tillerhand 3.49.2 → 3.49.3

package/.claude/hooks/destructive-guard.mjs

@@ -261,11 +261,32 @@ export function scopeIssue(command, dir, root) {
 // .env in a shell command (git show :.env, curl -d @.env, cat apps/web/.env.local); .env.example, .env.sample (any middle part) are free
 const ENV_ACCESS = /(?<![\w.-])\.env(?![\w.-]*\.(example|sample)(?![\w.-]))(\.[\w.-]+|\*)?(?=$|[\s'";|&)<>])|(^|[\s'"/\\])secrets[/\\]/i;
 // A glob that can match .env (.e*, .en?, .e[n]v): the shell expands it to the file
-const ENV_NAMES = ['.env', '.env.local', '.env.production', '.env.development'];
-const envGlob = (s) => [...s.matchAll(/(?<![\w.-])\.[^\s'";|&)<>/\\]*[*?[][^\s'";|&)<>/\\]*/g)].some(([g]) => {
-  const re = new RegExp(`^${g.replace(/[.+^${}()|\\]/g, '\\$&').replace(/\*/g, '.*').replace(/\?/g, '.')}$`, 'i');
-  try { return ENV_NAMES.some((n) => re.test(n)); } catch { return true; } // an unclosed [ : asked
-});
+const ENV_NAMES = ['.env', '.env.local', '.env.production', '.env.development', '.env.staging', '.env.test', '.env.preview'];
+// Glob match (* ? [..] [!..]) by dynamic programming, not a regex: no throw on an unclosed [ (bash reads it as a
+// plain [) and no backtracking blow-up on ********. Case-insensitive, like the Windows file system.
+export function globMatch(glob, name) {
+  const tokens = [];
+  for (let i = 0; i < glob.length; i++) {
+    const c = glob[i], end = c === '[' ? glob.indexOf(']', i + 2) : -1;
+    if (c === '*') { if (tokens.at(-1) !== '*') tokens.push('*'); }
+    else if (c === '?') tokens.push((x) => true);
+    else if (end > -1) {
+      const body = glob.slice(i + 1, end).toLowerCase(), neg = /^[!^]/.test(body), set = neg ? body.slice(1) : body;
+      tokens.push((x) => set.includes(x) !== neg);
+      i = end;
+    } else tokens.push((x) => x === c.toLowerCase());
+  }
+  const s = name.toLowerCase();
+  let row = [true, ...Array(s.length).fill(false)];
+  for (const k of tokens) {
+    const next = [k === '*' && row[0], ...Array(s.length).fill(false)];
+    for (let j = 1; j <= s.length; j++) next[j] = k === '*' ? row[j] || next[j - 1] : row[j - 1] && k(s[j - 1]);
+    row = next;
+  }
+  return row[s.length];
+}
+const envGlob = (s) => [...s.matchAll(/(?<![\w.-])\.[^\s'";|&)<>/\\]*[*?[][^\s'";|&)<>/\\]*/g)]
+  .some(([g]) => ENV_NAMES.some((n) => globMatch(g, n)));
 // vercel env pull writes the dev values into .env.local without showing them (a prod pull is denied above). Only the
 // pull's own part of the chain is free; a comment (#) after it is not.
 const envIssue = (k) => k.split(/;|&&|\|\||[|&\n]/).some((s) =>
@@ -406,8 +427,13 @@ function evaluateOne(command) {
 
 if (isMain(import.meta.url)) {
   const g = readInput();
-  // Of the lists, the stricter wins (deny > ask)
-  const results = g ? [evaluate(g.command, g), g.tool !== 'claude' ? permissionEquivalent(g.command) : null, scopeIssue(g.command, g.dir, g.root)].filter(Boolean) : [];
+  // Of the lists, the stricter wins (deny > ask). A guard that throws would let the command run: asked instead
+  let results;
+  try {
+    results = g ? [evaluate(g.command, g), g.tool !== 'claude' ? permissionEquivalent(g.command) : null, scopeIssue(g.command, g.dir, g.root)].filter(Boolean) : [];
+  } catch (e) {
+    results = [{ decision: 'ask', reason: tr('guard.destructive.internalError', { error: String(e?.message ?? e).slice(0, 200) }) }];
+  }
   const s = results.find((x) => x.decision === 'deny') ?? results[0];
   if (s) decide(g.tool, s.decision, s.decision === 'ask' ? tr('guard.destructive.prefix', { reason: s.reason }) : `Shield: ${s.reason}`);
   process.exit(0);

package/.claude/hooks/messages.mjs

@@ -394,6 +394,7 @@ export const MESSAGES = {
   'guard.destructive.remoteDb': { en: 'The command connects to a database other than localhost (could be prod). User approval required; the AI must not use prod access credentials.' },
   'guard.destructive.testShell': { en: 'A test file is being changed, moved or deleted with a shell command. Weakening a test to make it pass is forbidden (AGENTS.md rule 7); edit tests with a file tool. User approval required.' },
   'guard.destructive.inlineTest': { en: 'An inline script names a test path; it may write to a test file. Only the test-writer agent writes to test files (AGENTS.md rule 7). User approval required.' },
+  'guard.destructive.internalError': { en: 'The shell guard could not check this command ({error}). User approval required.' },
   'guard.destructive.obfuscated': { en: 'The command looks obfuscated (line ending \\, $\'..\', $(...), `...` or ${...}) and contains a guarded operation. User approval required.' },
   'guard.destructive.indirectHook': { en: 'A kit guard script is run with an indirect spelling ($VARIABLE, $(...), `...`, ${...} or * ?); the rule text cannot see inside it. User approval required.' },
   'guard.destructive.envShell': { en: 'The command names a .env file (secrets). The AI does not read or write it; if needed, the user does it. User approval required.' },

package/.claude/i18n/tr.json

@@ -391,6 +391,7 @@
   "guard.destructive.remoteDb": "Komut localhost dışındaki bir veritabanına bağlanıyor (prod olabilir). Kullanıcı onayı gerekli; AI prod erişim bilgisi kullanmamalı.",
   "guard.destructive.testShell": "Test dosyası kabuk komutuyla değiştiriliyor, taşınıyor veya siliniyor. Testi geçirmek için testi zayıflatmak yasak (AGENTS.md kural 7); test düzenlemesini dosya aracıyla yap. Kullanıcı onayı gerekli.",
   "guard.destructive.inlineTest": "Satır içi betik bir test yolunu anıyor; test dosyasına yazıyor olabilir. Test dosyasına yalnız test-writer ajanı yazar (AGENTS.md kural 7). Kullanıcı onayı gerekli.",
+  "guard.destructive.internalError": "Kabuk kalkanı bu komutu denetleyemedi ({error}). Kullanıcı onayı gerekli.",
   "guard.destructive.obfuscated": "Komut gizlenmiş görünüyor (satır sonu \\, $'..', $(...), `...` veya ${...}) ve korunan bir işlem içeriyor. Kullanıcı onayı gerekli.",
   "guard.destructive.indirectHook": "Kitin koruma betiği dolaylı yazımla çalıştırılıyor ($DEĞİŞKEN, $(...), `...`, ${...} veya * ?); kural metni bunun içini göremez. Kullanıcı onayı gerekli.",
   "guard.destructive.envShell": "Komut bir .env dosyasını (sırlar) anıyor. AI onu okumaz, yazmaz; gerekirse kullanıcı yapar. Kullanıcı onayı gerekli.",

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.2-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.3-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-ready-d97757?style=flat-square">
   <img alt="Also Codex and Antigravity" src="https://img.shields.io/badge/also-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/README.tr.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.2-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.3-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="Lisans: MIT" src="https://img.shields.io/badge/lisans-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-haz%C4%B1r-d97757?style=flat-square">
   <img alt="Codex ve Antigravity" src="https://img.shields.io/badge/ayr%C4%B1ca-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/kit/CHANGELOG.md

@@ -3,6 +3,12 @@
 The kit version is in `kit/VERSION`. To update a project, run `/kit-update` in it.
 Items with an "Adapt by hand" note concern files owned by the project; the update does not touch them.
 
+## [3.49.3] - 2026-10-30
+
+### Security
+- **The shell guard no longer crashes on a glob with an unclosed `[`** (`…; echo .[`, `jq '.["a"]'`). The 3.49.2 `.env` glob check threw there, and a crashed hook lets the command run. Globs are now matched without regular expressions, so `.**********z` cannot stall the hook either, and any unexpected error in the shell guard asks you instead of passing.
+- `.env` globs also cover `.env.staging`, `.env.test` and `.env.preview` (`cat .env.st*`).
+
 ## [3.49.2] - 2026-10-30
 
 ### Security

package/kit/VERSION

@@ -1 +1 @@
-3.49.2
+3.49.3

package/kit/guide.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.2</b> Starter kit for Claude Code · MIT</span>
+      <span class="pill"><b>v3.49.3</b> Starter kit for Claude Code · MIT</span>
       <h1>The AI builds.<br><em>You steer.</em></h1>
       <p class="sub">TillerHand takes a product from idea to production and maintenance with Claude Code. At every important decision the AI gives you the options, its recommendation and the cost of each option. An expert board reviews the work, and guardrails stop mistakes before they happen.</p>
       <div class="setup">
@@ -1241,7 +1241,7 @@ Next: G-013 password reset · pending decision: email service</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Version 3.49.2 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
+    <span>Version 3.49.3 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
   </div>
 </footer>
 

package/kit/guide.tr.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.2</b> Claude Code için başlangıç kiti · MIT</span>
+      <span class="pill"><b>v3.49.3</b> Claude Code için başlangıç kiti · MIT</span>
       <h1>Kodu AI yazar.<br><em>Dümen sende.</em></h1>
       <p class="sub">TillerHand, Claude Code ile bir ürünü fikirden canlıya ve bakıma kadar götürür. Her önemli kararda AI sana seçenekleri, önerisini ve her seçeneğin bedelini sunar. Bir uzman kurulu işi denetler, korumalar hatayı daha olmadan durdurur.</p>
       <div class="setup">
@@ -1245,7 +1245,7 @@ Sıradaki: G-013 şifre sıfırlama · bekleyen karar: e-posta servisi</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Sürüm 3.49.2 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
+    <span>Sürüm 3.49.3 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
   </div>
 </footer>
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tillerhand",
-  "version": "3.49.2",
+  "version": "3.49.3",
   "description": "Vibe coding kit for Claude Code, Codex and Antigravity: rules, commands, guards and project templates.",
   "license": "MIT",
   "type": "module",