@diegopetrucci/pi-extensions 0.1.45 → 0.1.47

package/extensions/brrr/README.md

@@ -35,6 +35,8 @@ Config files are merged, with project config overriding global config:
 - `~/.pi/agent/extensions/brrr.json`
 - `<project>/.pi/brrr.json`
 
+Project config is only read after Pi reports that the project is trusted.
+
 The default config expects your webhook in `BRRR_WEBHOOK_URL`:
 
 ```bash

package/extensions/brrr/index.ts

@@ -6,7 +6,7 @@
  *
  * Config files (project overrides global):
  * - ~/.pi/agent/extensions/brrr.json
- * - <cwd>/.pi/brrr.json
+ * - <cwd>/.pi/brrr.json, when the project is trusted
  */
 
 import { execFile } from "node:child_process";
@@ -16,6 +16,7 @@ import { promisify } from "node:util";
 import { getAgentDir, type ExtensionAPI, type ExtensionCommandContext } from "@earendil-works/pi-coding-agent";
 
 const execFileAsync = promisify(execFile);
+const CONFIG_DIR_NAME = ".pi";
 
 interface BrrrConfig {
 	enabled: boolean;
@@ -40,6 +41,11 @@ interface BrrrPayload {
 	image_url?: string;
 }
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 const DEFAULT_CONFIG: BrrrConfig = {
 	enabled: true,
 	onlyWhenInteractive: true,
@@ -71,9 +77,15 @@ function mergeConfig(base: BrrrConfig, overrides: Partial<BrrrConfig>): BrrrConf
 	};
 }
 
-function loadConfig(cwd: string): BrrrConfig {
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
+function loadConfig(ctx: ProjectConfigContext): BrrrConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "brrr.json"));
-	const projectConfig = readConfigFile(join(cwd, ".pi", "brrr.json"));
+	const projectConfig = canReadProjectConfig(ctx)
+		? readConfigFile(join(ctx.cwd, CONFIG_DIR_NAME, "brrr.json"))
+		: {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -219,13 +231,13 @@ export default function brrrExtension(pi: ExtensionAPI) {
 	pi.registerCommand("brrr", {
 		description: "Show brrr notification status",
 		handler: async (_args, ctx) => {
-			const config = loadConfig(ctx.cwd);
+			const config = loadConfig(ctx);
 			notify(ctx, describeConfig(config, resolveWebhook(config.webhook)));
 		},
 	});
 
 	pi.on("agent_end", async (event, ctx) => {
-		const config = loadConfig(ctx.cwd);
+		const config = loadConfig(ctx);
 		if (!config.enabled) return;
 		if (config.onlyWhenInteractive && !ctx.hasUI) return;
 

package/extensions/brrr/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-brrr",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "A pi extension that sends brrr push notifications when pi is ready for input.",
   "keywords": [
     "pi-package",

package/extensions/claude-fast/README.md

@@ -51,7 +51,7 @@ Optional project config:
 .pi/claude-fast.json
 ```
 
-Project config overrides global config.
+Project config overrides global config after Pi reports that the project is trusted.
 
 ```json
 {

package/extensions/claude-fast/index.ts

@@ -6,6 +6,8 @@ import {
 	type ExtensionContext,
 } from "@earendil-works/pi-coding-agent";
 
+const CONFIG_DIR_NAME = ".pi";
+
 const EXTENSION_ID = "claude-fast";
 const PROVIDER_ID = "anthropic";
 const API_ID = "anthropic-messages";
@@ -35,6 +37,11 @@ type SessionState = {
 	lastInjectedModel?: string;
 };
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 type RecursivePartial<T> = {
 	[P in keyof T]?: T[P] extends object ? RecursivePartial<T[P]> : T[P];
 };
@@ -77,21 +84,25 @@ function mergeConfig(
 	};
 }
 
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
 function findProjectConfigPath(cwd: string): string {
 	let current = cwd;
 	while (true) {
-		const candidate = join(current, ".pi", "claude-fast.json");
+		const candidate = join(current, CONFIG_DIR_NAME, "claude-fast.json");
 		if (existsSync(candidate)) return candidate;
 
 		const parent = dirname(current);
-		if (parent === current) return join(cwd, ".pi", "claude-fast.json");
+		if (parent === current) return join(cwd, CONFIG_DIR_NAME, "claude-fast.json");
 		current = parent;
 	}
 }
 
-function loadConfig(cwd: string): ClaudeFastConfig {
+function loadConfig(ctx: ProjectConfigContext): ClaudeFastConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "claude-fast.json"));
-	const projectConfig = readConfigFile(findProjectConfigPath(cwd));
+	const projectConfig = canReadProjectConfig(ctx) ? readConfigFile(findProjectConfigPath(ctx.cwd)) : {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -235,7 +246,7 @@ export default function claudeFastExtension(pi: ExtensionAPI) {
 		let state = states.get(ctx.sessionManager);
 		if (!state) {
 			state = {
-				config: loadConfig(ctx.cwd),
+				config: loadConfig(ctx),
 				override: "auto",
 			};
 			states.set(ctx.sessionManager, state);
@@ -245,7 +256,7 @@ export default function claudeFastExtension(pi: ExtensionAPI) {
 
 	pi.on("session_start", (_event, ctx) => {
 		const state: SessionState = {
-			config: loadConfig(ctx.cwd),
+			config: loadConfig(ctx),
 			override: "auto",
 		};
 		states.set(ctx.sessionManager, state);

package/extensions/claude-fast/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-claude-fast",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "A pi extension that enables Anthropic Claude Fast mode for supported Claude Opus models by injecting speed=fast.",
   "keywords": [
     "pi-package",

package/extensions/librarian/index.ts

@@ -629,20 +629,56 @@ function buildUserPrompt(query: string, repos: string[], owners: string[], maxSe
 	return `Task: locate and cite exact GitHub code locations that answer the query.\n\nQuery: ${query}\nRepository filters: ${repos.length ? repos.join(", ") : "(none)"}\nOwner filters: ${owners.length ? owners.join(", ") : "(none)"}\nMax search results per gh search call: ${maxSearchResults}\nLocal checkout cache: ${cache.mode === "enabled" ? `enabled at ${cache.root}` : "disabled"}\nCache decision: ${cache.decisionReason}\n\nRespond directly with concise, citation-heavy findings. Always pass --limit ${maxSearchResults} to gh search code unless a narrower command is clearly better.`;
 }
 
-function extractLastAssistantText(messages: unknown[]): string {
+type AssistantLikeMessage = {
+	role?: string;
+	content?: unknown;
+	stopReason?: unknown;
+	errorMessage?: unknown;
+};
+
+function getLastAssistantMessage(messages: unknown[]): AssistantLikeMessage | undefined {
 	for (let i = messages.length - 1; i >= 0; i--) {
-		const message = messages[i] as { role?: string; content?: unknown };
-		if (message?.role !== "assistant" || !Array.isArray(message.content)) continue;
-		const parts: string[] = [];
-		for (const part of message.content) {
-			if (part && typeof part === "object" && (part as { type?: string }).type === "text") {
-				const text = (part as { text?: unknown }).text;
-				if (typeof text === "string") parts.push(text);
-			}
+		const message = messages[i] as AssistantLikeMessage;
+		if (message?.role === "assistant") return message;
+	}
+	return undefined;
+}
+
+function extractLastAssistantText(messages: unknown[]): string {
+	const message = getLastAssistantMessage(messages);
+	if (!message || !Array.isArray(message.content)) return "";
+	const parts: string[] = [];
+	for (const part of message.content) {
+		if (part && typeof part === "object" && (part as { type?: string }).type === "text") {
+			const text = (part as { text?: unknown }).text;
+			if (typeof text === "string") parts.push(text);
 		}
-		if (parts.length) return parts.join("").trim();
 	}
-	return "";
+	return parts.join("").trim();
+}
+
+function describeNoAnswerReason(message: AssistantLikeMessage | undefined, turns: number): string {
+	if (!message) return "the internal subagent produced no assistant message";
+	if (message.stopReason === "error") {
+		const errorMessage = typeof message.errorMessage === "string" && message.errorMessage.trim()
+			? message.errorMessage.trim()
+			: "provider/model error";
+		return `the internal subagent stopped with an error: ${errorMessage}`;
+	}
+	if (message.stopReason === "aborted") return "the internal subagent was aborted before producing an answer";
+	if (turns >= MAX_TURNS) return `the internal subagent reached the ${MAX_TURNS}-turn budget without producing a final answer`;
+	const stopReason = typeof message.stopReason === "string" && message.stopReason.trim()
+		? ` (stopReason: ${message.stopReason.trim()})`
+		: "";
+	return `the internal subagent completed without final assistant text${stopReason}`;
+}
+
+function formatInternalFailure(details: LibrarianDetails, reason: string): string {
+	return [
+		`Internal librarian run failed: ${reason}.`,
+		`Diagnostics: status=${details.status}; model=${details.model.modelRef}; thinking=${details.model.thinkingLevel}; modelSelection=${details.model.autoSelected ? "auto" : "configured"}; turns=${details.turns}; toolCalls=${details.toolCalls.length}.`,
+		"No answer was produced. This is not a reliable \"no results found\" signal; retry later or configure a different Librarian model with /librarian-config.",
+	].join("\n");
 }
 
 function formatToolCall(call: ToolCall): string {
@@ -847,6 +883,13 @@ export default function librarianExtension(pi: ExtensionAPI) {
 		},
 	});
 
+	pi.on("tool_result", async (event) => {
+		if (event.toolName !== "librarian") return undefined;
+		const details = event.details as LibrarianDetails | undefined;
+		if (details?.status !== "error") return undefined;
+		return { isError: true };
+	});
+
 	pi.registerTool({
 		name: "librarian",
 		label: "Librarian",
@@ -1034,9 +1077,20 @@ export default function librarianExtension(pi: ExtensionAPI) {
 					await Promise.race([promptPromise, timeoutPromise]);
 				}
 
+				const lastAssistant = session ? getLastAssistantMessage(session.state.messages) : undefined;
 				const answer = session ? extractLastAssistantText(session.state.messages) : "";
-				lastContent = answer || (aborted ? "Aborted" : "(no output)");
-				details.status = aborted ? "aborted" : "done";
+				if (answer) {
+					lastContent = answer;
+					details.status = "done";
+				} else if (aborted) {
+					lastContent = "Aborted";
+					details.status = "aborted";
+				} else {
+					details.status = "error";
+					const reason = describeNoAnswerReason(lastAssistant, details.turns);
+					lastContent = formatInternalFailure(details, reason);
+					details.error = reason;
+				}
 				details.endedAt = Date.now();
 				emit(true);
 

package/extensions/minimal-footer/README.md

@@ -76,6 +76,8 @@ Config files are merged, with project config overriding global config:
 - `~/.pi/agent/extensions/minimal-footer.json`
 - `<project>/.pi/minimal-footer.json`
 
+Project config is only read after Pi reports that the project is trusted.
+
 A ready-to-copy sample file is included at [`minimal-footer.example.json`](./minimal-footer.example.json).
 
 Example:

package/extensions/minimal-footer/index.ts

@@ -14,6 +14,8 @@ import {
 	type UsageSnapshot,
 } from "./openai-usage";
 
+const CONFIG_DIR_NAME = ".pi";
+
 const DEFAULT_CONFIG: MinimalFooterConfig = {
 	context: {
 		showPercent: true,
@@ -93,6 +95,11 @@ type UsageSessionState = {
 	requestRender?: () => void;
 };
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 function readConfigFile(path: string): RecursivePartial<MinimalFooterConfig> {
 	if (!existsSync(path)) return {};
 
@@ -177,21 +184,25 @@ function normalizeDumbZoneColor(value: unknown, fallback: DumbZoneColor): DumbZo
 	return DUMB_ZONE_COLORS.has(value as DumbZoneColor) ? (value as DumbZoneColor) : fallback;
 }
 
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
 function findProjectConfigPath(cwd: string): string {
 	let current = cwd;
 	while (true) {
-		const candidate = join(current, ".pi", "minimal-footer.json");
+		const candidate = join(current, CONFIG_DIR_NAME, "minimal-footer.json");
 		if (existsSync(candidate)) return candidate;
 
 		const parent = dirname(current);
-		if (parent === current) return join(cwd, ".pi", "minimal-footer.json");
+		if (parent === current) return join(cwd, CONFIG_DIR_NAME, "minimal-footer.json");
 		current = parent;
 	}
 }
 
-function loadConfig(cwd: string): MinimalFooterConfig {
+function loadConfig(ctx: ProjectConfigContext): MinimalFooterConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "minimal-footer.json"));
-	const projectConfig = readConfigFile(findProjectConfigPath(cwd));
+	const projectConfig = canReadProjectConfig(ctx) ? readConfigFile(findProjectConfigPath(ctx.cwd)) : {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -268,7 +279,7 @@ export default function (pi: ExtensionAPI) {
 	pi.on("session_start", (_event, ctx) => {
 		const state: UsageSessionState = {
 			authStorage: AuthStorage.create(),
-			config: loadConfig(ctx.cwd),
+			config: loadConfig(ctx),
 			loading: false,
 		};
 		states.set(ctx.sessionManager, state);

package/extensions/minimal-footer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-minimal-footer",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "A minimal custom footer for pi.",
   "keywords": [
     "pi-package",

package/extensions/notify/README.md

@@ -67,6 +67,8 @@ Config files are merged, with project config overriding global config:
 - `~/.pi/agent/extensions/notify.json`
 - `<project>/.pi/notify.json`
 
+Project config is only read after Pi reports that the project is trusted.
+
 A ready-to-copy sample file is included at [`notify.example.json`](./notify.example.json).
 
 Example:

package/extensions/notify/index.ts

@@ -10,7 +10,7 @@
  *
  * Config files (project overrides global):
  * - ~/.pi/agent/extensions/notify.json
- * - <cwd>/.pi/notify.json
+ * - <cwd>/.pi/notify.json, when the project is trusted
  */
 
 import { execFile } from "node:child_process";
@@ -19,10 +19,17 @@ import { join } from "node:path";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import { getAgentDir } from "@earendil-works/pi-coding-agent";
 
+const CONFIG_DIR_NAME = ".pi";
+
 type TerminalBackend = "auto" | "osc777" | "osc99" | "none";
 type DesktopBackend = "auto" | "macos" | "linux" | "windows-toast" | "none";
 type SoundBackend = "auto" | "macos" | "linux" | "windows-beep" | "command" | "none";
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 interface NotifyConfig {
 	enabled: boolean;
 	onlyWhenInteractive: boolean;
@@ -111,9 +118,15 @@ function mergeConfig(base: NotifyConfig, overrides: Partial<NotifyConfig>): Noti
 	};
 }
 
-function loadConfig(cwd: string): NotifyConfig {
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
+function loadConfig(ctx: ProjectConfigContext): NotifyConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "notify.json"));
-	const projectConfig = readConfigFile(join(cwd, ".pi", "notify.json"));
+	const projectConfig = canReadProjectConfig(ctx)
+		? readConfigFile(join(ctx.cwd, CONFIG_DIR_NAME, "notify.json"))
+		: {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -245,7 +258,7 @@ async function playSound(config: NotifyConfig, backend: Exclude<SoundBackend, "a
 
 export default function notifyExtension(pi: ExtensionAPI) {
 	pi.on("agent_end", async (_event, ctx) => {
-		const config = loadConfig(ctx.cwd);
+		const config = loadConfig(ctx);
 		if (!config.enabled) return;
 		if (config.onlyWhenInteractive && !ctx.hasUI) return;
 

package/extensions/notify/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-notify",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "A pi extension that sends a notification when the agent is ready for input.",
   "keywords": [
     "pi-package",

package/extensions/openai-fast/README.md

@@ -46,7 +46,7 @@ Optional project config:
 .pi/openai-fast.json
 ```
 
-Project config overrides global config.
+Project config overrides global config after Pi reports that the project is trusted.
 
 ```json
 {

package/extensions/openai-fast/index.ts

@@ -6,6 +6,8 @@ import {
 	type ExtensionContext,
 } from "@earendil-works/pi-coding-agent";
 
+const CONFIG_DIR_NAME = ".pi";
+
 const EXTENSION_ID = "openai-fast";
 const PROVIDER_ID = "openai-codex";
 const API_ID = "openai-codex-responses";
@@ -33,6 +35,11 @@ type SessionState = {
 	lastInjectedModel?: string;
 };
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 type RecursivePartial<T> = {
 	[P in keyof T]?: T[P] extends object ? RecursivePartial<T[P]> : T[P];
 };
@@ -71,21 +78,25 @@ function mergeConfig(
 	};
 }
 
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
 function findProjectConfigPath(cwd: string): string {
 	let current = cwd;
 	while (true) {
-		const candidate = join(current, ".pi", "openai-fast.json");
+		const candidate = join(current, CONFIG_DIR_NAME, "openai-fast.json");
 		if (existsSync(candidate)) return candidate;
 
 		const parent = dirname(current);
-		if (parent === current) return join(cwd, ".pi", "openai-fast.json");
+		if (parent === current) return join(cwd, CONFIG_DIR_NAME, "openai-fast.json");
 		current = parent;
 	}
 }
 
-function loadConfig(cwd: string): OpenAIFastConfig {
+function loadConfig(ctx: ProjectConfigContext): OpenAIFastConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "openai-fast.json"));
-	const projectConfig = readConfigFile(findProjectConfigPath(cwd));
+	const projectConfig = canReadProjectConfig(ctx) ? readConfigFile(findProjectConfigPath(ctx.cwd)) : {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -211,7 +222,7 @@ export default function openAIFastExtension(pi: ExtensionAPI) {
 		let state = states.get(ctx.sessionManager);
 		if (!state) {
 			state = {
-				config: loadConfig(ctx.cwd),
+				config: loadConfig(ctx),
 				override: "auto",
 			};
 			states.set(ctx.sessionManager, state);
@@ -221,7 +232,7 @@ export default function openAIFastExtension(pi: ExtensionAPI) {
 
 	pi.on("session_start", (_event, ctx) => {
 		const state: SessionState = {
-			config: loadConfig(ctx.cwd),
+			config: loadConfig(ctx),
 			override: "auto",
 		};
 		states.set(ctx.sessionManager, state);

package/extensions/openai-fast/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-openai-fast",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "A pi extension that enables OpenAI Codex Fast mode for ChatGPT-auth GPT-5.4 and GPT-5.5 by injecting the priority service tier.",
   "keywords": [
     "pi-package",

package/extensions/oracle/index.ts

@@ -557,6 +557,26 @@ function extractTextFromContent(content: unknown): string {
 	return parts.join("\n\n").trim();
 }
 
+// Errors that typically resolve on retry: provider overload, rate limiting,
+// transient 5xx, gateway/network failures, and request timeouts. Keep this list
+// pattern-based so we recognize variants across providers without enumerating them.
+const TRANSIENT_ERROR_PATTERN =
+	/\b(overload(?:ed)?|rate[ _-]?limit(?:ed)?|too many requests|429|500|502|503|504|bad gateway|service unavailable|gateway timeout|temporarily unavailable|timed?[ _-]?out|timeout|econnreset|econnrefused|etimedout|enetunreach|socket hang up|fetch failed)\b/i;
+
+function isTransientErrorMessage(message: string): boolean {
+	return TRANSIENT_ERROR_PATTERN.test(message);
+}
+
+function formatOracleModelError(stopReason: "error" | "aborted", errorMessage: string | undefined): string {
+	const trimmed = errorMessage?.trim();
+	if (stopReason === "aborted") {
+		return trimmed ? `Oracle model turn aborted: ${trimmed}` : "Oracle model turn aborted.";
+	}
+	if (!trimmed) return "Oracle model error (no detail provided by provider).";
+	const base = `Oracle model error: ${trimmed}`;
+	return isTransientErrorMessage(trimmed) ? `${base} (transient; retry may succeed)` : base;
+}
+
 function parseVersionScore(text: string): number {
 	const matches = text.match(/\d+(?:\.\d+){0,2}/g) ?? [];
 	let best = 0;
@@ -817,6 +837,9 @@ async function runOracle(
 	let finalOutput = "";
 	let stderr = "";
 
+	let lastStopReason: string | undefined;
+	let lastErrorMessage: string | undefined;
+
 	const details: OracleDetails = {
 		...selection,
 		includeBash,
@@ -888,6 +911,11 @@ async function runOracle(
 				if (text) finalOutput = text;
 				currentText = "";
 
+				const stopReason = event.message.stopReason;
+				lastStopReason = typeof stopReason === "string" ? stopReason : undefined;
+				const errorMessageField = event.message.errorMessage;
+				lastErrorMessage = typeof errorMessageField === "string" ? errorMessageField : undefined;
+
 				const messageUsage = event.message.usage;
 				if (messageUsage) {
 					usage.turns += 1;
@@ -946,6 +974,19 @@ async function runOracle(
 		return { ok: false, error: "Oracle was aborted.", details };
 	}
 
+	// The pi subprocess in `--mode json` does not promote an errored assistant
+	// turn to a non-zero exit code or stderr; the error is only carried on the
+	// streamed assistant message via stopReason/errorMessage. Surface that here
+	// so callers can distinguish transient provider errors from a genuinely
+	// empty response.
+	if (lastStopReason === "error" || lastStopReason === "aborted") {
+		return {
+			ok: false,
+			error: formatOracleModelError(lastStopReason, lastErrorMessage),
+			details,
+		};
+	}
+
 	if (exitCode !== 0) {
 		return {
 			ok: false,

package/extensions/oracle/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-oracle",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "description": "An Amp-style oracle extension for pi that consults the strongest reasoning model on your current provider.",
   "keywords": [
     "pi-package",

package/extensions/review/README.md

@@ -31,7 +31,7 @@ Then reload pi:
 
 - Behavior is intentionally kept equivalent to the upstream source, with only packaging/attribution changes for this repository.
 - PR review requires `gh` access and a clean working tree for tracked files.
-- If a `REVIEW_GUIDELINES.md` file exists next to the repo's `.pi` directory, its contents are appended to the review prompt.
+- If the project is trusted and a `REVIEW_GUIDELINES.md` file exists next to the repo's `.pi` directory, its contents are appended to the review prompt.
 
 ## License and attribution
 

package/extensions/review/index.ts

@@ -29,8 +29,8 @@
  * - `/review --extra "focus on performance regressions"` - add extra review instruction (works with any mode)
  *
  * Project-specific review guidelines:
- * - If a REVIEW_GUIDELINES.md file exists in the same directory as .pi,
- *   its contents are appended to the review prompt.
+ * - If the project is trusted and a REVIEW_GUIDELINES.md file exists in the
+ *   same directory as .pi, its contents are appended to the review prompt.
  *
  * Note: PR review requires a clean working tree (no uncommitted changes to tracked files).
  */
@@ -49,6 +49,8 @@ import {
 import path from "node:path";
 import { promises as fs } from "node:fs";
 
+const CONFIG_DIR_NAME = ".pi";
+
 // State to track fresh session review (where we branched from).
 // Module-level state means only one review can be active at a time.
 // This is intentional - the UI and /end-review command assume a single active review.
@@ -75,6 +77,15 @@ type ReviewSettingsState = {
 	customInstructions?: string;
 };
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
 function setReviewWidget(ctx: ExtensionContext, active: boolean) {
 	if (!ctx.hasUI) return;
 	if (!active) {
@@ -501,7 +512,7 @@ async function loadProjectReviewGuidelines(cwd: string): Promise<string | null>
 	let currentDir = path.resolve(cwd);
 
 	while (true) {
-		const piDir = path.join(currentDir, ".pi");
+		const piDir = path.join(currentDir, CONFIG_DIR_NAME);
 		const guidelinesPath = path.join(currentDir, "REVIEW_GUIDELINES.md");
 
 		const piStats = await fs.stat(piDir).catch(() => null);
@@ -1420,7 +1431,7 @@ export default function reviewExtension(pi: ExtensionAPI) {
 			includeLocalChanges: options?.includeLocalChanges === true,
 		});
 		const hint = getUserFacingHint(target);
-		const projectGuidelines = await loadProjectReviewGuidelines(ctx.cwd);
+		const projectGuidelines = canReadProjectConfig(ctx) ? await loadProjectReviewGuidelines(ctx.cwd) : null;
 
 		// Combine the review rubric with the specific prompt
 		let fullPrompt = `${REVIEW_RUBRIC}\n\n---\n\nPlease perform a code review with the following focus:\n\n${prompt}`;

package/extensions/review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-review",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "A standalone pi extension that adds /review and /end-review commands adapted from mitsuhiko/agent-stuff.",
   "keywords": [
     "pi-package",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-extensions",
-  "version": "0.1.45",
+  "version": "0.1.47",
   "description": "A collection of pi extensions and skills for annotation UIs, context management, workflow audits, review-comment triage, notifications, brrr push alerts, safety guards, GitHub research, repo-local knowledge, todos, tool rendering, model/provider helpers, and Xiaohei-style article illustrations.",
   "keywords": [
     "pi-package",
@@ -13,6 +13,11 @@
     "type": "git",
     "url": "git+https://github.com/diegopetrucci/pi-extensions.git"
   },
+  "scripts": {
+    "ci": "npm run preflight:install-state && npm run typecheck",
+    "preflight:install-state": "node scripts/check-install-state.mjs",
+    "typecheck": "npx tsc --noEmit --module NodeNext --moduleResolution NodeNext --target ES2022 --skipLibCheck $(git ls-files '*.ts')"
+  },
   "files": [
     "extensions",
     "assets",