pi-bro 0.22.0 → 0.22.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +32 -0
- package/README.md +116 -987
- package/bro.ts +2 -2
- package/docs/README.md +6 -2
- package/docs/pig-compatibility.md +1 -1
- package/docs/user-guide.md +986 -0
- package/package.json +10 -4
- package/sources.ts +65 -11
package/CHANGELOG.md
CHANGED
|
@@ -2,6 +2,38 @@
|
|
|
2
2
|
|
|
3
3
|
All notable changes to pi-bro are documented here.
|
|
4
4
|
|
|
5
|
+
## [Unreleased]
|
|
6
|
+
|
|
7
|
+
### Added
|
|
8
|
+
|
|
9
|
+
- Reader benchmark: five real, maintainer-approved Explain fixtures and a brief-mode candidate arm for shipped-vs-candidate comparisons. Exact-text and Markdown-marker checks removed; meaning is checked by the yes/no questions (#101).
|
|
10
|
+
|
|
11
|
+
- Reader benchmark for Explain modes, BTW answers, preferences and repeated samples (#110):
|
|
12
|
+
- Fingerprinted live runs, narrow Jev binary checks, and per-check candidate comparisons.
|
|
13
|
+
- Report-only reader-visible counts and source deltas, separate from preservation and formatting checks.
|
|
14
|
+
- Committed synthetic baseline evidence with offline recomputation in CI.
|
|
15
|
+
- Optional generation through existing Claude, Codex and Muse adapters alongside Agy.
|
|
16
|
+
- Synthetic coverage and experimental judgments are decision support, not proof of full fidelity or comprehension; production prompts are unchanged.
|
|
17
|
+
|
|
18
|
+
### Changed
|
|
19
|
+
|
|
20
|
+
- The README is now a short overview (install, try it, requirements, what leaves your machine, limits). The full reference moved to `docs/user-guide.md`, and `/bro help` links there (#116).
|
|
21
|
+
- Added `SECURITY.md`, `CONTRIBUTING.md`, issue forms and `docs/PUBLIC-PRESENTATION.md`, the presentation standard for pi-* repos (#116).
|
|
22
|
+
- Refocus prompt tests on safety and structure rather than frozen wording or presentation order; identify fake-Agy Explain modes from current prompt builders instead of hardcoded phrases (#110).
|
|
23
|
+
|
|
24
|
+
## [0.22.1] - 2026-10-12
|
|
25
|
+
|
|
26
|
+
### Security
|
|
27
|
+
|
|
28
|
+
- Public-web transport safety boundaries and offline qualification (#86):
|
|
29
|
+
- Block IPv4-compatible IPv6 (`::/96`) and Site-Local IPv6 (`fec0::/10`) in `NON_PUBLIC_ADDRESSES` to prevent SSRF bypasses via mapped loopback and cloud metadata targets on dual-stack hosts.
|
|
30
|
+
- Disable HTTP socket connection pooling (`agent: false`) on web requests so keep-alive socket reuse cannot bypass address pinning (`lookup`).
|
|
31
|
+
- Add offline test coverage in `test/sources.test.ts` for mixed DNS answers, address pinning, private redirects, HTTPS downgrade, loops, hop bounds, payload limits, encoding, and cancellation.
|
|
32
|
+
|
|
33
|
+
### Fixed
|
|
34
|
+
|
|
35
|
+
- Interrupt stalled DNS lookups immediately when an abort or timeout signal fires during web ingestion (#86).
|
|
36
|
+
|
|
5
37
|
## [0.22.0] - 2026-10-11
|
|
6
38
|
|
|
7
39
|
### Fixed
|