@mrsekut/ccron 0.2.1 → 0.3.1

package/README.md

@@ -30,7 +30,8 @@ ccron add \
   --name daily-summary \
   --schedule "15 17 * * 1-5" \
   --prompt "日次サマリーを作成して #daily-summary チャンネルに投稿して" \
-  --mcp-config ~/mcp.json
+  --mcp-config ~/mcp.json \
+  --cwd ~/src/myproject
 
 # Verify setup
 ccron test daily-summary
@@ -66,6 +67,31 @@ Standard cron expression: `"minute hour * * day-of-week"`
 
 Step values (`*/5`) and minute/hour ranges are not supported (launchd limitation).
 
+## Working Directory
+
+Tasks run in `/tmp` by default. Pass `--cwd` to run in a project directory instead:
+
+```bash
+ccron add --name my-task --schedule "0 9 * * *" --prompt "hello" --cwd ~/src/myproject
+```
+
+This matters for more than file access. `claude` picks up its project context from the
+directory it starts in, so with `--cwd` the task can also use that project's
+`CLAUDE.md`, `.claude/skills/` and `.mcp.json`.
+
+That makes it possible to keep the prompt itself in the project as a skill, and have the
+task be a one-liner that invokes it:
+
+```bash
+ccron add --name member-watch --schedule "0 17 * * 1-5" \
+  --prompt "/member-watch を実行して" \
+  --cwd ~/src/myproject
+```
+
+The prompt then lives under version control, and manual runs and scheduled runs share the
+same definition. Without `--cwd`, a task cannot read files outside `/tmp` — it will fail
+with a permission error rather than a missing-file error.
+
 ## MCP
 
 Pass your own MCP config JSON file via `--mcp-config`:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrsekut/ccron",
-  "version": "0.2.1",
+  "version": "0.3.1",
   "description": "Schedule claude -p execution on macOS with launchd",
   "type": "module",
   "license": "MIT",

package/skills/ccron/SKILL.md

@@ -43,8 +43,26 @@ When a user asks to run something on a schedule:
 --schedule "<cron>"     Cron expression: "minute hour * * day-of-week"
 --prompt "<text>"       Prompt string
 --mcp-config <path>     Path to MCP config JSON file
+--cwd <path>            Directory to run claude in (default: /tmp)
 ```
 
+## Working Directory
+
+**If the task touches files outside `/tmp`, pass `--cwd`.** Without it the run fails with a
+permission error, not a missing-file error — an absolute path in the prompt does not help.
+
+`claude` also reads its project context from the directory it starts in, so `--cwd` makes
+that project's `CLAUDE.md`, `.claude/skills/` and `.mcp.json` available to the task.
+
+Prefer putting the prompt in the project as a skill and keeping the task a one-liner:
+
+```bash
+ccron add --name member-watch --schedule "0 17 * * 1-5" \
+  --prompt "/member-watch を実行して" --cwd ~/src/myproject
+```
+
+The prompt stays under version control, and manual and scheduled runs share one definition.
+
 ## Schedule (cron)
 
 Format: `"minute hour * * day-of-week"` (5 fields)

package/src/cli.ts

@@ -41,6 +41,7 @@ File locations:
 Examples:
   ccron add --name daily-summary --schedule "15 17 * * 1-5" --prompt "日次サマリーを作成して"
   ccron add --name weekly-review --schedule "0 22 * * 5" --prompt "週次レビュー" --mcp-config ~/mcp.json
+  ccron add --name member-watch --schedule "0 17 * * 1-5" --prompt "/member-watch を実行して" --cwd ~/src/myproject
   ccron list
   ccron show daily-summary
   ccron test daily-summary

package/src/commands/add.ts

@@ -2,6 +2,7 @@ import {
   type TaskConfig,
   type GlobalConfig,
   validateTaskName,
+  validateCwd,
   readTaskConfig,
   writeTaskConfig,
   readGlobalConfig,
@@ -22,6 +23,7 @@ type AddOptions = {
   schedule: string;
   prompt: string | null;
   mcpConfig: string | null;
+  cwd: string | null;
 };
 
 export async function addCommand(args: string[]): Promise<void> {
@@ -42,6 +44,7 @@ export async function addCommand(args: string[]): Promise<void> {
     schedule: opts.schedule,
     prompt: opts.prompt,
     mcpConfig: opts.mcpConfig,
+    cwd: opts.cwd,
     createdAt: now,
     updatedAt: now,
   };
@@ -84,6 +87,7 @@ function parseAddArgs(args: string[]): AddOptions {
       schedule: { type: 'string' },
       prompt: { type: 'string' },
       'mcp-config': { type: 'string' },
+      cwd: { type: 'string' },
       help: { type: 'boolean', short: 'h' },
     },
     strict: true,
@@ -99,6 +103,7 @@ function parseAddArgs(args: string[]): AddOptions {
     schedule: values.schedule ?? '',
     prompt: values.prompt ?? null,
     mcpConfig: values['mcp-config'] ?? null,
+    cwd: values.cwd ?? null,
   };
 }
 
@@ -131,6 +136,18 @@ async function validateOptions(opts: AddOptions): Promise<void> {
     errors.push('--prompt is required');
   }
 
+  // Working directory
+  if (opts.cwd) {
+    const cwdError = validateCwd(opts.cwd);
+    if (cwdError) errors.push(cwdError);
+    else {
+      const { existsSync, statSync } = await import('fs');
+      if (!existsSync(opts.cwd) || !statSync(opts.cwd).isDirectory()) {
+        errors.push(`Working directory not found: ${opts.cwd}`);
+      }
+    }
+  }
+
   // MCP config file
   if (opts.mcpConfig) {
     const file = Bun.file(opts.mcpConfig);
@@ -191,6 +208,10 @@ Required:
 
 Optional:
   --mcp-config <path>     Path to MCP config JSON file
+  --cwd <path>            Directory to run claude in (default: /tmp)
+                          Set this to a project directory so the task can read
+                          its files and pick up its CLAUDE.md, .claude/skills
+                          and .mcp.json
 
 Schedule format (cron):
   "minute hour * * day-of-week"

package/src/commands/edit.ts

@@ -4,6 +4,7 @@ import {
   readGlobalConfig,
   scriptPath,
   plistPath,
+  validateCwd,
 } from '../config';
 import { parseSchedule } from '../schedule';
 import {
@@ -20,6 +21,7 @@ export async function editCommand(args: string[]): Promise<void> {
       schedule: { type: 'string' },
       prompt: { type: 'string' },
       'mcp-config': { type: 'string' },
+      cwd: { type: 'string' },
       help: { type: 'boolean', short: 'h' },
     },
     allowPositionals: true,
@@ -66,6 +68,24 @@ export async function editCommand(args: string[]): Promise<void> {
     changed = true;
   }
 
+  if (values.cwd !== undefined) {
+    const cwd = values.cwd;
+    if (cwd) {
+      const cwdError = validateCwd(cwd);
+      if (cwdError) {
+        console.error(`Error: ${cwdError}`);
+        process.exit(1);
+      }
+      const { existsSync, statSync } = await import('fs');
+      if (!existsSync(cwd) || !statSync(cwd).isDirectory()) {
+        console.error(`Working directory not found: ${cwd}`);
+        process.exit(1);
+      }
+    }
+    task.cwd = cwd || null;
+    changed = true;
+  }
+
   if (!changed) {
     console.log('No changes specified. Use --help to see available options.');
     return;
@@ -110,6 +130,7 @@ Options:
   --schedule <cron>       Update cron expression
   --prompt <text>         Update prompt
   --mcp-config <path>     Update MCP config file path (pass "" to remove)
+  --cwd <path>            Update the directory claude runs in (pass "" to reset to /tmp)
 
 Examples:
   ccron edit daily-summary --schedule "0 18 * * 1-5"

package/src/commands/show.ts

@@ -50,6 +50,7 @@ Displays task configuration, launchd status, and file locations.`);
     `Schedule:   ${task.schedule}`,
     `Prompt:     ${promptDisplay}`,
     `MCP config: ${task.mcpConfig ?? '(none)'}`,
+    `Working dir: ${task.cwd ?? '/tmp (default)'}`,
     `Status:     ${statusStr}`,
     `Last exit:  ${exitStr}`,
     `Created:    ${formatDate(task.createdAt)}`,

package/src/commands/test.ts

@@ -25,7 +25,7 @@ Checks:
   2. claude auth status (logged in)
   3. ulimit -n (file descriptors)
   4. Script file exists
-  5. Script path is outside TCC-protected directories
+  5. Script path (and cwd, if set) is outside TCC-protected directories
   6. Plist registered in launchd
   7. MCP config exists (if task uses MCP)
   8. MCP auth (if task uses MCP) — runs claude CLI to verify OAuth tokens
@@ -58,6 +58,7 @@ Example:
   checks.push(await checkUlimit());
   checks.push(await checkScriptExists(name));
   checks.push(checkScriptTccSafe(name));
+  if (task.cwd) checks.push(checkCwdTccSafe(task.cwd));
   checks.push(await checkPlistRegistered(name));
 
   if (task.mcpConfig) {
@@ -175,11 +176,32 @@ async function checkScriptExists(name: string): Promise<CheckResult> {
   };
 }
 
+const TCC_DIRS = ['Desktop', 'Documents', 'Downloads'];
+
+function tccProtects(path: string): boolean {
+  const home = homedir();
+  return TCC_DIRS.some(dir => path.startsWith(`${home}/${dir}`));
+}
+
+function checkCwdTccSafe(cwd: string): CheckResult {
+  const inTcc = tccProtects(cwd);
+  return {
+    label: 'TCC protection (cwd)',
+    ok: !inTcc,
+    detail: inTcc
+      ? `cwd is in a TCC-protected directory (${cwd})`
+      : `cwd is outside TCC-protected directories`,
+    // Granting Full Disk Access to /bin/bash is not enough: the claude process
+    // gets its own TCC identity and still fails with EPERM on these paths.
+    fix: inTcc
+      ? 'Move the project outside ~/Desktop, ~/Documents, ~/Downloads, or grant Full Disk Access to the claude binary'
+      : undefined,
+  };
+}
+
 function checkScriptTccSafe(name: string): CheckResult {
   const path = scriptPath(name);
-  const home = homedir();
-  const tccDirs = [`${home}/Desktop`, `${home}/Documents`, `${home}/Downloads`];
-  const inTcc = tccDirs.some(dir => path.startsWith(dir));
+  const inTcc = tccProtects(path);
   return {
     label: 'TCC protection',
     ok: !inTcc,

package/src/config.ts

@@ -8,6 +8,7 @@ export type TaskConfig = {
   schedule: string;
   prompt: string | null;
   mcpConfig: string | null;
+  cwd: string | null;
   createdAt: string;
   updatedAt: string;
 };
@@ -123,6 +124,11 @@ function defaultGlobalConfig(): GlobalConfig {
 
 const TASK_NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
 
+export function validateCwd(cwd: string): string | null {
+  if (!cwd.startsWith('/')) return 'Working directory must be an absolute path';
+  return null;
+}
+
 export function validateTaskName(name: string): string | null {
   if (!name) return 'Task name is required';
   if (!TASK_NAME_RE.test(name))

package/src/generator.ts

@@ -31,7 +31,7 @@ export function generateScriptContent(
     '',
     `ulimit -n ${global.ulimit} 2>/dev/null || true`,
     '',
-    'cd /tmp',
+    `cd ${task.cwd ?? '/tmp'}`,
     '',
   ];
 
@@ -59,6 +59,11 @@ export function generateScriptContent(
 
 /**
  * Generate the launchd plist XML content.
+ *
+ * WorkingDirectory stays /tmp even when the task sets `cwd`. launchd performs the
+ * chdir itself, and that chdir is denied for TCC-protected locations (~/Desktop,
+ * ~/Documents, ...), which fails the job before the script runs. The script's own
+ * `cd` handles `cwd` instead.
  */
 export function generatePlistContent(
   task: TaskConfig,