agent-harness 0.28.1 → 0.28.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7b96455925e7c106c8209663155c2a03e424119a29da0b5a646d3e4ccafc49e5
-  data.tar.gz: 86ccd871badbfa21eec7f42f948c9756f7651b0619a5cb2f1cbc2766c0ae5ee7
+  metadata.gz: 1e26544498cd552f3992c81ebe33b869b51daf38e199c6f0cdc733437f39f531
+  data.tar.gz: 55d5a1527f9ef1c208706dbfccbce73246751a329f87ff64a514e14301d81283
 SHA512:
-  metadata.gz: 03b0f75fb46ab71d2602230e86add7e3ab7d00da531dc94264e544077c197ec5df85f113edad09213a8b9683caf156141566f8e3ff6ffd98ddb7c5ff8815a746
-  data.tar.gz: 32df3df874d30e2ef7e072b4c55042766c3ac0bb3a64d77460c084d3e848ce598004be166f114c9c7cbc451b4b7390177110866a2a981661f3ce8abb5d58d2d8
+  metadata.gz: 9fd530fe7ab66107b79b776d170523d9095212b0988f6b2e8e5a160b792927f758b951faf1c4a5ef2fa2035d86d2ab8a1d60185c4f0631bb3c66d0d7740153bd
+  data.tar.gz: 8b4f298b243c6185965633e41b0f629648ae308ab8d2acd62f47a73256e1cac22398cc77442b28ca69d8b77afd933415a45e678bf60a1744007d1151db0d3961

data/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.28.1"
+  ".": "0.28.2"
 }

data/CHANGELOG.md

@@ -6,6 +6,13 @@
 * **auth:** add provider-owned PKCE code-exchange API for Claude OAuth (`AgentHarness::Authentication.exchange_code`). Takes an authorization code plus PKCE verifier (and `redirect_uri`/`client_id`), posts an `authorization_code` grant to the Claude token endpoint, and persists the resulting access/refresh tokens in the native `claudeAiOauth` shape. Adds `exchange_code_supported?` and a `code_exchange` key to `auth_capabilities` ([#266](https://github.com/viamin/agent-harness/issues/266)).
 
 
+## [0.28.2](https://github.com/viamin/agent-harness/compare/agent-harness/v0.28.1...agent-harness/v0.28.2) (2026-07-10)
+
+
+### Bug Fixes
+
+* Kilocode: default external_directory permission blocks /tmp scratch files, silently killing non-interactive runs ([#283](https://github.com/viamin/agent-harness/issues/283)) ([1ad518f](https://github.com/viamin/agent-harness/commit/1ad518f5c135c5c95d161b9d41a799692f470f76))
+
 ## [0.28.1](https://github.com/viamin/agent-harness/compare/agent-harness/v0.28.0...agent-harness/v0.28.1) (2026-07-08)
 
 

data/lib/agent_harness/providers/kilocode.rb

@@ -106,6 +106,21 @@ module AgentHarness
         end
       end
 
+      # Kilo CLI (an opencode fork) ships the same `external_directory`
+      # permission category as OpenCode, defaulting to `ask` for anything
+      # outside the project dir. In non-interactive execution there is no human
+      # to answer the resulting permission prompt, so reads/writes of scratch
+      # files under `/tmp/*` via the dedicated read/write/edit tools are
+      # auto-rejected — even though bash I/O to the same paths succeeds (shell
+      # redirection is not a tool call). The agent then silently loses access to
+      # its own scratch output and never completes the task. This default rule
+      # broadens the allowlist to all of `/tmp` so the agent can read back files
+      # it (or its sub-agents) wrote there.
+      DEFAULT_PERMISSION_EXTERNAL_DIRECTORY_PATTERN = "/tmp/**"
+      DEFAULT_PERMISSION_RULE = {
+        "external_directory" => {DEFAULT_PERMISSION_EXTERNAL_DIRECTORY_PATTERN => "allow"}
+      }.freeze
+
       def name
         "kilocode"
       end
@@ -172,6 +187,8 @@ module AgentHarness
 
         config = {provider: {provider_name => {}}}
         config[:model] = "#{provider_name}/#{model_id}" if model_id
+        config[:permission] = deep_dup(options[:permission]) if options[:permission]
+        apply_default_external_directory_permission(config)
 
         config.to_json
       end
@@ -332,6 +349,14 @@ module AgentHarness
 
       private
 
+      def apply_default_external_directory_permission(payload)
+        # Respect any caller-supplied `permission` block verbatim: if a caller
+        # takes responsibility for permission config, we do not override it.
+        return if payload.key?(:permission) || payload.key?("permission")
+
+        payload[:permission] = deep_dup(DEFAULT_PERMISSION_RULE)
+      end
+
       def heartbeat_hook_script(heartbeat_file_path)
         "touch #{Shellwords.escape(heartbeat_file_path)}"
       end

data/lib/agent_harness/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module AgentHarness
-  VERSION = "0.28.1"
+  VERSION = "0.28.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: agent-harness
 version: !ruby/object:Gem::Version
-  version: 0.28.1
+  version: 0.28.2
 platform: ruby
 authors:
 - Bart Agapinan