@ggui-ai/ui-gen 0.22.0 → 0.24.0

package/dist/harness/validator-trace-sink.d.ts

@@ -1,5 +1,6 @@
 import { C as Classification } from '../axes-CzLEMDeB.js';
-import { E as EvalIssue } from '../types-public-mM_-1Yk3.js';
+import { E as EvalIssue } from '../types-public-Bk6d1WLN.js';
+import '@ggui-ai/mcp-server-core';
 import '../design-mode-DLufhrNp.js';
 import '@ggui-ai/protocol';
 import '../types-BOvHNG7K.js';

package/dist/index.d.ts

@@ -1,4 +1,5 @@
-export { C as CreateUiGeneratorOptions, c as createUiGenerator, e as extractComponentCode } from './create-ui-generator-BEkzEtNz.js';
+export { C as CreateUiGeneratorOptions, c as createUiGenerator, e as extractComponentCode } from './create-ui-generator-GIhzx08x.js';
+export { R as RuntimeRenderProbeConfig } from './adapter-Du7P_5Fx.js';
 export { P as ProviderRetryInfo } from './llm-router-DwwUK1bz.js';
 export { GenerationResult, SameExchangeBreak } from './harness/result-types.js';
 import { GeneratorBuild, UiGenerator } from '@ggui-ai/mcp-server-core';
@@ -10,13 +11,15 @@ import Anthropic from '@anthropic-ai/sdk';
 export { A as AESTHETIC_BRIEF_MAX_CHARS, G as GenerationProfileInput } from './styling-profile-CxfvV48g.js';
 import { AppGenerationProfileEffort, ModelTier } from '@ggui-ai/protocol';
 import './harness/runtime.js';
-import './types-public-mM_-1Yk3.js';
+import './types-public-Bk6d1WLN.js';
 import './axes-CzLEMDeB.js';
 import './types-BOvHNG7K.js';
 import './generate-9IeNT4ZY.js';
 import './llm.js';
 import '@ggui-ai/gadgets';
 import './evaluation/types.js';
+import './harness/types-public.js';
+import './policy.js';
 import './adapters/types.js';
 import 'zod';
 
@@ -134,6 +137,38 @@ declare function withBrowserCompile(generator: UiGenerator): UiGenerator;
  */
 declare function createAnthropicClient(rawKey: string | undefined): Anthropic;
 
+/**
+ * ggui#1185 — generation through the machine's own Claude Code login.
+ *
+ * The Claude SDK adapter spawns the Claude Code binary. Given no provider
+ * key, that binary authenticates with whatever `claude` is logged in as on
+ * the machine — the operator's own plan. This module holds the three
+ * things that make such a run honest and reproducible:
+ *
+ *   1. {@link CLAUDE_CODE_LOGIN_CREDENTIAL} — the sentinel a `ProviderKeyRef`
+ *      carries in place of a key, the same shape `bedrock-iam` already uses
+ *      for "authenticate with ambient credentials, not a key I hold".
+ *   2. {@link loginChildEnv} — the spawned process sees an ALLOWLIST of the
+ *      parent's env, never the parent's env minus a few names: no provider
+ *      key (the binary prefers an env key over its login, so a stale
+ *      `ANTHROPIC_API_KEY` would silently take the run off the login path),
+ *      no other secret the parent merely holds, and no switch that would
+ *      change what the binary does (ggui#1278).
+ *   3. {@link claudeCodeLoginQueryOptions} — the SDK options that keep the
+ *      run bounded: no built-in tool (`tools: []`), no `~/.claude` settings,
+ *      hooks or MCP servers leaking in (`settingSources: []`). Not
+ *      `--bare`, either: on the SDK's bundled binary `-p` reads the login
+ *      store as it always has, so no flag is needed — and the flag it
+ *      would be (`--no-bare`) is one that binary rejects; see the note on
+ *      the function below.
+ *
+ * Opt-in, off by default; the default stays a provider key. The copy that
+ * names what this does lives with the CLI flag that enables it.
+ */
+
+/** Sentinel credential: "no key — use the machine's Claude Code login". */
+declare const CLAUDE_CODE_LOGIN_CREDENTIAL: "claude-code-login";
+
 /** Bump when a level's meaning changes; the price line beside it follows. */
 declare const EFFORT_TABLE_VERSION = 1;
 interface EffortDials {
@@ -152,4 +187,4 @@ declare const EFFORT_DIALS: Readonly<Record<AppGenerationProfileEffort, EffortDi
 /** The dials for a named level; `undefined` when no level is named (the deployment's options stand). */
 declare function effortDials(effort: AppGenerationProfileEffort | undefined): EffortDials | undefined;
 
-export { CompileComponentCodeError, DesignMode, EFFORT_DIALS, EFFORT_TABLE_VERSION, type EffortDials, type UiGenBuild, compileComponentCode, createAnthropicClient, effortDials, withBrowserCompile };
+export { CLAUDE_CODE_LOGIN_CREDENTIAL, CompileComponentCodeError, DesignMode, EFFORT_DIALS, EFFORT_TABLE_VERSION, type EffortDials, type UiGenBuild, compileComponentCode, createAnthropicClient, effortDials, withBrowserCompile };