@manuelstolze/pi-permission-gate 0.2.0

package/README.md

@@ -0,0 +1,69 @@
+# @manuelstolze/pi-permission-gate
+
+A Pi extension that asks before it runs bash commands that match dangerous patterns. It replaces the permission gate from `pi-guardrails`.
+
+## Install
+
+```bash
+npm install @manuelstolze/pi-permission-gate
+```
+
+Add the package to your Pi extension configuration:
+
+```json
+{
+  "pi": {
+    "extensions": ["@manuelstolze/pi-permission-gate"]
+  }
+}
+```
+
+>> If you are already using a guardrails extentions, make sure you remove the previous one to avoid duplicate checks.
+
+## Behavior
+
+The extension checks commands in this order:
+
+1. Hard-coded auto-deny rules block a command without a prompt. Allow rules cannot override these checks.
+2. File and session allow rules allow a command.
+3. Dangerous patterns show a dialog with four choices: allow once, allow this session, allow forever, or deny.
+4. If the user denies a command, they can send Pi a steer instruction that says what to do instead.
+
+“Allow this session” applies only to the exact command and ends when the session ends. “Allow forever” saves an anchored regular expression for the exact command.
+
+Without a user interface, the extension blocks dangerous commands. Custom dialog support falls back to Pi's built-in selection dialog when needed.
+
+## Configuration
+
+The extension reads `~/.pi/agent/extensions/guardrails.json` at session start. It creates the directory when it saves an “allow forever” rule. Changes to the file take effect in the next session.
+
+```json
+{
+  "applyBuiltinDefaults": true,
+  "permissionGate": {
+    "patterns": [
+      { "pattern": "terraform destroy", "description": "Terraform resource deletion" },
+      { "pattern": "^kubectl\\s+delete", "regex": true, "description": "Kubernetes deletion" }
+    ],
+    "allowedPatterns": [
+      { "pattern": "^git status$", "regex": true }
+    ]
+  }
+}
+```
+
+A pattern uses substring matching by default. Set `regex` to `true` to use a JavaScript regular expression. Invalid regular expressions do not match. Built-in dangerous patterns apply unless `applyBuiltinDefaults` is `false`.
+
+If the file is missing, the extension uses default settings. If it cannot read or validate the file, it shows a warning, uses built-in dangerous patterns, and leaves the file unchanged.
+
+Auto-deny rules use literal substring matching. They do not parse shell syntax. They can miss commands with different spacing and can match text inside quoted strings. Do not treat this check as a complete shell security boundary.
+
+## Development
+
+From the repository root:
+
+```bash
+npm install
+npm run build --workspace @manuelstolze/pi-permission-gate
+npm test
+```

package/dist/config.d.ts

@@ -0,0 +1,21 @@
+export interface PatternConfig {
+    pattern: string;
+    regex?: boolean;
+    description?: string;
+}
+export interface GuardrailsConfig {
+    applyBuiltinDefaults?: boolean;
+    permissionGate?: {
+        patterns?: PatternConfig[];
+        allowedPatterns?: PatternConfig[];
+    };
+}
+export declare const BUILTIN_PATTERNS: PatternConfig[];
+export declare function getConfigPath(): string;
+export declare function readConfig(path?: string): {
+    config: GuardrailsConfig;
+    error?: Error;
+};
+export declare function writeExactAllowRule(command: string, path?: string): PatternConfig;
+export declare function testPattern(pattern: PatternConfig, command: string): boolean;
+export declare function findPattern(command: string, patterns: PatternConfig[]): PatternConfig | undefined;

package/dist/config.js

@@ -0,0 +1,106 @@
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+export const BUILTIN_PATTERNS = [
+    { pattern: "rm -rf", description: "recursive force delete" },
+    { pattern: "sudo", description: "superuser command" },
+    { pattern: "dd of=", description: "disk write operation" },
+    { pattern: "mkfs.", description: "filesystem format" },
+    { pattern: "chmod -R 777", description: "insecure recursive permissions" },
+    { pattern: "chown -R", description: "recursive ownership change" },
+    { pattern: "doas", description: "privileged command execution" },
+    { pattern: "pkexec", description: "privileged command execution" },
+    { pattern: "shred", description: "secure file overwrite" },
+    { pattern: "wipefs", description: "filesystem signature wipe" },
+    { pattern: "blkdiscard", description: "block device discard" },
+    { pattern: "fdisk", description: "disk partitioning" },
+    { pattern: "parted", description: "disk partitioning" },
+    { pattern: "docker run --privileged", description: "container with privileged mode" },
+];
+export function getConfigPath() {
+    return join(homedir(), ".pi", "agent", "extensions", "guardrails.json");
+}
+export function readConfig(path = getConfigPath()) {
+    let content;
+    try {
+        content = readFileSync(path, "utf-8");
+    }
+    catch (error) {
+        if (isNodeError(error) && error.code === "ENOENT")
+            return { config: {} };
+        return { config: {}, error: asError(error) };
+    }
+    try {
+        const parsed = JSON.parse(content);
+        if (!isGuardrailsConfig(parsed))
+            throw new Error("guardrails.json has an invalid structure");
+        return { config: parsed };
+    }
+    catch (error) {
+        return { config: {}, error: asError(error) };
+    }
+}
+export function writeExactAllowRule(command, path = getConfigPath()) {
+    const { config, error } = readConfig(path);
+    if (error)
+        throw new Error(`Cannot update invalid guardrails config: ${error.message}`);
+    const permissionGate = config.permissionGate ?? {};
+    const allowedPatterns = permissionGate.allowedPatterns ?? [];
+    const rule = { pattern: `^${escapeRegex(command)}$`, regex: true };
+    if (!allowedPatterns.some((item) => item.pattern === rule.pattern && item.regex === true)) {
+        allowedPatterns.push(rule);
+    }
+    config.permissionGate = { ...permissionGate, allowedPatterns };
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(config, null, 2)}\n`, "utf-8");
+    return rule;
+}
+export function testPattern(pattern, command) {
+    if (pattern.regex) {
+        try {
+            return new RegExp(pattern.pattern).test(command);
+        }
+        catch {
+            return false;
+        }
+    }
+    return command.includes(pattern.pattern);
+}
+export function findPattern(command, patterns) {
+    return patterns.find((pattern) => testPattern(pattern, command));
+}
+function escapeRegex(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function isGuardrailsConfig(value) {
+    if (!isRecord(value))
+        return false;
+    if (value.applyBuiltinDefaults !== undefined && typeof value.applyBuiltinDefaults !== "boolean")
+        return false;
+    if (value.permissionGate === undefined)
+        return true;
+    if (!isRecord(value.permissionGate))
+        return false;
+    return isPatternList(value.permissionGate.patterns) && isPatternList(value.permissionGate.allowedPatterns);
+}
+function isPatternList(value) {
+    if (value === undefined)
+        return true;
+    return Array.isArray(value) && value.every(isPatternConfig);
+}
+function isPatternConfig(value) {
+    return (isRecord(value) &&
+        typeof value.pattern === "string" &&
+        (value.regex === undefined || typeof value.regex === "boolean") &&
+        (value.description === undefined || typeof value.description === "string"));
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isNodeError(error) {
+    return error instanceof Error && "code" in error;
+}
+function asError(error) {
+    return error instanceof Error ? error : new Error(String(error));
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAgB1C,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;IAC5D,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACrD,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC1D,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACtD,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,gCAAgC,EAAE;IAC1E,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,4BAA4B,EAAE;IAClE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,8BAA8B,EAAE;IAChE,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,8BAA8B,EAAE;IAClE,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC1D,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;IAC/D,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC9D,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACtD,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACvD,EAAE,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,gCAAgC,EAAE;CACtF,CAAC;AAEF,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAI,GAAG,aAAa,EAAE;IAC/C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACzE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7F,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,IAAI,GAAG,aAAa,EAAE;IACzE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAExF,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;IACnD,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,IAAI,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAkB,EAAE,OAAO,EAAE,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAClF,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1F,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,cAAc,GAAG,EAAE,GAAG,cAAc,EAAE,eAAe,EAAE,CAAC;IAC/D,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAsB,EAAE,OAAe;IACjE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,QAAyB;IACpE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC9G,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;AAC7G,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;QAC/D,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC"}

package/dist/dialog.d.ts

@@ -0,0 +1,17 @@
+export type ConfirmResult = "allow-once" | "allow-session" | "allow-forever" | "deny";
+interface MinimalTheme {
+    fg(color: string, text: string): string;
+    bold(text: string): string;
+}
+export declare function createDialog(command: string, description: string): (tui: {
+    terminal: {
+        rows: number;
+        columns: number;
+    };
+    requestRender(): void;
+}, theme: MinimalTheme, _kb: unknown, done: (result: ConfirmResult) => void) => {
+    render: (width: number) => string[];
+    invalidate: () => void;
+    handleInput: (data: string) => void;
+};
+export {};

package/dist/dialog.js

@@ -0,0 +1,118 @@
+import { DynamicBorder, } from "@earendil-works/pi-coding-agent";
+import { Container, Key, Spacer, Text, matchesKey, wrapTextWithAnsi, } from "@earendil-works/pi-tui";
+const OPTIONS = [
+    { label: "Allow once", result: "allow-once" },
+    { label: "Allow this session", result: "allow-session" },
+    { label: "Allow forever", result: "allow-forever" },
+    { label: "Deny (tell pi what to do instead)", result: "deny" },
+];
+const COMMAND_VIEWPORT_LINES = 8;
+export function createDialog(command, description) {
+    return (tui, theme, _kb, done) => {
+        const container = new Container();
+        const redBorder = (text) => theme.fg("error", text);
+        const dimBorder = (text) => theme.fg("dim", text);
+        let scrollOffset = 0;
+        let selectedIndex = 0;
+        const commandTopBorder = new Text("", 0, 0);
+        const commandText = new Text("", 1, 0);
+        const commandBottomBorder = new Text("", 0, 0);
+        const optionTexts = OPTIONS.map(() => new Text("", 1, 0));
+        container.addChild(new DynamicBorder(redBorder));
+        container.addChild(new Text(theme.fg("error", theme.bold("⚠  Dangerous Command Detected")), 1, 0));
+        container.addChild(new Spacer(1));
+        container.addChild(new Text(theme.fg("warning", `This command contains: ${description}`), 1, 0));
+        container.addChild(new Spacer(1));
+        container.addChild(commandTopBorder);
+        container.addChild(commandText);
+        container.addChild(commandBottomBorder);
+        container.addChild(new Spacer(1));
+        container.addChild(new Text(theme.fg("text", "What do you want to do?"), 1, 0));
+        container.addChild(new Spacer(1));
+        for (const optionText of optionTexts)
+            container.addChild(optionText);
+        container.addChild(new Spacer(1));
+        container.addChild(new Text(theme.fg("dim", "↑/↓: navigate  enter: confirm  j/k: scroll command  esc: deny"), 1, 0));
+        container.addChild(new DynamicBorder(redBorder));
+        const getViewport = (contentWidth) => {
+            const rows = command.split("\n").flatMap((line, index) => {
+                const wrapped = wrapTextWithAnsi(theme.fg("text", line), Math.max(1, contentWidth));
+                return (wrapped.length > 0 ? wrapped : [""]).map((rendered) => ({
+                    lineNum: index + 1,
+                    rendered,
+                }));
+            });
+            const pinned = rows.filter((row) => row.lineNum === 1);
+            const scrollable = rows.filter((row) => row.lineNum !== 1);
+            const windowSize = Math.max(0, COMMAND_VIEWPORT_LINES - pinned.length);
+            return {
+                pinned,
+                scrollable,
+                windowSize,
+                maxOffset: Math.max(0, scrollable.length - windowSize),
+            };
+        };
+        return {
+            render: (width) => {
+                const contentWidth = Math.max(1, width - 4);
+                const { pinned, scrollable, windowSize, maxOffset } = getViewport(contentWidth);
+                scrollOffset = Math.max(0, Math.min(scrollOffset, maxOffset));
+                const visibleScrollable = scrollable.slice(scrollOffset, scrollOffset + windowSize);
+                const visible = [...pinned, ...visibleScrollable];
+                const linesBelow = Math.max(0, scrollable.length - (scrollOffset + visibleScrollable.length));
+                const borderLine = (label) => {
+                    const safeWidth = Math.max(1, width);
+                    const truncated = label.length > safeWidth ? label.slice(0, safeWidth) : label;
+                    return dimBorder("─".repeat(Math.max(0, safeWidth - truncated.length)) + truncated);
+                };
+                commandTopBorder.setText(borderLine(scrollOffset > 0 ? `↑ ${scrollOffset} more` : ""));
+                commandText.setText(visible.map((row) => row.rendered).join("\n"));
+                commandBottomBorder.setText(borderLine(linesBelow > 0 ? `↓ ${linesBelow} more` : ""));
+                for (const [index, optionText] of optionTexts.entries()) {
+                    const label = `${index + 1}  ${OPTIONS[index].label}`;
+                    optionText.setText(index === selectedIndex
+                        ? `${theme.fg("accent", "❯")} ${theme.fg("text", theme.bold(label))}`
+                        : theme.fg("dim", `  ${label}`));
+                }
+                return container.render(width);
+            },
+            invalidate: () => container.invalidate(),
+            handleInput: (data) => {
+                const contentWidth = Math.max(1, tui.terminal.columns - 4);
+                const { maxOffset } = getViewport(contentWidth);
+                if (matchesKey(data, Key.up)) {
+                    selectedIndex = (selectedIndex - 1 + OPTIONS.length) % OPTIONS.length;
+                    tui.requestRender();
+                }
+                else if (matchesKey(data, Key.down)) {
+                    selectedIndex = (selectedIndex + 1) % OPTIONS.length;
+                    tui.requestRender();
+                }
+                else if (data === "k") {
+                    scrollOffset = Math.max(0, scrollOffset - 1);
+                    tui.requestRender();
+                }
+                else if (data === "j") {
+                    scrollOffset = Math.min(maxOffset, scrollOffset + 1);
+                    tui.requestRender();
+                }
+                else if (matchesKey(data, Key.enter)) {
+                    done(OPTIONS[selectedIndex].result);
+                }
+                else if (data === "1") {
+                    done("allow-once");
+                }
+                else if (data === "2") {
+                    done("allow-session");
+                }
+                else if (data === "3") {
+                    done("allow-forever");
+                }
+                else if (data === "4" || matchesKey(data, Key.escape) || data === "n" || data === "N") {
+                    done("deny");
+                }
+            },
+        };
+    };
+}
+//# sourceMappingURL=dialog.js.map

package/dist/dialog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialog.js","sourceRoot":"","sources":["../src/dialog.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,GACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,SAAS,EACT,GAAG,EACH,MAAM,EACN,IAAI,EACJ,UAAU,EACV,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAIhC,MAAM,OAAO,GAAoD;IAC/D,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE;IAC7C,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,eAAe,EAAE;IACxD,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE;IACnD,EAAE,KAAK,EAAE,mCAAmC,EAAE,MAAM,EAAE,MAAM,EAAE;CAC/D,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAOjC,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,WAAmB;IAC/D,OAAO,CACL,GAA2E,EAC3E,KAAmB,EACnB,GAAY,EACZ,IAAqC,EACrC,EAAE;QACF,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,MAAM,gBAAgB,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,mBAAmB,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE1D,SAAS,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnG,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,0BAA0B,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjG,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACrC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAChC,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QACxC,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,yBAAyB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,MAAM,UAAU,IAAI,WAAW;YAAE,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACrE,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,CAChB,IAAI,IAAI,CACN,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,+DAA+D,CAAC,EAChF,CAAC,EACD,CAAC,CACF,CACF,CAAC;QACF,SAAS,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAEjD,MAAM,WAAW,GAAG,CAAC,YAAoB,EAAE,EAAE;YAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBACvD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;gBACpF,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBAC9D,OAAO,EAAE,KAAK,GAAG,CAAC;oBAClB,QAAQ;iBACT,CAAC,CAAC,CAAC;YACN,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YACvE,OAAO;gBACL,MAAM;gBACN,UAAU;gBACV,UAAU;gBACV,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC;aACvD,CAAC;QACJ,CAAC,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC5C,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;gBAChF,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC9D,MAAM,iBAAiB,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,GAAG,UAAU,CAAC,CAAC;gBACpF,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,iBAAiB,CAAC,CAAC;gBAClD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;gBAE9F,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,EAAE;oBACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;oBACrC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;oBAC/E,OAAO,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;gBACtF,CAAC,CAAC;gBAEF,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvF,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnE,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAEtF,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;oBACxD,MAAM,KAAK,GAAG,GAAG,KAAK,GAAG,CAAC,KAAK,OAAO,CAAC,KAAK,CAAE,CAAC,KAAK,EAAE,CAAC;oBACvD,UAAU,CAAC,OAAO,CAChB,KAAK,KAAK,aAAa;wBACrB,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE;wBACrE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,EAAE,CAAC,CAClC,CAAC;gBACJ,CAAC;gBAED,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE;YACxC,WAAW,EAAE,CAAC,IAAY,EAAE,EAAE;gBAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;gBAC3D,MAAM,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;gBAEhD,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC7B,aAAa,GAAG,CAAC,aAAa,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;oBACtE,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,CAAC;qBAAM,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,aAAa,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;oBACrD,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;oBAC7C,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;oBACrD,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,CAAC;qBAAM,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAE,CAAC,MAAM,CAAC,CAAC;gBACvC,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,IAAI,CAAC,YAAY,CAAC,CAAC;gBACrB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,IAAI,CAAC,eAAe,CAAC,CAAC;gBACxB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,IAAI,CAAC,eAAe,CAAC,CAAC;gBACxB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxF,IAAI,CAAC,MAAM,CAAC,CAAC;gBACf,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+import { type ExtensionFactory } from "@earendil-works/pi-coding-agent";
+declare const permissionGate: ExtensionFactory;
+export default permissionGate;

package/dist/index.js

@@ -0,0 +1,111 @@
+import { isToolCallEventType } from "@earendil-works/pi-coding-agent";
+import { createDialog } from "./dialog.js";
+import { BUILTIN_PATTERNS, findPattern, readConfig, testPattern, writeExactAllowRule, } from "./config.js";
+import { findAutoDenyMatch } from "./rules.js";
+const permissionGate = (pi) => {
+    const sessionAllowedCommands = new Set();
+    let allowedPatterns = [];
+    let dangerPatterns = [];
+    let configError;
+    function reportPermissionGate(active, label) {
+        if (process.env.HERDR_ENV !== "1")
+            return;
+        pi.events.emit("herdr:blocked", { active, label });
+    }
+    function loadConfig() {
+        sessionAllowedCommands.clear();
+        const result = readConfig();
+        configError = result.error;
+        const config = result.error ? {} : result.config;
+        const applyDefaults = config.applyBuiltinDefaults !== false;
+        const customPatterns = config.permissionGate?.patterns ?? [];
+        dangerPatterns = applyDefaults ? [...customPatterns, ...BUILTIN_PATTERNS] : customPatterns;
+        allowedPatterns = config.permissionGate?.allowedPatterns ?? [];
+    }
+    pi.on("session_start", (_event, ctx) => {
+        loadConfig();
+        if (configError) {
+            ctx.ui.notify(`Could not read guardrails.json. Using built-in dangerous-command patterns. ${configError.message}`, "warning");
+        }
+    });
+    pi.on("tool_call", async (event, ctx) => {
+        if (!isToolCallEventType("bash", event))
+            return;
+        const command = event.input.command;
+        // Auto-deny checks must run first. Config allow rules cannot override them.
+        const autoDeny = findAutoDenyMatch(command);
+        if (autoDeny) {
+            ctx.ui.notify(`Auto-blocked: ${autoDeny.pattern} — ${autoDeny.reason}`, "error");
+            return { block: true, reason: `Catastrophic command auto-blocked: ${autoDeny.reason}` };
+        }
+        if (sessionAllowedCommands.has(command))
+            return;
+        if (allowedPatterns.some((pattern) => testPattern(pattern, command)))
+            return;
+        const match = findPattern(command, dangerPatterns);
+        if (!match)
+            return;
+        const description = match.description ?? match.pattern;
+        if (!ctx.hasUI) {
+            return {
+                block: true,
+                reason: `Dangerous command blocked (no UI to confirm): ${description}`,
+            };
+        }
+        reportPermissionGate(true, `Permission gate: ${description}`);
+        try {
+            let result = await ctx.ui.custom(createDialog(command, description));
+            // RPC and headless UI contexts can return undefined for custom dialogs.
+            if (result === undefined) {
+                const selection = await ctx.ui.select(`Dangerous command: ${description}`, [
+                    "1 - Allow once",
+                    "2 - Allow this session",
+                    "3 - Allow forever",
+                    "4 - Deny (tell pi what to do instead)",
+                ]);
+                if (selection?.startsWith("1"))
+                    result = "allow-once";
+                else if (selection?.startsWith("2"))
+                    result = "allow-session";
+                else if (selection?.startsWith("3"))
+                    result = "allow-forever";
+                else
+                    result = "deny";
+            }
+            if (result === "allow-once")
+                return;
+            if (result === "allow-session") {
+                sessionAllowedCommands.add(command);
+                return;
+            }
+            if (result === "allow-forever") {
+                try {
+                    const rule = writeExactAllowRule(command);
+                    if (!allowedPatterns.some((item) => item.pattern === rule.pattern && item.regex === true)) {
+                        allowedPatterns.push(rule);
+                    }
+                    ctx.ui.notify(`Added an exact command to the global allowlist: ${command.slice(0, 60)}${command.length > 60 ? "…" : ""}`, "info");
+                    return;
+                }
+                catch (error) {
+                    const message = error instanceof Error ? error.message : String(error);
+                    ctx.ui.notify(`Could not save the allow rule. Command remains blocked. ${message}`, "error");
+                    return { block: true, reason: "Could not save the permanent allow rule" };
+                }
+            }
+            const instruction = await ctx.ui.input("Tell pi what to do instead:", "");
+            if (instruction?.trim()) {
+                pi.sendUserMessage(`The command \`${command}\` was blocked. Please do the following instead: ${instruction.trim()}`, { deliverAs: "steer" });
+            }
+            else {
+                ctx.ui.notify("Command blocked.", "error");
+            }
+            return { block: true, reason: "User denied dangerous command" };
+        }
+        finally {
+            reportPermissionGate(false);
+        }
+    });
+};
+export default permissionGate;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAyB,MAAM,iCAAiC,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,UAAU,EACV,WAAW,EACX,mBAAmB,GAEpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,cAAc,GAAqB,CAAC,EAAE,EAAE,EAAE;IAC9C,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;IACjD,IAAI,eAAe,GAAoB,EAAE,CAAC;IAC1C,IAAI,cAAc,GAAoB,EAAE,CAAC;IACzC,IAAI,WAA8B,CAAC;IAEnC,SAAS,oBAAoB,CAAC,MAAe,EAAE,KAAc;QAC3D,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,GAAG;YAAE,OAAO;QAC1C,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,SAAS,UAAU;QACjB,sBAAsB,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QACjD,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,KAAK,KAAK,CAAC;QAC5D,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,EAAE,QAAQ,IAAI,EAAE,CAAC;QAE7D,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,cAAc,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;QAC3F,eAAe,GAAG,MAAM,CAAC,cAAc,EAAE,eAAe,IAAI,EAAE,CAAC;IACjE,CAAC;IAED,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QACrC,UAAU,EAAE,CAAC;QACb,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,CAAC,EAAE,CAAC,MAAM,CACX,8EAA8E,WAAW,CAAC,OAAO,EAAE,EACnG,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO;QAEhD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QAEpC,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,QAAQ,CAAC,OAAO,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;YACjF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1F,CAAC;QAED,IAAI,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QAChD,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAAE,OAAO;QAE7E,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC;QACvD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,iDAAiD,WAAW,EAAE;aACvE,CAAC;QACJ,CAAC;QAED,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,WAAW,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,IAAI,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;YAEpF,wEAAwE;YACxE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,WAAW,EAAE,EAAE;oBACzE,gBAAgB;oBAChB,wBAAwB;oBACxB,mBAAmB;oBACnB,uCAAuC;iBACxC,CAAC,CAAC;gBACH,IAAI,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,YAAY,CAAC;qBACjD,IAAI,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,eAAe,CAAC;qBACzD,IAAI,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,eAAe,CAAC;;oBACzD,MAAM,GAAG,MAAM,CAAC;YACvB,CAAC;YAED,IAAI,MAAM,KAAK,YAAY;gBAAE,OAAO;YACpC,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC/B,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;oBAC1C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;wBAC1F,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;oBACD,GAAG,CAAC,EAAE,CAAC,MAAM,CACX,mDAAmD,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAC1G,MAAM,CACP,CAAC;oBACF,OAAO;gBACT,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACvE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,2DAA2D,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;oBAC7F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;gBAC5E,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;YAC1E,IAAI,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;gBACxB,EAAE,CAAC,eAAe,CAChB,iBAAiB,OAAO,oDAAoD,WAAW,CAAC,IAAI,EAAE,EAAE,EAChG,EAAE,SAAS,EAAE,OAAO,EAAE,CACvB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QAClE,CAAC;gBAAS,CAAC;YACT,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/dist/rules.d.ts

@@ -0,0 +1,6 @@
+export interface AutoDenyRule {
+    pattern: string;
+    reason: string;
+}
+export declare const AUTO_DENY_PATTERNS: AutoDenyRule[];
+export declare function findAutoDenyMatch(command: string): AutoDenyRule | undefined;

package/dist/rules.js

@@ -0,0 +1,16 @@
+export const AUTO_DENY_PATTERNS = [
+    { pattern: "az group delete", reason: "deletes an entire Azure resource group and all its resources" },
+    { pattern: "az subscription cancel", reason: "cancels the entire Azure subscription" },
+    { pattern: "az account management-group delete", reason: "deletes Azure management group hierarchy" },
+    { pattern: "az ad user delete", reason: "deletes an Azure AD user" },
+    { pattern: "az ad group delete", reason: "deletes an Azure AD security group" },
+    { pattern: "az lock delete", reason: "removes an Azure resource lock (enables further destruction)" },
+    { pattern: "az keyvault purge", reason: "permanently purges a Key Vault, bypassing soft-delete" },
+    { pattern: "kubectl delete namespace", reason: "deletes a Kubernetes namespace and all resources inside" },
+    { pattern: "kubectl delete --all", reason: "deletes all Kubernetes resources of a type" },
+    { pattern: "kubectl drain", reason: "evicts all pods from a Kubernetes node" },
+];
+export function findAutoDenyMatch(command) {
+    return AUTO_DENY_PATTERNS.find((rule) => command.includes(rule.pattern));
+}
+//# sourceMappingURL=rules.js.map

package/dist/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,kBAAkB,GAAmB;IAChD,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,8DAA8D,EAAE;IACtG,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,uCAAuC,EAAE;IACtF,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,0CAA0C,EAAE;IACrG,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,0BAA0B,EAAE;IACpE,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,oCAAoC,EAAE;IAC/E,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,8DAA8D,EAAE;IACrG,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,uDAAuD,EAAE;IACjG,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,yDAAyD,EAAE;IAC1G,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,4CAA4C,EAAE;IACzF,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,wCAAwC,EAAE;CAC/E,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC"}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@manuelstolze/pi-permission-gate",
+  "version": "0.2.0",
+  "description": "Pi extension that asks before running dangerous bash commands.",
+  "type": "module",
+  "license": "MIT",
+  "private": false,
+  "keywords": [
+    "pi",
+    "pi-extension",
+    "pi-package",
+    "permissions",
+    "guardrails"
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "pi": {
+    "extensions": [
+      "./dist/index.js"
+    ]
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "clean": "rm -rf dist *.tsbuildinfo"
+  },
+  "peerDependencies": {
+    "@earendil-works/pi-coding-agent": ">=0.85.1 <1",
+    "@earendil-works/pi-tui": ">=0.85.1 <1"
+  },
+  "devDependencies": {
+    "@earendil-works/pi-coding-agent": "^0.85.1",
+    "@earendil-works/pi-tui": "^0.85.1"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/manuelstolze/pi-integrations",
+    "directory": "packages/permission-gate"
+  }
+}