@bunshin-cc/bunshin 0.10.4 → 0.10.5

package/dist/bin.js

@@ -1827,9 +1827,11 @@ function globToRegExp(glob) {
   globCache.set(glob, out);
   return out;
 }
+function normalPath(path29) {
+  return path29.replace(/\\/g, "/").split("/").filter((s) => s !== "" && s !== ".").join("/");
+}
 function matchesGlob(path29, glob) {
-  const p = path29.replace(/^\.\//, "").replace(/\\/g, "/");
-  return globToRegExp(glob.replace(/^\.\//, "")).test(p);
+  return globToRegExp(glob.replace(/^\.\//, "")).test(normalPath(path29));
 }
 var DEFAULT_EMBEDDERS, globCache;
 var init_text_index = __esm({
@@ -5617,7 +5619,7 @@ function applyLocally(v2, view, s) {
   const section = s.target.sectionId ? view.byId.get(s.target.sectionId) : void 0;
   if (!section) return { applied: false, target: s.target.sectionId ?? "?", reason: "target section not in the local view" };
   if (section.storage.type === "repo") {
-    const file = containedPath(view.root, section.storage.path);
+    const file = isDoc(section.storage.path) ? containedPath(view.root, section.storage.path) : null;
     const ours = !view.repo || section.storage.repo === view.repo;
     if (ours && file && fs11.existsSync(file)) {
       const before = fs11.readFileSync(file, "utf8");
@@ -5727,6 +5729,7 @@ var init_apply = __esm({
     "use strict";
     init_v22();
     init_util();
+    init_repo();
     init_view();
     STATUS_FOR = {
       "drop-overlay": "accepted",
@@ -6656,6 +6659,7 @@ async function askRouter(store, v2, sessionId, model) {
     if (!session?.lastPrompt) return { picks: { error: "no prompt in the session file" } };
     if (!canCall(config)) return { picks: { error: "offline: the router's index comes from the server" } };
     const index = await routerIndex(store, v2, session.source ?? "");
+    if (!/^[\w-]{1,64}$/.test(index.hash)) return { picks: { error: "the router index came back with a malformed hash" } };
     indexHash = index.hash;
     const systemFile = path11.join(dir(v2), `system-${index.hash}.txt`);
     if (!fs16.existsSync(systemFile)) fs16.writeFileSync(systemFile, index.system);
@@ -8777,7 +8781,8 @@ async function connectionProfile(apiUrl, apiKey) {
   if (!profile || ![profile.orgId, profile.userId, profile.role].every((value) => typeof value === "string" && value.length > 0) || typeof profile.orgUnit !== "string" || !["public", "org", "department", "team", "leadership", "csuite", "private"].includes(profile.clearance) || !Array.isArray(profile.responsibilities) || !profile.responsibilities.every((value) => typeof value === "string")) {
     throw new Error("Bunshin returned an incomplete profile. No connection settings were changed.");
   }
-  return profile;
+  const { orgId, userId, role, orgUnit, clearance, responsibilities } = profile;
+  return { orgId, userId, role, orgUnit, clearance, responsibilities: [...responsibilities] };
 }
 async function readKey() {
   if (!process.stdin.isTTY) throw new Error("Run setup in a terminal to paste your key, or supply it through BUNSHIN_API_KEY or --key-stdin.");

package/dist/claude-code-ui/hooks/bunshin-ui.mjs

@@ -61,11 +61,15 @@ export function register(on) {
     return result;
   });
 
-  // After each Bunshin hook has run (the settings hooks are below us in the chain), read the feed.
-  on("classic.SessionStart", after);
-  on("classic.UserPromptSubmit", after);
-  on("classic.PreToolUse", after);
-  on("classic.Stop", after);
+  // After each Bunshin settings hook has run, read the feed. Not on classic.*: the bundled
+  // cc-plugin-sec-default (seated outermost for Team and Enterprise organizations and on machines
+  // with managed settings) sends every classic.* event past the plugins a person installs, so
+  // those hooks never run there. These events carry the same settings hooks inside their next():
+  // prompt.submit runs UserPromptSubmit's, tool.call PreToolUse's; turn.complete ends the turn
+  // Stop closes; SessionStart is session.start's first refresh above. The poll catches the rest.
+  on("prompt.submit", after);
+  on("tool.call", after);
+  on("turn.complete", ($, e, next) => (e.agentId === undefined ? after($, e, next) : next(e)));
 
   // /clear and /resume change the session.
   on("command.run", { command: ["clear", "resume"] }, async ($, e, next) => {
@@ -113,7 +117,7 @@ export function register(on) {
   });
 }
 
-/** After one of Bunshin's settings hooks ran (they sit below the mods in the chain): read the feed. */
+/** Once the event beneath (and the Bunshin settings hooks it runs) has settled: read the feed. */
 async function after($, e, next) {
   const result = await next(e);
   void refresh($).catch(() => undefined);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bunshin-cc/bunshin",
-  "version": "0.10.4",
+  "version": "0.10.5",
   "description": "Shared memory for company AI agents. Connect Codex, Claude Code, or Pi to Bunshin.",
   "type": "module",
   "bin": {