code-puppy-core-plugins 0.0.9__tar.gz → 0.0.11__tar.gz

{code_puppy_core_plugins-0.0.9 → code_puppy_core_plugins-0.0.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: code-puppy-core-plugins
-Version: 0.0.9
+Version: 0.0.11
 Summary: Official plugin bundle for Code Puppy
 Project-URL: Repository, https://github.com/mpfaffenberger/code_puppy_core_plugins
 Project-URL: Homepage, https://github.com/mpfaffenberger/code_puppy_core_plugins

{code_puppy_core_plugins-0.0.9 → code_puppy_core_plugins-0.0.11}/code_puppy_core_plugins/shell_safety/register_callbacks.py

@@ -4,6 +4,8 @@ This module registers a callback that intercepts shell commands in yolo_mode
 and assesses their safety risk before execution.
 """
 
+import inspect
+import logging
 from typing import Any, Dict, Optional
 
 from code_puppy.callbacks import register_callback
@@ -19,6 +21,8 @@ from code_puppy_core_plugins.shell_safety.command_cache import (
 )
 from code_puppy.tools.command_runner import ShellSafetyAssessment
 
+logger = logging.getLogger(__name__)
+
 # OAuth model prefixes - these models have their own safety mechanisms
 OAUTH_MODEL_PREFIXES = (
     "claude-code-",  # Anthropic OAuth
@@ -97,20 +101,19 @@ async def shell_safety_callback(
         None if command is safe to proceed
         Dict with rejection info if command should be blocked
     """
-    # Skip safety checks for OAuth models - they have their own safety mechanisms
-    current_model = get_global_model_name()
-    if is_oauth_model(current_model):
-        return None
+    try:
+        # Only check safety in yolo_mode - otherwise the user reviews manually.
+        # A failure to read this setting must block rather than become approval,
+        # including for OAuth models checked below.
+        if not get_yolo_mode():
+            return None
 
-    # Only check safety in yolo_mode - otherwise user is reviewing manually
-    yolo_mode = get_yolo_mode()
-    if not yolo_mode:
-        return None
+        # Skip safety checks for OAuth models - they have their own mechanisms.
+        if is_oauth_model(get_global_model_name()):
+            return None
 
-    # Get configured risk threshold
-    threshold = get_safety_permission_level()
+        threshold = get_safety_permission_level()
 
-    try:
         # Check cache first (fast path - no LLM call)
         cached = get_cached_assessment(command, cwd)
 
@@ -179,24 +182,45 @@ async def shell_safety_callback(
         # Command is within acceptable risk threshold - remain silent
         return None  # Allow command to proceed
 
-    except Exception as e:
-        # On any error, fail safe by blocking the command
+    except Exception as exc:
+        # On any error, fail safe by blocking the command. This includes config
+        # and model reads above the assessment-specific logic.
+        try:
+            logger.warning(
+                "Shell-safety assessment unavailable (%s)", type(exc).__name__
+            )
+        except Exception:
+            pass
         error_msg = (
-            f"🛑 Command blocked (risk HIGH > permission {threshold.upper()}).\n"
-            f"Reason: Safety assessment error: {str(e)}\n"
-            f"Override: /set yolo_mode true or /set safety_permission_level high"
+            "\U0001f6d1 Command blocked because shell-safety configuration or model "
+            "was unavailable.\n"
+            "Reason: Safety assessment was unavailable.\n"
+            "Next step: check logs or run the command manually outside YOLO mode."
         )
         return {
             "blocked": True,
             "risk": "high",
-            "reasoning": f"Safety assessment error: {str(e)}",
+            "reasoning": "Safety assessment was unavailable.",
             "error_message": error_msg,
         }
 
 
 def register():
     """Register the shell safety callback."""
-    register_callback("run_shell_command", shell_safety_callback)
+    try:
+        parameters = inspect.signature(register_callback).parameters
+    except (TypeError, ValueError):
+        parameters = {}
+
+    fail_closed_parameter = parameters.get("fail_closed")
+
+    if fail_closed_parameter is not None:
+        # An explicit parameter is the host's compatibility contract; signature
+        # inspection cannot verify how a wrapper implements it.
+        register_callback("run_shell_command", shell_safety_callback, fail_closed=True)
+    else:
+        # A **kwargs adapter does not prove the host implements fail_closed.
+        register_callback("run_shell_command", shell_safety_callback)
 
 
 # Auto-register the callback when this module is imported

{code_puppy_core_plugins-0.0.9 → code_puppy_core_plugins-0.0.11}/code_puppy_core_plugins/web_retriever_skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: web-retriever
 description: Use before handling web scraping, browser automation, crawling, structured data extraction, authenticated or interactive website workflows, monitoring pages for changes, or website screenshots. Delegates browser work to the web-retriever agent; not for test assertions or visual QA.
-version: "1.1"
+version: "1.2"
 author: code-puppy
 tags:
   - web
@@ -28,6 +28,10 @@ Use `invoke_agent(agent_name="web-retriever", ...)` for:
 - any workflow that needs browser rendering or interaction.
 
 Give the sub-agent a concrete target, desired output, format, and constraints.
+Web Retriever no longer writes a file on its own initiative for open-ended
+extractions -- say explicitly whether you want the result **saved to a
+file** (and where/what format) or **returned inline** in its response, so
+its output matches what the calling workflow expects.
 Tell it not to delegate further when the task should remain narrowly scoped.
 If continuing the same workflow, reuse the full `session_id` returned by the
 first invocation. Use a new kebab-case base ID for a separate workflow.
@@ -39,7 +43,8 @@ invoke_agent(
     agent_name="web-retriever",
     prompt=(
         "Extract every release title, date, and URL from <target>, following "
-        "pagination. Return JSON and report incomplete rows. Do not delegate "
+        "pagination. Return the results as JSON directly in your response "
+        "(do not write a file). Report incomplete rows. Do not delegate "
         "further."
     ),
     session_id="release-page-extraction",
@@ -105,3 +110,9 @@ mind—a famously reliable distributed-systems protocol.
 - Ask for confirmation before consequential submissions, purchases, deletes,
   or other irreversible website actions.
 - Report access blockers and incomplete or malformed extracted rows plainly.
+- Web Retriever asks before writing an unrequested file for large,
+  open-ended extractions with no output format specified; it defaults to
+  answering inline when it can't ask (for example, when it's running as a
+  sub-agent, where interactive confirmation is unavailable). State your file
+  vs. inline preference up front in the delegation prompt rather than relying
+  on it to guess.

{code_puppy_core_plugins-0.0.9 → code_puppy_core_plugins-0.0.11}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "code-puppy-core-plugins"
-version = "0.0.9"
+version = "0.0.11"
 description = "Official plugin bundle for Code Puppy"
 readme = "README.md"
 requires-python = ">=3.11,<3.15"