@hank-warren/pi-auto-permissions 0.6.1 → 0.7.0

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @hank-warren/pi-auto-permissions
 
+## 0.7.0
+
+### Minor Changes
+
+- ad12ad0: Rename the eval-logging prompt's block option to "Block — asking was appropriate".
+
+  Label clarity only — the schema is unchanged (`userChoice: "block"`, `expectedDecision: "ask_user"`). A block always affirms that asking was right: the guardian has no reject verdict (its non-approve outcomes are `ask_user` and `revise`), so the only true rejection in the system is the user's at this prompt. Plain "Block" from the logging-disabled prompt still classifies identically, including for override evidence.
+
 ## 0.6.1
 
 ### Patch Changes

package/README.md

@@ -201,7 +201,7 @@ The path defaults to `review-evals.jsonl` beside the Auto Permissions config and
 When logging is enabled, prompted reviews offer three choices:
 
 - **Allow — asking was unnecessary** executes the command and records `userChoice: "allow_unnecessary"` with `expectedDecision: "approve"`.
-- **Block** remains the second choice, blocks the command, and records `userChoice: "block"` with `expectedDecision: "ask_user"`.
+- **Block — asking was appropriate** remains the second choice, blocks the command, and records `userChoice: "block"` with `expectedDecision: "ask_user"`. (A block always affirms the prompt: the guardian has no reject verdict — its only non-approve outcomes are asking you or bouncing the command back to the agent as `revise` — so the only true rejection in the system is yours at this prompt.)
 - **Allow — asking was appropriate** executes the command and records `userChoice: "allow_appropriate"` with `expectedDecision: "ask_user"`.
 
 When logging is disabled, the prompt retains the normal **Allow** and **Block** choices. Prompts from Pi or other extensions are unchanged.

package/evaluation-log.ts

@@ -5,7 +5,7 @@ import type { PermissionDecision, ReviewEvidenceRecord } from "./review.js";
 export const PROMPT_FEEDBACK_OPTIONS = {
   allowUnnecessary: "Allow — asking was unnecessary",
   allowAppropriate: "Allow — asking was appropriate",
-  block: "Block",
+  block: "Block — asking was appropriate",
 } as const;
 
 export type PromptEvaluationUserChoice = "allow_unnecessary" | "allow_appropriate" | "block";
@@ -47,6 +47,10 @@ export interface PromptEvaluationRecord {
 
 export function classifyPromptChoice(choice: string | undefined): PromptChoiceClassification | undefined {
   if (choice === "Allow") return { allowsExecution: true };
+  // Plain "Block" is still live: the logging-disabled prompt offers
+  // ["Allow", "Block"]. It carries the same block semantics as the labeled
+  // variant so override evidence works in both prompt modes.
+  if (choice === "Block") return { allowsExecution: false, userChoice: "block" };
   if (choice === PROMPT_FEEDBACK_OPTIONS.allowUnnecessary) {
     return { allowsExecution: true, userChoice: "allow_unnecessary" };
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hank-warren/pi-auto-permissions",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "description": "Fork of @ogulcancelik/pi-auto-permissions with dialog-answer user evidence: context-aware Bash permissions for Pi with automated guardian review.",
   "type": "module",
   "keywords": [