@nklisch/pi-enhanced 0.1.3 → 0.1.4

package/node_modules/@nklisch/pi-clearance/src/runtime/config-commands/settings/native-ui.ts

@@ -1,7 +1,11 @@
 import type { ExtensionCommandContext } from "@earendil-works/pi-coding-agent";
 import { Key, matchesKey, truncateToWidth } from "@earendil-works/pi-tui";
 
-import type { ProjectScopeListField } from "../../../config/config-command-plans.ts";
+import {
+  inferScopePreset,
+  SCOPE_PRESET_LABELS,
+  type ProjectScopeListField,
+} from "../../../config/config-command-plans.ts";
 import { handleScopeCommand } from "../scope.ts";
 import type { CommandReport } from "../types.ts";
 import type { SettingsAction, SettingsActionId } from "./actions.ts";
@@ -645,6 +649,11 @@ export class SettingsNativeUiComponent {
       `Mode: ${this.model.currentMode.label} - ${this.model.currentMode.description}`,
       `Reviewer: ${this.model.status.reviewer.path} - ${this.model.status.reviewer.consequence}`,
       `Review context: ${this.model.status.reviewer.contextMode}`,
+      ...((this.model.status.customizations?.length ?? 0) === 0
+        ? []
+        : [
+            `Customizations: ${this.model.status.customizations?.join("; ") ?? ""}`,
+          ]),
       `Packs: ${this.model.status.packs.enabled}/${this.model.status.packs.total} enabled`,
     ];
   }
@@ -720,16 +729,11 @@ export class SettingsNativeUiComponent {
 
 function homeItems(model: SettingsReadModel): readonly NativeSettingsItem[] {
   return [
-    ...model.modes.map((mode) => ({
-      kind: "selection" as const,
-      label: `Set mode: ${mode.label}`,
-      description: mode.description,
-      selection: {
-        kind: "action" as const,
-        label: `Set mode: ${mode.label}`,
-        action: { id: "mode.set" as const, args: { mode: mode.mode } },
-      },
-    })),
+    actionItem(
+      `Mode: ${model.currentMode.label}`,
+      model.currentMode.description,
+      { id: "mode.select", args: {} },
+    ),
     ...model.panels.map((descriptor) => ({
       kind: "panel" as const,
       label: descriptor.title,
@@ -763,22 +767,36 @@ function panelItems(
 function reviewerItems(
   model: SettingsReadModel,
 ): readonly NativeSettingsItem[] {
+  const configuredModel = model.status.reviewer.configuredModel;
+  const gatedToolItems = model.gatedTools.names.map((toolName) =>
+    actionItem(
+      `Gated tool: ${toolName}`,
+      "Toggle this exact non-Bash tool off; Bash cannot be listed.",
+      { id: "gated-tools.remove", args: { toolName } },
+    ),
+  );
   return [
-    ...model.reviewerModels.map((option) =>
       actionItem(
-        `Use reviewer model ${option.label}`,
-        "Pin the reviewer model; writes user-owned config after confirmation.",
-        { id: "reviewer.model", args: { model: option.spec } },
+      `Reviewer model: ${configuredModel ?? "session model"}`,
+      "Choose a configured model or return to the active session model; writes require confirmation.",
+      { id: "reviewer.model", args: {} },
       ),
+    actionItem(
+      `Prompt posture: ${model.status.reviewer.promptPosture}`,
+      "Choose the evidence threshold used by the model reviewer; writes require confirmation.",
+      { id: "reviewer.posture.select", args: {} },
     ),
     actionItem(
-      "Clear explicit reviewer model",
-      "Fall back to the active session model for review.",
-      { id: "reviewer.model", args: { model: null } },
+      `Gated non-Bash tools: ${model.gatedTools.names.length}`,
+      model.gatedTools.addableToolNames.length === 0
+        ? "No active non-Bash tools are available to add."
+        : "Choose an active non-Bash tool to opt into exact-name Clearance gating.",
+      { id: "gated-tools.add", args: {} },
     ),
+    ...gatedToolItems,
     actionItem(
       "Show reviewer details",
-      "Reviewer settings are read-only except model selection.",
+      "Reviewer settings and current evidence thresholds.",
       { id: "reviewer.open", args: {} },
     ),
     backItem(),
@@ -786,24 +804,13 @@ function reviewerItems(
 }
 
 function scopeItems(model: SettingsReadModel): readonly NativeSettingsItem[] {
-  const safeHomeEnabled = model.projectScope.safeHomeUseDefaults !== false;
-  const agentSupportEnabled =
-    model.projectScope.agentSupportUseDefaults !== false;
+  const safeHomeEnabled = model.projectScope.safeHomeUseDefaults;
+  const agentSupportEnabled = model.projectScope.agentSupportUseDefaults;
   return [
     actionItem(
-      "Preset: Project only",
-      "Review anything touching paths outside the project; safe-home and agent-support defaults off.",
-      { id: "scope.preset", args: { preset: "project" } },
-    ),
-    actionItem(
-      "Preset: Home + project",
-      "Baseline read auto-approvals extend into non-secret home directories.",
-      { id: "scope.preset", args: { preset: "home" } },
-    ),
-    actionItem(
-      "Preset: Full minus danger list",
-      "Broad home reads; credential and key paths are hard-denied.",
-      { id: "scope.preset", args: { preset: "unrestricted" } },
+      `Scope preset: ${scopePresetLabel(model)}`,
+      "Choose one behavior bundle; path lists remain unchanged and writes require confirmation.",
+      { id: "scope.preset.select", args: {} },
     ),
     actionItem(
       "Show full scope details",
@@ -813,20 +820,9 @@ function scopeItems(model: SettingsReadModel): readonly NativeSettingsItem[] {
     ...scopePathItems("scope.add-path", "Add"),
     ...scopePathItems("scope.remove-path", "Remove"),
     actionItem(
-      "Unknown paths: review",
-      "Review ambiguous paths instead of denying immediately.",
-      {
-        id: "scope.unknown-path",
-        args: { behavior: "review" },
-      },
-    ),
-    actionItem(
-      "Unknown paths: deny",
-      "Deny ambiguous paths unless policy can prove safety.",
-      {
-        id: "scope.unknown-path",
-        args: { behavior: "deny" },
-      },
+      `Unknown paths: ${model.projectScope.unknownPathBehavior}`,
+      "Choose whether ambiguous paths review or deny; writes require confirmation.",
+      { id: "scope.unknown-path.select", args: {} },
     ),
     actionItem(
       safeHomeEnabled ? "Safe-home defaults: off" : "Safe-home defaults: on",
@@ -888,30 +884,21 @@ export function packItems(
   ];
 }
 
+function scopePresetLabel(model: SettingsReadModel): string {
+  const scope = model.projectScope;
+  const preset = inferScopePreset(scope);
+  return preset === "custom" ? "Custom" : SCOPE_PRESET_LABELS[preset];
+}
+
 function briefingItems(
   model: SettingsReadModel,
 ): readonly NativeSettingsItem[] {
   const briefing = model.briefing;
   return [
     actionItem(
-      `Note text: reason + accent${briefing.mode === "reason+accent" ? " (current)" : ""}`,
-      "Show the decision reason inline after each reviewed call.",
-      { id: "briefing.mode", args: { mode: "reason+accent" } },
-    ),
-    actionItem(
-      `Note text: accent only${briefing.mode === "accent-only" ? " (current)" : ""}`,
-      "Quiet allows: no reason text, accent marker only.",
-      { id: "briefing.mode", args: { mode: "accent-only" } },
-    ),
-    actionItem(
-      `Note text: reason + model${briefing.mode === "reason+model" ? " (current)" : ""}`,
-      "Show the decision reason and the reviewer model label.",
-      { id: "briefing.mode", args: { mode: "reason+model" } },
-    ),
-    actionItem(
-      `Note text: off${briefing.mode === "off" ? " (current)" : ""}`,
-      "Hide review-note text entirely.",
-      { id: "briefing.mode", args: { mode: "off" } },
+      `Note mode: ${briefing.mode}`,
+      "Choose the inline review-note mode; writes require confirmation.",
+      { id: "briefing.mode.select", args: {} },
     ),
     actionItem(
       briefing.showModelLabel ? "Model label: hide" : "Model label: show",

package/node_modules/@nklisch/pi-clearance/src/runtime/config-commands/settings/panels/reviewer.ts

@@ -5,7 +5,14 @@ export const REVIEWER_PANEL: SettingsPanel = {
   id: "reviewer",
   title: "Reviewer",
   rows: reviewerRows,
-  actions: ["reviewer.model", "reviewer.open"],
+  actions: [
+    "reviewer.model",
+    "reviewer.posture.select",
+    "reviewer.posture.set",
+    "gated-tools.add",
+    "gated-tools.remove",
+    "reviewer.open",
+  ],
 };
 
 export function reviewerRows(model: SettingsReadModel): readonly SettingsRow[] {
@@ -33,7 +40,7 @@ export function reviewerRows(model: SettingsReadModel): readonly SettingsRow[] {
     {
       label: "Prompt posture",
       value: reviewer.promptPosture,
-      meaning: "Edit advanced reviewer settings in global.json.",
+      meaning: "Select a posture; writes global.json after confirmation.",
     },
     {
       label: "Context mode",
@@ -42,6 +49,15 @@ export function reviewerRows(model: SettingsReadModel): readonly SettingsRow[] {
     },
     { label: "Token budget", value: formatTokenBudget(reviewer.tokenBudget) },
     { label: "Escalation", value: formatEscalation(reviewer.escalation) },
+    {
+      label: "Gated non-Bash tools",
+      value:
+        model.gatedTools.names.length === 0
+          ? "none"
+          : `${model.gatedTools.names.length} configured`,
+      meaning:
+        "Only exact names shown in this control are analyzed by Clearance; Bash remains gated and cannot be listed.",
+    },
   ];
 }
 
@@ -51,7 +67,7 @@ export function renderReviewerPanel(model: SettingsReadModel): string {
     "",
     markdownTable(reviewerRows(model)),
     "",
-    "Model selection is interactive. Other reviewer settings are read-only here; edit global.json.",
+    "Model and prompt-posture selection are interactive and confirm-backed. Other reviewer settings are read-only here; edit global.json.",
   ].join("\n");
 }
 

package/node_modules/@nklisch/pi-clearance/src/runtime/config-commands/settings/panels/scope.ts

@@ -5,7 +5,6 @@ import {
   type ProjectScopeListField,
   SCOPE_PRESET_LABELS,
 } from "../../../../config/config-command-plans.ts";
-import type { ProjectScopeConfig } from "../../../../config/schema.ts";
 import type { CommandReport } from "../../types.ts";
 import type { SettingsAction } from "../actions.ts";
 import {
@@ -84,15 +83,7 @@ export const SCOPE_PANEL: SettingsPanel = {
 
 export function scopeRows(model: SettingsReadModel): readonly SettingsRow[] {
   const scope = model.projectScope;
-  const preset = inferScopePreset({
-    safeHomeUseDefaults: scope.safeHomeUseDefaults ?? true,
-    ...(scope.agentSupportUseDefaults === undefined
-      ? {}
-      : { agentSupportUseDefaults: scope.agentSupportUseDefaults }),
-    homePathBehavior: scope.homePathBehavior,
-    sensitivePathBehavior: scope.sensitivePathBehavior,
-    unknownPathBehavior: scope.unknownPathBehavior,
-  } as ProjectScopeConfig);
+  const preset = inferScopePreset(scope);
 
   return [
     {
@@ -308,5 +299,5 @@ function markdownTable(rows: readonly SettingsRow[]): string {
 }
 
 function escapeCell(value: string): string {
-  return value.replaceAll("|", "\\|").replaceAll("\n", "<br>");
+  return value.replaceAll("|", "\\|").replaceAll("\n", "; ");
 }

package/node_modules/@nklisch/pi-clearance/src/runtime/config-commands/settings/panels.ts

@@ -30,12 +30,21 @@ export const SETTINGS_PANELS = [
 ] as const satisfies readonly SettingsPanel[];
 
 export function renderControlCenter(model: SettingsReadModel): string {
-  const rows: readonly SettingsRow[] = [
+  const rows: SettingsRow[] = [
     {
       label: "Clearance mode",
       value: model.currentMode.label,
       meaning: model.currentMode.description,
     },
+    ...(model.status.customizations === undefined ||
+    model.status.customizations.length === 0
+      ? []
+      : [
+          {
+            label: "Customizations",
+            value: model.status.customizations.join("; "),
+          },
+        ]),
     {
       label: "Tune mode",
       value: formatTuneCueStatus(model.status.ratchet.active),

package/node_modules/@nklisch/pi-clearance/src/runtime/config-commands/settings/read-model.ts

@@ -2,10 +2,15 @@ import type {
   ResolvedProjectScope,
   ResolvedReviewNotePreference,
 } from "../../../config/loader.ts";
+import {
+  DEFAULT_PROJECT_SCOPE_BEHAVIOR,
+  DEFAULT_REVIEW_NOTE_DISPLAY,
+} from "../../../config/defaults.ts";
 import type { ClearanceMode } from "../../../config/schema.ts";
 import type { AutoReviewerStatusView } from "../../auto-reviewer-read-models.ts";
 import type { ReviewDecisionDisplayCapability } from "../../review-decision-display.ts";
 import type { SettingsActionId } from "./actions.ts";
+import type { ReviewerModelOption } from "./model-options.ts";
 
 export interface SettingsModeCopy {
   readonly mode: ClearanceMode;
@@ -26,11 +31,16 @@ export interface SettingsBriefingRow {
   readonly note: string;
 }
 
-export interface SettingsProjectScope extends ResolvedProjectScope {
+export interface SettingsProjectScopeInput extends ResolvedProjectScope {
   readonly safeHomeUseDefaults?: boolean;
   readonly agentSupportUseDefaults?: boolean;
 }
 
+export interface SettingsProjectScope extends ResolvedProjectScope {
+  readonly safeHomeUseDefaults: boolean;
+  readonly agentSupportUseDefaults: boolean;
+}
+
 /** A pack row for the settings pack explorer. */
 export interface SettingsPackRow {
   readonly id: string;
@@ -45,10 +55,16 @@ export interface SettingsPackRow {
 }
 
 /** A reviewer model option for the settings reviewer panel. */
-export interface SettingsReviewerModelOption {
-  /** Canonical provider/modelId spec written to config. */
-  readonly spec: string;
-  readonly label: string;
+export type SettingsReviewerModelOption = ReviewerModelOption;
+
+export interface SettingsGatedTools {
+  /** Exact non-Bash names currently opted into Clearance gating. */
+  readonly names: readonly string[];
+  /** Active host tools are the only names offered by the add chooser. */
+  readonly activeToolNames: readonly string[];
+  /** All host metadata, when available, for disclosure and diagnostics. */
+  readonly allToolNames: readonly string[];
+  readonly addableToolNames: readonly string[];
 }
 
 export interface SettingsPanelDescriptor {
@@ -66,6 +82,7 @@ export interface SettingsReadModel {
   readonly briefing: SettingsBriefingRow;
   readonly packs: readonly SettingsPackRow[];
   readonly reviewerModels: readonly SettingsReviewerModelOption[];
+  readonly gatedTools: SettingsGatedTools;
   readonly panels: readonly SettingsPanelDescriptor[];
 }
 
@@ -90,11 +107,8 @@ export const SETTINGS_MODE_COPIES = [
   },
 ] as const satisfies readonly SettingsModeCopy[];
 
-export const DEFAULT_REVIEW_NOTE_PREFERENCE = {
-  mode: "reason+accent",
-  showModelLabel: false,
-  accent: true,
-} as const satisfies ResolvedReviewNotePreference;
+export const DEFAULT_REVIEW_NOTE_PREFERENCE =
+  DEFAULT_REVIEW_NOTE_DISPLAY satisfies ResolvedReviewNotePreference;
 
 export const DEFAULT_SETTINGS_BRIEFING_ROW = buildSettingsBriefingRow(
   DEFAULT_REVIEW_NOTE_PREFERENCE,
@@ -105,7 +119,7 @@ const SETTINGS_PANEL_DESCRIPTORS = [
     id: "reviewer",
     title: "Reviewer",
     summary:
-      "Configured model and prompt details (read-only except model selection).",
+      "Confirm-backed model and prompt-posture selectors; other advanced details are read-only.",
     drillActionId: "reviewer.open" as const,
   },
   {
@@ -131,10 +145,11 @@ const SETTINGS_PANEL_DESCRIPTORS = [
 
 export function buildSettingsReadModel(input: {
   readonly status: AutoReviewerStatusView;
-  readonly projectScope: SettingsProjectScope;
+  readonly projectScope: SettingsProjectScopeInput;
   readonly reviewNoteDisplay?: ResolvedReviewNotePreference;
   readonly packs?: readonly SettingsPackRow[];
   readonly reviewerModels?: readonly SettingsReviewerModelOption[];
+  readonly gatedTools?: SettingsGatedTools;
 }): SettingsReadModel {
   const currentMode = SETTINGS_MODE_COPIES.find(
     (mode) => mode.mode === input.status.mode,
@@ -145,16 +160,35 @@ export function buildSettingsReadModel(input: {
     modes: SETTINGS_MODE_COPIES.map((mode) => ({ ...mode })),
     currentMode: { ...currentMode },
     status: input.status,
-    projectScope: input.projectScope,
+    projectScope: normalizeSettingsProjectScope(input.projectScope),
     briefing: buildSettingsBriefingRow(
       input.reviewNoteDisplay ?? DEFAULT_REVIEW_NOTE_PREFERENCE,
     ),
     packs: input.packs ?? [],
     reviewerModels: input.reviewerModels ?? [],
+    gatedTools: input.gatedTools ?? {
+      names: [],
+      activeToolNames: [],
+      allToolNames: [],
+      addableToolNames: [],
+    },
     panels: SETTINGS_PANEL_DESCRIPTORS.map((panel) => ({ ...panel })),
   };
 }
 
+function normalizeSettingsProjectScope(
+  scope: SettingsProjectScopeInput,
+): SettingsProjectScope {
+  return {
+    ...scope,
+    safeHomeUseDefaults:
+      scope.safeHomeUseDefaults ?? DEFAULT_PROJECT_SCOPE_BEHAVIOR.safeHomeUseDefaults,
+    agentSupportUseDefaults:
+      scope.agentSupportUseDefaults ??
+      DEFAULT_PROJECT_SCOPE_BEHAVIOR.agentSupportUseDefaults,
+  };
+}
+
 function buildSettingsBriefingRow(
   preference: ResolvedReviewNotePreference,
 ): SettingsBriefingRow {

package/node_modules/@nklisch/pi-clearance/src/runtime/config-commands/settings.ts

@@ -1,7 +1,6 @@
 import type { ExtensionCommandContext } from "@earendil-works/pi-coding-agent";
 
 import { buildAutoReviewerStatusView } from "../auto-reviewer-read-models.ts";
-import type { ReviewerModelRegistry } from "../reviewer-model.ts";
 import {
   canOpenSettingsNativeUi,
   openSettingsNativeUi,
@@ -16,6 +15,9 @@ import {
   resolvePolicyReport,
   usageReport,
 } from "./types.ts";
+import { availableReviewerModels } from "./settings/model-options.ts";
+
+export { availableReviewerModels } from "./settings/model-options.ts";
 
 type SettingsNativePanel = SettingsReadModel["panels"][number]["id"];
 
@@ -156,9 +158,7 @@ async function buildSettingsCommandView(
       : {
           ...policy.policy.config.projectScope,
           safeHomeUseDefaults: rawScope.safeHomeUseDefaults,
-          ...(rawScope.agentSupportUseDefaults === undefined
-            ? {}
-            : { agentSupportUseDefaults: rawScope.agentSupportUseDefaults }),
+          agentSupportUseDefaults: rawScope.agentSupportUseDefaults ?? true,
           homePathBehavior: rawScope.homePathBehavior,
           sensitivePathBehavior: rawScope.sensitivePathBehavior,
         };
@@ -183,43 +183,38 @@ async function buildSettingsCommandView(
       };
     }),
     reviewerModels: availableReviewerModels(ctx),
+    gatedTools: buildGatedToolsReadModel(
+      policy.policy.config.gatedTools ?? [],
+      deps.toolMetadata?.() ?? { activeToolNames: [], allToolNames: [] },
+    ),
   });
 
   return { ok: true, model };
 }
 
-const REVIEWER_MODEL_OPTION_LIMIT = 12;
-
-/** Available reviewer model specs (provider/modelId) with configured auth. */
-export function availableReviewerModels(
-  ctx: ExtensionCommandContext,
-): readonly { readonly spec: string; readonly label: string }[] {
-  // Pi's ModelRegistry.hasConfiguredAuth takes the MODEL, not a provider
-  // string — passing a string silently filters out every model.
-  const registry = (ctx as { readonly modelRegistry?: unknown })
-    .modelRegistry as ReviewerModelRegistry | undefined;
-  if (
-    registry === undefined ||
-    typeof registry.getAll !== "function" ||
-    typeof registry.hasConfiguredAuth !== "function"
-  ) {
-    return [];
-  }
+function buildGatedToolsReadModel(
+  gatedTools: readonly string[],
+  metadata: {
+    readonly activeToolNames: readonly string[];
+    readonly allToolNames: readonly string[];
+  },
+): SettingsReadModel["gatedTools"] {
+  const names = uniqueToolNames(gatedTools).filter((name) => name !== "bash");
+  const activeToolNames = uniqueToolNames(metadata.activeToolNames).filter(
+    (name) => name !== "bash",
+  );
+  const allToolNames = uniqueToolNames(metadata.allToolNames).filter(
+    (name) => name !== "bash",
+  );
+  const addSource = activeToolNames.length > 0 ? activeToolNames : allToolNames;
+  return {
+    names,
+    activeToolNames,
+    allToolNames,
+    addableToolNames: addSource.filter((name) => !names.includes(name)),
+  };
+}
 
-  try {
-    return registry
-      .getAll()
-      .filter((model) => registry.hasConfiguredAuth(model))
-      .map((model) => ({
-        spec: `${model.provider}/${model.id}`,
-        label:
-          typeof model.name === "string" && model.name.length > 0
-            ? `${model.name} (${model.provider}/${model.id})`
-            : `${model.provider}/${model.id}`,
-      }))
-      .sort((a, b) => a.spec.localeCompare(b.spec))
-      .slice(0, REVIEWER_MODEL_OPTION_LIMIT);
-  } catch {
-    return [];
-  }
+function uniqueToolNames(names: readonly string[]): string[] {
+  return [...new Set(names.filter((name) => name.trim().length > 0))].sort();
 }

package/node_modules/@nklisch/pi-clearance/src/runtime/config-commands/status.ts

@@ -51,6 +51,9 @@ function formatStatusMarkdown(
     `- Reviewer prompt: ${details.reviewer.promptPosture}; context ${formatReviewerContextModeLabel(details.reviewer.contextMode)}`,
     `- Reviewer model configured: ${details.reviewer.configuredModel === null ? "none" : `\`${details.reviewer.configuredModel}\``}`,
     `- Reviewer model resolved: ${details.reviewer.resolvedModel === null ? "none" : `\`${details.reviewer.resolvedModel}\``} (${details.reviewer.resolvedModelSource})`,
+    ...((details.customizations?.length ?? 0) === 0
+      ? []
+      : [`- Customizations: ${details.customizations?.join("; ") ?? ""}`]),
     `- Packs: ${details.packs.enabled} enabled / ${details.packs.total} total`,
     `- Warnings: ${details.warnings.length}`,
   ];

package/node_modules/@nklisch/pi-clearance/src/runtime/config-commands/types.ts

@@ -15,11 +15,20 @@ export type {
   RecentDecisionSource,
 } from "../reviewer-context.ts";
 
+export interface CommandToolMetadata {
+  /** Currently active tool names, when the host exposes them. */
+  readonly activeToolNames: readonly string[];
+  /** All configured tool names, when the host exposes them. */
+  readonly allToolNames: readonly string[];
+}
+
 export interface AutoReviewerCommandDependencies {
   readonly manager: RatchetModeManager;
   readonly policyResolver: PolicyResolver;
   readonly packageRegistration: () => PackageRegistrationSnapshot;
   readonly audit: AuditLogger;
+  /** Optional host tool catalog used by the exact gated-tools settings control. */
+  readonly toolMetadata?: () => CommandToolMetadata;
   /** Bounded recent audit decisions used by `/clearance allow` with no text. */
   readonly recentDecisionSource: RecentDecisionSource;
   /** Structural analyzer used only to summarize the recent command for the agent. */
@@ -46,7 +55,7 @@ export type CommandPi = Pick<
   | "getAllTools"
   | "setActiveTools"
   | "registerTool"
-  | "sendUserMessage"
+  | "sendMessage"
 >;
 
 export const USAGE_MARKDOWN = [
@@ -66,7 +75,7 @@ export const USAGE_MARKDOWN = [
   "",
   "Tune analysis tools are available only while `/clearance tune` is active; proposal tools remain available in every mode.",
   "",
-  "Advanced settings such as reviewer prompt posture, context mode, token budget, and escalation are edited in user-owned global config; reviewer model selection remains available in settings.",
+  "Reviewer prompt posture and model pinning are available as confirm-backed settings selectors; context mode, token budget, escalation, and other advanced fields are edited in user-owned global config.",
 ].join("\n");
 
 export async function resolvePolicyForCommand(
@@ -75,7 +84,7 @@ export async function resolvePolicyForCommand(
 ): Promise<ResolvedPolicy> {
   const result = await deps.policyResolver.resolve(ctx);
   if (!result.ok) {
-    throw new Error(`auto-reviewer policy resolution failed: ${result.reason}`);
+    throw new Error(`Pi Clearance policy resolution failed: ${result.reason}`);
   }
 
   return result.policy;
@@ -98,10 +107,10 @@ export async function resolvePolicyReport(
     return {
       ok: false,
       report: {
-        title: "Auto-reviewer command failed",
+        title: "Pi Clearance command failed",
         summary: message,
         markdown: [
-          "# Auto-reviewer command failed",
+          "# Pi Clearance command failed",
           "",
           `- Error: ${message}`,
           "- No config changes were written.",

package/node_modules/@nklisch/pi-clearance/src/runtime/handler.ts

@@ -99,6 +99,21 @@ export function createHandleToolCall(
 
       deps.operatorStatus?.refresh(ctx, resolved.policy);
 
+      // Harness availability is the host-level approval boundary for non-Bash
+      // tools. Only exact names in global.gatedTools enter Clearance; Bash is
+      // intentionally never eligible for this bypass.
+      if (shouldBypassNonBashTool(event.toolName, resolved.policy)) {
+        const decision = nonBashBypassDecision(event.toolName);
+        await logPolicyDecision(
+          deps.audit,
+          inputSnapshot,
+          event,
+          ctx,
+          decision,
+        );
+        return {};
+      }
+
       const rawShape = await deps.analyzerRegistry.analyze(
         event.toolName,
         event.input,
@@ -208,6 +223,10 @@ async function mapDecisionToResult(
     // command. event.input may be mutated by transforms after the allow below.
     toolInput: input.inputSnapshot,
     shape: input.shape,
+    deterministicEvidence: {
+      reason: input.decision.reason,
+      provenance: input.decision.provenance,
+    },
     reviewerConfig: input.resolvedPolicy.config.reviewer,
     resolvedConfig: input.resolvedPolicy.config,
     humanAdapter: adapters.humanAdapter,
@@ -279,6 +298,23 @@ function reviewVisibilityAdapter(
   };
 }
 
+function shouldBypassNonBashTool(
+  toolName: string,
+  resolvedPolicy: ResolvedPolicy,
+): boolean {
+  if (toolName === "bash") return false;
+  const gatedTools = resolvedPolicy.config.gatedTools ?? [];
+  return !gatedTools.includes(toolName);
+}
+
+function nonBashBypassDecision(toolName: string): Decision {
+  return {
+    effect: "allow",
+    reason: `non-bash tool ${toolName} bypassed Clearance: not listed in gatedTools`,
+    provenance: { source: "default", ruleId: "clearance.non-bash-bypass" },
+  };
+}
+
 function deterministicDecision(
   shape: ToolShape,
   resolvedPolicy: ResolvedPolicy,

package/node_modules/@nklisch/pi-clearance/src/runtime/mode-prompt.ts

@@ -9,7 +9,6 @@ import type { RatchetModeManager } from "./ratchet-mode.ts";
 const PROPOSAL_FLOW_GUIDANCE = [
   "## Clearance proposal flow guidance",
   "- Agent-authored policy batches are always available: call clearance_propose, then call clearance_present to show the deterministic summary card.",
-  "- Only an explicit user approval from the presented card may write user-owned config; never apply proposals or write policy directly.",
 ].join("\n");
 
 function formatRatchetToolGuidance(toolNames: readonly string[]): string {