tillerhand 3.49.7 → 3.49.8

package/.claude/hooks/messages.mjs

@@ -444,6 +444,8 @@ export const MESSAGES = {
   'guard.package.newPypi': { en: 'first release was published {age} days ago' },
   'guard.package.timeout': { en: 'could not be verified (timeout)' },
   'guard.package.network': { en: 'could not be verified (network error)' },
+  'guard.package.tooMany': { en: 'Package gate: {count} packages in one command (more than {max}) are not checked one by one. User approval required.' },
+  'guard.package.error': { en: 'The package gate could not check this command ({error}). User approval required.' },
   'guard.package.ask': { en: 'Package gate warning: {list}. Before installing, make sure the package is really the one you want.' },
   'guard.structure.offMap': { en: '"{rel}" is not in the structure map (.claude/structure.json). The right place is probably one of: {top}. If it is temporary or a trial, write it under sandbox/. If a new permanent place is needed, ask it as a technical decision and update the map (docs/architecture/structure.md).' },
   'guard.structure.prefix': { en: 'Structure: {reason}' },

package/.claude/hooks/package-gate.mjs

@@ -24,19 +24,20 @@ const POPULAR = {
     'langchain', 'transformers', 'torch', 'scikit-learn', 'aiohttp', 'tenacity', 'ruff', 'black', 'mypy'],
 };
 
+// Case-insensitive (the Windows shell is); npm's install aliases (in, ins, isntall, it…) count as install
 const COMMANDS = [
-  [/^(npm|pnpm|bun)\s+(i|install|add)\b/, 'npm'], [/^yarn\s+(global\s+)?add\b/, 'npm'], [/^npx\s+expo\s+install\b/, 'npm'],
-  [/^uv\s+(add|pip\s+install)\b/, 'pypi'], [/^(python3?\s+-m\s+)?pip3?\s+install\b/, 'pypi'], [/^poetry\s+add\b/, 'pypi'],
+  [/^(npm|pnpm|bun)\s+(i|in|ins|inst|insta|instal|install|isnt|isnta|isntal|isntall|it|add)\b/i, 'npm'], [/^yarn\s+(global\s+)?add\b/i, 'npm'], [/^npx\s+expo\s+install\b/i, 'npm'],
+  [/^uv\s+(add|pip\s+install)\b/i, 'pypi'], [/^(python3?\s+-m\s+)?pip3?\s+install\b/i, 'pypi'], [/^poetry\s+add\b/i, 'pypi'],
 ];
 
 // Download-and-run: the first positional is the package (the rest are its arguments), or the values of the package flags.
 // local: the runner uses a bin the project already has before downloading (npx, npm exec, bunx); pnpm/yarn dlx always download.
 // positional: false for uv run (its positional is a script; only --with names packages).
 const EXEC = [
-  { re: /^(npx|npm\s+(exec|x)|bunx|bun\s+x)\b/, eco: 'npm', local: true, positional: true },
-  { re: /^(pnpx|pnpm\s+dlx|yarn\s+dlx)\b/, eco: 'npm', local: false, positional: true },
-  { re: /^(uvx|uv\s+tool\s+run|pipx\s+run)\b/, eco: 'pypi', local: false, positional: true },
-  { re: /^uv\s+run\b/, eco: 'pypi', local: false, positional: false },
+  { re: /^(npx|npm\s+(exec|x)|bunx|bun\s+x)\b/i, eco: 'npm', local: true, positional: true },
+  { re: /^(pnpx|pnpm\s+dlx|yarn\s+dlx)\b/i, eco: 'npm', local: false, positional: true },
+  { re: /^(uvx|uv\s+tool\s+run|pipx\s+run)\b/i, eco: 'pypi', local: false, positional: true },
+  { re: /^uv\s+run\b/i, eco: 'pypi', local: false, positional: false },
 ];
 const FLAGS = {
   npm: { pkg: /^(-p|--package)$/, value: /^(-p|--package|-c|--call|--registry|--prefix|--cache|--userconfig|--globalconfig|-w|--workspace|--node-options|--script-shell|--shell|--loglevel|-C|--dir|--filter)$/ },
@@ -68,14 +69,17 @@ function execArgs(args, eco, positional) {
 
 // What runs a segment: wrappers, VAR=x, a path or .cmd/.exe on the tool, and the manager's own flags before its subcommand are
 // dropped (FOO=1 npx x, cmd /c npx x, bash -c "npx x", /usr/bin/npx x, npx.cmd x, pnpm -C . dlx x, npm --silent exec x).
-const WRAPPER = /^(?:\(|[A-Za-z_]\w*=\S*\s+|(?:sudo|env|time|nohup|exec|command|xargs|corepack|call|start)\s+|(?:bash|sh|zsh|dash|cmd|pwsh|powershell)(?:\.exe)?\s+(?:-c|\/c|\/k|-Command)\s+["']?)/i;
+// Also timeout/nice/stdbuf, shell keywords (then, do, else, !) and combined shell flags (bash -lc).
+const WRAPPER = /^(?:\(|\{|!\s*|[A-Za-z_]\w*=\S*\s+|(?:sudo|env|time|nohup|exec|command|xargs|corepack|call|start|then|do|else|ionice|stdbuf)\s+|timeout\s+(?:-\S+\s+)*\S+\s+|nice\s+(?:-n\s*\S+\s+|-\d+\s+)?|(?:bash|sh|zsh|dash|cmd|pwsh|powershell)(?:\.exe)?\s+(?:-\w*c|\/c|\/k|-Command)\s+["']?)/i;
 const SUBCOMMAND = /^(install|i|add|exec|x|dlx|tool|pip|run|global)$/;
 export function normalize(part) {
   let s = part.trim(), prev;
   do { prev = s; s = s.replace(WRAPPER, '').trim(); } while (s !== prev);
-  s = s.replace(/^["']?(?:[^\s"']*[\/])?([\w.-]+?)(?:\.cmd|\.exe|\.ps1)?["']?(?=\s|$)/i, '$1');
+  // A path (Windows \ too, quoted with spaces) and .cmd/.exe on the tool: "C:\Program Files\nodejs\npm.cmd" i x → npm i x
+  s = s.replace(/^"(?:[^"]*[\\/])?([\w.-]+?)(?:\.cmd|\.exe|\.ps1)?"(?=\s|$)/i, '$1')
+    .replace(/^["']?(?:[^\s"']*[\\/])?([\w.-]+?)(?:\.cmd|\.exe|\.ps1)?["']?(?=\s|$)/i, '$1');
   const t = s.split(/\s+/);
-  if (/^(npm|pnpm|yarn|bun|uv)$/.test(t[0])) {
+  if (/^(npm|pnpm|yarn|bun|uv)$/i.test(t[0])) {
     let i = 1;
     while (i < t.length && t[i].startsWith('-')) i += !t[i].includes('=') && t[i + 1] && !t[i + 1].startsWith('-') && !SUBCOMMAND.test(t[i + 1]) ? 2 : 1;
     s = [t[0], ...t.slice(i)].join(' ');
@@ -85,13 +89,15 @@ export function normalize(part) {
 
 const NOT_REGISTRY = /^(\.|\/|file:|link:|git\+|git:|https?:|github:|workspace:)/;
 function npmName(arg) {
-  if (NOT_REGISTRY.test(arg)) return null;
-  const at = arg.indexOf('@', 1), spec = at > 0 ? arg.slice(at + 1) : '';
-  // name@npm:other installs "other": the alias target is checked. name@github:x/y, @https:… are not from the registry
-  // (like a bare URL, not checked here); the name in front is not what gets installed.
-  if (spec.startsWith('npm:')) return npmName(spec.slice(4));
-  if (/[:/]/.test(spec)) return null;
-  return (at > 0 ? arg.slice(0, at) : arg) || null;
+  // name@npm:other installs "other": the alias target is checked (a loop: a deep a@npm:a@npm:… chain must not overflow
+  // the stack). name@github:x/y, @https:… are not from the registry (like a bare URL, not checked here).
+  for (;;) {
+    if (NOT_REGISTRY.test(arg)) return null;
+    const at = arg.indexOf('@', 1), spec = at > 0 ? arg.slice(at + 1) : '';
+    if (spec.startsWith('npm:')) { arg = spec.slice(4); continue; }
+    if (/[:/]/.test(spec)) return null;
+    return (at > 0 ? arg.slice(0, at) : arg) || null;
+  }
 }
 
 function pypiName(arg) {
@@ -101,7 +107,9 @@ function pypiName(arg) {
 
 export function findPackages(command) {
   const result = [];
-  for (const part of command.split(/&&|\|\||;|\|/)) {
+  // Every place a new command can start: chains, a newline, a background &, $( ), backticks, ( ) and { } groups.
+  // A redirect's & (2>&1, &>) is not a separator.
+  for (const part of command.split(/\n|&&|\|\||;|\||(?<![>&])&(?![>&])|\$\(|`|[(){}]/)) {
     const s = normalize(part);
     const match = COMMANDS.find(([re]) => re.test(s));
     const exec = match ? null : EXEC.find((e) => e.re.test(s));
@@ -182,15 +190,23 @@ export async function check({ eco, name }, get = fetch, now = Date.now()) {
   }
 }
 
+// More names than this in one command are asked without checking each one (unbounded fetches would hit the hook timeout)
+const MAX_PACKAGES = 50;
 async function hook() {
   const g = readInput();
   if (!g) process.exit(0);
+  // A gate that throws or times out lets the command run: any error asks instead
+  try { await gate(g); } catch (e) { decide(g.tool, 'ask', t(g.root, 'guard.package.error', { error: String(e?.message ?? e).slice(0, 200) })); }
+  process.exit(0);
+}
+async function gate(g) {
   // npx/bunx run a bin the project already installed without downloading: a local bin (tsc, eas) is not a package name
   const bin = (name) => /^\w[\w.-]*$/.test(name) && [g.dir, g.root].some((d) => fs.existsSync(path.join(d, 'node_modules', '.bin', name)));
   // The kit's own package (/start and /adopt run npx -y tillerhand@<version> install): the kit already trusts itself
   // Both only for the plain spelling: name@1.2 or name@npm:other downloads, it does not run the local bin or the kit's release
   const packages = findPackages(g.command).filter((p) => !(p.local && p.spec === p.name && bin(p.name)) && !(p.eco === 'npm' && /^tillerhand(@\d+\.\d+\.\d+)?$/.test(p.spec ?? '')));
-  if (!packages.length) process.exit(0);
+  if (!packages.length) return;
+  if (packages.length > MAX_PACKAGES) decide(g.tool, 'ask', t(g.root, 'guard.package.tooMany', { count: packages.length, max: MAX_PACKAGES }));
   const results = await Promise.all(packages.map(async (p) => ({ ...p, ...(await check(p)) })));
   const missing = results.filter((s) => s.status === 'missing' && !s.unsure);
   if (missing.length) {

package/.claude/i18n/tr.json

@@ -441,6 +441,8 @@
   "guard.package.newPypi": "ilk sürümü {age} gün önce yayımlanmış",
   "guard.package.timeout": "doğrulanamadı (zaman aşımı)",
   "guard.package.network": "doğrulanamadı (ağ hatası)",
+  "guard.package.tooMany": "Paket kapısı: tek komutta {count} paket var ({max} sınırının üstünde), tek tek denetlenmiyor. Kullanıcı onayı gerekli.",
+  "guard.package.error": "Paket kapısı bu komutu denetleyemedi ({error}). Kullanıcı onayı gerekli.",
   "guard.package.ask": "Paket kapısı uyarısı: {list}. Kurmadan önce paketin gerçekten istenen paket olduğundan emin ol.",
   "guard.structure.offMap": "\"{rel}\" yapı haritasında yok (.claude/structure.json). Doğru yer muhtemelen şunlardan biri: {top}. Geçici veya deneme ise sandbox/ altına yaz. Kalıcı yeni bir yer gerekiyorsa bunu teknik karar olarak sor ve haritayı güncelle (docs/architecture/structure.md).",
   "guard.structure.prefix": "Yapı: {reason}",

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.7-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.8-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-ready-d97757?style=flat-square">
   <img alt="Also Codex and Antigravity" src="https://img.shields.io/badge/also-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/README.tr.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.7-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.8-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="Lisans: MIT" src="https://img.shields.io/badge/lisans-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-haz%C4%B1r-d97757?style=flat-square">
   <img alt="Codex ve Antigravity" src="https://img.shields.io/badge/ayr%C4%B1ca-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/kit/CHANGELOG.md

@@ -3,6 +3,12 @@
 The kit version is in `kit/VERSION`. To update a project, run `/kit-update` in it.
 Items with an "Adapt by hand" note concern files owned by the project; the update does not touch them.
 
+## [3.49.8] - 2026-10-30
+
+### Security
+- **The package gate sees installs in more places.** An `npm i` after a newline, a background `&`, inside `$( )`, backticks, `if … then`, `( )` or `{ }` is checked, and so are `timeout`/`nice`/`bash -lc` in front, a quoted Windows path (`"C:\Program Files\nodejs\npm.cmd" i`), upper case (`NPM i`) and npm's install aliases (`npm in`, `npm isntall`, `npm it`…).
+- A command the package gate cannot check (a parser error, more than 50 packages at once) asks you instead of running unchecked.
+
 ## [3.49.7] - 2026-10-30
 
 ### Security

package/kit/VERSION

@@ -1 +1 @@
-3.49.7
+3.49.8

package/kit/guide.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.7</b> Starter kit for Claude Code · MIT</span>
+      <span class="pill"><b>v3.49.8</b> Starter kit for Claude Code · MIT</span>
       <h1>The AI builds.<br><em>You steer.</em></h1>
       <p class="sub">TillerHand takes a product from idea to production and maintenance with Claude Code. At every important decision the AI gives you the options, its recommendation and the cost of each option. An expert board reviews the work, and guardrails stop mistakes before they happen.</p>
       <div class="setup">
@@ -1241,7 +1241,7 @@ Next: G-013 password reset · pending decision: email service</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Version 3.49.7 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
+    <span>Version 3.49.8 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
   </div>
 </footer>
 

package/kit/guide.tr.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.7</b> Claude Code için başlangıç kiti · MIT</span>
+      <span class="pill"><b>v3.49.8</b> Claude Code için başlangıç kiti · MIT</span>
       <h1>Kodu AI yazar.<br><em>Dümen sende.</em></h1>
       <p class="sub">TillerHand, Claude Code ile bir ürünü fikirden canlıya ve bakıma kadar götürür. Her önemli kararda AI sana seçenekleri, önerisini ve her seçeneğin bedelini sunar. Bir uzman kurulu işi denetler, korumalar hatayı daha olmadan durdurur.</p>
       <div class="setup">
@@ -1245,7 +1245,7 @@ Sıradaki: G-013 şifre sıfırlama · bekleyen karar: e-posta servisi</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Sürüm 3.49.7 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
+    <span>Sürüm 3.49.8 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
   </div>
 </footer>
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tillerhand",
-  "version": "3.49.7",
+  "version": "3.49.8",
   "description": "Vibe coding kit for Claude Code, Codex and Antigravity: rules, commands, guards and project templates.",
   "license": "MIT",
   "type": "module",