@hank-warren/pi-auto-permissions 0.7.2 → 0.8.0

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @hank-warren/pi-auto-permissions
 
+## 0.8.0
+
+### Minor Changes
+
+- 52ff06e: Add a dedicated `OpenAI Codex - Auto Permissions` provider with its own OAuth credential slot, allowing guardian reviews to use a separate ChatGPT account without replacing the main OpenAI Codex login.
+
+### Patch Changes
+
+- 312da9a: Add a pulsing warning light to interactive approval prompts so they remain visually distinct from the surrounding transcript.
+
 ## 0.7.2
 
 ### Patch Changes

package/README.md

@@ -114,12 +114,18 @@ Set `enabled` to `false` to disable the extension. Invalid configuration fails c
 
 ## Guardian configuration
 
-By default, the guardian uses Pi's active model with low reasoning effort and a 30-second timeout. You can select a separate low-cost model:
+By default, the guardian uses Pi's active model with low reasoning effort and a 30-second timeout. You can select a separate low-cost model.
+
+For OpenAI Codex, this package registers a second provider named **OpenAI Codex - Auto Permissions**. Pi keys OAuth credentials by provider id, so this provider can use a different ChatGPT account without replacing the normal `openai-codex` login used by your main agent.
+
+1. Run `/login` and select **OpenAI Codex - Auto Permissions**.
+2. Complete OAuth with the account reserved for guardian reviews.
+3. Select the dedicated provider in the Auto Permissions config:
 
 ```json
 {
   "reviewer": {
-    "provider": "openai-codex",
+    "provider": "openai-codex-auto-permissions",
     "model": "gpt-5.6-luna",
     "reasoningEffort": "low",
     "timeoutMs": 30000
@@ -127,6 +133,10 @@ By default, the guardian uses Pi's active model with low reasoning effort and a
 }
 ```
 
+The separate credential is stored in Pi's normal `auth.json` under `openai-codex-auto-permissions`; the existing `openai-codex` credential is unchanged. The alias uses Pi's built-in OpenAI Codex OAuth flow, model catalog, and transport. Because it is a normal provider, its models also appear under the dedicated provider name in Pi's model selector after login.
+
+Other reviewer providers continue to work by setting their normal provider and model ids.
+
 ### Guardian prompt
 
 The bundled prompt evaluates authorization, command risk, and compliance with user constraints. Replace it inline with `systemPrompt`, or load a file:
@@ -238,10 +248,10 @@ The path defaults to `usage.jsonl` beside the Auto Permissions config and resolv
 The default UI shows guardian progress as a single animated status line in a temporary widget above the editor:
 
 ```text
-auto permissions · Git commit · ✶ waiting for openai-codex/gpt-5.6-luna
+auto permissions · Git commit · ✶ waiting for openai-codex-auto-permissions/gpt-5.6-luna
 ```
 
-A sparkle spinner (`✶ ✸ ✻ ✽`) cycles while the guardian is reviewing and resolves to `✓ approved`, `↻ revision requested`, `? waiting for your approval`, or `✗ blocked`. The guardian's reason, when present, appears on a dim second line; the command itself is not repeated because it is already visible in the Bash tool box. Configure the widget with:
+A sparkle spinner (`✶ ✸ ✻ ✽`) cycles while the guardian is reviewing and resolves to `✓ approved`, `↻ revision requested`, `? waiting for your approval`, or `✗ blocked`. When approval is needed, the selector's leading `●` pulses between warning-bright and dim so the active prompt remains visually distinct from the transcript. The guardian's reason, when present, appears on a dim second line; the command itself is not repeated because it is already visible in the Bash tool box. Configure the widget with:
 
 ```json
 {
@@ -257,7 +267,7 @@ Set `placement` to `toolRow` to show the review inside Pi's Bash tool row:
 
 ```text
 $ git commit --dry-run -m "fix auth"
-  ◌ guardian running · Git commit · openai-codex/gpt-5.6-luna
+  ◌ guardian running · Git commit · openai-codex-auto-permissions/gpt-5.6-luna
 ```
 
 `toolRow` reconstructs Pi's standard local Bash definition because Pi does not expose renderer-only decoration. Do not use it with SDK-provided, remote, sandboxed, or otherwise replaced Bash backends. The extension detects non-native Bash tools and falls back to the widget instead of replacing them.

package/approval-pulse.ts

@@ -0,0 +1,80 @@
+import { truncateToWidth, type Component } from "@earendil-works/pi-tui";
+
+export const APPROVAL_PULSE_INTERVAL_MS = 600;
+
+export interface ApprovalPulseTheme {
+  fg(role: "warning" | "dim", text: string): string;
+  bold(text: string): string;
+}
+
+export interface ApprovalPulseScheduler {
+  setInterval(callback: () => void, intervalMs: number): unknown;
+  clearInterval(handle: unknown): void;
+}
+
+type InteractiveComponent = Component & Required<Pick<Component, "handleInput">>;
+
+const DEFAULT_SCHEDULER: ApprovalPulseScheduler = {
+  setInterval(callback, intervalMs) {
+    const timer = setInterval(callback, intervalMs);
+    timer.unref?.();
+    return timer;
+  },
+  clearInterval(handle) {
+    clearInterval(handle as ReturnType<typeof setInterval>);
+  },
+};
+
+/**
+ * Decorates an interactive prompt with a bright/dim approval light.
+ *
+ * The child still owns all content and input. Only its first rendered line is
+ * replaced, preserving the selector's existing spacing and wrapping exactly.
+ */
+export class PulsingApprovalIndicator implements Component {
+  private bright = true;
+  private timer: unknown;
+
+  constructor(
+    private readonly headline: string,
+    private readonly child: InteractiveComponent,
+    private readonly theme: ApprovalPulseTheme,
+    private readonly requestRender: () => void,
+    private readonly scheduler: ApprovalPulseScheduler = DEFAULT_SCHEDULER,
+  ) {}
+
+  start(): void {
+    if (this.timer !== undefined) return;
+    this.timer = this.scheduler.setInterval(() => {
+      this.bright = !this.bright;
+      this.requestRender();
+    }, APPROVAL_PULSE_INTERVAL_MS);
+  }
+
+  stop(): void {
+    if (this.timer === undefined) return;
+    this.scheduler.clearInterval(this.timer);
+    this.timer = undefined;
+  }
+
+  isRunning(): boolean {
+    return this.timer !== undefined;
+  }
+
+  render(width: number): string[] {
+    const lines = this.child.render(width);
+    const glyph = this.bright
+      ? this.theme.fg("warning", this.theme.bold("●"))
+      : this.theme.fg("dim", "●");
+    const headline = truncateToWidth(`${glyph} ${this.headline}`, Math.max(1, width), "");
+    return lines.length > 0 ? [headline, ...lines.slice(1)] : [headline];
+  }
+
+  handleInput(data: string): void {
+    this.child.handleInput(data);
+  }
+
+  invalidate(): void {
+    this.child.invalidate();
+  }
+}

package/index.ts

@@ -1,5 +1,9 @@
 import { cleanupSessionResources, type Message } from "@earendil-works/pi-ai";
 import { resolveGuardianCompleteSimple } from "./guardian-transport.js";
+import {
+  createAutoPermissionsOpenAICodexProvider,
+  isOpenAICodexModel,
+} from "./openai-codex-provider.js";
 import { detectSubagentContext } from "./subagent-context.js";
 import * as PiCodingAgent from "@earendil-works/pi-coding-agent";
 import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
@@ -38,6 +42,7 @@ import {
 } from "./review.js";
 import { mergeOverrideEvidence, type PermissionOverride } from "./override-evidence.js";
 import { OptionSelector } from "@hank-warren/pi-permission-selector/selector.ts";
+import { PulsingApprovalIndicator } from "./approval-pulse.js";
 
 const WIDGET_KEY = "auto-permissions";
 const PROJECT_CONFIG_DIR_NAME = (PiCodingAgent as { CONFIG_DIR_NAME?: string }).CONFIG_DIR_NAME ?? ".pi";
@@ -125,8 +130,8 @@ function createUuidV7(): string {
   return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
 }
 
-function reviewerSessionId(provider: string): string {
-  return provider === "openai-codex" ? createUuidV7() : `ap-review-${randomUUID()}`;
+function reviewerSessionId(model: { api?: string }): string {
+  return isOpenAICodexModel(model) ? createUuidV7() : `ap-review-${randomUUID()}`;
 }
 
 function loadNativeBashOptions(cwd: string, projectTrusted: boolean): { commandPrefix?: string; shellPath?: string } {
@@ -359,7 +364,7 @@ export default function autoPermissionsExtension(pi: ExtensionAPI) {
       throw new Error("compact review evidence exceeds the review model's safe context budget");
     }
 
-    const sessionId = base?.sessionId ?? reviewerSessionId(model.provider);
+    const sessionId = base?.sessionId ?? reviewerSessionId(model);
     const attemptGeneration = reviewerGeneration;
     activeReviewerSessionId = sessionId;
     const timeoutSignal = AbortSignal.timeout(config.reviewer?.timeoutMs ?? 30_000);
@@ -388,7 +393,7 @@ export default function autoPermissionsExtension(pi: ExtensionAPI) {
           signal: reviewSignal,
           reasoning: config.reviewer?.reasoningEffort ?? "low",
           sessionId,
-          transport: model.provider === "openai-codex" ? "websocket" : "auto",
+          transport: isOpenAICodexModel(model) ? "websocket" : "auto",
           cacheRetention: "long",
         },
       );
@@ -677,9 +682,14 @@ export default function autoPermissionsExtension(pi: ExtensionAPI) {
     signal: AbortSignal,
     opts: { allowComment: boolean },
   ): Promise<string | undefined> {
+    let indicator: PulsingApprovalIndicator | undefined;
     return ctx.ui.custom<string | undefined>((tui, theme, _keybindings, done) => {
+      let finished = false;
       const onAbort = () => finish(undefined);
       const finish = (result: string | undefined) => {
+        if (finished) return;
+        finished = true;
+        indicator?.stop();
         signal.removeEventListener("abort", onAbort);
         done(result);
       };
@@ -701,12 +711,19 @@ export default function autoPermissionsExtension(pi: ExtensionAPI) {
         onCancel: () => finish(undefined),
         requestRender: () => tui.requestRender(),
       });
+      indicator = new PulsingApprovalIndicator(
+        title.split("\n", 1)[0] ?? "Auto Permissions needs approval",
+        selector,
+        theme,
+        () => tui.requestRender(),
+      );
+      signal.addEventListener("abort", onAbort, { once: true });
       // `done` before the factory resolves is safe: pi marks the dialog closed
       // and never mounts the component.
       if (signal.aborted) onAbort();
-      else signal.addEventListener("abort", onAbort, { once: true });
-      return selector;
-    });
+      else indicator.start();
+      return indicator;
+    }).finally(() => indicator?.stop());
   }
 
   async function askUser(
@@ -980,6 +997,13 @@ export default function autoPermissionsExtension(pi: ExtensionAPI) {
   });
 
   pi.on("session_start", async (_event, ctx) => {
+    const openaiCodex = ctx.modelRegistry.getProvider("openai-codex");
+    if (openaiCodex?.auth.oauth) {
+      pi.registerProvider(createAutoPermissionsOpenAICodexProvider(openaiCodex));
+    } else {
+      console.warn("[pi-auto-permissions] OpenAI Codex OAuth is unavailable; the dedicated Auto Permissions login was not registered.");
+    }
+
     reviewerLifecycleController.abort();
     discardReviewerLineage();
     reviewerLifecycleController = new AbortController();

package/openai-codex-provider.ts

@@ -0,0 +1,42 @@
+import type { Provider } from "@earendil-works/pi-ai";
+
+export const AUTO_PERMISSIONS_OPENAI_CODEX_PROVIDER_ID = "openai-codex-auto-permissions";
+export const AUTO_PERMISSIONS_OPENAI_CODEX_PROVIDER_NAME = "OpenAI Codex - Auto Permissions";
+
+/**
+ * Registering a second provider id gives Pi a second auth.json credential slot.
+ * The transport and model catalog still come from Pi's built-in OpenAI Codex
+ * provider, so the alias follows the host Pi version instead of duplicating its
+ * OAuth or Responses implementation here. The effective catalog is snapshotted
+ * when the session starts; the source provider remains the sole owner of any
+ * dynamic catalog refresh state.
+ */
+export function createAutoPermissionsOpenAICodexProvider(source: Provider): Provider {
+  const models = source.getModels().map((model) => ({
+    ...model,
+    provider: AUTO_PERMISSIONS_OPENAI_CODEX_PROVIDER_ID,
+  }));
+  const oauth = source.auth.oauth;
+
+  if (!oauth) {
+    throw new Error("Pi's OpenAI Codex provider does not expose OAuth authentication");
+  }
+
+  return {
+    ...source,
+    id: AUTO_PERMISSIONS_OPENAI_CODEX_PROVIDER_ID,
+    name: AUTO_PERMISSIONS_OPENAI_CODEX_PROVIDER_NAME,
+    auth: {
+      oauth: {
+        ...oauth,
+        name: AUTO_PERMISSIONS_OPENAI_CODEX_PROVIDER_NAME,
+      },
+    },
+    getModels: () => models,
+    refreshModels: undefined,
+  };
+}
+
+export function isOpenAICodexModel(model: { api?: string }): boolean {
+  return model.api === "openai-codex-responses";
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hank-warren/pi-auto-permissions",
-  "version": "0.7.2",
+  "version": "0.8.0",
   "description": "Fork of @ogulcancelik/pi-auto-permissions with dialog-answer user evidence: context-aware Bash permissions for Pi with automated guardian review.",
   "type": "module",
   "keywords": [
@@ -39,8 +39,10 @@
   "files": [
     "NOTICE.md",
     "index.ts",
+    "approval-pulse.ts",
     "config.ts",
     "guardian-transport.ts",
+    "openai-codex-provider.ts",
     "subagent-context.ts",
     "evaluation-log.ts",
     "gates.ts",