weavatrix 0.2.13 → 0.2.15

package/src/security/registry-sig.rules.js

@@ -14,7 +14,7 @@ export const MALWARE_ALLOWLIST = new Set([
 // webhook.site / oast.* / canarytokens / dnslog.cn: Shai-Hulud-era exfil + OOB-callback services.
 const EXFIL_HOSTS = "discord(app)?\\.com/api/webhooks|hooks\\.slack\\.com/services|api\\.telegram\\.org/bot|pastebin\\.com/raw|burpcollaborator|oastify\\.com|oast\\.(pro|live|fun|me|site|online)|interact\\.sh|pipedream\\.net|requestbin|webhook\\.site|canarytokens\\.(com|org)|dnslog\\.cn";
 // external URL that is NOT an exfil endpoint (owned by exfil-url) and NOT a raw IP (owned by exfil-ip)
-const PLAIN_EXTERNAL_URL = `https?://(?!(${EXFIL_HOSTS})|[0-9]{1,3}\\.|localhost\\b|127\\.|0\\.0\\.0\\.0|10\\.|192\\.168\\.|169\\.254\\.|172\\.(1[6-9]|2\\d|3[01])\\.)[^'"\`\\s)\\\\]+`;
+const PLAIN_EXTERNAL_URL = `https?://(?!(${EXFIL_HOSTS})|[0-9]{1,3}\\.|localhost\\b|127\\.|0\\.0\\.0\\.0|10\\.|192\\.168\\.|169\\.254\\.|172\\.(1[6-9]|2\\d|3[01])\\.)[a-z0-9][^'"\`\\s)\\\\]+`;
 
 // ---- content rules (scanned over node_modules file text; `pattern` is ripgrep-safe ERE, `re` is the
 // JS validator used both to classify rg hits and by the no-rg fallback) ----
@@ -181,8 +181,8 @@ export const CONTENT_RULES = [
     severity: "low", // minified/legit code look-alikes — only escalates with a second signal
     nearZeroFp: false,
     noisy: true,
-    pattern: "eval\\(atob\\(|eval\\(Buffer\\.from\\(|_0x[a-f0-9]{4}",
-    re: /eval\(atob\(|eval\(Buffer\.from\([^)]*base64|_0x[a-f0-9]{4,}/,
+    pattern: "eval\\(atob\\(|eval\\(Buffer\\.from\\(|\\b_0x[a-f0-9]{4,}\\b",
+    re: /eval\(atob\(|eval\(Buffer\.from\([^)]*base64|\b_0x[a-f0-9]{4,}\b/,
     what: "obfuscation marker (eval-of-decoded payload / string-array obfuscator)",
   },
 ];

package/src/version.js

@@ -0,0 +1,7 @@
+import {createRequire} from 'node:module'
+
+const requireFromWeavatrix = createRequire(import.meta.url)
+
+export const WEAVATRIX_VERSION = String(
+    requireFromWeavatrix('../package.json').version || 'unknown',
+)

package/docs/releases/v0.2.13.md

@@ -1,48 +0,0 @@
-# Weavatrix 0.2.13
-
-## Runtime-integrity and cross-language verification patch
-
-0.2.13 closes two failures found by dogfooding the live MCP on real JavaScript and Python
-applications. A live client could keep an older tool/schema snapshot after the checkout had advanced,
-and `verified_change` treated the absence of a Node manifest as a blocker even when no package test
-was requested. Neither failure is converted into a cosmetic pass: incomplete architecture, coverage,
-API or test evidence still produces `UNKNOWN` where appropriate.
-
-### Cross-language `verified_change`
-
-- An empty test request returns `NOT_REQUESTED` before looking for `package.json`.
-- Requested package tests with `run_tests:false` return `DISABLED` without pretending that they ran
-  or blocking a Python/Go/Java/Rust repository for lacking an npm manifest.
-- Actual execution still requires both `run_tests:true` and `WEAVATRIX_ALLOW_TEST_RUNS=1`, accepts
-  only existing test/check/verify package scripts and rejects shell-sensitive arguments.
-- Regression coverage exercises both plan and verify phases against a Python-only repository.
-
-### Packed-runtime and live-tool integrity
-
-- Release verification runs the packed npm artifact and portable MCPB stage as real stdio servers.
-- The smoke gate asserts 34 tools for the offline profile and all 38 for `hosted` / `full`, including
-  `trace_endpoint`, `trace_api_contract` and the local-only `preview_sync` approval step.
-- `graph_stats` and initialization diagnostics identify the running package version, enabled
-  capabilities and registered tool count. This separates an old client connection from a deliberately
-  restricted profile.
-- Existing security boundaries are unchanged: `offline` remains the no-HTTP default; `online` stays
-  a compatibility alias for `advisories,hosted`; `crossrepo` is not silently added to a custom list;
-  and no network tool is made available by default.
-
-MCP clients commonly snapshot `tools/list` for one connection. After upgrading, reconnect or start a
-new task. Expected counts are 31 (`pinned`), 34 (`offline`), 35 (`osv`) and 38 (`hosted` / `full`).
-
-### Skill and architecture workflow
-
-The bundled skill now covers non-HTTP entrypoints (CLI, worker, queue, cron and events), explains how
-to review and save a local starter contract, establish an explicit ratchet baseline, apply a reviewed
-exception, and classify generated/test/resource trees through `.weavatrix.json`. It also labels
-`shortest_path` as undirected connectivity rather than directional call proof, uses the correct
-`change_impact base` parameter, and avoids redundant symbol-context calls.
-
-## Compatibility
-
-- The 38 tool names, input schemas and `weavatrix.tool.v1` result envelope remain compatible.
-- Hosted sync payload v2/v3, confirmation-token consent and architecture-contract transport are
-  unchanged; no hosted application change is required.
-- The public MIT license and local-first network boundary are unchanged.