agentwire-dev 1.77.3__tar.gz → 1.77.4__tar.gz

{agentwire_dev-1.77.3 → agentwire_dev-1.77.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: agentwire-dev
-Version: 1.77.3
+Version: 1.77.4
 Summary: Multi-session voice web interface for AI coding agents
 Project-URL: Homepage, https://agentwire.dev
 Project-URL: Repository, https://github.com/dotdevdotdev/agentwire-dev
@@ -228,7 +228,7 @@ Requires-Dist: aiohttp-jinja2>=1.6
 Requires-Dist: aiohttp>=3.13.4
 Requires-Dist: av>=12.0.0
 Requires-Dist: certifi>=2026.10.23
-Requires-Dist: damage-control-dev<0.2,>=0.1.4
+Requires-Dist: damage-control-dev<0.2,>=0.1.5
 Requires-Dist: fastapi>=0.104.0
 Requires-Dist: jinja2>=3.1.0
 Requires-Dist: kokoro-onnx>=0.4.9; python_version < '3.14'

{agentwire_dev-1.77.3 → agentwire_dev-1.77.4}/RELEASING.md

@@ -6,7 +6,7 @@ Every release does **both** a PyPI publish and a GitHub release. The **GitHub re
 
 ## The engine is a separate project (single source)
 
-The damage-control engine has exactly one source: the `damage-control-dev` repo (<https://github.com/dotdevdotdev/damage-control-dev>), published on PyPI. `agentwire-dev` only *consumes* it through the range in `pyproject.toml` (currently `damage-control-dev>=0.1.4,<0.2`); a checkout and a PyPI install both resolve it from PyPI. There is no copy of the engine in this repo and nothing to release from here. `tests/unit/test_damage_control_pin.py` checks that the declared floor/ceiling parse and that the installed engine satisfies them.
+The damage-control engine has exactly one source: the `damage-control-dev` repo (<https://github.com/dotdevdotdev/damage-control-dev>), published on PyPI. `agentwire-dev` only *consumes* it through the range in `pyproject.toml` (currently `damage-control-dev>=0.1.5,<0.2`); a checkout and a PyPI install both resolve it from PyPI. There is no copy of the engine in this repo and nothing to release from here. `tests/unit/test_damage_control_pin.py` checks that the declared floor/ceiling parse and that the installed engine satisfies them.
 
 To ship an engine change:
 

{agentwire_dev-1.77.3 → agentwire_dev-1.77.4}/agentwire/__init__.py

@@ -1,3 +1,3 @@
 """AgentWire - Multi-session voice web interface for AI coding agents."""
 
-__version__ = "1.77.3"
+__version__ = "1.77.4"

{agentwire_dev-1.77.3 → agentwire_dev-1.77.4}/agentwire/safety/rule_baselines.json

@@ -54,7 +54,8 @@
       "c10d81a50fe5bf2b4d83a37bc9e58f22d2a8ea5265cd0757d6bceb38702481dd",
       "d49e33dfeb72a8257e1853bdb4e11719610b41fb739979f439c4e08b53648705",
       "d7323ac7f5a4f23d1b6a7455c8666a26abca2cfe248e0b9161f93346abdce82a",
-      "f399f899aac4bf0008d81c9c9b7f3a6f12927aec5a31f4d1d0b135bec4d71f67"
+      "f399f899aac4bf0008d81c9c9b7f3a6f12927aec5a31f4d1d0b135bec4d71f67",
+      "06f414695b411058d9c2c675c43d2707ddcffa970ae62506083feb1dd56802fc"
     ],
     "databases.yaml": [
       "0547cffb489a750505941ba773a4be03dccc8217bb358aee12cf2cff663190d3",

{agentwire_dev-1.77.3 → agentwire_dev-1.77.4}/corpus/golden/effective_rules.json

@@ -333,9 +333,6 @@
   "\"*.min.js\"",
   "\".git/config\"",
   "\".git/hooks/\"",
-  "\".next/\"",
-  "\".nuxt/\"",
-  "\".output/\"",
   "\".venv/\"",
   "\"/bin/\"",
   "\"/boot/\"",
@@ -347,15 +344,12 @@
   "\"Gemfile.lock\"",
   "\"Pipfile.lock\"",
   "\"__pycache__/\"",
-  "\"build/\"",
   "\"bun.lockb\"",
   "\"composer.lock\"",
-  "\"dist/\"",
   "\"flake.lock\"",
   "\"go.sum\"",
   "\"node_modules/\"",
   "\"npm-shrinkwrap.json\"",
-  "\"out/\"",
   "\"package-lock.json\"",
   "\"pnpm-lock.yaml\"",
   "\"poetry.lock\"",

{agentwire_dev-1.77.3 → agentwire_dev-1.77.4}/corpus/golden/snapshot.json

@@ -134,7 +134,7 @@
   "audit": 8,
   "engine": 1828,
   "engine_by_platform": 8,
-  "hooks": 1014,
+  "hooks": 1016,
   "hooks_by_platform": 6
  },
  "engine": {
@@ -2755,9 +2755,9 @@
    "unverifiable": false
   },
   "[\"Bash\", \"cat a.txt | sed 's|x|y|' | tee dist/o.js\", \"/golden/home\", \"default\"]": {
-   "decision": "block",
+   "decision": "allow",
    "protected": false,
-   "rule_id": "core.read-only-path",
+   "rule_id": null,
    "unverifiable": false
   },
   "[\"Bash\", \"cat a.txt | sed 's|x|y|' | tee dist/o.js\", \"/golden/home\", \"kill-switch-off\"]": {
@@ -6715,9 +6715,9 @@
    "unverifiable": false
   },
   "[\"Bash\", \"echo x > dist/app.js\", \"/golden/home\", \"default\"]": {
-   "decision": "block",
+   "decision": "allow",
    "protected": false,
-   "rule_id": "core.read-only-path",
+   "rule_id": null,
    "unverifiable": false
   },
   "[\"Bash\", \"echo x > dist/app.js\", \"/golden/home\", \"kill-switch-off\"]": {
@@ -9499,9 +9499,9 @@
    "unverifiable": false
   },
   "[\"Bash\", \"sed 's|x|y|' notes.txt > dist/out.js\", \"/golden/home\", \"default\"]": {
-   "decision": "block",
+   "decision": "allow",
    "protected": false,
-   "rule_id": "core.read-only-path",
+   "rule_id": null,
    "unverifiable": false
   },
   "[\"Bash\", \"sed 's|x|y|' notes.txt > dist/out.js\", \"/golden/home\", \"kill-switch-off\"]": {
@@ -9511,9 +9511,9 @@
    "unverifiable": false
   },
   "[\"Bash\", \"sed -i '' 's/a/b/' dist/app.js\", \"/golden/home\", \"default\"]": {
-   "decision": "block",
+   "decision": "allow",
    "protected": false,
-   "rule_id": "core.read-only-path",
+   "rule_id": null,
    "unverifiable": false
   },
   "[\"Bash\", \"sed -i '' 's/a/b/' dist/app.js\", \"/golden/home\", \"kill-switch-off\"]": {
@@ -9525,7 +9525,7 @@
   "[\"Bash\", \"sed -i '1e rm -rf dist/' notes.txt\", \"/golden/home\", \"default\"]": {
    "decision": "block",
    "protected": false,
-   "rule_id": "core.read-only-path",
+   "rule_id": "core.rm-with-recursive-or-force-flags",
    "unverifiable": false
   },
   "[\"Bash\", \"sed -i '1e rm -rf dist/' notes.txt\", \"/golden/home\", \"kill-switch-off\"]": {
@@ -9559,9 +9559,9 @@
    "unverifiable": false
   },
   "[\"Bash\", \"sed -i 's/a/b/e' dist/x.js\", \"/golden/home\", \"default\"]": {
-   "decision": "block",
+   "decision": "allow",
    "protected": false,
-   "rule_id": "core.read-only-path",
+   "rule_id": null,
    "unverifiable": false
   },
   "[\"Bash\", \"sed -i 's/a/b/e' dist/x.js\", \"/golden/home\", \"kill-switch-off\"]": {
@@ -9571,9 +9571,9 @@
    "unverifiable": false
   },
   "[\"Bash\", \"sed -i 's/a/b/w dist/out.js' notes.txt\", \"/golden/home\", \"default\"]": {
-   "decision": "block",
+   "decision": "allow",
    "protected": false,
-   "rule_id": "core.read-only-path",
+   "rule_id": null,
    "unverifiable": false
   },
   "[\"Bash\", \"sed -i 's/a/b/w dist/out.js' notes.txt\", \"/golden/home\", \"kill-switch-off\"]": {
@@ -9607,9 +9607,9 @@
    "unverifiable": false
   },
   "[\"Bash\", \"sed -i \\\"s|a|$(echo dist/x)|\\\" notes.txt\", \"/golden/home\", \"default\"]": {
-   "decision": "block",
+   "decision": "ask",
    "protected": false,
-   "rule_id": "core.read-only-path",
+   "rule_id": "core.ambiguous-command",
    "unverifiable": false
   },
   "[\"Bash\", \"sed -i \\\"s|a|$(echo dist/x)|\\\" notes.txt\", \"/golden/home\", \"kill-switch-off\"]": {
@@ -12411,10 +12411,10 @@
    "rule_id": null
   },
   "[\"Bash\", \"cat a.txt | sed 's|x|y|' | tee dist/o.js\", \"/golden/home\", \"interactive\"]": {
-   "audit": "blocked",
-   "decision": "block",
-   "exit": 2,
-   "rule_id": "core.read-only-path"
+   "audit": "allowed",
+   "decision": "allow",
+   "exit": 0,
+   "rule_id": null
   },
   "[\"Bash\", \"cat config\", \"/golden/home\", \"interactive\", \"/golden/home/.config/git\"]": {
    "audit": "allowed",
@@ -14427,10 +14427,10 @@
    "rule_id": "core.protected-control-plane"
   },
   "[\"Bash\", \"echo x > dist/app.js\", \"/golden/home\", \"interactive\"]": {
-   "audit": "blocked",
-   "decision": "block",
-   "exit": 2,
-   "rule_id": "core.read-only-path"
+   "audit": "allowed",
+   "decision": "allow",
+   "exit": 0,
+   "rule_id": null
   },
   "[\"Bash\", \"echo x > hosts.yml\", \"/golden/home\", \"interactive\", \"/golden/home/.config/gh\"]": {
    "audit": "blocked",
@@ -16251,22 +16251,22 @@
    "rule_id": "core.protected-control-plane"
   },
   "[\"Bash\", \"sed 's|x|y|' notes.txt > dist/out.js\", \"/golden/home\", \"interactive\"]": {
-   "audit": "blocked",
-   "decision": "block",
-   "exit": 2,
-   "rule_id": "core.read-only-path"
+   "audit": "allowed",
+   "decision": "allow",
+   "exit": 0,
+   "rule_id": null
   },
   "[\"Bash\", \"sed -i '' 's/a/b/' dist/app.js\", \"/golden/home\", \"interactive\"]": {
-   "audit": "blocked",
-   "decision": "block",
-   "exit": 2,
-   "rule_id": "core.read-only-path"
+   "audit": "allowed",
+   "decision": "allow",
+   "exit": 0,
+   "rule_id": null
   },
   "[\"Bash\", \"sed -i '1e rm -rf dist/' notes.txt\", \"/golden/home\", \"interactive\"]": {
    "audit": "blocked",
    "decision": "block",
    "exit": 2,
-   "rule_id": "core.read-only-path"
+   "rule_id": "core.rm-with-recursive-or-force-flags"
   },
   "[\"Bash\", \"sed -i 's/a/b/' node_modules/pkg/index.js\", \"/golden/home\", \"interactive\"]": {
    "audit": "blocked",
@@ -16281,16 +16281,16 @@
    "rule_id": "core.protected-control-plane"
   },
   "[\"Bash\", \"sed -i 's/a/b/e' dist/x.js\", \"/golden/home\", \"interactive\"]": {
-   "audit": "blocked",
-   "decision": "block",
-   "exit": 2,
-   "rule_id": "core.read-only-path"
+   "audit": "allowed",
+   "decision": "allow",
+   "exit": 0,
+   "rule_id": null
   },
   "[\"Bash\", \"sed -i 's/a/b/w dist/out.js' notes.txt\", \"/golden/home\", \"interactive\"]": {
-   "audit": "blocked",
-   "decision": "block",
-   "exit": 2,
-   "rule_id": "core.read-only-path"
+   "audit": "allowed",
+   "decision": "allow",
+   "exit": 0,
+   "rule_id": null
   },
   "[\"Bash\", \"sed -i 's/x/y/' ~/.agentwire/hooks/damage-control/bash-tool-damage-control.py  # allow: I really want to\", \"/golden/home\", \"interactive\"]": {
    "audit": "blocked",
@@ -16304,11 +16304,23 @@
    "exit": 2,
    "rule_id": "core.protected-control-plane"
   },
+  "[\"Bash\", \"sed -i \\\"s|a|$(echo dist/x)|\\\" notes.txt\", \"/golden/home\", \"bypass\"]": {
+   "audit": "allowed",
+   "decision": "allow",
+   "exit": 0,
+   "rule_id": null
+  },
   "[\"Bash\", \"sed -i \\\"s|a|$(echo dist/x)|\\\" notes.txt\", \"/golden/home\", \"interactive\"]": {
-   "audit": "blocked",
-   "decision": "block",
-   "exit": 2,
-   "rule_id": "core.read-only-path"
+   "audit": "asked",
+   "decision": "ask",
+   "exit": 0,
+   "rule_id": null
+  },
+  "[\"Bash\", \"sed -i \\\"s|a|$(echo dist/x)|\\\" notes.txt\", \"/golden/home\", \"unattended\"]": {
+   "audit": "allowed",
+   "decision": "allow",
+   "exit": 0,
+   "rule_id": null
   },
   "[\"Bash\", \"sed -i s/a/b/ .agentwire/config.yaml\", \"/golden/home\", \"interactive\", \"/golden/home\"]": {
    "audit": "blocked",

{agentwire_dev-1.77.3 → agentwire_dev-1.77.4}/pyproject.toml

@@ -29,7 +29,7 @@ dependencies = [
     # PyPI. Engine changes land there, release there, then raise this floor.
     # tests/unit/test_damage_control_pin.py checks the range and the installed engine.
     # Hooks run `python -I -m damage_control.hook`.
-    "damage-control-dev>=0.1.4,<0.2",
+    "damage-control-dev>=0.1.5,<0.2",
     "aiohttp>=3.13.4",  # >=3.13.4 clears CVE-2026-34515 + CVE-2026-34513 (portal-facing)
     "aiohttp-jinja2>=1.6",
     "jinja2>=3.1.0",

{agentwire_dev-1.77.3 → agentwire_dev-1.77.4}/tests/unit/test_block_rows_carry_an_id.py

@@ -15,7 +15,7 @@ pytestmark = pytest.mark.real_agentwire_home
 BLOCKS = {
     "zero-access": "cat server.key",
     "zero-access-env": "grep -c TOKEN .env",
-    "read-only": "echo x > dist/app.js",
+    "read-only": "echo x > node_modules/app.js",
     "control-plane": "echo x > ~/.agentwire/damagecontrol.yml",
     "protected-command": "agentwire tasks promote x",
     "no-delete": "truncate -s0 CLAUDE.md",

{agentwire_dev-1.77.3 → agentwire_dev-1.77.4}/tests/unit/test_sed_script_is_data.py

@@ -25,14 +25,14 @@ def cfg():
 
 
 REAL_TARGETS = {
-    "file-operand-dist": "sed -i '' 's/a/b/' dist/app.js",
+    "file-operand-deps": "sed -i '' 's/a/b/' node_modules/app.js",
     "file-operand-modules": "sed -i 's/a/b/' node_modules/pkg/index.js",
-    "write-flag": "sed -i 's/a/b/w dist/out.js' notes.txt",
-    "execute-flag": "sed -i 's/a/b/e' dist/x.js",
-    "redirect": "sed 's|x|y|' notes.txt > dist/out.js",
-    "tee": "cat a.txt | sed 's|x|y|' | tee dist/o.js",
-    "script-with-command": "sed -i '1e rm -rf dist/' notes.txt",
-    "substitution-in-script": 'sed -i "s|a|$(echo dist/x)|" notes.txt',
+    "write-flag": "sed -i 's/a/b/w node_modules/out.js' notes.txt",
+    "execute-flag": "sed -i 's/a/b/e' node_modules/x.js",
+    "redirect": "sed 's|x|y|' notes.txt > node_modules/out.js",
+    "tee": "cat a.txt | sed 's|x|y|' | tee node_modules/o.js",
+    "script-with-command": "sed -i '1e rm -rf node_modules/' notes.txt",
+    "substitution-in-script": 'sed -i "s|a|$(echo node_modules/x)|" notes.txt',
 }