@abide/abide 0.108.0 → 0.109.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @abide/abide
 
+## 0.109.0
+
+### Minor Changes
+
+- f969612: claudeCode.bridgeCommand and claudeCode.bridge take tools, and the command they mint grants them after its -- ([`d20a962`](https://github.com/briancray/abide/commit/d20a962523f91161cb731e766863256fd5d90208))
+
 ## 0.108.0
 
 ### Minor Changes

package/docs/REGISTRY.md

@@ -340,8 +340,8 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | --- | --- | --- | --- |
 | `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | 44.5, 44.13, 44.17, 44.18, 44.19, 44.24, 44.25, 44.28, 44.31 |
 | `ClaudeCodeConfig` | `{ model?: string; fallbackModel?: string; systemPrompt?: string; appendSystemPrompt?: string; effort?: 'low' \| 'medium' \| 'high' \| 'xhigh' \| 'max'; maxBudgetUsd?: number; betas?: string[]; disallowedTools?: string[]; tools?: string[] }` | The Claude Code options a site may set for a turn, and the built-in tools it asks the visitor for. | 44.16, 44.30 |
-| `claudeCode.bridgeCommand` | `() => { command: string; expires: number }` | The command that pairs a bridge with this browser. | 44.14 |
-| `claudeCode.bridge` | `() => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | 44.20, 44.22 |
+| `claudeCode.bridgeCommand` | `(options?: { tools?: string[] }) => { command: string; expires: number }` | The command that pairs a bridge with this browser, granting the built-in tools it is given. | 44.14, 44.33 |
+| `claudeCode.bridge` | `(options?: { tools?: string[] }) => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | 44.20, 44.22, 44.33 |
 | `BridgeStatus` | `{ paired: boolean; command: string \| undefined }` | Whether a bridge is paired, and the command that pairs one where none is. | 44.20 |
 | `/__abide/bridge` | `GET`, `POST` | Where a bridge pairs, and is relayed its turns. | 36.7, 44.14, 44.15, 44.19, 44.23, 44.26, 44.27, 16.78 |
 

package/docs/RULEBOOK.md

@@ -3130,3 +3130,6 @@ before it exits.
 44.32 A conversation MUST write one `debug` line on `abide:assistant` when its events end, naming
 its stop reason, the transcript's length, the tool calls it made, its usage and how long it took,
 and naming it `unfinished` where it ended without a `done`.
+
+44.33 A command `claudeCode.bridgeCommand` or `claudeCode.bridge` mints with `tools` MUST grant
+those built-in tools after its `--` as `--tools`, and one minted without `tools` MUST carry no `--`.

package/docs/abide.md

@@ -5633,6 +5633,8 @@ test('unpaired: asking is refused, the bridge shows a command', async () => {
 bunx @abide/bridge <site> <code> -- --tools WebSearch,WebFetch
 ```
 
+Pass the same `tools` to `claudeCode.bridge` or `claudeCode.bridgeCommand` and the command it mints carries that grant, so a visitor who runs it as shown gives the tools. One minted without them grants none.
+
 The visitor pairs once per visit by running a command, which dials out to the site. Asking with nothing paired is refused 409.
 
 | Name | What it does for the CRM |
@@ -7837,8 +7839,8 @@ Generated surfaces: what is written in place rather than imported.
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
 | `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | [44.5](/rulebook#44.5), [44.13](/rulebook#44.13), [44.17](/rulebook#44.17), [44.18](/rulebook#44.18), [44.19](/rulebook#44.19), [44.24](/rulebook#44.24), [44.25](/rulebook#44.25), [44.28](/rulebook#44.28), [44.31](/rulebook#44.31) |
-| `claudeCode.bridgeCommand` | `() => { command: string; expires: number }` | The command that pairs a bridge with this browser. | [44.14](/rulebook#44.14) |
-| `claudeCode.bridge` | `() => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | [44.20](/rulebook#44.20), [44.22](/rulebook#44.22) |
+| `claudeCode.bridgeCommand` | `(options?: { tools?: string[] }) => { command: string; expires: number }` | The command that pairs a bridge with this browser, granting the built-in tools it is given. | [44.14](/rulebook#44.14), [44.33](/rulebook#44.33) |
+| `claudeCode.bridge` | `(options?: { tools?: string[] }) => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | [44.20](/rulebook#44.20), [44.22](/rulebook#44.22), [44.33](/rulebook#44.33) |
 | `/__abide/bridge` | `GET`, `POST` | Where a bridge pairs, and is relayed its turns. | [36.7](/rulebook#36.7), [44.14](/rulebook#44.14), [44.15](/rulebook#44.15), [44.19](/rulebook#44.19), [44.23](/rulebook#44.23), [44.26](/rulebook#44.26), [44.27](/rulebook#44.27), [16.78](/rulebook#16.78) |
 
 ## Taught in

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@abide/abide",
-    "version": "0.108.0",
+    "version": "0.109.0",
     "type": "module",
     "description": "Isomorphic type-safe framework for reactive async interfaces for humans and machines",
     "license": "MIT",

package/src/server/claudeCode.ts

@@ -42,6 +42,9 @@ export type ClaudeCodeConfig = {
     tools?: string[]
 }
 
+/** The built-in tools a pairing command grants, as the visitor would after its `--`. 44.33. */
+type PairingOptions = Pick<ClaudeCodeConfig, 'tools'>
+
 /** Whether this browser's bridge is connected, and the command that pairs one where it is not. */
 export type BridgeStatus = { paired: boolean; command: string | undefined }
 
@@ -123,12 +126,19 @@ function askingCaller(): string {
     return caller
 }
 
-/** The command that pairs a bridge with this browser, and when its code stops standing. 44.14. */
-function bridgeCommand(): { command: string; expires: number } {
+/**
+ * The command that pairs a bridge with this browser, and when its code stops standing. 44.14. The
+ * `tools` it is given are written after its `--`, so the visitor running it grants them (44.30, 44.33).
+ */
+function bridgeCommand({ tools }: PairingOptions = {}): {
+    command: string
+    expires: number
+} {
     const { code, expires } = mintCode(askingCaller())
     const site = `${appOrigin() ?? new URL(request().url).origin}${mounted('')}`
+    const grant = tools?.length ? ` -- --tools ${tools.join(',')}` : ''
     return {
-        command: `bunx @abide/bridge@${BRIDGE_VERSION} ${site} ${code}`,
+        command: `bunx @abide/bridge@${BRIDGE_VERSION} ${site} ${code}${grant}`,
         expires,
     }
 }
@@ -137,7 +147,9 @@ function bridgeCommand(): { command: string; expires: number } {
  * This browser's pairing as it changes: unpaired with the command to run, then paired the moment a
  * bridge connects, and unpaired again if it goes. 44.20.
  */
-async function* bridge(): AsyncGenerator<BridgeStatus> {
+async function* bridge(
+    options: PairingOptions = {},
+): AsyncGenerator<BridgeStatus> {
     const caller = askingCaller()
     const signal = request().signal
     // A change landing while the loop was not waiting — paused at its `yield` — stays queued, so it
@@ -156,7 +168,7 @@ async function* bridge(): AsyncGenerator<BridgeStatus> {
                 !paired &&
                 (pairing === undefined || pairing.expires <= Date.now())
             )
-                pairing = bridgeCommand()
+                pairing = bridgeCommand(options)
             const status: BridgeStatus = {
                 paired,
                 command: paired ? undefined : pairing?.command,