25.0.0 (2026-08-11)
⚠ BREAKING CHANGES
- pi-permission-system: a bash command referencing
$HOMEor${HOME}now reaches theexternal_directorygate whether or not the target exists, so a policy withexternal_directory: {"*": "ask"}prompts for commands that previously ran silently. Allow the directory explicitly to restore the old behavior — e.g."external_directory": {"~/.cargo/registry/*": "allow"}. The token shown in prompts, review-log entries, and derived session-approval patterns is now the expanded path rather than the$HOME/...spelling; this makes the prompt agree with the approval pattern, which was already derived from the expanded form.