@guuey/create-agentic-app 0.3.0 → 0.4.0

package/dist/templates/claude-agent-sdk/README.md

@@ -67,12 +67,23 @@ Open http://localhost:6890 to chat with your agent locally.
 
 `guuey dev` is the open, local equivalent of the pod router that runs your
 worker in production. It mirrors the real spawn/stream contract closely — the
-same normalizer, the same SSE shape — but it deliberately cuts three corners
-that only matter once real users and real money are involved:
-
-- **No sandboxing.** Locally your worker runs as a plain child process — no
-  `bwrap`/gVisor isolation. In production every invocation runs inside a
-  gVisor-isolated pod.
+same normalizer, the same SSE shape — but it deliberately cuts three corners:
+two that only matter once real users and real money are involved, and one
+you should read twice:
+
+- **No sandboxing — read this one twice.** Locally your worker runs as a
+  plain child process: no `bwrap`/gVisor isolation on any platform, it
+  inherits your **full shell environment** (every variable, including
+  credentials unrelated to this agent), and when filesystem layers are
+  bound the host grants the agent shell and file tools **without
+  prompting** (the production jail those tools assume does not exist
+  locally). Net: `guuey dev` runs an LLM-driven agent with unprompted
+  shell access as you, with your env. That's a deliberate dev-trust
+  posture, not an accident — treat the agent like any script you'd run
+  from the internet: run `guuey dev` in a throwaway shell/container with
+  a minimal environment if your agent (or any MCP server it talks to)
+  handles untrusted input. In production every invocation runs inside a
+  gVisor-isolated pod with only its declared environment.
 - **Permissive auth.** `ggui serve --dev-allow-all` accepts any bearer
   locally. The deployed ggui instance enforces real auth.
 - **No metering or history.** Local runs aren't billed and aren't persisted.

package/dist/templates/claude-agent-sdk/package.json

@@ -10,11 +10,11 @@
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.199",
-    "@guuey/config": "0.3.0",
-    "@guuey/worker": "0.3.0"
+    "@guuey/config": "0.4.0",
+    "@guuey/worker": "0.4.0"
   },
   "devDependencies": {
-    "@guuey/cli": "0.3.0",
+    "@guuey/cli": "0.4.0",
     "tsup": "^8.5.0",
     "tsx": "^4.19.0",
     "typescript": "^5.8.0"

package/dist/templates/google-adk/package.json

@@ -13,11 +13,11 @@
     "zod": "^4.2.1"
   },
   "devDependencies": {
-    "@guuey/cli": "0.3.0",
+    "@guuey/cli": "0.4.0",
     "tsup": "^8.5.0",
     "tsx": "^4.19.0",
     "typescript": "^5.8.0",
-    "@guuey/config": "0.3.0"
+    "@guuey/config": "0.4.0"
   },
   "pnpm": {
     "onlyBuiltDependencies": [

package/dist/templates/openai-agents-sdk/README.md

@@ -67,12 +67,23 @@ Open http://localhost:6890 to chat with your agent locally.
 
 `guuey dev` is the open, local equivalent of the pod router that runs your
 worker in production. It mirrors the real spawn/stream contract closely — the
-same normalizer, the same SSE shape — but it deliberately cuts three corners
-that only matter once real users and real money are involved:
-
-- **No sandboxing.** Locally your worker runs as a plain child process — no
-  `bwrap`/gVisor isolation. In production every invocation runs inside a
-  gVisor-isolated pod.
+same normalizer, the same SSE shape — but it deliberately cuts three corners:
+two that only matter once real users and real money are involved, and one
+you should read twice:
+
+- **No sandboxing — read this one twice.** Locally your worker runs as a
+  plain child process: no `bwrap`/gVisor isolation on any platform, it
+  inherits your **full shell environment** (every variable, including
+  credentials unrelated to this agent), and when filesystem layers are
+  bound the host grants the agent shell and file tools **without
+  prompting** (the production jail those tools assume does not exist
+  locally). Net: `guuey dev` runs an LLM-driven agent with unprompted
+  shell access as you, with your env. That's a deliberate dev-trust
+  posture, not an accident — treat the agent like any script you'd run
+  from the internet: run `guuey dev` in a throwaway shell/container with
+  a minimal environment if your agent (or any MCP server it talks to)
+  handles untrusted input. In production every invocation runs inside a
+  gVisor-isolated pod with only its declared environment.
 - **Permissive auth.** `ggui serve --dev-allow-all` accepts any bearer
   locally. The deployed ggui instance enforces real auth.
 - **No metering or history.** Local runs aren't billed and aren't persisted.

package/dist/templates/openai-agents-sdk/package.json

@@ -10,11 +10,11 @@
   },
   "dependencies": {
     "@openai/agents": "^0.12.0",
-    "@guuey/config": "0.3.0",
-    "@guuey/worker": "0.3.0"
+    "@guuey/config": "0.4.0",
+    "@guuey/worker": "0.4.0"
   },
   "devDependencies": {
-    "@guuey/cli": "0.3.0",
+    "@guuey/cli": "0.4.0",
     "tsup": "^8.5.0",
     "tsx": "^4.19.0",
     "typescript": "^5.8.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guuey/create-agentic-app",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Scaffold a guuey agentic app: code-mode agent + custom MCP + ggui + web, local pnpm dev, one-command guuey deploy.",
   "license": "MIT",
   "type": "module",
@@ -22,8 +22,8 @@
     "tsup": "^8.5.0",
     "typescript": "^5.8.0",
     "vitest": "^3.2.4",
-    "@guuey/config": "0.3.0",
-    "@guuey/worker": "0.3.0"
+    "@guuey/config": "0.4.0",
+    "@guuey/worker": "0.4.0"
   },
   "publishConfig": {
     "access": "public"
@@ -33,6 +33,9 @@
     "url": "git+https://github.com/withguuey/guuey-sdks.git",
     "directory": "packages/create-agentic-app"
   },
+  "bugs": {
+    "url": "https://github.com/withguuey/guuey-sdks/issues"
+  },
   "homepage": "https://guuey.com",
   "scripts": {
     "build": "tsup && node scripts/build-templates.mjs && node scripts/check-templates.mjs",