@cardor/agent-harness-kit 1.6.0 → 1.6.3

package/dist/cli.js

@@ -131,12 +131,24 @@ var MCP_CLAUDE_PERMISSIONS_REVIEWER = [
   "mcp__agent-harness-kit__tasks_acceptance_get",
   "mcp__agent-harness-kit__docs_search"
 ];
+var MCP_CLAUDE_PERMISSIONS_CONSULTANT = [
+  "mcp__agent-harness-kit__actions_start",
+  "mcp__agent-harness-kit__actions_write",
+  "mcp__agent-harness-kit__actions_complete",
+  "mcp__agent-harness-kit__actions_get",
+  "mcp__agent-harness-kit__actions_record_file",
+  "mcp__agent-harness-kit__actions_record_tool",
+  "mcp__agent-harness-kit__tasks_get",
+  "mcp__agent-harness-kit__deps_snapshot",
+  "mcp__agent-harness-kit__deps_check"
+];
 var MCP_CLAUDE_PERMISSIONS = [
   .../* @__PURE__ */ new Set([
     ...MCP_CLAUDE_PERMISSIONS_LEAD,
     ...MCP_CLAUDE_PERMISSIONS_EXPLORER,
     ...MCP_CLAUDE_PERMISSIONS_BUILDER,
-    ...MCP_CLAUDE_PERMISSIONS_REVIEWER
+    ...MCP_CLAUDE_PERMISSIONS_REVIEWER,
+    ...MCP_CLAUDE_PERMISSIONS_CONSULTANT
   ])
 ];
 function mergeClaudeSettingsLocalJson(filePath) {
@@ -491,6 +503,9 @@ function agentExplorer(vars) {
 function agentBuilder(vars) {
   return loadAgentTemplate("builder", vars);
 }
+function agentConsultant(vars) {
+  return loadAgentTemplate("consultant", vars);
+}
 function agentReviewer(vars) {
   return loadAgentTemplate("reviewer", vars);
 }
@@ -548,10 +563,11 @@ function agentReviewerToml(vars) {
 }
 function translateFrontmatterForClaudeCode(md, agentName) {
   const permissionsMap = {
-    lead: MCP_CLAUDE_PERMISSIONS_LEAD,
-    explorer: MCP_CLAUDE_PERMISSIONS_EXPLORER,
-    builder: MCP_CLAUDE_PERMISSIONS_BUILDER,
-    reviewer: MCP_CLAUDE_PERMISSIONS_REVIEWER
+    lead: [...MCP_CLAUDE_PERMISSIONS_LEAD],
+    explorer: [...MCP_CLAUDE_PERMISSIONS_EXPLORER],
+    consultant: [...MCP_CLAUDE_PERMISSIONS_CONSULTANT],
+    builder: [...MCP_CLAUDE_PERMISSIONS_BUILDER],
+    reviewer: [...MCP_CLAUDE_PERMISSIONS_REVIEWER]
   };
   const permissions = permissionsMap[agentName] ?? MCP_CLAUDE_PERMISSIONS;
   const mcpLines = permissions.map((t) => `  - ${t}`).join("\n");
@@ -589,6 +605,33 @@ function appendGitignore(cwd2) {
 function slugify(title) {
   return title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 64);
 }
+var AGENT_TOOLS = {
+  lead: [...MCP_CLAUDE_PERMISSIONS_LEAD],
+  explorer: [...MCP_CLAUDE_PERMISSIONS_EXPLORER],
+  consultant: [...MCP_CLAUDE_PERMISSIONS_CONSULTANT],
+  builder: [...MCP_CLAUDE_PERMISSIONS_BUILDER],
+  reviewer: [...MCP_CLAUDE_PERMISSIONS_REVIEWER]
+};
+async function syncAgentPermissions(cwd2) {
+  for (const [agent, tools] of Object.entries(AGENT_TOOLS)) {
+    const filePath = join3(cwd2, ".claude", "agents", `${agent}.md`);
+    if (!existsSync2(filePath)) {
+      console.log(`  ${agent}.md not found \u2014 skipping`);
+      continue;
+    }
+    const content = readFileSync3(filePath, "utf-8");
+    const toolsBlock = `tools:
+${tools.map((t) => `  - ${t}`).join("\n")}
+`;
+    const updated = content.replace(/tools:\n(?:  - [^\n]+\n)*/m, toolsBlock);
+    if (updated === content) {
+      console.log(`  ${agent}.md already in sync`);
+    } else {
+      writeFileSync3(filePath, updated, "utf-8");
+      console.log(`  ${agent}.md updated`);
+    }
+  }
+}
 
 // src/core/materializer/claude-code.ts
 var ClaudeCodeMaterializer = class {
@@ -619,6 +662,7 @@ No tasks in progress.
     const writablePaths = (config.agents.builder.writablePaths ?? []).join(", ");
     writeAgentFile(cwd2, ".claude/agents/lead.md", translateFrontmatterForClaudeCode(agentLead({ projectName }), "lead"));
     writeAgentFile(cwd2, ".claude/agents/explorer.md", translateFrontmatterForClaudeCode(agentExplorer({ projectName, allowedPaths }), "explorer"));
+    writeAgentFile(cwd2, ".claude/agents/consultant.md", translateFrontmatterForClaudeCode(agentConsultant({ projectName }), "consultant"));
     writeAgentFile(cwd2, ".claude/agents/builder.md", translateFrontmatterForClaudeCode(agentBuilder({ projectName, writablePaths }), "builder"));
     writeAgentFile(cwd2, ".claude/agents/reviewer.md", translateFrontmatterForClaudeCode(agentReviewer({ projectName }), "reviewer"));
     mergeClaudeMcpJson(join4(cwd2, ".mcp.json"), config.tools.mcp.port);
@@ -639,6 +683,7 @@ No tasks in progress.
     const writablePaths = (config.agents.builder.writablePaths ?? []).join(", ");
     writeAgentFile(cwd2, ".claude/agents/lead.md", translateFrontmatterForClaudeCode(agentLead({ projectName }), "lead"));
     writeAgentFile(cwd2, ".claude/agents/explorer.md", translateFrontmatterForClaudeCode(agentExplorer({ projectName, allowedPaths }), "explorer"));
+    writeAgentFile(cwd2, ".claude/agents/consultant.md", translateFrontmatterForClaudeCode(agentConsultant({ projectName }), "consultant"));
     writeAgentFile(cwd2, ".claude/agents/builder.md", translateFrontmatterForClaudeCode(agentBuilder({ projectName, writablePaths }), "builder"));
     writeAgentFile(cwd2, ".claude/agents/reviewer.md", translateFrontmatterForClaudeCode(agentReviewer({ projectName }), "reviewer"));
     mergeClaudeMcpJson(join4(cwd2, ".mcp.json"), config.tools.mcp.port);
@@ -789,6 +834,9 @@ function getMaterializer(provider) {
 // src/commands/build.ts
 async function runBuild(cwd2, opts) {
   await buildOnce(cwd2);
+  if (opts.sync) {
+    await syncAgentPermissions(cwd2);
+  }
   if (opts.watch) {
     p.log.info(`Watching agent-harness-kit.config.ts for changes...`);
     watch(cwd2, { recursive: false }, async (_, filename) => {
@@ -1642,7 +1690,7 @@ async function openDB(config, cwd2) {
     const { MySQLDriver } = await import("./mysql-THKQOXIS.js");
     driver = new MySQLDriver(dbConfig);
   } else {
-    const { SQLiteDriver } = await import("./sqlite-XBEJJ5T2.js");
+    const { SQLiteDriver } = await import("./sqlite-KWYK4IJW.js");
     if (dbConfig.type !== "sqlite") {
       throw new Error("Invalid database type");
     }
@@ -2324,14 +2372,57 @@ async function runReset(cwd2, opts) {
 }
 
 // src/core/mcp-server.ts
-import { readdirSync as readdirSync2, readFileSync as readFileSync6, statSync } from "fs";
-import { join as join14, resolve as resolve10 } from "path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync9, readdirSync as readdirSync2, readFileSync as readFileSync7, statSync, writeFileSync as writeFileSync10 } from "fs";
+import { join as join15, resolve as resolve10 } from "path";
 import { Server } from "@modelcontextprotocol/sdk/server";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import {
   CallToolRequestSchema,
   ListToolsRequestSchema
 } from "@modelcontextprotocol/sdk/types.js";
+
+// src/core/permissions-check.ts
+import { existsSync as existsSync10, readFileSync as readFileSync6 } from "fs";
+import { join as join14 } from "path";
+var CANONICAL = {
+  lead: [...MCP_CLAUDE_PERMISSIONS_LEAD],
+  explorer: [...MCP_CLAUDE_PERMISSIONS_EXPLORER],
+  consultant: [...MCP_CLAUDE_PERMISSIONS_CONSULTANT],
+  builder: [...MCP_CLAUDE_PERMISSIONS_BUILDER],
+  reviewer: [...MCP_CLAUDE_PERMISSIONS_REVIEWER]
+};
+function parseToolsFromFrontmatter(content) {
+  const match = content.match(/^---\n([\s\S]*?)\n---/m);
+  if (!match) return [];
+  const fm = match[1];
+  const toolsMatch = fm.match(/^tools:\n((?:  - [^\n]+\n?)*)/m);
+  if (!toolsMatch) return [];
+  return toolsMatch[1].split("\n").map((l) => l.trim().replace(/^- /, "")).filter((l) => l.startsWith("mcp__"));
+}
+function checkPermissionsSync(cwd2) {
+  const agents = {};
+  let in_sync = true;
+  for (const agent of ["lead", "explorer", "consultant", "builder", "reviewer"]) {
+    const filePath = join14(cwd2, ".claude", "agents", `${agent}.md`);
+    if (!existsSync10(filePath)) {
+      const missing2 = CANONICAL[agent];
+      agents[agent] = { ok: false, missing: missing2, extra: [] };
+      in_sync = false;
+      continue;
+    }
+    const content = readFileSync6(filePath, "utf-8");
+    const installed = parseToolsFromFrontmatter(content);
+    const canonical = CANONICAL[agent];
+    const missing = canonical.filter((t) => !installed.includes(t));
+    const extra = installed.filter((t) => !canonical.includes(t));
+    const ok2 = missing.length === 0 && extra.length === 0;
+    if (!ok2) in_sync = false;
+    agents[agent] = { ok: ok2, missing, extra };
+  }
+  return { in_sync, agents };
+}
+
+// src/core/mcp-server.ts
 var VERSION = "0.1.0";
 var TOOLS = [
   {
@@ -2555,6 +2646,21 @@ var TOOLS = [
       },
       required: ["id"]
     }
+  },
+  {
+    name: "permissions.check",
+    description: "Check whether the .claude/agents/*.md tool permission lists are in sync with the current canonical permission constants. Returns per-agent diff with missing and extra tools. Call this at session start to detect outdated agent files after an ahk upgrade.",
+    inputSchema: { type: "object", properties: {}, required: [] }
+  },
+  {
+    name: "deps.snapshot",
+    description: "Snapshot current package.json dependencies to .harness/deps-lock.json",
+    inputSchema: { type: "object", properties: {}, required: [] }
+  },
+  {
+    name: "deps.check",
+    description: "Compare current package.json against .harness/deps-lock.json and report changes",
+    inputSchema: { type: "object", properties: {}, required: [] }
   }
 ];
 async function startMcpServer(config, cwd2) {
@@ -2569,7 +2675,7 @@ async function startMcpServer(config, cwd2) {
     const { name, arguments: args } = request.params;
     const a = args ?? {};
     try {
-      const result = await dispatch(name, a, db, docsPath);
+      const result = await dispatch(name, a, db, docsPath, cwd2);
       return result;
     } catch (err) {
       return ok(`Error: ${err instanceof Error ? err.message : String(err)}`, true);
@@ -2578,7 +2684,7 @@ async function startMcpServer(config, cwd2) {
   const transport = new StdioServerTransport();
   await server.connect(transport);
 }
-async function dispatch(name, args, db, docsPath) {
+async function dispatch(name, args, db, docsPath, cwd2) {
   switch (name) {
     case "actions.start": {
       const taskId = num(args, "taskId");
@@ -2697,6 +2803,62 @@ async function dispatch(name, args, db, docsPath) {
       const task2 = await db.unarchiveTask(id);
       return ok(JSON.stringify(task2));
     }
+    case "permissions.check": {
+      const result = checkPermissionsSync(cwd2);
+      return ok(JSON.stringify(result, null, 2));
+    }
+    case "deps.snapshot": {
+      const pkgPath2 = join15(cwd2, "package.json");
+      if (!existsSync11(pkgPath2)) {
+        return ok("package.json not found in project root", true);
+      }
+      const pkg2 = JSON.parse(readFileSync7(pkgPath2, "utf8"));
+      const snapshot = {
+        capturedAt: (/* @__PURE__ */ new Date()).toISOString(),
+        dependencies: pkg2.dependencies ?? {},
+        devDependencies: pkg2.devDependencies ?? {}
+      };
+      const harnessDir = join15(cwd2, ".harness");
+      mkdirSync9(harnessDir, { recursive: true });
+      writeFileSync10(join15(harnessDir, "deps-lock.json"), JSON.stringify(snapshot, null, 2), "utf8");
+      return ok(JSON.stringify({ message: "Snapshot saved to .harness/deps-lock.json", capturedAt: snapshot.capturedAt }));
+    }
+    case "deps.check": {
+      const pkgPath2 = join15(cwd2, "package.json");
+      const lockPath = join15(cwd2, ".harness", "deps-lock.json");
+      if (!existsSync11(pkgPath2)) {
+        return ok("package.json not found in project root", true);
+      }
+      if (!existsSync11(lockPath)) {
+        return ok(JSON.stringify({ status: "no-snapshot", message: "No deps-lock.json found. Run deps.snapshot first to establish a baseline." }));
+      }
+      const pkg2 = JSON.parse(readFileSync7(pkgPath2, "utf8"));
+      const lock = JSON.parse(readFileSync7(lockPath, "utf8"));
+      const current = { ...pkg2.dependencies ?? {}, ...pkg2.devDependencies ?? {} };
+      const previous = { ...lock.dependencies ?? {}, ...lock.devDependencies ?? {} };
+      const added = [];
+      const removed = [];
+      const majorBumps = [];
+      for (const [name2, version] of Object.entries(current)) {
+        if (!(name2 in previous)) {
+          added.push(`${name2}@${version}`);
+        } else {
+          const prevMajor = parseInt(previous[name2].replace(/^[\^~>=v]/, "").split(".")[0] ?? "0", 10);
+          const curMajor = parseInt(version.replace(/^[\^~>=v]/, "").split(".")[0] ?? "0", 10);
+          if (!isNaN(prevMajor) && !isNaN(curMajor) && curMajor > prevMajor) {
+            majorBumps.push({ name: name2, from: previous[name2], to: version });
+          }
+        }
+      }
+      for (const depName of Object.keys(previous)) {
+        if (!(depName in current)) {
+          removed.push(depName);
+        }
+      }
+      const significant = added.length > 0 || removed.length > 0 || majorBumps.length > 0;
+      const advisory = significant ? "Significant dependency changes detected. Consider running `pnpx autoskills` (or `npx autoskills` if pnpm is unavailable) to refresh agent skills. Clearing stale skills before re-running is recommended." : "No significant dependency changes detected.";
+      return ok(JSON.stringify({ significant, added, removed, majorBumps, advisory, snapshotDate: lock.capturedAt }));
+    }
     default:
       return ok(`Unknown tool: ${name}`, true);
   }
@@ -2709,7 +2871,7 @@ function searchDocs(docsPath, query, maxResults = 10) {
     for (const file of files) {
       if (results.length >= maxResults) break;
       try {
-        const content = readFileSync6(file, "utf8");
+        const content = readFileSync7(file, "utf8");
         const lines = content.split("\n");
         for (let i = 0; i < lines.length; i++) {
           const lower = lines[i].toLowerCase();
@@ -2730,7 +2892,7 @@ function collectMarkdownFiles(dir) {
   const files = [];
   try {
     for (const entry of readdirSync2(dir)) {
-      const full = join14(dir, entry);
+      const full = join15(dir, entry);
       const stat = statSync(full);
       if (stat.isDirectory()) {
         files.push(...collectMarkdownFiles(full));
@@ -2764,6 +2926,18 @@ async function runServe(cwd2, opts) {
   }
   process.stderr.write(`[agent-harness-kit] MCP server starting (stdio)
 `);
+  const syncResult = checkPermissionsSync(cwd2);
+  if (!syncResult.in_sync) {
+    const affected = Object.entries(syncResult.agents).filter(([, r]) => !r.ok).map(([name, r]) => {
+      const parts = [];
+      if (r.missing.length) parts.push(`missing: ${r.missing.map((t) => t.replace("mcp__agent-harness-kit__", "")).join(", ")}`);
+      if (r.extra.length) parts.push(`extra: ${r.extra.map((t) => t.replace("mcp__agent-harness-kit__", "")).join(", ")}`);
+      return `${name} (${parts.join("; ")})`;
+    }).join("\n   ");
+    process.stderr.write(`[agent-harness-kit] Agent permissions out of sync. Run: ahk build --sync
+   ${affected}
+`);
+  }
   await startMcpServer(config, cwd2);
 }
 
@@ -2842,13 +3016,13 @@ async function runStatus(cwd2, opts) {
 }
 
 // src/commands/sync.ts
-import { existsSync as existsSync10, readFileSync as readFileSync7 } from "fs";
-import { join as join15, resolve as resolve11 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync8 } from "fs";
+import { join as join16, resolve as resolve11 } from "path";
 import pc10 from "picocolors";
 async function runSync(cwd2, opts) {
   const config = await loadConfig(cwd2);
   const direction = opts.direction ?? "both";
-  const featureListPath = resolve11(join15(cwd2, config.storage.dir, "feature_list.json"));
+  const featureListPath = resolve11(join16(cwd2, config.storage.dir, "feature_list.json"));
   const db = await openDB(config, cwd2);
   try {
     if (direction === "in" || direction === "both") {
@@ -2862,13 +3036,13 @@ async function runSync(cwd2, opts) {
   }
 }
 async function syncIn(featureListPath, db, dryRun) {
-  if (!existsSync10(featureListPath)) {
+  if (!existsSync12(featureListPath)) {
     console.log(pc10.dim(`feature_list.json not found at ${featureListPath} \u2014 skipping in-sync`));
     return;
   }
   let seeds;
   try {
-    seeds = JSON.parse(readFileSync7(featureListPath, "utf8"));
+    seeds = JSON.parse(readFileSync8(featureListPath, "utf8"));
   } catch (err) {
     console.error(pc10.red(`Failed to parse feature_list.json: ${err}`));
     process.exit(1);
@@ -2953,14 +3127,14 @@ async function runTaskAdd(cwd2) {
 
 // src/commands/task/done.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync11 } from "fs";
+import { existsSync as existsSync13 } from "fs";
 import { resolve as resolve12 } from "path";
 import pc12 from "picocolors";
 async function runTaskDone(cwd2, idOrSlug) {
   const config = await loadConfig(cwd2);
   if (config.health.required) {
     const scriptPath = resolve12(cwd2, config.health.scriptPath);
-    if (existsSync11(scriptPath)) {
+    if (existsSync13(scriptPath)) {
       const result = spawnSync2("bash", [scriptPath], { cwd: cwd2, stdio: "pipe", encoding: "utf8" });
       if (result.status !== 0) {
         console.error(pc12.red("\u2717 Health check failed \u2014 cannot mark task as done."));
@@ -3133,10 +3307,10 @@ async function runTaskList(cwd2, opts) {
 
 // src/core/package-data.ts
 import { createRequire } from "module";
-import { dirname as dirname5, join as join16 } from "path";
+import { dirname as dirname5, join as join17 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 var require2 = createRequire(import.meta.url);
-var pkgPath = join16(dirname5(fileURLToPath3(import.meta.url)), "..", "package.json");
+var pkgPath = join17(dirname5(fileURLToPath3(import.meta.url)), "..", "package.json");
 var pkg = require2(pkgPath);
 
 // src/core/update-check.ts
@@ -3180,7 +3354,7 @@ program.name("ahk").description("agent-harness-kit \u2014 CLI scaffolding for mu
 program.command("init").description("Scaffold a harness interactively in the current directory").option("--name <name>", "Project name (skip prompt)").option("--provider <provider>", "AI provider: claude-code | opencode (skip prompt)").option("--docs <path>", "Docs folder path (skip prompt)").option("--tasks <adapter>", "Task adapter: local | jira | linear (skip prompt)").action(async (opts) => {
   await runInit(cwd, opts);
 });
-program.command("build").description("Regenerate AGENTS.md and provider files from agent-harness-kit.config.ts").option("--watch", "Rebuild on config changes").action(async (opts) => {
+program.command("build").description("Regenerate AGENTS.md and provider files from agent-harness-kit.config.ts").option("--watch", "Rebuild on config changes").option("--sync", "Sync tools: frontmatter in existing .claude/agents/*.md to match current permission constants").action(async (opts) => {
   await runBuild(cwd, opts);
 });
 program.command("health").description("Run health.sh and report result").action(async () => {