tillerhand 3.49.7 → 3.49.9

package/.claude/hooks/destructive-guard.mjs

@@ -27,6 +27,8 @@ const DESTRUCTIVE = [
   [/\bgit\s+clean\b(?=[^;]*\s--?[a-z]*f)(?=[^;]*\s-[a-z]*d)/i, 'git clean permanently deletes untracked files'],
   [/\bredis-cli\b[^;]*\b(flushall|flushdb)\b/i, 'Redis data is being deleted'],
   [/\bfirebase\s+firestore:delete\b/i, 'Firestore data is being deleted'],
+  [/\bheroku\s+pg:reset\b|\bdrop(Database|Collection)\s*\(|\bdeleteMany\s*\(\s*\{\s*\}\s*\)|\bartisan\s+migrate:(fresh|refresh|reset)\b|\btypeorm\b[^;]*\bschema:drop\b|\bknex\b[^;]*\bmigrate:rollback\b[^;]*--all\b|\bprisma\s+db\s+push\b[^;]*--accept-data-loss\b/i, 'Database data is being deleted or reset'],
+  [/\b(terraform|tofu|pulumi)\s+destroy\b/i, 'Cloud infrastructure is being destroyed'],
 ];
 
 // Database addresses other than localhost count as prod (or a shared environment)
@@ -45,8 +47,9 @@ const NEEDS_APPROVAL = [
   // The subcommand can also come after flags: vercel --scope team promote <url>
   [/\b(vercel|vc)(@[\w.-]+)?\b[^;&|]*\s(promote|rollback)\b/i, 'guard.destructive.promoteRollback'],
   [UNCLEAR_ENV, 'guard.destructive.unclearEnv'],
-  [/\b(fly|flyctl)\s+deploy\b|\brailway\s+up\b|\bnetlify\s+deploy\b[^;]*--prod/i, 'guard.destructive.serverDeploy'],
-  [/\beas(-cli(@[\w.-]+)?)?\s+(submit\b|update:(rollback|republish)\b|update\b(?=[^;\n]*--(branch|channel|environment)(=|\s+)['"]?prod(uction)?\b)|deploy\b(?=[^;\n]*--prod\b))/i, 'guard.destructive.storeSubmit'],
+  // A package spelling (npx netlify-cli, firebase-tools, wrangler@3) deploys the same way
+  [/\b(fly|flyctl)\s+deploy\b|\brailway\s+up\b|\bnetlify(-cli)?(@[\w.-]+)?\s+deploy\b[^;]*--prod|\bfirebase(-tools)?(@[\w.-]+)?\s+deploy\b|\bwrangler(@[\w.-]+)?\s+(deploy|publish|pages\s+deploy)\b|\bgcloud\s+app\s+deploy\b|\b(serverless|sls)\s+deploy\b|\bcdk\s+deploy\b|\bpulumi\s+up\b|\bamplify\s+(push|publish)\b|\b(terraform|tofu)\s+apply\b|\bexpo\s+publish\b/i, 'guard.destructive.serverDeploy'],
+  [/\beas(-cli(@[\w.-]+)?)?\s+(submit\b|build\b(?=[^;\n]*--auto-submit\b)|update:(rollback|republish)\b|update\b(?=[^;\n]*--(branch|channel|environment)(=|\s+)['"]?prod(uction)?\b)|deploy\b(?=[^;\n]*--prod\b))/i, 'guard.destructive.storeSubmit'],
   [/\bgit\s+push\b[^;]*\b(main|master|production)\b/i, 'guard.destructive.pushMain'],
   [/\bgit\s+(rebase|filter-branch|filter-repo)\b/i, 'guard.destructive.rewriteHistory'],
   [/\b(alembic\s+upgrade|prisma\s+migrate\s+deploy|supabase\s+db\s+push)\b/i, 'guard.destructive.migration'],
@@ -304,6 +307,8 @@ const PERMISSION_EQUIVALENT = [
   ['deny', /\bgit\s+reset\s+[^;&|]*--hard\b/i, 'git reset --hard deletes uncommitted work'],
   ['deny', /\bgit\s+push\b[^;&|]*\s(--force\S*|-\w*f\w*|\+\S+)(?=\s|$)/i, 'git push --force overwrites the remote history'],
   ['deny', ENV_ACCESS, 'Access to .env or secrets/ (the AI does not read or write them)'],
+  // Claude asks every push through settings.json (Bash(git push:*)); a push to any branch can deploy (Vercel's prod branch)
+  ['ask', /\bgit\s+push\b/i, 'guard.destructive.perm.push'],
   ['ask', /freeze-guard\.mjs['"]?\s+['"]?--off\b/i, 'guard.destructive.perm.freezeOff'],
   ['ask', /tools\.mjs['"]?\s+['"]?--commands\b/i, 'guard.destructive.perm.toolsCommands'],
   ['ask', /freeze-guard\.mjs['"]?\s+['"]?--plan-add\b/i, 'guard.destructive.perm.planAdd'],

package/.claude/hooks/messages.mjs

@@ -400,6 +400,7 @@ export const MESSAGES = {
   'guard.destructive.envShell': { en: 'The command names a .env file (secrets). The AI does not read or write it; if needed, the user does it. User approval required.' },
   'guard.destructive.gitOutput': { en: 'git writes its output to a file the command chooses (--output / format-patch -o); it can overwrite a guard, test or settings file. User approval required.' },
   'guard.destructive.boardShell': { en: 'docs/workflow/board.md (board members, commit review switch) is changed from the shell. Use the file tools; otherwise user approval required.' },
+  'guard.destructive.perm.push': { en: 'Pushing to the remote repository (a pushed branch can deploy)' },
   'guard.destructive.perm.freezeOff': { en: 'The edit lock is being removed' },
   'guard.destructive.perm.toolsCommands': { en: 'The shared .claude/settings.json → skillOverrides is changing (command list)' },
   'guard.destructive.perm.planAdd': { en: 'The approved plan\'s file list is widening (scope shield)' },
@@ -444,6 +445,8 @@ export const MESSAGES = {
   'guard.package.newPypi': { en: 'first release was published {age} days ago' },
   'guard.package.timeout': { en: 'could not be verified (timeout)' },
   'guard.package.network': { en: 'could not be verified (network error)' },
+  'guard.package.tooMany': { en: 'Package gate: {count} packages in one command (more than {max}) are not checked one by one. User approval required.' },
+  'guard.package.error': { en: 'The package gate could not check this command ({error}). User approval required.' },
   'guard.package.ask': { en: 'Package gate warning: {list}. Before installing, make sure the package is really the one you want.' },
   'guard.structure.offMap': { en: '"{rel}" is not in the structure map (.claude/structure.json). The right place is probably one of: {top}. If it is temporary or a trial, write it under sandbox/. If a new permanent place is needed, ask it as a technical decision and update the map (docs/architecture/structure.md).' },
   'guard.structure.prefix': { en: 'Structure: {reason}' },

package/.claude/hooks/package-gate.mjs

@@ -24,19 +24,20 @@ const POPULAR = {
     'langchain', 'transformers', 'torch', 'scikit-learn', 'aiohttp', 'tenacity', 'ruff', 'black', 'mypy'],
 };
 
+// Case-insensitive (the Windows shell is); npm's install aliases (in, ins, isntall, it…) count as install
 const COMMANDS = [
-  [/^(npm|pnpm|bun)\s+(i|install|add)\b/, 'npm'], [/^yarn\s+(global\s+)?add\b/, 'npm'], [/^npx\s+expo\s+install\b/, 'npm'],
-  [/^uv\s+(add|pip\s+install)\b/, 'pypi'], [/^(python3?\s+-m\s+)?pip3?\s+install\b/, 'pypi'], [/^poetry\s+add\b/, 'pypi'],
+  [/^(npm|pnpm|bun)\s+(i|in|ins|inst|insta|instal|install|isnt|isnta|isntal|isntall|it|add)\b/i, 'npm'], [/^yarn\s+(global\s+)?add\b/i, 'npm'], [/^npx\s+expo\s+install\b/i, 'npm'],
+  [/^uv\s+(add|pip\s+install)\b/i, 'pypi'], [/^(python3?\s+-m\s+)?pip3?\s+install\b/i, 'pypi'], [/^poetry\s+add\b/i, 'pypi'],
 ];
 
 // Download-and-run: the first positional is the package (the rest are its arguments), or the values of the package flags.
 // local: the runner uses a bin the project already has before downloading (npx, npm exec, bunx); pnpm/yarn dlx always download.
 // positional: false for uv run (its positional is a script; only --with names packages).
 const EXEC = [
-  { re: /^(npx|npm\s+(exec|x)|bunx|bun\s+x)\b/, eco: 'npm', local: true, positional: true },
-  { re: /^(pnpx|pnpm\s+dlx|yarn\s+dlx)\b/, eco: 'npm', local: false, positional: true },
-  { re: /^(uvx|uv\s+tool\s+run|pipx\s+run)\b/, eco: 'pypi', local: false, positional: true },
-  { re: /^uv\s+run\b/, eco: 'pypi', local: false, positional: false },
+  { re: /^(npx|npm\s+(exec|x)|bunx|bun\s+x)\b/i, eco: 'npm', local: true, positional: true },
+  { re: /^(pnpx|pnpm\s+dlx|yarn\s+dlx)\b/i, eco: 'npm', local: false, positional: true },
+  { re: /^(uvx|uv\s+tool\s+run|pipx\s+run)\b/i, eco: 'pypi', local: false, positional: true },
+  { re: /^uv\s+run\b/i, eco: 'pypi', local: false, positional: false },
 ];
 const FLAGS = {
   npm: { pkg: /^(-p|--package)$/, value: /^(-p|--package|-c|--call|--registry|--prefix|--cache|--userconfig|--globalconfig|-w|--workspace|--node-options|--script-shell|--shell|--loglevel|-C|--dir|--filter)$/ },
@@ -68,14 +69,17 @@ function execArgs(args, eco, positional) {
 
 // What runs a segment: wrappers, VAR=x, a path or .cmd/.exe on the tool, and the manager's own flags before its subcommand are
 // dropped (FOO=1 npx x, cmd /c npx x, bash -c "npx x", /usr/bin/npx x, npx.cmd x, pnpm -C . dlx x, npm --silent exec x).
-const WRAPPER = /^(?:\(|[A-Za-z_]\w*=\S*\s+|(?:sudo|env|time|nohup|exec|command|xargs|corepack|call|start)\s+|(?:bash|sh|zsh|dash|cmd|pwsh|powershell)(?:\.exe)?\s+(?:-c|\/c|\/k|-Command)\s+["']?)/i;
+// Also timeout/nice/stdbuf, shell keywords (then, do, else, !) and combined shell flags (bash -lc).
+const WRAPPER = /^(?:\(|\{|!\s*|[A-Za-z_]\w*=\S*\s+|(?:sudo|env|time|nohup|exec|command|xargs|corepack|call|start|then|do|else|ionice|stdbuf)\s+|timeout\s+(?:-\S+\s+)*\S+\s+|nice\s+(?:-n\s*\S+\s+|-\d+\s+)?|(?:bash|sh|zsh|dash|cmd|pwsh|powershell)(?:\.exe)?\s+(?:-\w*c|\/c|\/k|-Command)\s+["']?)/i;
 const SUBCOMMAND = /^(install|i|add|exec|x|dlx|tool|pip|run|global)$/;
 export function normalize(part) {
   let s = part.trim(), prev;
   do { prev = s; s = s.replace(WRAPPER, '').trim(); } while (s !== prev);
-  s = s.replace(/^["']?(?:[^\s"']*[\/])?([\w.-]+?)(?:\.cmd|\.exe|\.ps1)?["']?(?=\s|$)/i, '$1');
+  // A path (Windows \ too, quoted with spaces) and .cmd/.exe on the tool: "C:\Program Files\nodejs\npm.cmd" i x → npm i x
+  s = s.replace(/^"(?:[^"]*[\\/])?([\w.-]+?)(?:\.cmd|\.exe|\.ps1)?"(?=\s|$)/i, '$1')
+    .replace(/^["']?(?:[^\s"']*[\\/])?([\w.-]+?)(?:\.cmd|\.exe|\.ps1)?["']?(?=\s|$)/i, '$1');
   const t = s.split(/\s+/);
-  if (/^(npm|pnpm|yarn|bun|uv)$/.test(t[0])) {
+  if (/^(npm|pnpm|yarn|bun|uv)$/i.test(t[0])) {
     let i = 1;
     while (i < t.length && t[i].startsWith('-')) i += !t[i].includes('=') && t[i + 1] && !t[i + 1].startsWith('-') && !SUBCOMMAND.test(t[i + 1]) ? 2 : 1;
     s = [t[0], ...t.slice(i)].join(' ');
@@ -85,13 +89,15 @@ export function normalize(part) {
 
 const NOT_REGISTRY = /^(\.|\/|file:|link:|git\+|git:|https?:|github:|workspace:)/;
 function npmName(arg) {
-  if (NOT_REGISTRY.test(arg)) return null;
-  const at = arg.indexOf('@', 1), spec = at > 0 ? arg.slice(at + 1) : '';
-  // name@npm:other installs "other": the alias target is checked. name@github:x/y, @https:… are not from the registry
-  // (like a bare URL, not checked here); the name in front is not what gets installed.
-  if (spec.startsWith('npm:')) return npmName(spec.slice(4));
-  if (/[:/]/.test(spec)) return null;
-  return (at > 0 ? arg.slice(0, at) : arg) || null;
+  // name@npm:other installs "other": the alias target is checked (a loop: a deep a@npm:a@npm:… chain must not overflow
+  // the stack). name@github:x/y, @https:… are not from the registry (like a bare URL, not checked here).
+  for (;;) {
+    if (NOT_REGISTRY.test(arg)) return null;
+    const at = arg.indexOf('@', 1), spec = at > 0 ? arg.slice(at + 1) : '';
+    if (spec.startsWith('npm:')) { arg = spec.slice(4); continue; }
+    if (/[:/]/.test(spec)) return null;
+    return (at > 0 ? arg.slice(0, at) : arg) || null;
+  }
 }
 
 function pypiName(arg) {
@@ -101,7 +107,9 @@ function pypiName(arg) {
 
 export function findPackages(command) {
   const result = [];
-  for (const part of command.split(/&&|\|\||;|\|/)) {
+  // Every place a new command can start: chains, a newline, a background &, $( ), backticks, ( ) and { } groups.
+  // A redirect's & (2>&1, &>) is not a separator.
+  for (const part of command.split(/\n|&&|\|\||;|\||(?<![>&])&(?![>&])|\$\(|`|[(){}]/)) {
     const s = normalize(part);
     const match = COMMANDS.find(([re]) => re.test(s));
     const exec = match ? null : EXEC.find((e) => e.re.test(s));
@@ -182,15 +190,23 @@ export async function check({ eco, name }, get = fetch, now = Date.now()) {
   }
 }
 
+// More names than this in one command are asked without checking each one (unbounded fetches would hit the hook timeout)
+const MAX_PACKAGES = 50;
 async function hook() {
   const g = readInput();
   if (!g) process.exit(0);
+  // A gate that throws or times out lets the command run: any error asks instead
+  try { await gate(g); } catch (e) { decide(g.tool, 'ask', t(g.root, 'guard.package.error', { error: String(e?.message ?? e).slice(0, 200) })); }
+  process.exit(0);
+}
+async function gate(g) {
   // npx/bunx run a bin the project already installed without downloading: a local bin (tsc, eas) is not a package name
   const bin = (name) => /^\w[\w.-]*$/.test(name) && [g.dir, g.root].some((d) => fs.existsSync(path.join(d, 'node_modules', '.bin', name)));
   // The kit's own package (/start and /adopt run npx -y tillerhand@<version> install): the kit already trusts itself
   // Both only for the plain spelling: name@1.2 or name@npm:other downloads, it does not run the local bin or the kit's release
   const packages = findPackages(g.command).filter((p) => !(p.local && p.spec === p.name && bin(p.name)) && !(p.eco === 'npm' && /^tillerhand(@\d+\.\d+\.\d+)?$/.test(p.spec ?? '')));
-  if (!packages.length) process.exit(0);
+  if (!packages.length) return;
+  if (packages.length > MAX_PACKAGES) decide(g.tool, 'ask', t(g.root, 'guard.package.tooMany', { count: packages.length, max: MAX_PACKAGES }));
   const results = await Promise.all(packages.map(async (p) => ({ ...p, ...(await check(p)) })));
   const missing = results.filter((s) => s.status === 'missing' && !s.unsure);
   if (missing.length) {

package/.claude/i18n/tr.json

@@ -397,6 +397,7 @@
   "guard.destructive.envShell": "Komut bir .env dosyasını (sırlar) anıyor. AI onu okumaz, yazmaz; gerekirse kullanıcı yapar. Kullanıcı onayı gerekli.",
   "guard.destructive.gitOutput": "git çıktısını komutun seçtiği bir dosyaya yazıyor (--output / format-patch -o); bir koruma, test ya da ayar dosyasını ezebilir. Kullanıcı onayı gerekli.",
   "guard.destructive.boardShell": "docs/workflow/board.md (kurul üyeleri, commit incelemesi anahtarı) kabuktan değiştiriliyor. Dosya araçlarını kullan; yoksa kullanıcı onayı gerekli.",
+  "guard.destructive.perm.push": "Uzak depoya gönderiliyor (gönderilen dal yayına çıkabilir)",
   "guard.destructive.perm.freezeOff": "Düzenleme kilidi kaldırılıyor",
   "guard.destructive.perm.toolsCommands": "Paylaşılan .claude/settings.json → skillOverrides değişiyor (komut listesi)",
   "guard.destructive.perm.planAdd": "Onaylı planın dosya listesi genişliyor (kapsam kalkanı)",
@@ -441,6 +442,8 @@
   "guard.package.newPypi": "ilk sürümü {age} gün önce yayımlanmış",
   "guard.package.timeout": "doğrulanamadı (zaman aşımı)",
   "guard.package.network": "doğrulanamadı (ağ hatası)",
+  "guard.package.tooMany": "Paket kapısı: tek komutta {count} paket var ({max} sınırının üstünde), tek tek denetlenmiyor. Kullanıcı onayı gerekli.",
+  "guard.package.error": "Paket kapısı bu komutu denetleyemedi ({error}). Kullanıcı onayı gerekli.",
   "guard.package.ask": "Paket kapısı uyarısı: {list}. Kurmadan önce paketin gerçekten istenen paket olduğundan emin ol.",
   "guard.structure.offMap": "\"{rel}\" yapı haritasında yok (.claude/structure.json). Doğru yer muhtemelen şunlardan biri: {top}. Geçici veya deneme ise sandbox/ altına yaz. Kalıcı yeni bir yer gerekiyorsa bunu teknik karar olarak sor ve haritayı güncelle (docs/architecture/structure.md).",
   "guard.structure.prefix": "Yapı: {reason}",

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.7-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.9-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-ready-d97757?style=flat-square">
   <img alt="Also Codex and Antigravity" src="https://img.shields.io/badge/also-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/README.tr.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.7-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.9-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="Lisans: MIT" src="https://img.shields.io/badge/lisans-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-haz%C4%B1r-d97757?style=flat-square">
   <img alt="Codex ve Antigravity" src="https://img.shields.io/badge/ayr%C4%B1ca-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/kit/CHANGELOG.md

@@ -3,6 +3,20 @@
 The kit version is in `kit/VERSION`. To update a project, run `/kit-update` in it.
 Items with an "Adapt by hand" note concern files owned by the project; the update does not touch them.
 
+## [3.49.9] - 2026-10-30
+
+### Security
+- **More production deploys ask you:** `firebase deploy`, `wrangler deploy`/`publish`/`pages deploy`, `gcloud app deploy`, `serverless deploy`, `cdk deploy`, `pulumi up`, `amplify push`, `terraform apply`, `expo publish`, `eas build --auto-submit`, and `netlify deploy --prod` through `npx netlify-cli`.
+- **More data deletion is blocked:** `heroku pg:reset`, MongoDB `dropDatabase()`/`dropCollection()`/`deleteMany({})`, Laravel `migrate:fresh`/`refresh`/`reset`, TypeORM `schema:drop`, Knex `migrate:rollback --all`, `prisma db push --accept-data-loss`, and `terraform`/`tofu`/`pulumi destroy`.
+- On Codex and Antigravity every `git push` asks, as it already did in Claude Code: a pushed branch can deploy.
+- The structure guard blocks more clutter names in new projects: `a.old.ts`, `a.bak.ts`, `a.backup.ts`, `a-copy.ts`, `a (1).ts`, `Copy of a.ts`, `old/`, `backup/`, editor swap files (`.swp`, `.rej`, `.sav`) and OS files (`.DS_Store`, `Thumbs.db`).
+
+## [3.49.8] - 2026-10-30
+
+### Security
+- **The package gate sees installs in more places.** An `npm i` after a newline, a background `&`, inside `$( )`, backticks, `if … then`, `( )` or `{ }` is checked, and so are `timeout`/`nice`/`bash -lc` in front, a quoted Windows path (`"C:\Program Files\nodejs\npm.cmd" i`), upper case (`NPM i`) and npm's install aliases (`npm in`, `npm isntall`, `npm it`…).
+- A command the package gate cannot check (a parser error, more than 50 packages at once) asks you instead of running unchecked.
+
 ## [3.49.7] - 2026-10-30
 
 ### Security

package/kit/VERSION

@@ -1 +1 @@
-3.49.7
+3.49.9

package/kit/guide.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.7</b> Starter kit for Claude Code · MIT</span>
+      <span class="pill"><b>v3.49.9</b> Starter kit for Claude Code · MIT</span>
       <h1>The AI builds.<br><em>You steer.</em></h1>
       <p class="sub">TillerHand takes a product from idea to production and maintenance with Claude Code. At every important decision the AI gives you the options, its recommendation and the cost of each option. An expert board reviews the work, and guardrails stop mistakes before they happen.</p>
       <div class="setup">
@@ -1241,7 +1241,7 @@ Next: G-013 password reset · pending decision: email service</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Version 3.49.7 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
+    <span>Version 3.49.9 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
   </div>
 </footer>
 

package/kit/guide.tr.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.7</b> Claude Code için başlangıç kiti · MIT</span>
+      <span class="pill"><b>v3.49.9</b> Claude Code için başlangıç kiti · MIT</span>
       <h1>Kodu AI yazar.<br><em>Dümen sende.</em></h1>
       <p class="sub">TillerHand, Claude Code ile bir ürünü fikirden canlıya ve bakıma kadar götürür. Her önemli kararda AI sana seçenekleri, önerisini ve her seçeneğin bedelini sunar. Bir uzman kurulu işi denetler, korumalar hatayı daha olmadan durdurur.</p>
       <div class="setup">
@@ -1245,7 +1245,7 @@ Sıradaki: G-013 şifre sıfırlama · bekleyen karar: e-posta servisi</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Sürüm 3.49.7 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
+    <span>Sürüm 3.49.9 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
   </div>
 </footer>
 

package/kit/templates/backend/.claude/structure.json

@@ -55,7 +55,6 @@
     "CLAUDE-SECURITY-*/**"
   ],
   "deny": [
-    "**/*.bak",
     "**/*.orig",
     "**/*.tmp",
     "**/*~",
@@ -69,6 +68,25 @@
     "**/tmp/**",
     "**/untitled*",
     "**/test.*",
-    "**/deneme*"
+    "**/deneme*",
+    "**/*.bak*",
+    "**/*.old",
+    "**/*.old.*",
+    "**/*_bak.*",
+    "**/*.backup.*",
+    "**/*-backup.*",
+    "**/*_backup.*",
+    "**/*-copy.*",
+    "**/*-copy?.*",
+    "**/*_copy.*",
+    "**/* (?).*",
+    "**/Copy of *",
+    "**/old/**",
+    "**/backup/**",
+    "**/*.sav",
+    "**/*.swp",
+    "**/*.rej",
+    "**/.DS_Store",
+    "**/Thumbs.db"
   ]
 }

package/kit/templates/mobile/.claude/structure.json

@@ -66,7 +66,6 @@
     "CLAUDE-SECURITY-*/**"
   ],
   "deny": [
-    "**/*.bak",
     "**/*.orig",
     "**/*.tmp",
     "**/*~",
@@ -80,6 +79,25 @@
     "**/tmp/**",
     "**/untitled*",
     "**/test.*",
-    "**/deneme*"
+    "**/deneme*",
+    "**/*.bak*",
+    "**/*.old",
+    "**/*.old.*",
+    "**/*_bak.*",
+    "**/*.backup.*",
+    "**/*-backup.*",
+    "**/*_backup.*",
+    "**/*-copy.*",
+    "**/*-copy?.*",
+    "**/*_copy.*",
+    "**/* (?).*",
+    "**/Copy of *",
+    "**/old/**",
+    "**/backup/**",
+    "**/*.sav",
+    "**/*.swp",
+    "**/*.rej",
+    "**/.DS_Store",
+    "**/Thumbs.db"
   ]
 }

package/kit/templates/web-saas/.claude/structure.json

@@ -71,7 +71,6 @@
     "CLAUDE-SECURITY-*/**"
   ],
   "deny": [
-    "**/*.bak",
     "**/*.orig",
     "**/*.tmp",
     "**/*~",
@@ -85,6 +84,25 @@
     "**/tmp/**",
     "**/untitled*",
     "**/test.*",
-    "**/deneme*"
+    "**/deneme*",
+    "**/*.bak*",
+    "**/*.old",
+    "**/*.old.*",
+    "**/*_bak.*",
+    "**/*.backup.*",
+    "**/*-backup.*",
+    "**/*_backup.*",
+    "**/*-copy.*",
+    "**/*-copy?.*",
+    "**/*_copy.*",
+    "**/* (?).*",
+    "**/Copy of *",
+    "**/old/**",
+    "**/backup/**",
+    "**/*.sav",
+    "**/*.swp",
+    "**/*.rej",
+    "**/.DS_Store",
+    "**/Thumbs.db"
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tillerhand",
-  "version": "3.49.7",
+  "version": "3.49.9",
   "description": "Vibe coding kit for Claude Code, Codex and Antigravity: rules, commands, guards and project templates.",
   "license": "MIT",
   "type": "module",