v0.18.2
Patch release for GitHub issue #31.
Fixed:
- Task-scoped Bash permission matching now applies the same single-command validation to explicit
Bash(...)wildcards as it does to virtualRead/Grep/Glob/LSpermissions. Bash(git status*)andBash(git diff*)no longer allow chained commands such asgit status --short && rg ....- The read-only recovery lane now covers safe repo inspection commands including safe
find,git blame, andgit diff. - Dependency-changing commands such as
npm install --prefix frontendremain denied unless a task explicitly grants them.
Validation:
node scripts/check-version-sync.mjsnode scripts/verify-contracts.mjsbash install.sh --helpnpm run --silent lintgit diff --checknpm test(830 pass, 2 skipped live Claude runtime cases due non-standard ANTHROPIC_BASE_URL, 0 fail)