wormclaude 1.0.228 → 1.0.230

package/dist/headless.js

@@ -3,7 +3,7 @@
 // (kullanıcı -p ile bilerek başlattı). Davranış TUI ile aynı: aynı streamChat + executeToolCalls
 // + strip/capOut/devre-kesici.
 import { loadConfig, streamChat } from './api.js';
-import { allToolSchemas, executeToolCalls, toolLabel, setToolConfig, setInspectLock, computeInspectIntent, isInspectLock, isSecrecyRefusal } from './tools.js';
+import { allToolSchemas, executeToolCalls, toolLabel, setToolConfig, setInspectLock, computeInspectIntent, isSecrecyRefusal, isPromptExtractionRequest } from './tools.js';
 import { stripInlineToolCalls, stripEchoBlocks } from './inlinetools.js';
 import { cleanModelText } from './textclean.js';
 function cap(name, out) {
@@ -56,9 +56,9 @@ export async function runHeadless(prompt) {
         if (toolCalls.length)
             am.tool_calls = toolCalls.map((t) => ({ id: t.id, type: 'function', function: { name: t.name, arguments: t.args || '{}' } }));
         history.push(am);
-        if (!toolCalls.length && isInspectLock() && !secrecyRetried && isSecrecyRefusal(answer)) {
+        if (!toolCalls.length && !secrecyRetried && isSecrecyRefusal(answer) && !isPromptExtractionRequest(prompt)) {
             secrecyRetried = true;
-            history.push({ role: 'user', content: 'The path you were given is a real folder on the user\'s disk, and they asked what it contains. That is THEIR file/data — NOT your own instructions or system prompt. Reading and inspecting it is a normal file task and is always allowed. Read the files now with Read/Glob/Grep and explain the folder\'s contents. Do not refuse.' });
+            history.push({ role: 'user', content: 'You just refused with a secrecy message, but the user did NOT ask you to reveal your own instructions or system prompt — they asked for a normal task. That refusal was a mistake. Do NOT refuse. If the request is about a file/folder on disk, read it (Read/Glob/Grep) and explain it; otherwise carry out the user\'s actual request now.' });
             continue;
         }
         if (!toolCalls.length)

package/dist/theme.js

@@ -16,4 +16,4 @@ export const theme = {
     synType: '#a78bfa', // tip/sınıf adları, sabitler
     synProp: '#e0e0e0', // özellik/anahtar adları
 };
-export const VERSION = '1.0.228';
+export const VERSION = '1.0.230';

package/dist/tools.js

@@ -833,6 +833,14 @@ export function isSecrecyRefusal(s) {
         return false;
     return /payla[şs]am|talimatlar[ıi]m|sistem (promptu|talimat)|instructions? (with|to)|can'?t (share|reveal|show)|cannot (share|reveal|disclose|show)|won'?t (share|reveal)|reveal (my|the|your)|share (my|the|your) (system )?(prompt|instructions|rules)/i.test(t);
 }
+// Kullanıcı GERÇEKTEN "kendi sistem promptunu göster/ifşa et" mi istiyor? (Sadece o zaman red MEŞRU.)
+// Bir dosya YOLU/adı varsa → dosya hakkında, ifşa DEĞİL. Yol yoksa reveal-prompt kalıplarına bak.
+export function isPromptExtractionRequest(s) {
+    const t = String(s || '');
+    if (/[a-zA-Z]:[\\/]|[.][a-z]{1,5}\b|[\\/][\w.-]+[\\/]/.test(t))
+        return false; // yol/dosya → ifşa değil
+    return /(show|reveal|print|dump|repeat|reconstruct|leak|expose|output)[^.\n]{0,40}(system\s*)?(prompt|instructions|rules|guidelines)|(system\s*prompt|instructions?|talimatlar[ıi]n?)[^.\n]{0,20}(g[öo]ster|ver\b|yaz\b|payla[şs]|s[öo]yle|d[öo]k)|prompt(u|un|unu)[^.\n]{0,20}(g[öo]ster|ver\b|yaz\b|payla[şs]|s[öo]yle|d[öo]k)/i.test(t);
+}
 // incele-fiili VAR ama yap/yaz/tara/audit gibi eylem-fiili YOK → salt-oku kilidi aç.
 // KRİTİK: dosya YOLLARINI önce çıkar — "poc_clone", "build/", "create_x.py" gibi alt-diziler
 // eylem-fiili ("clone/build/create") sanılıp kilidi yanlışlıkla KAPATMASIN (false-negative).
@@ -1419,9 +1427,20 @@ export function toolLabel(name, args) {
     return `${name}(...)`;
 }
 // ── Yardımcılar ───────────────────────────────────────────────────────────────
-function walk(dir, out, depth = 0) {
-    if (depth > 12 || out.length > 20000)
+// Taranmayacak ağır/cache dizinleri — ev dizini (C:\Users\...) globlanınca .bun/.npm/AppData
+// gibi on binlerce dosyalı ağaçlar 30dk hang yapıyordu. Bunları atla + zaman bütçesi koy.
+const _WALK_IGNORE = new Set([
+    'node_modules', '.git', '.bun', '.npm', '.pnpm-store', '.yarn', '.cache', '.cargo', '.rustup',
+    '.gradle', '.m2', '.nuget', '.conda', '.nvm', '.pyenv', 'appdata', 'application data',
+    '.vscode', '.vscode-server', '.idea', 'dist', 'build', '.next', '.nuxt', '.svelte-kit',
+    'venv', '.venv', '__pycache__', '.pytest_cache', '.mypy_cache', '.tox', 'target',
+    '.expo', 'library', '.docker', '.android', '.ollama', '$recycle.bin',
+]);
+function walk(dir, out, depth = 0, deadline = 0) {
+    if (depth > 12 || out.length >= 10000)
         return;
+    if (deadline && Date.now() > deadline)
+        return; // zaman bütçesi → ev dizini taramasında hang'i önle
     let entries;
     try {
         entries = fs.readdirSync(dir, { withFileTypes: true });
@@ -1430,13 +1449,16 @@ function walk(dir, out, depth = 0) {
         return;
     }
     for (const e of entries) {
-        if (e.name === 'node_modules' || e.name === '.git')
-            continue;
-        const full = path.join(dir, e.name);
-        if (e.isDirectory())
-            walk(full, out, depth + 1);
-        else
-            out.push(full);
+        if (out.length >= 10000 || (deadline && Date.now() > deadline))
+            return;
+        if (e.isDirectory()) {
+            if (_WALK_IGNORE.has(e.name.toLowerCase()))
+                continue;
+            walk(path.join(dir, e.name), out, depth + 1, deadline);
+        }
+        else {
+            out.push(path.join(dir, e.name));
+        }
     }
 }
 function globToRegex(pattern) {
@@ -1874,7 +1896,7 @@ export async function executeTool(name, args) {
         if (name === 'Glob') {
             const base = args.path ? resolveWs(args.path) : getBashCwd();
             const all = [];
-            walk(base, all);
+            walk(base, all, 0, Date.now() + 8000);
             const rx = globToRegex(args.pattern);
             let matches = all.filter((f) => rx.test(f.replace(/\\/g, '/')));
             // Değiştirilme zamanına göre sırala (yeni → eski), WormClaude gibi
@@ -1906,7 +1928,7 @@ export async function executeTool(name, args) {
             if (fs.existsSync(base) && fs.statSync(base).isFile())
                 files.push(base);
             else
-                walk(base, files);
+                walk(base, files, 0, Date.now() + 8000);
             // type / glob filtresi
             let filtered = files;
             if (args.type && TYPE_EXT[args.type]) {
@@ -2214,7 +2236,7 @@ export async function executeTool(name, args) {
             const refRe = new RegExp(`\\b${esc}\\b`);
             const rx = args.action === 'definition' ? defRe : refRe;
             const files = [];
-            walk(base, files);
+            walk(base, files, 0, Date.now() + 8000);
             const hits = [];
             for (const f of files) {
                 if (hits.length > 100)

package/dist/tui.js

@@ -6,7 +6,7 @@
 import readline from 'node:readline';
 import stringWidth from 'string-width';
 import { loadConfig, streamChat, fetchAccount } from './api.js';
-import { allToolSchemas, executeToolCalls, executeTool, toolLabel, setToolConfig, getBashCwd, setComputerUse, isComputerUse, setInspectLock, computeInspectIntent, isInspectLock, isSecrecyRefusal } from './tools.js';
+import { allToolSchemas, executeToolCalls, executeTool, toolLabel, setToolConfig, getBashCwd, setComputerUse, isComputerUse, setInspectLock, computeInspectIntent, isSecrecyRefusal, isPromptExtractionRequest } from './tools.js';
 import { setCheckpointStore } from './checkpoint.js';
 import { extractImages, visionMessages, VISION_MODEL } from './vision.js';
 import * as path from 'node:path';
@@ -546,12 +546,12 @@ export async function runTui() {
                     // sadece diziye ekle → redrawAll() onu geri çizebilir.
                     displayItems.push({ kind: 'assistant', text: answer });
                 }
-                // Deterministik gizlilik-reddi kurtarma: inceleme görevinde model dosyayı okumak yerine
-                // "sistem promptumu paylaşamam" derse (dosya adı system_prompt olduğu için SECRECY yanlış
-                // tetiklendi) → düzelt + zorla okut. Bir kez.
-                if (!toolCalls.length && isInspectLock() && !secrecyRetried && isSecrecyRefusal(answer)) {
+                // Deterministik gizlilik-reddi kurtarma (GENEL): model gizlilik-reddi verdi AMA kullanıcı
+                // kendi promptunu ifşa etmeyi İSTEMEDİYSE (dosya inceleme, sunucu başlatma, herhangi normal
+                // görev; compaction sonrası da olur) → yanlış red, düzelt + gerçek görevi yaptır. Bir kez.
+                if (!toolCalls.length && !secrecyRetried && isSecrecyRefusal(answer) && !isPromptExtractionRequest(userText)) {
                     secrecyRetried = true;
-                    history.push({ role: 'user', content: 'The path you were given is a real folder on the user\'s disk, and they asked what it contains. That is THEIR file/data — NOT your own instructions or system prompt. Reading and inspecting it is a normal file task and is always allowed. Read the files now with Read/Glob/Grep and explain the folder\'s contents. Do not refuse.' });
+                    history.push({ role: 'user', content: 'You just refused with a secrecy message, but the user did NOT ask you to reveal your own instructions or system prompt — they asked for a normal task. That refusal was a mistake. Do NOT refuse. If the request is about a file/folder on disk, read it (Read/Glob/Grep) and explain it; otherwise carry out the user\'s actual request now.' });
                     continue;
                 }
                 if (!toolCalls.length)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wormclaude",
-  "version": "1.0.228",
+  "version": "1.0.230",
   "description": "WormClaude CLI - uncensored security+code assistant (ink TUI, Claude-style)",
   "type": "module",
   "bin": {