wormclaude 1.0.83 → 1.0.84

package/dist/cli.js

@@ -20,6 +20,7 @@ import { linkify } from './links.js';
 import { recordLearned } from './learn.js';
 import { loadSkills, getSkills, getSkill, buildSkillPrompt } from './skills.js';
 import { loadExtensions, getExtCommands, getExtCommand, buildExtCommandPrompt } from './extensions.js';
+import { platformNote } from './subagents.js';
 import { COMMANDS, runSlashCommand } from './commands.js';
 import { tasks } from './tasks.js';
 import { connectMcpServers } from './mcp.js';
@@ -123,12 +124,12 @@ loadExtensions(); // extensions/<ad>/ (gömülü + kullanıcı + proje) yükle
 // Kalıcı hafıza: açılışta .wormclaude/memory.md + WORMCLAUDE.md'yi context'e yükle
 const _memCtx = loadMemoryContext();
 const _envContext = () => {
-    const plat = process.platform === 'win32' ? 'Windows' : process.platform === 'darwin' ? 'macOS' : 'Linux';
-    const shell = process.platform === 'win32' ? 'PowerShell (cmd.exe altinda calisir)' : 'bash/sh';
-    const winNote = process.platform === 'win32'
-        ? ' This is WINDOWS. Use Windows-correct commands. The Bash tool runs via cmd.exe so && chaining works, but do NOT assume a Unix shell: avoid grep/sed/awk/ls/cat — use the Read/Grep/Glob tools or PowerShell (Get-Content, Select-String, Get-ChildItem). Backslash paths are fine. AVOID interactive scaffolders that hang or are slow (create-react-app); prefer non-interactive, e.g. Vite: npm create vite@latest myapp -- --template react, then npm install. Always pass non-interactive flags (-y, --yes) when available.'
-        : ' Use POSIX shell commands.';
-    return `ENVIRONMENT: The user machine runs ${plat}. Bash tool shell: ${shell}. Current working directory: ${process.cwd()}.${winNote}`;
+    // Platform + kabuk kuralları paylaşılan kaynaktan (subagents.platformNote) — ana ajan
+    // ve alt-ajanlar AYNI Windows tırnak/araç kurallarını görür.
+    const extra = process.platform === 'win32'
+        ? '\n- AVOID interactive scaffolders that hang (create-react-app); prefer Vite: npm create vite@latest myapp -- --template react.'
+        : '';
+    return platformNote() + extra;
 };
 const _initHistory = () => {
     const sys = [{ role: 'system', content: _envContext() }];

package/dist/subagents.js

@@ -4,6 +4,28 @@
 import * as fs from 'node:fs';
 import * as os from 'node:os';
 import * as path from 'node:path';
+/**
+ * Çalışma ortamı + kabuk kuralları — hem ana ajana hem ALT-ajanlara verilir.
+ * Windows'ta cmd.exe tırnak kuralları kritik: yanlış tırnak sessizce "Sistem
+ * belirtilen dosyayı bulamıyor" / "URL rejected" ile patlar (curl 'url' başarısız).
+ */
+export function platformNote() {
+    const isWin = process.platform === 'win32';
+    const plat = isWin ? 'Windows' : process.platform === 'darwin' ? 'macOS' : 'Linux';
+    const cwd = process.cwd();
+    if (isWin) {
+        return [
+            `ENVIRONMENT: User machine = Windows. The Bash tool runs commands via cmd.exe (NOT a Unix shell). CWD: ${cwd}.`,
+            'WINDOWS SHELL RULES (critical — wrong quoting fails with "Sistem belirtilen dosyayı bulamıyor" or "URL rejected"):',
+            '- Use DOUBLE quotes only. SINGLE quotes do NOT work in cmd.exe — `curl \'http://x\'` FAILS.',
+            '- The characters < > & | ^ ( ) are special in cmd.exe; ANY argument or URL containing them MUST be wrapped in double quotes. Correct: curl "https://site/path?q=<script>alert(1)</script>" — never single-quoted, never unquoted.',
+            '- For fetching or probing a URL, PREFER the WebFetch tool (cross-platform, no shell quoting). Use curl.exe only when you need the RAW HTTP response (e.g. to see if an XSS payload is reflected verbatim), and ALWAYS double-quote the full URL.',
+            '- Unix/security tools are usually NOT installed (no grep/sed/awk/ls/cat/nmap/nikto/sqlmap). Use the Read/Grep/Glob tools or PowerShell (Get-Content, Select-String, Get-ChildItem). Before calling an external tool, verify it exists with `where <tool>`; if missing, use an HTTP/WebFetch-based method instead.',
+            '- && chaining works in cmd.exe. Always pass non-interactive flags (-y/--yes) to avoid hangs.',
+        ].join('\n');
+    }
+    return `ENVIRONMENT: User machine = ${plat}. Bash tool shell: bash/sh (POSIX). CWD: ${cwd}. Use POSIX commands and standard quoting; double-quote URLs containing special characters.`;
+}
 // ── Gömülü uzman ajanlar ──────────────────────────────────────────────────────
 const BUILTINS = [
     {

package/dist/theme.js

@@ -16,4 +16,4 @@ export const theme = {
     synType: '#a78bfa', // tip/sınıf adları, sabitler
     synProp: '#e0e0e0', // özellik/anahtar adları
 };
-export const VERSION = '1.0.83';
+export const VERSION = '1.0.84';

package/dist/tools.js

@@ -8,7 +8,7 @@ import * as os from 'node:os';
 import * as path from 'node:path';
 import { loadConfig } from './api.js';
 import { runAgentLoop } from './agent.js';
-import { resolveSubagent, subagentTypesHint } from './subagents.js';
+import { resolveSubagent, subagentTypesHint, platformNote } from './subagents.js';
 import { saveMemoryFact } from './memory.js';
 import { emit as emitSpan } from './telemetry.js';
 import { tasks } from './tasks.js';
@@ -951,7 +951,7 @@ export async function executeTool(name, args) {
         if (name === 'Agent') {
             // Uzman ajan seçimi: subagent_type verilirse özel prompt + tool-kısıtı uygulanır.
             const def = resolveSubagent(args.subagent_type);
-            const sysPrompt = def ? def.system : SUBAGENT_SYSTEM;
+            const sysPrompt = (def ? def.system : SUBAGENT_SYSTEM) + '\n\n' + platformNote();
             const subTools = subAgentTools(def?.tools);
             const subMessages = [
                 { role: 'system', content: sysPrompt },
@@ -1391,7 +1391,7 @@ export async function executeTool(name, args) {
             if (sk.tools && sk.tools.length)
                 tools = tools.filter((t) => sk.tools.includes(t.function.name));
             const messages = [
-                { role: 'system', content: SUBAGENT_SYSTEM },
+                { role: 'system', content: SUBAGENT_SYSTEM + '\n\n' + platformNote() },
                 { role: 'user', content: prompt },
             ];
             const { finalText } = await runAgentLoop({ config: cfg(), messages, tools, executeTool });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wormclaude",
-  "version": "1.0.83",
+  "version": "1.0.84",
   "description": "WormClaude CLI - uncensored security+code assistant (ink TUI, Claude-style)",
   "type": "module",
   "bin": {