@trim21/personal-pi-extensions 0.0.320 → 0.0.323

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trim21/personal-pi-extensions",
-  "version": "0.0.320",
+  "version": "0.0.323",
   "type": "module",
   "description": "Custom pi coding-agent extensions: bwrap sandbox, workspace guard, opencode edit, and more",
   "keywords": [

package/src/bwrap/runtime.ts

@@ -69,6 +69,8 @@ export interface BwrapExecutionRequest {
   timeout?: number;
   requestFullAccess?: boolean;
   requestFullAccessReason?: string;
+  /** bash 工具显式传入的 workdir 参数；存在时审批对话框显示实际执行目录。 */
+  workdir?: string;
   signal?: AbortSignal;
   onUpdate?: AgentToolUpdateCallback;
   ctx: ExtensionContext;
@@ -324,7 +326,12 @@ export class BwrapRuntime {
         throw new Error(`Command denied by bwrap approval rule: ${request.command}`);
       }
       if (decision === undefined) {
-        await this.approveFullAccess(request.ctx, request.command, request.requestFullAccessReason);
+        await this.approveFullAccess(
+          request.ctx,
+          request.command,
+          request.requestFullAccessReason,
+          request.workdir,
+        );
       }
     }
     const operations =
@@ -414,6 +421,7 @@ export class BwrapRuntime {
     ctx: ExtensionContext,
     command: string,
     reason: string | undefined,
+    workdir?: string,
   ): Promise<void> {
     const policy = resolveEscalation({ hasUI: ctx.hasUI });
     if (policy.kind === "deny") throw new Error(policy.reason);
@@ -443,6 +451,10 @@ export class BwrapRuntime {
       lines.push("", "勾选规则将永久允许（allow forever），未勾选规则仅本次放行:", "---");
     }
     lines.push(fenceCodeBlock(command));
+    // workdir 存在时展示实际执行目录（ctx.cwd 已被 bash 工具解析为绝对路径）
+    if (workdir) {
+      lines.push(`Workdir: ${escapeHtml(ctx.cwd)}`);
+    }
     const description = lines.join("\n");
 
     // 解析失败（无 pattern 可勾选）：保持单选对话框（Allow forever 是空操作）

package/src/claude-code/bash.md

@@ -17,6 +17,7 @@ IMPORTANT: Avoid using this tool to run `find`, `grep`, `cat`, `head`, `tail`, `
   While the Bash tool can do similar things, it's better to use the built-in tools as they provide a better user experience and make it easier to review tool calls and give permission.
 
 - You may specify an optional timeout in milliseconds (up to 600000ms / 10 minutes). By default, your command will timeout after 120000ms (2 minutes).
+- Prever to use workdir argument over `cd ...`
 - When issuing multiple commands:
 - If the commands are independent and can run in parallel, make multiple Bash tool calls in a single message. Example: if you need to run "git status" and "git diff", send a single message with two Bash tool calls in parallel.
 - If the commands depend on each other and must run sequentially, use a single Bash call with '&&' to chain them together.

package/src/claude-code/shell.ts

@@ -127,6 +127,7 @@ export function registerShellTools(
           timeout: timeout / 1000,
           requestFullAccess: params.dangerouslyDisableSandbox,
           requestFullAccessReason: params.description,
+          workdir: params.workdir,
           signal,
           onUpdate,
         });

package/src/opencode/bash.ts

@@ -38,7 +38,7 @@ export default function opencodeBash(
         workdir: Type.Optional(
           Type.String({
             description:
-              "Working directory to execute the command in. Defaults to the current directory; relative paths resolve from there.",
+              "Working directory to execute the command in. Defaults to the current directory; relative paths resolve from there. prefer use this argument over `cd ...`",
           }),
         ),
         timeout: Type.Optional(
@@ -72,6 +72,7 @@ export default function opencodeBash(
           command: params.command,
           timeout: timeout / 1000,
           requestFullAccess: params.dangerouslyDisableSandbox,
+          workdir: params.workdir,
           signal,
           onUpdate,
         });