tenuo-claude-code 0.6.3__tar.gz → 0.6.4__tar.gz

{tenuo_claude_code-0.6.3 → tenuo_claude_code-0.6.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: tenuo-claude-code
-Version: 0.6.3
+Version: 0.6.4
 Summary: Tenuo governance for Claude Code — warrants, hooks, MCP proxy, and Cloud lifecycle
 Project-URL: Homepage, https://tenuo.ai
 Project-URL: Repository, https://github.com/tenuo-ai/claude-governance
@@ -27,7 +27,7 @@ Requires-Dist: certifi>=2024.0
 Requires-Dist: cryptography>=42.0
 Requires-Dist: mcp<2,>=1.0
 Requires-Dist: pyyaml>=6.0
-Requires-Dist: tenuo<0.3,>=0.2.3
+Requires-Dist: tenuo<0.4,>=0.3.0
 Description-Content-Type: text/markdown
 
 # Tenuo for Claude Code

{tenuo_claude_code-0.6.3 → tenuo_claude_code-0.6.4}/docs/DETAILS.md

@@ -76,7 +76,7 @@ When `subagents:` is declared, you get two layers:
 
 Roles must match a real `subagent_type` (`.claude/agents/<name>.md` frontmatter `name:`, or a built-in); `verify` and `status` check this. Omit `subagents:` for flat coverage: spawns are then audited, not gated, and the subagent runs under the full session warrant.
 
-Changing `subagents:` is a policy change: re-run `tenuo-admin setup` (Cloud) or `init` (local). Note one sharp edge: the bundled `Workflow` harness tool tags its inner calls with an `agent_type` that isn't a declared role, so under `subagents:` those inner calls are denied. Remove `Workflow` from the `allow:` list or omit `subagents:` if you need it. Requires `tenuo` ≥ 0.2.3 and authorizer `0.2.3` (pinned in `cli.py`).
+Changing `subagents:` is a policy change: re-run `tenuo-admin setup` (Cloud) or `init` (local). Note one sharp edge: the bundled `Workflow` harness tool tags its inner calls with an `agent_type` that isn't a declared role, so under `subagents:` those inner calls are denied. Remove `Workflow` from the `allow:` list or omit `subagents:` if you need it. Requires `tenuo` ≥ 0.3.0 and authorizer `0.3.0` (pinned in `cli.py`).
 
 ## Dry-run mode (`mode: dry-run`)
 

{tenuo_claude_code-0.6.3 → tenuo_claude_code-0.6.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "tenuo-claude-code"
-version = "0.6.3"
+version = "0.6.4"
 description = "Tenuo governance for Claude Code — warrants, hooks, MCP proxy, and Cloud lifecycle"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -23,7 +23,7 @@ classifiers = [
     "Topic :: Software Development :: Libraries :: Python Modules",
 ]
 dependencies = [
-    "tenuo>=0.2.3,<0.3",
+    "tenuo>=0.3.0,<0.4",
     "mcp>=1.0,<2",
     "PyYAML>=6.0",
     "certifi>=2024.0",

{tenuo_claude_code-0.6.3 → tenuo_claude_code-0.6.4}/src/tenuo_claude_code/__init__.py

@@ -1,3 +1,3 @@
 """Tenuo governance for Claude Code — CLI, hooks, and MCP proxy."""
 
-__version__ = "0.6.3"
+__version__ = "0.6.4"

{tenuo_claude_code-0.6.3 → tenuo_claude_code-0.6.4}/src/tenuo_claude_code/authorizer_runtime.py

@@ -23,7 +23,7 @@ from typing import Callable
 
 import certifi
 
-DEFAULT_IMAGE = "tenuo/authorizer:0.2.3"
+DEFAULT_IMAGE = "tenuo/authorizer:0.3.0"
 DEFAULT_AUTHORIZER_PORT = 9090
 AUTHORIZER_PORT_ENV = "TENUO_AUTHORIZER_PORT"
 LEGACY_AUTHORIZER_PORT_ENV = "PORT"

{tenuo_claude_code-0.6.3 → tenuo_claude_code-0.6.4}/src/tenuo_claude_code/cli.py

@@ -354,7 +354,7 @@ POP_HEADER = "X-Tenuo-PoP"
 # The authorizer ships as a published container image (Docker Hub), pinned in
 # lockstep with the `tenuo` PyPI package. Override with TENUO_AUTHORIZER_IMAGE or
 # an `authorizer.image` key in tenuo.yaml.
-DEFAULT_AUTHZ_IMAGE = "tenuo/authorizer:0.2.3"
+DEFAULT_AUTHZ_IMAGE = "tenuo/authorizer:0.3.0"
 
 # Claude tool -> (capability, primary arg, Claude input field for that arg)
 #
@@ -1271,7 +1271,7 @@ def _parse_connect_token(raw: str) -> dict:
     except ImportError as e:
         raise SystemExit(
             "TENUO_CONNECT_TOKEN requires the tenuo_core extension "
-            "(bundled with tenuo>=0.2.3)."
+            "(bundled with tenuo>=0.3.0)."
         ) from e
     except Exception as e:
         raise SystemExit(f"Invalid TENUO_CONNECT_TOKEN: {e}") from e

{tenuo_claude_code-0.6.3 → tenuo_claude_code-0.6.4}/tests/test_authorizer_runtime.py

@@ -119,7 +119,7 @@ def test_install_authorizer_skips_when_current(tmp_path, monkeypatch):
     managed.parent.mkdir()
     managed.write_bytes(b"fake")
     with mock.patch.object(art, "managed_binary_path", return_value=managed):
-        with mock.patch.object(art, "query_binary_version", return_value="0.2.3+authz.3"):
+        with mock.patch.object(art, "query_binary_version", return_value="0.3.0+authz.3"):
             with mock.patch.object(art, "download_release_binary") as dl:
                 result = art.install_authorizer(force=False)
                 assert result == managed
@@ -182,7 +182,7 @@ def test_install_authorizer_cmd_without_project(tmp_path, monkeypatch):
     fake.parent.mkdir()
     fake.write_bytes(b"fake")
     monkeypatch.setattr(art, "install_authorizer", lambda *a, **kw: fake)
-    monkeypatch.setattr(art, "query_binary_version", lambda p: "0.2.3+authz.3")
+    monkeypatch.setattr(art, "query_binary_version", lambda p: "0.3.0+authz.3")
     cli.main()