bash-classify 0.3.0__tar.gz → 0.4.1__tar.gz

{bash_classify-0.3.0 → bash_classify-0.4.1}/.claude-plugin/marketplace.json

@@ -8,7 +8,7 @@
     {
       "name": "bash-classify-hook",
       "description": "Auto-allows low-risk bash commands in Claude Code using bash-classify",
-      "version": "0.3.0",
+      "version": "0.4.1",
       "author": {
         "name": "Filip Procházka",
         "url": "https://github.com/fprochazka"

{bash_classify-0.3.0 → bash_classify-0.4.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bash-classify
-Version: 0.3.0
+Version: 0.4.1
 Summary: Classify bash commands as READONLY, WRITE, DANGEROUS, or UNKNOWN
 Project-URL: Homepage, https://github.com/fprochazka/bash-classify
 Project-URL: Repository, https://github.com/fprochazka/bash-classify

{bash_classify-0.3.0 → bash_classify-0.4.1}/SPEC.md

@@ -345,6 +345,48 @@ The database defines which options take values, so the parser knows whether `-n
 
 If the matched subcommand has `strict: true` (default), any unrecognized option makes the command `UNKNOWN`. If `strict: false`, unrecognized options are ignored (useful for commands with too many harmless flags to enumerate).
 
+### Subcommand matching modes
+
+The `subcommand_mode` field controls how positional arguments are matched against the subcommand dictionary. There are two modes:
+
+#### `hierarchical` (default)
+
+The default mode. Subcommands are matched as a greedy chain through nested subcommand dictionaries. Each matched subcommand narrows the context to its own subcommand dict.
+
+Example: `kubectl rollout status` matches `kubectl` → `rollout` → `status`, walking the tree.
+
+#### `match_all`
+
+Each positional argument is matched independently against the **same** top-level subcommand dictionary. This is designed for build tools like Maven and Gradle where multiple goals/tasks appear as positional arguments in any order.
+
+Example: `mvn clean install` matches both `clean` and `install` independently against `mvn`'s subcommand dict.
+
+**Classification/risk aggregation in `match_all` mode:**
+
+- The final classification is the **maximum severity** across all matched goals.
+- The final risk is the **maximum** across all matched goals' risks.
+- If any positional argument is **unrecognized** (not in the subcommand dict), the command's base classification and risk are included in the aggregation.
+- If **no goals match** (no positional args or all unrecognized), the command's base classification and risk apply.
+- Option overrides (e.g. `--dry-run`) take precedence over goal aggregation — they replace the classification as usual.
+- The `strict` mode only applies to **options** (flags starting with `-`), not to unrecognized positional arguments. Unrecognized goals do not cause UNKNOWN classification.
+
+```
+argv: ["mvn", "-B", "clean", "deploy"]
+
+Step 1: binary lookup → found "mvn" in database (subcommand_mode: match_all)
+Step 2: strip global options → none
+Step 3: subcommand matching (match_all mode)
+  - "-B" starts with "-" → passed to option classification
+  - "clean" found in subcommands → LOCAL_EFFECTS, risk LOW
+  - "deploy" found in subcommands → EXTERNAL_EFFECTS, risk MEDIUM (default)
+  - aggregate: classification = EXTERNAL_EFFECTS, risk = MEDIUM
+Step 4: option classification
+  - "-B" is a known option (no override)
+Step 5: classification
+  - aggregate classification: EXTERNAL_EFFECTS
+  - no option overrides → final: EXTERNAL_EFFECTS, risk: MEDIUM
+```
+
 ## Command Database Format
 
 YAML files, one per command or command family. Loaded from a `commands/` directory.
@@ -807,6 +849,7 @@ The `delegates_to` field defines how a command (or option like `find -exec`) han
 | `subcommands` | `map` | Nested subcommand definitions (recursive structure) |
 | `options` | `map` | Options that affect classification of this command/subcommand |
 | `strict` | `bool` | If `true` (default), unrecognized options yield `UNKNOWN` |
+| `subcommand_mode` | `enum` | How subcommands are matched: `hierarchical` (default, chained tree walk) or `match_all` (each positional arg matched independently) |
 | `delegates_to` | `object` | How this command delegates execution to an inner command (see delegation modes) |
 
 #### Option level

{bash_classify-0.3.0 → bash_classify-0.4.1}/coding-agent-plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "bash-classify-hook",
-  "version": "0.3.0",
+  "version": "0.4.1",
   "description": "Auto-allows low-risk bash commands in Claude Code using bash-classify",
   "author": {
     "name": "Filip Prochazka"

{bash_classify-0.3.0 → bash_classify-0.4.1}/docs/classification-guidance.md

@@ -410,7 +410,50 @@ subcommands:
       --dry-run: {takes_value: true, overrides: READONLY, risk: LOW}
 ```
 
-## 9. Common Patterns
+## 9. Subcommand Matching Modes
+
+### `subcommand_mode: hierarchical` (default)
+
+The default mode. Subcommands form a tree, and matching walks the tree greedily. This is correct for most CLI tools where subcommands are hierarchical (e.g. `kubectl rollout status`, `git stash list`).
+
+### `subcommand_mode: match_all`
+
+Use for build tools that accept multiple goals or tasks as positional arguments in any order. Each positional argument is matched independently against the same subcommand dictionary.
+
+```yaml
+# Maven accepts multiple lifecycle phases: mvn clean install
+command: mvn
+classification: LOCAL_EFFECTS
+strict: false
+subcommand_mode: match_all
+subcommands:
+  clean:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  compile:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  install:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  deploy:
+    classification: EXTERNAL_EFFECTS
+```
+
+**When to use `match_all`:**
+
+- Build tools that accept multiple goals/tasks (Maven, Gradle)
+- Commands where positional args are independent operations, not hierarchical nesting
+
+**How classification works:**
+
+- The final classification is the maximum severity across all matched goals
+- `mvn clean install` → both LOCAL_EFFECTS → final: LOCAL_EFFECTS
+- `mvn clean deploy` → LOCAL_EFFECTS + EXTERNAL_EFFECTS → final: EXTERNAL_EFFECTS
+- Unrecognized goals (e.g. custom Maven plugin goals like `some-plugin:goal`) fall back to the command's base classification and risk
+- Option overrides (e.g. `--dry-run`) still take precedence over goal aggregation
+
+## 10. Common Patterns
 
 | Pattern | Example | Classification |
 |---------|---------|---------------|

{bash_classify-0.3.0 → bash_classify-0.4.1}/schemas/command.schema.json

@@ -38,6 +38,9 @@
       "$ref": "#/$defs/SubcommandsMap",
       "description": "Nested subcommand definitions"
     },
+    "subcommand_mode": {
+      "$ref": "#/$defs/SubcommandMode"
+    },
     "delegates_to": {
       "$ref": "#/$defs/DelegationConfig"
     }
@@ -53,6 +56,11 @@
       "enum": ["LOW", "MEDIUM", "HIGH"],
       "description": "Risk level for a command or option override"
     },
+    "SubcommandMode": {
+      "type": "string",
+      "enum": ["hierarchical", "match_all"],
+      "description": "How subcommands are matched: hierarchical (chained tree walk, default) or match_all (each positional arg matched independently)"
+    },
     "DelegationConfig": {
       "type": "object",
       "required": ["mode"],
@@ -139,6 +147,9 @@
           "type": "boolean",
           "description": "If true (default), unrecognized options yield UNKNOWN"
         },
+        "subcommand_mode": {
+          "$ref": "#/$defs/SubcommandMode"
+        },
         "options": {
           "$ref": "#/$defs/OptionsMap"
         },

{bash_classify-0.3.0 → bash_classify-0.4.1}/src/bash_classify/commands/git.yaml

@@ -27,6 +27,9 @@ subcommands:
   diff:
     classification: READONLY
     strict: false
+  diff-tree:
+    classification: READONLY
+    strict: false
   blame:
     classification: READONLY
     strict: false

{bash_classify-0.3.0 → bash_classify-0.4.1}/src/bash_classify/commands/gradle.yaml

@@ -3,6 +3,40 @@ command: gradle
 description: "Gradle build tool"
 classification: LOCAL_EFFECTS
 strict: false
+subcommand_mode: match_all
+subcommands:
+  clean:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  build:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  test:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  assemble:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  check:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  jar:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  classes:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  compileJava:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  compileKotlin:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  publishToMavenLocal:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  publish:
+    classification: EXTERNAL_EFFECTS
 global_options:
   --help: {overrides: READONLY}
   -h: {overrides: READONLY}

{bash_classify-0.3.0 → bash_classify-0.4.1}/src/bash_classify/commands/gradlew.yaml

@@ -3,6 +3,40 @@ command: gradlew
 description: "Gradle wrapper"
 classification: LOCAL_EFFECTS
 strict: false
+subcommand_mode: match_all
+subcommands:
+  clean:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  build:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  test:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  assemble:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  check:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  jar:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  classes:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  compileJava:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  compileKotlin:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  publishToMavenLocal:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  publish:
+    classification: EXTERNAL_EFFECTS
 global_options:
   --help: {overrides: READONLY}
   -h: {overrides: READONLY}

{bash_classify-0.3.0 → bash_classify-0.4.1}/src/bash_classify/commands/mvn.yaml

@@ -3,6 +3,36 @@ command: mvn
 description: "Apache Maven build tool"
 classification: LOCAL_EFFECTS
 strict: false
+subcommand_mode: match_all
+subcommands:
+  clean:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  validate:
+    classification: READONLY
+  compile:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  test:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  test-compile:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  package:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  verify:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  install:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  site:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  deploy:
+    classification: EXTERNAL_EFFECTS
 global_options:
   --help: {overrides: READONLY}
   -h: {overrides: READONLY}

{bash_classify-0.3.0 → bash_classify-0.4.1}/src/bash_classify/commands/mvnw.yaml

@@ -3,6 +3,36 @@ command: mvnw
 description: "Apache Maven wrapper"
 classification: LOCAL_EFFECTS
 strict: false
+subcommand_mode: match_all
+subcommands:
+  clean:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  validate:
+    classification: READONLY
+  compile:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  test:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  test-compile:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  package:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  verify:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  install:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  site:
+    classification: LOCAL_EFFECTS
+    risk: LOW
+  deploy:
+    classification: EXTERNAL_EFFECTS
 global_options:
   --help: {overrides: READONLY}
   -h: {overrides: READONLY}

{bash_classify-0.3.0 → bash_classify-0.4.1}/src/bash_classify/commands/poetry.yaml

@@ -80,9 +80,11 @@ subcommands:
     subcommands:
       pytest:
         classification: LOCAL_EFFECTS
+        risk: LOW
         strict: false
       ruff:
         classification: LOCAL_EFFECTS
+        risk: LOW
         strict: false
       mypy:
         classification: READONLY