v0.2.0

v0.2.0 - Node 22 is the floor

Breaking changes: the declared Node floor moves from 20 to 22. Node 20
reached end of life on 2026-04-30, and engines >=20 told consumers that running
there was sanctioned. Be exact about what this does: npm checks engines and
emits EBADENGINE, but it is a WARNING and the install still proceeds. It is a
refusal only where you set engine-strict=true; pnpm refuses by default. No
source changed, so the code would most likely still run on Node 20 -- what
changed is that it is no longer claimed to.

Tested on Node 22, 24 and 26, on Linux and Windows.

This release also corrects the README, which said the package was
private while coordinated parity work was in progress. It is published, and
has been. The README ships inside the tarball and is the npm page, so that
sentence was being served to everyone who looked.

v0.1.0

v0.1.0 - workspace file access for the TypeScript port

@particle-academy/prism-workspace gives an agent scoped file access.

THE GUARD IS THE PRODUCT. Path traversal, symlink escape and absolute-path
escape are refused, and the corpus asks what can still be reached after the
check rather than whether a well-behaved path is allowed -- a guard that only
lets good input through passes identically to a guard that lets everything
through.

CONFORMANCE. The path-guard corpus agrees across PHP, TypeScript and Python.

This is the first published version, and 0.1.0 is meant literally: a focused,
working slice rather than a 1.0 in disguise.

It is published from CI through npm trusted publishing, with a provenance
attestation you can verify. The 0.0.0 that claimed this name was hand-published
and carries none, which is exactly why it was burned rather than used.