claude-jacked 0.3.2__py3-none-any.whl → 0.3.3__py3-none-any.whl

{claude_jacked-0.3.2.dist-info → claude_jacked-0.3.3.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: claude-jacked
-Version: 0.3.2
+Version: 0.3.3
 Summary: Smart reviewers, commands, and session search for Claude Code
 Project-URL: Homepage, https://github.com/jackneil/claude-jacked
 Project-URL: Repository, https://github.com/jackneil/claude-jacked

{claude_jacked-0.3.2.dist-info → claude_jacked-0.3.3.dist-info}/RECORD

@@ -1,4 +1,4 @@
-jacked/__init__.py,sha256=vu1Wk8xEL7jrFIMClyMDjn3PW3VJj2glDhbTjMgMuSg,1276
+jacked/__init__.py,sha256=RHhr1IFF5FdT1ERj7GstKVdi4KpHq0K7hYDr6MgR4BY,1276
 jacked/cli.py,sha256=SPGNaIhxL9VTcS9qqvWNwLrVgFrjCNq-a8S1q1kAPIw,51728
 jacked/client.py,sha256=7N4GdjcG8OXfmjUfprlUOJTkyrPyqF1OBstAsplNSa8,18151
 jacked/config.py,sha256=DeC1no5rFsvlb6JaU2PzLyyhI4DaJrxrsfqVugWuC4Q,8606
@@ -23,11 +23,11 @@ jacked/data/commands/learn.md,sha256=FoD-qKsQSpEayFNP997dyUfV4UJgs8LiojYIWnzOSvA
 jacked/data/commands/pr.md,sha256=1orTbDnL4ky2bk5VXm5j66hGybTrNWVTyAPxx_uMggU,193
 jacked/data/commands/redo.md,sha256=4NnCKKi10ybEOHdFObN1aVNaFGOt63eoluwDJUzUFxg,4242
 jacked/data/commands/techdebt.md,sha256=jSdfMN1Kvz6vmsnWw9sCMFpKA8r87e9nDHrE-qsMwG8,3861
-jacked/data/hooks/security_gatekeeper.py,sha256=nhiT4X-8zBhjG-i1hKgQzoXNE3NOnekTYGDlns72iXk,14083
+jacked/data/hooks/security_gatekeeper.py,sha256=zINhsDmyhYzULdym_U5DL0Uc5mnV4ot61NQ_FCnxF5I,14667
 jacked/data/rules/jacked_behaviors.md,sha256=x1qzdj3DLmkhv5TVAdNyIpAdjBGz7IUdXSrko94LOOw,1449
 jacked/data/skills/jacked/SKILL.md,sha256=IEMp-PfWlu5rmS1R5HHblUX1CGwzno2gtO4yQ2cMAg4,5488
-claude_jacked-0.3.2.dist-info/METADATA,sha256=711mQ_TQsJTUADNueUQL5N6bjIXFbqYyB9ib49Ljn8c,22204
-claude_jacked-0.3.2.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
-claude_jacked-0.3.2.dist-info/entry_points.txt,sha256=52JDhetd7OsE9iJryGrQIL3PWhum_QCeLuTeQ9-CTqQ,43
-claude_jacked-0.3.2.dist-info/licenses/LICENSE,sha256=m8NmsH7P5G4VH3VyHWPQUTl2weuNTh1-eaH0RbUcn3k,1066
-claude_jacked-0.3.2.dist-info/RECORD,,
+claude_jacked-0.3.3.dist-info/METADATA,sha256=xLS9TKTUNakcyeA6SnM6NB3prpgL3XCf3SC0CknoCQc,22204
+claude_jacked-0.3.3.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
+claude_jacked-0.3.3.dist-info/entry_points.txt,sha256=52JDhetd7OsE9iJryGrQIL3PWhum_QCeLuTeQ9-CTqQ,43
+claude_jacked-0.3.3.dist-info/licenses/LICENSE,sha256=m8NmsH7P5G4VH3VyHWPQUTl2weuNTh1-eaH0RbUcn3k,1066
+claude_jacked-0.3.3.dist-info/RECORD,,

jacked/__init__.py

@@ -8,7 +8,7 @@ Install extras for additional features:
   pip install "claude-jacked[all]"       — everything
 """
 
-__version__ = "0.3.2"
+__version__ = "0.3.3"
 
 
 def _qdrant_available() -> bool:

jacked/data/hooks/security_gatekeeper.py

@@ -64,6 +64,9 @@ SAFE_EXACT = {
 # e.g., C:/Users/jack/.conda/envs/krac_llm/python.exe → python
 PATH_STRIP_RE = re.compile(r'^(?:.*[/\\])?([^/\\]+?)(?:\.exe)?(?:\s|$)', re.IGNORECASE)
 
+# Strip leading env var assignments: HOME=/x PATH="/y:$PATH" cmd → cmd
+ENV_ASSIGN_RE = re.compile(r"""^(?:\w+=(?:"[^"]*"|'[^']*'|\S+)\s+)+""")
+
 # Universal safe: any command that just asks for version or help
 VERSION_HELP_RE = re.compile(r'^\S+\s+(-[Vv]|--version|-h|--help)\s*$')
 
@@ -195,14 +198,18 @@ def check_permissions(command: str, cwd: str) -> bool:
     patterns.extend(_load_permissions(project_dir / ".claude" / "settings.json"))
     patterns.extend(_load_permissions(project_dir / ".claude" / "settings.local.json"))
 
+    cmd_core = _strip_env_prefix(command)
+    candidates = [command, cmd_core] if cmd_core != command else [command]
+
     for pat in patterns:
         prefix, is_wildcard = _parse_bash_pattern(pat)
-        if is_wildcard:
-            if command.startswith(prefix):
-                return True
-        else:
-            if command == prefix:
-                return True
+        for cmd in candidates:
+            if is_wildcard:
+                if cmd.startswith(prefix):
+                    return True
+            else:
+                if cmd == prefix:
+                    return True
 
     return False
 
@@ -223,9 +230,14 @@ def _get_base_command(command: str) -> str:
     return stripped
 
 
+def _strip_env_prefix(cmd: str) -> str:
+    """Strip leading env var assignments: HOME=/x PATH="/y" cmd → cmd"""
+    return ENV_ASSIGN_RE.sub('', cmd).strip()
+
+
 def local_evaluate(command: str) -> str | None:
     """Evaluate command locally. Returns 'YES', 'NO', or None (ambiguous)."""
-    cmd = command.strip()
+    cmd = _strip_env_prefix(command.strip())
     base = _get_base_command(cmd)
 
     # Check deny patterns first (on original command, not stripped)
@@ -353,11 +365,12 @@ def main():
 
     # Tier 0: Deny check FIRST — security always wins over permissions
     cmd_stripped = command.strip()
+    cmd_core = _strip_env_prefix(cmd_stripped)
     for pattern in DENY_PATTERNS:
-        if pattern.search(cmd_stripped):
+        if pattern.search(cmd_stripped) or pattern.search(cmd_core):
             elapsed = time.time() - start
             log(f"DENY MATCH ({elapsed:.3f}s)")
-            log(f"DECISION: PASS ({elapsed:.3f}s)")
+            log(f"DECISION: ASK USER ({elapsed:.3f}s)")
             sys.exit(0)
 
     # Tier 1: Check Claude's own permission rules
@@ -380,7 +393,7 @@ def main():
         # Shouldn't hit this since deny checked above, but just in case
         elapsed = time.time() - start
         log(f"LOCAL SAID: NO ({elapsed:.3f}s)")
-        log(f"DECISION: PASS ({elapsed:.3f}s)")
+        log(f"DECISION: ASK USER ({elapsed:.3f}s)")
         sys.exit(0)
 
     # Tier 3+4: API then CLI for ambiguous commands
@@ -396,7 +409,7 @@ def main():
     elapsed = time.time() - start
 
     if response is None:
-        log(f"DECISION: PASS (no response, {elapsed:.1f}s)")
+        log(f"DECISION: ASK USER (no response, {elapsed:.1f}s)")
         sys.exit(0)
 
     response_upper = response.upper()
@@ -406,7 +419,7 @@ def main():
         log(f"DECISION: ALLOW ({elapsed:.1f}s)")
         emit_allow()
     else:
-        log(f"DECISION: PASS ({elapsed:.1f}s)")
+        log(f"DECISION: ASK USER ({elapsed:.1f}s)")
 
     sys.exit(0)