car-runtime 0.59.0-nightly.20261023 → 0.60.0

package/daemon-wrappers.js

@@ -548,6 +548,19 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
     },
     "role": "host"
   },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "agentPermissionsSetObserver"
+    },
+    "method": "agent_permissions.set_observer",
+    "owner": "HostClient",
+    "python": {
+      "generated": true,
+      "name": "agent_permissions_set_observer"
+    },
+    "role": "host"
+  },
   {
     "javascript": {
       "generated": true,
@@ -1562,6 +1575,19 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
     },
     "role": "operator"
   },
+  {
+    "javascript": {
+      "generated": false,
+      "name": "coderDiscussArchive"
+    },
+    "method": "coder.discuss.archive",
+    "owner": "CarRuntime",
+    "python": {
+      "generated": false,
+      "name": "coder_discuss_archive"
+    },
+    "role": "operator"
+  },
   {
     "javascript": {
       "generated": false,
@@ -2134,6 +2160,58 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
     },
     "role": "operator"
   },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "credentialsIssue"
+    },
+    "method": "credentials.issue",
+    "owner": "HostClient",
+    "python": {
+      "generated": true,
+      "name": "credentials_issue"
+    },
+    "role": "host"
+  },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "credentialsList"
+    },
+    "method": "credentials.list",
+    "owner": "HostClient",
+    "python": {
+      "generated": true,
+      "name": "credentials_list"
+    },
+    "role": "host"
+  },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "credentialsRefusals"
+    },
+    "method": "credentials.refusals",
+    "owner": "HostClient",
+    "python": {
+      "generated": true,
+      "name": "credentials_refusals"
+    },
+    "role": "host"
+  },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "credentialsRevoke"
+    },
+    "method": "credentials.revoke",
+    "owner": "HostClient",
+    "python": {
+      "generated": true,
+      "name": "credentials_revoke"
+    },
+    "role": "host"
+  },
   {
     "javascript": {
       "generated": true,
@@ -2418,7 +2496,7 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
       "generated": true,
       "name": "events_clear"
     },
-    "role": "operator"
+    "role": "operator_only"
   },
   {
     "javascript": {
@@ -2496,7 +2574,7 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
       "generated": true,
       "name": "events_truncate"
     },
-    "role": "operator"
+    "role": "operator_only"
   },
   {
     "javascript": {
@@ -2600,7 +2678,7 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
       "generated": false,
       "name": "fleet_composite"
     },
-    "role": "operator"
+    "role": "operator_only"
   },
   {
     "javascript": {
@@ -2613,7 +2691,7 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
       "generated": false,
       "name": "fleet_inventory"
     },
-    "role": "operator"
+    "role": "operator_only"
   },
   {
     "javascript": {
@@ -2836,6 +2914,19 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
     },
     "role": "operator"
   },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "hostDismissApproval"
+    },
+    "method": "host.dismiss_approval",
+    "owner": "CarRuntime",
+    "python": {
+      "generated": true,
+      "name": "host_dismiss_approval"
+    },
+    "role": "agent"
+  },
   {
     "javascript": {
       "generated": false,
@@ -3252,6 +3343,32 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
     },
     "role": "owner"
   },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "latticeHumanStatus"
+    },
+    "method": "lattice.human.status",
+    "owner": "CarRuntime",
+    "python": {
+      "generated": true,
+      "name": "lattice_human_status"
+    },
+    "role": "agent"
+  },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "latticeInbox"
+    },
+    "method": "lattice.inbox",
+    "owner": "CarRuntime",
+    "python": {
+      "generated": true,
+      "name": "lattice_inbox"
+    },
+    "role": "owner"
+  },
   {
     "javascript": {
       "generated": true,
@@ -3505,12 +3622,12 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
       "name": "latticeRequests"
     },
     "method": "lattice.requests",
-    "owner": "HostClient",
+    "owner": "CarRuntime",
     "python": {
       "generated": true,
       "name": "lattice_requests"
     },
-    "role": "host"
+    "role": "agent"
   },
   {
     "javascript": {
@@ -3518,12 +3635,12 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
       "name": "latticeRespond"
     },
     "method": "lattice.respond",
-    "owner": "HostClient",
+    "owner": "CarRuntime",
     "python": {
       "generated": true,
       "name": "lattice_respond"
     },
-    "role": "host"
+    "role": "agent"
   },
   {
     "javascript": {
@@ -4641,7 +4758,7 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
       "generated": true,
       "name": "multiplayer_get"
     },
-    "role": "operator_only"
+    "role": "agent"
   },
   {
     "javascript": {
@@ -4654,7 +4771,7 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
       "generated": true,
       "name": "multiplayer_list"
     },
-    "role": "operator_only"
+    "role": "agent"
   },
   {
     "javascript": {
@@ -4903,6 +5020,19 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
     },
     "role": "host"
   },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "outcomesRecordExternalGrade"
+    },
+    "method": "outcomes.record_external_grade",
+    "owner": "CarRuntime",
+    "python": {
+      "generated": true,
+      "name": "outcomes_record_external_grade"
+    },
+    "role": "operator"
+  },
   {
     "javascript": {
       "generated": true,
@@ -5486,7 +5616,7 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
       "generated": true,
       "name": "scheduler_os_install"
     },
-    "role": "operator"
+    "role": "operator_only"
   },
   {
     "javascript": {
@@ -5499,7 +5629,7 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
       "generated": true,
       "name": "scheduler_os_list"
     },
-    "role": "operator"
+    "role": "operator_only"
   },
   {
     "javascript": {
@@ -5538,7 +5668,7 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
       "generated": true,
       "name": "scheduler_os_uninstall"
     },
-    "role": "operator"
+    "role": "operator_only"
   },
   {
     "javascript": {
@@ -6112,6 +6242,32 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
     },
     "role": "operator"
   },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "spendCosts"
+    },
+    "method": "spend.costs",
+    "owner": "CarRuntime",
+    "python": {
+      "generated": true,
+      "name": "spend_costs"
+    },
+    "role": "operator_only"
+  },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "spendStatus"
+    },
+    "method": "spend.status",
+    "owner": "CarRuntime",
+    "python": {
+      "generated": true,
+      "name": "spend_status"
+    },
+    "role": "operator"
+  },
   {
     "javascript": {
       "generated": false,
@@ -6448,7 +6604,7 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
       "generated": true,
       "name": "tasks_list"
     },
-    "role": "operator"
+    "role": "operator_only"
   },
   {
     "javascript": {
@@ -6684,6 +6840,32 @@ const DAEMON_WRAPPER_ROWS = Object.freeze([
     },
     "role": "operator"
   },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "uiSignIn"
+    },
+    "method": "ui.sign_in",
+    "owner": "HostClient",
+    "python": {
+      "generated": true,
+      "name": "ui_sign_in"
+    },
+    "role": "host"
+  },
+  {
+    "javascript": {
+      "generated": true,
+      "name": "uiSignOut"
+    },
+    "method": "ui.sign_out",
+    "owner": "HostClient",
+    "python": {
+      "generated": true,
+      "name": "ui_sign_out"
+    },
+    "role": "host"
+  },
   {
     "javascript": {
       "generated": true,

package/docs/ASSISTANT.md

@@ -61,11 +61,13 @@ running anything:
 
 Either way, execution goes through the runtime's admission gates before
 anything runs: a **static verification gate** (tool exists, parameters are
-well-formed) and, by default, an **information-flow gate** that blocks
-confidential local data (files, recalled memories) from reaching an outbound
-tool like `web_search` in the same proposal — CAR calls this out explicitly
-because assistants that let persistent, high-privilege context flow straight
-into outbound tools are a known failure class.
+well-formed) and an **information-flow gate**, installed by default. The
+information-flow gate refuses a proposal in which confidential local data
+(files, recalled memories) flows into an outbound tool like `web_search`
+within that same proposal. `car do` proposes one action at a time, so a read
+in one step and a search in the next are separate proposals, and the gate
+decides nothing for `car do` today. It is a check on multi-action proposals,
+not a block on what the assistant sends out.
 
 ## What it can actually do