@kaydash9999/banker-plugins 0.14.0 → 0.15.1

package/skills/setup-bypass-permissions/scripts/fallback/bypass-permissions.ps1

@@ -0,0 +1,247 @@
+# setup-bypass-permissions step 3 on Windows, for when node cannot run the main script.
+#
+#   powershell -NoProfile -File bypass-permissions.ps1 on --yes   set permissions.defaultMode = "bypassPermissions"
+#   powershell -NoProfile -File bypass-permissions.ps1 off        remove that key (Claude Code's default start mode)
+#
+# The file is <config>\settings.json, <config> being $env:CLAUDE_CONFIG_DIR or %USERPROFILE%\.claude.
+# Every other key stays, and so does a BOM. `on` keeps the text from before in
+# settings.json.bypass-permissions.bak; a second `on` finds the mode set and writes nothing. Both files are
+# replaced whole through a temp file, so a stop partway leaves the old text. Paths are taken literally:
+# [ and ] in a folder name are not wildcards. Only the node script's `off` knows what `on` replaced;
+# this `off` removes the key.
+#
+# `on` refuses (exit 1, nothing written) when managed policy (managed-settings.json or its
+# managed-settings.d drop-ins) or the settings file itself sets permissions.disableBypassPermissionsMode,
+# for a file that is not a JSON object, for a policy file or folder this account cannot read, and on a
+# machine with no Claude Code config folder.
+#
+# Exit status: 0 done, or nothing to do. 1 refused. 2 unexpected error. 3 this account may not write the
+# file or its folder. Every result ends with the line `settings file: <path>` on stdout.
+# Windows PowerShell 5.1 or PowerShell 7. ASCII only: Windows PowerShell 5.1 reads a script without a BOM
+# in the ANSI code page.
+
+$ErrorActionPreference = 'Stop'
+Set-StrictMode -Off
+$Mode = 'bypassPermissions'
+$Utf8 = New-Object System.Text.UTF8Encoding($false, $true)  # no BOM, and bytes that are not UTF-8 throw instead of turning into U+FFFD
+
+$script:SettingsPath = ''
+
+# Claude Code reads this output through a pipe as UTF-8, but Windows PowerShell 5.1 writes the console code
+# page there (949 on Korean Windows), garbling a non-ASCII path. Redirected streams get UTF-8; a console keeps its own.
+$script:Out = [Console]::Out
+$script:Err = [Console]::Error
+$Utf8Out = New-Object System.Text.UTF8Encoding($false)
+if ([Console]::IsOutputRedirected) { $script:Out = New-Object System.IO.StreamWriter([Console]::OpenStandardOutput(), $Utf8Out); $script:Out.AutoFlush = $true }
+if ([Console]::IsErrorRedirected) { $script:Err = New-Object System.IO.StreamWriter([Console]::OpenStandardError(), $Utf8Out); $script:Err.AutoFlush = $true }
+
+# Every result ends with the settings file line, so the report can name the file this acted on.
+function Write-Out([string]$text) {
+  $script:Out.WriteLine($text)
+  $script:Out.WriteLine("settings file: $script:SettingsPath")
+}
+
+function Stop-With([int]$code, [string]$text) {
+  $script:Err.WriteLine($text)
+  $script:Out.WriteLine("settings file: $script:SettingsPath")
+  exit $code
+}
+
+function Test-Denied($record) {
+  $e = $record.Exception
+  while ($null -ne $e) {
+    if ($e -is [System.UnauthorizedAccessException]) { return $true }
+    $e = $e.InnerException
+  }
+  return $false
+}
+
+trap {
+  if (Test-Denied $_) { Stop-With 3 "write blocked: $($_.Exception.Message); settings.json left as it was" }
+  Stop-With 2 "unexpected error: $($_.Exception.Message); check settings.json"
+}
+
+function Test-Forbids($data) {
+  if ($data -isnot [System.Management.Automation.PSCustomObject]) { return $false }
+  $perm = $data.PSObject.Properties['permissions']
+  if ($null -eq $perm -or $perm.Value -isnot [System.Management.Automation.PSCustomObject]) { return $false }
+  $flag = $perm.Value.PSObject.Properties['disableBypassPermissionsMode']
+  if ($null -eq $flag) { return $false }
+  return (($flag.Value -is [bool]) -and $flag.Value) -or (($flag.Value -is [string]) -and ($flag.Value -ceq 'disable'))
+}
+
+# The text of UTF-8 bytes without a leading BOM; bytes that are not UTF-8 throw.
+function Read-Text([byte[]]$bytes) {
+  $text = $Utf8.GetString($bytes)
+  if ($text.Length -gt 0 -and $text[0] -eq [char]0xFEFF) { $text = $text.Substring(1) }
+  return $text
+}
+
+function Read-Json([string]$text) {
+  if ($text.Trim().Length -eq 0) { return [pscustomobject]@{} }
+  return ($text | ConvertFrom-Json)
+}
+
+function Get-PolicyHome {
+  # The override exists for this skill's tests alone.
+  if ($env:BANKER_BYPASS_TEST -eq '1' -and $env:BANKER_BYPASS_POLICY_HOME) { return $env:BANKER_BYPASS_POLICY_HOME }
+  if ($IsMacOS) { return '/Library/Application Support/ClaudeCode' }
+  if ($IsLinux) { return '/etc/claude-code' }
+  return 'C:\Program Files\ClaudeCode'
+}
+
+function Stop-Unreadable([string]$path) {
+  Stop-With 1 "refused: this machine's managed policy cannot be read ($path); ask the administrator whether it allows the mode; settings.json left as it was"
+}
+
+# True when the failure only says the path is not there (as opposed to: there, but this account cannot read it).
+function Test-Missing($record) {
+  $e = $record.Exception
+  while ($null -ne $e) {
+    if ($e -is [System.IO.FileNotFoundException] -or $e -is [System.IO.DirectoryNotFoundException]) { return $true }
+    $e = $e.InnerException
+  }
+  return $false
+}
+
+# The policy file that forbids the mode, or ''. A policy file or folder this account cannot read is refused,
+# also when the folder above it cannot be searched (File.Exists and Directory.Exists say false then).
+function Get-PolicyBlock {
+  $policyHome = Get-PolicyHome
+  $files = @([System.IO.Path]::Combine($policyHome, 'managed-settings.json'))
+  $drop = [System.IO.Path]::Combine($policyHome, 'managed-settings.d')
+  $listed = @()
+  if (-not [System.IO.File]::Exists($drop)) {
+    try { $listed = [System.IO.Directory]::GetFiles($drop) } catch { if (-not (Test-Missing $_)) { Stop-Unreadable $drop } }
+  }
+  $files += @($listed | Where-Object {
+      $name = [System.IO.Path]::GetFileName($_)
+      $name.EndsWith('.json') -and -not $name.StartsWith('.')
+    } | Sort-Object)
+  foreach ($file in $files) {
+    if ([System.IO.Directory]::Exists($file)) { continue }
+    $bytes = $null
+    try { $bytes = [System.IO.File]::ReadAllBytes($file) } catch { if (-not (Test-Missing $_)) { Stop-Unreadable $file } }
+    if ($null -eq $bytes) { continue }
+    try { $policy = Read-Json (Read-Text $bytes) } catch { continue }
+    if (Test-Forbids $policy) { return $file }
+  }
+  return ''
+}
+
+# @{ Data; Raw } for a JSON object; Raw is $null when there is no file. Anything else is refused.
+function Read-Settings([string]$path) {
+  if (-not [System.IO.File]::Exists($path)) { return @{ Data = [pscustomobject]@{}; Raw = $null } }
+  $raw = [System.IO.File]::ReadAllBytes($path)
+  try { $text = Read-Text $raw } catch { Stop-With 1 'refused: settings.json is not valid UTF-8; settings.json left as it was' }
+  try { $data = Read-Json $text } catch { Stop-With 1 "refused: settings.json is not valid JSON ($($_.Exception.Message)); settings.json left as it was" }
+  if ($data -isnot [System.Management.Automation.PSCustomObject]) { Stop-With 1 'refused: settings.json is not a JSON object; settings.json left as it was' }
+  $perm = $data.PSObject.Properties['permissions']
+  if ($null -ne $perm -and $perm.Value -isnot [System.Management.Automation.PSCustomObject]) {
+    Stop-With 1 'refused: the permissions entry of settings.json is not an object; settings.json left as it was'
+  }
+  return @{ Data = $data; Raw = $raw }
+}
+
+function Test-Link([string]$path) {
+  $item = Get-Item -LiteralPath $path -Force -ErrorAction SilentlyContinue
+  return ($null -ne $item) -and ($item.LinkType -in 'SymbolicLink', 'Junction')
+}
+
+# The file a chain of links at path ends at (40 hops at most), or path itself.
+function Resolve-Real([string]$path) {
+  for ($hop = 0; $hop -lt 40 -and (Test-Link $path); $hop++) {
+    $target = @((Get-Item -LiteralPath $path -Force).Target)[0]
+    if (-not [System.IO.Path]::IsPathRooted($target)) {
+      $target = [System.IO.Path]::Combine([System.IO.Path]::GetDirectoryName($path), $target)
+    }
+    $path = [System.IO.Path]::GetFullPath($target)
+  }
+  return $path
+}
+
+# On macOS and Linux (PowerShell 7.3+), give tmp the mode of like, or 0600; Windows keeps the folder's ACL.
+function Set-Mode([string]$tmp, [string]$like, [bool]$private) {
+  if (-not ($IsLinux -or $IsMacOS)) { return }
+  if ($null -eq [System.IO.File].GetMethod('SetUnixFileMode', [type[]]@([string], [System.IO.UnixFileMode]))) { return }
+  $mode = [System.IO.UnixFileMode]'UserRead, UserWrite'
+  if (-not $private -and [System.IO.File]::Exists($like)) { $mode = [System.IO.File]::GetUnixFileMode($like) }
+  [System.IO.File]::SetUnixFileMode($tmp, $mode)
+}
+
+# Writes bytes to path through a temp file in the same folder. A link at path is replaced, not followed.
+# [NullString]::Value: PowerShell turns $null into "" for a .NET string parameter, and Replace refuses "".
+function Write-Whole([string]$path, [byte[]]$bytes, [bool]$private) {
+  $full = [System.IO.Path]::GetFullPath($path)
+  $tmp = [System.IO.Path]::Combine([System.IO.Path]::GetDirectoryName($full), '.bypass-permissions.' + [guid]::NewGuid().ToString('N') + '.tmp')
+  try {
+    [System.IO.File]::WriteAllBytes($tmp, $bytes)
+    Set-Mode $tmp $full $private
+    if (Test-Link $full) { [System.IO.File]::Delete($full) }
+    if ([System.IO.File]::Exists($full)) { [System.IO.File]::Replace($tmp, $full, [NullString]::Value) } else { [System.IO.File]::Move($tmp, $full) }
+  } catch {
+    if ([System.IO.File]::Exists($tmp)) { [System.IO.File]::Delete($tmp) }
+    throw
+  }
+}
+
+function Save-Settings([string]$path, $data, $raw) {
+  $bytes = $Utf8.GetBytes(($data | ConvertTo-Json -Depth 64) + "`n")
+  if ($null -ne $raw -and $raw.Length -ge 3 -and $raw[0] -eq 0xEF -and $raw[1] -eq 0xBB -and $raw[2] -eq 0xBF) {
+    $bytes = [byte[]](@([byte]0xEF, [byte]0xBB, [byte]0xBF) + $bytes)
+  }
+  Write-Whole (Resolve-Real $path) $bytes $false
+}
+
+# Drop the node script's record of what `on` replaced. This fallback keeps no record, so one left by an earlier
+# node `on` is stale: the mode is no longer what it describes, and a later node `off` would restore it.
+function Remove-Record([string]$path) { [System.IO.File]::Delete($path + '.bypass-permissions.json') }
+
+function Get-Mode($data) {
+  $perm = $data.PSObject.Properties['permissions']
+  if ($null -eq $perm -or $null -eq $perm.Value.PSObject.Properties['defaultMode']) { return $null }
+  return $perm.Value.defaultMode
+}
+
+function Enable-Mode([string]$path) {
+  $config = [System.IO.Path]::GetDirectoryName($path)
+  if (-not [System.IO.Directory]::Exists($config)) { Stop-With 1 "refused: there is no Claude Code config folder at $config; settings.json left as it was" }
+  $settings = Read-Settings $path
+  $blocked = Get-PolicyBlock
+  if ($blocked) { Stop-With 1 "refused: managed policy forbids bypassPermissions: $blocked; settings.json left as it was" }
+  if (Test-Forbids $settings.Data) { Stop-With 1 'refused: settings.json itself sets permissions.disableBypassPermissionsMode; settings.json left as it was' }
+  if ((Get-Mode $settings.Data) -ceq $Mode) { Write-Out "defaultMode = $Mode (already, nothing changed)"; exit 0 }
+  if ($null -ne $settings.Raw) {
+    [System.IO.File]::Open($path, 'Open', 'ReadWrite').Dispose()
+    Write-Whole ($path + '.bypass-permissions.bak') $settings.Raw $true
+  }
+  Remove-Record $path  # the mode is not on, so any record is stale
+  if ($null -eq $settings.Data.PSObject.Properties['permissions']) {
+    $settings.Data | Add-Member -NotePropertyName permissions -NotePropertyValue ([pscustomobject]@{})
+  }
+  $settings.Data.permissions | Add-Member -NotePropertyName defaultMode -NotePropertyValue $Mode -Force
+  Save-Settings $path $settings.Data $settings.Raw
+  Write-Out "defaultMode = $Mode"
+  exit 0
+}
+
+function Disable-Mode([string]$path) {
+  $settings = Read-Settings $path
+  $current = Get-Mode $settings.Data
+  if ($current -cne $Mode) { Write-Out "defaultMode = $current (not bypassPermissions, nothing changed)"; exit 0 }
+  [System.IO.File]::Open($path, 'Open', 'ReadWrite').Dispose()  # a read-only settings file is a lock: off honours it as on does
+  [void]$settings.Data.permissions.PSObject.Properties.Remove('defaultMode')
+  Save-Settings $path $settings.Data $settings.Raw
+  Remove-Record $path  # only after the write: if it failed, the record is still the way back
+  Write-Out "defaultMode removed (Claude Code's default start mode)"
+  exit 0
+}
+
+$userHome = if ($env:USERPROFILE) { $env:USERPROFILE } else { $HOME }
+$configDir = if ($env:CLAUDE_CONFIG_DIR) { $env:CLAUDE_CONFIG_DIR } else { [System.IO.Path]::Combine($userHome, '.claude') }
+$settingsPath = [System.IO.Path]::Combine($configDir, 'settings.json')
+$script:SettingsPath = $settingsPath
+$request = $args -join ' '
+if ($request -ceq 'on --yes') { Enable-Mode $settingsPath }
+if ($request -ceq 'off') { Disable-Mode $settingsPath }
+Stop-With 1 "refused: usage is 'bypass-permissions.ps1 on --yes' or 'bypass-permissions.ps1 off'"

package/skills/setup-bypass-permissions/scripts/fallback/bypass-permissions.py

@@ -0,0 +1,241 @@
+#!/usr/bin/env python3
+"""setup-bypass-permissions step 3 on macOS and Linux, for when node cannot run the main script.
+
+    python3 bypass-permissions.py on --yes   set permissions.defaultMode = "bypassPermissions"
+    python3 bypass-permissions.py off        remove that key (Claude Code's default start mode)
+
+The file is <config>/settings.json, <config> being $CLAUDE_CONFIG_DIR or ~/.claude. Every other
+key stays, and so does a BOM. `on` keeps the text from before in settings.json.bypass-permissions.bak,
+readable by this account alone; a second `on` finds the mode set and writes nothing. Both files are
+replaced whole through a temp file and a rename, so a stop partway leaves the old text, and a link at
+the settings name stays a link. Only the node script's `off` knows what `on` replaced; this `off`
+removes the key.
+
+`on` refuses (exit 1, nothing written) where Claude Code would not honour the mode or not start with
+it: managed policy (managed-settings.json or its managed-settings.d drop-ins) or the settings file
+itself sets permissions.disableBypassPermissionsMode, or the account is root outside a sandbox Claude
+Code recognises (IS_SANDBOX=1, or its bubblewrap one). It also refuses a file that is not a JSON object,
+a policy file or folder this account cannot read, and a machine with no Claude Code config folder.
+
+Exit status: 0 done, or nothing to do. 1 refused. 2 unexpected error. 3 this account may not write
+the file or its folder. Every result ends with the line `settings file: <path>` on stdout.
+Python 3.6 or later.
+"""
+import errno
+import json
+import os
+import sys
+import tempfile
+
+MODE = "bypassPermissions"
+BOM = b"\xef\xbb\xbf"
+POLICY_HOMES = {"darwin": "/Library/Application Support/ClaudeCode"}
+
+
+class Refused(Exception):
+    pass
+
+
+def settings_path():
+    config = os.environ.get("CLAUDE_CONFIG_DIR") or os.path.expanduser("~/.claude")
+    return os.path.join(config, "settings.json")
+
+
+def policy_home():
+    # The override exists for this skill's tests alone.
+    if os.environ.get("BANKER_BYPASS_TEST") == "1" and os.environ.get("BANKER_BYPASS_POLICY_HOME"):
+        return os.environ["BANKER_BYPASS_POLICY_HOME"]
+    return POLICY_HOMES.get(sys.platform, "/etc/claude-code")
+
+
+def forbids(data):
+    perm = data.get("permissions") if isinstance(data, dict) else None
+    value = perm.get("disableBypassPermissionsMode") if isinstance(perm, dict) else None
+    return value is True or value == "disable"
+
+
+# A policy path that is not there, or is not a file of that kind: no policy, not a failure.
+ABSENT = (errno.ENOENT, errno.ENOTDIR, errno.EISDIR)
+
+
+def unreadable_policy(path):
+    return Refused("this machine's managed policy cannot be read (" + path + "); ask the administrator whether it allows the mode")
+
+
+def policy_files():
+    """The managed settings file and its drop-ins, in the order Claude Code reads them."""
+    home = policy_home()
+    files = [os.path.join(home, "managed-settings.json")]
+    drop = os.path.join(home, "managed-settings.d")
+    try:
+        names = os.listdir(drop)
+    except OSError as e:
+        if e.errno not in ABSENT:
+            raise unreadable_policy(drop)
+        names = []
+    files += [os.path.join(drop, n) for n in sorted(n for n in names if n.endswith(".json") and not n.startswith("."))]
+    return files
+
+
+def policy_block():
+    """The policy file that forbids the mode, or ""; Refused for a policy this account cannot read."""
+    for path in policy_files():
+        try:
+            with open(path, "rb") as handle:
+                raw = handle.read()
+        except OSError as e:
+            if e.errno in ABSENT:
+                continue
+            raise unreadable_policy(path)
+        try:
+            if forbids(json.loads(raw.decode("utf-8-sig"))):
+                return path
+        except ValueError:
+            pass  # not JSON: nothing this fallback can see forbids it
+    return ""
+
+
+def load(path):
+    """(data, raw bytes or None when there is no file) for a JSON object; Refused otherwise."""
+    try:
+        with open(path, "rb") as handle:
+            raw = handle.read()
+    except FileNotFoundError:
+        return {}, None
+    try:
+        text = raw.decode("utf-8-sig")
+    except UnicodeDecodeError:
+        raise Refused("settings.json is not valid UTF-8")
+    if not text.strip():
+        return {}, raw
+    def reject(token):
+        raise ValueError("the constant " + token + " is not JSON")
+
+    try:
+        data = json.loads(text, parse_constant=reject)
+    except ValueError as e:
+        raise Refused("settings.json is not valid JSON (" + str(e) + ")")
+    if not isinstance(data, dict):
+        raise Refused("settings.json is not a JSON object")
+    if not isinstance(data.get("permissions", {}), dict):
+        raise Refused("the permissions entry of settings.json is not an object")
+    return data, raw
+
+
+def replace(path, data, mode):
+    """Write bytes to path through a temp file in the same folder and a rename."""
+    fd, tmp = tempfile.mkstemp(dir=os.path.dirname(path), prefix=".bypass-permissions.")
+    try:
+        with os.fdopen(fd, "wb") as handle:
+            handle.write(data)
+        os.chmod(tmp, mode)
+        try:
+            os.replace(tmp, path)
+        except OSError as e:
+            if e.errno not in (errno.EBUSY, errno.EXDEV):
+                raise
+            with open(path, "wb") as target:  # a bind-mounted single file refuses the rename: write in place
+                target.write(data)
+            os.remove(tmp)
+    except BaseException:
+        if os.path.exists(tmp):
+            os.remove(tmp)
+        raise
+
+
+def save(path, data, raw):
+    """Replace the real file behind path (a link stays a link), keeping its mode and BOM."""
+    real = os.path.realpath(path)
+    mode = os.stat(real).st_mode & 0o777 if os.path.exists(real) else 0o600
+    bom = BOM if raw is not None and raw.startswith(BOM) else b""
+    replace(real, bom + (json.dumps(data, indent=2, ensure_ascii=False) + "\n").encode("utf-8"), mode)
+
+
+def check_on(path, data):
+    # Claude Code lets root use the mode inside a sandbox it recognises: IS_SANDBOX exactly "1", or
+    # CLAUDE_CODE_BUBBLEWRAP set to a true value (2.1.289 reads 1, true, yes, on; 0 or false is not one).
+    bubblewrap = os.environ.get("CLAUDE_CODE_BUBBLEWRAP", "").strip().lower() in ("1", "true", "yes", "on")
+    sandboxed = os.environ.get("IS_SANDBOX") == "1" or bubblewrap
+    if hasattr(os, "geteuid") and os.geteuid() == 0 and not sandboxed:
+        raise Refused("Claude Code will not start in bypassPermissions as root; IS_SANDBOX=1 marks a real sandbox")
+    blocked = policy_block()
+    if blocked:
+        raise Refused("managed policy forbids bypassPermissions: " + blocked)
+    if forbids(data):
+        raise Refused("settings.json itself sets permissions.disableBypassPermissionsMode")
+
+
+def forget_record(path):
+    """Drop the node script's record of what `on` replaced. This fallback keeps no record, so one left by an
+    earlier node `on` is stale: the mode is no longer what it describes, and a later node `off` would restore it."""
+    try:
+        os.remove(path + ".bypass-permissions.json")
+    except FileNotFoundError:
+        pass
+
+
+def turn_on(path):
+    if not os.path.isdir(os.path.dirname(path)):
+        raise Refused("there is no Claude Code config folder at " + os.path.dirname(path))
+    data, raw = load(path)
+    check_on(path, data)
+    if data.get("permissions", {}).get("defaultMode") == MODE:
+        print("defaultMode = " + MODE + " (already, nothing changed)")
+        return 0
+    if raw is not None and not os.access(path, os.W_OK):
+        raise PermissionError(errno.EACCES, "this account may not write", path)
+    if raw is not None:
+        replace(path + ".bypass-permissions.bak", raw, 0o600)
+    forget_record(path)  # the mode is not on, so any record is stale
+    data.setdefault("permissions", {})["defaultMode"] = MODE
+    save(path, data, raw)
+    print("defaultMode = " + MODE)
+    return 0
+
+
+def turn_off(path):
+    data, raw = load(path)
+    current = data.get("permissions", {}).get("defaultMode")
+    if current != MODE:
+        print("defaultMode = " + str(current) + " (not bypassPermissions, nothing changed)")
+        return 0
+    if not os.access(path, os.W_OK):  # a read-only settings file is a lock: off honours it as on does
+        raise PermissionError(errno.EACCES, "this account may not write", path)
+    del data["permissions"]["defaultMode"]
+    save(path, data, raw)
+    forget_record(path)  # only after the write: if it failed, the record is still the way back
+    print("defaultMode removed (Claude Code's default start mode)")
+    return 0
+
+
+def outcome(argv, path):
+    actions = {("on", "--yes"): turn_on, ("off",): turn_off}
+    action = actions.get(tuple(argv[1:]))
+    if action is None:
+        print("refused: usage is `bypass-permissions.py on --yes` or `bypass-permissions.py off`", file=sys.stderr)
+        return 1
+    try:
+        return action(path)
+    except Refused as e:
+        print("refused: " + str(e) + "; settings.json left as it was", file=sys.stderr)
+        return 1
+    except OSError as e:
+        if e.errno in (errno.EACCES, errno.EPERM, errno.EROFS):
+            print("write blocked: " + str(e) + "; settings.json left as it was", file=sys.stderr)
+            return 3
+        print("unexpected error: " + str(e) + "; check settings.json", file=sys.stderr)
+        return 2
+    except Exception as e:  # anything else stopped it partway too
+        print("unexpected error: " + type(e).__name__ + ": " + str(e) + "; check settings.json", file=sys.stderr)
+        return 2
+
+
+def main(argv):
+    path = settings_path()
+    code = outcome(argv, path)
+    print("settings file: " + path)
+    return code
+
+
+if __name__ == "__main__":
+    sys.exit(main(sys.argv))

package/skills/{harness-factory → setup-harness-factory}/SKILL.md

@@ -1,9 +1,9 @@
 ---
-name: harness-factory
-description: "(banker) revfactory/harness(팀 아키텍처 팩토리) 플러그인 설치·구성·사용안내. Claude=harness@harness-marketplace, Codex=meta-harness. 'harness-factory'/'하네스 팩토리'/'에이전트팀 생성' 또는 /banker:setup 시 사용."
+name: setup-harness-factory
+description: "도메인 한 줄로 전문 에이전트 팀을 만들어 주는 `revfactory/harness` 플러그인을 설치하고 구성한 뒤 사용법을 안내. Claude Code 는 `harness@harness-marketplace`, Codex 는 `meta-harness`. 'setup-harness-factory'/'harness-factory'/'하네스 팩토리'/'에이전트팀 생성' 또는 `/banker:setup` 시 사용."
 ---
 
-# harness-factory: revfactory/harness 팀 아키텍처 팩토리 설치·구성
+# setup-harness-factory: revfactory/harness 팀 아키텍처 팩토리 설치·구성
 
 `harness`는 도메인을 한 줄로 받아 `.claude/agents/`+`.claude/skills/`(전문 에이전트팀 + 그 에이전트가 쓸
 스킬)를 생성하는 **메타 스킬**이다. 이 플러그인의 본체는 설치물이 아니라 **방법론**이다. 따라서 이

package/skills/setup-insane-search/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: setup-insane-search
-description: "(banker) insane-search(차단·봇방어 사이트 우회 검색·페치) 플러그인 설치(Claude=gptaku_plugins, Codex=gptaku-codex). 'setup-insane-search'/'insane-search 설치' 또는 /banker:setup 시 사용."
+description: "차단이나 봇 방어가 있는 사이트도 우회해 검색하고 가져오는 플러그인을 설치. Claude Code 는 `gptaku-plugins` 의 `insane-search`, Codex 는 `gptaku-codex` 의 `insane-research-codex`. 'setup-insane-search'/'insane-search 설치' 또는 `/banker:setup` 시 사용."
 ---
 
 # setup-insane-search: insane-search 플러그인 설치

package/skills/setup-java/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: setup-java
-description: "(banker) JDK 21 + JAVA_HOME 설치(alternatives로 java·javac 비대칭 방지, Debian은 Adoptium 전용). jdtls 등 Java LSP 전제. 'setup-java'/'JDK 설치'/'Java 21 설치' 또는 /banker:setup 시 사용."
+description: "JDK 21 을 설치하고 `JAVA_HOME` 을 설정. `alternatives` 로 `java` 와 `javac` 의 버전 비대칭을 막고, Debian 은 Adoptium 만 씀. jdtls 같은 Java LSP 의 전제. 'setup-java'/'JDK 설치'/'Java 21 설치' 또는 `/banker:setup` 시 사용."
 ---
 
 # setup-java: JDK 21 + JAVA_HOME 설치

package/skills/setup-lsp/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: setup-lsp
-description: "(banker) 언어별 LSP 서버(vtsls·basedpyright·bash·jdtls·spring)와 lsp-mcp 브리지 설치·연동. 'setup-lsp'/'LSP 설치'/'언어 서버' 또는 /banker:setup 시 사용."
+description: "언어별 LSP 서버(vtsls, basedpyright, bash, jdtls, spring)와 lsp-mcp 브리지를 설치하고 연동. 'setup-lsp'/'LSP 설치'/'언어 서버' 또는 `/banker:setup` 시 사용."
 ---
 
 # setup-lsp: 언어별 LSP 서버 + lsp-mcp 브리지

package/skills/setup-mcp/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: setup-mcp
-description: "(banker) context7·sequential-thinking·filesystem·git·fetch(+선택 tavily) 범용 MCP 서버를 Claude Code(claude mcp add)·Codex(codex mcp add+config.toml)에 배선(serena·lsp_bridge 제외). 'setup-mcp'/'MCP 서버 설치'/'context7·sequential-thinking 설치' 또는 /banker:setup 시 사용."
+description: "범용 MCP 서버(context7, sequential-thinking, filesystem, git, fetch, 선택 사항인 tavily)를 Claude Code(`claude mcp add`)와 Codex(`codex mcp add`, `config.toml`)에 등록. serena 와 `lsp_bridge` 는 제외. 'setup-mcp'/'MCP 서버 설치'/'context7 설치'/'sequential-thinking 설치' 또는 `/banker:setup` 시 사용."
 ---
 
 # setup-mcp: 범용 MCP 서버 설치

package/skills/setup-node/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: setup-node
-description: "(banker) nvm + Node 22(LTS) 런타임 설치(Windows는 winget 또는 nvm-windows). Claude Code npm 설치·Codex/OMX·npx 기반 MCP 서버 전제. 'setup-node'/'Node 설치'/'nvm 설치' 또는 /banker:setup 시 사용."
+description: "nvm 과 Node 22(LTS)를 설치(Windows 는 winget 이나 nvm-windows). Claude Code 의 npm 설치, Codex 와 OMX, npx 로 도는 MCP 서버의 전제. 'setup-node'/'Node 설치'/'nvm 설치' 또는 `/banker:setup` 시 사용."
 ---
 
 # setup-node: nvm + Node 22(LTS) 런타임 설치

package/skills/setup-omc/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: setup-omc
-description: "(banker) all-in-one·ultra-init·front-qa 가 의존하는 oh-my-claudecode(OMC) 설치/갱신(Codex는 OMX). 'setup-omc'/'OMC 설치'/'oh-my-claudecode 설치' 또는 /banker:setup 시 사용."
+description: "`all-in-one`, `ultra-init`, `front-qa` 가 의존하는 oh-my-claudecode(OMC)를 설치하거나 갱신. Codex 에서는 oh-my-codex(OMX)가 대상. 'setup-omc'/'OMC 설치'/'oh-my-claudecode 설치' 또는 `/banker:setup` 시 사용."
 ---
 
 # setup-omc: oh-my-claudecode(OMC) 설치/갱신

package/skills/setup-omc-hud/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: setup-omc-hud
-description: "(banker) omc_hud(Claude Code 상태표시줄)를 OS별 apply 스크립트로 적용(Codex는 OMX hud). 'setup-omc-hud'/'omc_hud 설치' 또는 /banker:setup 시 사용."
+description: "Claude Code 의 상태표시줄 omc_hud 를 OS별 적용 스크립트로 설치하고, Claude Code 갱신 안내를 줄 맨 끝으로 옮김. Codex 는 OMX 의 `hud` 스킬을 씀. 'setup-omc-hud'/'omc_hud 설치'/'Claude 갱신 안내 위치' 또는 `/banker:setup` 시 사용."
+argument-hint: "[off|status]"
 ---
 
 # setup-omc-hud — omc_hud 상태표시줄 설치 (OS별)
@@ -9,6 +10,8 @@ description: "(banker) omc_hud(Claude Code 상태표시줄)를 OS별 apply 스
 
 **런타임:** omc_hud 는 Claude Code 상태표시줄(`~/.claude/settings.json` statusLine) 대상이다. **Codex 런타임에선 oh-my-codex(OMX)가 자체 `hud` 스킬/구성을 제공**하므로, Codex에선 이 스킬 대신 OMX 의 `hud` 를 사용한다.
 
+**인자가 `off` 또는 `status` 일 때:** 0~3단계를 건너뛰고 3단계의 Claude 갱신 안내 스크립트만 그 인자로 실행해 결과를 보고한다(`off` 는 안내를 래퍼가 정한 자리로 되돌림, `status` 는 상태만 확인).
+
 ## 0. 감지
 ```bash
 case "$(uname -s)" in Darwin) OS=mac;; Linux) OS=linux;; *) OS=windows;; esac; echo "OS=$OS"
@@ -52,8 +55,19 @@ git 없으면 GitHub "Download ZIP" → 해제 → 동봉 적용 스크립트
 - **payload-mon 복구**: 0단계에서 `payload-mon=on` 이었다면, 적용 스크립트가 래퍼를 덮어써 payload 표시 블록이 빠진 상태다.
   payload-mon 스킬(Claude Code `/banker:payload-mon`, Codex `banker-payload-mon`)을 `on` 으로 실행해 다시 켜고, 그 결과를 함께 보고한다.
   `payload-mon=off` 였다면 아무것도 하지 않는다(사용자가 켠 적 없는 기능을 켜지 않는다).
+- **Claude 갱신 안내 위치**: payload-mon 처리 뒤에 이 스킬의 스크립트를 `on` 으로 실행한다. 재적용을 건너뛴 경우에도 실행하고, Windows 도 같은 명령이다.
+  ```bash
+  node "<이 스킬 디렉터리 절대경로>/scripts/claude-update-last.mjs" on
+  ```
+  새 Claude Code 가 나오면 OMC 가 띄우는 `[Claude#2.1.288] -> 2.1.289 claude update` 를 상태표시줄 1번째 줄 맨 끝(OMC 표시 뒤)으로 옮긴다. 2번째 줄의 `[!] claude 2.1.289 - paste: ! claude update` 안내는 그대로 둔다.
+  출력을 그대로 보고한다. 종료 코드 1(거부)이면 래퍼는 바뀌지 않았으니 이유만 보고하고, 2(예기치 못한 오류로 중간에 멈춤)면 `status` 결과를 함께 보고한다.
+  되돌리기는 `off`, 상태 확인은 `status`.
 
 ## 함정
 - `curl` 다운로드는 **대문자 `-O`**(원격 파일명 유지). 소문자 `-o`는 출력명 지정이라 다름.
 - raw URL 의 `refs/heads/main` 브랜치명이 바뀌면 404 → 저장소 확인.
 - `.mjs` 적용은 Node 필요(`node -v`).
+- `claude-update-last` 를 `off` 로 꺼 두었어도 이 스킬을 다시 실행하면 3단계에서 다시 켜진다. 래퍼가 정한 자리를 원하면 끝난 뒤 `off`.
+- 블록은 OMC 의 안내 문구(`[Claude#X] -> Y claude update`)로 안내를 찾는다. OMC 가 문구를 바꾸면 안내는 래퍼가 정한 자리에 남고, 상태표시줄은 깨지지 않는다.
+- 블록은 래퍼가 세그먼트를 합치는 줄에서 `segs`·`colored` 를 읽는다. 래퍼 구조가 바뀌어 그 줄에서 이 이름이 보이지 않으면 `on` 은 성공해도 효과가 없다(상태표시줄은 그대로). 새 Claude Code 가 나왔을 때 안내가 맨 끝에 오는지로 확인한다.
+- 이 블록은 플러그인 밖(`~/.claude/hud/`)에 남는다. 플러그인을 지우기 전에 `off` 를 실행한다.