@ggui-ai/ui-gen 0.21.0 → 0.23.0

package/dist/harness/index.d.ts

@@ -10,7 +10,7 @@ export { computeHarnessId, computeHarnessName, hashClassification } from '../has
 import '@ggui-ai/protocol';
 import '../styling-profile-CxfvV48g.js';
 import '../axes-CzLEMDeB.js';
-import '../types-public-CzYqZclY.js';
+import '../types-public-Ow-tNtFE.js';
 import '../design-mode-DLufhrNp.js';
 import '../types-BOvHNG7K.js';
 import '../llm.js';

package/dist/harness/index.js

@@ -1838,6 +1838,7 @@ var FRAME_SIZING = `## Sizing \u2014 the frame owns the height and the width
 The host sizes the iframe; the component never sizes itself to the viewport. NEVER write \`100vh\` / \`100dvh\` / \`100svh\` (or an \`h-screen\` / \`min-h-screen\` class) as a height on any element:
 - An inline card takes its natural height. A content-sized frame is measured FROM the content, so a \`100vh\` root can never shrink and grows the frame on every re-measure.
 - Under fullscreen the frame already stretches your root to its full height. Centre inside it with flex (\`display: flex; flex-direction: column; justify-content: center\`), never with a viewport height.
+- Under fullscreen the frame also keeps a 16 px inset between your content and the panel's edge \u2014 leave it. A \`surface="hero"\` band that OPENS the card runs edge to edge on its own. Any other band that is MEANT to run edge to edge (a full-width strip of rows, a closing action bar) takes \`bleed\` (\`<Box surface="sunken" bleed>\u2026</Box>\`); only such a band should, and \`bleed\` is ignored outside fullscreen.
 - To fill a parent that has a height use \`height: 100%\` or \`flex: 1\`; a viewport unit is only ever a \`max-height\` cap on a scroll region.
 
 The width works the same way, and the mistake is the mirror image: **your outermost element FILLS the frame; a width cap belongs INSIDE it, on the column that holds text.**
@@ -3228,17 +3229,42 @@ function createAnthropicClient(rawKey) {
 }
 
 // src/adapters/claude/claude-code-login.ts
-var PROVIDER_KEY_ENV_NAMES = [
-  "ANTHROPIC_API_KEY",
-  "CLAUDE_API_KEY",
-  "ANTHROPIC_AUTH_TOKEN",
-  "ANTHROPIC_BASE_URL"
+var LOGIN_CHILD_ENV_NAMES = [
+  "PATH",
+  "HOME",
+  "USER",
+  "LOGNAME",
+  "SHELL",
+  "TMPDIR",
+  "TMP",
+  "TEMP",
+  "TERM",
+  "TZ",
+  "LANG",
+  "CLAUDE_CONFIG_DIR",
+  "CLAUDE_CODE_OAUTH_TOKEN",
+  "XDG_CONFIG_HOME",
+  "XDG_DATA_HOME",
+  "XDG_CACHE_HOME",
+  "XDG_STATE_HOME",
+  "XDG_RUNTIME_DIR",
+  "HTTPS_PROXY",
+  "https_proxy",
+  "HTTP_PROXY",
+  "http_proxy",
+  "NO_PROXY",
+  "no_proxy",
+  "ALL_PROXY",
+  "all_proxy",
+  "NODE_EXTRA_CA_CERTS",
+  "SSL_CERT_FILE",
+  "SSL_CERT_DIR"
 ];
-function stripProviderKeyEnv(env) {
+var LOGIN_CHILD_ENV = new Set(LOGIN_CHILD_ENV_NAMES);
+function loginChildEnv(env) {
   const out = {};
-  const drop = new Set(PROVIDER_KEY_ENV_NAMES);
   for (const [k, v] of Object.entries(env)) {
-    if (v !== void 0 && !drop.has(k)) out[k] = v;
+    if (v !== void 0 && (LOGIN_CHILD_ENV.has(k) || k.startsWith("LC_"))) out[k] = v;
   }
   return out;
 }
@@ -3400,7 +3426,7 @@ function buildLoginQueryOptions(params) {
     systemPrompt: params.systemPrompt,
     maxTurns: 1,
     thinking: { type: "disabled" },
-    env: stripProviderKeyEnv(params.env ?? process.env),
+    env: loginChildEnv(params.env ?? process.env),
     ...claudeCodeLoginQueryOptions(),
     ...params.tools !== void 0 ? {
       mcpServers: { [MCP_SERVER_NAME]: params.tools.server },
@@ -3997,7 +4023,7 @@ var AnthropicAgent = class extends LLMAgent {
       const appliedToolChoice = toolChoice === "required" && anthropicRejectsForcedToolChoice(resolvedModel) ? "auto" : toolChoice;
       if (appliedToolChoice !== toolChoice) {
         console.warn(
-          `[anthropic] callTools: ${normalizeAnthropicModelId(resolvedModel)} rejects forced tool_choice (HTTP 400); caller's 'required' downgraded to 'auto'`
+          `[anthropic] callTools: ${normalizeAnthropicModelId(resolvedModel)} would reject a forced tool_choice (the API answers 400); caller's 'required' downgraded to 'auto' before sending`
         );
       }
       const response = await this.apiCall(
@@ -4909,7 +4935,7 @@ var OpenRouterAgent = class extends LLMAgent {
     const appliedToolChoice = requested === "required" && anthropicRejectsForcedToolChoice(resolved) ? "auto" : requested;
     if (appliedToolChoice !== requested) {
       console.warn(
-        `[openrouter] callTools: ${resolved} rejects forced tool_choice (HTTP 400); caller's 'required' downgraded to 'auto'`
+        `[openrouter] callTools: ${resolved} would reject a forced tool_choice (the API answers 400); caller's 'required' downgraded to 'auto' before sending`
       );
     }
     const response = await this.apiCall(