@ngockhoale/ukit 3.4.18 → 3.4.19

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to UKit are documented here.
 
+## 3.4.19 - 2026-10-06
+
+**Create-scope guard: more read-only shell false positives removed (found by replaying 4vn's real blocked commands).**
+`2>/dev/null;` / `2>/dev/null|` (operator glued to the redirect target) was read as a write to a file
+named `/dev/null;`; commands after shell keywords (`for ...; do jq ...`, `then`, `else`, `while`) skipped the
+read-only interpreter mask. Real writes (`>src/a.js;`, write APIs) still block. Test 14 in createScopeGuard.
+
 ## 3.4.18 - 2026-10-06
 
 **Stops the token-burning respawn loop at its source.**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ngockhoale/ukit",
-  "version": "3.4.18",
+  "version": "3.4.19",
   "description": "Install/update an index-first AI workspace for Claude Code, OpenAI Codex and omp (Oh My Pi).",
   "license": "MIT",
   "type": "module",

package/template_project/.claude/hooks/handoff-model-guard.sh

@@ -407,7 +407,7 @@ const SCRIPT_WRITE_API = new RegExp([
 function firstWord(text) {
   const words = text.trim().split(/\s+/);
   let i = 0;
-  while (i < words.length && (/^[A-Za-z_]\w*=/.test(words[i]) || /^(?:sudo|time|nohup|command|exec)$/.test(words[i]))) i += 1;
+  while (i < words.length && (/^[A-Za-z_]\w*=/.test(words[i]) || /^(?:sudo|time|nohup|command|exec|do|then|else|elif|if|while|until|!|\{|\()$/.test(words[i]))) i += 1;
   return (words[i] || '').replace(/^.*\//, '');
 }
 function splitShellSegments(command) {
@@ -488,7 +488,8 @@ function shellWriteHit(rawCommand) {
   // Redirect (optionally fd-numbered: `1>f`, `3>f`, `&>f`, `>&f`) to anything but /dev/null.
   // fd duplication (`2>&1`, `>&2`, `>&-`) is excluded by the `(?!&)` target shape.
   for (const m of command.matchAll(/(^|[^>])&?>{1,2}\s*(?:&(?![0-9-]))?((?!&)\S+)/g)) {
-    if (m[2] !== '/dev/null') return true;
+    // `2>/dev/null;` / `2>/dev/null|` / `2>/dev/null)` glue the shell operator onto the target token.
+    if (!['/dev/null', '/dev/stdout', '/dev/stderr'].includes(m[2].replace(/[;&|)]+$/, ''))) return true;
   }
   return SHELL_WRITE_PATTERNS.some((re) => re.test(command));
 }