@brutalsystems/muster 0.7.6 → 0.7.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -4
- package/package.json +2 -1
package/README.md
CHANGED
|
@@ -37,6 +37,15 @@ Updating on disk is not enough; restart the session too.
|
|
|
37
37
|
|
|
38
38
|
## Build and run locally
|
|
39
39
|
|
|
40
|
+
`npm run check` is the local gate: it builds, runs the suite, then packs and
|
|
41
|
+
verifies the tarball — the same `scripts/check-tarball.mjs` the CI packing job
|
|
42
|
+
runs, so the two cannot disagree about what "verified" means. `npm test` alone
|
|
43
|
+
does not pack anything, so tarball drift is green locally and red on push.
|
|
44
|
+
|
|
45
|
+
It is not everything CI does: CI additionally runs the suite across the Node
|
|
46
|
+
version matrix, and the contract suite runs only on release. Passing `check` is
|
|
47
|
+
necessary rather than sufficient.
|
|
48
|
+
|
|
40
49
|
Requires Node 22.12+ (tested with 24.16), TypeScript 5, Codex 0.155.1, Claude
|
|
41
50
|
Code 2.1.267, and OpenCode 1.18.31 or newer. Newer OpenCode releases must retain
|
|
42
51
|
the CLI and loopback HTTP API used by Muster. Terminal drivers use tmux or
|
|
@@ -447,10 +456,11 @@ built-in list is fixed, so a tool added by a future OpenCode release would not
|
|
|
447
456
|
be denied by it; launches that select no MCP server keep the wildcard. With no plugins
|
|
448
457
|
selected it also uses `--pure` and pins an empty plugin list, so inherited
|
|
449
458
|
plugins do not enter the child process. Selecting a plugin with `--plugin`
|
|
450
|
-
necessarily relaxes that: OpenCode merges project-local
|
|
451
|
-
|
|
452
|
-
|
|
453
|
-
|
|
459
|
+
necessarily relaxes that: OpenCode merges project-local plugin discovery into
|
|
460
|
+
any non-empty plugin list, so the child also loads whatever plugins the target
|
|
461
|
+
repository ships. It globs both spellings — `.opencode/plugin` and
|
|
462
|
+
`.opencode/plugins` — so auditing only one of them misses half of what a
|
|
463
|
+
repository can load. Select plugins only for repositories trusted with that.
|
|
454
464
|
Claude connection specifications are stored with owner-only permissions under
|
|
455
465
|
`~/.muster/mcp`, removed on stop, task completion, or when `list` observes an ended
|
|
456
466
|
session. MCP server access is separate from filesystem sandbox permissions: a
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@brutalsystems/muster",
|
|
3
|
-
"version": "0.7.
|
|
3
|
+
"version": "0.7.7",
|
|
4
4
|
"description": "Launch instructed, reachable local agent sessions",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"engines": {
|
|
@@ -12,6 +12,7 @@
|
|
|
12
12
|
"scripts": {
|
|
13
13
|
"build": "tsc && node scripts/prepare-bin.mjs",
|
|
14
14
|
"test": "vitest run",
|
|
15
|
+
"check": "npm test && node scripts/check-tarball.mjs",
|
|
15
16
|
"test:contract": "MUSTER_CONTRACT=1 vitest run test/contract.test.ts",
|
|
16
17
|
"postinstall": "node scripts/prepare-pty.mjs",
|
|
17
18
|
"pretest": "npm run build",
|