paqad-ai 1.42.0 → 1.44.0

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # paqad-ai
 
+## 1.44.0
+
+### Minor Changes
+
+- 92c5d52: Decision Pause: default `decisions_ask_threshold` to `strict` (humans decide; the machine does not auto-resolve mid-confidence packets).
+
+  Previously the default was `balanced` (0.85), which let the resolver auto-resolve any decision packet whose recommendation cleared 0.85 confidence. The default is now `strict` (0.95): packets in the 0.85–0.94 confidence band surface to a human instead of resolving silently. Projects that never set the key resolve to `strict`, and fresh `paqad-ai onboard` writes `ask_threshold: strict`.
+
+  This is a behaviour change on update. Teams that prefer auto-resolution can opt back in by setting `decisions_ask_threshold=balanced` (or `permissive`) in `.paqad/configs/.config.policy` / local `.config`, or via the `PAQAD_DECISIONS_ASK_THRESHOLD` env var. Applies uniformly across all providers (core/config, not entry-file behaviour).
+
+## 1.43.0
+
+### Minor Changes
+
+- 3bc15df: Publish two measured, reproducible benchmark numbers with methodology and caveats
+  (issue #285). Adds read-only repo tooling: `scripts/measure-footprint.mjs` reports the
+  resident session-start token footprint per area (real tokenizer via
+  `src/context/tokenizer-cache.ts`, labelled char/4 fallback), and
+  `scripts/rule-findings-stats.mjs` reads the existing `rule-evidence` ledger via
+  `readProjectEvents` and buckets deterministic findings by ISO week. Results, method, run
+  counts, tokenizer version, per-tier applicability, and caveats live in
+  `docs/instructions/benchmarks/measured.md`. The two unbenchmarked "60-85%" README claims
+  are replaced with the measured 49-61% resident-load reduction and a link to the method.
+  No product behavior changes; `rag_enabled` stays default off.
+
 ## 1.42.0
 
 ### Minor Changes

package/README.md

@@ -52,16 +52,16 @@ No account, no API key, no subscription. Prefer not to install anything? Run `np
 
 ## What you get, at a glance
 
-| Area                         | What it means for you                                                            |
-| ---------------------------- | -------------------------------------------------------------------------------- |
-| **One setup, every tool**    | Configure Claude, Cursor, Copilot, Gemini, and the rest from one source of truth |
-| **Workflows, not prompts**   | Your team's process runs the same way every time, instead of being re-typed      |
-| **Proof, not promises**      | Automatic checks confirm tests, specs, docs, and security before "done" counts   |
-| **Security as a workflow**   | A full OWASP pentest pass, with retests, built in                                |
-| **Design as a workflow**     | Your UI audited against your own design system                                   |
-| **Docs that stay current**   | The framework keeps your documentation in sync with the code                     |
-| **Fewer tokens, on purpose** | Loads the right files, not the whole repo, cutting token use by 60-85%           |
-| **Runs locally**             | Your code stays on your machine, with an audit trail you can keep                |
+| Area                         | What it means for you                                                                  |
+| ---------------------------- | -------------------------------------------------------------------------------------- |
+| **One setup, every tool**    | Configure Claude, Cursor, Copilot, Gemini, and the rest from one source of truth       |
+| **Workflows, not prompts**   | Your team's process runs the same way every time, instead of being re-typed            |
+| **Proof, not promises**      | Automatic checks confirm tests, specs, docs, and security before "done" counts         |
+| **Security as a workflow**   | A full OWASP pentest pass, with retests, built in                                      |
+| **Design as a workflow**     | Your UI audited against your own design system                                         |
+| **Docs that stay current**   | The framework keeps your documentation in sync with the code                           |
+| **Fewer tokens, on purpose** | Loads a lean resident slice, not the whole repo. Measured 49-61% smaller resident load |
+| **Runs locally**             | Your code stays on your machine, with an audit trail you can keep                      |
 
 The rest of this page walks through each of these. The [full docs](https://paqad.ai/docs.html) go deeper on every command and concept.
 
@@ -267,7 +267,13 @@ Documentation is a real output here, not an afterthought you maintain by hand. A
 
 ## The right context, with fewer tokens
 
-Your agent does not need your whole repo. It needs the right files. And since every model gets worse on a bloated context, loading less is not just cheaper, it makes the answers better. paqad-ai cuts token use by **60-85%** through careful context loading.
+Your agent does not need your whole repo. It needs the right files. And since every model gets worse on a bloated context, loading less is not just cheaper, it makes the answers better.
+
+paqad-ai keeps the session-start load lean: a rule manifest plus the files a task actually touches, instead of the whole rule tree. Measured across two projects, that resident load is **49-61% smaller** than loading everything (paqad-ai's own repo: 61%; a fresh React onboard: 49%). Both used the char/4 heuristic tokenizer, so treat them as an honest floor, not a marketing ceiling. The method, the per-project numbers, and the caveats are in [`docs/instructions/benchmarks/measured.md`](docs/instructions/benchmarks/measured.md), and you can reproduce them in your own repo:
+
+```
+node scripts/measure-footprint.mjs --project .
+```
 
 - It splits files at natural boundaries (functions and classes), not at arbitrary line counts.
 - It ranks each piece by five signals: meaning, keywords, the symbols involved, how close the file is to the task, and how deeply nested it is.

package/dist/cli/index.js

@@ -1431,7 +1431,7 @@ var init_framework_config = __esm({
         env: "PAQAD_DECISIONS_ASK_THRESHOLD",
         type: "enum",
         enumValues: ASK_THRESHOLDS,
-        default: "balanced",
+        default: "strict",
         group: "policy",
         section: "Decisions (pause-contract tuning)",
         comment: "strict | balanced | permissive \u2014 how eagerly to pause and ask."
@@ -24070,7 +24070,7 @@ function buildProjectProfile(selections, snapshot, overrides, projectRoot) {
       verification_plugins: [],
       escalation_rules: [],
       decisions: {
-        ask_threshold: "balanced",
+        ask_threshold: "strict",
         max_screens_per_task: 3,
         idle_timeout_minutes: 30
       }
@@ -26122,7 +26122,7 @@ init_cancelled_error();
 init_events();
 
 // src/index.ts
-var VERSION = "1.42.0";
+var VERSION = "1.44.0";
 
 // src/cli/commands/audit.ts
 init_esm_shims();