fix: unbreak scheduled PR pipeline (silent gh-pr-create denials since June 14)

.claude/settings.json

@@ -0,0 +1,13 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(gh pr:*)",
+      "Bash(git:*)",
+      "Bash(npm:*)",
+      "Bash(jq:*)",
+      "Bash(date:*)",
+      "Bash(./scripts/create-docs-pr.sh:*)",
+      "mcp__barkme__notify"
+    ]
+  }
+}

.github/workflows/fetch-claude-docs.yml

@@ -2,7 +2,7 @@ name: Fetch Claude Code Docs
 
 on:
   schedule:
-    # Every 6 hours: 00:00, 06:00, 12:00, 18:00 UTC
+    # Four times daily: 01:00, 06:00, 11:00, 16:00 UTC (aligned with hn-digest)
     - cron: "0 1,6,11,16 * * *"
   workflow_dispatch: # Allow manual trigger
 
@@ -55,7 +55,11 @@ jobs:
           git config --global user.email "claude-yolo@lroole.com"
 
       - name: Claude handles everything
-        uses: anthropics/claude-code-action@main
+        # Pinned: @main changed claude_args parsing in June 2026 and silently
+        # broke 'Bash(gh pr:*)' (split on the space into two invalid rules)
+        # -> 3 weeks of pushed branches with no PRs. Tool permissions now live
+        # in .claude/settings.json, which survives arg-parsing changes.
+        uses: anthropics/claude-code-action@v1.0.168
         env:
           GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
         with:
@@ -64,7 +68,6 @@ jobs:
           allowed_bots: "claude-yolo[bot]"
           claude_args: |
             --model claude-sonnet-4-6
-            --allowedTools Bash(gh pr:*),Bash(git:*),Bash(npm:*),Bash(jq:*),Bash(date:*),mcp__barkme__notify
             --mcp-config '{
               "mcpServers": {
                 "barkme": {
@@ -100,11 +103,9 @@ jobs:
             - `content/en/api/` - API reference (1500+ docs)
             - `content/en/build-with-claude/` - Platform features
             - `content/mcp/` - MCP protocol spec
-            - `content/blog/engineering/` - Anthropic engineering posts
-            - `content/blog/research/` - Research papers
-            - `content/blog/news/` - Model releases, announcements
+            - `content/blog/` - FROZEN archive (anthropic.com is HTML-only; no longer fetched)
             - `content/github/` - GitHub repos (cookbooks, skills, plugins, courses)
-            - `content/support/` - Support articles
+            - `content/support/` - Support articles (sitemap + .md)
 
             ## YOUR WORKFLOW
 
@@ -178,13 +179,39 @@ jobs:
             - Highlight the interesting bits
 
             ## BARKME PROTOCOL (nightshift notifications)
-            Always barkme when creating PR (one simple notification):
+            Bark AFTER the PR exists, never before:
+            - Only notify once gh pr create / create-docs-pr.sh returned a real PR URL
             - Title: "📦 Claude Code v{version}"
             - Body: "{key feature}"
-            - URL: Link to PR
+            - URL: the actual PR link (verify it is non-empty before barking)
+
+            If push or PR creation fails: bark a failure alert instead
+            ("🚨 docs pipeline: {step} failed - needs human") and exit non-zero.
+            A notification without a PR behind it is worse than no notification.
 
             Keep it SHORT - day shift will do detailed analysis later.
 
             Remember: You're not a changelog generator. You're a smart filter that understands WHY changes matter to humans using Claude Code.
 
             [>be me >11:45pm Pacific docs checker >Anthropic devs are asleep >catching their fresh updates >day shift will handle the rest]
+
+      # Tripwire: a pushed branch without a PR, or changes left uncommitted,
+      # means the agent step silently failed. Fail loudly instead of lying green.
+      # (June 2026 incident: 31 orphan branches, zero PRs, all runs green.)
+      - name: Verify outcome
+        env:
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
+        run: |
+          BRANCH=$(git branch --show-current)
+          if [ -n "$(git status --porcelain)" ]; then
+            echo "::error::Workspace has uncommitted changes after agent step"
+            git status --short | head -20
+            exit 1
+          fi
+          if [ "$BRANCH" != "main" ] && [ -n "$BRANCH" ]; then
+            PRS=$(gh pr list --head "$BRANCH" --json number --jq 'length')
+            if [ "$PRS" = "0" ]; then
+              echo "::error::Branch $BRANCH pushed but no PR exists - PR creation silently failed"
+              exit 1
+            fi
+          fi

.gitignore

@@ -15,8 +15,11 @@ dist/
 # Claude Code
 .claude-trace/
 
-# Local development
-.claude/
+# Local development (root only; keep settings.json tracked: CI reads tool
+# permissions from it via settingSources=project. Note: content/github/**
+# mirrors still ship .claude/ dirs we currently do not archive.)
+/.claude/*
+!/.claude/settings.json
 worktree/
 WIP/
 references/

CLAUDE.md

@@ -5,15 +5,17 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 ## Repository Purpose
 
 Comprehensive archive of everything Anthropic publishes for building with
-Claude. 2,900+ docs from 11 sources, auto-updated every 6 hours.
+Claude. 2,900+ docs from 11 sources; active sources auto-updated four
+times daily (blog archive frozen, see Fetcher).
 
 ## Fetcher
 
 `scripts/fetcher.py` -- single-file multi-source fetcher.
 
 Sources: code.claude.com, platform.claude.com, modelcontextprotocol.io,
-anthropic.com (engineering/research/news), support.claude.com,
-github.com/anthropics/* (10 repos).
+support.claude.com (sitemap + .md), github.com/anthropics/* (10 repos).
+anthropic.com blog (engineering/research/news) is a FROZEN archive as of
+2026-07: the site is HTML-only and the jina.ai proxy path was removed.
 
 ```bash
 uv run scripts/fetcher.py                    # Fetch everything
@@ -22,8 +24,7 @@ uv run scripts/fetcher.py --tree             # Show sources
 uv run scripts/fetcher.py --discover         # Probe for new sources
 ```
 
-Sections: `claude-code`, `api`, `platform`, `mcp`, `blog`, `engineering`,
-`research`, `news`, `github`, `support`, `all`
+Sections: `claude-code`, `api`, `platform`, `mcp`, `github`, `support`, `all`
 
 Source registry: `sources.json`
 Architecture: `REFACTOR.md`
@@ -105,7 +106,7 @@ Use these paths to reference documentation when helping users:
 - `content/mcp/seps/` - Specification Enhancement Proposals
 - `content/mcp/community/` - Governance, working groups
 
-#### Engineering & Research (from anthropic.com)
+#### Engineering & Research (from anthropic.com) — FROZEN archive, not auto-updated
 - `content/blog/engineering/` - "Building Effective Agents", tool use, harness design
 - `content/blog/research/` - Research papers
 - `content/blog/news/` - Model releases, announcements