tillerhand 3.49.5 → 3.49.7

package/.claude/hooks/destructive-guard.mjs

@@ -54,7 +54,8 @@ const NEEDS_APPROVAL = [
 
 // The test guard runs on file tools; changing a test or test config file from the shell (sed -i, rm, >, mv, git checkout) is asked.
 // Each part of a command chain is checked alone: "rm -r node_modules && npx vitest run a.test.ts" does not change a test.
-const WRITER = /\b(rm|del|erase|rmdir|rd|unlink|mv|move|cp|copy|tee|truncate|touch|ln|dd|Set-Content|Add-Content|Out-File|Remove-Item|Move-Item|Copy-Item|Clear-Content)\b|\bcurl\b[^;&|]*\s(-o|--output)\b|\bwget\b[^;&|]*\s(-O|--output-document)\b|\bsed\b[^;&|]*\s(-[a-zA-Z]*i\S*|--in-place\b)|\bperl\b[^;&|]*\s-[a-zA-Z]*i|\bgit\s+(checkout|restore|rm|mv)\b/i;
+// A flag is not a command name: grep -ln, ls -rd, tar -rm are not writers
+const WRITER = /(?<![\w-])(rm|del|erase|rmdir|rd|unlink|mv|move|cp|copy|tee|truncate|touch|ln|dd|Set-Content|Add-Content|Out-File|Remove-Item|Move-Item|Copy-Item|Clear-Content)\b|\bcurl\b[^;&|]*\s(-o|--output)\b|\bwget\b[^;&|]*\s(-O|--output-document)\b|\bsed\b[^;&|]*\s(-[a-zA-Z]*i\S*|--in-place\b)|\bperl\b[^;&|]*\s-[a-zA-Z]*i|\bgit\s+(checkout|restore|rm|mv)\b/i;
 // Dependency and git internals are not the project's tests; a URL (curl … https://x/tests/a) or a dd input is not a target
 // Normalized first: node_modules/../tests/a.test.ts is a test path; only a path that stays under them is skipped
 const isTestCode = (t) => {

package/.claude/hooks/guard-secrets.mjs

@@ -7,15 +7,24 @@
 import { execSync } from 'node:child_process';
 import { readInput, decide, isMain } from './shared.mjs';
 
+// (?<![A-Za-z0-9]) instead of \b: a key right after _ (OPENAI_sk-…, prod_sk_live_…) is found too.
+// Lookaheads and runs are bounded: an unbounded one is quadratic on a long run (-sb_secret_ × 50 000) and a hook
+// that times out lets the write through.
 export const PATTERNS = [
-  ['Anthropic/OpenAI key', /\bsk-(?:ant-|proj-)?[A-Za-z0-9_-]{32,}/],
-  ['Stripe secret key', /\b(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{20,}/],
-  ['AWS access key', /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/],
-  ['GitHub token', /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36,}|\bgithub_pat_[A-Za-z0-9_]{50,}/],
-  ['Slack token', /\bxox[abprs]-[A-Za-z0-9-]{10,}/],
-  ['Private key', /-----BEGIN (?:[A-Z]+ )?PRIVATE KEY-----/],
-  ['Resend key', /\bre_[A-Za-z0-9]{8,}_[A-Za-z0-9]{16,}/],
-  ['Supabase secret key', /\bsb_secret_(?=[\w-]*\d)[\w-]{16,}/],
+  ['Anthropic/OpenAI key', /(?<![A-Za-z0-9])sk-(?:ant-|proj-)?[A-Za-z0-9_-]{32,}/],
+  ['Stripe secret key', /(?<![A-Za-z0-9])(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{20,}/],
+  ['Stripe webhook secret', /(?<![A-Za-z0-9])whsec_[A-Za-z0-9+/]{24,}/],
+  ['AWS access key', /(?<![A-Za-z0-9])(?:AKIA|ASIA)[0-9A-Z]{16}\b/],
+  ['GitHub token', /(?<![A-Za-z0-9])(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36,}|(?<![A-Za-z0-9])github_pat_[A-Za-z0-9_]{50,}/],
+  ['GitLab token', /(?<![A-Za-z0-9])glpat-[\w-]{20,}/],
+  ['Google API key', /(?<![A-Za-z0-9])AIza[0-9A-Za-z_-]{35}/],
+  ['Hugging Face token', /(?<![A-Za-z0-9])hf_[A-Za-z0-9]{34,}/],
+  ['npm token', /(?<![A-Za-z0-9])npm_[A-Za-z0-9]{36,}/],
+  ['SendGrid key', /(?<![A-Za-z0-9])SG\.[\w-]{22}\.[\w-]{43}/],
+  ['Slack token', /(?<![A-Za-z0-9])(?:xox[abprse]|xapp)-[A-Za-z0-9-]{10,}/],
+  ['Private key', /-----BEGIN (?:[A-Z]+ ){0,4}PRIVATE KEY(?: BLOCK)?-----/],
+  ['Resend key', /(?<![A-Za-z0-9])re_[A-Za-z0-9]{8,}_[A-Za-z0-9]{16,}/],
+  ['Supabase secret key', /(?<![A-Za-z0-9])sb_secret_(?=[\w-]{0,100}\d)[\w-]{16,}/],
 ];
 
 export function findSecrets(text) {
@@ -41,11 +50,14 @@ function hookMode() {
 
 function stagedMode() {
   const diff = execSync('git diff --cached -U0 --no-color', { encoding: 'utf8', maxBuffer: 64 * 1024 * 1024 });
-  let file = '';
+  let file = '', hunk = false;
   const findings = [];
+  // Inside a hunk every + line is content, "+++ …" included (a line starting with ++); headers come before the first @@
   for (const line of diff.split('\n')) {
-    if (line.startsWith('+++ ')) file = line.slice(6);
-    else if (line.startsWith('+') && !line.startsWith('+++')) {
+    if (line.startsWith('diff --git ')) hunk = false;
+    else if (!hunk && line.startsWith('+++ ')) file = line.slice(6);
+    else if (line.startsWith('@@')) hunk = true;
+    else if (hunk && line.startsWith('+')) {
       const f = findSecrets(line);
       if (f.length) findings.push(`${file}: ${f.join(', ')}`);
     }

package/.claude/hooks/preview.mjs

@@ -9,7 +9,7 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { spawn, spawnSync } from 'node:child_process';
-import { approvedCommands, approvalNeeded, isApproved } from './gate.mjs';
+import { approvedCommands, approvalNeeded, isApproved, unknownCommandKeys, readAgents } from './gate.mjs';
 import { findRoot, isMain } from './shared.mjs';
 
 const CLI = 'npx -y @playwright/cli@0.1.22';
@@ -56,7 +56,7 @@ export async function preview(root, task) {
   const url = command('preview'), dev = command('dev');
   if (!url) return fail('AGENTS.md → Commands has no `preview:` line, or it is empty. Add it (example: `preview:     http://localhost:3000`) or produce the evidence by hand in this task.');
   if (!LOCAL.test(url)) return fail(`the preview address must be local (http://localhost:<port>, 127.0.0.1 or [::1]). Now: ${url}`);
-  if (!isApproved(root, list)) return { code: 1, text: `Preview · ${approvalNeeded(list)}` };
+  if (!isApproved(root, list)) return { code: 1, text: `Preview · ${approvalNeeded(list, unknownCommandKeys(readAgents(root)))}` };
   const dir = `.previews/${String(task || 'latest').replace(/[^\w-]/g, '-')}`;
   // A linked folder from the repo would send the files elsewhere
   for (const d of ['.previews', dir]) {

package/.claude/hooks/shared.mjs

@@ -104,7 +104,8 @@ export function parseInput(g) {
     const text = isText(t.content) ? t.content
       : isText(t.new_string) ? t.new_string
       : Array.isArray(t.edits) ? t.edits.map((e) => e?.new_string ?? '').join('\n')
-      : isText(t.new_source) ? t.new_source : '';
+      : isText(t.new_source) ? t.new_source
+      : JSON.stringify(t); // an unexpected shape (content or new_source as an array): every argument is scanned
     const before = isText(t.old_string) ? t.old_string
       : Array.isArray(t.edits) ? t.edits.map((e) => e?.old_string ?? '').join('\n') : undefined;
     const edits = isText(t.old_string) ? [{ old: t.old_string, new: isText(t.new_string) ? t.new_string : '', all: t.replace_all === true }]

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.5-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.7-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-ready-d97757?style=flat-square">
   <img alt="Also Codex and Antigravity" src="https://img.shields.io/badge/also-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/README.tr.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.5-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.7-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="Lisans: MIT" src="https://img.shields.io/badge/lisans-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-haz%C4%B1r-d97757?style=flat-square">
   <img alt="Codex ve Antigravity" src="https://img.shields.io/badge/ayr%C4%B1ca-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/kit/CHANGELOG.md

@@ -3,6 +3,22 @@
 The kit version is in `kit/VERSION`. To update a project, run `/kit-update` in it.
 Items with an "Adapt by hand" note concern files owned by the project; the update does not touch them.
 
+## [3.49.7] - 2026-10-30
+
+### Security
+- **The secret guard can no longer be timed out.** A long run of `-sb_secret_` made one pattern quadratic; a hook that times out lets the write through. The patterns are bounded now.
+- **More key formats are stopped:** Google API keys (`AIza…`), GitLab (`glpat-`), Hugging Face (`hf_`), npm (`npm_`), SendGrid (`SG.…`), Stripe webhook secrets (`whsec_`), Slack app and refresh tokens (`xapp-`, `xoxe-`) and PGP private key blocks. A key right after `_` or a letter (`OPENAI_sk-…`, `prod_sk_live_…`) is found too. JWTs and database URLs with a password are still not matched: local dev values would raise false alarms.
+- A write whose content is not plain text (a `content` or notebook `new_source` array) is scanned as a whole instead of skipped.
+- The pre-commit scan (`guard-secrets.mjs --staged`) also checks added lines that start with `++`.
+
+### Fixed
+- `grep -ln`, `ls -rd` and other commands with a flag that spells a file command no longer count as writing a test file.
+
+## [3.49.6] - 2026-10-30
+
+### Fixed
+- `/preview` before the command approval names the `## Commands` keys the gate does not read (`deploy:`…), like the gate run and the approval prompt already do.
+
 ## [3.49.5] - 2026-10-30
 
 ### Security

package/kit/VERSION

@@ -1 +1 @@
-3.49.5
+3.49.7

package/kit/guide.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.5</b> Starter kit for Claude Code · MIT</span>
+      <span class="pill"><b>v3.49.7</b> Starter kit for Claude Code · MIT</span>
       <h1>The AI builds.<br><em>You steer.</em></h1>
       <p class="sub">TillerHand takes a product from idea to production and maintenance with Claude Code. At every important decision the AI gives you the options, its recommendation and the cost of each option. An expert board reviews the work, and guardrails stop mistakes before they happen.</p>
       <div class="setup">
@@ -1241,7 +1241,7 @@ Next: G-013 password reset · pending decision: email service</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Version 3.49.5 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
+    <span>Version 3.49.7 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
   </div>
 </footer>
 

package/kit/guide.tr.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.5</b> Claude Code için başlangıç kiti · MIT</span>
+      <span class="pill"><b>v3.49.7</b> Claude Code için başlangıç kiti · MIT</span>
       <h1>Kodu AI yazar.<br><em>Dümen sende.</em></h1>
       <p class="sub">TillerHand, Claude Code ile bir ürünü fikirden canlıya ve bakıma kadar götürür. Her önemli kararda AI sana seçenekleri, önerisini ve her seçeneğin bedelini sunar. Bir uzman kurulu işi denetler, korumalar hatayı daha olmadan durdurur.</p>
       <div class="setup">
@@ -1245,7 +1245,7 @@ Sıradaki: G-013 şifre sıfırlama · bekleyen karar: e-posta servisi</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Sürüm 3.49.5 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
+    <span>Sürüm 3.49.7 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
   </div>
 </footer>
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tillerhand",
-  "version": "3.49.5",
+  "version": "3.49.7",
   "description": "Vibe coding kit for Claude Code, Codex and Antigravity: rules, commands, guards and project templates.",
   "license": "MIT",
   "type": "module",