@aliou/pi-guardrails 0.3.0 → 0.4.1

package/config-schema.ts

@@ -9,6 +9,7 @@ export interface GuardrailsConfig {
   enabled?: boolean;
   features?: {
     preventBrew?: boolean;
+    preventPython?: boolean;
     protectEnvFiles?: boolean;
     permissionGate?: boolean;
   };
@@ -34,6 +35,7 @@ export interface ResolvedConfig {
   enabled: boolean;
   features: {
     preventBrew: boolean;
+    preventPython: boolean;
     protectEnvFiles: boolean;
     permissionGate: boolean;
   };

package/config.ts

@@ -16,6 +16,7 @@ const DEFAULT_CONFIG: ResolvedConfig = {
   enabled: true,
   features: {
     preventBrew: false,
+    preventPython: false,
     protectEnvFiles: true,
     permissionGate: true,
   },
@@ -97,20 +98,25 @@ class ConfigLoader {
     return merged;
   }
 
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  private mergeInto(target: any, source: any): void {
-    for (const key in source) {
-      if (source[key] === undefined) continue;
+  private mergeInto<TTarget extends object, TSource extends object>(
+    target: TTarget,
+    source: TSource,
+  ): void {
+    const t = target as Record<string, unknown>;
+    const s = source as Record<string, unknown>;
+
+    for (const key in s) {
+      if (s[key] === undefined) continue;
 
       if (
-        typeof source[key] === "object" &&
-        !Array.isArray(source[key]) &&
-        source[key] !== null
+        typeof s[key] === "object" &&
+        !Array.isArray(s[key]) &&
+        s[key] !== null
       ) {
-        if (!target[key]) target[key] = {};
-        this.mergeInto(target[key], source[key]);
+        if (!t[key]) t[key] = {};
+        this.mergeInto(t[key] as object, s[key] as object);
       } else {
-        target[key] = source[key];
+        t[key] = s[key];
       }
     }
   }
@@ -137,7 +143,7 @@ class ConfigLoader {
     config: GuardrailsConfig,
   ): Promise<void> {
     await mkdir(dirname(path), { recursive: true });
-    await writeFile(path, JSON.stringify(config, null, 2) + "\n", "utf-8");
+    await writeFile(path, `${JSON.stringify(config, null, 2)}\n`, "utf-8");
   }
 
   hasGlobalConfig(): boolean {

package/events.ts

@@ -4,7 +4,11 @@ export const GUARDRAILS_BLOCKED_EVENT = "guardrails:blocked";
 export const GUARDRAILS_DANGEROUS_EVENT = "guardrails:dangerous";
 
 export interface GuardrailsBlockedEvent {
-  feature: "preventBrew" | "protectEnvFiles" | "permissionGate";
+  feature:
+    | "preventBrew"
+    | "preventPython"
+    | "protectEnvFiles"
+    | "permissionGate";
   toolName: string;
   input: Record<string, unknown>;
   reason: string;

package/hooks/index.ts

@@ -2,10 +2,12 @@ import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
 import type { ResolvedConfig } from "../config-schema";
 import { setupPermissionGateHook } from "./permission-gate";
 import { setupPreventBrewHook } from "./prevent-brew";
+import { setupPreventPythonHook } from "./prevent-python";
 import { setupProtectEnvFilesHook } from "./protect-env-files";
 
 export function setupGuardrailsHooks(pi: ExtensionAPI, config: ResolvedConfig) {
   setupPreventBrewHook(pi, config);
+  setupPreventPythonHook(pi, config);
   setupProtectEnvFilesHook(pi, config);
   setupPermissionGateHook(pi, config);
 }

package/hooks/prevent-python.ts

@@ -0,0 +1,45 @@
+import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
+import type { ResolvedConfig } from "../config-schema";
+import { emitBlocked } from "../events";
+
+/**
+ * Blocks all Python-related commands including python, python3, pip, poetry, etc.
+ * Use uv for Python package management instead.
+ */
+
+const PYTHON_PATTERN =
+  /\b(python|python3|pip|pip3|poetry|pyenv|virtualenv|venv)\b/;
+
+export function setupPreventPythonHook(
+  pi: ExtensionAPI,
+  config: ResolvedConfig,
+) {
+  if (!config.features.preventPython) return;
+
+  pi.on("tool_call", async (event, ctx) => {
+    if (event.toolName !== "bash") return;
+
+    const command = String(event.input.command ?? "");
+
+    if (PYTHON_PATTERN.test(command)) {
+      ctx.ui.notify("Blocked Python command. Use uv instead.", "warning");
+
+      const reason =
+        "Python is not available globally on this machine. " +
+        "Use uv for Python package management instead. " +
+        "Run `uv init` to create a new Python project, " +
+        "or `uv run python` to run Python scripts. " +
+        "Use `uv add` to install packages (replaces pip/poetry).";
+
+      emitBlocked(pi, {
+        feature: "preventPython",
+        toolName: "bash",
+        input: event.input,
+        reason,
+      });
+
+      return { block: true, reason };
+    }
+    return;
+  });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aliou/pi-guardrails",
-  "version": "0.3.0",
+  "version": "0.4.1",
   "type": "module",
   "private": false,
   "keywords": [

package/settings-command.ts

@@ -3,12 +3,41 @@ import { getSettingsListTheme } from "@mariozechner/pi-coding-agent";
 import { Key, matchesKey } from "@mariozechner/pi-tui";
 import { ArrayEditor } from "./array-editor";
 import { configLoader } from "./config";
-import type { GuardrailsConfig } from "./config-schema";
+import type { GuardrailsConfig, ResolvedConfig } from "./config-schema";
 import { PatternEditor } from "./pattern-editor";
 import { SectionedSettings, type SettingsSection } from "./sectioned-settings";
 
 type Tab = "local" | "global";
 
+// Typed feature UI definitions. Adding a key to ResolvedConfig.features
+// without adding it here will cause a type error.
+type FeatureKey = keyof ResolvedConfig["features"];
+
+interface FeatureUiDef {
+  label: string;
+  description: string;
+}
+
+const FEATURE_UI: Record<FeatureKey, FeatureUiDef> = {
+  preventBrew: {
+    label: "Prevent Homebrew",
+    description: "Block brew commands",
+  },
+  preventPython: {
+    label: "Prevent Python",
+    description: "Block python/pip/poetry commands. Use uv instead.",
+  },
+  protectEnvFiles: {
+    label: "Protect .env files",
+    description: "Block access to .env files containing secrets",
+  },
+  permissionGate: {
+    label: "Permission gate",
+    description:
+      "Prompt for confirmation on dangerous commands (rm -rf, sudo, etc.)",
+  },
+};
+
 export function registerSettingsCommand(pi: ExtensionAPI): void {
   pi.registerCommand("guardrails:settings", {
     description: "Configure guardrails (local/global)",
@@ -168,45 +197,26 @@ export function registerSettingsCommand(pi: ExtensionAPI): void {
               : configLoader.getGlobalConfig();
           const resolved = configLoader.getConfig();
 
+          const featureItems = (Object.keys(FEATURE_UI) as FeatureKey[]).map(
+            (key) => {
+              const def = FEATURE_UI[key];
+              return {
+                id: `features.${key}`,
+                label: def.label,
+                description: def.description,
+                currentValue:
+                  (config.features?.[key] ?? resolved.features[key])
+                    ? "enabled"
+                    : "disabled",
+                values: ["enabled", "disabled"],
+              };
+            },
+          );
+
           const sections: SettingsSection[] = [
             {
               label: "Features",
-              items: [
-                {
-                  id: "features.preventBrew",
-                  label: "Prevent Homebrew",
-                  description: "Block brew commands",
-                  currentValue:
-                    (config.features?.preventBrew ??
-                    resolved.features.preventBrew)
-                      ? "enabled"
-                      : "disabled",
-                  values: ["enabled", "disabled"],
-                },
-                {
-                  id: "features.protectEnvFiles",
-                  label: "Protect .env files",
-                  description: "Block access to .env files containing secrets",
-                  currentValue:
-                    (config.features?.protectEnvFiles ??
-                    resolved.features.protectEnvFiles)
-                      ? "enabled"
-                      : "disabled",
-                  values: ["enabled", "disabled"],
-                },
-                {
-                  id: "features.permissionGate",
-                  label: "Permission gate",
-                  description:
-                    "Prompt for confirmation on dangerous commands (rm -rf, sudo, etc.)",
-                  currentValue:
-                    (config.features?.permissionGate ??
-                    resolved.features.permissionGate)
-                      ? "enabled"
-                      : "disabled",
-                  values: ["enabled", "disabled"],
-                },
-              ],
+              items: featureItems,
             },
             {
               label: "Env Files",