gotgenes/pi-packages pi-permission-system-v13.0.0 on GitHub

13.0.0 (2026-06-12)

A relative bash path token now also matches absolute allowlist rules naming the same file, resolved against the effective directory after literal cd commands. A token under a config like path: { "*": "ask", "/workspace/project/*": "allow" } moves from ask to allow. Tokens after a non-literal cd (e.g. cd "$DIR") stay conservative and match only their literal form.
When Pi's working directory is known, a relative path input now also matches absolute allowlist rules naming the same file. A config like path: { "*": "ask", "/workspace/project/*": "allow" } moves a relative src/App.jsx from ask to allow. To keep tighter control, narrow the allowlist patterns or add an explicit path deny for the sensitive paths.

add alias-aware evaluateAnyValue (#393) (2b7d240)
add cd-aware pathRuleCandidates to BashProgram (#393) (102a491)
add path-policy value derivation (#393) (d34e57f)
add resolvePathPolicy resolver method (#393) (8ec81da)
match relative path inputs against absolute allowlists (#393) (6d0c564)
normalize path inputs to cwd-aware policy values (#393) (3c2784f)
resolve bash path tokens with cd-aware policy values (#393) (7bcdbe7)

document cwd-aware path policy matching (#393) (8ab53a2)
pi-permission-system: update Development section to current scripts and tooling (ebda301)