cruo-agent 0.1.18 → 0.1.19

package/dist/VERSION

@@ -1 +1 @@
-0.1.18
+0.1.19

package/dist/cli.js

@@ -15300,6 +15300,13 @@ var init_order = __esm({
   }
 });
 
+// ../../packages/core/dist/csv.js
+var init_csv = __esm({
+  "../../packages/core/dist/csv.js"() {
+    "use strict";
+  }
+});
+
 // ../../packages/core/dist/index.js
 var init_dist = __esm({
   "../../packages/core/dist/index.js"() {
@@ -15315,6 +15322,7 @@ var init_dist = __esm({
     init_tree();
     init_place();
     init_order();
+    init_csv();
   }
 });
 
@@ -47659,6 +47667,14 @@ async function invokeHarness(ctx, identity, hit, worktree) {
     "--strict-mcp-config",
     "--allowedTools",
     options.allow,
+    // CRA-131. The local database is shared by every agent and person on the
+    // machine, so no agent resets it. `pnpm supabase:reset` refuses inside a
+    // run on its own (CRUO_AGENT_RUN, below); these are the spellings that
+    // bypass that script. A deny rule matches a prefix, so it is a fence and
+    // not a wall — `bash -c "…"` still gets round it — but it stops the
+    // ordinary command an agent reaches for, which is how 2026-09-19 happened.
+    "--disallowedTools",
+    DB_RESET_DENY.join(","),
     "--system-prompt",
     systemPromptText,
     ...options.model ? ["--model", options.model] : [],
@@ -47675,7 +47691,9 @@ async function invokeHarness(ctx, identity, hit, worktree) {
         // both are written straight through — this tees, it does not capture.
         stdio: ["ignore", "pipe", "pipe"],
         cwd,
-        env: harnessEnv()
+        // CRA-131: marks everything the harness runs as inside an agent run,
+        // which is what makes `pnpm supabase:reset` refuse with no override.
+        env: { ...harnessEnv(), CRUO_AGENT_RUN: hit.ref }
       });
       const startedAtMs = Date.now();
       let stdoutBytes = 0;
@@ -48400,7 +48418,7 @@ to catch: a second supervisor nothing could see or stop.
     if (stopping) return;
   }
 }
-var argv, flag, opt, num2, ms, readOptions, options, log, sessionRenewal, worktreeConfig, lastRefusal, CONFIG_DIR_PREFIX, CRUO_OWNED_ENV, HEAD_STORED, lastHolding, warnedAboutSpendTable, stopping, paused, stopRequestedAt, currentRun, pendingWait;
+var argv, flag, opt, num2, ms, readOptions, options, log, sessionRenewal, worktreeConfig, lastRefusal, CONFIG_DIR_PREFIX, CRUO_OWNED_ENV, DB_RESET_DENY, HEAD_STORED, lastHolding, warnedAboutSpendTable, stopping, paused, stopRequestedAt, currentRun, pendingWait;
 var init_supervisor = __esm({
   "src/supervisor.ts"() {
     "use strict";
@@ -48628,6 +48646,12 @@ cruo-supervisor: ${error51.message}
       // stands in for. Cheap to list, and wrong to discover the hard way.
       "CRUO_SESSION"
     ];
+    DB_RESET_DENY = [
+      "Bash(npx supabase db reset:*)",
+      "Bash(supabase db reset:*)",
+      "Bash(pnpm exec supabase db reset:*)",
+      "Bash(pnpm dlx supabase db reset:*)"
+    ];
     HEAD_STORED = 200;
     lastHolding = 0;
     warnedAboutSpendTable = false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cruo-agent",
-  "version": "0.1.18",
+  "version": "0.1.19",
   "description": "Run a Cruo agent: it watches your board, picks up the cards you assign it, and works them.",
   "license": "MIT",
   "homepage": "https://cruo.space/docs#agents",