@erichll/pi-auto-review 0.23.0 → 0.24.0

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 0.24.0 - 2026-10-03
+
+- Raise the `@earendil-works/pi-ai` and `@earendil-works/pi-coding-agent`
+  peer floors to `^1.0.0` and the development baselines to `^1.0.0`, plus
+  `@types/node` to `^26.6.4`. Raise the
+  `@gotgenes/pi-permission-system` development baseline to `^38.0.2`; the peer
+  floor stays `>=36.0.0`. Validated against Pi 1.0.0 with
+  pi-permission-system 38.0.2 via `tsc --noEmit` and the full test suite: no
+  source changes were required, and the authorizer seam this package consumes
+  is unchanged.
+- Move the example's Pi MCP tool rules under `mcp` (`mcp__atlassian__*`,
+  `mcp__pencil__*`) and update the README's MCP guidance to match, because
+  pi-permission-system 38.0.0 gates Pi's built-in MCP tools on the `mcp`
+  surface instead of their top-level names.
+
 ## 0.23.0 - 2026-10-02
 
 - Add opt-in `model: "current"` to review approval requests with the active Pi

package/README.md

@@ -31,8 +31,9 @@ that dependency is a hard prerequisite (see [Install and enable](#install-and-en
 > **Prerequisite:** pi-auto-review is an authorizer inside
 > `@gotgenes/pi-permission-system`. Pi does not auto-install peer packages, so
 > install the permission system separately (once per machine) before this
-> extension. This release line requires Pi 0.99.1 or later and supports
-> permission-system 36.0.0 and later:
+> extension. This release line requires Pi 1.0.0 or later and supports
+> permission-system 36.0.0 and later (development baseline validated against
+> permission-system 38.0.2):
 
 Node-based Pi requires Node.js 22.13.0 or newer. Permission auditing uses the
 host runtime's built-in SQLite: `node:sqlite` on Node and `bun:sqlite` on Bun,
@@ -156,19 +157,20 @@ to select a model whose ID is literally `current`.
 
 For a complete `@gotgenes/pi-permission-system` config that wires
 `pi-auto-review` into the authorizer chain — a copyable baseline covering
-read/write/edit, a read-only bash allowlist, an MCP discovery policy, and a
+read/write/edit, a read-only bash allowlist, MCP tool access, and a
 `path` deny block for secret and credential files — see
 [`examples/pi-permission-system.config.example.json`](examples/pi-permission-system.config.example.json).
 
-MCP rules are evaluated last-match-wins across the candidates derived for one
-call: the tool name, its bare server, and `mcp_call`. Keep `"*"` first in the
-`mcp` block and narrower server or tool entries after it, as the example does,
-so a specific rule cannot be shadowed by the catch-all. A bare server entry
-such as `"atlassian": "allow"` also matches the `mcp connect <server>`
-candidate list, so it auto-allows starting that server — prefer the `server_*`
-and `server:*` forms for tool calls. Any entry meant to narrow a broad allow
-(such as a destructive-tool pattern) must be written after it, or
-last-match-wins shadows it.
+Permission-system 38.0.0 gates Pi's built-in MCP tools on the `mcp` surface, so
+the example writes its `mcp__<server>__*` rules inside a `mcp` block instead of
+as top-level tool names. MCP rules are evaluated last-match-wins across the
+candidates derived for one call: the tool name, its bare server, and `mcp_call`.
+A call the `mcp` block does not match falls through to the universal
+`"*": "ask"`, and any broad catch-all must be written before a narrower
+override or last-match-wins shadows it. A bare server entry such as
+`"atlassian": "allow"` also matches the `mcp connect <server>` candidate list,
+so it auto-allows starting that server — prefer the `server_*` and `server:*`
+forms for tool calls.
 
 Package defaults:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-auto-review",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "description": "Fail-closed, model-backed approval broker for Pi: deterministically hard-denies dangerous operations, reviews dangerous boundaries with a reviewer model, and issues one-shot expiring grants that OS sandbox adapters must consume before retrying.",
   "type": "module",
   "license": "MIT",
@@ -47,16 +47,16 @@
     "test": "node --disable-warning=ExperimentalWarning --experimental-transform-types --import ./test/register-external-ts.mjs --test test/*.test.ts"
   },
   "peerDependencies": {
-    "@earendil-works/pi-ai": "^0.99.1",
-    "@earendil-works/pi-coding-agent": "^0.99.1",
+    "@earendil-works/pi-ai": "^1.0.0",
+    "@earendil-works/pi-coding-agent": "^1.0.0",
     "@gotgenes/pi-permission-system": ">=36.0.0"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "^0.99.1",
-    "@earendil-works/pi-coding-agent": "^0.99.1",
-    "@earendil-works/pi-server": "^0.99.1",
-    "@gotgenes/pi-permission-system": "^36.0.0",
-    "@types/node": "^26.6.2",
+    "@earendil-works/pi-ai": "^1.0.0",
+    "@earendil-works/pi-coding-agent": "^1.0.0",
+    "@earendil-works/pi-server": "^1.0.0",
+    "@gotgenes/pi-permission-system": "^38.0.2",
+    "@types/node": "^26.6.4",
     "typescript": "^7.0.2"
   }
 }