tweek 0.4.0__py3-none-any.whl → 0.4.2__py3-none-any.whl

tweek/security/rate_limiter.py

@@ -297,6 +297,101 @@ class CircuitBreaker:
         return metrics
 
 
+class PersistentCircuitBreaker(CircuitBreaker):
+    """Circuit breaker with JSON file persistence across process invocations.
+
+    Uses fcntl.flock for safe concurrent access. Falls back to fresh
+    in-memory state if the persistence file is corrupted or inaccessible.
+    """
+
+    def __init__(
+        self,
+        config: Optional[CircuitBreakerConfig] = None,
+        state_path: Optional[Path] = None,
+    ):
+        super().__init__(config)
+        self._state_path = state_path or (Path.home() / ".tweek" / ".circuit_breaker.json")
+
+    def _load_states(self) -> None:
+        """Load persisted states from JSON file under flock."""
+        import fcntl
+        try:
+            self._state_path.parent.mkdir(parents=True, exist_ok=True)
+            if not self._state_path.exists():
+                return
+            with open(self._state_path, "r") as f:
+                fcntl.flock(f, fcntl.LOCK_SH)
+                try:
+                    raw = json.load(f)
+                finally:
+                    fcntl.flock(f, fcntl.LOCK_UN)
+            for key, data in raw.items():
+                self._states[key] = CircuitBreakerState(
+                    state=CircuitState(data.get("state", "closed")),
+                    failure_count=data.get("failure_count", 0),
+                    success_count=data.get("success_count", 0),
+                    last_failure_time=(
+                        datetime.fromisoformat(data["last_failure_time"])
+                        if data.get("last_failure_time") else None
+                    ),
+                    last_state_change=(
+                        datetime.fromisoformat(data["last_state_change"])
+                        if data.get("last_state_change") else None
+                    ),
+                    half_open_requests=data.get("half_open_requests", 0),
+                )
+        except (json.JSONDecodeError, OSError, KeyError, ValueError):
+            pass  # Corrupt file — start fresh
+
+    def _save_states(self) -> None:
+        """Persist current states to JSON file under flock."""
+        import fcntl
+        try:
+            self._state_path.parent.mkdir(parents=True, exist_ok=True)
+            serializable = {}
+            for key, state in self._states.items():
+                serializable[key] = {
+                    "state": state.state.value,
+                    "failure_count": state.failure_count,
+                    "success_count": state.success_count,
+                    "last_failure_time": (
+                        state.last_failure_time.isoformat()
+                        if state.last_failure_time else None
+                    ),
+                    "last_state_change": (
+                        state.last_state_change.isoformat()
+                        if state.last_state_change else None
+                    ),
+                    "half_open_requests": state.half_open_requests,
+                }
+            with open(self._state_path, "w") as f:
+                fcntl.flock(f, fcntl.LOCK_EX)
+                try:
+                    json.dump(serializable, f)
+                finally:
+                    fcntl.flock(f, fcntl.LOCK_UN)
+        except OSError:
+            pass  # Best-effort persistence
+
+    def record_success(self, key: str = "default") -> CircuitState:
+        self._load_states()
+        result = super().record_success(key)
+        self._save_states()
+        return result
+
+    def record_failure(self, key: str = "default") -> CircuitState:
+        self._load_states()
+        result = super().record_failure(key)
+        self._save_states()
+        return result
+
+    def can_execute(self, key: str = "default") -> Tuple[bool, CircuitState, Optional[int]]:
+        self._load_states()
+        result = super().can_execute(key)
+        self._save_states()
+        return result
+
+
 class RateLimiter:
     """
     Rate limiter for detecting resource theft and abuse patterns.
@@ -459,11 +554,14 @@ class RateLimiter:
             RateLimitResult with allowed status and any violations
         """
         if not session_id:
-            # No session ID - generate unique one per process invocation
+            # No session ID - generate unique one per invocation.
+            # os.urandom(16) adds 128 bits of entropy so each call is unique
+            # even with identical PID/CWD.
             import os as _os
             import uuid as _uuid
             session_id = hashlib.sha256(
                 f"tweek-{_os.getpid()}-{_os.getcwd()}-{_uuid.getnode()}".encode()
+                + _os.urandom(16)
             ).hexdigest()[:16]
 
         # Check circuit breaker first

tweek/skills/guard.py

@@ -36,19 +36,19 @@ PROTECTED_SKILL_PATHS = [
 
 # Regex patterns for detecting skill-related shell commands
 _SKILL_DIR_PATTERNS = [
-    # Moving/copying out of jail
+    # Moving/copying out of jail (expanded tool list)
     re.compile(
-        r"(cp|mv|rsync|ln)\s+.*\.tweek/skills/(jail|chamber)",
+        r"(cp|mv|rsync|ln|install|dd|tee)\s+.*\.tweek/skills/(jail|chamber)",
         re.IGNORECASE,
     ),
-    # Moving/copying into Claude's skill directories
+    # Moving/copying into Claude's skill directories (expanded tool list)
     re.compile(
-        r"(cp|mv|rsync|ln)\s+.*\.claude/skills/",
+        r"(cp|mv|rsync|ln|install|dd|tee)\s+.*\.claude/skills/",
         re.IGNORECASE,
     ),
-    # Moving/copying into OpenClaw's skill directories
+    # Moving/copying into OpenClaw's skill directories (expanded tool list)
     re.compile(
-        r"(cp|mv|rsync|ln)\s+.*\.openclaw/workspace/skills/",
+        r"(cp|mv|rsync|ln|install|dd|tee)\s+.*\.openclaw/workspace/skills/",
         re.IGNORECASE,
     ),
     # Symlink attacks targeting skill directories
@@ -64,7 +64,7 @@ _SKILL_DIR_PATTERNS = [
         r"ln\s+(-sf?\s+)?.*\.openclaw/workspace/skills",
         re.IGNORECASE,
     ),
-    # Direct creation of SKILL.md via shell
+    # Direct creation of SKILL.md via shell (redirect)
     re.compile(
         r"(echo|cat|tee|printf)\s+.*>\s*.*\.claude/skills/.*SKILL\.md",
         re.IGNORECASE,
@@ -73,6 +73,29 @@ _SKILL_DIR_PATTERNS = [
         r"(echo|cat|tee|printf)\s+.*>\s*.*\.openclaw/workspace/skills/.*SKILL\.md",
         re.IGNORECASE,
     ),
+    # Pipe-to-tee targeting skill directories
+    re.compile(
+        r"\|\s*tee\s+.*\.(claude|tweek|openclaw).*skills",
+        re.IGNORECASE,
+    ),
+    # Interpreter one-liner writes targeting skill directories
+    re.compile(
+        r"python3?\s+-c\s+.*open\s*\(.*\.(claude|tweek|openclaw).*skills",
+        re.IGNORECASE,
+    ),
+    re.compile(
+        r"perl\s+-e\s+.*open\s*\(.*\.(claude|tweek|openclaw).*skills",
+        re.IGNORECASE,
+    ),
+    re.compile(
+        r"ruby\s+-e\s+.*File\.(write|open).*\.(claude|tweek|openclaw).*skills",
+        re.IGNORECASE,
+    ),
+    # Shell variable substitution targeting skill directories
+    re.compile(
+        r"\$(\(|HOME|{).*\.(claude|tweek|openclaw).*skills/(jail|chamber)",
+        re.IGNORECASE,
+    ),
 ]
 
 # Patterns for detecting skill downloads

{tweek-0.4.0.dist-info → tweek-0.4.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tweek
-Version: 0.4.0
+Version: 0.4.2
 Summary: Defense-in-depth security for AI coding assistants - protect credentials, code, and system from prompt injection attacks
 Author: Tommy Mancino
 License-Expression: Apache-2.0

{tweek-0.4.0.dist-info → tweek-0.4.2.dist-info}/RECORD

@@ -1,13 +1,13 @@
-tweek/__init__.py,sha256=ObqNjfhUoPC8rXfPtT85pqrOlKoSn4_-4fKQF5cynCQ,359
+tweek/__init__.py,sha256=t1KCgD0YKKLEBTFoWw7b7BKP6w2BJ7Oq1vtoXokj2R8,359
 tweek/_keygen.py,sha256=UapwIKNSwaRWdqHoJoF3hmKuiux6aIiFGe8WVskTbI8,1286
 tweek/audit.py,sha256=AzjIpy6Jc-WzTrda9lb3nZbyaR_SDWUxo04pObJP2MQ,8868
 tweek/cli.py,sha256=OOZrpcrwDGbmaHxIyvBw7MoVSlEdrFNAgIwWHI56p5M,2976
 tweek/cli_config.py,sha256=rSQTkw0JAqm6w02Ah2_hiJ-wIxhnrjTgvFuw2A39qfs,24525
 tweek/cli_configure.py,sha256=fHm2sWxjUWFu7ulup7T-zrQ3LYiYg_1Vf-m3E5hoKd8,14603
-tweek/cli_core.py,sha256=0mgcJ_ZduuloOhyIn4ecTHROMtz_pDcAdlew-E45DPk,26843
+tweek/cli_core.py,sha256=sq-zIX_rrDB3KsaLcehsYHKUsAQrqHwsAvHgxN7iHiQ,27643
 tweek/cli_dry_run.py,sha256=8DBx3qKAZHY8VA6MsbsGBs6EyDGFxKsrtmuNaHJ22C8,14335
 tweek/cli_helpers.py,sha256=_8aVj8e67MrP61ao7_AaEQSi9AfJQxW3eNvnjbSWT7g,16347
-tweek/cli_install.py,sha256=5AaxZmOpDk9y8Ursy_CaU8JYn4mtMPWNtIhWNpb6an8,74111
+tweek/cli_install.py,sha256=k0apx-yJIsepaPncvKVc2OZWAbKg_ElEvKJ5L2Hb0f4,85019
 tweek/cli_logs.py,sha256=uoJBKb85EYcIQnXxNfh15w235u9UWP1he-RlwnITWuA,10776
 tweek/cli_mcp.py,sha256=mIKTUqTKLlVYc9054LdjfL-maiVAabPFkb_sLtoS0Gk,4787
 tweek/cli_memory.py,sha256=Sw2TOt7RGsXBoH_q13bQjUK3WyvOy49bXefZ7atoaCY,11895
@@ -17,16 +17,16 @@ tweek/cli_protect.py,sha256=q6VhmR2vnozdybUXJEnaofx0FVZSoQq39gWVh5xmjnc,22398
 tweek/cli_proxy.py,sha256=J63CuL0bg2UVHbdavDgIcqiC1C8JS0kNG8pqHEAx9mw,14289
 tweek/cli_security.py,sha256=FpPOY0YsSY5kOc9aNy8QBi9h4fpmQ7wiX3cKtRYmLzg,8482
 tweek/cli_skills.py,sha256=N2D184i5gajKjrLdQuWxhdiXWGiE4NGCvPahMDZvliI,9045
-tweek/cli_uninstall.py,sha256=sRDbtYxbJ9fnt-fBypEZOCR_UdTTo09RozOI_Xlo1Dc,21463
+tweek/cli_uninstall.py,sha256=H6y7QgEMw_sCCerNCJHws4XI727H4UPtiwtjx5ASL88,24619
 tweek/cli_vault.py,sha256=j2HUurcOCOUgObfnSiMrcJQ8k3BUs1aD-YqCNZzp98I,11457
-tweek/diagnostics.py,sha256=aYtdLeTulbYF3KzIt-oqTDucYNJrBL85rsPXlPM07bg,27487
+tweek/diagnostics.py,sha256=_7CYp6kLrS4iaA_101MAWhcO-yoFtQulCmXR5vt22EQ,31996
 tweek/licensing.py,sha256=_t_X3wgd6F0VEoLrOags-AE2k3IZXw3WhWXFuQU4UYA,11703
 tweek/config/__init__.py,sha256=ENwimeLZd2gSJXpkASMY45hbMUDn2RwM-Zl_RMvpCbQ,772
 tweek/config/allowed_dirs.yaml,sha256=eHmX3QEJ-LBVdwH5tQBFeTFnlRewLvRG2jLJwBh3lOY,841
-tweek/config/families.yaml,sha256=QAQD-6pnCOdiNXpXUPyeAKkYMlRcQmUpCMORkDeGA1Y,18348
+tweek/config/families.yaml,sha256=4MhJ2ikd1lK6EAbdRtjE083MX2-CD6mInvwiI7nJcIE,18796
 tweek/config/manager.py,sha256=cs77QiAShd91RTMGxKgWUmz7qluRfQq0PogCpfxUAPA,41256
-tweek/config/models.py,sha256=RbVjC2pxnkrBKanS6QGDrHwPVkmss5ouG_dqAHf_C3Q,10018
-tweek/config/patterns.yaml,sha256=5HHLGGCb0KmEAEo9KPc3eja0ykYjy53x66D-u7WY6No,86749
+tweek/config/models.py,sha256=wrQGSZGVCJ5-ue5JdxGM0raMGYoo61btKhb_IEgWNb8,11157
+tweek/config/patterns.yaml,sha256=N77_xaPFeXOTCCpSIGaXlGh3h_E-YA2F6xyII5ks9mU,90742
 tweek/config/templates.py,sha256=aIGD3bDfx-J6vVBKQTNZr3IIh-O9yjcddRB8l1BxZPs,4440
 tweek/config/tiers.yaml,sha256=gVQ80iOqirHzlJI9YEzpi6alqqmNtNNZh1nA4DQYPPs,10298
 tweek/config/templates/config.yaml.template,sha256=i3QGrIuNjF9kqJNoMJmr62mja_8Rh9gMsc-YM6YzNSE,9120
@@ -34,18 +34,21 @@ tweek/config/templates/env.template,sha256=MCnGhE6WHU5Bk9HO6dkPfBtkur2QyK69cxzHU
 tweek/config/templates/overrides.yaml.template,sha256=T9CjpPayth_1bDH-iL0mSdTTMi27GmC8cNxnBaxRNWk,4170
 tweek/config/templates/tweek.yaml.template,sha256=jdSE7e3JeS9vOWEGWK2VCr66HLxSSFpOkNNUcZQQrkg,777
 tweek/hooks/__init__.py,sha256=GcgDjPdhZayxmyZ4-GfBa-ISARNtt9087RsuprRq2-s,54
-tweek/hooks/break_glass.py,sha256=GNMhCtLWPylNMlQ5QfsoUkEjgIT1Uk1Ik7HvRWeE5N8,4636
+tweek/hooks/break_glass.py,sha256=xa7lDQXFRC08a2H5AZxh35NAGCLGCfwyXX0sdY00DVI,5506
 tweek/hooks/feedback.py,sha256=uuA4opHYyBHC5sElBz-fr2Je3cg2DAv-aRHvETZcag0,6555
-tweek/hooks/overrides.py,sha256=9WfTfh5R_IstoR7SKlEIq-mgRbUTnnIiJYSTDV3_ekI,18762
-tweek/hooks/post_tool_use.py,sha256=NVOgcd7wn5BL5TYQiTwvMFxy_68dWp5z6FoRYXypfaU,19195
-tweek/hooks/pre_tool_use.py,sha256=qMGaRamkBUEXZFTYdiqFgmxLiTeH2ON4FHvcGKKxazg,76765
+tweek/hooks/overrides.py,sha256=z2E_XVu247LmecX82bVH2S5mjCcoxaLx_zuuBgDMMUc,19526
+tweek/hooks/post_tool_use.py,sha256=aBte4ltm2EiNo0w7K9ZMN6oWv09S9EyVqbRgUkRrRco,19328
+tweek/hooks/pre_tool_use.py,sha256=ZGGzDj2s2YVQmn6wy0S6Gk9VRloHYaxFZXx42RJcaaU,77483
+tweek/hooks/wrapper_post_tool_use.py,sha256=ZVIS9yXVouurqoIr8nBHPKepuMSFsHKwCh6Xv-QD6B8,3750
+tweek/hooks/wrapper_pre_tool_use.py,sha256=7f3sTtSF2eQCM94JQ_zm8NHlcgplpKb7lxE4Z9t8qbo,3731
 tweek/integrations/__init__.py,sha256=sl7wFwbygmnruugX4bO2EUjoXxBlCpzTKbj-1zHuUPg,78
-tweek/integrations/openclaw.py,sha256=uSP_FPG5BFnk8o6Z-1PlXB8od4OX0p0nGN8xRof9XsE,16955
-tweek/integrations/openclaw_server.py,sha256=Ah7wxsxKE2lQmIdlrFINvt5jW9U_bqqERfG3X2N5Aps,12533
+tweek/integrations/openclaw.py,sha256=4zeRHlq-W_b-jd5Hj3lHJdDkneS55aFE8A6NfpZG954,17333
+tweek/integrations/openclaw_detection.py,sha256=QszOrZ6B8regPiWJIScbqlS7hr0tEIP2V_XS88nw3v8,4132
+tweek/integrations/openclaw_server.py,sha256=88kUdzO58a3FKaeBRp9AfK_UBYgfFFRezZYTabkhI6Y,20997
 tweek/logging/__init__.py,sha256=-HUdhMuDlGUwG3v2KE7xH7cClOSQ5kZIDcVO4cybVLI,228
 tweek/logging/bundle.py,sha256=eDP0Is-hna18goaHmvexXpoNAlFhmWoMG-STTLZ19_w,11911
 tweek/logging/json_logger.py,sha256=zXOsFAufj3MF0TboM5zSS7V8uNBDJea7YkJHR-uQgBA,4698
-tweek/logging/security_log.py,sha256=BwHDdrN0VCpqssStvsZdASFnyxVpANCq9xiSkFsEFFk,28486
+tweek/logging/security_log.py,sha256=x1xdDWhBvUi6NAGefxwLvmr6OxqFEO-_d1iBIlL7Qaw,29163
 tweek/mcp/__init__.py,sha256=UbBOrb15XrVIcyKoNLXos2N63Xw2_EeyKnaALkjfnME,610
 tweek/mcp/approval.py,sha256=WIFQi4ryXEFtgQyzQIshwgP5h_Th7Cxepx9NIhf2o_4,17885
 tweek/mcp/approval_cli.py,sha256=8WtmJF7KTLmdEF5wHqENaUJUzKEQej4CjRtFey4RcGg,11281
@@ -58,12 +61,12 @@ tweek/mcp/clients/gemini.py,sha256=IFGClXc2ytrheah0Ja7vrMLVDEhORcUdQWnEo29BOVE,5
 tweek/memory/__init__.py,sha256=rUe3cc-Nh-8k7kEMHzF8ao2QRt-tnI9kZQAtU8GQT5M,843
 tweek/memory/provenance.py,sha256=zuVHRI9Krj4-YCEj-OJ_4P7xnmAHDelIyrN34446fhw,15628
 tweek/memory/queries.py,sha256=MsUTMOai_iyVSfAmiRFcb_-E9KF2kah1WdeXOa27u-A,6712
-tweek/memory/safety.py,sha256=Mv9R2bQxX2TcitIsgugY7gZmaWjxEahTyVTRTTr1ePA,5416
+tweek/memory/safety.py,sha256=j9f8-sKqenSspPm9RBSLAQ1C7lnt66Stv0N8LAbello,5584
 tweek/memory/schemas.py,sha256=WD2BIXgEYdG1rjn8MNNS1UWxc2x9bZ_7k736BkJERZg,2125
-tweek/memory/store.py,sha256=Z9MwVsWkz76SncSwxaYmWT3uU4btq4CM-2JIuDkS744,36705
+tweek/memory/store.py,sha256=MEIa-SErCWziAwT6FpnwOYPCDNOliLFp8v525jroYXc,37659
 tweek/platform/__init__.py,sha256=jIwiwsMU297T02JOymjAdvk7QheEJxgDspueV38pJJE,3757
 tweek/plugins/__init__.py,sha256=u2dsiOhUE2WbYArjoeyWbaaO99J0aZJU_Z_X83OzVWw,28437
-tweek/plugins/base.py,sha256=dcx-qjaYE7Dwr36JRNWQaQ1xaDZgb6-T3CTP45j3A24,33445
+tweek/plugins/base.py,sha256=NBa769sv4Ov9DjiaHAmqIdsE2ZWfWswIvmDYNGtU3Pk,33837
 tweek/plugins/git_discovery.py,sha256=BD73T4NMdO34ueYaldWoYPmxlbw9UOxAyAh-KFwtKH0,12259
 tweek/plugins/git_installer.py,sha256=fkMDQ2hn-BEA2Z-_93FiylbSFF1FL1DM3Ud3R-YmYNk,15554
 tweek/plugins/git_lockfile.py,sha256=pFxcqXGnJDefkTEykSmTA9uaiP9eTJuex0yw9xHq5yg,10821
@@ -81,7 +84,7 @@ tweek/plugins/detectors/__init__.py,sha256=v0So6W5CHPoDnQUjUW_3PPaM5pF9F4lXVcsTW
 tweek/plugins/detectors/continue_dev.py,sha256=A69j4l-I5t8WG0TNMYp3ZHxLZ1qesTLIGgFdIuSCx9Y,6848
 tweek/plugins/detectors/copilot.py,sha256=1-y0pZtgPS79hDZdZhVNtOcLcAJ5SOg0_WMUgwVZcBg,8716
 tweek/plugins/detectors/cursor.py,sha256=6OCBQNShHAw9k2Gu93HybYYknu3WlRpxNPluor8KUJA,5805
-tweek/plugins/detectors/openclaw.py,sha256=2VJhGYF3aqQ03703rlv6bqwKLp3j-H-5fSaKyX5zAiM,6731
+tweek/plugins/detectors/openclaw.py,sha256=T5OBUq0fbeC1ECCsTo_3vTfT31oXdkS23RRX95X1bTE,4695
 tweek/plugins/detectors/windsurf.py,sha256=rVzHcjlshExZSc_xrw9mpIg2hSK6aXQjWnh63owmpHg,6917
 tweek/plugins/providers/__init__.py,sha256=CTQ8ayQsgSphN6Ao-a06KcyEdxC9RV3937VD3vmcBcw,805
 tweek/plugins/providers/anthropic.py,sha256=c2NSG22XtgR7IG_JfSR-Tq1haMSuO3tgCbGMY6CKLCU,5732
@@ -90,9 +93,9 @@ tweek/plugins/providers/bedrock.py,sha256=ADIdO7Kpz-kNq78Mq1pQpt8rfX9OIAR3NaMGiA
 tweek/plugins/providers/google.py,sha256=2wIt-lKXGb_vRcEz-_2zLHTyRdT_VFd3RYpEs_Vuxj0,6033
 tweek/plugins/providers/openai.py,sha256=LK3_4UIgj1XBORA2MTEI88DID67_9nXY1i8rbe3Yem0,7522
 tweek/plugins/screening/__init__.py,sha256=KijMffjrD35tbz0RBW4fb8elt36tdrNvlKBVmyeH-OA,1214
-tweek/plugins/screening/heuristic_scorer.py,sha256=CuXR_KEoRbn9nRMdNbjzmA00WvBkp31tQTuS5E2t_sQ,17193
+tweek/plugins/screening/heuristic_scorer.py,sha256=cwFyERka_zIPxvhyv5ewoIlPpUVQFgX9zAS4HV_2cpc,17689
 tweek/plugins/screening/llm_reviewer.py,sha256=DJv4bd5iu0aXtfUyuQ5yb6UTKnyPaY0NW43JraiE90o,5135
-tweek/plugins/screening/local_model_reviewer.py,sha256=SCQDXvd5cq_w6IQP_G3RzOVDy6W2Xco0b4lKeYd14-0,5010
+tweek/plugins/screening/local_model_reviewer.py,sha256=m_TsI3yRjzdMO-4UCk42TLYzm83jpzW5dL2OcddsLc4,5561
 tweek/plugins/screening/pattern_matcher.py,sha256=Zto8ZAJenZoN605LfHvoyNLzqYtJqJg02rH7GaAvPoo,8673
 tweek/plugins/screening/rate_limiter.py,sha256=-Ekh2B5V8fqXErQjhbaR-91Dwr-p6Jrbsw3oJI5FjdY,5671
 tweek/plugins/screening/session_analyzer.py,sha256=Zy_0R3TUG6j5_3Vp6Nor4m8daVEhrB8ybH8GGh9llt8,5061
@@ -112,12 +115,12 @@ tweek/screening/__init__.py,sha256=-QKzhN8TNqEOrooPunbQl_f6133LOXAszmiKyv8V07I,3
 tweek/screening/context.py,sha256=iZeD6-Fm7dNs5wlIu15MlMbIPzeTX_Pe0DUkK5xHpQ0,3030
 tweek/security/__init__.py,sha256=2qkoxVHzWeHdVWYHRYZG479Qpfodl6jNCQu_Wc3i1vM,901
 tweek/security/integrity.py,sha256=QMW5Zu5PaZHC5DLwumnIq7CUOw-iqs_7AMlijLonXj4,2689
-tweek/security/language.py,sha256=690g63NoeKjwxPG0d38USa1w30QtsAohiT2SXBv-ON4,9128
-tweek/security/llm_reviewer.py,sha256=M9qPDx67Nj8ImlfdA57IHvuilj7JCzTaoMzxzslKvBM,53270
-tweek/security/local_model.py,sha256=fqWQOSiAcWVIM1zzy6SosXVh9hNHJbLRzTJPy9I3sFs,10451
+tweek/security/language.py,sha256=HG0gvowEA5hZJ6FAOt-zNEnHA_MDeHb94VxyXqf59mw,9191
+tweek/security/llm_reviewer.py,sha256=Y3qoYMnWBK80vQSttUpiHvUFejjN37DQsDHBkOdNQYU,54478
+tweek/security/local_model.py,sha256=k5G096kj1KGlJqxnMiRlwYd2VapHZINohk-DcFBbo_M,11492
 tweek/security/local_reviewer.py,sha256=0BzFx8U42KucBL14rpUbXZ8zxsu9ALHGhVosVcj0uh0,6890
-tweek/security/model_registry.py,sha256=zi0mYyTzWc6BL2W7Kd1gCLNti0N8OygKpwL94Re8Kzw,13795
-tweek/security/rate_limiter.py,sha256=bY8VIkQ-wCbNOYTLwD4MsMBoHk59zPWeZCkuE8Zntm8,24185
+tweek/security/model_registry.py,sha256=nn4P6dbr-GznhYZF4r5v_7KToZE8BRLyNqVqcp3S5t4,13795
+tweek/security/rate_limiter.py,sha256=xMj9y0Vd_JlJbysKsa3VRmBrlGcKgzaALXmhPTa_oAM,28152
 tweek/security/secret_scanner.py,sha256=G-bbMwsAJD197BEOnZJdn_qphS4RNPK_wpLfkpiLuFU,18774
 tweek/security/session_analyzer.py,sha256=-Ylp583VZ_YJRkN5JZrYpaK1sVbiM6KP7ZwLBzWpiCI,24260
 tweek/skill_template/SKILL.md,sha256=gBk_Ken77scVYeCs8imm1ASnNLDpBl-C0ufgWrrkQIA,10274
@@ -130,17 +133,17 @@ tweek/skills/__init__.py,sha256=DyTvK8n5Lb-idkJhXCVytpiZjNfWveCtNkSL6o8dxHM,1209
 tweek/skills/config.py,sha256=I95wK9CBj_UiHwFuxfE8yRl7cmFiqdY0hXfF3BHP0X8,4782
 tweek/skills/context.py,sha256=15wn3wh_m4n954tsWtf4p8kBdtFmwN18TxPzOaGfGlc,6672
 tweek/skills/fingerprints.py,sha256=YjPsTxqotzGlyMIgfgewSoNDTLU8_-p9fY_a44LJTjU,6027
-tweek/skills/guard.py,sha256=1g3QVFwtW2T04PPCouAAEPxgoweVGEld0WL9eCE80js,8294
+tweek/skills/guard.py,sha256=uZ47YLG3vEVzV_WcFBVJOfkMidGdYCvucDNMhsnre-I,9175
 tweek/skills/isolation.py,sha256=AmGwzD8xh70HL4f5aIrvYGm_ug1hHwu8tZXSAnsKiJk,16547
 tweek/skills/scanner.py,sha256=YlH-yg3_JuwmBvmnpqA4PVfWyNBHaPSjBo6d9Ncuh8k,27574
 tweek/vault/__init__.py,sha256=L408fjdRYL8-VqLEsyyHSO9PkBDhd_2mPIbrCu53YhM,980
 tweek/vault/cross_platform.py,sha256=D4UvX_7OpSo8iRx5sc2OUUWQIk8JHhgeFBYk1MbyIj4,8251
 tweek/vault/keychain.py,sha256=XL18-SUj7HwuqxLXZDViuCH81--KMu68jN9Szn1aeyw,10624
-tweek-0.4.0.dist-info/licenses/LICENSE,sha256=rjoDzr1vAf0bsqZglpIyekU5aewIkCk4jHZZDvVI2BE,15269
-tweek-0.4.0.dist-info/licenses/NOTICE,sha256=taQokyDes5UTRNEC67G-13VmqvUyTOncrrT33pCcWL0,8729
+tweek-0.4.2.dist-info/licenses/LICENSE,sha256=rjoDzr1vAf0bsqZglpIyekU5aewIkCk4jHZZDvVI2BE,15269
+tweek-0.4.2.dist-info/licenses/NOTICE,sha256=taQokyDes5UTRNEC67G-13VmqvUyTOncrrT33pCcWL0,8729
 tweek-openclaw-plugin/node_modules/flatted/python/flatted.py,sha256=UYburBDqkySaTfSpntPCUJRxiBGcplusJM7ECX8FEgA,3860
-tweek-0.4.0.dist-info/METADATA,sha256=CIQC3olKNKfO6OmnpgLHD73kPFhQfuXbZy2eTpLPEAk,11992
-tweek-0.4.0.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
-tweek-0.4.0.dist-info/entry_points.txt,sha256=YXThD6UiF5XQXwqW33sphsvz-Bl4Zm6pm-xq-5wcCYE,1337
-tweek-0.4.0.dist-info/top_level.txt,sha256=jtNcCxjoGXN8IBqEVL0F3LHDrZD_B0S-4XF9-Ur7Pbc,28
-tweek-0.4.0.dist-info/RECORD,,
+tweek-0.4.2.dist-info/METADATA,sha256=zxSNhepswO-jyvEwLeo6NC9I-X-_qL2Do1DUK-FKB20,11992
+tweek-0.4.2.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
+tweek-0.4.2.dist-info/entry_points.txt,sha256=YXThD6UiF5XQXwqW33sphsvz-Bl4Zm6pm-xq-5wcCYE,1337
+tweek-0.4.2.dist-info/top_level.txt,sha256=jtNcCxjoGXN8IBqEVL0F3LHDrZD_B0S-4XF9-Ur7Pbc,28
+tweek-0.4.2.dist-info/RECORD,,