oh-my-customcode 1.1.54 → 1.1.55

package/dist/cli/index.js

@@ -243,7 +243,7 @@ var init_package = __esm(() => {
     workspaces: [
       "packages/*"
     ],
-    version: "1.1.54",
+    version: "1.1.55",
     description: "Batteries-included agent harness for Claude Code",
     type: "module",
     bin: {

package/dist/index.js

@@ -2535,7 +2535,7 @@ var package_default = {
   workspaces: [
     "packages/*"
   ],
-  version: "1.1.54",
+  version: "1.1.55",
   description: "Batteries-included agent harness for Claude Code",
   type: "module",
   bin: {

package/package.json

@@ -3,7 +3,7 @@
   "workspaces": [
     "packages/*"
   ],
-  "version": "1.1.54",
+  "version": "1.1.55",
   "description": "Batteries-included agent harness for Claude Code",
   "type": "module",
   "bin": {

package/templates/.claude/hooks/scripts/r007-r008-drift-advisor.sh

@@ -192,13 +192,26 @@ split("\n")
     # 올바르게 분리되어 0/0이었음). 이 조사에서 확정된 실제 원인은 별도 메커니즘이다:
     # tail -n 200 윈도우 안에 경계가 전혀 없을 때 $b=-1로 폴백해 슬라이딩 윈도우 전체를
     # 하나의 turn으로 병합하는 구조 — 본 수정의 승인 범위(0-tool-use 가드 1건) 밖이므로
-    # 별도 이슈로 보고한다(오케스트레이터 완료 보고 참조).
+    # 별도 이슈로 보고한다(오케스트레이터 완료 보고 참조). → #1628로 등록·수정 완료:
+    # 아래 $b 바인딩 직후의 "(#1628)" 주석 및 $wlc 포화 가드 참조.
     | [ range(0; $last + 1)
         | select( ($L[.].message.role? == "user")
                   and ( (($L[.].message.content | type) == "string")
                         or (([ $L[.].message.content[]? | select(.type? == "tool_result") ] | length) == 0) ) ) ] as $bi
     | (if ($bi | length) > 0 then $bi[-1] else -1 end) as $b
-    | [ range($b + 1; $last + 1) | $L[.] | select(.message.role? == "assistant") ] as $turn
+    # (#1628) 경계가 전혀 없는 경우($bi 비어있음)를 두 케이스로 나눈다:
+    #   (a) 윈도우가 포화($wlc >= 200 — tail -n 200이 실제로 200줄을 반환) — 윈도우 밖에
+    #       진짜 경계가 있었을 수 있다. 이 경우 $b=-1로 윈도우 전체를 하나의 turn으로
+    #       병합하면, 서로 독립적이고 각각 컴플라이언트한 여러 응답이 합쳐져 announce/
+    #       tool_use 카운트가 어긋나 R008 위양성이 5~10건대로 요동친다(#1628 실측). 판정
+    #       자체를 스킵한다(empty — 아래에서 result가 비어 exit 0으로 이어진다).
+    #   (b) 윈도우가 포화되지 않음($wlc < 200 — tail이 transcript 전체를 다 읽었다는 뜻) —
+    #       세션이 정말로 짧아 첫 턴부터 지금까지 경계가 없는 것이므로, 기존 $b=-1 폴백을
+    #       그대로 유지한다(#1625 찐빠 #3이 확정한 자율 루프 경계 대체 신호와 동일 로직).
+    | if ($bi | length) == 0 and $wlc >= 200 then empty
+      else
+      (
+      [ range($b + 1; $last + 1) | $L[.] | select(.message.role? == "assistant") ] as $turn
     | [ $turn[] | .message.content[]? | select(.type? != "thinking") ] as $blocks
     | ($turn[0].uuid? // "") as $tuuid
     | ([ $blocks[] | select(.type? == "text") ][0].text? // "") as $ftext
@@ -237,10 +250,20 @@ split("\n")
     # $nall_tools는 위 forward r008 가드에서 이미 바인딩됨 — 재바인딩하지 않고 재사용한다.
     | (if $nall_tools == 0 and $an_anchored > 0 then $an_anchored else 0 end) as $r008rev
     | [$tuuid, ($r007 | tostring), ($r008 | tostring), ($r008rev | tostring)] | @tsv
+      )
+      end
   end
 '
 
-result=$(tail -n 200 "$TRANSCRIPT_PATH" 2>/dev/null | jq -Rsr "$JQ_LAST_TURN" 2>/dev/null) || result=""
+# ── 윈도우 포화 여부 판별 (#1628) ──
+# tail -n 200이 실제로 200줄을 반환했는지(포화 — 윈도우 밖에 잘려나간 내용이 있을 수 있음)를
+# jq 호출 전에 bash에서 측정해 $wlc로 전달한다. awk는 트레일링 개행 유무와 무관하게 정확한
+# 레코드 수를 센다(wc -l은 트레일링 개행이 없는 마지막 줄을 놓칠 수 있음).
+window_content=$(tail -n 200 "$TRANSCRIPT_PATH" 2>/dev/null) || window_content=""
+window_line_count=$(printf '%s' "$window_content" | awk 'END{print NR}')
+: "${window_line_count:=0}"
+
+result=$(printf '%s' "$window_content" | jq -Rsr --argjson wlc "$window_line_count" "$JQ_LAST_TURN" 2>/dev/null) || result=""
 
 if [ -z "$result" ]; then
   exit 0

package/templates/.claude/hooks/scripts/stuck-detector.sh

@@ -16,29 +16,28 @@ command -v jq >/dev/null 2>&1 || exit 0
 HARD_BLOCK_THRESHOLD=${CLAUDE_STUCK_THRESHOLD:-3}
 
 # Determine if a Bash command is read-only (metadata/query only, no side effects).
-# Conservative: any ambiguity (chaining, redirection, substitution, or an
+# Conservative: any ambiguity (redirection, substitution, "||", or an
 # unrecognized command/subcommand) is treated as NOT read-only (write).
-# Used ONLY to exclude read-only Bash polling from Hard Block Checks 1 and 3
-# (same-path / same-tool+target consecutive-repeat blocking) below — Signal 1
-# (repeated-error advisory) and Hard Block Check 2 (same error hash) are
-# intentionally unaffected: repeated errors are a genuine stuck signal
-# regardless of read/write (issue #1625).
-is_readonly_bash_command() {
+# Compound commands chained with "&&", ";", or a single "|" are split into
+# segments (#1629) — the whole command is read-only ONLY when EVERY segment
+# is read-only; one write segment (or one unparseable/empty segment) makes
+# the whole command a write.
+# Used to exclude read-only Bash polling from Hard Block Checks 1 and 3
+# (same-path / same-tool+target consecutive-repeat blocking) AND the Signal 3
+# tool-spam advisory below — Signal 1 (repeated-error advisory) and Hard
+# Block Check 2 (same error hash) are intentionally unaffected: repeated
+# errors are a genuine stuck signal regardless of read/write (issue #1625).
+
+# Classify a SINGLE (non-compound) command segment as read-only. Callers
+# (is_readonly_bash_command) are responsible for stripping ambiguous
+# constructs and splitting compound commands before invoking this directly.
+is_readonly_single_command() {
   local cmd="$1"
-  cmd="$(printf '%s' "$cmd" | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')"
   if [ -z "$cmd" ]; then
     echo "false"
     return 0
   fi
 
-  # Any chaining/redirection/substitution metachar => ambiguous, treat as write
-  case "$cmd" in
-    *'>'*|*'|'*|*'&&'*|*';'*|*'$('*|*'`'*|*'<('*)
-      echo "false"
-      return 0
-      ;;
-  esac
-
   local parts=()
   read -ra parts <<< "$cmd"
   local w1="${parts[0]:-}"
@@ -117,11 +116,62 @@ is_readonly_bash_command() {
   esac
 }
 
+is_readonly_bash_command() {
+  local cmd="$1"
+  cmd="$(printf '%s' "$cmd" | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')"
+  if [ -z "$cmd" ]; then
+    echo "false"
+    return 0
+  fi
+
+  # Truly ambiguous constructs: redirection, command/process substitution, or
+  # "||" (conditional-OR — intentionally NOT decomposed into segments, since
+  # its branch that actually runs depends on the first segment's exit code)
+  # => always treated as write.
+  case "$cmd" in
+    *'>'*|*'||'*|*'$('*|*'`'*|*'<('*)
+      echo "false"
+      return 0
+      ;;
+  esac
+
+  # Compound command: split on "&&", ";", or a single "|" into segments and
+  # require EVERY segment to be read-only (#1629). An empty segment (e.g. a
+  # trailing separator) is treated as ambiguous => write, same as any
+  # segment that fails single-command classification.
+  if [[ "$cmd" == *'&&'* || "$cmd" == *';'* || "$cmd" == *'|'* ]]; then
+    local normalized="$cmd"
+    normalized="${normalized//&&/$'\n'}"
+    normalized="${normalized//;/$'\n'}"
+    normalized="${normalized//|/$'\n'}"
+    local seg
+    while IFS= read -r seg; do
+      seg="$(printf '%s' "$seg" | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')"
+      if [ -z "$seg" ]; then
+        echo "false"
+        return 0
+      fi
+      if [ "$(is_readonly_single_command "$seg")" != "true" ]; then
+        echo "false"
+        return 0
+      fi
+    done <<< "$normalized"
+    echo "true"
+    return 0
+  fi
+
+  is_readonly_single_command "$cmd"
+}
+
 input=$(cat)
 
 # Extract tool info
 tool_name=$(printf '%s' "$input" | jq -r '.tool_name // "unknown"')
-file_path=$(printf '%s' "$input" | jq -r '.tool_input.file_path // .tool_input.command // ""' | head -c 120)
+# 300 (not 120): a 120-char cutoff let two genuinely different long Bash
+# commands collide on their shared 120-char prefix, causing a false-positive
+# same-path/same-tool+target hard-block. 300 chars covers the vast majority
+# of real commands without their differing tail being cut off (#1629).
+file_path=$(printf '%s' "$input" | jq -r '.tool_input.file_path // .tool_input.command // ""' | head -c 300)
 is_error=$(printf '%s' "$input" | jq -r '.tool_output.is_error // false')
 output_preview=$(printf '%s' "$input" | jq -r '.tool_output.output // ""' | head -c 200)
 raw_command=$(printf '%s' "$input" | jq -r '.tool_input.command // ""')
@@ -150,7 +200,8 @@ entry=$(jq -cn \
   --arg err "$is_error" \
   --arg hash "$error_hash" \
   --arg preview "$output_preview" \
-  '{timestamp: $ts, tool: $tool, path: $path, is_error: $err, error_hash: $hash, preview: $preview}')
+  --arg readonly "$is_readonly" \
+  '{timestamp: $ts, tool: $tool, path: $path, is_error: $err, error_hash: $hash, preview: $preview, readonly: $readonly}')
 
 echo "$entry" >> "$HISTORY_FILE"
 
@@ -214,8 +265,13 @@ if [ "$stuck_detected" = false ] && { [ "$tool_name" = "Edit" ] || [ "$tool_name
 fi
 
 # Signal 3: Tool spam (same tool 5+ times in last 8 entries)
-if [ "$stuck_detected" = false ]; then
-  tool_repeat=$(tail -8 "$HISTORY_FILE" | grep -c "\"tool\":\"${tool_name}\"" 2>/dev/null || echo "0")
+# Read-only Bash polling is excluded from this count (issue #1629): skip
+# entirely when the CURRENT call is read-only, and exclude prior read-only
+# entries from the historical count so a mix of harmless read-only Bash
+# calls (git status / gh view / ls / ...) doesn't inflate the "same tool
+# called N times" advisory.
+if [ "$stuck_detected" = false ] && [ "$is_readonly" != "true" ]; then
+  tool_repeat=$(tail -8 "$HISTORY_FILE" | grep -v "\"readonly\":\"true\"" | grep -c "\"tool\":\"${tool_name}\"" 2>/dev/null || echo "0")
   if [ "$tool_repeat" -ge 5 ]; then
     stuck_detected=true
     signal_type="Tool loop"

package/templates/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.1.54",
+  "version": "1.1.55",
   "lastUpdated": "2026-07-14T00:00:00.000Z",
   "omcustomMinClaudeCode": "2.1.121",
   "omcustomMinClaudeCodeReason": "Sensitive-path direct Write/Edit on .claude/** under bypassPermissions (R010 deprecation, #1101)",