pi-agent-environment-policy
checks.x86_64-linux.pi-agent-environment-policy
· build #848
· raw
1 🔍 Resolving [1/1] 🔍 @mariozechner/pi-tui [7/6] 🔍 Resolving [7/6] 🔍 Resolving [7/6] 🔍 Resolving [7/7] 🔍 @mariozechner/jiti [13/12] 🔍 Resolving [13/12] 🔍 Resolving [13/12] 🔍 Resolving [13/12] 🔍 Resolving [13/12] 🔍 Resolving [13/12] 🔍 Resolving [13/12] PASS: safe command is allowed2PASS: safe curl GET is allowed3PASS: safe wget GET is allowed4PASS: safe curl HEAD is allowed5PASS: safe curl silent flag is allowed6PASS: safe curl head flag is allowed7PASS: safe curl location flag is allowed8PASS: safe curl combined long flags are allowed9PASS: safe curl negated long flag is allowed10PASS: safe curl combined silent short flags are allowed11PASS: safe curl combined head and location short flags are allowed12PASS: safe curl ordinary short flag cluster is allowed13PASS: safe wget OPTIONS is allowed14PASS: dangerous built-in sudo prompts15PASS: direct rm blocks16PASS: composed rm blocks17PASS: deferred rm blocks18PASS: git worktree creation prompts19PASS: jj workspace creation prompts20PASS: git global option before worktree prompts21PASS: wrapped Git global option before worktree prompts22PASS: composed jj global option before workspace prompts23PASS: git short paginate alias before worktree prompts24PASS: wrapped Git short no-pager alias before worktree prompts25PASS: composed jj debug flag before workspace prompts26PASS: unknown Git global cannot hide worktree creation27PASS: wrapped unknown jj global cannot hide workspace creation28PASS: composed unknown Git global cannot hide worktree creation29PASS: Git global option value is not a worktree subcommand30PASS: jj global option value followed by unresolved alias prompts31PASS: argv-injected Git worktree alias prompts32PASS: wrapped argv-injected jj workspace alias prompts33PASS: Git injected alias overriding known command prompts34PASS: jj injected alias overriding known command prompts35PASS: Git injected alias embedding worktree add prompts36PASS: wrapped Git injected alias embedding worktree add prompts37PASS: jj injected alias embedding workspace add prompts38PASS: wrapped jj injected alias embedding workspace add prompts39PASS: Git mixed-quoted embedded-add alias prompts40PASS: wrapped jj literal-string embedded-add alias prompts41PASS: unparseable invoked injected alias prompts42PASS: composed argv-injected jj TOML workspace alias prompts43PASS: persistent unknown Git alias-shaped add prompts44PASS: persistent Git alias embedding worktree add prompts without literal add45PASS: wrapped persistent unknown jj alias-shaped add prompts46PASS: persistent jj alias embedding workspace add prompts without literal add47PASS: unknown Git global cannot hide persistent alias-shaped add48PASS: known Git remote add remains allowed49PASS: ordinary Git status remains allowed50PASS: ordinary Git grep remains allowed51PASS: ordinary Git blame remains allowed52PASS: ordinary Git rev-parse remains allowed53PASS: ordinary Git ls-files remains allowed54PASS: ordinary Git archive remains allowed55PASS: ordinary Git show-ref remains allowed56PASS: Git global version information remains allowed57PASS: Git global version ignores mutation-shaped trailing argv58PASS: Git global help remains allowed59PASS: Git global help ignores worktree subcommand argv60PASS: Git global HTML path remains allowed61PASS: Git global man path remains allowed62PASS: Git global info path remains allowed63PASS: Git global exec path remains allowed64PASS: ordinary jj bookmark list remains allowed65PASS: ordinary jj log remains allowed66PASS: jj help remains allowed67PASS: jj revert remains allowed68PASS: jj bisect remains allowed69PASS: jj sign remains allowed70PASS: jj operation alias remains allowed71PASS: jj status alias remains allowed72PASS: jj long version remains allowed73PASS: jj short version remains allowed74PASS: jj long help remains allowed75PASS: jj short help remains allowed76PASS: jj subcommand help remains allowed77PASS: jj informational version short-circuits workspace add78PASS: jj informational help short-circuits workspace add79PASS: jj at-operation log remains allowed80PASS: jj at-operation workspace add still prompts81PASS: unknown jj command prompts82PASS: pi install blocks83PASS: pi remove blocks through wrapper84PASS: pi uninstall blocks85PASS: pi update blocks86PASS: pi config blocks87PASS: pi list remains allowed88PASS: curl separate request mutation prompts89PASS: curl equals request mutation prompts90PASS: curl glued request mutation prompts91PASS: curl glued data value containing XGET prompts92PASS: curl glued header value containing XGET is allowed93PASS: curl valid short option cluster request mutation prompts94PASS: curl final request option controls mutation95PASS: curl next transfer cannot hide earlier mutation96PASS: curl short next alias cannot hide earlier mutation97PASS: curl long next token consumed as header value is allowed98PASS: curl short next token consumed as header value is allowed99PASS: curl next tokens after end-of-options are positional100PASS: curl safe long multi-transfer is allowed101PASS: curl safe short multi-transfer is allowed102PASS: curl mutation after long boundary prompts103PASS: curl mutation after short boundary prompts104PASS: curl WebDAV MKCOL prompts105PASS: curl custom explicit method prompts106PASS: curl lowercase method is not read-only GET107PASS: curl long config prompts108PASS: curl glued short config prompts109PASS: curl data mutation prompts110PASS: curl no-get after get restores data mutation111PASS: curl no-get after short get restores upload mutation112PASS: curl later get restores GET semantics113PASS: curl expand-data mutation prompts114PASS: curl unclassified future long option prompts115PASS: curl unclassified future short option prompts116PASS: curl upload mutation prompts117PASS: curl read-only method cannot mask data mutation118PASS: curl read-only method cannot mask upload mutation119PASS: curl get conversion with read-only method remains allowed120PASS: wget separate method mutation prompts121PASS: wget equals method mutation prompts122PASS: wget post data mutation prompts123PASS: wget read-only method cannot mask body mutation124PASS: wget WebDAV MOVE prompts125PASS: wget custom explicit method prompts126PASS: wget lowercase method is not read-only HEAD127PASS: wget header value resembling method cannot mask post data128PASS: composed wget body value resembling safe method prompts129PASS: wget ordinary header value remains allowed130PASS: wget opaque config prompts131PASS: wrapped wget short execute prompts132PASS: wget long execute prompts133PASS: wget malformed method prompts134PASS: wget ambiguous unknown option prompts135PASS: headless HTTP prompt blocks136PASS: gate discovers the deployed rules module137PASS: throwing parser rule blocks diagnostically138PASS: project cannot replace rules139PASS: project cannot disable block rules140PASS: project cannot disable protected prompt rules141PASS: project cannot disable headless prompt rules142PASS: path outside any repository blocks as unrecoverable143PASS: git feature branch allows144PASS: git double-dot-prefixed child allows145PASS: git target outside the repository root blocks146PASS: git main notifies and allows147PASS: git master notifies and allows148PASS: indeterminate repository state allows149PASS: repository ordinary-healthy150PASS: repository ordinary-nonempty-at151PASS: repository ordinary-conflict152PASS: repository ordinary-divergent-at153PASS: repository ordinary-main-at154PASS: repository ordinary-master-at155PASS: repository diamond-healthy156PASS: repository diamond-nonempty-wip157PASS: repository diamond-resolved-nonempty-join158PASS: repository diamond-missing-wip159PASS: repository diamond-moved-wip160PASS: repository diamond-divergent-wip161PASS: repository diamond-divergent-wip-without-target162PASS: repository diamond-divergent-wip-malformed-resolution163PASS: repository diamond-nonsingle-parent-wip164PASS: repository diamond-single-parent-join165PASS: repository diamond-conflicted-join166PASS: repository diamond-conflicted-immediate-parent167PASS: repository diamond-join-parent-count-mismatch168PASS: repository diamond-malformed-join-probe169PASS: repository diamond-failing-join-probe170PASS: repository malformed-probe171PASS: repository malformed-parent-count-probe172PASS: repository failing-probe173PASS: repository ambiguous-probe174PASS: repository failing-root-probe175PASS: repository outside-jj-contradictory-stdout176PASS: repository outside-jj-wrong-status177PASS: repository outside-jj-mixed-diagnostics178PASS: repository outside-jj-hint-git-main179PASS: repository classification-whitespace-only180PASS: repository classification-padded181PASS: repository classification-extra-blank182PASS: repository root-padded183PASS: repository current-extra-blank184PASS: repository identity-padded185PASS: repository defaults-extra-blank186PASS: repository resolution-padded187PASS: repository parents-extra-blank188PASS: repository canonical-root-mismatch189PASS: repository target-jj-cwd-other-repository190PASS: repository target-git-cwd-jj-repository191PASS: repository git-protected-head192PASS: repository git-feature-head193PASS: repository git-detached-head194PASS: repository git-malformed-head195PASS: repository git-multiline-head196PASS: repository colocated-healthy197PASS: repository colocated-divergent-roots198PASS: characterized Git outside result is accepted199PASS: Git outside result with contradictory stdout is invalid200PASS: Git outside result with wrong status is invalid201PASS: Git outside result with trailing diagnostics is accepted202PASS: adapter registers only tool_call handler203PASS: adapter translates edit allow204PASS: adapter translates write allow205PASS: adapter permits a notify decision and announces it206PASS: adapter blocks a target outside any repository207PASS: adapter strips a Pi at-prefix before resolving208PASS: adapter expands a leading tilde before resolving209PASS: adapter passes unrelated tools through210PASS: adapter blocks a non-string path211PASS: adapter blocks an empty path212PASS: adapter blocks a whitespace-only path213PASS: adapter blocks a missing path key214PASS: adapter cannot read atomic hashline edit input215PASS: adapter permits core exceptions216PASS: adapter permits capability exceptions217PASS: adapter permits a missing filesystem capability218PASS: adapter permits a throwing capability factory219PASS: adapter permits a throwing notification capability220PASS: normalize keeps an ordinary relative path221PASS: normalize strips a Pi at-prefix222PASS: normalize expands a bare tilde223PASS: normalize expands a tilde path224PASS: normalize expands a tilde path behind an at-prefix225PASS: normalize converts a file URL226PASS: normalize folds unicode space variants227PASS: normalize rejects a whitespace-only path228PASS: normalize rejects a bare at-prefix229PASS: classification reports a malformed current probe230PASS: classification reports a failing current probe231PASS: classification reports an ambiguous current probe232PASS: classification reports a failing root probe233PASS: classification reports a malformed join probe234PASS: classification reports a canonical root mismatch235PASS: classification reports ambiguous Git and jj identities236PASS: classification reports a healthy diamond237PASS: classification reports an ordinary jj repository238237 pi-agent-environment policy cases passed