CLI 命令参考

npx cc-safety-net status

plugin cc-safety-net@cc-marketplace is disabled in Claude Code; nothing is enforced in Claude Code until it is re-enabled. Other integrations are not affected.

npx cc-safety-net doctor
bunx cc-safety-net doctor

npx cc-safety-net logs
npx cc-safety-net logs --suspect --since 7
npx cc-safety-net logs --id 3fa9c2d1a70e8b42

npx cc-safety-net explain "git reset --hard"
bunx cc-safety-net explain "git reset --hard"

npx cc-safety-net explain "rm -rf /"
npx cc-safety-net explain --json "git checkout -- file.txt"
npx cc-safety-net explain --cwd /tmp "git status"

npx cc-safety-net explain --json 'loop() { loop; }; loop'

{"error":"Structural command analysis limit exceeded."}

npx -y cc-safety-net rule init
npx -y cc-safety-net rule init --global

npx -y cc-safety-net rule init --example

cc-safety-net rule add project-rules
cc-safety-net rule add acme/safety-rules
cc-safety-net rule add acme/safety-rules --only aws gcloud
cc-safety-net rule add acme/safety-rules --ref v2 --only aws
cc-safety-net rule add --only terraform aws

npx -y cc-safety-net rule remove project-rules
npx -y cc-safety-net rule remove project-rules --delete-source

npx -y cc-safety-net rule update
npx -y cc-safety-net rule update project-rules

npx -y cc-safety-net rule sync

`cc-safety-net rule sync` is deprecated: rulebooks are live files that need no synchronization. This run only migrates the lock and cache an earlier version left behind.

npx -y cc-safety-net rule list

Active rules (1):
  - [project] infra/block-terraform-destroy
      Command: terraform apply
      Any args: -destroy, --destroy
      Exclude args: --dry-run
      Reason: Review a destroy plan first.

npx -y cc-safety-net rule wrapper list
npx -y cc-safety-net rule wrapper add rtk
npx -y cc-safety-net rule wrapper remove rtk

npx -y cc-safety-net rule verify

"$schema": "https://raw.githubusercontent.com/kenryu42/cc-safety-net/main/assets/cc-safety-net.schema.json"

npx -y cc-safety-net rule migrate
npx -y cc-safety-net rule migrate --cleanup

npx -y cc-safety-net rule doc

UPDATE_AVAILABLE: cc-safety-net v<latest> is available (running v<current>). Ask the user once whether to run `npx -y cc-safety-net@latest update`; continue the current task either way and do not raise this again.

cc-safety-net policy check proposal.json
cc-safety-net policy apply proposal.json
cc-safety-net policy apply proposal.json --global

Scope: project (<path>)
Proposal: <file>
Effective policy (user + project merged):
Changes (<n>):
  <field>: <before> -> <after>

<file>: audit settings are user scope only; remove the audit section from a project proposal

policy apply confirms interactively; run this yourself in a terminal:
  cc-safety-net policy apply <file>

Only the user may apply a policy proposal, because it rewrites the configuration CC Safety Net enforces. Ask them to run `cc-safety-net policy apply <file>` themselves in a terminal; you can run `cc-safety-net policy check <file>` to show them what it would change.

npx -y cc-safety-net install
npx -y cc-safety-net install --claude-code

Space: select  Enter: confirm  u: update installed  Up/Down: move  q/Esc: cancel

npx -y cc-safety-net@latest update

Update available: cc-safety-net <current> → <latest>. Update this CLI with your package manager, e.g. `npm i -g cc-safety-net@latest` for a global install.

npx -y cc-safety-net uninstall
npx -y cc-safety-net uninstall --cursor

npx cc-safety-net gui
npx cc-safety-net gui --no-open

bunx cc-safety-net statusline --claude-code
# -cc is the short form of --claude-code
bunx cc-safety-net statusline -cc

npx cc-safety-net --version
npx cc-safety-net -V
npx cc-safety-net --help
npx cc-safety-net -h

npx cc-safety-net help explain
npx cc-safety-net explain --help
npx cc-safety-net help doctor