offhands 0.1.13 → 0.1.15

package/dist/daemon.mjs

@@ -4959,6 +4959,52 @@ var AsyncEventQueue = class {
 
 // ../daemon/src/runners/claude-code.ts
 var APPROVAL_MCP_PATH = join(dirname(fileURLToPath(import.meta.url)), "..", "approval-mcp.mjs");
+var CLAUDE_PREALLOWED_OFFHAND_TOOLS = [
+  "mcp__offhand__offhand_status_update",
+  "mcp__offhand__offhand_context",
+  "mcp__offhand__offhand_send_file"
+];
+function buildClaudeArgs(run, approvalUrl2) {
+  const args2 = ["-p", run.prompt, "--output-format", "stream-json", "--verbose", "--include-partial-messages"];
+  if (run.model) args2.push("--model", run.model);
+  if (run.resumeConversationId) args2.push("--resume", run.resumeConversationId);
+  const mode = run.permissionMode ?? "guarded";
+  if (mode === "bypass") {
+    args2.push("--permission-mode", "bypassPermissions");
+  } else if (approvalUrl2) {
+    if (mode === "plan") args2.push("--permission-mode", "plan");
+    else if (mode === "acceptEdits") args2.push("--permission-mode", "acceptEdits");
+    const mcpConfig = {
+      mcpServers: {
+        offhand: {
+          command: process.execPath,
+          args: [APPROVAL_MCP_PATH],
+          // OFFHAND_STATUS_URL is derived from approvalUrl rather than a
+          // second constructor param — same daemon, same port, one fewer
+          // thing to keep in sync as approvalUrl already carries the
+          // host:port everything else here needs.
+          env: {
+            OFFHAND_APPROVAL_URL: approvalUrl2,
+            OFFHAND_STATUS_URL: approvalUrl2.replace(/\/approval$/, "/status"),
+            OFFHAND_SESSION_ID: run.sessionId
+          }
+        }
+      }
+    };
+    args2.push(
+      "--mcp-config",
+      JSON.stringify(mcpConfig),
+      "--strict-mcp-config",
+      "--permission-prompt-tool",
+      "mcp__offhand__approval_prompt",
+      "--allowedTools",
+      CLAUDE_PREALLOWED_OFFHAND_TOOLS.join(",")
+    );
+  } else {
+    args2.push("--permission-mode", "acceptEdits");
+  }
+  return args2;
+}
 var ClaudeCodeRunner = class {
   constructor(broker2, approvalUrl2) {
     this.broker = broker2;
@@ -5012,42 +5058,7 @@ var ClaudeCodeRunner = class {
       }
     };
     const detachBroker = this.broker?.attach((ev) => queue.push(ev));
-    const args2 = ["-p", run.prompt, "--output-format", "stream-json", "--verbose", "--include-partial-messages"];
-    if (run.model) args2.push("--model", run.model);
-    if (run.resumeConversationId) args2.push("--resume", run.resumeConversationId);
-    const mode = run.permissionMode ?? "guarded";
-    if (mode === "bypass") {
-      args2.push("--permission-mode", "bypassPermissions");
-    } else if (this.broker && this.approvalUrl) {
-      if (mode === "plan") args2.push("--permission-mode", "plan");
-      else if (mode === "acceptEdits") args2.push("--permission-mode", "acceptEdits");
-      const mcpConfig = {
-        mcpServers: {
-          offhand: {
-            command: process.execPath,
-            args: [APPROVAL_MCP_PATH],
-            // OFFHAND_STATUS_URL is derived from approvalUrl rather than a
-            // second constructor param — same daemon, same port, one fewer
-            // thing to keep in sync as this.approvalUrl already carries the
-            // host:port everything else here needs.
-            env: {
-              OFFHAND_APPROVAL_URL: this.approvalUrl,
-              OFFHAND_STATUS_URL: this.approvalUrl.replace(/\/approval$/, "/status"),
-              OFFHAND_SESSION_ID: run.sessionId
-            }
-          }
-        }
-      };
-      args2.push(
-        "--mcp-config",
-        JSON.stringify(mcpConfig),
-        "--strict-mcp-config",
-        "--permission-prompt-tool",
-        "mcp__offhand__approval_prompt"
-      );
-    } else {
-      args2.push("--permission-mode", "acceptEdits");
-    }
+    const args2 = buildClaudeArgs(run, this.broker && this.approvalUrl ? this.approvalUrl : void 0);
     const thinking = { low: 0, medium: 8e3, high: 16e3, max: 31999 };
     const env = run.effort !== void 0 ? { ...process.env, MAX_THINKING_TOKENS: String(thinking[run.effort]) } : process.env;
     try {
@@ -43782,7 +43793,8 @@ var ApprovalBroker = class {
   }
 };
 function classifyRisk(toolName, input) {
-  if (toolName === "offhand_send_file") return "high";
+  const bareName = toolName.replace(/^mcp__.+?__/, "");
+  if (bareName === "offhand_send_file") return "high";
   const i2 = input ?? {};
   const text = [toolName, i2.command, i2.file_path, i2.path, i2.filepath].filter((x2) => typeof x2 === "string").join(" ");
   return /\b(rm|del|rmdir|rd|format|mkfs|shutdown|reboot|kill|drop\s+table|truncate|git\s+push\s+--force|--hard)\b/i.test(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "offhands",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "description": "Phone → coding-agent relay. Daemon runs on your laptop, PWA on your phone. E2E encrypted.",
   "license": "UNLICENSED",
   "type": "module",
@@ -22,5 +22,8 @@
   },
   "devDependencies": {
     "esbuild": "^0.24.0"
+  },
+  "dependencies": {
+    "offhands": "^0.1.14"
   }
 }