pi-helper-core 0.1.1 → 0.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +6 -0
- package/README.md +7 -2
- package/package.json +1 -1
- package/src/core/safety.ts +5 -1
package/CHANGELOG.md
CHANGED
|
@@ -6,6 +6,12 @@ All notable changes are documented here. The format follows
|
|
|
6
6
|
|
|
7
7
|
## [Unreleased]
|
|
8
8
|
|
|
9
|
+
## [0.1.2] - 2026-09-21
|
|
10
|
+
|
|
11
|
+
### Fixed
|
|
12
|
+
|
|
13
|
+
- `classifyCommand` no longer treats `--frozen`, `--locked`, or `--list` as read-only flags. They only pin inputs or request a listing, so a state-changing command they qualify (`uv sync --frozen`, `cargo build --locked`) was reported as `read`, which would let an environment mutation run without the opt-in its risk class requires. Only `--check`, `--dry-run`, and `--collect-only` remain universal safe overrides.
|
|
14
|
+
|
|
9
15
|
## [0.1.1] - 2026-09-21
|
|
10
16
|
|
|
11
17
|
### Changed
|
package/README.md
CHANGED
|
@@ -104,6 +104,11 @@ npm run check # test + typecheck + format:check + pack-check
|
|
|
104
104
|
|
|
105
105
|
## 상태
|
|
106
106
|
|
|
107
|
-
- `0.1.
|
|
107
|
+
- `0.1.2`, npm에 배포됨(`latest`).
|
|
108
108
|
- TypeScript 소스를 그대로 export합니다(`exports: "./src/index.ts"`). pi 확장 생태계가 TS를 직접 로드하므로 빌드 단계를 두지 않습니다.
|
|
109
|
-
- 소비자: `pi-rust-helper`(파일럿)
|
|
109
|
+
- 소비자: `pi-rust-helper`(파일럿), `pi-ros-helper`, `pi-python-helper` 모두 `^0.1.1`을 의존한다(2026-09-21).
|
|
110
|
+
- `pi-python-helper`: envelope/runner/TDD/번들/증거/staleness/selection 이관 완료.
|
|
111
|
+
- `pi-ros-helper`: envelope/runner/TDD/증거 이관 완료.
|
|
112
|
+
- 알려진 seam 부족분은 `pi-rust-helper/DEVELOPMENT-PLAN.md`의 "R1 실현" 참고:
|
|
113
|
+
범용 안전 override(`--frozen`/`--locked`) 과다는 0.1.2에서 수정됨,
|
|
114
|
+
`summarizeValidation`의 고정 단계 형태, 바이너리 mtime staleness·CTest 타겟 선별 미지원은 남음.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "pi-helper-core",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.2",
|
|
4
4
|
"description": "Ecosystem-neutral core for pi language helper extensions: result envelope, bounded command runner, risk classification, completion gates, artifact staleness, and test selection",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "Apache-2.0",
|
package/src/core/safety.ts
CHANGED
|
@@ -31,7 +31,11 @@ export interface SafetyRules {
|
|
|
31
31
|
export const UNIVERSAL_SAFE_OVERRIDES: RegExp[] = [
|
|
32
32
|
/\bgit\s+(?:diff|log|status|show|rev-parse|ls-files|cat-file|describe|rev-list)\b/,
|
|
33
33
|
/\bgit\s+branch\s+--show-current\b/,
|
|
34
|
-
|
|
34
|
+
// Only flags that describe the command itself (`--check`, `--dry-run`,
|
|
35
|
+
// `--collect-only`) make it read-only. `--frozen`/`--locked`/`--list` merely
|
|
36
|
+
// pin inputs or request a listing, so a state-changing command they qualify
|
|
37
|
+
// (for example `uv sync --frozen`) must keep its adapter-classified risk.
|
|
38
|
+
/(?:^|\s)--(?:check|dry-run|collect-only)\b/,
|
|
35
39
|
];
|
|
36
40
|
|
|
37
41
|
/**
|