tillerhand 3.49.8 → 3.49.10

package/.claude/hooks/destructive-guard.mjs

@@ -27,6 +27,8 @@ const DESTRUCTIVE = [
   [/\bgit\s+clean\b(?=[^;]*\s--?[a-z]*f)(?=[^;]*\s-[a-z]*d)/i, 'git clean permanently deletes untracked files'],
   [/\bredis-cli\b[^;]*\b(flushall|flushdb)\b/i, 'Redis data is being deleted'],
   [/\bfirebase\s+firestore:delete\b/i, 'Firestore data is being deleted'],
+  [/\bheroku\s+pg:reset\b|\bdrop(Database|Collection)\s*\(|\bdeleteMany\s*\(\s*\{\s*\}\s*\)|\bartisan\s+migrate:(fresh|refresh|reset)\b|\btypeorm\b[^;]*\bschema:drop\b|\bknex\b[^;]*\bmigrate:rollback\b[^;]*--all\b|\bprisma\s+db\s+push\b[^;]*--accept-data-loss\b/i, 'Database data is being deleted or reset'],
+  [/\b(terraform|tofu|pulumi)\s+destroy\b/i, 'Cloud infrastructure is being destroyed'],
 ];
 
 // Database addresses other than localhost count as prod (or a shared environment)
@@ -45,8 +47,9 @@ const NEEDS_APPROVAL = [
   // The subcommand can also come after flags: vercel --scope team promote <url>
   [/\b(vercel|vc)(@[\w.-]+)?\b[^;&|]*\s(promote|rollback)\b/i, 'guard.destructive.promoteRollback'],
   [UNCLEAR_ENV, 'guard.destructive.unclearEnv'],
-  [/\b(fly|flyctl)\s+deploy\b|\brailway\s+up\b|\bnetlify\s+deploy\b[^;]*--prod/i, 'guard.destructive.serverDeploy'],
-  [/\beas(-cli(@[\w.-]+)?)?\s+(submit\b|update:(rollback|republish)\b|update\b(?=[^;\n]*--(branch|channel|environment)(=|\s+)['"]?prod(uction)?\b)|deploy\b(?=[^;\n]*--prod\b))/i, 'guard.destructive.storeSubmit'],
+  // A package spelling (npx netlify-cli, firebase-tools, wrangler@3) deploys the same way
+  [/\b(fly|flyctl)\s+deploy\b|\brailway\s+up\b|\bnetlify(-cli)?(@[\w.-]+)?\s+deploy\b[^;]*--prod|\bfirebase(-tools)?(@[\w.-]+)?\s+deploy\b|\bwrangler(@[\w.-]+)?\s+(deploy|publish|pages\s+deploy)\b|\bgcloud\s+app\s+deploy\b|\b(serverless|sls)\s+deploy\b|\bcdk\s+deploy\b|\bpulumi\s+up\b|\bamplify\s+(push|publish)\b|\b(terraform|tofu)\s+apply\b|\bexpo\s+publish\b/i, 'guard.destructive.serverDeploy'],
+  [/\beas(-cli(@[\w.-]+)?)?\s+(submit\b|build\b(?=[^;\n]*--auto-submit\b)|update:(rollback|republish)\b|update\b(?=[^;\n]*--(branch|channel|environment)(=|\s+)['"]?prod(uction)?\b)|deploy\b(?=[^;\n]*--prod\b))/i, 'guard.destructive.storeSubmit'],
   [/\bgit\s+push\b[^;]*\b(main|master|production)\b/i, 'guard.destructive.pushMain'],
   [/\bgit\s+(rebase|filter-branch|filter-repo)\b/i, 'guard.destructive.rewriteHistory'],
   [/\b(alembic\s+upgrade|prisma\s+migrate\s+deploy|supabase\s+db\s+push)\b/i, 'guard.destructive.migration'],
@@ -304,6 +307,8 @@ const PERMISSION_EQUIVALENT = [
   ['deny', /\bgit\s+reset\s+[^;&|]*--hard\b/i, 'git reset --hard deletes uncommitted work'],
   ['deny', /\bgit\s+push\b[^;&|]*\s(--force\S*|-\w*f\w*|\+\S+)(?=\s|$)/i, 'git push --force overwrites the remote history'],
   ['deny', ENV_ACCESS, 'Access to .env or secrets/ (the AI does not read or write them)'],
+  // Claude asks every push through settings.json (Bash(git push:*)); a push to any branch can deploy (Vercel's prod branch)
+  ['ask', /\bgit\s+push\b/i, 'guard.destructive.perm.push'],
   ['ask', /freeze-guard\.mjs['"]?\s+['"]?--off\b/i, 'guard.destructive.perm.freezeOff'],
   ['ask', /tools\.mjs['"]?\s+['"]?--commands\b/i, 'guard.destructive.perm.toolsCommands'],
   ['ask', /freeze-guard\.mjs['"]?\s+['"]?--plan-add\b/i, 'guard.destructive.perm.planAdd'],

package/.claude/hooks/messages.mjs

@@ -400,6 +400,7 @@ export const MESSAGES = {
   'guard.destructive.envShell': { en: 'The command names a .env file (secrets). The AI does not read or write it; if needed, the user does it. User approval required.' },
   'guard.destructive.gitOutput': { en: 'git writes its output to a file the command chooses (--output / format-patch -o); it can overwrite a guard, test or settings file. User approval required.' },
   'guard.destructive.boardShell': { en: 'docs/workflow/board.md (board members, commit review switch) is changed from the shell. Use the file tools; otherwise user approval required.' },
+  'guard.destructive.perm.push': { en: 'Pushing to the remote repository (a pushed branch can deploy)' },
   'guard.destructive.perm.freezeOff': { en: 'The edit lock is being removed' },
   'guard.destructive.perm.toolsCommands': { en: 'The shared .claude/settings.json → skillOverrides is changing (command list)' },
   'guard.destructive.perm.planAdd': { en: 'The approved plan\'s file list is widening (scope shield)' },

package/.claude/hooks/package-gate.mjs

@@ -26,9 +26,20 @@ const POPULAR = {
 
 // Case-insensitive (the Windows shell is); npm's install aliases (in, ins, isntall, it…) count as install
 const COMMANDS = [
-  [/^(npm|pnpm|bun)\s+(i|in|ins|inst|insta|instal|install|isnt|isnta|isntal|isntall|it|add)\b/i, 'npm'], [/^yarn\s+(global\s+)?add\b/i, 'npm'], [/^npx\s+expo\s+install\b/i, 'npm'],
-  [/^uv\s+(add|pip\s+install)\b/i, 'pypi'], [/^(python3?\s+-m\s+)?pip3?\s+install\b/i, 'pypi'], [/^poetry\s+add\b/i, 'pypi'],
+  [/^(npm|pnpm|bun)\s+(i|in|ins|inst|insta|instal|install|isnt|isnta|isntal|isntall|it|add)\b/i, 'npm'], [/^yarn\s+(global\s+)?add\b/i, 'npm'], [/^(npx\s+)?expo\s+install\b/i, 'npm'],
+  // create/init <name> downloads and runs create-<name>; deno takes npm:<name> specifiers
+  [/^(npm|pnpm|yarn|bun)\s+(create|init)\b/i, 'npm', 'create'], [/^deno\s+(add|install|run|x)\b/i, 'npm', 'deno'],
+  [/^uv\s+(add|pip\s+install|tool\s+install)\b/i, 'pypi'], [/^((python[\d.]*|py)(\s+-\d[\d.]*)?\s+-m\s+)?pip[\d.]*(\s+-\S+)*\s+install\b/i, 'pypi'],
+  [/^(poetry|pdm)\s+add\b|^(pipenv|pipx)\s+install\b/i, 'pypi'],
 ];
+// create-vite for vite, @scope/create for @scope, @scope/create-x for @scope/x (npm's own mapping)
+function createName(arg) {
+  const n = npmName(arg);
+  if (!n) return null;
+  if (!n.startsWith('@')) return `create-${n}`;
+  const [scope, rest] = n.split('/');
+  return rest ? `${scope}/create-${rest}` : `${scope}/create`;
+}
 
 // Download-and-run: the first positional is the package (the rest are its arguments), or the values of the package flags.
 // local: the runner uses a bin the project already has before downloading (npx, npm exec, bunx); pnpm/yarn dlx always download.
@@ -72,6 +83,7 @@ function execArgs(args, eco, positional) {
 // Also timeout/nice/stdbuf, shell keywords (then, do, else, !) and combined shell flags (bash -lc).
 const WRAPPER = /^(?:\(|\{|!\s*|[A-Za-z_]\w*=\S*\s+|(?:sudo|env|time|nohup|exec|command|xargs|corepack|call|start|then|do|else|ionice|stdbuf)\s+|timeout\s+(?:-\S+\s+)*\S+\s+|nice\s+(?:-n\s*\S+\s+|-\d+\s+)?|(?:bash|sh|zsh|dash|cmd|pwsh|powershell)(?:\.exe)?\s+(?:-\w*c|\/c|\/k|-Command)\s+["']?)/i;
 const SUBCOMMAND = /^(install|i|add|exec|x|dlx|tool|pip|run|global)$/;
+const VALUE_FLAG = /^(--prefix|-C|--dir|--cwd|--workspace|--filter|--registry|--cache|--userconfig)$/i;
 export function normalize(part) {
   let s = part.trim(), prev;
   do { prev = s; s = s.replace(WRAPPER, '').trim(); } while (s !== prev);
@@ -81,7 +93,10 @@ export function normalize(part) {
   const t = s.split(/\s+/);
   if (/^(npm|pnpm|yarn|bun|uv)$/i.test(t[0])) {
     let i = 1;
-    while (i < t.length && t[i].startsWith('-')) i += !t[i].includes('=') && t[i + 1] && !t[i + 1].startsWith('-') && !SUBCOMMAND.test(t[i + 1]) ? 2 : 1;
+    // A flag known to take a value always skips it (npm --prefix x i: x is a folder, not the exec subcommand)
+    while (i < t.length && t[i].startsWith('-')) i += VALUE_FLAG.test(t[i]) || (!t[i].includes('=') && t[i + 1] && !t[i + 1].startsWith('-') && !SUBCOMMAND.test(t[i + 1])) ? 2 : 1;
+    // yarn workspace <name> add x: the workspace name is not the subcommand
+    if (/^yarn$/i.test(t[0]) && /^workspace$/i.test(t[i] ?? '')) i += 2;
     s = [t[0], ...t.slice(i)].join(' ');
   }
   return s;
@@ -124,6 +139,15 @@ export function findPackages(command) {
       }
       continue;
     }
+    if (match[2] === 'create') {
+      const name = createName(args.find((a) => !a.startsWith('-')) ?? '');
+      if (name) result.push({ eco, name });
+      continue;
+    }
+    if (match[2] === 'deno') {
+      for (const a of args) if (/^npm:/i.test(a)) { const name = npmName(a.slice(4)); if (name) result.push({ eco, name }); }
+      continue;
+    }
     for (let i = 0; i < args.length; i++) {
       const a = args[i];
       if (a.startsWith('-')) {

package/.claude/i18n/tr.json

@@ -397,6 +397,7 @@
   "guard.destructive.envShell": "Komut bir .env dosyasını (sırlar) anıyor. AI onu okumaz, yazmaz; gerekirse kullanıcı yapar. Kullanıcı onayı gerekli.",
   "guard.destructive.gitOutput": "git çıktısını komutun seçtiği bir dosyaya yazıyor (--output / format-patch -o); bir koruma, test ya da ayar dosyasını ezebilir. Kullanıcı onayı gerekli.",
   "guard.destructive.boardShell": "docs/workflow/board.md (kurul üyeleri, commit incelemesi anahtarı) kabuktan değiştiriliyor. Dosya araçlarını kullan; yoksa kullanıcı onayı gerekli.",
+  "guard.destructive.perm.push": "Uzak depoya gönderiliyor (gönderilen dal yayına çıkabilir)",
   "guard.destructive.perm.freezeOff": "Düzenleme kilidi kaldırılıyor",
   "guard.destructive.perm.toolsCommands": "Paylaşılan .claude/settings.json → skillOverrides değişiyor (komut listesi)",
   "guard.destructive.perm.planAdd": "Onaylı planın dosya listesi genişliyor (kapsam kalkanı)",

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.8-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.10-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-ready-d97757?style=flat-square">
   <img alt="Also Codex and Antigravity" src="https://img.shields.io/badge/also-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/README.tr.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.8-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.10-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="Lisans: MIT" src="https://img.shields.io/badge/lisans-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-haz%C4%B1r-d97757?style=flat-square">
   <img alt="Codex ve Antigravity" src="https://img.shields.io/badge/ayr%C4%B1ca-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/kit/CHANGELOG.md

@@ -3,6 +3,20 @@
 The kit version is in `kit/VERSION`. To update a project, run `/kit-update` in it.
 Items with an "Adapt by hand" note concern files owned by the project; the update does not touch them.
 
+## [3.49.10] - 2026-10-30
+
+### Security
+- **The package gate checks more install commands:** `npm create <x>` / `npm init <x>` (and the pnpm, yarn, bun versions) check the `create-<x>` package they download and run; `pipx install`, `uv tool install`, `pdm add`, `pipenv install`, a bare `expo install` and Deno `npm:` specifiers are checked too.
+- Flags before the subcommand no longer hide the package: `npm --prefix x i`, `pnpm -C x add`, `yarn --cwd x add`, `yarn workspace web add`, `pip --quiet install`, `py -m pip install`, `python3.12 -m pip install`.
+
+## [3.49.9] - 2026-10-30
+
+### Security
+- **More production deploys ask you:** `firebase deploy`, `wrangler deploy`/`publish`/`pages deploy`, `gcloud app deploy`, `serverless deploy`, `cdk deploy`, `pulumi up`, `amplify push`, `terraform apply`, `expo publish`, `eas build --auto-submit`, and `netlify deploy --prod` through `npx netlify-cli`.
+- **More data deletion is blocked:** `heroku pg:reset`, MongoDB `dropDatabase()`/`dropCollection()`/`deleteMany({})`, Laravel `migrate:fresh`/`refresh`/`reset`, TypeORM `schema:drop`, Knex `migrate:rollback --all`, `prisma db push --accept-data-loss`, and `terraform`/`tofu`/`pulumi destroy`.
+- On Codex and Antigravity every `git push` asks, as it already did in Claude Code: a pushed branch can deploy.
+- The structure guard blocks more clutter names in new projects: `a.old.ts`, `a.bak.ts`, `a.backup.ts`, `a-copy.ts`, `a (1).ts`, `Copy of a.ts`, `old/`, `backup/`, editor swap files (`.swp`, `.rej`, `.sav`) and OS files (`.DS_Store`, `Thumbs.db`).
+
 ## [3.49.8] - 2026-10-30
 
 ### Security

package/kit/VERSION

@@ -1 +1 @@
-3.49.8
+3.49.10

package/kit/guide.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.8</b> Starter kit for Claude Code · MIT</span>
+      <span class="pill"><b>v3.49.10</b> Starter kit for Claude Code · MIT</span>
       <h1>The AI builds.<br><em>You steer.</em></h1>
       <p class="sub">TillerHand takes a product from idea to production and maintenance with Claude Code. At every important decision the AI gives you the options, its recommendation and the cost of each option. An expert board reviews the work, and guardrails stop mistakes before they happen.</p>
       <div class="setup">
@@ -1241,7 +1241,7 @@ Next: G-013 password reset · pending decision: email service</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Version 3.49.8 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
+    <span>Version 3.49.10 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
   </div>
 </footer>
 

package/kit/guide.tr.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.8</b> Claude Code için başlangıç kiti · MIT</span>
+      <span class="pill"><b>v3.49.10</b> Claude Code için başlangıç kiti · MIT</span>
       <h1>Kodu AI yazar.<br><em>Dümen sende.</em></h1>
       <p class="sub">TillerHand, Claude Code ile bir ürünü fikirden canlıya ve bakıma kadar götürür. Her önemli kararda AI sana seçenekleri, önerisini ve her seçeneğin bedelini sunar. Bir uzman kurulu işi denetler, korumalar hatayı daha olmadan durdurur.</p>
       <div class="setup">
@@ -1245,7 +1245,7 @@ Sıradaki: G-013 şifre sıfırlama · bekleyen karar: e-posta servisi</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Sürüm 3.49.8 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
+    <span>Sürüm 3.49.10 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
   </div>
 </footer>
 

package/kit/templates/backend/.claude/structure.json

@@ -55,7 +55,6 @@
     "CLAUDE-SECURITY-*/**"
   ],
   "deny": [
-    "**/*.bak",
     "**/*.orig",
     "**/*.tmp",
     "**/*~",
@@ -69,6 +68,25 @@
     "**/tmp/**",
     "**/untitled*",
     "**/test.*",
-    "**/deneme*"
+    "**/deneme*",
+    "**/*.bak*",
+    "**/*.old",
+    "**/*.old.*",
+    "**/*_bak.*",
+    "**/*.backup.*",
+    "**/*-backup.*",
+    "**/*_backup.*",
+    "**/*-copy.*",
+    "**/*-copy?.*",
+    "**/*_copy.*",
+    "**/* (?).*",
+    "**/Copy of *",
+    "**/old/**",
+    "**/backup/**",
+    "**/*.sav",
+    "**/*.swp",
+    "**/*.rej",
+    "**/.DS_Store",
+    "**/Thumbs.db"
   ]
 }

package/kit/templates/mobile/.claude/structure.json

@@ -66,7 +66,6 @@
     "CLAUDE-SECURITY-*/**"
   ],
   "deny": [
-    "**/*.bak",
     "**/*.orig",
     "**/*.tmp",
     "**/*~",
@@ -80,6 +79,25 @@
     "**/tmp/**",
     "**/untitled*",
     "**/test.*",
-    "**/deneme*"
+    "**/deneme*",
+    "**/*.bak*",
+    "**/*.old",
+    "**/*.old.*",
+    "**/*_bak.*",
+    "**/*.backup.*",
+    "**/*-backup.*",
+    "**/*_backup.*",
+    "**/*-copy.*",
+    "**/*-copy?.*",
+    "**/*_copy.*",
+    "**/* (?).*",
+    "**/Copy of *",
+    "**/old/**",
+    "**/backup/**",
+    "**/*.sav",
+    "**/*.swp",
+    "**/*.rej",
+    "**/.DS_Store",
+    "**/Thumbs.db"
   ]
 }

package/kit/templates/web-saas/.claude/structure.json

@@ -71,7 +71,6 @@
     "CLAUDE-SECURITY-*/**"
   ],
   "deny": [
-    "**/*.bak",
     "**/*.orig",
     "**/*.tmp",
     "**/*~",
@@ -85,6 +84,25 @@
     "**/tmp/**",
     "**/untitled*",
     "**/test.*",
-    "**/deneme*"
+    "**/deneme*",
+    "**/*.bak*",
+    "**/*.old",
+    "**/*.old.*",
+    "**/*_bak.*",
+    "**/*.backup.*",
+    "**/*-backup.*",
+    "**/*_backup.*",
+    "**/*-copy.*",
+    "**/*-copy?.*",
+    "**/*_copy.*",
+    "**/* (?).*",
+    "**/Copy of *",
+    "**/old/**",
+    "**/backup/**",
+    "**/*.sav",
+    "**/*.swp",
+    "**/*.rej",
+    "**/.DS_Store",
+    "**/Thumbs.db"
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tillerhand",
-  "version": "3.49.8",
+  "version": "3.49.10",
   "description": "Vibe coding kit for Claude Code, Codex and Antigravity: rules, commands, guards and project templates.",
   "license": "MIT",
   "type": "module",