@herbertgao/pi-extensions 2026.9.5 → 2026.9.7

package/node_modules/pi-lens/rules/tree-sitter-queries/typescript/sql-injection.yml

@@ -1,15 +1,13 @@
 # SQL Injection Detection
 # Detects unsafe interpolation in SQL-like template literals.
-# Demoted from error/blocking to warning on 2026-09-10 (maintainer): the
-# query keys on the callee NAME only (query|execute|exec|run), so any
-# `run(`…${x}…`)` / `exec(`…`)` in non-SQL code fires — too many false
-# positives to block on. A real SQL sink needs a receiver/type signal.
+# The structural query keeps the common callee set, while the TypeScript-aware
+# post-filter requires a receiver bound to a known DB client or a SQL-leading template.
 id: sql-injection
 name: SQL Injection Risk
-severity: warning
+severity: error
 category: security
 defect_class: injection
-inline_tier: warning
+inline_tier: blocking
 language: typescript
 
 message: "SQL injection risk — use parameterized queries, never interpolate into SQL"
@@ -30,18 +28,32 @@ description: |
 
 query: |
   (call_expression
-    function: [
-      (identifier) @SQL_FUNC
-      (member_expression property: (property_identifier) @SQL_FUNC)
-    ]
+    function: (identifier) @SQL_FUNC
     arguments: (arguments
-      (template_string (template_substitution) @INTERPOLATION))
-    (#match? @SQL_FUNC "^(query|execute|exec|run)$"))
+      (template_string (template_substitution) @INTERPOLATION) @TEMPLATE)
+    (#match? @SQL_FUNC "^(query|execute|exec|run|\\$queryRaw|\\$executeRaw|\\$queryRawUnsafe|\\$executeRawUnsafe|raw|prepare)$"))
+  (call_expression
+    function: (member_expression
+      object: (_) @OBJ
+      property: (property_identifier) @SQL_FUNC)
+    arguments: (arguments
+      (template_string (template_substitution) @INTERPOLATION) @TEMPLATE)
+    (#match? @SQL_FUNC "^(query|execute|exec|run|\\$queryRaw|\\$executeRaw|\\$queryRawUnsafe|\\$executeRawUnsafe|raw|prepare)$"))
+  (call_expression
+    function: (member_expression
+      object: (_) @OBJ
+      property: (property_identifier) @SQL_FUNC)
+    arguments: (template_string (template_substitution) @INTERPOLATION) @TEMPLATE
+    (#match? @SQL_FUNC "^(query|execute|exec|run|\\$queryRaw|\\$executeRaw|\\$queryRawUnsafe|\\$executeRawUnsafe|raw|prepare)$"))
 
 metavars:
   - SQL_FUNC
+  - OBJ
+  - TEMPLATE
   - INTERPOLATION
 
+post_filter: ts_sql_injection_sink
+
 has_fix: false
 
 tags:

package/node_modules/pi-lens/scripts/analyze-pi-lens-logs.mjs

@@ -195,6 +195,7 @@ function createState(files) {
 		projects: counter(),
 		smellTotals: counter(),
 		latency: {
+			testRunnerVerdicts: new Map(),
 			runnerStatus: counter(),
 			runnerFailureKinds: counter(),
 			runnerBlockingFindings: counter(),
@@ -381,6 +382,22 @@ async function analyzeLatency(files, state) {
 				const phase = entry.phase ?? "unknown";
 				state.latency.phaseCounts.inc(phase);
 				if (phase.endsWith("_timeout")) state.latency.phaseTimeouts.inc(phase);
+				if (phase === "test_runner_verdict_delivery") {
+					const sessionId = entry.metadata?.sessionId ?? "unknown";
+					const summary = state.latency.testRunnerVerdicts.get(sessionId) ?? {
+						total: 0,
+						stale: 0,
+						unknown: 0,
+					};
+					const verdictCount = entry.metadata?.verdictCount;
+					const staleCount = entry.metadata?.staleCount;
+					const unknownCount = entry.metadata?.unknownCount;
+					summary.total += typeof verdictCount === "number" ? verdictCount : 1;
+					if (typeof staleCount === "number") summary.stale += staleCount;
+					else if (entry.metadata?.stale === true) summary.stale += 1;
+					if (typeof unknownCount === "number") summary.unknown += unknownCount;
+					state.latency.testRunnerVerdicts.set(sessionId, summary);
+				}
 				if (phase === "config_resolved") {
 					// #2526. Counted here rather than derived from phaseCounts so the
 					// legacy/record cross-check reads the same row it counts.
@@ -1481,6 +1498,18 @@ function buildReport(state) {
 			shownInlineShownAgentUnresolved: state.diagnostics.shownInline.toJSON(),
 		},
 		latency: {
+			testRunnerVerdicts: Object.fromEntries(
+				[...state.latency.testRunnerVerdicts.entries()].map(
+					([sessionId, summary]) => [
+						sessionId,
+						{
+							...summary,
+							denominator: summary.total,
+							rate: summary.total ? summary.stale / summary.total : 0,
+						},
+					],
+				),
+			),
 			runnerStatus: state.latency.runnerStatus.top(limit * 2),
 			runnerFailureKinds: state.latency.runnerFailureKinds.top(limit * 2),
 			runnerBlockingFindings: state.latency.runnerBlockingFindings.toJSON(),
@@ -1672,6 +1701,17 @@ function printReport(report) {
 		report.latency.runnerFailureKinds,
 		(x) => `${x.count.toString().padStart(5)}  ${x.key}`,
 	);
+	const verdictSessions = Object.entries(
+		report.latency.testRunnerVerdicts ?? {},
+	);
+	if (verdictSessions.length) {
+		console.log("\nTest-runner stale verdicts per session");
+		for (const [sessionId, summary] of verdictSessions) {
+			console.log(
+				`  ${sessionId}: ${summary.stale}/${summary.total} stale (${(summary.rate * 100).toFixed(1)}%)`,
+			);
+		}
+	}
 
 	const a = report.actionable;
 	if (a.reports || a.advisoriesInjected) {

package/node_modules/pi-lens/skills/pi-lens-ast-grep/SKILL.md

@@ -9,6 +9,21 @@ Use `ast_grep_search` and `ast_grep_replace` for semantic code search/replace. a
 
 These tools (plus `ast_grep_outline`, `lsp_navigation`) are registered but inactive by default on hosts that support pi's dynamic tooling. If a call to one of them isn't recognized, activate it first: `pi_lens_activate_tools tools=["ast_grep_search", "ast_grep_replace"]`.
 
+On hosts that aggregate pi-lens behind a single `lens` tool, the `ast_grep_*` tools and `pi_lens_activate_tools` may not be registered at all. There, fall back to the `ast-grep` CLI (alias `sg`) — patterns, metavariables, and YAML rules are identical:
+
+```bash
+# search (≈ ast_grep_search)
+ast-grep run -p 'fetchMetrics($$$ARGS)' -l ts src/
+
+# rewrite (≈ ast_grep_replace; -U applies all)
+ast-grep run -p 'var $X' -r 'let $X' -l js src/ -U
+
+# full YAML rule (≈ the rule: parameter)
+ast-grep scan --rule my-rule.yml src/
+```
+
+Structural-intent parameters map to YAML constraints: `insideKind` → `inside: { kind: ..., stopBy: end }`, `hasKind`/`hasDescendantKind` → `has: { kind: ... }`, `follows` → `follows: { pattern: ... }`, `precedes` → `precedes: { pattern: ... }`.
+
 ## When to Use
 
 - Function calls, imports, class methods (structured code)

package/node_modules/pi-lens/skills/pi-lens-lsp-navigation/SKILL.md

@@ -7,6 +7,13 @@ description: Navigate code with IDE features and run proactive LSP diagnostics o
 
 Use `lsp_navigation` as **PRIMARY** for code intelligence. Use `lens_diagnostics` with `source=lsp` as **PRIMARY** for proactive type/error checks. Do NOT use grep/glob/ast-grep first for code intelligence.
 
+## Aggregate-tool hosts
+
+Some hosts expose pi-lens through a single aggregate tool — `lens(action=...)` — instead of registering the standalone names below. On those hosts:
+
+- Proactive checks: `lens({ action: "lsp_diagnostics", ... })` — same parameters as the table below; the cached-report entry point maps to `lens({ action: "diagnostics", ... })`.
+- If `lsp_navigation` is not among the aggregate's actions, do not call the standalone name: use the host's structural search funnel (`symbol_search` → `module_report` → `read_symbol`) or the `ast-grep` CLI for navigation instead.
+
 ## Diagnostics
 
 Use `lens_diagnostics` with `source=lsp` before builds/tests or after touching several files:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@herbertgao/pi-extensions",
-  "version": "2026.9.5",
+  "version": "2026.9.7",
   "description": "Aggregate installer for HerbertGao-maintained Pi extensions.",
   "keywords": [
     "extensions",
@@ -20,7 +20,6 @@
     "directory": "packages/pi-extensions"
   },
   "files": [
-    "examples/pi-footer.json",
     "README.md",
     "LICENSE",
     "THIRD_PARTY_NOTICES.md"
@@ -37,7 +36,6 @@
   "dependencies": {
     "@ast-grep/cli": "^0.45.0",
     "@ast-grep/napi": "^0.45.0",
-    "@czottmann/pi-automode": "1.16.0",
     "@dietrichgebert/ponytail": "4.10.0",
     "@earendil-works/pi-coding-agent": "^0.84.4",
     "@earendil-works/pi-tui": "^0.84.4",
@@ -45,19 +43,18 @@
     "@herbertgao/pi-cc-extensions": "0.9.2",
     "@herbertgao/pi-subagents": "0.17.1",
     "@herbertgao/resume-from": "0.2.0",
-    "@herbertgao/sol-pi": "0.2.0",
+    "@herbertgao/sol-pi": "0.3.0",
     "@juicesharp/rpiv-ask-user-question": "2.10.1",
     "@juicesharp/rpiv-config": "^2.10.1",
-    "@luxusai/pi-hindsight": "0.12.0",
     "@modelcontextprotocol/client": "2.0.0",
     "@modelcontextprotocol/core": "2.0.0",
     "@modelcontextprotocol/ext-apps": "^1.2.2",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@mozilla/readability": "^0.6.0",
     "@napi-rs/keyring": "^1.3.0",
-    "@narumitw/pi-btw": "0.58.1",
+    "@narumitw/pi-btw": "0.59.0",
     "@narumitw/pi-caffeinate": "0.49.7",
-    "@narumitw/pi-tui-kit": "^0.59.0",
+    "@narumitw/pi-tui-kit": "^0.64.0",
     "@noble/ed25519": "^3.1.0",
     "@pi-plugins/fast-mode": "0.1.12",
     "@shikijs/cli": "^4.0.2",
@@ -69,7 +66,6 @@
     "@tifan/pi-preferred-thinking": "1.0.2",
     "@tifan/pi-recap": "0.4.7",
     "@tifan/pi-rename": "0.6.0",
-    "@vectorize-io/hindsight-client": "^0.9.0",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
     "chalk": "^6.0.0",
@@ -78,10 +74,9 @@
     "dbus-native": "^0.15.2",
     "defuddle": "0.19.3",
     "gpt-tokenizer": "^3.4.0",
-    "grok-mermaid": "0.2.2",
+    "grok-mermaid": "0.2.3",
     "jiti": "^2.7.0",
     "js-yaml": "^5.2.2",
-    "jsonc-parser": "^3.3.1",
     "linkedom": "^0.16.0",
     "minimatch": "^10.2.6",
     "nanoid": "^5.0.0",
@@ -89,7 +84,7 @@
     "p-limit": "^6.1.0",
     "pi-antigravity": "0.7.2",
     "pi-footer": "0.5.1",
-    "pi-lens": "4.1.6",
+    "pi-lens": "4.2.0",
     "pi-mcp-adapter": "2.34.0",
     "pi-web-access": "0.29.0",
     "pidusage": "^4.0.1",
@@ -112,7 +107,6 @@
     "web-tree-sitter": "0.25.10"
   },
   "bundledDependencies": [
-    "@czottmann/pi-automode",
     "@dietrichgebert/ponytail",
     "@herbertgao/pi-bark",
     "@herbertgao/pi-cc-extensions",
@@ -120,7 +114,6 @@
     "@herbertgao/resume-from",
     "@herbertgao/sol-pi",
     "@juicesharp/rpiv-ask-user-question",
-    "@luxusai/pi-hindsight",
     "@narumitw/pi-btw",
     "@narumitw/pi-caffeinate",
     "@pi-plugins/fast-mode",
@@ -158,7 +151,6 @@
       "./node_modules/@herbertgao/pi-subagents/src/index.ts",
       "./node_modules/@juicesharp/rpiv-ask-user-question/index.ts",
       "./node_modules/@herbertgao/pi-bark/src/index.ts",
-      "./node_modules/@luxusai/pi-hindsight/extensions/index.ts",
       "./node_modules/@narumitw/pi-btw/dist/index.ts",
       "./node_modules/@narumitw/pi-caffeinate/dist/index.ts",
       "./node_modules/@pi-plugins/fast-mode/dist/index.mjs",
@@ -167,7 +159,6 @@
       "./node_modules/pi-web-access/index.ts",
       "./node_modules/pi-antigravity/src/index.ts",
       "./node_modules/remote-pi/dist/index.js",
-      "./node_modules/@czottmann/pi-automode/extensions/auto-mode.ts",
       "./node_modules/pi-footer/src/index.ts"
     ],
     "themes": [
@@ -175,9 +166,7 @@
       "./node_modules/@herbertgao/pi-cc-extensions/themes/cc-light.json"
     ],
     "skills": [
-      "./node_modules/@czottmann/pi-automode/skills",
       "./node_modules/@dietrichgebert/ponytail/skills",
-      "./node_modules/@luxusai/pi-hindsight/skills",
       "./node_modules/pi-mcp-adapter/skills",
       "./node_modules/pi-lens/skills"
     ]

package/examples/pi-footer.json

@@ -1,275 +0,0 @@
-{
-  "version": 1,
-  "enabled": true,
-  "preset": "pi-footer",
-  "lines": [
-    [
-      {
-        "id": "core-cwd",
-        "type": "cwd",
-        "enabled": true,
-        "options": {
-          "raw": true,
-          "fg": "pi:dim",
-          "cwdDisplayStyle": "full-home"
-        }
-      },
-      {
-        "id": "core-branch",
-        "type": "git-branch",
-        "enabled": true,
-        "options": {
-          "raw": true,
-          "fg": "pi:dim",
-          "hideWhenEmpty": true,
-          "gitBranchDisplayStyle": "round-brackets"
-        }
-      },
-      {
-        "id": "core-session",
-        "type": "session-name",
-        "enabled": true,
-        "options": {
-          "raw": true,
-          "fg": "pi:dim",
-          "hideWhenEmpty": true
-        }
-      }
-    ],
-    [
-      {
-        "id": "core-tokens",
-        "type": "tokens",
-        "enabled": true,
-        "options": {
-          "raw": true,
-          "fg": "pi:dim",
-          "tokenFormatStyle": "compact"
-        }
-      },
-      {
-        "id": "core-cache-read",
-        "type": "cache-read",
-        "enabled": true,
-        "options": {
-          "icon": "R",
-          "fg": "pi:dim",
-          "tokenFormatStyle": "compact",
-          "hideWhenZero": true
-        }
-      },
-      {
-        "id": "core-cache-write",
-        "type": "cache-write",
-        "enabled": true,
-        "options": {
-          "icon": "W",
-          "fg": "pi:dim",
-          "tokenFormatStyle": "compact",
-          "hideWhenZero": true
-        }
-      },
-      {
-        "id": "core-cache-hit",
-        "type": "cache-hit-rate",
-        "enabled": true,
-        "options": {
-          "icon": "CH",
-          "fg": "pi:dim",
-          "hideWhenZero": true,
-          "cacheHitSource": "turn"
-        }
-      },
-      {
-        "id": "core-cost",
-        "type": "cost",
-        "enabled": true,
-        "options": {
-          "raw": true,
-          "fg": "pi:dim",
-          "costFormatStyle": "compact",
-          "showSubscription": true
-        }
-      },
-      {
-        "id": "core-context",
-        "type": "context",
-        "enabled": true,
-        "options": {
-          "raw": true,
-          "fg": "pi:dim",
-          "contextConditionalColors": true,
-          "warningFg": "pi:warning",
-          "dangerFg": "pi:error"
-        }
-      },
-      {
-        "id": "core-context-slash",
-        "type": "separator",
-        "enabled": true,
-        "options": {
-          "separator": "custom",
-          "text": "/",
-          "fg": "pi:dim"
-        }
-      },
-      {
-        "id": "core-context-window",
-        "type": "context-window",
-        "enabled": true,
-        "options": {
-          "raw": true,
-          "fg": "pi:dim",
-          "contextConditionalColors": true,
-          "warningFg": "pi:warning",
-          "dangerFg": "pi:error",
-          "tokenFormatStyle": "compact"
-        }
-      },
-      {
-        "id": "core-flex",
-        "type": "flex-separator",
-        "enabled": true,
-        "options": {}
-      },
-      {
-        "id": "core-model",
-        "type": "model",
-        "enabled": true,
-        "options": {
-          "raw": true,
-          "fg": "pi:dim"
-        }
-      },
-      {
-        "id": "core-thinking",
-        "type": "thinking-level",
-        "enabled": true,
-        "options": {
-          "raw": true,
-          "fg": "pi:dim",
-          "hideWhenEmpty": true
-        }
-      }
-    ],
-    [
-      {
-        "id": "status-mcp",
-        "type": "external-status",
-        "enabled": true,
-        "options": {
-          "externalStatusKey": "mcp",
-          "icon": "🔌 ",
-          "hideWhenEmpty": true
-        }
-      },
-      {
-        "id": "status-auto",
-        "type": "external-status",
-        "enabled": true,
-        "options": {
-          "externalStatusKey": "pi-automode",
-          "icon": "🤖 Auto ",
-          "trimValue": 2,
-          "preserveTrimStyles": true,
-          "hideWhenEmpty": true
-        }
-      }
-    ],
-    [
-      {
-        "id": "status-lsp",
-        "type": "external-status",
-        "enabled": true,
-        "options": {
-          "externalStatusKey": "pi-lens-lsp",
-          "icon": "🧩 LSP ",
-          "trimValue": 4,
-          "preserveTrimStyles": true,
-          "hideWhenEmpty": true
-        }
-      },
-      {
-        "id": "status-ponytail",
-        "type": "external-status",
-        "enabled": true,
-        "options": {
-          "externalStatusKey": "ponytail",
-          "trimValue": 2,
-          "preserveTrimStyles": false,
-          "hideWhenEmpty": true
-        }
-      }
-    ],
-    [
-      {
-        "id": "status-remote-session",
-        "type": "external-status",
-        "enabled": true,
-        "options": {
-          "externalStatusKey": "remote-pi:session",
-          "hideWhenEmpty": true
-        }
-      },
-      {
-        "id": "status-remote-relay",
-        "type": "external-status",
-        "enabled": true,
-        "options": {
-          "externalStatusKey": "remote-pi:relay",
-          "hideWhenEmpty": true
-        }
-      },
-      {
-        "id": "status-remote-peer",
-        "type": "external-status",
-        "enabled": true,
-        "options": {
-          "externalStatusKey": "remote-pi:peer-active",
-          "hideWhenEmpty": true
-        }
-      },
-      {
-        "id": "status-subagents",
-        "type": "external-status",
-        "enabled": true,
-        "options": {
-          "externalStatusKey": "subagents",
-          "icon": "👥 ",
-          "hideWhenEmpty": true
-        }
-      }
-    ]
-  ],
-  "separator": "dot",
-  "separatorFg": "brightBlack",
-  "separatorBg": "default",
-  "iconMode": "text",
-  "minimalist": false,
-  "terminal": {
-    "widthMode": "full",
-    "colorLevel": "ansi256"
-  },
-  "extensionStatusRow": {
-    "hiddenKeys": [
-      "mcp",
-      "pi-automode",
-      "pi-lens-lsp",
-      "ponytail",
-      "remote-pi:peer-active",
-      "remote-pi:relay",
-      "remote-pi:session",
-      "subagents"
-    ],
-    "knownKeys": [
-      "mcp",
-      "pi-automode",
-      "pi-lens-lsp",
-      "ponytail",
-      "remote-pi:peer-active",
-      "remote-pi:relay",
-      "remote-pi:session",
-      "subagents"
-    ]
-  }
-}

package/node_modules/@czottmann/pi-automode/CHANGELOG.md

@@ -1,70 +0,0 @@
-# Changelog
-
-All notable changes to this project are documented in this file.
-
-## [Unreleased]
-
-## [1.16.0] - 2026-09-07
-
-## New features
-
-- **[Bounded existing-file authorization](docs/defaults.md#soft_deny)** — Allow user authorization for pre-existing local-file changes that names task, worktree, path scope, and allowed operation. (#32)
-
-## Bug fixes
-
-- **OpenCode classifier routing** — Add OpenCode session headers to every classifier completion path. Preserve Pi's header precedence and exact host matching. (#35)
-- **OMP 18 project trust compatibility** — Treat runtimes without `isProjectTrusted()` as untrusted. Prevent startup and configuration commands from throwing. (#34)
-
-## [1.15.0] - 2026-08-28
-
-## Bug fixes
-
-- **OMP 18 classifier compatibility** — Support OMP 18 model registries that lack `complete()` and `getProvider()`. Load the legacy completion API only for these registries. Keep current Pi on its runtime registry path so extension-registered providers remain available. Thanks, @NarryG! (#29)
-
-## [1.14.0] - 2026-08-27
-
-## Bug fixes
-
-- **Classifier stream timeout** — Apply `classifierTimeoutMs` to the full response stream. Provider behavior cannot keep classifier calls pending after the deadline. Parent cancellation remains active. Reject values above the Node.js timer limit. (#30)
-- **OS temp-directory deletes** — Stop hard-denying recursive-delete subtrees under `os.tmpdir()` and `/tmp`. On macOS these resolve into `/private/tmp` and `/private/var/folders`, which matched the `/private` system root and blocked every temp cleanup. Deleting a temp root itself stays blocked. (#31)
-- **Validated temp-root declarations** — Derive the exempt temp roots only from launcher-declared values that stay safe: reject values such as `/`, empty strings, aliases of `HOME`, `/`, or a system root, and ancestors of `HOME`. Without validation, a malformed `TMPDIR` could disable deterministic denials for protected targets, and a broad `permissions.allow` rule could then allow the action without classifier review. Recompute candidates when the effective tmpdir changes. (#31)
-
-## [1.13.0] - 2026-08-25
-
-## New features
-
-- **Bash AST analysis** — Replace handwritten shell parsing with `unbash`. Permission and hard-deny checks now inspect command structure, nested commands, wrappers, redirects, and malformed input. Bash allow rules require complete structural coverage and fail closed when analysis is unsafe. (#26)
-- **Extension-owned global config** — Store global settings at `~/.pi/agent/extensions/pi-automode/config.json`. Migrate the legacy file automatically, preserve a safe fallback after migration errors, and report conflicts through notifications and diagnostics. (#27)
-
-## Bug fixes
-
-- **Conservative permission rules** — Malformed deny and ask patterns block actions. Malformed patterns do not expand allow rules. Permission checks examine each Bash subcommand and normalize whitespace. Path checks resolve symlinks and normalize `file://` and Windows paths. (#22)
-- **Recursive deletion hard-deny** — Detect uppercase flags and GNU abbreviations for recursive `rm`, including commands behind `command`, `exec`, and `env`. Parse the `--` delimiter and shell tilde expansion. Protect Linux and macOS system roots without blocking active-home subdirectories, `/opt`, or `/srv`. (#23)
-- **Global Pi safety-control paths** — Hard-deny direct writes and edits to `~/.pi/agent/extensions/`, `~/.pi/agent/settings.json`, and `~/.pi/agent/settings/`. Resolve case variants and symlink targets before matching. (#24)
-- **Case-insensitive protected paths** — Match protected paths without case distinctions and normalize Unicode spellings. This closes path bypasses on case-insensitive filesystems. (#25)
-
-## [1.12.0] - 2026-08-23
-
-## New features
-
-- **Deterministic permission allows** — Add user-owned `permissions.allow` patterns that skip classifier review after deterministic checks pass. Accepted ask rules still require classifier review. Thank you, @sergeykonkin! (#14)
-- **Configurable classifier request timeout** — new `autoMode.classifierTimeoutMs` setting. The default is 20000 ms. The timeout applies to each classifier request. The fast stage and the detailed stage each have their own budget. A request that exceeds the timeout is aborted. Auto mode fails closed and blocks the action.
-- **Read-only agent diagnostics** — Add `automode_inspect` tool for status, configuration, defaults, and recent denial metadata. Thank you, @blalor! (#11)
-
-## Bug fixes
-
-- **Reject invalid config values** — Invalid boolean and log config values (e.g. `enabled: 0`, `log.enabled: 1`) are now rejected at merge time instead of being applied with diagnostics only. (#20)
-- **Preserve defaults for malformed rule lists** — A malformed `hard_deny` entry like `[42]` no longer strips all built-in hard-deny rules. Malformed entries are rejected and defaults preserved conservatively. (#21)
-- **Runtime classifier providers** — Dispatch classifier calls through Pi's runtime model registry so providers registered with `pi.registerProvider()` work immediately. Preserve normalized reasoning and header-only authentication on the temporary simple-completion bridge. (#15)
-- **Bounded wildcard matching** — Replace regex-based permission and denied-path globs with a linear-time matcher. Reject oversized patterns and fail closed for oversized runtime inputs. (#19)
-- **Complete classifier action input** — Send the exact current tool input to both classifier stages in a dedicated message. Block the action if it cannot fit without truncation. (#17)
-- **Path policy normalization** — Use Pi-compatible resolution for file-tool paths, including file URLs, `@` and tilde aliases, and read fallback names. Enforce denied paths across omitted and recursive search scopes and both sides of symlink aliases. (#18)
-- **Project config trust gate** — Ignore `.pi/automode.local.json` and `.pi/automode.json` until Pi trusts the project. Apply the trust gate during startup and config reloads. (#16)
-- **In-memory observability logs** — Write logs to an extension-owned directory (`~/.pi/agent/extensions/pi-automode/logs/`) instead of the launching project directory. Thanks, @HerbertGao! (#13)
-
-[Unreleased]: https://github.com/czottmann/pi-automode/compare/v1.16.0...HEAD
-[1.16.0]: https://github.com/czottmann/pi-automode/compare/v1.15.0...v1.16.0
-[1.15.0]: https://github.com/czottmann/pi-automode/compare/v1.14.0...v1.15.0
-[1.14.0]: https://github.com/czottmann/pi-automode/compare/v1.13.0...v1.14.0
-[1.13.0]: https://github.com/czottmann/pi-automode/compare/v1.12.0...v1.13.0
-[1.12.0]: https://github.com/czottmann/pi-automode/compare/v1.11.0...v1.12.0

package/node_modules/@czottmann/pi-automode/LICENSE.md

@@ -1,21 +0,0 @@
-# MIT License
-
-Copyright (c) 2026 Carlo Zottmann
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.