@fugood/bricks-project 2.24.6 → 2.24.8

package/compile/action-name-map.ts

@@ -899,10 +899,12 @@ export const templateActionNameMap = {
     GENERATOR_APPLE_STT_TRANSCRIBE_FILE: {
       fileUrl: 'GENERATOR_APPLE_STT_FILE_URL',
       language: 'GENERATOR_APPLE_STT_LANGUAGE',
+      contextualStrings: 'GENERATOR_APPLE_STT_CONTEXTUAL_STRINGS',
     },
     GENERATOR_APPLE_STT_TRANSCRIBE_DATA: {
       data: 'GENERATOR_APPLE_STT_DATA',
       language: 'GENERATOR_APPLE_STT_LANGUAGE',
+      contextualStrings: 'GENERATOR_APPLE_STT_CONTEXTUAL_STRINGS',
     },
   },
   GENERATOR_APPLE_TTS: {

package/compile/index.ts

@@ -511,9 +511,10 @@ const compileKind = (kind: Data['kind']) => {
 }
 
 const compileRemoteUpdate = (remoteUpdate: Data['remoteUpdate']) => {
-  if (!remoteUpdate) return {}
-  if (remoteUpdate.type === 'auto') return { enable_remote_update: true }
+  if (!remoteUpdate) return { bank_type: 'none' }
+  if (remoteUpdate.type === 'auto') return { bank_type: 'create', enable_remote_update: true }
   return {
+    bank_type: remoteUpdate.type === 'device-specific' ? 'create-device-specific' : 'global',
     enable_remote_update: true,
     ...(remoteUpdate.type === 'device-specific' ? { use_remote_id_prefix: true } : {}),
     ...(remoteUpdate.type === 'global-data' ? { global_remote_update_prop: remoteUpdate.id } : {}),

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@fugood/bricks-project",
-  "version": "2.24.6",
+  "version": "2.24.8",
   "main": "index.ts",
   "scripts": {
     "typecheck": "tsc --noEmit",
     "build": "bun scripts/build.js"
   },
   "dependencies": {
-    "@fugood/bricks-cli": "^2.24.6",
+    "@fugood/bricks-cli": "^2.24.8",
     "@huggingface/gguf": "^0.3.2",
     "@iarna/toml": "^3.0.0",
     "@modelcontextprotocol/sdk": "^1.15.0",

package/skills/bricks-ctor/SKILL.md

@@ -11,24 +11,24 @@ This skill covers advanced BRICKS features not in the main project instructions.
 
 | Rule | Description |
 |------|-------------|
-| [Architecture Patterns](rules/architecture-patterns.md) | **Read first** — decompose flows and select patterns |
-| [Animation](rules/animation.md) | Animation system for brick transforms and opacity |
-| [Standby Transition](rules/standby-transition.md) | Canvas enter/exit animations |
-| [Automations](rules/automations.md) | E2E testing and scheduled tasks |
-| [Data Calculation](rules/data-calculation.md) | JS sandbox libraries (25+ available) |
-| [Local Sync](rules/local-sync.md) | LAN device synchronization |
-| [Remote Data Bank](rules/remote-data-bank.md) | Cloud data sync and API access |
-| [Media Flow](rules/media-flow.md) | Media asset management |
-| [Buttress](rules/buttress.md) | Remote inference for AI generators |
-| [Verification Toolchain](rules/verification-toolchain.md) | Definition of done, compile, preview tool selection, on-device DevTools, Path 1/2/3 decision rule |
+| [Architecture Patterns](references/architecture-patterns.md) | **Read first** — decompose flows and select patterns |
+| [Animation](references/animation.md) | Animation system for brick transforms and opacity |
+| [Standby Transition](references/standby-transition.md) | Canvas enter/exit animations |
+| [Automations](references/automations.md) | E2E testing and scheduled tasks |
+| [Data Calculation](references/data-calculation.md) | Wiring contract, trigger semantics, JS sandbox (25+ libraries) |
+| [Local Sync](references/local-sync.md) | LAN device synchronization |
+| [Remote Data Bank](references/remote-data-bank.md) | Cloud data sync and API access |
+| [Media Flow](references/media-flow.md) | Media asset management |
+| [Buttress](references/buttress.md) | Remote inference for AI generators |
+| [Verification Toolchain](references/verification-toolchain.md) | Definition of done, compile, preview tool selection, on-device DevTools, Path 1/2/3 decision rule |
 
 ## Quick Reference
 
-- **Complex flows**: See [Architecture Patterns](rules/architecture-patterns.md) for decomposing multi-step workflows
-- **Multi-device**: See [Local Sync](rules/local-sync.md) for LAN coordination
-- **Cloud data**: See [Remote Data Bank](rules/remote-data-bank.md) for sync and API access
-- **Media assets**: See [Media Flow](rules/media-flow.md) for centralized asset management
-- **AI offloading**: See [Buttress](rules/buttress.md) for GPU server delegation
-- **E2E testing**: See [Automations](rules/automations.md) for test automation
-- **Enter animations**: See [Standby Transition](rules/standby-transition.md) for canvas transitions
-- **Verification before done**: See [Verification Toolchain](rules/verification-toolchain.md) for the definition-of-done gate and Path 1/2/3 decision rule
+- **Complex flows**: See [Architecture Patterns](references/architecture-patterns.md) for decomposing multi-step workflows
+- **Multi-device**: See [Local Sync](references/local-sync.md) for LAN coordination
+- **Cloud data**: See [Remote Data Bank](references/remote-data-bank.md) for sync and API access
+- **Media assets**: See [Media Flow](references/media-flow.md) for centralized asset management
+- **AI offloading**: See [Buttress](references/buttress.md) for GPU server delegation
+- **E2E testing**: See [Automations](references/automations.md) for test automation
+- **Enter animations**: See [Standby Transition](references/standby-transition.md) for canvas transitions
+- **Verification before done**: See [Verification Toolchain](references/verification-toolchain.md) for the definition-of-done gate and Path 1/2/3 decision rule

package/skills/bricks-ctor/references/data-calculation.md

@@ -0,0 +1,239 @@
+# Data Calculation (JS Sandbox)
+
+Transform and compute Data Bank values using JavaScript scripts. Calcs are for **pure data transformation only** — see [Architecture Patterns](architecture-patterns.md) for the pattern selection guide.
+
+| If you need to... | Use instead |
+|---|---|
+| Call an LLM / AI model | Generator (Assistant, LLM, HTTP) |
+| Sequence multiple actions | Event Action Chain |
+| Set a data value directly | PROPERTY_BANK system action |
+| Compute a simple expression | PROPERTY_BANK_EXPRESSION |
+| Transform/format/parse data | Data Calculation (correct use) |
+
+## Authoring Contract
+
+```typescript
+import { makeId } from 'bricks-ctor'
+import { readFile } from 'node:fs/promises'
+
+const calculation: DataCalculationScript = {
+  __typename: 'DataCalculationScript',
+  id: makeId('property_bank_calc'),
+  title: 'Format Price',
+  description: 'Formats price with currency symbol',
+  note: '',
+  triggerMode: 'auto', // 'auto' (default) | 'manual'
+  enableAsync: false,
+  // Inline code for short scripts...
+  code: `
+    const price = inputs.price || 0
+    const currency = inputs.currency || 'USD'
+    return new Intl.NumberFormat('en-US', {
+      style: 'currency',
+      currency,
+    }).format(price)
+  `,
+  // ...or load from a file (preferred for longer scripts):
+  // code: await readFile(new URL('./format-price.sandbox.js', import.meta.url), 'utf8'),
+  inputs: [
+    { key: 'price', data: () => priceData, trigger: true },
+    { key: 'currency', data: () => currencyData, trigger: false },
+  ],
+  output: () => formattedPriceData,
+  outputs: [], // Additional named outputs (see Multiple Outputs)
+  error: null, // or () => errorData for error handling
+}
+```
+
+### Field Rules (defaults and constraints)
+
+- `trigger` **defaults to `false` when omitted** — always set it explicitly. A calc whose inputs are all non-trigger never auto-runs.
+- `triggerMode` defaults to `'auto'` when omitted.
+- `output` receives the **whole return value**. `outputs` entries extract fields by key from a returned object — `key` is a lodash-get path, so deep paths like `'user.name'` work. `output`, `outputs`, and `error` can be combined.
+- `error` receives the error **message string** when the script throws. Both extraction steps run on every execution: a success overwrites the error Data, a failure overwrites the output Data(s) — don't expect stale values to persist.
+- **Auto mode rejects the same Data in both `inputs` and `output`/`outputs`/`error`** — compile fails with `Not allow duplicate set property id between inputs / outputs / output / error`. Manual mode allows the overlap (self-referential updates, see Recipes).
+- `.sandbox.js` files use an `export function main() { ... }` wrapper — compile unwraps it. Raw statements also work, but the wrapper keeps linters happy since script bodies use top-level `return`.
+
+## Trigger Modes
+
+| Mode | Description |
+|------|-------------|
+| `auto` | Run on every write to a `trigger: true` input (even if the value is unchanged) |
+| `manual` | Never auto-runs; only via `PROPERTY_BANK_COMMAND` action. Allows the same Data as both input and output |
+
+Use `manual` to prevent circular dependencies, for explicit control, or when an output must feed back into an input.
+
+## Triggering via PROPERTY_BANK_COMMAND
+
+`input` references a Data that is an input of the target calc — the system runs the calc(s) that data feeds into. It does NOT reference the DataCalculation itself.
+
+- **Manual calc**: ANY input works — `trigger` flags are ignored for manual-mode calcs.
+- **Auto calc**: only `trigger: true` inputs work; commanding a `trigger: false` input is a silent no-op.
+
+```typescript
+const triggerCalc: EventAction = {
+  handler: 'system',
+  action: {
+    __actionName: 'PROPERTY_BANK_COMMAND',
+    parent: 'System',
+    dataParams: [
+      { input: () => priceData }, // Reference to an input Data of the calc
+    ],
+  },
+}
+```
+
+- When the same chain **writes a calc input first** (e.g. `PROPERTY_BANK` setting `dLastButton`) then issues `PROPERTY_BANK_COMMAND`, set `waitAsync: true` on the write so the calc reads the new value rather than the pre-chain snapshot. See [Event Action Chains](architecture-patterns.md#event-action-chains-priority-2).
+- When a **later action reads the calc's outputs**, set `waitAsync: true` on the `PROPERTY_BANK_COMMAND` action itself — it awaits the full calc chain including output writes.
+- A dataParam's `value` acts as an execution gate: `{ input: () => d, value: false }` skips that trigger (combine with `mapping` for conditional runs).
+
+## Script Sandbox
+
+Scripts run in `use strict` mode as a function body — top-level `return` returns the calc result. No `fetch`, `XMLHttpRequest`, or `require` in any mode: I/O belongs to Generators.
+
+### Built-in Globals
+
+| Global | Description |
+|--------|-------------|
+| `inputs` | Object with input values (keyed by input `key`) |
+| `console` | `{ log, error, warn, info }` — output is only visible in DevTools debug sessions; production is a no-op |
+| `Platform` | `{ OS, isTV, isPad, isVision, isElectron }` |
+| `TextEncoder`, `TextDecoder` | Text encoding/decoding |
+| `Buffer` | Node.js Buffer (without `allocUnsafe`/`allocUnsafeSlow`) |
+| `btoa`, `atob` | Base64 encoding/decoding |
+
+### Async Mode
+
+Sync mode (default) has **no `Promise`, timers, or `await`**. Enable `enableAsync: true` to unlock:
+
+- `Promise`, `setTimeout`, `setInterval`, `setImmediate`, `clearTimeout`, `clearInterval`, `clearImmediate`, `requestAnimationFrame`
+- Full lodash (sync mode omits `debounce`, `delay`, `defer`)
+- `await` at the top level of the script
+
+```typescript
+code: `
+  const result = await new Promise((resolve) => {
+    setTimeout(() => resolve(inputs.value * 2), 100)
+  })
+  return result
+`,
+enableAsync: true,
+```
+
+### Runtime Environment
+
+| Platform | Engine |
+|----------|--------|
+| Android | Hermes engine sandbox |
+| iOS | JavaScriptCore sandbox |
+| Electron desktop | Web Worker (V8) |
+| Web preview / Simulator | Web Worker (V8) |
+
+Simulator (Path 1) runs scripts on V8 while devices run Hermes/JSC — engine-sensitive code (date parsing, Intl, regex features) can pass in the Simulator and fail on device.
+
+### Available Libraries
+
+All exposed as globals. No network/file-download capability in any of them.
+
+| Global | Library | Notes |
+|--------|---------|-------|
+| `_`, `lodash` | lodash | Sync mode omits `debounce`/`delay`/`defer` |
+| `voca` | voca | String manipulation |
+| `invariant` | invariant | Assertions |
+| `json5` | json5 | JSON5 parsing |
+| `qs` | qs | Query string parsing |
+| `url` | node-url | URL parsing |
+| `bytes` | bytes | Byte parsing/formatting |
+| `ms` | ms | Millisecond conversion |
+| `base45` | base45 | Base45 encoding |
+| `iconv` | iconv-lite | Character encoding |
+| `math`, `mathjs` | mathjs | Math library |
+| `chroma` | chroma-js | Color manipulation |
+| `moment` | moment | Date/time; auto parseFormat for string args |
+| `nanoid` | nanoid | Unique ID generation |
+| `md5` | md5 | MD5 hashing |
+| `crypto` | crypto-browserify | Crypto functions |
+| `kjurJWS` | jsrsasign | JWT/JWS signing (`KJUR.jws.JWS`) |
+| `coseVerify` | cose-js | COSE verification (sync) |
+| `fflate` | fflate | `{ zlibSync, unzlibSync, gzipSync, gunzipSync, compressSync, decompressSync, strFromU8 }` |
+| `cbor` | cbor | `{ encode, decode, decodeFirstSync, decodeAllSync, addSemanticType }` |
+| `fs` | (in-repo fs-compat) | File system; no download/upload methods |
+| `parseDocument` | officeparser (in-repo fork) | Office document parsing (async) |
+| `TurndownService` | turndown | HTML to Markdown |
+| `OpenCC` | opencc-js | Chinese conversion `{ Converter, ConverterFactory, CustomConverter, Locale }` |
+| `TOON` | @toon-format/toon | TOON format parsing |
+
+## Recipes
+
+### Multiple Outputs
+
+Return an object; each `outputs` entry extracts its `key`:
+
+```typescript
+outputs: [
+  { key: 'total', data: () => totalData },
+  { key: 'tax', data: () => taxData },
+  { key: 'subtotal', data: () => subtotalData },
+],
+output: null,
+error: null,
+code: `
+  const subtotal = inputs.price * inputs.quantity
+  const tax = subtotal * 0.1
+  const total = subtotal + tax
+  return { total, tax, subtotal }
+`,
+```
+
+### Manual Self-Referential Update
+
+When an update is too complex for `PROPERTY_BANK_EXPRESSION` and must read its own previous value — manual mode allows the same Data as input and output:
+
+```typescript
+const appendHistory: DataCalculationScript = {
+  __typename: 'DataCalculationScript',
+  id: makeId('property_bank_calc'),
+  title: 'Append History Entry',
+  triggerMode: 'manual',
+  enableAsync: false,
+  code: `
+    const history = Array.isArray(inputs.history) ? inputs.history : []
+    return [...history, { entry: inputs.entry, at: moment().toISOString() }].slice(-50)
+  `,
+  inputs: [
+    { key: 'history', data: () => historyData, trigger: true },
+    { key: 'entry', data: () => entryData, trigger: true },
+  ],
+  output: () => historyData, // same Data as input — manual mode only
+  outputs: [],
+  error: null,
+}
+// Run it from an event chain: PROPERTY_BANK writes entryData (waitAsync: true),
+// then PROPERTY_BANK_COMMAND with input: () => entryData.
+```
+
+## Failure Modes
+
+| Symptom | Cause | Fix |
+|---------|-------|-----|
+| Calc never auto-runs | `trigger` omitted on inputs (defaults to `false`) | Set `trigger: true` explicitly |
+| `PROPERTY_BANK_COMMAND` does nothing | Auto calc + `trigger: false` input, or `input` doesn't reference an input Data of the calc | Command a `trigger: true` input (auto) or any input (manual) |
+| Compile error `Not allow duplicate set property id...` | Auto mode with same Data as input and output | Use `triggerMode: 'manual'`, or split into separate Data |
+| Calc reads stale value written earlier in the same chain | Missing `waitAsync: true` on the preceding write | Set `waitAsync: true` on the write action |
+| Works in Simulator, fails on device | V8 vs Hermes/JSC engine difference | Verify on device (Path 2); avoid engine-sensitive parsing |
+| `console.log` shows nothing | Console only emits during DevTools debug sessions | Attach DevTools, or write debug values to an output Data |
+| `Promise`/`setTimeout` undefined, or `Async mode is required` error | `enableAsync: false` | Set `enableAsync: true` |
+
+## Best Practices
+
+1. **Avoid circular deps**: Set non-triggering inputs (`trigger: false`) or use `manual` mode
+2. **Error handling**: Always set `error` output for scripts that might fail
+3. **Keep scripts pure**: Avoid side effects, return computed values
+4. **Debounce rapid updates**: Use `manual` mode + timer for high-frequency inputs (auto calcs re-run on every write, even unchanged)
+
+## Anti-Patterns (AVOID)
+
+See [Architecture Patterns](architecture-patterns.md) for the full pattern selection guide.
+
+### Using Data Calc as an orchestrator
+Scripts that manage state machines, control UI flow, or coordinate multi-step processes belong in Event Action Chains. Symptoms: if/else on "what happens next", mirror `dFooResult` outputs that copy back to `dFoo` via `valueChange`, or a `dLastInput` field set-then-cleared to force an auto calc. See the "user-driven state machine" recipe in [Architecture Patterns](architecture-patterns.md).

package/skills/bricks-design/SKILL.md

@@ -1,30 +1,20 @@
 ---
 name: bricks-design
 description: >-
-  Visual design discipline for Applications and Subspaces — type,
-  palette, asset acquisition, design language, system commitment,
-  visual rhythm, brand. TRIGGER for visual / aesthetic / system /
-  style / brand-asset work even when the user names the surface in
-  product terms — slideshow / pitch deck / introduction / explainer
-  / storyboard; kiosk / signage / menu board / lobby / reception /
-  wayfinding / retail / hospitality / museum / transit; translate /
-  port / rebuild from Figma / HTML / screenshot / website / PDF /
-  brand book; vague creative brief ("design something for the
-  lobby"); branded scene work; iteration on existing Subspace
-  (rework, redesign, audit visual system, tighten the type / palette
-  / motion / rhythm). For end-to-end briefs (kiosk, dashboard,
-  interactive screen) this skill invokes in parallel with bricks-ux,
-  which carries the interaction / flow / usability layer. SKIP for
-  pure usability / flow / journey / affordance / feedback / recovery
-  / accessibility / multilingual audits — those go to bricks-ux. SKIP
-  for single-Brick or Generator template work
-  (create-brick-or-generator), debugging or refactoring with no
-  design intent, or non-display deliverables (CLI, server, tooling).
-  Encodes architecture truths, performance and complexity guardrails,
-  input-translation rules, visual languages library, Direction
-  Advisor for vague briefs, Media Flow protocol for branded work.
-  Verification toolchain (compile, preview tool selection, on-device DevTools,
-  Path 1/2/3) lives in the bricks-ctor skill.
+  Visual design discipline for Applications and Subspaces — type, palette, asset
+  acquisition, design language, system commitment, visual rhythm, brand. TRIGGER
+  for visual / aesthetic / system / style / brand-asset work even when named in
+  product terms — slideshow, pitch deck, explainer, kiosk, signage, menu board,
+  lobby, wayfinding, retail, museum, transit; translate or rebuild from Figma /
+  HTML / screenshot / website / PDF / brand book; vague creative briefs; branded
+  scenes; rework or audit of an existing Subspace's type / palette / motion /
+  rhythm. For end-to-end briefs invoke in parallel with bricks-ux (interaction /
+  flow layer). SKIP for pure usability / flow / accessibility audits (bricks-
+  ux), single-Brick or Generator template work (create-brick-or-generator),
+  debugging without design intent, or non-display deliverables. Encodes
+  architecture truths, performance guardrails, input-translation rules, visual
+  languages, Direction Advisor, Media Flow protocol; verification toolchain
+  lives in bricks-ctor.
 ---
 
 # BRICKS Design

package/skills/bricks-ux/SKILL.md

@@ -1,26 +1,20 @@
 ---
 name: bricks-ux
 description: >-
-  Interaction design and end-user experience for any Application or
-  Subspace built on Canvases, Bricks, Generators, Data, DataCalculation.
-  TRIGGER on usability / flow / interaction / journey / state /
-  affordance / feedback / recovery / accessibility audits and design
-  work — "audit this flow", "improve usability", "design the wait
-  state", "fix the error path", "make the kiosk usable", "what does the
-  user do when X breaks", "design the QR scan UX", "design the payment
-  flow", "design the mic / listening state", "design the monitor's
-  alarm state", "design for multilingual", "design for low vision",
-  "design idle and attractor states". Also triggers in parallel with
-  visual-design work for end-to-end deliverables (kiosk / signage /
-  dashboard / interactive screen / pitch deck) where the interaction
-  shape matters as much as the look. SKIP for purely visual / aesthetic
-  / system / style / brand-asset / typography / palette work — those
-  are visual design, not interaction design. Encodes a universal
-  user-journey spine, interaction archetypes, pressable composition,
-  monitoring-screen discipline, designed flow states, accessibility,
-  and a tiered UX critique. Hardware floors are deployment-relative;
-  web habits (hover affordances, modal-as-default, scroll, page-submit
-  forms) do not transfer.
+  Interaction design and end-user experience for any Application or Subspace
+  built on Canvases, Bricks, Generators, Data, DataCalculation. TRIGGER on
+  usability / flow / interaction / journey / state / affordance / feedback /
+  recovery / accessibility audits and design work — "audit this flow", "improve
+  usability", "design the wait state", "make the kiosk usable", "design the
+  payment flow", "design idle and attractor states", "design for multilingual /
+  low vision". Also triggers in parallel with visual-design work for end-to-end
+  deliverables (kiosk, signage, dashboard, interactive screen, pitch deck) where
+  interaction shape matters as much as look. SKIP for purely visual / aesthetic
+  / style / brand-asset / typography / palette work — that is bricks-design.
+  Encodes a universal user-journey spine, interaction archetypes, pressable
+  composition, monitoring-screen discipline, designed flow states,
+  accessibility, tiered UX critique; hardware floors are deployment-relative and
+  web habits do not transfer.
 ---
 
 # BRICKS UX

package/tools/postinstall.ts

@@ -69,8 +69,15 @@ const projectMcpServer = {
   args: [`${cwd}/node_modules/@fugood/bricks-ctor/tools/mcp-server.ts`],
 }
 
+// Codex cancels MCP tool calls it cannot prompt approval for (e.g. `codex exec`),
+// so the project-local server's tools must be pre-approved in its config entry.
+const codexProjectMcpServer = {
+  ...projectMcpServer,
+  default_tools_approval_mode: 'approve',
+}
+
 type CodexMcpConfig = {
-  mcp_servers: Record<string, typeof projectMcpServer>
+  mcp_servers: Record<string, typeof codexProjectMcpServer | typeof projectMcpServer>
 }
 
 // Claude Code and AGENTS.md projects both use the shared project .mcp.json file.
@@ -196,11 +203,81 @@ if (hasClaudeCode || hasAgentsMd) {
   await setupSkills()
 }
 
+type ClaudeSettings = {
+  autoMode?: {
+    environment?: string[]
+    allow?: string[]
+    soft_deny?: string[]
+    hard_deny?: string[]
+  }
+  [key: string]: unknown
+}
+
+// Trusted infrastructure for auto mode's classifier. `$defaults` keeps the
+// built-in environment (the working repo and its git remotes); the extra
+// entries stop routine syncs to the BRICKS backend from being treated as
+// external exfiltration. See https://code.claude.com/docs/en/auto-mode-config
+const autoModeEnvironment = [
+  '$defaults',
+  'Organization: BRICKS (bricks.tools). Primary use: building BRICKS apps/modules with the bricks CLI and the local bricks-ctor MCP server.',
+  'Trusted internal domains: all *.bricks.tools services — api.bricks.tools (project GraphQL API), bank.bricks.tools (config & asset Bank API), cdn.bricks.tools (asset CDN), plus the control/display/activity services. This project syncs its config and assets to these endpoints.',
+]
+
+// `.claude/settings.local.json` is per-developer local config; keep it untracked.
+const ensureSettingsLocalGitignored = async () => {
+  const gitignorePath = path.join(cwd, '.gitignore')
+  const entry = '.claude/settings.local.json'
+  const coveredBy = new Set([entry, '.claude', '.claude/', '.claude/*', '*.local.json'])
+
+  let content = ''
+  if (await exists(gitignorePath)) {
+    content = await readFile(gitignorePath, 'utf-8')
+    if (content.split('\n').some((line) => coveredBy.has(line.trim()))) return
+  }
+
+  const separator = content.length === 0 ? '' : content.endsWith('\n') ? '\n' : '\n\n'
+  await writeFile(gitignorePath, `${content}${separator}# Claude Code local settings\n${entry}\n`)
+  console.log(`Added ${entry} to .gitignore`)
+}
+
+// Pre-configure auto mode once, on initial setup. We only seed the classifier's
+// trusted infrastructure — not `permissions.defaultMode: 'auto'`, which Claude
+// Code ignores from project/local settings (a repo can't grant itself auto mode;
+// it only takes effect from ~/.claude/settings.json). An existing autoMode block
+// is left untouched so reinstalls never clobber a developer's customizations.
+const setupClaudeAutoMode = async () => {
+  const settingsPath = path.join(cwd, '.claude', 'settings.local.json')
+
+  let settings: ClaudeSettings = {}
+  if (await exists(settingsPath)) {
+    try {
+      settings = JSON.parse(await readFile(settingsPath, 'utf-8'))
+    } catch {
+      console.warn(`Skipping auto mode setup; ${settingsPath} is not valid JSON`)
+      return
+    }
+    if (settings.autoMode) return
+  }
+
+  settings.autoMode = { environment: autoModeEnvironment }
+
+  await mkdir(path.dirname(settingsPath), { recursive: true })
+  await writeFile(settingsPath, `${JSON.stringify(settings, null, 2)}\n`)
+  console.log(`Set up auto mode in ${settingsPath}`)
+
+  await ensureSettingsLocalGitignored()
+}
+
+if (hasClaudeCode) {
+  // Pre-configure auto mode's trusted infrastructure for Claude Code projects.
+  await setupClaudeAutoMode()
+}
+
 if (hasAgentsMd) {
   // Codex stores its project-local MCP config in .codex/config.toml.
   const defaultCodexMcpConfig = {
     mcp_servers: {
-      'bricks-ctor': projectMcpServer,
+      'bricks-ctor': codexProjectMcpServer,
     },
   }
 
@@ -212,7 +289,7 @@ if (hasAgentsMd) {
         const parsed = TOML.parse(configStr) as Partial<CodexMcpConfig>
         if (!parsed?.mcp_servers) throw new Error('mcp_servers is not defined')
         mcpConfig = { mcp_servers: parsed.mcp_servers }
-        mcpConfig.mcp_servers['bricks-ctor'] = projectMcpServer
+        mcpConfig.mcp_servers['bricks-ctor'] = codexProjectMcpServer
         delete mcpConfig.mcp_servers['bricks-project']
       } catch {
         mcpConfig = defaultCodexMcpConfig

package/types/data-calc-command/sandbox.d.ts

@@ -18,7 +18,9 @@ export type DataCommandSandboxGetReturnValue = DataCommand & {
 /* Run JS — Run JavaScript code
 
 - Default `use strict`
-- Global functions fetch, XMLHttpRequest, setTimeout, setInterval... are not available.
+- Global functions fetch, XMLHttpRequest are not available.
+- setTimeout, setInterval, Promise... require Enable Async.
+- Built-in globals: Platform, Buffer, btoa/atob, TextEncoder/TextDecoder
 
 ##### Available libraries (global)
 
@@ -43,10 +45,16 @@ export type DataCommandSandboxGetReturnValue = DataCommand & {
 - fflate (Not support async, callback and stream)
 - iconv (Use iconv-lite)
 - OpenCC (Use opencc-js)
+- fs (Limited, no download/upload)
+- parseDocument (Use officeparser, requires Enable Async)
+- TurndownService (Use turndown, HTML to Markdown)
+- TOON (Use toon-format/toon)
 
 Android: Running on the sandbox of Hermes engine
 
-iOS: Running on the sandbox of iOS built-in JavaScriptCore */
+iOS: Running on the sandbox of iOS built-in JavaScriptCore
+
+Desktop / Web: Running on the sandbox of a Web Worker */
 export type DataCommandSandboxRunJavascript = DataCommand & {
   __commandName: 'SANDBOX_RUN_JAVASCRIPT'
   inputs?: Array<

package/types/generators/LlmGgml.d.ts

@@ -11,6 +11,8 @@
  *    - Supported Hexagon NPU for Qualcomm Snapdragon 8 Gen 1+ GPUs.
  *  - Linux / Windows  [@nextline    - Supported GPU acceleration, you can choose `vulkan` or `cuda` backend in Accel Variant property
  *    - Supported Hexagon NPU for Qualcomm Dragonwing IQ9 series+ (Linux)
+ *  - Web: Supported with CPU and WebGPU acceleration.
+ *    - Single thread only in the current web preview (no SharedArrayBuffer due to cross-origin isolation / CORP), so multi-thread is unavailable.
  */
 import type { SwitchCondInnerStateCurrentCanvas, SwitchCondData, SwitchDef } from '../switch'
 import type { Data, DataLink } from '../data'
@@ -863,7 +865,9 @@ Default property:
    - Supported GPU acceleration by OpenCL, currently only for Qualcomm Adreno 700+ GPUs, other GPUs are not supported.  
    - Supported Hexagon NPU for Qualcomm Snapdragon 8 Gen 1+ GPUs.  
  - Linux / Windows  [@nextline    - Supported GPU acceleration, you can choose `vulkan` or `cuda` backend in Accel Variant property  
-   - Supported Hexagon NPU for Qualcomm Dragonwing IQ9 series+ (Linux) */
+   - Supported Hexagon NPU for Qualcomm Dragonwing IQ9 series+ (Linux)  
+ - Web: Supported with CPU and WebGPU acceleration.  
+   - Single thread only in the current web preview (no SharedArrayBuffer due to cross-origin isolation / CORP), so multi-thread is unavailable. */
 export type GeneratorLLM = Generator &
   GeneratorLLMDef & {
     templateKey: 'GENERATOR_LLM'

package/types/generators/RerankerGgml.d.ts

@@ -12,6 +12,8 @@
  *  - Linux / Windows
  *    - Supported GPU acceleration, you can choose `vulkan` or `cuda` backend in Accel Variant property
  *    - Supported Hexagon NPU for Qualcomm Dragonwing IQ9 series+ (Linux)
+ *  - Web: Supported with CPU and WebGPU acceleration.
+ *    - Single thread only in the current web preview (no SharedArrayBuffer due to cross-origin isolation / CORP), so multi-thread is unavailable.
  */
 import type { SwitchCondInnerStateCurrentCanvas, SwitchCondData, SwitchDef } from '../switch'
 import type { Data, DataLink } from '../data'
@@ -163,7 +165,9 @@ Default property:
    - Supported Hexagon NPU for Qualcomm Snapdragon 8 Gen 2+ GPUs.  
  - Linux / Windows  
    - Supported GPU acceleration, you can choose `vulkan` or `cuda` backend in Accel Variant property  
-   - Supported Hexagon NPU for Qualcomm Dragonwing IQ9 series+ (Linux) */
+   - Supported Hexagon NPU for Qualcomm Dragonwing IQ9 series+ (Linux)  
+ - Web: Supported with CPU and WebGPU acceleration.  
+   - Single thread only in the current web preview (no SharedArrayBuffer due to cross-origin isolation / CORP), so multi-thread is unavailable. */
 export type GeneratorReranker = Generator &
   GeneratorRerankerDef & {
     templateKey: 'GENERATOR_RERANKER'

package/types/generators/SoundRecorder.d.ts

@@ -54,7 +54,8 @@ Default property:
   "autoCuttingVocalFreqMin": 75,
   "autoCuttingVocalFreqMax": 900,
   "autoCuttingFreqClarity": 0.5,
-  "autoCuttingSpeakSpacing": 0.5
+  "autoCuttingSpeakSpacing": 0.5,
+  "userMediaAudioOptions": {}
 }
   */
   property?: {
@@ -86,6 +87,14 @@ Default property:
     autoCuttingVolumeThreshold?: number | DataLink
     /* Speak spacing of cutting fragments */
     autoCuttingSpeakSpacing?: number | DataLink
+    /* Custom getUserMedia audio options for Web / Desktop. Merged into the audio constraints. */
+    userMediaAudioOptions?:
+      | DataLink
+      | {
+          autoGainControl?: boolean | DataLink
+          echoCancellation?: boolean | DataLink
+          noiseSuppression?: boolean | DataLink
+        }
   }
   events?: {
     /* Event for chunk data (Base64 encoded PCM) */

package/types/generators/SpeechToTextGgml.d.ts

@@ -7,6 +7,8 @@
  *  - macOS: Supported GPU acceleration, recommended use M1+ chip device
  *  - Android: Currently not supported GPU acceleration (Coming soon), recommended use Android 13+ system
  *  - Linux / Windows: Supported GPU acceleration, you can choose `vulkan` or `cuda` backend in Accel Variant property
+ *  - Web: Supported with WASM CPU and optional WebGPU acceleration in Web Preview.
+ *    - Single thread only in the current web preview (no SharedArrayBuffer due to cross-origin isolation / CORP), so multi-thread is unavailable.
  */
 import type { SwitchCondInnerStateCurrentCanvas, SwitchCondData, SwitchDef } from '../switch'
 import type { Data, DataLink } from '../data'
@@ -389,7 +391,9 @@ Default property:
  - iOS: Supported GPU acceleration, recommended use M1+ / A17+ chip device  
  - macOS: Supported GPU acceleration, recommended use M1+ chip device  
  - Android: Currently not supported GPU acceleration (Coming soon), recommended use Android 13+ system  
- - Linux / Windows: Supported GPU acceleration, you can choose `vulkan` or `cuda` backend in Accel Variant property */
+ - Linux / Windows: Supported GPU acceleration, you can choose `vulkan` or `cuda` backend in Accel Variant property  
+ - Web: Supported with WASM CPU and optional WebGPU acceleration in Web Preview.  
+   - Single thread only in the current web preview (no SharedArrayBuffer due to cross-origin isolation / CORP), so multi-thread is unavailable. */
 export type GeneratorSpeechInference = Generator &
   GeneratorSpeechInferenceDef & {
     templateKey: 'GENERATOR_SPEECH_INFERENCE'

package/types/generators/SttAppleBuiltin.d.ts

@@ -1,13 +1,13 @@
 /* Auto generated by build script
  *
- * Speech recognition on iOS 26+ (Not supported on tvOS)
+ * Speech recognition on iOS 26+ and Desktop (macOS 26+). Not supported on tvOS
  *
  *  ## Features
  *  - Native Apple speech recognition
  *  - High accuracy transcription
  *  - Privacy-focused on-device processing
  *  - Supports file and data transcription
- *  - Requires iOS 26+ (Not supported on tvOS)
+ *  - Requires iOS 26+ or Desktop on macOS 26+. Not supported on tvOS
  */
 import type { SwitchCondInnerStateCurrentCanvas, SwitchCondData, SwitchDef } from '../switch'
 import type { Data, DataLink } from '../data'
@@ -41,6 +41,11 @@ export type GeneratorAppleSTTActionTranscribeFile = ActionWithParams & {
         value?: string | DataLink | EventProperty
         mapping?: string
       }
+    | {
+        input: 'contextualStrings'
+        value?: Array<any> | DataLink | EventProperty
+        mapping?: string
+      }
   >
 }
 
@@ -58,15 +63,26 @@ export type GeneratorAppleSTTActionTranscribeData = ActionWithParams & {
         value?: string | DataLink | EventProperty
         mapping?: string
       }
+    | {
+        input: 'contextualStrings'
+        value?: Array<any> | DataLink | EventProperty
+        mapping?: string
+      }
   >
 }
 
+/* Release context */
+export type GeneratorAppleSTTActionReleaseContext = Action & {
+  __actionName: 'GENERATOR_APPLE_STT_RELEASE_CONTEXT'
+}
+
 interface GeneratorAppleSTTDef {
   /*
 Default property:
 {
   "init": false,
   "language": "en-US",
+  "contextualStrings": [],
   "enablePartialResults": true
 }
   */
@@ -75,6 +91,13 @@ Default property:
     init?: boolean | DataLink
     /* Language/locale for recognition (e.g., 'en-US') */
     language?: string | DataLink
+    /* Phrases that should be recognized, even if they are not in the system vocabulary. */
+    contextualStrings?:
+      | Array<string | DataLink>
+      | DataLink
+      | Record<string, Array<string | DataLink> | DataLink>
+      | DataLink
+      | DataLink
     /* Enable partial results during transcription */
     enablePartialResults?: boolean | DataLink
     /* The file URL or path to be transcribed */
@@ -100,14 +123,14 @@ Default property:
   }
 }
 
-/* Speech recognition on iOS 26+ (Not supported on tvOS)
+/* Speech recognition on iOS 26+ and Desktop (macOS 26+). Not supported on tvOS
 
  ## Features  
  - Native Apple speech recognition  
  - High accuracy transcription  
  - Privacy-focused on-device processing  
  - Supports file and data transcription  
- - Requires iOS 26+ (Not supported on tvOS) */
+ - Requires iOS 26+ or Desktop on macOS 26+. Not supported on tvOS */
 export type GeneratorAppleSTT = Generator &
   GeneratorAppleSTTDef & {
     templateKey: 'GENERATOR_APPLE_STT'

package/types/generators/VadGgml.d.ts

@@ -1,6 +1,11 @@
 /* Auto generated by build script
  *
- * Local Voice Activity Detection (VAD) inference based on GGML and [whisper.rn](https://github.com/mybigday/whisper.rn)
+ * Local Voice Activity Detection (VAD) inference based on GGML and [whisper.cpp](https://github.com/ggerganov/whisper.cpp)
+ *
+ *  ## Notice
+ *  - Web: Supported with WASM CPU in Web Preview.
+ *    - WebGPU is not used for browser VAD; the wasm package falls back to CPU for the VAD graph.
+ *    - Single thread only in the current web preview (no SharedArrayBuffer due to cross-origin isolation / CORP), so multi-thread is unavailable.
  */
 import type { SwitchCondInnerStateCurrentCanvas, SwitchCondData, SwitchDef } from '../switch'
 import type { Data, DataLink } from '../data'
@@ -222,7 +227,12 @@ Default property:
   }
 }
 
-/* Local Voice Activity Detection (VAD) inference based on GGML and [whisper.rn](https://github.com/mybigday/whisper.rn) */
+/* Local Voice Activity Detection (VAD) inference based on GGML and [whisper.cpp](https://github.com/ggerganov/whisper.cpp)
+
+ ## Notice  
+ - Web: Supported with WASM CPU in Web Preview.  
+   - WebGPU is not used for browser VAD; the wasm package falls back to CPU for the VAD graph.  
+   - Single thread only in the current web preview (no SharedArrayBuffer due to cross-origin isolation / CORP), so multi-thread is unavailable. */
 export type GeneratorVadInference = Generator &
   GeneratorVadInferenceDef & {
     templateKey: 'GENERATOR_VAD_INFERENCE'

package/skills/bricks-ctor/rules/data-calculation.md

@@ -1,209 +0,0 @@
-# Data Calculation (JS Sandbox)
-
-Transform and compute Data Bank values using JavaScript scripts.
-
-## DataCalculationScript
-
-JavaScript code executed in a sandbox with access to inputs and outputs.
-
-```typescript
-import { makeId } from 'bricks-ctor'
-
-const calculation: DataCalculationScript = {
-  __typename: 'DataCalculationScript',
-  id: makeId('property_bank_calc'),
-  title: 'Format Price',
-  description: 'Formats price with currency symbol',
-  note: '',
-  triggerMode: 'auto', // 'auto' | 'manual'
-  enableAsync: false,
-  // Inline code
-  code: `
-    const price = inputs.price || 0
-    const currency = inputs.currency || 'USD'
-    return new Intl.NumberFormat('en-US', {
-      style: 'currency',
-      currency,
-    }).format(price)
-  `,
-  // Or load from file (preferred for longer scripts)
-  // import { readFile } from 'node:fs/promises'
-  // code: await readFile(new URL('./format-price.sandbox.js', import.meta.url), 'utf8'),
-  inputs: [
-    { key: 'price', data: () => priceData, trigger: true },
-    { key: 'currency', data: () => currencyData, trigger: false },
-  ],
-  output: () => formattedPriceData,
-  outputs: [], // Additional named outputs
-  error: null, // or () => errorData for error handling
-}
-```
-
-## Trigger Modes
-
-| Mode | Description |
-|------|-------------|
-| `auto` | Run when input values change (with trigger: true) |
-| `manual` | Only run via `PROPERTY_BANK_COMMAND` action |
-
-Use `manual` to prevent circular dependencies or for explicit control.
-
-## Script Sandbox Features
-
-Scripts run in `use strict` mode with a sandboxed set of globals and libraries.
-
-### Built-in Globals
-
-| Global | Description |
-|--------|-------------|
-| `inputs` | Object with input values |
-| `console` | `{ log, error, warn, info }` for debugging |
-| `Platform` | `{ OS, isTV, isPad, isVision, isElectron }` |
-| `TextEncoder`, `TextDecoder` | Text encoding/decoding |
-| `Buffer` | Node.js Buffer (without `allocUnsafe`) |
-| `btoa`, `atob` | Base64 encoding/decoding |
-
-### Available Libraries
-
-**Utility**
-| Library | Global | Description |
-|---------|--------|-------------|
-| [lodash](https://lodash.com) | `_`, `lodash` | Utility (sync: no debounce/delay/defer) |
-| [voca](https://vocajs.com) | `voca` | String manipulation |
-| [invariant](https://github.com/zertosh/invariant) | `invariant` | Assertions |
-
-**Data & Encoding**
-| Library | Global | Description |
-|---------|--------|-------------|
-| [json5](https://github.com/json5/json5) | `json5` | JSON5 parsing |
-| [qs](https://github.com/ljharb/qs) | `qs` | Query string parsing |
-| [url](https://github.com/defunctzombie/node-url) | `url` | URL parsing |
-| [bytes](https://github.com/visionmedia/bytes.js) | `bytes` | Byte parsing/formatting |
-| [ms](https://github.com/vercel/ms) | `ms` | Millisecond conversion |
-| [base45](https://github.com/irony/base45) | `base45` | Base45 encoding |
-| [iconv-lite](https://github.com/ashtuchkin/iconv-lite) | `iconv` | Character encoding |
-
-**Math & Color**
-| Library | Global | Description |
-|---------|--------|-------------|
-| [mathjs](https://mathjs.org) | `math`, `mathjs` | Math library |
-| [chroma-js](https://gka.github.io/chroma.js) | `chroma` | Color manipulation |
-
-**Date/Time**
-| Library | Global | Description |
-|---------|--------|-------------|
-| [moment](https://momentjs.com) | `moment` | Date/time (auto parseFormat) |
-
-**ID & Hash**
-| Library | Global | Description |
-|---------|--------|-------------|
-| [nanoid](https://github.com/ai/nanoid) | `nanoid` | Unique ID generation |
-| [md5](https://github.com/pvorb/node-md5) | `md5` | MD5 hashing |
-
-**Crypto**
-| Library | Global | Description |
-|---------|--------|-------------|
-| [crypto-browserify](https://github.com/crypto-browserify/crypto-browserify) | `crypto` | Crypto functions |
-| [jsrsasign](https://github.com/kjur/jsrsasign) | `kjurJWS` | JWT/JWS signing |
-| [cose-js](https://github.com/erdtman/COSE-JS) | `coseVerify` | COSE verification (sync) |
-
-**Compression**
-| Library | Global | Description |
-|---------|--------|-------------|
-| [fflate](https://github.com/101arrowz/fflate) | `fflate` | `{ zlibSync, unzlibSync, gzipSync, gunzipSync, compressSync, decompressSync, strFromU8 }` |
-| [cbor](https://github.com/hildjj/node-cbor) | `cbor` | `{ encode, decode, decodeFirstSync, decodeAllSync }` |
-
-**File & Document**
-| Library | Global | Description |
-|---------|--------|-------------|
-| fs | `fs` | File system (limited, no download/upload) |
-| [officeparser](https://github.com/nicktang) | `parseDocument` | Office document parsing (async) |
-| [turndown](https://github.com/mixmark-io/turndown) | `TurndownService` | HTML to Markdown |
-| [opencc-js](https://github.com/nk2028/opencc-js) | `OpenCC` | Chinese conversion `{ Converter, ConverterFactory, CustomConverter, Locale }` |
-| [toon-format](https://github.com/nicktang) | `TOON` | TOON format parsing |
-
-### Runtime Environment
-
-| Platform | Engine |
-|----------|--------|
-| Android | Hermes engine sandbox |
-| iOS | JavaScriptCore sandbox |
-
-### Async Mode
-
-Enable `enableAsync: true` to unlock additional capabilities:
-
-**Additional async globals:**
-- `Promise`, `setTimeout`, `setInterval`, `setImmediate`
-- `clearTimeout`, `clearInterval`, `clearImmediate`
-- `requestAnimationFrame`
-- Full lodash (including `debounce`, `delay`, `defer`)
-
-```typescript
-code: `
-  const result = await new Promise((resolve) => {
-    setTimeout(() => resolve(inputs.value * 2), 100)
-  })
-  return result
-`,
-enableAsync: true,
-```
-
-### Multiple Outputs
-
-```typescript
-outputs: [
-  { key: 'total', data: () => totalData },
-  { key: 'tax', data: () => taxData },
-  { key: 'subtotal', data: () => subtotalData },
-],
-code: `
-  const subtotal = inputs.price * inputs.quantity
-  const tax = subtotal * 0.1
-  const total = subtotal + tax
-  return { total, tax, subtotal }
-`,
-```
-
-## Triggering Manually
-
-Use `PROPERTY_BANK_COMMAND` system action to trigger a manual calculation. `input` references a Data that is a trigger input (`trigger: true`) of the target calc — the system runs the calc(s) that data feeds into. It does NOT reference the DataCalculation itself.
-
-```typescript
-const triggerCalc: EventAction = {
-  handler: 'system',
-  action: {
-    __actionName: 'PROPERTY_BANK_COMMAND',
-    parent: 'System',
-    dataParams: [
-      { input: () => priceData }, // Reference to a trigger Data input of the calc
-    ],
-  },
-}
-```
-
-When the same chain writes a calc input (e.g. `PROPERTY_BANK` setting `dLastButton`) then issues `PROPERTY_BANK_COMMAND`, set `waitAsync: true` on the write so the calc reads the new value rather than the pre-chain snapshot. See [Event Action Chains](architecture-patterns.md#event-action-chains-priority-2).
-
-## Best Practices
-
-1. **Avoid circular deps**: Set non-triggering inputs (`trigger: false`) or use `manual` mode
-2. **Error handling**: Always set `error` output for scripts that might fail
-3. **Keep scripts pure**: Avoid side effects, return computed values
-4. **Debounce rapid updates**: Use `manual` mode + timer for high-frequency inputs
-
-## Anti-Patterns (AVOID)
-
-See [Architecture Patterns](architecture-patterns.md) for the full pattern selection guide.
-
-### Using Data Calc as an orchestrator
-Scripts that manage state machines, control UI flow, or coordinate multi-step processes belong in Event Action Chains. Symptoms: if/else on "what happens next", mirror `dFooResult` outputs that copy back to `dFoo` via `valueChange`, or a `dLastInput` field set-then-cleared to force an auto calc. See the "user-driven state machine" recipe in [Architecture Patterns](architecture-patterns.md).
-
-### Quick reference
-
-| If you need to... | Use instead |
-|---|---|
-| Call an LLM / AI model | Generator (Assistant, LLM, HTTP) |
-| Sequence multiple actions | Event Action Chain |
-| Set a data value directly | PROPERTY_BANK system action |
-| Compute a simple expression | PROPERTY_BANK_EXPRESSION |
-| Transform/format/parse data | Data Calculation (correct use) |