# pi-enclave

## 0.3.0

### Minor Changes

- 523e9e9: Allow empty package lists in config (removes hardcoded default packages).
- 523e9e9: Support custom Gondolin image tags via `image` config option.

## 0.2.0

### Minor Changes

- 504a7e8: Support relative mount paths and skip missing directories.

  Mount paths in config are now resolved against the workspace directory, so project configs can use short relative paths like `mounts = [".jj", ".git"]` instead of hardcoded absolute paths. Missing mount paths are silently skipped at VM start, making optional mounts safe to declare unconditionally.

### Patch Changes

- cfdbedb: Use conversation messages instead of system prompt for enclave hints.

  The enclave context hint is now a regular message added once per session, instead of being injected via `before_agent_start`. This avoids invalidating the prompt cache when toggling enclave on/off mid-session.

## 0.1.1

### Patch Changes

- b1506e1: Support bare strings in mounts config for simpler syntax.

  Before:

  ```toml
  [[mounts]]
  path = "~/dev/myproject/.jj"

  [[mounts]]
  path = "~/dev/myproject/.git"
  ```

  After:

  ```toml
  mounts = ["~/dev/myproject/.jj", "~/dev/myproject/.git"]
  ```

  Object form still works for read-only mounts. Also fixes ASCII chart alignment in README.

## 0.1.0

### Minor Changes

- 468b85f: Initial release of pi-enclave: VM-isolated enclave with automatic secret protection.

  - All tools (bash, read, write, edit) execute inside a Gondolin micro-VM
  - Modular drop-in config files (`pi-enclave.d/`): git, jj, GitHub ship by default
  - Generic `[env]` section: inject host values (static, command, env var) into the VM
  - `setup` scripts per drop-in: raw shell, run after package install
  - Secrets with HTTP proxy injection (never enter the VM)
  - `[[git-credentials]]` for explicit git auth over HTTPS
  - Per-host HTTP policies with allow/deny/prompt for method+path patterns
  - GraphQL-aware policy: parses request bodies, checks actual field names (not spoofable operation names)
  - `[[mounts]]` for additional directories (e.g. jj workspace parent repos)
  - Cascading config: global + drop-ins + project
  - Packages accumulate additively across all config layers
  - `/enclave init`, `/enclave on|off`, `/enclave add` with interactive search
  - Eager VM startup on session start/resume