mirror of
https://bitbucket.org/siakitem/my-pi.git
synced 2026-10-26 10:45:22 +00:00
云服务部-叶林立
cdd91b3f8b
移除 pi-extension-codex-fast-mode：
- 删除整个扩展目录；同步清理根 package.json 的 files / pi.extensions /
dependencies 条目、package-lock.json、tests/extension-load.test.ts 断言
与文档章节。
- pi-minimal-footer 的 Fast on 渲染是该扩展的唯一消费者。扩展移除后 accent
分支不再有生产者，collectFooterStatusItems 简化为直接返回非空状态字符串，
去掉 FooterStatusItem 与 accent 标志，避免留下死代码。
移除 500 次裁决后的后台分析体系：
- 删除 analysis-agent.ts（192 行）与 ledger.ts（296 行），以及对应的
auto-review-runtime / auto-review-ledger 测试。
- runtime.ts 由 177 行收敛到 85 行：安装选项缩为 { service, config }；删除
handleAgentSettled 与 agent_settled 注册；保留 session_start / turn_start
（denial circuit breaker 属安全语义）/ session_shutdown。
- 删除 analysis 配置键：config、extension-config、config-schema、生成的
permissions.schema.json 与种子配置。
- 删除 reviewer 的 onDecision 回调（唯一消费者是 ledger）。
- 删除迁移机制 scripts/migrate-permission-policy.mjs、其测试与 update.sh 中
46 行 migrate_permission_policy 接线。种子部署保持“目标缺失才写入”，已存在
的 policy.jsonc 永不被覆盖。
AutoReview 模型改为纯配置驱动：
- 删除 DEFAULT_PROVIDER / DEFAULT_MODEL 常量与 findCodexTemplate 合成逻辑；
model.ts 由 65 行收敛到 48 行。
- provider / model 任一缺失时返回新增失败类别 model-unconfigured 并 defer 到
人工审批；provider 未注册或模型未发布同样 defer。
- reasoning 不再有默认常量，完全由配置决定。
- session_start 在 auto-review 已列入 authorizerChain 且 provider/model 未配齐
时 ui.notify 提示一次，避免不使用 AutoReview 的用户被打扰。
- 种子 autoReview 只保留 enabled，provider/model/reasoning 由用户按本机实际
可用的模型填写。
破坏性变更：analysis 键已从 strictObject schema 删除，任何仍带该键的
policy.jsonc 会使整份配置被拒（fail-closed 到全 ask）。这是刻意的变更，已由
config-loader 测试固定，防止将来无声放宽。
测试：
- 新增 auto-review-model.test.ts（7 例），覆盖此前完全缺失的模型解析：真实
命中、未配置、provider 未知、模型未发布，以及不再合成替代模型。
- 重写 auto-review-runtime.test.ts（6 例）：authorizer 注册、未配置时提示
一次、已配置 / disabled / 无 UI / 不在 chain 时静默。
- config-loader.test.ts 新增 2 例：带 analysis 的旧配置被拒且 fail-closed、
autoReview 逐字段合并。
- composition-root.test.ts 的 EXPECTED_HANDLERS 移除 agent_settled。
文档：AGENTS.md、README.md、pi-permission-system 的 README / CHANGELOG /
configuration.md / architecture.md / auto-review UPSTREAM.md。
验证：pi-permission-system 的 typecheck、2577 个测试与 build 全部通过；根 50
个测试通过；schema 重新生成无漂移；新种子通过 schema 校验；5 个脚本 sh -n
通过；git diff --check 无空白问题。未安装 shellcheck；未执行真实 pi install /
update（属外部写操作）。
135 lines
3.4 KiB
JSON
135 lines
3.4 KiB
JSON
{
|
|
"debugLog": false,
|
|
"permissionReviewLog": true,
|
|
"yoloMode": false,
|
|
"doublePressToConfirm": true,
|
|
|
|
// AutoReview is the default authority for deterministic review decisions.
|
|
// Automatic review stays inactive until you name both a provider and a model
|
|
// here; until then every ask goes to the human permission prompt.
|
|
"authorizerChain": ["auto-review"],
|
|
"autoReview": {
|
|
"enabled": true
|
|
},
|
|
|
|
"shellTools": {
|
|
"ssh_bash": {
|
|
"commandArgument": "command",
|
|
"decisionFloor": "ask"
|
|
}
|
|
},
|
|
|
|
"permission": {
|
|
// Unknown tools are reviewed instead of silently allowed.
|
|
"*": "ask",
|
|
"read": "allow",
|
|
"write": "allow",
|
|
"edit": "allow",
|
|
"grep": "allow",
|
|
"find": "allow",
|
|
"multi_grep": "allow",
|
|
"codegraph_explore": "allow",
|
|
"lsp_diagnostics": "allow",
|
|
"ctx_execute": "allow",
|
|
"ctx_execute_file": "allow",
|
|
"ctx_batch_execute": "allow",
|
|
"tool_search": "allow",
|
|
"ask_user_question": "allow",
|
|
|
|
// Hermes memory tools write only to the extension's own agent-directory
|
|
// stores and never touch the workspace, so they stay allowed. memory_search
|
|
// is invoked by the injected memory policy on most turns and must not
|
|
// trigger an AutoReview round trip each time.
|
|
"memory_search": "allow",
|
|
"session_search": "allow",
|
|
"memory_add": "allow",
|
|
"memory_replace": "allow",
|
|
"memory_remove": "allow",
|
|
"skill_manage": "allow",
|
|
|
|
"ssh_connect": "ask",
|
|
"ssh_cd": "ask",
|
|
"ssh_read": "ask",
|
|
"ssh_write": "ask",
|
|
"ssh_edit": "ask",
|
|
"ssh_find": "ask",
|
|
"ssh_grep": "ask",
|
|
|
|
"path": {
|
|
"*": "allow",
|
|
".git/*": "ask"
|
|
},
|
|
"bash": {
|
|
"*": "allow",
|
|
"rg*": "deny",
|
|
"grep*": "deny",
|
|
"find*": "deny",
|
|
"fd*": "deny",
|
|
"git *": "ask",
|
|
"git status*": "allow",
|
|
"git diff*": "allow",
|
|
"git log*": "allow",
|
|
"git show*": "allow",
|
|
"git rev-parse*": "allow",
|
|
"git ls-files*": "allow",
|
|
"git grep*": "deny",
|
|
"git branch": "allow",
|
|
"git branch --show-current*": "allow",
|
|
"git remote -v": "allow",
|
|
"git remote get-url*": "allow",
|
|
"npm install *": "ask",
|
|
"npm add *": "ask",
|
|
"npm uninstall *": "ask",
|
|
"npm update *": "ask",
|
|
"pnpm install *": "ask",
|
|
"pnpm add *": "ask",
|
|
"pnpm uninstall *": "ask",
|
|
"pnpm update *": "ask",
|
|
"bun install *": "ask",
|
|
"bun add *": "ask",
|
|
"bun uninstall *": "ask",
|
|
"bun update *": "ask",
|
|
"pip install *": "ask",
|
|
"pip3 install *": "ask",
|
|
"brew install *": "ask",
|
|
"brew uninstall *": "ask",
|
|
"rm *": "ask",
|
|
"/bin/rm *": "ask",
|
|
"rmdir *": "ask",
|
|
"/bin/rmdir *": "ask",
|
|
"unlink *": "ask",
|
|
"/usr/bin/unlink *": "ask",
|
|
"mv *": "ask",
|
|
"/bin/mv *": "ask",
|
|
"truncate *": "ask",
|
|
"dd *": "ask",
|
|
"chmod *": "ask",
|
|
"chown *": "ask",
|
|
"sudo *": "ask",
|
|
"su *": "ask",
|
|
"kill *": "ask",
|
|
"pkill *": "ask",
|
|
"diskutil *": "ask",
|
|
"security *": "ask",
|
|
"launchctl *": "ask",
|
|
"osascript *": "ask",
|
|
"open *": "ask",
|
|
"ssh *": "ask",
|
|
"scp *": "ask",
|
|
"sftp *": "ask",
|
|
"rsync *": "ask",
|
|
"curl *": "ask",
|
|
"wget *": "ask",
|
|
"printenv*": "ask"
|
|
},
|
|
"mcp": {
|
|
"*": "ask",
|
|
"mcp_status": "allow",
|
|
"mcp_list": "allow"
|
|
},
|
|
"skill": {
|
|
"*": "allow"
|
|
}
|
|
}
|
|
}
|