@precisa-saude/cli 1.2.0 → 1.3.0

package/dist/templates/.claude/settings.json

@@ -0,0 +1,129 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(git status:*)",
+      "Bash(git diff:*)",
+      "Bash(git log:*)",
+      "Bash(git show:*)",
+      "Bash(git branch:*)",
+      "Bash(git reflog:*)",
+      "Bash(git stash list:*)",
+      "Bash(git worktree list:*)",
+
+      "Bash(git fetch:*)",
+      "Bash(git add:*)",
+      "Bash(git commit:*)",
+      "Bash(git commit -m:*)",
+      "Bash(git commit --amend --no-edit:*)",
+      "Bash(git pull --rebase:*)",
+      "Bash(git rebase:*)",
+      "Bash(git merge --ff-only:*)",
+      "Bash(git checkout -b:*)",
+      "Bash(git restore:*)",
+      "Bash(git stash:*)",
+
+      "Bash(git worktree add:*)",
+      "Bash(git worktree remove:*)",
+
+      "Bash(git push origin *:*)",
+      "Bash(git push -u origin *:*)",
+
+      "Bash(./scripts/worktree.sh:*)",
+      "Bash(pnpm exec precisa-worktree:*)",
+
+      "Bash(pnpm install:*)",
+      "Bash(pnpm install --frozen-lockfile:*)",
+      "Bash(pnpm turbo run:*)",
+      "Bash(pnpm --filter * build:*)",
+      "Bash(pnpm --filter * typecheck:*)",
+      "Bash(pnpm --filter * lint:*)",
+      "Bash(pnpm --filter * lint\\:fix:*)",
+      "Bash(pnpm --filter * test:*)",
+      "Bash(pnpm --filter * test\\:coverage:*)",
+      "Bash(pnpm --filter * dev:*)",
+      "Bash(pnpm exec prettier:*)",
+      "Bash(pnpm exec eslint:*)",
+      "Bash(pnpm exec tsc:*)",
+      "Bash(pnpm exec vitest:*)",
+      "Bash(pnpm list:*)",
+      "Bash(pnpm why:*)",
+      "Bash(pnpm dlx concurrently:*)",
+      "Bash(npm view:*)",
+
+      "Bash(gh pr view:*)",
+      "Bash(gh pr list:*)",
+      "Bash(gh pr status:*)",
+      "Bash(gh pr diff:*)",
+      "Bash(gh pr checks:*)",
+      "Bash(gh issue view:*)",
+      "Bash(gh issue list:*)",
+      "Bash(gh run list:*)",
+      "Bash(gh run view:*)",
+      "Bash(gh api repos/Precisa-Saude/*:*)",
+
+      "Bash(gh pr create:*)",
+      "Bash(gh pr comment:*)",
+      "Bash(gh api -X POST repos/Precisa-Saude/*/pulls/*/comments/*/replies:*)",
+      "Bash(gh api graphql:*)",
+
+      "Bash(nohup pnpm:*)",
+
+      "Bash(tail:*)",
+      "Bash(head:*)",
+      "Bash(curl -sI:*)",
+      "Bash(curl -s localhost:*)",
+      "Bash(curl -s 127.0.0.1:*)",
+      "Bash(curl -s http://localhost:*)",
+      "Bash(jq:*)",
+      "Bash(pkill -f:*)",
+      "Bash(sleep:*)",
+      "Bash(find:*)",
+      "Bash(rg:*)",
+      "Bash(mkdir:*)",
+      "Bash(touch:*)",
+      "Bash(rm /tmp/*:*)"
+    ],
+    "deny": [
+      "Bash(git push --force:*)",
+      "Bash(git push -f:*)",
+      "Bash(git push --force-with-lease:*)",
+      "Bash(git push origin main:*)",
+      "Bash(git push origin master:*)",
+      "Bash(git push origin +:*)",
+      "Bash(git reset --hard:*)",
+      "Bash(git clean -fd:*)",
+      "Bash(git clean -fx:*)",
+      "Bash(git branch -D:*)",
+
+      "Bash(git commit --no-verify:*)",
+      "Bash(git push --no-verify:*)",
+      "Bash(git commit --no-gpg-sign:*)",
+
+      "Bash(git config --global:*)",
+      "Bash(git config --system:*)",
+
+      "Bash(npm publish:*)",
+      "Bash(pnpm publish:*)",
+
+      "Bash(pnpm add:*)",
+      "Bash(pnpm remove:*)",
+      "Bash(npm install *:*)",
+      "Bash(npm uninstall:*)",
+
+      "Bash(rm -rf /:*)",
+      "Bash(rm -rf ~:*)",
+      "Bash(rm -rf $HOME:*)",
+      "Bash(sudo:*)",
+
+      "Bash(aws s3 rm:*)",
+      "Bash(aws s3 sync * s3:*)",
+      "Bash(aws dynamodb delete-table:*)",
+      "Bash(aws dynamodb delete-item:*)",
+      "Bash(aws cognito-idp admin-create-user:*)",
+      "Bash(aws cognito-idp admin-set-user-password:*)",
+      "Bash(aws cognito-idp sign-up:*)",
+      "Bash(aws cognito-idp admin-delete-user:*)",
+      "Bash(aws ses send-email:*)"
+    ]
+  }
+}

package/dist/templates/templates.manifest.yml

@@ -112,6 +112,16 @@ templates:
     merge_strategy: overwrite
     executable: true
 
+  # ─── Claude Code permissions baseline ─────────────────────────────────────
+  # Shared allow/deny list that unblocks documented AGENTS.md workflows
+  # (git feature branches, gh PR reviews, worktree CLI, pnpm/turbo) without
+  # prompting. Repo-specific or user-specific allows belong in
+  # .claude/settings.local.json (not synced, not committed).
+  - source: .claude/settings.json
+    target: .claude/settings.json
+    required_when: always
+    merge_strategy: overwrite
+
   # ─── Claude Code sub-agents ───────────────────────────────────────────────
   # Generic agents extracted from platform's .claude/agents/. Repo-specific
   # agents (iOS QA, UI polish, perf audit for web) stay in the consumer

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@precisa-saude/cli",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Bootstrap and sync Precisa Saúde repositories — the `precisa` CLI.",
   "keywords": [
     "cli",
@@ -45,7 +45,7 @@
     "@types/prompts": "^2.4.9",
     "tsup": "^8.3.5",
     "typescript": "~5.7.3",
-    "@precisa-saude/tsconfig": "1.2.0"
+    "@precisa-saude/tsconfig": "1.3.0"
   },
   "engines": {
     "node": ">=22.0.0"