aegis-desktop 0.8.19 → 0.8.20

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "aegis-desktop",
   "productName": "AEGIS Desktop",
-  "version": "0.8.19",
+  "version": "0.8.20",
   "description": "Thin Electron host for AEGIS — a local chat UI over the shared client/aegis.js transport. Ships transport + UI only; engine logic stays server-side.",
   "author": {
     "name": "AEGIS Code",

package/vendor/agent-gate.mjs

@@ -259,10 +259,27 @@ const WRITEISH_BASH = [
   /(^|[^<])>>?\s*\S/,                   // > file, >> file
   /\btee\b/, /\bsed\s+-i/, /\btruncate\b/, /\bdd\b/,
   /\b(rm|mv|cp|install|touch|mkdir|rmdir|chmod|chown|ln)\b/,
-  /\b(patch|applypatch)\b/, /\bpython[0-9.]*\s+-c\b.*\bopen\s*\(/, /\bperl\s+-i\b/,
+  /\b(patch|applypatch)\b/, /\bperl\s+-i\b/,
   /\bgit\s+(checkout|restore|reset|clean|stash|apply|revert|cherry-pick|merge|rebase)\b/,
   /\bnpm\s+(install|ci|uninstall|update)\b/, /\byarn\s+(add|remove)\b/, /\bpip[0-9.]*\s+install\b/,
   /\bAEGIS_GATE_SKIP\b/,
+
+  // `find` is a writer the moment it mutates: -delete, -exec/-execdir, and the
+  // -fprint/-fls family all write without ever containing `rm` or a redirect.
+  // Found by probing this gate keylessly on 2026-10-02 (`find <gated-tree>
+  // -name guard.json -delete` was reported as a read). Kept in step with
+  // aegiscodex-dev/src/repoguard.js, which carries the same list.
+  /\bfind\b[^|;]*\s-(delete|exec|execdir|fprint|fprint0|fls)\b/,
+  /\bxargs\b/,
+
+  // An inline-eval interpreter is an opaque program: `node -e`, `python -c`,
+  // `perl -e`, `sh -c` can write anywhere without naming a path in the command
+  // text. The old python rule looked for a literal `open(` and so missed
+  // `open(String.fromCharCode(...))`; the interpreter itself is the honest
+  // marker, and path-less write-ish commands fall back to cwd (fail-closed).
+  // `node --test` is deliberately NOT a hit.
+  /\b(python[0-9.]*|perl)\s+-c\b/, /\b(python[0-9.]*|perl)\s+-e\b/,
+  /\bnode\b[^|;]*\s(?:-e|--eval)\b/, /\b(sh|bash|zsh|dash)\s+-c\b/,
 ];
 
 /** Path-shaped tokens in a command line. Deliberately over-eager: see bashTargets. */