@integrity-labs/agt-cli 0.28.1065 → 0.28.1066

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-CHU4KODD.js";
+} from "../chunk-Q6O7HVJQ.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-HDPG36NY.js";
+} from "../chunk-OW6XCSOU.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -5474,7 +5474,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1065" : "dev";
+var cliVersion = true ? "0.28.1066" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6734,7 +6734,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1065" : "dev";
+var cliVersion2 = true ? "0.28.1066" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-HDPG36NY.js → chunk-OW6XCSOU.js}

@@ -3766,10 +3766,22 @@ var SECRETS_DENY_PERMISSIONS = [
   "Read(**/config/credentials.json)",
   "Read(**/.npmrc)",
   "Read(**/.pypirc)",
-  // Write blocks
-  "Write(**/.env*)",
-  "Write(**/secrets/**)",
-  "Write(**/.ssh/**)"
+  // Write blocks, spelled as Edit(...) ON PURPOSE (ENG-11256).
+  //
+  // Claude Code's file permission checks match only Edit(path) rules; a
+  // Write(path) deny rule is silently never consulted. It says so at startup:
+  //
+  //   Permission deny rule (.claude/settings.json): Write(**/.env*) is not
+  //   matched by file permission checks - only Edit(path) rules are. Use
+  //   Edit(**/.env*) instead
+  //
+  // An Edit(path) rule covers every built-in file-editing tool, Write
+  // included. These three were Write(...) until ENG-11256, which means writes
+  // to .env files, secrets/ and .ssh/ were unblocked fleet-wide while the list
+  // looked complete. Do not "restore" the Write spelling.
+  "Edit(**/.env*)",
+  "Edit(**/secrets/**)",
+  "Edit(**/.ssh/**)"
 ];
 var CLAUDE_ARTIFACT_TOOLS_DENY = [
   "Artifact",
@@ -6011,4 +6023,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-HDPG36NY.js.map
+//# sourceMappingURL=chunk-OW6XCSOU.js.map