pi-seatbelt 0.2.0 → 0.3.0

package/README.md

@@ -44,13 +44,16 @@ packages as peers.
 ## Three modes, one key
 
 Press the mode key to cycle: `alt+b` by default, or any key you set (see
-`shortcut` under [Configure](#configure)). The status bar always shows
-where you are: `perm:all`, `perm:auto`, `perm:off`. The choice persists.
+`shortcut` under [Configure](#configure)). Or switch without the keyboard:
+`/seatbelt:mode` cycles, `/seatbelt:mode auto` sets a mode directly. The
+status bar always shows
+where you are: `seatbelt:fastened 🔒` (green), `seatbelt:auto 🤖` (yellow),
+`seatbelt:unfastened 💀` (red). The choice persists.
 
-- `all`: every chain asks once. The default.
+- `fastened`: every chain asks once. The default.
 - `auto`: no dialog unless something is `DANGEROUS`. Labels decide what runs
   silently, so pair it with a good policy file.
-- `off`: no gating, no classifier calls, no cost.
+- `unfastened`: no gating, no classifier calls, no cost.
 
 Headless modes (print, JSON) have no dialogs: only `safe` calls auto-run,
 everything else is blocked with a reason.
@@ -91,7 +94,7 @@ built-in regex fallback labels calls and the policy file is not consulted.
 {
   "model": "litellm/DeepSeek-V4-Flash",
   "timeoutMs": 20000,
-  "mode": "all",
+  "mode": "fastened",
   "shortcut": "alt+b",
   "tools": ["bash", "write", "edit", "mcp__slack__*"]
 }
@@ -102,8 +105,16 @@ built-in regex fallback labels calls and the policy file is not consulted.
   whole server, `*` for everything). Non-bash calls are shown to the
   labeller as tool name plus arguments, truncated to 500 characters.
 - `shortcut`: the key that cycles the permission modes, as a pi key id
-  (`"alt+b"`, `"ctrl+shift+p"`, `"f9"`). Read at startup, so a change
-  needs a new session. Anything malformed falls back to `alt+b`.
+  (`"alt+b"`, `"ctrl+shift+p"`, `"f9"`, `"super+b"` for ⌘ on macOS).
+  Read at startup, so a change needs a new session. Anything malformed
+  falls back to `alt+b`.
+  Some combos need the terminal to report modifiers distinctly: through
+  tmux without `set -s extended-keys on`, `ctrl+shift+b` arrives as plain
+  `ctrl+b` (cursor-left) — `alt`- and `F`1–`F12` keys work everywhere.
+  `super` (⌘) needs a terminal with Kitty keyboard protocol support
+  (Ghostty, kitty, WezTerm) and is usually intercepted by the terminal or
+  OS before it reaches pi. If a key combo does not work, `/seatbelt:mode`
+  always does.
 - `model`: the labeller. Pick one with `/seatbelt`, or pass it directly:
   `/seatbelt litellm/gpt-4o-mini`. Fast and cheap works well; the prompt
   is tiny. Without a model, or if the call fails or times out, the regex

package/core.ts

@@ -1,6 +1,6 @@
 export type Danger = "safe" | "caution" | "dangerous";
 
-export const PERMISSION_MODES = ["all", "auto", "off"] as const;
+export const PERMISSION_MODES = ["fastened", "auto", "unfastened"] as const;
 export type PermissionMode = (typeof PERMISSION_MODES)[number];
 
 export function isPermissionMode(value: unknown): value is PermissionMode {
@@ -10,7 +10,7 @@ export function isPermissionMode(value: unknown): value is PermissionMode {
 }
 
 export function normalizeMode(value: unknown): PermissionMode {
-	return isPermissionMode(value) ? value : "all";
+	return isPermissionMode(value) ? value : "fastened";
 }
 
 export function nextMode(mode: PermissionMode): PermissionMode {

package/index.ts

@@ -20,10 +20,10 @@
  *
  * Permission modes (cycled with the configured shortcut key, default alt+b,
  * shown in the status bar):
- * - "all" (default): one approval dialog per chain of gated tool calls.
+ * - "fastened" (default): one approval dialog per chain of gated tool calls.
  * - "auto": chains without a dangerous call run without asking; a dangerous
  *   call still shows the approval dialog.
- * - "off": no approval requests at all.
+ * - "unfastened": no approval requests at all.
  * In headless modes (no UI) only "safe" calls are auto-allowed.
  */
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
@@ -41,6 +41,7 @@ import {
 	formatSingle,
 	normalizeMode,
 	normalizeShortcut,
+	isPermissionMode,
 	nextMode,
 	plainStyle,
 	withPolicy,
@@ -63,7 +64,7 @@ contains only this header, the built-in defaults apply unchanged.
 
 const CONFIG_TEMPLATE = {
 	timeoutMs: 20000,
-	mode: "all",
+	mode: "fastened",
 	shortcut: DEFAULT_SHORTCUT,
 	tools: ["bash"],
 };
@@ -238,7 +239,7 @@ async function approveBatch(
 	ctx: ExtensionContext,
 ): Promise<void> {
 	const mode = getCurrentMode();
-	if (mode === "off") return;
+	if (mode === "unfastened") return;
 	const assessments = await classifyCalls(entries, taskContext, ctx);
 	const displays = entries.map((e) => describeCall(e.tool, e.args));
 	let isAllowed: boolean;
@@ -277,7 +278,7 @@ export default function (pi: ExtensionAPI) {
 			)
 			.map((c) => ({ id: c.id, tool: c.name, args: c.arguments ?? {} }));
 		if (calls.length === 0) return;
-		if (getCurrentMode() === "off") return;
+		if (getCurrentMode() === "unfastened") return;
 		const taskContext = message.content
 			.filter((c): c is { type: "text"; text: string } => c.type === "text")
 			.map((c) => c.text)
@@ -288,7 +289,7 @@ export default function (pi: ExtensionAPI) {
 
 	pi.on("tool_call", async (event, ctx) => {
 		if (!matchesTool(getGatedTools(), event.toolName)) return undefined;
-		if (getCurrentMode() === "off") return undefined;
+		if (getCurrentMode() === "unfastened") return undefined;
 		if (!decisions.has(event.toolCallId)) {
 			// Nested or otherwise unseen call (for example a codemode script): approve it on its own
 			const entry: GatedCall = { id: event.toolCallId, tool: event.toolName, args: getCallArgs(event.input) };
@@ -355,20 +356,49 @@ export default function (pi: ExtensionAPI) {
 	});
 
 	const MODE_HINTS = {
-		all: "every chain of gated tool calls needs one approval",
+		fastened: "every chain of gated tool calls needs one approval",
 		auto: "auto-approve unless a call is dangerous",
-		off: "no approval requests",
+		unfastened: "no approval requests",
 	} satisfies Record<PermissionMode, string>;
 
+	// Status-bar wording: gated (fastened), no gating (unfastened), the
+	// labeller decides what runs (auto).
+	const MODE_LABELS = {
+		fastened: "fastened 🔒",
+		auto: "auto 🤖",
+		unfastened: "unfastened 💀",
+	} satisfies Record<PermissionMode, string>;
+
+	const MODE_COLOR = {
+		fastened: "success",
+		auto: "warning",
+		unfastened: "error",
+	} satisfies Record<PermissionMode, "success" | "warning" | "error">;
+
 	function updateStatus(ctx: ExtensionContext): void {
 		if (!ctx.hasUI) return;
 		const mode = getCurrentMode();
-		const color = mode === "all" ? "accent" : mode === "auto" ? "success" : "dim";
-		const text =
-			ctx.mode === "tui" ? ctx.ui.theme.fg(color, `perm:${mode}`) : `perm:${mode}`;
+		const label = `seatbelt:${MODE_LABELS[mode]}`;
+		const text = ctx.mode === "tui" ? ctx.ui.theme.fg(MODE_COLOR[mode], label) : label;
 		ctx.ui.setStatus("seatbelt", text);
 	}
 
+	pi.registerCommand("seatbelt:mode", {
+		description: "Switch seatbelt mode (fastened, auto, unfastened); no argument cycles",
+		handler: async (args, ctx) => {
+			const wanted = args.trim();
+			if (wanted && !isPermissionMode(wanted)) {
+				ctx.ui.notify(`Unknown mode: ${wanted}. Use fastened, auto, or unfastened.`, "error");
+				return;
+			}
+			// Safe cast: wanted is non-empty and passed isPermissionMode above.
+			const mode = (wanted || nextMode(getCurrentMode())) as PermissionMode;
+			writeConfig({ ...readConfig(), mode });
+			updateStatus(ctx);
+			ctx.ui.notify(`Seatbelt: ${mode} (${MODE_HINTS[mode]})`, "info");
+		},
+	});
+
 	pi.on("session_start", (_event, ctx) => {
 		updateStatus(ctx);
 		if (hasSeededFreshConfig && ctx.hasUI) {
@@ -385,7 +415,7 @@ export default function (pi: ExtensionAPI) {
 		ExtensionAPI["registerShortcut"]
 	>[0];
 	pi.registerShortcut(shortcut, {
-		description: "Cycle seatbelt mode (all, auto, off)",
+		description: "Cycle seatbelt mode (fastened, auto, unfastened)",
 		handler: (ctx) => {
 			const mode = nextMode(getCurrentMode());
 			writeConfig({ ...readConfig(), mode });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-seatbelt",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "A safe, ergonomic permission system for pi: one approval per chain, danger labels, your rules.",
   "keywords": [
     "pi-package",

package/smoke.mjs

@@ -8,18 +8,30 @@ import {
 	formatSingle,
 	normalizeMode,
 	normalizeShortcut,
+	isPermissionMode,
 	nextMode,
 	withPolicy,
 } from "./core.ts";
 
 // permission modes
-assert.equal(normalizeMode(undefined), "all");
+assert.equal(normalizeMode(undefined), "fastened");
+assert.equal(normalizeMode("fastened"), "fastened");
 assert.equal(normalizeMode("auto"), "auto");
-assert.equal(normalizeMode("off"), "off");
-assert.equal(normalizeMode("nonsense"), "all");
-assert.equal(nextMode("all"), "auto");
-assert.equal(nextMode("auto"), "off");
-assert.equal(nextMode("off"), "all");
+assert.equal(normalizeMode("unfastened"), "unfastened");
+// pre-rename values are no longer valid and fall back to the default
+assert.equal(normalizeMode("all"), "fastened");
+assert.equal(normalizeMode("off"), "fastened");
+assert.equal(normalizeMode("nonsense"), "fastened");
+assert.equal(nextMode("fastened"), "auto");
+assert.equal(nextMode("auto"), "unfastened");
+assert.equal(nextMode("unfastened"), "fastened");
+assert.ok(isPermissionMode("fastened"));
+assert.ok(isPermissionMode("auto"));
+assert.ok(isPermissionMode("unfastened"));
+assert.ok(!isPermissionMode("all"));
+assert.ok(!isPermissionMode("off"));
+assert.ok(!isPermissionMode("nonsense"));
+assert.ok(!isPermissionMode(undefined));
 
 // shortcut normalization
 assert.equal(normalizeShortcut(undefined), "alt+b");