kira-glasses-bridge 2.5.0 → 2.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kira-glasses-bridge",
-  "version": "2.5.0",
+  "version": "2.6.0",
   "description": "Connects your Mac to Kira, the assistant for Even G2 glasses: Claude Code sessions, files, folders and apps, by voice.",
   "type": "module",
   "bin": {

package/src/agents/claude.mjs

@@ -133,7 +133,7 @@ function applyAnswer(name, input, request, answer, suggestions) {
 /** "Always allow" answers, kept for the rest of the process per session: sessionId -> Set of rules. */
 const sessionRules = new Map()
 
-export async function run({ prompt, sessionId, cwd, policy }, io) {
+export async function run({ prompt, sessionId, cwd, policy, persona }, io) {
   let session = sessionId ?? null
   let text = ''
   let error = null
@@ -143,8 +143,17 @@ export async function run({ prompt, sessionId, cwd, policy }, io) {
   // Pre-tool hook: the policy is authoritative. It forces the prompt for what
   // it does not allow (so a permissive local config cannot bypass the person)
   // and refuses outright what it denies.
+  // A member with a restricted shell (a designer, a researcher) runs only what its preset allows.
+  const shellAllow = persona?.shellAllow ? new RegExp(persona.shellAllow) : null
   const preToolUse = async input => {
     if (input.hook_event_name !== 'PreToolUse') return {}
+    // Every command in a chain ("ls; rm -rf x", "a && b", "a | b") has to be allowed, not only the first.
+    const segments = c => String(c ?? '').split(/&&|\|\||;|\|/).map(x => x.trim()).filter(Boolean)
+    if (shellAllow && input.tool_name === 'Bash' && !segments(input.tool_input?.command).every(seg => shellAllow.test(seg))) {
+      const reason = `${persona.name} uses the shell only for git and for reading files; run that another way or leave it.`
+      io.emit({ kind: 'request_resolved', id: `persona-${Date.now().toString(36)}`, answer: { optionIds: ['deny'] }, by: 'policy', tool: 'Bash', reason })
+      return { hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'deny', permissionDecisionReason: reason } }
+    }
     const { decision, reason } = judge(input.tool_name, input.tool_input)
     if (decision === 'deny') io.emit({ kind: 'request_resolved', id: `policy-${Date.now().toString(36)}`, answer: { optionIds: ['deny'] }, by: 'policy', tool: input.tool_name, reason })
     return { hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: decision, permissionDecisionReason: `Kira: ${reason}` } }
@@ -178,6 +187,9 @@ export async function run({ prompt, sessionId, cwd, policy }, io) {
         cwd,
         ...(sessionId ? { resume: sessionId } : {}),
         permissionMode: 'default',
+        // A team member's soul, skills and conventions ride on top of Claude Code's own prompt; its preset says which tools it does without.
+        ...(persona?.systemPrompt ? { systemPrompt: { type: 'preset', preset: 'claude_code', append: persona.systemPrompt } } : {}),
+        ...(persona?.disallowedTools?.length ? { disallowedTools: persona.disallowedTools } : {}),
         canUseTool,
         hooks: { PreToolUse: [{ hooks: [preToolUse] }] },
         ...(process.env.KIRA_CLAUDE_BIN ? { pathToClaudeCodeExecutable: process.env.KIRA_CLAUDE_BIN } : {}),

package/src/index.mjs

@@ -4,7 +4,7 @@
 import WebSocket from 'ws'
 import { listProjects, listSessions, readSession } from './claude-sessions.mjs'
 import { snapshot, changesSince, display, setupProjectFolder } from './git.mjs'
-import { resolveCwd } from './claude-run.mjs'
+import { resolveCwd, folderExists } from './claude-run.mjs'
 import { agentById, AGENTS } from './agents/index.mjs'
 import { normalizeAnswer } from './agents/protocol.mjs'
 import { openApp, installedApps } from './apps.mjs'
@@ -81,7 +81,11 @@ const tools = {
       if (s?.cwd) cwd = s.cwd
     }
     const dir = resolveCwd(cwd)
-    log(`${agent.id} job=${jobId.slice(0, 8)} session=${args.session_id ?? 'new'} in ${display(dir)}: ${prompt.slice(0, 80)}`)
+    if (!folderExists(dir)) {
+      // The SDK would report a spawn failure as a broken binary; the folder is simply not there.
+      return { error: `The folder ${display(dir)} does not exist on this Mac. Link the project's real folder in the portal, or clone its repository there first (setup_project_folder); never guess a path.` }
+    }
+    log(`${agent.id} job=${jobId.slice(0, 8)}${args.persona?.name ? ` as ${args.persona.name}` : ''} session=${args.session_id ?? 'new'} in ${display(dir)}: ${prompt.slice(0, 80)}`)
     const before = await snapshot(dir).catch(() => null)
     let seq = 0
     const io = {
@@ -104,7 +108,7 @@ const tools = {
           }, { once: true })
         }),
     }
-    void agent.run({ prompt, sessionId: args.session_id, cwd: dir, policy: args.policy ?? {} }, io).then(async outcome => {
+    void agent.run({ prompt, sessionId: args.session_id, cwd: dir, policy: args.policy ?? {}, persona: args.persona ?? null }, io).then(async outcome => {
       for (const key of [...answerWaits.keys()]) if (key.startsWith(`${jobId}:`)) answerWaits.delete(key)
       let change = null
       if (before) change = await changesSince(before).catch(err => (log(`git after job failed: ${err.message}`), null))