@gotgenes/pi-permission-system 26.2.0 → 26.2.1

package/CHANGELOG.md

@@ -5,6 +5,18 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [26.2.1](https://github.com/gotgenes/pi-packages/compare/pi-permission-system-v26.2.0...pi-permission-system-v26.2.1) (2026-08-17)
+
+
+### Bug Fixes
+
+* **pi-permission-system:** accept pasted text in the denial-reason field ([8b33c38](https://github.com/gotgenes/pi-packages/commit/8b33c38084689dbb356fa0a0b7069bc610140736)), closes [#760](https://github.com/gotgenes/pi-packages/issues/760)
+
+
+### Documentation
+
+* **pi-permission-system:** document the delegated denial-reason editor ([e7329f5](https://github.com/gotgenes/pi-packages/commit/e7329f5e81fc66e5317e958c9928262aaf433173)), closes [#760](https://github.com/gotgenes/pi-packages/issues/760)
+
 ## [26.2.0](https://github.com/gotgenes/pi-packages/compare/pi-permission-system-v26.1.0...pi-permission-system-v26.2.0) (2026-08-17)
 
 

package/docs/configuration.md

@@ -135,6 +135,10 @@ It expands both the prompt itself — to the complete request, unbounded by `pro
 It only toggles the display — it never resolves, commits, or arms the pending decision.
 While you are typing a denial reason it is not intercepted, so a rebound printable key still reaches the reason editor.
 
+The reason editor is Pi's own line editor, so it behaves like the chat input: pasting works, as do cursor movement, word and line deletion, the kill ring, and undo.
+The reason is a single line — a pasted line break becomes a space, and a long reason scrolls sideways rather than growing the dialog.
+`enter` submits it, and `esc` (or `Ctrl+C`) returns to the decision list without denying.
+
 ### What a prompt shows
 
 The prompt renders one fact per line, with the requesting agent (and, for a forwarded subagent ask, its session), the tool, the gate surface, the matched rule, the decision-relevant value, and — for a wrapper such as `xargs` — the command that will actually run.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotgenes/pi-permission-system",
-  "version": "26.2.0",
+  "version": "26.2.1",
   "description": "Permission enforcement extension for the Pi coding agent.",
   "type": "module",
   "exports": {

package/src/authority/bracketed-paste.ts

@@ -0,0 +1,35 @@
+/**
+ * Bracketed-paste normalization for the inline permission dialog's reason field.
+ *
+ * A terminal in bracketed-paste mode wraps pasted text in these markers, and
+ * the TUI hands the wrapped chunk to the focused component in a single call.
+ */
+
+const PASTE_START = "\u001b[200~";
+const PASTE_END = "\u001b[201~";
+const NEWLINE_RUN = /[\r\n]+/g;
+
+/**
+ * Collapse newline runs inside a bracketed-paste chunk to single spaces.
+ *
+ * The framework line editor deletes newlines outright, which joins the words
+ * on either side of a line break; a reason pasted from a multi-line source
+ * should stay readable in the single-line field. The markers are preserved so
+ * the editor still recognizes the chunk as a paste, and anything that is not
+ * a complete paste chunk is returned unchanged.
+ */
+export function collapsePastedNewlines(data: string): string {
+  const start = data.indexOf(PASTE_START);
+  if (start === -1) {
+    return data;
+  }
+  const contentStart = start + PASTE_START.length;
+  const contentEnd = data.indexOf(PASTE_END, contentStart);
+  if (contentEnd === -1) {
+    return data;
+  }
+  const content = data
+    .slice(contentStart, contentEnd)
+    .replace(NEWLINE_RUN, " ");
+  return data.slice(0, contentStart) + content + data.slice(contentEnd);
+}

package/src/authority/permission-prompt-component.ts

@@ -3,7 +3,8 @@ import type {
   ExtensionUIContext,
   KeybindingsManager,
 } from "@earendil-works/pi-coding-agent";
-import { type Component, matchesKey } from "@earendil-works/pi-tui";
+import { type Component, Input, matchesKey } from "@earendil-works/pi-tui";
+import { collapsePastedNewlines } from "#src/authority/bracketed-paste";
 import type {
   DecisionSource,
   UserDecisionSurface,
@@ -188,7 +189,8 @@ function handleToolsExpandAction(
 
 class PermissionPromptComponent implements Component {
   private state: PromptViewState;
-  private reasonBuffer = "";
+  /** The denial-reason line editor, rebuilt each time the step is entered. */
+  private reason: Input;
   /** Whether the operator asked to see the complete request (ADR 0011 §4). */
   private expanded = false;
 
@@ -203,6 +205,28 @@ class PermissionPromptComponent implements Component {
     private readonly done: (decision: UnattributedDecision) => void,
   ) {
     this.state = initialPromptState(config);
+    this.reason = this.createReasonEditor();
+  }
+
+  /**
+   * A fresh editor per visit to the reason step.
+   *
+   * The framework editor carries an undo stack and a kill ring, so reusing one
+   * instance would let a reason the operator backed out of be restored into a
+   * later ask.
+   */
+  private createReasonEditor(): Input {
+    const editor = new Input();
+    // Emits pi-tui's zero-width cursor marker, which positions the hardware
+    // cursor for IME composition.
+    editor.focused = true;
+    editor.onSubmit = (draft) => {
+      this.apply({ type: "submitReason", draft });
+    };
+    editor.onEscape = () => {
+      this.apply({ type: "cancel" });
+    };
+    return editor;
   }
 
   invalidate(): void {
@@ -278,25 +302,18 @@ class PermissionPromptComponent implements Component {
     }
   }
 
+  /**
+   * Hand the keystroke to the framework line editor.
+   *
+   * Delegating is what makes the field accept a paste: a paste arrives as one
+   * multi-character chunk wrapped in bracketed-paste markers, which the editor
+   * understands and a per-character reader cannot. Submit and cancel come back
+   * through the editor's callbacks, so the decision model still owns them.
+   */
   private handleReasonInput(data: string): void {
-    if (matchesKey(data, "enter")) {
-      this.apply({ type: "submitReason", draft: this.reasonBuffer });
-      return;
-    }
-    if (matchesKey(data, "escape")) {
-      this.reasonBuffer = "";
-      this.apply({ type: "cancel" });
-      return;
-    }
-    if (matchesKey(data, "backspace")) {
-      this.reasonBuffer = this.reasonBuffer.slice(0, -1);
-      this.requestRender();
-      return;
-    }
-    if (isPrintable(data)) {
-      this.reasonBuffer += data;
-      this.requestRender();
-    }
+    this.reason.handleInput(collapsePastedNewlines(data));
+    // The editor mutates its own buffer silently; only the dialog can repaint.
+    this.requestRender();
   }
 
   private toEvent(data: string): PromptEvent | undefined {
@@ -328,7 +345,7 @@ class PermissionPromptComponent implements Component {
       return;
     }
     if (outcome.state.step === "reason" && this.state.step !== "reason") {
-      this.reasonBuffer = "";
+      this.reason = this.createReasonEditor();
     }
     this.state = outcome.state;
     this.requestRender();
@@ -354,7 +371,9 @@ class PermissionPromptComponent implements Component {
       this.theme.fg("accent", this.title),
       ...this.renderAsk(width).lines,
       "",
-      `Reason (required): ${this.reasonBuffer}\u2588`,
+      "Reason (required):",
+      // Exactly one row, whatever its length: the editor scrolls horizontally.
+      ...this.reason.render(width),
     ];
     if (this.state.reasonError) {
       lines.push(this.theme.fg("error", this.state.reasonError));
@@ -388,11 +407,3 @@ class PermissionPromptComponent implements Component {
     return lines;
   }
 }
-
-function isPrintable(data: string): boolean {
-  if (data.length !== 1) {
-    return false;
-  }
-  const code = data.charCodeAt(0);
-  return code >= 0x20 && code !== 0x7f;
-}

package/src/authority/permission-prompt-decision.ts

@@ -52,7 +52,6 @@ export interface PromptViewState {
   armedKey?: PromptKey;
   /** "Press y again to approve." while armed; empty otherwise. */
   hint: string;
-  reasonDraft: string;
   /** Set when an empty reason submit is rejected. */
   reasonError?: string;
   /** Scope step: false = subagent-only (default), true = whole serving session. */
@@ -80,7 +79,6 @@ export function initialPromptState(
     highlightedKey: "y",
     armedKey: undefined,
     hint: "",
-    reasonDraft: "",
     reasonError: undefined,
     scopeServing: false,
   };
@@ -169,7 +167,6 @@ function commit(
         highlightedKey: "r",
         armedKey: undefined,
         hint: "",
-        reasonDraft: "",
         reasonError: undefined,
       });
     case "s":
@@ -200,7 +197,6 @@ function reduceReasonStep(
       step: "decision",
       armedKey: undefined,
       hint: "",
-      reasonDraft: "",
       reasonError: undefined,
     });
   }
@@ -209,7 +205,6 @@ function reduceReasonStep(
     if (reason === undefined) {
       return render({
         ...state,
-        reasonDraft: event.draft,
         reasonError: "A reason is required.",
       });
     }