gcf-harness-aif-ext 0.8.0 → 0.8.1

package/README.md

@@ -33,7 +33,7 @@ This installs the `gcf-run` and `gcf-run-ingest` skills and registers the `gcf-h
 ai-factory gcf-harness init    # per project: .claude/settings.json + .gitignore
 ```
 
-It is **per project**, not global — run it again in every game repository: it adds the readset-guard `PreToolUse` entry to the project's `.claude/settings.json` (never `~/.claude`) and `.gcf-session/` to `.gitignore`. It is idempotent — a re-run after moving or cloning the project repoints the hook at the new path — refuses when the `gcf` command is not registered, and refuses to rewrite a `settings.json` it cannot parse. It is a separate step for the same reason as `gcf hooks-install`: an AI Factory manifest cannot install Claude Code hooks.
+It is **per project**, not global — run it again in every game repository: it adds the readset-guard `PreToolUse` entry to the project's `.claude/settings.json` (never `~/.claude`) and `.gcf-session/` to `.gitignore`. It also allows what an unattended `claude -p` run needs at least — `Edit`, `Write`, `Bash(git *)`, `Bash(ai-factory *)` — because print mode cannot ask and denies the rest; add your engine's tools yourself (for example `mcp__<editor-server>` for an editor driven over MCP). Commit `.claude/settings.json`: the rules apply to every Claude session in the project. It is idempotent — a re-run after moving or cloning the project repoints the hook at the new path — refuses when the `gcf` command is not registered, and refuses to rewrite a `settings.json` it cannot parse. It is a separate step for the same reason as `gcf hooks-install`: an AI Factory manifest cannot install Claude Code hooks.
 
 ## Upgrade
 

package/commands/harness.js

@@ -1,6 +1,7 @@
 // `ai-factory gcf-harness init` — registers the readset-guard PreToolUse hook in the
 // project's .claude/settings.json (the AIF manifest cannot install Claude Code hooks —
-// same decision as gcf hooks-install for git hooks). Idempotent by marker comment.
+// same decision as gcf hooks-install for git hooks). Idempotent by marker comment. It also
+// allows what a headless agent run needs (AGENT_ALLOW).
 // `ai-factory gcf-harness gate <ids…>` — the /gcf-run gate as code (Harness-PRD §4.3).
 import { readFile, writeFile, mkdir, appendFile } from 'node:fs/promises';
 import { existsSync, readFileSync } from 'node:fs';
@@ -210,6 +211,20 @@ function registerGuard(settings, command) {
   return stale.length ? 'repointed' : null;
 }
 
+// What a headless `claude -p` run needs at least: it cannot ask, so anything not allowed is
+// denied. The engine's own tools (an editor's MCP server) are the project's to add.
+const AGENT_ALLOW = ['Edit', 'Write', 'Bash(git *)', 'Bash(ai-factory *)'];
+
+/** Adds the rules the settings do not hold yet; returns the ones added. */
+function allowAgent(settings) {
+  settings.permissions ??= {};
+  settings.permissions.allow ??= [];
+  const added = AGENT_ALLOW.filter((r) => !settings.permissions.allow.includes(r));
+  settings.permissions.allow.push(...added);
+
+  return added;
+}
+
 /**
  * Only an active rule ignoring the root .gcf-session/ counts — not a comment or a pattern
  * for some other directory that happens to contain the name.
@@ -235,14 +250,17 @@ async function init(program) {
   const guard = path.join(EXT_ROOT, 'hooks', 'readset-guard.js').replaceAll('\\', '/');
   const settings = await readSettings(settingsFile);
   const change = registerGuard(settings, `node "${guard}" # ${MARKER}`);
-  if (change) {
+  const allowed = allowAgent(settings);
+  if (change || allowed.length) {
     await mkdir(path.dirname(settingsFile), { recursive: true });
     await writeFile(settingsFile, `${JSON.stringify(settings, null, 2)}\n`, 'utf8');
-    console.log(`readset-guard ${change} → ${settingsFile}`);
-  } else {
-    console.log('readset-guard already registered');
   }
 
+  console.log(
+    change ? `readset-guard ${change} → ${settingsFile}` : 'readset-guard already registered',
+  );
+  if (allowed.length) console.log(`agent runs may now: ${allowed.join(', ')}`);
+
   await ignoreSession(projectDir);
 }
 
@@ -261,7 +279,9 @@ export function register(program) {
 
   harness
     .command('init')
-    .description('Initialize the harness in this project: readset-guard hook (idempotent)')
+    .description(
+      'Initialize the harness in this project: readset-guard hook, agent permissions (idempotent)',
+    )
     .action(() => init(program));
 
   harness

package/extension.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://raw.githubusercontent.com/lee-to/ai-factory/2.x/schemas/extension.schema.json",
   "name": "gcf-harness-aif-ext",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "GCF orchestration harness for Claude Code: one-command card pipeline, readset guard",
   "skills": [
     "skills/gcf-run",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gcf-harness-aif-ext",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "GCF orchestration harness for Claude Code: one-command card pipeline, readset guard",
   "type": "module",
   "license": "MIT",