27d14d432c
* fix(cli): keep env reads behind ask * fix(cli): protect pending env reads * fix(cli): share permission rule helpers