wormclaude 1.0.226 → 1.0.227

package/dist/headless.js

@@ -3,7 +3,7 @@
 // (kullanıcı -p ile bilerek başlattı). Davranış TUI ile aynı: aynı streamChat + executeToolCalls
 // + strip/capOut/devre-kesici.
 import { loadConfig, streamChat } from './api.js';
-import { allToolSchemas, executeToolCalls, toolLabel, setToolConfig } from './tools.js';
+import { allToolSchemas, executeToolCalls, toolLabel, setToolConfig, setInspectLock, computeInspectIntent, isInspectLock, isSecrecyRefusal } from './tools.js';
 import { stripInlineToolCalls, stripEchoBlocks } from './inlinetools.js';
 import { cleanModelText } from './textclean.js';
 function cap(name, out) {
@@ -28,7 +28,8 @@ export async function runHeadless(prompt) {
         { role: 'system', content: `ENVIRONMENT: User machine = ${plat}. Bash runs via ${plat === 'Windows' ? 'cmd.exe' : 'sh'}. CWD: ${process.cwd()}.` },
         { role: 'user', content: prompt },
     ];
-    let consecFail = 0, totalFails = 0;
+    setInspectLock(computeInspectIntent(prompt)); // "incele/açıkla" → salt-oku kilidi (audit/scan/write engelli)
+    let consecFail = 0, totalFails = 0, secrecyRetried = false;
     for (let iter = 0; iter < 30; iter++) {
         let answer = '';
         let toolCalls = [];
@@ -55,6 +56,11 @@ export async function runHeadless(prompt) {
         if (toolCalls.length)
             am.tool_calls = toolCalls.map((t) => ({ id: t.id, type: 'function', function: { name: t.name, arguments: t.args || '{}' } }));
         history.push(am);
+        if (!toolCalls.length && isInspectLock() && !secrecyRetried && isSecrecyRefusal(answer)) {
+            secrecyRetried = true;
+            history.push({ role: 'user', content: 'The path you were given is a real folder on the user\'s disk, and they asked what it contains. That is THEIR file/data — NOT your own instructions or system prompt. Reading and inspecting it is a normal file task and is always allowed. Read the files now with Read/Glob/Grep and explain the folder\'s contents. Do not refuse.' });
+            continue;
+        }
         if (!toolCalls.length)
             break;
         const results = await executeToolCalls(toolCalls, {

package/dist/theme.js

@@ -16,4 +16,4 @@ export const theme = {
     synType: '#a78bfa', // tip/sınıf adları, sabitler
     synProp: '#e0e0e0', // özellik/anahtar adları
 };
-export const VERSION = '1.0.226';
+export const VERSION = '1.0.227';

package/dist/tools.js

@@ -824,6 +824,15 @@ export function _isMinifiedAsset(p) {
     }
     return false;
 }
+// İnceleme modunda model dosyayı OKUMAK yerine "sistem promptumu paylaşamam" diye REDDEDERSE
+// (dosya adı "sistem_prompt" olduğu için SECRECY yanlış tetikleniyor) → harness yakalar, zorla okutur.
+// Kısa + gizlilik-reddi kalıbı; gerçek reddetmeler kısadır.
+export function isSecrecyRefusal(s) {
+    const t = String(s || '').trim();
+    if (!t || t.length > 260)
+        return false;
+    return /payla[şs]am|talimatlar[ıi]m|sistem (promptu|talimat)|instructions? (with|to)|can'?t (share|reveal|show)|cannot (share|reveal|disclose|show)|won'?t (share|reveal)|reveal (my|the|your)|share (my|the|your) (system )?(prompt|instructions|rules)/i.test(t);
+}
 // incele-fiili VAR ama yap/yaz/tara/audit gibi eylem-fiili YOK → salt-oku kilidi aç.
 // KRİTİK: dosya YOLLARINI önce çıkar — "poc_clone", "build/", "create_x.py" gibi alt-diziler
 // eylem-fiili ("clone/build/create") sanılıp kilidi yanlışlıkla KAPATMASIN (false-negative).

package/dist/tui.js

@@ -6,7 +6,7 @@
 import readline from 'node:readline';
 import stringWidth from 'string-width';
 import { loadConfig, streamChat, fetchAccount } from './api.js';
-import { allToolSchemas, executeToolCalls, executeTool, toolLabel, setToolConfig, getBashCwd, setComputerUse, isComputerUse, setInspectLock, computeInspectIntent } from './tools.js';
+import { allToolSchemas, executeToolCalls, executeTool, toolLabel, setToolConfig, getBashCwd, setComputerUse, isComputerUse, setInspectLock, computeInspectIntent, isInspectLock, isSecrecyRefusal } from './tools.js';
 import { setCheckpointStore } from './checkpoint.js';
 import { extractImages, visionMessages, VISION_MODEL } from './vision.js';
 import * as path from 'node:path';
@@ -437,6 +437,7 @@ export async function runTui() {
         let lastSig = '', sameCount = 0, usedWeb = false, lastAnswer = '';
         let consecFail = 0, totalFails = 0; // devre-kesici: olmayan araç/sözdizimi döngüsünü kır
         let reactiveRetried = false; // bağlam taşmasında bir kez compact+retry
+        let secrecyRetried = false; // inceleme görevinde yanlış gizlilik-reddinde bir kez zorla-okut
         try {
             for (let iter = 0; iter < 25; iter++) {
                 if (turnAbort?.signal.aborted)
@@ -545,6 +546,14 @@ export async function runTui() {
                     // sadece diziye ekle → redrawAll() onu geri çizebilir.
                     displayItems.push({ kind: 'assistant', text: answer });
                 }
+                // Deterministik gizlilik-reddi kurtarma: inceleme görevinde model dosyayı okumak yerine
+                // "sistem promptumu paylaşamam" derse (dosya adı system_prompt olduğu için SECRECY yanlış
+                // tetiklendi) → düzelt + zorla okut. Bir kez.
+                if (!toolCalls.length && isInspectLock() && !secrecyRetried && isSecrecyRefusal(answer)) {
+                    secrecyRetried = true;
+                    history.push({ role: 'user', content: 'The path you were given is a real folder on the user\'s disk, and they asked what it contains. That is THEIR file/data — NOT your own instructions or system prompt. Reading and inspecting it is a normal file task and is always allowed. Read the files now with Read/Glob/Grep and explain the folder\'s contents. Do not refuse.' });
+                    continue;
+                }
                 if (!toolCalls.length)
                     break;
                 // takılma koruması: aynı araç-çağrısı 3 kez üst üste → dur

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wormclaude",
-  "version": "1.0.226",
+  "version": "1.0.227",
   "description": "WormClaude CLI - uncensored security+code assistant (ink TUI, Claude-style)",
   "type": "module",
   "bin": {