v2.2.1

v2.2.1 (2026-04-14)

This release is published under the Apache-2.0 License.

Bug Fixes

• Catch bare TimeoutError and HTTPException from SaaS urlopen (9aa5546)

---

Detailed Changes: v2.2.0...v2.2.1

v2.2.0

v2.2.0 (2026-04-08)

This release is published under the Apache-2.0 License.

Bug Fixes

• Document and test that require_approval raise skips audit log (b5af150)

• Skip PR creation when dev has no new commits vs main (ebd3c50)

• evaluate: Document @Protect bypass, clarify TOCTOU safety; add SaaS path tests (2bd6400)

• security: Require_approval + offline now raises DaemonNotFoundError (fail-closed) (d6684f6)

Continuous Integration

• auto-pr: Clarify exit 0 intent with inline comment (2fab1c7)

Documentation

• evaluate: Document fail behaviour, auth, and timeouts; add public API import test (b9fcb17)

Features

• Export evaluate() as public API (6ecd581)

Testing

• evaluate: Assert all membership directly, document existing offline coverage (40d12bb)

• saas: Add denial path test; move assert_not_called inside with block (f44cff1)

• saas: Fix HTTPError mock, assert Bearer token, add run_id test; trim docstring (d5357ab)

---

Detailed Changes: v2.1.0...v2.2.0

v2.1.0

v2.1.0 (2026-04-08)

This release is published under the Apache-2.0 License.

Bug Fixes

• Document and test that require_approval raise skips audit log (#10, 29fa9a7)

• Merge latest dev updates into main (#10, 29fa9a7)

• Skip PR creation when dev has no new commits vs main (#10, 29fa9a7)

• evaluate: Document @Protect bypass, clarify TOCTOU safety; add SaaS path tests (#10, 29fa9a7)

• security: Require_approval + offline now raises DaemonNotFoundError (fail-closed) (#10, 29fa9a7)

Continuous Integration

• auto-pr: Clarify exit 0 intent with inline comment (#10, 29fa9a7)

Documentation

• evaluate: Document fail behaviour, auth, and timeouts; add public API import test (#10, 29fa9a7)

Features

• Export evaluate() as public API (#10, 29fa9a7)

Testing

• evaluate: Assert all membership directly, document existing offline coverage (#10, 29fa9a7)

• saas: Add denial path test; move assert_not_called inside with block (#10, 29fa9a7)

• saas: Fix HTTPError mock, assert Bearer token, add run_id test; trim docstring (#10, 29fa9a7)

---

Detailed Changes: v2.0.1...v2.1.0

v2.0.1

v2.0.1 (2026-04-08)

This release is published under the Apache-2.0 License.

Bug Fixes

• Skip PR creation when dev has no new commits vs main (#9, f3ae50d)

---

Detailed Changes: v2.0.0...v2.0.1

v2.0.0

v2.0.0 (2026-04-08)

This release is published under the Apache-2.0 License.

Features

• Add Node9Agent base class with @tool, @internal, dispatch() (ef5d945)

Breaking Changes

• Safe_path() workspace argument is now keyword-only. Callers must update: safe_path(f, workspace=dir) instead of safe_path(f, dir). Node9Agent, @tool, @internal decorators, and dispatch() are new public API.

---

Detailed Changes: v1.1.4...v2.0.0

v1.1.4

v1.1.4 (2026-04-07)

This release is published under the Apache-2.0 License.

---

Detailed Changes: v1.0.2...v1.1.4

v1.0.2

v1.0.2 (2026-04-07)

This release is published under the Apache-2.0 License.

Bug Fixes

• Address code review issues — DLP, thread safety, API naming (#7, 713b621)

• Merge latest dev updates into main (#7, 713b621)

• Second round — DLP, Python 3.9 compat, run_id, API surface (#7, 713b621)

• e2e: Update Part 2 to test offline mode instead of DaemonNotFoundError (#7, 713b621)

---

Detailed Changes: v1.0.1...v1.0.2

v1.0.1

v1.0.1 (2026-04-07)

This release is published under the Apache-2.0 License.

Bug Fixes

• Address code review issues — DLP, thread safety, API naming (#6, 9ddc48d)

• Merge latest dev updates into main (#6, 9ddc48d)

• Second round — DLP, Python 3.9 compat, run_id, API surface (#6, 9ddc48d)

• e2e: Update Part 2 to test offline mode instead of DaemonNotFoundError (#6, 9ddc48d)

---

Detailed Changes: v1.0.0...v1.0.1

v1.0.0

v1.0.0 (2026-04-04)

This release is published under the Apache-2.0 License.

• Initial Release