mirror of
https://github.com/callstack/agent-device.git
synced 2026-09-14 20:06:34 +08:00
Claude
c434376855
Follow-up to the credential removal: daemonBaseUrl and the Metro proxyBaseUrl are the endpoints the env-resolved tokens are SENT to, so a model-writable value redirects the operator's token to an arbitrary server — same exfiltration path, one step removed. stateDir, cwd, iosSimulatorDeviceSet, and the three iosXctest* paths select operator infrastructure, never per-call work. All of them leave the advertised MCP/AI-SDK tool schemas and are refused as explicit input with env/config guidance; operator env/config defaults keep flowing exactly as before (config-backed defaults still merge, and explicit input can no longer override them). Dropping these shared properties also cuts tools/list substantially. Every tool description now also declares its enforced client timeout envelope (90s default, 180s install, unbounded only for the streaming test runner), sourced from the descriptor registry's timeout policy so the declared number cannot drift from the enforced one (answers AS-011, which read the undeclared envelope as "no timeout"). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Wb8EuoySL26UsdtCtRj5X8