@ggui-ai/ui-gen 0.23.0 → 0.25.0

package/dist/harness/validator-trace-sink.d.ts

@@ -1,8 +1,9 @@
-import { C as Classification } from '../axes-CzLEMDeB.js';
-import { E as EvalIssue } from '../types-public-Ow-tNtFE.js';
+import { C as Classification } from '../axes-CKVCzR_x.js';
+import { E as EvalIssue } from '../types-public-BJTLpzWn.js';
+import '@ggui-ai/mcp-server-core';
 import '../design-mode-DLufhrNp.js';
 import '@ggui-ai/protocol';
-import '../types-BOvHNG7K.js';
+import '../types-Dh1s4K9j.js';
 
 /**
  * Live validator-tier trace sink — devtools introspection of every

package/dist/hash.d.ts

@@ -1,4 +1,4 @@
-import { C as Classification } from './axes-CzLEMDeB.js';
+import { C as Classification } from './axes-CKVCzR_x.js';
 
 /** Hash a classification — used as a sub-component of the harness id. */
 declare function hashClassification(c: Classification): string;

package/dist/index.d.ts

@@ -1,24 +1,29 @@
-export { C as CreateUiGeneratorOptions, c as createUiGenerator, e as extractComponentCode } from './create-ui-generator-D0kbWwln.js';
-export { P as ProviderRetryInfo } from './llm-router-DwwUK1bz.js';
+export { C as CreateUiGeneratorOptions, c as createUiGenerator, e as extractComponentCode } from './create-ui-generator-DFnnArrv.js';
+export { R as RuntimeRenderProbeConfig } from './adapter-Cg_rkpGq.js';
+export { P as ProviderRetryInfo } from './llm-router-nfO7wPec.js';
 export { GenerationResult, SameExchangeBreak } from './harness/result-types.js';
 import { GeneratorBuild, UiGenerator } from '@ggui-ai/mcp-server-core';
 import { D as DesignMode } from './design-mode-DLufhrNp.js';
 export { a as CANVAS_BREAKPOINTS, b as CANVAS_CLASSES, c as CANVAS_DESCRIPTORS, d as CANVAS_VIEWPORTS, C as CanvasClass, e as CanvasDescriptor, f as CanvasDisplayMode, g as CanvasViewport, h as DEFAULT_DESIGN_MODE, i as DESIGN_MODES, j as canvasDisplayModeForShell, k as canvasForRendering, l as canvasForViewportWidth, m as describeCanvas } from './design-mode-DLufhrNp.js';
 export { CreateInMemoryGeneratorRegistryOptions, createInMemoryGeneratorRegistry } from '@ggui-ai/mcp-server-core/in-memory';
 export { R as RenderingContext, b as buildContractsContext, a as buildRenderingContext, c as buildVarianceContext, d as canvasForRenderingContext, i as injectContracts, e as injectRenderingContext, f as injectVariance } from './prompts-YU9piOgs.js';
+import { LLMToolDef } from './llm.js';
 import Anthropic from '@anthropic-ai/sdk';
 export { A as AESTHETIC_BRIEF_MAX_CHARS, G as GenerationProfileInput } from './styling-profile-CxfvV48g.js';
+export { VisualEvalAgentSpec } from './adapters/generation-dispatch.js';
 import { AppGenerationProfileEffort, ModelTier } from '@ggui-ai/protocol';
 import './harness/runtime.js';
-import './types-public-Ow-tNtFE.js';
-import './axes-CzLEMDeB.js';
-import './types-BOvHNG7K.js';
+import './types-public-BJTLpzWn.js';
+import './axes-CKVCzR_x.js';
+import './types-Dh1s4K9j.js';
+import './bank-CT4eEkta.js';
+import 'zod';
 import './generate-9IeNT4ZY.js';
-import './llm.js';
 import '@ggui-ai/gadgets';
 import './evaluation/types.js';
+import './harness/types-public.js';
+import './policy.js';
 import './adapters/types.js';
-import 'zod';
 
 /**
  * ui-gen's precise {@link GeneratorBuild}: the core port's generic shape with
@@ -34,6 +39,12 @@ interface UiGenBuild extends GeneratorBuild {
         readonly boilerplateTemplateSha256: string;
     };
 }
+/**
+ * The build identity for `designMode`, computed once per process per design
+ * mode and pitfalls env gate (the only env the templates read), so a changed
+ * gate is never answered from a stale memo.
+ */
+declare function generatorBuild(designMode: DesignMode): UiGenBuild;
 
 /**
  * Compile raw JSX/TSX component code emitted by `createUiGenerator` into
@@ -121,6 +132,14 @@ declare function compileComponentCode(source: string): Promise<string>;
  */
 declare function withBrowserCompile(generator: UiGenerator): UiGenerator;
 
+/** The coding tools every harness declares (`what.codingTools`). */
+declare const HARNESS_CODING_TOOLS: readonly LLMToolDef[];
+/** The scoped fallback the runtime promotes into `codingTools` on a duplicate-fingerprint escape. */
+declare const HARNESS_SCOPED_TOOLS: readonly LLMToolDef[];
+/** One tool's entry: `<name>@<first 8 hex of sha256(JSON.stringify(def))>`. */
+declare function harnessToolEntry(def: LLMToolDef): string;
+declare function harnessToolNames(designMode: DesignMode): string[];
+
 /**
  * Construct an Anthropic SDK client from a raw API key string.
  *
@@ -134,6 +153,38 @@ declare function withBrowserCompile(generator: UiGenerator): UiGenerator;
  */
 declare function createAnthropicClient(rawKey: string | undefined): Anthropic;
 
+/**
+ * ggui#1185 — generation through the machine's own Claude Code login.
+ *
+ * The Claude SDK adapter spawns the Claude Code binary. Given no provider
+ * key, that binary authenticates with whatever `claude` is logged in as on
+ * the machine — the operator's own plan. This module holds the three
+ * things that make such a run honest and reproducible:
+ *
+ *   1. {@link CLAUDE_CODE_LOGIN_CREDENTIAL} — the sentinel a `ProviderKeyRef`
+ *      carries in place of a key, the same shape `bedrock-iam` already uses
+ *      for "authenticate with ambient credentials, not a key I hold".
+ *   2. {@link loginChildEnv} — the spawned process sees an ALLOWLIST of the
+ *      parent's env, never the parent's env minus a few names: no provider
+ *      key (the binary prefers an env key over its login, so a stale
+ *      `ANTHROPIC_API_KEY` would silently take the run off the login path),
+ *      no other secret the parent merely holds, and no switch that would
+ *      change what the binary does (ggui#1278).
+ *   3. {@link claudeCodeLoginQueryOptions} — the SDK options that keep the
+ *      run bounded: no built-in tool (`tools: []`), no `~/.claude` settings,
+ *      hooks or MCP servers leaking in (`settingSources: []`). Not
+ *      `--bare`, either: on the SDK's bundled binary `-p` reads the login
+ *      store as it always has, so no flag is needed — and the flag it
+ *      would be (`--no-bare`) is one that binary rejects; see the note on
+ *      the function below.
+ *
+ * Opt-in, off by default; the default stays a provider key. The copy that
+ * names what this does lives with the CLI flag that enables it.
+ */
+
+/** Sentinel credential: "no key — use the machine's Claude Code login". */
+declare const CLAUDE_CODE_LOGIN_CREDENTIAL: "claude-code-login";
+
 /** Bump when a level's meaning changes; the price line beside it follows. */
 declare const EFFORT_TABLE_VERSION = 1;
 interface EffortDials {
@@ -152,4 +203,4 @@ declare const EFFORT_DIALS: Readonly<Record<AppGenerationProfileEffort, EffortDi
 /** The dials for a named level; `undefined` when no level is named (the deployment's options stand). */
 declare function effortDials(effort: AppGenerationProfileEffort | undefined): EffortDials | undefined;
 
-export { CompileComponentCodeError, DesignMode, EFFORT_DIALS, EFFORT_TABLE_VERSION, type EffortDials, type UiGenBuild, compileComponentCode, createAnthropicClient, effortDials, withBrowserCompile };
+export { CLAUDE_CODE_LOGIN_CREDENTIAL, CompileComponentCodeError, DesignMode, EFFORT_DIALS, EFFORT_TABLE_VERSION, type EffortDials, HARNESS_CODING_TOOLS, HARNESS_SCOPED_TOOLS, type UiGenBuild, compileComponentCode, createAnthropicClient, effortDials, generatorBuild, harnessToolEntry, harnessToolNames, withBrowserCompile };