@koda-sl/baker-bridge 0.69.0 → 0.69.1

package/dist/hono/session-skills.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Directory names are the skill names: the SDK names a skill from SKILL.md
+ * frontmatter, and scripts/check-skills.mjs fails the build when that `name`
+ * differs from its directory, so reading the directory avoids parsing every file.
+ *
+ * An absent directory yields an empty list; any other failure must propagate so
+ * callers can decide whether a partial list is safe to act on.
+ */
+export declare function readWorkspaceSkillNames(projectRoot: string): Promise<string[]>;
+/**
+ * The skills the session exposes to the model: exactly the workspace's own.
+ *
+ * Leaving `Options.skills` unset is explicitly *not* "skills off" — the CLI's
+ * own defaults still apply, which puts ~11 built-in developer skills (`init`,
+ * `review`, `security-review`, `run`, `simplify`, …) into every marketer's
+ * session. None of them are usable here and each one costs context. Passing an
+ * array enables only the listed skills.
+ *
+ * Derived from disk rather than hardcoded so the list can't rot the moment
+ * someone adds a skill to the workspace. The format renderers
+ * (`docx`/`pdf`/`pptx`/`xlsx`) are workspace skills backing real client
+ * deliverables, so they stay — unlike the slash-command picker, which hides
+ * them because nobody invokes them by name.
+ *
+ * `undefined` means "do not pass `skills`". Two cases collapse into it, and both
+ * have to, because **an empty array is not an allowlist of nothing** — the SDK
+ * (0.3.220) emits no `--allowedTools` entry for `skills: []`, which is byte-identical
+ * to omitting the option and hands the session the built-ins back. So:
+ *
+ * - the read failed → we don't know what the workspace has;
+ * - the read succeeded and found none → there is nothing to allow.
+ *
+ * In both, `skills` must be absent rather than empty. `readWorkspaceSkillNames`
+ * returns `[]` for an absent `.claude/skills`, so a workspace that genuinely ships
+ * no skills lands here too — and carrying the built-ins for that session is the
+ * lesser failure versus a filter the SDK ignores.
+ */
+export declare function readSessionSkills(projectRoot: string): Promise<string[] | undefined>;
+//# sourceMappingURL=session-skills.d.ts.map

package/dist/hono/session-skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-skills.d.ts","sourceRoot":"","sources":["../../src/hono/session-skills.ts"],"names":[],"mappings":"AAMA;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAUpF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAO1F"}

package/dist/hono/session-skills.js

@@ -0,0 +1,62 @@
+import { readdir } from "node:fs/promises";
+import { join } from "node:path";
+import { z } from "zod";
+const errnoSchema = z.object({ code: z.string() });
+/**
+ * Directory names are the skill names: the SDK names a skill from SKILL.md
+ * frontmatter, and scripts/check-skills.mjs fails the build when that `name`
+ * differs from its directory, so reading the directory avoids parsing every file.
+ *
+ * An absent directory yields an empty list; any other failure must propagate so
+ * callers can decide whether a partial list is safe to act on.
+ */
+export async function readWorkspaceSkillNames(projectRoot) {
+    try {
+        const entries = await readdir(join(projectRoot, ".claude", "skills"), { withFileTypes: true });
+        return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+    }
+    catch (error) {
+        if (errnoSchema.safeParse(error).data?.code === "ENOENT") {
+            return [];
+        }
+        throw error;
+    }
+}
+/**
+ * The skills the session exposes to the model: exactly the workspace's own.
+ *
+ * Leaving `Options.skills` unset is explicitly *not* "skills off" — the CLI's
+ * own defaults still apply, which puts ~11 built-in developer skills (`init`,
+ * `review`, `security-review`, `run`, `simplify`, …) into every marketer's
+ * session. None of them are usable here and each one costs context. Passing an
+ * array enables only the listed skills.
+ *
+ * Derived from disk rather than hardcoded so the list can't rot the moment
+ * someone adds a skill to the workspace. The format renderers
+ * (`docx`/`pdf`/`pptx`/`xlsx`) are workspace skills backing real client
+ * deliverables, so they stay — unlike the slash-command picker, which hides
+ * them because nobody invokes them by name.
+ *
+ * `undefined` means "do not pass `skills`". Two cases collapse into it, and both
+ * have to, because **an empty array is not an allowlist of nothing** — the SDK
+ * (0.3.220) emits no `--allowedTools` entry for `skills: []`, which is byte-identical
+ * to omitting the option and hands the session the built-ins back. So:
+ *
+ * - the read failed → we don't know what the workspace has;
+ * - the read succeeded and found none → there is nothing to allow.
+ *
+ * In both, `skills` must be absent rather than empty. `readWorkspaceSkillNames`
+ * returns `[]` for an absent `.claude/skills`, so a workspace that genuinely ships
+ * no skills lands here too — and carrying the built-ins for that session is the
+ * lesser failure versus a filter the SDK ignores.
+ */
+export async function readSessionSkills(projectRoot) {
+    try {
+        const names = await readWorkspaceSkillNames(projectRoot);
+        return names.length > 0 ? names : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=session-skills.js.map

package/dist/hono/session-skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-skills.js","sourceRoot":"","sources":["../../src/hono/session-skills.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEnD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,WAAmB;IAC/D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IACzD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/hono/session-skills.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=session-skills.test.d.ts.map

package/dist/hono/session-skills.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-skills.test.d.ts","sourceRoot":"","sources":["../../src/hono/session-skills.test.ts"],"names":[],"mappings":""}

package/dist/hono/session-skills.test.js

@@ -0,0 +1,52 @@
+import { mkdir, mkdtemp, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { describe, expect, it } from "vitest";
+import { readSessionSkills, readWorkspaceSkillNames } from "./session-skills.js";
+async function makeProjectRoot(skillNames) {
+    const root = await mkdtemp(join(tmpdir(), "baker-session-skills-"));
+    for (const name of skillNames) {
+        await mkdir(join(root, ".claude", "skills", name), { recursive: true });
+    }
+    return root;
+}
+describe("readWorkspaceSkillNames", () => {
+    it("returns the workspace's own skill directory names", async () => {
+        const projectRoot = await makeProjectRoot(["landing", "brand-build", "xlsx"]);
+        expect((await readWorkspaceSkillNames(projectRoot)).sort()).toEqual(["brand-build", "landing", "xlsx"]);
+    });
+    it("treats an absent skills directory as no skills", async () => {
+        const projectRoot = await mkdtemp(join(tmpdir(), "baker-session-skills-none-"));
+        expect(await readWorkspaceSkillNames(projectRoot)).toEqual([]);
+    });
+    it("rejects when the skills directory cannot be read for a reason other than absence", async () => {
+        const projectRoot = await mkdtemp(join(tmpdir(), "baker-session-skills-broken-"));
+        await mkdir(join(projectRoot, ".claude"), { recursive: true });
+        await writeFile(join(projectRoot, ".claude", "skills"), "not a directory");
+        await expect(readWorkspaceSkillNames(projectRoot)).rejects.toThrow();
+    });
+});
+describe("readSessionSkills", () => {
+    it("allowlists exactly the workspace's own skills, dropping the CLI's built-in developer skills", async () => {
+        const projectRoot = await makeProjectRoot(["landing", "docx", "pdf", "pptx", "xlsx"]);
+        expect((await readSessionSkills(projectRoot))?.sort()).toEqual(["docx", "landing", "pdf", "pptx", "xlsx"]);
+    });
+    it("keeps the format renderers the document-build skill routes to", async () => {
+        const projectRoot = await makeProjectRoot(["document-build", "docx"]);
+        expect(await readSessionSkills(projectRoot)).toContain("docx");
+    });
+    // An empty array is NOT "allow nothing" — the SDK emits no allowlist at all for
+    // it, which is the same as passing no option. Returning undefined says that out
+    // loud instead of shipping a filter the SDK ignores.
+    it("passes no allowlist when the workspace ships no skills, rather than an empty one", async () => {
+        const projectRoot = await mkdtemp(join(tmpdir(), "baker-session-skills-empty-"));
+        expect(await readSessionSkills(projectRoot)).toBeUndefined();
+    });
+    it("returns undefined when the workspace cannot be read, so the session keeps its skills", async () => {
+        const projectRoot = await mkdtemp(join(tmpdir(), "baker-session-skills-unreadable-"));
+        await mkdir(join(projectRoot, ".claude"), { recursive: true });
+        await writeFile(join(projectRoot, ".claude", "skills"), "not a directory");
+        expect(await readSessionSkills(projectRoot)).toBeUndefined();
+    });
+});
+//# sourceMappingURL=session-skills.test.js.map

package/dist/hono/session-skills.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-skills.test.js","sourceRoot":"","sources":["../../src/hono/session-skills.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEjF,KAAK,UAAU,eAAe,CAAC,UAAoB;IACjD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACpE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QAE9E,MAAM,CAAC,CAAC,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;QAEhF,MAAM,CAAC,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC,CAAC;QAClF,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAE3E,MAAM,MAAM,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QAC3G,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAEtF,MAAM,CAAC,CAAC,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;QAEtE,MAAM,CAAC,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,gFAAgF;IAChF,gFAAgF;IAChF,qDAAqD;IACrD,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;QAEjF,MAAM,CAAC,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kCAAkC,CAAC,CAAC,CAAC;QACtF,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAE3E,MAAM,CAAC,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/hono/slash-command-allowlist.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slash-command-allowlist.d.ts","sourceRoot":"","sources":["../../src/hono/slash-command-allowlist.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AA8BnE,8GAA8G;AAC9G,wBAAsB,4BAA4B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAU5F;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,YAAY,EAAE,EACxB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAChC,YAAY,EAAE,CAEhB"}
+{"version":3,"file":"slash-command-allowlist.d.ts","sourceRoot":"","sources":["../../src/hono/slash-command-allowlist.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAQnE,8GAA8G;AAC9G,wBAAsB,4BAA4B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAU5F;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,YAAY,EAAE,EACxB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAChC,YAAY,EAAE,CAEhB"}

package/dist/hono/slash-command-allowlist.js

@@ -1,35 +1,12 @@
-import { readdir } from "node:fs/promises";
-import { join } from "node:path";
-import { z } from "zod";
+import { readWorkspaceSkillNames } from "./session-skills.js";
 import { bridgeSlashCommandNames } from "./slash-commands.js";
 // Format renderers that the document-build skill routes to on the user's behalf.
 // They are real workspace skills, but nobody invokes them by name.
 const ROUTED_ONLY_SKILLS = new Set(["docx", "pdf", "pptx", "xlsx"]);
-const errnoSchema = z.object({ code: z.string() });
-/**
- * Directory names are the command names: the SDK names a command from SKILL.md
- * frontmatter, and scripts/check-skills.mjs fails the build when that `name`
- * differs from its directory, so reading the directory avoids parsing 24 files.
- *
- * An absent directory means "no skills"; any other failure must propagate so a
- * stale-but-good list is kept.
- */
-async function readSkillDirNames(skillsDir) {
-    try {
-        const entries = await readdir(skillsDir, { withFileTypes: true });
-        return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
-    }
-    catch (error) {
-        if (errnoSchema.safeParse(error).data?.code === "ENOENT") {
-            return [];
-        }
-        throw error;
-    }
-}
 /** Names the sandbox picker is allowed to show: the workspace's own skills plus the bridge's own commands. */
 export async function readAllowedSlashCommandNames(projectRoot) {
     const allowed = new Set(bridgeSlashCommandNames());
-    for (const name of await readSkillDirNames(join(projectRoot, ".claude", "skills"))) {
+    for (const name of await readWorkspaceSkillNames(projectRoot)) {
         if (!ROUTED_ONLY_SKILLS.has(name)) {
             allowed.add(name);
         }

package/dist/hono/slash-command-allowlist.js.map

@@ -1 +1 @@
-{"version":3,"file":"slash-command-allowlist.js","sourceRoot":"","sources":["../../src/hono/slash-command-allowlist.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,iFAAiF;AACjF,mEAAmE;AACnE,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEzF,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEnD;;;;;;;GAOG;AACH,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IAChD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,WAAmB;IACpE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,uBAAuB,EAAE,CAAC,CAAC;IAE3D,KAAK,MAAM,IAAI,IAAI,MAAM,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAwB,EACxB,YAAiC;IAEjC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACtE,CAAC"}
+{"version":3,"file":"slash-command-allowlist.js","sourceRoot":"","sources":["../../src/hono/slash-command-allowlist.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,iFAAiF;AACjF,mEAAmE;AACnE,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEzF,8GAA8G;AAC9G,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,WAAmB;IACpE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,uBAAuB,EAAE,CAAC,CAAC;IAE3D,KAAK,MAAM,IAAI,IAAI,MAAM,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAwB,EACxB,YAAiC;IAEjC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@koda-sl/baker-bridge",
-  "version": "0.69.0",
+  "version": "0.69.1",
   "description": "HTTP server wrapping the Claude Agent SDK. Persists chat events to Convex; the dashboard subscribes via Convex realtime",
   "license": "MIT",
   "type": "module",