bash-classify 0.1.2__tar.gz → 0.1.4__tar.gz

{bash_classify-0.1.2 → bash_classify-0.1.4}/.claude-plugin/marketplace.json

@@ -1,19 +1,19 @@
 {
-  "name": "bash-classify",
+  "name": "fprochazka-bash-classify",
   "description": "Bash command classifier with Claude Code plugin for auto-allowing readonly commands",
-  "metadata": {
-    "pluginRoot": "./coding-agent-plugins/claude-code"
+  "owner": {
+    "name": "Filip Procházka"
   },
   "plugins": [
     {
       "name": "bash-classify-hook",
       "description": "Auto-allows readonly bash commands in Claude Code using bash-classify",
-      "version": "0.1.2",
+      "version": "0.1.4",
       "author": {
         "name": "Filip Procházka",
         "url": "https://github.com/fprochazka"
       },
-      "source": ".",
+      "source": "./coding-agent-plugins/claude-code",
       "category": "security",
       "homepage": "https://github.com/fprochazka/bash-classify"
     }

{bash_classify-0.1.2 → bash_classify-0.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bash-classify
-Version: 0.1.2
+Version: 0.1.4
 Summary: Classify bash commands as READONLY, WRITE, DANGEROUS, or UNKNOWN
 Project-URL: Homepage, https://github.com/fprochazka/bash-classify
 Project-URL: Repository, https://github.com/fprochazka/bash-classify
@@ -145,11 +145,15 @@ Before tagging, bump the version in both plugin manifest files:
 - `coding-agent-plugins/claude-code/.claude-plugin/plugin.json`
 - `.claude-plugin/marketplace.json`
 
-Then tag and push:
+Wait for CI to pass on master, then tag, push, and create a GitHub release:
 
 ```bash
+# Review changes since last release
+git log $(git describe --tags --abbrev=0)..HEAD --oneline
+
 git tag v<version>
 git push origin v<version>
+gh release create v<version> --title "v<version>" --notes "..."
 ```
 
 The `publish.yml` GitHub Action builds and publishes to PyPI automatically via trusted publishing.

{bash_classify-0.1.2 → bash_classify-0.1.4}/README.md

@@ -116,11 +116,15 @@ Before tagging, bump the version in both plugin manifest files:
 - `coding-agent-plugins/claude-code/.claude-plugin/plugin.json`
 - `.claude-plugin/marketplace.json`
 
-Then tag and push:
+Wait for CI to pass on master, then tag, push, and create a GitHub release:
 
 ```bash
+# Review changes since last release
+git log $(git describe --tags --abbrev=0)..HEAD --oneline
+
 git tag v<version>
 git push origin v<version>
+gh release create v<version> --title "v<version>" --notes "..."
 ```
 
 The `publish.yml` GitHub Action builds and publishes to PyPI automatically via trusted publishing.

{bash_classify-0.1.2 → bash_classify-0.1.4}/coding-agent-plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "bash-classify-hook",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Auto-allows readonly bash commands in Claude Code using bash-classify",
   "author": {
     "name": "Filip Prochazka"

{bash_classify-0.1.2 → bash_classify-0.1.4}/src/bash_classify/commands/git.yaml

@@ -88,6 +88,10 @@ subcommands:
   branch:
     classification: WRITE
     options:
+      -a: {}
+      --all: {aliases: [-a]}
+      -v: {}
+      --verbose: {aliases: [-v]}
       -l: {overrides: READONLY}
       --list: {overrides: READONLY, aliases: [-l]}
       -d: {overrides: WRITE}
@@ -104,6 +108,7 @@ subcommands:
       --unset-upstream: {overrides: WRITE}
   remote:
     classification: READONLY
+    strict: false
     subcommands:
       add:
         classification: WRITE
@@ -439,3 +444,5 @@ subcommands:
   fsck:
     classification: READONLY
     strict: false
+
+  # --- Misc ---

{bash_classify-0.1.2 → bash_classify-0.1.4}/src/bash_classify/commands/kubectl.yaml

@@ -188,3 +188,19 @@ subcommands:
         classification: DANGEROUS
       delete-cluster:
         classification: DANGEROUS
+
+  diff:
+    classification: READONLY
+    strict: false
+
+  kustomize:
+    classification: READONLY
+    strict: false
+
+  events:
+    classification: READONLY
+    strict: false
+
+  wait:
+    classification: READONLY
+    strict: false

{bash_classify-0.1.2 → bash_classify-0.1.4}/src/bash_classify/commands/poetry.yaml

@@ -66,6 +66,18 @@ subcommands:
   run:
     classification: DANGEROUS
     strict: false
+    delegates_to:
+      mode: rest_are_argv
+    subcommands:
+      pytest:
+        classification: WRITE
+        strict: false
+      ruff:
+        classification: WRITE
+        strict: false
+      mypy:
+        classification: READONLY
+        strict: false
   self:
     strict: false
     subcommands:

bash_classify-0.1.4/src/bash_classify/commands/pytest.yaml

@@ -0,0 +1,5 @@
+# $schema: ../../../schemas/command.schema.json
+command: pytest
+description: "Python testing framework"
+classification: WRITE
+strict: false

{bash_classify-0.1.2 → bash_classify-0.1.4}/src/bash_classify/commands/python.yaml

@@ -3,3 +3,8 @@ command: python
 description: "Python language interpreter"
 classification: DANGEROUS
 strict: false
+options:
+  --version: {overrides: READONLY}
+  -V: {overrides: READONLY}
+  --help: {overrides: READONLY}
+  -h: {overrides: READONLY}

{bash_classify-0.1.2 → bash_classify-0.1.4}/src/bash_classify/commands/python3.yaml

@@ -3,3 +3,8 @@ command: python3
 description: "Python 3 language interpreter"
 classification: DANGEROUS
 strict: false
+options:
+  --version: {overrides: READONLY}
+  -V: {overrides: READONLY}
+  --help: {overrides: READONLY}
+  -h: {overrides: READONLY}

bash_classify-0.1.4/src/bash_classify/commands/rg.yaml

@@ -0,0 +1,5 @@
+# $schema: ../../../schemas/command.schema.json
+command: rg
+description: "Recursively search directories for a regex pattern"
+classification: READONLY
+strict: false

bash_classify-0.1.4/src/bash_classify/commands/ruff.yaml

@@ -0,0 +1,25 @@
+# $schema: ../../../schemas/command.schema.json
+command: ruff
+description: "Fast Python linter and formatter"
+strict: false
+subcommands:
+  check:
+    classification: READONLY
+    strict: false
+    options:
+      --fix: {overrides: WRITE}
+      --fix-only: {overrides: WRITE}
+  format:
+    classification: WRITE
+    strict: false
+    options:
+      --check: {overrides: READONLY}
+      --diff: {overrides: READONLY}
+  version:
+    classification: READONLY
+  rule:
+    classification: READONLY
+  linter:
+    classification: READONLY
+  clean:
+    classification: WRITE

{bash_classify-0.1.2 → bash_classify-0.1.4}/src/bash_classify/commands/uv.yaml

@@ -6,15 +6,32 @@ subcommands:
   run:
     classification: DANGEROUS
     strict: false
+    delegates_to:
+      mode: rest_are_argv
+      strip_assignments: true
+    subcommands:
+      pytest:
+        classification: WRITE
+        strict: false
+      ruff:
+        classification: WRITE
+        strict: false
+      mypy:
+        classification: READONLY
+        strict: false
   init:
     classification: WRITE
     strict: false
   add:
     classification: WRITE
     strict: false
+    options:
+      --dry-run: {overrides: READONLY}
   remove:
     classification: WRITE
     strict: false
+    options:
+      --dry-run: {overrides: READONLY}
   version:
     classification: READONLY
     strict: false
@@ -24,6 +41,8 @@ subcommands:
   lock:
     classification: WRITE
     strict: false
+    options:
+      --check: {overrides: READONLY}
   export:
     classification: READONLY
     strict: false

{bash_classify-0.1.2 → bash_classify-0.1.4}/tests/test_real_world.py

@@ -107,9 +107,9 @@ class TestBuildAndTest:
         assert result.classification == Classification.UNKNOWN
 
     def test_pytest_verbose(self, database):
-        # uv run executes arbitrary code -> DANGEROUS
+        # uv run pytest is a known safe subcommand -> WRITE
         result = classify_expression("uv run pytest -v --tb=short", database)
-        assert result.classification == Classification.DANGEROUS
+        assert result.classification == Classification.WRITE
 
     def test_npm_test(self, database):
         result = classify_expression("npm test", database)
@@ -125,8 +125,8 @@ class TestBuildAndTest:
 
     def test_ruff_check_and_format(self, database):
         result = classify_expression("ruff check --fix . && ruff format .", database)
-        # ruff is not in DB -> UNKNOWN
-        assert result.classification == Classification.UNKNOWN
+        # ruff check --fix is WRITE, ruff format is WRITE -> WRITE
+        assert result.classification == Classification.WRITE
 
     def test_make_with_target(self, database):
         result = classify_expression("make build", database)