@blogic-cz/agent-tools 1.15.1 → 1.15.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1 +1 @@
1
- {"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/credential-guard/paths.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB,QAC8C,CAAC;AAEnF,eAAO,MAAM,6BAA6B,EAAE,MAAM,EAgBjD,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,MAAM,EAEjD,CAAC;AAKF,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrD,CAAC;AACF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAM,EAAE,GAAG,SAAM,GAAG,MAAM,CAmBzE;AAID,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CA2B3E;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,IAAI,CAkBhF"}
1
+ {"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/credential-guard/paths.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB,QAC8C,CAAC;AAEnF,eAAO,MAAM,6BAA6B,EAAE,MAAM,EAgBjD,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,MAAM,EAGjD,CAAC;AAKF,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrD,CAAC;AACF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAM,EAAE,GAAG,SAAM,GAAG,MAAM,CAmBzE;AAID,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CA2B3E;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,IAAI,CAkBhF"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@blogic-cz/agent-tools",
3
- "version": "1.15.1",
3
+ "version": "1.15.2",
4
4
  "description": "CLI tools for AI coding agent workflows — GitHub, database, Kubernetes, Azure platform, Azure DevOps, logs, sessions, and audit",
5
5
  "keywords": [
6
6
  "agent",
@@ -1278,6 +1278,15 @@ describe("registry and paths", () => {
1278
1278
  "src/secret/key.txt",
1279
1279
  "kubeconfig-prod",
1280
1280
  ])("normalizes and refuses %s", (path) => expect(isSensitivePath(path, context)).toBe(true));
1281
+ it.each([
1282
+ "kubernetes/applications/demo/templates/secretproviderclass.yaml",
1283
+ "kubernetes/applications/demo/base/secretproviderclass.yaml",
1284
+ ])("allows reading SecretProviderClass manifest %s", (path) => {
1285
+ expect(bash(`rg -n conflict ${path}`).kind).toBe("pass");
1286
+ });
1287
+ it("still refuses a real secret file", () => {
1288
+ expect(bash("rg -n conflict kubernetes/applications/demo/base/.env").kind).toBe("violation");
1289
+ });
1281
1290
  it("normalizes separators, drive letters, case and dot segments", () =>
1282
1291
  expect(normalizePath("C:\\APP\\src\\..\\main.ts", context.home, context.cwd)).toBe(
1283
1292
  "c:/app/main.ts",
@@ -23,6 +23,7 @@ export const DEFAULT_BLOCKED_PATH_PATTERNS: RegExp[] = [
23
23
 
24
24
  export const DEFAULT_ALLOWED_PATH_PATTERNS: RegExp[] = [
25
25
  /\.env\.(?:example|template|sample)[^/]*$/i,
26
+ /(?:^|\/)secretproviderclass\.ya?ml$/i,
26
27
  ];
27
28
 
28
29
  const PROCESS_ENVIRONMENT_PATH =