kira-glasses-bridge 2.19.0 → 2.21.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kira-glasses-bridge",
-  "version": "2.19.0",
+  "version": "2.21.0",
   "description": "Connects your Mac to Kira, the assistant for Even G2 glasses: Claude Code sessions, files, folders and apps, by voice.",
   "type": "module",
   "bin": {

package/src/agents/claude-local.mjs

@@ -0,0 +1,29 @@
+// Claude Code on this Mac, as the person signed in to it: which account it uses, and one piece
+// of text written with that sign-in (complete.mjs). The bridge's calls for both.
+import { execFile } from 'node:child_process'
+import { completeText } from './complete.mjs'
+
+/** Which Claude account Claude Code on this Mac is signed in to (`claude auth status --json`). */
+async function claudeAccount() {
+  const bin = process.env.KIRA_CLAUDE_BIN || 'claude'
+  return new Promise(resolve =>
+    execFile(bin, ['auth', 'status', '--json'], { timeout: 10_000 }, (err, stdout) => {
+      try {
+        const s = JSON.parse(stdout)
+        resolve({
+          loggedIn: !!s.loggedIn,
+          email: s.email ?? null,
+          plan: s.subscriptionType ?? null,
+          org: s.orgName ?? null,
+          method: s.authMethod ?? null,
+        })
+      } catch {
+        const missing = err?.code === 'ENOENT'
+        const why = missing ? 'Claude Code is not installed on this Mac' : 'Claude Code did not say which account'
+        resolve({ error: why })
+      }
+    }),
+  )
+}
+
+export const claudeTools = { claude_account: claudeAccount, complete_text: completeText }

package/src/agents/complete.mjs

@@ -0,0 +1,59 @@
+// One piece of text from the person's own Claude Code, with their own sign-in (no API key): a task
+// brief, a recording's notes, an automation's thinking step. One turn, no tools, nothing written:
+// the API asks this when their Mac is online, and uses an API key only when it isn't.
+import { query } from '@anthropic-ai/claude-agent-sdk'
+import { mkdirSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { join } from 'node:path'
+
+/** Everything Claude Code could reach for: text only here. */
+const NO_TOOLS = [
+  'Read', 'Write', 'Edit', 'MultiEdit', 'NotebookEdit', 'Bash', 'Glob', 'Grep', 'LS', 'WebFetch', 'WebSearch',
+  'Task', 'Agent', 'TodoWrite', 'ToolSearch', 'Skill', 'ExitPlanMode', 'ListMcpResourcesTool', 'ReadMcpResourceTool',
+]
+const MAX_MS = 170_000
+
+/** Its own folder, so these one-off turns don't land among the person's sessions for real work. */
+function folder() {
+  const dir = join(homedir(), '.kira', 'text')
+  mkdirSync(dir, { recursive: true })
+  return dir
+}
+
+export async function completeText(args) {
+  const system = String(args?.system ?? '').trim()
+  const user = String(args?.user ?? '').trim()
+  if (!user) return { error: 'user is required' }
+  const abort = new AbortController()
+  const timer = setTimeout(() => abort.abort(), Math.min(Number(args?.timeout_ms) || 60_000, MAX_MS))
+  try {
+    const q = query({
+      prompt: user,
+      options: {
+        cwd: folder(),
+        env: { ...process.env, ENABLE_CLAUDEAI_MCP_SERVERS: 'false' },
+        ...(system ? { systemPrompt: system } : {}),
+        disallowedTools: NO_TOOLS,
+        canUseTool: async () => ({ behavior: 'deny', message: 'Write the answer as text; no tools here.' }),
+        // Claude's best for writing that people read; the API can ask for another ("sonnet", "haiku").
+        model: String(args?.model ?? 'opus'),
+        maxTurns: 1,
+        settingSources: [],
+        abortController: abort,
+        ...(process.env.KIRA_CLAUDE_BIN ? { pathToClaudeCodeExecutable: process.env.KIRA_CLAUDE_BIN } : {}),
+      },
+    })
+    let model = null
+    for await (const m of q) {
+      if (m.type === 'system' && m.subtype === 'init') model = m.model ?? null
+      if (m.type !== 'result') continue
+      if (m.subtype !== 'success') return { error: `Claude stopped: ${m.subtype}` }
+      return { text: String(m.result ?? '').trim(), model }
+    }
+    return { error: 'Claude ended without an answer' }
+  } catch (err) {
+    return { error: abort.signal.aborted ? 'Claude took too long' : `could not run Claude: ${err.message}` }
+  } finally {
+    clearTimeout(timer)
+  }
+}

package/src/agents/policy.mjs

@@ -31,11 +31,60 @@ export const WEB = new Set(['WebFetch', 'WebSearch'])
 /** Claude Code's name for the tools of Kira's MCP server (mcp__<server>__<tool>). */
 export const KIRA_TOOLS = 'mcp__kira__'
 
-/** Read-only commands: looking, listing, testing, type-checking, building. Nothing that writes, sends or installs. */
-const SAFE_CMD = /^(?:ls|ll|pwd|cat|head|tail|wc|echo|printf|which|type|env|printenv|date|whoami|id|uname|tree|find|fd|grep|rg|ag|awk|cut|tr|sort|uniq|diff|comm|stat|file|du|df|basename|dirname|realpath|readlink|jq|yq|xxd|hexdump|strings|test|\[|true|false|sleep|md5|shasum|sha256sum|md5sum|column|nl|less|more|open -n --args|sed -n|sed -E -n|sed -n -E|git (?:status|diff|log|show|branch|rev-parse|remote|ls-files|ls-tree|blame|describe|stash list|tag|config --get|config -l|cat-file|grep|shortlog|count-objects|reflog)|node (?:-v|--version|-e|-p|--eval|--print)|npm (?:-v|--version|ls|list|view|outdated|why|test|run (?:test|lint|typecheck|check|build|format:check))|pnpm (?:-v|--version|ls|list|why|outdated|test|typecheck|lint|build|run (?:test|lint|typecheck|check|build))|yarn (?:-v|--version|list|test|lint|typecheck|build)|npx (?:tsc|eslint|prettier --check|jest|vitest|playwright test)|tsc|eslint|prettier --check|jest|vitest|cargo (?:check|test|build|fmt --check|clippy|tree|metadata)|go (?:test|build|vet|version|list|env)|python3? (?:-V|--version|-m pytest|-c)|pytest|ruby -v|make (?:test|check|lint|build)|mvn (?:test|compile)|gradle (?:test|build)|swift (?:build|test)|xcodebuild -list|brew (?:list|info|--version)|docker (?:ps|images|version)|gh (?:pr (?:list|view|status|checks)|issue (?:list|view)|run (?:list|view)|repo view|api)|heroku (?:logs|ps|releases|config(?::get)?|apps|info))(?:\s|$)/
+/**
+ * Read-only commands: looking, listing, testing, type-checking, building. Nothing that writes, sends
+ * or installs, nothing that runs code given inline (node -e, python -c, awk), nothing that prints
+ * secrets (heroku config).
+ */
+/** Plain commands that only look. */
+const LOOKERS = [
+  'ls', 'll', 'pwd', 'cat', 'head', 'tail', 'wc', 'echo', 'printf', 'which', 'type', 'env', 'printenv',
+  'date', 'whoami', 'id', 'uname', 'tree', 'find', 'fd', 'grep', 'rg', 'ag', 'cut', 'tr', 'sort', 'uniq',
+  'diff', 'comm', 'stat', 'file', 'du', 'df', 'basename', 'dirname', 'realpath', 'readlink', 'jq', 'yq',
+  'xxd', 'hexdump', 'strings', 'test', '[', 'true', 'false', 'sleep', 'md5', 'shasum', 'sha256sum',
+  'md5sum', 'column', 'nl', 'less', 'more', 'tsc', 'eslint', 'jest', 'vitest', 'pytest',
+]
+/** Tools with their read-only, test and build subcommands. */
+const SUBCOMMANDS = {
+  git: [
+    'status', 'diff', 'log', 'show', 'branch', 'rev-parse', 'remote', 'ls-files', 'ls-tree', 'blame', 'describe',
+    'stash list', 'tag', 'config --get', 'config -l', 'cat-file', 'grep', 'shortlog', 'count-objects', 'reflog',
+  ],
+  node: ['-v', '--version'],
+  npm: ['-v', '--version', 'ls', 'list', 'view', 'outdated', 'why', 'test', 'run test', 'run lint', 'run typecheck',
+    'run check', 'run build', 'run format:check'],
+  pnpm: ['-v', '--version', 'ls', 'list', 'why', 'outdated', 'test', 'typecheck', 'lint', 'build', 'run test',
+    'run lint', 'run typecheck', 'run check', 'run build'],
+  yarn: ['-v', '--version', 'list', 'test', 'lint', 'typecheck', 'build'],
+  npx: ['tsc', 'eslint', 'prettier --check', 'jest', 'vitest', 'playwright test'],
+  prettier: ['--check'],
+  cargo: ['check', 'test', 'build', 'fmt --check', 'clippy', 'tree', 'metadata'],
+  go: ['test', 'build', 'vet', 'version', 'list', 'env'],
+  python: ['-V', '--version', '-m pytest'],
+  python3: ['-V', '--version', '-m pytest'],
+  ruby: ['-v'],
+  make: ['test', 'check', 'lint', 'build'],
+  mvn: ['test', 'compile'],
+  gradle: ['test', 'build'],
+  swift: ['build', 'test'],
+  xcodebuild: ['-list'],
+  brew: ['list', 'info', '--version'],
+  docker: ['ps', 'images', 'version'],
+  gh: ['pr list', 'pr view', 'pr status', 'pr checks', 'issue list', 'issue view', 'run list', 'run view', 'repo view'],
+  heroku: ['logs', 'ps', 'releases', 'apps', 'info'],
+  open: ['-n --args'],
+  sed: ['-n', '-E -n', '-n -E'],
+}
+const escape = w => w.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+const withSubs = Object.entries(SUBCOMMANDS).flatMap(([tool, subs]) => subs.map(sub => `${tool} ${sub}`))
+const SAFE_PHRASES = [...LOOKERS, ...withSubs]
+const SAFE_CMD = new RegExp(`^(?:${SAFE_PHRASES.map(escape).join('|')})(?:\\s|$)`)
 
 /** Redirections that write somewhere other than nowhere. */
 const WRITES = /(^|[^&\d])>(?!&)|>>|\btee\b|\bxargs\b|\beval\b|\bexec\b|`/
+/** find and fd can run or delete what they find: then they aren't looking any more. */
+const FINDER_ACTS =
+  /^(?:find|fd)\b.*\s(?:-exec(?:dir)?|-ok(?:dir)?|-delete|-fprint\w*|-fls|-x|--exec(?:-batch)?|-X)\b/
 
 function pieces(command) {
   // Strip quoted strings so separators inside them do not split; keep a placeholder.
@@ -76,7 +125,8 @@ export function shellIsSafe(command, allowRules = []) {
     c = c.slice(0, m.index) + '""' + c.slice(m.index + m[0].length)
   }
   if (WRITES.test(c.replace(/2>&1|2>\/dev\/null|>\/dev\/null|&>\/dev\/null/g, ''))) return false
-  return pieces(c).every(p => SAFE_CMD.test(p) || allowRules.some(r => r && (p === r || p.startsWith(String(r) + ' '))))
+  const allowedByRule = p => allowRules.some(r => r && (p === r || p.startsWith(String(r) + ' ')))
+  return pieces(c).every(p => (SAFE_CMD.test(p) && !FINDER_ACTS.test(p)) || allowedByRule(p))
 }
 
 /** The rule key an "always allow" answer produces. */

package/src/index.mjs

@@ -13,6 +13,7 @@ import { openApp, installedApps } from './apps.mjs'
 import { listFiles, readUserFile, createFolder, writeUserFile, trashPath, resolveUserPath } from './files.mjs'
 import { initTerminals, terminalCall, terminalMessage, terminalsOffline } from './terminals.mjs'
 import { gitTools } from './git-tools.mjs'
+import { claudeTools } from './agents/claude-local.mjs'
 
 import { createRequire } from 'node:module'
 const { version: BRIDGE_VERSION } = createRequire(import.meta.url)('../package.json')
@@ -212,22 +213,7 @@ end tell`
   },
 
   ...gitTools,
-
-  /** Which Claude account Claude Code on this Mac is signed in to (`claude auth status --json`). */
-  async claude_account() {
-    const { execFile } = await import('node:child_process')
-    const bin = process.env.KIRA_CLAUDE_BIN || 'claude'
-    return new Promise(resolve =>
-      execFile(bin, ['auth', 'status', '--json'], { timeout: 10_000 }, (err, stdout) => {
-        try {
-          const s = JSON.parse(stdout)
-          resolve({ loggedIn: !!s.loggedIn, email: s.email ?? null, plan: s.subscriptionType ?? null, org: s.orgName ?? null, method: s.authMethod ?? null })
-        } catch {
-          resolve({ error: err?.code === 'ENOENT' ? 'Claude Code is not installed on this Mac' : 'Claude Code did not say which account it uses' })
-        }
-      }),
-    )
-  },
+  ...claudeTools,
 
 
 }