@ruvnet/open-claude-code 2.1.1 → 2.1.2

package/README.md

@@ -17,7 +17,7 @@
   <img alt="Nightly" src="https://img.shields.io/badge/nightly-verified_releases-brightgreen?style=flat-square" />
 </p>
 
-> **Verified nightly releases:** Detection, source validation, tests, AI analysis and npm publication run automatically. Capability proposals require review before implementation. See the release workflow and ADR-004.
+> **Release automation:** The nightly workflow gates publication on source validation, tests, AI analysis, and registry checks. A successful run is the evidence of completion; failed runs do not advance checkpoints. Capability proposals require review before implementation. See the release workflow and ADR-004.
 
 ---
 
@@ -44,6 +44,53 @@ npx @ruvnet/open-claude-code "what files are in this directory?"
 
 ---
 
+
+## Skills and Claude Code plugin
+
+Three shared skills cover CLI usage, diagnosis, and release verification. Choose one installation method to avoid duplicate skills.
+
+### Install with npx skills
+
+The tested skills installer requires Node 22.20 or newer (Node 24 recommended). OCC itself requires Node 20 or newer.
+
+```bash
+npx skills@1.7.2 add ruvnet/open-claude-code --agent claude-code --skill occ-use occ-diagnose occ-verify-release
+```
+
+OCC 2.1.2 also loads these project skills from `.claude/skills`, including the installer's symlinks. Project skills override user skills. Invoke them with OCC's Skill tool or slash commands.
+
+### Install the native Claude Code plugin
+
+In Claude Code:
+
+```text
+/plugin marketplace add ruvnet/open-claude-code
+/plugin install occ@ruvnet-occ
+/occ:occ-use
+/occ:occ-diagnose
+/occ:occ-verify-release
+```
+
+Restart Claude Code after installation if the current session has not loaded the new skills.
+
+```bash
+claude plugin update occ@ruvnet-occ
+claude plugin uninstall occ@ruvnet-occ
+```
+
+The `occ` plugin uses the same `skills/` sources. It installs no hooks, MCP servers, credentials, or background processes. It guides use of the separately published CLI. This native Claude Code package does not imply compatibility between OCC's custom PluginLoader and all third party Claude plugins.
+
+### Reproduce installation tests
+
+```bash
+# From a repository checkout, with Node 24 and Claude Code installed:
+node scripts/plugin-e2e.mjs
+# Test public GitHub distribution after publishing:
+node scripts/plugin-e2e.mjs ruvnet/open-claude-code
+```
+
+The suite installs and removes real skills and plugins in disposable profiles, checks all three Claude skill expansions with a local model fixture, and verifies OCC discovery. Live provider behavior is tested separately by `scripts/live-package-e2e.mjs`. Tested installer: skills 1.7.2; Claude Code: 2.1.283.
+
 ## 🧠 What Is This?
 
 **Open Claude Code** is a ground-up open source rebuild of Anthropic's [Claude Code CLI](https://docs.anthropic.com/en/docs/claude-code), informed by [ruDevolution's](https://github.com/ruvnet/rudevolution) AI-powered decompilation of the published npm package.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ruvnet/open-claude-code",
-  "version": "2.1.1",
+  "version": "2.1.2",
   "description": "Open source agentic coding CLI with verified nightly upstream analysis",
   "type": "module",
   "bin": {

package/src/core/agent-loop.mjs

@@ -12,11 +12,22 @@ const MAX_TOOL_RECURSION_DEPTH = 50;
 
 export function createAgentLoop({ model, tools, permissions, settings, hooks, cascade = null }) {
     const contextManager = new ContextManager(settings.maxContextTokens || 180000);
+    for (const key of ['allowedTools', 'disallowedTools']) {
+        if (settings[key] != null && (!Array.isArray(settings[key]) ||
+            settings[key].some(name => typeof name !== 'string' || !name.trim()))) {
+            throw new TypeError(key + ' must be an array of nonempty tool names');
+        }
+    }
+    const allowedNames = new Set(settings.allowedTools || []);
+    const deniedNames = new Set(settings.disallowedTools || []);
+    const toolAllowed = name => !deniedNames.has(name) &&
+        (allowedNames.size === 0 || allowedNames.has(name));
+    const availableTools = () => (tools.list?.() || []).filter(tool => toolAllowed(tool.name));
 
     // Build system prompt using the new builder
     const promptResult = buildSystemPrompt({
         cwd: process.cwd(),
-        tools: tools.list?.() || [],
+        tools: availableTools(),
         override: settings.systemPromptOverride,
         addDirs: settings.addDirs,
     });
@@ -113,7 +124,7 @@ export function createAgentLoop({ model, tools, permissions, settings, hooks, ca
         try {
             if (settings.stream !== false && provider === 'anthropic') {
                 // Streaming mode
-                response = await callApiStreaming(provider, activeModel, state, tools.list(), settings);
+                response = await callApiStreaming(provider, activeModel, state, availableTools(), settings);
                 const collectedContent = [];
                 let currentText = '';
                 let currentThinking = '';
@@ -140,7 +151,7 @@ export function createAgentLoop({ model, tools, permissions, settings, hooks, ca
                 response = response.accumulated;
             } else {
                 // Non-streaming mode
-                response = await callApi(provider, activeModel, state, tools.list(), settings);
+                response = await callApi(provider, activeModel, state, availableTools(), settings);
             }
         } catch (err) {
             recordOptOutcome(false);
@@ -180,6 +191,14 @@ export function createAgentLoop({ model, tools, permissions, settings, hooks, ca
             const toolResults = [];
 
             for (const block of toolUseBlocks) {
+                // Enforce before hooks and dispatch, even if the model invents an
+                // unadvertised call. Deny rules take precedence over allow rules.
+                if (!toolAllowed(block.name)) {
+                    yield { type: 'hookPermissionResult', tool: block.name, allowed: false };
+                    toolResults.push({ type: 'tool_result', tool_use_id: block.id,
+                        is_error: true, content: 'Tool blocked by configured allow/deny list' });
+                    continue;
+                }
                 // Run pre-tool hooks
                 if (hooks) {
                     const hookResult = await hooks.runPreToolUse(block.name, block.input);

package/src/skills/loader.mjs

@@ -29,12 +29,13 @@ export class SkillsLoader {
      */
     load(cwd = process.cwd()) {
         const isDefaultCwd = cwd === process.cwd();
+        this.skills.clear();
         this.searchPaths = [path.join(cwd, '.claude', 'skills')];
 
         if (isDefaultCwd) {
             const globalSkills = path.join(process.env.HOME || '', '.claude', 'skills');
             if (globalSkills !== this.searchPaths[0]) {
-                this.searchPaths.push(globalSkills);
+                this.searchPaths.unshift(globalSkills);
             }
         }
 
@@ -49,7 +50,8 @@ export class SkillsLoader {
         try {
             const entries = fs.readdirSync(dir, { withFileTypes: true });
             for (const entry of entries) {
-                if (!entry.isDirectory()) continue;
+                // skills CLI installs directory symlinks by default.
+                if (!entry.isDirectory() && !entry.isSymbolicLink()) continue;
 
                 const skillFile = path.join(dir, entry.name, 'SKILL.md');
                 try {