Version Packages (#3)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: github-actions[bot]

.changeset/bash-trim-conditional-dedup.md

@@ -1,5 +1,11 @@
 # pi-bash-trim
 
+## 1.0.2
+
+### Patch Changes
+
+- ff4bf12: Only apply line deduplication when row trimming is actually needed. Output that fits within the token budget is no longer deduped.
+
 ## 1.0.1
 
 ### Patch Changes

.changeset/safeguard-config-redesign.md

@@ -1,6 +1,6 @@
 {
   "name": "pi-bash-trim",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Smart bash output trimming for pi to fit LLM context budgets",
   "author": "mgabor3141",
   "license": "MIT",

.changeset/safeguard-propose-guard.md

@@ -1,5 +1,21 @@
 # pi-safeguard
 
+## 2.0.0
+
+### Major Changes
+
+- af8ec18: Replace pattern matching with signal-based flagging. The flagger is now a wide-net boolean gate (high recall, no reasoning); the judge sees raw actions only — no flagger bias.
+
+  Broadened sensitive file detection beyond `.env*`: files outside cwd, dotfiles in `$HOME`, system paths, paths with secret keywords.
+
+  New signals: `rm -r`/`rm -f` flagged independently, inline code interpreters (`eval`, `bash -c`, `python -c`, `node -e`), `chmod u+s`/`g+s`, `su`/`doas`/`pkexec`, private key material, known API key formats.
+
+### Minor Changes
+
+- 04d1a1a: Add user-configurable `commands`, `patterns`, and `instructions` to safeguard config. Support project-level config at `.pi/extensions/pi-safeguard.json` (additive only — cannot weaken global settings). Add `\bsafeguard\b` to built-in string patterns.
+- f624ef6: Add `propose_trust` tool that lets the agent request permission when blocked by the security guardrail. The user sees the proposed trust rule with the agent's reasoning and can accept or reject with one keypress. Accepted rules work like `/guard` — they persist for the session.
+- e7b8ba5: Add string pattern matching in addition to AST-based detection — dangerous keywords like `sudo` are now caught anywhere in tool input text, not just as parsed command names. Fix post-denial circumvention check cascade.
+
 ## 1.0.1
 
 ### Patch Changes

.changeset/safeguard-signal-flagger.md

@@ -1,6 +1,6 @@
 {
   "name": "pi-safeguard",
-  "version": "1.0.1",
+  "version": "2.0.0",
   "description": "LLM-as-judge guardrail for pi",
   "author": "mgabor3141",
   "license": "MIT",