@piagent/platform 1.32.1 → 1.33.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +22 -0
- package/README.md +1 -1
- package/README.vi.md +1 -1
- package/docs/command-reference-vietnamese.md +3 -3
- package/docs/distribution-standard.md +8 -8
- package/docs/languages.json +2 -2
- package/docs/managed-local-acceptance.md +1 -0
- package/docs/operator-manual-vietnamese.md +10 -10
- package/docs/publishing-for-teams.md +1 -0
- package/docs/quickstart-vietnamese.md +1 -1
- package/docs/release-install-policy.md +6 -6
- package/docs/team-onboarding.md +7 -7
- package/docs-site/architecture.html +1 -1
- package/docs-site/benchmark.html +1 -1
- package/docs-site/commands.html +1 -1
- package/docs-site/content/en/index.html +4 -4
- package/docs-site/content/en/runtime.html +1 -1
- package/docs-site/content/en/whats-new.html +6 -0
- package/docs-site/content/index.html +4 -4
- package/docs-site/content/runtime.html +2 -2
- package/docs-site/content/whats-new.html +6 -0
- package/docs-site/context-engine.html +1 -1
- package/docs-site/ecosystem.html +1 -1
- package/docs-site/en/architecture.html +1 -1
- package/docs-site/en/benchmark.html +1 -1
- package/docs-site/en/commands.html +1 -1
- package/docs-site/en/context-engine.html +1 -1
- package/docs-site/en/ecosystem.html +1 -1
- package/docs-site/en/index.html +5 -5
- package/docs-site/en/mcp-approval.html +1 -1
- package/docs-site/en/mcp-auth.html +1 -1
- package/docs-site/en/mcp-servers.html +1 -1
- package/docs-site/en/mcp.html +1 -1
- package/docs-site/en/permissions.html +1 -1
- package/docs-site/en/profiles.html +1 -1
- package/docs-site/en/quickstart.html +1 -1
- package/docs-site/en/runtime.html +2 -2
- package/docs-site/en/scope.html +1 -1
- package/docs-site/en/security.html +1 -1
- package/docs-site/en/team.html +1 -1
- package/docs-site/en/whats-new.html +7 -1
- package/docs-site/en/windows.html +1 -1
- package/docs-site/en/workflows.html +1 -1
- package/docs-site/index.html +5 -5
- package/docs-site/mcp-approval.html +1 -1
- package/docs-site/mcp-auth.html +1 -1
- package/docs-site/mcp-servers.html +1 -1
- package/docs-site/mcp.html +1 -1
- package/docs-site/permissions.html +1 -1
- package/docs-site/profiles.html +1 -1
- package/docs-site/quickstart.html +1 -1
- package/docs-site/runtime.html +3 -3
- package/docs-site/scope.html +1 -1
- package/docs-site/security.html +1 -1
- package/docs-site/team.html +1 -1
- package/docs-site/whats-new.html +7 -1
- package/docs-site/windows.html +1 -1
- package/docs-site/workflows.html +1 -1
- package/evals/private-holdout-v1/public-exposure.v2.json +1 -1
- package/package.json +3 -3
- package/packages/piagent-core/managed/native-catalog.mjs +9 -2
- package/packages/piagent-core/package.json +2 -2
- package/packages/piagent-core/runtime/hooks/agent-start-hook.ts +3 -0
- package/packages/piagent-core/runtime/inspection/same-process-bridge-proof.ts +1 -1
- package/packages/piagent-core/runtime/session/system-prompt.ts +14 -0
- package/scripts/check-runtime-advisories.mjs +2 -1
- package/scripts/runtime-advisory-exceptions.json +1 -26
- package/scripts/verify-local.sh +2 -2
- package/scripts/verify-release-identity.mjs +1 -1
|
@@ -1,29 +1,4 @@
|
|
|
1
1
|
{
|
|
2
2
|
"version": 1,
|
|
3
|
-
"exceptions": [
|
|
4
|
-
{
|
|
5
|
-
"id": "GHSA-q2hr-2g5m-vwhr",
|
|
6
|
-
"package": "brace-expansion",
|
|
7
|
-
"node": "node_modules/@earendil-works/pi-coding-agent/node_modules/brace-expansion",
|
|
8
|
-
"decided": "2026-10-02",
|
|
9
|
-
"until": "2026-10-31",
|
|
10
|
-
"reason": "Denial of service (CPU) through a crafted brace pattern in a glob; no data exposure. brace-expansion 5.0.9 is pinned by the npm-shrinkwrap of every published Pi host (0.87.1 to 1.0.0), so no Piagent change can update it; 5.0.12 fixes it. Remove when a Pi host carries brace-expansion >= 5.0.12."
|
|
11
|
-
},
|
|
12
|
-
{
|
|
13
|
-
"id": "GHSA-qhr7-859c-m2p7",
|
|
14
|
-
"package": "brace-expansion",
|
|
15
|
-
"node": "node_modules/@earendil-works/pi-coding-agent/node_modules/brace-expansion",
|
|
16
|
-
"decided": "2026-10-02",
|
|
17
|
-
"until": "2026-10-31",
|
|
18
|
-
"reason": "Denial of service (stack exhaustion) through nested brace groups in a glob; no data exposure. Pinned by the Pi host's npm-shrinkwrap as above; fixed in 5.0.11."
|
|
19
|
-
},
|
|
20
|
-
{
|
|
21
|
-
"id": "GHSA-6j4f-fj2g-mc7p",
|
|
22
|
-
"package": "brace-expansion",
|
|
23
|
-
"node": "node_modules/@earendil-works/pi-coding-agent/node_modules/brace-expansion",
|
|
24
|
-
"decided": "2026-10-02",
|
|
25
|
-
"until": "2026-10-31",
|
|
26
|
-
"reason": "Denial of service (stack exhaustion) in parseCommaParts; no data exposure. Pinned by the Pi host's npm-shrinkwrap as above; fixed in 5.0.10."
|
|
27
|
-
}
|
|
28
|
-
]
|
|
3
|
+
"exceptions": []
|
|
29
4
|
}
|
package/scripts/verify-local.sh
CHANGED
|
@@ -641,8 +641,8 @@ if (!rootPkg.pi.subagents?.agents?.length) {
|
|
|
641
641
|
throw new Error("root package.json missing pi.subagents.agents");
|
|
642
642
|
}
|
|
643
643
|
const expectedPeers = {
|
|
644
|
-
"@earendil-works/pi-ai": "
|
|
645
|
-
"@earendil-works/pi-coding-agent": "
|
|
644
|
+
"@earendil-works/pi-ai": "1.3.0",
|
|
645
|
+
"@earendil-works/pi-coding-agent": "1.3.0",
|
|
646
646
|
typebox: "1.3.27"
|
|
647
647
|
};
|
|
648
648
|
for (const [name, version] of Object.entries(expectedPeers)) {
|
|
@@ -58,7 +58,7 @@ const packageLock = readJson("package-lock.json");
|
|
|
58
58
|
const capabilityLock = readJson(".pi/piagent-profile.lock.json");
|
|
59
59
|
const version = rootPackage.version;
|
|
60
60
|
const expectedTag = `v${version}`;
|
|
61
|
-
const supportedPiHost = "
|
|
61
|
+
const supportedPiHost = "1.3.0";
|
|
62
62
|
|
|
63
63
|
// The package is published now, so the old private-forever rule is gone. What
|
|
64
64
|
// still has to hold is that a scoped package cannot reach the registry as
|