@electric-agent/studio 1.14.0 → 1.14.2

package/dist/active-sessions.d.ts

@@ -1,20 +1,29 @@
+import type { Registry } from "./registry.js";
 import type { SessionInfo } from "./sessions.js";
 /**
- * Lightweight in-memory session store for the current server lifetime.
+ * In-memory session store with optional durable backing via Registry.
  *
- * Sessions are private to each user (stored in their browser's localStorage).
- * The server only tracks active sessions for sandbox/bridge management.
- * This store is NOT persisted — it resets on server restart.
+ * When a Registry is provided, mutations are persisted to the durable stream
+ * (fire-and-forget — the in-memory state is the source of truth for reads).
+ * On startup, call `ActiveSessions.create(registry)` to hydrate from the stream.
  */
 export declare class ActiveSessions {
     private sessions;
     private transcriptToSession;
+    private registry;
+    /**
+     * Create an ActiveSessions store backed by a Registry.
+     * Seeds in-memory state from the registry's persisted sessions.
+     */
+    static fromRegistry(registry: Registry): ActiveSessions;
     add(session: SessionInfo): void;
     get(id: string): SessionInfo | undefined;
     update(id: string, update: Partial<SessionInfo>): void;
     delete(id: string): boolean;
     /** Check if a session exists in the active store. */
     has(id: string): boolean;
+    /** Return the number of active sessions. */
+    size(): number;
     /**
      * Look up the EA session ID for a Claude Code transcript path.
      * Returns undefined if no mapping exists or the session has been deleted.

package/dist/active-sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"active-sessions.d.ts","sourceRoot":"","sources":["../src/active-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAEhD;;;;;;GAMG;AACH,qBAAa,cAAc;IAC1B,OAAO,CAAC,QAAQ,CAAiC;IACjD,OAAO,CAAC,mBAAmB,CAA4B;IAEvD,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI;IAI/B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAIxC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IAStD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI3B,qDAAqD;IACrD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAMxB;;;OAGG;IACH,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAM3D;;OAEG;IACH,aAAa,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;CAG9D"}
+{"version":3,"file":"active-sessions.d.ts","sourceRoot":"","sources":["../src/active-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAEhD;;;;;;GAMG;AACH,qBAAa,cAAc;IAC1B,OAAO,CAAC,QAAQ,CAAiC;IACjD,OAAO,CAAC,mBAAmB,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAwB;IAExC;;;OAGG;IACH,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,cAAc;IAavD,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI;IAO/B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAIxC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI;IAYtD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAU3B,qDAAqD;IACrD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAIxB,4CAA4C;IAC5C,IAAI,IAAI,MAAM;IAMd;;;OAGG;IACH,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAM3D;;OAEG;IACH,aAAa,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;CAM9D"}

package/dist/active-sessions.js

@@ -1,15 +1,33 @@
 /**
- * Lightweight in-memory session store for the current server lifetime.
+ * In-memory session store with optional durable backing via Registry.
  *
- * Sessions are private to each user (stored in their browser's localStorage).
- * The server only tracks active sessions for sandbox/bridge management.
- * This store is NOT persisted — it resets on server restart.
+ * When a Registry is provided, mutations are persisted to the durable stream
+ * (fire-and-forget — the in-memory state is the source of truth for reads).
+ * On startup, call `ActiveSessions.create(registry)` to hydrate from the stream.
  */
 export class ActiveSessions {
     sessions = new Map();
     transcriptToSession = new Map();
+    registry = null;
+    /**
+     * Create an ActiveSessions store backed by a Registry.
+     * Seeds in-memory state from the registry's persisted sessions.
+     */
+    static fromRegistry(registry) {
+        const store = new ActiveSessions();
+        store.registry = registry;
+        // Seed from persisted sessions
+        for (const session of registry.listSessions()) {
+            store.sessions.set(session.id, session);
+        }
+        console.log(`[active-sessions] Seeded ${store.sessions.size} session(s) from registry`);
+        return store;
+    }
     add(session) {
         this.sessions.set(session.id, session);
+        this.registry?.addSession(session).catch((err) => {
+            console.error(`[active-sessions] Failed to persist add:`, err);
+        });
     }
     get(id) {
         return this.sessions.get(id);
@@ -20,15 +38,28 @@ export class ActiveSessions {
             Object.assign(session, update, {
                 lastActiveAt: new Date().toISOString(),
             });
+            this.registry?.updateSession(id, update).catch((err) => {
+                console.error(`[active-sessions] Failed to persist update:`, err);
+            });
         }
     }
     delete(id) {
-        return this.sessions.delete(id);
+        const deleted = this.sessions.delete(id);
+        if (deleted) {
+            this.registry?.deleteSession(id).catch((err) => {
+                console.error(`[active-sessions] Failed to persist delete:`, err);
+            });
+        }
+        return deleted;
     }
     /** Check if a session exists in the active store. */
     has(id) {
         return this.sessions.has(id);
     }
+    /** Return the number of active sessions. */
+    size() {
+        return this.sessions.size;
+    }
     // --- Transcript → Session Mapping (for Claude Code hook integration) ---
     /**
      * Look up the EA session ID for a Claude Code transcript path.
@@ -45,6 +76,9 @@ export class ActiveSessions {
      */
     mapTranscript(transcriptPath, sessionId) {
         this.transcriptToSession.set(transcriptPath, sessionId);
+        this.registry?.mapTranscriptToSession(transcriptPath, sessionId).catch((err) => {
+            console.error(`[active-sessions] Failed to persist transcript mapping:`, err);
+        });
     }
 }
 //# sourceMappingURL=active-sessions.js.map

package/dist/active-sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"active-sessions.js","sourceRoot":"","sources":["../src/active-sessions.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IAClB,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAA;IACzC,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAA;IAEvD,GAAG,CAAC,OAAoB;QACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC;IAED,GAAG,CAAC,EAAU;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC7B,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,MAA4B;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrC,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE;gBAC9B,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC,CAAA;QACH,CAAC;IACF,CAAC;IAED,MAAM,CAAC,EAAU;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAChC,CAAC;IAED,qDAAqD;IACrD,GAAG,CAAC,EAAU;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC7B,CAAC;IAED,0EAA0E;IAE1E;;;OAGG;IACH,eAAe,CAAC,cAAsB;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QAC9D,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAA;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5D,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,cAAsB,EAAE,SAAiB;QACtD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;IACxD,CAAC;CACD"}
+{"version":3,"file":"active-sessions.js","sourceRoot":"","sources":["../src/active-sessions.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IAClB,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAA;IACzC,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC/C,QAAQ,GAAoB,IAAI,CAAA;IAExC;;;OAGG;IACH,MAAM,CAAC,YAAY,CAAC,QAAkB;QACrC,MAAM,KAAK,GAAG,IAAI,cAAc,EAAE,CAAA;QAClC,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAA;QAEzB,+BAA+B;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;YAC/C,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;QACxC,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,CAAC,QAAQ,CAAC,IAAI,2BAA2B,CAAC,CAAA;QACvF,OAAO,KAAK,CAAA;IACb,CAAC;IAED,GAAG,CAAC,OAAoB;QACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;QACtC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAChD,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;IACH,CAAC;IAED,GAAG,CAAC,EAAU;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC7B,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,MAA4B;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrC,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE;gBAC9B,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC,CAAA;YACF,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACtD,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAA;YAClE,CAAC,CAAC,CAAA;QACH,CAAC;IACF,CAAC;IAED,MAAM,CAAC,EAAU;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACxC,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC9C,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAA;YAClE,CAAC,CAAC,CAAA;QACH,CAAC;QACD,OAAO,OAAO,CAAA;IACf,CAAC;IAED,qDAAqD;IACrD,GAAG,CAAC,EAAU;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC7B,CAAC;IAED,4CAA4C;IAC5C,IAAI;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAA;IAC1B,CAAC;IAED,0EAA0E;IAE1E;;;OAGG;IACH,eAAe,CAAC,cAAsB;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QAC9D,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAA;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5D,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,cAAsB,EAAE,SAAiB;QACtD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9E,OAAO,CAAC,KAAK,CAAC,yDAAyD,EAAE,GAAG,CAAC,CAAA;QAC9E,CAAC,CAAC,CAAA;IACH,CAAC;CACD"}

package/dist/api-schemas.d.ts

@@ -0,0 +1,244 @@
+/**
+ * Zod schemas for API request body validation.
+ *
+ * Each schema corresponds to a POST endpoint in server.ts.
+ * Using `.passthrough()` where backwards-compat matters (unknown fields ignored).
+ */
+import { z } from "zod";
+export declare const createSessionSchema: z.ZodObject<{
+    description: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    baseDir: z.ZodOptional<z.ZodString>;
+    freeform: z.ZodOptional<z.ZodBoolean>;
+    apiKey: z.ZodOptional<z.ZodString>;
+    oauthToken: z.ZodOptional<z.ZodString>;
+    ghToken: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    description: string;
+    name?: string | undefined;
+    baseDir?: string | undefined;
+    freeform?: boolean | undefined;
+    apiKey?: string | undefined;
+    oauthToken?: string | undefined;
+    ghToken?: string | undefined;
+}, {
+    description: string;
+    name?: string | undefined;
+    baseDir?: string | undefined;
+    freeform?: boolean | undefined;
+    apiKey?: string | undefined;
+    oauthToken?: string | undefined;
+    ghToken?: string | undefined;
+}>;
+export declare const iterateSessionSchema: z.ZodObject<{
+    request: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    request: string;
+}, {
+    request: string;
+}>;
+export declare const createSandboxSchema: z.ZodObject<{
+    sessionId: z.ZodOptional<z.ZodString>;
+    projectName: z.ZodOptional<z.ZodString>;
+    infra: z.ZodOptional<z.ZodDiscriminatedUnion<"mode", [z.ZodObject<{
+        mode: z.ZodLiteral<"none">;
+    }, "strip", z.ZodTypeAny, {
+        mode: "none";
+    }, {
+        mode: "none";
+    }>, z.ZodObject<{
+        mode: z.ZodLiteral<"local">;
+    }, "strip", z.ZodTypeAny, {
+        mode: "local";
+    }, {
+        mode: "local";
+    }>, z.ZodObject<{
+        mode: z.ZodLiteral<"cloud">;
+        databaseUrl: z.ZodString;
+        electricUrl: z.ZodString;
+        sourceId: z.ZodString;
+        secret: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        secret: string;
+        mode: "cloud";
+        databaseUrl: string;
+        electricUrl: string;
+        sourceId: string;
+    }, {
+        secret: string;
+        mode: "cloud";
+        databaseUrl: string;
+        electricUrl: string;
+        sourceId: string;
+    }>, z.ZodObject<{
+        mode: z.ZodLiteral<"claim">;
+        databaseUrl: z.ZodString;
+        electricUrl: z.ZodString;
+        sourceId: z.ZodString;
+        secret: z.ZodString;
+        claimId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        claimId: string;
+        secret: string;
+        mode: "claim";
+        databaseUrl: string;
+        electricUrl: string;
+        sourceId: string;
+    }, {
+        claimId: string;
+        secret: string;
+        mode: "claim";
+        databaseUrl: string;
+        electricUrl: string;
+        sourceId: string;
+    }>]>>;
+}, "strip", z.ZodTypeAny, {
+    projectName?: string | undefined;
+    sessionId?: string | undefined;
+    infra?: {
+        mode: "none";
+    } | {
+        mode: "local";
+    } | {
+        secret: string;
+        mode: "cloud";
+        databaseUrl: string;
+        electricUrl: string;
+        sourceId: string;
+    } | {
+        claimId: string;
+        secret: string;
+        mode: "claim";
+        databaseUrl: string;
+        electricUrl: string;
+        sourceId: string;
+    } | undefined;
+}, {
+    projectName?: string | undefined;
+    sessionId?: string | undefined;
+    infra?: {
+        mode: "none";
+    } | {
+        mode: "local";
+    } | {
+        secret: string;
+        mode: "cloud";
+        databaseUrl: string;
+        electricUrl: string;
+        sourceId: string;
+    } | {
+        claimId: string;
+        secret: string;
+        mode: "claim";
+        databaseUrl: string;
+        electricUrl: string;
+        sourceId: string;
+    } | undefined;
+}>;
+export declare const createRoomSchema: z.ZodObject<{
+    name: z.ZodString;
+    maxRounds: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    maxRounds?: number | undefined;
+}, {
+    name: string;
+    maxRounds?: number | undefined;
+}>;
+export declare const createAppRoomSchema: z.ZodObject<{
+    description: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    apiKey: z.ZodOptional<z.ZodString>;
+    oauthToken: z.ZodOptional<z.ZodString>;
+    ghToken: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    description: string;
+    name?: string | undefined;
+    apiKey?: string | undefined;
+    oauthToken?: string | undefined;
+    ghToken?: string | undefined;
+}, {
+    description: string;
+    name?: string | undefined;
+    apiKey?: string | undefined;
+    oauthToken?: string | undefined;
+    ghToken?: string | undefined;
+}>;
+export declare const addAgentSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    role: z.ZodOptional<z.ZodString>;
+    gated: z.ZodOptional<z.ZodBoolean>;
+    initialPrompt: z.ZodOptional<z.ZodString>;
+    apiKey: z.ZodOptional<z.ZodString>;
+    oauthToken: z.ZodOptional<z.ZodString>;
+    ghToken: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    name?: string | undefined;
+    apiKey?: string | undefined;
+    oauthToken?: string | undefined;
+    ghToken?: string | undefined;
+    role?: string | undefined;
+    gated?: boolean | undefined;
+    initialPrompt?: string | undefined;
+}, {
+    name?: string | undefined;
+    apiKey?: string | undefined;
+    oauthToken?: string | undefined;
+    ghToken?: string | undefined;
+    role?: string | undefined;
+    gated?: boolean | undefined;
+    initialPrompt?: string | undefined;
+}>;
+export declare const addSessionToRoomSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    name: z.ZodString;
+    initialPrompt: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    sessionId: string;
+    name: string;
+    initialPrompt?: string | undefined;
+}, {
+    sessionId: string;
+    name: string;
+    initialPrompt?: string | undefined;
+}>;
+export declare const iterateRoomSessionSchema: z.ZodObject<{
+    request: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    request: string;
+}, {
+    request: string;
+}>;
+export declare const sendRoomMessageSchema: z.ZodObject<{
+    from: z.ZodString;
+    body: z.ZodString;
+    to: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    from: string;
+    body: string;
+    to?: string | undefined;
+}, {
+    from: string;
+    body: string;
+    to?: string | undefined;
+}>;
+export declare const resumeSessionSchema: z.ZodObject<{
+    repoUrl: z.ZodString;
+    branch: z.ZodOptional<z.ZodString>;
+    apiKey: z.ZodOptional<z.ZodString>;
+    oauthToken: z.ZodOptional<z.ZodString>;
+    ghToken: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    repoUrl: string;
+    apiKey?: string | undefined;
+    oauthToken?: string | undefined;
+    ghToken?: string | undefined;
+    branch?: string | undefined;
+}, {
+    repoUrl: string;
+    apiKey?: string | undefined;
+    oauthToken?: string | undefined;
+    ghToken?: string | undefined;
+    branch?: string | undefined;
+}>;
+//# sourceMappingURL=api-schemas.d.ts.map

package/dist/api-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-schemas.d.ts","sourceRoot":"","sources":["../src/api-schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAUvB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;EAQ9B,CAAA;AAGF,eAAO,MAAM,oBAAoB;;;;;;EAE/B,CAAA;AA2BF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI9B,CAAA;AAGF,eAAO,MAAM,gBAAgB;;;;;;;;;EAG3B,CAAA;AAGF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;EAM9B,CAAA;AAGF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;EAQzB,CAAA;AAGF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;EAIjC,CAAA;AAGF,eAAO,MAAM,wBAAwB;;;;;;EAEnC,CAAA;AAGF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;EAIhC,CAAA;AAGF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;EAM9B,CAAA"}

package/dist/api-schemas.js

@@ -0,0 +1,103 @@
+/**
+ * Zod schemas for API request body validation.
+ *
+ * Each schema corresponds to a POST endpoint in server.ts.
+ * Using `.passthrough()` where backwards-compat matters (unknown fields ignored).
+ */
+import { z } from "zod";
+/** Max length for free-text fields to prevent abuse */
+const MAX_TEXT = 10_000;
+const MAX_SHORT = 500;
+const MAX_KEY = 1_000;
+const optionalKey = z.string().max(MAX_KEY).optional();
+// POST /api/sessions
+export const createSessionSchema = z.object({
+    description: z.string().min(1).max(MAX_TEXT),
+    name: z.string().max(MAX_SHORT).optional(),
+    baseDir: z.string().max(MAX_SHORT).optional(),
+    freeform: z.boolean().optional(),
+    apiKey: optionalKey,
+    oauthToken: optionalKey,
+    ghToken: optionalKey,
+});
+// POST /api/sessions/:id/iterate
+export const iterateSessionSchema = z.object({
+    request: z.string().min(1).max(MAX_TEXT),
+});
+// POST /api/sandboxes
+const infraNoneSchema = z.object({ mode: z.literal("none") });
+const infraLocalSchema = z.object({ mode: z.literal("local") });
+const infraCloudSchema = z.object({
+    mode: z.literal("cloud"),
+    databaseUrl: z.string().max(MAX_KEY),
+    electricUrl: z.string().max(MAX_KEY),
+    sourceId: z.string().max(MAX_SHORT),
+    secret: z.string().max(MAX_KEY),
+});
+const infraClaimSchema = z.object({
+    mode: z.literal("claim"),
+    databaseUrl: z.string().max(MAX_KEY),
+    electricUrl: z.string().max(MAX_KEY),
+    sourceId: z.string().max(MAX_SHORT),
+    secret: z.string().max(MAX_KEY),
+    claimId: z.string().max(MAX_SHORT),
+});
+const infraConfigSchema = z.discriminatedUnion("mode", [
+    infraNoneSchema,
+    infraLocalSchema,
+    infraCloudSchema,
+    infraClaimSchema,
+]);
+export const createSandboxSchema = z.object({
+    sessionId: z.string().uuid().optional(),
+    projectName: z.string().max(MAX_SHORT).optional(),
+    infra: infraConfigSchema.optional(),
+});
+// POST /api/rooms
+export const createRoomSchema = z.object({
+    name: z.string().min(1).max(MAX_SHORT),
+    maxRounds: z.number().int().positive().optional(),
+});
+// POST /api/rooms/create-app
+export const createAppRoomSchema = z.object({
+    description: z.string().min(1).max(MAX_TEXT),
+    name: z.string().max(MAX_SHORT).optional(),
+    apiKey: optionalKey,
+    oauthToken: optionalKey,
+    ghToken: optionalKey,
+});
+// POST /api/rooms/:id/agents
+export const addAgentSchema = z.object({
+    name: z.string().max(MAX_SHORT).optional(),
+    role: z.string().max(MAX_SHORT).optional(),
+    gated: z.boolean().optional(),
+    initialPrompt: z.string().max(MAX_TEXT).optional(),
+    apiKey: optionalKey,
+    oauthToken: optionalKey,
+    ghToken: optionalKey,
+});
+// POST /api/rooms/:id/sessions
+export const addSessionToRoomSchema = z.object({
+    sessionId: z.string().uuid(),
+    name: z.string().min(1).max(MAX_SHORT),
+    initialPrompt: z.string().max(MAX_TEXT).optional(),
+});
+// POST /api/rooms/:id/sessions/:sessionId/iterate
+export const iterateRoomSessionSchema = z.object({
+    request: z.string().min(1).max(MAX_TEXT),
+});
+// POST /api/rooms/:id/messages
+export const sendRoomMessageSchema = z.object({
+    from: z.string().min(1).max(MAX_SHORT),
+    body: z.string().min(1).max(MAX_TEXT),
+    to: z.string().max(MAX_SHORT).optional(),
+});
+// POST /api/sessions/resume
+export const resumeSessionSchema = z.object({
+    repoUrl: z.string().min(1).max(MAX_KEY),
+    branch: z.string().max(MAX_SHORT).optional(),
+    apiKey: optionalKey,
+    oauthToken: optionalKey,
+    ghToken: optionalKey,
+});
+//# sourceMappingURL=api-schemas.js.map

package/dist/api-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-schemas.js","sourceRoot":"","sources":["../src/api-schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,uDAAuD;AACvD,MAAM,QAAQ,GAAG,MAAM,CAAA;AACvB,MAAM,SAAS,GAAG,GAAG,CAAA;AACrB,MAAM,OAAO,GAAG,KAAK,CAAA;AAErB,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;AAEtD,qBAAqB;AACrB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IAC7C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,WAAW;IACnB,UAAU,EAAE,WAAW;IACvB,OAAO,EAAE,WAAW;CACpB,CAAC,CAAA;AAEF,iCAAiC;AACjC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;CACxC,CAAC,CAAA;AAEF,sBAAsB;AACtB,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAC7D,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;AAC/D,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;CAC/B,CAAC,CAAA;AACF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;CAClC,CAAC,CAAA;AACF,MAAM,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtD,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;CAChB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IACjD,KAAK,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAA;AAEF,kBAAkB;AAClB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAA;AAEF,6BAA6B;AAC7B,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,WAAW;IACnB,UAAU,EAAE,WAAW;IACvB,OAAO,EAAE,WAAW;CACpB,CAAC,CAAA;AAEF,6BAA6B;AAC7B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;IAClD,MAAM,EAAE,WAAW;IACnB,UAAU,EAAE,WAAW;IACvB,OAAO,EAAE,WAAW;CACpB,CAAC,CAAA;AAEF,+BAA+B;AAC/B,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAA;AAEF,kDAAkD;AAClD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;CACxC,CAAC,CAAA;AAEF,+BAA+B;AAC/B,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAA;AAEF,4BAA4B;AAC5B,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IAC5C,MAAM,EAAE,WAAW;IACnB,UAAU,EAAE,WAAW;IACvB,OAAO,EAAE,WAAW;CACpB,CAAC,CAAA"}

package/dist/bridge/claude-code-base.d.ts

@@ -38,6 +38,8 @@ export interface ClaudeCodeBaseConfig {
     agentName?: string;
 }
 export declare const DEFAULT_ALLOWED_TOOLS: string[];
+/** Tools allowed in production mode — no WebSearch to prevent abuse */
+export declare const PRODUCTION_ALLOWED_TOOLS: string[];
 export declare abstract class ClaudeCodeBaseBridge implements SessionBridge {
     readonly sessionId: string;
     protected writer: DurableStream;

package/dist/bridge/claude-code-base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code-base.d.ts","sourceRoot":"","sources":["../../src/bridge/claude-code-base.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAE3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAEzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAEhE,KAAK,gBAAgB,GAAG,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAiB,MAAM,YAAY,CAAA;AAE9D,MAAM,WAAW,oBAAoB;IACpC,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAA;IACd,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAA;IACX,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,2BAA2B;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,qBAAqB,UAWjC,CAAA;AAED,8BAAsB,oBAAqB,YAAW,aAAa;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAE1B,SAAS,CAAC,MAAM,EAAE,aAAa,CAAA;IAC/B,SAAS,CAAC,MAAM,EAAE,gBAAgB,CAA2B;IAC7D,SAAS,CAAC,MAAM,UAAQ;IACxB,SAAS,CAAC,OAAO,UAAQ;IACzB,SAAS,CAAC,cAAc,UAAQ;IAEhC,uFAAuF;IACvF,SAAS,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAO;IAC/C,iFAAiF;IACjF,SAAS,CAAC,cAAc,UAAQ;IAChC,4FAA4F;IAC5F,SAAS,CAAC,WAAW,UAAQ;IAC7B,oEAAoE;IACpE,SAAS,CAAC,eAAe,EAAE,MAAM,EAAE,CAAK;IAExC,OAAO,CAAC,mBAAmB,CAA0C;IACrE,OAAO,CAAC,iBAAiB,CAAwC;IAEjE,qEAAqE;IACrE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;gBAEjC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,oBAAoB;IAc/D,yFAAyF;IACzF,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE/F,0CAA0C;IAC1C,SAAS,CAAC,QAAQ,CAAC,WAAW,IAAI,IAAI;IAEtC,gEAAgE;IAChE,SAAS,CAAC,QAAQ,CAAC,UAAU,IAAI,OAAO;IAExC,iDAAiD;IACjD,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAEtD,oDAAoD;IACpD,SAAS,CAAC,QAAQ,CAAC,gBAAgB,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE3D,8CAA8C;IAC9C,SAAS,CAAC,QAAQ,CAAC,YAAY,IAAI,MAAM,GAAG,SAAS;IAM/C,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7C;;;;;;OAMG;IACG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBxD,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnF,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,IAAI;IAIpD,UAAU,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI;IAIhD,QAAQ,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAE/B,SAAS,IAAI,OAAO;IAIpB,SAAS,IAAI,IAAI;IAMjB,KAAK,IAAI,IAAI;IASb;;;OAGG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;IAOlC;;;OAGG;cACa,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAWrD;;;OAGG;IACH,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAUxC;;;OAGG;IACH,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAiCtD;;OAEG;IACH,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IA2DjD;;OAEG;IACH,OAAO,CAAC,gBAAgB;CAOxB"}
+{"version":3,"file":"claude-code-base.d.ts","sourceRoot":"","sources":["../../src/bridge/claude-code-base.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAE3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAEzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAEhE,KAAK,gBAAgB,GAAG,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAiB,MAAM,YAAY,CAAA;AAE9D,MAAM,WAAW,oBAAoB;IACpC,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAA;IACd,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAA;IACX,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,2BAA2B;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,qBAAqB,UAWjC,CAAA;AAED,uEAAuE;AACvE,eAAO,MAAM,wBAAwB,UAAyD,CAAA;AAE9F,8BAAsB,oBAAqB,YAAW,aAAa;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAE1B,SAAS,CAAC,MAAM,EAAE,aAAa,CAAA;IAC/B,SAAS,CAAC,MAAM,EAAE,gBAAgB,CAA2B;IAC7D,SAAS,CAAC,MAAM,UAAQ;IACxB,SAAS,CAAC,OAAO,UAAQ;IACzB,SAAS,CAAC,cAAc,UAAQ;IAEhC,uFAAuF;IACvF,SAAS,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAO;IAC/C,iFAAiF;IACjF,SAAS,CAAC,cAAc,UAAQ;IAChC,4FAA4F;IAC5F,SAAS,CAAC,WAAW,UAAQ;IAC7B,oEAAoE;IACpE,SAAS,CAAC,eAAe,EAAE,MAAM,EAAE,CAAK;IAExC,OAAO,CAAC,mBAAmB,CAA0C;IACrE,OAAO,CAAC,iBAAiB,CAAwC;IAEjE,qEAAqE;IACrE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;gBAEjC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,oBAAoB;IAc/D,yFAAyF;IACzF,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE/F,0CAA0C;IAC1C,SAAS,CAAC,QAAQ,CAAC,WAAW,IAAI,IAAI;IAEtC,gEAAgE;IAChE,SAAS,CAAC,QAAQ,CAAC,UAAU,IAAI,OAAO;IAExC,iDAAiD;IACjD,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAEtD,oDAAoD;IACpD,SAAS,CAAC,QAAQ,CAAC,gBAAgB,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE3D,8CAA8C;IAC9C,SAAS,CAAC,QAAQ,CAAC,YAAY,IAAI,MAAM,GAAG,SAAS;IAM/C,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7C;;;;;;OAMG;IACG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBxD,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnF,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,IAAI;IAIpD,UAAU,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI;IAIhD,QAAQ,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAE/B,SAAS,IAAI,OAAO;IAIpB,SAAS,IAAI,IAAI;IAMjB,KAAK,IAAI,IAAI;IASb;;;OAGG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;IAOlC;;;OAGG;cACa,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAWrD;;;OAGG;IACH,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAUxC;;;OAGG;IACH,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAiCtD;;OAEG;IACH,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IA2DjD;;OAEG;IACH,OAAO,CAAC,gBAAgB;CAOxB"}

package/dist/bridge/claude-code-base.js

@@ -31,6 +31,8 @@ export const DEFAULT_ALLOWED_TOOLS = [
     "AskUserQuestion",
     "Skill",
 ];
+/** Tools allowed in production mode — no WebSearch to prevent abuse */
+export const PRODUCTION_ALLOWED_TOOLS = DEFAULT_ALLOWED_TOOLS.filter((t) => t !== "WebSearch");
 export class ClaudeCodeBaseBridge {
     sessionId;
     writer;

package/dist/bridge/claude-code-base.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code-base.js","sourceRoot":"","sources":["../../src/bridge/claude-code-base.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEvD,OAAO,EAAE,EAAE,EAAE,MAAM,0BAA0B,CAAA;AAE7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAuBhE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACpC,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,WAAW;IACX,WAAW;IACX,iBAAiB;IACjB,OAAO;CACP,CAAA;AAED,MAAM,OAAgB,oBAAoB;IAChC,SAAS,CAAQ;IAEhB,MAAM,CAAe;IACrB,MAAM,GAAqB,sBAAsB,EAAE,CAAA;IACnD,MAAM,GAAG,KAAK,CAAA;IACd,OAAO,GAAG,KAAK,CAAA;IACf,cAAc,GAAG,KAAK,CAAA;IAEhC,uFAAuF;IAC7E,eAAe,GAAkB,IAAI,CAAA;IAC/C,iFAAiF;IACvE,cAAc,GAAG,KAAK,CAAA;IAChC,4FAA4F;IAClF,WAAW,GAAG,KAAK,CAAA;IAC7B,oEAAoE;IAC1D,eAAe,GAAa,EAAE,CAAA;IAEhC,mBAAmB,GAAwC,EAAE,CAAA;IAC7D,iBAAiB,GAAsC,EAAE,CAAA;IAKjE,YAAY,SAAiB,EAAE,UAAgC;QAC9D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAE1B,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC;YAC/B,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,WAAW,EAAE,kBAAkB;SAC/B,CAAC,CAAA;IACH,CAAC;IAwBD,sEAAsE;IACtE,0BAA0B;IAC1B,sEAAsE;IAEtE,KAAK,CAAC,IAAI,CAAC,KAAkB;QAC5B,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QACvB,MAAM,GAAG,GAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAA;QACzD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,GAA4B;QAC7C,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QAEvB,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAClE,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;gBACvC,OAAO,CAAC,GAAG,CACV,IAAI,IAAI,CAAC,SAAS,2CAA2C,IAAI,CAAC,SAAS,UAAU,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CACtH,CAAA;gBACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;gBACtC,OAAM;YACP,CAAC;YACD,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,IAAI,SAAS,CAAC,CAAA;YACvE,OAAM;QACP,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,mCAAmC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IAChF,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,KAA8B;QAClE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YAAE,OAAM;QAC7C,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC9C,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAA;QAC/B,CAAC;IACF,CAAC;IAED,YAAY,CAAC,EAAgC;QAC5C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClC,CAAC;IAED,UAAU,CAAC,EAA8B;QACxC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChC,CAAC;IAID,SAAS;QACR,OAAO,IAAI,CAAC,OAAO,CAAA;IACpB,CAAC;IAED,SAAS;QACR,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QACvB,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;IACrB,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,CAAC,WAAW,EAAE,CAAA;IACnB,CAAC;IAED,sEAAsE;IACtE,sCAAsC;IACtC,sEAAsE;IAEtE;;;OAGG;IACO,gBAAgB;QACzB,IAAI,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAA;QACtC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAA;QAC3B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;IACpB,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,oBAAoB;QACnC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAA;gBAC7B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,uBAAuB,EAAE,GAAG,CAAC,CAAA;YAC9D,CAAC;QACF,CAAC;IACF,CAAC;IAED;;;OAGG;IACO,UAAU,CAAC,IAAY;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAM;QAEpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAC1B,CAAC;IACF,CAAC;IAED;;;OAGG;IACO,iBAAiB,CAAC,IAAmB;QAC9C,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,0BAA0B,IAAI,YAAY,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;QACzF,UAAU,CAAC,GAAG,EAAE;YACf,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAA;YACnD,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;YAEpB,mEAAmE;YACnE,gEAAgE;YAChE,8DAA8D;YAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;gBACzD,IAAI,CAAC,eAAe,GAAG,EAAE,CAAA;gBACzB,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,uCAAuC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;gBACtF,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,IAAI,SAAS,CAAC,CAAA;gBAC9D,OAAM;YACP,CAAC;YAED,uEAAuE;YACvE,yEAAyE;YACzE,iDAAiD;YACjD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC/D,MAAM,QAAQ,GAAgB;oBAC7B,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,IAAI,KAAK,CAAC;oBACnB,EAAE,EAAE,EAAE,EAAE;iBACR,CAAA;gBACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;YAC7B,CAAC;QACF,CAAC,EAAE,GAAG,CAAC,CAAA;IACR,CAAC;IAED;;OAEG;IACO,aAAa,CAAC,KAAkB;QACzC,8DAA8D;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QACrC,IAAI,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACrD,CAAC;YAAC,KAA0C,CAAC,KAAK,GAAG,SAAS,CAAA;QAC/D,CAAC;QAED,iCAAiC;QACjC,MAAM,GAAG,GAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAA;QACxD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAEvD,+DAA+D;QAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;QAC3B,CAAC;QAED,yEAAyE;QACzE,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YACjE,MAAM,GAAG,GAAI,KAAK,CAAC,UAAsC,EAAE,OAAO,CAAA;YAClE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,MAAM,SAAS,GAAgB;oBAC9B,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,SAAS;oBACjB,EAAE,EAAE,EAAE,EAAE;iBACR,CAAA;gBACD,MAAM,YAAY,GAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAA;gBACrE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBAChE,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC3C,IAAI,CAAC;wBACJ,EAAE,CAAC,SAAS,CAAC,CAAA;oBACd,CAAC;oBAAC,MAAM,CAAC;wBACR,UAAU;oBACX,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,wBAAwB;QACxB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACJ,EAAE,CAAC,KAAK,CAAC,CAAA;YACV,CAAC;YAAC,MAAM,CAAC;gBACR,0BAA0B;YAC3B,CAAC;QACF,CAAC;QAED,qBAAqB;QACrB,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;YACxD,MAAM,OAAO,GAAI,KAA4C,CAAC,OAAO,CAAA;YACrE,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACzC,IAAI,CAAC;oBACJ,EAAE,CAAC,OAAO,CAAC,CAAA;gBACZ,CAAC;gBAAC,MAAM,CAAC;oBACR,0BAA0B;gBAC3B,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAe;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;SAClC,CAAC,CAAA;QACF,IAAI,CAAC,YAAY,CAAC,GAAG,GAAG,IAAI,CAAC,CAAA;IAC9B,CAAC;CACD"}
+{"version":3,"file":"claude-code-base.js","sourceRoot":"","sources":["../../src/bridge/claude-code-base.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEvD,OAAO,EAAE,EAAE,EAAE,MAAM,0BAA0B,CAAA;AAE7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAuBhE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACpC,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,WAAW;IACX,WAAW;IACX,iBAAiB;IACjB,OAAO;CACP,CAAA;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAA;AAE9F,MAAM,OAAgB,oBAAoB;IAChC,SAAS,CAAQ;IAEhB,MAAM,CAAe;IACrB,MAAM,GAAqB,sBAAsB,EAAE,CAAA;IACnD,MAAM,GAAG,KAAK,CAAA;IACd,OAAO,GAAG,KAAK,CAAA;IACf,cAAc,GAAG,KAAK,CAAA;IAEhC,uFAAuF;IAC7E,eAAe,GAAkB,IAAI,CAAA;IAC/C,iFAAiF;IACvE,cAAc,GAAG,KAAK,CAAA;IAChC,4FAA4F;IAClF,WAAW,GAAG,KAAK,CAAA;IAC7B,oEAAoE;IAC1D,eAAe,GAAa,EAAE,CAAA;IAEhC,mBAAmB,GAAwC,EAAE,CAAA;IAC7D,iBAAiB,GAAsC,EAAE,CAAA;IAKjE,YAAY,SAAiB,EAAE,UAAgC;QAC9D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAE1B,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC;YAC/B,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,WAAW,EAAE,kBAAkB;SAC/B,CAAC,CAAA;IACH,CAAC;IAwBD,sEAAsE;IACtE,0BAA0B;IAC1B,sEAAsE;IAEtE,KAAK,CAAC,IAAI,CAAC,KAAkB;QAC5B,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QACvB,MAAM,GAAG,GAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAA;QACzD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,GAA4B;QAC7C,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QAEvB,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAClE,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;gBACvC,OAAO,CAAC,GAAG,CACV,IAAI,IAAI,CAAC,SAAS,2CAA2C,IAAI,CAAC,SAAS,UAAU,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CACtH,CAAA;gBACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;gBACtC,OAAM;YACP,CAAC;YACD,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,IAAI,SAAS,CAAC,CAAA;YACvE,OAAM;QACP,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,mCAAmC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;IAChF,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,KAA8B;QAClE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YAAE,OAAM;QAC7C,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC9C,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAA;QAC/B,CAAC;IACF,CAAC;IAED,YAAY,CAAC,EAAgC;QAC5C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClC,CAAC;IAED,UAAU,CAAC,EAA8B;QACxC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChC,CAAC;IAID,SAAS;QACR,OAAO,IAAI,CAAC,OAAO,CAAA;IACpB,CAAC;IAED,SAAS;QACR,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QACvB,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;IACrB,CAAC;IAED,KAAK;QACJ,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,CAAC,WAAW,EAAE,CAAA;IACnB,CAAC;IAED,sEAAsE;IACtE,sCAAsC;IACtC,sEAAsE;IAEtE;;;OAGG;IACO,gBAAgB;QACzB,IAAI,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAA;QACtC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAA;QAC3B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;IACpB,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,oBAAoB;QACnC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAA;gBAC7B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,uBAAuB,EAAE,GAAG,CAAC,CAAA;YAC9D,CAAC;QACF,CAAC;IACF,CAAC;IAED;;;OAGG;IACO,UAAU,CAAC,IAAY;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAM;QAEpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAC1B,CAAC;IACF,CAAC;IAED;;;OAGG;IACO,iBAAiB,CAAC,IAAmB;QAC9C,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,0BAA0B,IAAI,YAAY,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;QACzF,UAAU,CAAC,GAAG,EAAE;YACf,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAA;YACnD,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;YAEpB,mEAAmE;YACnE,gEAAgE;YAChE,8DAA8D;YAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;gBACzD,IAAI,CAAC,eAAe,GAAG,EAAE,CAAA;gBACzB,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,uCAAuC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;gBACtF,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,IAAI,SAAS,CAAC,CAAA;gBAC9D,OAAM;YACP,CAAC;YAED,uEAAuE;YACvE,yEAAyE;YACzE,iDAAiD;YACjD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC/D,MAAM,QAAQ,GAAgB;oBAC7B,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,IAAI,KAAK,CAAC;oBACnB,EAAE,EAAE,EAAE,EAAE;iBACR,CAAA;gBACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;YAC7B,CAAC;QACF,CAAC,EAAE,GAAG,CAAC,CAAA;IACR,CAAC;IAED;;OAEG;IACO,aAAa,CAAC,KAAkB;QACzC,8DAA8D;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QACrC,IAAI,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACrD,CAAC;YAAC,KAA0C,CAAC,KAAK,GAAG,SAAS,CAAA;QAC/D,CAAC;QAED,iCAAiC;QACjC,MAAM,GAAG,GAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAA;QACxD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAEvD,+DAA+D;QAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;QAC3B,CAAC;QAED,yEAAyE;QACzE,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YACjE,MAAM,GAAG,GAAI,KAAK,CAAC,UAAsC,EAAE,OAAO,CAAA;YAClE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,MAAM,SAAS,GAAgB;oBAC9B,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,SAAS;oBACjB,EAAE,EAAE,EAAE,EAAE;iBACR,CAAA;gBACD,MAAM,YAAY,GAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAA;gBACrE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBAChE,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC3C,IAAI,CAAC;wBACJ,EAAE,CAAC,SAAS,CAAC,CAAA;oBACd,CAAC;oBAAC,MAAM,CAAC;wBACR,UAAU;oBACX,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,wBAAwB;QACxB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACJ,EAAE,CAAC,KAAK,CAAC,CAAA;YACV,CAAC;YAAC,MAAM,CAAC;gBACR,0BAA0B;YAC3B,CAAC;QACF,CAAC;QAED,qBAAqB;QACrB,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;YACxD,MAAM,OAAO,GAAI,KAA4C,CAAC,OAAO,CAAA;YACrE,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACzC,IAAI,CAAC;oBACJ,EAAE,CAAC,OAAO,CAAC,CAAA;gBACZ,CAAC;gBAAC,MAAM,CAAC;oBACR,0BAA0B;gBAC3B,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAe;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;SAClC,CAAC,CAAA;QACF,IAAI,CAAC,YAAY,CAAC,GAAG,GAAG,IAAI,CAAC,CAAA;IAC9B,CAAC;CACD"}

package/dist/bridge/claude-md-generator.d.ts

@@ -1,12 +1,20 @@
 /**
  * Generates CLAUDE.md files for project workspaces.
+ *
+ * CLAUDE.md provides environment context, infrastructure details, and guardrails.
+ * Implementation details (phase order, API patterns, code templates) live in the
+ * create-app skill (.claude/skills/create-app/SKILL.md) and in playbook skills
+ * shipped with npm dependencies (discoverable via `npx @tanstack/intent list`).
  */
 export interface GitConfig {
-    /** "create" — agent should git init + gh repo create after scaffolding */
+    /** "create" — agent should git init + gh repo create after scaffolding (dev mode) */
+    /** "pre-created" — repo already exists, git remote configured; agent just commits + pushes (prod mode) */
     /** "existing" — repo was cloned; agent should commit + push after changes */
-    mode: "create" | "existing";
+    mode: "create" | "pre-created" | "existing";
     /** Full repo name, e.g. "owner/repo-name" */
     repoName: string;
+    /** Repo HTML URL (only for pre-created mode) */
+    repoUrl?: string;
     /** Visibility for new repos (only relevant when mode=create) */
     visibility?: "public" | "private";
     /** Branch name (only relevant when mode=existing) */
@@ -27,6 +35,8 @@ export interface ClaudeMdOptions {
     runtime?: "docker" | "sprites";
     /** Git/GitHub configuration — when set, git instructions are injected */
     git?: GitConfig;
+    /** When true, inject production guardrails that restrict agent scope */
+    production?: boolean;
 }
 export declare function generateClaudeMd(opts: ClaudeMdOptions): string;
 export { createAppSkillContent } from "./create-app-skill.js";

package/dist/bridge/claude-md-generator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-md-generator.d.ts","sourceRoot":"","sources":["../../src/bridge/claude-md-generator.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,SAAS;IACzB,0EAA0E;IAC1E,6EAA6E;IAC7E,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAA;IAC3B,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAA;IAChB,gEAAgE;IAChE,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IACjC,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,eAAe;IAC/B,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,gCAAgC;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAA;IAClB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,kEAAkE;IAClE,OAAO,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC9B,yEAAyE;IACzE,GAAG,CAAC,EAAE,SAAS,CAAA;CACf;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,CA4C9D;AA6PD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA"}
+{"version":3,"file":"claude-md-generator.d.ts","sourceRoot":"","sources":["../../src/bridge/claude-md-generator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,SAAS;IACzB,qFAAqF;IACrF,0GAA0G;IAC1G,6EAA6E;IAC7E,IAAI,EAAE,QAAQ,GAAG,aAAa,GAAG,UAAU,CAAA;IAC3C,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAA;IAChB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gEAAgE;IAChE,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IACjC,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,eAAe;IAC/B,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,gCAAgC;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAA;IAClB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,kEAAkE;IAClE,OAAO,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC9B,yEAAyE;IACzE,GAAG,CAAC,EAAE,SAAS,CAAA;IACf,wEAAwE;IACxE,UAAU,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,CA6C9D;AAkOD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA"}