webui: remove deprecated @types/dompurify dependency

Remove @types/dompurify package dependency since modern dompurify includes
built-in TypeScript definitions, eliminating the npm deprecation warning.

Problem Analysis:
npm install was showing deprecation warning:
'@types/dompurify@3.2.0: This is a stub types definition. dompurify provides
its own type definitions, so you do not need this installed.'

The webui package.json included both dompurify@^3.2.6 and @types/dompurify@^3.2.0
as dependencies. Modern versions of dompurify (3.x+) ship with their own
TypeScript definitions built-in, making the separate @types package redundant
and deprecated. This created unnecessary dependency bloat and triggered warnings
during npm install operations.

Implementation Changes:

1. Package Dependency Cleanup:
   - Removed '@types/dompurify': '^3.2.0' from webui/package.json dependencies
   - Preserved dompurify@^3.2.6 which provides both runtime code and TypeScript types
   - No code changes required since imports remain identical

2. TypeScript Compatibility:
   - Verified existing DOMPurify imports continue working with built-in types
   - Confirmed TypeScript compilation passes without @types/dompurify
   - No changes needed to mobile-chat.ts, sketch-tool-card.ts, or sketch-timeline-message.ts

Technical Details:
- dompurify 3.x series includes index.d.ts with complete TypeScript definitions
- Import syntax 'import DOMPurify from "dompurify"' unchanged and fully typed
- npm install completes cleanly without deprecation warnings
- TypeScript check (tsc --noEmit) passes successfully with built-in types

Benefits:
- Eliminates npm deprecation warning during install operations
- Reduces dependency count and package.json complexity
- Uses official TypeScript definitions from dompurify maintainers
- Maintains identical functionality and type safety
- Cleaner dependency tree without redundant type packages

Testing:
- npm install runs successfully without warnings
- TypeScript compilation (npm run check) passes without errors
- All DOMPurify usage in web components maintains full type safety
- Build process completes successfully with built-in type definitions

This cleanup removes technical debt and follows best practices for modern
TypeScript package management by using built-in type definitions rather
than deprecated stub packages.

Co-Authored-By: sketch <hello@sketch.dev>
Change-ID: sf9e195a31b2adb28k

webui: update package-lock.json after removing @types/dompurify

Update package-lock.json to reflect removal of deprecated @types/dompurify
dependency, completing the cleanup of redundant type definitions.

Co-Authored-By: sketch <hello@sketch.dev>
Change-ID: s0cdb73feadefc7b1k
2 files changed
tree: 5ed3bd693b61ba13c6609d8afefb343cf919abb8
  1. .github/
  2. .vscode/
  3. bin/
  4. browser/
  5. claudetool/
  6. cmd/
  7. dockerimg/
  8. experiment/
  9. git_tools/
  10. httprr/
  11. llm/
  12. loop/
  13. skabandclient/
  14. skribe/
  15. termui/
  16. test/
  17. webui/
  18. .clabot
  19. .dockerignore
  20. .gitignore
  21. CONTRIBUTING.md
  22. dear_llm.md
  23. go.mod
  24. go.sum
  25. LICENSE
  26. README.md
README.md

Sketch

Go Reference Discord GitHub Workflow Status License

Sketch is an agentic coding tool. It draws the 🦉

🚀 Overview

Sketch runs in your terminal, has a web UI, understands your code, and helps you get work done. To keep your environment pristine, sketch starts a docker container and outputs its work onto a branch in your host git repository.

Sketch helps with most programming environments, but Sketch has extra goodies for Go.

📋 Quick Start

go install sketch.dev/cmd/sketch@latest
sketch

🔧 Requirements

Currently, Sketch runs on macOS and Linux. It uses Docker for containers.

PlatformInstallation
macOSbrew install colima (or Docker Desktop/Orbstack)
Linuxapt install docker.io (or equivalent for your distro)
WSL2Install Docker Desktop for Windows (docker entirely inside WSL2 is tricky)

The sketch.dev service is used to provide access to an LLM service and give you a way to access the web UI from anywhere.

🤝 Community & Feedback

📖 User Guide

Getting Started

Start Sketch by running sketch in a Git repository. It will open your browser to the Sketch chat interface, but you can also use the CLI interface. Use -open=false if you want to use just the CLI interface.

Ask Sketch about your codebase or ask it to implement a feature. It may take a little while for Sketch to do its work, so hit the bell (🔔) icon to enable browser notifications. We won't spam you or anything; it will notify you when the Sketch agent's turn is done, and there's something to look at.

How Sketch Works

When you start Sketch, it:

  1. Creates a Dockerfile
  2. Builds it
  3. Copies your repository into it
  4. Starts a Docker container with the "inside" Sketch running

This design lets you run multiple sketches in parallel since they each have their own sandbox. It also lets Sketch work without worry: it can trash its own container, but it can't trash your machine.

Sketch's agentic loop uses tool calls (mostly shell commands, but also a handful of other important tools) to allow the LLM to interact with your codebase.

Getting Your Git Changes Out

Sketch is trained to make Git commits. When those happen, they are automatically pushed to the git repository where you started sketch with branch names sketch/*.

Finding Sketch branches:

git branch -a --sort=creatordate | grep sketch/ | tail

The UI keeps track of the latest branch it pushed and displays it prominently. You can use standard Git workflows to pull those branches into your workspace:

git cherry-pick $(git merge-base origin/main sketch/foo)

or merge the branch

git merge sketch/foo

or reset to the branch

git reset --hard sketch/foo

Ie use the same workflows you would if you were pulling in a friend's Pull Request.

Advanced: You can ask Sketch to git fetch sketch-host and rebase onto another commit. This will also fetch where you started Sketch, and we do a bit of "git fetch refspec configuration" to make origin/main work as a git reference.

Don't be afraid of asking Sketch to help you rebase, merge/squash commits, rewrite commit messages, and so forth; it's good at it!

Reviewing Diffs

The diff view shows you changes since Sketch started. Leaving comments on lines adds them to the chat box, and, when you hit Send (at the bottom of the page), Sketch goes to work addressing your comments.

Connecting to Sketch's Container

You can interact directly with the container in three ways:

  1. Web UI Terminal: Use the "Terminal" tab in the UI
  2. SSH: Look at the startup logs or click the information icon to see a command like ssh sketch-ilik-eske-tcha-lott. We have automatically configured your SSH configuration to make these special hostnames work.
  3. Visual Studio Code: Look for a command line or magic link behind the information icon, or when Sketch starts up. This starts a new VSCode session "remoted into" the container. You can edit the code, use the terminal, review diffs, and so forth.

Using SSH (and/or VSCode) allows you to forward ports from the container to your machine. For example, if you want to start your development webserver, you can do something like this:

# Forward container port 8888 to local port 8000
ssh -L8000:localhost:8888 sketch-ilik-epor-tfor-ward go run ./cmd/server

This makes http://localhost:8000/ on your machine point to localhost:8888 inside the container.

Using Browser Tools

You can ask Sketch to browse a web page and take screenshots. There are tools both for taking screenshots and "reading images", the latter of which sends the image to the LLM. This functionality is handy if you're working on a web page and want to see what the in-progress change looks like.

❓ FAQ

"No space left on device"

Docker images, containers, and so forth tend to pile up. Ask Docker to prune unused images and containers:

docker system prune -a

🛠️ Development

Go Reference

See CONTRIBUTING.md for development guidelines.

📄 Open Source

Sketch is open source. It is right here in this repository! Have a look around and mod away.

If you want to run Sketch entirely without the sketch.dev service, you can set the flag -skaband-addr="" and then provide an ANTHROPIC_API_KEY environment variable. (More LLM services coming soon!)