@diegopetrucci/pi-extensions 0.1.46 → 0.1.47

package/extensions/brrr/README.md

@@ -35,6 +35,8 @@ Config files are merged, with project config overriding global config:
 - `~/.pi/agent/extensions/brrr.json`
 - `<project>/.pi/brrr.json`
 
+Project config is only read after Pi reports that the project is trusted.
+
 The default config expects your webhook in `BRRR_WEBHOOK_URL`:
 
 ```bash

package/extensions/brrr/index.ts

@@ -6,7 +6,7 @@
  *
  * Config files (project overrides global):
  * - ~/.pi/agent/extensions/brrr.json
- * - <cwd>/.pi/brrr.json
+ * - <cwd>/.pi/brrr.json, when the project is trusted
  */
 
 import { execFile } from "node:child_process";
@@ -16,6 +16,7 @@ import { promisify } from "node:util";
 import { getAgentDir, type ExtensionAPI, type ExtensionCommandContext } from "@earendil-works/pi-coding-agent";
 
 const execFileAsync = promisify(execFile);
+const CONFIG_DIR_NAME = ".pi";
 
 interface BrrrConfig {
 	enabled: boolean;
@@ -40,6 +41,11 @@ interface BrrrPayload {
 	image_url?: string;
 }
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 const DEFAULT_CONFIG: BrrrConfig = {
 	enabled: true,
 	onlyWhenInteractive: true,
@@ -71,9 +77,15 @@ function mergeConfig(base: BrrrConfig, overrides: Partial<BrrrConfig>): BrrrConf
 	};
 }
 
-function loadConfig(cwd: string): BrrrConfig {
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
+function loadConfig(ctx: ProjectConfigContext): BrrrConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "brrr.json"));
-	const projectConfig = readConfigFile(join(cwd, ".pi", "brrr.json"));
+	const projectConfig = canReadProjectConfig(ctx)
+		? readConfigFile(join(ctx.cwd, CONFIG_DIR_NAME, "brrr.json"))
+		: {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -219,13 +231,13 @@ export default function brrrExtension(pi: ExtensionAPI) {
 	pi.registerCommand("brrr", {
 		description: "Show brrr notification status",
 		handler: async (_args, ctx) => {
-			const config = loadConfig(ctx.cwd);
+			const config = loadConfig(ctx);
 			notify(ctx, describeConfig(config, resolveWebhook(config.webhook)));
 		},
 	});
 
 	pi.on("agent_end", async (event, ctx) => {
-		const config = loadConfig(ctx.cwd);
+		const config = loadConfig(ctx);
 		if (!config.enabled) return;
 		if (config.onlyWhenInteractive && !ctx.hasUI) return;
 

package/extensions/brrr/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-brrr",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "A pi extension that sends brrr push notifications when pi is ready for input.",
   "keywords": [
     "pi-package",

package/extensions/claude-fast/README.md

@@ -51,7 +51,7 @@ Optional project config:
 .pi/claude-fast.json
 ```
 
-Project config overrides global config.
+Project config overrides global config after Pi reports that the project is trusted.
 
 ```json
 {

package/extensions/claude-fast/index.ts

@@ -6,6 +6,8 @@ import {
 	type ExtensionContext,
 } from "@earendil-works/pi-coding-agent";
 
+const CONFIG_DIR_NAME = ".pi";
+
 const EXTENSION_ID = "claude-fast";
 const PROVIDER_ID = "anthropic";
 const API_ID = "anthropic-messages";
@@ -35,6 +37,11 @@ type SessionState = {
 	lastInjectedModel?: string;
 };
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 type RecursivePartial<T> = {
 	[P in keyof T]?: T[P] extends object ? RecursivePartial<T[P]> : T[P];
 };
@@ -77,21 +84,25 @@ function mergeConfig(
 	};
 }
 
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
 function findProjectConfigPath(cwd: string): string {
 	let current = cwd;
 	while (true) {
-		const candidate = join(current, ".pi", "claude-fast.json");
+		const candidate = join(current, CONFIG_DIR_NAME, "claude-fast.json");
 		if (existsSync(candidate)) return candidate;
 
 		const parent = dirname(current);
-		if (parent === current) return join(cwd, ".pi", "claude-fast.json");
+		if (parent === current) return join(cwd, CONFIG_DIR_NAME, "claude-fast.json");
 		current = parent;
 	}
 }
 
-function loadConfig(cwd: string): ClaudeFastConfig {
+function loadConfig(ctx: ProjectConfigContext): ClaudeFastConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "claude-fast.json"));
-	const projectConfig = readConfigFile(findProjectConfigPath(cwd));
+	const projectConfig = canReadProjectConfig(ctx) ? readConfigFile(findProjectConfigPath(ctx.cwd)) : {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -235,7 +246,7 @@ export default function claudeFastExtension(pi: ExtensionAPI) {
 		let state = states.get(ctx.sessionManager);
 		if (!state) {
 			state = {
-				config: loadConfig(ctx.cwd),
+				config: loadConfig(ctx),
 				override: "auto",
 			};
 			states.set(ctx.sessionManager, state);
@@ -245,7 +256,7 @@ export default function claudeFastExtension(pi: ExtensionAPI) {
 
 	pi.on("session_start", (_event, ctx) => {
 		const state: SessionState = {
-			config: loadConfig(ctx.cwd),
+			config: loadConfig(ctx),
 			override: "auto",
 		};
 		states.set(ctx.sessionManager, state);

package/extensions/claude-fast/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-claude-fast",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "A pi extension that enables Anthropic Claude Fast mode for supported Claude Opus models by injecting speed=fast.",
   "keywords": [
     "pi-package",

package/extensions/minimal-footer/README.md

@@ -76,6 +76,8 @@ Config files are merged, with project config overriding global config:
 - `~/.pi/agent/extensions/minimal-footer.json`
 - `<project>/.pi/minimal-footer.json`
 
+Project config is only read after Pi reports that the project is trusted.
+
 A ready-to-copy sample file is included at [`minimal-footer.example.json`](./minimal-footer.example.json).
 
 Example:

package/extensions/minimal-footer/index.ts

@@ -14,6 +14,8 @@ import {
 	type UsageSnapshot,
 } from "./openai-usage";
 
+const CONFIG_DIR_NAME = ".pi";
+
 const DEFAULT_CONFIG: MinimalFooterConfig = {
 	context: {
 		showPercent: true,
@@ -93,6 +95,11 @@ type UsageSessionState = {
 	requestRender?: () => void;
 };
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 function readConfigFile(path: string): RecursivePartial<MinimalFooterConfig> {
 	if (!existsSync(path)) return {};
 
@@ -177,21 +184,25 @@ function normalizeDumbZoneColor(value: unknown, fallback: DumbZoneColor): DumbZo
 	return DUMB_ZONE_COLORS.has(value as DumbZoneColor) ? (value as DumbZoneColor) : fallback;
 }
 
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
 function findProjectConfigPath(cwd: string): string {
 	let current = cwd;
 	while (true) {
-		const candidate = join(current, ".pi", "minimal-footer.json");
+		const candidate = join(current, CONFIG_DIR_NAME, "minimal-footer.json");
 		if (existsSync(candidate)) return candidate;
 
 		const parent = dirname(current);
-		if (parent === current) return join(cwd, ".pi", "minimal-footer.json");
+		if (parent === current) return join(cwd, CONFIG_DIR_NAME, "minimal-footer.json");
 		current = parent;
 	}
 }
 
-function loadConfig(cwd: string): MinimalFooterConfig {
+function loadConfig(ctx: ProjectConfigContext): MinimalFooterConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "minimal-footer.json"));
-	const projectConfig = readConfigFile(findProjectConfigPath(cwd));
+	const projectConfig = canReadProjectConfig(ctx) ? readConfigFile(findProjectConfigPath(ctx.cwd)) : {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -268,7 +279,7 @@ export default function (pi: ExtensionAPI) {
 	pi.on("session_start", (_event, ctx) => {
 		const state: UsageSessionState = {
 			authStorage: AuthStorage.create(),
-			config: loadConfig(ctx.cwd),
+			config: loadConfig(ctx),
 			loading: false,
 		};
 		states.set(ctx.sessionManager, state);

package/extensions/minimal-footer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-minimal-footer",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "A minimal custom footer for pi.",
   "keywords": [
     "pi-package",

package/extensions/notify/README.md

@@ -67,6 +67,8 @@ Config files are merged, with project config overriding global config:
 - `~/.pi/agent/extensions/notify.json`
 - `<project>/.pi/notify.json`
 
+Project config is only read after Pi reports that the project is trusted.
+
 A ready-to-copy sample file is included at [`notify.example.json`](./notify.example.json).
 
 Example:

package/extensions/notify/index.ts

@@ -10,7 +10,7 @@
  *
  * Config files (project overrides global):
  * - ~/.pi/agent/extensions/notify.json
- * - <cwd>/.pi/notify.json
+ * - <cwd>/.pi/notify.json, when the project is trusted
  */
 
 import { execFile } from "node:child_process";
@@ -19,10 +19,17 @@ import { join } from "node:path";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import { getAgentDir } from "@earendil-works/pi-coding-agent";
 
+const CONFIG_DIR_NAME = ".pi";
+
 type TerminalBackend = "auto" | "osc777" | "osc99" | "none";
 type DesktopBackend = "auto" | "macos" | "linux" | "windows-toast" | "none";
 type SoundBackend = "auto" | "macos" | "linux" | "windows-beep" | "command" | "none";
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 interface NotifyConfig {
 	enabled: boolean;
 	onlyWhenInteractive: boolean;
@@ -111,9 +118,15 @@ function mergeConfig(base: NotifyConfig, overrides: Partial<NotifyConfig>): Noti
 	};
 }
 
-function loadConfig(cwd: string): NotifyConfig {
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
+function loadConfig(ctx: ProjectConfigContext): NotifyConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "notify.json"));
-	const projectConfig = readConfigFile(join(cwd, ".pi", "notify.json"));
+	const projectConfig = canReadProjectConfig(ctx)
+		? readConfigFile(join(ctx.cwd, CONFIG_DIR_NAME, "notify.json"))
+		: {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -245,7 +258,7 @@ async function playSound(config: NotifyConfig, backend: Exclude<SoundBackend, "a
 
 export default function notifyExtension(pi: ExtensionAPI) {
 	pi.on("agent_end", async (_event, ctx) => {
-		const config = loadConfig(ctx.cwd);
+		const config = loadConfig(ctx);
 		if (!config.enabled) return;
 		if (config.onlyWhenInteractive && !ctx.hasUI) return;
 

package/extensions/notify/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-notify",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "A pi extension that sends a notification when the agent is ready for input.",
   "keywords": [
     "pi-package",

package/extensions/openai-fast/README.md

@@ -46,7 +46,7 @@ Optional project config:
 .pi/openai-fast.json
 ```
 
-Project config overrides global config.
+Project config overrides global config after Pi reports that the project is trusted.
 
 ```json
 {

package/extensions/openai-fast/index.ts

@@ -6,6 +6,8 @@ import {
 	type ExtensionContext,
 } from "@earendil-works/pi-coding-agent";
 
+const CONFIG_DIR_NAME = ".pi";
+
 const EXTENSION_ID = "openai-fast";
 const PROVIDER_ID = "openai-codex";
 const API_ID = "openai-codex-responses";
@@ -33,6 +35,11 @@ type SessionState = {
 	lastInjectedModel?: string;
 };
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 type RecursivePartial<T> = {
 	[P in keyof T]?: T[P] extends object ? RecursivePartial<T[P]> : T[P];
 };
@@ -71,21 +78,25 @@ function mergeConfig(
 	};
 }
 
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
 function findProjectConfigPath(cwd: string): string {
 	let current = cwd;
 	while (true) {
-		const candidate = join(current, ".pi", "openai-fast.json");
+		const candidate = join(current, CONFIG_DIR_NAME, "openai-fast.json");
 		if (existsSync(candidate)) return candidate;
 
 		const parent = dirname(current);
-		if (parent === current) return join(cwd, ".pi", "openai-fast.json");
+		if (parent === current) return join(cwd, CONFIG_DIR_NAME, "openai-fast.json");
 		current = parent;
 	}
 }
 
-function loadConfig(cwd: string): OpenAIFastConfig {
+function loadConfig(ctx: ProjectConfigContext): OpenAIFastConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "openai-fast.json"));
-	const projectConfig = readConfigFile(findProjectConfigPath(cwd));
+	const projectConfig = canReadProjectConfig(ctx) ? readConfigFile(findProjectConfigPath(ctx.cwd)) : {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -211,7 +222,7 @@ export default function openAIFastExtension(pi: ExtensionAPI) {
 		let state = states.get(ctx.sessionManager);
 		if (!state) {
 			state = {
-				config: loadConfig(ctx.cwd),
+				config: loadConfig(ctx),
 				override: "auto",
 			};
 			states.set(ctx.sessionManager, state);
@@ -221,7 +232,7 @@ export default function openAIFastExtension(pi: ExtensionAPI) {
 
 	pi.on("session_start", (_event, ctx) => {
 		const state: SessionState = {
-			config: loadConfig(ctx.cwd),
+			config: loadConfig(ctx),
 			override: "auto",
 		};
 		states.set(ctx.sessionManager, state);

package/extensions/openai-fast/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-openai-fast",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "A pi extension that enables OpenAI Codex Fast mode for ChatGPT-auth GPT-5.4 and GPT-5.5 by injecting the priority service tier.",
   "keywords": [
     "pi-package",

package/extensions/review/README.md

@@ -31,7 +31,7 @@ Then reload pi:
 
 - Behavior is intentionally kept equivalent to the upstream source, with only packaging/attribution changes for this repository.
 - PR review requires `gh` access and a clean working tree for tracked files.
-- If a `REVIEW_GUIDELINES.md` file exists next to the repo's `.pi` directory, its contents are appended to the review prompt.
+- If the project is trusted and a `REVIEW_GUIDELINES.md` file exists next to the repo's `.pi` directory, its contents are appended to the review prompt.
 
 ## License and attribution
 

package/extensions/review/index.ts

@@ -29,8 +29,8 @@
  * - `/review --extra "focus on performance regressions"` - add extra review instruction (works with any mode)
  *
  * Project-specific review guidelines:
- * - If a REVIEW_GUIDELINES.md file exists in the same directory as .pi,
- *   its contents are appended to the review prompt.
+ * - If the project is trusted and a REVIEW_GUIDELINES.md file exists in the
+ *   same directory as .pi, its contents are appended to the review prompt.
  *
  * Note: PR review requires a clean working tree (no uncommitted changes to tracked files).
  */
@@ -49,6 +49,8 @@ import {
 import path from "node:path";
 import { promises as fs } from "node:fs";
 
+const CONFIG_DIR_NAME = ".pi";
+
 // State to track fresh session review (where we branched from).
 // Module-level state means only one review can be active at a time.
 // This is intentional - the UI and /end-review command assume a single active review.
@@ -75,6 +77,15 @@ type ReviewSettingsState = {
 	customInstructions?: string;
 };
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
 function setReviewWidget(ctx: ExtensionContext, active: boolean) {
 	if (!ctx.hasUI) return;
 	if (!active) {
@@ -501,7 +512,7 @@ async function loadProjectReviewGuidelines(cwd: string): Promise<string | null>
 	let currentDir = path.resolve(cwd);
 
 	while (true) {
-		const piDir = path.join(currentDir, ".pi");
+		const piDir = path.join(currentDir, CONFIG_DIR_NAME);
 		const guidelinesPath = path.join(currentDir, "REVIEW_GUIDELINES.md");
 
 		const piStats = await fs.stat(piDir).catch(() => null);
@@ -1420,7 +1431,7 @@ export default function reviewExtension(pi: ExtensionAPI) {
 			includeLocalChanges: options?.includeLocalChanges === true,
 		});
 		const hint = getUserFacingHint(target);
-		const projectGuidelines = await loadProjectReviewGuidelines(ctx.cwd);
+		const projectGuidelines = canReadProjectConfig(ctx) ? await loadProjectReviewGuidelines(ctx.cwd) : null;
 
 		// Combine the review rubric with the specific prompt
 		let fullPrompt = `${REVIEW_RUBRIC}\n\n---\n\nPlease perform a code review with the following focus:\n\n${prompt}`;

package/extensions/review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-review",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "A standalone pi extension that adds /review and /end-review commands adapted from mitsuhiko/agent-stuff.",
   "keywords": [
     "pi-package",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-extensions",
-  "version": "0.1.46",
+  "version": "0.1.47",
   "description": "A collection of pi extensions and skills for annotation UIs, context management, workflow audits, review-comment triage, notifications, brrr push alerts, safety guards, GitHub research, repo-local knowledge, todos, tool rendering, model/provider helpers, and Xiaohei-style article illustrations.",
   "keywords": [
     "pi-package",