gotgenes/pi-packages pi-permission-system-v23.0.0 on GitHub

23.0.0 (2026-07-24)

pi-permission-system: path values embedded in --opt=value bash tokens are now extracted and gated by the path and external_directory surfaces. Previously they were invisible to both, so a permissive bash rule such as grep * allowed them. Add an allow pattern on external_directory or path for an intended target.
pi-permission-system: bash commands referencing existing bare-named files or in-project symlinks are now gated by path rules (matched against the canonical, symlink-resolved form) and by external_directory when they resolve outside the working directory. Previously a permissive bash allow rule such as cat * bypassed both. A bare token naming no file is still dropped, so git status-style commands are unaffected. To restore prior behavior for an intended target, add an allow pattern on external_directory (for outside-CWD paths) or on path.

pi-permission-system: classify path values embedded in --opt=value tokens (0be19fd), closes #645
pi-permission-system: gate existing bare-named files and symlinks in bash commands (9467858), closes #645

pi-permission-system: update architecture and skill docs for probe-based path candidacy (90c402d), closes #645