Lap Tran
81ccf548e5
CI / build (push) Has been cancelled
Batch 1 (High severity): - Bug 1: --audit cat3 now checks .automaton/tasks/ paths - Bug 4: Verdict PASS/FAIL uses structured ## Status: line parsing - Bug 5: register-guards.sh checks .json/.jsonc, writes plugin key, strips comments - Bug 7: --can-edit/--scope-check path prefix uses os.sep boundary Batch 2 (Medium/Low severity): - Bug 2: migrate-project.sh find command parentheses for -prune binding - Bug 3: vram_detect model prefix matching with known-suffix whitelist - Bug 6: dashboard reads .state file before artifact heuristic fallback - Bug 8: removed wildcard CORS, added security headers (nosniff, DENY) - Bug 9: stale-task detection uses .state.lastedit instead of .state mtime - Bug 10: TEST_PLAN.md maps to test_design (was implement) 249 tests pass (up from 235). All 10 tasks driven through full workflow to completion.
41 lines
1.2 KiB
Markdown
41 lines
1.2 KiB
Markdown
# Automaton Guard Plugin
|
|
|
|
**Harness**: OpenCode (`@opencode-ai/plugin`)
|
|
**Status**: Active
|
|
**Enforcement**: Pre-edit (`tool.execute.before`)
|
|
|
|
Blocks file modifications (`edit`, `write` tools) when no automaton task is in
|
|
implement or doc_review phase. Calls `status.py --can-edit --file <path> --json`
|
|
before every edit.
|
|
|
|
## Installation
|
|
|
|
The framework install/update scripts auto-register this plugin in
|
|
`~/.config/opencode/opencode.json` (or `opencode.jsonc`):
|
|
|
|
```json
|
|
{
|
|
"plugin": ["~/.automaton/plugins/automaton-guard"]
|
|
}
|
|
```
|
|
|
|
## Other Harnesses
|
|
|
|
| Harness | Plugin | Status |
|
|
|---------|--------|--------|
|
|
| OpenCode | `plugins/automaton-guard/plugin.ts` | ✅ Active |
|
|
| Pi Dev | `plugins/automaton-guard-pi/guard.ts` | ✅ Active |
|
|
| Other | N/A | N/A |
|
|
|
|
To add support for a new harness, create a plugin in `plugins/` that calls
|
|
`status.py --can-edit --file <path>` before tool execution, matching the
|
|
`contracts/harness-integration.md` specification.
|
|
|
|
## Enforcement Layers
|
|
|
|
| Layer | Mechanism | Harness scope |
|
|
|-------|-----------|---------------|
|
|
| Pre-edit | This plugin | OpenCode only |
|
|
| Pre-commit | `scripts/git-hooks/pre-commit` | All git projects |
|
|
| Pre-push | `scripts/git-hooks/pre-push` | All git projects |
|