@staff0rd/assist 0.189.2 → 0.190.0

package/dist/index.js

@@ -6,7 +6,7 @@ import { Command } from "commander";
 // package.json
 var package_default = {
   name: "@staff0rd/assist",
-  version: "0.189.2",
+  version: "0.190.0",
   type: "module",
   main: "dist/index.js",
   bin: {
@@ -4566,6 +4566,7 @@ function findPhase(id, phase) {
   return { result, dir, db, itemId, phaseIdx };
 }
 function reindexPhases(db, itemId) {
+  db.pragma("defer_foreign_keys = ON");
   const remaining = db.prepare("SELECT idx FROM plan_phases WHERE item_id = ? ORDER BY idx").all(itemId);
   for (let i = 0; i < remaining.length; i++) {
     const oldIdx = remaining[i].idx;
@@ -4845,7 +4846,7 @@ function stripEnvPrefix(parts) {
 }
 
 // src/shared/isApprovedRead.ts
-import { resolve as resolve7 } from "path";
+import { resolve as resolve7, sep } from "path";
 
 // src/shared/tokenize.ts
 function tokenize(command) {
@@ -5059,8 +5060,11 @@ function parsePerms(entries) {
 }
 
 // src/shared/isApprovedRead.ts
+var READ_RE = /^Read\((.+)\)$/;
 function isApprovedRead(command, toolName = "Bash") {
   if (isCdToCwd(command)) return "cd to current directory";
+  const cdRead = isCdToReadAllowedDir(command);
+  if (cdRead) return cdRead;
   const matchedRead = findCliRead(command);
   if (matchedRead) return `Read-only CLI command: ${matchedRead}`;
   const matchedWrite = findCliWrite(command);
@@ -5077,6 +5081,26 @@ function isCdToCwd(command) {
   const resolved = resolve7(normalizeMsysPath(parts[1]));
   return resolved === resolve7(process.cwd());
 }
+function isCdToReadAllowedDir(command) {
+  const parts = command.split(/\s+/);
+  if (parts[0] !== "cd" || parts.length !== 2) return void 0;
+  const target = resolve7(normalizeMsysPath(parts[1]));
+  for (const entry of readSettingsPerms("allow")) {
+    const m = entry.match(READ_RE);
+    if (!m) continue;
+    const base = globBaseDir(m[1]);
+    if (!base) continue;
+    const resolved = resolve7(normalizeMsysPath(base));
+    if (target === resolved || target.startsWith(resolved + sep)) {
+      return `cd to Read-allowed directory: ${entry}`;
+    }
+  }
+  return void 0;
+}
+function globBaseDir(pattern2) {
+  const base = pattern2.replace(/[/\\][^/\\]*[*?[].*$/, "");
+  return /[*?[]/.test(base) ? "" : base;
+}
 function normalizeMsysPath(p) {
   const m = p.match(/^\/([a-zA-Z])(\/.*)/);
   return m ? `${m[1].toUpperCase()}:${m[2]}` : p;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@staff0rd/assist",
-	"version": "0.189.2",
+	"version": "0.190.0",
 	"type": "module",
 	"main": "dist/index.js",
 	"bin": {