.github/assets/kimi-cli.png" height="32"><br>Kimi Code</a></td>
|
|
65
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/openclaw"><img alt="OpenClaw" src="./.github/assets/openclaw.png" height="32"><br>OpenClaw</a></td>
|
|
66
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/opencode"><picture><source media="(prefers-color-scheme: dark)" srcset="./.github/assets/opencode-dark.svg"><img alt="OpenCode" src="./.github/assets/opencode-light.svg" height="32"></picture><br>OpenCode</a></td>
|
|
67
|
+
<td align="center"><a href="https://ccsafetynet.com/docs/installation/pi"><img alt="Pi" src="./.github/assets/pi.svg" height="32"><br>Pi</a></td>
|
|
65
68
|
</tr>
|
|
66
69
|
</table>
|
|
67
70
|
|
|
68
71
|
|
|
69
72
|
## Features
|
|
70
73
|
|
|
71
|
-
- **Blocks destructive commands** such as `git reset --hard`, `git push --force`, and `rm -rf` on dangerous targets, even inside `bash -c` or `python -c`. See [Blocked
|
|
72
|
-
- **Blocks secret access** to SSH keys, `.env` files, `~/.aws`, and coding-CLI credentials, from the shell and from the agent's file tools. See [Secret
|
|
73
|
-
- **Tunes the policy in a GUI.** Run `npx cc-safety-net gui` to pick the Standard, Strict, or Paranoid preset and turn rules on or off. See [
|
|
74
|
-
- **Adds blocks through rulebooks**: official packs for Terraform, AWS, gcloud, and Azure, or your own JSON. See [Official
|
|
75
|
-
- **Shares policy through git.** Commit `.cc-safety-net/` so clones and cloud sessions get the same rules. See [Team
|
|
74
|
+
- **Blocks destructive commands** such as `git reset --hard`, `git push --force`, and `rm -rf` on dangerous targets, and install scripts piped from the internet (`curl … | bash`), even inside `bash -c` or `python -c`. See [Blocked commands](https://ccsafetynet.com/docs/reference/blocked-commands).
|
|
75
|
+
- **Blocks secret access** to SSH keys, `.env` files, `~/.aws`, and coding-CLI credentials, from the shell and from the agent's file tools. See [Secret protection](https://ccsafetynet.com/docs/reference/secret-protection).
|
|
76
|
+
- **Tunes the policy in a GUI.** Run `npx cc-safety-net gui` to pick the Standard, Strict, or Paranoid preset and turn rules on or off. See [Dashboard](https://ccsafetynet.com/docs/guides/dashboard).
|
|
77
|
+
- **Adds blocks through rulebooks**: official packs for Terraform, AWS, gcloud, and Azure, or your own JSON. See [Official rulebooks](https://ccsafetynet.com/docs/configuration/rulebooks).
|
|
78
|
+
- **Shares policy through git.** Commit `.cc-safety-net/` so clones and cloud sessions get the same rules. See [Team setup](https://ccsafetynet.com/docs/guides/team-setup).
|
|
76
79
|
- **Embeds in your own tools.** Call `checkCommand` from Node.js without installing the hook. See [Library API](https://ccsafetynet.com/docs/reference/library-api).
|
|
77
80
|
|
|
78
81
|
## Quick start
|