@overaihq/cli 0.14.7 → 0.14.9

package/README.md

@@ -165,7 +165,8 @@ The CLI bundles its own guidance — no extra setup files needed. Point your
 agent at a cloned workspace and have it run:
 
 ```sh
-overai best-practices           # platform + per-resource-type guides
+overai best-practices           # list the guides; read `workflow` first
+overai best-practices webPages  # one guide (add a section name to narrow it)
 overai review                   # before every push
 ```
 

package/dist/{chunk-U67V476Y.js → chunk-4VNS5WPM.js}

@@ -4,7 +4,13 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __commonJS = (cb, mod) => function __require() {
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+var __commonJS = (cb, mod) => function __require2() {
   return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
 };
 var __export = (target, all) => {
@@ -29,6 +35,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 
 export {
+  __require,
   __commonJS,
   __export,
   __toESM

package/dist/{chunk-PF6GZFT4.js → chunk-5SW6TRJG.js}

@@ -1,6 +1,6 @@
 import {
   __export
-} from "./chunk-U67V476Y.js";
+} from "./chunk-4VNS5WPM.js";
 
 // ../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/external.js
 var external_exports = {};

package/dist/{chunk-4QWKERK2.js → chunk-Y6BDUWMX.js}

@@ -1,6 +1,6 @@
 import {
   external_exports
-} from "./chunk-PF6GZFT4.js";
+} from "./chunk-5SW6TRJG.js";
 
 // ../common/src/types/value-type.ts
 var TypeEnum = /* @__PURE__ */ ((TypeEnum2) => {
@@ -385,6 +385,14 @@ var injectCodeMessageSchema = external_exports.object({
 
 // ../common/src/webPage.ts
 var webPageLanguage = ["react"];
+var webPagePermissions = [
+  "camera",
+  "microphone",
+  "geolocation",
+  "display-capture",
+  "fullscreen",
+  "screen-wake-lock"
+];
 var configFlag = external_exports.union([external_exports.boolean(), external_exports.string()]).nullish().transform((value) => value === true || value === "true").catch(false);
 var webPageConfigFields = {
   language: external_exports.enum(webPageLanguage),
@@ -403,7 +411,13 @@ var webPageConfigFields = {
    * iframe; "v2" serves the page from its own origin (separate renderer
    * process, real localStorage).
    */
-  runtime: external_exports.enum(["v1", "v2"])
+  runtime: external_exports.enum(["v1", "v2"]),
+  /*
+   * Prompt-gated browser features the v2 iframe delegates to the page. Opt-in
+   * because the visitor's grant is stored against the app origin, so every
+   * other page declaring the same feature inherits it without a prompt.
+   */
+  permissions: external_exports.array(external_exports.enum(webPagePermissions)).nullish()
 };
 var webPageConfigSchema = external_exports.object({
   ...webPageConfigFields,
@@ -416,7 +430,9 @@ var webPageConfigSchema = external_exports.object({
   hideTopBar: configFlag,
   // Absent or invalid reads as "v1" so a legacy config never fails to parse
   // over the toggle.
-  runtime: webPageConfigFields.runtime.catch("v1")
+  runtime: webPageConfigFields.runtime.catch("v1"),
+  // One unknown name drops the whole list rather than failing the page.
+  permissions: webPageConfigFields.permissions.catch(null)
 });
 var webPageConfigUpdateSchema = external_exports.object(webPageConfigFields).partial();
 var webPageConfigWriteSchema = webPageConfigSchema.extend({
@@ -424,7 +440,8 @@ var webPageConfigWriteSchema = webPageConfigSchema.extend({
   hideTopBar: external_exports.union([external_exports.boolean(), external_exports.enum(["true", "false"])]).nullish(),
   // Without this override the read schema's .catch would silently push a typo
   // ("V2", "2") as v1.
-  runtime: external_exports.enum(["v1", "v2"]).nullish()
+  runtime: external_exports.enum(["v1", "v2"]).nullish(),
+  permissions: webPageConfigFields.permissions
 });
 var defaultWebPageTemplate = reactDefaultTemplate.replace(
   'className="page"',
@@ -435,6 +452,7 @@ export {
   itemFilterExpressionRootSchema,
   reactDefaultTemplate,
   webPageLanguage,
+  webPagePermissions,
   webPageConfigSchema,
   webPageConfigUpdateSchema,
   webPageConfigWriteSchema,

package/dist/{esm-VUFP2IOD.js → esm-ASPOHKS3.js}

@@ -1,7 +1,7 @@
 import {
   __commonJS,
   __toESM
-} from "./chunk-U67V476Y.js";
+} from "./chunk-4VNS5WPM.js";
 
 // ../../node_modules/.pnpm/ts-interface-checker@0.1.13/node_modules/ts-interface-checker/dist/util.js
 var require_util = __commonJS({