tillerhand 3.50.0 → 3.51.0

package/.claude/hooks/commit-gate.mjs

@@ -3,6 +3,8 @@
 //   PreToolUse (Bash) hook: without review approval it stops the commit with exit code 2 and says what to do.
 //   node .claude/hooks/commit-gate.mjs --approve "<members who took part, or a note>"   binds the approval to the current changes.
 //   node .claude/hooks/commit-gate.mjs --skip "<reason>"   only when the user asks: skips the board and the gate (always asked).
+// Commands that make commits with no working-tree change to review (git merge, git revert…) and git calls the text cannot
+// read ($g commit, git $(echo commit)) have nothing to bind an approval to: the user is asked.
 // Exempt: no board set up, "Commit review: off" in docs/workflow/board.md, or only docs changed.
 // Commits the user makes from their own terminal are not affected (this is a Claude Code hook).
 import fs from 'node:fs';
@@ -11,14 +13,14 @@ import crypto from 'node:crypto';
 import { execSync } from 'node:child_process';
 import { findRoot, isMain, reviewOff, parseInput, decisionText } from './shared.mjs';
 import { t } from './lang.mjs';
-import { unquote } from './destructive-guard.mjs';
+import { unquote, MAX_COMMAND } from './destructive-guard.mjs';
 import { isTestFile, isTestConfig, digest, readRecord } from './test-guard.mjs';
 import { isCodeFile } from './edit-rounds.mjs';
 
 // Project root (the script's location) even when called from a subfolder: approval and gate must not be written elsewhere
 const root = findRoot();
 const approvalFile = path.join(root, '.claude', 'state', 'commit-approval.json');
-const git = (c) => execSync(`git ${c}`, { cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], maxBuffer: 64 * 1024 * 1024 });
+const git = (c) => execSync(`git ${c}`, { cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], maxBuffer: 64 * 1024 * 1024, timeout: 20000 });
 
 // Changes that will go into the commit: staged, unstaged in tracked files (git commit -a) and untracked new
 // files (git add -A && git commit). -z: non-ASCII or spaced paths are not quoted and escaped
@@ -56,8 +58,28 @@ export function changes() {
 export const sinceApproval = (approval, d) => d.files.filter((f) => !approval?.hashes || !Object.hasOwn(approval.hashes, f) || approval.hashes[f] !== d.hashes[f]);
 
 // git's global options may come before commit: git --no-pager commit, git -C x commit, git --git-dir=x commit; git.exe on Windows
-const commitRe = (verbs) => new RegExp(`\\bgit(?:\\.exe)?["']?(?:\\s+(?:-[cC]\\s+\\S+|--?[\\w-]+(?:=\\S+)?))*\\s+(?:${verbs.join('|')})(?=\\s|$|["';&|)])`);
+// Every option has one reading: with two, "-c -c -c …" or "--a --a --a …" backtracks exponentially, and a hook that times out lets the command run.
+const VALUE_OPTIONS = '(?:-[cC]|--(?:git-dir|work-tree|namespace|exec-path|super-prefix|config-env|attr-source))';
+// One shell word: git -C "my dir" commit, git -c user.name='A B' commit, git -C my\ dir commit
+const WORD = `(?:"[^"]*"|'[^']*'|\\\\.|[^\\s"'\\\\])+`;
+const GLOBALS = `(?:\\s+(?:${VALUE_OPTIONS}\\s+${WORD}|(?!${VALUE_OPTIONS}\\s)-[\\w-]+(?:=${WORD})?))*`;
+const VERB_END = '(?=\\s|$|["\';&|)])';
+// i: Windows runs GIT.exe as git. $GIT is a variable, not git by name.
+const commitRe = (verbs) => new RegExp(`(?<!\\$)\\bgit(?:\\.exe)?["']?${GLOBALS}\\s+["']?(?:${verbs.join('|')})${VERB_END}`, 'i');
 const COMMIT = commitRe(['commit']);
+// shortcut: these rules read text, so a quoted mention (grep "git merge") also asks; a script file, xargs git, base64 | sh or a mixed-quote spelling (git -C "a b" c"ommit") is not seen; a git hook would close that.
+const MAKES_COMMITS = ['merge', 'cherry-pick', 'revert', 'am', 'rebase', 'commit-tree', 'fast-import'];
+const OTHER_COMMIT = [
+  // git merge, git $(echo commit), git "$@"
+  commitRe([...MAKES_COMMITS, '[$`%@]\\S*']),
+  // $g commit, $(which git) merge, %g% commit
+  new RegExp(`(?:\\$\\{?\\w+\\}?|\\$\\([^)\\n]{0,200}\\)|\`[^\`\\n]{0,200}\`|%\\w+%)["']?${GLOBALS}\\s+["']?(?:commit|${MAKES_COMMITS.join('|')})${VERB_END}`, 'i'),
+];
+// Backing out makes no commit, but only as a whole command: git merge x # --abort still merges
+const BACK_OUT = new RegExp(`\\bgit(?:\\.exe)?${GLOBALS}\\s+(?:merge|cherry-pick|revert|am|rebase)\\s+--(?:abort|quit)(?=\\s*(?:$|[;&|\\n]))`, 'gi');
+const makesOtherCommit = (command) => OTHER_COMMIT.some((re) => re.test(command.replace(BACK_OUT, '')));
+// These rules are not linear in the length, and a hook that times out lets the command run: a long command that names any of this is asked unread
+const GATE_WORDS = new RegExp(`git|commit|${MAKES_COMMITS.join('|')}|gate\\.mjs`, 'i');
 const escapeRe = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 
 // git aliases that run commit ([alias] ci = commit, cm = !git commit), from git config and from an inline -c alias.x=commit
@@ -184,20 +206,26 @@ function stop(reason) {
   process.exit(2);
 }
 
+const internalError = (e) => t(root, 'guard.commit.internalError', { error: String(e?.message ?? e).slice(0, 200) });
+
 async function hook() {
-  let command = '', dir = root;
+  let raw = '', dir = root;
   try {
     const g = parseInput(JSON.parse(fs.readFileSync(0, 'utf8')) ?? {});
     tool = g.tool;
-    // A backslash-newline is a line continuation: bash joins the words ("git comm\<newline>it" is git commit), the
-    // text rules may also need it as a space ("git commit\<newline>-m x"). Whichever spelling is a commit is checked.
-    const raw = String(g.command ?? '');
-    const joined = raw.replace(/\\\r?\n/g, '');
-    command = [joined, unquote(joined)].some((c) => commitPattern(joined).test(c)) ? joined : raw.replace(/\\\r?\n/g, ' ');
+    raw = String(g.command ?? '');
     if (g.dir) dir = g.dir;
   } catch {
     process.exit(0);
   }
+  if (raw.length > MAX_COMMAND) {
+    if ([raw, unquote(raw)].some((c) => GATE_WORDS.test(c))) decideOut('ask', t(root, 'guard.commit.tooLong'));
+    process.exit(0);
+  }
+  // A backslash-newline is a line continuation: bash joins the words ("git comm\<newline>it" is git commit), the
+  // text rules may also need it as a space ("git commit\<newline>-m x"). Whichever spelling is a commit is checked.
+  const joined = raw.replace(/\\\r?\n/g, '');
+  const command = [joined, unquote(joined)].some((c) => commitPattern(joined).test(c)) ? joined : raw.replace(/\\\r?\n/g, ' ');
   // --skip bypasses the gate and the board: the user is asked in every spelling (the AI must not write it on its own)
   // A commit whose message names --skip goes on to the commit checks below (a real --skip chained to a commit is stopped there).
   const open = unquote(command);
@@ -219,6 +247,8 @@ async function hook() {
     const note = unknown.length ? `\n${t(root, 'guard.commit.gateUnknownKeys', { keys: unknown.join(', ') })}` : '';
     decideOut('ask', t(root, 'guard.commit.gateApprovalAsk', { list }) + note);
   }
+  // A plain commit stays with the commit checks below: what its message names is text
+  if (!commit.test(command) && [command, open].some(makesOtherCommit) && hasBoard() && !boardReviewOff()) decideOut('ask', t(root, 'guard.commit.otherCommitAsk'));
   if (!commit.test(command) && !commit.test(open)) process.exit(0);
   if (!hasBoard() || boardReviewOff()) process.exit(0);
   const chain = chainIssue(command, commit.inline ? COMMIT : commit);
@@ -230,8 +260,8 @@ async function hook() {
   let d;
   try {
     d = changes();
-  } catch {
-    process.exit(0); // not a git repo
+  } catch (e) {
+    decideOut('ask', internalError(e)); // git failed or there is no repo: unread changes must not pass as reviewed
   }
   if (!d.files.length || docsOnly(d.files)) process.exit(0);
 
@@ -286,5 +316,5 @@ if (isMain(import.meta.url)) {
   if (i > -1) approve(process.argv[i + 1] || 'unspecified');
   else if (j > -1) save(`skipped: ${process.argv[j + 1] || 'user request'}`);
   else if (process.argv.includes('--status')) status();
-  else hook();
+  else hook().catch((e) => decideOut('ask', internalError(e))); // a crash exits 1, which does not block the commit
 }

package/.claude/hooks/messages.mjs

@@ -378,6 +378,9 @@ export const MESSAGES = {
   'dashboardData.prodRefAction': { en: '.mcp.json → dev ref (docs/operations/accounts.md → Environments)' },
   'dashboardData.rlsMissing': { en: 'Supabase is in use but there is no RLS attacker test (tests/security/rls.mjs).' },
   'dashboardData.rlsAction': { en: 'Get the template with /kit-update, add the tables to TABLES' },
+  'guard.commit.otherCommitAsk': { en: 'Commit gate: this command can make a commit the board review and the deterministic gate cannot check (merge, revert, cherry-pick, am, rebase, commit-tree, fast-import, or git called through a variable). Approve only if the user asked for it.' },
+  'guard.commit.internalError': { en: 'The commit gate could not check this command ({error}). User approval required.' },
+  'guard.commit.tooLong': { en: 'Commit gate: this command is too long to check and it names git or a commit. Approve only if the user asked for it.' },
   'guard.commit.skipAsk': { en: 'Commit gate: --skip bypasses the board review and the deterministic gate. Approve only if the user explicitly asks.' },
   'guard.commit.noCommands': { en: '(no commands defined)' },
   'guard.commit.gateApprovalAsk': { en: 'Gate command approval: from now on the gate runs these commands from AGENTS.md → Commands every time:\n{list}\nApprove only if you trust them.' },

package/.claude/i18n/tr.json

@@ -375,6 +375,9 @@
   "dashboardData.prodRefAction": ".mcp.json → dev ref (docs/operations/accounts.md → Environments)",
   "dashboardData.rlsMissing": "Supabase kullanılıyor ama RLS saldırgan testi yok (tests/security/rls.mjs).",
   "dashboardData.rlsAction": "/kit-update ile şablonu al, tabloları TABLES'a ekle",
+  "guard.commit.otherCommitAsk": "Commit kapısı: bu komut, kurul denetiminin ve deterministik kapının denetleyemeyeceği bir commit yapabilir (merge, revert, cherry-pick, am, rebase, commit-tree, fast-import veya değişkenle çağrılan git). Sadece kullanıcı istediyse onayla.",
+  "guard.commit.internalError": "Commit kapısı bu komutu denetleyemedi ({error}). Kullanıcı onayı gerekli.",
+  "guard.commit.tooLong": "Commit kapısı: bu komut denetlenemeyecek kadar uzun ve git veya commit geçiyor. Sadece kullanıcı istediyse onayla.",
   "guard.commit.skipAsk": "Commit kapısı: --skip kurul denetimini ve deterministik kapıyı aşar. Sadece kullanıcı açıkça isterse onayla.",
   "guard.commit.noCommands": "(tanımlı komut yok)",
   "guard.commit.gateApprovalAsk": "Kapı komut onayı: AGENTS.md → Commands bölümündeki şu komutlar bundan sonra her kapıda çalışır:\n{list}\nGüvendiğin komutlarsa onayla.",

package/.claude/settings.json

@@ -84,6 +84,11 @@
       "Bash(rm -rf:*)"
     ]
   },
+  "attribution": {
+    "commit": "",
+    "pr": "",
+    "sessionUrl": false
+  },
   "env": {
     "ENABLE_STOP_REVIEW": "0"
   },

package/AGENTS.md

@@ -21,9 +21,15 @@ This file holds the shared rules of the project. Claude Code, Codex and Antigrav
 
 ```
 ── Status ──────────────────────
-Phase: … · Task: … (x/y) · Question mode: … · Limit: 5h %… weekly %…
-Done: … · Board: … · Auto decisions: …
-Next: … · pending decision: …
+Phase: …
+Task: … (x/y)
+Question mode: …
+Limit: 5h %… weekly %…
+Done: …
+Board: …
+Auto decisions: …
+Next: …
+Pending decision: …
 ```
 
 9. **Know the user.** Follow the "Personal preferences" that arrive at session start (project rules come first). If the user corrects a behavior or says how they want to work (conversation, question frequency, report format, code style, things to avoid), note it briefly; do not break the flow. At the end of a task (`/build`) and at the end of a session (`/wrap-up`), ask about the notes with AskUserQuestion as a multi-select ("Save as a preference?"). Write the selected ones with `node .claude/hooks/prefs.mjs --add <conversation|questions|reports|code|avoid> "<preference>"`. Do not write without approval. Do not write secrets, personal data or the project name. A project-specific rule goes to "Learned rules", not to this file.

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.50.0-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Version" src="https://img.shields.io/badge/version-3.51.0-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-ready-d97757?style=flat-square">
   <img alt="Also Codex and Antigravity" src="https://img.shields.io/badge/also-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">
@@ -242,7 +242,7 @@ A new file outside the map is asked about, clutter like `*.bak` and `*-old.*` is
 | Test separation | Only the `test-writer` agent writes test files; the main session and the coding agent are blocked |
 | Test guard | Asks before a test is deleted, skipped or weakened |
 | Deterministic gate | No commit until lint, type check, tests and Semgrep have run; catches machine-specific paths written into code |
-| Commit gate | No commit without a board review and a green gate; a test file changed by a patch or a script stops it too |
+| Commit gate | No commit without a board review and a green gate; a test file changed by a patch or a script stops it too; merge, revert and other commands that make commits are asked |
 | Edit lock | With `/freeze <folder>` on, the AI writes only inside that folder |
 | Scope shield | Asks before writing to a file outside the approved plan |
 | Config approval | Rule and guard files never change without your approval |

package/README.tr.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.50.0-2a78d6?style=flat-square"></a>
+  <a href="kit/CHANGELOG.md"><img alt="Sürüm" src="https://img.shields.io/badge/s%C3%BCr%C3%BCm-3.51.0-2a78d6?style=flat-square"></a>
   <a href="LICENSE"><img alt="Lisans: MIT" src="https://img.shields.io/badge/lisans-MIT-2a78d6?style=flat-square"></a>
   <img alt="Claude Code" src="https://img.shields.io/badge/Claude%20Code-haz%C4%B1r-d97757?style=flat-square">
   <img alt="Codex ve Antigravity" src="https://img.shields.io/badge/ayr%C4%B1ca-Codex%20%C2%B7%20Antigravity-5b6577?style=flat-square">
@@ -242,7 +242,7 @@ Harita dışı yeni dosya sorulur, `*.bak` ve `*-old.*` gibi dağınıklık dosy
 | Test ayrımı | Test dosyasına yalnız `test-writer` ajanı yazar; ana oturum ve kod ajanı denerse engellenir |
 | Test koruması | Silinen, atlanan veya gevşetilen testi sorar |
 | Deterministik kapı | Lint, tip, test ve Semgrep çalışmadan commit açılmaz; koda yazılmış makineye özel yolu yakalar |
-| Commit kapısı | Kurul denetimi ve yeşil kapı olmadan commit atılmaz; patch veya betikle değişen test dosyası da durur |
+| Commit kapısı | Kurul denetimi ve yeşil kapı olmadan commit atılmaz; patch veya betikle değişen test dosyası da durur; merge, revert gibi commit üreten komutlar sorulur |
 | Düzenleme kilidi | `/freeze <klasör>` açıkken AI sadece o klasöre yazar |
 | Kapsam kalkanı | Onaylı planın dışındaki dosyaya yazım sorulur |
 | Yapılandırma onayı | Kural ve koruma dosyaları onayın olmadan değişmez |

package/docs/workflow/decision-protocol.md

@@ -80,14 +80,19 @@ Every `design` decision is asked with visuals. The user chooses an image, not te
 
 ## 6. Status block (at the end of every answer)
 
-In short, compressed language (caveman), at most 4 lines:
+In short, compressed language (caveman), one item per line:
 
 ```
 ── Status ─────────────────────────────
-Phase: Phase 1 · Task: G-012 (7/23) · Question mode: open · Limit: 5h %34 weekly %5
-Done: signup form + validation, tests green · Board: APPROVE (ux, qa)
+Phase: Phase 1
+Task: G-012 (7/23)
+Question mode: open
+Limit: 5h %34 weekly %5
+Done: signup form + validation, tests green
+Board: APPROVE (ux, qa)
 Auto decisions: none
-Next: G-013 password reset · pending decision: email service
+Next: G-013 password reset
+Pending decision: email service
 ```
 
 - Phase and task come from `docs/workflow/progress.md`; the task count is checked/total in `docs/product/roadmap.md`.

package/kit/CHANGELOG.md

@@ -3,6 +3,20 @@
 The kit version is in `kit/VERSION`. To update a project, run `/kit-update` in it.
 Items with an "Adapt by hand" note concern files owned by the project; the update does not touch them.
 
+## [3.51.0] - 2026-11-01
+
+### Changed
+- **The status block has one item per line.** Phase, task, question mode, limit, done, board, auto decisions, next and pending decision each get their own line, so the block reads at a glance.
+- **Commits and pull requests carry no AI attribution by default.** `.claude/settings.json` turns off the co-author line and the session link. This applies to Claude Code; Codex has no reliable local setting for it.
+
+## [3.50.1] - 2026-11-01
+
+### Fixed
+- **The commit gate now asks about other commands that make commits.** `git merge`, `cherry-pick`, `revert`, `am`, `rebase`, `commit-tree` and `fast-import` are asked even on a clean tree, since a review cannot be bound to them. So is git called in a way the text cannot show (`$g commit`, `git $(echo commit)`, `git "$@"`). On Codex, which has no question, the command is blocked and the user runs it. A lone `--abort` or `--quit` is not asked. A quoted mention such as `grep "git merge"` is also asked.
+- **An error inside the commit gate no longer lets a commit through.** When git fails, or the hook itself crashes, the command is asked instead of passing.
+- **Long or repetitive commands can no longer time the commit gate out.** Text such as `git --a --a --a …` made matching exponentially slow, and a hook that times out lets the command run. Matching no longer backtracks that way, and a command over 10 000 characters that names git or a commit is asked without being read.
+- **A global option's value no longer hides the subcommand.** `git -C "my dir" commit`, `git -c user.name="A B" commit`, `git --work-tree . commit` and `git --attr-source HEAD commit` used to pass as if they were not commits. `GIT commit` now counts as git too.
+
 ## [3.50.0] - 2026-10-30
 
 ### Added

package/kit/VERSION

@@ -1 +1 @@
-3.50.0
+3.51.0

package/kit/guide.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.50.0</b> Starter kit for Claude Code · MIT</span>
+      <span class="pill"><b>v3.51.0</b> Starter kit for Claude Code · MIT</span>
       <h1>The AI builds.<br><em>You steer.</em></h1>
       <p class="sub">TillerHand takes a product from idea to production and maintenance with Claude Code. At every important decision the AI gives you the options, its recommendation and the cost of each option. An expert board reviews the work, and guardrails stop mistakes before they happen.</p>
       <div class="setup">
@@ -512,9 +512,15 @@ an environment variable and add its name to .env.example with an empty value.
         <div class="window">
           <div class="bar"><i></i><i></i><i></i><span>At the end of every answer</span></div>
 <pre class="term">── Status ──────────────────────
-Phase: 1 · Task: G-012 (7/23) · Question mode: open · Limit: 5h 34% weekly 5%
-Done: signup form + validation, tests green · Board: <span class="g">APPROVE</span> (ux, qa) · Auto decisions: none
-Next: G-013 password reset · pending decision: email service</pre>
+Phase: 1
+Task: G-012 (7/23)
+Question mode: open
+Limit: 5h 34% weekly 5%
+Done: signup form + validation, tests green
+Board: <span class="g">APPROVE</span> (ux, qa)
+Auto decisions: none
+Next: G-013 password reset
+Pending decision: email service</pre>
         </div>
         <h3>You always know where you are</h3>
         <p>Phase, task, limit, the board's verdict and the next step at the end of every answer. When you come back after a break, your place is ready.</p>
@@ -948,7 +954,7 @@ npx tillerhand init
       <tr><td>Test separation</td><td>The tests are written before the code by a separate agent (<code>test-writer</code>, a different model is recommended), not by whoever writes the code. Nobody but this agent can write to a test file: the main session and the code agent are blocked if they try. A test file changed indirectly by a patch or script also stops at the commit gate. So whoever writes the code can't shape the test to fit their own code</td></tr>
       <tr><td>Test protection</td><td>Deleting or commenting out an assertion, <code>.skip</code>/<code>.only</code>, a loosened assertion, deleting or moving a test file, and narrowing coverage in the test config are asked; so is writing to a test file through the shell</td></tr>
       <tr><td>Deterministic gate</td><td><code>gate.mjs --run</code>: lint, type check, tests and Semgrep run; the output feeds the board, and a red check counts as REJECT. If the "must not change" behaviors in the spec have no test or the test is red, the gate is red. It is also red if an added line contains a path specific to this machine (the full path of the project folder or the home folder). A new or changed command is first shown to you for approval</td></tr>
-      <tr><td>Commit gate</td><td>No commit without a board review and a green gate for the same changes; the task-end approval also counts for the commit, so the same change is not reviewed twice; skipping the review (<code>--skip</code>) is asked every time</td></tr>
+      <tr><td>Commit gate</td><td>No commit without a board review and a green gate for the same changes; the task-end approval also counts for the commit, so the same change is not reviewed twice; skipping the review (<code>--skip</code>) and commands that make commits with nothing to review (<code>git merge</code>, <code>git revert</code>…) are asked every time</td></tr>
       <tr><td>Edit lock</td><td>While <code>/freeze &lt;folder&gt;</code> is on, the AI writes only to that folder; writing outside through the shell is asked, and a symlink can't escape it</td></tr>
       <tr><td>Scope shield</td><td>After <code>/plan-task</code> approval, the plan's file list is saved; writing to an existing file not on the list is asked. Turning the shield on and off is asked too</td></tr>
       <tr><td>Edit round counter</td><td>When the same code file is edited for the 5th and 10th time in a session, a Semgrep and security review reminder appears</td></tr>
@@ -1017,9 +1023,15 @@ AGENTS.md · CLAUDE.md · README.md · CHANGELOG.md</pre>
     <div>
       <h3 style="margin-top:0">At the end of every answer: the status block</h3>
 <pre class="term">── Status ──────────────────────
-Phase: 1 · Task: G-012 (7/23) · Question mode: open · Limit: 5h 34% weekly 5%
-Done: signup form + validation, tests green · Board: APPROVE (ux, qa) · Auto decisions: none
-Next: G-013 password reset · pending decision: email service</pre>
+Phase: 1
+Task: G-012 (7/23)
+Question mode: open
+Limit: 5h 34% weekly 5%
+Done: signup form + validation, tests green
+Board: APPROVE (ux, qa)
+Auto decisions: none
+Next: G-013 password reset
+Pending decision: email service</pre>
       <h3>Always: the status line</h3>
 <pre class="term">▶ Phase 1 · G-012 · task 7/23 · questions: open · 5h 34% · weekly 5% · context 42%</pre>
     </div>
@@ -1242,7 +1254,7 @@ Next: G-013 password reset · pending decision: email service</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Version 3.50.0 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
+    <span>Version 3.51.0 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT license</a> · The KVKK section is a checklist, not legal advice.</span>
   </div>
 </footer>
 

package/kit/guide.tr.html

@@ -361,7 +361,7 @@ footer .container { display: flex; flex-wrap: wrap; gap: 16px; justify-content:
 <section class="hero">
   <div class="container">
     <div>
-      <span class="pill"><b>v3.50.0</b> Claude Code için başlangıç kiti · MIT</span>
+      <span class="pill"><b>v3.51.0</b> Claude Code için başlangıç kiti · MIT</span>
       <h1>Kodu AI yazar.<br><em>Dümen sende.</em></h1>
       <p class="sub">TillerHand, Claude Code ile bir ürünü fikirden canlıya ve bakıma kadar götürür. Her önemli kararda AI sana seçenekleri, önerisini ve her seçeneğin bedelini sunar. Bir uzman kurulu işi denetler, korumalar hatayı daha olmadan durdurur.</p>
       <div class="setup">
@@ -512,10 +512,13 @@ ve adını .env.example'a boş değerle ekle.
         <div class="window">
           <div class="bar"><i></i><i></i><i></i><span>Her cevabın sonunda</span></div>
 <pre class="term">── Durum ─────────────────────────────
-Aşama: Faz 1 · Görev: G-012 (7/23)
-Soru modu: açık · Limit: 5s %34 hf %5
-Yapıldı: kayıt formu + doğrulama, test yeşil
+Faz: 1
+Görev: G-012 (7/23)
+Soru modu: açık
+Limit: 5s %34 hf %5
+Biten: kayıt formu + doğrulama, test yeşil
 Kurul: <span class="g">APPROVE</span> (ux, qa)
+Otomatik karar: yok
 Sıradaki: G-013 şifre sıfırlama
 Bekleyen karar: e-posta servisi</pre>
         </div>
@@ -951,7 +954,7 @@ npx tillerhand init
       <tr><td>Test ayrımı</td><td>Testleri kodu yazan değil, ayrı bir ajan (<code>test-writer</code>, farklı model önerilir) koddan önce yazar. Test dosyasına bu ajan dışında kimse yazamaz: ana oturum ve kod ajanı denerse engellenir. Patch veya betikle dolaylı değişen test dosyası da commit kapısında durur. Böylece kodu yazan testi kendi koduna göre şekillendiremez</td></tr>
       <tr><td>Test koruması</td><td>Beklenti silmek veya yoruma almak, <code>.skip</code>/<code>.only</code>, gevşek beklenti, test dosyasını silmek veya taşımak ve test ayarında kapsamı daraltmak sorulur; kabukla test dosyasına yazmak da</td></tr>
       <tr><td>Deterministik kapı</td><td><code>gate.mjs --run</code>: lint, tip kontrolü, test ve Semgrep çalışır; çıktı kurula girdi olur, kırmızı kontrol REJECT sayılır. Spec'teki "değişmemesi gereken" davranışların testi yoksa veya kırmızıysa kapı kırmızıdır. Eklenen bir satırda bu makineye özel bir yol (proje klasörünün ya da ev klasörünün tam yolu) varsa da kırmızıdır. Yeni veya değişen komut önce sana gösterilip onaylatılır</td></tr>
-      <tr><td>Commit kapısı</td><td>Kurul denetimi ve aynı değişiklikler için yeşil kapı olmadan commit atılmaz; görev sonu onayı commit için de geçerli, aynı değişiklik iki kez denetlenmez; denetimi atlamak (<code>--skip</code>) her seferinde sorulur</td></tr>
+      <tr><td>Commit kapısı</td><td>Kurul denetimi ve aynı değişiklikler için yeşil kapı olmadan commit atılmaz; görev sonu onayı commit için de geçerli, aynı değişiklik iki kez denetlenmez; denetimi atlamak (<code>--skip</code>) ve denetlenecek değişiklik olmadan commit üreten komutlar (<code>git merge</code>, <code>git revert</code>…) her seferinde sorulur</td></tr>
       <tr><td>Düzenleme kilidi</td><td><code>/freeze &lt;klasör&gt;</code> açıkken AI sadece o klasöre yazar; kabukla dışarı yazmak sorulur, sembolik bağdan kaçılamaz</td></tr>
       <tr><td>Kapsam kalkanı</td><td><code>/plan-task</code> onayından sonra planın dosya listesi kaydedilir; listede olmayan mevcut dosyaya yazım sorulur. Kalkanı açmak ve kapatmak da sorulur</td></tr>
       <tr><td>Düzenleme turu sayacı</td><td>Aynı kod dosyası bir oturumda 5., 10. kez düzenlenince Semgrep ve güvenlik incelemesi hatırlatılır</td></tr>
@@ -1020,10 +1023,15 @@ AGENTS.md · CLAUDE.md · README.md · CHANGELOG.md</pre>
     <div>
       <h3 style="margin-top:0">Her cevabın sonunda: durum bloğu</h3>
 <pre class="term">── Durum ─────────────────────────────
-Aşama: Faz 1 · Görev: G-012 (7/23) · Soru modu: açık · Limit: 5s %34 hf %5
-Yapıldı: kayıt formu + doğrulama, test yeşil · Kurul: APPROVE (ux, qa)
-Otomatik kararlar: yok
-Sıradaki: G-013 şifre sıfırlama · bekleyen karar: e-posta servisi</pre>
+Faz: 1
+Görev: G-012 (7/23)
+Soru modu: açık
+Limit: 5s %34 hf %5
+Biten: kayıt formu + doğrulama, test yeşil
+Kurul: APPROVE (ux, qa)
+Otomatik karar: yok
+Sıradaki: G-013 şifre sıfırlama
+Bekleyen karar: e-posta servisi</pre>
       <h3>Her zaman: alt durum çubuğu</h3>
 <pre class="term">▶ Faz 1 · G-012 · görev 7/23 · soru: açık · 5s %34 · hf %5 · bağlam %42</pre>
     </div>
@@ -1246,7 +1254,7 @@ Sıradaki: G-013 şifre sıfırlama · bekleyen karar: e-posta servisi</pre>
 <footer>
   <div class="container">
     <a class="brand" href="#top" style="font-size:16px"><svg class="mark" style="width:22px;height:22px"><use href="#mark"/></svg>TillerHand</a>
-    <span>Sürüm 3.50.0 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
+    <span>Sürüm 3.51.0 · <a href="https://github.com/burakdogrul/TillerHand">GitHub</a> · <a href="https://github.com/burakdogrul/TillerHand/blob/main/LICENSE">MIT lisansı</a> · KVKK bölümü kontrol listesidir, hukuki görüş değildir.</span>
   </div>
 </footer>
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tillerhand",
-  "version": "3.50.0",
+  "version": "3.51.0",
   "description": "Vibe coding kit for Claude Code, Codex and Antigravity: rules, commands, guards and project templates.",
   "license": "MIT",
   "type": "module",