Empirica v1.7.7 Released — Hook fixes, security hardening, docs alignment

[Nubaeon]

What's in v1.7.7

Fixed

• PreCompact hook schema — hookSpecificOutput is not supported by PreCompact events. Switched to systemMessage. This was broken since v1.5.1 but the hook's real work (snapshots, git notes) was unaffected.

Security

• Docker token-gen removed from safe commands — state-changing command no longer classified as noetic in Sentinel
• POSTFLIGHT intelligence layer auth — session-end push now includes Bearer auth header

Changed

• Sentinel noetic allow list — Added ToolSearch, intelligence layer MCP tools, git notes show/git notes list
• Sentinel closed-transaction check — MCP tools now correctly allowed when transaction is closed

Docs

• SENTINEL_GATE_REFERENCE.md: 9 gaps closed
• SESSION_RESOLVER_API.md: deprecated methods marked, phantom function removed
• CHANGELOG: Added Unreleased section + v1.7.2-1.7.4 stubs
• KNOWN_ISSUES: 4 resolved items updated
• README: Docker tags and footer fixed

Install

pip install empirica==1.7.7
# or
docker pull nubaeon/empirica:1.7.7-alpine

Full changelog: https://github.com/Nubaeon/empirica/blob/main/CHANGELOG.md