Repository navigation
pi-warden 1.0.0
pi-warden 1.0.0 is the first stable release. From 1.0 it follows semver for the surface listed under Versioning in the README.
Upgrading from 0.74.1
0.74.1 was the last release on npm. docs/upgrading.md lists what changes for you: two removed settings (now named in a config warning), project files that can only make settings stricter, and the new defaults.
What changed since 0.74.1
- Fixed: a freeze in the credential check. In 0.74.1 the check could take seconds on one long string, and longer as the string grew. Masking also no longer treats a code expression after a credential key as a secret. (#154)
- A cheaper action guard. Jev is asked only when its answer can change what the agent sees, with a smaller request: 48.9% fewer requests and 68.1% fewer input tokens on recorded sessions, while 96.7% of the calls whose answer changed what the agent saw are still asked. (#153)
- Rules at turn start. Before each new user message, one background request names the project rules that apply to it, and the agent gets them at the end of a turn that continues. A prompt no longer waits for Jev. (#152, #157)
- Approval on demand. After a hold, the approval question is asked only for a held call (90.0 to 0.7 per 1,000 judged calls), with the agent's own words of that turn as context. A reply releases a held call only when it approves it and points at that action: wrong releases fell from 45 to 1 in the measured runs. (#160, #161)
- Conscience (beta, off by default). It ranks candidates on the machine before it asks Jev: requests per prompt fell from 2 to 1. (#155)
rmprecision. Removing a scratch directory that the same command created withmktempis no longer held. Home and project paths, other variables, and data moved into a temp path stay held. (#148)- A smaller hold database. A 52,362-row copy shrank from 285.9 MiB to 41.6 MiB, and records of calls that were not held are pruned after 90 days. (#149)
- Fewer false alarms. The run-end rules check skips changes that a pull or merge brought in, the done-check ignores files outside the project, and
/warden testsends one request. (#157) - Removed:
conscience.loadThresholdandlearning.adaptiveThresholds. A config that still sets them loads and names each one in a warning. (#163)
What did not ship is recorded too: working-memory pruning, stale-result stubs, and a hybrid compaction each failed a measured gate. The numbers are in the Calibration section of docs/guards.md.
Full detail, release by release: CHANGELOG.md, sections 0.75.0 to 1.0.0.