# Changelog

## Unreleased

## 0.4.3 - 2026-08-26

- Add a black-box OpenCode 1.18.18 CI check that loads the packed candidate and proves a denied Bash call cannot create its marker.
- Clarify that `opencode debug config` verifies plugin discovery, while behavioral enforcement requires the isolated host check.

## 0.4.2 - 2026-08-21

- Make the README a focused entry point and keep full installation, migration, operation, and removal procedures in the public documentation.
- Fail safely in source-install and manual-migration examples when scope or destination state is invalid.
- Verify MDX links, the canonical logo/favicon pair, generated documentation metadata, and package contents in CI.
- Align public contribution links with the maintained issues-only workflow.

## 0.4.1 - 2026-08-20

- Refresh the README with a product header, direct navigation, clearer highlights, and npm-safe links.
- Point package and GitHub metadata to the documentation site and expand package discovery keywords.
- Polish the Starlight overview, host installation flow, and Pi controls guide without changing runtime behavior or compatibility.

## 0.4.0 - 2026-08-20

- Add global Pi preferences for Auto, judge model, thinking, and shortcuts without changing judge authorization.
- Add a Pi control menu, direct thinking command, quick Auto toggle, and compact status indicator.
- Restore preferences in new sessions while keeping project restrictions, model scope, and model availability fail-closed.
- Apply verified secondary-model thinking through Pi 0.84.2 with one isolated request, zero tools, no history, no retries, cancellation, and a local deadline.
- Expand the exported Pi session status with requested and effective authorization, model, and thinking fields.

## 0.3.0 - 2026-08-20

- Move global and project policy files under the OpenCode or Pi configuration root.
- Migrate valid legacy configuration by an exclusive byte-for-byte copy without overwriting a host-owned destination or deleting the source.
- Fail closed for invalid files, relative host roots, symlinks, non-regular entries, and migration errors.
- Document automatic and manual migration, verification, cleanup, rollback, remigration, and filesystems without hard-link support.

## 0.2.0 - 2026-08-17

- Add an opt-in, session-scoped Pi permission judge for sanitized eligible Git actions.
- Add monotonic global/project judge configuration, model selection, local deadlines, cancellation, and strict fail-closed output validation.
- Keep OpenCode judge-eligible actions blocked as unavailable until a public isolated transport is verified.
- Fail closed when OpenCode or Pi omits the project directory required for project configuration.
- Bound Pi's per-project adapter cache and file-based configuration input.
- Repair wiki navigation and check internal documentation links before each build.
- Freeze argument objects after enforced allowances so later pre-tool handlers cannot replace the reviewed command.
- Reject malformed or oversized Pi completion shapes and recheck the local deadline after response parsing.
- Fail closed for explicitly unauthorized adapter judges and asynchronous decision callbacks.

## 0.1.0 - 2026-08-16

- Add the deterministic host-neutral permission core.
- Add fail-closed OpenCode and Pi runtime adapters.
- Add strict global and project configuration with non-relaxing precedence.
- Add optional sanitized JSONL decision logs.
- Add source installation and removal instructions for the validated host baselines.

This is the first public release.