ccsniff 1.1.13 → 1.1.15

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccsniff",
-  "version": "1.1.13",
+  "version": "1.1.15",
   "description": "Watch Claude Code JSONL output files and emit structured events as a Node.js EventEmitter",
   "type": "module",
   "main": "./src/index.js",

package/src/cli.js

@@ -400,11 +400,15 @@ if (opts['search-discipline']) {
       }
     } else if (name === 'Bash') {
       const cmd = ev.block?.input?.command || '';
-      if (BASH_SEARCH.test(cmd)) {
+      // A search tool fed by a pipe (`<cmd> | grep ...`) is filtering another command's stdout,
+      // not searching the codebase tree — codesearch has no equivalent for that and it is not the
+      // bypass the rule targets. Flag only a search tool that STARTS a pipeline segment (reads the
+      // tree directly), never one immediately downstream of a pipe.
+      const isTreeSearchLine = (line) => BASH_SEARCH.test(line.split('|')[0]);
+      const hitLine = cmd.split('\n').find(isTreeSearchLine);
+      if (hitLine) {
         kind = 'native-search-bash';
-        // show the line that actually invokes the search tool, not line 1 (often a cd)
-        const hit = cmd.split('\n').find(l => BASH_SEARCH.test(l)) || cmd;
-        detail = hit.trim().slice(0, 120);
+        detail = (hitLine.split('|')[0]).trim().slice(0, 120);
       }
     }
     if (kind) violations.push({ ts, sid, project, kind, detail });
@@ -436,6 +440,9 @@ if (opts['glyph-discipline']) {
   const includeSubagents = opts['include-subagents'];
   const GLYPH = /[←-⇿⌀-⏿■-◿☀-➿⬀-⯿]|[\u{1F000}-\u{1FAFF}]/u;
   const GLYPH_G = /[←-⇿⌀-⏿■-◿☀-➿⬀-⯿]|[\u{1F000}-\u{1FAFF}]/gu;
+  // Glyphs inside a regex char-class (e.g. /[←-⇿]/) are a detector/range DEFINITION, not decorative
+  // prose — blank those bracket bodies before testing so a glyph-rule definition does not flag itself.
+  const stripGlyphCharClass = (s) => s.replace(/\[[^\]\n]*\]/g, (m) => GLYPH.test(m) ? '[]' : m);
   const violations = [];
   for (const ev of all) {
     if (!filter(ev)) continue;
@@ -445,7 +452,8 @@ if (opts['glyph-discipline']) {
     if (name !== 'Write' && name !== 'Edit' && name !== 'NotebookEdit') continue;
     const inp = ev.block?.input || {};
     const filePath = inp.file_path || inp.notebook_path || '';
-    const content = [inp.content, inp.new_string, inp.new_source].filter(s => typeof s === 'string').join('\n');
+    const rawContent = [inp.content, inp.new_string, inp.new_source].filter(s => typeof s === 'string').join('\n');
+    const content = stripGlyphCharClass(rawContent);
     if (!content || !GLYPH.test(content)) continue;
     const glyphs = [...new Set((content.match(GLYPH_G) || []))].slice(0, 10).join(' ');
     violations.push({ ts: ev.timestamp, sid: ev.conversation?.id || '', project: path.basename(ev.conversation?.cwd || ''), kind: 'glyph-written', file: path.basename(filePath), glyphs });