tillerhand 3.49.9 → 3.49.11

package/.claude/hooks/messages.mjs

@@ -446,6 +446,7 @@ export const MESSAGES = {
   'guard.package.timeout': { en: 'could not be verified (timeout)' },
   'guard.package.network': { en: 'could not be verified (network error)' },
   'guard.package.tooMany': { en: 'Package gate: {count} packages in one command (more than {max}) are not checked one by one. User approval required.' },
+  'guard.package.depFileUnclear': { en: 'Package gate: the new dependencies in {path} could not be read (the file does not parse or the edit cannot be placed). User approval required.' },
   'guard.package.error': { en: 'The package gate could not check this command ({error}). User approval required.' },
   'guard.package.ask': { en: 'Package gate warning: {list}. Before installing, make sure the package is really the one you want.' },
   'guard.structure.offMap': { en: '"{rel}" is not in the structure map (.claude/structure.json). The right place is probably one of: {top}. If it is temporary or a trial, write it under sandbox/. If a new permanent place is needed, ask it as a technical decision and update the map (docs/architecture/structure.md).' },

package/.claude/hooks/package-gate.mjs

@@ -8,6 +8,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { readInput, decide, isMain, findRoot } from './shared.mjs';
+import { boardAfter } from './freeze-guard.mjs';
 import { t } from './lang.mjs';
 
 export const THRESHOLD = { newDays: 30, npmWeeklyDownloads: 500 };
@@ -26,9 +27,20 @@ const POPULAR = {
 
 // Case-insensitive (the Windows shell is); npm's install aliases (in, ins, isntall, it…) count as install
 const COMMANDS = [
-  [/^(npm|pnpm|bun)\s+(i|in|ins|inst|insta|instal|install|isnt|isnta|isntal|isntall|it|add)\b/i, 'npm'], [/^yarn\s+(global\s+)?add\b/i, 'npm'], [/^npx\s+expo\s+install\b/i, 'npm'],
-  [/^uv\s+(add|pip\s+install)\b/i, 'pypi'], [/^(python3?\s+-m\s+)?pip3?\s+install\b/i, 'pypi'], [/^poetry\s+add\b/i, 'pypi'],
+  [/^(npm|pnpm|bun)\s+(i|in|ins|inst|insta|instal|install|isnt|isnta|isntal|isntall|it|add)\b/i, 'npm'], [/^yarn\s+(global\s+)?add\b/i, 'npm'], [/^(npx\s+)?expo\s+install\b/i, 'npm'],
+  // create/init <name> downloads and runs create-<name>; deno takes npm:<name> specifiers
+  [/^(npm|pnpm|yarn|bun)\s+(create|init)\b/i, 'npm', 'create'], [/^deno\s+(add|install|run|x)\b/i, 'npm', 'deno'],
+  [/^uv\s+(add|pip\s+install|tool\s+install)\b/i, 'pypi'], [/^((python[\d.]*|py)(\s+-\d[\d.]*)?\s+-m\s+)?pip[\d.]*(\s+-\S+)*\s+install\b/i, 'pypi'],
+  [/^(poetry|pdm)\s+add\b|^(pipenv|pipx)\s+install\b/i, 'pypi'],
 ];
+// create-vite for vite, @scope/create for @scope, @scope/create-x for @scope/x (npm's own mapping)
+function createName(arg) {
+  const n = npmName(arg);
+  if (!n) return null;
+  if (!n.startsWith('@')) return `create-${n}`;
+  const [scope, rest] = n.split('/');
+  return rest ? `${scope}/create-${rest}` : `${scope}/create`;
+}
 
 // Download-and-run: the first positional is the package (the rest are its arguments), or the values of the package flags.
 // local: the runner uses a bin the project already has before downloading (npx, npm exec, bunx); pnpm/yarn dlx always download.
@@ -72,6 +84,7 @@ function execArgs(args, eco, positional) {
 // Also timeout/nice/stdbuf, shell keywords (then, do, else, !) and combined shell flags (bash -lc).
 const WRAPPER = /^(?:\(|\{|!\s*|[A-Za-z_]\w*=\S*\s+|(?:sudo|env|time|nohup|exec|command|xargs|corepack|call|start|then|do|else|ionice|stdbuf)\s+|timeout\s+(?:-\S+\s+)*\S+\s+|nice\s+(?:-n\s*\S+\s+|-\d+\s+)?|(?:bash|sh|zsh|dash|cmd|pwsh|powershell)(?:\.exe)?\s+(?:-\w*c|\/c|\/k|-Command)\s+["']?)/i;
 const SUBCOMMAND = /^(install|i|add|exec|x|dlx|tool|pip|run|global)$/;
+const VALUE_FLAG = /^(--prefix|-C|--dir|--cwd|--workspace|--filter|--registry|--cache|--userconfig)$/i;
 export function normalize(part) {
   let s = part.trim(), prev;
   do { prev = s; s = s.replace(WRAPPER, '').trim(); } while (s !== prev);
@@ -81,7 +94,10 @@ export function normalize(part) {
   const t = s.split(/\s+/);
   if (/^(npm|pnpm|yarn|bun|uv)$/i.test(t[0])) {
     let i = 1;
-    while (i < t.length && t[i].startsWith('-')) i += !t[i].includes('=') && t[i + 1] && !t[i + 1].startsWith('-') && !SUBCOMMAND.test(t[i + 1]) ? 2 : 1;
+    // A flag known to take a value always skips it (npm --prefix x i: x is a folder, not the exec subcommand)
+    while (i < t.length && t[i].startsWith('-')) i += VALUE_FLAG.test(t[i]) || (!t[i].includes('=') && t[i + 1] && !t[i + 1].startsWith('-') && !SUBCOMMAND.test(t[i + 1])) ? 2 : 1;
+    // yarn workspace <name> add x: the workspace name is not the subcommand
+    if (/^yarn$/i.test(t[0]) && /^workspace$/i.test(t[i] ?? '')) i += 2;
     s = [t[0], ...t.slice(i)].join(' ');
   }
   return s;
@@ -124,6 +140,15 @@ export function findPackages(command) {
       }
       continue;
     }
+    if (match[2] === 'create') {
+      const name = createName(args.find((a) => !a.startsWith('-')) ?? '');
+      if (name) result.push({ eco, name });
+      continue;
+    }
+    if (match[2] === 'deno') {
+      for (const a of args) if (/^npm:/i.test(a)) { const name = npmName(a.slice(4)); if (name) result.push({ eco, name }); }
+      continue;
+    }
     for (let i = 0; i < args.length; i++) {
       const a = args[i];
       if (a.startsWith('-')) {
@@ -137,6 +162,48 @@ export function findPackages(command) {
   return result;
 }
 
+// Dependency files written with a file tool: the names the write ADDS are checked like an install (user decision
+// 2026-10-30), so "edit package.json, then a bare npm ci" cannot skip the gate. null: the result does not parse (asked).
+const DEP_FILE = /(^|\/)(package\.json|pyproject\.toml|requirements[^/]*\.txt|requirements\/[^/]+\.txt)$/i;
+const NPM_SECTIONS = ['dependencies', 'devDependencies', 'optionalDependencies', 'peerDependencies'];
+// An npm: alias installs its target: "x": "npm:evil@1" adds evil
+const npmDeps = (j) => new Set(NPM_SECTIONS.flatMap((k) => Object.entries(j?.[k] && typeof j[k] === 'object' ? j[k] : {})
+  .map(([n, v]) => (typeof v === 'string' && /^npm:/i.test(v) ? npmName(v.slice(4)) : n))).filter(Boolean));
+const requirementNames = (text) => new Set(text.split(/\r?\n/).map((s) => s.trim())
+  .filter((s) => s && !s.startsWith('#') && !s.startsWith('-')).map(pypiName).filter(Boolean));
+function pyprojectNames(text) {
+  const names = new Set();
+  let section = '', inArray = false;
+  for (const raw of text.split(/\r?\n/)) {
+    const line = raw.trim();
+    const head = line.match(/^\[([^\]"']+)\]$/);
+    if (head) { section = head[1].trim(); inArray = false; continue; }
+    if (section === 'project') {
+      if (/^dependencies\s*=\s*\[/.test(line)) inArray = true;
+      if (!inArray) continue;
+      for (const m of line.matchAll(/["']([^"']+)["']/g)) { const n = pypiName(m[1]); if (n) names.add(n); }
+      if (line.includes(']')) inArray = false;
+    } else if (/^tool\.poetry(\.group\.[\w-]+)?\.(dev-)?dependencies$/.test(section)) {
+      const k = line.match(/^["']?([A-Za-z0-9][\w.-]*)["']?\s*=/);
+      if (k && k[1].toLowerCase() !== 'python') names.add(k[1].toLowerCase());
+    }
+  }
+  return names;
+}
+export function addedDependencies(file, before, after) {
+  const rel = file.replace(/\\/g, '/');
+  const added = (eco, a, b) => [...a].filter((n) => !b.has(n)).map((name) => ({ eco, name }));
+  if (/(^|\/)package\.json$/i.test(rel)) {
+    let a, b = {};
+    try { a = JSON.parse(after); } catch { return null; }
+    try { b = JSON.parse(before || '{}'); } catch { /* a broken file before: every name counts as added */ }
+    return added('npm', npmDeps(a), npmDeps(b));
+  }
+  if (/(^|\/)requirements[^/]*\.txt$|(^|\/)requirements\/[^/]+\.txt$/i.test(rel)) return added('pypi', requirementNames(after), requirementNames(before));
+  if (/(^|\/)pyproject\.toml$/i.test(rel)) return added('pypi', pyprojectNames(after), pyprojectNames(before));
+  return [];
+}
+
 function distance(a, b) {
   const d = Array.from({ length: a.length + 1 }, (_, i) => [i, ...Array(b.length).fill(0)]);
   for (let j = 1; j <= b.length; j++) d[0][j] = j;
@@ -205,6 +272,15 @@ async function gate(g) {
   // The kit's own package (/start and /adopt run npx -y tillerhand@<version> install): the kit already trusts itself
   // Both only for the plain spelling: name@1.2 or name@npm:other downloads, it does not run the local bin or the kit's release
   const packages = findPackages(g.command).filter((p) => !(p.local && p.spec === p.name && bin(p.name)) && !(p.eco === 'npm' && /^tillerhand(@\d+\.\d+\.\d+)?$/.test(p.spec ?? '')));
+  for (const f of g.files) {
+    if (!DEP_FILE.test(String(f.path).replace(/\\/g, '/'))) continue;
+    const full = path.resolve(g.dir, f.path);
+    let disk = ''; try { disk = fs.readFileSync(full, 'utf8'); } catch { /* new file */ }
+    const after = boardAfter(disk, f);
+    const added = after === null ? null : addedDependencies(f.path, disk, after);
+    if (added === null) decide(g.tool, 'ask', t(g.root, 'guard.package.depFileUnclear', { path: f.path }));
+    packages.push(...added);
+  }
   if (!packages.length) return;
   if (packages.length > MAX_PACKAGES) decide(g.tool, 'ask', t(g.root, 'guard.package.tooMany', { count: packages.length, max: MAX_PACKAGES }));
   const results = await Promise.all(packages.map(async (p) => ({ ...p, ...(await check(p)) })));

package/.claude/i18n/tr.json

@@ -443,6 +443,7 @@
   "guard.package.timeout": "doğrulanamadı (zaman aşımı)",
   "guard.package.network": "doğrulanamadı (ağ hatası)",
   "guard.package.tooMany": "Paket kapısı: tek komutta {count} paket var ({max} sınırının üstünde), tek tek denetlenmiyor. Kullanıcı onayı gerekli.",
+  "guard.package.depFileUnclear": "Paket kapısı: {path} içindeki yeni bağımlılıklar okunamadı (dosya ayrıştırılamıyor ya da düzenleme yerleştirilemiyor). Kullanıcı onayı gerekli.",
   "guard.package.error": "Paket kapısı bu komutu denetleyemedi ({error}). Kullanıcı onayı gerekli.",
   "guard.package.ask": "Paket kapısı uyarısı: {list}. Kurmadan önce paketin gerçekten istenen paket olduğundan emin ol.",
   "guard.structure.offMap": "\"{rel}\" yapı haritasında yok (.claude/structure.json). Doğru yer muhtemelen şunlardan biri: {top}. Geçici veya deneme ise sandbox/ altına yaz. Kalıcı yeni bir yer gerekiyorsa bunu teknik karar olarak sor ve haritayı güncelle (docs/architecture/structure.md).",

package/.claude/settings.json

@@ -113,6 +113,11 @@
           {
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/test-guard.mjs\""
+          },
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/package-gate.mjs\"",
+            "timeout": 30
           }
         ]
       },

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.9-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.49.11-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-ready-d97757?style=flat-square">
   <img alt="Also Codex and Antigravity" src="https://img.shields.io/badge/also-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/README.tr.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.9-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.49.11-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="Lisans: MIT" src="https://img.shields.io/badge/lisans-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-haz%C4%B1r-d97757?style=flat-square">
   <img alt="Codex ve Antigravity" src="https://img.shields.io/badge/ayr%C4%B1ca-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">

package/kit/CHANGELOG.md

@@ -3,6 +3,17 @@
 The kit version is in `kit/VERSION`. To update a project, run `/kit-update` in it.
 Items with an "Adapt by hand" note concern files owned by the project; the update does not touch them.
 
+## [3.49.11] - 2026-10-30
+
+### Security
+- **The package gate also checks dependency files.** When the AI adds a dependency to `package.json` (any section, an `npm:` alias's target too), `requirements*.txt` or `pyproject.toml` (`[project] dependencies`, Poetry dependency tables) with a file tool, the new names are checked like an install: a missing package is blocked, a new, rarely downloaded or look-alike one is asked. Before, editing `package.json` and then running a bare `npm ci` skipped the gate. Version changes and other fields are not checked. Runs on Claude Code, Codex and Antigravity; a file that does not parse after the write asks.
+
+## [3.49.10] - 2026-10-30
+
+### Security
+- **The package gate checks more install commands:** `npm create <x>` / `npm init <x>` (and the pnpm, yarn, bun versions) check the `create-<x>` package they download and run; `pipx install`, `uv tool install`, `pdm add`, `pipenv install`, a bare `expo install` and Deno `npm:` specifiers are checked too.
+- Flags before the subcommand no longer hide the package: `npm --prefix x i`, `pnpm -C x add`, `yarn --cwd x add`, `yarn workspace web add`, `pip --quiet install`, `py -m pip install`, `python3.12 -m pip install`.
+
 ## [3.49.9] - 2026-10-30
 
 ### Security

package/kit/VERSION

@@ -1 +1 @@
-3.49.9
+3.49.11

package/kit/guide.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.9</b> Starter kit for Claude Code · MIT</span>
+      <span class="pill"><b>v3.49.11</b> Starter kit for Claude Code · MIT</span>
       <h1>The AI builds.<br><em>You steer.</em></h1>
       <p class="sub">TillerHand takes a product from idea to production and maintenance with Claude Code. At every important decision the AI gives you the options, its recommendation and the cost of each option. An expert board reviews the work, and guardrails stop mistakes before they happen.</p>
       <div class="setup">
@@ -1241,7 +1241,7 @@ Next: G-013 password reset · pending decision: email service</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Version 3.49.9 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
+    <span>Version 3.49.11 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
   </div>
 </footer>
 

package/kit/guide.tr.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.49.9</b> Claude Code için başlangıç kiti · MIT</span>
+      <span class="pill"><b>v3.49.11</b> Claude Code için başlangıç kiti · MIT</span>
       <h1>Kodu AI yazar.<br><em>Dümen sende.</em></h1>
       <p class="sub">TillerHand, Claude Code ile bir ürünü fikirden canlıya ve bakıma kadar götürür. Her önemli kararda AI sana seçenekleri, önerisini ve her seçeneğin bedelini sunar. Bir uzman kurulu işi denetler, korumalar hatayı daha olmadan durdurur.</p>
       <div class="setup">
@@ -1245,7 +1245,7 @@ Sıradaki: G-013 şifre sıfırlama · bekleyen karar: e-posta servisi</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Sürüm 3.49.9 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
+    <span>Sürüm 3.49.11 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
   </div>
 </footer>
 

package/kit/tools/antigravity/.agents/hooks.json

@@ -12,7 +12,8 @@
           { "type": "command", "command": "node .claude/hooks/guard-secrets.mjs" },
           { "type": "command", "command": "node .claude/hooks/freeze-guard.mjs" },
           { "type": "command", "command": "node .claude/hooks/structure-guard.mjs" },
-          { "type": "command", "command": "node .claude/hooks/test-guard.mjs" }
+          { "type": "command", "command": "node .claude/hooks/test-guard.mjs" },
+          { "type": "command", "command": "node .claude/hooks/package-gate.mjs", "timeout": 30 }
         ]
       }
     ]

package/kit/tools/codex/.codex/hooks.json

@@ -15,7 +15,8 @@
           { "type": "command", "command": "node \"$(git rev-parse --show-toplevel)/.claude/hooks/guard-secrets.mjs\"", "commandWindows": "node .claude/hooks/guard-secrets.mjs" },
           { "type": "command", "command": "node \"$(git rev-parse --show-toplevel)/.claude/hooks/freeze-guard.mjs\"", "commandWindows": "node .claude/hooks/freeze-guard.mjs" },
           { "type": "command", "command": "node \"$(git rev-parse --show-toplevel)/.claude/hooks/structure-guard.mjs\"", "commandWindows": "node .claude/hooks/structure-guard.mjs" },
-          { "type": "command", "command": "node \"$(git rev-parse --show-toplevel)/.claude/hooks/test-guard.mjs\"", "commandWindows": "node .claude/hooks/test-guard.mjs" }
+          { "type": "command", "command": "node \"$(git rev-parse --show-toplevel)/.claude/hooks/test-guard.mjs\"", "commandWindows": "node .claude/hooks/test-guard.mjs" },
+          { "type": "command", "command": "node \"$(git rev-parse --show-toplevel)/.claude/hooks/package-gate.mjs\"", "commandWindows": "node .claude/hooks/package-gate.mjs", "timeout": 30 }
         ]
       },
       {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tillerhand",
-  "version": "3.49.9",
+  "version": "3.49.11",
   "description": "Vibe coding kit for Claude Code, Codex and Antigravity: rules, commands, guards and project templates.",
   "license": "MIT",
   "type": "module",