@grwnd/pi-governance 1.8.0 → 1.9.1

package/dist/extensions/index.js

@@ -1533,15 +1533,15 @@ function sendJson(res, status, data) {
   res.end(JSON.stringify(data));
 }
 function readBody(req) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const chunks = [];
     req.on("data", (chunk) => chunks.push(chunk));
-    req.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
+    req.on("end", () => resolve2(Buffer.concat(chunks).toString("utf-8")));
     req.on("error", reject);
   });
 }
 function startWizardServer(options) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     let shutdownTimer;
     const server = createServer((req, res) => {
       setCorsHeaders(res);
@@ -1631,7 +1631,7 @@ function startWizardServer(options) {
       shutdownTimer = setTimeout(() => {
         closeServer();
       }, AUTO_SHUTDOWN_MS);
-      resolve({ port: addr.port, close: closeServer });
+      resolve2({ port: addr.port, close: closeServer });
     });
   });
 }
@@ -1681,6 +1681,7 @@ var init_wizard = __esm({
 
 // src/extensions/index.ts
 import { existsSync as existsSync2 } from "fs";
+import { resolve } from "path";
 
 // src/lib/config/loader.ts
 import { existsSync, readFileSync } from "fs";
@@ -2154,7 +2155,16 @@ var DANGEROUS_PATTERNS = [
   // Compiler/build (can execute arbitrary code)
   /\bmake\s/,
   /\bgcc\b/,
-  /\bg\+\+/
+  /\bg\+\+/,
+  // Governance config tampering — shell-based writes to governance files
+  /(cat|echo|printf)\s.*>\s*.*governance(-rules)?\.yaml/,
+  /\btee\s+.*governance(-rules)?\.yaml/,
+  /sed\s+-i.*governance(-rules)?\.yaml/,
+  /(cp|mv|rm)\s.*governance(-rules)?\.yaml/,
+  /(cat|echo|printf)\s.*>\s*.*\.pi\/governance/,
+  /\btee\s+.*\.pi\/governance/,
+  /sed\s+-i.*\.pi\/governance/,
+  /(cp|mv|rm)\s.*\.pi\/governance/
 ];
 
 // src/lib/bash/classifier.ts
@@ -2949,7 +2959,9 @@ var piGovernance = (pi) => {
   let configWatcher;
   let dlpScanner;
   let dlpMasker;
+  let protectedPaths = /* @__PURE__ */ new Set();
   const stats = {
+    configTampered: 0,
     allowed: 0,
     denied: 0,
     approvals: 0,
@@ -2963,6 +2975,15 @@ var piGovernance = (pi) => {
     sessionId = ctx.sessionId;
     const loaded = loadConfig();
     config = loaded.config;
+    const paths = /* @__PURE__ */ new Set();
+    if (loaded.source !== "built-in") {
+      paths.add(resolve(loaded.source));
+    }
+    const rulesFileCfg = config.policy?.yaml?.rules_file ?? "./governance-rules.yaml";
+    paths.add(resolve(rulesFileCfg));
+    paths.add(resolve(ctx.workingDirectory, ".pi/governance.yaml"));
+    paths.add(resolve(ctx.workingDirectory, "governance-rules.yaml"));
+    protectedPaths = paths;
     const chain = createIdentityChain(config.auth);
     identity = await chain.resolve();
     const rulesFile = config.policy?.yaml?.rules_file ?? "./governance-rules.yaml";
@@ -3092,6 +3113,22 @@ var piGovernance = (pi) => {
       tool: toolName,
       input: params
     };
+    if (WRITE_TOOLS.has(toolName)) {
+      const filePath = extractPath(toolName, input);
+      if (filePath && protectedPaths.has(resolve(filePath))) {
+        stats.configTampered++;
+        await audit.log({
+          ...baseRecord,
+          event: "config_tampered",
+          decision: "denied",
+          reason: `Config self-protection: write to governance file blocked (${filePath})`
+        });
+        return {
+          block: true,
+          reason: `Governance config files are protected and cannot be modified by agents`
+        };
+      }
+    }
     if (executionMode === "dry_run") {
       stats.dryRun++;
       await audit.log({
@@ -3367,6 +3404,7 @@ var piGovernance = (pi) => {
           `  Approvals: ${stats.approvals}`,
           `  Dry-run blocks: ${stats.dryRun}`,
           `  Budget exceeded: ${stats.budgetExceeded}`,
+          `  Config tampered: ${stats.configTampered}`,
           `  DLP blocked: ${stats.dlpBlocked}`,
           `  DLP detected: ${stats.dlpDetected}`,
           `  DLP masked: ${stats.dlpMasked}`,