admin/my-pi
1
0
Fork 0
mirror of https://bitbucket.org/siakitem/my-pi.git synced 2026-10-26 18:55:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: 组合包配置以包内 config/ 为唯一来源，并新增受保护写入人工审批

Browse Source 
配置统一：权限策略、硬防御、Tool Search、提示词封面以及新迁入的
RTK、pi-compaction、pi-worktree、pi-hermes-memory 配置全部由扩展
直接读取已安装组合包内的 config/，pi install / pi update 即完成部署；
删除 rebuild-bundle-config.mjs 与 bundle-manifest.json，my-pi/ 只保留
日志与缓存。update.sh 成功升级后将默认 git 来源的已安装副本
reset 回发布版本。AGENTS.md 新增「组合包配置原则」。

脚本整合：search_config.sh / ssh_config.sh 合并为 configure.sh
search|ssh；install.sh / update.sh 共享函数抽到 scripts/lib.sh，远程
安装器改为先下载到临时文件再执行，下载失败可被检测。

权限：hard-guards 新增 protectedWrites，写入 Pi 凭据/设置、已安装
组合包与扩展目录、pi-ssh 凭据库时一律人工确认（跳过 AutoReview、
yolo 与 Session grant，无 UI 时拒绝）；放行 ls、LSP 查询、ctx 只读、
web_search、Chrome 只读与 git 只读命令，skill_manage 改为 ask。

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
This commit is contained in:
云服务部-叶林立
2026-10-20 01:05:31 -07:00
co-authored by Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
parent a0ee9389c7
commit 2aa1be0b54
105 changed files with 2337 additions and 1413 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pi-permission-system/src/config-paths.ts
+16 -21
View File
@@ -1,37 +1,41 @@
import { join } from "node:path";
import { fileURLToPath } from "node:url";
const EXTENSION_ID = "pi-permission-system";
/**
* Bundle-owned config tree under the agent directory: install.sh / update.sh
* delete and rebuild `my-pi/` wholesale on every run, so policy, hard guards,
* and logs all live beneath it. Files at the former
* `extensions/pi-permission-system/` location are ignored — never migrated.
* Bundle-level `config/` is the single source of truth for policy and hard
* guards: paths resolve relative to this source file so the installed bundle
* is read directly, with no deployment, seeding, or migration into the agent
* dir. Only disposable runtime state (logs) stays under `<agentDir>/my-pi/`.
*/
const BUNDLE_CONFIG_DIR = "my-pi";
const BUNDLE_CONFIG_DIR = fileURLToPath(new URL("../../config", import.meta.url));
const BUNDLE_MANAGED_DIR = "my-pi";
const BUNDLE_PERMISSION_DIR = "permission-system";
export const DEBUG_LOG_FILENAME = `${EXTENSION_ID}-debug.jsonl`;
export const REVIEW_LOG_FILENAME = `${EXTENSION_ID}-permission-review.jsonl`;
/**
* Bundle-owned runtime directory under the agent dir — logs only. Stale files
* left here from earlier deployments are ignored, never migrated.
*/
export function getGlobalConfigDir(agentDir: string): string {
return join(agentDir, BUNDLE_CONFIG_DIR, BUNDLE_PERMISSION_DIR);
return join(agentDir, BUNDLE_MANAGED_DIR, BUNDLE_PERMISSION_DIR);
}
export function getGlobalConfigPath(agentDir: string): string {
return join(getGlobalConfigDir(agentDir), "policy.jsonc");
export function getGlobalConfigPath(): string {
return join(BUNDLE_CONFIG_DIR, "pi-permission-policy.jsonc");
}
export function getHardGuardConfigPath(agentDir: string): string {
return join(getGlobalConfigDir(agentDir), "hard-guards.jsonc");
export function getHardGuardConfigPath(): string {
return join(BUNDLE_CONFIG_DIR, "pi-permission-hard-guards.jsonc");
}
export function getGlobalLogsDir(agentDir: string): string {
return join(getGlobalConfigDir(agentDir), "logs");
}
/**
* Directory holding project-scoped custom agent definition files.
*
@@ -44,12 +48,3 @@ export function getGlobalLogsDir(agentDir: string): string {
export function getProjectAgentsDir(cwd: string): string {
return join(cwd, ".pi", "agents");
}
export function getLegacyGlobalPolicyPath(agentDir: string): string {
return join(agentDir, "pi-permissions.jsonc");
}
export function getLegacyExtensionConfigPath(extensionRoot: string): string {
return join(extensionRoot, "config.json");
}