paqad-ai 1.77.1 → 1.78.1

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # paqad-ai
 
+## 1.78.1
+
+### Patch Changes
+
+- a9db95e: Skip end-of-change enforcement and all completion checks when the session never
+  routed to feature-development (#499). Previously a dirty working tree (for
+  example a file hand-edited before the session) was swept up by the `git status`
+  fallback, classified as a feature-development change by file path alone, and the
+  in-session completion seam blocked the turn demanding planning/spec/review/checks
+  stages the session never owed. The completion backstop now consults the per-message
+  route: for a question, pentest, docs task, RCA, or small-talk session it runs no
+  gate, mints no inferred-git record, writes no evidence, and never blocks — it
+  returns an ok "verification not applicable" verdict and records one audit row.
+  An absent/unknown route still runs the full pass (fail-closed), and a session that
+  recorded any agent-authored code edit re-arms full enforcement. The git/CI
+  backstop and the pre-mutation gates are unchanged.
+
+## 1.78.0
+
+### Minor Changes
+
+- 2e48cdc: Enablement-first entry flow: the gate speaks the verdict and the bootstrap splits into a gate + a router.
+
+  On a cold first turn the agent used to load the entire ~290-line `AGENT-BOOTSTRAP.md` — router, narration, stage protocol, and decision-pause contract — and narrate a workflow route before it had even checked whether paqad was enabled. Two fixes land:
+
+  - **The prompt-gate states the verdict.** The Claude Code `UserPromptSubmit` gate already resolves enablement deterministically and stays byte-for-byte silent when paqad is OFF, so if its `[paqad]` directive fires at all, paqad is ON. The directive now says so as its first line and marks enablement a done step, so the agent spends zero tool calls re-checking it. The numbered load-step prose that was hand-duplicated in both entry hooks now lives in one shared `runtime/hooks/lib/agent-entry-directive.mjs` module, and the stale hardcoded workflow count is gone.
+  - **The bootstrap splits into a gate + a router.** `AGENT-BOOTSTRAP.md` is now a ~23-line enablement gate (the precedence probe, the OFF bail-out, and a single "load `AGENT-ROUTER.md` when ON" pointer). The router, always-load list, sentinel, and the full narration and Decision Pause contracts move to a new `AGENT-ROUTER.md`, loaded only when enablement resolves ON. A disabled project never ingests any router or contract prose.
+
+  Both files ship in the install directory and are reached through the existing entry-stub chain, so the split lands on every provider (Claude Code, Codex, Gemini, and the advisory hosts) with no entry-file or project churn. The enablement resolvers and the sentinel semantics are unchanged.
+
 ## 1.77.1
 
 ### Patch Changes

package/dist/cli/index.js

@@ -36019,6 +36019,15 @@ var CAPABILITY_IMPLS = /* @__PURE__ */ new Map([
   [decisionPauseSelfArmCapability.id, decisionPauseSelfArmCapability]
 ]);
 
+// src/pipeline/route-enforcement.ts
+init_esm_shims();
+init_session();
+
+// src/session-ledger/non-feature-skip-audit.ts
+init_esm_shims();
+init_session();
+init_ledger();
+
 // src/verification/repository/run-repository-verification.ts
 init_session();
 
@@ -36256,7 +36265,7 @@ init_cancelled_error();
 init_events();
 
 // src/index.ts
-var VERSION = "1.77.1";
+var VERSION = "1.78.1";
 
 // src/cli/commands/audit.ts
 init_esm_shims();