@mzwing/pi-permission-auto-review 0.2.0 → 0.3.0

package/README.md

@@ -12,6 +12,22 @@ Ours is mostly specialized for OpenAI's `codex-auto-review` model, which is trai
 
 The bundled baseline is a Pi-specific adaptation of OpenAI Codex Guardian's [`policy_template.md`](https://github.com/openai/codex/blob/c4f42d161ae44a8d696ee9fb595709661979d187/codex-rs/core/src/guardian/policy_template.md) and [`policy.md`](https://github.com/openai/codex/blob/c4f42d161ae44a8d696ee9fb595709661979d187/codex-rs/core/src/guardian/policy.md) at revision [`c4f42d161ae44a8d696ee9fb595709661979d187`](https://github.com/openai/codex/commit/c4f42d161ae44a8d696ee9fb595709661979d187). It is bundled at build time; the extension never fetches policy text while reviewing an action.
 
+Upstream's `Execution Environment` section and its MCP `connected_account_email` rule are deliberately left out: both describe Codex's sandbox and tool surface, which Pi's tool-free reviewer does not have. Upstream's `node_repl_policy.md` is likewise out of scope — it governs `node_repl` / `cua_repl` computer-use tools that Pi does not expose.
+
+### Updating the bundled policy
+
+`src/upstream.ts` records which Codex files the adaptation tracks and the revision it was last reconciled against. `pnpm sync:policy` reports whether upstream has moved since:
+
+```bash
+pnpm sync:policy                # report only; exits non-zero when upstream moved
+pnpm sync:policy --ref v1.2.3   # resolve against a tag, branch, or commit
+pnpm sync:policy --pin          # record the new revision, once you have ported it
+```
+
+A run that finds movement lists every commit touching the tracked files since the pinned revision, with links. Port what applies into `src/policy.ts` by hand — the adapted text is a rewrite, not a copy, because Pi's reviewer has no tools and reads a different evidence-provenance model, so upstream wording cannot be dropped in mechanically.
+
+Only re-run with `--pin` once that porting is done. `POLICY_REVISION` is written to the permission review log, so a pin that outruns the text would be a false audit record. Bump `PI_ADAPTATION_REVISION` as well when you reword anything Pi-specific. Set `GITHUB_TOKEN` to lift GitHub's anonymous rate limit.
+
 ## Install
 
 ```bash
@@ -19,7 +35,9 @@ pi install npm:@gotgenes/pi-permission-system # dependency
 pi install npm:@mzwing/pi-permission-auto-review
 ```
 
-Pi 0.80.10 and Pi 0.81.x are supported. The extension uses `@mzwing/pi-polyfill` transitively for provider lookup on Pi 0.80.10; do not install the polyfill as a separate Pi extension.
+Pi 0.84.2+ (0.84.x and 0.85.x) and `@gotgenes/pi-permission-system` 27.x are required.
+
+The authorizer registers itself against the service keyed by its own session id, so a subagent's reviewer lands in the node whose gates actually read it.
 
 ## Enable
 

package/dist/index.d.ts

@@ -8,6 +8,7 @@ declare const DEFAULT_PROVIDER = "openai-codex";
 declare const DEFAULT_MODEL = "codex-auto-review";
 declare const DEFAULT_TIMEOUT_MS = 9e4;
 declare const CONFIG_SCHEMA_URL = "https://raw.githubusercontent.com/mzwing/pi-packages/main/packages/pi-permission-auto-review/schemas/config.schema.json";
+declare const REASONING_LEVELS: readonly ["off", "minimal", "low", "medium", "high", "xhigh", "max"];
 type AutoReviewConfigSchema = z.ZodObject<{
   $schema: z.ZodOptional<z.ZodString>;
   additionalPolicy: z.ZodOptional<z.ZodString>;
@@ -27,6 +28,15 @@ type AutoReviewConfigSchema = z.ZodObject<{
 }, z.core.$strict>;
 declare const autoReviewConfigSchema: AutoReviewConfigSchema;
 type AutoReviewConfig = z.infer<typeof autoReviewConfigSchema>;
+interface AutoReviewConfigFile {
+  $schema?: string | undefined;
+  provider?: string | undefined;
+  model?: string | undefined;
+  reasoning?: (typeof REASONING_LEVELS)[number] | undefined;
+  timeoutMs?: number | undefined;
+  includeBaselinePolicy?: boolean | undefined;
+  additionalPolicy?: string | undefined;
+}
 interface ConfigIssue {
   sourcePath: string;
   message: string;
@@ -42,6 +52,10 @@ interface LoadConfigOptions {
   agentDir?: string;
   readFile?: (path: string) => string | undefined;
 }
+interface AutoReviewConfigPaths {
+  globalPath: string;
+  projectPath: string;
+}
 declare function loadAutoReviewConfig(options: LoadConfigOptions): LoadConfigResult;
 declare function buildAutoReviewJsonSchema(): Record<string, unknown>;
 //#endregion
@@ -56,17 +70,68 @@ declare class DenialCircuitBreaker {
   private recordRecent;
 }
 //#endregion
+//#region src/config-store.d.ts
+type AutoReviewConfigScope = "global" | "project";
+interface ScopeSnapshotBase {
+  scope: AutoReviewConfigScope;
+  cwd: string;
+  path: string;
+  source: string | undefined;
+}
+type AutoReviewScopeSnapshot = (ScopeSnapshotBase & {
+  valid: true;
+  config: AutoReviewConfigFile;
+}) | (ScopeSnapshotBase & {
+  valid: false;
+  issue: ConfigIssue;
+});
+type ConfigMutationResult = {
+  ok: true;
+  loadResult: LoadConfigResult;
+  snapshot: AutoReviewScopeSnapshot;
+} | {
+  ok: false;
+  message: string;
+};
+interface AutoReviewConfigFileSystem {
+  readFile: (path: string) => string | undefined;
+  writeFile: (path: string, source: string) => void;
+  rename: (sourcePath: string, destinationPath: string) => void;
+  mkdir: (path: string) => void;
+  unlink: (path: string) => void;
+}
+interface AutoReviewConfigStoreOptions {
+  agentDir?: string;
+  fileSystem?: AutoReviewConfigFileSystem;
+}
+declare class AutoReviewConfigStore {
+  readonly agentDir: string;
+  private readonly fileSystem;
+  constructor(options?: AutoReviewConfigStoreOptions);
+  getPaths(cwd: string): AutoReviewConfigPaths;
+  load(cwd: string): LoadConfigResult;
+  readScope(cwd: string, scope: AutoReviewConfigScope): AutoReviewScopeSnapshot;
+  save(snapshot: AutoReviewScopeSnapshot, draft: AutoReviewConfigFile): ConfigMutationResult;
+  reset(snapshot: AutoReviewScopeSnapshot): ConfigMutationResult;
+  private loadWithOverride;
+  private serialize;
+  private checkForConflict;
+  private cleanupTempFile;
+}
+//#endregion
 //#region src/extension.d.ts
-interface ReviewerFactoryOptions {
-  config: AutoReviewConfig;
+interface SessionRuntime {
   registry: ModelRegistry;
   sessionManager: Pick<SessionManager, "getBranch">;
+}
+interface ReviewerFactoryOptions extends SessionRuntime {
+  config: AutoReviewConfig;
   circuitBreaker: DenialCircuitBreaker;
   sessionSignal: AbortSignal;
 }
 interface AutoReviewExtensionDependencies {
-  loadConfig?: (cwd: string) => LoadConfigResult;
-  getPermissionsService?: () => PermissionsService | undefined;
+  configStore?: AutoReviewConfigStore;
+  getPermissionsService?: (sessionId: string) => PermissionsService | undefined;
   createReviewer?: (options: ReviewerFactoryOptions) => Authorizer["authorize"];
 }
 declare function createAutoReviewExtension(pi: ExtensionAPI, dependencies?: AutoReviewExtensionDependencies): void;
@@ -74,5 +139,5 @@ declare function createAutoReviewExtension(pi: ExtensionAPI, dependencies?: Auto
 //#region src/index.d.ts
 declare function permissionAutoReviewExtension(pi: ExtensionAPI): void;
 //#endregion
-export { AUTHORIZER_NAME, type AutoReviewConfig, type AutoReviewExtensionDependencies, CONFIG_SCHEMA_URL, type ConfigIssue, DEFAULT_MODEL, DEFAULT_PROVIDER, DEFAULT_TIMEOUT_MS, EXTENSION_ID, type LoadConfigOptions, type LoadConfigResult, autoReviewConfigSchema, buildAutoReviewJsonSchema, createAutoReviewExtension, permissionAutoReviewExtension as default, loadAutoReviewConfig };
+export { AUTHORIZER_NAME, type AutoReviewConfig, CONFIG_SCHEMA_URL, type ConfigIssue, DEFAULT_MODEL, DEFAULT_PROVIDER, DEFAULT_TIMEOUT_MS, EXTENSION_ID, type LoadConfigOptions, type LoadConfigResult, autoReviewConfigSchema, buildAutoReviewJsonSchema, createAutoReviewExtension, permissionAutoReviewExtension as default, loadAutoReviewConfig };
 //# sourceMappingURL=index.d.ts.map