@pellux/goodvibes-agent 1.6.3 → 1.6.4

package/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 Product-facing release notes for GoodVibes Agent.
 
+## 1.6.4 - 2026-07-07
+
+- The exec tool no longer denies destructive- or escalation-class commands (kill, docker, sudo) that the permission configuration allows — class-level risk is decided by permission settings alone. The only remaining unconditional block is a small frozen catastrophic list (root filesystem deletion, raw disk destruction, fork bombs).
+
 ## 1.6.3 - 2026-07-07
 
 - SDK 1.4.0 pin: the shared daemon contracts gain server-side companion-chat turn control — a true stop verb (provider stream aborted, honest partial persisted), queue-when-busy sends, and steer (interrupt-and-send-now). No agent-side behavior changes; agent session turns already had lifecycle control on the operator wire.

package/README.md

@@ -1,7 +1,7 @@
 # GoodVibes Agent
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
-[![Version: 1.5.3](https://img.shields.io/badge/version-1.6.3-blue.svg)](#install)
+[![Version: 1.5.3](https://img.shields.io/badge/version-1.6.4-blue.svg)](#install)
 
 GoodVibes Agent is the installable autonomous operator assistant for GoodVibes. It keeps the existing terminal renderer and workspace bones, but the product goal is different from a vibecoding harness: the user should experience one assistant that can chat, plan, remember, research, schedule, send, generate, run visible agents, and operate the GoodVibes daemon contract with clear confirmation gates.
 

package/dist/package/main.js

@@ -4463,7 +4463,7 @@ var init_mcp = __esm(() => {
 // node_modules/@pellux/goodvibes-sdk/dist/platform/version.js
 import { readFileSync as readFileSync3 } from "fs";
 import { join as join4 } from "path";
-var version = "1.4.0", VERSION2;
+var version = "1.4.1", VERSION2;
 var init_version = __esm(() => {
   try {
     const pkg = JSON.parse(readFileSync3(join4(import.meta.dir, "..", "..", "package.json"), "utf-8"));
@@ -63439,6 +63439,39 @@ function collectCommandNodes(node, acc = []) {
 }
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/runtime/permissions/normalization/classifier.js
+function catastrophicReason(seg) {
+  const { command, args: args2, flags: flags2, raw } = seg;
+  const operands = [
+    ...args2,
+    ...seg.tokens.filter((t) => t.type !== "command" && t.type !== "flag").map((t) => t.value)
+  ];
+  if (command === "rm") {
+    if (flags2.includes("--no-preserve-root")) {
+      return "rm --no-preserve-root: destructive root filesystem deletion";
+    }
+    const recursive = flags2.some((f) => f.includes("r") || f === "--recursive");
+    const force = flags2.some((f) => f.includes("f") || f === "--force");
+    if (recursive && force && operands.some((a) => a === "/" || a === "/*")) {
+      return "rm -rf /: destructive root filesystem deletion";
+    }
+  }
+  if (command === "dd" && operands.some((a) => a.startsWith("of=/dev/"))) {
+    return "dd writing to a raw device: destructive disk overwrite";
+  }
+  if (command.startsWith("mkfs") || command === "wipefs") {
+    return `${command}: destructive filesystem/device wipe`;
+  }
+  if (command === "shred" && operands.some((a) => a.startsWith("/dev/"))) {
+    return "shred on a raw device: destructive disk overwrite";
+  }
+  if (raw.includes(":(){") || raw.includes(":|:&")) {
+    return "fork bomb: destructive resource exhaustion";
+  }
+  if (/>\s*\/dev\/(sd|hd|nvme|vd|mmcblk)/.test(raw)) {
+    return "redirect to a raw disk device: destructive disk overwrite";
+  }
+  return null;
+}
 function higherPriority(a, b) {
   const ai = CLASSIFICATION_PRIORITY.indexOf(a);
   const bi = CLASSIFICATION_PRIORITY.indexOf(b);
@@ -63880,7 +63913,7 @@ No parseable command segments found. Denied as a precaution.`,
   }
   return compound;
 }
-var DEFAULT_ALLOWED_CLASSES, OBFUSCATION_CHECKS, CLASSIFICATION_PRIORITY2, DEFAULT_POLICIES;
+var DEFAULT_ALLOWED_CLASSES, ALL_COMMAND_CLASSES, OBFUSCATION_CHECKS, CLASSIFICATION_PRIORITY2, DEFAULT_POLICIES;
 var init_verdict = __esm(() => {
   init_classifier();
   DEFAULT_ALLOWED_CLASSES = new Set([
@@ -63888,6 +63921,13 @@ var init_verdict = __esm(() => {
     "write",
     "network"
   ]);
+  ALL_COMMAND_CLASSES = new Set([
+    "read",
+    "write",
+    "network",
+    "destructive",
+    "escalation"
+  ]);
   OBFUSCATION_CHECKS = [
     {
       description: "base64-encoded argument (possible command injection)",
@@ -63930,9 +63970,16 @@ var init_verdict = __esm(() => {
     "read"
   ];
   DEFAULT_POLICIES = [
-    (_, cls) => cls === "destructive" ? `segment classified as destructive \u2014 denied by policy` : null,
-    (_, cls) => cls === "escalation" ? `segment classified as escalation \u2014 denied by policy` : null,
-    (_node, _cls) => null
+    (node, _cls) => {
+      const reason = catastrophicReason({
+        raw: node.raw,
+        tokens: node.tokens,
+        command: node.command,
+        args: node.args,
+        flags: node.flags
+      });
+      return reason === null ? null : `unconditionally blocked destructive command \u2014 ${reason}`;
+    }
   ];
 });
 
@@ -64004,15 +64051,27 @@ var init_normalization = __esm(() => {
 function isASTNormalizationEnabled(flagManager) {
   return flagManager?.isEnabled("shell-ast-normalization") ?? false;
 }
-function baselineGuard(command) {
+function baselineGuard(command, allowedClasses) {
   const normalized = normalizeCommand(command);
+  for (const seg of normalized.segments) {
+    const reason = catastrophicReason(seg);
+    if (reason !== null) {
+      return {
+        allowed: false,
+        denialMessage: `Command denied (safety block): "${command}"
+` + `Unconditionally blocked destructive command \u2014 ${reason}.
+` + `This block is not affected by permission settings.`,
+        astModeActive: false
+      };
+    }
+  }
   const cls = normalized.highestClassification;
-  if (cls === "destructive" || cls === "escalation") {
+  if (!allowedClasses.has(cls)) {
     return {
       allowed: false,
-      denialMessage: `Command denied (baseline mode): "${command}"
+      denialMessage: `Command denied (command-class policy): "${command}"
 ` + `Classification: ${cls}
-` + `Highest-risk operation in compound command is classified as ${cls}.`,
+` + `Classification "${cls}" is not in the caller's allowed set [${[...allowedClasses].join(", ")}].`,
       astModeActive: false
     };
   }
@@ -64039,7 +64098,7 @@ async function guardExecCommand(command, allowedClasses = DEFAULT_ALLOWED_CLASSE
   if (isASTNormalizationEnabled(flagManager)) {
     return astGuard(command, allowedClasses);
   }
-  return baselineGuard(command);
+  return baselineGuard(command, allowedClasses);
 }
 function formatDenialResponse(result, cmd) {
   const segmentDetails = result.verdict?.segments.map((s) => ({
@@ -64062,6 +64121,7 @@ var init_ast_guard = __esm(() => {
   init_parser();
   init_verdict();
   init_normalization();
+  init_classifier();
 });
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/tools/exec/file-ops.js
@@ -64434,7 +64494,7 @@ function handleBgSpecialCommand(processManager, cmd) {
   return processManager.handleCommand(cmd);
 }
 async function runCommand(processManager, overflowHandler, featureFlags, cmdStr, cmdInput, workingDirectory, globalTimeout, signal) {
-  const guardResult = await guardExecCommand(cmdStr, DEFAULT_ALLOWED_CLASSES, featureFlags);
+  const guardResult = await guardExecCommand(cmdStr, ALL_COMMAND_CLASSES, featureFlags);
   if (!guardResult.allowed) {
     const denial = formatDenialResponse(guardResult, cmdStr);
     return {
@@ -264004,7 +264064,7 @@ var FOUNDATION_METADATA;
 var init_foundation_metadata = __esm(() => {
   FOUNDATION_METADATA = {
     productId: "goodvibes",
-    productVersion: "1.4.0",
+    productVersion: "1.4.1",
     operatorMethodCount: 329,
     operatorEventCount: 31,
     peerEndpointCount: 6
@@ -264019,7 +264079,7 @@ var init_operator_contract = __esm(() => {
     product: {
       id: "goodvibes",
       surface: "operator",
-      version: "1.4.0"
+      version: "1.4.1"
     },
     auth: {
       modes: [
@@ -464542,23 +464602,6 @@ function createSchema2(db) {
     )
   `);
 }
-function getKnowledgeSchemaStatements() {
-  const statements = [];
-  createSchema2({
-    run(sql) {
-      const normalized = sql.trim();
-      if (normalized.length > 0)
-        statements.push(normalized);
-    }
-  });
-  return statements;
-}
-function renderKnowledgeSchemaSql() {
-  return `${getKnowledgeSchemaStatements().map((statement) => statement.endsWith(";") ? statement : `${statement};`).join(`
-
-`)}
-`;
-}
 function rowObject(columns, values2) {
   return Object.fromEntries(columns.map((column, index) => [column, values2[index]]));
 }
@@ -777931,9 +777974,6 @@ var init_ingest = __esm(() => {
 // node_modules/@pellux/goodvibes-sdk/dist/platform/knowledge/browser-history/index.js
 var init_browser_history = __esm(() => {
   init_ingest();
-  init_discover();
-  init_readers();
-  init_paths2();
 });
 
 // node_modules/graphql/jsutils/devAssert.mjs
@@ -795808,7 +795848,6 @@ var init_semantic = __esm(() => {
   init_llm();
   init_gap_repair();
   init_service5();
-  init_self_improvement();
 });
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/knowledge/home-graph/helpers.js
@@ -799777,40 +799816,8 @@ var init_map_view = __esm(() => {
 });
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/knowledge/home-graph/types.js
-var HOME_GRAPH_NODE_KINDS, HOME_GRAPH_RELATIONS, HOME_GRAPH_CAPABILITIES;
+var HOME_GRAPH_CAPABILITIES;
 var init_types15 = __esm(() => {
-  HOME_GRAPH_NODE_KINDS = [
-    "ha_home",
-    "ha_entity",
-    "ha_device",
-    "ha_area",
-    "ha_automation",
-    "ha_script",
-    "ha_scene",
-    "ha_label",
-    "ha_integration",
-    "ha_room",
-    "ha_device_passport",
-    "ha_maintenance_item",
-    "ha_troubleshooting_case",
-    "ha_purchase",
-    "ha_network_node"
-  ];
-  HOME_GRAPH_RELATIONS = [
-    "controls",
-    "located_in",
-    "belongs_to_device",
-    "has_manual",
-    "has_receipt",
-    "has_warranty",
-    "has_issue",
-    "fixed_by",
-    "uses_battery",
-    "connected_via",
-    "part_of_network",
-    "mentioned_by",
-    "source_for"
-  ];
   HOME_GRAPH_CAPABILITIES = [
     "knowledge-space-isolation",
     "snapshot-sync",
@@ -801601,7 +801608,6 @@ var init_service6 = __esm(() => {
 var init_home_graph = __esm(() => {
   init_service6();
   init_extension();
-  init_types15();
 });
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/knowledge/store-record-delete.js
@@ -804026,14 +804032,10 @@ var init_service7 = __esm(() => {
 var init_project_planning = __esm(() => {
   init_service7();
   init_helpers3();
-  init_readiness();
 });
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/knowledge/persistence.js
-var init_persistence = __esm(() => {
-  init_store_schema();
-  init_store_load();
-});
+var init_persistence = () => {};
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/knowledge/projections.js
 class KnowledgeProjectionService {
@@ -807587,21 +807589,21 @@ var init_service8 = __esm(() => {
 var exports_knowledge = {};
 __export(exports_knowledge, {
   withKnowledgeSpace: () => withKnowledgeSpace,
-  uniqKnowledgeValues: () => uniq2,
-  stabilizeKnowledgeText: () => stableText,
-  runKnowledgeSemanticSelfImprovement: () => runKnowledgeSemanticSelfImprovement,
+  uniqKnowledgeValues: () => uniq3,
+  stabilizeKnowledgeText: () => stableText2,
+  runKnowledgeSemanticSelfImprovement: () => runKnowledgeSemanticSelfImprovement2,
   resolveProjectPlanningSpace: () => resolveProjectPlanningSpace,
-  resolveKnowledgeDbPathFromControlPlaneDir: () => resolveKnowledgeDbPathFromControlPlaneDir,
+  resolveKnowledgeDbPathFromControlPlaneDir: () => resolveKnowledgeDbPathFromControlPlaneDir2,
   renderPacket: () => renderPacket,
   renderKnowledgeSchemaSql: () => renderKnowledgeSchemaSql,
   renderKnowledgeMap: () => renderKnowledgeMap,
   readKnowledgeSearchText: () => readKnowledgeSearchText,
-  readBrowserKnowledgeProfile: () => readBrowserKnowledgeProfile,
+  readBrowserKnowledgeProfile: () => readBrowserKnowledgeProfile2,
   projectPlanningSourceId: () => projectPlanningSourceId,
   projectPlanningProjectIdFromPath: () => projectPlanningProjectIdFromPath,
   projectPlanningCanonicalUri: () => projectPlanningCanonicalUri,
   projectKnowledgeSpaceId: () => projectKnowledgeSpaceId,
-  parseKnowledgeJsonValue: () => parseJsonValue,
+  parseKnowledgeJsonValue: () => parseJsonValue2,
   normalizeProjectId: () => normalizeProjectId,
   normalizeKnowledgeSpaceId: () => normalizeKnowledgeSpaceId,
   normalizeHomeAssistantInstallationId: () => normalizeHomeAssistantInstallationId,
@@ -807609,12 +807611,12 @@ __export(exports_knowledge, {
   materializeGeneratedKnowledgeProjection: () => materializeGeneratedKnowledgeProjection,
   looksLikeRawPdfPayload: () => looksLikeRawPdfPayload,
   looksBinaryLikeText: () => looksBinaryLikeText,
-  loadKnowledgeStoreSnapshot: () => loadKnowledgeStoreSnapshot,
+  loadKnowledgeStoreSnapshot: () => loadKnowledgeStoreSnapshot2,
   listGeneratedKnowledgePages: () => listGeneratedKnowledgePages,
-  listBrowserKinds: () => listBrowserKinds,
+  listBrowserKinds: () => listBrowserKinds2,
   knowledgeSpaceMetadata: () => knowledgeSpaceMetadata,
   knowledgePageSourceWeight: () => knowledgePageSourceWeight,
-  knowledgeNowMs: () => nowMs,
+  knowledgeNowMs: () => nowMs2,
   knowledgeExtractionNeedsRefresh: () => knowledgeExtractionNeedsRefresh,
   isUsefulKnowledgePageSourceCandidate: () => isUsefulKnowledgePageSourceCandidate,
   isUsefulKnowledgePageSource: () => isUsefulKnowledgePageSource,
@@ -807634,12 +807636,12 @@ __export(exports_knowledge, {
   generatedKnowledgeSourceId: () => generatedKnowledgeSourceId,
   generatedKnowledgeCanonicalUri: () => generatedKnowledgeCanonicalUri,
   extractKnowledgeArtifact: () => extractKnowledgeArtifact,
-  evaluateProjectPlanningReadiness: () => evaluateProjectPlanningReadiness,
-  discoverBrowserKnowledgeProfiles: () => discoverBrowserKnowledgeProfiles,
+  evaluateProjectPlanningReadiness: () => evaluateProjectPlanningReadiness2,
+  discoverBrowserKnowledgeProfiles: () => discoverBrowserKnowledgeProfiles2,
   createWebKnowledgeGapRepairer: () => createWebKnowledgeGapRepairer,
   createProviderBackedKnowledgeSemanticLlm: () => createProviderBackedKnowledgeSemanticLlm,
   createMemoryApi: () => createMemoryApi,
-  createKnowledgeSchema: () => createSchema2,
+  createKnowledgeSchema: () => createSchema3,
   createKnowledgeApi: () => createKnowledgeApi,
   createDefaultKnowledgeConnectorRegistry: () => createDefaultKnowledgeConnectorRegistry,
   compareKnowledgePageSources: () => compareKnowledgePageSources,
@@ -810112,7 +810114,7 @@ var init_delivery_manager = __esm(() => {
 });
 
 // node_modules/@pellux/goodvibes-sdk/dist/platform/automation/scheduler-capacity.js
-function computeSchedulerCapacity(slotsTotal, runs, nowMs2 = Date.now()) {
+function computeSchedulerCapacity(slotsTotal, runs, nowMs3 = Date.now()) {
   let slotsInUse = 0;
   const queuedRuns = [];
   for (const run7 of runs) {
@@ -810122,7 +810124,7 @@ function computeSchedulerCapacity(slotsTotal, runs, nowMs2 = Date.now()) {
       queuedRuns.push(run7);
   }
   const queueDepth = queuedRuns.length;
-  const oldestQueuedAgeMs = queueDepth > 0 ? nowMs2 - Math.min(...queuedRuns.map((r6) => r6.queuedAt)) : null;
+  const oldestQueuedAgeMs = queueDepth > 0 ? nowMs3 - Math.min(...queuedRuns.map((r6) => r6.queuedAt)) : null;
   return { slotsTotal, slotsInUse, queueDepth, oldestQueuedAgeMs };
 }
 
@@ -837618,7 +837620,7 @@ var createStyledCell = (char, overrides = {}) => ({
 // src/version.ts
 import { readFileSync } from "fs";
 import { join } from "path";
-var _version = "1.6.3";
+var _version = "1.6.4";
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, "..", "package.json"), "utf-8"));
   _version = typeof pkg.version === "string" ? pkg.version : _version;
@@ -862775,7 +862777,7 @@ var WORK_PLAN_STATUSES = [
   "failed",
   "cancelled"
 ];
-function nowMs2() {
+function nowMs3() {
   return Date.now();
 }
 function isObject4(value) {
@@ -862881,7 +862883,7 @@ class WorkPlanStore {
     if (!normalizedTitle)
       throw new Error("Work plan item title is required.");
     const plan = this.readPlan();
-    const time4 = nowMs2();
+    const time4 = nowMs3();
     const item = {
       id: createItemId(),
       title: normalizedTitle,
@@ -862905,7 +862907,7 @@ class WorkPlanStore {
   updateItem(idOrPrefix, patch2) {
     const plan = this.readPlan();
     const item = this.resolveItem(plan, idOrPrefix);
-    const time4 = nowMs2();
+    const time4 = nowMs3();
     const nextStatus = patch2.status ?? item.status;
     const next = this.pruneItem({
       ...item,
@@ -862938,7 +862940,7 @@ class WorkPlanStore {
   removeItem(idOrPrefix) {
     const plan = this.readPlan();
     const item = this.resolveItem(plan, idOrPrefix);
-    const time4 = nowMs2();
+    const time4 = nowMs3();
     const remaining = plan.items.filter((candidate) => candidate.id !== item.id);
     this.writePlan({
       ...plan,
@@ -862958,7 +862960,7 @@ class WorkPlanStore {
       ...plan,
       items: remaining,
       activeItemId: remaining[0]?.id,
-      updatedAt: nowMs2()
+      updatedAt: nowMs3()
     });
     return removed;
   }
@@ -862997,7 +862999,7 @@ class WorkPlanStore {
     const parsed = JSON.parse(raw);
     if (!isObject4(parsed))
       return this.createEmptyPlan();
-    const time4 = nowMs2();
+    const time4 = nowMs3();
     const createdAt = typeof parsed.createdAt === "number" ? parsed.createdAt : time4;
     const updatedAt = typeof parsed.updatedAt === "number" ? parsed.updatedAt : createdAt;
     const items = Array.isArray(parsed.items) ? parsed.items.map((item) => normalizeItem(item, createdAt)).filter((item) => item !== null) : [];
@@ -863016,7 +863018,7 @@ class WorkPlanStore {
     };
   }
   createEmptyPlan() {
-    const time4 = nowMs2();
+    const time4 = nowMs3();
     return {
       id: createPlanId(this.options.projectId, this.options.projectRoot),
       projectId: this.options.projectId,
@@ -974831,8 +974833,8 @@ function formatDigestTime(at, from = Date.now()) {
     return `yesterday ${time4}`;
   return `${d4.toLocaleDateString(undefined, { month: "short", day: "numeric" })} ${time4}`;
 }
-function formatRelativeTime(targetMs, nowMs3 = Date.now()) {
-  const diffMs = targetMs - nowMs3;
+function formatRelativeTime(targetMs, nowMs4 = Date.now()) {
+  const diffMs = targetMs - nowMs4;
   if (diffMs <= 0)
     return "soon";
   const diffMin = Math.round(diffMs / 60000);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-agent",
-  "version": "1.6.3",
+  "version": "1.6.4",
   "private": false,
   "description": "GoodVibes personal operator assistant TUI with a proactive Agent product brain, isolated Agent Knowledge, local profiles, routines, skills, personas, and explicit build delegation.",
   "type": "module",
@@ -92,7 +92,7 @@
   },
   "dependencies": {},
   "devDependencies": {
-    "@pellux/goodvibes-sdk": "1.4.0",
+    "@pellux/goodvibes-sdk": "1.4.1",
     "sql.js": "^1.14.1",
     "sqlite-vec": "^0.1.9",
     "zustand": "^5.0.12",

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '1.6.3';
+let _version = '1.6.4';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8')) as {
     readonly version?: unknown;