@staff0rd/assist 0.161.0 → 0.163.0

package/README.md

@@ -122,6 +122,9 @@ After installation, the `assist` command will be available globally. You can als
 - `assist cli-hook` - PreToolUse hook for auto-approving read-only CLI commands (reads from `assist.cli-reads`, also auto-approves read-only `gh api` calls). Supports compound commands (`|`, `&&`, `||`, `;`) by checking each sub-command independently
 - `assist cli-hook add <cli>` - Discover a CLI's commands and auto-permit read-only ones
 - `assist cli-hook check <command>` - Check whether a command would be auto-approved by `cli-hook`
+- `assist cli-hook deny` - List all deny rules
+- `assist cli-hook deny add <pattern> <message>` - Add a deny rule for a command pattern
+- `assist cli-hook deny remove <pattern>` - Remove a deny rule by pattern
 - `assist update` - Update assist to the latest version and sync commands
 - `assist vscode init` - Add VS Code configuration files
 - `assist deploy init` - Initialize Netlify project and configure deployment

package/claude/CLAUDE.md

@@ -9,6 +9,8 @@ When renaming TypeScript files or symbols, use the refactor commands instead of
 All default to dry-run; add `--apply` to execute.
 When using extract, name the destination file after the exported function (e.g. `updateWorkerCapacity.ts` for `updateWorkerCapacity`) to satisfy `useFilenamingConvention` lint rules.
 
+Do not modify `claude/settings.json` without asking the user first. Only read-only commands should be added to the allow list — write operations (add, remove, set, delete) must require confirmation.
+
 When the user mentions a Jira issue key (e.g. `BAD-671`, `PROJ-123`), use these commands to fetch context:
 - `assist jira view <issue-key>` — print the title and description
 - `assist jira ac <issue-key>` — print acceptance criteria