paqad-ai 1.25.0 → 1.26.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +17 -0
- package/dist/cli/index.js +245 -198
- package/dist/cli/index.js.map +1 -1
- package/dist/index.d.ts +9 -2
- package/dist/index.js +256 -188
- package/dist/index.js.map +1 -1
- package/package.json +1 -1
- package/runtime/hooks/silent-update.sh +23 -2
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,22 @@
|
|
|
1
1
|
# paqad-ai
|
|
2
2
|
|
|
3
|
+
## 1.26.0
|
|
4
|
+
|
|
5
|
+
### Minor Changes
|
|
6
|
+
|
|
7
|
+
- [#192](https://github.com/Eliyce/paqad-ai/pull/192) [`ab0e7de`](https://github.com/Eliyce/paqad-ai/commit/ab0e7de7cc449ff0b8fcfc1bb7402cb16bfd906a) Thanks [@HLasani](https://github.com/HLasani)! - Make onboarded repos' git hygiene self-contained and correct. paqad now manages its ignore policy inside `.paqad/` (a nested `.paqad/.gitignore` + `.paqad/.gitattributes`) instead of editing the project's root `.gitignore`; re-onboarding scrubs the old paqad-managed block out of the root file. Three policy fixes ship with the move: the boot pointer `framework-path.txt` now stays committed so a teammate can clone and boot without re-onboarding; the per-machine `framework-version.txt` is now git-ignored so silent self-updates no longer churn the tree (the silent-update hook recreates it locally on first session); and `.paqad/ledger/` is now ignored unconditionally so enabling the enterprise ledger can never leak evidence into git. The health check resolves "is this ignored?" via git (honoring the nested file) and no longer treats the local version file as a required committed artifact.
|
|
8
|
+
|
|
9
|
+
## 1.25.1
|
|
10
|
+
|
|
11
|
+
### Patch Changes
|
|
12
|
+
|
|
13
|
+
- [#190](https://github.com/Eliyce/paqad-ai/pull/190) [`b8411de`](https://github.com/Eliyce/paqad-ai/commit/b8411de3325db11c950be53ef40f2097e85b6e7b) Thanks [@HLasani](https://github.com/HLasani)! - Fix onboarding to emit the `enterprise` block in the generated `project-profile.yaml`, and remove the two never-wired feature flags.
|
|
14
|
+
|
|
15
|
+
- **Onboarding now writes the `enterprise` block** (`enabled`, `evidence_ledger`, `ai_bom`, `compliance_citations`, all `false`). The opt-in evidence-ledger switches from [#187](https://github.com/Eliyce/paqad-ai/issues/187) were previously invisible in a freshly onboarded profile, so users had nothing to toggle. Defaults stay all-off: a normal user pays zero tokens and writes nothing under `.paqad/ledger/`.
|
|
16
|
+
- **Removed `features.supply_chain_governance` and `features.ai_governance`.** These were declared in the profile type and schema but read by no code path, and their names collided conceptually with the now-real `enterprise.*` governance switches. Dropped from the `ProjectFeatureFlags` type, the JSON schema, the onboarding default, and all test fixtures.
|
|
17
|
+
|
|
18
|
+
Not a runtime break: `readProjectProfile` tolerates extra keys, so existing on-disk profiles that still contain the two removed flags continue to load (the stale keys are ignored).
|
|
19
|
+
|
|
3
20
|
## 1.25.0
|
|
4
21
|
|
|
5
22
|
### Minor Changes
|