@davisliu2006/pi-permission-system 0.2.0 → 0.3.0

package/README.md

@@ -29,7 +29,7 @@ Reject
 
 ## Configuration
 
-The supported top-level keys are: `default`, `tools`, `bash`, and `external_directory`.
+The supported top-level keys are: `default`, `tools`, `bash`, `external_directory`, and `settings`.
 
 `bash` body matching supports wildcard:
 - `*` matches any sequence and `?` matches one character
@@ -39,6 +39,8 @@ The supported top-level keys are: `default`, `tools`, `bash`, and `external_dire
 
 The builtin path tools in pi are: `read`, `write`, `edit`, `find`, `grep`, `ls`. `external_directory` overrides the settings for these path tools. The primary use is to override `write` and `edit` to a stronger policy for external directories.
 
+`settings` holds optional non-permission settings.
+
 ### Rule Precedence
 
 More specific rules override less specific rules:
@@ -90,7 +92,8 @@ Example:
         "rg*": "allow"
     },
     "external_directory": {
-        "write": "ask"
+        "write": "ask",
+        "edit": "ask"
     }
 }
 ```
@@ -103,6 +106,16 @@ Located in the local Pi config folder:
 
 Local configuration overrides global configuration, including `deny` rules.
 
+### Optional Settings
+
+```jsonc
+{
+    "settings": {
+        "ai-model": "provider/model-id"
+    }
+}
+```
+
 ## "Allow Always" Matching
 
 Matching is done as `(tool, body)`.
@@ -122,8 +135,8 @@ Body matching rules:
 
 Bash matching safeguards against unsafe shell syntax.
 
-Simple sequences separated only by `;`, `&&`, `||`, or newlines are split and each segment is matched against `bash` rules. The strictest result wins (`deny` > `ask` > `allow`).
+Sequences separated by `;`, `&&`, `||`, or newlines are split and each segment is matched against `bash` rules. The strictest result wins (`deny` > `ask` > `allow`).
 
-If a command contains other chaining or control syntax (`|`, `&`, command substitution, process substitution, or parentheses), `bash` pattern rules are skipped and the `tools.bash` policy is used instead, falling back to `default`.
+If a command contains other chaining (`|`, `&`, command/process substitution, or parentheses), `bash` pattern rules (except for `deny`) are skipped and the `tools.bash` policy is used instead, falling back to `default`.
 
-"Allow always" for complex or multi-command sequences saves the exact command, not a wildcard.
+"Allow always" for complex sequences saves the exact command, not a wildcard.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@davisliu2006/pi-permission-system",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Permission enforcement extension for the Pi coding agent.",
   "type": "module",
   "main": "./index.ts",
@@ -10,7 +10,8 @@
   "files": [
     "index.ts",
     "src",
-    "README.md"
+    "README.md",
+    "LICENSE"
   ],
   "scripts": {
     "typecheck": "tsc -p tsconfig.json --noEmit",
@@ -21,7 +22,8 @@
     "pi-package",
     "pi",
     "pi-extension",
-    "permissions"
+    "permissions",
+    "pi-permissions"
   ],
   "author": "davisliu2006",
   "license": "MIT",

package/src/ai-gen.ts

@@ -1,5 +1,6 @@
-import { complete, type Message } from "@earendil-works/pi-ai";
+import { complete, type Api, type Message, type Model } from "@earendil-works/pi-ai";
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
+import { parseAiModelRef } from "./types.ts";
 
 export interface CompleteTextOptions {
   systemPrompt: string;
@@ -8,6 +9,8 @@ export interface CompleteTextOptions {
   timeoutMs: number;
   /** How to join multiple text blocks. Defaults to a single space. */
   joinWith?: string;
+  /** Optional `provider/model-id` override. Falls back to the session model. */
+  aiModel?: string;
 }
 
 /**
@@ -23,17 +26,37 @@ function timeoutSignal(signal: AbortSignal | undefined, timeoutMs: number): Abor
 }
 
 /**
- * Runs a single-turn text completion against the extension model.
+ * Resolves the model for helper completions.
+ */
+export function resolveCompletionModel(
+  ctx: ExtensionContext,
+  aiModel?: string
+): Model<Api> | undefined {
+  if (aiModel) {
+    const parsed = parseAiModelRef(aiModel);
+    if (parsed) {
+      const configured = ctx.modelRegistry.find(parsed.provider, parsed.modelId);
+      if (configured && ctx.modelRegistry.hasConfiguredAuth(configured)) {
+        return configured;
+      }
+    }
+  }
+  return ctx.model;
+}
+
+/**
+ * Runs a single-turn text completion against the extension helper model.
  * Returns undefined when the model/auth is unavailable, the call aborts, or no text is returned.
  */
 export async function completeText(
   ctx: ExtensionContext,
   options: CompleteTextOptions
 ): Promise<string | undefined> {
-  if (!ctx.model) {return undefined;}
+  const model = resolveCompletionModel(ctx, options.aiModel);
+  if (!model) {return undefined;}
 
   try {
-    const auth = await ctx.modelRegistry.getApiKeyAndHeaders(ctx.model);
+    const auth = await ctx.modelRegistry.getApiKeyAndHeaders(model);
     if (!auth.ok || !auth.apiKey) {return undefined;}
 
     // prompt
@@ -50,7 +73,7 @@ export async function completeText(
 
     // call model
     const response = await complete(
-      ctx.model,
+      model,
       {
         systemPrompt: options.systemPrompt,
         messages: [message],

package/src/ai-purpose.ts

@@ -41,7 +41,8 @@ function sanitizePurpose(value: string): string | undefined {
 export async function generateRequestPurpose(
   ctx: ExtensionContext,
   request: PermissionRequest,
-  context: string
+  context: string,
+  aiModel?: string
 ): Promise<string | undefined> {
   const key = cacheKey(request);
   const cached = purposeCache.get(key);
@@ -52,6 +53,7 @@ export async function generateRequestPurpose(
     userText: buildPurposeInstructions(context),
     maxTokens: MAX_PURPOSE_TOKENS,
     timeoutMs: PURPOSE_TIMEOUT_MS,
+    aiModel,
   });
   if (!text) {return undefined;}
 

package/src/ai-wildcard.ts

@@ -39,7 +39,8 @@ function sanitizeWildcard(value: string): string | undefined {
  */
 export async function generateBashWildcard(
   ctx: ExtensionContext,
-  command: string
+  command: string,
+  aiModel?: string
 ): Promise<string | undefined> {
   const text = await completeText(ctx, {
     systemPrompt: WILDCARD_SYSTEM_PROMPT,
@@ -47,6 +48,7 @@ export async function generateBashWildcard(
     maxTokens: MAX_WILDCARD_TOKENS,
     timeoutMs: WILDCARD_TIMEOUT_MS,
     joinWith: "\n",
+    aiModel,
   });
   if (!text) {return undefined;}
 
@@ -65,7 +67,8 @@ export async function generateBashWildcard(
  */
 export async function generateBashWildcards(
   ctx: ExtensionContext,
-  commands: readonly string[]
+  commands: readonly string[],
+  aiModel?: string
 ): Promise<string[] | undefined> {
   if (commands.length === 0) {return undefined;}
 
@@ -75,6 +78,7 @@ export async function generateBashWildcards(
     maxTokens: MAX_WILDCARD_LIST_TOKENS,
     timeoutMs: WILDCARD_TIMEOUT_MS,
     joinWith: "\n",
+    aiModel,
   });
   if (!text) {return undefined;}
 

package/src/config.ts

@@ -3,11 +3,13 @@ import { ASK } from "./constants.ts";
 import { parseJsonc } from "./jsonc.ts";
 import {
   createDefaultPermissionConfig,
+  parseAiModelRef,
   toPermissionState,
   toRecord,
   type ConfigWarning,
   type PermissionConfig,
   type PermissionSection,
+  type PermissionSettings,
   type PermissionState,
 } from "./types.ts";
 import {
@@ -16,7 +18,9 @@ import {
   formatConfigReadFailure,
   formatIgnoredSectionEntryWarning,
   formatIgnoredSectionWarning,
+  IGNORED_AI_MODEL_WARNING,
   IGNORED_DEFAULT_WARNING,
+  IGNORED_SETTINGS_WARNING,
 } from "./warning-strings.ts";
 
 const UNSAFE_KEYS = new Set(["__proto__", "constructor", "prototype"]);
@@ -57,11 +61,44 @@ function normalizeSection(
   return result;
 }
 
+/**
+ * Helper used by normalizeConfig.
+ * Ensures settings is a valid PermissionSettings object.
+ */
+function normalizeSettings(
+  raw: unknown,
+  configPath: string | undefined,
+  warnings: ConfigWarning[]
+): PermissionSettings {
+  if (raw === undefined) {return {};}
+  const record = toRecord(raw);
+  if (!record) {
+    warnings.push({
+      path: configPath,
+      message: IGNORED_SETTINGS_WARNING,
+    });
+    return {};
+  }
+
+  const settings: PermissionSettings = {};
+  if (record.ai_model !== undefined) {
+    if (typeof record.ai_model === "string" && parseAiModelRef(record.ai_model)) {
+      settings.ai_model = record.ai_model.trim();
+    } else {
+      warnings.push({
+        path: configPath,
+        message: IGNORED_AI_MODEL_WARNING,
+      });
+    }
+  }
+  return settings;
+}
+
 /**
  * Convert the raw config to a PermissionConfig.
  * Ensures the config is valid.
  */
-function normalizeConfig(
+export function normalizeConfig(
   rawConfig: unknown,
   configPath: string | undefined,
   warnings: ConfigWarning[]
@@ -94,6 +131,7 @@ function normalizeConfig(
       configPath,
       warnings
     ),
+    settings: normalizeSettings(config.settings, configPath, warnings),
   };
 }
 
@@ -167,6 +205,10 @@ export function mergeConfigs(
       ...globalConfig.external_directory,
       ...(localConfig?.external_directory ?? {}),
     },
+    settings: {
+      ...globalConfig.settings,
+      ...(localConfig?.settings ?? {}),
+    },
   };
 }
 

package/src/extension.ts

@@ -22,10 +22,7 @@ import {
 } from "./prompts.ts";
 import { buildRequest } from "./request-builder.ts";
 import { SessionApprovalStore } from "./session-approvals.ts";
-import {
-  buildSelectorSummary,
-  STATUS_SUMMARIZING_REQUEST,
-} from "./ui-strings.ts";
+import { STATUS_SUMMARIZING_REQUEST } from "./ui-strings.ts";
 import {
   CONFIG_WARNING_PREFIX,
   formatSuppressedConfigWarnings,
@@ -126,21 +123,21 @@ export function registerPermissionSystem(pi: ExtensionAPI): void {
     const approval = findSessionApproval(state.approvals.getRules(), request);
     if (approval) {return undefined;} // approved, proceed
 
-    const summary = buildSelectorSummary(request);
     ctx.ui.setStatus(STATUS_KEY, STATUS_SUMMARIZING_REQUEST);
     let purpose: string | undefined;
     try {
       purpose = await generateRequestPurpose(
         ctx,
         request,
-        buildPurposePromptContext(request)
+        buildPurposePromptContext(request),
+        config.settings.ai_model
       );
     } finally {
       ctx.ui.setStatus(STATUS_KEY, undefined);
     }
 
     while (true) {
-      const choice = await promptForPermission(ctx, request, policy, summary, purpose);
+      const choice = await promptForPermission(ctx, request, policy, purpose);
       if (choice.kind === "once") { // approved, proceed
         return;
       }
@@ -149,7 +146,12 @@ export function registerPermissionSystem(pi: ExtensionAPI): void {
       }
 
       // "allow always"
-      const rules = await chooseAlwaysRules(ctx, request, policy);
+      const rules = await chooseAlwaysRules(
+        ctx,
+        request,
+        policy,
+        config.settings.ai_model
+      );
       if (!rules) {
         // the user cancelled the wildcard editor, return to the permission dialog
         continue;

package/src/permission-dialog.ts

@@ -1,4 +1,4 @@
-import type { ExtensionContext, Theme } from "@earendil-works/pi-coding-agent";
+import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 import { ExtensionSelectorComponent } from "@earendil-works/pi-coding-agent";
 import { Container, Text } from "@earendil-works/pi-tui";
 import {
@@ -13,10 +13,11 @@ import type {
   PolicyResolution,
 } from "./types.ts";
 import {
+  buildPlainSelectorSummary,
+  buildStyledSelectorSummary,
   formatAllowAlwaysOption,
   PERMISSION_DIALOG_QUESTION,
   PERMISSION_DIALOG_TITLE,
-  PURPOSE_PREFIX,
 } from "./ui-strings.ts";
 
 function mapChoice(choice: string | undefined | null): PermissionDialogSelection {
@@ -27,14 +28,6 @@ function mapChoice(choice: string | undefined | null): PermissionDialogSelection
   return { kind: "reject" };
 }
 
-/** Bold + color the `Label:` prefix; warning color for note lines. */
-function styleSummaryLine(theme: Theme, line: string): string {
-  const sep = line.indexOf(": ");
-  if (sep === -1) {return theme.fg("text", line);}
-  return theme.fg("accent", theme.bold(line.slice(0, sep + 1)))
-    + theme.fg("text", line.slice(sep + 1));
-}
-
 /**
  * Shows permission dialog and gets input.
  */
@@ -42,7 +35,6 @@ export async function promptForPermission(
   ctx: ExtensionContext,
   request: PermissionRequest,
   policy: PolicyResolution,
-  summary: string,
   purpose?: string
 ): Promise<PermissionDialogSelection> {
   const options = [ALLOW_ONCE, formatAllowAlwaysOption(request, policy), REJECT];
@@ -50,8 +42,8 @@ export async function promptForPermission(
   try {
     // non-tui mode fallback
     if (ctx.mode !== "tui") {
-      const purposeLine = purpose ? `\n${PURPOSE_PREFIX}${purpose}` : "";
-      const title = `${PERMISSION_DIALOG_TITLE}\n${summary}${purposeLine}\n${PERMISSION_DIALOG_QUESTION}`;
+      const summary = buildPlainSelectorSummary(request, purpose);
+      const title = `${PERMISSION_DIALOG_TITLE}\n${summary}\n${PERMISSION_DIALOG_QUESTION}`;
       return mapChoice(await ctx.ui.select(title, options));
     }
 
@@ -59,11 +51,8 @@ export async function promptForPermission(
     const choice = await ctx.ui.custom<string | null>((tui, theme, _kb, done) => {
       const container = new Container();
       container.addChild(new Text(theme.fg("accent", theme.bold(PERMISSION_DIALOG_TITLE)), 1, 0));
-      for (const line of summary.split("\n")) {
-        container.addChild(new Text(styleSummaryLine(theme, line), 1, 0));
-      }
-      if (purpose) {
-        container.addChild(new Text(styleSummaryLine(theme, `${PURPOSE_PREFIX}${purpose}`), 1, 0));
+      for (const line of buildStyledSelectorSummary(theme, request, purpose)) {
+        container.addChild(new Text(line, 1, 0));
       }
 
       const selector = new ExtensionSelectorComponent(

package/src/policy-bash.ts

@@ -75,6 +75,26 @@ function combineBashSegmentResolutions(
   return worst;
 }
 
+/**
+ * "Deny" rule can do raw wildcard matching on complex segments.
+ */
+function resolveComplexBashDeny(
+  config: PermissionConfig,
+  segments: readonly string[]
+): PolicyResolution | undefined {
+  let denied: PolicyResolution | undefined;
+  for (const segment of segments) {
+    const match = findLastWildcardMatch(config.bash, segment);
+    if (match?.state !== "deny") {continue;}
+    denied = {
+      state: "deny",
+      source: "bash",
+      matchedPattern: match.pattern,
+    };
+  }
+  return denied;
+}
+
 /**
  * Resolves bash policy, including simple list splitting.
  */
@@ -84,7 +104,10 @@ export function resolveBashPolicy(
 ): PolicyResolution {
   const analysis = bashAnalysisOf(request);
   if (analysis.isComplex) {
-    return bashFallbackResolution(config);
+    return (
+      resolveComplexBashDeny(config, analysis.segments) ??
+      bashFallbackResolution(config)
+    );
   }
   const resolutions = analysis.segments.map((segment) =>
     resolveBashSegment(config, segment)

package/src/shell.ts

@@ -2,7 +2,11 @@
  * Result of a conservative shell scan.
  *
  * When `isComplex` is false, `segments` are commands separated only by `;`,
- * `&&`, `||`, or newlines (or a single command). When true, `segments` is empty.
+ * `&&`, `||`, or newlines (or a single command).
+ *
+ * When `isComplex` is true because of `|` / `|&`, `segments` are still filled
+ * so deny rules can be checked per stage. Other complex syntax returns empty
+ * `segments`.
  */
 export type ShellCommandAnalysis = {
   isComplex: boolean;
@@ -17,6 +21,7 @@ const COMPLEX: ShellCommandAnalysis = { isComplex: true, segments: [] };
  *
  * Splits on:
  * - `;`, `&&`, `||`, and newlines outside quotes
+ * - '|' and '|&' outside quotes (also treated as complex)
  *
  * Treats as complex:
  * - Substitutions like `command` and $(command)
@@ -27,6 +32,7 @@ export function analyzeShellCommand(command: string): ShellCommandAnalysis {
   let quote: "'" | '"' | undefined;
   let index = 0;
   let current = "";
+  let isComplex = false;
   const segments: string[] = [];
 
   const pushCurrent = (): void => {
@@ -47,7 +53,7 @@ export function analyzeShellCommand(command: string): ShellCommandAnalysis {
     }
     if (quote === '"') {
       if (character === "\\") {
-        current += character + (command[index + 1] ?? "");
+        current += character + (command[index+1] ?? "");
         index += 2;
         continue;
       }
@@ -58,7 +64,7 @@ export function analyzeShellCommand(command: string): ShellCommandAnalysis {
         continue;
       }
       if (character === "`") {return COMPLEX;}
-      if (character === "$" && command[index + 1] === "(") {return COMPLEX;}
+      if (character === "$" && command[index+1] === "(") {return COMPLEX;}
       current += character;
       index++;
       continue;
@@ -66,7 +72,7 @@ export function analyzeShellCommand(command: string): ShellCommandAnalysis {
 
     // escape character
     if (character === "\\") {
-      current += character + (command[index + 1] ?? "");
+      current += character + (command[index+1] ?? "");
       index += 2;
       continue;
     }
@@ -86,7 +92,7 @@ export function analyzeShellCommand(command: string): ShellCommandAnalysis {
     }
 
     if (character === "`") {return COMPLEX;}
-    if (character === "$" && command[index + 1] === "(") {return COMPLEX;}
+    if (character === "$" && command[index+1] === "(") {return COMPLEX;}
     if (character === "(" || character === ")") {return COMPLEX;}
 
     // simple separators
@@ -102,14 +108,18 @@ export function analyzeShellCommand(command: string): ShellCommandAnalysis {
       continue;
     }
     if (character === "|") {
-      if (command[index+1] !== "|") {return COMPLEX;}
       pushCurrent();
-      index += 2;
+      if (command[index+1] === "|") {
+        index += 2;
+        continue;
+      }
+      isComplex = true;
+      index += command[index+1] === "&" ? 2 : 1;
       continue;
     }
     if (character === "\n" || character === "\r") {
       pushCurrent();
-      if (character === "\r" && command[index + 1] === "\n") {index += 2;}
+      if (character === "\r" && command[index+1] === "\n") {index += 2;}
       else {index++;}
       continue;
     }
@@ -123,7 +133,7 @@ export function analyzeShellCommand(command: string): ShellCommandAnalysis {
 
   pushCurrent();
   return {
-    isComplex: false,
+    isComplex,
     segments: segments.length > 0 ? segments : [""],
   };
 }

package/src/types.ts

@@ -21,15 +21,37 @@ export function toPermissionState(value: unknown): PermissionState | undefined {
 
 export type PermissionSection = Record<string, PermissionState>;
 
+export interface PermissionSettings {
+  /** `provider/model-id` override for small helper completions. */
+  ai_model?: string;
+}
+
 export interface PermissionConfig {
   default: PermissionState;
   tools: PermissionSection;
   bash: PermissionSection;
   external_directory: PermissionSection;
+  settings: PermissionSettings;
 }
 
 export function createDefaultPermissionConfig(): PermissionConfig {
-  return { default: ASK, tools: {}, bash: {}, external_directory: {} };
+  return { default: ASK, tools: {}, bash: {}, external_directory: {}, settings: {} };
+}
+
+/**
+ * Parses `provider/model-id`.
+ * Splits using the first '/'.
+ */
+export function parseAiModelRef(
+  value: string
+): { provider: string; modelId: string } | undefined {
+  const trimmed = value.trim();
+  const slash = trimmed.indexOf("/");
+  if (slash <= 0 || slash >= trimmed.length - 1) {return undefined;}
+  const provider = trimmed.slice(0, slash).trim();
+  const modelId = trimmed.slice(slash + 1).trim();
+  if (!provider || !modelId) {return undefined;}
+  return { provider, modelId };
 }
 
 // permission request

package/src/ui-strings.ts

@@ -1,3 +1,4 @@
+import type { Theme } from "@earendil-works/pi-coding-agent";
 import {
   ALLOW_ALWAYS_EXACT,
   ALLOW_ALWAYS_WILDCARD,
@@ -10,7 +11,6 @@ export const STATUS_GENERATING_WILDCARD = "Generating bash wildcard...";
 
 export const PERMISSION_DIALOG_TITLE = "Permission Required";
 export const PERMISSION_DIALOG_QUESTION = "What should the agent be allowed to do?";
-export const PURPOSE_PREFIX = "Purpose: ";
 
 export const WILDCARD_EDITOR_TITLE = "Review bash wildcard";
 export const WILDCARD_LIST_EDITOR_TITLE = "Review bash wildcards (semicolon-separated)";
@@ -19,34 +19,75 @@ export const BROAD_WILDCARD_TITLE = "Very broad wildcard";
 const CHAINED_BASH_NOTE = "Shell chaining detected.";
 const EXTERNAL_DIRECTORY_NOTE = "Outside the current working directory.";
 
+type SummaryLine = {
+  label?: string;
+  value: string;
+};
+
 function preview(value: string, limit: number): string {
   const normalized = value.replace(/\r\n/g, "\n");
   return normalized.length > limit ? `${normalized.slice(0, limit)}...` : normalized;
 }
 
-/**
- * Summary shown in the permission select dialog.
- */
-export function buildSelectorSummary(request: PermissionRequest): string {
-  const lines = [
-    `Tool: ${request.toolName}`,
+function buildSelectorSummaryLines(
+  request: PermissionRequest,
+  purpose?: string
+): SummaryLine[] {
+  const lines: SummaryLine[] = [
+    { label: "Tool", value: request.toolName },
   ];
-
   if (request.bodyKind === "command") {
-    lines.push(`Command: ${preview(request.body, 600)}`);
+    lines.push({ label: "Command", value: preview(request.body, 600) });
     if (request.bashAnalysis?.isComplex) {
-      lines.push(CHAINED_BASH_NOTE);
+      lines.push({ value: CHAINED_BASH_NOTE });
     }
   } else if (request.bodyKind === "path") {
-    lines.push(`Path: ${preview(request.body, 400)}`);
+    lines.push({ label: "Path", value: preview(request.body, 400) });
     if (request.isExternalDirectory) {
-      lines.push(EXTERNAL_DIRECTORY_NOTE);
+      lines.push({ value: EXTERNAL_DIRECTORY_NOTE });
     }
   } else {
-    lines.push(`Input: ${preview(request.body, 600)}`);
+    lines.push({ label: "Input", value: preview(request.body, 600) });
   }
+  if (purpose) {
+    lines.push({ label: "Purpose", value: purpose });
+  }
+  return lines;
+}
+
+/**
+ * Plain summary shown in the non-TUI permission dialog.
+ */
+export function buildPlainSelectorSummary(
+  request: PermissionRequest,
+  purpose?: string
+): string {
+  return buildSelectorSummaryLines(request, purpose)
+    .map((line) => (
+      line.label ? `${line.label}: ${line.value}` : line.value)
+    )
+    .join("\n");
+}
 
-  return lines.join("\n");
+/**
+ * Styled summary lines shown in the TUI permission dialog.
+ */
+export function buildStyledSelectorSummary(
+  theme: Theme,
+  request: PermissionRequest,
+  purpose?: string
+): string[] {
+  return buildSelectorSummaryLines(request, purpose).map((line) => {
+    if (!line.label) {
+      return theme.fg("muted", line.value);
+    }
+    if (line.label === "Purpose") {
+      return theme.fg("accent", theme.bold(`${line.label}:`))
+        + theme.fg("muted", ` ${line.value}`);
+    }
+    return theme.fg("accent", theme.bold(`${line.label}:`))
+      + theme.fg("text", ` ${line.value}`);
+  });
 }
 
 /**

package/src/warning-strings.ts

@@ -7,6 +7,10 @@ export const CONFIG_MUST_BE_OBJECT =
   "Permission config must be a JSON object; using defaults.";
 export const IGNORED_DEFAULT_WARNING =
   `Ignoring "default": expected ${PERMISSION_STATES_DESCRIPTION}.`;
+export const IGNORED_SETTINGS_WARNING =
+  'Ignoring "settings": expected an object.';
+export const IGNORED_AI_MODEL_WARNING =
+  'Ignoring "settings.ai_model": expected a string like "provider/model-id".';
 
 export const WILDCARD_LENGTH_REASON =
   "Pattern must be between 1 and 500 characters.";

package/src/wildcard-editor.ts

@@ -28,12 +28,13 @@ import type {
  */
 async function chooseSingleWildcard(
   ctx: ExtensionContext,
-  command: string
+  command: string,
+  aiModel?: string
 ): Promise<AllowAlwaysRule | undefined> {
   ctx.ui.setStatus(STATUS_KEY, STATUS_GENERATING_WILDCARD);
   let suggestion: string | undefined;
   try {
-    suggestion = await generateBashWildcard(ctx, command);
+    suggestion = await generateBashWildcard(ctx, command, aiModel);
   } finally {
     ctx.ui.setStatus(STATUS_KEY, undefined);
   }
@@ -71,12 +72,13 @@ async function chooseSingleWildcard(
  */
 async function chooseWildcardListRules(
   ctx: ExtensionContext,
-  commands: readonly string[]
+  commands: readonly string[],
+  aiModel?: string
 ): Promise<AllowAlwaysRule[] | undefined> {
   ctx.ui.setStatus(STATUS_KEY, STATUS_GENERATING_WILDCARD);
   let suggestion: string[] | undefined;
   try {
-    suggestion = await generateBashWildcards(ctx, commands);
+    suggestion = await generateBashWildcards(ctx, commands, aiModel);
   } finally {
     ctx.ui.setStatus(STATUS_KEY, undefined);
   }
@@ -118,18 +120,19 @@ async function chooseWildcardListRules(
 export async function chooseAlwaysRules(
   ctx: ExtensionContext,
   request: PermissionRequest,
-  policy: PolicyResolution
+  policy: PolicyResolution,
+  aiModel?: string
 ): Promise<AllowAlwaysRule[] | undefined> {
   const mode = resolveAllowAlwaysMode(request, policy);
 
   if (mode === "wildcard") {
-    const rule = await chooseSingleWildcard(ctx, request.body);
+    const rule = await chooseSingleWildcard(ctx, request.body, aiModel);
     return rule ? [rule] : undefined;
   }
 
   if (mode === "wildcard-list") {
     const analysis = request.bashAnalysis ?? analyzeShellCommand(request.body);
-    return chooseWildcardListRules(ctx, analysis.segments);
+    return chooseWildcardListRules(ctx, analysis.segments, aiModel);
   }
 
   return [{ kind: "exact", tool: request.toolName, body: request.body }];

package/src/wildcard-validation.ts

@@ -76,7 +76,7 @@ export function validateWildcardSuggestionList(
     if (!result.valid) {
       return {
         valid: false,
-        reason: formatWildcardListItemReason(index + 1, pattern, result.reason),
+        reason: formatWildcardListItemReason(index+1, pattern, result.reason),
       };
     }
     if (result.broad) {broadPatterns.push(pattern);}