feat(nono): establish dynamic permissions baseline
This commit is contained in:
@@ -24,9 +24,7 @@
|
||||
"globalSymlinks": {
|
||||
"dictate": "extensions/dictate",
|
||||
"effort-controls": "extensions/effort-controls",
|
||||
"pi-workflow": "extensions/pi-workflow",
|
||||
"prompt-snippets": "extensions/prompt-snippets",
|
||||
"update": "extensions/update"
|
||||
"prompt-snippets": "extensions/prompt-snippets"
|
||||
},
|
||||
"globalLocalPackages": {}
|
||||
}
|
||||
|
||||
Generated
+208
@@ -0,0 +1,208 @@
|
||||
{
|
||||
"version": 1,
|
||||
"policy": {
|
||||
"settingsAuthority": "$HOME/.pi/agent/settings.json",
|
||||
"linkAuthority": "config/pi-links.json",
|
||||
"activationRule": "Every selected source must be locked; any blocked entry prevents normal-profile activation."
|
||||
},
|
||||
"packages": [
|
||||
{
|
||||
"name": "@sovorn/pi-profile",
|
||||
"source": "npm:@sovorn/pi-profile",
|
||||
"installed": {
|
||||
"version": "0.6.0",
|
||||
"integrity": "sha512-S9hfncCw7qBDj2cz/HYC9q+P76GvqY2K8cmMGARDIN6fxvLxH8w8P8JQ2nFRm4rCNtadVGR9HAcaqC33TFNGFg=="
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The settings source omits an immutable version."
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "@smarzban/pi-editor",
|
||||
"source": "npm:@smarzban/pi-editor",
|
||||
"installed": {
|
||||
"version": "0.1.0",
|
||||
"integrity": "sha512-pewcNufszrGzOezewywVtPuDwexk3JyEcenGXLtvH7ewJ6n9bkzTs0LMjj9ZzwUQPrDQPNX06NolppXCKQ8vXw=="
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The settings source omits an immutable version."
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "pi-background-tasks",
|
||||
"source": "npm:pi-background-tasks@latest",
|
||||
"installed": {
|
||||
"version": "2.4.2",
|
||||
"integrity": "sha512-KDH2yv5yKnc2slUNMSsysVZleriuv8tbhe5L+AeplVAfijQsECN5YAWOz5TDbStCXLdJC15GaUQ1P87BXGk5Hg=="
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The settings source uses the floating latest tag."
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "pi-ask",
|
||||
"source": "ssh://git@git.jb.codes:7722/jb/pi-ask.git",
|
||||
"installed": {
|
||||
"revision": "80da3078281f839f075bd63bf221ddd0de2cbd86"
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The settings Git source omits an immutable revision."
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "nolabs-ai/pi",
|
||||
"source": "/home/jb/.config/nono/packages/nolabs-ai/pi",
|
||||
"installed": {
|
||||
"version": "0.2.0",
|
||||
"registryRef": "refs/tags/pi-v0.2.0",
|
||||
"packageDigest": "2cfc2bd06b4ee1b90550e40e250609a97145933daac858554d9785b13710272e",
|
||||
"profileDigest": "26f87eca993933cd6d3d059d3d78a7545c488e6a5986224594f0694f40b9a764",
|
||||
"lockMetadata": {
|
||||
"path": "$HOME/.config/nono/packages/lockfile.json",
|
||||
"sha256": "131a7bc20698cc55130897f22027e0ec16bb423637d5d96b860374df9095a89a",
|
||||
"signerIdentity": "https://github.com/nolabs-ai/nono-packs/.github/workflows/publish-pi.yml@refs/tags/pi-v0.2.0",
|
||||
"repository": "nolabs-ai/nono-packs",
|
||||
"workflow": ".github/workflows/publish-pi.yml",
|
||||
"rekorLogIndex": 2305195909
|
||||
}
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The installed nono lock metadata records pinned=false."
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "@zhcsyncer/pi-glance",
|
||||
"source": "npm:@zhcsyncer/pi-glance",
|
||||
"installed": {
|
||||
"version": "0.8.0",
|
||||
"integrity": "sha512-BQbHYG4ZoNUAbiwivNPSggtCnyy9B2ziplmoCLE5ULVbz4RoHhvjso9IP54jWsWZuEqMMY0IoQISMWNLlM+THg=="
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The settings source omits an immutable version."
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "@pi-kaush/pi-welcome-screen",
|
||||
"source": "npm:@pi-kaush/pi-welcome-screen@0.1.3",
|
||||
"installed": {
|
||||
"version": "0.1.3",
|
||||
"integrity": "sha512-RMEVEigGAt9SCK1+biHZ09IGOphfCTAf419YKA9PgKb09tCEGAXSfSeThmbXm+tPaJABlNuIv9NSIR8Md4NqSw=="
|
||||
},
|
||||
"status": "locked",
|
||||
"blockers": []
|
||||
},
|
||||
{
|
||||
"name": "pi-doppelclaude",
|
||||
"source": "npm:pi-doppelclaude",
|
||||
"installed": {
|
||||
"version": "0.10.0",
|
||||
"integrity": "sha512-RJAeLVgGTDB5ERUmswv4k7efrPIx/8v58vZR4z5YsWQDZiBvPPsrkhk6rj7OzmNtOtEJCQoHZYWnYeSm/MOkjw=="
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The settings source omits an immutable version."
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "diagram-design",
|
||||
"source": "https://github.com/cathrynlavery/diagram-design",
|
||||
"installed": {
|
||||
"revision": "4faae6696c2953b59dee2b89ad89c688f80c3a67"
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The settings Git source omits an immutable revision."
|
||||
]
|
||||
}
|
||||
],
|
||||
"extensions": [
|
||||
{
|
||||
"name": "dictate",
|
||||
"source": "extensions/dictate",
|
||||
"installed": {
|
||||
"repository": "/srv/data/code/harness-tools",
|
||||
"revision": "aa50f0fd1665b0da443d002e049d7b5dcf65b3bb"
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The managed link targets a mutable repository checkout rather than an immutable installed snapshot."
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "effort-controls",
|
||||
"source": "extensions/effort-controls",
|
||||
"installed": {
|
||||
"repository": "/srv/data/code/harness-tools",
|
||||
"revision": "aa50f0fd1665b0da443d002e049d7b5dcf65b3bb"
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The managed link targets a mutable repository checkout rather than an immutable installed snapshot."
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "prompt-snippets",
|
||||
"source": "extensions/prompt-snippets",
|
||||
"installed": {
|
||||
"repository": "/srv/data/code/harness-tools",
|
||||
"revision": "aa50f0fd1665b0da443d002e049d7b5dcf65b3bb"
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The managed link targets a mutable repository checkout rather than an immutable installed snapshot."
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "pi-interactive-subagents",
|
||||
"source": "/srv/data/repo-store/pi-interactive-subagents",
|
||||
"installed": {
|
||||
"revision": "4105b03981460944657ec6ac81ff93daeb0cad6c"
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The active unmanaged link targets a mutable repository checkout and is absent from config/pi-links.json."
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "pi-todo-herdr",
|
||||
"source": "/srv/data/repo-store/pi-todo-herdr",
|
||||
"installed": {
|
||||
"revision": "fbe8baf18cf4b875754607d55a475266c994fa7b"
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The active unmanaged link targets a mutable repository checkout and is absent from config/pi-links.json."
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "lm-studio",
|
||||
"source": "$HOME/.pi/agent/extensions/lm-studio.ts",
|
||||
"installed": {
|
||||
"sha256": "474d1288cb7c528e44b14fcc498ae9f4be04fcbb248dd22d76adb13c2f8c134e"
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The active extension is an unmanaged regular file with no immutable source revision.",
|
||||
"Slice 1 must import the reviewed implementation and quarantine the unmanaged source before activation."
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "update",
|
||||
"source": "extensions/update",
|
||||
"installed": {
|
||||
"repository": "/srv/data/code/harness-tools",
|
||||
"revision": "aa50f0fd1665b0da443d002e049d7b5dcf65b3bb"
|
||||
},
|
||||
"status": "blocked",
|
||||
"blockers": [
|
||||
"The extension remains linked in the active Pi state but is intentionally absent from normal config/pi-links.json exposure."
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
Reference in New Issue
Block a user