@erichll/pi-auto-review 0.20.1 → 0.21.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.21.0 - 2026-09-25
+
+- Raise the `@gotgenes/pi-permission-system` peer floor to `>=34.0.0` and update
+  the development baseline to `^34.0.0`. Version 34.0.0 introduces
+  syntax-level role projection for redirect targets so non-existent file
+  targets are governed by path rules without requiring pre-existence probes.
+- Automatically dismiss deferred and pending review widgets when explicit
+  user permission decisions (`permissions:decision` with `allow`) occur or when
+  a new agent turn begins (`turn_start`), preventing stale `deferred` notices
+  from lingering in the TUI indefinitely.
+- Unit tests added for deferred widget dismissal on local user confirmation.
+
 ## 0.20.1 - 2026-09-24
 
 - Upgrade the development baseline for `@gotgenes/pi-permission-system` to

package/README.md

@@ -31,8 +31,7 @@ that dependency is a hard prerequisite (see [Install and enable](#install-and-en
 > **Prerequisite:** pi-auto-review is an authorizer inside
 > `@gotgenes/pi-permission-system`. Pi does not auto-install peer packages, so
 > install the permission system separately (once per machine) before this
-> extension. This release line supports permission-system 30.0.0 and later,
-> validated through 33.0.8:
+> extension. This release line supports permission-system 34.0.0 and later:
 
 Node.js 22.13.0 or newer is required. Permission auditing uses Node's built-in
 `node:sqlite`; it does not require a SQLite CLI, system SQLite library, or npm

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-auto-review",
-  "version": "0.20.1",
+  "version": "0.21.0",
   "description": "Fail-closed, model-backed approval broker for Pi: deterministically hard-denies dangerous operations, reviews dangerous boundaries with a reviewer model, and issues one-shot expiring grants that OS sandbox adapters must consume before retrying.",
   "type": "module",
   "license": "MIT",
@@ -49,13 +49,13 @@
   "peerDependencies": {
     "@earendil-works/pi-ai": "^0.87.1",
     "@earendil-works/pi-coding-agent": "^0.87.1",
-    "@gotgenes/pi-permission-system": ">=30.0.0"
+    "@gotgenes/pi-permission-system": ">=34.0.0"
   },
   "devDependencies": {
     "@earendil-works/pi-ai": "^0.87.1",
     "@earendil-works/pi-coding-agent": "^0.87.1",
     "@earendil-works/pi-server": "^0.87.1",
-    "@gotgenes/pi-permission-system": "^33.1.1",
+    "@gotgenes/pi-permission-system": "^34.0.0",
     "@types/node": "^26.6.2",
     "typescript": "^6.0.3"
   }

package/src/index.ts

@@ -241,6 +241,9 @@ export function createPiAutoReviewExtension(
     pi.on("ui_prompt_end", () => {
       reviewWidget.promptEnd();
     });
+    pi.on("turn_start", () => {
+      reviewWidget.clear(context);
+    });
   } catch {
     // Older pi: widget behavior is unchanged.
   }

package/src/user-feedback.ts

@@ -779,10 +779,18 @@ export class UserReviewWidgetController {
     const record = event as Record<string, unknown>;
     const current = this.#current;
     if (
-      record.result !== "deny" ||
       typeof record.requestId !== "string" ||
       record.requestId !== current?.requestId ||
-      !current.data ||
+      !current.data
+    ) return;
+
+    if (record.result === "allow") {
+      this.#scheduleDismiss(current.generation, current.ctx);
+      return;
+    }
+
+    if (
+      record.result !== "deny" ||
       current.data.lines.includes("Local confirmation · denied")
     ) return;
     const data = {