swarm repositories / source
aboutsummaryrefslogtreecommitdiff
path: root/README.md
diff options
context:
space:
mode:
authormain <main@swarm.moe>2026-03-25 00:43:57 -0400
committermain <main@swarm.moe>2026-03-25 00:43:57 -0400
commit2c219204d627634442d46c38d1b5df806f77f4c1 (patch)
tree02b6c0108a698a422aef88ed8bb7e602212bd36d /README.md
parent481aaa4ee150671d86655d566f52aa1bd7254c16 (diff)
downloadphone_opus-2c219204d627634442d46c38d1b5df806f77f4c1.zip
Disable public resume behavior
Diffstat (limited to 'README.md')
-rw-r--r--README.md6
1 files changed, 2 insertions, 4 deletions
diff --git a/README.md b/README.md
index c2aaefa..cdc97ae 100644
--- a/README.md
+++ b/README.md
@@ -7,10 +7,8 @@ It exposes one blocking domain tool:
- `consult`: run the system `claude` install in print mode, wait for the answer,
and return the response plus execution metadata
- - by default, phone_opus reuses the remembered Claude context for the consulted `cwd`
- - pass `fresh_context: true` to opt out and start a fresh Claude context for that `cwd`
- a fixed consult prefix is prepended before the caller-supplied prompt
- - fresh consults predeclare a UUID session id and stream-confirm it eagerly, so downstream failures still surface a reusable context handle for that `cwd`
+ - each consult is a fresh one-shot invocation
The server keeps the public MCP session in a durable host, isolates the actual
Claude invocation in a disposable worker, and ships standard health and
@@ -31,7 +29,7 @@ Each `consult` call runs Claude Code with:
- a read-only built-in toolset:
- `Bash,Read,Grep,Glob,LS,WebFetch`
- `--dangerously-skip-permissions`
-- `--session-id <uuid>` on fresh consults, or `--resume <uuid>` when reusing remembered `cwd` context
+- `--session-id <uuid>` on each fresh consult
- `--output-format stream-json` so phone_opus can capture the init/result session metadata eagerly instead of waiting for the terminal result blob
- an external `systemd-run --user` sandbox instead of Claude's internal permission gate
- the filesystem stays globally read-only under `ProtectSystem=strict`