@staff0rd/assist 0.162.0 → 0.164.0

package/README.md

@@ -79,7 +79,7 @@ After installation, the `assist` command will be available globally. You can als
 - `assist news` - Start the news web UI showing latest RSS feed items (same as `news web`)
 - `assist news add [url]` - Add an RSS feed URL to the config
 - `assist news web [-p, --port <number>]` - Start a web view of the news feeds (default port 3001)
-- `assist backlog` - Start the backlog web UI (same as `backlog web`)
+- `assist backlog [--dir <path>]` - Start the backlog web UI (same as `backlog web`). `--dir` overrides the directory for backlog file discovery
 - `assist backlog init` - Create an empty assist.backlog.yml
 - `assist backlog list [--status <type>] [-v]` - List all backlog items with status icons
 - `assist backlog add` - Add a new backlog item interactively (prompts for type: story/bug)
@@ -122,6 +122,9 @@ After installation, the `assist` command will be available globally. You can als
 - `assist cli-hook` - PreToolUse hook for auto-approving read-only CLI commands (reads from `assist.cli-reads`, also auto-approves read-only `gh api` calls). Supports compound commands (`|`, `&&`, `||`, `;`) by checking each sub-command independently
 - `assist cli-hook add <cli>` - Discover a CLI's commands and auto-permit read-only ones
 - `assist cli-hook check <command>` - Check whether a command would be auto-approved by `cli-hook`
+- `assist cli-hook deny` - List all deny rules
+- `assist cli-hook deny add <pattern> <message>` - Add a deny rule for a command pattern
+- `assist cli-hook deny remove <pattern>` - Remove a deny rule by pattern
 - `assist update` - Update assist to the latest version and sync commands
 - `assist vscode init` - Add VS Code configuration files
 - `assist deploy init` - Initialize Netlify project and configure deployment

package/claude/CLAUDE.md

@@ -9,6 +9,8 @@ When renaming TypeScript files or symbols, use the refactor commands instead of
 All default to dry-run; add `--apply` to execute.
 When using extract, name the destination file after the exported function (e.g. `updateWorkerCapacity.ts` for `updateWorkerCapacity`) to satisfy `useFilenamingConvention` lint rules.
 
+Do not modify `claude/settings.json` without asking the user first. Only read-only commands should be added to the allow list — write operations (add, remove, set, delete) must require confirmation.
+
 When the user mentions a Jira issue key (e.g. `BAD-671`, `PROJ-123`), use these commands to fetch context:
 - `assist jira view <issue-key>` — print the title and description
 - `assist jira ac <issue-key>` — print acceptance criteria