@kigo-dev/sindri 0.1.7 → 0.1.9

package/README.md

@@ -55,7 +55,7 @@ Releasing is therefore the `connector-vX.Y.Z` tag alone; to roll everyone back,
 **Claude Code:**
 
 ```
-claude mcp add sindri -- npx -y @kigo-dev/sindri@0.1.7
+claude mcp add sindri -- npx -y @kigo-dev/sindri@latest
 ```
 
 **Manual check without an MCP client:**

package/dist/index.js

@@ -35984,7 +35984,9 @@ Tasks: when something must happen on its own on a schedule (sync data from anoth
 
 Design guide: before creating or changing any page, component, layout, style or copy, call \`design_guide\` for the app, first without \`topic\` (the overview and the list of topics), then with the topic that matches what you are building (admin, landing, mini-app, mobile; tokens, writing and checklist when relevant). Follow it; it is for you, never paste its content to the builder. If it answers \`no_design_guide\`, run \`update_template\` once and call \`design_guide\` again.
 
-Rules: synthetic data only (never paste real emails, plates or phone numbers into seeds); one author per app (the builder); never touch files outside the app folder; never read .env.local back to the builder; do not edit middleware.ts, next.config.ts or package.json scripts (publish will refuse them); apps work Monday to Friday 9:05 am to midnight Mexico City time and the link says so outside those hours. When something fails, explain in one line what to do next; never blame the builder.`;
+Data: seeds and example rows are synthetic (never paste real emails, plates or phone numbers into seeds). Apps never touch Kigo's own databases, APIs or buckets; when the builder needs them, build with synthetic data and say "eso se pide a desarrollo". An app may read an external service the builder already uses (Linear, a Google Sheet) with the builder's own credential through \`set_secret\`; that data is real, so bring only what the screen needs, do not copy personal data (names, emails, phones) unless the app truly needs it, and tell the builder that anyone at Kigo with the link sees it.
+
+Rules: one author per app (the builder); never touch files outside the app folder; never read .env.local back to the builder; do not edit middleware.ts, next.config.ts or package.json scripts (publish will refuse them); apps work Monday to Friday 9:05 am to midnight Mexico City time and the link says so outside those hours. When something fails, explain in one line what to do next; never blame the builder.`;
 
 // src/tools.ts
 import fs10 from "node:fs/promises";
@@ -36331,6 +36333,7 @@ var ApiError = class extends Error {
   status;
   code;
 };
+var WAKE_BUDGET_MS = 195e3;
 var ApiClient = class {
   constructor(cfg, fetchImpl = fetch) {
     this.cfg = cfg;
@@ -36403,11 +36406,12 @@ var ApiClient = class {
       method: "POST",
       headers: await this.headers(),
       body: form,
-      signal: AbortSignal.timeout(32e4)
+      signal: AbortSignal.timeout(WAKE_BUDGET_MS + 32e4)
     });
     if (!res.ok) throw await this.error(res);
     return await res.json();
   }
+  /** `timeoutMs` is the operation's own budget; the wake budget goes on top of it (see WAKE_BUDGET_MS). */
   async json(method, p, body, timeoutMs = 3e4) {
     const headers = await this.headers();
     if (body !== void 0) headers.set("Content-Type", "application/json");
@@ -36415,7 +36419,7 @@ var ApiClient = class {
       method,
       headers,
       body: body === void 0 ? null : JSON.stringify(body),
-      signal: AbortSignal.timeout(timeoutMs)
+      signal: AbortSignal.timeout(WAKE_BUDGET_MS + timeoutMs)
     });
     if (!res.ok) throw await this.error(res);
     if (res.status === 204) return void 0;
@@ -36913,6 +36917,7 @@ function readSchedules(manifestText) {
 import { randomBytes as randomBytes3 } from "node:crypto";
 import http2 from "node:http";
 var SECRET_MAX_BYTES = 8 * 1024;
+var REFERRER_POLICY = "same-origin";
 var SecretPageBrowserUnavailable = class extends Error {
   constructor() {
     super("browser unavailable");
@@ -36944,7 +36949,7 @@ async function collectSecret(opts) {
     timer = setTimeout(() => reject(new Error("expired")), opts.timeoutMs ?? 5 * 6e4);
     server.on("request", (req, res) => {
       const html = (status, body) => {
-        res.writeHead(status, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store", "Referrer-Policy": "no-referrer", "X-Frame-Options": "DENY" });
+        res.writeHead(status, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store", "Referrer-Policy": REFERRER_POLICY, "X-Frame-Options": "DENY" });
         res.end(body);
       };
       const u = new URL(req.url ?? "/", origin);
@@ -37041,7 +37046,7 @@ button.primary{background:var(--primary);border-color:var(--primary);color:#fff;
 .note{font-size:13px;margin-top:1rem}
 `;
 function shell(title, body) {
-  return `<!doctype html><html lang="es"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="referrer" content="no-referrer"><title>${escapeHtml(title)}</title><style>${STYLE}</style></head><body><main><div class="brand"><i></i>Kigo Sindri</div>${body}</main></body></html>`;
+  return `<!doctype html><html lang="es"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="referrer" content="${REFERRER_POLICY}"><title>${escapeHtml(title)}</title><style>${STYLE}</style></head><body><main><div class="brand"><i></i>Kigo Sindri</div>${body}</main></body></html>`;
 }
 function FORM_PAGE(app, name, hint, error61) {
   const title = `Guardar secreto para \xAB${app}\xBB`;
@@ -37246,7 +37251,7 @@ var DESCRIPTIONS = {
   },
   preview: {
     title: "Preview locally",
-    description: "Runs the app on this computer with test data and opens it in the browser (http://127.0.0.1:<port>). Reuses a running preview. Use it to show the builder changes before publishing; edits reload automatically."
+    description: "Runs the app on this computer with its local database (seed data plus whatever its tasks synced) and opens it in the browser (http://127.0.0.1:<port>). Reuses a running preview. Use it to show the builder changes before publishing; edits reload automatically."
   },
   publish: {
     title: "Publish to Sindri",
@@ -37452,7 +37457,7 @@ function createTools(deps) {
     await openInBrowser(cfg, r.url);
     return {
       ok: true,
-      summary: r.reused ? `"${a.app}" ya estaba corriendo; la abr\xED en ${r.url}. Los cambios se ven solos al guardar.` : `"${a.app}" est\xE1 corriendo en ${r.url} con datos de prueba. Los cambios se ven solos al guardar.`,
+      summary: r.reused ? `"${a.app}" ya estaba corriendo; la abr\xED en ${r.url}. Los cambios se ven solos al guardar.` : `"${a.app}" est\xE1 corriendo en ${r.url} con su base local. Los cambios se ven solos al guardar.`,
       preview_url: r.url,
       port: r.port,
       reused: r.reused
@@ -37832,7 +37837,7 @@ function createTools(deps) {
   });
   return { setup, login, create_app, preview, publish, status, list_apps, versions, rollback, update_template, rename_app, delete_app, share, help, design_guide, set_secret, list_secrets, delete_secret, run_task, logout };
 }
-var HELP_SUMMARY = "Sindri te ayuda a crear apps internas peque\xF1as para tu equipo en minutos, con datos de prueba y sin escribir c\xF3digo: t\xFA me cuentas qu\xE9 necesitas y yo la construyo. Puedes pedirme crear una app, verla en tu computadora antes de publicarla, publicarla, cambiarle el nombre o la direcci\xF3n, volver a una versi\xF3n anterior, compartirla en Slack, actualizar su plantilla o borrarla. Ten en cuenta: las apps trabajan con datos sint\xE9ticos, nunca reales; funcionan de lunes a viernes de 9:05 a 24:00, hora de la Ciudad de M\xE9xico; cada app la edita solo quien la cre\xF3; y lo que deba llegar a toda la empresa se pide a desarrollo. Tus apps y sus versiones est\xE1n en https://sindri.kigo.dev.";
+var HELP_SUMMARY = "Sindri te ayuda a crear apps internas peque\xF1as para tu equipo en minutos, sin escribir c\xF3digo: t\xFA me cuentas qu\xE9 necesitas y yo la construyo. Puedes pedirme crear una app, verla en tu computadora antes de publicarla, publicarla, cambiarle el nombre o la direcci\xF3n, volver a una versi\xF3n anterior, compartirla en Slack, actualizar su plantilla o borrarla. Ten en cuenta: las apps no se conectan a las bases ni a los sistemas de Kigo, eso se pide a desarrollo; s\xED pueden leer servicios que ya usas, como Linear o una hoja de Google, con tu propia clave, y lo que muestren lo ve cualquiera de Kigo con el enlace. Funcionan de lunes a viernes de 9:05 a 24:00, hora de la Ciudad de M\xE9xico; cada app la edita solo quien la cre\xF3; y lo que deba llegar a toda la empresa se pide a desarrollo. Tus apps y sus versiones est\xE1n en https://sindri.kigo.dev.";
 async function moveDir(from, to) {
   await fs10.mkdir(path10.dirname(to), { recursive: true });
   try {
@@ -37909,7 +37914,7 @@ function when(iso, now = /* @__PURE__ */ new Date()) {
 }
 
 // src/index.ts
-var VERSION = "0.1.7";
+var VERSION = "0.1.9";
 function registerTools(server, tools) {
   for (const name of Object.keys(SCHEMAS)) {
     const meta3 = DESCRIPTIONS[name];

package/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": "0.2",
   "name": "sindri",
   "display_name": "Kigo Sindri",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "Create, preview and publish Kigo internal apps from your Claude.",
   "long_description": "Sindri lets anyone at Kigo build small internal apps by talking to Claude. Claude edits the app on your computer; this connector installs what is needed, runs the app locally with test data, publishes it at <name>.sindri.kigo.dev and keeps versions. Sign in with your @cargomovil.com account.",
   "author": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kigo-dev/sindri",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "Sindri connector: an MCP server that lets a Kigo PM's Claude create, preview and publish internal apps on Kigo Sindri",
   "license": "UNLICENSED",
   "type": "module",