@diegopetrucci/pi-extensions 0.1.46 → 0.1.48

package/README.md

@@ -16,7 +16,7 @@ A collection of [pi](https://github.com/earendil-works/pi-mono) agent extensions
 - [`inline-bash`](./extensions/inline-bash): Expands `!{command}` snippets in user prompts by running them through bash before the prompt reaches the agent.
 - [`illustrations-to-explain-things`](./extensions/illustrations-to-explain-things): Adds a skill for generating clean, absurd Xiaohei-style article illustrations, shot lists, image edits, and visual metaphors.
 - [`librarian`](./extensions/librarian): Adds a GitHub research scout with a local repo checkout cache disabled by default under the OS user cache directory, toggleable with `/librarian-cache`, configurable subagent model/thinking defaults via `/librarian-config`, and cached repos expiring after 7 days of non-use.
-- [`minimal-footer`](./extensions/minimal-footer): Replaces pi's built-in footer with a minimal configurable two-line layout: branch/repo on the first line, context/model on the second, optional `DUMB ZONE`, plus OpenAI Codex 5-hour and 7-day usage when available.
+- [`minimal-footer`](./extensions/minimal-footer): Replaces pi's built-in footer with a minimal configurable two-line layout: branch/repo on the first line, context/model on the second, optional `DUMB ZONE`, optional `xp` marker, plus OpenAI Codex 5-hour and 7-day usage when available.
 - [`notify`](./extensions/notify): Sends configurable terminal, desktop, bell, and sound notifications when pi finishes and is ready for input.
 - [`openai-fast`](./extensions/openai-fast): Adds `/fast` to enable OpenAI Codex Fast mode for ChatGPT-auth GPT-5.4 and GPT-5.5 by injecting the priority service tier.
 - [`oracle`](./extensions/oracle): Adds an Amp-style read-only oracle tool that auto-selects the strongest reasoning model on the current provider/subscription, supports persisted `/oracle` model/thinking defaults, requests xhigh reasoning by default and clamps to model capabilities, and shows live status while running.

package/extensions/brrr/README.md

@@ -35,6 +35,8 @@ Config files are merged, with project config overriding global config:
 - `~/.pi/agent/extensions/brrr.json`
 - `<project>/.pi/brrr.json`
 
+Project config is only read after Pi reports that the project is trusted.
+
 The default config expects your webhook in `BRRR_WEBHOOK_URL`:
 
 ```bash

package/extensions/brrr/index.ts

@@ -6,7 +6,7 @@
  *
  * Config files (project overrides global):
  * - ~/.pi/agent/extensions/brrr.json
- * - <cwd>/.pi/brrr.json
+ * - <cwd>/.pi/brrr.json, when the project is trusted
  */
 
 import { execFile } from "node:child_process";
@@ -16,6 +16,7 @@ import { promisify } from "node:util";
 import { getAgentDir, type ExtensionAPI, type ExtensionCommandContext } from "@earendil-works/pi-coding-agent";
 
 const execFileAsync = promisify(execFile);
+const CONFIG_DIR_NAME = ".pi";
 
 interface BrrrConfig {
 	enabled: boolean;
@@ -40,6 +41,11 @@ interface BrrrPayload {
 	image_url?: string;
 }
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 const DEFAULT_CONFIG: BrrrConfig = {
 	enabled: true,
 	onlyWhenInteractive: true,
@@ -71,9 +77,15 @@ function mergeConfig(base: BrrrConfig, overrides: Partial<BrrrConfig>): BrrrConf
 	};
 }
 
-function loadConfig(cwd: string): BrrrConfig {
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
+function loadConfig(ctx: ProjectConfigContext): BrrrConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "brrr.json"));
-	const projectConfig = readConfigFile(join(cwd, ".pi", "brrr.json"));
+	const projectConfig = canReadProjectConfig(ctx)
+		? readConfigFile(join(ctx.cwd, CONFIG_DIR_NAME, "brrr.json"))
+		: {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -219,13 +231,13 @@ export default function brrrExtension(pi: ExtensionAPI) {
 	pi.registerCommand("brrr", {
 		description: "Show brrr notification status",
 		handler: async (_args, ctx) => {
-			const config = loadConfig(ctx.cwd);
+			const config = loadConfig(ctx);
 			notify(ctx, describeConfig(config, resolveWebhook(config.webhook)));
 		},
 	});
 
 	pi.on("agent_end", async (event, ctx) => {
-		const config = loadConfig(ctx.cwd);
+		const config = loadConfig(ctx);
 		if (!config.enabled) return;
 		if (config.onlyWhenInteractive && !ctx.hasUI) return;
 

package/extensions/brrr/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-brrr",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "A pi extension that sends brrr push notifications when pi is ready for input.",
   "keywords": [
     "pi-package",

package/extensions/claude-fast/README.md

@@ -51,7 +51,7 @@ Optional project config:
 .pi/claude-fast.json
 ```
 
-Project config overrides global config.
+Project config overrides global config after Pi reports that the project is trusted.
 
 ```json
 {

package/extensions/claude-fast/index.ts

@@ -6,6 +6,8 @@ import {
 	type ExtensionContext,
 } from "@earendil-works/pi-coding-agent";
 
+const CONFIG_DIR_NAME = ".pi";
+
 const EXTENSION_ID = "claude-fast";
 const PROVIDER_ID = "anthropic";
 const API_ID = "anthropic-messages";
@@ -35,6 +37,11 @@ type SessionState = {
 	lastInjectedModel?: string;
 };
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 type RecursivePartial<T> = {
 	[P in keyof T]?: T[P] extends object ? RecursivePartial<T[P]> : T[P];
 };
@@ -77,21 +84,25 @@ function mergeConfig(
 	};
 }
 
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
 function findProjectConfigPath(cwd: string): string {
 	let current = cwd;
 	while (true) {
-		const candidate = join(current, ".pi", "claude-fast.json");
+		const candidate = join(current, CONFIG_DIR_NAME, "claude-fast.json");
 		if (existsSync(candidate)) return candidate;
 
 		const parent = dirname(current);
-		if (parent === current) return join(cwd, ".pi", "claude-fast.json");
+		if (parent === current) return join(cwd, CONFIG_DIR_NAME, "claude-fast.json");
 		current = parent;
 	}
 }
 
-function loadConfig(cwd: string): ClaudeFastConfig {
+function loadConfig(ctx: ProjectConfigContext): ClaudeFastConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "claude-fast.json"));
-	const projectConfig = readConfigFile(findProjectConfigPath(cwd));
+	const projectConfig = canReadProjectConfig(ctx) ? readConfigFile(findProjectConfigPath(ctx.cwd)) : {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -235,7 +246,7 @@ export default function claudeFastExtension(pi: ExtensionAPI) {
 		let state = states.get(ctx.sessionManager);
 		if (!state) {
 			state = {
-				config: loadConfig(ctx.cwd),
+				config: loadConfig(ctx),
 				override: "auto",
 			};
 			states.set(ctx.sessionManager, state);
@@ -245,7 +256,7 @@ export default function claudeFastExtension(pi: ExtensionAPI) {
 
 	pi.on("session_start", (_event, ctx) => {
 		const state: SessionState = {
-			config: loadConfig(ctx.cwd),
+			config: loadConfig(ctx),
 			override: "auto",
 		};
 		states.set(ctx.sessionManager, state);

package/extensions/claude-fast/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-claude-fast",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "A pi extension that enables Anthropic Claude Fast mode for supported Claude Opus models by injecting speed=fast.",
   "keywords": [
     "pi-package",

package/extensions/minimal-footer/README.md

@@ -12,6 +12,7 @@ It replaces pi's built-in footer with a cleaner two-line layout that focuses on
 - red `DUMB ZONE` indicator when context usage is above 200k tokens
 - current model and thinking level
 - OpenAI Codex 5-hour and 7-day usage when available
+- `xp` marker when Pi experimental features are enabled
 
 ## Layout
 
@@ -41,6 +42,12 @@ When using `openai-codex`, the bottom-left line also includes subscription usage
 44.1% · 5h 12% · 7d 38%
 ```
 
+When `PI_EXPERIMENTAL=1`, the bottom-left line also includes an experimental marker:
+
+```text
+44.1% · xp
+```
+
 On narrow terminals it falls back to one item per line.
 
 ## Install
@@ -76,6 +83,8 @@ Config files are merged, with project config overriding global config:
 - `~/.pi/agent/extensions/minimal-footer.json`
 - `<project>/.pi/minimal-footer.json`
 
+Project config is only read after Pi reports that the project is trusted.
+
 A ready-to-copy sample file is included at [`minimal-footer.example.json`](./minimal-footer.example.json).
 
 Example:
@@ -105,6 +114,11 @@ Example:
         "label": "7d"
       }
     }
+  },
+  "experimentalMarker": {
+    "enabled": true,
+    "label": "xp",
+    "color": "warning"
   }
 }
 ```
@@ -145,6 +159,16 @@ Disable one session-limit window:
 }
 ```
 
+Disable the experimental-features marker:
+
+```json
+{
+  "experimentalMarker": {
+    "enabled": false
+  }
+}
+```
+
 ### Config fields
 
 - `context.showPercent`: show the context percentage
@@ -159,6 +183,9 @@ Disable one session-limit window:
 - `codexUsage.windows.primary.label`: label for the primary usage window
 - `codexUsage.windows.secondary.enabled`: show the secondary usage window
 - `codexUsage.windows.secondary.label`: label for the secondary usage window
+- `experimentalMarker.enabled`: show the marker when `PI_EXPERIMENTAL=1`
+- `experimentalMarker.label`: marker text
+- `experimentalMarker.color`: theme color for the marker (`error`, `warning`, `accent`, `text`, or `dim`)
 
 ## What it shows
 
@@ -166,6 +193,7 @@ Disable one session-limit window:
 - **Top right:** current repo directory name
 - **Bottom left:** current context usage percentage, plus red `DUMB ZONE` above 200k context tokens
 - **Bottom left on `openai-codex`:** current context usage percentage plus 5-hour and 7-day Codex usage
+- **Bottom left with `PI_EXPERIMENTAL=1`:** current context usage percentage plus `xp`
 - **Bottom right:** model id and thinking level
 
 ## Publishing notes
@@ -179,5 +207,6 @@ This extension also lives inside the broader [`pi-extensions`](../../README.md)
 - Shows only context percentage, not context window size.
 - Shows `DUMB ZONE` only while context usage is above 200k tokens.
 - Shows the model id rather than a provider-specific display label.
+- Shows `xp` when `PI_EXPERIMENTAL=1`.
 - For `openai-codex`, reads pi's stored OAuth login and fetches usage from ChatGPT's backend usage endpoint.
 - Usage is cached briefly in memory and refreshed after turns.

package/extensions/minimal-footer/index.ts

@@ -14,6 +14,8 @@ import {
 	type UsageSnapshot,
 } from "./openai-usage";
 
+const CONFIG_DIR_NAME = ".pi";
+
 const DEFAULT_CONFIG: MinimalFooterConfig = {
 	context: {
 		showPercent: true,
@@ -39,6 +41,11 @@ const DEFAULT_CONFIG: MinimalFooterConfig = {
 			},
 		},
 	},
+	experimentalMarker: {
+		enabled: true,
+		label: "xp",
+		color: "warning",
+	},
 };
 
 const DUMB_ZONE_COLORS = new Set<DumbZoneColor>([
@@ -80,6 +87,11 @@ interface MinimalFooterConfig {
 			};
 		};
 	};
+	experimentalMarker: {
+		enabled: boolean;
+		label: string;
+		color: DumbZoneColor;
+	};
 }
 
 type UsageSessionState = {
@@ -93,6 +105,11 @@ type UsageSessionState = {
 	requestRender?: () => void;
 };
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 function readConfigFile(path: string): RecursivePartial<MinimalFooterConfig> {
 	if (!existsSync(path)) return {};
 
@@ -113,6 +130,7 @@ function mergeConfig(
 	const codexUsage = overrides.codexUsage;
 	const primaryWindow = codexUsage?.windows?.primary;
 	const secondaryWindow = codexUsage?.windows?.secondary;
+	const experimentalMarker = overrides.experimentalMarker;
 
 	return {
 		context: {
@@ -154,6 +172,17 @@ function mergeConfig(
 				},
 			},
 		},
+		experimentalMarker: {
+			enabled: normalizeBoolean(
+				experimentalMarker?.enabled,
+				base.experimentalMarker.enabled,
+			),
+			label: normalizeLabel(experimentalMarker?.label, base.experimentalMarker.label),
+			color: normalizeDumbZoneColor(
+				experimentalMarker?.color,
+				base.experimentalMarker.color,
+			),
+		},
 	};
 }
 
@@ -177,21 +206,25 @@ function normalizeDumbZoneColor(value: unknown, fallback: DumbZoneColor): DumbZo
 	return DUMB_ZONE_COLORS.has(value as DumbZoneColor) ? (value as DumbZoneColor) : fallback;
 }
 
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
 function findProjectConfigPath(cwd: string): string {
 	let current = cwd;
 	while (true) {
-		const candidate = join(current, ".pi", "minimal-footer.json");
+		const candidate = join(current, CONFIG_DIR_NAME, "minimal-footer.json");
 		if (existsSync(candidate)) return candidate;
 
 		const parent = dirname(current);
-		if (parent === current) return join(cwd, ".pi", "minimal-footer.json");
+		if (parent === current) return join(cwd, CONFIG_DIR_NAME, "minimal-footer.json");
 		current = parent;
 	}
 }
 
-function loadConfig(cwd: string): MinimalFooterConfig {
+function loadConfig(ctx: ProjectConfigContext): MinimalFooterConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "minimal-footer.json"));
-	const projectConfig = readConfigFile(findProjectConfigPath(cwd));
+	const projectConfig = canReadProjectConfig(ctx) ? readConfigFile(findProjectConfigPath(ctx.cwd)) : {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -202,6 +235,10 @@ function shouldShowCodexUsage(config: MinimalFooterConfig): boolean {
 	);
 }
 
+function shouldShowExperimentalMarker(config: MinimalFooterConfig): boolean {
+	return config.experimentalMarker.enabled && process.env.PI_EXPERIMENTAL === "1";
+}
+
 function clearUsageState(state: UsageSessionState): void {
 	state.snapshot = undefined;
 	state.lastFetchedAt = undefined;
@@ -268,7 +305,7 @@ export default function (pi: ExtensionAPI) {
 	pi.on("session_start", (_event, ctx) => {
 		const state: UsageSessionState = {
 			authStorage: AuthStorage.create(),
-			config: loadConfig(ctx.cwd),
+			config: loadConfig(ctx),
 			loading: false,
 		};
 		states.set(ctx.sessionManager, state);
@@ -306,6 +343,10 @@ export default function (pi: ExtensionAPI) {
 					if (state.config.context.showPercent) contextParts.push(theme.fg("dim", context));
 					if (inDumbZone) contextParts.push(theme.fg(dumbZone.color, dumbZone.label));
 					if (usageSummary) contextParts.push(theme.fg("dim", usageSummary));
+					if (shouldShowExperimentalMarker(state.config)) {
+						const marker = state.config.experimentalMarker;
+						contextParts.push(theme.fg(marker.color, marker.label));
+					}
 					const contextStyled = contextParts.join(theme.fg("dim", " · "));
 					const modelStyled = theme.fg("dim", modelText);
 

package/extensions/minimal-footer/minimal-footer.example.json

@@ -22,5 +22,10 @@
         "label": "7d"
       }
     }
+  },
+  "experimentalMarker": {
+    "enabled": true,
+    "label": "xp",
+    "color": "warning"
   }
 }

package/extensions/minimal-footer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-minimal-footer",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "A minimal custom footer for pi.",
   "keywords": [
     "pi-package",

package/extensions/notify/README.md

@@ -67,6 +67,8 @@ Config files are merged, with project config overriding global config:
 - `~/.pi/agent/extensions/notify.json`
 - `<project>/.pi/notify.json`
 
+Project config is only read after Pi reports that the project is trusted.
+
 A ready-to-copy sample file is included at [`notify.example.json`](./notify.example.json).
 
 Example:

package/extensions/notify/index.ts

@@ -10,7 +10,7 @@
  *
  * Config files (project overrides global):
  * - ~/.pi/agent/extensions/notify.json
- * - <cwd>/.pi/notify.json
+ * - <cwd>/.pi/notify.json, when the project is trusted
  */
 
 import { execFile } from "node:child_process";
@@ -19,10 +19,17 @@ import { join } from "node:path";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import { getAgentDir } from "@earendil-works/pi-coding-agent";
 
+const CONFIG_DIR_NAME = ".pi";
+
 type TerminalBackend = "auto" | "osc777" | "osc99" | "none";
 type DesktopBackend = "auto" | "macos" | "linux" | "windows-toast" | "none";
 type SoundBackend = "auto" | "macos" | "linux" | "windows-beep" | "command" | "none";
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 interface NotifyConfig {
 	enabled: boolean;
 	onlyWhenInteractive: boolean;
@@ -111,9 +118,15 @@ function mergeConfig(base: NotifyConfig, overrides: Partial<NotifyConfig>): Noti
 	};
 }
 
-function loadConfig(cwd: string): NotifyConfig {
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
+function loadConfig(ctx: ProjectConfigContext): NotifyConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "notify.json"));
-	const projectConfig = readConfigFile(join(cwd, ".pi", "notify.json"));
+	const projectConfig = canReadProjectConfig(ctx)
+		? readConfigFile(join(ctx.cwd, CONFIG_DIR_NAME, "notify.json"))
+		: {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -245,7 +258,7 @@ async function playSound(config: NotifyConfig, backend: Exclude<SoundBackend, "a
 
 export default function notifyExtension(pi: ExtensionAPI) {
 	pi.on("agent_end", async (_event, ctx) => {
-		const config = loadConfig(ctx.cwd);
+		const config = loadConfig(ctx);
 		if (!config.enabled) return;
 		if (config.onlyWhenInteractive && !ctx.hasUI) return;
 

package/extensions/notify/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-notify",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "A pi extension that sends a notification when the agent is ready for input.",
   "keywords": [
     "pi-package",

package/extensions/openai-fast/README.md

@@ -46,7 +46,7 @@ Optional project config:
 .pi/openai-fast.json
 ```
 
-Project config overrides global config.
+Project config overrides global config after Pi reports that the project is trusted.
 
 ```json
 {

package/extensions/openai-fast/index.ts

@@ -6,6 +6,8 @@ import {
 	type ExtensionContext,
 } from "@earendil-works/pi-coding-agent";
 
+const CONFIG_DIR_NAME = ".pi";
+
 const EXTENSION_ID = "openai-fast";
 const PROVIDER_ID = "openai-codex";
 const API_ID = "openai-codex-responses";
@@ -33,6 +35,11 @@ type SessionState = {
 	lastInjectedModel?: string;
 };
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
 type RecursivePartial<T> = {
 	[P in keyof T]?: T[P] extends object ? RecursivePartial<T[P]> : T[P];
 };
@@ -71,21 +78,25 @@ function mergeConfig(
 	};
 }
 
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
 function findProjectConfigPath(cwd: string): string {
 	let current = cwd;
 	while (true) {
-		const candidate = join(current, ".pi", "openai-fast.json");
+		const candidate = join(current, CONFIG_DIR_NAME, "openai-fast.json");
 		if (existsSync(candidate)) return candidate;
 
 		const parent = dirname(current);
-		if (parent === current) return join(cwd, ".pi", "openai-fast.json");
+		if (parent === current) return join(cwd, CONFIG_DIR_NAME, "openai-fast.json");
 		current = parent;
 	}
 }
 
-function loadConfig(cwd: string): OpenAIFastConfig {
+function loadConfig(ctx: ProjectConfigContext): OpenAIFastConfig {
 	const globalConfig = readConfigFile(join(getAgentDir(), "extensions", "openai-fast.json"));
-	const projectConfig = readConfigFile(findProjectConfigPath(cwd));
+	const projectConfig = canReadProjectConfig(ctx) ? readConfigFile(findProjectConfigPath(ctx.cwd)) : {};
 	return mergeConfig(mergeConfig(DEFAULT_CONFIG, globalConfig), projectConfig);
 }
 
@@ -211,7 +222,7 @@ export default function openAIFastExtension(pi: ExtensionAPI) {
 		let state = states.get(ctx.sessionManager);
 		if (!state) {
 			state = {
-				config: loadConfig(ctx.cwd),
+				config: loadConfig(ctx),
 				override: "auto",
 			};
 			states.set(ctx.sessionManager, state);
@@ -221,7 +232,7 @@ export default function openAIFastExtension(pi: ExtensionAPI) {
 
 	pi.on("session_start", (_event, ctx) => {
 		const state: SessionState = {
-			config: loadConfig(ctx.cwd),
+			config: loadConfig(ctx),
 			override: "auto",
 		};
 		states.set(ctx.sessionManager, state);

package/extensions/openai-fast/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-openai-fast",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "A pi extension that enables OpenAI Codex Fast mode for ChatGPT-auth GPT-5.4 and GPT-5.5 by injecting the priority service tier.",
   "keywords": [
     "pi-package",

package/extensions/review/README.md

@@ -31,7 +31,7 @@ Then reload pi:
 
 - Behavior is intentionally kept equivalent to the upstream source, with only packaging/attribution changes for this repository.
 - PR review requires `gh` access and a clean working tree for tracked files.
-- If a `REVIEW_GUIDELINES.md` file exists next to the repo's `.pi` directory, its contents are appended to the review prompt.
+- If the project is trusted and a `REVIEW_GUIDELINES.md` file exists next to the repo's `.pi` directory, its contents are appended to the review prompt.
 
 ## License and attribution
 

package/extensions/review/index.ts

@@ -29,8 +29,8 @@
  * - `/review --extra "focus on performance regressions"` - add extra review instruction (works with any mode)
  *
  * Project-specific review guidelines:
- * - If a REVIEW_GUIDELINES.md file exists in the same directory as .pi,
- *   its contents are appended to the review prompt.
+ * - If the project is trusted and a REVIEW_GUIDELINES.md file exists in the
+ *   same directory as .pi, its contents are appended to the review prompt.
  *
  * Note: PR review requires a clean working tree (no uncommitted changes to tracked files).
  */
@@ -49,6 +49,8 @@ import {
 import path from "node:path";
 import { promises as fs } from "node:fs";
 
+const CONFIG_DIR_NAME = ".pi";
+
 // State to track fresh session review (where we branched from).
 // Module-level state means only one review can be active at a time.
 // This is intentional - the UI and /end-review command assume a single active review.
@@ -75,6 +77,15 @@ type ReviewSettingsState = {
 	customInstructions?: string;
 };
 
+type ProjectConfigContext = {
+	cwd: string;
+	isProjectTrusted?: () => boolean;
+};
+
+function canReadProjectConfig(ctx: ProjectConfigContext): boolean {
+	return typeof ctx.isProjectTrusted === "function" && ctx.isProjectTrusted();
+}
+
 function setReviewWidget(ctx: ExtensionContext, active: boolean) {
 	if (!ctx.hasUI) return;
 	if (!active) {
@@ -501,7 +512,7 @@ async function loadProjectReviewGuidelines(cwd: string): Promise<string | null>
 	let currentDir = path.resolve(cwd);
 
 	while (true) {
-		const piDir = path.join(currentDir, ".pi");
+		const piDir = path.join(currentDir, CONFIG_DIR_NAME);
 		const guidelinesPath = path.join(currentDir, "REVIEW_GUIDELINES.md");
 
 		const piStats = await fs.stat(piDir).catch(() => null);
@@ -1420,7 +1431,7 @@ export default function reviewExtension(pi: ExtensionAPI) {
 			includeLocalChanges: options?.includeLocalChanges === true,
 		});
 		const hint = getUserFacingHint(target);
-		const projectGuidelines = await loadProjectReviewGuidelines(ctx.cwd);
+		const projectGuidelines = canReadProjectConfig(ctx) ? await loadProjectReviewGuidelines(ctx.cwd) : null;
 
 		// Combine the review rubric with the specific prompt
 		let fullPrompt = `${REVIEW_RUBRIC}\n\n---\n\nPlease perform a code review with the following focus:\n\n${prompt}`;

package/extensions/review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-review",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "A standalone pi extension that adds /review and /end-review commands adapted from mitsuhiko/agent-stuff.",
   "keywords": [
     "pi-package",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-extensions",
-  "version": "0.1.46",
+  "version": "0.1.48",
   "description": "A collection of pi extensions and skills for annotation UIs, context management, workflow audits, review-comment triage, notifications, brrr push alerts, safety guards, GitHub research, repo-local knowledge, todos, tool rendering, model/provider helpers, and Xiaohei-style article illustrations.",
   "keywords": [
     "pi-package",