72 lines (46 loc) · 2.43 KB

pi-enclave

0.3.1

Patch Changes

fd663da: Pass the architecture-specific QEMU binary through to Gondolin when starting the VM.

0.3.0

Minor Changes

523e9e9: Allow empty package lists in config (removes hardcoded default packages).
523e9e9: Support custom Gondolin image tags via image config option.

0.2.0

Minor Changes

504a7e8: Support relative mount paths and skip missing directories.

Mount paths in config are now resolved against the workspace directory, so project configs can use short relative paths like mounts = [".jj", ".git"] instead of hardcoded absolute paths. Missing mount paths are silently skipped at VM start, making optional mounts safe to declare unconditionally.

Patch Changes

cfdbedb: Use conversation messages instead of system prompt for enclave hints.

The enclave context hint is now a regular message added once per session, instead of being injected via before_agent_start. This avoids invalidating the prompt cache when toggling enclave on/off mid-session.

0.1.1

Patch Changes

b1506e1: Support bare strings in mounts config for simpler syntax.

Before:
```
[[mounts]]
path = "~/dev/myproject/.jj"

[[mounts]]
path = "~/dev/myproject/.git"
```
After:
```
mounts = ["~/dev/myproject/.jj", "~/dev/myproject/.git"]
```
Object form still works for read-only mounts. Also fixes ASCII chart alignment in README.

0.1.0

Minor Changes

468b85f: Initial release of pi-enclave: VM-isolated enclave with automatic secret protection.
- All tools (bash, read, write, edit) execute inside a Gondolin micro-VM
- Modular drop-in config files (pi-enclave.d/): git, jj, GitHub ship by default
- Generic [env] section: inject host values (static, command, env var) into the VM
- setup scripts per drop-in: raw shell, run after package install
- Secrets with HTTP proxy injection (never enter the VM)
- [[git-credentials]] for explicit git auth over HTTPS
- Per-host HTTP policies with allow/deny/prompt for method+path patterns
- GraphQL-aware policy: parses request bodies, checks actual field names (not spoofable operation names)
- [[mounts]] for additional directories (e.g. jj workspace parent repos)
- Cascading config: global + drop-ins + project
- Packages accumulate additively across all config layers
- /enclave init, /enclave on|off, /enclave add with interactive search
- Eager VM startup on session start/resume