@erichll/pi-auto-review 0.16.0 → 0.18.0

package/CHANGELOG.md

@@ -1,5 +1,36 @@
 # Changelog
 
+## 0.18.0 - 2026-09-11
+
+- Coordinated release for `@erichll/pi-sandbox 0.18.0`.
+- Dismiss the above-editor widget eight seconds after an allow or auto-confirm
+  so a successful check does not stay on screen until the next review. Denials,
+  deferrals, and local-confirmation waits still remain until the next check.
+- Raise the `@gotgenes/pi-permission-system` peer floor to `>=30.0.0` and drop
+  the upper bound. 29.x is no longer claimed; 32.x does not change the public
+  authorizer API this package uses, and later majors are no longer excluded by
+  the range.
+
+## 0.17.0 - 2026-09-05
+
+- Coordinated release for `@erichll/pi-sandbox 0.17.0`; the broker API and
+  approval behavior are unchanged.
+- Align the development pin of `@gotgenes/pi-permission-system` to the 31.1.x
+  runtime line and update the authorizer-integration test to the 31.1.1
+  internal source layout (the 31.1.1 refactor moved `path-normalizer.ts`).
+- Split the 2,778-line `src/index.ts` into a `src/review/` module directory
+  (`types`, `consts`, `config`, `audit`, `prompts`, `guards`, `input`,
+  `provider`, `complete`) with an internal barrel, matching the existing
+  `broker/` and `policy-audit/` conventions; the public export surface of
+  `src/index.ts` is unchanged.
+- Harden TypeScript checking: enable `noUncheckedIndexedAccess` and
+  `noImplicitOverride` across the workspace and fix all 47 newly surfaced
+  unguarded-index sites.
+- Replace the full custom TypeScript test loader with native Node type
+  transformation (`--experimental-transform-types`); a scoped hook now only
+  handles the TypeScript sources shipped inside `node_modules`, which Node
+  refuses to type-strip.
+
 ## 0.16.0 - 2026-09-05
 
 - Coordinated release for `@erichll/pi-sandbox 0.16.0`; the broker API and

package/README.md

@@ -31,8 +31,7 @@ that dependency is a hard prerequisite (see [Install and enable](#install-and-en
 > **Prerequisite:** pi-auto-review is an authorizer inside
 > `@gotgenes/pi-permission-system`. Pi does not auto-install peer packages, so
 > install the permission system separately (once per machine) before this
-> extension. This release line supports permission-system 29.3.0 through the
-> latest 31.x release:
+> extension. This release line supports permission-system 30.0.0 and later:
 
 Node.js 22.13.0 or newer is required. Permission auditing uses Node's built-in
 `node:sqlite`; it does not require a SQLite CLI, system SQLite library, or npm
@@ -178,9 +177,11 @@ Interactive sessions show the current permission check in a single widget
 above the editor. Each check first shows its surface, compact target, and the
 dynamically configured reviewer model, then replaces that content in place
 with the outcome, target and rationale, model, token usage, duration, and any
-extra call count. A new check replaces the previous result; the latest result
-remains visible until then and is cleared when the session changes or shuts
-down. Concurrent older checks cannot overwrite the most recently started one.
+extra call count. A new check replaces the previous result. Allowed and
+auto-confirmed results dismiss after eight seconds so they do not occupy the
+editor; denials, deferrals, and local-confirmation waits stay until the next
+check, a session change, or shutdown. Concurrent older checks cannot overwrite
+the most recently started one.
 
 Every request still has its own model call, verdict, grant, local confirmation,
 and audit record. No new review-result transcript entries are written. Existing

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-auto-review",
-  "version": "0.16.0",
+  "version": "0.18.0",
   "description": "Fail-closed, model-backed approval broker for Pi: deterministically hard-denies dangerous operations, reviews dangerous boundaries with a reviewer model, and issues one-shot expiring grants that OS sandbox adapters must consume before retrying.",
   "type": "module",
   "license": "MIT",
@@ -44,18 +44,18 @@
   },
   "scripts": {
     "check": "tsc -p tsconfig.json --noEmit",
-    "test": "node --disable-warning=ExperimentalWarning --experimental-loader ./test/typescript-loader.mjs --test test/*.test.ts"
+    "test": "node --disable-warning=ExperimentalWarning --experimental-transform-types --import ./test/register-external-ts.mjs --test test/*.test.ts"
   },
   "peerDependencies": {
     "@earendil-works/pi-ai": "^0.85.0",
     "@earendil-works/pi-coding-agent": "^0.85.0",
-    "@gotgenes/pi-permission-system": ">=29.3.0 <32.0.0"
+    "@gotgenes/pi-permission-system": ">=30.0.0"
   },
   "devDependencies": {
     "@earendil-works/pi-ai": "^0.85.0",
     "@earendil-works/pi-coding-agent": "^0.85.0",
     "@earendil-works/pi-server": "^0.85.0",
-    "@gotgenes/pi-permission-system": "31.0.0",
+    "@gotgenes/pi-permission-system": "31.1.1",
     "@types/node": "^26.2.0",
     "typescript": "^6.0.3"
   }

package/src/broker/overrides.ts

@@ -145,6 +145,7 @@ export class RecentDenialStore {
     );
     if (index < 0) return;
     const denial = this.#denials[index];
+    if (!denial) return;
     const key = this.key(sessionId, denial.requestHash);
     const pending = this.#breakGlassPending.get(key);
     if (pending) {