tillerhand 3.49.6 → 3.49.8

package/.claude/hooks/destructive-guard.mjs

@@ -54,7 +54,8 @@ const NEEDS_APPROVAL = [
 
 // The test guard runs on file tools; changing a test or test config file from the shell (sed -i, rm, >, mv, git checkout) is asked.
 // Each part of a command chain is checked alone: "rm -r node_modules && npx vitest run a.test.ts" does not change a test.
-const WRITER = /\b(rm|del|erase|rmdir|rd|unlink|mv|move|cp|copy|tee|truncate|touch|ln|dd|Set-Content|Add-Content|Out-File|Remove-Item|Move-Item|Copy-Item|Clear-Content)\b|\bcurl\b[^;&|]*\s(-o|--output)\b|\bwget\b[^;&|]*\s(-O|--output-document)\b|\bsed\b[^;&|]*\s(-[a-zA-Z]*i\S*|--in-place\b)|\bperl\b[^;&|]*\s-[a-zA-Z]*i|\bgit\s+(checkout|restore|rm|mv)\b/i;
+// A flag is not a command name: grep -ln, ls -rd, tar -rm are not writers
+const WRITER = /(?<![\w-])(rm|del|erase|rmdir|rd|unlink|mv|move|cp|copy|tee|truncate|touch|ln|dd|Set-Content|Add-Content|Out-File|Remove-Item|Move-Item|Copy-Item|Clear-Content)\b|\bcurl\b[^;&|]*\s(-o|--output)\b|\bwget\b[^;&|]*\s(-O|--output-document)\b|\bsed\b[^;&|]*\s(-[a-zA-Z]*i\S*|--in-place\b)|\bperl\b[^;&|]*\s-[a-zA-Z]*i|\bgit\s+(checkout|restore|rm|mv)\b/i;
 // Dependency and git internals are not the project's tests; a URL (curl … https://x/tests/a) or a dd input is not a target
 // Normalized first: node_modules/../tests/a.test.ts is a test path; only a path that stays under them is skipped
 const isTestCode = (t) => {

package/.claude/hooks/guard-secrets.mjs

@@ -7,15 +7,24 @@
 import { execSync } from 'node:child_process';
 import { readInput, decide, isMain } from './shared.mjs';
 
+// (?<![A-Za-z0-9]) instead of \b: a key right after _ (OPENAI_sk-…, prod_sk_live_…) is found too.
+// Lookaheads and runs are bounded: an unbounded one is quadratic on a long run (-sb_secret_ × 50 000) and a hook
+// that times out lets the write through.
 export const PATTERNS = [
-  ['Anthropic/OpenAI key', /\bsk-(?:ant-|proj-)?[A-Za-z0-9_-]{32,}/],
-  ['Stripe secret key', /\b(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{20,}/],
-  ['AWS access key', /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/],
-  ['GitHub token', /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36,}|\bgithub_pat_[A-Za-z0-9_]{50,}/],
-  ['Slack token', /\bxox[abprs]-[A-Za-z0-9-]{10,}/],
-  ['Private key', /-----BEGIN (?:[A-Z]+ )?PRIVATE KEY-----/],
-  ['Resend key', /\bre_[A-Za-z0-9]{8,}_[A-Za-z0-9]{16,}/],
-  ['Supabase secret key', /\bsb_secret_(?=[\w-]*\d)[\w-]{16,}/],
+  ['Anthropic/OpenAI key', /(?<![A-Za-z0-9])sk-(?:ant-|proj-)?[A-Za-z0-9_-]{32,}/],
+  ['Stripe secret key', /(?<![A-Za-z0-9])(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{20,}/],
+  ['Stripe webhook secret', /(?<![A-Za-z0-9])whsec_[A-Za-z0-9+/]{24,}/],
+  ['AWS access key', /(?<![A-Za-z0-9])(?:AKIA|ASIA)[0-9A-Z]{16}\b/],
+  ['GitHub token', /(?<![A-Za-z0-9])(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36,}|(?<![A-Za-z0-9])github_pat_[A-Za-z0-9_]{50,}/],
+  ['GitLab token', /(?<![A-Za-z0-9])glpat-[\w-]{20,}/],
+  ['Google API key', /(?<![A-Za-z0-9])AIza[0-9A-Za-z_-]{35}/],
+  ['Hugging Face token', /(?<![A-Za-z0-9])hf_[A-Za-z0-9]{34,}/],
+  ['npm token', /(?<![A-Za-z0-9])npm_[A-Za-z0-9]{36,}/],
+  ['SendGrid key', /(?<![A-Za-z0-9])SG\.[\w-]{22}\.[\w-]{43}/],
+  ['Slack token', /(?<![A-Za-z0-9])(?:xox[abprse]|xapp)-[A-Za-z0-9-]{10,}/],
+  ['Private key', /-----BEGIN (?:[A-Z]+ ){0,4}PRIVATE KEY(?: BLOCK)?-----/],
+  ['Resend key', /(?<![A-Za-z0-9])re_[A-Za-z0-9]{8,}_[A-Za-z0-9]{16,}/],
+  ['Supabase secret key', /(?<![A-Za-z0-9])sb_secret_(?=[\w-]{0,100}\d)[\w-]{16,}/],
 ];
 
 export function findSecrets(text) {
@@ -41,11 +50,14 @@ function hookMode() {
 
 function stagedMode() {
   const diff = execSync('git diff --cached -U0 --no-color', { encoding: 'utf8', maxBuffer: 64 * 1024 * 1024 });
-  let file = '';
+  let file = '', hunk = false;
   const findings = [];
+  // Inside a hunk every + line is content, "+++ …" included (a line starting with ++); headers come before the first @@
   for (const line of diff.split('\n')) {
-    if (line.startsWith('+++ ')) file = line.slice(6);
-    else if (line.startsWith('+') && !line.startsWith('+++')) {
+    if (line.startsWith('diff --git ')) hunk = false;
+    else if (!hunk && line.startsWith('+++ ')) file = line.slice(6);
+    else if (line.startsWith('@@')) hunk = true;
+    else if (hunk && line.startsWith('+')) {
       const f = findSecrets(line);
       if (f.length) findings.push(`${file}: ${f.join(', ')}`);
     }

package/.claude/hooks/messages.mjs

@@ -444,6 +444,8 @@ export const MESSAGES = {
   'guard.package.newPypi': { en: 'first release was published {age} days ago' },
   'guard.package.timeout': { en: 'could not be verified (timeout)' },
   'guard.package.network': { en: 'could not be verified (network error)' },
+  'guard.package.tooMany': { en: 'Package gate: {count} packages in one command (more than {max}) are not checked one by one. User approval required.' },
+  'guard.package.error': { en: 'The package gate could not check this command ({error}). User approval required.' },
   'guard.package.ask': { en: 'Package gate warning: {list}. Before installing, make sure the package is really the one you want.' },
   'guard.structure.offMap': { en: '"{rel}" is not in the structure map (.claude/structure.json). The right place is probably one of: {top}. If it is temporary or a trial, write it under sandbox/. If a new permanent place is needed, ask it as a technical decision and update the map (docs/architecture/structure.md).' },
   'guard.structure.prefix': { en: 'Structure: {reason}' },

package/.claude/hooks/package-gate.mjs

@@ -24,19 +24,20 @@ const POPULAR = {
     'langchain', 'transformers', 'torch', 'scikit-learn', 'aiohttp', 'tenacity', 'ruff', 'black', 'mypy'],
 };
 
+// Case-insensitive (the Windows shell is); npm's install aliases (in, ins, isntall, it…) count as install
 const COMMANDS = [
-  [/^(npm|pnpm|bun)\s+(i|install|add)\b/, 'npm'], [/^yarn\s+(global\s+)?add\b/, 'npm'], [/^npx\s+expo\s+install\b/, 'npm'],
-  [/^uv\s+(add|pip\s+install)\b/, 'pypi'], [/^(python3?\s+-m\s+)?pip3?\s+install\b/, 'pypi'], [/^poetry\s+add\b/, 'pypi'],
+  [/^(npm|pnpm|bun)\s+(i|in|ins|inst|insta|instal|install|isnt|isnta|isntal|isntall|it|add)\b/i, 'npm'], [/^yarn\s+(global\s+)?add\b/i, 'npm'], [/^npx\s+expo\s+install\b/i, 'npm'],
+  [/^uv\s+(add|pip\s+install)\b/i, 'pypi'], [/^(python3?\s+-m\s+)?pip3?\s+install\b/i, 'pypi'], [/^poetry\s+add\b/i, 'pypi'],
 ];
 
 // Download-and-run: the first positional is the package (the rest are its arguments), or the values of the package flags.
 // local: the runner uses a bin the project already has before downloading (npx, npm exec, bunx); pnpm/yarn dlx always download.
 // positional: false for uv run (its positional is a script; only --with names packages).
 const EXEC = [
-  { re: /^(npx|npm\s+(exec|x)|bunx|bun\s+x)\b/, eco: 'npm', local: true, positional: true },
-  { re: /^(pnpx|pnpm\s+dlx|yarn\s+dlx)\b/, eco: 'npm', local: false, positional: true },
-  { re: /^(uvx|uv\s+tool\s+run|pipx\s+run)\b/, eco: 'pypi', local: false, positional: true },
-  { re: /^uv\s+run\b/, eco: 'pypi', local: false, positional: false },
+  { re: /^(npx|npm\s+(exec|x)|bunx|bun\s+x)\b/i, eco: 'npm', local: true, positional: true },
+  { re: /^(pnpx|pnpm\s+dlx|yarn\s+dlx)\b/i, eco: 'npm', local: false, positional: true },
+  { re: /^(uvx|uv\s+tool\s+run|pipx\s+run)\b/i, eco: 'pypi', local: false, positional: true },
+  { re: /^uv\s+run\b/i, eco: 'pypi', local: false, positional: false },
 ];
 const FLAGS = {
   npm: { pkg: /^(-p|--package)$/, value: /^(-p|--package|-c|--call|--registry|--prefix|--cache|--userconfig|--globalconfig|-w|--workspace|--node-options|--script-shell|--shell|--loglevel|-C|--dir|--filter)$/ },
@@ -68,14 +69,17 @@ function execArgs(args, eco, positional) {
 
 // What runs a segment: wrappers, VAR=x, a path or .cmd/.exe on the tool, and the manager's own flags before its subcommand are
 // dropped (FOO=1 npx x, cmd /c npx x, bash -c "npx x", /usr/bin/npx x, npx.cmd x, pnpm -C . dlx x, npm --silent exec x).
-const WRAPPER = /^(?:\(|[A-Za-z_]\w*=\S*\s+|(?:sudo|env|time|nohup|exec|command|xargs|corepack|call|start)\s+|(?:bash|sh|zsh|dash|cmd|pwsh|powershell)(?:\.exe)?\s+(?:-c|\/c|\/k|-Command)\s+["']?)/i;
+// Also timeout/nice/stdbuf, shell keywords (then, do, else, !) and combined shell flags (bash -lc).
+const WRAPPER = /^(?:\(|\{|!\s*|[A-Za-z_]\w*=\S*\s+|(?:sudo|env|time|nohup|exec|command|xargs|corepack|call|start|then|do|else|ionice|stdbuf)\s+|timeout\s+(?:-\S+\s+)*\S+\s+|nice\s+(?:-n\s*\S+\s+|-\d+\s+)?|(?:bash|sh|zsh|dash|cmd|pwsh|powershell)(?:\.exe)?\s+(?:-\w*c|\/c|\/k|-Command)\s+["']?)/i;
 const SUBCOMMAND = /^(install|i|add|exec|x|dlx|tool|pip|run|global)$/;
 export function normalize(part) {
   let s = part.trim(), prev;
   do { prev = s; s = s.replace(WRAPPER, '').trim(); } while (s !== prev);
-  s = s.replace(/^["']?(?:[^\s"']*[\/])?([\w.-]+?)(?:\.cmd|\.exe|\.ps1)?["']?(?=\s|$)/i, '$1');
+  // A path (Windows \ too, quoted with spaces) and .cmd/.exe on the tool: "C:\Program Files\nodejs\npm.cmd" i x → npm i x
+  s = s.replace(/^"(?:[^"]*[\\/])?([\w.-]+?)(?:\.cmd|\.exe|\.ps1)?"(?=\s|$)/i, '$1')
+    .replace(/^["']?(?:[^\s"']*[\\/])?([\w.-]+?)(?:\.cmd|\.exe|\.ps1)?["']?(?=\s|$)/i, '$1');
   const t = s.split(/\s+/);
-  if (/^(npm|pnpm|yarn|bun|uv)$/.test(t[0])) {
+  if (/^(npm|pnpm|yarn|bun|uv)$/i.test(t[0])) {
     let i = 1;
     while (i < t.length && t[i].startsWith('-')) i += !t[i].includes('=') && t[i + 1] && !t[i + 1].startsWith('-') && !SUBCOMMAND.test(t[i + 1]) ? 2 : 1;
     s = [t[0], ...t.slice(i)].join(' ');
@@ -85,13 +89,15 @@ export function normalize(part) {
 
 const NOT_REGISTRY = /^(\.|\/|file:|link:|git\+|git:|https?:|github:|workspace:)/;
 function npmName(arg) {
-  if (NOT_REGISTRY.test(arg)) return null;
-  const at = arg.indexOf('@', 1), spec = at > 0 ? arg.slice(at + 1) : '';
-  // name@npm:other installs "other": the alias target is checked. name@github:x/y, @https:… are not from the registry
-  // (like a bare URL, not checked here); the name in front is not what gets installed.
-  if (spec.startsWith('npm:')) return npmName(spec.slice(4));
-  if (/[:/]/.test(spec)) return null;
-  return (at > 0 ? arg.slice(0, at) : arg) || null;
+  // name@npm:other installs "other": the alias target is checked (a loop: a deep a@npm:a@npm:… chain must not overflow
+  // the stack). name@github:x/y, @https:… are not from the registry (like a bare URL, not checked here).
+  for (;;) {
+    if (NOT_REGISTRY.test(arg)) return null;
+    const at = arg.indexOf('@', 1), spec = at > 0 ? arg.slice(at + 1) : '';
+    if (spec.startsWith('npm:')) { arg = spec.slice(4); continue; }
+    if (/[:/]/.test(spec)) return null;
+    return (at > 0 ? arg.slice(0, at) : arg) || null;
+  }
 }
 
 function pypiName(arg) {
@@ -101,7 +107,9 @@ function pypiName(arg) {
 
 export function findPackages(command) {
   const result = [];
-  for (const part of command.split(/&&|\|\||;|\|/)) {
+  // Every place a new command can start: chains, a newline, a background &, $( ), backticks, ( ) and { } groups.
+  // A redirect's & (2>&1, &>) is not a separator.
+  for (const part of command.split(/\n|&&|\|\||;|\||(?<![>&])&(?![>&])|\$\(|`|[(){}]/)) {
     const s = normalize(part);
     const match = COMMANDS.find(([re]) => re.test(s));
     const exec = match ? null : EXEC.find((e) => e.re.test(s));
@@ -182,15 +190,23 @@ export async function check({ eco, name }, get = fetch, now = Date.now()) {
   }
 }
 
+// More names than this in one command are asked without checking each one (unbounded fetches would hit the hook timeout)
+const MAX_PACKAGES = 50;
 async function hook() {
   const g = readInput();
   if (!g) process.exit(0);
+  // A gate that throws or times out lets the command run: any error asks instead
+  try { await gate(g); } catch (e) { decide(g.tool, 'ask', t(g.root, 'guard.package.error', { error: String(e?.message ?? e).slice(0, 200) })); }
+  process.exit(0);
+}
+async function gate(g) {
   // npx/bunx run a bin the project already installed without downloading: a local bin (tsc, eas) is not a package name
   const bin = (name) => /^\w[\w.-]*$/.test(name) && [g.dir, g.root].some((d) => fs.existsSync(path.join(d, 'node_modules', '.bin', name)));
   // The kit's own package (/start and /adopt run npx -y tillerhand@<version> install): the kit already trusts itself
   // Both only for the plain spelling: name@1.2 or name@npm:other downloads, it does not run the local bin or the kit's release
   const packages = findPackages(g.command).filter((p) => !(p.local && p.spec === p.name && bin(p.name)) && !(p.eco === 'npm' && /^tillerhand(@\d+\.\d+\.\d+)?$/.test(p.spec ?? '')));
-  if (!packages.length) process.exit(0);
+  if (!packages.length) return;
+  if (packages.length > MAX_PACKAGES) decide(g.tool, 'ask', t(g.root, 'guard.package.tooMany', { count: packages.length, max: MAX_PACKAGES }));
   const results = await Promise.all(packages.map(async (p) => ({ ...p, ...(await check(p)) })));
   const missing = results.filter((s) => s.status === 'missing' && !s.unsure);
   if (missing.length) {

package/.claude/hooks/shared.mjs

@@ -104,7 +104,8 @@ export function parseInput(g) {
     const text = isText(t.content) ? t.content
       : isText(t.new_string) ? t.new_string
       : Array.isArray(t.edits) ? t.edits.map((e) => e?.new_string ?? '').join('\n')
-      : isText(t.new_source) ? t.new_source : '';
+      : isText(t.new_source) ? t.new_source
+      : JSON.stringify(t); // an unexpected shape (content or new_source as an array): every argument is scanned
     const before = isText(t.old_string) ? t.old_string
       : Array.isArray(t.edits) ? t.edits.map((e) => e?.old_string ?? '').join('\n') : undefined;
     const edits = isText(t.old_string) ? [{ old: t.old_string, new: isText(t.new_string) ? t.new_string : '', all: t.replace_all === true }]

package/.claude/i18n/tr.json

@@ -441,6 +441,8 @@
   "guard.package.newPypi": "ilk sürümü {age} gün önce yayımlanmış",
   "guard.package.timeout": "doğrulanamadı (zaman aşımı)",
   "guard.package.network": "doğrulanamadı (ağ hatası)",
+  "guard.package.tooMany": "Paket kapısı: tek komutta {count} paket var ({max} sınırının üstünde), tek tek denetlenmiyor. Kullanıcı onayı gerekli.",
+  "guard.package.error": "Paket kapısı bu komutu denetleyemedi ({error}). Kullanıcı onayı gerekli.",
   "guard.package.ask": "Paket kapısı uyarısı: {list}. Kurmadan önce paketin gerçekten istenen paket olduğundan emin ol.",
   "guard.structure.offMap": "\"{rel}\" yapı haritasında yok (.claude/structure.json). Doğru yer muhtemelen şunlardan biri: {top}. Geçici veya deneme ise sandbox/ altına yaz. Kalıcı yeni bir yer gerekiyorsa bunu teknik karar olarak sor ve haritayı güncelle (docs/architecture/structure.md).",
   "guard.structure.prefix": "Yapı: {reason}",

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.6-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.8-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-ready-d97757?style=flat-square">
   <img alt="Also Codex and Antigravity" src="https://img.shields.io/badge/also-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/README.tr.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.6-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.8-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="Lisans: MIT" src="https://img.shields.io/badge/lisans-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-haz%C4%B1r-d97757?style=flat-square">
   <img alt="Codex ve Antigravity" src="https://img.shields.io/badge/ayr%C4%B1ca-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/kit/CHANGELOG.md

@@ -3,6 +3,23 @@
 The kit version is in `kit/VERSION`. To update a project, run `/kit-update` in it.
 Items with an "Adapt by hand" note concern files owned by the project; the update does not touch them.
 
+## [3.49.8] - 2026-10-30
+
+### Security
+- **The package gate sees installs in more places.** An `npm i` after a newline, a background `&`, inside `$( )`, backticks, `if … then`, `( )` or `{ }` is checked, and so are `timeout`/`nice`/`bash -lc` in front, a quoted Windows path (`"C:\Program Files\nodejs\npm.cmd" i`), upper case (`NPM i`) and npm's install aliases (`npm in`, `npm isntall`, `npm it`…).
+- A command the package gate cannot check (a parser error, more than 50 packages at once) asks you instead of running unchecked.
+
+## [3.49.7] - 2026-10-30
+
+### Security
+- **The secret guard can no longer be timed out.** A long run of `-sb_secret_` made one pattern quadratic; a hook that times out lets the write through. The patterns are bounded now.
+- **More key formats are stopped:** Google API keys (`AIza…`), GitLab (`glpat-`), Hugging Face (`hf_`), npm (`npm_`), SendGrid (`SG.…`), Stripe webhook secrets (`whsec_`), Slack app and refresh tokens (`xapp-`, `xoxe-`) and PGP private key blocks. A key right after `_` or a letter (`OPENAI_sk-…`, `prod_sk_live_…`) is found too. JWTs and database URLs with a password are still not matched: local dev values would raise false alarms.
+- A write whose content is not plain text (a `content` or notebook `new_source` array) is scanned as a whole instead of skipped.
+- The pre-commit scan (`guard-secrets.mjs --staged`) also checks added lines that start with `++`.
+
+### Fixed
+- `grep -ln`, `ls -rd` and other commands with a flag that spells a file command no longer count as writing a test file.
+
 ## [3.49.6] - 2026-10-30
 
 ### Fixed

package/kit/VERSION

@@ -1 +1 @@
-3.49.6
+3.49.8

package/kit/guide.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.6</b> Starter kit for Claude Code · MIT</span>
+      <span class="pill"><b>v3.49.8</b> Starter kit for Claude Code · MIT</span>
       <h1>The AI builds.<br><em>You steer.</em></h1>
       <p class="sub">TillerHand takes a product from idea to production and maintenance with Claude Code. At every important decision the AI gives you the options, its recommendation and the cost of each option. An expert board reviews the work, and guardrails stop mistakes before they happen.</p>
       <div class="setup">
@@ -1241,7 +1241,7 @@ Next: G-013 password reset · pending decision: email service</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Version 3.49.6 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
+    <span>Version 3.49.8 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
   </div>
 </footer>
 

package/kit/guide.tr.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.6</b> Claude Code için başlangıç kiti · MIT</span>
+      <span class="pill"><b>v3.49.8</b> Claude Code için başlangıç kiti · MIT</span>
       <h1>Kodu AI yazar.<br><em>Dümen sende.</em></h1>
       <p class="sub">TillerHand, Claude Code ile bir ürünü fikirden canlıya ve bakıma kadar götürür. Her önemli kararda AI sana seçenekleri, önerisini ve her seçeneğin bedelini sunar. Bir uzman kurulu işi denetler, korumalar hatayı daha olmadan durdurur.</p>
       <div class="setup">
@@ -1245,7 +1245,7 @@ Sıradaki: G-013 şifre sıfırlama · bekleyen karar: e-posta servisi</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Sürüm 3.49.6 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
+    <span>Sürüm 3.49.8 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
   </div>
 </footer>
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tillerhand",
-  "version": "3.49.6",
+  "version": "3.49.8",
   "description": "Vibe coding kit for Claude Code, Codex and Antigravity: rules, commands, guards and project templates.",
   "license": "MIT",
   "type": "module",