@erichll/pi-auto-review 0.17.0 → 0.18.0

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.18.0 - 2026-09-11
+
+- Coordinated release for `@erichll/pi-sandbox 0.18.0`.
+- Dismiss the above-editor widget eight seconds after an allow or auto-confirm
+  so a successful check does not stay on screen until the next review. Denials,
+  deferrals, and local-confirmation waits still remain until the next check.
+- Raise the `@gotgenes/pi-permission-system` peer floor to `>=30.0.0` and drop
+  the upper bound. 29.x is no longer claimed; 32.x does not change the public
+  authorizer API this package uses, and later majors are no longer excluded by
+  the range.
+
 ## 0.17.0 - 2026-09-05
 
 - Coordinated release for `@erichll/pi-sandbox 0.17.0`; the broker API and

package/README.md

@@ -31,8 +31,7 @@ that dependency is a hard prerequisite (see [Install and enable](#install-and-en
 > **Prerequisite:** pi-auto-review is an authorizer inside
 > `@gotgenes/pi-permission-system`. Pi does not auto-install peer packages, so
 > install the permission system separately (once per machine) before this
-> extension. This release line supports permission-system 29.3.0 through the
-> latest 31.x release:
+> extension. This release line supports permission-system 30.0.0 and later:
 
 Node.js 22.13.0 or newer is required. Permission auditing uses Node's built-in
 `node:sqlite`; it does not require a SQLite CLI, system SQLite library, or npm
@@ -178,9 +177,11 @@ Interactive sessions show the current permission check in a single widget
 above the editor. Each check first shows its surface, compact target, and the
 dynamically configured reviewer model, then replaces that content in place
 with the outcome, target and rationale, model, token usage, duration, and any
-extra call count. A new check replaces the previous result; the latest result
-remains visible until then and is cleared when the session changes or shuts
-down. Concurrent older checks cannot overwrite the most recently started one.
+extra call count. A new check replaces the previous result. Allowed and
+auto-confirmed results dismiss after eight seconds so they do not occupy the
+editor; denials, deferrals, and local-confirmation waits stay until the next
+check, a session change, or shutdown. Concurrent older checks cannot overwrite
+the most recently started one.
 
 Every request still has its own model call, verdict, grant, local confirmation,
 and audit record. No new review-result transcript entries are written. Existing

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-auto-review",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "description": "Fail-closed, model-backed approval broker for Pi: deterministically hard-denies dangerous operations, reviews dangerous boundaries with a reviewer model, and issues one-shot expiring grants that OS sandbox adapters must consume before retrying.",
   "type": "module",
   "license": "MIT",
@@ -49,7 +49,7 @@
   "peerDependencies": {
     "@earendil-works/pi-ai": "^0.85.0",
     "@earendil-works/pi-coding-agent": "^0.85.0",
-    "@gotgenes/pi-permission-system": ">=29.3.0 <32.0.0"
+    "@gotgenes/pi-permission-system": ">=30.0.0"
   },
   "devDependencies": {
     "@earendil-works/pi-ai": "^0.85.0",

package/src/user-feedback.ts

@@ -3,6 +3,8 @@ import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 export const USER_REVIEW_STATUS_KEY = "pi-auto-review";
 export const USER_REVIEW_ENTRY_TYPE = "pi-auto-review";
 export const USER_REVIEW_WIDGET_KEY = "pi-auto-review";
+/** How long a successful completed widget stays above the editor. */
+export const USER_REVIEW_SUCCESS_WIDGET_TTL_MS = 8_000;
 
 export type UserReviewOutcome =
   | "allow"
@@ -652,9 +654,14 @@ function setWidget(
   }
 }
 
+function isTransientCompletedOutcome(outcome: UserReviewOutcome): boolean {
+  return outcome === "allow" || outcome === "auto_confirm";
+}
+
 /** Owns the single live widget and rejects stale concurrent completions. */
 export class UserReviewWidgetController {
   #generation = 0;
+  #dismissTimer: ReturnType<typeof setTimeout> | undefined;
   /** Set while a `ctx.ui` prompt blocks the session (ui_prompt span). */
   #waiting?: { kind?: unknown; title?: unknown };
   #current?: {
@@ -664,6 +671,9 @@ export class UserReviewWidgetController {
     data?: UserReviewWidgetData;
     notice?: UserReviewNotice;
   };
+  constructor(
+    private readonly successTtlMs = USER_REVIEW_SUCCESS_WIDGET_TTL_MS,
+  ) {}
 
   begin(
     requestId: string,
@@ -671,6 +681,7 @@ export class UserReviewWidgetController {
     input: { surface: string; target?: string; model?: string },
   ): number {
     const generation = ++this.#generation;
+    this.#cancelDismiss();
     this.#current = { requestId, generation, ctx, data: buildUserReviewingWidgetData(input) };
     this.#render();
     return generation;
@@ -715,8 +726,12 @@ export class UserReviewWidgetController {
       return;
     }
     if (!this.#isCurrent(requestId, generation)) return;
+    this.#cancelDismiss();
     this.#current = { requestId, generation, ctx, notice, data };
     if (!setWidget(ctx, data)) notifyUserReview(ctx, notice);
+    if (isTransientCompletedOutcome(data.outcome)) {
+      this.#scheduleDismiss(generation, ctx);
+    }
   }
 
   permissionDecision(event: unknown): void {
@@ -738,18 +753,36 @@ export class UserReviewWidgetController {
       type: current.notice?.type ?? data.type,
       message: data.lines.join("\n"),
     };
+    this.#cancelDismiss();
     this.#current = { ...current, data, notice };
     if (!setWidget(current.ctx, data)) notifyUserReview(current.ctx, notice);
   }
 
   clear(ctx?: ExtensionContext): void {
     ++this.#generation;
+    this.#cancelDismiss();
     this.#waiting = undefined;
     const current = this.#current;
     this.#current = undefined;
     if (current) setWidget(ctx ?? current.ctx, undefined);
   }
 
+  #cancelDismiss(): void {
+    if (this.#dismissTimer === undefined) return;
+    clearTimeout(this.#dismissTimer);
+    this.#dismissTimer = undefined;
+  }
+
+  #scheduleDismiss(generation: number, ctx: ExtensionContext): void {
+    if (this.successTtlMs <= 0) return;
+    this.#dismissTimer = setTimeout(() => {
+      this.#dismissTimer = undefined;
+      if (this.#current?.generation !== generation) return;
+      this.clear(ctx);
+    }, this.successTtlMs);
+    this.#dismissTimer.unref?.();
+  }
+
   #isCurrent(requestId: string, generation: number): boolean {
     return this.#current?.requestId === requestId &&
       this.#current.generation === generation;