mirror of
https://bitbucket.org/siakitem/my-pi.git
synced 2026-10-26 10:45:22 +00:00
云服务部-叶林立
73f3117a7e
用仓库内 pi-hermes-memory 替换 hippo-memory-pi，清理 Hippo 在组合包中的
全部注入点。
移除 Hippo：
- 删除 hippo-memory-pi/ 与 config/hippo-memory-version。
- extensions/plugin-init.ts 只保留 CodeGraph 初始化目标与预检。
- install.sh / update.sh / uninstall.sh 移除 Hippo CLI 的安装、升级、卸载
与版本校验逻辑；uninstall.sh 同时删除仅服务于该提示的死代码 ask_yes_no。
- 删除 tests/hippo-extension.test.ts 与 tests/hippo-scripts.test.ts。
- tests/extension-load.test.ts 反转“不得加载 Hermes”的断言为必须加载，
并断言其排在 pi-compaction 之前。
接入 pi-hermes-memory：
- package.json 增加 file:./pi-hermes-memory 依赖、files 条目与加载入口；
加载顺序位于 pi-compaction 之前，否则 flushOnCompact 会被 pi-compaction
的 { cancel: true } 静默跳过。
- 六个记忆工具在 Tool Search 中常驻：memory_search 与 session_search 连同
context_tree_query 归入 memory-recall，memory_add / memory_replace /
memory_remove / skill_manage 归入 memory-management。常驻是必需的——注入
的 memory policy 会在普通工作中指示模型调用它们，schema 不可见会让模型
静默放弃而不是去 tool_search，同时常驻也保持请求前缀缓存稳定。
- bundleDefaultsVersion 由 2 升到 3；migrate-tool-search-settings.mjs 新增
上一版快照到当前版本的迁移路径，仍只迁移完整匹配的默认快照并保留自定义
配置。
- config/pi-permission-policy.jsonc 为六个工具设置 allow：它们只写扩展自己的
agent 目录数据、不触碰工作区，且 memory_search 每轮都可能被调用，落入
默认 ask 会产生每轮 AutoReview 往返。
依赖：
- pi-hermes-memory 的 devDependencies 由上游 ^0.80.2 等范围改为与根包一致的
精确版本。上游范围与根包 0.84.2 不兼容，会让 npm 在本目录嵌套安装第二套
Pi runtime（实测 229 MB），违反“不得在组合包内再安装一套 Pi runtime”的
纪律。
- 根 allowScripts 保持只有 better-sqlite3@12.11.1。hermes 的
better-sqlite3@13 运行时 dlopen 的是包内 N-API 预编译二进制
prebuilds/<platform>.node，npm 因 binding.gyp 推断出的 node-gyp rebuild
无需执行；实测删除 build/ 目录后仍正常工作。
文档：AGENTS.md 与 README.md 改写记忆章节，新增 pi-hermes-memory 开发约定，
替换文末的 Hippo 项目记忆块。
验证：根 12 个测试文件、pi-tool-search 的 typecheck/test/build、
pi-permission-system 的 typecheck/2569 测试、pi-hermes-memory 自带的 59 个
测试文件全部通过；隔离 Pi 环境联合加载无错误并生成 bundleDefaultsVersion 3；
npm install 幂等；迁移 helper 对 v2 快照迁移、对自定义配置保留。
144 lines
3.5 KiB
JSON
144 lines
3.5 KiB
JSON
{
|
|
"debugLog": false,
|
|
"permissionReviewLog": true,
|
|
"yoloMode": false,
|
|
"doublePressToConfirm": true,
|
|
|
|
// AutoReview is the default authority for deterministic review decisions.
|
|
"authorizerChain": ["auto-review"],
|
|
"autoReview": {
|
|
"enabled": true,
|
|
"provider": "openai-codex",
|
|
"model": "codex-auto-review",
|
|
"reasoning": "low",
|
|
"timeoutMs": 90000,
|
|
"includeBaselinePolicy": true
|
|
},
|
|
"analysis": {
|
|
"enabled": true,
|
|
"threshold": 500,
|
|
"retainAnalyzedBatches": 2,
|
|
"timeoutMs": 90000
|
|
},
|
|
|
|
"shellTools": {
|
|
"ssh_bash": {
|
|
"commandArgument": "command",
|
|
"decisionFloor": "ask"
|
|
}
|
|
},
|
|
|
|
"permission": {
|
|
// Unknown tools are reviewed instead of silently allowed.
|
|
"*": "ask",
|
|
"read": "allow",
|
|
"write": "allow",
|
|
"edit": "allow",
|
|
"grep": "allow",
|
|
"find": "allow",
|
|
"multi_grep": "allow",
|
|
"codegraph_explore": "allow",
|
|
"lsp_diagnostics": "allow",
|
|
"ctx_execute": "allow",
|
|
"ctx_execute_file": "allow",
|
|
"ctx_batch_execute": "allow",
|
|
"tool_search": "allow",
|
|
"ask_user_question": "allow",
|
|
|
|
// Hermes memory tools write only to the extension's own agent-directory
|
|
// stores and never touch the workspace, so they stay allowed. memory_search
|
|
// is invoked by the injected memory policy on most turns and must not
|
|
// trigger an AutoReview round trip each time.
|
|
"memory_search": "allow",
|
|
"session_search": "allow",
|
|
"memory_add": "allow",
|
|
"memory_replace": "allow",
|
|
"memory_remove": "allow",
|
|
"skill_manage": "allow",
|
|
|
|
"ssh_connect": "ask",
|
|
"ssh_cd": "ask",
|
|
"ssh_read": "ask",
|
|
"ssh_write": "ask",
|
|
"ssh_edit": "ask",
|
|
"ssh_find": "ask",
|
|
"ssh_grep": "ask",
|
|
|
|
"path": {
|
|
"*": "allow",
|
|
".git/*": "ask"
|
|
},
|
|
"bash": {
|
|
"*": "allow",
|
|
"rg*": "deny",
|
|
"grep*": "deny",
|
|
"find*": "deny",
|
|
"fd*": "deny",
|
|
"git *": "ask",
|
|
"git status*": "allow",
|
|
"git diff*": "allow",
|
|
"git log*": "allow",
|
|
"git show*": "allow",
|
|
"git rev-parse*": "allow",
|
|
"git ls-files*": "allow",
|
|
"git grep*": "deny",
|
|
"git branch": "allow",
|
|
"git branch --show-current*": "allow",
|
|
"git remote -v": "allow",
|
|
"git remote get-url*": "allow",
|
|
"npm install *": "ask",
|
|
"npm add *": "ask",
|
|
"npm uninstall *": "ask",
|
|
"npm update *": "ask",
|
|
"pnpm install *": "ask",
|
|
"pnpm add *": "ask",
|
|
"pnpm uninstall *": "ask",
|
|
"pnpm update *": "ask",
|
|
"bun install *": "ask",
|
|
"bun add *": "ask",
|
|
"bun uninstall *": "ask",
|
|
"bun update *": "ask",
|
|
"pip install *": "ask",
|
|
"pip3 install *": "ask",
|
|
"brew install *": "ask",
|
|
"brew uninstall *": "ask",
|
|
"rm *": "ask",
|
|
"/bin/rm *": "ask",
|
|
"rmdir *": "ask",
|
|
"/bin/rmdir *": "ask",
|
|
"unlink *": "ask",
|
|
"/usr/bin/unlink *": "ask",
|
|
"mv *": "ask",
|
|
"/bin/mv *": "ask",
|
|
"truncate *": "ask",
|
|
"dd *": "ask",
|
|
"chmod *": "ask",
|
|
"chown *": "ask",
|
|
"sudo *": "ask",
|
|
"su *": "ask",
|
|
"kill *": "ask",
|
|
"pkill *": "ask",
|
|
"diskutil *": "ask",
|
|
"security *": "ask",
|
|
"launchctl *": "ask",
|
|
"osascript *": "ask",
|
|
"open *": "ask",
|
|
"ssh *": "ask",
|
|
"scp *": "ask",
|
|
"sftp *": "ask",
|
|
"rsync *": "ask",
|
|
"curl *": "ask",
|
|
"wget *": "ask",
|
|
"printenv*": "ask"
|
|
},
|
|
"mcp": {
|
|
"*": "ask",
|
|
"mcp_status": "allow",
|
|
"mcp_list": "allow"
|
|
},
|
|
"skill": {
|
|
"*": "allow"
|
|
}
|
|
}
|
|
}
|