jeopi-utils 16.2.23 → 16.2.25

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -2,6 +2,12 @@
2
2
 
3
3
  ## [Unreleased]
4
4
 
5
+ ## [16.2.24] - 2026-07-03
6
+
7
+ ### Added
8
+
9
+ - Added `getPluginTrustStorePath()`, resolving `~/.jeopi/plugin-trust.json` — backs the coding-agent plugin trust-on-first-use gate.
10
+
5
11
  ## [16.2.21] - 2026-07-02
6
12
 
7
13
  ### Fixed
@@ -184,6 +184,11 @@ export declare function getPuppeteerDir(): string;
184
184
  export declare function getDocsRsCacheDir(): string;
185
185
  /**Get AutoQa db directory */
186
186
  export declare function getAutoQaDbDir(): string;
187
+ /** Get the plugin trust-decision store path (~/.jeopi/plugin-trust.json). Records
188
+ * per-plugin trust-on-first-use decisions ("<name>@<version>" -> granted|denied) so
189
+ * third-party plugin code (tools/hooks/commands/extensions) only executes after an
190
+ * explicit grant. */
191
+ export declare function getPluginTrustStorePath(): string;
187
192
  /**
188
193
  * Stable 7-character hex digest of an absolute filesystem path.
189
194
  *
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "type": "module",
3
3
  "name": "jeopi-utils",
4
- "version": "16.2.23",
4
+ "version": "16.2.25",
5
5
  "description": "Shared utilities for pi packages",
6
6
  "homepage": "https://github.com/akillness/jeopi",
7
7
  "author": "Can Boluk",
@@ -31,7 +31,7 @@
31
31
  "fmt": "biome format --write ."
32
32
  },
33
33
  "dependencies": {
34
- "jeopi-natives": "16.2.23",
34
+ "jeopi-natives": "16.2.25",
35
35
  "handlebars": "^4.7.9",
36
36
  "winston": "^3.19.0",
37
37
  "winston-daily-rotate-file": "^5.0.0"
package/src/dirs.ts CHANGED
@@ -681,6 +681,14 @@ export function getDocsRsCacheDir(): string {
681
681
  export function getAutoQaDbDir(): string {
682
682
  return dirs.rootSubdir("autoqa.db", "data");
683
683
  }
684
+
685
+ /** Get the plugin trust-decision store path (~/.jeopi/plugin-trust.json). Records
686
+ * per-plugin trust-on-first-use decisions ("<name>@<version>" -> granted|denied) so
687
+ * third-party plugin code (tools/hooks/commands/extensions) only executes after an
688
+ * explicit grant. */
689
+ export function getPluginTrustStorePath(): string {
690
+ return dirs.rootSubdir("plugin-trust.json", "state");
691
+ }
684
692
  /**
685
693
  * Stable 7-character hex digest of an absolute filesystem path.
686
694
  *