agent-harness 0.28.0 → 0.28.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 364b92c9ed4ab4f3b1bb7414d8272030587282ddb5a333ef6bab44ef898b8012
-  data.tar.gz: 07c7b8036efd8f1d5711429ce618ed4ed273d34651b6592ab3ff6c220fdcc657
+  metadata.gz: 1e26544498cd552f3992c81ebe33b869b51daf38e199c6f0cdc733437f39f531
+  data.tar.gz: 55d5a1527f9ef1c208706dbfccbce73246751a329f87ff64a514e14301d81283
 SHA512:
-  metadata.gz: f7e6a6ca4e672810c62e0fd33e7cd2e597f696bec48e65e486ee0a9958ea7a512e2188331441abb80da2bcfd1114f7484710adca1d607760558c59ef64652475
-  data.tar.gz: eecbd525f8d1dac9a89679c99bbad0b206b164238a506baf68f0cc0fddc3501b884fccc73a3cec3d1639edadca4ecac02efe7fa4c49c405e8afdcf8ad4501e75
+  metadata.gz: 9fd530fe7ab66107b79b776d170523d9095212b0988f6b2e8e5a160b792927f758b951faf1c4a5ef2fa2035d86d2ab8a1d60185c4f0631bb3c66d0d7740153bd
+  data.tar.gz: 8b4f298b243c6185965633e41b0f629648ae308ab8d2acd62f47a73256e1cac22398cc77442b28ca69d8b77afd933415a45e678bf60a1744007d1151db0d3961

data/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.28.0"
+  ".": "0.28.2"
 }

data/CHANGELOG.md

@@ -6,6 +6,20 @@
 * **auth:** add provider-owned PKCE code-exchange API for Claude OAuth (`AgentHarness::Authentication.exchange_code`). Takes an authorization code plus PKCE verifier (and `redirect_uri`/`client_id`), posts an `authorization_code` grant to the Claude token endpoint, and persists the resulting access/refresh tokens in the native `claudeAiOauth` shape. Adds `exchange_code_supported?` and a `code_exchange` key to `auth_capabilities` ([#266](https://github.com/viamin/agent-harness/issues/266)).
 
 
+## [0.28.2](https://github.com/viamin/agent-harness/compare/agent-harness/v0.28.1...agent-harness/v0.28.2) (2026-07-10)
+
+
+### Bug Fixes
+
+* Kilocode: default external_directory permission blocks /tmp scratch files, silently killing non-interactive runs ([#283](https://github.com/viamin/agent-harness/issues/283)) ([1ad518f](https://github.com/viamin/agent-harness/commit/1ad518f5c135c5c95d161b9d41a799692f470f76))
+
+## [0.28.1](https://github.com/viamin/agent-harness/compare/agent-harness/v0.28.0...agent-harness/v0.28.1) (2026-07-08)
+
+
+### Bug Fixes
+
+* **opencode:** default-merge permissive external_directory permission for non-interactive runs ([#280](https://github.com/viamin/agent-harness/issues/280)) ([1a282aa](https://github.com/viamin/agent-harness/commit/1a282aad6de0e696a9fcd02ebc0be32f1ef6e0e9)), closes [#277](https://github.com/viamin/agent-harness/issues/277)
+
 ## [0.28.0](https://github.com/viamin/agent-harness/compare/agent-harness/v0.27.1...agent-harness/v0.28.0) (2026-07-08)
 
 

data/lib/agent_harness/providers/kilocode.rb

@@ -106,6 +106,21 @@ module AgentHarness
         end
       end
 
+      # Kilo CLI (an opencode fork) ships the same `external_directory`
+      # permission category as OpenCode, defaulting to `ask` for anything
+      # outside the project dir. In non-interactive execution there is no human
+      # to answer the resulting permission prompt, so reads/writes of scratch
+      # files under `/tmp/*` via the dedicated read/write/edit tools are
+      # auto-rejected — even though bash I/O to the same paths succeeds (shell
+      # redirection is not a tool call). The agent then silently loses access to
+      # its own scratch output and never completes the task. This default rule
+      # broadens the allowlist to all of `/tmp` so the agent can read back files
+      # it (or its sub-agents) wrote there.
+      DEFAULT_PERMISSION_EXTERNAL_DIRECTORY_PATTERN = "/tmp/**"
+      DEFAULT_PERMISSION_RULE = {
+        "external_directory" => {DEFAULT_PERMISSION_EXTERNAL_DIRECTORY_PATTERN => "allow"}
+      }.freeze
+
       def name
         "kilocode"
       end
@@ -172,6 +187,8 @@ module AgentHarness
 
         config = {provider: {provider_name => {}}}
         config[:model] = "#{provider_name}/#{model_id}" if model_id
+        config[:permission] = deep_dup(options[:permission]) if options[:permission]
+        apply_default_external_directory_permission(config)
 
         config.to_json
       end
@@ -332,6 +349,14 @@ module AgentHarness
 
       private
 
+      def apply_default_external_directory_permission(payload)
+        # Respect any caller-supplied `permission` block verbatim: if a caller
+        # takes responsibility for permission config, we do not override it.
+        return if payload.key?(:permission) || payload.key?("permission")
+
+        payload[:permission] = deep_dup(DEFAULT_PERMISSION_RULE)
+      end
+
       def heartbeat_hook_script(heartbeat_file_path)
         "touch #{Shellwords.escape(heartbeat_file_path)}"
       end

data/lib/agent_harness/providers/opencode.rb

@@ -128,6 +128,19 @@ module AgentHarness
 
       DEFAULT_INSTALLATION_CONTRACT = build_installation_contract(SUPPORTED_CLI_VERSION)
 
+      # OpenCode's stock default only allowlists `external_directory` access to
+      # `/tmp/opencode/*`, but its own sub-agent delegation pattern (e.g. the
+      # Explore-Agent used to summarize large diffs/outputs) writes scratch
+      # files to other `/tmp/*` paths. In non-interactive execution there is no
+      # human to approve the resulting permission prompt, so the agent silently
+      # loses access to its own scratch output and never completes the task.
+      # This default rule broadens the allowlist to all of `/tmp` so the agent
+      # can read back files it (or its sub-agents) wrote there.
+      DEFAULT_PERMISSION_EXTERNAL_DIRECTORY_PATTERN = "/tmp/**"
+      DEFAULT_PERMISSION_RULE = {
+        "external_directory" => {DEFAULT_PERMISSION_EXTERNAL_DIRECTORY_PATTERN => "allow"}
+      }.freeze
+
       def name
         "opencode"
       end
@@ -265,9 +278,18 @@ module AgentHarness
         payload["model"] = runtime.model if runtime.model
         payload["provider"] = runtime.api_provider if runtime.api_provider
         payload["baseURL"] = runtime.base_url if runtime.base_url
+        apply_default_external_directory_permission(payload)
         payload.empty? ? nil : payload
       end
 
+      def apply_default_external_directory_permission(payload)
+        # Respect any caller-supplied `permission` block verbatim: if a caller
+        # takes responsibility for permission config, we do not override it.
+        return if payload.key?("permission")
+
+        payload["permission"] = deep_dup(DEFAULT_PERMISSION_RULE)
+      end
+
       def opencode_config_path(_runtime)
         "~/.config/opencode/opencode.json"
       end

data/lib/agent_harness/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module AgentHarness
-  VERSION = "0.28.0"
+  VERSION = "0.28.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: agent-harness
 version: !ruby/object:Gem::Version
-  version: 0.28.0
+  version: 0.28.2
 platform: ruby
 authors:
 - Bart Agapinan