codehere 0.3.0-rc.1 → 0.3.0-rc.2

package/dist/infrastructure/hooks/claude-sdk-hook.js

@@ -417,10 +417,14 @@ export function appendAuditLog(entry) {
  *   not execution — strip the search term so pattern strings in args don't
  *   trigger the scanner.
  *
- * Write / Edit / MultiEdit: the content is data being written to disk,
- *   not executed. Only scan the file path (destination) and, for Edit,
- *   the old_string (what we're matching). Never scan new_string / content
- *   — that would block writing security documentation, test fixtures, etc.
+ * Write / Edit / MultiEdit: the content is DATA being written to disk, not
+ *   a command being executed. Only scan the file path (destination) — that's
+ *   enough to catch writes to sensitive files (~/.ssh/id_rsa, ~/.aws/credentials).
+ *   Do NOT scan content: it produces false positives on legitimate source code
+ *   that mentions attack-shaped strings (i18n with "system prompt", README docs
+ *   describing what we block, LLM-prompt-engineering code, security tests).
+ *   The Bash surface is the right place to catch prompt-injection / code-injection
+ *   patterns; Edit-time content is data, not execution intent.
  */
 function buildScanPayload(toolName, toolInput) {
     if (toolName === 'Bash') {
@@ -438,11 +442,11 @@ function buildScanPayload(toolName, toolInput) {
         return JSON.stringify({ file_path: toolInput.file_path ?? '' });
     }
     if (toolName === 'Edit') {
-        // Scan destination path + old_string (the selector), not new_string (the replacement)
-        return JSON.stringify({
-            file_path: toolInput.file_path ?? '',
-            old_string: toolInput.old_string ?? '',
-        });
+        // Same model as Write: scan only the destination. The old_string is
+        // EXISTING file content (data), not execution intent — scanning it
+        // produced false positives on legitimate edits to files containing
+        // attack-shaped strings (e.g. i18n.js with a "system prompt" key).
+        return JSON.stringify({ file_path: toolInput.file_path ?? '' });
     }
     if (toolName === 'MultiEdit') {
         // Scan file paths only

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codehere",
-  "version": "0.3.0-rc.1",
+  "version": "0.3.0-rc.2",
   "description": "A PM for your AI coding agents. Delegate, orchestrate, and audit Claude Code, Codex, Aider, and OpenCode from one local web UI — every AI action traced, every file scored.",
   "main": "dist/index.js",
   "type": "module",