@gotgenes/pi-permission-system 7.1.2 → 7.1.4

package/CHANGELOG.md

@@ -5,6 +5,20 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [7.1.4](https://github.com/gotgenes/pi-packages/compare/pi-permission-system-v7.1.3...pi-permission-system-v7.1.4) (2026-05-23)
+
+
+### Bug Fixes
+
+* add package.json imports field for #src/#test path aliases ([#157](https://github.com/gotgenes/pi-packages/issues/157)) ([75b4598](https://github.com/gotgenes/pi-packages/commit/75b45980810583452f7741678359c004900c8bd0))
+
+## [7.1.3](https://github.com/gotgenes/pi-packages/compare/pi-permission-system-v7.1.2...pi-permission-system-v7.1.3) (2026-05-23)
+
+
+### Documentation
+
+* **retro:** add retro notes for issue [#155](https://github.com/gotgenes/pi-packages/issues/155) ([4aa3250](https://github.com/gotgenes/pi-packages/commit/4aa3250471198013dfeb1f3d3ebe6752abfb65d5))
+
 ## [7.1.2](https://github.com/gotgenes/pi-packages/compare/pi-permission-system-v7.1.1...pi-permission-system-v7.1.2) (2026-05-23)
 
 

package/package.json

@@ -1,14 +1,18 @@
 {
   "name": "@gotgenes/pi-permission-system",
-  "version": "7.1.2",
+  "version": "7.1.4",
   "description": "Permission enforcement extension for the Pi coding agent.",
   "type": "module",
   "exports": {
     ".": "./src/service.ts"
   },
+  "imports": {
+    "#src/*": "./src/*",
+    "#test/*": "./test/*"
+  },
   "files": [
     "src",
-    "tests",
+    "test",
     "config/config.example.json",
     "schemas/permissions.schema.json",
     "README.md",

package/src/handlers/gates/bash-external-directory.ts

@@ -1,7 +1,7 @@
-import { getNonEmptyString, toRecord } from "../../common";
-import type { Rule } from "../../rule";
-import { deriveApprovalPattern } from "../../session-rules";
-import type { PermissionCheckResult } from "../../types";
+import { getNonEmptyString, toRecord } from "#src/common";
+import type { Rule } from "#src/rule";
+import { deriveApprovalPattern } from "#src/session-rules";
+import type { PermissionCheckResult } from "#src/types";
 import { extractExternalPathsFromBashCommand } from "./bash-path-extractor";
 import type { GateResult } from "./descriptor";
 import { formatBashExternalDirectoryAskPrompt } from "./external-directory-messages";

package/src/handlers/gates/bash-path-extractor.ts

@@ -4,7 +4,7 @@ import { basename } from "node:path";
 import {
   isPathOutsideWorkingDirectory,
   normalizePathForComparison,
-} from "../../path-utils";
+} from "#src/path-utils";
 
 // ── tree-sitter-bash lazy parser ───────────────────────────────────────────
 

package/src/handlers/gates/bash-path.ts

@@ -1,7 +1,7 @@
-import { getNonEmptyString, toRecord } from "../../common";
-import type { Rule } from "../../rule";
-import { deriveApprovalPattern } from "../../session-rules";
-import type { PermissionCheckResult } from "../../types";
+import { getNonEmptyString, toRecord } from "#src/common";
+import type { Rule } from "#src/rule";
+import { deriveApprovalPattern } from "#src/session-rules";
+import type { PermissionCheckResult } from "#src/types";
 import { extractTokensForPathRules } from "./bash-path-extractor";
 import type { GateResult } from "./descriptor";
 import { formatPathAskPrompt } from "./path";

package/src/handlers/gates/descriptor.ts

@@ -1,9 +1,9 @@
-import type { DenialContext } from "../../denial-messages";
-import type { PermissionPromptDecision } from "../../permission-dialog";
-import type { PermissionDecisionEvent } from "../../permission-events";
-import type { PromptPermissionDetails } from "../../permission-prompter";
-import type { Rule } from "../../rule";
-import type { PermissionCheckResult, PermissionState } from "../../types";
+import type { DenialContext } from "#src/denial-messages";
+import type { PermissionPromptDecision } from "#src/permission-dialog";
+import type { PermissionDecisionEvent } from "#src/permission-events";
+import type { PromptPermissionDetails } from "#src/permission-prompter";
+import type { Rule } from "#src/rule";
+import type { PermissionCheckResult, PermissionState } from "#src/types";
 
 // ── Descriptor types ───────────────────────────────────────────────────────
 

package/src/handlers/gates/external-directory.ts

@@ -3,8 +3,8 @@ import {
   isPathOutsideWorkingDirectory,
   isPiInfrastructureRead,
   normalizePathForComparison,
-} from "../../path-utils";
-import { deriveApprovalPattern } from "../../session-rules";
+} from "#src/path-utils";
+import { deriveApprovalPattern } from "#src/session-rules";
 import type { GateResult } from "./descriptor";
 import { formatExternalDirectoryAskPrompt } from "./external-directory-messages";
 import type { ToolCallContext } from "./types";

package/src/handlers/gates/helpers.ts

@@ -1,5 +1,5 @@
-import type { PermissionDecisionResolution } from "../../permission-events";
-import type { PermissionCheckResult } from "../../types";
+import type { PermissionDecisionResolution } from "#src/permission-events";
+import type { PermissionCheckResult } from "#src/types";
 
 /**
  * Derive the human-readable value for a decision event from a check result.

package/src/handlers/gates/path.ts

@@ -1,7 +1,7 @@
-import { getPathBearingToolPath } from "../../path-utils";
-import type { Rule } from "../../rule";
-import { deriveApprovalPattern } from "../../session-rules";
-import type { PermissionCheckResult } from "../../types";
+import { getPathBearingToolPath } from "#src/path-utils";
+import type { Rule } from "#src/rule";
+import { deriveApprovalPattern } from "#src/session-rules";
+import type { PermissionCheckResult } from "#src/types";
 import type { GateDescriptor, GateResult } from "./descriptor";
 import type { ToolCallContext } from "./types";
 

package/src/handlers/gates/runner.ts

@@ -2,10 +2,10 @@ import {
   formatDenyReason,
   formatUnavailableReason,
   formatUserDeniedReason,
-} from "../../denial-messages";
-import type { PermissionPromptDecision } from "../../permission-dialog";
-import { applyPermissionGate } from "../../permission-gate";
-import type { PermissionCheckResult } from "../../types";
+} from "#src/denial-messages";
+import type { PermissionPromptDecision } from "#src/permission-dialog";
+import { applyPermissionGate } from "#src/permission-gate";
+import type { PermissionCheckResult } from "#src/types";
 import type { GateDescriptor, GateRunnerDeps } from "./descriptor";
 import { deriveResolution } from "./helpers";
 import type { GateOutcome } from "./types";

package/src/handlers/gates/skill-read.ts

@@ -1,8 +1,8 @@
-import { toRecord } from "../../common";
-import { normalizePathForComparison } from "../../path-utils";
-import { formatSkillPathAskPrompt } from "../../permission-prompts";
-import type { SkillPromptEntry } from "../../skill-prompt-sanitizer";
-import { findSkillPathMatch } from "../../skill-prompt-sanitizer";
+import { toRecord } from "#src/common";
+import { normalizePathForComparison } from "#src/path-utils";
+import { formatSkillPathAskPrompt } from "#src/permission-prompts";
+import type { SkillPromptEntry } from "#src/skill-prompt-sanitizer";
+import { findSkillPathMatch } from "#src/skill-prompt-sanitizer";
 import type { GateDescriptor } from "./descriptor";
 import type { ToolCallContext } from "./types";
 

package/src/handlers/gates/tool.ts

@@ -1,8 +1,8 @@
-import { getPathBearingToolPath, PATH_BEARING_TOOLS } from "../../path-utils";
-import { suggestSessionPattern } from "../../pattern-suggest";
-import { formatAskPrompt } from "../../permission-prompts";
-import { getPermissionLogContext } from "../../tool-input-preview";
-import type { PermissionCheckResult } from "../../types";
+import { getPathBearingToolPath, PATH_BEARING_TOOLS } from "#src/path-utils";
+import { suggestSessionPattern } from "#src/pattern-suggest";
+import { formatAskPrompt } from "#src/permission-prompts";
+import { getPermissionLogContext } from "#src/tool-input-preview";
+import type { PermissionCheckResult } from "#src/types";
 import type { GateDescriptor } from "./descriptor";
 import { deriveDecisionValue } from "./helpers";
 import type { ToolCallContext } from "./types";

package/src/wildcard-matcher.ts

@@ -30,7 +30,7 @@ export function compileWildcardPattern<TState>(
   // space-and-arguments portion optional so that e.g. "git *" matches both
   // "git status" and bare "git". Mirrors OpenCode wildcard semantics.
   if (escaped.endsWith(" .*")) {
-    escaped = escaped.slice(0, -3) + "( .*)?";
+    escaped = `${escaped.slice(0, -3)}( .*)?`;
   }
 
   return {
@@ -48,7 +48,7 @@ export function compileWildcardPatternEntries<TState>(
   );
 }
 
-function compileWildcardPatterns<TState>(
+function _compileWildcardPatterns<TState>(
   patterns: Record<string, TState>,
 ): CompiledWildcardPattern<TState>[] {
   return compileWildcardPatternEntries(Object.entries(patterns));

package/{tests → test}/active-agent.test.ts

@@ -5,7 +5,7 @@ import {
   getActiveAgentName,
   getActiveAgentNameFromSystemPrompt,
   normalizeAgentName,
-} from "../src/active-agent";
+} from "#src/active-agent";
 
 afterEach(() => {
   vi.restoreAllMocks();

package/{tests → test}/bash-arity.test.ts

@@ -1,5 +1,5 @@
 import { describe, expect, it } from "vitest";
-import { ARITY, prefix } from "../src/bash-arity";
+import { ARITY, prefix } from "#src/bash-arity";
 
 describe("ARITY dictionary", () => {
   it("is exported as a plain object", () => {
@@ -7,7 +7,7 @@ describe("ARITY dictionary", () => {
   });
 
   it("maps 'git' to arity 2", () => {
-    expect(ARITY["git"]).toBe(2);
+    expect(ARITY.git).toBe(2);
   });
 
   it("maps 'npm run' to arity 3", () => {
@@ -15,7 +15,7 @@ describe("ARITY dictionary", () => {
   });
 
   it("maps 'npm' to arity 2 (fallback when 'npm run' does not match)", () => {
-    expect(ARITY["npm"]).toBe(2);
+    expect(ARITY.npm).toBe(2);
   });
 
   it("maps 'docker compose' to arity 3", () => {
@@ -23,7 +23,7 @@ describe("ARITY dictionary", () => {
   });
 
   it("maps 'docker' to arity 2 (fallback)", () => {
-    expect(ARITY["docker"]).toBe(2);
+    expect(ARITY.docker).toBe(2);
   });
 });
 

package/{tests → test}/bash-external-directory.test.ts

@@ -9,12 +9,12 @@ vi.mock("node:os", () => {
   };
 });
 
-import { formatDenyReason } from "../src/denial-messages";
+import { formatDenyReason } from "#src/denial-messages";
 import {
   extractExternalPathsFromBashCommand,
   extractTokensForPathRules,
-} from "../src/handlers/gates/bash-path-extractor";
-import { formatBashExternalDirectoryAskPrompt } from "../src/handlers/gates/external-directory-messages";
+} from "#src/handlers/gates/bash-path-extractor";
+import { formatBashExternalDirectoryAskPrompt } from "#src/handlers/gates/external-directory-messages";
 
 afterEach(() => {
   vi.restoreAllMocks();

package/{tests → test}/common.test.ts

@@ -6,7 +6,7 @@ import {
   isPermissionState,
   parseSimpleYamlMap,
   toRecord,
-} from "../src/common";
+} from "#src/common";
 
 afterEach(() => {
   vi.restoreAllMocks();

package/{tests → test}/config-loader.test.ts

@@ -7,7 +7,7 @@ import {
   loadAndMergeConfigs,
   loadUnifiedConfig,
   mergeUnifiedConfigs,
-} from "../src/config-loader";
+} from "#src/config-loader";
 
 describe("loadUnifiedConfig", () => {
   let tempDir: string;

package/{tests → test}/config-modal.test.ts

@@ -2,13 +2,13 @@ import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { expect, test, vi } from "vitest";
-import { registerPermissionSystemCommand } from "../src/config-modal";
+import { registerPermissionSystemCommand } from "#src/config-modal";
 import {
   DEFAULT_EXTENSION_CONFIG,
   normalizePermissionSystemConfig,
   type PermissionSystemExtensionConfig,
-} from "../src/extension-config";
-import type { Rule } from "../src/rule";
+} from "#src/extension-config";
+import type { Rule } from "#src/rule";
 
 vi.mock("@earendil-works/pi-coding-agent", () => ({
   getSettingsListTheme: () => ({}),

package/{tests → test}/config-paths.test.ts

@@ -11,7 +11,7 @@ import {
   getLegacyProjectPolicyPath,
   getProjectConfigPath,
   REVIEW_LOG_FILENAME,
-} from "../src/config-paths";
+} from "#src/config-paths";
 
 describe("config-paths", () => {
   const agentDir = "/home/user/.pi/agent";

package/{tests → test}/config-reporter.test.ts

@@ -8,10 +8,10 @@ import {
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { expect, test } from "vitest";
-import { buildResolvedConfigLogEntry } from "../src/config-reporter";
-import { createPermissionSystemLogger } from "../src/logging";
-import type { ResolvedPolicyPaths } from "../src/permission-manager";
-import { PermissionManager } from "../src/permission-manager";
+import { buildResolvedConfigLogEntry } from "#src/config-reporter";
+import { createPermissionSystemLogger } from "#src/logging";
+import type { ResolvedPolicyPaths } from "#src/permission-manager";
+import { PermissionManager } from "#src/permission-manager";
 
 test("buildResolvedConfigLogEntry includes policy paths and legacy detection flags", () => {
   const policyPaths: ResolvedPolicyPaths = {

package/{tests → test}/denial-messages.test.ts

@@ -6,8 +6,8 @@ import {
   formatDenyReason,
   formatUnavailableReason,
   formatUserDeniedReason,
-} from "../src/denial-messages";
-import type { PermissionCheckResult } from "../src/types";
+} from "#src/denial-messages";
+import type { PermissionCheckResult } from "#src/types";
 
 // ── Helpers ────────────────────────────────────────────────────────────────
 

package/{tests → test}/expand-home.test.ts

@@ -8,7 +8,7 @@ vi.mock("node:os", () => ({
   default: { homedir: mockHomedir },
 }));
 
-import { expandHomePath } from "../src/expand-home";
+import { expandHomePath } from "#src/expand-home";
 
 const FAKE_HOME = "/home/testuser";
 

package/{tests → test}/extension-config.test.ts

@@ -3,7 +3,7 @@ import { describe, expect, it } from "vitest";
 import {
   detectMisplacedPermissionKeys,
   normalizePermissionSystemConfig,
-} from "../src/extension-config";
+} from "#src/extension-config";
 
 describe("detectMisplacedPermissionKeys", () => {
   it("returns an empty array for a record with only valid extension keys", () => {

package/{tests → test}/extension-paths.test.ts

@@ -9,8 +9,8 @@ vi.mock("../src/node-modules-discovery", () => ({
   discoverGlobalNodeModulesRoot: mockDiscoverGlobalNodeModulesRoot,
 }));
 
-import { getGlobalLogsDir } from "../src/config-paths";
-import { computeExtensionPaths } from "../src/extension-paths";
+import { getGlobalLogsDir } from "#src/config-paths";
+import { computeExtensionPaths } from "#src/extension-paths";
 
 describe("computeExtensionPaths", () => {
   beforeEach(() => {

package/{tests → test}/forwarded-permissions/io.test.ts

@@ -1,12 +1,12 @@
 import { describe, expect, it, vi } from "vitest";
 
-import type { ForwardedPermissionLogger } from "../../src/forwarded-permissions/io";
+import type { ForwardedPermissionLogger } from "#src/forwarded-permissions/io";
 import {
   formatUnknownErrorMessage,
   isErrnoCode,
   logPermissionForwardingError,
   logPermissionForwardingWarning,
-} from "../../src/forwarded-permissions/io";
+} from "#src/forwarded-permissions/io";
 
 // ── helpers ────────────────────────────────────────────────────────────────
 

package/{tests → test}/forwarding-manager.test.ts

@@ -1,6 +1,6 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
-import { ForwardingManager } from "../src/forwarding-manager";
+import { ForwardingManager } from "#src/forwarding-manager";
 
 // ── Mocks ─────────────────────────────────────────────────────────────────
 

package/{tests → test}/handlers/before-agent-start.test.ts

@@ -4,10 +4,10 @@ import { describe, expect, it, vi } from "vitest";
 import {
   AgentPrepHandler,
   shouldExposeTool,
-} from "../../src/handlers/before-agent-start";
-import type { PermissionSession } from "../../src/permission-session";
-import type { ToolRegistry } from "../../src/tool-registry";
-import type { PermissionState } from "../../src/types";
+} from "#src/handlers/before-agent-start";
+import type { PermissionSession } from "#src/permission-session";
+import type { ToolRegistry } from "#src/tool-registry";
+import type { PermissionState } from "#src/types";
 
 // ── SDK stubs ──────────────────────────────────────────────────────────────
 vi.mock("@earendil-works/pi-coding-agent", async (importOriginal) => {

package/{tests → test}/handlers/external-directory-integration.test.ts

@@ -11,16 +11,16 @@
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 import { describe, expect, it, vi } from "vitest";
 
-import { EXTENSION_TAG } from "../../src/denial-messages";
-import { formatExternalDirectoryAskPrompt } from "../../src/handlers/gates/external-directory-messages";
-import { PermissionGateHandler } from "../../src/handlers/permission-gate-handler";
+import { EXTENSION_TAG } from "#src/denial-messages";
+import { formatExternalDirectoryAskPrompt } from "#src/handlers/gates/external-directory-messages";
+import { PermissionGateHandler } from "#src/handlers/permission-gate-handler";
 import {
   PERMISSIONS_DECISION_CHANNEL,
   type PermissionDecisionEvent,
-} from "../../src/permission-events";
-import type { PermissionSession } from "../../src/permission-session";
-import type { ToolRegistry } from "../../src/tool-registry";
-import type { PermissionCheckResult, PermissionState } from "../../src/types";
+} from "#src/permission-events";
+import type { PermissionSession } from "#src/permission-session";
+import type { ToolRegistry } from "#src/tool-registry";
+import type { PermissionCheckResult, PermissionState } from "#src/types";
 
 // ── SDK stubs ──────────────────────────────────────────────────────────────
 vi.mock("@earendil-works/pi-coding-agent", async (importOriginal) => {

package/{tests → test}/handlers/external-directory-session-dedup.test.ts

@@ -11,12 +11,12 @@
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 import { describe, expect, it, vi } from "vitest";
 
-import { PermissionGateHandler } from "../../src/handlers/permission-gate-handler";
-import type { PermissionSession } from "../../src/permission-session";
-import type { Rule } from "../../src/rule";
-import type { ToolRegistry } from "../../src/tool-registry";
-import type { PermissionCheckResult } from "../../src/types";
-import { wildcardMatch } from "../../src/wildcard-matcher";
+import { PermissionGateHandler } from "#src/handlers/permission-gate-handler";
+import type { PermissionSession } from "#src/permission-session";
+import type { Rule } from "#src/rule";
+import type { ToolRegistry } from "#src/tool-registry";
+import type { PermissionCheckResult } from "#src/types";
+import { wildcardMatch } from "#src/wildcard-matcher";
 
 // ── SDK stub ───────────────────────────────────────────────────────────────
 vi.mock("@earendil-works/pi-coding-agent", async (importOriginal) => {

package/{tests → test}/handlers/gates/bash-external-directory.test.ts

@@ -1,15 +1,12 @@
 import { describe, expect, it, vi } from "vitest";
-import { describeBashExternalDirectoryGate } from "../../../src/handlers/gates/bash-external-directory";
+import { describeBashExternalDirectoryGate } from "#src/handlers/gates/bash-external-directory";
 import type {
   GateBypass,
   GateDescriptor,
-} from "../../../src/handlers/gates/descriptor";
-import {
-  isGateBypass,
-  isGateDescriptor,
-} from "../../../src/handlers/gates/descriptor";
-import type { ToolCallContext } from "../../../src/handlers/gates/types";
-import type { PermissionCheckResult } from "../../../src/types";
+} from "#src/handlers/gates/descriptor";
+import { isGateBypass, isGateDescriptor } from "#src/handlers/gates/descriptor";
+import type { ToolCallContext } from "#src/handlers/gates/types";
+import type { PermissionCheckResult } from "#src/types";
 
 // ── helpers ────────────────────────────────────────────────────────────────
 

package/{tests → test}/handlers/gates/bash-path.test.ts

@@ -9,18 +9,15 @@ vi.mock("node:os", () => {
   };
 });
 
-import { describeBashPathGate } from "../../../src/handlers/gates/bash-path";
+import { describeBashPathGate } from "#src/handlers/gates/bash-path";
 import type {
   GateBypass,
   GateDescriptor,
-} from "../../../src/handlers/gates/descriptor";
-import {
-  isGateBypass,
-  isGateDescriptor,
-} from "../../../src/handlers/gates/descriptor";
-import type { ToolCallContext } from "../../../src/handlers/gates/types";
-import type { Rule } from "../../../src/rule";
-import type { PermissionCheckResult } from "../../../src/types";
+} from "#src/handlers/gates/descriptor";
+import { isGateBypass, isGateDescriptor } from "#src/handlers/gates/descriptor";
+import type { ToolCallContext } from "#src/handlers/gates/types";
+import type { Rule } from "#src/rule";
+import type { PermissionCheckResult } from "#src/types";
 
 afterEach(() => {
   vi.restoreAllMocks();

package/{tests → test}/handlers/gates/external-directory-messages.test.ts

@@ -3,7 +3,7 @@ import { describe, expect, test } from "vitest";
 import {
   formatBashExternalDirectoryAskPrompt,
   formatExternalDirectoryAskPrompt,
-} from "../../../src/handlers/gates/external-directory-messages";
+} from "#src/handlers/gates/external-directory-messages";
 
 // Denial message functions (formatExternalDirectoryDenyReason,
 // formatExternalDirectoryUserDeniedReason, formatExternalDirectoryHardStopHint,

package/{tests → test}/handlers/gates/external-directory.test.ts

@@ -3,13 +3,10 @@ import { describe, expect, it } from "vitest";
 import type {
   GateBypass,
   GateDescriptor,
-} from "../../../src/handlers/gates/descriptor";
-import {
-  isGateBypass,
-  isGateDescriptor,
-} from "../../../src/handlers/gates/descriptor";
-import { describeExternalDirectoryGate } from "../../../src/handlers/gates/external-directory";
-import type { ToolCallContext } from "../../../src/handlers/gates/types";
+} from "#src/handlers/gates/descriptor";
+import { isGateBypass, isGateDescriptor } from "#src/handlers/gates/descriptor";
+import { describeExternalDirectoryGate } from "#src/handlers/gates/external-directory";
+import type { ToolCallContext } from "#src/handlers/gates/types";
 
 // ── helpers ───────────────────────────��────────────────────────────��───────
 

package/{tests → test}/handlers/gates/helpers.test.ts

@@ -3,7 +3,7 @@ import { describe, expect, it } from "vitest";
 import {
   deriveDecisionValue,
   deriveResolution,
-} from "../../../src/handlers/gates/helpers";
+} from "#src/handlers/gates/helpers";
 
 describe("deriveDecisionValue", () => {
   it("returns command for bash", () => {

package/{tests → test}/handlers/gates/path.test.ts

@@ -1,11 +1,11 @@
 import { describe, expect, it, vi } from "vitest";
 
-import type { GateDescriptor } from "../../../src/handlers/gates/descriptor";
-import { isGateDescriptor } from "../../../src/handlers/gates/descriptor";
-import { describePathGate } from "../../../src/handlers/gates/path";
-import type { ToolCallContext } from "../../../src/handlers/gates/types";
-import type { Rule } from "../../../src/rule";
-import type { PermissionCheckResult } from "../../../src/types";
+import type { GateDescriptor } from "#src/handlers/gates/descriptor";
+import { isGateDescriptor } from "#src/handlers/gates/descriptor";
+import { describePathGate } from "#src/handlers/gates/path";
+import type { ToolCallContext } from "#src/handlers/gates/types";
+import type { Rule } from "#src/rule";
+import type { PermissionCheckResult } from "#src/types";
 
 // ── helpers ────────────────────────────────────────────────────────────────
 

package/{tests → test}/handlers/gates/runner.test.ts

@@ -1,13 +1,13 @@
 import { describe, expect, it, vi } from "vitest";
 
-import type { DenialContext } from "../../../src/denial-messages";
-import { EXTENSION_TAG } from "../../../src/denial-messages";
+import type { DenialContext } from "#src/denial-messages";
+import { EXTENSION_TAG } from "#src/denial-messages";
 import type {
   GateDescriptor,
   GateRunnerDeps,
-} from "../../../src/handlers/gates/descriptor";
-import { runGateCheck } from "../../../src/handlers/gates/runner";
-import type { PermissionCheckResult } from "../../../src/types";
+} from "#src/handlers/gates/descriptor";
+import { runGateCheck } from "#src/handlers/gates/runner";
+import type { PermissionCheckResult } from "#src/types";
 
 // ── helpers ────────────────────────────────────────────────────────────────
 

package/{tests → test}/handlers/gates/skill-read.test.ts

@@ -1,9 +1,9 @@
 import { describe, expect, it, vi } from "vitest";
 
-import type { GateDescriptor } from "../../../src/handlers/gates/descriptor";
-import { describeSkillReadGate } from "../../../src/handlers/gates/skill-read";
-import type { ToolCallContext } from "../../../src/handlers/gates/types";
-import type { SkillPromptEntry } from "../../../src/skill-prompt-sanitizer";
+import type { GateDescriptor } from "#src/handlers/gates/descriptor";
+import { describeSkillReadGate } from "#src/handlers/gates/skill-read";
+import type { ToolCallContext } from "#src/handlers/gates/types";
+import type { SkillPromptEntry } from "#src/skill-prompt-sanitizer";
 
 // ── SDK stubs ──────────────────────────────────────────────────────────────
 vi.mock("@earendil-works/pi-coding-agent", async (importOriginal) => {

package/{tests → test}/handlers/gates/tool.test.ts

@@ -1,8 +1,8 @@
 import { describe, expect, it } from "vitest";
 
-import { describeToolGate } from "../../../src/handlers/gates/tool";
-import type { ToolCallContext } from "../../../src/handlers/gates/types";
-import type { PermissionCheckResult } from "../../../src/types";
+import { describeToolGate } from "#src/handlers/gates/tool";
+import type { ToolCallContext } from "#src/handlers/gates/types";
+import type { PermissionCheckResult } from "#src/types";
 
 // ── helpers ────────────────────────────────────────────────────────────────