gcf-harness-aif-ext 0.8.2 → 0.8.3

package/README.md

@@ -33,7 +33,7 @@ This installs the `gcf-run` and `gcf-run-ingest` skills and registers the `gcf-h
 ai-factory gcf-harness init    # per project: .claude/settings.json + .gitignore
 ```
 
-It is **per project**, not global — run it again in every game repository: it adds the readset-guard `PreToolUse` entry to the project's `.claude/settings.json` (never `~/.claude`) and `.gcf-session/` to `.gitignore`. It also allows what an unattended `claude -p` run needs at least — `Edit`, `Write`, `Bash(git *)`, `Bash(ai-factory *)` — because print mode cannot ask and denies the rest; add your engine's tools yourself (for example `mcp__<editor-server>` for an editor driven over MCP). Commit `.claude/settings.json`: the rules apply to every Claude session in the project. It is idempotent — a re-run after moving or cloning the project repoints the hook at the new path — refuses when the `gcf` command is not registered, and refuses to rewrite a `settings.json` it cannot parse. It is a separate step for the same reason as `gcf hooks-install`: an AI Factory manifest cannot install Claude Code hooks.
+It is **per project**, not global — run it again in every game repository: it adds the readset-guard `PreToolUse` entry to the project's `.claude/settings.json` (never `~/.claude`) and `.gcf-session/` to `.gitignore`. It also allows what an unattended `claude -p` run needs at least — `Edit`, `Write`, `Bash(git *)`, `Bash(ai-factory *)`, and the same two as `PowerShell(…)` rules, the tool the agent runs commands with on Windows — because print mode cannot ask and denies the rest; add your engine's tools yourself (for example `mcp__<editor-server>` for an editor driven over MCP). Commit `.claude/settings.json`: the rules apply to every Claude session in the project. It is idempotent — a re-run after moving or cloning the project repoints the hook at the new path — refuses when the `gcf` command is not registered, and refuses to rewrite a `settings.json` it cannot parse. It is a separate step for the same reason as `gcf hooks-install`: an AI Factory manifest cannot install Claude Code hooks.
 
 ## Upgrade
 

package/commands/harness.js

@@ -4,7 +4,7 @@
 // allows what a headless agent run needs (AGENT_ALLOW).
 // `ai-factory gcf-harness gate <ids…>` — the /gcf-run gate as code (Harness-PRD §4.3).
 import { readFile, writeFile, mkdir, appendFile } from 'node:fs/promises';
-import { existsSync, readFileSync } from 'node:fs';
+import { existsSync, readFileSync, realpathSync } from 'node:fs';
 import { spawnSync } from 'node:child_process';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -212,8 +212,16 @@ function registerGuard(settings, command) {
 }
 
 // What a headless `claude -p` run needs at least: it cannot ask, so anything not allowed is
-// denied. The engine's own tools (an editor's MCP server) are the project's to add.
-const AGENT_ALLOW = ['Edit', 'Write', 'Bash(git *)', 'Bash(ai-factory *)'];
+// denied. The engine's own tools (an editor's MCP server) are the project's to add. On Windows
+// the agent runs commands through its PowerShell tool, which Bash rules do not cover.
+const AGENT_ALLOW = [
+  'Edit',
+  'Write',
+  'Bash(git *)',
+  'Bash(ai-factory *)',
+  'PowerShell(git *)',
+  'PowerShell(ai-factory *)',
+];
 
 /** Adds the rules the settings do not hold yet; returns the ones added. */
 function allowAgent(settings) {
@@ -401,7 +409,9 @@ async function runItems(ids, opts) {
     if (!(minutes > 0)) throw new Error('--timeout is a number of minutes above 0');
     if (opts.mode && !['worktree', 'main'].includes(opts.mode))
       throw new Error('--mode is worktree or main');
-    const r = await run(process.cwd(), [...new Set(ids)], {
+    // The true-case path: Claude Code trusts a folder by its exact path, and a shell or a board
+    // may hand over c: for C:, which turns off every allow rule of the project.
+    const r = await run(realpathSync.native(process.cwd()), [...new Set(ids)], {
       agent: opts.agent,
       gate: (batch) => gate(auditReport(), batch),
       timeoutMs: minutes * 60_000,

package/extension.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://raw.githubusercontent.com/lee-to/ai-factory/2.x/schemas/extension.schema.json",
   "name": "gcf-harness-aif-ext",
-  "version": "0.8.2",
+  "version": "0.8.3",
   "description": "GCF orchestration harness for Claude Code: one-command card pipeline, readset guard",
   "skills": [
     "skills/gcf-run",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gcf-harness-aif-ext",
-  "version": "0.8.2",
+  "version": "0.8.3",
   "description": "GCF orchestration harness for Claude Code: one-command card pipeline, readset guard",
   "type": "module",
   "license": "MIT",