@aliou/pi-guardrails 0.14.0 → 0.15.0

package/README.md

@@ -64,7 +64,7 @@ Granted paths are stored in `pathAccess.allowedPaths` as explicit `{ kind, path
 
 The `permission-gate` extension detects dangerous bash commands before they run.
 
-It catches built-in risky patterns like recursive deletes, privileged commands, disk formatting, broad permission changes, and configured custom patterns. You can allow once, allow for the session, deny, or configure auto-deny rules.
+It catches built-in risky patterns like recursive deletes, privileged commands, disk formatting, broad permission changes, and configured custom patterns. You can allow once, allow for the session, deny, decline and stop (which also aborts the current turn), or configure auto-deny rules.
 
 [![Guardrails permission gate walkthrough](https://assets.aliou.me/github/aliou/pi-guardrails/v0.12.0/permission-gate.gif)](https://assets.aliou.me/github/aliou/pi-guardrails/v0.12.0/permission-gate.mp4)
 

package/extensions/permission-gate/index.ts

@@ -89,7 +89,7 @@ export default async function permissionGate(pi: ExtensionAPI) {
       return { block: true, reason };
     }
 
-    type ConfirmResult = "allow" | "allow-session" | "deny";
+    type ConfirmResult = "allow" | "allow-session" | "deny" | "stop";
     emitActionPrompted(pi, {
       feature: "permissionGate",
       action: safety.action,
@@ -108,10 +108,11 @@ export default async function permissionGate(pi: ExtensionAPI) {
     if (result === undefined) {
       const selection = await ctx.ui.select(
         `Dangerous command: ${safety.reason}`,
-        ["Allow once", "Allow for session", "Deny"],
+        ["Allow once", "Allow for session", "Deny", "Decline and stop"],
       );
       if (selection === "Allow once") result = "allow";
       else if (selection === "Allow for session") result = "allow-session";
+      else if (selection === "Decline and stop") result = "stop";
       else result = "deny";
     }
 
@@ -121,6 +122,19 @@ export default async function permissionGate(pi: ExtensionAPI) {
       return;
     }
 
+    if (result === "stop") {
+      const reason = "User declined and stopped dangerous command";
+      emitActionBlocked(pi, {
+        feature: "permissionGate",
+        action: safety.action,
+        reason,
+        block: { source: "user-stop", metadata: safety.metadata },
+        context: { toolName: "bash", input: event.input },
+      });
+      ctx.abort();
+      return { block: true, reason };
+    }
+
     const reason = "User denied dangerous command";
     emitActionBlocked(pi, {
       feature: "permissionGate",

package/extensions/permission-gate/prompt.ts

@@ -103,7 +103,7 @@ export function createPermissionGateConfirmComponent(
     tui: { terminal: { rows: number; columns: number }; requestRender(): void },
     theme: MinimalTheme,
     _kb: unknown,
-    done: (result: "allow" | "allow-session" | "deny") => void,
+    done: (result: "allow" | "allow-session" | "deny" | "stop") => void,
   ) => {
     const container = new Container();
     const redBorder = (s: string) => theme.fg("error", s);
@@ -140,7 +140,7 @@ export function createPermissionGateConfirmComponent(
       new Text(
         theme.fg(
           "dim",
-          "↑/↓ or j/k: scroll • y/enter: allow • a: session • n/esc: deny",
+          "↑/↓ or j/k: scroll • y/enter: allow • a: session • n/esc: deny • s: decline & stop",
         ),
         1,
         0,
@@ -215,6 +215,8 @@ export function createPermissionGateConfirmComponent(
           data === "N"
         ) {
           done("deny");
+        } else if (data === "s" || data === "S") {
+          done("stop");
         }
       },
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aliou/pi-guardrails",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "license": "MIT",
   "type": "module",
   "private": false,

package/src/shared/config/migration/005-normalize-allowed-paths.ts

@@ -5,7 +5,12 @@ export function shouldRun(config: GuardrailsConfig): boolean {
   const raw = config as Record<string, unknown>;
   const pathAccess = raw.pathAccess as Record<string, unknown> | undefined;
   if (!Array.isArray(pathAccess?.allowedPaths)) return false;
-  return pathAccess.allowedPaths.some((item) => typeof item !== "string");
+  return pathAccess.allowedPaths.some(
+    (item) =>
+      typeof item === "object" &&
+      item !== null &&
+      typeof (item as Record<string, unknown>).pattern === "string",
+  );
 }
 
 export function run(config: GuardrailsConfig): GuardrailsConfig {
@@ -27,8 +32,11 @@ function normalizeAllowedPaths(items: unknown): string[] {
     if (typeof item === "string") {
       path = item;
     } else if (typeof item === "object" && item !== null) {
-      const pattern = (item as Record<string, unknown>).pattern;
+      const obj = item as Record<string, unknown>;
+      const pattern = obj.pattern;
+      const objectPath = obj.path;
       if (typeof pattern === "string") path = pattern;
+      else if (typeof objectPath === "string") path = objectPath;
     }
 
     const normalized = path?.trim();

package/src/shared/events.ts

@@ -32,6 +32,7 @@ export type GuardrailsBlockSource =
   | "policy"
   | "permission"
   | "user"
+  | "user-stop"
   | "nonInteractive";
 
 export type GuardrailsActionBlockedPayload<TMeta = unknown> =