@caupulican/pi-adaptative 0.80.66 → 0.80.67
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +6 -0
- package/dist/core/agent-session.d.ts.map +1 -1
- package/dist/core/agent-session.js +31 -17
- package/dist/core/agent-session.js.map +1 -1
- package/dist/core/security/untrusted-boundary.d.ts +31 -0
- package/dist/core/security/untrusted-boundary.d.ts.map +1 -0
- package/dist/core/security/untrusted-boundary.js +60 -0
- package/dist/core/security/untrusted-boundary.js.map +1 -0
- package/examples/extensions/custom-provider-anthropic/package-lock.json +2 -2
- package/examples/extensions/custom-provider-anthropic/package.json +1 -1
- package/examples/extensions/custom-provider-gitlab-duo/package.json +1 -1
- package/examples/extensions/sandbox/package-lock.json +2 -2
- package/examples/extensions/sandbox/package.json +1 -1
- package/examples/extensions/with-deps/package-lock.json +2 -2
- package/examples/extensions/with-deps/package.json +1 -1
- package/npm-shrinkwrap.json +12 -12
- package/package.json +4 -4
package/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,9 @@
|
|
|
1
|
+
## [0.80.67] - 2026-06-27
|
|
2
|
+
|
|
3
|
+
### Added
|
|
4
|
+
|
|
5
|
+
- Untrusted-content boundary (security): output from attacker-controllable sources (web/search, subagents, recall, third-party tools) is now structurally fenced in `<untrusted_content>` tags with a random nonce and break-out neutralization, plus an always-on system-prompt rule that the agent must treat such content as data, never instructions — and that boundary actions always need human approval. First-party tools (read/grep/find/ls/edit/write/bash) are trusted and unwrapped.
|
|
6
|
+
|
|
1
7
|
## [0.80.66] - 2026-06-27
|
|
2
8
|
|
|
3
9
|
### Added
|