@coderifts/agent-hooks 0.3.0 → 0.3.2

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-hooks",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Ask CodeRifts before Claude Code writes a contract artifact (OpenAPI, AsyncAPI, GraphQL, protobuf, MCP manifest).",
   "author": {
     "name": "CodeRifts",

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 0.3.2 — 2026-10-06
+### Fixed
+- **An MCP client configuration is never treated as a contract (contract-write 1.2.0, P65).** `.mcp.json`, `mcp.json`
+  (also under `.cursor/` and `.vscode/`), `claude_desktop_config.json` and `(cline_)mcp_settings.json`: an edit of one
+  sent its whole text, the servers' `env` credentials included, to CodeRifts preflight. They are decided by name and
+  never read; MCP tool manifests are unchanged.
+
+## 0.3.1 — 2026-10-04
+
+### Changed
+
+- **When CodeRifts could not decide, the refusal says so in one sentence** — the one the GitHub App, `coderifts claude-hook` and the CodeRifts mod write: `GOVERNANCE_UNAVAILABLE: CodeRifts could not decide (<why>); this is not a finding about your change.` It is added to the unreachable and unreadable-answer approvals (`gate.js`) and to the Claude hook's fail-closed messages (`claude-code/hook.mjs`); nothing that stopped now passes. `governanceUnavailable(why)` is exported from `gate.js`.
+
 ## 0.3.0 — 2026-10-03
 
 ### Changed

package/claude-code/hook.mjs

@@ -19,7 +19,7 @@
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 import { afterText, decideToolCall } from "../contract-write.mjs";
-import { createGate, DOES_NOT_PROVE, hostIo } from "../gate.js";
+import { createGate, DOES_NOT_PROVE, governanceUnavailable, hostIo } from "../gate.js";
 
 /** The file after an Edit (`params` is the edit) or a MultiEdit (`params.edits`, in order): contract-write's afterText. */
 export function applyEdits(params, before) {
@@ -135,7 +135,7 @@ export async function runClaudeHook(stdinText, { env = process.env, deps } = {})
       const r = await shellDecision(String(payload.tool_input?.command ?? ""), hostIo(payload.cwd, deps?.readFile, deps?.listDir));
       return r ? jsonDecision(r.decision, r.text) : emptyPass();
     } catch (err) {
-      return failClosed(`CodeRifts Claude hook failed on a Bash call (${String(err?.message ?? err)}). Not knowing is not permission.`);
+      return failClosed(`CodeRifts Claude hook failed on a Bash call (${String(err?.message ?? err)}). ${governanceUnavailable("the Bash check failed")} Not knowing is not permission.`);
     }
   }
 
@@ -151,7 +151,7 @@ export async function runClaudeHook(stdinText, { env = process.env, deps } = {})
     return mapGateResult(result);
   } catch (err) {
     return failClosed(
-      `CodeRifts Claude hook failed before a decision (${String(err?.message ?? err)}). Not knowing is not permission.`,
+      `CodeRifts Claude hook failed before a decision (${String(err?.message ?? err)}). ${governanceUnavailable("the hook failed before a decision")} Not knowing is not permission.`,
     );
   }
 }

package/claude-code/marketplace-entry.json

@@ -5,7 +5,7 @@
     "repo": "coderifts/agent-hooks"
   },
   "description": "Host adapters for CodeRifts: Claude Code PreToolUse asks before Write/Edit of OpenAPI, AsyncAPI, GraphQL, protobuf, or MCP manifest files. Not the GitHub Action (coderifts/contract-gate) and not the guard library (@coderifts/agent-guard).",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "author": {
     "name": "CodeRifts",
     "email": "peter@coderifts.com"

package/contract-write.mjs

@@ -27,7 +27,7 @@
 // written by scripts/generate-contract-write-copies.js, byte for byte (the CommonJS twin is a
 // mechanical transform), and its --check fails on any difference. Do not edit a copy.
 
-export const CONTRACT_WRITE_VERSION = '1.1.0';
+export const CONTRACT_WRITE_VERSION = '1.2.0';
 
 /** What a shell write to a named contract file gets, and what an unnamed one gets. */
 export const SHELL_NAMED_DECISION = 'refuse';
@@ -41,9 +41,21 @@ export const LISTING_LIMITS = Object.freeze({ depth: 8, entries: 5000 });
 /** The @coderifts/contract-path list (index.cjs), word for word; test/contract-write.test.js holds them equal. */
 export const CONTRACT_EXT = /\.(ya?ml|json|graphql|gql|proto)$/i;
 
+/*
+ * 1.2.0 (2026-10-06, the Claude directory's hold MCP_FORWARDS_CREDENTIAL_ENV): an MCP CLIENT
+ * configuration file — the list of servers a client starts, with their `env` credentials — is not a
+ * contract. `.mcp.json` and `mcp.json` matched the list above (".json" + "mcp") as mcp_manifest, so an
+ * Edit of one sent its whole text, tokens included, to preflight. Decided by name, so the file is never
+ * read to decide; it wins over the project's own `schema:` list too. MCP tool manifests are unchanged.
+ * P65 (2026-10-06): the required check uses this same pattern — index.cjs requires it from here, and its
+ * looksLikeContractPath says no first, word for word as below.
+ */
+export const MCP_CLIENT_CONFIG = /(^|\/)(\.?mcp\.json|claude_desktop_config\.json|(cline_)?mcp_settings\.json)$/i;
+
 export function looksLikeContractPath(p) {
   const s = String(p || '').toLowerCase();
   if (s.includes('node_modules/') || s.includes('vendor/')) return false;
+  if (MCP_CLIENT_CONFIG.test(s)) return false;
   return CONTRACT_EXT.test(s) && (s.includes('openapi') || s.includes('swagger') || s.includes('asyncapi')
     || s.endsWith('.graphql') || s.endsWith('.gql') || s.endsWith('.proto') || s.includes('mcp'));
 }
@@ -68,6 +80,7 @@ const HOOK_EXTRAS = Object.freeze([
   [/(^|\/)tools\.(wire\.v1\.)?json$/i, 'mcp_manifest'],
 ]);
 
+
 /** `a/./b/../c` → `a/c`; backslashes become slashes; a leading `./` goes. */
 export function normalizePath(p) {
   const s = String(p || '').replace(/\\/g, '/');
@@ -114,6 +127,7 @@ export function contractType(p, { named = [], excluded = [] } = {}) {
   const rel = normalizePath(p);
   if (!rel) return null;
   if (excluded.some((x) => matchesPattern(rel, x))) return null;
+  if (MCP_CLIENT_CONFIG.test(rel)) return null;
   for (const [re, type] of HOOK_EXTRAS) if (re.test(rel) && !/(^|\/)(node_modules|vendor)\//i.test(rel)) return type;
   if (looksLikeContractPath(rel)) return typeForPath(rel);
   if (named.some((x) => matchesPattern(rel, x))) return typeForPath(rel);

package/gate.js

@@ -122,6 +122,15 @@ export async function askCodeRifts({ endpoint, apiKey, timeoutMs, operation, art
   }
 }
 
+/**
+ * GOVERNANCE_UNAVAILABLE (2026-10-04): the one sentence the App, the CLI hook and the Claude Code mod
+ * write verbatim when CodeRifts could not decide. The call still stops; the sentence says the stop is
+ * about CodeRifts, not about the change.
+ */
+export function governanceUnavailable(why) {
+  return `GOVERNANCE_UNAVAILABLE: CodeRifts could not decide (${why}); this is not a finding about your change.`;
+}
+
 /** Ask for a human, always with a reason. Never `{}`. */
 const ask = (title, description) => ({
   requireApproval: {
@@ -146,6 +155,7 @@ export function decide(outcome, { operation, path }) {
     return ask(
       "CodeRifts did not answer",
       `${path} is a contract artifact and CodeRifts could not be reached (${outcome.detail}). ` +
+        `${governanceUnavailable(`CodeRifts could not be reached: ${outcome.detail}`)} ` +
         `No decision was obtained, and not knowing is not permission.`,
     );
   }
@@ -153,7 +163,8 @@ export function decide(outcome, { operation, path }) {
     return ask(
       "CodeRifts answer could not be read",
       `${path} is a contract artifact and CodeRifts replied with something this gate cannot interpret ` +
-        `(${outcome.detail}). No decision was obtained, and not knowing is not permission.`,
+        `(${outcome.detail}). ${governanceUnavailable(`the answer could not be read: ${outcome.detail}`)} ` +
+        `No decision was obtained, and not knowing is not permission.`,
     );
   }
 

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "coderifts-contract-gate",
   "name": "CodeRifts contract gate",
   "description": "Ask CodeRifts before an agent writes a contract artifact.",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coderifts/agent-hooks",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Ask CodeRifts before an agent writes a contract artifact (OpenClaw before_tool_call and Claude Code PreToolUse).",
   "license": "MIT",
   "homepage": "https://github.com/coderifts/agent-hooks#readme",