Version Packages

examples/chat/server/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @dawn-example/chat-server
 
+## 0.0.12
+
+### Patch Changes
+
+- Updated dependencies [9d115de]
+- Updated dependencies [4ede7b8]
+- Updated dependencies [1d51b75]
+  - @dawn-ai/cli@0.8.6
+  - @dawn-ai/core@0.8.6
+  - @dawn-ai/langchain@0.8.6
+  - @dawn-ai/sdk@0.8.6
+
 ## 0.0.11
 
 ### Patch Changes

examples/chat/server/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@dawn-example/chat-server",
   "private": true,
-  "version": "0.0.11",
+  "version": "0.0.12",
   "type": "module",
   "scripts": {
     "dev": "node node_modules/@dawn-ai/cli/dist/index.js dev --port 3001",

packages/cli/CHANGELOG.md

@@ -1,5 +1,29 @@
 # @dawn-ai/cli
 
+## 0.8.6
+
+### Patch Changes
+
+- 9d115de: `dawn dev` startup readiness timeout is now configurable via `DAWN_DEV_READY_TIMEOUT_MS` (default unchanged at 5s). Also de-flakes the dev-command disposal test that raced child startup against the readiness window in CI.
+- 4ede7b8: Add an opt-in execution sandbox: a provider-agnostic `SandboxProvider` contract
+  with a Docker reference (`dockerSandbox`), giving each conversation thread a
+  hard-isolated workspace (filesystem + shell + network). Enable via
+  `dawn.config.ts` `sandbox: { provider: dockerSandbox({ image }) }`; without it,
+  behavior is unchanged. Adds a typed `config()` helper. When sandboxed, the
+  materialized agent cache is bypassed so tools bind per-thread. Honest scope:
+  Docker's boundary (not a microVM); `allow`-mode network denylist is best-effort
+  in the Docker reference. New package `@dawn-ai/sandbox` (+ `@dawn-ai/sandbox/testing`
+  `fakeSandbox` and a provider conformance kit).
+- 1d51b75: Per-tool approval gating: `agent({ tools: { approve: ["deployProd"] } })` makes any named tool require a HITL permission prompt per call (`kind: "tool"` interrupt). Decisions persist name-level under the reserved `tool` key in `.dawn/permissions.json` (exact-name matching); pre-approve via `permissions.allow.tool`. `dawn check` validates `approve` names and warns on overlap with the internally-gated workspace tools, `deny`, and the unsupported `task` case.
+- Updated dependencies [4ede7b8]
+- Updated dependencies [1d51b75]
+  - @dawn-ai/core@0.8.6
+  - @dawn-ai/langchain@0.8.6
+  - @dawn-ai/permissions@0.8.6
+  - @dawn-ai/langgraph@0.8.6
+  - @dawn-ai/memory@0.8.6
+  - @dawn-ai/sqlite-storage@0.8.6
+
 ## 0.8.5
 
 ### Patch Changes

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/cli",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/config-biome/CHANGELOG.md

@@ -1,5 +1,7 @@
 # @dawn-ai/config-biome
 
+## 0.8.6
+
 ## 0.8.5
 
 ## 0.8.4

packages/config-biome/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/config-biome",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/config-typescript/CHANGELOG.md

@@ -1,5 +1,7 @@
 # @dawn-ai/config-typescript
 
+## 0.8.6
+
 ## 0.8.5
 
 ## 0.8.4

packages/config-typescript/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/config-typescript",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/core/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @dawn-ai/core
 
+## 0.8.6
+
+### Patch Changes
+
+- 4ede7b8: Add an opt-in execution sandbox: a provider-agnostic `SandboxProvider` contract
+  with a Docker reference (`dockerSandbox`), giving each conversation thread a
+  hard-isolated workspace (filesystem + shell + network). Enable via
+  `dawn.config.ts` `sandbox: { provider: dockerSandbox({ image }) }`; without it,
+  behavior is unchanged. Adds a typed `config()` helper. When sandboxed, the
+  materialized agent cache is bypassed so tools bind per-thread. Honest scope:
+  Docker's boundary (not a microVM); `allow`-mode network denylist is best-effort
+  in the Docker reference. New package `@dawn-ai/sandbox` (+ `@dawn-ai/sandbox/testing`
+  `fakeSandbox` and a provider conformance kit).
+- 1d51b75: Per-tool approval gating: `agent({ tools: { approve: ["deployProd"] } })` makes any named tool require a HITL permission prompt per call (`kind: "tool"` interrupt). Decisions persist name-level under the reserved `tool` key in `.dawn/permissions.json` (exact-name matching); pre-approve via `permissions.allow.tool`. `dawn check` validates `approve` names and warns on overlap with the internally-gated workspace tools, `deny`, and the unsupported `task` case.
+- Updated dependencies [4ede7b8]
+- Updated dependencies [1d51b75]
+  - @dawn-ai/workspace@0.8.6
+  - @dawn-ai/sdk@0.8.6
+  - @dawn-ai/permissions@0.8.6
+  - @dawn-ai/sqlite-storage@0.8.6
+
 ## 0.8.5
 
 ### Patch Changes

packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/core",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/create-dawn-app/CHANGELOG.md

@@ -1,5 +1,11 @@
 # create-dawn-ai-app
 
+## 0.8.6
+
+### Patch Changes
+
+- @dawn-ai/devkit@0.8.6
+
 ## 0.8.5
 
 ### Patch Changes

packages/create-dawn-app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-dawn-ai-app",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/devkit/CHANGELOG.md

@@ -1,5 +1,7 @@
 # @dawn-ai/devkit
 
+## 0.8.6
+
 ## 0.8.5
 
 ## 0.8.4

packages/devkit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/devkit",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/evals/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @dawn-ai/evals
 
+## 0.8.6
+
+### Patch Changes
+
+- @dawn-ai/testing@0.8.6
+
 ## 0.8.5
 
 ### Patch Changes

packages/evals/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/evals",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/langchain/CHANGELOG.md

@@ -1,5 +1,24 @@
 # @dawn-ai/langchain
 
+## 0.8.6
+
+### Patch Changes
+
+- 4ede7b8: Add an opt-in execution sandbox: a provider-agnostic `SandboxProvider` contract
+  with a Docker reference (`dockerSandbox`), giving each conversation thread a
+  hard-isolated workspace (filesystem + shell + network). Enable via
+  `dawn.config.ts` `sandbox: { provider: dockerSandbox({ image }) }`; without it,
+  behavior is unchanged. Adds a typed `config()` helper. When sandboxed, the
+  materialized agent cache is bypassed so tools bind per-thread. Honest scope:
+  Docker's boundary (not a microVM); `allow`-mode network denylist is best-effort
+  in the Docker reference. New package `@dawn-ai/sandbox` (+ `@dawn-ai/sandbox/testing`
+  `fakeSandbox` and a provider conformance kit).
+- Updated dependencies [4ede7b8]
+- Updated dependencies [1d51b75]
+  - @dawn-ai/workspace@0.8.6
+  - @dawn-ai/core@0.8.6
+  - @dawn-ai/sdk@0.8.6
+
 ## 0.8.5
 
 ### Patch Changes

packages/langchain/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/langchain",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/langgraph/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @dawn-ai/langgraph
 
+## 0.8.6
+
+### Patch Changes
+
+- Updated dependencies [1d51b75]
+  - @dawn-ai/sdk@0.8.6
+
 ## 0.8.5
 
 ### Patch Changes

packages/langgraph/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/langgraph",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/memory/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @dawn-ai/memory
 
+## 0.8.6
+
+### Patch Changes
+
+- @dawn-ai/sqlite-storage@0.8.6
+
 ## 0.8.5
 
 ### Patch Changes

packages/memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/memory",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/permissions/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @dawn-ai/permissions
 
+## 0.8.6
+
+### Patch Changes
+
+- 1d51b75: Per-tool approval gating: `agent({ tools: { approve: ["deployProd"] } })` makes any named tool require a HITL permission prompt per call (`kind: "tool"` interrupt). Decisions persist name-level under the reserved `tool` key in `.dawn/permissions.json` (exact-name matching); pre-approve via `permissions.allow.tool`. `dawn check` validates `approve` names and warns on overlap with the internally-gated workspace tools, `deny`, and the unsupported `task` case.
+
 ## 0.8.5
 
 ## 0.8.4

packages/permissions/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/permissions",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/sandbox/CHANGELOG.md

@@ -0,0 +1,17 @@
+# @dawn-ai/sandbox
+
+## 0.8.6
+
+### Patch Changes
+
+- 4ede7b8: Add an opt-in execution sandbox: a provider-agnostic `SandboxProvider` contract
+  with a Docker reference (`dockerSandbox`), giving each conversation thread a
+  hard-isolated workspace (filesystem + shell + network). Enable via
+  `dawn.config.ts` `sandbox: { provider: dockerSandbox({ image }) }`; without it,
+  behavior is unchanged. Adds a typed `config()` helper. When sandboxed, the
+  materialized agent cache is bypassed so tools bind per-thread. Honest scope:
+  Docker's boundary (not a microVM); `allow`-mode network denylist is best-effort
+  in the Docker reference. New package `@dawn-ai/sandbox` (+ `@dawn-ai/sandbox/testing`
+  `fakeSandbox` and a provider conformance kit).
+- Updated dependencies [4ede7b8]
+  - @dawn-ai/workspace@0.8.6

packages/sandbox/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/sandbox",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/sdk/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @dawn-ai/sdk
 
+## 0.8.6
+
+### Patch Changes
+
+- 1d51b75: Per-tool approval gating: `agent({ tools: { approve: ["deployProd"] } })` makes any named tool require a HITL permission prompt per call (`kind: "tool"` interrupt). Decisions persist name-level under the reserved `tool` key in `.dawn/permissions.json` (exact-name matching); pre-approve via `permissions.allow.tool`. `dawn check` validates `approve` names and warns on overlap with the internally-gated workspace tools, `deny`, and the unsupported `task` case.
+
 ## 0.8.5
 
 ## 0.8.4

packages/sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/sdk",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/sqlite-storage/CHANGELOG.md

@@ -1,5 +1,7 @@
 # @dawn-ai/sqlite-storage
 
+## 0.8.6
+
 ## 0.8.5
 
 ## 0.8.4

packages/sqlite-storage/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dawn-ai/sqlite-storage",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "private": false,
   "type": "module",
   "license": "MIT",

packages/testing/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @dawn-ai/testing
 
+## 0.8.6
+
+### Patch Changes
+
+- Updated dependencies [9d115de]
+- Updated dependencies [4ede7b8]
+- Updated dependencies [1d51b75]
+  - @dawn-ai/cli@0.8.6
+  - @dawn-ai/workspace@0.8.6
+  - @dawn-ai/core@0.8.6
+  - @dawn-ai/sdk@0.8.6
+  - @dawn-ai/memory@0.8.6
+
 ## 0.8.5
 
 ### Patch Changes