bash-classify 0.9.0__tar.gz → 0.9.1__tar.gz

{bash_classify-0.9.0 → bash_classify-0.9.1}/.claude-plugin/marketplace.json

@@ -8,7 +8,7 @@
     {
       "name": "bash-classify-hook",
       "description": "Auto-allows low-risk bash commands in Claude Code using bash-classify",
-      "version": "0.9.0",
+      "version": "0.9.1",
       "author": {
         "name": "Filip Procházka",
         "url": "https://github.com/fprochazka"

{bash_classify-0.9.0 → bash_classify-0.9.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bash-classify
-Version: 0.9.0
+Version: 0.9.1
 Summary: Classify bash commands as READONLY, WRITE, DANGEROUS, or UNKNOWN
 Project-URL: Homepage, https://github.com/fprochazka/bash-classify
 Project-URL: Repository, https://github.com/fprochazka/bash-classify

{bash_classify-0.9.0 → bash_classify-0.9.1}/coding-agent-plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "bash-classify-hook",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Auto-allows low-risk bash commands in Claude Code using bash-classify",
   "author": {
     "name": "Filip Prochazka"

{bash_classify-0.9.0 → bash_classify-0.9.1}/src/bash_classify/commands/git.yaml

@@ -41,6 +41,7 @@ subcommands:
     strict: false
   rev-parse:
     classification: READONLY
+    strict: false
   ls-files:
     classification: READONLY
     strict: false
@@ -88,18 +89,42 @@ subcommands:
     strict: false
   version:
     classification: READONLY
+    strict: false
 
   # --- Branch / tag / remote management ---
   branch:
     classification: LOCAL_EFFECTS
     risk: LOW
     options:
-      -a: {}
-      --all: {aliases: [-a]}
-      -v: {}
-      --verbose: {aliases: [-v]}
+      # --- Listing / query flags (READONLY) ---
+      -a: {overrides: READONLY}
+      --all: {overrides: READONLY, aliases: [-a]}
+      -r: {overrides: READONLY}
+      --remotes: {overrides: READONLY, aliases: [-r]}
+      -v: {overrides: READONLY}
+      --verbose: {overrides: READONLY, aliases: [-v]}
       -l: {overrides: READONLY}
       --list: {overrides: READONLY, aliases: [-l]}
+      --show-current: {overrides: READONLY}
+      --contains: {overrides: READONLY, takes_value: true}
+      --no-contains: {overrides: READONLY, takes_value: true}
+      --merged: {overrides: READONLY, takes_value: true}
+      --no-merged: {overrides: READONLY, takes_value: true}
+      --points-at: {overrides: READONLY, takes_value: true}
+      --sort: {overrides: READONLY, takes_value: true}
+      --format: {overrides: READONLY, takes_value: true}
+      --column: {overrides: READONLY}
+      --no-column: {overrides: READONLY}
+      -i: {overrides: READONLY}
+      --ignore-case: {overrides: READONLY, aliases: [-i]}
+      --abbrev: {overrides: READONLY}
+      --no-abbrev: {overrides: READONLY}
+      --color: {overrides: READONLY}
+      --no-color: {overrides: READONLY}
+      --omit-empty: {overrides: READONLY}
+      -q: {}
+      --quiet: {aliases: [-q]}
+      # --- Mutating actions ---
       -d: {overrides: LOCAL_EFFECTS, risk: MEDIUM}
       -D: {overrides: DANGEROUS}
       --delete: {overrides: LOCAL_EFFECTS, risk: MEDIUM}
@@ -111,7 +136,15 @@ subcommands:
       -C: {overrides: DANGEROUS}
       --edit-description: {overrides: LOCAL_EFFECTS, risk: LOW}
       --set-upstream-to: {overrides: LOCAL_EFFECTS, risk: LOW, takes_value: true}
+      -u: {overrides: LOCAL_EFFECTS, risk: LOW, takes_value: true, aliases: [--set-upstream-to]}
       --unset-upstream: {overrides: LOCAL_EFFECTS, risk: LOW}
+      -t: {overrides: LOCAL_EFFECTS, risk: LOW}
+      --track: {overrides: LOCAL_EFFECTS, risk: LOW, aliases: [-t]}
+      --no-track: {}
+      --create-reflog: {overrides: LOCAL_EFFECTS, risk: LOW}
+      -f: {}
+      --force: {aliases: [-f]}
+      --recurse-submodules: {}
   remote:
     classification: READONLY
     strict: false

bash_classify-0.9.1/src/bash_classify/commands/snip.yaml

@@ -0,0 +1,79 @@
+# $schema: ../../../schemas/command.schema.json
+command: snip
+description: "CLI proxy that filters/compresses tool output for LLM agents"
+classification: READONLY
+strict: false
+global_options:
+  --help: {overrides: READONLY}
+  -h: {overrides: READONLY, aliases: [--help]}
+  --version: {overrides: READONLY}
+  -V: {overrides: READONLY, aliases: [--version]}
+# Implicit form `snip <tool> <args>` is semantically identical to `<tool> <args>`
+# — same filter pipeline, same risk profile. Explicit `snip run -- <tool> <args>`
+# is the canonical form the Claude Code hook rewrites to. Only snip-native
+# subcommands are enumerated below; everything else falls through to delegation.
+delegates_to:
+  mode: rest_are_argv
+subcommands:
+  # --- snip-native readonly inspectors ---
+  hook:
+    classification: READONLY
+    strict: false
+    subcommands:
+      codex:
+        classification: READONLY
+  hook-audit:
+    classification: READONLY
+    strict: false
+    options:
+      --clear: {overrides: LOCAL_EFFECTS}
+  gain:
+    classification: READONLY
+    strict: false
+  cc-economics:
+    classification: READONLY
+    strict: false
+  config:
+    classification: READONLY
+    strict: false
+  discover:
+    classification: READONLY
+    strict: false
+  verify:
+    classification: READONLY
+    strict: false
+  learn:
+    classification: READONLY
+    strict: false
+    options:
+      --generate: {overrides: LOCAL_EFFECTS}
+
+  # --- snip-native local-effects ---
+  init:
+    classification: LOCAL_EFFECTS
+    strict: false
+    options:
+      --uninstall: {overrides: LOCAL_EFFECTS}
+  trust:
+    classification: LOCAL_EFFECTS
+    strict: false
+  untrust:
+    classification: LOCAL_EFFECTS
+    strict: false
+
+  # --- snip-native delegating runners ---
+  # `snip run -- <cmd> <args>` is the explicit form: classify the inner command.
+  run:
+    strict: false
+    delegates_to:
+      mode: after_separator
+      separator: "--"
+  # `snip proxy <cmd> <args>` skips filtering and execs the inner directly.
+  proxy:
+    strict: false
+    delegates_to:
+      mode: rest_are_argv
+  # `snip check -- <cmd>` is a dry-run that never executes the inner command.
+  check:
+    classification: READONLY
+    strict: false