@gotgenes/pi-permission-system 10.7.0 → 10.7.1

package/CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [10.7.1](https://github.com/gotgenes/pi-packages/compare/pi-permission-system-v10.7.0...pi-permission-system-v10.7.1) (2026-06-09)
+
+
+### Bug Fixes
+
+* surface full chained command in bash permission prompt ([#333](https://github.com/gotgenes/pi-packages/issues/333)) ([7f448fb](https://github.com/gotgenes/pi-packages/commit/7f448fb6e394bc37f94c98e04332abdcc8528c46))
+
 ## [10.7.0](https://github.com/gotgenes/pi-packages/compare/pi-permission-system-v10.6.0...pi-permission-system-v10.7.0) (2026-06-09)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotgenes/pi-permission-system",
-  "version": "10.7.0",
+  "version": "10.7.1",
   "description": "Permission enforcement extension for the Pi coding agent.",
   "type": "module",
   "exports": {

package/src/permission-prompts.ts

@@ -1,3 +1,4 @@
+import { getNonEmptyString, toRecord } from "./common";
 import { matchQualifier } from "./denial-messages";
 import type { SkillPromptEntry } from "./skill-prompt-sanitizer";
 import type { ToolPreviewFormatter } from "./tool-preview-formatter";
@@ -37,12 +38,18 @@ export function formatAskPrompt(
   const subject = agentName ? `Agent '${agentName}'` : "Current agent";
 
   if (result.toolName === "bash") {
+    const subCommand = result.command ?? "";
     const qualifier = matchQualifier(
       result.matchedPattern,
       result.commandContext,
     );
     const qualifierInfo = qualifier ? ` ${qualifier}` : "";
-    return `${subject} requested bash command '${result.command ?? ""}'${qualifierInfo}. Allow this command?`;
+    const fullCommand = getNonEmptyString(toRecord(input).command);
+    const fullCommandInfo =
+      fullCommand && fullCommand !== subCommand
+        ? ` (full command: '${fullCommand}')`
+        : "";
+    return `${subject} requested bash command '${subCommand}'${qualifierInfo}${fullCommandInfo}. Allow this command?`;
   }
 
   if ((result.source === "mcp" || result.toolName === "mcp") && result.target) {

package/test/permission-prompts.test.ts

@@ -151,6 +151,73 @@ describe("formatAskPrompt", () => {
     expect(result).toContain("matched 'git *'");
   });
 
+  test("appends full command when input contains a chain that differs from the sub-command", () => {
+    const result = formatAskPrompt(
+      toolResult("bash", { command: "rm -rf ." }),
+      undefined,
+      { command: 'echo "hello" && rm -rf .' },
+      makeFormatter(),
+    );
+    expect(result).toBe(
+      `Current agent requested bash command 'rm -rf .' (full command: 'echo "hello" && rm -rf .'). Allow this command?`,
+    );
+  });
+
+  test("suppresses full-command suffix when input command matches the sub-command (no chain)", () => {
+    const result = formatAskPrompt(
+      toolResult("bash", { command: "git push" }),
+      undefined,
+      { command: "git push" },
+      makeFormatter(),
+    );
+    expect(result).not.toContain("full command:");
+    expect(result).toBe(
+      "Current agent requested bash command 'git push'. Allow this command?",
+    );
+  });
+
+  test("suppresses full-command suffix when input is undefined", () => {
+    const result = formatAskPrompt(
+      toolResult("bash", { command: "git push" }),
+      undefined,
+      undefined,
+      makeFormatter(),
+    );
+    expect(result).not.toContain("full command:");
+  });
+
+  test("suppresses full-command suffix when input has no command field", () => {
+    const result = formatAskPrompt(
+      toolResult("bash", { command: "git push" }),
+      undefined,
+      { unrelated: "value" },
+      makeFormatter(),
+    );
+    expect(result).not.toContain("full command:");
+  });
+
+  test("suppresses full-command suffix when input command is empty", () => {
+    const result = formatAskPrompt(
+      toolResult("bash", { command: "git push" }),
+      undefined,
+      { command: "" },
+      makeFormatter(),
+    );
+    expect(result).not.toContain("full command:");
+  });
+
+  test("places full-command suffix after the qualifier and before the terminal sentence", () => {
+    const result = formatAskPrompt(
+      toolResult("bash", { command: "rm -rf foo", matchedPattern: "rm *" }),
+      undefined,
+      { command: "cd /tmp && rm -rf foo" },
+      makeFormatter(),
+    );
+    expect(result).toBe(
+      "Current agent requested bash command 'rm -rf foo' (matched 'rm *') (full command: 'cd /tmp && rm -rf foo'). Allow this command?",
+    );
+  });
+
   test("formats bash prompt with nested execution context", () => {
     const result = formatAskPrompt(
       toolResult("bash", {