SikongJueluo
d91ae12a55
- emit a non-blocking ai-bash-judge auto-allowed notify with the judge reason whenever Enforce authority grants an ask without a dialog - raise reason and focus caps from 180/120 to 600/240 code points so ordinary model reasons wrap completely instead of ending mid-sentence - treat the cap as a pathological-output guard, not a display budget - cover sanitization, disabled paths, and completeness in tests
pi-extensions
English | 简体中文
Personal extensions for the pi coding agent, focused on Bash permissions: unwrap, inspect, and re-adjudicate commands before they run.
Packages
| Package | npm | Description |
|---|---|---|
| pi-permission-ai-judge | @sikongjueluo/pi-permission-ai-judge | AI judge — a model rules allow / deny / defer on each pending Bash ask; shadow logs only, enforce auto-approves |
| pi-permission-inner-cmd | @sikongjueluo/pi-permission-inner-cmd | Unwraps transparent Bash wrappers (timeout, time, …) and authorizes the inner command |
Install
Per package from npm:
pi install npm:@sikongjueluo/pi-permission-ai-judge
pi install npm:@sikongjueluo/pi-permission-inner-cmd
Or the whole repo via git (both extensions mount through the root package.json pi.extensions manifest):
pi install git:github.com/SikongJueluo/pi-extensions
Either way, effective in any directory. Prerequisites:
- Enable
@gotgenes/pi-permission-system≥ 32 - Add the extensions to the authorizer chain — order is consultation order, UI sessions only:
// ~/.pi/agent/extensions/pi-permission-system/config.json
{ "authorizerChain": ["inner-cmd", "ai-bash-judge"] }
See the ai-judge README for modes, judge model, and guardrails.
Development
pnpm workspace, TypeScript + vitest.
pnpm install
pnpm check # tsc --noEmit
pnpm test # vitest run
Design decisions live in docs/adr/.
Release
Bump the version in packages/<pkg>/package.json, commit, then tag and push:
jj tag set @sikongjueluo/pi-permission-ai-judge@0.1.0 -r <rev>
jj git push # pushes the bookmark and new tags
The publish workflow verifies the tag matches the package.json name and version, runs check and tests, then publishes to npm with provenance. Requires the NPM_TOKEN repository secret (granular token with publish rights on the @sikongjueluo scope, or a classic automation token).
License
GPL-3.0