alter-runtime 0.4.8__tar.gz → 0.4.10__tar.gz

{alter_runtime-0.4.8 → alter_runtime-0.4.10}/LICENSE

@@ -175,7 +175,7 @@
 
    END OF TERMS AND CONDITIONS
 
-   Copyright 2026 ALTER Meridian Pty Ltd
+   Copyright 2026 Alter Meridian Pty Ltd
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

{alter_runtime-0.4.8 → alter_runtime-0.4.10}/PKG-INFO

@@ -1,13 +1,13 @@
 Metadata-Version: 2.4
 Name: alter-runtime
-Version: 0.4.8
+Version: 0.4.10
 Summary: ~Alter Identity Runtime - local daemon for the continuous identity field. Subscribes to per-~handle Cloudflare Durable Objects, exposes Unix socket + D-Bus + CLI surfaces, falls back gracefully to direct MCP polling.
 Project-URL: Homepage, https://truealter.com
 Project-URL: Documentation, https://truealter.com/docs/alter-runtime
 Project-URL: Repository, https://github.com/true-alter/alter-runtime
 Project-URL: Bug Tracker, https://github.com/true-alter/alter-runtime/issues
 Author: ~Alter
-Author-email: ALTER Meridian Pty Ltd <hello@truealter.com>
+Author-email: Alter Meridian Pty Ltd <hello@truealter.com>
 License: Apache-2.0
 License-File: LICENSE
 Keywords: agent,ai-agents,alter,cloudflare,durable-object,identity,llm,mcp,model-context-protocol,psychometric,sovereign-identity,verifiable-credentials,x402
@@ -75,10 +75,10 @@ Description-Content-Type: text/markdown
 
 ## Alpha release - filesystem key storage
 
-**`0.1.0` is an alpha release.** The public API surface (CLI flags,
+**This is an alpha release.** The public API surface (CLI flags,
 Unix-socket JSON schema, D-Bus interface, Python SDK signatures) may change in
-backwards-incompatible ways before the `0.2.0` stable cut. Pin exact versions in
-downstream tooling and read the CHANGELOG before upgrading.
+backwards-incompatible ways before the stable release. Pin exact versions in
+downstream tooling before upgrading.
 
 **Private keys are stored on the filesystem, not in an OS keychain.** On first
 `alter-runtime init`, the device Ed25519 keypair is written to
@@ -88,7 +88,7 @@ owning user and never leaves the device. This behaviour is deliberate for the
 alpha: it keeps the daemon self-contained on any POSIX host and avoids a hard
 dependency on distro-specific secret stores during early testing.
 
-**OS-native secret storage is deferred to `0.2.0`:** Linux `libsecret` /
+**OS-native secret storage is deferred to a future release:** Linux `libsecret` /
 `kwallet`, macOS Keychain, and Windows Credential Manager integration will ship
 behind a `keystore = "native"` config knob. Filesystem storage will remain the
 documented fallback.
@@ -100,10 +100,9 @@ attestation). The filesystem-stored device key then scopes only to ambient
 signal ingestion, not to high-assurance authorisations, which require a fresh
 hardware passkey ceremony per session.
 
-**Reporting issues.** Security-relevant reports: please follow
-[SECURITY.md](./SECURITY.md) and email `security@truealter.com` rather than
-filing a public issue. Non-security bugs and feature requests: email
-`support@truealter.com`.
+**Reporting issues.** Security-relevant reports: please email
+`security@truealter.com` rather than filing a public issue. Non-security bugs
+and feature requests: email `support@truealter.com`.
 
 ## Status
 
@@ -161,7 +160,7 @@ alter-runtime stop
    `https://api.truealter.com/api/v1/mcp` when the DO is unreachable for more than 3
    seconds. Your surfaces never know which path served them.
 
-3. **Exposes three local transports:**
+3. **Exposes** three local transports:
    - **Unix socket** at `/run/user/$UID/alter.sock` (Linux) or
      `~/Library/Application Support/alter/runtime.sock` (macOS) - line-delimited JSON
    - **D-Bus** interface `org.alter.Identity1` on the session bus (Linux) - used by
@@ -245,8 +244,7 @@ asyncio.run(main())
 - **Arch Linux (AUR)** - `alter-runtime`
 - **Homebrew** - `brew install alter-runtime`
 
-Pin an exact version in downstream tooling during the alpha and read the
-CHANGELOG before upgrading.
+Pin an exact version in downstream tooling during the alpha before upgrading.
 
 ## Related projects
 

{alter_runtime-0.4.8 → alter_runtime-0.4.10}/README.md

@@ -7,10 +7,10 @@
 
 ## Alpha release - filesystem key storage
 
-**`0.1.0` is an alpha release.** The public API surface (CLI flags,
+**This is an alpha release.** The public API surface (CLI flags,
 Unix-socket JSON schema, D-Bus interface, Python SDK signatures) may change in
-backwards-incompatible ways before the `0.2.0` stable cut. Pin exact versions in
-downstream tooling and read the CHANGELOG before upgrading.
+backwards-incompatible ways before the stable release. Pin exact versions in
+downstream tooling before upgrading.
 
 **Private keys are stored on the filesystem, not in an OS keychain.** On first
 `alter-runtime init`, the device Ed25519 keypair is written to
@@ -20,7 +20,7 @@ owning user and never leaves the device. This behaviour is deliberate for the
 alpha: it keeps the daemon self-contained on any POSIX host and avoids a hard
 dependency on distro-specific secret stores during early testing.
 
-**OS-native secret storage is deferred to `0.2.0`:** Linux `libsecret` /
+**OS-native secret storage is deferred to a future release:** Linux `libsecret` /
 `kwallet`, macOS Keychain, and Windows Credential Manager integration will ship
 behind a `keystore = "native"` config knob. Filesystem storage will remain the
 documented fallback.
@@ -32,10 +32,9 @@ attestation). The filesystem-stored device key then scopes only to ambient
 signal ingestion, not to high-assurance authorisations, which require a fresh
 hardware passkey ceremony per session.
 
-**Reporting issues.** Security-relevant reports: please follow
-[SECURITY.md](./SECURITY.md) and email `security@truealter.com` rather than
-filing a public issue. Non-security bugs and feature requests: email
-`support@truealter.com`.
+**Reporting issues.** Security-relevant reports: please email
+`security@truealter.com` rather than filing a public issue. Non-security bugs
+and feature requests: email `support@truealter.com`.
 
 ## Status
 
@@ -93,7 +92,7 @@ alter-runtime stop
    `https://api.truealter.com/api/v1/mcp` when the DO is unreachable for more than 3
    seconds. Your surfaces never know which path served them.
 
-3. **Exposes three local transports:**
+3. **Exposes** three local transports:
    - **Unix socket** at `/run/user/$UID/alter.sock` (Linux) or
      `~/Library/Application Support/alter/runtime.sock` (macOS) - line-delimited JSON
    - **D-Bus** interface `org.alter.Identity1` on the session bus (Linux) - used by
@@ -177,8 +176,7 @@ asyncio.run(main())
 - **Arch Linux (AUR)** - `alter-runtime`
 - **Homebrew** - `brew install alter-runtime`
 
-Pin an exact version in downstream tooling during the alpha and read the
-CHANGELOG before upgrading.
+Pin an exact version in downstream tooling during the alpha before upgrading.
 
 ## Related projects
 

{alter_runtime-0.4.8 → alter_runtime-0.4.10}/alter_runtime/__init__.py

@@ -6,5 +6,5 @@ device touches. See the package README for an overview.
 
 from alter_runtime.sdk.client import AlterClient
 
-__version__ = "0.4.8"
+__version__ = "0.4.9"
 __all__ = ["AlterClient", "__version__"]

{alter_runtime-0.4.8 → alter_runtime-0.4.10}/alter_runtime/adapters/__init__.py

@@ -14,12 +14,12 @@ runtime component.
 
 from alter_runtime.adapters.claude_jsonl_watcher import ClaudeJsonlWatcher
 from alter_runtime.adapters.git_watcher import GitWatcher
-from alter_runtime.adapters.weave_watcher import WeaveWatcher
+from alter_runtime.adapters.loom_verdict_exporter import LoomVerdictExporter
 from alter_runtime.adapters.worktree_watcher import WorktreeWatcher
 
 __all__ = [
     "ClaudeJsonlWatcher",
     "GitWatcher",
-    "WeaveWatcher",
+    "LoomVerdictExporter",
     "WorktreeWatcher",
 ]

{alter_runtime-0.4.8 → alter_runtime-0.4.10}/alter_runtime/adapters/claude_jsonl_watcher.py

@@ -4,7 +4,7 @@ Watches the per-project ``*.jsonl`` transcript files under Claude Code's
 home projects directory with ``watchdog``.
 On modification, reads new lines from the persisted byte offset, parses each
 via the privacy-hard-stop ``parse_assistant_line`` function, and POSTs
-batches to the ALTER backend token-usage audit endpoint.
+batches to the ~alter backend token-usage audit endpoint.
 
 Privacy guarantee
 -----------------
@@ -123,7 +123,7 @@ def parse_assistant_line(record: dict) -> Optional[dict]:
     """Parse one JSONL record and return a token-usage dict, or None.
 
     This is the privacy hard-stop between Claude Code's local transcripts
-    and ALTER's audit database. It is a strict whitelist: the output dict is
+    and ~alter's audit database. It is a strict whitelist: the output dict is
     constructed key-by-key from explicitly named fields. ``record``,
     ``message``, and ``usage`` are NEVER spread. No key beyond the whitelist
     can reach the output.