@erichll/pi-auto-review 0.18.0 → 0.18.2

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 0.18.2 - 2026-09-17
+
+- Treat empty or whitespace-only `.pi/pi-auto-review.json` files as missing
+  configuration instead of throwing `SyntaxError`. This prevents `session_start`
+  from disabling automatic reviews for an entire session when Linux bubblewrap
+  creates a 0-byte mount point stub for deny-write paths (fixes #6).
+- Apply the same empty-file tolerance to the user-global config loader.
+- Remove redundant files from `protectedFiles` in `guards.ts` (`settings.json`,
+  `permissions.json`, and unused `sandbox.json`) so workspaces can configure
+  standard settings without triggering security tampering hard-denials.
+
+## 0.18.1 - 2026-09-11
+
+- Animate the live `reviewing` label in the above-editor widget with a
+  left-to-right light sweep while the reviewer model is evaluating a boundary check.
+- Paint shimmer frames at an 80ms interval cycling theme colors (`accent`,
+  `muted`, `dim`) without altering the label text length or widget layout width.
+- Ensure the animation timer cleanly stops and disposes when the review phase
+  completes or the widget is dismissed.
+- Export `USER_REVIEW_SWEEP_INTERVAL_MS` and `renderReviewingSweep` for testing
+  and custom TUI rendering.
+
 ## 0.18.0 - 2026-09-11
 
 - Coordinated release for `@erichll/pi-sandbox 0.18.0`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-auto-review",
-  "version": "0.18.0",
+  "version": "0.18.2",
   "description": "Fail-closed, model-backed approval broker for Pi: deterministically hard-denies dangerous operations, reviews dangerous boundaries with a reviewer model, and issues one-shot expiring grants that OS sandbox adapters must consume before retrying.",
   "type": "module",
   "license": "MIT",

package/src/review/config.ts

@@ -241,7 +241,13 @@ export function loadTrustedConfig(
   const path = options.userConfigPath ?? userConfigPath();
   let value: unknown;
   try {
-    value = JSON.parse(readFileSync(path, "utf8"));
+    const content = readFileSync(path, "utf8");
+    if (!content.trim()) {
+      // Treat empty/whitespace-only file the same as missing — sandbox
+      // runtime may leave 0-byte mount-point stubs for denyWrite paths.
+      return packageConfig;
+    }
+    value = JSON.parse(content);
   } catch (error) {
     if (
       error &&

package/src/review/guards.ts

@@ -31,12 +31,7 @@ export function protectedWriteHardDeny(
     join(agentDir, "extensions", "pi-auto-review"),
   ];
   const protectedFiles = [
-    join(request.cwd, ".pi", "settings.json"),
-    join(request.cwd, ".pi", "sandbox.json"),
     join(request.cwd, PROJECT_CONFIG_PATH),
-    join(agentDir, "settings.json"),
-    join(agentDir, "permissions.json"),
-    join(agentDir, "sandbox.json"),
     userConfigPath(),
   ];
   if (

package/src/review/input.ts

@@ -39,7 +39,13 @@ export function sessionConfig(
   const projectPath = join(cwd, PROJECT_CONFIG_PATH);
   let raw: unknown;
   try {
-    raw = JSON.parse(readFileSync(projectPath, "utf8"));
+    const content = readFileSync(projectPath, "utf8");
+    if (!content.trim()) {
+      // Treat empty/whitespace-only file the same as missing — sandbox
+      // runtime may leave 0-byte mount-point stubs for denyWrite paths.
+      return Object.freeze({ ...trusted });
+    }
+    raw = JSON.parse(content);
   } catch (error) {
     if (
       error &&

package/src/user-feedback.ts

@@ -5,6 +5,8 @@ export const USER_REVIEW_ENTRY_TYPE = "pi-auto-review";
 export const USER_REVIEW_WIDGET_KEY = "pi-auto-review";
 /** How long a successful completed widget stays above the editor. */
 export const USER_REVIEW_SUCCESS_WIDGET_TTL_MS = 8_000;
+/** Frame interval for the light sweep across the live `reviewing` label. */
+export const USER_REVIEW_SWEEP_INTERVAL_MS = 80;
 
 export type UserReviewOutcome =
   | "allow"
@@ -600,14 +602,36 @@ export function buildUserReviewWidgetData(
   };
 }
 
+const REVIEWING_LABEL = "reviewing";
+const REVIEWING_SWEEP_GAP_FRAMES = 4;
+
+/** Paint one left-to-right shimmer frame without changing the label width. */
+export function renderReviewingSweep(
+  theme: UserReviewTheme,
+  frame: number,
+): string {
+  const center = Math.abs(Math.trunc(frame)) %
+      (REVIEWING_LABEL.length + REVIEWING_SWEEP_GAP_FRAMES) - 2;
+  return [...REVIEWING_LABEL].map((character, index) => {
+    const distance = Math.abs(index - center);
+    const color = distance === 0
+      ? "accent"
+      : distance === 1
+      ? "muted"
+      : "dim";
+    return `${theme.getFgAnsi(color)}${character}`;
+  }).join("") + "\x1b[0m";
+}
+
 export function renderUserReviewWidgetLines(
   data: UserReviewWidgetData,
   theme: UserReviewTheme,
   width: number,
+  reviewingFrame = 0,
 ): string[] {
   const rendered: string[] = [];
   const verb = data.phase === "reviewing"
-    ? "reviewing"
+    ? REVIEWING_LABEL
     : data.phase === "waiting_user"
     ? "waiting"
     : outcomeVerb(data.outcome);
@@ -620,9 +644,12 @@ export function renderUserReviewWidgetLines(
     for (const visual of wrapReviewDisplayText(line, Math.max(1, width))) {
       let painted = `${mutedAnsi}${visual}\x1b[0m`;
       if (index === 0) {
+        const paintedVerb = data.phase === "reviewing"
+          ? renderReviewingSweep(theme, reviewingFrame)
+          : `${verbAnsi}${verb}\x1b[0m`;
         painted = painted.replace(
           verb,
-          `${verbAnsi}${verb}\x1b[0m${mutedAnsi}`,
+          `${paintedVerb}${mutedAnsi}`,
         );
       }
       rendered.push(painted);
@@ -640,11 +667,24 @@ function setWidget(
     ctx.ui.setWidget(
       USER_REVIEW_WIDGET_KEY,
       data
-        ? (_tui, theme) => ({
-            render: (width: number) =>
-              renderUserReviewWidgetLines(data, theme, width),
-            invalidate() {},
-          })
+        ? (tui, theme) => {
+            let frame = 0;
+            const interval = data.phase === "reviewing"
+              ? setInterval(() => {
+                  frame++;
+                  tui.requestRender();
+                }, USER_REVIEW_SWEEP_INTERVAL_MS)
+              : undefined;
+            interval?.unref?.();
+            return {
+              render: (width: number) =>
+                renderUserReviewWidgetLines(data, theme, width, frame),
+              invalidate() {},
+              dispose() {
+                if (interval !== undefined) clearInterval(interval);
+              },
+            };
+          }
         : undefined,
       { placement: "aboveEditor" },
     );