hardstop 1.4.5 → 1.4.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -13,7 +13,7 @@
|
|
|
13
13
|
"name": "hs",
|
|
14
14
|
"source": "./",
|
|
15
15
|
"description": "Pre-execution safety layer that blocks dangerous shell commands and credential file reads using pattern matching + LLM analysis. Fail-closed design.",
|
|
16
|
-
"version": "1.4.
|
|
16
|
+
"version": "1.4.6",
|
|
17
17
|
"author": {
|
|
18
18
|
"name": "Francesco Marinoni Moretto",
|
|
19
19
|
"email": "contact@clarity-gate.org"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "hs",
|
|
3
|
-
"version": "1.4.
|
|
3
|
+
"version": "1.4.6",
|
|
4
4
|
"description": "Pre-execution safety layer that blocks dangerous shell commands and credential file reads using pattern matching + LLM analysis. Fail-closed design.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Francesco Marinoni Moretto",
|
package/CHANGELOG.md
CHANGED
|
@@ -2,6 +2,13 @@
|
|
|
2
2
|
|
|
3
3
|
All notable changes to Hardstop will be documented in this file.
|
|
4
4
|
|
|
5
|
+
## [1.4.6] - 2026-02-17
|
|
6
|
+
|
|
7
|
+
### Fixed
|
|
8
|
+
- **hooks/pre_tool_use.py**: Replace `(?:\s+.*)?$` with `(?:[\s\S]+)?$` in git safe patterns so multiline arguments (e.g. heredoc commit messages) are not incorrectly blocked
|
|
9
|
+
|
|
10
|
+
---
|
|
11
|
+
|
|
5
12
|
## [1.4.5] - 2026-02-17
|
|
6
13
|
|
|
7
14
|
### Fixed
|
package/hooks/pre_tool_use.py
CHANGED
|
@@ -144,8 +144,8 @@ SAFE_PATTERNS = [
|
|
|
144
144
|
|
|
145
145
|
# Git standard workflow (recoverable via reflog)
|
|
146
146
|
# Excludes: reset (--hard loses uncommitted work), clean (deletes untracked), rebase --exec (runs shell)
|
|
147
|
-
r"^git\s+(add|commit|push|pull|fetch|clone|stash|checkout|switch|restore|merge|cherry-pick|branch|tag|init|config|am|apply|bisect|blame|bundle|format-patch|gc|mv|notes|reflog|revert|rm|submodule|worktree)(
|
|
148
|
-
r"^git\s+rebase(?!\s+.*--exec)(
|
|
147
|
+
r"^git\s+(add|commit|push|pull|fetch|clone|stash|checkout|switch|restore|merge|cherry-pick|branch|tag|init|config|am|apply|bisect|blame|bundle|format-patch|gc|mv|notes|reflog|revert|rm|submodule|worktree)(?:[\s\S]+)?$",
|
|
148
|
+
r"^git\s+rebase(?!\s+.*--exec)(?:[\s\S]+)?$", # rebase allowed, but not with --exec
|
|
149
149
|
|
|
150
150
|
# Regeneratable cleanup
|
|
151
151
|
r"^rm\s+(-[^\s]*\s+)*node_modules/?\s*$",
|
package/package.json
CHANGED