gm-kilo 2.0.115 → 2.0.118

package/hooks/pre-tool-use-hook.js

@@ -64,12 +64,8 @@ const run = () => {
 
     if (tool_name === 'Bash') {
       const command = (tool_input?.command || '').trim();
-      if (/\bcodebasesearch\b/.test(command) && !/^git /.test(command)) {
-        return { block: true, reason: 'Use the code-search skill instead of running codebasesearch directly via Bash. Invoke it as a skill with your natural language query.' };
-      }
-      const allowed = /^(git |gh |npm |npx |bun |node |python |python3 |ruby |go |deno |tsx |ts-node |docker |sudo systemctl|systemctl |pm2 |cd |agent-browser )/.test(command);
-      if (!allowed) {
-        return { block: true, reason: 'Bash only allows: git, gh, node, python, bun, npx, ruby, go, deno, docker, npm, systemctl, pm2, cd. Write all logic as code and execute it via Bash (e.g. node -e "...", python -c "...", bun -e "..."). Use Read/Write/Edit for file ops. Use code-search skill for exploration.' };
+      if (!/^(bun x mcp-gm|bunx mcp-gm)(\s|$)/.test(command)) {
+        return { block: true, reason: 'Bash is restricted to: bunx mcp-gm\n\nmcp-gm is the only allowed execution tool. It runs code in JS/TS, Python, Go, Rust, C, C++, and Bash.\n\nAvailable tools: execute (run code), bash (shell commands), process_status, process_close, sleep.\n\nUsage: bunx mcp-gm\nDocs: https://www.npmjs.com/package/mcp-gm\n\nAll other Bash commands are blocked.' };
       }
     }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-kilo",
-  "version": "2.0.115",
+  "version": "2.0.118",
   "description": "State machine agent with hooks, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",