agentgui 1.0.1020 → 1.0.1021

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (30) hide show
  1. package/.gm/disciplines/agentgui/mem-1779277005143-0-1352.json +1 -0
  2. package/.gm/disciplines/agentgui/memories/mem-c07fa3b0836edbe2-1352.md +8 -0
  3. package/.gm/memories/.flat-export-done +1 -0
  4. package/.gm/memories/mem-069ff10372ed1770-1375.md +8 -0
  5. package/.gm/memories/mem-0b681bf2340c8df1-3170.md +8 -0
  6. package/.gm/memories/mem-10a776effb7ce3a6-935.md +8 -0
  7. package/.gm/memories/mem-10d264b4f8e66fb4-1492.md +8 -0
  8. package/.gm/memories/mem-119cf70dd19aa0a5-2225.md +8 -0
  9. package/.gm/memories/mem-1fd31d6873e9c164-794.md +8 -0
  10. package/.gm/memories/mem-4dfac801d0378448-3676.md +8 -0
  11. package/.gm/memories/mem-59dd73a463e54948-871.md +8 -0
  12. package/.gm/memories/mem-70de7d5e71fcd439-2680.md +8 -0
  13. package/.gm/memories/mem-720d76c88e64f6ee-1967.md +8 -0
  14. package/.gm/memories/mem-8b438ef4c609b7af-401.md +8 -0
  15. package/.gm/memories/mem-92b199c2024ee1aa-2513.md +8 -0
  16. package/.gm/memories/mem-c0482039e6ab4c50-2047.md +8 -0
  17. package/.gm/memories/mem-d9f26358a7cd3bb8-866.md +8 -0
  18. package/.gm/memories/mem-dfe3b466fd5d1199-802.md +8 -0
  19. package/.gm/memories/mem-e0f9286aed2d5a06-1116.md +8 -0
  20. package/.gm/memories/mem-e1950b064099b7be-1895.md +8 -0
  21. package/.gm/memories/mem-e943b58115a02b4c-593.md +8 -0
  22. package/.gm/memories/mem-ee0596fa17c7102e-362.md +10 -0
  23. package/.gm/memories/mem-ee4450fbc311b583-1361.md +8 -0
  24. package/.gm/memories/mem-f3297e82df622649-1166.md +8 -0
  25. package/.gm/memories/mem-fb3b2a7395800041-525.md +8 -0
  26. package/.gm/memories/mem-fc5753f92ee7d654-966.md +8 -0
  27. package/.gm/mutables.yml +40 -0
  28. package/.gm/prd.yml +2456 -0
  29. package/AGENTS.md +1 -5
  30. package/package.json +1 -1
package/AGENTS.md CHANGED
@@ -107,11 +107,7 @@ One-product feel sweep (61 agents -> 40 gaps, `PUNCHLIST-COHESION.md`, workflow
107
107
 
108
108
  ## GUI predictability + polish sweep (2026-06-05) — fifth maximum-effort run
109
109
 
110
- Polish sweep on the shipped Claude-Desktop redesign (`wf_980345e1-201`, 65 agents -> 44 gaps, `PUNCHLIST-POLISH.md`); new workflow `.claude/workflows/gui-predictability-polish.js`. Landed `FileGrid` sort/filter/skeleton/keyboard, `SessionCard` words+disc status + last-activity/current-tool + `onStopAll`, `ChatMessage` streaming caret + `.chat-msg-actions`, `AgentChat` jump-to-latest, `ContextPane` last-turn usage, the load-bearing `<900px` drawer fix (`.ws-scrim` + `toggleWsDrawer`), and `confineToRoots()` realpath symlink-confinement on `/api/list,file,image`. The 7th run (above) supersedes/extends most of these. Full detail in rs-learn (recall "agentgui GUI predictability+polish sweep").
111
-
112
- **Security (`lib/http-handler.js`).** New `confineToRoots()` shared helper adds `fs.realpathSync` re-confinement to `/api/list`, `/api/file`, `/api/image` — a symlink living inside an allowed root but pointing OUTSIDE it passed the lexical prefix check but the resolved target now fails closed (symlink-escape / link-traversal, the workflow's one high-severity server gap).
113
-
114
- **Witness.** Live at `localhost:3000/gm/`, 0 console/page errors: shell+5 rail items, session groups [Today,Earlier], files sort(`size asc`)/filter-narrows/keyboard-focus-moves, grid `role=listbox`, live dashboard empty-state, ContextPane, jump button + scrim present; pane reflow chat=4cols files/live/settings=2cols(`ws-no-pane`) history=3cols with NO h-scroll on any tab; 420px mobile sessions-drawer opens + scrim visible + no h-scroll; whole-DOM glyph sweep count:0 (kept middot/ellipsis/dash). Kit `lint-tokens`+`lint-glyphs` pass on build. Deliberately scoped-out (noted in punch-list, not gaps): inline split-pane file preview (modal retained — predictable, focus-trapped) and persistent mid-conversation suggestions (empty-only starter pattern kept). Update flow unchanged: edit kit -> `node scripts/build.mjs` -> copy `dist/247420.{js,css}` into `site/app/vendor/anentrypoint-design/` -> witness -> push kit.
110
+ Superseded/extended by the 7th run. Load-bearing survivor: `confineToRoots()` in `lib/http-handler.js` applies `fs.realpathSync` re-confinement on `/api/list`, `/api/file`, `/api/image` — symlink-escape fails closed. Full detail in rs-learn (recall "agentgui-fifth-run-polish-detail").
115
111
 
116
112
  ## Claude-Desktop redesign + embedding fix (2026-06-05) — fourth maximum-effort run
117
113
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "agentgui",
3
- "version": "1.0.1020",
3
+ "version": "1.0.1021",
4
4
  "description": "Multi-agent ACP client with real-time communication",
5
5
  "type": "module",
6
6
  "main": "electron/main.js",