flowviant 0.6.0 → 0.6.1

package/bin/lib/claude.mjs

@@ -127,7 +127,13 @@ export function runTurn({ prompt, resume, system, cwd, mcpConfig, label, onSpawn
     const args = [];
     if (resume) args.push('--continue');
     args.push('-p', prompt, '--mcp-config', mcpConfig, '--append-system-prompt', system, ...PERM);
-    const child = spawn('claude', args, { cwd, stdio: ['ignore', 'pipe', 'pipe'] });
+    // Force the user's Claude Code subscription — never the API. A key exported in
+    // the shell would otherwise silently bill every poll-mode turn as raw API
+    // usage (same invariant live mode enforces on its SDK session env).
+    const env = { ...process.env };
+    delete env.ANTHROPIC_API_KEY;
+    delete env.ANTHROPIC_AUTH_TOKEN;
+    const child = spawn('claude', args, { cwd, env, stdio: ['ignore', 'pipe', 'pipe'] });
     onSpawn?.(child);
     let out = '';
     const pfx = label ? `${label} ` : '';

package/bin/lib/config.mjs

@@ -4,7 +4,7 @@ import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
 
-export const VERSION = '0.6.0';
+export const VERSION = '0.6.1';
 
 // Credential stored by `flowviant login` (device auth) — the no-token,
 // no-env-var path. An explicit --fleet flag or FLOWVIANT_FLEET env still wins.

package/bin/lib/live.mjs

@@ -51,7 +51,21 @@ async function registerLiveTarget(intentId, kind, url) {
   }
 }
 
-const SAFE_TOOLS = ['Edit', 'Write', 'Read', 'Grep', 'Glob', 'Bash', 'mcp__flowviant'];
+// Safe mode's curated toolset. Bash is scoped to the specific CLIs the agent
+// needs (git/gh/npm/bun) — NOT bare `Bash`, which would auto-approve arbitrary
+// shell (rm -rf, curl|sh, reading ~/.ssh) and defeat the point of safe mode.
+const SAFE_TOOLS = [
+  'Edit',
+  'Write',
+  'Read',
+  'Grep',
+  'Glob',
+  'Bash(git:*)',
+  'Bash(gh:*)',
+  'Bash(npm:*)',
+  'Bash(bun:*)',
+  'mcp__flowviant',
+];
 
 // Appended to Claude Code's preset. The reliable copy of the contract also
 // rides in the seed message below, so this degrades gracefully if the preset
@@ -99,6 +113,9 @@ async function mcpCall(mcpUrl, token, name, args) {
       Authorization: `Bearer ${token}`,
       'Content-Type': 'application/json',
       Accept: 'application/json',
+      // Required: Node's default UA trips Cloudflare Bot Fight Mode (403) —
+      // without this every live MCP call fails against api.flowviant.com.
+      'User-Agent': USER_AGENT,
     },
     body: JSON.stringify({
       jsonrpc: '2.0',
@@ -241,7 +258,11 @@ export async function runLiveTask({ mcpUrl, token, cwd, baseRef, isAlive }) {
       ...(SAFE ? { allowedTools: SAFE_TOOLS } : {}),
       systemPrompt: { type: 'preset', preset: 'claude_code', append: SYSTEM_LIVE },
       mcpServers: {
-        flowviant: { type: 'http', url: mcpUrl, headers: { Authorization: `Bearer ${token}` } },
+        flowviant: {
+          type: 'http',
+          url: mcpUrl,
+          headers: { Authorization: `Bearer ${token}`, 'User-Agent': USER_AGENT },
+        },
       },
     },
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "flowviant",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Run your own Claude Code as headless build agents for Flowviant — on your own credentials. Claims dispatched work, opens PRs, captures review evidence, and routes questions back to you.",
   "type": "module",
   "bin": {