From 2c219204d627634442d46c38d1b5df806f77f4c1 Mon Sep 17 00:00:00 2001 From: main Date: Wed, 25 Mar 2026 00:43:57 -0400 Subject: Disable public resume behavior --- README.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) (limited to 'README.md') diff --git a/README.md b/README.md index c2aaefa..cdc97ae 100644 --- a/README.md +++ b/README.md @@ -7,10 +7,8 @@ It exposes one blocking domain tool: - `consult`: run the system `claude` install in print mode, wait for the answer, and return the response plus execution metadata - - by default, phone_opus reuses the remembered Claude context for the consulted `cwd` - - pass `fresh_context: true` to opt out and start a fresh Claude context for that `cwd` - a fixed consult prefix is prepended before the caller-supplied prompt - - fresh consults predeclare a UUID session id and stream-confirm it eagerly, so downstream failures still surface a reusable context handle for that `cwd` + - each consult is a fresh one-shot invocation The server keeps the public MCP session in a durable host, isolates the actual Claude invocation in a disposable worker, and ships standard health and @@ -31,7 +29,7 @@ Each `consult` call runs Claude Code with: - a read-only built-in toolset: - `Bash,Read,Grep,Glob,LS,WebFetch` - `--dangerously-skip-permissions` -- `--session-id ` on fresh consults, or `--resume ` when reusing remembered `cwd` context +- `--session-id ` on each fresh consult - `--output-format stream-json` so phone_opus can capture the init/result session metadata eagerly instead of waiting for the terminal result blob - an external `systemd-run --user` sandbox instead of Claude's internal permission gate - the filesystem stays globally read-only under `ProtectSystem=strict` -- cgit v1.2.3