claude-warden 1.1.6 → 1.1.8

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-warden",
-  "version": "1.0.0",
+  "version": "1.1.8",
   "description": "Smart command safety filter for Claude Code — parses shell pipelines and evaluates per-command safety rules to auto-approve safe commands and block dangerous ones",
   "author": {
     "name": "banyudu"

package/dist/index.cjs

@@ -18139,6 +18139,10 @@ var require_dist2 = __commonJS({
 var import_bash_parser = __toESM(require_src(), 1);
 var import_path = require("path");
 var HEREDOC_REGEX = /<<-?\s*['"]?\w+['"]?/;
+function preprocessCatHeredocs(input) {
+  const regex = /\$\(cat\s+<<-?\s*['"]?(\w+)['"]?\n([\s\S]*?)\n\1\s*\)/g;
+  return input.replace(regex, "__HEREDOC_TEXT__");
+}
 function convertCommand(node) {
   if (!node.name) return null;
   const command = node.name.text.includes("/") ? (0, import_path.basename)(node.name.text) : node.name.text;
@@ -18254,36 +18258,78 @@ function walkNode(node, result) {
       break;
   }
 }
-function parseCommand(input) {
-  if (!input || !input.trim()) {
-    return { commands: [], hasSubshell: false, subshellCommands: [], parseError: false };
-  }
-  const hasHeredoc = HEREDOC_REGEX.test(input);
-  if (hasHeredoc) {
-    const firstLine = input.split("\n")[0];
-    const cmdPart = firstLine.replace(/<<-?\s*['"]?\w+['"]?.*$/, "").trim();
-    if (!cmdPart) {
-      return { commands: [], hasSubshell: false, subshellCommands: [], parseError: true };
+function hasHeredocRedirect(node) {
+  if (!node.suffix) return false;
+  return node.suffix.some((s) => s.type === "dless" || s.type === "dlessdash");
+}
+function astHasHeredoc(ast) {
+  function check(node) {
+    if (node.type === "Command") {
+      if (hasHeredocRedirect(node)) return true;
     }
-    try {
-      const ast = (0, import_bash_parser.default)(cmdPart);
-      const result = { commands: [], hasSubshell: false, subshellCommands: [] };
-      for (const cmd of ast.commands) {
-        walkNode(cmd, result);
+    for (const [key, value] of Object.entries(node)) {
+      if (key === "commandAST" || key === "expansion") continue;
+      if (Array.isArray(value)) {
+        for (const child of value) {
+          if (child && typeof child === "object" && "type" in child && check(child)) return true;
+        }
+      } else if (value && typeof value === "object" && "type" in value) {
+        if (check(value)) return true;
       }
-      return { commands: result.commands, hasSubshell: true, subshellCommands: result.subshellCommands, parseError: false };
-    } catch {
-      return { commands: [], hasSubshell: true, subshellCommands: [], parseError: true };
     }
+    return false;
+  }
+  for (const cmd of ast.commands) {
+    if (check(cmd)) return true;
+  }
+  return false;
+}
+function parseCommand(input) {
+  if (!input || !input.trim()) {
+    return { commands: [], hasSubshell: false, subshellCommands: [], parseError: false };
   }
+  input = preprocessCatHeredocs(input);
   try {
     const ast = (0, import_bash_parser.default)(input);
     const result = { commands: [], hasSubshell: false, subshellCommands: [] };
+    if (astHasHeredoc(ast)) {
+      const firstLine = input.split("\n")[0];
+      const cmdPart = firstLine.replace(/<<-?\s*['"]?\w+['"]?.*$/, "").trim();
+      if (!cmdPart) {
+        return { commands: [], hasSubshell: false, subshellCommands: [], parseError: true };
+      }
+      try {
+        const cmdAst = (0, import_bash_parser.default)(cmdPart);
+        for (const cmd of cmdAst.commands) {
+          walkNode(cmd, result);
+        }
+        return { commands: result.commands, hasSubshell: true, subshellCommands: result.subshellCommands, parseError: false };
+      } catch {
+        return { commands: [], hasSubshell: true, subshellCommands: [], parseError: true };
+      }
+    }
     for (const cmd of ast.commands) {
       walkNode(cmd, result);
     }
     return { commands: result.commands, hasSubshell: result.hasSubshell, subshellCommands: result.subshellCommands, parseError: false };
   } catch {
+    if (HEREDOC_REGEX.test(input)) {
+      const firstLine = input.split("\n")[0];
+      const cmdPart = firstLine.replace(/<<-?\s*['"]?\w+['"]?.*$/, "").trim();
+      if (!cmdPart) {
+        return { commands: [], hasSubshell: true, subshellCommands: [], parseError: true };
+      }
+      try {
+        const ast = (0, import_bash_parser.default)(cmdPart);
+        const result = { commands: [], hasSubshell: false, subshellCommands: [] };
+        for (const cmd of ast.commands) {
+          walkNode(cmd, result);
+        }
+        return { commands: result.commands, hasSubshell: true, subshellCommands: result.subshellCommands, parseError: false };
+      } catch {
+        return { commands: [], hasSubshell: true, subshellCommands: [], parseError: true };
+      }
+    }
     return { commands: [], hasSubshell: false, subshellCommands: [], parseError: true };
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-warden",
-  "version": "1.1.6",
+  "version": "1.1.8",
   "description": "Smart command safety filter for Claude Code — auto-approves safe commands, blocks dangerous ones",
   "type": "module",
   "main": "dist/index.cjs",
@@ -35,7 +35,9 @@
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
     "eval": "node dist/index.cjs",
-    "prepublishOnly": "pnpm run build && pnpm run test"
+    "sync-plugin-version": "node -e \"const p=require('./package.json'),fs=require('fs'),f='.claude-plugin/plugin.json',j=JSON.parse(fs.readFileSync(f));j.version=p.version;fs.writeFileSync(f,JSON.stringify(j,null,2)+'\\n')\"",
+    "prepublishOnly": "pnpm run sync-plugin-version && pnpm run build && pnpm run test",
+    "postpublish": "claude plugin update claude-warden@local 2>/dev/null; claude plugin update claude-warden@claude-warden 2>/dev/null; echo 'Plugin caches updated'"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",