pando-ai 0.5.2 → 0.5.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pando-ai",
-  "version": "0.5.2",
+  "version": "0.5.4",
   "description": "AI coding firewall for Codex and Claude Code: supervised launchers, Pando MCP, policy enforcement, Claude hooks, and local provider gateway.",
   "bin": {
     "pando-ai": "bin/pando-ai.js"

package/resources/tools/generated_pando-tools.json

@@ -2021,7 +2021,7 @@
       "name": "shell-command",
       "category": "pando",
       "signature": "shell-command(command, reason, timeoutMs, shell, maxOutputBytes)",
-      "description": "Strongly discouraged: prefer Pando AST/index tools before raw shell for code search, navigation, references, and edits. Use shell freely for tests, builds/compiles, package managers, git, generated or non-code files, unsupported languages, and anything Pando itself does not support. Every operation that goes through Pando, including this shell command, is snapshotted before and after; snapshots are not touchable by the agent. If needed, read ../../../pando-backend/docs/tools.md for tool behavior details. Run a shell command with cwd fixed to the selected Pando project root, then synchronously snapshot any worktree changes before another modifying Pando operation can run. The project-root confinement is also enforced by the host environment. reason is required and is written into the snapshot receipt/trailers for auditability. Command failures are returned to the agent with exit code, stdout, stderr, timeout state, and snapshot metadata. Example: { command:'npm test', reason:'Verify the current change.' }",
+      "description": "Strongly discouraged: prefer Pando AST/index tools before raw shell for code search, navigation, references, and edits. Use shell freely for tests, builds/compiles, package managers, git, generated or non-code files, unsupported languages, and anything Pando itself does not support. Every operation that goes through Pando, including this shell command, is snapshotted before and after; snapshots are not touchable by the agent. If needed, read ../../../pando-backend/docs/tools.md for tool behavior details. Shell results repeat this reminder so agents reconsider Pando-native tools before the next shell call. Run a shell command with cwd fixed to the selected Pando project root, then synchronously snapshot any worktree changes before another modifying Pando operation can run. The project-root confinement is also enforced by the host environment. reason is required and is written into the snapshot receipt/trailers for auditability. Command failures are returned to the agent with exit code, stdout, stderr, timeout state, and snapshot metadata. Example: { command:'npm test', reason:'Verify the current change.' }",
       "parameters": {
         "type": "object",
         "properties": {