@aliou/pi-guardrails 0.13.1 → 0.13.3

package/extensions/guardrails/commands/settings/examples.ts

@@ -198,8 +198,14 @@ export const COMMAND_EXAMPLES: Array<{
   },
   {
     label: "git push --force",
-    description: "Prompts before force-pushing Git history.",
-    pattern: { pattern: "git push --force", description: "Git force push" },
+    description:
+      "Prompts before force-pushing Git history. Uses regex so the flag is caught regardless of its position in the command (e.g. `git push origin main --force` or `-f` at the end).",
+    pattern: {
+      pattern: "git push .*(-f\\b|--force(?!-with-lease)|--force-with-lease)",
+      regex: true,
+      description:
+        "Git force push (any variant: --force, --force-with-lease, -f)",
+    },
   },
   {
     label: "npm publish",

package/extensions/guardrails/commands/settings/index.ts

@@ -441,13 +441,15 @@ export function registerGuardrailsSettings(
 
       if (scope === "global") {
         featureItems.push({
-          id: "onboarding.run",
+          id: "onboarding.completed",
           label: "Onboarding status",
-          description: "Use /guardrails:onboarding to run onboarding",
+          description:
+            "Reset to pending to re-run onboarding (takes effect after reload)",
           currentValue:
             scopedConfig.onboarding?.completed === true
               ? "completed"
               : "pending",
+          values: ["completed", "pending"],
         });
       }
 
@@ -592,5 +594,43 @@ export function registerGuardrailsSettings(
         },
       ];
     },
+
+    onSettingChange: (id, newValue, config) => {
+      const updated = structuredClone(config);
+
+      if (id.startsWith("features.")) {
+        const featureKey = id.slice("features.".length);
+        updated.features = {
+          ...updated.features,
+          [featureKey]: newValue === "enabled",
+        };
+        return updated;
+      }
+
+      if (id === "permissionGate.requireConfirmation") {
+        updated.permissionGate = {
+          ...updated.permissionGate,
+          requireConfirmation: newValue === "on",
+        };
+        return updated;
+      }
+
+      if (id === "onboarding.completed") {
+        updated.onboarding = {
+          ...updated.onboarding,
+          completed: newValue === "completed",
+          completedAt:
+            newValue === "completed"
+              ? (updated.onboarding?.completedAt ?? new Date().toISOString())
+              : undefined,
+          version:
+            newValue === "completed" ? updated.onboarding?.version : undefined,
+        };
+        return updated;
+      }
+
+      // Fall through to default string storage for enums (pathAccess.mode, etc.)
+      return null;
+    },
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aliou/pi-guardrails",
-  "version": "0.13.1",
+  "version": "0.13.3",
   "license": "MIT",
   "type": "module",
   "private": false,
@@ -56,14 +56,6 @@
     "typescript": "^5.9.3",
     "vitest": "^4.1.4"
   },
-  "peerDependenciesMeta": {
-    "@earendil-works/pi-coding-agent": {
-      "optional": true
-    },
-    "@earendil-works/pi-tui": {
-      "optional": true
-    }
-  },
   "scripts": {
     "typecheck": "tsc --noEmit",
     "gen:schema": "ts-json-schema-generator --path src/shared/config/types.ts --type GuardrailsConfig --no-type-check -o schema.json",
@@ -73,8 +65,18 @@
     "lint": "biome check",
     "format": "biome check --write",
     "check:lockfile": "pnpm install --frozen-lockfile --ignore-scripts",
+    "prepare": "[ -d .git ] && husky || true",
     "changeset": "changeset",
     "version": "changeset version",
     "release": "pnpm changeset publish"
+  },
+  "packageManager": "pnpm@10.26.1",
+  "peerDependenciesMeta": {
+    "@earendil-works/pi-coding-agent": {
+      "optional": true
+    },
+    "@earendil-works/pi-tui": {
+      "optional": true
+    }
   }
-}
+}

package/src/shared/config/loader.ts

@@ -1,13 +1,31 @@
-import { buildSchemaUrl, ConfigLoader } from "@aliou/pi-utils-settings";
+import {
+  buildSchemaUrl,
+  ConfigLoader,
+  type Scope,
+} from "@aliou/pi-utils-settings";
 import pkg from "../../../package.json" with { type: "json" };
 import { DEFAULT_CONFIG } from "./defaults";
 import { migrations } from "./migration";
 import type { GuardrailsConfig, PolicyRule, ResolvedConfig } from "./types";
 
-export const configLoader = new ConfigLoader<GuardrailsConfig, ResolvedConfig>(
-  "guardrails",
-  DEFAULT_CONFIG,
-  {
+class GuardrailsConfigLoader extends ConfigLoader<
+  GuardrailsConfig,
+  ResolvedConfig
+> {
+  override async save(scope: Scope, config: GuardrailsConfig): Promise<void> {
+    await super.save(scope, ensureConfigVersion(config));
+  }
+}
+
+function ensureConfigVersion(config: GuardrailsConfig): GuardrailsConfig {
+  if (typeof config.version === "string" && config.version.trim()) {
+    return config;
+  }
+  return { ...config, version: DEFAULT_CONFIG.version };
+}
+
+export function createGuardrailsConfigLoader(): GuardrailsConfigLoader {
+  return new GuardrailsConfigLoader("guardrails", DEFAULT_CONFIG, {
     scopes: ["global", "local", "memory"],
     migrations,
     schemaUrl: buildSchemaUrl(pkg.name, pkg.version),
@@ -60,5 +78,7 @@ export const configLoader = new ConfigLoader<GuardrailsConfig, ResolvedConfig>(
 
       return resolved;
     },
-  },
-);
+  });
+}
+
+export const configLoader = createGuardrailsConfigLoader();

package/src/shared/config/migration/008-normalize-string-booleans.ts

@@ -0,0 +1,57 @@
+import { addPendingWarning } from "../../warnings";
+import type { GuardrailsConfig } from "../types";
+import { CURRENT_VERSION } from "./version";
+
+export function shouldRun(config: GuardrailsConfig): boolean {
+  const features = config.features as Record<string, unknown> | undefined;
+  if (features) {
+    for (const value of Object.values(features)) {
+      if (value === "enabled" || value === "disabled") return true;
+    }
+  }
+
+  const requiresConfirmation = config.permissionGate
+    ?.requireConfirmation as unknown;
+  if (requiresConfirmation === "on" || requiresConfirmation === "off") {
+    return true;
+  }
+
+  return false;
+}
+
+export function run(config: GuardrailsConfig): GuardrailsConfig {
+  const migrated = structuredClone(config) as Record<string, unknown>;
+  let changed = false;
+
+  const features = migrated.features as Record<string, unknown> | undefined;
+  if (features) {
+    for (const [key, value] of Object.entries(features)) {
+      if (value === "enabled" || value === "disabled") {
+        features[key] = value === "enabled";
+        changed = true;
+      }
+    }
+  }
+
+  const permissionGate = migrated.permissionGate as
+    | Record<string, unknown>
+    | undefined;
+  if (
+    permissionGate &&
+    (permissionGate.requireConfirmation === "on" ||
+      permissionGate.requireConfirmation === "off")
+  ) {
+    permissionGate.requireConfirmation =
+      permissionGate.requireConfirmation === "on";
+    changed = true;
+  }
+
+  if (changed) {
+    migrated.version = CURRENT_VERSION;
+    addPendingWarning(
+      "[guardrails] Config migrated: boolean settings stored as strings were converted to true/false.",
+    );
+  }
+
+  return migrated as GuardrailsConfig;
+}

package/src/shared/config/migration/index.ts

@@ -7,6 +7,7 @@ import * as envFilesToPolicies from "./004-env-files-to-policies";
 import * as normalizeAllowedPaths from "./005-normalize-allowed-paths";
 import * as applyBuiltinDefaults from "./006-apply-builtin-defaults";
 import * as markOnboardingDone from "./007-mark-onboarding-done";
+import * as normalizeStringBooleans from "./008-normalize-string-booleans";
 
 export { CURRENT_VERSION } from "./version";
 
@@ -36,6 +37,11 @@ export const migrations: Migration<GuardrailsConfig>[] = [
     shouldRun: normalizeAllowedPaths.shouldRun,
     run: normalizeAllowedPaths.run,
   },
+  {
+    name: "normalize-string-booleans",
+    shouldRun: normalizeStringBooleans.shouldRun,
+    run: normalizeStringBooleans.run,
+  },
 ];
 
 export const globalConfigMigrations = [