wormclaude 1.0.225 → 1.0.226

package/dist/theme.js

@@ -16,4 +16,4 @@ export const theme = {
     synType: '#a78bfa', // tip/sınıf adları, sabitler
     synProp: '#e0e0e0', // özellik/anahtar adları
 };
-export const VERSION = '1.0.225';
+export const VERSION = '1.0.226';

package/dist/tools.js

@@ -806,6 +806,24 @@ export function isInspectLock() { return inspectLock; }
 export function setInspectLock(on) { inspectLock = !!on; _inspectReads.clear(); }
 const _INSPECT_VERBS = /(incele|inceler|ne i[şs]e? yar|a[çc][ıi]kla|analiz|g[öo]zden ge[çc]ir|i[çc]inde ne|ne var|[öo]zetle|anlat|what'?s in|what does|what is in|explain|analy[sz]e|review|inspect|understand|describe|summari[sz]e)/i;
 const _ACTION_VERBS = /(yap\b|yaz\b|olu[şs]tur|kur\b|d[üu]zelt|ekle\b|\bsil\b|de[ğg]i[şs]tir|g[üu]ncelle|refactor|implement|\bbuild\b|create|\bmake\b|\bwrite\b|\bfix\b|\badd\b|remove|\bedit\b|setup|install|generate|klonla|clone|indir|[çc]al[ıi][şs]t[ıi]r|\brun\b|tara\b|scan|recon|\baudit\b|denetle|pentest|exploit|payload|dropper)/i;
+// Minified/bundle/hash'li/generated ASSET mı? İnceleme modunda bunları okumak projeyi
+// anlatmaz, sadece context yakar → deterministik atla. .py/.md/.json/.txt/.html ASLA atlanmaz.
+export function _isMinifiedAsset(p) {
+    const b = (p.split(/[\\/]/).pop() || '');
+    if (/\.map$/i.test(b))
+        return true;
+    if (/[\\/](node_modules|dist|build|\.next|\.nuxt|\.output)[\\/]/i.test(p))
+        return true;
+    if (/\.(js|mjs|cjs|css)$/i.test(b)) {
+        if (/\.min\.(js|css)$/i.test(b))
+            return true;
+        if (/-[A-Za-z0-9_]{6,}\.(js|mjs|cjs|css)$/.test(b))
+            return true; // hash'li chunk: Name-AbC123.js
+        if (/^(bundle|vendor|chunk|runtime|polyfills?|main|index)([._-].*)?\.(js|css)$/i.test(b))
+            return true;
+    }
+    return false;
+}
 // incele-fiili VAR ama yap/yaz/tara/audit gibi eylem-fiili YOK → salt-oku kilidi aç.
 // KRİTİK: dosya YOLLARINI önce çıkar — "poc_clone", "build/", "create_x.py" gibi alt-diziler
 // eylem-fiili ("clone/build/create") sanılıp kilidi yanlışlıkla KAPATMASIN (false-negative).
@@ -890,9 +908,13 @@ async function execOne(call, hooks) {
         if (_mut.has(call.name) || (_isShell && !_roCmd)) {
             return { ok: false, output: 'This is an INSPECT/UNDERSTAND task (the user asked to review/explain — they did NOT ask to write, fix, scan, or audit). Do NOT create or modify any file, and do NOT run CodeAudit, SecurityScan, or shell commands. Read only the MEANINGFUL files (docs, entry point, config) with Read/Glob/Grep — SKIP minified/vendor/bundled files and data dumps — then explain the project in clear, concise TEXT. Do this SILENTLY: do NOT mention this restriction or narrate switching tools; just read and explain.', args };
         }
-        // Döngü kırıcı: aynı dosyayı bu turda tekrar okuma (compaction sonrası re-read loop'u).
         if (call.name === 'Read') {
             const _p = String(args?.file_path || '');
+            // Minified/vendor/bundle/generated asset → deterministik atla (prompt tek başına tutmuyordu).
+            if (_p && _isMinifiedAsset(_p)) {
+                return { ok: false, output: `[SKIP-ASSET] "${_p.split(/[\\/]/).pop()}" is a minified/bundled/generated asset — reading it tells you nothing about what the project DOES. Do NOT read it. Read source/docs/config/entry files instead, or finish and explain.`, args };
+            }
+            // Döngü kırıcı: aynı dosyayı bu turda tekrar okuma (compaction sonrası re-read loop'u).
             if (_p && _inspectReads.has(_p)) {
                 return { ok: false, output: `[ALREADY-READ] "${_p}" was already read this turn (its content is above). Do NOT read it again — continue explaining with what you already have, or finish.`, args };
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wormclaude",
-  "version": "1.0.225",
+  "version": "1.0.226",
   "description": "WormClaude CLI - uncensored security+code assistant (ink TUI, Claude-style)",
   "type": "module",
   "bin": {