@trops/dash-core 0.1.548 → 0.1.549
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/electron/index.js +14 -0
- package/dist/electron/index.js.map +1 -1
- package/package.json +1 -1
package/dist/electron/index.js
CHANGED
|
@@ -50450,6 +50450,20 @@ function buildClaudeCliArgs({
|
|
|
50450
50450
|
// Write — every built-in tool the AI might otherwise invoke from
|
|
50451
50451
|
// inside the modal where only text + code-block output is wanted.
|
|
50452
50452
|
args.push("--tools", "");
|
|
50453
|
+
|
|
50454
|
+
// `--tools ""` alone leaks ambient context: in 2.1.138 we saw the
|
|
50455
|
+
// AI mention `mcp__dash__*` tool names by name, and the Skill
|
|
50456
|
+
// tool kept firing despite the empty allowlist. The leak comes
|
|
50457
|
+
// from outside cwd — global ~/.claude/CLAUDE.md, project memory
|
|
50458
|
+
// under ~/.claude/projects/<key>/memory/, and user-installed
|
|
50459
|
+
// skills. `--bare` is documented as "skip hooks, LSP, plugin
|
|
50460
|
+
// sync, attribution, auto-memory, background prefetches, keychain
|
|
50461
|
+
// reads, and CLAUDE.md auto-discovery." Combined with
|
|
50462
|
+
// `--strict-mcp-config` (which suppresses every MCP server we
|
|
50463
|
+
// don't explicitly pass via --mcp-config), the spawned CLI gets
|
|
50464
|
+
// exactly our --system-prompt and nothing else.
|
|
50465
|
+
args.push("--bare");
|
|
50466
|
+
args.push("--strict-mcp-config");
|
|
50453
50467
|
}
|
|
50454
50468
|
|
|
50455
50469
|
if (model) {
|