pruff-skills 1.5.0 → 1.5.1

package/dist/cli.mjs

@@ -6384,6 +6384,25 @@ function applyOwnedEnv(settings, desired, previouslyOwned) {
 		keptUserValues
 	};
 }
+function addAllowEntries(settings, permissionAllow, autoModeAllow) {
+	const isObject = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+	const strings = (value) => Array.isArray(value) ? value.filter((v) => typeof v === "string") : [];
+	const merge = (current, added) => [...current, ...added.filter((entry) => !current.includes(entry))];
+	const permissions = isObject(settings.permissions) ? settings.permissions : {};
+	const autoMode = isObject(settings.autoMode) ? settings.autoMode : {};
+	const currentAutoAllow = Array.isArray(autoMode.allow) ? strings(autoMode.allow) : ["$defaults"];
+	return {
+		...settings,
+		permissions: {
+			...permissions,
+			allow: merge(strings(permissions.allow), permissionAllow)
+		},
+		autoMode: {
+			...autoMode,
+			allow: merge(currentAutoAllow, autoModeAllow)
+		}
+	};
+}
 const HOOK_EVENTS = [
 	"PreToolUse",
 	"PostToolUse",
@@ -6648,6 +6667,8 @@ const DB_READER_SECRET_PREFIX = "pruff/db-reader/";
 const DB_READER_ALLOW_ENTRY = "Bash(pruff-db-query:*)";
 const DB_READER_VERIFY_DATABASE = "pruff-sii";
 const DB_READER_SKILL = "prod-db-query";
+const DB_READER_USER_ALLOW = ["Bash(pruff-db-query:*)", "Bash(pruff-db-verify:*)"];
+const DB_READER_AUTO_MODE_ALLOW = "Read-only production queries through the pruff-db-query wrapper are allowed, including loops and pipes that run it across tenant databases: it connects as the engineer's personal SELECT-only MySQL user (no write grants, verified TLS, 5-connection cap), so it cannot modify production. This never covers Prisma with prod.env, mysql -u admin, the RDS host directly, or any write.";
 const DB_READER_SCRIPTS = ["pruff-db-query", "pruff-db-verify"];
 const RDS_CA_URL = `https://truststore.pki.rds.amazonaws.com/${DB_READER_REGION}/${DB_READER_REGION}-bundle.pem`;
 const MAX_SUGGESTED_NAME_LENGTH = 23;
@@ -6776,6 +6797,14 @@ function mergeAllowlist(workspace) {
 	renameSync(tmp, path);
 	return "added";
 }
+function allowInUserSettings(note) {
+	try {
+		writeClaudeSettings$1(addAllowEntries(readClaudeSettings$1(), DB_READER_USER_ALLOW, [DB_READER_AUTO_MODE_ALLOW]));
+		M.success("pruff-db-query allowed in every folder, auto mode included");
+	} catch (error) {
+		note(`Could not update ~/.claude/settings.json (${error instanceof Error ? error.message : String(error)}). Auto mode may deny pruff-db-query with [Production Reads]: add ${import_picocolors.default.cyan(DB_READER_ALLOW_ENTRY)} to permissions.allow and an autoMode.allow rule for it by hand.`);
+	}
+}
 async function installReaderSkill(workspace, note) {
 	if (existsSync(join(workspace, ".claude", "skills", DB_READER_SKILL, "SKILL.md"))) return;
 	const prevCwd = process.cwd();
@@ -6870,6 +6899,7 @@ async function setupDbReader({ workspace, note }) {
 	if (mergeAllowlist(workspace) === "invalid") note(`Add ${import_picocolors.default.cyan(DB_READER_ALLOW_ENTRY)} to permissions.allow in ${join(workspace, ".claude", "settings.json")} by hand — the file is not valid JSON.`);
 	const hooks = await installHooks(["prod-db-guard"]);
 	for (const failure of hooks.failed) note(`Hook ${failure.name} not installed: ${failure.reason}`);
+	allowInUserSettings(note);
 	await installReaderSkill(workspace, note);
 	if (!existsSync(join(workspace, ".claude", "rules", "prod-db-reads.md"))) note(`The prod-db-reads rule is missing from the workspace — run ${import_picocolors.default.cyan("npx pruff-skills rules add --all")} from ${workspace}.`);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pruff-skills",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "description": "The official Pruff agent skills CLI",
   "type": "module",
   "bin": {