hardstop 1.4.7 → 1.4.9

package/.claude/skills/hs/SKILL.md

@@ -20,6 +20,8 @@ When this skill is activated via the Skill tool, check the ARGUMENTS field immed
 
 **Execute the Bash command immediately.** The hook reads `~/.hardstop/skip_next` — if that file is not written, skips have no effect.
 
+> **Path note:** Commands above assume the default install location. If Hardstop was installed with `CLAUDE_CONFIG_DIR` set, replace `~/.claude` in the paths with that directory.
+
 ---
 
 > **Note:** This skill complements the Hardstop plugin. The plugin provides deterministic protection via hooks; this skill provides LLM-level awareness for platforms without hook support.

package/.claude-plugin/marketplace.json

@@ -13,7 +13,7 @@
       "name": "hs",
       "source": "./",
       "description": "Pre-execution safety layer that blocks dangerous shell commands and credential file reads using pattern matching + LLM analysis. Fail-closed design.",
-      "version": "1.4.7",
+      "version": "1.4.9",
       "author": {
         "name": "Francesco Marinoni Moretto",
         "email": "contact@clarity-gate.org"

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "hs",
-  "version": "1.4.7",
+  "version": "1.4.9",
   "description": "Pre-execution safety layer that blocks dangerous shell commands and credential file reads using pattern matching + LLM analysis. Fail-closed design.",
   "author": {
     "name": "Francesco Marinoni Moretto",

package/.codex/skills/hs/SKILL.md

@@ -21,6 +21,8 @@ When this skill is activated via the Skill tool, check the ARGUMENTS field immed
 
 **Execute the Bash command immediately.** The hook reads `~/.hardstop/skip_next` — if that file is not written, skips have no effect.
 
+> **Path note:** Commands above assume the default install location. If Hardstop was installed with `CLAUDE_CONFIG_DIR` set, replace `~/.claude` in the paths with that directory.
+
 ---
 
 > **Note:** This skill complements the Hardstop plugin. The plugin provides deterministic protection via hooks; this skill provides LLM-level awareness for platforms without hook support.

package/.github/skills/hs/SKILL.md

@@ -21,6 +21,8 @@ When this skill is activated via the Skill tool, check the ARGUMENTS field immed
 
 **Execute the Bash command immediately.** The hook reads `~/.hardstop/skip_next` — if that file is not written, skips have no effect.
 
+> **Path note:** Commands above assume the default install location. If Hardstop was installed with `CLAUDE_CONFIG_DIR` set, replace `~/.claude` in the paths with that directory.
+
 ---
 
 > **Note:** This skill complements the Hardstop plugin. The plugin provides deterministic protection via hooks; this skill provides LLM-level awareness for platforms without hook support.

package/CHANGELOG.md

@@ -2,6 +2,32 @@
 
 All notable changes to Hardstop will be documented in this file.
 
+## [1.4.9] - 2026-04-18
+
+### Added
+- **Installers + runtime:** Respect `CLAUDE_CONFIG_DIR` env var across `bin/install.js`, `install.sh`, `install.ps1`, `uninstall.sh` (resolved at install time) and `hooks/pre_tool_use.py`, `commands/hs_cmd.py` (derived from `__file__` at runtime). 7 new tests cover path derivation and dynamic safe-pattern matching. Thanks to @moiri-gamboni in #4.
+
+### Fixed
+- **uninstall.ps1:** Apply `CLAUDE_CONFIG_DIR` resolution for parity with `uninstall.sh`; previously left files behind on Windows when installed under a custom config directory.
+
+### Changed
+- **Platform skill copies (`.claude/`, `.codex/`, `.github/`):** Add a path-note clarifying that `~/.claude/...` paths in invocation tables assume the default install location.
+
+---
+
+## [1.4.8] - 2026-03-02
+
+### Changed
+- **skills/hs/SKILL.md (canonical):** Soften invocation language and add Security Architecture note to address OpenClaw "Suspicious" rating on ClawhHub
+  - Table header: "run this Bash command FIRST" → "Action (user-requested via /hs)"
+  - "Execute the Bash command immediately" → "Run the corresponding command — the user has explicitly requested this action via /hs"
+  - Added Security Architecture blockquote: explains plugin architecture, local scripts (not remote code), credential paths are block targets, skip is user-initiated and scoped
+  - Section 9: clarified that Hardstop blocks reads of credential paths, it does not access them
+  - Skip context: expanded to explain scoped bypass (next N commands, default 1)
+- **Platform copies unchanged** (`.claude/`, `.codex/`, `.github/`): retain original directive language for reliable LLM execution
+
+---
+
 ## [1.4.7] - 2026-02-22
 
 ### Added