@integrity-labs/agt-cli 0.28.1041 → 0.28.1043

package/dist/{chunk-OHT4PWAK.js → chunk-PBMQ4KP6.js}

@@ -23,7 +23,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-TXRZFABA.js";
+} from "./chunk-O44RDEIA.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -3722,12 +3722,51 @@ function roleFromAuthComponent(value) {
 // src/lib/project-claude-settings.ts
 import { existsSync as existsSync5, mkdirSync as mkdirSync5, readFileSync as readFileSync6, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync4 } from "fs";
 import { join as join6 } from "path";
+
+// ../../packages/core/dist/provisioning/frameworks/claudecode/deny-permissions.js
+var SECRETS_DENY_PERMISSIONS = [
+  // Read blocks
+  "Read(**/.env*)",
+  "Read(**/.dev.vars*)",
+  "Read(**/*.pem)",
+  "Read(**/*.key)",
+  "Read(**/secrets/**)",
+  "Read(**/credentials/**)",
+  "Read(**/credentials.json)",
+  "Read(**/.aws/**)",
+  // gcloud stores ADC + cached access/refresh tokens under ~/.config/gcloud/
+  // (application_default_credentials.json, credentials.db, access_tokens.db).
+  // Brokered GCP access flows via CLOUDSDK_AUTH_ACCESS_TOKEN env, never these
+  // files, so denying reads here is the GCP analogue of the .aws/ block.
+  "Read(**/.config/gcloud/**)",
+  "Read(**/.ssh/**)",
+  "Read(**/config/database.yml)",
+  "Read(**/config/credentials.json)",
+  "Read(**/.npmrc)",
+  "Read(**/.pypirc)",
+  // Write blocks
+  "Write(**/.env*)",
+  "Write(**/secrets/**)",
+  "Write(**/.ssh/**)"
+];
+var CLAUDE_ARTIFACT_TOOLS_DENY = [
+  "Artifact",
+  "ArtifactComments",
+  "ArtifactData"
+];
+var PLATFORM_DENY_PERMISSIONS = [
+  ...SECRETS_DENY_PERMISSIONS,
+  ...CLAUDE_ARTIFACT_TOOLS_DENY
+];
+
+// src/lib/project-claude-settings.ts
 function writeProjectClaudeSettings(args) {
   const { projectDir, managed } = args;
+  const deny = args.deny ?? PLATFORM_DENY_PERMISSIONS;
   const path = join6(projectDir, ".claude", "settings.json");
   try {
     const fileExists = existsSync5(path);
-    if (Object.keys(managed).length === 0 && !fileExists) return { kind: "noop" };
+    if (Object.keys(managed).length === 0 && deny.length === 0 && !fileExists) return { kind: "noop" };
     let existing = {};
     let backup = null;
     if (fileExists) {
@@ -3750,6 +3789,16 @@ function writeProjectClaudeSettings(args) {
       if (key in managed) next[key] = managed[key];
       else delete next[key];
     }
+    let denyAdded = false;
+    if (deny.length > 0) {
+      const perms = next["permissions"] !== null && typeof next["permissions"] === "object" && !Array.isArray(next["permissions"]) ? { ...next["permissions"] } : {};
+      const current = Array.isArray(perms["deny"]) ? perms["deny"].filter((d) => typeof d === "string") : [];
+      const merged = [...current];
+      for (const rule of deny) if (!merged.includes(rule)) merged.push(rule);
+      denyAdded = merged.length !== current.length || !Array.isArray(perms["deny"]);
+      perms["deny"] = merged;
+      next["permissions"] = perms;
+    }
     if (Object.keys(next).length === 0) {
       if (backup) return { kind: "recovered", path, backup, rewritten: false };
       if (fileExists) {
@@ -3766,7 +3815,11 @@ function writeProjectClaudeSettings(args) {
     mkdirSync5(join6(projectDir, ".claude"), { recursive: true });
     writeFileSync4(path, serialized, { mode: 384 });
     if (backup) return { kind: "recovered", path, backup, rewritten: true };
-    return { kind: "written", path, keys: Object.keys(managed) };
+    return {
+      kind: "written",
+      path,
+      keys: [...Object.keys(managed), ...denyAdded ? ["permissions.deny"] : []]
+    };
   } catch (err) {
     return { kind: "failed", path, error: err instanceof Error ? err.message : String(err) };
   }
@@ -5803,6 +5856,7 @@ function getProjectDir(codeName) {
 }
 
 export {
+  PLATFORM_DENY_PERMISSIONS,
   agentTmpDirFor,
   buildRemoteMcpEntry,
   buildLiveHeaderRemoteMcpProxyEntry,
@@ -5930,4 +5984,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-OHT4PWAK.js.map
+//# sourceMappingURL=chunk-PBMQ4KP6.js.map