@tagma/sdk 0.7.8 → 0.7.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +3 -2
  2. package/package.json +4 -4
package/README.md CHANGED
@@ -32,6 +32,7 @@ bun add @tagma/sdk
32
32
  ```yaml
33
33
  pipeline:
34
34
  name: build-and-test
35
+ mode: trusted # required for shell command tasks
35
36
  tracks:
36
37
  - id: backend
37
38
  name: Backend
@@ -151,7 +152,7 @@ pipeline:
151
152
  | Field | Type | Required | Description |
152
153
  | ------------- | --------------- | -------- | ------------------------------------------------------------------------------------------ |
153
154
  | `name` | `string` | Yes | Pipeline name, used in logs and run IDs |
154
- | `mode` | `trusted \| safe` | No | Execution boundary. Defaults to `trusted`; `safe` blocks shell tasks, hooks, automatic plugins, and non-allowlisted capabilities |
155
+ | `mode` | `trusted \| safe` | No | Execution boundary. Defaults to `safe`; `safe` blocks shell tasks, hooks, automatic plugins, execute permissions, and non-allowlisted capabilities |
155
156
  | `driver` | `string` | No | Default driver for all tracks/tasks (inherited). Built-in: `opencode` |
156
157
  | `model` | `string` | No | Default model for all tracks/tasks (inherited). Exact model name, e.g. `claude-sonnet-4-6` |
157
158
  | `permissions` | `Permissions` | No | Default permissions inherited by all tracks/tasks (see Permissions) |
@@ -469,7 +470,7 @@ Options:
469
470
  - `runId` -- caller-supplied run ID. Must match `run_[A-Za-z0-9_-]{1,128}`. When provided the engine uses this instead of generating its own, keeping the caller and the SDK log directories aligned on the same ID
470
471
  - `maxLogRuns` -- number of per-run log directories to keep under `<workDir>/.tagma/logs/` (default: 20)
471
472
  - `skipPluginLoading` -- skip the engine's built-in `loadPlugins(config.plugins)` call. Set this when the host has already pre-loaded plugins from a custom resolution path (e.g. the editor loading from the user's workspace `node_modules`) so the engine doesn't re-resolve them via Node's default cwd-based import.
472
- - `mode` -- override `config.mode` for this run. `trusted` is the default. `safe` blocks `command` tasks, lifecycle hooks, automatic `pipeline.plugins` loading, and non-allowlisted driver/trigger/completion/middleware types.
473
+ - `mode` -- override `config.mode` for this run. `safe` is the default. `safe` blocks `command` tasks, lifecycle hooks, automatic `pipeline.plugins` loading, execute permissions, and non-allowlisted driver/trigger/completion/middleware types.
473
474
  - `safeModeAllowlist` -- extends the built-in safe-mode allowlist for trusted host integrations.
474
475
  - `envPolicy` -- controls child process environment inheritance. Defaults to a minimal environment (`PATH`, home/user/temp/system keys). Use `{ mode: 'allowlist', keys: [...] }` or `{ mode: 'inherit' }` only when the host deliberately wants to expose more env vars.
475
476
  - `logPrompt` -- when `true`, writes the final middleware-expanded prompt to the run log. Defaults to `false`.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@tagma/sdk",
3
- "version": "0.7.8",
3
+ "version": "0.7.9",
4
4
  "description": "Local AI task orchestration SDK for Tagma pipelines",
5
5
  "license": "MIT",
6
6
  "repository": {
@@ -74,9 +74,9 @@
74
74
  "test": "bun test"
75
75
  },
76
76
  "dependencies": {
77
- "@tagma/core": "0.1.3",
78
- "@tagma/runtime-bun": "0.1.2",
79
- "@tagma/types": "0.4.14",
77
+ "@tagma/core": "0.1.5",
78
+ "@tagma/runtime-bun": "0.1.3",
79
+ "@tagma/types": "0.4.15",
80
80
  "js-yaml": "^4.1.0"
81
81
  }
82
82
  }