fullstop 0.2.1__tar.gz → 0.2.2__tar.gz

{fullstop-0.2.1 → fullstop-0.2.2}/PKG-INFO

@@ -1,8 +1,10 @@
 Metadata-Version: 2.4
 Name: fullstop
-Version: 0.2.1
+Version: 0.2.2
 Summary: A zero-dependency Python runtime for always-on agents: identity manifests, a default-deny policy gate with human approval, a fenced tool-call protocol, a hash-chained activity log, and crash-safe checkpoint/resume with replay
 License: MIT
+Project-URL: Homepage, https://www.321ai.xyz
+Project-URL: Repository, https://github.com/321-AI-Labs/fullstop
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE

{fullstop-0.2.1 → fullstop-0.2.2}/fullstop/__init__.py

@@ -5,4 +5,4 @@ package deliberately exports nothing but its version; import submodules
 directly.
 """
 
-__version__: str = "0.2.1"
+__version__: str = "0.2.2"

{fullstop-0.2.1 → fullstop-0.2.2}/fullstop/tools/__init__.py

@@ -4,6 +4,7 @@ Threads the fetch seam (tests/smoke inject a fake; the CLI passes None ->
 default real fetch) and the credential env scrubbing for shell children.
 """
 
+import os
 from pathlib import Path
 from typing import Callable
 
@@ -26,6 +27,16 @@ def build_registry(
     fetch: Callable[[str, float], tuple[int, str, bytes]] | None = None,
     scrub_env: tuple[str, ...] = (),
 ) -> ToolRegistry:
+    # Canonicalize the root ONCE, here at the composition root: every
+    # filesystem tool stores this spelling and compares rel_posix(root,
+    # resolved) against it, while resolve_in_sandbox returns
+    # realpath-normalized targets. A root spelled through an 8.3 short name
+    # (GitHub Windows runners: C:\Users\RUNNER~1) or a junction/symlink
+    # differs from its realpath, so every write-equality check would fail
+    # closed with "path resolves elsewhere in workspace" (the Windows CI
+    # red of 2026-09-30..2026-10-19). User-supplied PATHS still fail closed
+    # on unusual spellings; the root is harness config, not user input.
+    sandbox_root = Path(os.path.realpath(sandbox_root))
     registry = ToolRegistry(verify=verify)
     registry.register(FileReadTool(sandbox_root, redactor, policy))
     registry.register(FileWriteTool(sandbox_root, redactor, policy))

{fullstop-0.2.1 → fullstop-0.2.2}/fullstop.egg-info/PKG-INFO

@@ -1,8 +1,10 @@
 Metadata-Version: 2.4
 Name: fullstop
-Version: 0.2.1
+Version: 0.2.2
 Summary: A zero-dependency Python runtime for always-on agents: identity manifests, a default-deny policy gate with human approval, a fenced tool-call protocol, a hash-chained activity log, and crash-safe checkpoint/resume with replay
 License: MIT
+Project-URL: Homepage, https://www.321ai.xyz
+Project-URL: Repository, https://github.com/321-AI-Labs/fullstop
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE

{fullstop-0.2.1 → fullstop-0.2.2}/pyproject.toml

@@ -1,8 +1,12 @@
 [project]
 name = "fullstop"
-version = "0.2.1"
+version = "0.2.2"
 description = "A zero-dependency Python runtime for always-on agents: identity manifests, a default-deny policy gate with human approval, a fenced tool-call protocol, a hash-chained activity log, and crash-safe checkpoint/resume with replay"
 readme = "README.md"
 license = { text = "MIT" }
 requires-python = ">=3.11"
 dependencies = []
+
+[project.urls]
+Homepage = "https://www.321ai.xyz"
+Repository = "https://github.com/321-AI-Labs/fullstop"