feat: delegate external read-only tools to auto-review

This commit is contained in:
云服务部-叶林立
2026-08-19 16:48:45 +08:00
parent 3507f85363
commit 9b2ec36a2d
8 changed files with 30 additions and 26 deletions
+1 -1
View File
@@ -106,7 +106,7 @@ Transcript rendering uses separate 10k-token message and tool budgets with per-e
- Model, authentication, timeout, provider, or response-format failures defer to the normal human prompt.
- Unexpected internal review failures also defer to the human prompt instead of escaping into the permission gate.
- Three consecutive denials, or ten denials in the latest fifty reviews, open a circuit breaker until the next Pi turn.
- my-pi's maintained pi-permission-system keeps every `path` request inside the delegation envelope. For `external_directory`, only the built-in `read` tool may accept an auto-review `allow`; write, edit, bash, unknown tools, and undetermined surfaces are downgraded to the normal human prompt.
- my-pi's maintained pi-permission-system keeps every `path` request inside the delegation envelope. For `external_directory`, built-in read-only path tools (`read`, `find`, `grep`, `ls`) may accept an auto-review `allow`; write, edit, bash, unknown tools, and undetermined surfaces are downgraded to the normal human prompt.
### Diagnostics