@mzwing/pi-permission-auto-review 0.2.0 → 0.3.1

package/README.md

@@ -10,7 +10,23 @@ A [Pi](https://github.com/earendil-works/pi) extension that adds Codex-style aut
 
 Ours is mostly specialized for OpenAI's `codex-auto-review` model, which is trained to evaluate permission requests in the context of a coding assistant. Our extension aims at providing Codex-style automatic permission reviews for Pi's coding agent.
 
-The bundled baseline is a Pi-specific adaptation of OpenAI Codex Guardian's [`policy_template.md`](https://github.com/openai/codex/blob/c4f42d161ae44a8d696ee9fb595709661979d187/codex-rs/core/src/guardian/policy_template.md) and [`policy.md`](https://github.com/openai/codex/blob/c4f42d161ae44a8d696ee9fb595709661979d187/codex-rs/core/src/guardian/policy.md) at revision [`c4f42d161ae44a8d696ee9fb595709661979d187`](https://github.com/openai/codex/commit/c4f42d161ae44a8d696ee9fb595709661979d187). It is bundled at build time; the extension never fetches policy text while reviewing an action.
+The bundled baseline is a Pi-specific adaptation of OpenAI Codex Guardian's [`policy_template.md`](https://github.com/openai/codex/blob/6478a751fde8884b2fdc76486fe23175a8e795d4/codex-rs/core/assets/guardian/policy_template.md) and [`policy.md`](https://github.com/openai/codex/blob/6478a751fde8884b2fdc76486fe23175a8e795d4/codex-rs/core/assets/guardian/policy.md) at revision [`6478a751fde8884b2fdc76486fe23175a8e795d4`](https://github.com/openai/codex/commit/6478a751fde8884b2fdc76486fe23175a8e795d4). It is bundled at build time; the extension never fetches policy text while reviewing an action.
+
+Upstream's `Execution Environment` section and its MCP `connected_account_email` rule are deliberately left out: both describe Codex's sandbox and tool surface, which Pi's tool-free reviewer does not have. Upstream's `node_repl_policy.md` is likewise out of scope — it governs `node_repl` / `cua_repl` computer-use tools that Pi does not expose.
+
+### Updating the bundled policy
+
+`src/upstream.ts` records which Codex files the adaptation tracks and the revision it was last reconciled against. `pnpm sync:policy` reports whether upstream has moved since:
+
+```bash
+pnpm sync:policy                # report only; exits non-zero when upstream moved
+pnpm sync:policy --ref v1.2.3   # resolve against a tag, branch, or commit
+pnpm sync:policy --pin          # record the new revision, once you have ported it
+```
+
+A run that finds movement lists every commit touching the tracked files since the pinned revision, with links. Port what applies into `src/policy.ts` by hand — the adapted text is a rewrite, not a copy, because Pi's reviewer has no tools and reads a different evidence-provenance model, so upstream wording cannot be dropped in mechanically.
+
+Only re-run with `--pin` once that porting is done. `POLICY_REVISION` is written to the permission review log, so a pin that outruns the text would be a false audit record. Bump `PI_ADAPTATION_REVISION` as well when you reword anything Pi-specific. Set `GITHUB_TOKEN` to lift GitHub's anonymous rate limit.
 
 ## Install
 
@@ -19,7 +35,9 @@ pi install npm:@gotgenes/pi-permission-system # dependency
 pi install npm:@mzwing/pi-permission-auto-review
 ```
 
-Pi 0.80.10 and Pi 0.81.x are supported. The extension uses `@mzwing/pi-polyfill` transitively for provider lookup on Pi 0.80.10; do not install the polyfill as a separate Pi extension.
+Pi 0.84.2+ (0.84.x and 0.85.x) and `@gotgenes/pi-permission-system` 27.x, 28.x, or 29.x are required.
+
+The authorizer registers itself against the service keyed by its own session id, so a subagent's reviewer lands in the node whose gates actually read it.
 
 ## Enable
 

package/dist/index.d.ts

@@ -1,78 +1,6 @@
-import { Authorizer, PermissionsService } from "@gotgenes/pi-permission-system";
-import { z } from "zod";
-import { ExtensionAPI, ModelRegistry, SessionManager } from "@earendil-works/pi-coding-agent";
-//#region src/config.d.ts
-declare const EXTENSION_ID = "pi-permission-auto-review";
-declare const AUTHORIZER_NAME = "auto-review";
-declare const DEFAULT_PROVIDER = "openai-codex";
-declare const DEFAULT_MODEL = "codex-auto-review";
-declare const DEFAULT_TIMEOUT_MS = 9e4;
-declare const CONFIG_SCHEMA_URL = "https://raw.githubusercontent.com/mzwing/pi-packages/main/packages/pi-permission-auto-review/schemas/config.schema.json";
-type AutoReviewConfigSchema = z.ZodObject<{
-  $schema: z.ZodOptional<z.ZodString>;
-  additionalPolicy: z.ZodOptional<z.ZodString>;
-  provider: z.ZodDefault<z.ZodString>;
-  model: z.ZodDefault<z.ZodString>;
-  reasoning: z.ZodDefault<z.ZodEnum<{
-    off: "off";
-    minimal: "minimal";
-    low: "low";
-    medium: "medium";
-    high: "high";
-    xhigh: "xhigh";
-    max: "max";
-  }>>;
-  timeoutMs: z.ZodDefault<z.ZodNumber>;
-  includeBaselinePolicy: z.ZodDefault<z.ZodBoolean>;
-}, z.core.$strict>;
-declare const autoReviewConfigSchema: AutoReviewConfigSchema;
-type AutoReviewConfig = z.infer<typeof autoReviewConfigSchema>;
-interface ConfigIssue {
-  sourcePath: string;
-  message: string;
-}
-interface LoadConfigResult {
-  config: AutoReviewConfig | undefined;
-  issues: ConfigIssue[];
-  globalPath: string;
-  projectPath: string;
-}
-interface LoadConfigOptions {
-  cwd: string;
-  agentDir?: string;
-  readFile?: (path: string) => string | undefined;
-}
-declare function loadAutoReviewConfig(options: LoadConfigOptions): LoadConfigResult;
-declare function buildAutoReviewJsonSchema(): Record<string, unknown>;
-//#endregion
-//#region src/circuit-breaker.d.ts
-declare class DenialCircuitBreaker {
-  private consecutiveDenials;
-  private recentDenials;
-  isOpen(): boolean;
-  recordDenied(): void;
-  recordNonDenial(): void;
-  resetTurn(): void;
-  private recordRecent;
-}
-//#endregion
-//#region src/extension.d.ts
-interface ReviewerFactoryOptions {
-  config: AutoReviewConfig;
-  registry: ModelRegistry;
-  sessionManager: Pick<SessionManager, "getBranch">;
-  circuitBreaker: DenialCircuitBreaker;
-  sessionSignal: AbortSignal;
-}
-interface AutoReviewExtensionDependencies {
-  loadConfig?: (cwd: string) => LoadConfigResult;
-  getPermissionsService?: () => PermissionsService | undefined;
-  createReviewer?: (options: ReviewerFactoryOptions) => Authorizer["authorize"];
-}
-declare function createAutoReviewExtension(pi: ExtensionAPI, dependencies?: AutoReviewExtensionDependencies): void;
-//#endregion
+import { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 //#region src/index.d.ts
 declare function permissionAutoReviewExtension(pi: ExtensionAPI): void;
 //#endregion
-export { AUTHORIZER_NAME, type AutoReviewConfig, type AutoReviewExtensionDependencies, CONFIG_SCHEMA_URL, type ConfigIssue, DEFAULT_MODEL, DEFAULT_PROVIDER, DEFAULT_TIMEOUT_MS, EXTENSION_ID, type LoadConfigOptions, type LoadConfigResult, autoReviewConfigSchema, buildAutoReviewJsonSchema, createAutoReviewExtension, permissionAutoReviewExtension as default, loadAutoReviewConfig };
+export { permissionAutoReviewExtension as default };
 //# sourceMappingURL=index.d.ts.map