github-router 0.3.162 → 0.3.163

package/dist/browser-ext/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "name": "github-router browser bridge",
   "short_name": "gh-router-browser",
-  "version": "0.3.162",
+  "version": "0.3.163",
   "description": "Bridge between Claude (via github-router /mcp) and the browser. Implements tab control, navigation, clicks, form fill, downloads, screenshots, devtools eval. Blocks navigation to chrome://settings.",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJElxuBlonBS3TVW9FJN0mGTtShB3L1hoaYf6k39SOr1ogGYmF90EjRxy1i21k9wQQjPf26bcBu/9X67KrQjQV0uB38CaNukgiSeoLjfptN811u+PJHx6BP+jx3Qa6/3VenNPxHC8WEU0GXql8QSjIHEyCwKb6fMASXOK94JyB5Ywov2x8mt/+9ncqBBBMVzf6r5Sagy4PL1XnryLsuADD/vOEkPet8wXgH/Oj7v5tTsQQZ7U1JT51PoDs2BFnXc5v3TkVgZwd32k3ONh+nkDw1Hof+4zwUGOyJE6eMrlYzRlKM4Qxdf9JpavQvqfieAbTRWcyKeclnHeoIfE7cDBQIDAQAB",
   "background": {

package/dist/main.js

@@ -1204,7 +1204,7 @@ function buildPeerAgentDefinitions(opts) {
 	});
 	if (opts.implementerModel && opts.implementerModel.length > 0) out.implementer = {
 		description: "Bounded implementation subagent running gpt-5.5 (strong non-Claude coder, high reasoning). Use for well-scoped coding tasks — edits, small features, fixes — you want implemented in an integrated subagent. Model is overridable at spawn.",
-		prompt: "You are a bounded implementation subagent for well-scoped coding tasks. Implement the requested change surgically, matching the surrounding code style and minimizing unrelated churn. Verify with the project's build or tests where applicable. Do the work yourself — do not spawn further subagents. Report exactly what changed and any risks.",
+		prompt: "You are a bounded implementation subagent for well-scoped coding tasks. Implement the requested change surgically, matching the surrounding code style and minimizing unrelated churn. Use the dedicated Edit/Write/Read tools for file changes and Grep/Glob for search; reserve Bash for running builds, tests, and git — do not shell out (sed/awk/python/here-docs) to read or edit files. Verify with the project's build or tests where applicable. Do the work yourself — do not spawn further subagents. Report exactly what changed and any risks.",
 		model: opts.implementerModel
 	};
 	if (opts.workerToolsAvailable) {
@@ -4095,7 +4095,7 @@ function initProxyFromEnv() {
 //#endregion
 //#region package.json
 var name = "github-router";
-var version$1 = "0.3.162";
+var version$1 = "0.3.163";
 
 //#endregion
 //#region src/lib/approval.ts
@@ -4918,6 +4918,34 @@ function clampEffort(bucketed, supported) {
 
 //#endregion
 //#region src/lib/anthropic-translate/anthropic-request.ts
+/**
+* Steering appended to `instructions` for shim-routed (non-Claude) models when
+* the request carries Claude Code's native file tools. gpt-5.5 and other
+* OpenAI/Gemini-lineage models receive the Edit/Write tool definitions verbatim
+* (the shim never mangles them), but their base prior is to script file ops in
+* Python/Bash rather than call the dedicated tools. Claude models never reach
+* this code path (they fall through to the /v1/messages passthrough), so this is
+* automatically scoped to the models that need the nudge. Strong PREFERENCE, not
+* a Bash ban — running builds/tests/git still belongs in Bash.
+*/
+const FILE_TOOL_GUIDANCE = `<file_tools>
+You have dedicated tools for files: use Read to read a file, Edit to modify an existing file, and Write to create one. Prefer them over shell for reading or editing. Do NOT shell out (cat, sed, awk, echo >, here-docs, or python/one-off scripts) to read, search, or rewrite file contents when a dedicated tool exists — the dedicated tools are safer and produce reviewable diffs. Use Grep/Glob to search rather than shell grep/find. Reserve Bash for commands that have no dedicated tool: builds, tests, git, package managers, and running programs.
+</file_tools>`;
+/**
+* Append `FILE_TOOL_GUIDANCE` to the flattened system `instructions` iff the
+* request carries Claude Code's canonical `Edit` or `Write` tool. The exact
+* capitalized-name match is deliberately precise: it fires for a Claude Code
+* editing session but not for arbitrary MCP tools like `write_file`, and not for
+* non-editing chats (so a plain gpt-5.5 conversation is not polluted). The block
+* is appended AFTER the existing instructions (end-of-prompt recency) and the
+* original system text is preserved, never replaced. Opt out with
+* `GH_ROUTER_DISABLE_SHIM_TOOL_STEERING=1`.
+*/
+function appendFileToolGuidance(instructions, tools) {
+	if (parseBoolEnv(process.env.GH_ROUTER_DISABLE_SHIM_TOOL_STEERING) === true) return instructions;
+	if (!tools?.some((t) => t.name === "Edit" || t.name === "Write")) return instructions;
+	return instructions && instructions.length > 0 ? `${instructions}\n\n${FILE_TOOL_GUIDANCE}` : FILE_TOOL_GUIDANCE;
+}
 /** Flatten Anthropic `system` (string | array of text blocks) into a string. */
 function flattenSystem(system) {
 	if (typeof system === "string") return system.length > 0 ? system : void 0;
@@ -5183,11 +5211,12 @@ function parseAnthropicRequest(body, resolvedModel, model) {
 	}
 	const maxTokens = typeof body.max_tokens === "number" && body.max_tokens > 0 ? body.max_tokens : void 0;
 	const stopSequences = Array.isArray(body.stop_sequences) ? body.stop_sequences.filter((s) => typeof s === "string") : void 0;
+	const tools = parseTools(body.tools);
 	return {
 		model: resolvedModel,
-		instructions: flattenSystem(body.system),
+		instructions: appendFileToolGuidance(flattenSystem(body.system), tools),
 		messages,
-		tools: parseTools(body.tools),
+		tools,
 		toolChoice: parseToolChoice(body.tool_choice),
 		parallelToolCalls: parseDisableParallelToolUse(body.tool_choice),
 		reasoningEffort: body.thinking === void 0 ? defaultReasoningEffort(model) : parseReasoningEffort(body.thinking, model),