@hasna/terminal 1.2.0 → 1.2.1

package/dist/ai.js

@@ -40,6 +40,9 @@ const IRREVERSIBLE_PATTERNS = [
     /\bkill\b/, /\bkillall\b/, /\bpkill\b/,
     // Git push/force operations
     /\bgit\s+push\b/, /\bgit\s+reset\s+--hard\b/, /\bgit\s+force\b/,
+    // Code modification / package installation (security risk)
+    /\bnpx\s+\S+/, /\bnpm\s+install\b/, /\bbun\s+add\b/, /\bpip\s+install\b/,
+    /\bcodemod\b/, /\bsed\s+-i\b/, /\bawk\s.*>/, /\bperl\s+-[pi]\b/,
 ];
 export function isIrreversible(command) {
     return IRREVERSIBLE_PATTERNS.some((r) => r.test(command));
@@ -160,6 +163,9 @@ RULES:
 - For text search in code, use grep -rn, NOT nm or objdump (those are for compiled binaries)
 - On macOS: for memory use vm_stat or top -l 1, for disk use df -h, for processes use ps aux
 - NEVER invent commands that don't exist. Stick to standard Unix/macOS commands.
+- NEVER install packages (npx, npm install, pip install, brew install). This is a READ-ONLY terminal.
+- NEVER modify source code (sed -i, codemod, awk with redirect). Only observe, never change.
+- Search src/ directory, NOT dist/ or node_modules/ for code queries.
 cwd: ${process.cwd()}
 shell: zsh / macOS${projectContext}${restrictionBlock}${contextBlock}`;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/terminal",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "Smart terminal wrapper for AI agents and humans — structured output, token compression, MCP server, natural language",
   "type": "module",
   "bin": {

package/src/ai.ts

@@ -48,6 +48,9 @@ const IRREVERSIBLE_PATTERNS = [
   /\bkill\b/, /\bkillall\b/, /\bpkill\b/,
   // Git push/force operations
   /\bgit\s+push\b/, /\bgit\s+reset\s+--hard\b/, /\bgit\s+force\b/,
+  // Code modification / package installation (security risk)
+  /\bnpx\s+\S+/, /\bnpm\s+install\b/, /\bbun\s+add\b/, /\bpip\s+install\b/,
+  /\bcodemod\b/, /\bsed\s+-i\b/, /\bawk\s.*>/, /\bperl\s+-[pi]\b/,
 ];
 
 export function isIrreversible(command: string): boolean {
@@ -195,6 +198,9 @@ RULES:
 - For text search in code, use grep -rn, NOT nm or objdump (those are for compiled binaries)
 - On macOS: for memory use vm_stat or top -l 1, for disk use df -h, for processes use ps aux
 - NEVER invent commands that don't exist. Stick to standard Unix/macOS commands.
+- NEVER install packages (npx, npm install, pip install, brew install). This is a READ-ONLY terminal.
+- NEVER modify source code (sed -i, codemod, awk with redirect). Only observe, never change.
+- Search src/ directory, NOT dist/ or node_modules/ for code queries.
 cwd: ${process.cwd()}
 shell: zsh / macOS${projectContext}${restrictionBlock}${contextBlock}`;
 }