car-runtime 0.57.2 → 0.57.4-nightly.20261011

package/daemon-wrappers.js

@@ -3122,6 +3122,19 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
     },
     "role": "host"
   },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "latticeConnectLabel"
+    },
+    "method": "lattice.connect.label",
+    "owner": "HostClient",
+    "python": {
+      "generated": true,
+      "name": "lattice_connect_label"
+    },
+    "role": "host"
+  },
   {
     "javascript": {
       "generated": true,

package/docs/ASSISTANT.md

@@ -261,8 +261,8 @@ gated on an unelevated local run.
 ```
 car approvals get                    # show the current default posture
 car approvals default cautious       # ask before any edit or full-access action
-car approvals default balanced       # allow sandboxed edits without asking
-car approvals default trusting       # allow everything without asking
+car approvals default balanced       # allow reads without asking
+car approvals default trusting       # allow reads and sandboxed edits without asking
 ```
 
 This proxies the daemon's `agent_permissions.*` JSON-RPC surface: it moves the
@@ -271,6 +271,11 @@ override, so setting it once changes the fallback for every agent the daemon
 supervises, not just one `car do` invocation. The three presets are the only
 accepted values; anything else is rejected before it reaches the daemon.
 
+A per-agent posture cannot widen the environment that was actually bound.
+**Approve for me** auto-allows `sandbox_edit` actions only when a sandbox exists.
+If Docker is unavailable and CAR falls back to the local host (or the run uses
+`--local`), shell commands and file edits still ask before they touch the Mac.
+
 ## Memory: what actually persists
 
 `recall` and `remember` are backed by CAR's graph memory engine

package/index.d.ts

@@ -3452,6 +3452,9 @@ export class HostClient {
   /** Generated host wrapper for `lattice.connect.invite`. */
   latticeConnectInvite(paramsJson: string): Promise<string>;
 
+  /** Generated host wrapper for `lattice.connect.label`. */
+  latticeConnectLabel(paramsJson: string): Promise<string>;
+
   /** Generated host wrapper for `lattice.connect.share`. */
   latticeConnectShare(paramsJson: string): Promise<string>;
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "car-runtime",
-  "version": "0.57.2",
+  "version": "0.57.4-nightly.20261011",
   "carProtocolVersion": 3,
   "description": "Common Agent Runtime — a deterministic execution layer for AI agents",
   "main": "index.js",