ai-engineering-loop 1.0.6 → 1.0.8

package/.claude/commands/ai-engineering-loop.md

@@ -1,6 +1,7 @@
 ---
 name: ai-engineering-loop
 description: Run the AI Engineering Loop (init, status, refresh, or full Maker then Devil's Advocate then Judge).
+allowed-tools: "Read, Grep, Glob, Edit, Write, Task, Bash(npm run *), Bash(npm test *), Bash(npx *), Bash(git *)"
 ---
 
 Follow `.claude/skills/ai-engineering-loop/SKILL.md`.

package/.claude/skills/ai-engineering-loop/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: ai-engineering-loop
 description: Use when the user runs /ai-engineering-loop, asks to init or refresh living project context, or wants the Maker / Devil's Advocate / Judge engineering loop on Claude Code.
+allowed-tools: "Read, Grep, Glob, Edit, Write, Task, Bash(npm run *), Bash(npm test *), Bash(npx *), Bash(git *)"
 ---
 
 # AI Engineering Loop (Claude Code)
@@ -18,6 +19,7 @@ Claude Code talks to strict proxies (including Kiro). Follow this exactly:
    - `prompt`
 3. Do **not** add any other keys. Extra keys make Kiro return HTTP 400 `REQUEST_BODY_INVALID`.
 4. If no Task/Agent tool exists, review in this session and label it `CONTEXT_ISOLATION_ONLY`. Do not invent a tool name.
+5. If Bash or Write returns "cannot determine the safety" or HTTP 400 REQUEST_BODY_INVALID: stop that tool. Do not retry it. Continue with Read, Grep, and Glob. Tell the user to switch off auto permission mode (use default) or add a permissions.allow rule for the verification command, then start a new session.
 
 ## Commands
 

package/README.md

@@ -6,7 +6,7 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
 [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](https://github.com/egagofur/ai-engineering-loop/pulls)
 [![AI Engineering](https://img.shields.io/badge/AI-Engineering%20Loop-orange.svg)](https://github.com/egagofur/ai-engineering-loop)
-[![Release](https://img.shields.io/badge/release-v1.0.6-purple.svg)](https://github.com/egagofur/ai-engineering-loop/releases)
+[![Release](https://img.shields.io/badge/release-v1.0.8-purple.svg)](https://github.com/egagofur/ai-engineering-loop/releases)
 
 **A Reusable, Framework-Agnostic AI Engineering Operating System for Autonomous Coding Agents**
 
@@ -210,6 +210,8 @@ Repo-local Claude Code files:
 - `.claude/skills/ai-engineering-loop/SKILL.md`
 - `.claude/commands/ai-engineering-loop.md` → `/ai-engineering-loop`
 
+On Kiro auto mode, pre-allow verification Bash or the safety classifier 400s the session. Copy `templates/repo-config/claude-permissions.json` into the target repo `.claude/settings.local.json` `permissions.allow` list. If Bash returns "cannot determine the safety", do not retry; switch permission mode to default and start a new session.
+
 See [docs/claude-code-feasibility.md](docs/claude-code-feasibility.md).
 
 ---

package/bin/ai-engineering-loop.js

@@ -15,7 +15,7 @@ const path = require('path');
 const crypto = require('crypto');
 const { execSync } = require('child_process');
 
-const VERSION = '1.0.6';
+const VERSION = '1.0.8';
 const CWD = process.cwd();
 const CONTEXT_DIR = path.join(CWD, '.ai-engineering-loop');
 

package/docs/claude-code-feasibility.md

@@ -40,6 +40,39 @@ Repo files:
 | Task/Agent tool present, child result returned | `TRUE_INDEPENDENT_AGENT` |
 | No subagent tool | `CONTEXT_ISOLATION_ONLY` |
 
-## 4. What stays in Grok-only files
+## 4. Second 400 path: auto-mode Bash classifier
+
+A later failure looks like this:
+
+```
+Error: kr/claude-sonnet-5 is temporarily unavailable, so auto mode
+cannot determine the safety of Bash right now.
+API Error: 400 [kiro/claude-sonnet-5] REQUEST_BODY_INVALID
+```
+
+Read/Grep still work. The first Bash that needs the auto-mode safety classifier (`npm run typecheck`, `npm test`) is sent to Kiro. When that classifier request is invalid or the model is down, Claude Code retries and Kiro returns 400.
+
+Mitigations shipped in the skill:
+
+1. `allowed-tools` pre-approves `Bash(npm run *)`, `Bash(npm test *)`, `Bash(npx *)`, `Bash(git *)` so those commands skip the classifier when the skill or slash command is active.
+2. The skill tells the model not to retry Bash/Write after a classifier or 400 failure.
+3. Project allow rules (copy into `.claude/settings.local.json`):
+
+```json
+{
+  "permissions": {
+    "allow": [
+      "Bash(npm run *)",
+      "Bash(npm test *)",
+      "Bash(npx *)",
+      "Bash(git *)"
+    ]
+  }
+}
+```
+
+If 400 still happens on a fresh session with no Bash yet, it is the 9router `system` field bug, not this package.
+
+## 5. What stays in Grok-only files
 
 Grok spawn details live in `.grok/skills/ai-engineering-loop/SKILL.md`. Claude Code must not load that file as its skill. Claude Code discovers `.claude/` first.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-engineering-loop",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "description": "A reusable, framework-agnostic AI Engineering Operating System for autonomous coding agents.",
   "main": "bin/ai-engineering-loop.js",
   "bin": {
@@ -20,7 +20,9 @@
     "tests/",
     "scripts/",
     ".grok/",
-    ".claude/",
+    ".claude/agents/",
+    ".claude/commands/",
+    ".claude/skills/",
     "LICENSE",
     "README.md",
     "README.npm.md"

package/templates/repo-config/claude-permissions.json

@@ -0,0 +1,10 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(npm run *)",
+      "Bash(npm test *)",
+      "Bash(npx *)",
+      "Bash(git *)"
+    ]
+  }
+}

package/tests/skill-host-compat.test.js

@@ -23,8 +23,10 @@ function parseFrontmatter(content, label) {
 
 test('Claude Code skill is Kiro-safe: no mermaid, latex, HTML breaks, or Grok tool keys', () => {
   const content = readRepo('.claude/skills/ai-engineering-loop/SKILL.md');
-  parseFrontmatter(content, 'claude skill');
+  const { fm } = parseFrontmatter(content, 'claude skill');
 
+  assert.match(fm, /^allowed-tools:/m);
+  assert.match(fm, /Bash\(npm run \*\)/);
   assert.doesNotMatch(content, /```mermaid/);
   assert.doesNotMatch(content, /\$\\/);
   assert.doesNotMatch(content, /<br\s*\/?>/i);
@@ -35,6 +37,7 @@ test('Claude Code skill is Kiro-safe: no mermaid, latex, HTML breaks, or Grok to
   assert.match(content, /subagent_type/);
   assert.match(content, /devil-advocate/);
   assert.match(content, /\bjudge\b/);
+  assert.match(content, /cannot determine the safety/);
 });
 
 test('Claude Code agents exist with Claude tool names and Finding Ledger / verdict contracts', () => {
@@ -55,7 +58,9 @@ test('Claude Code agents exist with Claude tool names and Finding Ledger / verdi
 
 test('Claude Code slash command does not embed Grok spawn keys', () => {
   const cmd = readRepo('.claude/commands/ai-engineering-loop.md');
-  parseFrontmatter(cmd, 'claude command');
+  const { fm } = parseFrontmatter(cmd, 'claude command');
+  assert.match(fm, /^allowed-tools:/m);
+  assert.match(fm, /Bash\(npm run \*\)/);
   assert.doesNotMatch(cmd, /spawn_subagent|capability_mode|resume_from/);
   assert.match(cmd, /ai-engineering-loop/);
 });

package/.claude/settings.local.json

@@ -1,9 +0,0 @@
-{
-  "enabledMcpjsonServers": [
-    "browsermcp"
-  ],
-  "disabledMcpjsonServers": [
-    "Figma-20182",
-    "Figma-i5xgii"
-  ]
-}