@hasna/assistants 0.6.41 → 0.6.42

package/dist/index.js

@@ -115593,6 +115593,13 @@ class BashTool {
     const cwd2 = input.cwd || process.cwd();
     const timeoutInput = Number(input.timeout);
     const timeout = Number.isFinite(timeoutInput) && timeoutInput > 0 ? timeoutInput : 30000;
+    let allowEnv = true;
+    try {
+      const config = await loadConfig(cwd2);
+      allowEnv = config.validation?.perTool?.bash?.allowEnv ?? true;
+    } catch {
+      allowEnv = true;
+    }
     const baseCommand = command.replace(/\s*2>&1\s*/g, " ").trim();
     const baseTrimmed = baseCommand.toLowerCase();
     const allowConnectorNewlines = baseTrimmed.startsWith("connect-") || baseTrimmed.startsWith("connect_");
@@ -115643,8 +115650,30 @@ class BashTool {
       }
     }
     const commandTrimmed = commandForChecks.trim().toLowerCase();
+    const isEnvCommand = /^(env|printenv)(\s|$)/.test(commandTrimmed);
+    if (!allowEnv && isEnvCommand) {
+      getSecurityLogger().log({
+        eventType: "blocked_command",
+        severity: "medium",
+        details: {
+          tool: "bash",
+          command,
+          reason: "env/printenv disabled by config"
+        },
+        sessionId: input.sessionId || "unknown"
+      });
+      throw new ToolExecutionError("Command not allowed: env/printenv disabled by config.", {
+        toolName: "bash",
+        toolInput: input,
+        code: ErrorCodes.TOOL_PERMISSION_DENIED,
+        recoverable: false,
+        retryable: false,
+        suggestion: "Enable validation.perTool.bash.allowEnv to allow env/printenv."
+      });
+    }
     let isAllowed = false;
-    for (const allowed of this.ALLOWED_COMMANDS) {
+    const allowlist = allowEnv ? this.ALLOWED_COMMANDS : this.ALLOWED_COMMANDS.filter((allowed) => allowed !== "env" && allowed !== "printenv");
+    for (const allowed of allowlist) {
       if (commandTrimmed.startsWith(allowed.toLowerCase())) {
         isAllowed = true;
         break;
@@ -120239,7 +120268,7 @@ function formatAge(ms) {
   return `${days}d`;
 }
 // packages/core/src/commands/builtin.ts
-var VERSION = process.env.ASSISTANTS_VERSION || process.env.npm_package_version || "unknown";
+var VERSION = "0.6.42";
 function resolveAuthTimeout(resolve5) {
   resolve5({ exitCode: 1, stdout: { toString: () => "{}" } });
 }
@@ -144362,8 +144391,7 @@ function formatStreamEvent(chunk) {
 
 // packages/terminal/src/index.tsx
 var jsx_dev_runtime13 = __toESM(require_jsx_dev_runtime(), 1);
-var VERSION3 = "0.6.37";
-process.env.ASSISTANTS_VERSION ??= VERSION3;
+var VERSION3 = "0.6.42";
 function parseArgs(argv) {
   const args = argv.slice(2);
   const options = {
@@ -144518,4 +144546,4 @@ if (options.print !== null) {
   });
 }
 
-//# debugId=21F6ADAED0EB8F4A64756E2164756E21
+//# debugId=D518576C49ADB4E664756E2164756E21