@adeildo/pi-ask-permission 4.0.0 → 4.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +1 -1
- package/README.md +6 -5
- package/package.json +6 -3
package/LICENSE
CHANGED
package/README.md
CHANGED
|
@@ -24,7 +24,7 @@ Answer `yes`, `always yes`, or `deny`, and add a note if you want. The note reac
|
|
|
24
24
|
pi install npm:@adeildo/pi-ask-permission
|
|
25
25
|
```
|
|
26
26
|
|
|
27
|
-
Then start pi as usual. There is nothing to configure.
|
|
27
|
+
Then start pi as usual. There is nothing to configure. It also comes in [`@adeildo/pi-harness`](../harness), with the rest of the pieces.
|
|
28
28
|
|
|
29
29
|
`pi-ask-permission` on npm is this same extension under an older name, and it reads the same config, grants and sessions. To switch:
|
|
30
30
|
|
|
@@ -159,7 +159,7 @@ A long paste collapses to `[paste #1 +48 lines]` and expands when you confirm.
|
|
|
159
159
|
|
|
160
160
|
### Configuration
|
|
161
161
|
|
|
162
|
-
The settings live in the file every
|
|
162
|
+
The settings live in the file every piece shares, `~/.pi/agent/extensions/pi-harness/settings.json`, under a `permission.` prefix. Every key has a row of the same name in `/perm`, and only what you change is written, so a new default reaches you.
|
|
163
163
|
|
|
164
164
|
```json
|
|
165
165
|
{
|
|
@@ -207,9 +207,9 @@ The `judge` block:
|
|
|
207
207
|
| `riskCeiling` | `0.45` | Highest risk the judge may approve |
|
|
208
208
|
| `timeoutMs` | `5000` | How long to wait for an answer |
|
|
209
209
|
|
|
210
|
-
A malformed value falls back and says what it dropped, so a typo never lets more through.
|
|
210
|
+
A malformed value falls back and says what it dropped, so a typo never lets more through. Keys under an older name are read under the current one. `PI_CODING_AGENT_DIR` moves the file with the rest of the agent directory.
|
|
211
211
|
|
|
212
|
-
|
|
212
|
+
If `~/.pi/agent/extensions/pi-ask-permission/config.json` exists, the next session reads it, writes what you set there into the shared settings, and renames it to `config.json.bak`.
|
|
213
213
|
|
|
214
214
|
### How a call is decided
|
|
215
215
|
|
|
@@ -233,6 +233,7 @@ The judge answers three questions: a verdict, how reversible the call is, and wh
|
|
|
233
233
|
- A bash path the check cannot read counts as outside. `$HOME`, `$SECRET`, and `"$@"` ask for that reason.
|
|
234
234
|
- The read-only check is a classifier, not a sandbox. It trusts the command name as written and does not resolve `PATH`. It refuses anything it cannot prove harmless, so a few safe commands still ask.
|
|
235
235
|
- The judge is a model, and it can be wrong. It sees the tool call, so do not judge calls that carry secrets you would not send to its provider.
|
|
236
|
+
- Pi's `codemode` tool runs a script that calls other tools. The dialog asks about the script, and every call the script makes goes through the same steps on its own.
|
|
236
237
|
- If you want deterministic rules and no human in the loop, use a sandbox instead.
|
|
237
238
|
|
|
238
239
|
### For other extensions
|
|
@@ -271,4 +272,4 @@ See [CONTRIBUTING.md](CONTRIBUTING.md). Commits follow [Conventional Commits](ht
|
|
|
271
272
|
|
|
272
273
|
## License
|
|
273
274
|
|
|
274
|
-
[MIT](LICENSE) ©
|
|
275
|
+
[MIT](LICENSE) © adeildo
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@adeildo/pi-ask-permission",
|
|
3
|
-
"version": "4.
|
|
3
|
+
"version": "4.1.0",
|
|
4
4
|
"description": "A permission dialog for the Pi coding agent. Approve, always approve, or deny a tool call, and attach a note the model reads with the result.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"approval",
|
|
@@ -15,7 +15,7 @@
|
|
|
15
15
|
"bugs": "https://github.com/felipeadeildo/pi-harness/issues",
|
|
16
16
|
"license": "MIT",
|
|
17
17
|
"author": {
|
|
18
|
-
"name": "
|
|
18
|
+
"name": "adeildo",
|
|
19
19
|
"email": "contato@felipeadeildo.com",
|
|
20
20
|
"url": "https://github.com/felipeadeildo"
|
|
21
21
|
},
|
|
@@ -39,6 +39,9 @@
|
|
|
39
39
|
"#ui/*": "./src/ui/*",
|
|
40
40
|
"#util/*": "./src/util/*"
|
|
41
41
|
},
|
|
42
|
+
"exports": {
|
|
43
|
+
".": "./src/index.ts"
|
|
44
|
+
},
|
|
42
45
|
"publishConfig": {
|
|
43
46
|
"access": "public"
|
|
44
47
|
},
|
|
@@ -46,7 +49,7 @@
|
|
|
46
49
|
"prepublishOnly": "cd ../.. && bun run verify"
|
|
47
50
|
},
|
|
48
51
|
"dependencies": {
|
|
49
|
-
"@adeildo/pi-kit": "4.
|
|
52
|
+
"@adeildo/pi-kit": "4.1.0",
|
|
50
53
|
"shell-quote": "^1.10.0"
|
|
51
54
|
},
|
|
52
55
|
"peerDependencies": {
|