@plainconceptsplatform/agent-harness 2.5.0 → 2.5.1

package/cli/utils/copy.js

@@ -15,6 +15,24 @@ const NEVER_OVERWRITE = [
 
 const MARKER_COMMANDS = new Set(['.opencode/commands/ops-review.md', '.opencode/commands/ops-backlog.md'])
 
+// Where a project may legitimately keep the doc instead of the repository root.
+// Foundations puts both under ai/, and projects that follow it point their own
+// AGENTS.md there.
+const ROOT_DOCS = new Set(['ARCHITECTURE.md', 'DESIGN.md'])
+const ALTERNATE_DOC_DIRS = ['ai', 'docs']
+
+// Seeding the "NOT GENERATED YET, run /make-architecture" placeholder next to a
+// real architecture document is worse than seeding nothing: pc-make-guardrails
+// reads the root file as its primary source, and an agent that finds the
+// placeholder there concludes the project has no architecture written down.
+async function documentedElsewhere(destDir, fileName) {
+  if (!ROOT_DOCS.has(fileName)) return false
+  for (const directory of ALTERNATE_DOC_DIRS) {
+    if (await fse.pathExists(path.join(destDir, directory, fileName))) return true
+  }
+  return false
+}
+
 function isTemplateTest(relativePath) {
   return relativePath.split(path.sep).join('/').startsWith('.opencode/plugins/') && relativePath.endsWith('.test.js')
 }
@@ -50,6 +68,7 @@ export async function copyContent(contentDir, destDir, platform, ctx = {}) {
       if (isTemplateTest(rel)) return false
       if (ctx.hasDesign && rel === 'DESIGN.md') return false
       if (ctx.hasArchitecture && rel === 'ARCHITECTURE.md') return false
+      if (await documentedElsewhere(destDir, rel)) return false
       // User-owned config files are never overwritten, even with forceOverwrite.
       // The update command calls writeModelsToConfigs separately to set the
       // model field in opencode.jsonc without destroying user additions.

package/harness/.opencode/plugins/pc-system-reminders.js

@@ -139,13 +139,30 @@ async function checkPush(command, root, defaultBranch) {
   }
 }
 
+// `/tmp/gh-aw/` is the agent workflow runtime's own working directory, not agent scratch.
+//
+// GitHub Agentic Workflows stages everything a worker is given there before the agent starts:
+// the issue context, the open-issue list, the pull request diff, the review comments. The worker
+// prompts name those paths and tell the agent to read them. This check tests the whole command
+// string, so it cannot tell "write to /tmp" from "read from /tmp" — and a command that read one
+// of those files and wrote the result anywhere at all was denied.
+//
+// The effect was total and silent. Three refine runs in a row spent their whole turn arguing
+// with this guardrail and emitted nothing: the agent tried
+// `jq -r .body /tmp/gh-aw/agent/issue-context.json > .opencode/.tmp/body.md`, was refused, tried
+// an absolute path, was refused again, and gave up. The advice it is handed names `$REPO_ROOT`,
+// which is unset on a GitHub Actions runner, so following it exactly could not work either.
+//
+// Exempting this one directory is not a hole in the rule. The rule exists so the next step can
+// still find what the agent wrote, and `/tmp/gh-aw/` is exactly where the next step looks.
 function checkScratch(command) {
   const writesSomewhere = /(>>?|\btee\b|\bcp\b|\bmv\b|\bmkdir\b|\btouch\b|\bdd\b)/.test(command)
-  const outsideRepo = /(\/tmp\/|\$TMPDIR|\$TEMP\b|%TEMP%|\bmktemp\b)/.test(command)
+  // Everywhere else stays blocked: /tmp outside gh-aw, $TMPDIR, $TEMP, %TEMP%, mktemp.
+  const outsideRepo = /(\/tmp\/(?!gh-aw\/)|\$TMPDIR|\$TEMP\b|%TEMP%|\bmktemp\b)/.test(command)
   if (writesSomewhere && outsideRepo) {
     deny(
       "Scratch files belong inside the repository, where the next step and the next agent can still find them.",
-      "Write under `$REPO_ROOT/.opencode/.tmp/`.",
+      "Write under `$REPO_ROOT/.opencode/.tmp/`, or the workflow runtime's own `/tmp/gh-aw/`.",
     )
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plainconceptsplatform/agent-harness",
-  "version": "2.5.0",
+  "version": "2.5.1",
   "description": "Installs the Plain Concepts Platform Harness into any codebase, and keeps it up to date. Wires OpenCode, OpenSpec, codegraph, and agentmemory into a multi-agent workflow that runs on native parallel subagents.",
   "keywords": [
     "opencode",