@hasna/hooks 0.10.8 → 0.10.9

package/bin/native-safety-entry.js

@@ -1303,7 +1303,7 @@ function segmentOperation(segment) {
   const trimmed = segment.trim();
   if (!trimmed)
     return "read";
-  if (/(?:^|\s)(?:rm|rmdir|unlink|shred|trash|rmtree|del)(?:\s|$)/.test(trimmed))
+  if (/(?:^|\s)\\?(?:[^\s;&|<>()]*\/)?(?:rm|rmdir|unlink|shred|trash|rmtree|del)(?:\s|$)/.test(trimmed))
     return "delete";
   if (/\bgit\b/.test(trimmed)) {
     if (/\bgit\b[^;&|]*\b(?:clean|rm)\b/.test(trimmed))
@@ -1312,7 +1312,7 @@ function segmentOperation(segment) {
       return "write";
     return "read";
   }
-  if (/(?:^|\s)(?:mkdir|mkfile|touch|mv|cp|ln|tee|install|dd)(?:\s|$)/.test(trimmed))
+  if (/(?:^|\s)\\?(?:[^\s;&|<>()]*\/)?(?:mkdir|mkfile|touch|mv|cp|ln|tee|install|dd)(?:\s|$)/.test(trimmed))
     return "write";
   if (/\b(?:curl|wget)\b/.test(trimmed)) {
     if (WRITE_FLAGS.test(trimmed))
@@ -1455,8 +1455,17 @@ function bashTargets(command, home, cwd) {
       if (foundExplicit || stage.op === "read")
         continue;
       const words = shellWords(stage.commandPart);
+      let operandStart = 1;
+      const tool = (words[0]?.text ?? "").split("/").pop();
+      if (tool === "trash" && ["put", "rm", "delete", "remove"].includes(words[1]?.text ?? ""))
+        operandStart = 2;
+      if (tool === "git") {
+        const sub = words.findIndex((word, index2) => index2 > 0 && (word.text === "rm" || word.text === "clean"));
+        if (sub > 0)
+          operandStart = sub + 1;
+      }
       let endOfOptions = false;
-      const nonFlag = words.slice(1).flatMap((word) => {
+      const nonFlag = words.slice(operandStart).flatMap((word) => {
         if (!endOfOptions && word.text === "--") {
           endOfOptions = true;
           return [];
@@ -1466,7 +1475,7 @@ function bashTargets(command, home, cwd) {
         endOfOptions = true;
         return [word.opaque ? "." : word.text];
       });
-      const everyOperand = stage.op === "delete" || /(?:^|\s)(?:mkdir|mkfile|touch|tee|truncate|install|mv)(?:\s|$)/.test(stage.commandPart) || /(?:^|\s)sed(?:\s|$)/.test(stage.commandPart) && /(?:^|\s)(?:-i\S*|--in-place\S*)(?:\s|$)/.test(stage.commandPart);
+      const everyOperand = stage.op === "delete" || /(?:^|\s)\\?(?:[^\s;&|<>()]*\/)?(?:mkdir|mkfile|touch|tee|truncate|install|mv)(?:\s|$)/.test(stage.commandPart) || /(?:^|\s)sed(?:\s|$)/.test(stage.commandPart) && /(?:^|\s)(?:-i\S*|--in-place\S*)(?:\s|$)/.test(stage.commandPart);
       const operandTargets = [];
       if (everyOperand) {
         for (const operand of nonFlag.length > 0 ? nonFlag : ["."])

package/hooks/hook-workspace-repos-guard/README.md

@@ -51,8 +51,11 @@ word of a later read-only stage (`| head -60`) is never taken as the write
 target of an earlier stage. Pipes inside quotes or command substitutions are
 not stage boundaries.
 A protected path named anywhere in a pipeline takes the strongest operation
-of any stage (`find <root>/x | xargs rm -rf` is a delete). Deletes and
-`mkdir`/`touch` check every operand; other writers check their last one.
+of any stage (`find <root>/x | xargs rm -rf` is a delete). Deletes,
+`mkdir`/`touch`, `tee`, `truncate`, `install`, `mv` and `sed -i` check every
+operand (options end at `--` or at the first operand); other writers check
+their last one, plus any `-t`/`--target-directory` value. A delete tool's
+subcommand word is not an operand (`trash put <path>`, `git rm <path>`).
 An operand or redirect target that cannot be read statically (a variable
 other than `$HOME`, `$( )`, backticks, a glob) fails closed to the directory
 the command runs in, so `rm -rf "$TMPDIR/x"` run from a protected checkout is

package/hooks/hook-workspace-repos-guard/src/hook.ts

@@ -365,13 +365,13 @@ function segmentOperation(segment: string): Operation {
   const trimmed = segment.trim();
   if (!trimmed) return "read";
 
-  if (/(?:^|\s)(?:rm|rmdir|unlink|shred|trash|rmtree|del)(?:\s|$)/.test(trimmed)) return "delete";
+  if (/(?:^|\s)\\?(?:[^\s;&|<>()]*\/)?(?:rm|rmdir|unlink|shred|trash|rmtree|del)(?:\s|$)/.test(trimmed)) return "delete";
   if (/\bgit\b/.test(trimmed)) {
     if (/\bgit\b[^;&|]*\b(?:clean|rm)\b/.test(trimmed)) return "delete";
     if (/\bgit\b[^;&|]*\b(?:clone|init)\b/.test(trimmed)) return "write";
     return "read";
   }
-  if (/(?:^|\s)(?:mkdir|mkfile|touch|mv|cp|ln|tee|install|dd)(?:\s|$)/.test(trimmed)) return "write";
+  if (/(?:^|\s)\\?(?:[^\s;&|<>()]*\/)?(?:mkdir|mkfile|touch|mv|cp|ln|tee|install|dd)(?:\s|$)/.test(trimmed)) return "write";
   if (/\b(?:curl|wget)\b/.test(trimmed)) {
     if (WRITE_FLAGS.test(trimmed)) return "write";
     return "read";
@@ -586,8 +586,17 @@ export function bashTargets(command: string, home: string, cwd: string): PathTar
       // Operands after the command word. Options end at `--` or, as BSD
       // getopt does, at the first operand: every later word is an operand
       // even when it starts with `-`.
+      // A delete tool's subcommand word is not an operand: `trash put <path>`
+      // and `git [-C dir] rm|clean ...` act on the words after it.
+      let operandStart = 1;
+      const tool = (words[0]?.text ?? "").split("/").pop();
+      if (tool === "trash" && ["put", "rm", "delete", "remove"].includes(words[1]?.text ?? "")) operandStart = 2;
+      if (tool === "git") {
+        const sub = words.findIndex((word, index) => index > 0 && (word.text === "rm" || word.text === "clean"));
+        if (sub > 0) operandStart = sub + 1;
+      }
       let endOfOptions = false;
-      const nonFlag = words.slice(1).flatMap((word) => {
+      const nonFlag = words.slice(operandStart).flatMap((word) => {
         if (!endOfOptions && word.text === "--") {
           endOfOptions = true;
           return [];
@@ -599,7 +608,7 @@ export function bashTargets(command: string, home: string, cwd: string): PathTar
       // mv changes its sources too, so every mv operand counts as a write.
       const everyOperand =
         stage.op === "delete" ||
-        /(?:^|\s)(?:mkdir|mkfile|touch|tee|truncate|install|mv)(?:\s|$)/.test(stage.commandPart) ||
+        /(?:^|\s)\\?(?:[^\s;&|<>()]*\/)?(?:mkdir|mkfile|touch|tee|truncate|install|mv)(?:\s|$)/.test(stage.commandPart) ||
         (/(?:^|\s)sed(?:\s|$)/.test(stage.commandPart) && /(?:^|\s)(?:-i\S*|--in-place\S*)(?:\s|$)/.test(stage.commandPart));
       const operandTargets: Array<{ operand: string; op: Operation }> = [];
       if (everyOperand) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/hooks",
-  "version": "0.10.8",
+  "version": "0.10.9",
   "description": "Open source hooks library for AI coding agents - Install safety, quality, and automation hooks with a single command",
   "type": "module",
   "bin": {