@erichll/pi-auto-review 0.19.0 → 0.20.1

package/CHANGELOG.md

@@ -1,5 +1,39 @@
 # Changelog
 
+## 0.20.1 - 2026-09-24
+
+- Upgrade the development baseline for `@gotgenes/pi-permission-system` to
+  `^33.1.1` (the runtime peer remains `>=30.0.0`). Version 33.1 changes how
+  permission-system derives its authorizer tool surface and stop-gap
+  `before_agent_start` guidance, while retaining a fail-closed runtime peer
+  check and schema validation.
+- Upgrade the development `@types/node` baseline to `^26.6.2`; the resolved
+  version was already current under the previous range.
+- Keep `typescript` at `6.0.3`, the latest 6.x release. TypeScript 7.0.2
+  remains incompatible with the published-source transform used by the
+  permission-system integration tests.
+- Sync `examples/pi-permission-system.config.example.json` with the current
+  tool split: Pencil and `mcp__pencil`, `update_plan`, and the complete goal
+  lifecycle are explicitly allowed. The example passes the permission-system
+  33.1.1 runtime schema.
+- Type checking and the full package suite pass on the upgraded baselines
+  (186 tests).
+
+## 0.20.0 - 2026-09-23
+
+- Require Pi `^0.87.1` for the development and peer dependency of
+  `@earendil-works/pi-ai` and `@earendil-works/pi-coding-agent` (validated
+  against the published 0.87.1 packages; `compat.d.ts`, the type surface this
+  package builds on, is unchanged from 0.86.1).
+- Validate against `@gotgenes/pi-permission-system` 33.0.8 (runtime peer stays
+  `>=30.0.0`); no rule-semantics change observed.
+- Upgrade the development `typescript` baseline: 7.0.2 was evaluated and kept
+  on 6.0.3 because TS7 (the native Go compiler) removes the stable
+  `transpileModule`/`ModuleKind` JS API used by `test/external-ts-loader.mjs`
+  to transpile `pi-permission-system`'s published `.ts` sources.
+- Sync `examples/pi-permission-system.config.example.json` with the live
+  policy (add `goal_complete`, `obs_recall`, `pencil_read_skill`).
+
 ## 0.19.0 - 2026-09-20
 
 - Require Pi `^0.86.0` for both the development and peer dependency of

package/README.md

@@ -32,7 +32,7 @@ that dependency is a hard prerequisite (see [Install and enable](#install-and-en
 > `@gotgenes/pi-permission-system`. Pi does not auto-install peer packages, so
 > install the permission system separately (once per machine) before this
 > extension. This release line supports permission-system 30.0.0 and later,
-> validated through 33.0.1:
+> validated through 33.0.8:
 
 Node.js 22.13.0 or newer is required. Permission auditing uses Node's built-in
 `node:sqlite`; it does not require a SQLite CLI, system SQLite library, or npm

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-auto-review",
-  "version": "0.19.0",
+  "version": "0.20.1",
   "description": "Fail-closed, model-backed approval broker for Pi: deterministically hard-denies dangerous operations, reviews dangerous boundaries with a reviewer model, and issues one-shot expiring grants that OS sandbox adapters must consume before retrying.",
   "type": "module",
   "license": "MIT",
@@ -47,16 +47,16 @@
     "test": "node --disable-warning=ExperimentalWarning --experimental-transform-types --import ./test/register-external-ts.mjs --test test/*.test.ts"
   },
   "peerDependencies": {
-    "@earendil-works/pi-ai": "^0.86.0",
-    "@earendil-works/pi-coding-agent": "^0.86.0",
+    "@earendil-works/pi-ai": "^0.87.1",
+    "@earendil-works/pi-coding-agent": "^0.87.1",
     "@gotgenes/pi-permission-system": ">=30.0.0"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "^0.86.0",
-    "@earendil-works/pi-coding-agent": "^0.86.0",
-    "@earendil-works/pi-server": "^0.86.0",
-    "@gotgenes/pi-permission-system": "^33.0.1",
-    "@types/node": "^26.2.0",
+    "@earendil-works/pi-ai": "^0.87.1",
+    "@earendil-works/pi-coding-agent": "^0.87.1",
+    "@earendil-works/pi-server": "^0.87.1",
+    "@gotgenes/pi-permission-system": "^33.1.1",
+    "@types/node": "^26.6.2",
     "typescript": "^6.0.3"
   }
 }