pi-daddy 0.49.2 → 0.49.3

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog — pi-daddy
 
+## 0.49.3 — 2026-10-10
+
+- Show approval-only grant previews as `AUTO` when session Auto is on instead of misleading `BLOCK` rows. The status reads the same observed Auto state as the header; unavailable policy and genuine refusals remain blocked. Preview never acquires permission, and actual delegation still rechecks live Auto and execution conditions.
+
 ## 0.49.2 — 2026-10-10
 
 - Show the selected JEV provider/model, transport and shared local data root in dashboard Settings when the owning Harness reports them; older Harness versions remain compatible. Update both packages and restart Pi to see the selected route.

package/README.md

@@ -1,6 +1,6 @@
 # pi-daddy
 
-Source target: **0.48.3**. Before installation, verify that `npm view pi-daddy version` and Git tag `v0.48.3` both resolve to this release.
+Source target: **0.49.3**. Before installation, verify that `npm view pi-daddy version` and Git tag `v0.49.3` both resolve to this release.
 
 **Capability governance and coordination for [pi](https://github.com/badlogic/pi-mono)'s multi-level agent system.**
 An orchestrator grants each sub-agent a deliberate subset of what it holds and withholds the rest. A sub-agent may
@@ -188,6 +188,7 @@ approvals` lists what is persisted; `/grants revoke <capability>@<definition>` o
 in pi's agent directory, not in the workspace.
 
 **Auto mode** lets the operator approve every Daddy permission request for the current session and its descendants.
+`/grants` marks an approval-only gate as `AUTO` when Auto is on. This is a preview of the permission step; actual delegation still rechecks Auto and all other execution conditions. Genuine refusals remain `BLOCK`.
 Start Pi with `PI_DADDY_AUTO_MODE=1` for Auto ON, or `PI_DADDY_AUTO_MODE=0` (the default when unset) for Auto OFF.
 In the connected dashboard, press **a** to switch it on or off. `/grants auto on` and `/grants auto off` control the
 same session setting; `/grants` shows the current state and source. Reload preserves the session choice; a new

package/extensions/grants-command.ts

@@ -14,6 +14,7 @@ import type { childExecutionLimits } from "./dashboard-settings.ts";
  */
 
 import { renderExecutionControls } from "./execution-controls.ts";
+import { shouldSeekApproval } from "../src/kernel/approval.ts";
 import type { Capability } from "../src/kernel/resolve.ts";
 import type { ExecutorChoice } from "../src/executors/executor.ts";
 import type { Catalog } from "../src/kernel/catalog.ts";
@@ -31,6 +32,8 @@ export interface GrantsCommandContext {
   nativeSessionRoot?: string;
   executionLimits?: ReturnType<typeof childExecutionLimits>;
   autoModeStatus?: string;
+  /** Observed with the status line; presentation only, never an approval. */
+  autoModeEnabled?: boolean;
   /** Explicit owner mutation; the command parser itself holds no permission authority. */
   changeAutoMode?: (enabled: boolean) => Promise<string>;
   ownGrant: Capability[];
@@ -513,9 +516,17 @@ export const grantsCommand = {
         plan.ok && approval && approval.approved.length > 0
           ? `  (${approval.approved.map((c) => `${c} approved: ${approval.sources[c] ?? "?"}`).join("; ")})`
           : "";
+      const awaitingAuto =
+        ctx.grants.autoModeEnabled === true &&
+        !plan.ok &&
+        plan.refusal?.code === "GATED_UNAPPROVED" &&
+        shouldSeekApproval(plan.result);
+      const reason = awaitingAuto
+        ? `${plan.result!.gatedBlocked.join(", ")}: Auto supplies approval at dispatch; live state is rechecked`
+        : plan.reason;
       lines.push(
-        `    ${plan.ok ? "allow" : "BLOCK"}  ${name}  [${runtimeText}]` +
-          (plan.ok ? `  ${plan.effective.join(", ")}${because}` : ` — ${plan.reason}`),
+        `    ${plan.ok ? "allow" : awaitingAuto ? "AUTO" : "BLOCK"}  ${name}  [${runtimeText}]` +
+          (plan.ok ? `  ${plan.effective.join(", ")}${because}` : ` — ${reason}`),
       );
     }
     // R-48. The cap is fine; the SILENCE was not. An operator running `/grants` to answer "what can this

package/extensions/grants.ts

@@ -455,6 +455,12 @@ export default function (pi: ExtensionAPI, trustedSession?: GrantsSession) {
     handler: async (args, ctx) => {
       // Auto controls and emergency revoke-all need no definition acquisition; OFF must remain reachable.
       if (args.trim() !== "revoke --all" && args.trim().split(/\s+/)[0] !== "auto") await session.ensureDefinitions?.();
+      const autoView = await getDashboardControlState(session)
+        .then(({ auto }) => ({
+          autoModeEnabled: auto.enabled,
+          autoModeStatus: `${auto.enabled ? "ON" : "OFF"} (${auto.source}; current session permissions)`,
+        }))
+        .catch((error) => ({ autoModeEnabled: false, autoModeStatus: `unavailable: ${String(error)}` }));
       return grantsCommand.handler(args, {
         ...ctx,
         grants: {
@@ -488,9 +494,7 @@ export default function (pi: ExtensionAPI, trustedSession?: GrantsSession) {
             const { auto } = await setAutoApproval(session, enabled, "command");
             return `${auto.enabled ? "ON" : "OFF"} (${auto.source}; current session permissions)`;
           },
-          autoModeStatus: await getDashboardControlState(session)
-            .then(({ auto }) => `${auto.enabled ? "ON" : "OFF"} (${auto.source}; current session permissions)`)
-            .catch((error) => `unavailable: ${String(error)}`),
+          ...autoView,
           catalog: session.catalog,
           definitions: session.definitions,
           sessionApprovals: session.sessionApprovals,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-daddy",
-  "version": "0.49.2",
+  "version": "0.49.3",
   "description": "Capability governance for pi sub-agents: spawn Agent Skills (SKILL.md) definitions whose allowed-tools becomes a grant that can only narrow going down a delegation tree, enforced by pi's own --tools allowlist, with an append-only ledger.",
   "keywords": [
     "pi-package",